<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.05673,2.1022,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.135.148.121" dst_port="34098" proto="tcp" src_ip="53.208.55.38" src_port="33581"/>
      <from sec="1078290408" usec="0"/>
      <to sec="1078290622" usec="0"/>
    </slice>
    <from sec="1078290408" usec="0"/>
    <to sec="1078290622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.6.177.124" dst_port="135" proto="tcp" src_ip="90.156.55.31" src_port="80"/>
      <from sec="1078290424" usec="0"/>
      <to sec="1078290470" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="131.6.177.124" dst_port="135" proto="tcp" src_ip="195.133.243.31" src_port="80"/>
      <from sec="1078290467" usec="0"/>
      <to sec="1078290470" usec="0"/>
    </slice>
    <from sec="1078290424" usec="0"/>
    <to sec="1078290470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.135.138.169" dst_port="1599" proto="tcp" src_ip="209.64.177.115" src_port="80"/>
      <filter dst_ip="144.135.138.170" dst_port="1599" proto="tcp" src_ip="209.64.177.115" src_port="80"/>
      <filter dst_ip="131.6.177.12" dst_port="1599" proto="tcp" src_ip="209.64.177.115" src_port="80"/>
      <from sec="1078290365" usec="0"/>
      <to sec="1078290369" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.135.138.169" dst_port="1599" proto="tcp" src_ip="90.96.65.101" src_port="80"/>
      <filter dst_ip="144.135.138.170" dst_port="1599" proto="tcp" src_ip="90.96.65.101" src_port="80"/>
      <filter dst_ip="131.6.177.12" dst_port="1599" proto="tcp" src_ip="90.96.65.101" src_port="80"/>
      <from sec="1078290365" usec="0"/>
      <to sec="1078290368" usec="0"/>
    </slice>
    <from sec="1078290365" usec="0"/>
    <to sec="1078290369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.60.91.203" dst_port="80" proto="tcp" src_ip="144.135.148.91" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="80" proto="udp" src_ip="144.135.148.91" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="25" proto="tcp" src_ip="144.135.148.91" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="25" proto="udp" src_ip="144.135.148.91" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="135" proto="tcp" src_ip="144.135.148.91" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="135" proto="udp" src_ip="144.135.148.91" src_port="1206"/>
      <from sec="1078290193" usec="0"/>
      <to sec="1078290198" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="130.60.91.203" dst_port="80" proto="tcp" src_ip="144.135.138.225" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="80" proto="udp" src_ip="144.135.138.225" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="25" proto="tcp" src_ip="144.135.138.225" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="25" proto="udp" src_ip="144.135.138.225" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="135" proto="tcp" src_ip="144.135.138.225" src_port="1206"/>
      <filter dst_ip="130.60.91.203" dst_port="135" proto="udp" src_ip="144.135.138.225" src_port="1206"/>
      <from sec="1078290193" usec="0"/>
      <to sec="1078290197" usec="0"/>
    </slice>
    <from sec="1078290193" usec="0"/>
    <to sec="1078290198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="89.6.218.2" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="89.6.218.2" src_port="1028"/>
      <from sec="1078290566" usec="0"/>
      <to sec="1078290578" usec="0"/>
    </slice>
    <from sec="1078290566" usec="0"/>
    <to sec="1078290578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="90.152.29.19" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="90.152.29.19" src_port="1025"/>
      <from sec="1078290197" usec="0"/>
      <to sec="1078290211" usec="0"/>
    </slice>
    <from sec="1078290197" usec="0"/>
    <to sec="1078290211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="37.69.113.24" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="37.69.113.24" src_port="1026"/>
      <from sec="1078290218" usec="0"/>
      <to sec="1078290233" usec="0"/>
    </slice>
    <from sec="1078290218" usec="0"/>
    <to sec="1078290233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="197.224.89.48" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="197.224.89.48" src_port="1028"/>
      <from sec="1078290619" usec="0"/>
      <to sec="1078290633" usec="0"/>
    </slice>
    <from sec="1078290619" usec="0"/>
    <to sec="1078290633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="38.227.205.49" src_port="1028"/>
      <from sec="1078290716" usec="0"/>
      <to sec="1078290727" usec="0"/>
    </slice>
    <from sec="1078290716" usec="0"/>
    <to sec="1078290727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="tcp" src_ip="193.196.56.61" src_port="1028"/>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="udp" src_ip="193.196.56.61" src_port="1028"/>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="tcp" src_ip="193.196.56.61" src_port="80"/>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="udp" src_ip="193.196.56.61" src_port="80"/>
      <from sec="1078290441" usec="0"/>
      <to sec="1078290451" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="tcp" src_ip="36.58.80.61" src_port="1028"/>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="udp" src_ip="36.58.80.61" src_port="1028"/>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="tcp" src_ip="36.58.80.61" src_port="80"/>
      <filter dst_ip="144.134.56.225" dst_port="137" proto="udp" src_ip="36.58.80.61" src_port="80"/>
      <from sec="1078290448" usec="0"/>
      <to sec="1078290450" usec="0"/>
    </slice>
    <from sec="1078290441" usec="0"/>
    <to sec="1078290451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="54.244.170.65" src_port="23666"/>
      <filter dst_port="137" proto="udp" src_ip="54.244.170.65" src_port="1028"/>
      <from sec="1078290316" usec="0"/>
      <to sec="1078290321" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.42.10.65" src_port="23666"/>
      <filter dst_port="137" proto="udp" src_ip="202.42.10.65" src_port="1028"/>
      <from sec="1078290317" usec="0"/>
      <to sec="1078290320" usec="0"/>
    </slice>
    <from sec="1078290316" usec="0"/>
    <to sec="1078290321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="195.133.249.67" src_port="1066"/>
      <filter dst_port="137" proto="udp" src_ip="195.133.249.67" src_port="1066"/>
      <from sec="1078290853" usec="0"/>
      <to sec="1078290857" usec="0"/>
    </slice>
    <from sec="1078290853" usec="0"/>
    <to sec="1078290857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="37.94.53.103" src_port="62223"/>
      <from sec="1078290638" usec="0"/>
      <to sec="1078290641" usec="0"/>
    </slice>
    <from sec="1078290638" usec="0"/>
    <to sec="1078290641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="36.163.232.139" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="36.163.232.139" src_port="1026"/>
      <from sec="1078290588" usec="0"/>
      <to sec="1078290599" usec="0"/>
    </slice>
    <from sec="1078290588" usec="0"/>
    <to sec="1078290600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="32.21.24.161" src_port="1452"/>
      <from sec="1078290052" usec="0"/>
      <to sec="1078290056" usec="0"/>
    </slice>
    <from sec="1078290052" usec="0"/>
    <to sec="1078290056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="tcp" src_ip="195.133.231.168" src_port="1044"/>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="udp" src_ip="195.133.231.168" src_port="1044"/>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="tcp" src_ip="195.133.231.168" src_port="80"/>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="udp" src_ip="195.133.231.168" src_port="80"/>
      <from sec="1078290655" usec="0"/>
      <to sec="1078290668" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="tcp" src_ip="194.67.67.168" src_port="1044"/>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="udp" src_ip="194.67.67.168" src_port="1044"/>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="tcp" src_ip="194.67.67.168" src_port="80"/>
      <filter dst_ip="131.6.195.99" dst_port="137" proto="udp" src_ip="194.67.67.168" src_port="80"/>
      <from sec="1078290656" usec="0"/>
      <to sec="1078290668" usec="0"/>
    </slice>
    <from sec="1078290655" usec="0"/>
    <to sec="1078290668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="119.40.44.174" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="119.40.44.174" src_port="1030"/>
      <filter dst_port="53" proto="tcp" src_ip="119.40.44.174" src_port="1030"/>
      <filter dst_port="53" proto="udp" src_ip="119.40.44.174" src_port="1030"/>
      <filter dst_port="80" proto="tcp" src_ip="119.40.44.174" src_port="1030"/>
      <filter dst_port="80" proto="udp" src_ip="119.40.44.174" src_port="1030"/>
      <from sec="1078290190" usec="0"/>
      <to sec="1078290206" usec="0"/>
    </slice>
    <from sec="1078290190" usec="0"/>
    <to sec="1078290206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="88.64.193.131" src_port="25"/>
      <from sec="1078290842" usec="0"/>
      <to sec="1078290888" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="37.26.161.131" src_port="25"/>
      <from sec="1078290860" usec="0"/>
      <to sec="1078290886" usec="0"/>
    </slice>
    <from sec="1078290842" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="38.182.109.231"/>
      <from sec="1078290476" usec="0"/>
      <to sec="1078290479" usec="0"/>
    </slice>
    <from sec="1078290476" usec="0"/>
    <to sec="1078290479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05673,2.1022,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.158.49.134" dst_port="135" proto="tcp" src_ip="213.128.206.233" src_port="80"/>
      <from sec="1078290000" usec="0"/>
      <to sec="1078290004" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="208.158.49.134" dst_port="135" proto="tcp" src_ip="192.62.130.218" src_port="80"/>
      <from sec="1078290000" usec="0"/>
      <to sec="1078290004" usec="0"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44657,2.1709,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="tcp" src_ip="205.142.134.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="udp" src_ip="205.142.134.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="tcp" src_ip="205.142.134.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="udp" src_ip="205.142.134.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="tcp" src_ip="205.142.134.8" src_port="80"/>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="udp" src_ip="205.142.134.8" src_port="80"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="tcp" src_ip="205.142.134.8" src_port="80"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="udp" src_ip="205.142.134.8" src_port="80"/>
      <from sec="1078290405" usec="0"/>
      <to sec="1078290418" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="tcp" src_ip="208.44.110.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="udp" src_ip="208.44.110.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="tcp" src_ip="208.44.110.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="udp" src_ip="208.44.110.8" src_port="1025"/>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="tcp" src_ip="208.44.110.8" src_port="80"/>
      <filter dst_ip="148.33.102.37" dst_port="137" proto="udp" src_ip="208.44.110.8" src_port="80"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="tcp" src_ip="208.44.110.8" src_port="80"/>
      <filter dst_ip="148.33.102.37" dst_port="80" proto="udp" src_ip="208.44.110.8" src_port="80"/>
      <from sec="1078290405" usec="0"/>
      <to sec="1078290418" usec="0"/>
    </slice>
    <from sec="1078290405" usec="0"/>
    <to sec="1078290418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
367[label="208.145.201.195;d;11pkt 11fpkt", shape=diamond, color=yellow];
368[label="39.83.45.83;s;7pkt 7fpkt", shape=diamond, color=yellow];
1464[label="208.145.201.195;d;11pkt 11fpkt", shape=hexagon, color=black];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.83.45.83:80, 208.145.201.195:*}[63.6364%]&lt;BR/&gt;{39.83.200.112:80, 208.145.201.195:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4277: (5.17241%)&lt;BR/&gt; 4275: (5.17241%)&lt;BR/&gt; 4274: (5.17241%)&lt;BR/&gt; 4273: (5.17241%)&gt;];
}
367--368[label="1;7pkt 7fpkt"];
367--1464[label="1;11pkt 11fpkt"];
368--1464[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.201.195" src_ip="39.83.45.83" src_port="80"/>
      <filter dst_ip="208.145.201.195" src_ip="39.83.200.112" src_port="80"/>
    </slice>
    <from sec="1078290534" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
472[label="33.196.27.124;s;972pkt 972fpkt", shape=diamond, color=yellow];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.196.27.124:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
472--477[label="0.00925926;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="33.196.27.124"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="39.83.55.2"/>
      <from sec="1078290121" usec="0"/>
      <to sec="1078290193" usec="0"/>
    </slice>
    <from sec="1078290121" usec="0"/>
    <to sec="1078290193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
593[label="194.201.15.161;s;819pkt 819fpkt", shape=diamond, color=yellow];
594[label="144.135.76.240;d;821pkt 821fpkt", shape=diamond, color=yellow];
3060[label="194.201.15.161;922pkt 922fpkt", shape=pentagon, color=darkviolet];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.201.15.161:81, 144.135.76.240:*}[99.3506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 81: (49.7658%)&lt;BR/&gt; 2426: (0.117096%)&lt;BR/&gt; 2285: (0.078064%)&lt;BR/&gt; 1863: (0.078064%)&lt;BR/&gt; 60834: (0.058548%)&gt;];
}
593--594[label="1;819pkt 819fpkt"];
593--3060[label="1;819pkt 819fpkt"];
594--3060[label="0.997564;819pkt 819fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.76.240" src_ip="194.201.15.161" src_port="81"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
462[label="194.201.15.161;d;824pkt 824fpkt", shape=diamond, color=yellow];
595[label="144.135.76.240;s;831pkt 831fpkt", shape=diamond, color=yellow];
3499[label="144.135.76.240;935pkt 935fpkt", shape=pentagon, color=darkviolet];
4249[label="144.135.76.240;934pkt 934fpkt", shape=invtriangle, color=brown];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.76.240:*, 194.201.15.161:81}[98.6096%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 81: (49.4608%)&lt;BR/&gt; 80: (0.255392%)&lt;BR/&gt; 2426: (0.113507%)&lt;BR/&gt; 2398: (0.099319%)&lt;BR/&gt; 2391: (0.099319%)&gt;];
}
462--595[label="1;824pkt 824fpkt"];
462--3499[label="1;824pkt 824fpkt"];
462--4249[label="1;824pkt 824fpkt"];
595--3499[label="1;831pkt 831fpkt"];
595--4249[label="0.998797;830pkt 830fpkt"];
3499--4249[label="1;934pkt 934fpkt"];
</description>
    <slice>
      <filter dst_ip="194.201.15.161" dst_port="81" src_ip="144.135.76.240"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
613[label="168.168.53.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
614[label="192.184.198.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.184.198.64:22, 168.168.53.176:1161}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1161: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
613--614[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.53.176" dst_port="1161" src_ip="192.184.198.64" src_port="22"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
529[label="174.41.232.212;s;5pkt 5fpkt", shape=diamond, color=yellow];
669[label="214.108.36.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
1530[label="174.41.232.212;s;5pkt 5fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.41.232.212:1182, 214.108.36.6:25}[20%]&lt;BR/&gt;{174.41.232.212:53, 192.170.174.94:53}[20%]&lt;BR/&gt;{174.41.232.212:53, 88.29.33.154:53}[20%]&lt;BR/&gt;{174.41.232.212:53, 88.33.113.215:53}[20%]&lt;BR/&gt;{174.41.232.212:53, 192.50.63.216:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (72.7273%)&lt;BR/&gt; 1182: (13.6364%)&lt;BR/&gt; 25: (13.6364%)&gt;];
}
529--669[label="1;1pkt 1fpkt"];
529--1530[label="1;5pkt 5fpkt"];
669--1530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.50.63.216" dst_port="53" src_ip="174.41.232.212" src_port="53"/>
      <filter dst_ip="88.33.113.215" dst_port="53" src_ip="174.41.232.212" src_port="53"/>
      <filter dst_ip="88.29.33.154" dst_port="53" src_ip="174.41.232.212" src_port="53"/>
      <filter dst_ip="192.170.174.94" dst_port="53" src_ip="174.41.232.212" src_port="53"/>
      <filter dst_ip="214.108.36.6" dst_port="25" src_ip="174.41.232.212" src_port="1182"/>
    </slice>
    <from sec="1078290067" usec="0"/>
    <to sec="1078290172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
599[label="144.135.173.5;s;22pkt 22fpkt", shape=diamond, color=yellow];
722[label="220.172.84.238;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.173.5:*, *:80}[45.4545%]&lt;BR/&gt;{144.135.173.5:*, *:7070}[36.3636%]&lt;BR/&gt;{144.135.173.5:*, 220.172.84.232:*}[36.3636%]&lt;BR/&gt;{144.135.173.5:*, 220.172.84.238:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (22.2222%)&lt;BR/&gt; 80: (20.3704%)&lt;BR/&gt; 8080: (3.7037%)&lt;BR/&gt; 1863: (3.7037%)&lt;BR/&gt; 1680: (3.7037%)&gt;];
}
599--722[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="220.172.84.232" src_ip="144.135.173.5"/>
      <filter dst_ip="220.172.84.238" src_ip="144.135.173.5"/>
      <filter dst_port="80" src_ip="144.135.173.5"/>
      <filter dst_port="7070" src_ip="144.135.173.5"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
470[label="168.168.45.5;d;5pkt 5fpkt", shape=diamond, color=yellow];
723[label="210.215.103.158;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.128.195:5050, 168.168.45.5:1095}[20%]&lt;BR/&gt;{192.62.128.217:5050, 168.168.45.5:1508}[20%]&lt;BR/&gt;{210.215.103.158:20, 168.168.45.5:1062}[20%]&lt;BR/&gt;{210.215.103.158:20, 168.168.45.5:1063}[20%]&lt;BR/&gt;{210.215.103.158:20, 168.168.45.5:1064}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 1064: (12.5%)&lt;BR/&gt; 1063: (12.5%)&lt;BR/&gt; 1062: (12.5%)&gt;];
}
470--723[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.45.5" dst_port="1064" src_ip="210.215.103.158" src_port="20"/>
      <filter dst_ip="168.168.45.5" dst_port="1063" src_ip="210.215.103.158" src_port="20"/>
      <filter dst_ip="168.168.45.5" dst_port="1062" src_ip="210.215.103.158" src_port="20"/>
      <filter dst_ip="168.168.45.5" dst_port="1508" src_ip="192.62.128.217" src_port="5050"/>
      <filter dst_ip="168.168.45.5" dst_port="1095" src_ip="192.62.128.195" src_port="5050"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
684[label="203.182.98.36;s;230pkt 230fpkt", shape=diamond, color=yellow];
788[label="144.134.1.208;d;231pkt 231fpkt", shape=diamond, color=yellow];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.182.98.36:80, 144.134.1.208:*}[99.5671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1756: (0.21692%)&lt;BR/&gt; 1755: (0.21692%)&lt;BR/&gt; 1754: (0.21692%)&lt;BR/&gt; 1753: (0.21692%)&gt;];
}
684--788[label="1;230pkt 230fpkt"];
788--1553[label="0.004329;1pkt 1fpkt"];
788--2351[label="0.004329;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.1.208" src_ip="203.182.98.36" src_port="80"/>
    </slice>
    <from sec="1078290082" usec="0"/>
    <to sec="1078290324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
811[label="144.135.226.244;s;2pkt 2fpkt", shape=diamond, color=yellow];
814[label="90.32.209.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.226.244:80, 90.32.209.198:1254}[50%]&lt;BR/&gt;{144.135.226.244:80, 90.32.209.198:1255}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1255: (25%)&lt;BR/&gt; 1254: (25%)&gt;];
}
811--814[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="90.32.209.198" dst_port="1255" src_ip="144.135.226.244" src_port="80"/>
      <filter dst_ip="90.32.209.198" dst_port="1254" src_ip="144.135.226.244" src_port="80"/>
    </slice>
    <from sec="1078290277" usec="0"/>
    <to sec="1078290360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="33.171.148.130"/>
      <from sec="1078290000" usec="0"/>
      <to sec="1078290828" usec="0"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
984[label="144.135.253.129;s;21pkt 21fpkt", shape=diamond, color=yellow];
1001[label="124.200.126.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2867[label="144.135.253.129;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3964[label="144.135.253.129;2pkt 2fpkt", shape=invtriangle, color=brown];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.253.129:*, 90.135.13.233:7802}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7802: (28.8462%)&lt;BR/&gt; 6884: (7.69231%)&lt;BR/&gt; 1687: (7.69231%)&lt;BR/&gt; 8000: (5.76923%)&lt;BR/&gt; 8881: (3.84615%)&gt;];
}
984--1001[label="1;1pkt 1fpkt"];
984--2867[label="0.5;1pkt 1fpkt"];
984--3964[label="0.5;1pkt 1fpkt"];
1001--2867[label="1;1pkt 1fpkt"];
1001--3964[label="1;1pkt 1fpkt"];
2867--3964[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="90.135.13.233" dst_port="7802" src_ip="144.135.253.129"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
721[label="144.135.182.240;s;18pkt 18fpkt", shape=diamond, color=yellow];
1055[label="217.37.12.42;d;2pkt 2fpkt", shape=diamond, color=yellow];
3503[label="144.135.182.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4251[label="144.135.182.240;1pkt 1fpkt", shape=invtriangle, color=brown];
4616[label="144.135.182.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.182.240:*, *:6667}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (15.2174%)&lt;BR/&gt; 21: (15.2174%)&lt;BR/&gt; 41491: (10.8696%)&lt;BR/&gt; 41486: (4.34783%)&lt;BR/&gt; 1863: (4.34783%)&gt;];
}
721--1055[label="1;2pkt 2fpkt"];
721--3503[label="1;1pkt 1fpkt"];
721--4251[label="1;1pkt 1fpkt"];
721--4616[label="1;1pkt 1fpkt"];
1055--3503[label="1;1pkt 1fpkt"];
1055--4251[label="1;1pkt 1fpkt"];
1055--4616[label="1;1pkt 1fpkt"];
3503--4251[label="1;1pkt 1fpkt"];
3503--4616[label="1;1pkt 1fpkt"];
4251--4616[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6667" src_ip="144.135.182.240"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.91.133.67"/>
      <from sec="1078290000" usec="0"/>
      <to sec="1078290824" usec="0"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
991[label="144.135.71.38;d;6pkt 6fpkt", shape=diamond, color=yellow];
1113[label="90.165.97.27;s;4pkt 4fpkt", shape=diamond, color=yellow];
1676[label="144.135.71.38;d;6pkt 6fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.165.97.27:2002, 144.135.71.38:*}[33.3333%]&lt;BR/&gt;{90.165.97.27:3400, 144.135.71.38:*}[33.3333%]&lt;BR/&gt;{*:1863, 144.135.71.38:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3400: (18.75%)&lt;BR/&gt; 2002: (18.75%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 2250: (9.375%)&lt;BR/&gt; 2249: (9.375%)&gt;];
}
991--1113[label="1;4pkt 4fpkt"];
991--1676[label="1;6pkt 6fpkt"];
1113--1676[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.71.38" src_port="1863"/>
      <filter dst_ip="144.135.71.38" src_ip="90.165.97.27" src_port="3400"/>
      <filter dst_ip="144.135.71.38" src_ip="90.165.97.27" src_port="2002"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1171[label="172.136.199.82;d;6pkt 6fpkt", shape=diamond, color=yellow];
1172[label="206.225.238.210;s;2pkt 2fpkt", shape=diamond, color=yellow];
3357[label="206.225.238.210;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4187[label="206.225.238.210;4pkt 4fpkt", shape=invtriangle, color=brown];
4582[label="206.225.238.210;4pkt 4fpkt", shape=invhouse, color=bisque];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.225.238.210:*, 172.136.199.82:80}[37.5%]&lt;BR/&gt;{36.84.136.211:*, 172.136.199.82:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47605: (12.5%)&lt;BR/&gt; 46783: (12.5%)&lt;BR/&gt; 48138: (7.5%)&lt;BR/&gt; 45135: (7.5%)&gt;];
}
1171--1172[label="1;2pkt 2fpkt"];
1171--3357[label="0.5;2pkt 2fpkt"];
1171--4187[label="0.5;2pkt 2fpkt"];
1171--4582[label="0.5;2pkt 2fpkt"];
1172--3357[label="1;2pkt 2fpkt"];
1172--4187[label="1;2pkt 2fpkt"];
1172--4582[label="1;2pkt 2fpkt"];
3357--4187[label="1;4pkt 4fpkt"];
3357--4582[label="1;4pkt 4fpkt"];
4187--4582[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.199.82" dst_port="80" src_ip="206.225.238.210"/>
      <filter dst_ip="172.136.199.82" dst_port="80" src_ip="36.84.136.211"/>
    </slice>
    <from sec="1078290162" usec="0"/>
    <to sec="1078290745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
498[label="208.145.213.80;d;12pkt 12fpkt", shape=diamond, color=yellow];
1179[label="208.145.213.207;d;6pkt 6fpkt", shape=diamond, color=yellow];
1182[label="90.128.219.145;s;7pkt 7fpkt", shape=diamond, color=yellow];
2972[label="90.128.219.145;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.128.219.145:80, 208.145.213.80:*}[50%]&lt;BR/&gt;{*:80, 208.145.213.207:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1587: (3.75%)&lt;BR/&gt; 1567: (3.75%)&lt;BR/&gt; 1565: (3.75%)&lt;BR/&gt; 1539: (3.75%)&gt;];
}
498--1182[label="1;7pkt 7fpkt"];
498--2972[label="0.583333;7pkt 7fpkt"];
1179--2719[label="0.166667;1pkt 1fpkt"];
1179--2972[label="0.666667;4pkt 4fpkt"];
1182--2972[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.213.207" src_port="80"/>
      <filter dst_ip="208.145.213.80" src_ip="90.128.219.145" src_port="80"/>
    </slice>
    <from sec="1078290532" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
2179[label="144.135.90.25;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.90.25:*, 204.57.125.162:80}[23.0769%]&lt;BR/&gt;{144.135.90.25:*, *:1863}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 1863: (11.5385%)&lt;BR/&gt; 33732: (1.92308%)&lt;BR/&gt; 33722: (1.92308%)&lt;BR/&gt; 33589: (1.92308%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1863" src_ip="144.135.90.25"/>
      <filter dst_ip="204.57.125.162" dst_port="80" src_ip="144.135.90.25"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07524,1.96084,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
120[label="202.229.40.140s;734pkt 734fpkt", shape=rectangle, color=red];
1186[label="202.229.40.140;s;1013pkt 1013fpkt", shape=diamond, color=yellow];
2931[label="202.229.40.140;1013pkt 1013fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.229.40.140:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3177: (0.0724638%)&lt;BR/&gt; 3176: (0.0724638%)&lt;BR/&gt; 3175: (0.0724638%)&lt;BR/&gt; 3149: (0.0724638%)&gt;];
}
120--1186[label="1;734pkt 734fpkt"];
120--2931[label="1;734pkt 734fpkt"];
1186--2931[label="1;1013pkt 1013fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="202.229.40.140"/>
    </slice>
    <from sec="1078290585" usec="0"/>
    <to sec="1078290679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
1190[label="144.134.80.58;d;41pkt 41fpkt", shape=diamond, color=yellow];
1191[label="204.234.198.116;s;10pkt 10fpkt", shape=diamond, color=yellow];
1788[label="144.134.80.58;d;35pkt 35fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.235.184.194:80, 144.134.80.58:*}[65.8537%]&lt;BR/&gt;{204.234.198.116:80, 144.134.80.58:*}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49422: (1.74419%)&lt;BR/&gt; 49421: (1.74419%)&lt;BR/&gt; 49420: (1.74419%)&lt;BR/&gt; 49392: (1.74419%)&gt;];
}
1190--1191[label="1;10pkt 10fpkt"];
1190--1788[label="1;35pkt 35fpkt"];
1191--1788[label="0.8;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.80.58" src_ip="204.235.184.194" src_port="80"/>
      <filter dst_ip="144.134.80.58" src_ip="204.234.198.116" src_port="80"/>
    </slice>
    <from sec="1078290607" usec="0"/>
    <to sec="1078290766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="107.148.190.17"/>
      <from sec="1078290002" usec="0"/>
      <to sec="1078290827" usec="0"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22076,2.0478,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
116[label="209.170.131.111s;2716pkt 2716fpkt", shape=rectangle, color=red];
1288[label="209.170.131.111;s;2099pkt 2099fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.170.131.111:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3540: (0.0311526%)&lt;BR/&gt; 3539: (0.0311526%)&lt;BR/&gt; 3538: (0.0311526%)&lt;BR/&gt; 3537: (0.0311526%)&gt;];
}
116--129[label="0.0184094;50pkt 50fpkt"];
116--1288[label="0.958075;2011pkt 2011fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="209.170.131.111"/>
    </slice>
    <from sec="1078290634" usec="0"/>
    <to sec="1078290891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12171,1.91309,901,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
213[label="148.143.163.71;s;3302pkt 3302fpkt", shape=diamond, color=yellow];
1293[label="209.204.93.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
1896[label="209.204.93.255;d;1pkt 1fpkt", shape=hexagon, color=black];
2507[label="148.143.163.71;3613pkt 3613fpkt", shape=pentagon, color=darkviolet];
3805[label="148.143.163.71;3613pkt 3613fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.143.163.71:0, *:0}[99.3357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3162%)&lt;BR/&gt; 54928: (0.34188%)&lt;BR/&gt; 53: (0.34188%)&gt;];
}
213--1293[label="1;1pkt 1fpkt"];
213--1896[label="1;1pkt 1fpkt"];
213--1970[label="0.000972763;2pkt 2fpkt"];
213--2507[label="1;3302pkt 3302fpkt"];
213--3805[label="1;3302pkt 3302fpkt"];
1293--1896[label="1;1pkt 1fpkt"];
1293--2507[label="1;1pkt 1fpkt"];
1293--3805[label="1;1pkt 1fpkt"];
1896--2507[label="1;1pkt 1fpkt"];
1896--3805[label="1;1pkt 1fpkt"];
2507--3805[label="1;3613pkt 3613fpkt"];
</description>
    <slice>
      <filter src_ip="148.143.163.71"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
1333[label="172.136.237.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
1334[label="90.210.228.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.210.228.27:0, 172.136.237.19:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1333--1334[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.237.19" src_ip="90.210.228.27"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.194.241.133"/>
      <from sec="1078290002" usec="0"/>
      <to sec="1078290827" usec="0"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.15.17.244"/>
      <from sec="1078290002" usec="0"/>
      <to sec="1078290826" usec="0"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.158.4.21"/>
      <from sec="1078290008" usec="0"/>
      <to sec="1078290828" usec="0"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
1395[label="208.145.214.52;d;3pkt 3fpkt", shape=diamond, color=yellow];
1398[label="33.68.72.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
1889[label="208.145.214.52;d;3pkt 3fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.85.22.85:2697, 208.145.214.52:445}[33.3333%]&lt;BR/&gt;{192.201.129.131:0, 208.145.214.52:0}[33.3333%]&lt;BR/&gt;{33.68.72.138:21674, 208.145.214.52:2353}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 21674: (21.4286%)&lt;BR/&gt; 2353: (21.4286%)&lt;BR/&gt; 2697: (14.2857%)&lt;BR/&gt; 445: (14.2857%)&gt;];
}
1395--1398[label="1;1pkt 1fpkt"];
1395--1889[label="1;3pkt 3fpkt"];
1398--1889[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.214.52" dst_port="2353" src_ip="33.68.72.138" src_port="21674"/>
      <filter dst_ip="208.145.214.52" src_ip="192.201.129.131"/>
      <filter dst_ip="208.145.214.52" dst_port="445" src_ip="53.85.22.85" src_port="2697"/>
    </slice>
    <from sec="1078290298" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
1431[label="144.134.29.124;d;16pkt 16fpkt", shape=diamond, color=yellow];
1432[label="39.83.147.133;s;16pkt 16fpkt", shape=diamond, color=yellow];
2890[label="39.83.147.133;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3973[label="39.83.147.133;15pkt 15fpkt", shape=invtriangle, color=brown];
4484[label="39.83.147.133;16pkt 16fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.83.147.133:80, 144.134.29.124:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4907: (3.16456%)&lt;BR/&gt; 4905: (3.16456%)&lt;BR/&gt; 4903: (3.16456%)&lt;BR/&gt; 4901: (3.16456%)&gt;];
}
1431--1432[label="1;16pkt 16fpkt"];
1431--2890[label="1;16pkt 16fpkt"];
1431--3973[label="1;15pkt 15fpkt"];
1431--4484[label="1;16pkt 16fpkt"];
1432--2890[label="1;16pkt 16fpkt"];
1432--3973[label="1;15pkt 15fpkt"];
1432--4484[label="1;16pkt 16fpkt"];
2890--3973[label="1;15pkt 15fpkt"];
2890--4484[label="1;16pkt 16fpkt"];
3973--4484[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.29.124" src_ip="39.83.147.133" src_port="80"/>
    </slice>
    <from sec="1078290732" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1436[label="168.168.91.208;d;3pkt 3fpkt", shape=diamond, color=yellow];
1437[label="37.108.212.115;s;3pkt 3fpkt", shape=diamond, color=yellow];
2785[label="37.108.212.115;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3925[label="37.108.212.115;2pkt 2fpkt", shape=invtriangle, color=brown];
4461[label="37.108.212.115;2pkt 2fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.108.212.115:3623, 168.168.91.208:80}[33.3333%]&lt;BR/&gt;{37.108.212.115:3626, 168.168.91.208:80}[33.3333%]&lt;BR/&gt;{37.108.212.115:3628, 168.168.91.208:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3628: (20.8333%)&lt;BR/&gt; 3626: (20.8333%)&lt;BR/&gt; 3623: (8.33333%)&gt;];
}
1436--1437[label="1;3pkt 3fpkt"];
1436--2785[label="1;2pkt 2fpkt"];
1436--3925[label="1;2pkt 2fpkt"];
1436--4461[label="1;2pkt 2fpkt"];
1437--2785[label="1;2pkt 2fpkt"];
1437--3925[label="1;2pkt 2fpkt"];
1437--4461[label="1;2pkt 2fpkt"];
2785--3925[label="1;2pkt 2fpkt"];
2785--4461[label="1;2pkt 2fpkt"];
3925--4461[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.91.208" dst_port="80" src_ip="37.108.212.115" src_port="3628"/>
      <filter dst_ip="168.168.91.208" dst_port="80" src_ip="37.108.212.115" src_port="3626"/>
      <filter dst_ip="168.168.91.208" dst_port="80" src_ip="37.108.212.115" src_port="3623"/>
    </slice>
    <from sec="1078290747" usec="0"/>
    <to sec="1078290875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
269[label="144.135.237.88;s;85pkt 85fpkt", shape=diamond, color=yellow];
1456[label="144.135.237.88;s;76pkt 76fpkt", shape=hexagon, color=black];
2620[label="144.135.237.88;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3848[label="144.135.237.88;86pkt 86fpkt", shape=invtriangle, color=brown];
4418[label="144.135.237.88;85pkt 85fpkt", shape=invhouse, color=bisque];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.237.88:*, 36.86.75.52:80}[48.8372%]&lt;BR/&gt;{144.135.237.88:*, 192.225.3.196:80}[26.7442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4019%)&lt;BR/&gt; 4817: (0.598086%)&lt;BR/&gt; 4812: (0.598086%)&lt;BR/&gt; 4808: (0.598086%)&lt;BR/&gt; 4807: (0.598086%)&gt;];
}
269--1456[label="1;76pkt 76fpkt"];
269--1967[label="0.0823529;7pkt 7fpkt"];
269--1981[label="0.0823529;7pkt 7fpkt"];
269--1991[label="0.0823529;7pkt 7fpkt"];
269--2620[label="1;85pkt 85fpkt"];
269--3848[label="1;85pkt 85fpkt"];
269--4418[label="0.988235;84pkt 84fpkt"];
1456--1967[label="0.0921053;7pkt 7fpkt"];
1456--1981[label="0.0921053;7pkt 7fpkt"];
1456--1991[label="0.0921053;7pkt 7fpkt"];
1456--2620[label="1;76pkt 76fpkt"];
1456--3848[label="1;76pkt 76fpkt"];
1456--4418[label="0.986842;75pkt 75fpkt"];
2620--3848[label="1;86pkt 86fpkt"];
2620--4418[label="1;85pkt 85fpkt"];
3848--4418[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="36.86.75.52" dst_port="80" src_ip="144.135.237.88"/>
      <filter dst_ip="192.225.3.196" dst_port="80" src_ip="144.135.237.88"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
488[label="220.203.12.29;s;38pkt 38fpkt", shape=diamond, color=yellow];
502[label="209.77.155.67;d;31pkt 31fpkt", shape=diamond, color=yellow];
1481[label="220.203.12.29;s;38pkt 38fpkt", shape=hexagon, color=black];
1484[label="209.77.155.67;d;31pkt 31fpkt", shape=hexagon, color=black];
2196[label="220.203.12.29;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.203.12.29:443, 209.77.155.67:*}[77.5%]&lt;BR/&gt;{220.203.12.29:443, 209.77.155.190:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.1525%)&lt;BR/&gt; 2300: (1.41243%)&lt;BR/&gt; 2298: (1.41243%)&lt;BR/&gt; 2297: (1.41243%)&lt;BR/&gt; 2296: (1.41243%)&gt;];
}
488--502[label="1;31pkt 31fpkt"];
488--1481[label="1;38pkt 38fpkt"];
488--1484[label="1;31pkt 31fpkt"];
488--1965[label="0.0263158;1pkt 1fpkt"];
488--1980[label="0.0263158;1pkt 1fpkt"];
488--2196[label="0.973684;37pkt 37fpkt"];
502--1481[label="1;31pkt 31fpkt"];
502--1484[label="1;31pkt 31fpkt"];
502--2196[label="0.967742;30pkt 30fpkt"];
1481--1484[label="1;31pkt 31fpkt"];
1481--1965[label="0.0263158;1pkt 1fpkt"];
1481--1980[label="0.0263158;1pkt 1fpkt"];
1481--2196[label="0.973684;37pkt 37fpkt"];
1484--2196[label="0.967742;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="209.77.155.67" src_ip="220.203.12.29" src_port="443"/>
      <filter dst_ip="209.77.155.190" src_ip="220.203.12.29" src_port="443"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
460[label="33.154.38.70;s;803pkt 803fpkt", shape=diamond, color=yellow];
1508[label="33.154.38.70;s;803pkt 803fpkt", shape=hexagon, color=black];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.154.38.70:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4999: (0.0622665%)&lt;BR/&gt; 4997: (0.0622665%)&lt;BR/&gt; 4991: (0.0622665%)&lt;BR/&gt; 4989: (0.0622665%)&gt;];
}
460--1508[label="1;803pkt 803fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="33.154.38.70"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
416[label="205.4.85.135;s;3280pkt 3280fpkt", shape=diamond, color=yellow];
1537[label="205.4.85.135;s;1505pkt 1505fpkt", shape=hexagon, color=black];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.4.85.135:1160, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1160: (50%)&gt;];
}
416--1537[label="1;1505pkt 1505fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="205.4.85.135" src_port="1160"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
456[label="131.6.196.4;d;127pkt 127fpkt", shape=diamond, color=yellow];
457[label="39.146.24.93;s;125pkt 125fpkt", shape=diamond, color=yellow];
1548[label="131.6.196.4;d;115pkt 115fpkt", shape=hexagon, color=black];
1549[label="39.146.24.93;s;125pkt 125fpkt", shape=hexagon, color=black];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.146.24.93:*, 131.6.196.4:80}[30.7087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.5081%)&lt;BR/&gt; 445: (3.45528%)&lt;BR/&gt; 3127: (1.62602%)&lt;BR/&gt; 53: (1.42276%)&lt;BR/&gt; 1434: (1.21951%)&gt;];
}
456--457[label="1;125pkt 125fpkt"];
456--1548[label="1;115pkt 115fpkt"];
456--1549[label="1;125pkt 125fpkt"];
456--1964[label="0.00787402;1pkt 1fpkt"];
456--1965[label="0.023622;3pkt 3fpkt"];
456--1967[label="0.023622;3pkt 3fpkt"];
456--1968[label="0.00787402;1pkt 1fpkt"];
456--1971[label="0.015748;2pkt 2fpkt"];
456--1972[label="0.00787402;1pkt 1fpkt"];
456--1980[label="0.023622;3pkt 3fpkt"];
456--1981[label="0.023622;3pkt 3fpkt"];
456--1982[label="0.00787402;1pkt 1fpkt"];
456--1983[label="0.015748;2pkt 2fpkt"];
456--1984[label="0.00787402;1pkt 1fpkt"];
456--1991[label="0.023622;3pkt 3fpkt"];
456--1992[label="0.015748;2pkt 2fpkt"];
456--1993[label="0.00787402;1pkt 1fpkt"];
457--1548[label="0.982609;113pkt 113fpkt"];
457--1549[label="1;125pkt 125fpkt"];
457--1964[label="0.008;1pkt 1fpkt"];
457--1965[label="0.024;3pkt 3fpkt"];
457--1967[label="0.024;3pkt 3fpkt"];
457--1968[label="0.008;1pkt 1fpkt"];
457--1971[label="0.016;2pkt 2fpkt"];
457--1972[label="0.008;1pkt 1fpkt"];
457--1980[label="0.024;3pkt 3fpkt"];
457--1981[label="0.024;3pkt 3fpkt"];
457--1982[label="0.008;1pkt 1fpkt"];
457--1983[label="0.016;2pkt 2fpkt"];
457--1984[label="0.008;1pkt 1fpkt"];
457--1991[label="0.024;3pkt 3fpkt"];
457--1992[label="0.016;2pkt 2fpkt"];
457--1993[label="0.008;1pkt 1fpkt"];
1548--1549[label="0.982609;113pkt 113fpkt"];
1548--1964[label="0.00869565;1pkt 1fpkt"];
1548--1965[label="0.026087;3pkt 3fpkt"];
1548--1967[label="0.026087;3pkt 3fpkt"];
1548--1968[label="0.00869565;1pkt 1fpkt"];
1548--1971[label="0.0173913;2pkt 2fpkt"];
1548--1972[label="0.00869565;1pkt 1fpkt"];
1548--1980[label="0.026087;3pkt 3fpkt"];
1548--1981[label="0.026087;3pkt 3fpkt"];
1548--1982[label="0.00869565;1pkt 1fpkt"];
1548--1983[label="0.0173913;2pkt 2fpkt"];
1548--1984[label="0.00869565;1pkt 1fpkt"];
1548--1991[label="0.026087;3pkt 3fpkt"];
1548--1992[label="0.0173913;2pkt 2fpkt"];
1548--1993[label="0.00869565;1pkt 1fpkt"];
1549--1964[label="0.008;1pkt 1fpkt"];
1549--1965[label="0.024;3pkt 3fpkt"];
1549--1967[label="0.024;3pkt 3fpkt"];
1549--1968[label="0.008;1pkt 1fpkt"];
1549--1971[label="0.016;2pkt 2fpkt"];
1549--1972[label="0.008;1pkt 1fpkt"];
1549--1980[label="0.024;3pkt 3fpkt"];
1549--1981[label="0.024;3pkt 3fpkt"];
1549--1982[label="0.008;1pkt 1fpkt"];
1549--1983[label="0.016;2pkt 2fpkt"];
1549--1984[label="0.008;1pkt 1fpkt"];
1549--1991[label="0.024;3pkt 3fpkt"];
1549--1992[label="0.016;2pkt 2fpkt"];
1549--1993[label="0.008;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.196.4" dst_port="80" src_ip="39.146.24.93"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910031,2.08024,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
355[label="144.134.72.89;d;4pkt 4fpkt", shape=diamond, color=yellow];
356[label="32.65.98.1;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.71.8.155:80, 144.134.72.89:49130}[25%]&lt;BR/&gt;{32.65.98.1:12510, 144.134.72.89:48860}[25%]&lt;BR/&gt;{32.65.98.1:12580, 144.134.72.89:49122}[25%]&lt;BR/&gt;{32.65.98.1:12580, 144.134.72.89:49123}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12580: (28.5714%)&lt;BR/&gt; 49123: (14.2857%)&lt;BR/&gt; 49122: (14.2857%)&lt;BR/&gt; 48860: (14.2857%)&lt;BR/&gt; 12510: (14.2857%)&gt;];
}
355--356[label="1;3pkt 3fpkt"];
355--631[label="0.25;1pkt 1fpkt"];
355--1566[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.72.89" dst_port="49123" src_ip="32.65.98.1" src_port="12580"/>
      <filter dst_ip="144.134.72.89" dst_port="49122" src_ip="32.65.98.1" src_port="12580"/>
      <filter dst_ip="144.134.72.89" dst_port="48860" src_ip="32.65.98.1" src_port="12510"/>
      <filter dst_ip="144.134.72.89" dst_port="49130" src_ip="192.71.8.155" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
379[label="144.134.29.173;d;9pkt 9fpkt", shape=diamond, color=yellow];
399[label="204.185.245.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
791[label="204.225.168.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
1577[label="204.225.168.30;s;2pkt 2fpkt", shape=hexagon, color=black];
2630[label="204.185.245.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.43.72.174:80, 144.134.29.173:*}[22.2222%]&lt;BR/&gt;{*:1755, 144.134.29.173:*}[22.2222%]&lt;BR/&gt;{204.225.168.30:*, 144.134.29.173:*}[22.2222%]&lt;BR/&gt;{204.185.245.89:*, 144.134.29.173:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (17.6471%)&lt;BR/&gt; 4592: (8.82353%)&lt;BR/&gt; 4290: (8.82353%)&lt;BR/&gt; 3267: (8.82353%)&lt;BR/&gt; 3265: (8.82353%)&gt;];
}
379--399[label="1;2pkt 2fpkt"];
379--501[label="0.111111;1pkt 1fpkt"];
379--652[label="0.222222;2pkt 2fpkt"];
379--791[label="1;2pkt 2fpkt"];
379--1577[label="1;2pkt 2fpkt"];
379--1755[label="0.111111;1pkt 1fpkt"];
379--1965[label="0.111111;1pkt 1fpkt"];
379--1980[label="0.111111;1pkt 1fpkt"];
379--2630[label="1;2pkt 2fpkt"];
399--2630[label="1;2pkt 2fpkt"];
791--1577[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.29.173" src_ip="204.185.245.89"/>
      <filter dst_ip="144.134.29.173" src_ip="204.225.168.30"/>
      <filter dst_ip="144.134.29.173" src_port="1755"/>
      <filter dst_ip="144.134.29.173" src_ip="196.43.72.174" src_port="80"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12171,1.91309,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
803[label="144.135.235.213;s;52pkt 52fpkt", shape=diamond, color=yellow];
1582[label="144.135.235.213;s;52pkt 52fpkt", shape=hexagon, color=black];
3372[label="144.135.235.213;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4196[label="144.135.235.213;55pkt 55fpkt", shape=invtriangle, color=brown];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.235.213:*, 39.196.16.253:80}[80.3571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13557: (0.930233%)&lt;BR/&gt; 13556: (0.930233%)&lt;BR/&gt; 13553: (0.930233%)&lt;BR/&gt; 13552: (0.930233%)&gt;];
}
803--1582[label="1;52pkt 52fpkt"];
803--1971[label="0.0769231;4pkt 4fpkt"];
803--1983[label="0.0769231;4pkt 4fpkt"];
803--1992[label="0.0769231;4pkt 4fpkt"];
803--3372[label="1;52pkt 52fpkt"];
803--4196[label="1;52pkt 52fpkt"];
1582--1971[label="0.0769231;4pkt 4fpkt"];
1582--1983[label="0.0769231;4pkt 4fpkt"];
1582--1992[label="0.0769231;4pkt 4fpkt"];
1582--3372[label="1;52pkt 52fpkt"];
1582--4196[label="1;52pkt 52fpkt"];
3372--4196[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="39.196.16.253" dst_port="80" src_ip="144.135.235.213"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
255[label="144.135.90.200;s;404pkt 404fpkt", shape=diamond, color=yellow];
266[label="203.103.134.242;d;460pkt 460fpkt", shape=diamond, color=yellow];
420[label="36.188.166.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
1592[label="203.103.134.242;d;408pkt 408fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.90.200:*, 203.103.134.242:80}[89.3204%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6465%)&lt;BR/&gt; 1863: (0.392773%)&lt;BR/&gt; 1899: (0.157109%)&lt;BR/&gt; 1898: (0.157109%)&lt;BR/&gt; 1897: (0.157109%)&gt;];
}
255--266[label="0.863861;349pkt 349fpkt"];
255--420[label="1;1pkt 1fpkt"];
255--1592[label="0.863861;349pkt 349fpkt"];
255--1967[label="0.193069;78pkt 78fpkt"];
255--1971[label="0.019802;8pkt 8fpkt"];
255--1981[label="0.193069;78pkt 78fpkt"];
255--1983[label="0.019802;8pkt 8fpkt"];
255--1991[label="0.193069;78pkt 78fpkt"];
255--1992[label="0.019802;8pkt 8fpkt"];
266--1592[label="1;408pkt 408fpkt"];
266--1967[label="0.0804348;37pkt 37fpkt"];
266--1971[label="0.0173913;8pkt 8fpkt"];
266--1981[label="0.0804348;37pkt 37fpkt"];
266--1983[label="0.0173913;8pkt 8fpkt"];
266--1991[label="0.0804348;37pkt 37fpkt"];
266--1992[label="0.0173913;8pkt 8fpkt"];
1592--1967[label="0.0906863;37pkt 37fpkt"];
1592--1971[label="0.0196078;8pkt 8fpkt"];
1592--1981[label="0.0906863;37pkt 37fpkt"];
1592--1983[label="0.0196078;8pkt 8fpkt"];
1592--1991[label="0.0906863;37pkt 37fpkt"];
1592--1992[label="0.0196078;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="203.103.134.242" dst_port="80" src_ip="144.135.90.200"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
712[label="194.195.44.242;s;461pkt 461fpkt", shape=diamond, color=yellow];
1599[label="194.195.44.242;s;418pkt 418fpkt", shape=hexagon, color=black];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.195.44.242:*, *:3127}[50.1085%]&lt;BR/&gt;{194.195.44.242:*, *:6129}[49.4577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (25.0853%)&lt;BR/&gt; 6129: (24.744%)&lt;BR/&gt; 14143: (0.341297%)&lt;BR/&gt; 28362: (0.284414%)&lt;BR/&gt; 15450: (0.284414%)&gt;];
}
712--1599[label="1;418pkt 418fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.195.44.242"/>
      <filter dst_port="6129" src_ip="194.195.44.242"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
586[label="197.10.93.243;s;1726pkt 1726fpkt", shape=diamond, color=yellow];
1601[label="197.10.93.243;s;1352pkt 1352fpkt", shape=hexagon, color=black];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.93.243:1053, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1053: (50%)&gt;];
}
586--1601[label="1;1352pkt 1352fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.10.93.243" src_port="1053"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
840[label="144.134.192.205;d;454pkt 454fpkt", shape=diamond, color=yellow];
1602[label="144.134.192.205;d;259pkt 259fpkt", shape=hexagon, color=black];
3221[label="144.17.121.189;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.226.5.61:*, 144.134.192.205:458}[40.5229%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 458: (50%)&lt;BR/&gt; 4574: (0.315657%)&lt;BR/&gt; 4551: (0.315657%)&lt;BR/&gt; 4463: (0.315657%)&lt;BR/&gt; 4382: (0.315657%)&gt;];
}
840--1602[label="1;259pkt 259fpkt"];
840--3221[label="0.936709;74pkt 74fpkt"];
1602--3221[label="0.544304;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.192.205" dst_port="458" src_ip="202.226.5.61"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12171,1.91309,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
478[label="144.135.248.157;s;86pkt 86fpkt", shape=diamond, color=yellow];
597[label="37.26.212.214;d;26pkt 26fpkt", shape=diamond, color=yellow];
729[label="144.135.234.70;s;58pkt 58fpkt", shape=diamond, color=yellow];
1281[label="32.65.98.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
1604[label="37.26.212.214;d;26pkt 26fpkt", shape=hexagon, color=black];
3042[label="144.135.248.157;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4037[label="144.135.248.157;2pkt 2fpkt", shape=invtriangle, color=brown];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.234.70:*, *:*}[40.2778%]&lt;BR/&gt;{144.135.248.157:*, 37.26.212.7:80}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.8911%)&lt;BR/&gt; 139: (6.68317%)&lt;BR/&gt; 0: (2.9703%)&lt;BR/&gt; 1863: (1.9802%)&lt;BR/&gt; 12510: (1.48515%)&gt;];
}
478--597[label="0.615385;16pkt 16fpkt"];
478--821[label="0.0232558;2pkt 2fpkt"];
478--1072[label="0.0307692;2pkt 2fpkt"];
478--1281[label="1;2pkt 2fpkt"];
478--1604[label="0.615385;16pkt 16fpkt"];
478--1731[label="0.0327869;2pkt 2fpkt"];
478--1950[label="0.0327869;2pkt 2fpkt"];
478--1967[label="0.0116279;1pkt 1fpkt"];
478--1981[label="0.0116279;1pkt 1fpkt"];
478--1991[label="0.0116279;1pkt 1fpkt"];
478--3042[label="1;2pkt 2fpkt"];
478--4037[label="1;2pkt 2fpkt"];
597--729[label="0.384615;10pkt 10fpkt"];
597--1604[label="1;26pkt 26fpkt"];
729--948[label="0.0344828;2pkt 2fpkt"];
729--1250[label="0.02;1pkt 1fpkt"];
729--1604[label="0.384615;10pkt 10fpkt"];
729--1873[label="0.02;1pkt 1fpkt"];
729--1967[label="0.0172414;1pkt 1fpkt"];
729--1971[label="0.0172414;1pkt 1fpkt"];
729--1981[label="0.0172414;1pkt 1fpkt"];
729--1983[label="0.0172414;1pkt 1fpkt"];
729--1991[label="0.0172414;1pkt 1fpkt"];
729--1992[label="0.0172414;1pkt 1fpkt"];
1281--3042[label="0.5;1pkt 1fpkt"];
1281--4037[label="0.5;1pkt 1fpkt"];
3042--4037[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="144.135.234.70"/>
      <filter dst_ip="37.26.212.7" dst_port="80" src_ip="144.135.248.157"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
942[label="202.75.12.98;s;280pkt 280fpkt", shape=diamond, color=yellow];
1646[label="202.75.12.98;s;250pkt 250fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.75.12.98:1025, *:3127}[49.6429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1025: (24.2453%)&lt;BR/&gt; 2993: (0.188679%)&lt;BR/&gt; 2992: (0.188679%)&lt;BR/&gt; 2969: (0.188679%)&gt;];
}
942--1646[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="202.75.12.98" src_port="1025"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
842[label="168.168.62.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
843[label="39.105.44.4;s;2pkt 2fpkt", shape=diamond, color=yellow];
1660[label="168.168.62.191;d;2pkt 2fpkt", shape=hexagon, color=black];
1661[label="39.105.44.4;s;2pkt 2fpkt", shape=hexagon, color=black];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.128.241:5050, 168.168.62.191:1162}[33.3333%]&lt;BR/&gt;{39.105.44.4:6666, 168.168.62.160:1331}[33.3333%]&lt;BR/&gt;{39.105.44.4:6662, 168.168.62.191:1284}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6662: (25%)&lt;BR/&gt; 1284: (25%)&lt;BR/&gt; 6666: (12.5%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 1331: (12.5%)&gt;];
}
842--843[label="0.5;1pkt 1fpkt"];
842--1660[label="1;2pkt 2fpkt"];
842--1661[label="0.5;1pkt 1fpkt"];
843--1660[label="0.5;1pkt 1fpkt"];
843--1661[label="1;2pkt 2fpkt"];
1660--1661[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.62.191" dst_port="1284" src_ip="39.105.44.4" src_port="6662"/>
      <filter dst_ip="168.168.62.160" dst_port="1331" src_ip="39.105.44.4" src_port="6666"/>
      <filter dst_ip="168.168.62.191" dst_port="1162" src_ip="192.62.128.241" src_port="5050"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
466[label="192.183.117.55;s;2452pkt 2452fpkt", shape=diamond, color=yellow];
1662[label="192.183.117.55;s;1658pkt 1658fpkt", shape=hexagon, color=black];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.183.117.55:4046, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4046: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
466--1662[label="1;1658pkt 1658fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="192.183.117.55" src_port="4046"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
959[label="33.230.57.80;s;276pkt 276fpkt", shape=diamond, color=yellow];
1665[label="33.230.57.80;s;276pkt 276fpkt", shape=hexagon, color=black];
2555[label="33.230.57.80;297pkt 297fpkt", shape=pentagon, color=darkviolet];
3823[label="33.230.57.80;296pkt 296fpkt", shape=invtriangle, color=brown];
4406[label="33.230.57.80;296pkt 296fpkt", shape=invhouse, color=bisque];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.230.57.80:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3245: (0.520472%)&lt;BR/&gt; 4734: (0.346981%)&lt;BR/&gt; 4318: (0.346981%)&lt;BR/&gt; 4298: (0.346981%)&gt;];
}
959--1665[label="1;276pkt 276fpkt"];
959--2555[label="0.996377;275pkt 275fpkt"];
959--3823[label="0.996377;275pkt 275fpkt"];
959--4406[label="0.996377;275pkt 275fpkt"];
1665--2555[label="0.996377;275pkt 275fpkt"];
1665--3823[label="0.996377;275pkt 275fpkt"];
1665--4406[label="0.996377;275pkt 275fpkt"];
2555--3823[label="1;296pkt 296fpkt"];
2555--4406[label="1;296pkt 296fpkt"];
3823--4406[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.230.57.80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
985[label="195.34.127.177;s;274pkt 274fpkt", shape=diamond, color=yellow];
1673[label="195.34.127.177;s;274pkt 274fpkt", shape=hexagon, color=black];
3159[label="195.34.127.177;302pkt 302fpkt", shape=pentagon, color=darkviolet];
4089[label="195.34.127.177;302pkt 302fpkt", shape=invtriangle, color=brown];
4539[label="195.34.127.177;301pkt 301fpkt", shape=invhouse, color=bisque];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.34.127.177:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4636: (0.344116%)&lt;BR/&gt; 4299: (0.344116%)&lt;BR/&gt; 4221: (0.344116%)&lt;BR/&gt; 4104: (0.344116%)&gt;];
}
985--1673[label="1;274pkt 274fpkt"];
985--3159[label="1;274pkt 274fpkt"];
985--4089[label="1;274pkt 274fpkt"];
985--4539[label="0.99635;273pkt 273fpkt"];
1673--3159[label="1;274pkt 274fpkt"];
1673--4089[label="1;274pkt 274fpkt"];
1673--4539[label="0.99635;273pkt 273fpkt"];
3159--4089[label="1;302pkt 302fpkt"];
3159--4539[label="1;301pkt 301fpkt"];
4089--4539[label="1;301pkt 301fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="195.34.127.177"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
233[label="144.135.148.121;s;4pkt 4fpkt", shape=diamond, color=yellow];
267[label="55.48.157.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
411[label="52.190.19.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
509[label="52.191.104.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
1535[label="52.190.19.195;d;1pkt 1fpkt", shape=hexagon, color=black];
1686[label="52.191.104.207;d;1pkt 1fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.148.121:34096, 55.48.157.192:1526}[25%]&lt;BR/&gt;{144.135.148.121:34095, 52.190.19.195:62533}[25%]&lt;BR/&gt;{144.135.148.121:34188, 52.191.104.207:3850}[25%]&lt;BR/&gt;{144.135.148.121:33863, 220.88.208.231:6667}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62533: (16.6667%)&lt;BR/&gt; 34188: (16.6667%)&lt;BR/&gt; 34095: (16.6667%)&lt;BR/&gt; 3850: (16.6667%)&lt;BR/&gt; 34096: (11.1111%)&gt;];
}
233--267[label="1;1pkt 1fpkt"];
233--411[label="1;1pkt 1fpkt"];
233--509[label="1;1pkt 1fpkt"];
233--1535[label="1;1pkt 1fpkt"];
233--1686[label="1;1pkt 1fpkt"];
411--1535[label="1;1pkt 1fpkt"];
509--1686[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.88.208.231" dst_port="6667" src_ip="144.135.148.121" src_port="33863"/>
      <filter dst_ip="52.191.104.207" dst_port="3850" src_ip="144.135.148.121" src_port="34188"/>
      <filter dst_ip="52.190.19.195" dst_port="62533" src_ip="144.135.148.121" src_port="34095"/>
      <filter dst_ip="55.48.157.192" dst_port="1526" src_ip="144.135.148.121" src_port="34096"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
1036[label="148.33.205.176;d;98pkt 98fpkt", shape=diamond, color=yellow];
1044[label="39.97.132.148;s;112pkt 112fpkt", shape=diamond, color=yellow];
1707[label="39.97.132.148;s;112pkt 112fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.97.132.148:*, 148.33.205.176:14247}[76.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14247: (42.3913%)&lt;BR/&gt; 26273: (6.52174%)&lt;BR/&gt; 1131: (0.931677%)&lt;BR/&gt; 4999: (0.465839%)&lt;BR/&gt; 4997: (0.465839%)&gt;];
}
1036--1044[label="0.928571;91pkt 91fpkt"];
1036--1707[label="0.928571;91pkt 91fpkt"];
1036--1975[label="0.0102041;1pkt 1fpkt"];
1036--1976[label="0.0102041;1pkt 1fpkt"];
1036--1987[label="0.0102041;1pkt 1fpkt"];
1044--1707[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.205.176" dst_port="14247" src_ip="39.97.132.148"/>
    </slice>
    <from sec="1078290198" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
548[label="144.135.90.237;s;67pkt 67fpkt", shape=diamond, color=yellow];
740[label="144.135.218.209;s;113pkt 113fpkt", shape=diamond, color=yellow];
1415[label="175.122.220.133;d;6pkt 6fpkt", shape=diamond, color=yellow];
1725[label="144.135.90.237;s;60pkt 60fpkt", shape=hexagon, color=black];
3487[label="144.135.90.237;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4244[label="144.135.90.237;69pkt 69fpkt", shape=invtriangle, color=brown];
4610[label="144.135.90.237;69pkt 69fpkt", shape=invhouse, color=bisque];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.218.209:*, *:80}[56.2842%]&lt;BR/&gt;{144.135.90.237:*, *:80}[29.5082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.2819%)&lt;BR/&gt; 1863: (3.30396%)&lt;BR/&gt; 443: (0.660793%)&lt;BR/&gt; 56174: (0.550661%)&lt;BR/&gt; 56145: (0.550661%)&gt;];
}
548--665[label="0.0322581;2pkt 2fpkt"];
548--1072[label="0.0153846;1pkt 1fpkt"];
548--1250[label="0.04;2pkt 2fpkt"];
548--1359[label="0.0208333;1pkt 1fpkt"];
548--1725[label="1;60pkt 60fpkt"];
548--1731[label="0.0163934;1pkt 1fpkt"];
548--1869[label="0.0208333;1pkt 1fpkt"];
548--1873[label="0.04;2pkt 2fpkt"];
548--1950[label="0.0163934;1pkt 1fpkt"];
548--1967[label="0.0597015;4pkt 4fpkt"];
548--1971[label="0.0447761;3pkt 3fpkt"];
548--1981[label="0.0597015;4pkt 4fpkt"];
548--1983[label="0.0447761;3pkt 3fpkt"];
548--1991[label="0.0597015;4pkt 4fpkt"];
548--1992[label="0.0447761;3pkt 3fpkt"];
548--3487[label="1;67pkt 67fpkt"];
548--4244[label="0.985075;66pkt 66fpkt"];
548--4610[label="0.985075;66pkt 66fpkt"];
740--883[label="0.031746;2pkt 2fpkt"];
740--1072[label="0.0461538;3pkt 3fpkt"];
740--1250[label="0.04;2pkt 2fpkt"];
740--1415[label="1;6pkt 6fpkt"];
740--1731[label="0.0491803;3pkt 3fpkt"];
740--1873[label="0.04;2pkt 2fpkt"];
740--1950[label="0.0491803;3pkt 3fpkt"];
740--1967[label="0.00884956;1pkt 1fpkt"];
740--1971[label="0.0353982;4pkt 4fpkt"];
740--1981[label="0.00884956;1pkt 1fpkt"];
740--1983[label="0.0353982;4pkt 4fpkt"];
740--1991[label="0.00884956;1pkt 1fpkt"];
740--1992[label="0.0353982;4pkt 4fpkt"];
1725--1731[label="0.0166667;1pkt 1fpkt"];
1725--1869[label="0.0208333;1pkt 1fpkt"];
1725--1873[label="0.04;2pkt 2fpkt"];
1725--1950[label="0.0166667;1pkt 1fpkt"];
1725--1967[label="0.0666667;4pkt 4fpkt"];
1725--1971[label="0.05;3pkt 3fpkt"];
1725--1981[label="0.0666667;4pkt 4fpkt"];
1725--1983[label="0.05;3pkt 3fpkt"];
1725--1991[label="0.0666667;4pkt 4fpkt"];
1725--1992[label="0.05;3pkt 3fpkt"];
1725--3487[label="1;60pkt 60fpkt"];
1725--4244[label="0.983333;59pkt 59fpkt"];
1725--4610[label="0.983333;59pkt 59fpkt"];
3487--4244[label="1;69pkt 69fpkt"];
3487--4610[label="1;69pkt 69fpkt"];
4244--4610[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="144.135.218.209"/>
      <filter dst_port="80" src_ip="144.135.90.237"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1080[label="33.2.176.123;s;233pkt 233fpkt", shape=diamond, color=yellow];
1735[label="33.2.176.123;s;182pkt 182fpkt", shape=hexagon, color=black];
2838[label="33.2.176.123;241pkt 241fpkt", shape=pentagon, color=darkviolet];
3952[label="33.2.176.123;240pkt 240fpkt", shape=invtriangle, color=brown];
4475[label="33.2.176.123;241pkt 241fpkt", shape=invhouse, color=bisque];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.2.176.123:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3867: (0.439754%)&lt;BR/&gt; 1959: (0.439754%)&lt;BR/&gt; 1493: (0.439754%)&lt;BR/&gt; 1389: (0.439754%)&gt;];
}
1080--1735[label="1;182pkt 182fpkt"];
1080--2838[label="1;233pkt 233fpkt"];
1080--3952[label="0.995708;232pkt 232fpkt"];
1080--4475[label="1;233pkt 233fpkt"];
1735--2838[label="1;182pkt 182fpkt"];
1735--3952[label="0.994505;181pkt 181fpkt"];
1735--4475[label="1;182pkt 182fpkt"];
2838--3952[label="1;240pkt 240fpkt"];
2838--4475[label="1;241pkt 241fpkt"];
3952--4475[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.2.176.123"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
1086[label="107.148.90.162;s;229pkt 229fpkt", shape=diamond, color=yellow];
1739[label="107.148.90.162;s;181pkt 181fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.148.90.162:*, *:3127}[33.6245%]&lt;BR/&gt;{107.148.90.162:*, *:1080}[33.1878%]&lt;BR/&gt;{107.148.90.162:*, *:3128}[33.1878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.8293%)&lt;BR/&gt; 3127: (16.8293%)&lt;BR/&gt; 1080: (16.5854%)&lt;BR/&gt; 2088: (0.487805%)&lt;BR/&gt; 2773: (0.365854%)&gt;];
}
1086--1739[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="107.148.90.162"/>
      <filter dst_port="3128" src_ip="107.148.90.162"/>
      <filter dst_port="1080" src_ip="107.148.90.162"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1029[label="90.12.101.222;s;775pkt 775fpkt", shape=diamond, color=yellow];
1771[label="90.12.101.222;s;684pkt 684fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.12.101.222:4018, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4018: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1029--1771[label="1;684pkt 684fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="90.12.101.222" src_port="4018"/>
    </slice>
    <from sec="1078290050" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
321[label="208.44.110.237;s;3892pkt 3892fpkt", shape=diamond, color=yellow];
1794[label="208.44.110.237;s;3470pkt 3470fpkt", shape=hexagon, color=black];
3488[label="208.44.110.237;4236pkt 4236fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.44.110.237:1710, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1710: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
321--1794[label="1;3470pkt 3470fpkt"];
321--3488[label="1;3892pkt 3892fpkt"];
1794--3488[label="1;3470pkt 3470fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.44.110.237" src_port="1710"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
2687[label="192.211.75.99;69pkt 69fpkt", shape=pentagon, color=darkviolet];
3880[label="192.211.75.99;69pkt 69fpkt", shape=invtriangle, color=brown];
4436[label="192.211.75.99;69pkt 69fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.211.75.99:80, 144.135.83.46:*}[28.9855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2754%)&lt;BR/&gt; 0: (1.44928%)&lt;BR/&gt; 63984: (0.724638%)&lt;BR/&gt; 63974: (0.724638%)&lt;BR/&gt; 63973: (0.724638%)&gt;];
}
2687--3880[label="1;69pkt 69fpkt"];
2687--4436[label="1;69pkt 69fpkt"];
3880--4436[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.83.46" src_ip="192.211.75.99" src_port="80"/>
    </slice>
    <from sec="1078290027" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1263[label="194.161.13.188;d;94pkt 94fpkt", shape=diamond, color=yellow];
1818[label="194.161.13.188;d;94pkt 94fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.70.153:443, 194.161.13.188:*}[64.8936%]&lt;BR/&gt;{144.135.138.226:443, 194.161.13.188:*}[29.7872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.3404%)&lt;BR/&gt; 80: (2.65957%)&lt;BR/&gt; 12524: (0.531915%)&lt;BR/&gt; 12523: (0.531915%)&lt;BR/&gt; 12522: (0.531915%)&gt;];
}
1263--1818[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="194.161.13.188" src_ip="144.135.70.153" src_port="443"/>
      <filter dst_ip="194.161.13.188" src_ip="144.135.138.226" src_port="443"/>
    </slice>
    <from sec="1078290094" usec="0"/>
    <to sec="1078290725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
1091[label="39.177.152.57;s;257pkt 257fpkt", shape=diamond, color=yellow];
1851[label="39.177.152.57;s;257pkt 257fpkt", shape=hexagon, color=black];
2392[label="39.177.152.57;278pkt 278fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.177.152.57:*, *:3127}[33.4532%]&lt;BR/&gt;{39.177.152.57:*, *:3128}[33.4532%]&lt;BR/&gt;{39.177.152.57:*, *:1080}[33.0935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7298%)&lt;BR/&gt; 3127: (16.7298%)&lt;BR/&gt; 1080: (16.5404%)&lt;BR/&gt; 4698: (0.378788%)&lt;BR/&gt; 4326: (0.378788%)&gt;];
}
1091--1851[label="1;257pkt 257fpkt"];
1091--2392[label="1;257pkt 257fpkt"];
1851--2392[label="1;257pkt 257fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="39.177.152.57"/>
      <filter dst_port="3127" src_ip="39.177.152.57"/>
      <filter dst_port="1080" src_ip="39.177.152.57"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
1112[label="144.134.141.223;d;16pkt 16fpkt", shape=diamond, color=yellow];
1859[label="144.134.141.223;d;16pkt 16fpkt", shape=hexagon, color=black];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.58.80.200:80, 144.134.141.223:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 1863: (3.125%)&lt;BR/&gt; 1586: (3.125%)&lt;BR/&gt; 1585: (3.125%)&lt;BR/&gt; 1584: (3.125%)&gt;];
}
1112--1859[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.141.223" src_ip="36.58.80.200" src_port="80"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2227,2.02524,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
639[label="144.134.169.89;d;79pkt 79fpkt", shape=diamond, color=yellow];
640[label="39.96.20.133;s;33pkt 33fpkt", shape=diamond, color=yellow];
1026[label="39.96.20.134;s;21pkt 21fpkt", shape=diamond, color=yellow];
1867[label="39.96.20.133;s;33pkt 33fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.96.20.133:80, 144.134.169.89:*}[41.7722%]&lt;BR/&gt;{39.96.20.134:80, 144.134.169.89:*}[26.5823%]&lt;BR/&gt;{36.85.37.231:80, 144.134.169.89:*}[20.2532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5904%)&lt;BR/&gt; 53: (2.10843%)&lt;BR/&gt; 16190: (0.903614%)&lt;BR/&gt; 16188: (0.903614%)&lt;BR/&gt; 16187: (0.903614%)&gt;];
}
639--640[label="1;33pkt 33fpkt"];
639--1026[label="1;21pkt 21fpkt"];
639--1867[label="1;33pkt 33fpkt"];
639--1965[label="0.0253165;2pkt 2fpkt"];
639--1980[label="0.0253165;2pkt 2fpkt"];
640--1867[label="1;33pkt 33fpkt"];
640--1965[label="0.0606061;2pkt 2fpkt"];
640--1980[label="0.0606061;2pkt 2fpkt"];
1867--1965[label="0.0606061;2pkt 2fpkt"];
1867--1980[label="0.0606061;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.169.89" src_ip="39.96.20.133" src_port="80"/>
      <filter dst_ip="144.134.169.89" src_ip="39.96.20.134" src_port="80"/>
      <filter dst_ip="144.134.169.89" src_ip="36.85.37.231" src_port="80"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2558,1.92531,002,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
20[label="194.203.78.137s;1898pkt 1898fpkt", shape=rectangle, color=red];
1194[label="194.203.78.137;s;2035pkt 2035fpkt", shape=diamond, color=yellow];
1421[label="209.117.93.6;d;7pkt 7fpkt", shape=diamond, color=yellow];
1426[label="192.126.146.24;s;3pkt 3fpkt", shape=diamond, color=yellow];
2174[label="192.126.146.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2915[label="194.203.78.137;2035pkt 2035fpkt", shape=pentagon, color=darkviolet];
3985[label="194.203.78.137;2035pkt 2035fpkt", shape=invtriangle, color=brown];
4489[label="194.203.78.137;2035pkt 2035fpkt", shape=invhouse, color=bisque];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.203.78.137:1026, *:137}[98.4811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (49.4527%)&lt;BR/&gt; 137: (49.4527%)&lt;BR/&gt; 139: (0.497562%)&lt;BR/&gt; 80: (0.0497562%)&lt;BR/&gt; 3963: (0.0199025%)&gt;];
}
20--210[label="0.0117647;1pkt 1fpkt"];
20--428[label="0.00268817;1pkt 1fpkt"];
20--546[label="0.00666667;1pkt 1fpkt"];
20--699[label="0.00387597;1pkt 1fpkt"];
20--1194[label="1;1898pkt 1898fpkt"];
20--1421[label="0.142857;1pkt 1fpkt"];
20--1443[label="0.0117647;1pkt 1fpkt"];
20--1538[label="0.00763359;1pkt 1fpkt"];
20--1902[label="0.0117647;1pkt 1fpkt"];
20--2915[label="1;1898pkt 1898fpkt"];
20--3985[label="1;1898pkt 1898fpkt"];
20--4489[label="1;1898pkt 1898fpkt"];
1194--1421[label="0.142857;1pkt 1fpkt"];
1194--1443[label="0.0117647;1pkt 1fpkt"];
1194--1538[label="0.00763359;1pkt 1fpkt"];
1194--1902[label="0.0117647;1pkt 1fpkt"];
1194--2915[label="1;2035pkt 2035fpkt"];
1194--3985[label="1;2035pkt 2035fpkt"];
1194--4489[label="1;2035pkt 2035fpkt"];
1421--1426[label="1;3pkt 3fpkt"];
1421--2174[label="1;1pkt 1fpkt"];
1421--2913[label="0.285714;2pkt 2fpkt"];
1421--2915[label="0.142857;1pkt 1fpkt"];
1421--3985[label="0.142857;1pkt 1fpkt"];
1421--4489[label="0.142857;1pkt 1fpkt"];
1426--2174[label="1;1pkt 1fpkt"];
2915--3985[label="1;2035pkt 2035fpkt"];
2915--4489[label="1;2035pkt 2035fpkt"];
3985--4489[label="1;2035pkt 2035fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.203.78.137" src_port="1026"/>
    </slice>
    <from sec="1078290621" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.82.43.0"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.107.165.0"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.86.179.0"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.223.140.1"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.152.156.1"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.42.192.1"/>
    </slice>
    <from sec="1078290555" usec="0"/>
    <to sec="1078290591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.160.68.3"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.64.79.3"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.160.213.3"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.219.32.4"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.231.103.4"/>
    </slice>
    <from sec="1078290423" usec="0"/>
    <to sec="1078290624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.106.87.5"/>
    </slice>
    <from sec="1078290459" usec="0"/>
    <to sec="1078290489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.138.16.6"/>
    </slice>
    <from sec="1078290068" usec="0"/>
    <to sec="1078290090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.128.75.6"/>
    </slice>
    <from sec="1078290088" usec="0"/>
    <to sec="1078290223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.238.187.6"/>
    </slice>
    <from sec="1078290626" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.99.137.7"/>
    </slice>
    <from sec="1078290574" usec="0"/>
    <to sec="1078290590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.152.19.8"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.172.89.8"/>
    </slice>
    <from sec="1078290010" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
47[label="205.142.134.8s;254pkt 254fpkt", shape=rectangle, color=red];
2066[label="205.142.134.8;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3601[label="205.142.134.8;254pkt 254fpkt", shape=invtriangle, color=brown];
4298[label="205.142.134.8;254pkt 254fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.142.134.8:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
47--2066[label="1;254pkt 254fpkt"];
47--3601[label="1;254pkt 254fpkt"];
47--4298[label="1;254pkt 254fpkt"];
2066--3601[label="1;254pkt 254fpkt"];
2066--4298[label="1;254pkt 254fpkt"];
3601--4298[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.142.134.8" src_port="1025"/>
    </slice>
    <from sec="1078290405" usec="0"/>
    <to sec="1078290419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.8"/>
    </slice>
    <from sec="1078290019" usec="0"/>
    <to sec="1078290877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.181.6.9"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.142.76.10"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.11.253.10"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.130.62.12"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.244.211.12"/>
    </slice>
    <from sec="1078290053" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.189.73.13"/>
    </slice>
    <from sec="1078290562" usec="0"/>
    <to sec="1078290599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.179.13"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.205.17.14"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.145.15"/>
    </slice>
    <from sec="1078290012" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.40.240.15"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.11.41.16"/>
    </slice>
    <from sec="1078290688" usec="0"/>
    <to sec="1078290817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
48[label="194.164.210.17s;69pkt 69fpkt", shape=rectangle, color=red];
2115[label="194.164.210.17;129pkt 129fpkt", shape=pentagon, color=darkviolet];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.164.210.17:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
48--2115[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.164.210.17" src_port="1025"/>
    </slice>
    <from sec="1078290645" usec="0"/>
    <to sec="1078290659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.18"/>
    </slice>
    <from sec="1078290015" usec="0"/>
    <to sec="1078290887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.51.161.18"/>
    </slice>
    <from sec="1078290607" usec="0"/>
    <to sec="1078290617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.180.58.19"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.152.194.19"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.20"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.29.176.20"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.145.21"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.48.30.22"/>
    </slice>
    <from sec="1078290553" usec="0"/>
    <to sec="1078290580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.57.40.22"/>
    </slice>
    <from sec="1078290237" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.178.198.22"/>
    </slice>
    <from sec="1078290270" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.39.113.23"/>
    </slice>
    <from sec="1078290015" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.233.174.23"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.68.207.23"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.164.89.24"/>
    </slice>
    <from sec="1078290113" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.128.121.24"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.188.222.25"/>
    </slice>
    <from sec="1078290099" usec="0"/>
    <to sec="1078290118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
51[label="90.188.252.25s;240pkt 240fpkt", shape=rectangle, color=red];
2183[label="90.188.252.25;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.188.252.25:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
51--2183[label="0.995833;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.188.252.25" src_port="1028"/>
    </slice>
    <from sec="1078290485" usec="0"/>
    <to sec="1078290503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.245.27"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.70.180.28"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.110.203.28"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32607,2.08906,002,0 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
143[label="90.223.180.29s;48pkt 48fpkt", shape=ellipse, color=green];
2199[label="90.223.180.29;252pkt 252fpkt", shape=pentagon, color=darkviolet];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.223.180.29:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
143--2199[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.223.180.29" src_port="1026"/>
    </slice>
    <from sec="1078290540" usec="0"/>
    <to sec="1078290555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1096[label="55.48.196.29;s;232pkt 232fpkt", shape=diamond, color=yellow];
2200[label="55.48.196.29;239pkt 239fpkt", shape=pentagon, color=darkviolet];
3665[label="55.48.196.29;239pkt 239fpkt", shape=invtriangle, color=brown];
4329[label="55.48.196.29;240pkt 240fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.48.196.29:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4949: (0.421053%)&lt;BR/&gt; 4232: (0.421053%)&lt;BR/&gt; 4054: (0.421053%)&lt;BR/&gt; 3818: (0.421053%)&gt;];
}
1096--2200[label="1;232pkt 232fpkt"];
1096--3665[label="1;232pkt 232fpkt"];
1096--4329[label="1;232pkt 232fpkt"];
2200--3665[label="1;239pkt 239fpkt"];
2200--4329[label="1;239pkt 239fpkt"];
3665--4329[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="55.48.196.29"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1127[label="144.135.245.29;s;30pkt 30fpkt", shape=diamond, color=yellow];
2202[label="144.135.245.29;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.245.29:*, 36.58.90.156:80}[46.6667%]&lt;BR/&gt;{144.135.245.29:*, 36.58.107.208:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1525%)&lt;BR/&gt; 30403: (1.69492%)&lt;BR/&gt; 30374: (1.69492%)&lt;BR/&gt; 30370: (1.69492%)&lt;BR/&gt; 30336: (1.69492%)&gt;];
}
1127--2202[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="36.58.90.156" dst_port="80" src_ip="144.135.245.29"/>
      <filter dst_ip="36.58.107.208" dst_port="80" src_ip="144.135.245.29"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.60.1.31"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.34.36.32"/>
    </slice>
    <from sec="1078290100" usec="0"/>
    <to sec="1078290211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.57.161.32"/>
    </slice>
    <from sec="1078290565" usec="0"/>
    <to sec="1078290616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.181.0.33"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.136.187.34"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.35"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.195.75.36"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.171.105.36"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.237.148.36"/>
    </slice>
    <from sec="1078290095" usec="0"/>
    <to sec="1078290550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
53[label="194.100.152.38s;84pkt 84fpkt", shape=rectangle, color=red];
2266[label="194.100.152.38;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.100.152.38:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
53--2266[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.100.152.38" src_port="1026"/>
    </slice>
    <from sec="1078290486" usec="0"/>
    <to sec="1078290501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.29.202.39"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.53.5.40"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
54[label="195.133.231.40s;1pkt 1fpkt", shape=rectangle, color=red];
2273[label="194.179.15.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.179.15.40:113, 144.134.13.96:36249}[50%]&lt;BR/&gt;{194.179.15.40:64307, 144.134.13.96:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64307: (33.3333%)&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 36249: (16.6667%)&lt;BR/&gt; 113: (16.6667%)&gt;];
}
54--2273[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.13.96" dst_port="25" src_ip="194.179.15.40" src_port="64307"/>
      <filter dst_ip="144.134.13.96" dst_port="36249" src_ip="194.179.15.40" src_port="113"/>
    </slice>
    <from sec="1078290513" usec="0"/>
    <to sec="1078290583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.164.33.40"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.187.188.40"/>
    </slice>
    <from sec="1078290551" usec="0"/>
    <to sec="1078290574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.58.114.41"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.140.41"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.92.148.41"/>
    </slice>
    <from sec="1078290819" usec="0"/>
    <to sec="1078290882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.97.147.42"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.58.6.43"/>
    </slice>
    <from sec="1078290028" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
764[label="131.6.226.210;d;73pkt 73fpkt", shape=diamond, color=yellow];
850[label="144.135.182.225;d;175pkt 175fpkt", shape=diamond, color=yellow];
920[label="36.58.100.169;s;36pkt 36fpkt", shape=diamond, color=yellow];
921[label="144.134.17.140;d;47pkt 47fpkt", shape=diamond, color=yellow];
933[label="172.136.95.148;d;84pkt 84fpkt", shape=diamond, color=yellow];
996[label="144.134.242.21;d;66pkt 66fpkt", shape=diamond, color=yellow];
1045[label="36.58.100.43;s;124pkt 124fpkt", shape=diamond, color=yellow];
1046[label="144.134.216.42;d;94pkt 94fpkt", shape=diamond, color=yellow];
1126[label="144.135.245.29;d;33pkt 33fpkt", shape=diamond, color=yellow];
1134[label="37.26.194.1;s;94pkt 94fpkt", shape=diamond, color=yellow];
1252[label="37.26.196.76;s;78pkt 78fpkt", shape=diamond, color=yellow];
1283[label="90.149.187.5;s;3pkt 3fpkt", shape=diamond, color=yellow];
1287[label="36.58.100.172;s;16pkt 16fpkt", shape=diamond, color=yellow];
1376[label="36.58.107.208;s;100pkt 100fpkt", shape=diamond, color=yellow];
1399[label="144.134.179.124;d;65pkt 65fpkt", shape=diamond, color=yellow];
1405[label="36.58.90.156;s;44pkt 44fpkt", shape=diamond, color=yellow];
1706[label="36.58.100.169;s;36pkt 36fpkt", shape=hexagon, color=black];
1708[label="144.134.216.42;d;92pkt 92fpkt", shape=hexagon, color=black];
1812[label="144.135.245.29;d;33pkt 33fpkt", shape=hexagon, color=black];
1891[label="90.149.187.5;s;3pkt 3fpkt", shape=hexagon, color=black];
2017[label="37.26.194.1;99pkt 99fpkt", shape=pentagon, color=darkviolet];
2043[label="90.149.187.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2126[label="194.185.117.19;61pkt 61fpkt", shape=pentagon, color=darkviolet];
2304[label="36.58.100.43;158pkt 158fpkt", shape=pentagon, color=darkviolet];
2490[label="37.26.198.69;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2625[label="204.57.125.89;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2773[label="213.86.173.113;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2833[label="213.86.172.122;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3037[label="36.58.90.156;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3108[label="36.58.100.169;61pkt 61fpkt", shape=pentagon, color=darkviolet];
3548[label="213.28.150.250;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3582[label="37.26.194.1;99pkt 99fpkt", shape=invtriangle, color=brown];
3634[label="194.185.117.19;61pkt 61fpkt", shape=invtriangle, color=brown];
3709[label="36.58.100.43;157pkt 157fpkt", shape=invtriangle, color=brown];
3917[label="213.86.173.113;43pkt 43fpkt", shape=invtriangle, color=brown];
4035[label="36.58.90.156;55pkt 55fpkt", shape=invtriangle, color=brown];
4289[label="37.26.194.1;98pkt 98fpkt", shape=invhouse, color=bisque];
4347[label="36.58.100.43;158pkt 158fpkt", shape=invhouse, color=bisque];
4511[label="36.58.90.156;55pkt 55fpkt", shape=invhouse, color=bisque];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[82.8983%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.4886%)&lt;BR/&gt; 443: (3.73672%)&lt;BR/&gt; 53: (0.569044%)&lt;BR/&gt; 1863: (0.417299%)&lt;BR/&gt; 445: (0.341426%)&gt;];
}
764--1252[label="0.39726;29pkt 29fpkt"];
764--1376[label="0.0821918;6pkt 6fpkt"];
764--1461[label="0.0136986;1pkt 1fpkt"];
764--2833[label="0.047619;3pkt 3fpkt"];
850--865[label="0.00571429;1pkt 1fpkt"];
850--1012[label="0.0117647;1pkt 1fpkt"];
850--1087[label="0.00943396;1pkt 1fpkt"];
850--1134[label="0.244681;23pkt 23fpkt"];
850--1287[label="0.875;14pkt 14fpkt"];
850--1376[label="0.1;10pkt 10fpkt"];
850--1380[label="0.0217391;2pkt 2fpkt"];
850--1553[label="0.0114286;2pkt 2fpkt"];
850--1755[label="0.0114286;2pkt 2fpkt"];
850--1811[label="0.06;6pkt 6fpkt"];
850--1965[label="0.00571429;1pkt 1fpkt"];
850--1980[label="0.00571429;1pkt 1fpkt"];
850--2017[label="0.232323;23pkt 23fpkt"];
850--2135[label="0.115385;6pkt 6fpkt"];
850--2351[label="0.0114286;2pkt 2fpkt"];
850--2625[label="0.384615;10pkt 10fpkt"];
850--2748[label="0.0934579;10pkt 10fpkt"];
850--2773[label="0.116279;5pkt 5fpkt"];
850--2959[label="0.0105263;1pkt 1fpkt"];
850--3049[label="0.235294;4pkt 4fpkt"];
850--3072[label="0.00571429;1pkt 1fpkt"];
850--3453[label="0.333333;1pkt 1fpkt"];
850--3572[label="0.00571429;1pkt 1fpkt"];
850--3582[label="0.232323;23pkt 23fpkt"];
850--3912[label="0.0943396;10pkt 10fpkt"];
850--3917[label="0.116279;5pkt 5fpkt"];
850--4285[label="0.00571429;1pkt 1fpkt"];
850--4289[label="0.234694;23pkt 23fpkt"];
850--4454[label="0.0934579;10pkt 10fpkt"];
850--4629[label="0.00571429;1pkt 1fpkt"];
920--933[label="0.166667;6pkt 6fpkt"];
920--996[label="0.166667;6pkt 6fpkt"];
920--1638[label="0.138889;5pkt 5fpkt"];
920--1706[label="1;36pkt 36fpkt"];
920--1929[label="0.138889;5pkt 5fpkt"];
920--3108[label="1;36pkt 36fpkt"];
921--1134[label="0.0851064;4pkt 4fpkt"];
921--1361[label="0.0212766;1pkt 1fpkt"];
921--1377[label="0.0652174;3pkt 3fpkt"];
921--1877[label="0.0652174;3pkt 3fpkt"];
921--2017[label="0.0851064;4pkt 4fpkt"];
921--2163[label="0.0212766;1pkt 1fpkt"];
921--2304[label="0.361702;17pkt 17fpkt"];
921--2490[label="0.047619;2pkt 2fpkt"];
921--2795[label="0.0357143;1pkt 1fpkt"];
921--3057[label="0.0212766;1pkt 1fpkt"];
921--3072[label="0.0851064;4pkt 4fpkt"];
921--3108[label="0.191489;9pkt 9fpkt"];
921--3582[label="0.0851064;4pkt 4fpkt"];
921--3709[label="0.361702;17pkt 17fpkt"];
921--4289[label="0.0851064;4pkt 4fpkt"];
921--4347[label="0.361702;17pkt 17fpkt"];
933--1045[label="0.559524;47pkt 47fpkt"];
933--1361[label="0.0119048;1pkt 1fpkt"];
933--1397[label="0.0952381;6pkt 6fpkt"];
933--1614[label="0.0357143;3pkt 3fpkt"];
933--1706[label="0.166667;6pkt 6fpkt"];
933--1755[label="0.0238095;2pkt 2fpkt"];
933--2163[label="0.0119048;1pkt 1fpkt"];
933--2304[label="0.559524;47pkt 47fpkt"];
933--2490[label="0.0714286;3pkt 3fpkt"];
933--2545[label="0.08;6pkt 6fpkt"];
933--2582[label="0.0512821;2pkt 2fpkt"];
933--2782[label="0.0294118;2pkt 2fpkt"];
933--2833[label="0.031746;2pkt 2fpkt"];
933--3057[label="0.0147059;1pkt 1fpkt"];
933--3069[label="0.0357143;3pkt 3fpkt"];
933--3108[label="0.0983607;6pkt 6fpkt"];
933--3709[label="0.547619;46pkt 46fpkt"];
933--3817[label="0.08;6pkt 6fpkt"];
933--3922[label="0.0298507;2pkt 2fpkt"];
933--4347[label="0.559524;47pkt 47fpkt"];
933--4401[label="0.0810811;6pkt 6fpkt"];
933--4459[label="0.0294118;2pkt 2fpkt"];
996--1012[label="0.0151515;1pkt 1fpkt"];
996--1045[label="0.606061;40pkt 40fpkt"];
996--1706[label="0.166667;6pkt 6fpkt"];
996--1755[label="0.030303;2pkt 2fpkt"];
996--2068[label="0.0363636;2pkt 2fpkt"];
996--2304[label="0.606061;40pkt 40fpkt"];
996--2959[label="0.0151515;1pkt 1fpkt"];
996--3072[label="0.0454545;3pkt 3fpkt"];
996--3108[label="0.0983607;6pkt 6fpkt"];
996--3548[label="0.25;1pkt 1fpkt"];
996--3709[label="0.606061;40pkt 40fpkt"];
996--4347[label="0.606061;40pkt 40fpkt"];
1045--2304[label="1;124pkt 124fpkt"];
1045--3709[label="0.991935;123pkt 123fpkt"];
1045--4347[label="1;124pkt 124fpkt"];
1046--1283[label="1;3pkt 3fpkt"];
1046--1287[label="0.125;2pkt 2fpkt"];
1046--1376[label="0.0106383;1pkt 1fpkt"];
1046--1708[label="1;92pkt 92fpkt"];
1046--1891[label="1;3pkt 3fpkt"];
1046--2043[label="1;2pkt 2fpkt"];
1046--2126[label="1;61pkt 61fpkt"];
1046--2773[label="0.0232558;1pkt 1fpkt"];
1046--3634[label="1;61pkt 61fpkt"];
1046--3917[label="0.0232558;1pkt 1fpkt"];
1126--1134[label="0.0909091;3pkt 3fpkt"];
1126--1376[label="0.181818;6pkt 6fpkt"];
1126--1405[label="0.181818;6pkt 6fpkt"];
1126--1812[label="1;33pkt 33fpkt"];
1126--2017[label="0.0909091;3pkt 3fpkt"];
1126--2582[label="0.030303;1pkt 1fpkt"];
1126--2833[label="0.121212;4pkt 4fpkt"];
1126--2878[label="0.030303;1pkt 1fpkt"];
1126--3037[label="0.424242;14pkt 14fpkt"];
1126--3582[label="0.0909091;3pkt 3fpkt"];
1126--4035[label="0.424242;14pkt 14fpkt"];
1126--4289[label="0.0909091;3pkt 3fpkt"];
1126--4511[label="0.424242;14pkt 14fpkt"];
1134--1236[label="0.0106383;1pkt 1fpkt"];
1134--1451[label="0.117021;11pkt 11fpkt"];
1134--1480[label="0.0106383;1pkt 1fpkt"];
1134--1493[label="0.0126582;1pkt 1fpkt"];
1134--1536[label="0.0106383;1pkt 1fpkt"];
1134--1541[label="0.0106383;1pkt 1fpkt"];
1134--1567[label="0.0106383;1pkt 1fpkt"];
1134--1638[label="0.0212766;2pkt 2fpkt"];
1134--1639[label="0.0319149;3pkt 3fpkt"];
1134--1644[label="0.0106383;1pkt 1fpkt"];
1134--1654[label="0.0151515;1pkt 1fpkt"];
1134--1694[label="0.0106383;1pkt 1fpkt"];
1134--1702[label="0.0319149;3pkt 3fpkt"];
1134--1776[label="0.025;1pkt 1fpkt"];
1134--1812[label="0.0909091;3pkt 3fpkt"];
1134--1908[label="0.117021;11pkt 11fpkt"];
1134--1929[label="0.0212766;2pkt 2fpkt"];
1134--1965[label="0.0212766;2pkt 2fpkt"];
1134--1980[label="0.0212766;2pkt 2fpkt"];
1134--2017[label="1;94pkt 94fpkt"];
1134--3582[label="1;94pkt 94fpkt"];
1134--4289[label="0.989362;93pkt 93fpkt"];
1252--1291[label="0.0350877;2pkt 2fpkt"];
1252--1351[label="0.0714286;2pkt 2fpkt"];
1252--1407[label="0.0487805;2pkt 2fpkt"];
1252--1451[label="0.0897436;7pkt 7fpkt"];
1252--1551[label="0.025641;2pkt 2fpkt"];
1252--1567[label="0.025641;2pkt 2fpkt"];
1252--1581[label="0.025641;2pkt 2fpkt"];
1252--1630[label="0.025641;2pkt 2fpkt"];
1252--1638[label="0.025641;2pkt 2fpkt"];
1252--1644[label="0.0128205;1pkt 1fpkt"];
1252--1694[label="0.0128205;1pkt 1fpkt"];
1252--1776[label="0.025;1pkt 1fpkt"];
1252--1908[label="0.0897436;7pkt 7fpkt"];
1252--1929[label="0.025641;2pkt 2fpkt"];
1252--1965[label="0.0128205;1pkt 1fpkt"];
1252--1980[label="0.0128205;1pkt 1fpkt"];
1283--1708[label="0.666667;2pkt 2fpkt"];
1283--1891[label="1;3pkt 3fpkt"];
1283--2043[label="1;2pkt 2fpkt"];
1287--1708[label="0.125;2pkt 2fpkt"];
1376--1451[label="0.03;3pkt 3fpkt"];
1376--1469[label="0.04;4pkt 4fpkt"];
1376--1638[label="0.06;6pkt 6fpkt"];
1376--1644[label="0.02;2pkt 2fpkt"];
1376--1708[label="0.0108696;1pkt 1fpkt"];
1376--1812[label="0.181818;6pkt 6fpkt"];
1376--1831[label="0.06;6pkt 6fpkt"];
1376--1908[label="0.03;3pkt 3fpkt"];
1376--1929[label="0.05;5pkt 5fpkt"];
1376--1955[label="0.06;6pkt 6fpkt"];
1376--1965[label="0.04;4pkt 4fpkt"];
1376--1980[label="0.04;4pkt 4fpkt"];
1399--1405[label="0.0454545;2pkt 2fpkt"];
1399--1741[label="0.0307692;2pkt 2fpkt"];
1399--2203[label="0.0625;2pkt 2fpkt"];
1399--3037[label="0.0545455;3pkt 3fpkt"];
1399--3462[label="0.0571429;2pkt 2fpkt"];
1399--3544[label="0.0188679;1pkt 1fpkt"];
1399--4035[label="0.0545455;3pkt 3fpkt"];
1399--4511[label="0.0545455;3pkt 3fpkt"];
1405--1812[label="0.181818;6pkt 6fpkt"];
1405--3037[label="1;44pkt 44fpkt"];
1405--4035[label="1;44pkt 44fpkt"];
1405--4511[label="1;44pkt 44fpkt"];
1706--1929[label="0.138889;5pkt 5fpkt"];
1706--3108[label="1;36pkt 36fpkt"];
1708--1891[label="0.666667;2pkt 2fpkt"];
1708--2043[label="0.5;1pkt 1fpkt"];
1708--2126[label="1;61pkt 61fpkt"];
1708--2773[label="0.0232558;1pkt 1fpkt"];
1708--3634[label="1;61pkt 61fpkt"];
1708--3917[label="0.0232558;1pkt 1fpkt"];
1812--2017[label="0.0909091;3pkt 3fpkt"];
1812--2582[label="0.030303;1pkt 1fpkt"];
1812--2833[label="0.121212;4pkt 4fpkt"];
1812--2878[label="0.030303;1pkt 1fpkt"];
1812--3037[label="0.424242;14pkt 14fpkt"];
1812--3582[label="0.0909091;3pkt 3fpkt"];
1812--4035[label="0.424242;14pkt 14fpkt"];
1812--4289[label="0.0909091;3pkt 3fpkt"];
1812--4511[label="0.424242;14pkt 14fpkt"];
1891--2043[label="1;2pkt 2fpkt"];
2017--3582[label="1;99pkt 99fpkt"];
2017--4289[label="1;98pkt 98fpkt"];
2126--3634[label="1;61pkt 61fpkt"];
2304--3709[label="1;157pkt 157fpkt"];
2304--4347[label="1;158pkt 158fpkt"];
2773--3917[label="1;43pkt 43fpkt"];
3037--4035[label="1;55pkt 55fpkt"];
3037--4511[label="1;55pkt 55fpkt"];
3582--4289[label="1;98pkt 98fpkt"];
3709--4347[label="1;157pkt 157fpkt"];
4035--4511[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.69.82.44"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.168.44"/>
    </slice>
    <from sec="1078290111" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.170.204.44"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.188.244.44"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.42.244.45"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
56[label="192.102.2.46s;179pkt 179fpkt", shape=rectangle, color=red];
2329[label="192.102.2.46;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.102.2.46:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
56--2329[label="0.994413;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.102.2.46" src_port="1032"/>
    </slice>
    <from sec="1078290625" usec="0"/>
    <to sec="1078290640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.81.186.46"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.3.1.47"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.57.16.47"/>
    </slice>
    <from sec="1078290101" usec="0"/>
    <to sec="1078290497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.37.155.47"/>
    </slice>
    <from sec="1078290816" usec="0"/>
    <to sec="1078290840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.9.48"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.72.191.48"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.140.191.48"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.35.241.49"/>
    </slice>
    <from sec="1078290602" usec="0"/>
    <to sec="1078290632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.13.88.50"/>
    </slice>
    <from sec="1078290023" usec="0"/>
    <to sec="1078290894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
8[label="144.135.136.51s;2pkt 2fpkt", shape=rectangle, color=red];
2362[label="144.135.136.51;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.136.51:1024, *:53}[78.2609%]&lt;BR/&gt;{144.135.136.51:*, *:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (36%)&lt;BR/&gt; 53: (36%)&lt;BR/&gt; 80: (14%)&lt;BR/&gt; 2476: (4%)&lt;BR/&gt; 2470: (4%)&gt;];
}
8--2362[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="144.135.136.51"/>
      <filter dst_port="53" src_ip="144.135.136.51" src_port="1024"/>
    </slice>
    <from sec="1078290073" usec="0"/>
    <to sec="1078290561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
307[label="131.6.176.6;d;148pkt 148fpkt", shape=diamond, color=yellow];
308[label="209.133.162.112;s;11pkt 11fpkt", shape=diamond, color=yellow];
337[label="209.122.77.237;s;239pkt 239fpkt", shape=diamond, color=yellow];
660[label="131.6.86.23;d;144pkt 144fpkt", shape=diamond, color=yellow];
1181[label="209.133.162.116;s;6pkt 6fpkt", shape=diamond, color=yellow];
1275[label="213.221.22.51;s;9pkt 9fpkt", shape=diamond, color=yellow];
2283[label="213.132.15.41;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2770[label="209.133.162.112;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3486[label="209.122.77.237;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3699[label="213.132.15.41;14pkt 14fpkt", shape=invtriangle, color=brown];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.122.77.237:80, 131.6.176.6:*}[42.9967%]&lt;BR/&gt;{209.122.77.237:80, 131.6.86.23:*}[35.8306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.75%)&lt;BR/&gt; 443: (2.75%)&lt;BR/&gt; 3556: (0.416667%)&lt;BR/&gt; 4117: (0.333333%)&lt;BR/&gt; 3586: (0.333333%)&gt;];
}
307--308[label="1;11pkt 11fpkt"];
307--337[label="0.878378;130pkt 130fpkt"];
307--1181[label="1;6pkt 6fpkt"];
307--1965[label="0.108108;16pkt 16fpkt"];
307--1980[label="0.108108;16pkt 16fpkt"];
307--2770[label="1;11pkt 11fpkt"];
308--1965[label="0.0909091;1pkt 1fpkt"];
308--1980[label="0.0909091;1pkt 1fpkt"];
308--2770[label="1;11pkt 11fpkt"];
337--660[label="0.756944;109pkt 109fpkt"];
337--1965[label="0.0627615;15pkt 15fpkt"];
337--1980[label="0.0627615;15pkt 15fpkt"];
337--3486[label="0.25;1pkt 1fpkt"];
660--1228[label="0.142857;1pkt 1fpkt"];
660--1275[label="0.777778;7pkt 7fpkt"];
660--1290[label="0.5;1pkt 1fpkt"];
660--2283[label="0.285714;4pkt 4fpkt"];
660--2917[label="0.142857;1pkt 1fpkt"];
660--3486[label="0.25;1pkt 1fpkt"];
660--3699[label="0.285714;4pkt 4fpkt"];
2283--3699[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.176.6" src_ip="209.122.77.237" src_port="80"/>
      <filter dst_ip="131.6.86.23" src_ip="209.122.77.237" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.1.215.52"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.220.25.53"/>
    </slice>
    <from sec="1078290201" usec="0"/>
    <to sec="1078290236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
874[label="208.158.44.53;s;117pkt 117fpkt", shape=diamond, color=yellow];
934[label="204.13.195.37;d;69pkt 69fpkt", shape=diamond, color=yellow];
1016[label="208.158.37.86;s;124pkt 124fpkt", shape=diamond, color=yellow];
1253[label="209.117.91.85;s;65pkt 65fpkt", shape=diamond, color=yellow];
1713[label="204.13.195.37;d;66pkt 66fpkt", shape=hexagon, color=black];
2371[label="208.158.44.53;133pkt 133fpkt", shape=pentagon, color=darkviolet];
2599[label="209.117.91.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2864[label="208.158.59.129;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.158.44.53:0, *:0}[26.9388%]&lt;BR/&gt;{208.158.37.86:0, *:0}[25.102%]&lt;BR/&gt;{208.158.59.129:*, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.9604%)&lt;BR/&gt; 554: (8.95742%)&lt;BR/&gt; 53: (6.24082%)&lt;BR/&gt; 40922: (3.37739%)&lt;BR/&gt; 25: (0.954479%)&gt;];
}
874--934[label="0.0289855;2pkt 2fpkt"];
874--1713[label="0.030303;2pkt 2fpkt"];
874--2371[label="1;117pkt 117fpkt"];
934--1016[label="0.0289855;2pkt 2fpkt"];
934--1253[label="0.0153846;1pkt 1fpkt"];
934--1713[label="1;66pkt 66fpkt"];
934--2371[label="0.0289855;2pkt 2fpkt"];
934--2504[label="0.030303;1pkt 1fpkt"];
934--2864[label="0.0144928;1pkt 1fpkt"];
1016--1713[label="0.030303;2pkt 2fpkt"];
1253--2599[label="1;2pkt 2fpkt"];
1713--2371[label="0.030303;2pkt 2fpkt"];
1713--2504[label="0.030303;1pkt 1fpkt"];
1713--2864[label="0.0151515;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.158.59.129"/>
      <filter src_ip="208.158.44.53"/>
      <filter src_ip="208.158.37.86"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.26.174.53"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.232.202.53"/>
    </slice>
    <from sec="1078290253" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.170.109.54"/>
    </slice>
    <from sec="1078290804" usec="0"/>
    <to sec="1078290874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.76.163.54"/>
    </slice>
    <from sec="1078290448" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.40.250.55"/>
    </slice>
    <from sec="1078290543" usec="0"/>
    <to sec="1078290809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.36.113.57"/>
    </slice>
    <from sec="1078290704" usec="0"/>
    <to sec="1078290769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.164.22.58"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.41.44.58"/>
    </slice>
    <from sec="1078290472" usec="0"/>
    <to sec="1078290621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.188.66.58"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.218.136.59"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.189.196.59"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.46.59.60"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.56.114.60"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.162.215.60"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.58.79.61"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.233.154.61"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.14.2.62"/>
    </slice>
    <from sec="1078290239" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
252[label="172.131.145.63;s;5763pkt 5763fpkt", shape=diamond, color=yellow];
1496[label="172.131.145.63;s;2666pkt 2666fpkt", shape=hexagon, color=black];
2437[label="172.131.145.63;6293pkt 6293fpkt", shape=pentagon, color=darkviolet];
3771[label="172.131.145.63;6293pkt 6293fpkt", shape=invtriangle, color=brown];
4378[label="172.131.145.63;6293pkt 6293fpkt", shape=invhouse, color=bisque];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.131.145.63:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3191: (0.0640838%)&lt;BR/&gt; 1101: (0.0604219%)&lt;BR/&gt; 3190: (0.0567599%)&lt;BR/&gt; 2315: (0.054929%)&gt;];
}
252--1496[label="1;2666pkt 2666fpkt"];
252--1967[label="0.0652438;376pkt 376fpkt"];
252--1971[label="0.0633351;365pkt 365fpkt"];
252--1981[label="0.0652438;376pkt 376fpkt"];
252--1983[label="0.0633351;365pkt 365fpkt"];
252--1991[label="0.0652438;376pkt 376fpkt"];
252--1992[label="0.0633351;365pkt 365fpkt"];
252--2437[label="0.999826;5762pkt 5762fpkt"];
252--3771[label="0.999826;5762pkt 5762fpkt"];
252--4378[label="0.999826;5762pkt 5762fpkt"];
1496--1967[label="0.141035;376pkt 376fpkt"];
1496--1981[label="0.141035;376pkt 376fpkt"];
1496--1991[label="0.141035;376pkt 376fpkt"];
1496--2437[label="0.999625;2665pkt 2665fpkt"];
1496--3771[label="0.999625;2665pkt 2665fpkt"];
1496--4378[label="0.999625;2665pkt 2665fpkt"];
2437--3771[label="1;6293pkt 6293fpkt"];
2437--4378[label="1;6293pkt 6293fpkt"];
3771--4378[label="1;6293pkt 6293fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.131.145.63"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.53.184.63"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.13.11.64"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.208.174.64"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.227.204.64"/>
    </slice>
    <from sec="1078290229" usec="0"/>
    <to sec="1078290675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
67[label="90.211.232.64s;208pkt 208fpkt", shape=rectangle, color=red];
2445[label="90.211.232.64;248pkt 248fpkt", shape=pentagon, color=darkviolet];
3777[label="90.211.232.64;248pkt 248fpkt", shape=invtriangle, color=brown];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.211.232.64:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
67--2445[label="1;208pkt 208fpkt"];
67--3777[label="1;208pkt 208fpkt"];
2445--3777[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.211.232.64" src_port="1026"/>
    </slice>
    <from sec="1078290691" usec="0"/>
    <to sec="1078290709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.228.45.65"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.82.49.67"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.54.3.68"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.68"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.135.10.69"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.237.6.70"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.78.23.70"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.1.129.70"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.8.8.71"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.132.38.71"/>
    </slice>
    <from sec="1078290050" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.181.94.71"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.242.166.72"/>
    </slice>
    <from sec="1078290267" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.202.179.72"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
71[label="90.144.9.73s;83pkt 83fpkt", shape=rectangle, color=red];
2514[label="90.144.9.73;197pkt 197fpkt", shape=pentagon, color=darkviolet];
3807[label="90.144.9.73;196pkt 196fpkt", shape=invtriangle, color=brown];
4394[label="90.144.9.73;197pkt 197fpkt", shape=invhouse, color=bisque];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.144.9.73:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
71--2514[label="1;83pkt 83fpkt"];
71--3807[label="0.987952;82pkt 82fpkt"];
71--4394[label="1;83pkt 83fpkt"];
2514--3807[label="1;196pkt 196fpkt"];
2514--4394[label="1;197pkt 197fpkt"];
3807--4394[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.144.9.73" src_port="1034"/>
    </slice>
    <from sec="1078290137" usec="0"/>
    <to sec="1078290151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
72[label="39.1.204.73s;107pkt 107fpkt", shape=rectangle, color=red];
2515[label="39.1.204.73;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3808[label="39.1.204.73;251pkt 251fpkt", shape=invtriangle, color=brown];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.1.204.73:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
72--2515[label="1;107pkt 107fpkt"];
72--3808[label="1;107pkt 107fpkt"];
2515--3808[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.1.204.73" src_port="1036"/>
    </slice>
    <from sec="1078290812" usec="0"/>
    <to sec="1078290827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.135.8.74"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.25.29.74"/>
    </slice>
    <from sec="1078290101" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.113.75.74"/>
    </slice>
    <from sec="1078290034" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.148.74"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.217.157.74"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.80.14.75"/>
    </slice>
    <from sec="1078290366" usec="0"/>
    <to sec="1078290389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
73[label="204.98.186.76s;224pkt 224fpkt", shape=rectangle, color=red];
2531[label="204.98.186.76;256pkt 256fpkt", shape=pentagon, color=darkviolet];
3812[label="204.98.186.76;255pkt 255fpkt", shape=invtriangle, color=brown];
4397[label="204.98.186.76;255pkt 255fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.98.186.76:1049, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1049: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
73--2531[label="1;224pkt 224fpkt"];
73--3812[label="0.995536;223pkt 223fpkt"];
73--4397[label="0.995536;223pkt 223fpkt"];
2531--3812[label="1;255pkt 255fpkt"];
2531--4397[label="1;255pkt 255fpkt"];
3812--4397[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.98.186.76" src_port="1049"/>
    </slice>
    <from sec="1078290695" usec="0"/>
    <to sec="1078290709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.195.76"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.10.102.77"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.157.117.77"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.148.77"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.58.81.78"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.78"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.203.118.79"/>
    </slice>
    <from sec="1078290093" usec="0"/>
    <to sec="1078290691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.148.79"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.204.182.79"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.113.194.80"/>
    </slice>
    <from sec="1078290456" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.162.54.81"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.177.181.81"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.158.37.84"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.141.84"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.162.192.84"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.159.194.85"/>
    </slice>
    <from sec="1078290856" usec="0"/>
    <to sec="1078290884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.238.102.86"/>
    </slice>
    <from sec="1078290356" usec="0"/>
    <to sec="1078290384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
440[label="197.6.139.87;s;2928pkt 2928fpkt", shape=diamond, color=yellow];
946[label="148.218.138.150;d;740pkt 740fpkt", shape=diamond, color=yellow];
957[label="148.218.239.237;d;718pkt 718fpkt", shape=diamond, color=yellow];
1075[label="172.223.165.255;d;687pkt 687fpkt", shape=diamond, color=yellow];
1108[label="148.143.80.74;d;701pkt 701fpkt", shape=diamond, color=yellow];
1117[label="148.66.201.36;d;660pkt 660fpkt", shape=diamond, color=yellow];
1209[label="194.196.80.109;s;510pkt 510fpkt", shape=diamond, color=yellow];
2612[label="197.6.139.87;3204pkt 3204fpkt", shape=pentagon, color=darkviolet];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.6.139.87:80, *:*}[35.5632%]&lt;BR/&gt;{197.6.139.87:8011, *:*}[21.8667%]&lt;BR/&gt;{*:*, 148.218.138.150:*}[20.862%]&lt;BR/&gt;{*:*, 148.218.239.237:*}[20.6504%]&lt;BR/&gt;{*:*, 148.143.80.74:*}[20.1216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.8559%)&lt;BR/&gt; 8011: (11.6328%)&lt;BR/&gt; 8008: (9.50434%)&lt;BR/&gt; 8889: (5.18329%)&lt;BR/&gt; 8021: (4.80883%)&gt;];
}
440--946[label="0.816216;604pkt 604fpkt"];
440--957[label="0.845404;607pkt 607fpkt"];
440--1075[label="0.838428;576pkt 576fpkt"];
440--1108[label="0.85592;600pkt 600fpkt"];
440--1117[label="0.819697;541pkt 541fpkt"];
440--1965[label="0.0256148;75pkt 75fpkt"];
440--1967[label="0.00034153;1pkt 1fpkt"];
440--1980[label="0.0256148;75pkt 75fpkt"];
440--1981[label="0.00034153;1pkt 1fpkt"];
440--1991[label="0.00034153;1pkt 1fpkt"];
440--2612[label="1;2928pkt 2928fpkt"];
946--1209[label="0.221569;113pkt 113fpkt"];
946--1965[label="0.022973;17pkt 17fpkt"];
946--1980[label="0.022973;17pkt 17fpkt"];
946--2612[label="0.816216;604pkt 604fpkt"];
957--1209[label="0.194118;99pkt 99fpkt"];
957--1965[label="0.0181058;13pkt 13fpkt"];
957--1967[label="0.00139276;1pkt 1fpkt"];
957--1980[label="0.0181058;13pkt 13fpkt"];
957--1981[label="0.00139276;1pkt 1fpkt"];
957--1991[label="0.00139276;1pkt 1fpkt"];
957--2612[label="0.845404;607pkt 607fpkt"];
1075--1209[label="0.194118;99pkt 99fpkt"];
1075--1463[label="0.0014556;1pkt 1fpkt"];
1075--1965[label="0.014556;10pkt 10fpkt"];
1075--1980[label="0.014556;10pkt 10fpkt"];
1075--2612[label="0.838428;576pkt 576fpkt"];
1108--1209[label="0.184314;94pkt 94fpkt"];
1108--1965[label="0.0313837;22pkt 22fpkt"];
1108--1980[label="0.0313837;22pkt 22fpkt"];
1108--2612[label="0.85592;600pkt 600fpkt"];
1108--2974[label="0.00142653;1pkt 1fpkt"];
1117--1209[label="0.205882;105pkt 105fpkt"];
1117--1965[label="0.0227273;15pkt 15fpkt"];
1117--1980[label="0.0227273;15pkt 15fpkt"];
1117--2612[label="0.819697;541pkt 541fpkt"];
1117--2845[label="0.00398406;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.218.138.150"/>
      <filter dst_ip="148.218.239.237"/>
      <filter dst_ip="148.143.80.74"/>
      <filter src_ip="197.6.139.87" src_port="80"/>
      <filter src_ip="197.6.139.87" src_port="8011"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.148.87"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.129.8.88"/>
    </slice>
    <from sec="1078290491" usec="0"/>
    <to sec="1078290882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.106.136.89"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.48.157.89"/>
    </slice>
    <from sec="1078290380" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.104.229.91"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.48.8.92"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.41.24.92"/>
    </slice>
    <from sec="1078290450" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.11.150.92"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
76[label="209.61.162.93s;179pkt 179fpkt", shape=rectangle, color=red];
2653[label="209.61.162.93;250pkt 250fpkt", shape=pentagon, color=darkviolet];
3862[label="209.61.162.93;249pkt 249fpkt", shape=invtriangle, color=brown];
4427[label="209.61.162.93;249pkt 249fpkt", shape=invhouse, color=bisque];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.61.162.93:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
76--2653[label="1;179pkt 179fpkt"];
76--3862[label="0.994413;178pkt 178fpkt"];
76--4427[label="0.994413;178pkt 178fpkt"];
2653--3862[label="1;249pkt 249fpkt"];
2653--4427[label="1;249pkt 249fpkt"];
3862--4427[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.61.162.93" src_port="1027"/>
    </slice>
    <from sec="1078290467" usec="0"/>
    <to sec="1078290484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.148.170.93"/>
    </slice>
    <from sec="1078290523" usec="0"/>
    <to sec="1078290539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.94"/>
    </slice>
    <from sec="1078290013" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.185.8.95"/>
    </slice>
    <from sec="1078290109" usec="0"/>
    <to sec="1078290804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.45.71.95"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.162.129.95"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.218.136.95"/>
    </slice>
    <from sec="1078290010" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.148.96"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.216.70.99"/>
    </slice>
    <from sec="1078290297" usec="0"/>
    <to sec="1078290894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.202.113.99"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.210.27.101"/>
    </slice>
    <from sec="1078290075" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.107.34.101"/>
    </slice>
    <from sec="1078290037" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.216.80.102"/>
    </slice>
    <from sec="1078290050" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
80[label="220.4.144.102s;106pkt 106fpkt", shape=rectangle, color=red];
2713[label="220.4.144.102;228pkt 228fpkt", shape=pentagon, color=darkviolet];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.4.144.102:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
80--2713[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.4.144.102" src_port="1027"/>
    </slice>
    <from sec="1078290054" usec="0"/>
    <to sec="1078290096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1120[label="33.193.93.103;s;206pkt 206fpkt", shape=diamond, color=yellow];
2715[label="33.193.93.103;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.193.93.103:*, *:1080}[33.4646%]&lt;BR/&gt;{33.193.93.103:*, *:3128}[33.4646%]&lt;BR/&gt;{33.193.93.103:*, *:3127}[33.0709%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7391%)&lt;BR/&gt; 1080: (16.7391%)&lt;BR/&gt; 3127: (16.5217%)&lt;BR/&gt; 4524: (0.434783%)&lt;BR/&gt; 4161: (0.434783%)&gt;];
}
1120--2715[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="33.193.93.103"/>
      <filter dst_port="1080" src_ip="33.193.93.103"/>
      <filter dst_port="3127" src_ip="33.193.93.103"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.202.104.103"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.128.215.103"/>
    </slice>
    <from sec="1078290369" usec="0"/>
    <to sec="1078290606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1243[label="219.49.233.172;d;2pkt 2fpkt", shape=diamond, color=yellow];
2721[label="144.135.205.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.205.104:0, 219.49.233.172:0}[50%]&lt;BR/&gt;{144.135.68.219:0, 219.49.233.172:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1243--2721[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.49.233.172" src_ip="144.135.68.219"/>
      <filter dst_ip="219.49.233.172" src_ip="144.135.205.104"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.137.29.107"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
1255[label="144.135.131.107;s;7pkt 7fpkt", shape=diamond, color=yellow];
2738[label="144.135.131.107;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.131.107:80, 33.162.161.249:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56725: (7.14286%)&lt;BR/&gt; 55040: (7.14286%)&lt;BR/&gt; 44452: (7.14286%)&lt;BR/&gt; 41808: (7.14286%)&gt;];
}
1255--2738[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="33.162.161.249" src_ip="144.135.131.107" src_port="80"/>
    </slice>
    <from sec="1078290022" usec="0"/>
    <to sec="1078290802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.22.116.108"/>
    </slice>
    <from sec="1078290024" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.22.112.109"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.102.91.110"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.205.110"/>
    </slice>
    <from sec="1078290607" usec="0"/>
    <to sec="1078290617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.44.252.110"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.56.32.111"/>
    </slice>
    <from sec="1078290010" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.208.137.111"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.96.15.112"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.145.53.112"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.86.169.112"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.197.112"/>
    </slice>
    <from sec="1078290080" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.67.88.114"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1364[label="131.6.177.114;d;26pkt 26fpkt", shape=diamond, color=yellow];
1438[label="90.203.127.114;s;2pkt 2fpkt", shape=diamond, color=yellow];
2777[label="90.203.127.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3920[label="90.203.127.114;2pkt 2fpkt", shape=invtriangle, color=brown];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.203.126.35:80, 131.6.177.114:*}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 51201: (7.8125%)&lt;BR/&gt; 51200: (7.8125%)&lt;BR/&gt; 17789: (6.25%)&lt;BR/&gt; 17788: (6.25%)&gt;];
}
1364--1438[label="1;2pkt 2fpkt"];
1364--1965[label="0.0384615;1pkt 1fpkt"];
1364--1980[label="0.0384615;1pkt 1fpkt"];
1364--2777[label="1;2pkt 2fpkt"];
1364--3920[label="1;2pkt 2fpkt"];
1438--2777[label="1;2pkt 2fpkt"];
1438--3920[label="1;2pkt 2fpkt"];
2777--3920[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.177.114" src_ip="90.203.126.35" src_port="80"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.40.254.114"/>
    </slice>
    <from sec="1078290440" usec="0"/>
    <to sec="1078290454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
84[label="194.232.230.115s;143pkt 143fpkt", shape=rectangle, color=red];
2787[label="194.232.230.115;234pkt 234fpkt", shape=pentagon, color=darkviolet];
3927[label="194.232.230.115;233pkt 233fpkt", shape=invtriangle, color=brown];
4463[label="194.232.230.115;233pkt 233fpkt", shape=invhouse, color=bisque];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.232.230.115:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
84--2787[label="1;143pkt 143fpkt"];
84--3927[label="1;143pkt 143fpkt"];
84--4463[label="1;143pkt 143fpkt"];
2787--3927[label="1;233pkt 233fpkt"];
2787--4463[label="1;233pkt 233fpkt"];
3927--4463[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.232.230.115" src_port="1029"/>
    </slice>
    <from sec="1078290293" usec="0"/>
    <to sec="1078290307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.79.231.115"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.133.162.116"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.150.141.117"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.117"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.72.160.117"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.214.2.118"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.171.15.119"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
1312[label="33.107.177.119;s;187pkt 187fpkt", shape=diamond, color=yellow];
2813[label="33.107.177.119;202pkt 202fpkt", shape=pentagon, color=darkviolet];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.107.177.119:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4956: (0.514139%)&lt;BR/&gt; 4863: (0.514139%)&lt;BR/&gt; 4664: (0.514139%)&lt;BR/&gt; 4393: (0.514139%)&gt;];
}
1312--2813[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.107.177.119"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.53.102.120"/>
    </slice>
    <from sec="1078290022" usec="0"/>
    <to sec="1078290883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.171.115.120"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
2823[label="36.194.66.121;98pkt 98fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.194.66.121:*, *:3127}[98.9796%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (49.4898%)&lt;BR/&gt; 4826: (1.02041%)&lt;BR/&gt; 2993: (1.02041%)&lt;BR/&gt; 1200: (1.02041%)&lt;BR/&gt; 4894: (0.510204%)&gt;];
}
</description>
    <slice>
      <filter dst_port="3127" src_ip="36.194.66.121"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.38.167.121"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.182.172.121"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.97.81.123"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.239.128.123"/>
    </slice>
    <from sec="1078290085" usec="0"/>
    <to sec="1078290099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.68.197.123"/>
    </slice>
    <from sec="1078290163" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.34.231.125"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.4.237.125"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.60.33.126"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.134.170.126"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
1311[label="208.32.214.127;s;185pkt 185fpkt", shape=diamond, color=yellow];
2853[label="208.32.214.127;201pkt 201fpkt", shape=pentagon, color=darkviolet];
3955[label="208.32.214.127;200pkt 200fpkt", shape=invtriangle, color=brown];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.32.214.127:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3692: (0.511945%)&lt;BR/&gt; 3200: (0.511945%)&lt;BR/&gt; 1307: (0.511945%)&lt;BR/&gt; 1207: (0.511945%)&gt;];
}
1311--2853[label="1;185pkt 185fpkt"];
1311--3955[label="0.994595;184pkt 184fpkt"];
2853--3955[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="208.32.214.127"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.133.128"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.83.15.129"/>
    </slice>
    <from sec="1078290101" usec="0"/>
    <to sec="1078290126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.66.180.130"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.212.219.130"/>
    </slice>
    <from sec="1078290025" usec="0"/>
    <to sec="1078290879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.30.164.131"/>
    </slice>
    <from sec="1078290465" usec="0"/>
    <to sec="1078290842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
1325[label="90.194.241.131;s;547pkt 547fpkt", shape=diamond, color=yellow];
2879[label="90.194.241.131;594pkt 594fpkt", shape=pentagon, color=darkviolet];
3968[label="90.194.241.131;593pkt 593fpkt", shape=invtriangle, color=brown];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.194.241.131:1045, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1045: (50%)&gt;];
}
1325--2879[label="1;547pkt 547fpkt"];
1325--3968[label="0.998172;546pkt 546fpkt"];
2879--3968[label="1;593pkt 593fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="90.194.241.131" src_port="1045"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.146.28.132"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.148.182.132"/>
    </slice>
    <from sec="1078290120" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.96.20.133"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.139.22.133"/>
    </slice>
    <from sec="1078290012" usec="0"/>
    <to sec="1078290780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.150.134"/>
    </slice>
    <from sec="1078290299" usec="0"/>
    <to sec="1078290682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.149.154.134"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
807[label="172.136.57.197;d;49pkt 49fpkt", shape=diamond, color=yellow];
2901[label="147.22.5.135;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.22.5.135:80, 172.136.57.197:*}[75.5102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49869: (1.17647%)&lt;BR/&gt; 49868: (1.17647%)&lt;BR/&gt; 49867: (1.17647%)&lt;BR/&gt; 49866: (1.17647%)&gt;];
}
807--2901[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.57.197" src_ip="147.22.5.135" src_port="80"/>
    </slice>
    <from sec="1078290244" usec="0"/>
    <to sec="1078290370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702891,1.99469,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
1147[label="172.136.143.2;d;7pkt 7fpkt", shape=diamond, color=yellow];
2906[label="206.146.72.136;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.146.72.136:80, 172.136.143.2:*}[71.4286%]&lt;BR/&gt;{*:1863, 172.136.143.2:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 3480: (8.33333%)&lt;BR/&gt; 3479: (8.33333%)&lt;BR/&gt; 3476: (8.33333%)&lt;BR/&gt; 3475: (8.33333%)&gt;];
}
1147--2906[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.143.2" src_port="1863"/>
      <filter dst_ip="172.136.143.2" src_ip="206.146.72.136" src_port="80"/>
    </slice>
    <from sec="1078290041" usec="0"/>
    <to sec="1078290805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.73.101.136"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.120.1.137"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.68.72.138"/>
    </slice>
    <from sec="1078290393" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.152.192.138"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.150.141.140"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.156.168.140"/>
    </slice>
    <from sec="1078290155" usec="0"/>
    <to sec="1078290182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.180.198.140"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.246.173.141"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.55.238.141"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
89[label="38.234.100.142s;49pkt 49fpkt", shape=rectangle, color=red];
2949[label="38.234.100.142;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4001[label="38.234.100.142;252pkt 252fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.234.100.142:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
89--2949[label="1;49pkt 49fpkt"];
89--4001[label="0.979592;48pkt 48fpkt"];
2949--4001[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.234.100.142" src_port="1030"/>
    </slice>
    <from sec="1078290699" usec="0"/>
    <to sec="1078290716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.53.103.142"/>
    </slice>
    <from sec="1078290027" usec="0"/>
    <to sec="1078290092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.165.193.142"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.227.211.142"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
90[label="195.62.20.144s;51pkt 51fpkt", shape=rectangle, color=red];
2962[label="195.62.20.144;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4005[label="195.62.20.144;254pkt 254fpkt", shape=invtriangle, color=brown];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.62.20.144:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
90--2962[label="1;51pkt 51fpkt"];
90--4005[label="1;51pkt 51fpkt"];
2962--4005[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.62.20.144" src_port="1033"/>
    </slice>
    <from sec="1078290588" usec="0"/>
    <to sec="1078290616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.118.85.144"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.133.144"/>
    </slice>
    <from sec="1078290377" usec="0"/>
    <to sec="1078290475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
121[label="193.181.198.144s;160pkt 160fpkt", shape=rectangle, color=red];
2968[label="193.181.198.144;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.181.198.144:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4435: (0.242131%)&lt;BR/&gt; 4434: (0.242131%)&lt;BR/&gt; 4433: (0.242131%)&lt;BR/&gt; 4432: (0.242131%)&gt;];
}
121--2968[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="193.181.198.144"/>
    </slice>
    <from sec="1078290086" usec="0"/>
    <to sec="1078290109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.26.137.145"/>
    </slice>
    <from sec="1078290356" usec="0"/>
    <to sec="1078290574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.116.190.145"/>
    </slice>
    <from sec="1078290614" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.54.184.146"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.154.91.147"/>
    </slice>
    <from sec="1078290848" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.61.202.147"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
343[label="197.10.93.148;s;3849pkt 3849fpkt", shape=diamond, color=yellow];
2985[label="197.10.93.148;4687pkt 4687fpkt", shape=pentagon, color=darkviolet];
4016[label="197.10.93.148;4687pkt 4687fpkt", shape=invtriangle, color=brown];
4501[label="197.10.93.148;4687pkt 4687fpkt", shape=invhouse, color=bisque];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.93.148:1320, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1320: (50%)&gt;];
}
343--2985[label="1;3849pkt 3849fpkt"];
343--4016[label="1;3849pkt 3849fpkt"];
343--4501[label="1;3849pkt 3849fpkt"];
2985--4016[label="1;4687pkt 4687fpkt"];
2985--4501[label="1;4687pkt 4687fpkt"];
4016--4501[label="1;4687pkt 4687fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.10.93.148" src_port="1320"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.139.103.148"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.33.54.149"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
2994[label="144.135.139.149;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.139.149:*, 53.17.88.165:110}[62.069%]&lt;BR/&gt;{144.135.139.149:*, *:80}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (31.0345%)&lt;BR/&gt; 80: (10.3448%)&lt;BR/&gt; 0: (3.44828%)&lt;BR/&gt; 65385: (1.72414%)&lt;BR/&gt; 65381: (1.72414%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="144.135.139.149"/>
      <filter dst_ip="53.17.88.165" dst_port="110" src_ip="144.135.139.149"/>
    </slice>
    <from sec="1078290042" usec="0"/>
    <to sec="1078290891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.71.8.150"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.205.88.150"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.164.199.150"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.177.3.151"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.34.88.151"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.151"/>
    </slice>
    <from sec="1078290020" usec="0"/>
    <to sec="1078290878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.37.166.151"/>
    </slice>
    <from sec="1078290177" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.216.177.151"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.252.96.152"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07745,1.93726,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
387[label="208.145.197.54;d;124pkt 124fpkt", shape=diamond, color=yellow];
493[label="39.83.147.241;s;45pkt 45fpkt", shape=diamond, color=yellow];
795[label="39.105.51.194;s;104pkt 104fpkt", shape=diamond, color=yellow];
1366[label="39.83.147.152;s;22pkt 22fpkt", shape=diamond, color=yellow];
1887[label="39.105.51.194;s;104pkt 104fpkt", shape=hexagon, color=black];
3009[label="39.83.147.152;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.105.51.194:80, 208.145.197.54:*}[56.9767%]&lt;BR/&gt;{39.83.147.241:80, *:*}[26.1628%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4297: (0.475059%)&lt;BR/&gt; 4480: (0.356295%)&lt;BR/&gt; 4479: (0.356295%)&lt;BR/&gt; 4478: (0.356295%)&gt;];
}
387--493[label="0.311111;14pkt 14fpkt"];
387--795[label="0.942308;98pkt 98fpkt"];
387--1366[label="0.5;11pkt 11fpkt"];
387--1887[label="0.942308;98pkt 98fpkt"];
387--1965[label="0.0483871;6pkt 6fpkt"];
387--1980[label="0.0483871;6pkt 6fpkt"];
387--3009[label="0.5;11pkt 11fpkt"];
493--787[label="0.0222222;1pkt 1fpkt"];
493--1696[label="0.0222222;1pkt 1fpkt"];
493--1965[label="0.133333;6pkt 6fpkt"];
493--1980[label="0.133333;6pkt 6fpkt"];
795--1887[label="1;104pkt 104fpkt"];
1366--1389[label="0.0454545;1pkt 1fpkt"];
1366--1965[label="0.0909091;2pkt 2fpkt"];
1366--1980[label="0.0909091;2pkt 2fpkt"];
1366--3009[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="39.83.147.241" src_port="80"/>
      <filter dst_ip="208.145.197.54" src_ip="39.105.51.194" src_port="80"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.176.151.152"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.163.179.152"/>
    </slice>
    <from sec="1078290119" usec="0"/>
    <to sec="1078290141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.210.197.152"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.48.227.152"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.105.64.153"/>
    </slice>
    <from sec="1078290030" usec="0"/>
    <to sec="1078290063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.150.153"/>
    </slice>
    <from sec="1078290520" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.168.218.153"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.104.15.154"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.199.21.154"/>
    </slice>
    <from sec="1078290862" usec="0"/>
    <to sec="1078290894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
656[label="144.134.17.121;d;75pkt 75fpkt", shape=diamond, color=yellow];
1157[label="52.109.171.154;s;3pkt 3fpkt", shape=diamond, color=yellow];
1294[label="32.65.106.65;s;3pkt 3fpkt", shape=diamond, color=yellow];
1524[label="144.134.17.121;d;60pkt 60fpkt", shape=hexagon, color=black];
1828[label="32.65.106.65;s;2pkt 2fpkt", shape=hexagon, color=black];
2313[label="216.69.114.44;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2322[label="216.69.114.45;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2448[label="32.65.106.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2896[label="216.69.114.134;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3028[label="52.109.171.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3718[label="216.69.114.45;18pkt 18fpkt", shape=invtriangle, color=brown];
3978[label="216.69.114.134;21pkt 21fpkt", shape=invtriangle, color=brown];
4029[label="52.109.171.154;3pkt 3fpkt", shape=invtriangle, color=brown];
4506[label="52.109.171.154;3pkt 3fpkt", shape=invhouse, color=bisque];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.69.114.134:80, 144.134.17.121:*}[22.7273%]&lt;BR/&gt;{216.69.114.45:80, *:*}[20.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3797: (1.21457%)&lt;BR/&gt; 3796: (1.21457%)&lt;BR/&gt; 3916: (0.809717%)&lt;BR/&gt; 3827: (0.809717%)&gt;];
}
656--1157[label="0.666667;2pkt 2fpkt"];
656--1294[label="1;3pkt 3fpkt"];
656--1380[label="0.08;6pkt 6fpkt"];
656--1524[label="1;60pkt 60fpkt"];
656--1553[label="0.0133333;1pkt 1fpkt"];
656--1828[label="1;2pkt 2fpkt"];
656--1965[label="0.4;30pkt 30fpkt"];
656--1980[label="0.4;30pkt 30fpkt"];
656--2313[label="0.4;6pkt 6fpkt"];
656--2322[label="1;17pkt 17fpkt"];
656--2351[label="0.0533333;4pkt 4fpkt"];
656--2448[label="1;2pkt 2fpkt"];
656--2582[label="0.025641;1pkt 1fpkt"];
656--2896[label="0.909091;20pkt 20fpkt"];
656--3028[label="0.666667;2pkt 2fpkt"];
656--3337[label="0.0512821;2pkt 2fpkt"];
656--3718[label="0.944444;17pkt 17fpkt"];
656--3978[label="0.952381;20pkt 20fpkt"];
656--4029[label="0.666667;2pkt 2fpkt"];
656--4178[label="0.0512821;2pkt 2fpkt"];
656--4506[label="0.666667;2pkt 2fpkt"];
656--4577[label="0.0512821;2pkt 2fpkt"];
1157--1524[label="0.666667;2pkt 2fpkt"];
1157--3028[label="1;3pkt 3fpkt"];
1157--4029[label="1;3pkt 3fpkt"];
1157--4506[label="1;3pkt 3fpkt"];
1294--1828[label="1;2pkt 2fpkt"];
1294--2448[label="1;2pkt 2fpkt"];
1524--1965[label="0.5;30pkt 30fpkt"];
1524--1980[label="0.5;30pkt 30fpkt"];
1524--2313[label="0.4;6pkt 6fpkt"];
1524--2322[label="1;17pkt 17fpkt"];
1524--2582[label="0.025641;1pkt 1fpkt"];
1524--2896[label="0.909091;20pkt 20fpkt"];
1524--3028[label="0.666667;2pkt 2fpkt"];
1524--3718[label="0.944444;17pkt 17fpkt"];
1524--3978[label="0.952381;20pkt 20fpkt"];
1524--4029[label="0.666667;2pkt 2fpkt"];
1524--4506[label="0.666667;2pkt 2fpkt"];
1828--2448[label="0.5;1pkt 1fpkt"];
2322--3718[label="1;17pkt 17fpkt"];
2896--3978[label="1;21pkt 21fpkt"];
3028--4029[label="1;3pkt 3fpkt"];
3028--4506[label="1;3pkt 3fpkt"];
4029--4506[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="216.69.114.45" src_port="80"/>
      <filter dst_ip="144.134.17.121" src_ip="216.69.114.134" src_port="80"/>
    </slice>
    <from sec="1078290025" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.193.194.154"/>
    </slice>
    <from sec="1078290056" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.200.21.156"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.18.170.156"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.197.120.158"/>
    </slice>
    <from sec="1078290192" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.202.164.159"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.249.18.160"/>
    </slice>
    <from sec="1078290204" usec="0"/>
    <to sec="1078290573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.75.30.160"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.178.67.160"/>
    </slice>
    <from sec="1078290010" usec="0"/>
    <to sec="1078290894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.150.162"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.232.34.164"/>
    </slice>
    <from sec="1078290098" usec="0"/>
    <to sec="1078290136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.66.46.165"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.40.11.166"/>
    </slice>
    <from sec="1078290012" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.163.75.166"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.100.132.166"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.227.34.167"/>
    </slice>
    <from sec="1078290024" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.195.75.168"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.160.85.168"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.233.132.168"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.214.226.169"/>
    </slice>
    <from sec="1078290016" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.133.170"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.232.187.171"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.55.14.172"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.129.237.172"/>
    </slice>
    <from sec="1078290258" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.133.173"/>
    </slice>
    <from sec="1078290579" usec="0"/>
    <to sec="1078290665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.117.167.173"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.252.174"/>
    </slice>
    <from sec="1078290113" usec="0"/>
    <to sec="1078290679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.168.135.175"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
3148[label="194.219.8.176;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.219.8.176:*, *:3127}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (48.75%)&lt;BR/&gt; 1055: (1.25%)&lt;BR/&gt; 80: (1.25%)&lt;BR/&gt; 4637: (0.625%)&lt;BR/&gt; 4629: (0.625%)&gt;];
}
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.219.8.176"/>
    </slice>
    <from sec="1078290205" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.89.120.176"/>
    </slice>
    <from sec="1078290829" usec="0"/>
    <to sec="1078290846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.133.176"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.202.113.177"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.58.102.178"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.171.132.178"/>
    </slice>
    <from sec="1078290368" usec="0"/>
    <to sec="1078290408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
459[label="209.77.131.69;d;4pkt 4fpkt", shape=diamond, color=yellow];
612[label="89.78.23.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
716[label="89.77.171.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
1153[label="90.1.53.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
1511[label="89.78.23.70;s;1pkt 1fpkt", shape=hexagon, color=black];
1847[label="209.77.131.69;d;4pkt 4fpkt", shape=hexagon, color=black];
3169[label="89.77.171.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3800[label="89.78.23.70;1pkt 1fpkt", shape=invtriangle, color=brown];
4095[label="89.77.171.179;1pkt 1fpkt", shape=invtriangle, color=brown];
4392[label="89.78.23.70;1pkt 1fpkt", shape=invhouse, color=bisque];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.78.23.70:6881, 209.77.131.69:1192}[25%]&lt;BR/&gt;{202.144.2.143:6881, 209.77.131.69:1486}[25%]&lt;BR/&gt;{89.77.171.179:6881, 209.77.131.69:1203}[25%]&lt;BR/&gt;{90.1.53.221:6881, 209.77.131.69:1452}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 1192: (18.75%)&lt;BR/&gt; 1203: (15.625%)&lt;BR/&gt; 1452: (9.375%)&lt;BR/&gt; 1486: (6.25%)&gt;];
}
459--612[label="1;1pkt 1fpkt"];
459--716[label="1;1pkt 1fpkt"];
459--1153[label="1;1pkt 1fpkt"];
459--1511[label="1;1pkt 1fpkt"];
459--1847[label="1;4pkt 4fpkt"];
459--3169[label="1;1pkt 1fpkt"];
459--3800[label="1;1pkt 1fpkt"];
459--4095[label="1;1pkt 1fpkt"];
459--4392[label="1;1pkt 1fpkt"];
612--1511[label="1;1pkt 1fpkt"];
612--1847[label="1;1pkt 1fpkt"];
612--3800[label="1;1pkt 1fpkt"];
612--4392[label="1;1pkt 1fpkt"];
716--1847[label="1;1pkt 1fpkt"];
716--3169[label="1;1pkt 1fpkt"];
716--4095[label="1;1pkt 1fpkt"];
1153--1847[label="1;1pkt 1fpkt"];
1511--1847[label="1;1pkt 1fpkt"];
1511--3800[label="1;1pkt 1fpkt"];
1511--4392[label="1;1pkt 1fpkt"];
1847--3169[label="1;1pkt 1fpkt"];
1847--3800[label="1;1pkt 1fpkt"];
1847--4095[label="1;1pkt 1fpkt"];
1847--4392[label="1;1pkt 1fpkt"];
3169--4095[label="1;1pkt 1fpkt"];
3800--4392[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.77.131.69" dst_port="1452" src_ip="90.1.53.221" src_port="6881"/>
      <filter dst_ip="209.77.131.69" dst_port="1203" src_ip="89.77.171.179" src_port="6881"/>
      <filter dst_ip="209.77.131.69" dst_port="1486" src_ip="202.144.2.143" src_port="6881"/>
      <filter dst_ip="209.77.131.69" dst_port="1192" src_ip="89.78.23.70" src_port="6881"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.21.180.179"/>
    </slice>
    <from sec="1078290176" usec="0"/>
    <to sec="1078290879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.24.214.179"/>
    </slice>
    <from sec="1078290848" usec="0"/>
    <to sec="1078290880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.4.7.180"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.173.226.180"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.11.241.180"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.203.191.181"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.205.181"/>
    </slice>
    <from sec="1078290411" usec="0"/>
    <to sec="1078290716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.48.42.182"/>
    </slice>
    <from sec="1078290685" usec="0"/>
    <to sec="1078290720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.89.92.182"/>
    </slice>
    <from sec="1078290132" usec="0"/>
    <to sec="1078290144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.200.139.183"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.102.135.184"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.17.155.184"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.32.66.185"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.107.186"/>
    </slice>
    <from sec="1078290169" usec="0"/>
    <to sec="1078290240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.156.168.187"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.239.173.187"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.34.204.187"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.14.66.189"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.12.96.189"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.43.142.189"/>
    </slice>
    <from sec="1078290606" usec="0"/>
    <to sec="1078290638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.248.171.189"/>
    </slice>
    <from sec="1078290659" usec="0"/>
    <to sec="1078290675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
326[label="131.6.197.100;d;173pkt 173fpkt", shape=diamond, color=yellow];
503[label="144.135.106.55;d;317pkt 317fpkt", shape=diamond, color=yellow];
790[label="88.40.250.9;s;3pkt 3fpkt", shape=diamond, color=yellow];
911[label="88.40.242.249;s;2pkt 2fpkt", shape=diamond, color=yellow];
1048[label="212.166.9.128;s;3pkt 3fpkt", shape=diamond, color=yellow];
1420[label="88.40.242.35;s;5pkt 5fpkt", shape=diamond, color=yellow];
2244[label="88.40.242.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2403[label="88.40.229.58;98pkt 98fpkt", shape=pentagon, color=darkviolet];
2596[label="204.57.16.85;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2855[label="212.166.9.128;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2958[label="192.62.130.143;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3202[label="212.166.9.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3542[label="88.40.242.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3841[label="204.57.16.85;38pkt 38fpkt", shape=invtriangle, color=brown];
3957[label="212.166.9.128;2pkt 2fpkt", shape=invtriangle, color=brown];
4271[label="88.40.242.249;1pkt 1fpkt", shape=invtriangle, color=brown];
4621[label="88.40.242.249;1pkt 1fpkt", shape=invhouse, color=bisque];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.135.106.55:*}[61.0236%]&lt;BR/&gt;{*:80, 131.6.197.100:*}[33.8583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5902%)&lt;BR/&gt; 2242: (0.409836%)&lt;BR/&gt; 1492: (0.273224%)&lt;BR/&gt; 1294: (0.273224%)&lt;BR/&gt; 4968: (0.204918%)&gt;];
}
326--352[label="0.00578035;1pkt 1fpkt"];
326--786[label="0.0346821;6pkt 6fpkt"];
326--790[label="1;3pkt 3fpkt"];
326--911[label="1;2pkt 2fpkt"];
326--980[label="0.0595238;10pkt 10fpkt"];
326--1087[label="0.0377358;4pkt 4fpkt"];
326--1695[label="0.0346821;6pkt 6fpkt"];
326--1965[label="0.0751445;13pkt 13fpkt"];
326--1980[label="0.0751445;13pkt 13fpkt"];
326--2403[label="0.867347;85pkt 85fpkt"];
326--2958[label="0.348837;15pkt 15fpkt"];
326--3202[label="1;2pkt 2fpkt"];
326--3542[label="1;2pkt 2fpkt"];
326--4271[label="1;1pkt 1fpkt"];
326--4621[label="1;1pkt 1fpkt"];
503--554[label="0.25;2pkt 2fpkt"];
503--576[label="0.123028;39pkt 39fpkt"];
503--604[label="0.0103093;1pkt 1fpkt"];
503--666[label="0.0714286;5pkt 5fpkt"];
503--698[label="0.02;1pkt 1fpkt"];
503--702[label="0.003663;1pkt 1fpkt"];
503--709[label="0.034188;4pkt 4fpkt"];
503--758[label="0.00630915;2pkt 2fpkt"];
503--768[label="0.0357143;5pkt 5fpkt"];
503--770[label="0.0510204;5pkt 5fpkt"];
503--786[label="0.174863;32pkt 32fpkt"];
503--873[label="0.00574713;1pkt 1fpkt"];
503--887[label="0.00952381;1pkt 1fpkt"];
503--973[label="0.0630631;7pkt 7fpkt"];
503--980[label="0.0714286;12pkt 12fpkt"];
503--988[label="0.0909091;1pkt 1fpkt"];
503--1000[label="0.0487805;6pkt 6fpkt"];
503--1012[label="0.0117647;1pkt 1fpkt"];
503--1035[label="0.212291;38pkt 38fpkt"];
503--1048[label="1;3pkt 3fpkt"];
503--1070[label="0.0114943;1pkt 1fpkt"];
503--1087[label="0.00943396;1pkt 1fpkt"];
503--1256[label="0.015873;1pkt 1fpkt"];
503--1420[label="1;5pkt 5fpkt"];
503--1465[label="0.0126582;1pkt 1fpkt"];
503--1505[label="0.00315457;1pkt 1fpkt"];
503--1542[label="0.0251256;5pkt 5fpkt"];
503--1559[label="0.0128205;1pkt 1fpkt"];
503--1571[label="0.0576923;3pkt 3fpkt"];
503--1614[label="0.00505051;1pkt 1fpkt"];
503--1695[label="0.172414;30pkt 30fpkt"];
503--1755[label="0.0159363;4pkt 4fpkt"];
503--1756[label="0.0526316;5pkt 5fpkt"];
503--1819[label="0.213483;38pkt 38fpkt"];
503--1965[label="0.0252366;8pkt 8fpkt"];
503--1980[label="0.0252366;8pkt 8fpkt"];
503--2172[label="0.0111111;1pkt 1fpkt"];
503--2219[label="0.0608696;7pkt 7fpkt"];
503--2239[label="0.193878;38pkt 38fpkt"];
503--2244[label="1;1pkt 1fpkt"];
503--2294[label="0.00961538;1pkt 1fpkt"];
503--2303[label="0.0320513;5pkt 5fpkt"];
503--2403[label="0.132653;13pkt 13fpkt"];
503--2409[label="0.0447761;6pkt 6fpkt"];
503--2574[label="0.25;2pkt 2fpkt"];
503--2596[label="1;38pkt 38fpkt"];
503--2774[label="0.0245098;5pkt 5fpkt"];
503--2841[label="0.00315457;1pkt 1fpkt"];
503--2855[label="1;3pkt 3fpkt"];
503--2878[label="0.00909091;1pkt 1fpkt"];
503--2958[label="0.232558;10pkt 10fpkt"];
503--2959[label="0.0105263;1pkt 1fpkt"];
503--3069[label="0.00630915;2pkt 2fpkt"];
503--3070[label="0.032;4pkt 4fpkt"];
503--3072[label="0.00315457;1pkt 1fpkt"];
503--3104[label="0.0458716;5pkt 5fpkt"];
503--3225[label="0.123028;39pkt 39fpkt"];
503--3454[label="0.00862069;1pkt 1fpkt"];
503--3544[label="0.0188679;1pkt 1fpkt"];
503--3572[label="0.00630915;2pkt 2fpkt"];
503--3653[label="0.0111111;1pkt 1fpkt"];
503--3708[label="0.0320513;5pkt 5fpkt"];
503--3756[label="0.0444444;6pkt 6fpkt"];
503--3831[label="0.25;2pkt 2fpkt"];
503--3841[label="1;38pkt 38fpkt"];
503--3953[label="0.00315457;1pkt 1fpkt"];
503--3957[label="1;2pkt 2fpkt"];
503--4061[label="0.0458716;5pkt 5fpkt"];
503--4285[label="0.00630915;2pkt 2fpkt"];
503--4629[label="0.00630915;2pkt 2fpkt"];
911--3542[label="1;2pkt 2fpkt"];
911--4271[label="1;1pkt 1fpkt"];
911--4621[label="1;1pkt 1fpkt"];
1048--2855[label="1;3pkt 3fpkt"];
1048--3957[label="1;2pkt 2fpkt"];
1420--2244[label="1;1pkt 1fpkt"];
2596--3841[label="1;38pkt 38fpkt"];
2855--3957[label="1;2pkt 2fpkt"];
3542--4271[label="1;1pkt 1fpkt"];
3542--4621[label="1;1pkt 1fpkt"];
4271--4621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.106.55" src_port="80"/>
      <filter dst_ip="131.6.197.100" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.93.4.190"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.41.81.190"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.149.1.191"/>
    </slice>
    <from sec="1078290040" usec="0"/>
    <to sec="1078290082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.8.146.191"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.105.51.194"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.197.68.194"/>
    </slice>
    <from sec="1078290702" usec="0"/>
    <to sec="1078290850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.102.83.194"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.140.108.194"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.58.132.194"/>
    </slice>
    <from sec="1078290603" usec="0"/>
    <to sec="1078290633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.194"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.225.3.196"/>
    </slice>
    <from sec="1078290350" usec="0"/>
    <to sec="1078290365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.94.49.196"/>
    </slice>
    <from sec="1078290524" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.86.164.198"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.154.52.199"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.85.119.199"/>
    </slice>
    <from sec="1078290010" usec="0"/>
    <to sec="1078290813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.179.13.200"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
397[label="144.135.162.200;s;4pkt 4fpkt", shape=diamond, color=yellow];
3290[label="144.135.162.200;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4151[label="144.135.162.200;6pkt 6fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.162.200:80, 39.160.99.11:*}[33.3333%]&lt;BR/&gt;{144.135.162.200:80, 33.5.69.196:*}[33.3333%]&lt;BR/&gt;{144.135.162.200:80, 209.242.162.216:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38483: (9.375%)&lt;BR/&gt; 38448: (9.375%)&lt;BR/&gt; 1299: (9.375%)&lt;BR/&gt; 1298: (9.375%)&gt;];
}
397--3290[label="1;4pkt 4fpkt"];
397--4151[label="1;4pkt 4fpkt"];
3290--4151[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.242.162.216" src_ip="144.135.162.200" src_port="80"/>
      <filter dst_ip="33.5.69.196" src_ip="144.135.162.200" src_port="80"/>
      <filter dst_ip="39.160.99.11" src_ip="144.135.162.200" src_port="80"/>
    </slice>
    <from sec="1078290052" usec="0"/>
    <to sec="1078290705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.148.168.200"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.71.2.202"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.143.193.202"/>
    </slice>
    <from sec="1078290484" usec="0"/>
    <to sec="1078290522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
1090[label="210.48.194.202;s;198pkt 198fpkt", shape=diamond, color=yellow];
3305[label="210.48.194.202;238pkt 238fpkt", shape=pentagon, color=darkviolet];
4161[label="210.48.194.202;237pkt 237fpkt", shape=invtriangle, color=brown];
4566[label="210.48.194.202;238pkt 238fpkt", shape=invhouse, color=bisque];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.48.194.202:*, *:1080}[33.6134%]&lt;BR/&gt;{210.48.194.202:*, *:3127}[33.1933%]&lt;BR/&gt;{210.48.194.202:*, *:3128}[33.1933%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.7947%)&lt;BR/&gt; 3128: (16.6301%)&lt;BR/&gt; 3127: (16.5752%)&lt;BR/&gt; 3993: (0.439078%)&lt;BR/&gt; 3665: (0.439078%)&gt;];
}
1090--3305[label="1;198pkt 198fpkt"];
1090--4161[label="0.994949;197pkt 197fpkt"];
1090--4566[label="1;198pkt 198fpkt"];
3305--4161[label="1;237pkt 237fpkt"];
3305--4566[label="1;238pkt 238fpkt"];
4161--4566[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="210.48.194.202"/>
      <filter dst_port="3128" src_ip="210.48.194.202"/>
      <filter dst_port="3127" src_ip="210.48.194.202"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.198.202"/>
    </slice>
    <from sec="1078290049" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.60.80.203"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.180.83.204"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.204"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.58.80.205"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.60.69.206"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.191.104.207"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.167.209.207"/>
    </slice>
    <from sec="1078290314" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.8.209"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.10.21.209"/>
    </slice>
    <from sec="1078290271" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.222.56.209"/>
    </slice>
    <from sec="1078290285" usec="0"/>
    <to sec="1078290389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.212.208.209"/>
    </slice>
    <from sec="1078290332" usec="0"/>
    <to sec="1078290339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.174.119.210"/>
    </slice>
    <from sec="1078290334" usec="0"/>
    <to sec="1078290376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.239.162.210"/>
    </slice>
    <from sec="1078290551" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.5.180.210"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.9.98.211"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.185.225.211"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.88.196.213"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.146.140.214"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
703[label="196.131.104.215;s;1381pkt 1381fpkt", shape=diamond, color=yellow];
3377[label="196.131.104.215;1632pkt 1632fpkt", shape=pentagon, color=darkviolet];
4198[label="196.131.104.215;1631pkt 1631fpkt", shape=invtriangle, color=brown];
4586[label="196.131.104.215;1631pkt 1631fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.131.104.215:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45422: (0.063745%)&lt;BR/&gt; 44749: (0.063745%)&lt;BR/&gt; 37632: (0.063745%)&lt;BR/&gt; 36581: (0.063745%)&gt;];
}
703--1585[label="0.000807754;1pkt 1fpkt"];
703--1965[label="0.0644461;89pkt 89fpkt"];
703--1980[label="0.0644461;89pkt 89fpkt"];
703--3377[label="0.999276;1380pkt 1380fpkt"];
703--4198[label="0.998552;1379pkt 1379fpkt"];
703--4586[label="0.998552;1379pkt 1379fpkt"];
3377--4198[label="1;1631pkt 1631fpkt"];
3377--4586[label="1;1631pkt 1631fpkt"];
4198--4586[label="1;1631pkt 1631fpkt"];
</description>
    <slice>
      <filter src_ip="196.131.104.215" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.121.111.215"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.203.20.216"/>
    </slice>
    <from sec="1078290041" usec="0"/>
    <to sec="1078290074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.181.99.216"/>
    </slice>
    <from sec="1078290040" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
1306[label="192.62.128.218;s;14pkt 14fpkt", shape=diamond, color=yellow];
3392[label="192.62.128.218;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4207[label="192.62.128.218;14pkt 14fpkt", shape=invtriangle, color=brown];
4593[label="192.62.128.218;14pkt 14fpkt", shape=invhouse, color=bisque];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.128.218:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 3264: (3.57143%)&lt;BR/&gt; 2021: (3.57143%)&lt;BR/&gt; 1766: (3.57143%)&lt;BR/&gt; 1331: (3.57143%)&gt;];
}
1306--3392[label="1;14pkt 14fpkt"];
1306--4207[label="1;14pkt 14fpkt"];
1306--4593[label="1;14pkt 14fpkt"];
3392--4207[label="1;14pkt 14fpkt"];
3392--4593[label="1;14pkt 14fpkt"];
4207--4593[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="192.62.128.218" src_port="5050"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
1292[label="194.173.177.218;s;623pkt 623fpkt", shape=diamond, color=yellow];
3394[label="194.173.177.218;872pkt 872fpkt", shape=pentagon, color=darkviolet];
4209[label="194.173.177.218;872pkt 872fpkt", shape=invtriangle, color=brown];
4595[label="194.173.177.218;871pkt 871fpkt", shape=invhouse, color=bisque];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.177.218:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3393: (0.0617665%)&lt;BR/&gt; 3392: (0.0617665%)&lt;BR/&gt; 3391: (0.0617665%)&lt;BR/&gt; 3389: (0.0617665%)&gt;];
}
1292--3394[label="1;623pkt 623fpkt"];
1292--4209[label="1;623pkt 623fpkt"];
1292--4595[label="1;623pkt 623fpkt"];
3394--4209[label="1;872pkt 872fpkt"];
3394--4595[label="1;871pkt 871fpkt"];
4209--4595[label="1;871pkt 871fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="194.173.177.218"/>
    </slice>
    <from sec="1078290657" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.135.218.219"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.85.57.220"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.150.220"/>
    </slice>
    <from sec="1078290287" usec="0"/>
    <to sec="1078290812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.155.201.220"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.12.33.221"/>
    </slice>
    <from sec="1078290166" usec="0"/>
    <to sec="1078290191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.122.34.221"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.1.53.221"/>
    </slice>
    <from sec="1078290071" usec="0"/>
    <to sec="1078290838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.1.73.221"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.180.46.222"/>
    </slice>
    <from sec="1078290612" usec="0"/>
    <to sec="1078290702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.30.80.223"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.157.19.224"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.128.225"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.199.4.226"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.170.103.226"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.166.200.227"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.210.250.229"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.161.191.232"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.28.142.233"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.45.115.234"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.150.234"/>
    </slice>
    <from sec="1078290029" usec="0"/>
    <to sec="1078290843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.177.209.234"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.15.5.237"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884631,2.01758,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
103[label="195.76.24.237s;249pkt 249fpkt", shape=rectangle, color=red];
3484[label="195.76.24.237;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.24.237:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
103--3484[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.76.24.237" src_port="1025"/>
    </slice>
    <from sec="1078290092" usec="0"/>
    <to sec="1078290108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.228.36.237"/>
    </slice>
    <from sec="1078290015" usec="0"/>
    <to sec="1078290031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.22.86.239"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
104[label="194.168.136.239s;92pkt 92fpkt", shape=rectangle, color=red];
3495[label="194.168.136.239;248pkt 248fpkt", shape=pentagon, color=darkviolet];
4247[label="194.168.136.239;248pkt 248fpkt", shape=invtriangle, color=brown];
4613[label="194.168.136.239;247pkt 247fpkt", shape=invhouse, color=bisque];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.168.136.239:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
104--3495[label="1;92pkt 92fpkt"];
104--4247[label="1;92pkt 92fpkt"];
104--4613[label="0.98913;91pkt 91fpkt"];
3495--4247[label="1;248pkt 248fpkt"];
3495--4613[label="1;247pkt 247fpkt"];
4247--4613[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.168.136.239" src_port="1028"/>
    </slice>
    <from sec="1078290738" usec="0"/>
    <to sec="1078290752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.164.5.240"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.152.54.240"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.176.145.240"/>
    </slice>
    <from sec="1078290012" usec="0"/>
    <to sec="1078290431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
127[label="205.96.239.240s;39pkt 39fpkt", shape=rectangle, color=red];
3505[label="205.96.239.240;220pkt 220fpkt", shape=pentagon, color=darkviolet];
4252[label="205.96.239.240;219pkt 219fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.96.239.240:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2019: (0.313808%)&lt;BR/&gt; 1998: (0.313808%)&lt;BR/&gt; 1972: (0.313808%)&lt;BR/&gt; 1887: (0.313808%)&gt;];
}
127--3505[label="1;39pkt 39fpkt"];
127--4252[label="1;39pkt 39fpkt"];
3505--4252[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.96.239.240"/>
    </slice>
    <from sec="1078290029" usec="0"/>
    <to sec="1078290063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.72.38.242"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.28.144.242"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.214.31.243"/>
    </slice>
    <from sec="1078290015" usec="0"/>
    <to sec="1078290064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.217.8.246"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.20.51.247"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
866[label="194.195.44.250;s;260pkt 260fpkt", shape=diamond, color=yellow];
3545[label="194.195.44.250;296pkt 296fpkt", shape=pentagon, color=darkviolet];
4272[label="194.195.44.250;295pkt 295fpkt", shape=invtriangle, color=brown];
4622[label="194.195.44.250;295pkt 295fpkt", shape=invhouse, color=bisque];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.195.44.250:*, *:3127}[50%]&lt;BR/&gt;{194.195.44.250:*, *:6129}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (25.0436%)&lt;BR/&gt; 3127: (24.9564%)&lt;BR/&gt; 3959: (0.34904%)&lt;BR/&gt; 3771: (0.34904%)&lt;BR/&gt; 3713: (0.34904%)&gt;];
}
866--3545[label="1;260pkt 260fpkt"];
866--4272[label="1;260pkt 260fpkt"];
866--4622[label="1;260pkt 260fpkt"];
3545--4272[label="1;295pkt 295fpkt"];
3545--4622[label="1;295pkt 295fpkt"];
4272--4622[label="1;295pkt 295fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="194.195.44.250"/>
      <filter dst_port="3127" src_ip="194.195.44.250"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.42.190.250"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.42.59.251"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.166.175.251"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.100.224.251"/>
    </slice>
    <from sec="1078290164" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.34711,2.0505,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.58.114.254"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
1999[label="204.214.96.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3575[label="204.214.96.0;2pkt 2fpkt", shape=invtriangle, color=brown];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.214.96.0:80, 144.135.205.130:54992}[50%]&lt;BR/&gt;{204.214.96.0:80, 144.135.205.130:57413}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57413: (33.3333%)&lt;BR/&gt; 54992: (16.6667%)&gt;];
}
1999--3575[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.205.130" dst_port="57413" src_ip="204.214.96.0" src_port="80"/>
      <filter dst_ip="144.135.205.130" dst_port="54992" src_ip="204.214.96.0" src_port="80"/>
    </slice>
    <from sec="1078290294" usec="0"/>
    <to sec="1078290299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
2000[label="209.48.109.0;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3576[label="209.48.109.0;6pkt 6fpkt", shape=invtriangle, color=brown];
4286[label="209.48.109.0;6pkt 6fpkt", shape=invhouse, color=bisque];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.48.109.0:25414, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25414: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2000--3576[label="1;6pkt 6fpkt"];
2000--4286[label="1;6pkt 6fpkt"];
3576--4286[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.48.109.0" src_port="25414"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
1240[label="145.78.190.0;s;271pkt 271fpkt", shape=diamond, color=yellow];
2004[label="145.78.190.0;296pkt 296fpkt", shape=pentagon, color=darkviolet];
3578[label="145.78.190.0;297pkt 297fpkt", shape=invtriangle, color=brown];
4287[label="145.78.190.0;296pkt 296fpkt", shape=invhouse, color=bisque];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.78.190.0:*, *:3127}[49.4949%]&lt;BR/&gt;{145.78.190.0:*, *:1080}[25.5892%]&lt;BR/&gt;{145.78.190.0:*, *:3128}[24.9158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (24.6552%)&lt;BR/&gt; 1080: (12.8448%)&lt;BR/&gt; 3128: (12.5%)&lt;BR/&gt; 4736: (0.517241%)&lt;BR/&gt; 4582: (0.517241%)&gt;];
}
1240--2004[label="0.99631;270pkt 270fpkt"];
1240--3578[label="1;271pkt 271fpkt"];
1240--4287[label="0.99631;270pkt 270fpkt"];
2004--3578[label="1;296pkt 296fpkt"];
2004--4287[label="1;296pkt 296fpkt"];
3578--4287[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="145.78.190.0"/>
      <filter dst_port="1080" src_ip="145.78.190.0"/>
      <filter dst_port="3128" src_ip="145.78.190.0"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
2018[label="79.13.196.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3583[label="79.13.196.1;3pkt 3fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{79.13.196.1:53, 172.136.179.1:4088}[33.3333%]&lt;BR/&gt;{79.13.196.1:80, 172.136.32.157:3379}[33.3333%]&lt;BR/&gt;{79.13.196.1:80, 172.136.32.157:3380}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 4088: (16.6667%)&lt;BR/&gt; 3380: (16.6667%)&lt;BR/&gt; 3379: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&gt;];
}
2018--3583[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.32.157" dst_port="3380" src_ip="79.13.196.1" src_port="80"/>
      <filter dst_ip="172.136.32.157" dst_port="3379" src_ip="79.13.196.1" src_port="80"/>
      <filter dst_ip="172.136.179.1" dst_port="4088" src_ip="79.13.196.1" src_port="53"/>
    </slice>
    <from sec="1078290863" usec="0"/>
    <to sec="1078290870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
2030[label="144.135.99.4;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3587[label="144.135.99.4;11pkt 11fpkt", shape=invtriangle, color=brown];
4291[label="144.135.99.4;10pkt 10fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.99.4:*, 36.65.254.249:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.625%)&lt;BR/&gt; 33632: (4.6875%)&lt;BR/&gt; 33510: (4.6875%)&lt;BR/&gt; 33353: (4.6875%)&lt;BR/&gt; 33303: (4.6875%)&gt;];
}
2030--3587[label="1;11pkt 11fpkt"];
2030--4291[label="1;10pkt 10fpkt"];
3587--4291[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="36.65.254.249" dst_port="80" src_ip="144.135.99.4"/>
    </slice>
    <from sec="1078290048" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
2032[label="36.26.144.4;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3588[label="36.26.144.4;14pkt 14fpkt", shape=invtriangle, color=brown];
4292[label="36.26.144.4;13pkt 13fpkt", shape=invhouse, color=bisque];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.26.144.4:80, 144.135.234.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4996: (3.65854%)&lt;BR/&gt; 4995: (3.65854%)&lt;BR/&gt; 4993: (3.65854%)&lt;BR/&gt; 4992: (3.65854%)&gt;];
}
2032--3588[label="1;14pkt 14fpkt"];
2032--4292[label="1;13pkt 13fpkt"];
3588--4292[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.234.89" src_ip="36.26.144.4" src_port="80"/>
    </slice>
    <from sec="1078290698" usec="0"/>
    <to sec="1078290738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.106.87.5"/>
    </slice>
    <from sec="1078290459" usec="0"/>
    <to sec="1078290489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
2040[label="209.70.138.5;220pkt 220fpkt", shape=pentagon, color=darkviolet];
3592[label="209.70.138.5;221pkt 221fpkt", shape=invtriangle, color=brown];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.70.138.5:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2040--3592[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.70.138.5" src_port="1030"/>
    </slice>
    <from sec="1078290861" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
282[label="88.94.14.23;s;4pkt 4fpkt", shape=diamond, color=yellow];
299[label="212.25.65.240;s;2pkt 2fpkt", shape=diamond, color=yellow];
562[label="131.6.51.94;d;30pkt 30fpkt", shape=diamond, color=yellow];
563[label="205.170.204.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
1289[label="213.102.129.131;s;85pkt 85fpkt", shape=diamond, color=yellow];
1301[label="144.135.181.89;d;149pkt 149fpkt", shape=diamond, color=yellow];
1647[label="131.6.51.94;d;30pkt 30fpkt", shape=hexagon, color=black];
1837[label="144.135.181.89;d;149pkt 149fpkt", shape=hexagon, color=black];
2041[label="213.28.145.5;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2153[label="88.94.14.23;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3498[label="212.25.65.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3593[label="213.28.145.5;4pkt 4fpkt", shape=invtriangle, color=brown];
3715[label="205.170.204.44;1pkt 1fpkt", shape=invtriangle, color=brown];
4248[label="212.25.65.240;2pkt 2fpkt", shape=invtriangle, color=brown];
4295[label="213.28.145.5;4pkt 4fpkt", shape=invhouse, color=bisque];
4351[label="205.170.204.44;1pkt 1fpkt", shape=invhouse, color=bisque];
4614[label="212.25.65.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.102.129.131:80, 144.135.181.89:*}[46.7033%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.7764%)&lt;BR/&gt; 1863: (1.79325%)&lt;BR/&gt; 3679: (1.68776%)&lt;BR/&gt; 2409: (1.16034%)&lt;BR/&gt; 3501: (0.632911%)&gt;];
}
282--562[label="1;4pkt 4fpkt"];
282--1647[label="1;4pkt 4fpkt"];
282--2153[label="1;4pkt 4fpkt"];
299--562[label="1;2pkt 2fpkt"];
299--1647[label="1;2pkt 2fpkt"];
299--3498[label="1;2pkt 2fpkt"];
299--4248[label="1;2pkt 2fpkt"];
299--4614[label="1;1pkt 1fpkt"];
562--563[label="1;1pkt 1fpkt"];
562--1647[label="1;30pkt 30fpkt"];
562--2041[label="0.2;1pkt 1fpkt"];
562--2153[label="1;4pkt 4fpkt"];
562--2981[label="0.0333333;1pkt 1fpkt"];
562--3498[label="1;2pkt 2fpkt"];
562--3572[label="0.0333333;1pkt 1fpkt"];
562--3593[label="0.25;1pkt 1fpkt"];
562--3715[label="1;1pkt 1fpkt"];
562--4015[label="0.0333333;1pkt 1fpkt"];
562--4248[label="1;2pkt 2fpkt"];
562--4285[label="0.0333333;1pkt 1fpkt"];
562--4295[label="0.25;1pkt 1fpkt"];
562--4351[label="1;1pkt 1fpkt"];
562--4500[label="0.0333333;1pkt 1fpkt"];
562--4614[label="1;1pkt 1fpkt"];
562--4629[label="0.0333333;1pkt 1fpkt"];
563--1647[label="1;1pkt 1fpkt"];
563--3715[label="1;1pkt 1fpkt"];
563--4351[label="1;1pkt 1fpkt"];
1289--1301[label="1;85pkt 85fpkt"];
1289--1837[label="1;85pkt 85fpkt"];
1301--1361[label="0.00952381;1pkt 1fpkt"];
1301--1397[label="0.0793651;5pkt 5fpkt"];
1301--1459[label="0.0178571;2pkt 2fpkt"];
1301--1770[label="0.0120482;1pkt 1fpkt"];
1301--1837[label="1;149pkt 149fpkt"];
1301--2041[label="0.2;1pkt 1fpkt"];
1301--2068[label="0.0545455;3pkt 3fpkt"];
1301--2163[label="0.00900901;1pkt 1fpkt"];
1301--2468[label="0.166667;4pkt 4fpkt"];
1301--2490[label="0.0238095;1pkt 1fpkt"];
1301--2545[label="0.0666667;5pkt 5fpkt"];
1301--2727[label="0.0168067;2pkt 2fpkt"];
1301--3057[label="0.0147059;1pkt 1fpkt"];
1301--3069[label="0.0201342;3pkt 3fpkt"];
1301--3225[label="0.00671141;1pkt 1fpkt"];
1301--3374[label="0.0595238;5pkt 5fpkt"];
1301--3572[label="0.0134228;2pkt 2fpkt"];
1301--3593[label="0.25;1pkt 1fpkt"];
1301--3817[label="0.0666667;5pkt 5fpkt"];
1301--4285[label="0.0134228;2pkt 2fpkt"];
1301--4295[label="0.25;1pkt 1fpkt"];
1301--4401[label="0.0675676;5pkt 5fpkt"];
1301--4629[label="0.0134228;2pkt 2fpkt"];
1647--2041[label="0.2;1pkt 1fpkt"];
1647--2153[label="1;4pkt 4fpkt"];
1647--2981[label="0.0333333;1pkt 1fpkt"];
1647--3498[label="1;2pkt 2fpkt"];
1647--3572[label="0.0333333;1pkt 1fpkt"];
1647--3593[label="0.25;1pkt 1fpkt"];
1647--3715[label="1;1pkt 1fpkt"];
1647--4015[label="0.0333333;1pkt 1fpkt"];
1647--4248[label="1;2pkt 2fpkt"];
1647--4285[label="0.0333333;1pkt 1fpkt"];
1647--4295[label="0.25;1pkt 1fpkt"];
1647--4351[label="1;1pkt 1fpkt"];
1647--4500[label="0.0333333;1pkt 1fpkt"];
1647--4614[label="1;1pkt 1fpkt"];
1647--4629[label="0.0333333;1pkt 1fpkt"];
1837--2041[label="0.2;1pkt 1fpkt"];
1837--2068[label="0.0545455;3pkt 3fpkt"];
1837--2163[label="0.00900901;1pkt 1fpkt"];
1837--2468[label="0.166667;4pkt 4fpkt"];
1837--2490[label="0.0238095;1pkt 1fpkt"];
1837--2545[label="0.0666667;5pkt 5fpkt"];
1837--2727[label="0.0168067;2pkt 2fpkt"];
1837--3057[label="0.0147059;1pkt 1fpkt"];
1837--3069[label="0.0201342;3pkt 3fpkt"];
1837--3225[label="0.00671141;1pkt 1fpkt"];
1837--3374[label="0.0595238;5pkt 5fpkt"];
1837--3572[label="0.0134228;2pkt 2fpkt"];
1837--3593[label="0.25;1pkt 1fpkt"];
1837--3817[label="0.0666667;5pkt 5fpkt"];
1837--4285[label="0.0134228;2pkt 2fpkt"];
1837--4295[label="0.25;1pkt 1fpkt"];
1837--4401[label="0.0675676;5pkt 5fpkt"];
1837--4629[label="0.0134228;2pkt 2fpkt"];
2041--3593[label="1;4pkt 4fpkt"];
2041--4295[label="1;4pkt 4fpkt"];
3498--4248[label="1;2pkt 2fpkt"];
3498--4614[label="1;1pkt 1fpkt"];
3593--4295[label="1;4pkt 4fpkt"];
3715--4351[label="1;1pkt 1fpkt"];
4248--4614[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.181.89" src_ip="213.102.129.131" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
2046[label="208.96.219.5;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3595[label="208.96.219.5;7pkt 7fpkt", shape=invtriangle, color=brown];
4296[label="208.96.219.5;7pkt 7fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.219.5:80, 131.6.176.49:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1646: (7.14286%)&lt;BR/&gt; 1640: (7.14286%)&lt;BR/&gt; 1637: (7.14286%)&lt;BR/&gt; 1636: (7.14286%)&gt;];
}
2046--3595[label="1;7pkt 7fpkt"];
2046--4296[label="1;7pkt 7fpkt"];
3595--4296[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.176.49" src_ip="208.96.219.5" src_port="80"/>
    </slice>
    <from sec="1078290696" usec="0"/>
    <to sec="1078290713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.195.32.8"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
2071[label="107.129.168.9;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3602[label="107.129.168.9;5pkt 5fpkt", shape=invtriangle, color=brown];
4299[label="107.129.168.9;4pkt 4fpkt", shape=invhouse, color=bisque];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.129.168.9:1025, 131.72.230.113:137}[20%]&lt;BR/&gt;{107.129.168.9:1025, 131.72.230.114:137}[20%]&lt;BR/&gt;{107.129.168.9:1025, 131.72.230.116:137}[20%]&lt;BR/&gt;{107.129.168.9:1025, 131.72.230.117:137}[20%]&lt;BR/&gt;{107.129.168.9:1025, 131.72.230.118:137}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2071--3602[label="1;5pkt 5fpkt"];
2071--4299[label="1;4pkt 4fpkt"];
3602--4299[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="131.72.230.118" dst_port="137" src_ip="107.129.168.9" src_port="1025"/>
      <filter dst_ip="131.72.230.117" dst_port="137" src_ip="107.129.168.9" src_port="1025"/>
      <filter dst_ip="131.72.230.116" dst_port="137" src_ip="107.129.168.9" src_port="1025"/>
      <filter dst_ip="131.72.230.114" dst_port="137" src_ip="107.129.168.9" src_port="1025"/>
      <filter dst_ip="131.72.230.113" dst_port="137" src_ip="107.129.168.9" src_port="1025"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
2073[label="192.71.2.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3603[label="192.71.2.10;4pkt 4fpkt", shape=invtriangle, color=brown];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.71.2.10:80, 208.158.49.193:7484}[25%]&lt;BR/&gt;{192.71.2.10:80, 208.158.49.193:7522}[25%]&lt;BR/&gt;{192.71.2.10:80, 208.158.49.193:7523}[25%]&lt;BR/&gt;{192.71.2.10:80, 208.158.49.193:7542}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7542: (12.5%)&lt;BR/&gt; 7523: (12.5%)&lt;BR/&gt; 7522: (12.5%)&lt;BR/&gt; 7484: (12.5%)&gt;];
}
2073--3603[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.158.49.193" dst_port="7542" src_ip="192.71.2.10" src_port="80"/>
      <filter dst_ip="208.158.49.193" dst_port="7523" src_ip="192.71.2.10" src_port="80"/>
      <filter dst_ip="208.158.49.193" dst_port="7522" src_ip="192.71.2.10" src_port="80"/>
      <filter dst_ip="208.158.49.193" dst_port="7484" src_ip="192.71.2.10" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.11.253.10"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
2081[label="37.97.38.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3606[label="37.97.38.12;1pkt 1fpkt", shape=invtriangle, color=brown];
4302[label="37.97.38.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.97.38.12:6667, 168.168.52.113:1155}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1155: (50%)&gt;];
}
2081--3606[label="1;1pkt 1fpkt"];
2081--4302[label="1;1pkt 1fpkt"];
3606--4302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.52.113" dst_port="1155" src_ip="37.97.38.12" src_port="6667"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
2093[label="208.98.145.13;159pkt 159fpkt", shape=pentagon, color=darkviolet];
3611[label="208.98.145.13;160pkt 160fpkt", shape=invtriangle, color=brown];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.98.145.13:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2985: (0.940439%)&lt;BR/&gt; 2804: (0.626959%)&lt;BR/&gt; 2466: (0.626959%)&lt;BR/&gt; 2447: (0.626959%)&lt;BR/&gt; 2444: (0.626959%)&gt;];
}
2093--3611[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter src_ip="208.98.145.13"/>
    </slice>
    <from sec="1078290031" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
2094[label="33.198.147.13;109pkt 109fpkt", shape=pentagon, color=darkviolet];
3612[label="33.198.147.13;110pkt 110fpkt", shape=invtriangle, color=brown];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.198.147.13:*, *:3127}[99.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (49.5434%)&lt;BR/&gt; 3979: (0.913242%)&lt;BR/&gt; 4999: (0.456621%)&lt;BR/&gt; 4908: (0.456621%)&lt;BR/&gt; 4786: (0.456621%)&gt;];
}
2094--3612[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.198.147.13"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
2098[label="131.42.244.13;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3615[label="131.42.244.13;99pkt 99fpkt", shape=invtriangle, color=brown];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.42.244.13:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2098--3615[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="131.42.244.13"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
2102[label="33.152.29.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3618[label="33.152.29.15;4pkt 4fpkt", shape=invtriangle, color=brown];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.152.29.15:38227, 144.134.142.202:80}[25%]&lt;BR/&gt;{33.152.29.15:38229, 144.134.142.202:80}[25%]&lt;BR/&gt;{33.152.29.15:38230, 144.134.142.202:80}[25%]&lt;BR/&gt;{33.152.29.15:38231, 144.134.142.202:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38231: (14.2857%)&lt;BR/&gt; 38230: (14.2857%)&lt;BR/&gt; 38229: (14.2857%)&lt;BR/&gt; 38227: (7.14286%)&gt;];
}
2102--3618[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.142.202" dst_port="80" src_ip="33.152.29.15" src_port="38231"/>
      <filter dst_ip="144.134.142.202" dst_port="80" src_ip="33.152.29.15" src_port="38230"/>
      <filter dst_ip="144.134.142.202" dst_port="80" src_ip="33.152.29.15" src_port="38229"/>
      <filter dst_ip="144.134.142.202" dst_port="80" src_ip="33.152.29.15" src_port="38227"/>
    </slice>
    <from sec="1078290859" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.40.240.15"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
2113[label="90.9.130.17;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3626[label="90.9.130.17;111pkt 111fpkt", shape=invtriangle, color=brown];
4309[label="90.9.130.17;111pkt 111fpkt", shape=invhouse, color=bisque];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.9.130.17:*, *:1080}[33.3333%]&lt;BR/&gt;{90.9.130.17:*, *:3127}[33.3333%]&lt;BR/&gt;{90.9.130.17:*, *:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7169%)&lt;BR/&gt; 1080: (16.7169%)&lt;BR/&gt; 3127: (16.5663%)&lt;BR/&gt; 4993: (0.451807%)&lt;BR/&gt; 4984: (0.451807%)&gt;];
}
2113--3626[label="1;110pkt 110fpkt"];
2113--4309[label="1;110pkt 110fpkt"];
3626--4309[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="90.9.130.17"/>
      <filter dst_port="3127" src_ip="90.9.130.17"/>
      <filter dst_port="1080" src_ip="90.9.130.17"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
2116[label="144.135.246.17;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3628[label="144.135.246.17;7pkt 7fpkt", shape=invtriangle, color=brown];
4310[label="144.135.246.17;7pkt 7fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.246.17:*, 192.71.30.138:80}[42.8571%]&lt;BR/&gt;{144.135.246.17:*, 37.26.218.77:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5%)&lt;BR/&gt; 1189: (7.5%)&lt;BR/&gt; 1185: (7.5%)&lt;BR/&gt; 1061: (7.5%)&lt;BR/&gt; 1043: (7.5%)&gt;];
}
2116--3628[label="1;6pkt 6fpkt"];
2116--4310[label="1;6pkt 6fpkt"];
3628--4310[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="37.26.218.77" src_ip="144.135.246.17"/>
      <filter dst_ip="192.71.30.138" dst_port="80" src_ip="144.135.246.17"/>
    </slice>
    <from sec="1078290568" usec="0"/>
    <to sec="1078290839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
2119[label="194.161.66.18;182pkt 182fpkt", shape=pentagon, color=darkviolet];
3630[label="194.161.66.18;182pkt 182fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.161.66.18:61379, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61379: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2119--3630[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.161.66.18" src_port="61379"/>
    </slice>
    <from sec="1078290839" usec="0"/>
    <to sec="1078290870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.51.161.18"/>
    </slice>
    <from sec="1078290607" usec="0"/>
    <to sec="1078290617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
2122[label="38.178.57.19;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3632[label="38.178.57.19;2pkt 2fpkt", shape=invtriangle, color=brown];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.57.19:4216, 148.66.36.179:3127}[33.3333%]&lt;BR/&gt;{38.178.57.19:2619, 148.66.36.233:3127}[33.3333%]&lt;BR/&gt;{38.178.57.19:2357, 148.66.36.235:3127}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2619: (20%)&lt;BR/&gt; 2357: (20%)&lt;BR/&gt; 4216: (10%)&gt;];
}
2122--3632[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.66.36.235" dst_port="3127" src_ip="38.178.57.19" src_port="2357"/>
      <filter dst_ip="148.66.36.233" dst_port="3127" src_ip="38.178.57.19" src_port="2619"/>
      <filter dst_ip="148.66.36.179" dst_port="3127" src_ip="38.178.57.19" src_port="4216"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
2130[label="204.146.30.20;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3636[label="204.146.30.20;80pkt 80fpkt", shape=invtriangle, color=brown];
4314[label="204.146.30.20;80pkt 80fpkt", shape=invhouse, color=bisque];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.146.30.20:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4977: (0.627615%)&lt;BR/&gt; 4684: (0.627615%)&lt;BR/&gt; 4673: (0.627615%)&lt;BR/&gt; 4624: (0.627615%)&gt;];
}
2130--3636[label="1;79pkt 79fpkt"];
2130--4314[label="1;79pkt 79fpkt"];
3636--4314[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="204.146.30.20"/>
    </slice>
    <from sec="1078290185" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
2133[label="206.23.129.20;111pkt 111fpkt", shape=pentagon, color=darkviolet];
3637[label="206.23.129.20;112pkt 112fpkt", shape=invtriangle, color=brown];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.23.129.20:*, *:3127}[33.9286%]&lt;BR/&gt;{206.23.129.20:*, *:1080}[33.0357%]&lt;BR/&gt;{206.23.129.20:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.8161%)&lt;BR/&gt; 3128: (16.5919%)&lt;BR/&gt; 1080: (16.5919%)&lt;BR/&gt; 3183: (0.896861%)&lt;BR/&gt; 3071: (0.896861%)&gt;];
}
2133--3637[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="206.23.129.20"/>
      <filter dst_port="3128" src_ip="206.23.129.20"/>
      <filter dst_port="1080" src_ip="206.23.129.20"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
854[label="144.134.17.126;d;66pkt 66fpkt", shape=diamond, color=yellow];
2147[label="90.155.112.22;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3642[label="90.155.112.22;61pkt 61fpkt", shape=invtriangle, color=brown];
4318[label="90.155.112.22;61pkt 61fpkt", shape=invhouse, color=bisque];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.155.112.22:80, 144.134.17.126:*}[68.5393%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1113: (0.806452%)&lt;BR/&gt; 1112: (0.806452%)&lt;BR/&gt; 1111: (0.806452%)&lt;BR/&gt; 1110: (0.806452%)&gt;];
}
854--1965[label="0.0606061;4pkt 4fpkt"];
854--1980[label="0.0606061;4pkt 4fpkt"];
854--2138[label="0.0526316;1pkt 1fpkt"];
854--2147[label="0.616667;37pkt 37fpkt"];
854--3642[label="0.622951;38pkt 38fpkt"];
854--4318[label="0.622951;38pkt 38fpkt"];
2147--3642[label="1;60pkt 60fpkt"];
2147--4318[label="1;60pkt 60fpkt"];
3642--4318[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.17.126" src_ip="90.155.112.22" src_port="80"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
2152[label="144.135.245.22;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3644[label="144.135.245.22;103pkt 103fpkt", shape=invtriangle, color=brown];
4319[label="144.135.245.22;103pkt 103fpkt", shape=invhouse, color=bisque];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.245.22:7523, *:*}[95.1456%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7523: (47.5649%)&lt;BR/&gt; 1863: (1.46104%)&lt;BR/&gt; 4851: (0.974026%)&lt;BR/&gt; 80: (0.974026%)&lt;BR/&gt; 6229: (0.811688%)&gt;];
}
2152--3644[label="1;102pkt 102fpkt"];
2152--4319[label="1;102pkt 102fpkt"];
3644--4319[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="144.135.245.22" src_port="7523"/>
    </slice>
    <from sec="1078290025" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
2154[label="210.155.33.23;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3645[label="210.155.33.23;101pkt 101fpkt", shape=invtriangle, color=brown];
4320[label="210.155.33.23;101pkt 101fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.155.33.23:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4194: (0.990099%)&lt;BR/&gt; 4079: (0.990099%)&lt;BR/&gt; 3906: (0.990099%)&lt;BR/&gt; 3095: (0.990099%)&gt;];
}
2154--3645[label="1;101pkt 101fpkt"];
2154--4320[label="1;101pkt 101fpkt"];
3645--4320[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.155.33.23"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
2165[label="90.37.3.24;64pkt 64fpkt", shape=pentagon, color=darkviolet];
3650[label="90.37.3.24;64pkt 64fpkt", shape=invtriangle, color=brown];
4321[label="90.37.3.24;64pkt 64fpkt", shape=invhouse, color=bisque];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.37.3.24:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3425: (1.5625%)&lt;BR/&gt; 2065: (1.5625%)&lt;BR/&gt; 4697: (0.78125%)&lt;BR/&gt; 4671: (0.78125%)&gt;];
}
2165--3650[label="1;64pkt 64fpkt"];
2165--4321[label="1;64pkt 64fpkt"];
3650--4321[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="90.37.3.24"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
2169[label="53.84.96.24;111pkt 111fpkt", shape=pentagon, color=darkviolet];
3651[label="53.84.96.24;112pkt 112fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.84.96.24:*, *:1080}[33.9286%]&lt;BR/&gt;{53.84.96.24:*, *:3127}[33.0357%]&lt;BR/&gt;{53.84.96.24:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (17.0404%)&lt;BR/&gt; 3128: (16.5919%)&lt;BR/&gt; 3127: (16.3677%)&lt;BR/&gt; 4033: (0.896861%)&lt;BR/&gt; 1788: (0.896861%)&gt;];
}
2169--3651[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="53.84.96.24"/>
      <filter dst_port="3128" src_ip="53.84.96.24"/>
      <filter dst_port="3127" src_ip="53.84.96.24"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
2175[label="52.143.236.24;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3655[label="52.143.236.24;2pkt 2fpkt", shape=invtriangle, color=brown];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.143.236.24:33863, 131.6.144.39:135}[33.3333%]&lt;BR/&gt;{52.143.236.24:33971, 131.6.151.96:135}[33.3333%]&lt;BR/&gt;{52.143.236.24:33413, 131.6.151.98:135}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 33971: (20%)&lt;BR/&gt; 33413: (20%)&lt;BR/&gt; 33863: (10%)&gt;];
}
2175--3655[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.151.98" dst_port="135" src_ip="52.143.236.24" src_port="33413"/>
      <filter dst_ip="131.6.151.96" dst_port="135" src_ip="52.143.236.24" src_port="33971"/>
      <filter dst_ip="131.6.144.39" dst_port="135" src_ip="52.143.236.24" src_port="33863"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
2176[label="144.135.245.24;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3656[label="144.135.245.24;30pkt 30fpkt", shape=invtriangle, color=brown];
4323[label="144.135.245.24;31pkt 31fpkt", shape=invhouse, color=bisque];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.245.24:*, *:80}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3696%)&lt;BR/&gt; 32192: (1.63043%)&lt;BR/&gt; 32167: (1.63043%)&lt;BR/&gt; 32162: (1.63043%)&lt;BR/&gt; 32053: (1.63043%)&gt;];
}
2176--3656[label="1;30pkt 30fpkt"];
2176--4323[label="1;31pkt 31fpkt"];
3656--4323[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="144.135.245.24"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
738[label="144.134.57.36;d;192pkt 192fpkt", shape=diamond, color=yellow];
2173[label="213.28.145.24;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2178[label="206.50.64.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2254[label="206.50.65.37;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2388[label="206.50.65.57;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2525[label="79.14.216.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2960[label="206.10.232.143;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3654[label="213.28.145.24;4pkt 4fpkt", shape=invtriangle, color=brown];
3657[label="206.50.64.25;4pkt 4fpkt", shape=invtriangle, color=brown];
3745[label="206.50.65.57;3pkt 3fpkt", shape=invtriangle, color=brown];
4324[label="206.50.64.25;4pkt 4fpkt", shape=invhouse, color=bisque];
4367[label="206.50.65.57;2pkt 2fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.134.57.36:*}[90.8163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9782%)&lt;BR/&gt; 1863: (3.27511%)&lt;BR/&gt; 123: (1.31004%)&lt;BR/&gt; 1350: (0.873362%)&lt;BR/&gt; 1349: (0.873362%)&gt;];
}
738--873[label="0.0114943;2pkt 2fpkt"];
738--999[label="0.00537634;1pkt 1fpkt"];
738--1087[label="0.00943396;1pkt 1fpkt"];
738--1101[label="0.0107527;2pkt 2fpkt"];
738--1323[label="0.03125;2pkt 2fpkt"];
738--1529[label="0.117647;2pkt 2fpkt"];
738--1649[label="0.0681818;3pkt 3fpkt"];
738--1681[label="0.00689655;1pkt 1fpkt"];
738--1755[label="0.00520833;1pkt 1fpkt"];
738--1864[label="0.0128205;1pkt 1fpkt"];
738--1965[label="0.0260417;5pkt 5fpkt"];
738--1980[label="0.0260417;5pkt 5fpkt"];
738--2068[label="0.0363636;2pkt 2fpkt"];
738--2173[label="0.2;1pkt 1fpkt"];
738--2178[label="1;3pkt 3fpkt"];
738--2225[label="0.142857;2pkt 2fpkt"];
738--2254[label="1;4pkt 4fpkt"];
738--2388[label="1;3pkt 3fpkt"];
738--2525[label="1;2pkt 2fpkt"];
738--2539[label="0.0681818;3pkt 3fpkt"];
738--2657[label="0.0183486;2pkt 2fpkt"];
738--2960[label="1;3pkt 3fpkt"];
738--2961[label="0.0104167;2pkt 2fpkt"];
738--2976[label="0.106383;5pkt 5fpkt"];
738--2981[label="0.015625;3pkt 3fpkt"];
738--3254[label="0.266667;4pkt 4fpkt"];
738--3657[label="1;4pkt 4fpkt"];
738--3745[label="1;3pkt 3fpkt"];
738--3814[label="0.0681818;3pkt 3fpkt"];
738--3864[label="0.0185185;2pkt 2fpkt"];
738--4015[label="0.015625;3pkt 3fpkt"];
738--4324[label="1;4pkt 4fpkt"];
738--4367[label="1;2pkt 2fpkt"];
738--4428[label="0.0185185;2pkt 2fpkt"];
738--4500[label="0.015625;3pkt 3fpkt"];
2173--3654[label="1;4pkt 4fpkt"];
2178--3657[label="1;3pkt 3fpkt"];
2178--4324[label="1;3pkt 3fpkt"];
2388--3745[label="1;3pkt 3fpkt"];
2388--4367[label="1;2pkt 2fpkt"];
3657--4324[label="1;4pkt 4fpkt"];
3745--4367[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.57.36" src_port="80"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
2186[label="212.11.249.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3660[label="212.11.249.26;1pkt 1fpkt", shape=invtriangle, color=brown];
4326[label="212.11.249.26;2pkt 2fpkt", shape=invhouse, color=bisque];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.11.249.26:80, 208.145.209.211:1962}[50%]&lt;BR/&gt;{212.11.249.26:80, 208.145.209.211:1996}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1996: (37.5%)&lt;BR/&gt; 1962: (12.5%)&gt;];
}
2186--3660[label="1;1pkt 1fpkt"];
2186--4326[label="1;1pkt 1fpkt"];
3660--4326[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.209.211" dst_port="1996" src_ip="212.11.249.26" src_port="80"/>
      <filter dst_ip="208.145.209.211" dst_port="1962" src_ip="212.11.249.26" src_port="80"/>
    </slice>
    <from sec="1078290024" usec="0"/>
    <to sec="1078290374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
2206[label="39.185.233.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3668[label="39.185.233.30;1pkt 1fpkt", shape=invtriangle, color=brown];
4330[label="39.185.233.30;1pkt 1fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.185.233.30:25, 168.168.57.177:61734}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61734: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2206--3668[label="1;1pkt 1fpkt"];
2206--4330[label="1;1pkt 1fpkt"];
3668--4330[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.57.177" dst_port="61734" src_ip="39.185.233.30" src_port="25"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
2210[label="192.41.103.31;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3670[label="192.41.103.31;3pkt 3fpkt", shape=invtriangle, color=brown];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.41.103.31:80, 168.168.37.57:4513}[33.3333%]&lt;BR/&gt;{192.41.103.31:80, 208.158.49.134:17427}[33.3333%]&lt;BR/&gt;{192.41.103.31:80, 208.158.49.144:1411}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 17427: (16.6667%)&lt;BR/&gt; 4513: (16.6667%)&lt;BR/&gt; 1411: (16.6667%)&gt;];
}
2210--3670[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.158.49.144" dst_port="1411" src_ip="192.41.103.31" src_port="80"/>
      <filter dst_ip="208.158.49.134" dst_port="17427" src_ip="192.41.103.31" src_port="80"/>
      <filter dst_ip="168.168.37.57" dst_port="4513" src_ip="192.41.103.31" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
2211[label="90.184.141.31;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3671[label="90.184.141.31;2pkt 2fpkt", shape=invtriangle, color=brown];
4331[label="90.184.141.31;2pkt 2fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.184.141.31:80, 144.135.138.170:24797}[50%]&lt;BR/&gt;{90.184.141.31:80, 144.135.138.170:24811}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24811: (25%)&lt;BR/&gt; 24797: (25%)&gt;];
}
2211--3671[label="1;2pkt 2fpkt"];
2211--4331[label="1;2pkt 2fpkt"];
3671--4331[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.138.170" dst_port="24811" src_ip="90.184.141.31" src_port="80"/>
      <filter dst_ip="144.135.138.170" dst_port="24797" src_ip="90.184.141.31" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
2217[label="220.78.59.32;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3672[label="220.78.59.32;4pkt 4fpkt", shape=invtriangle, color=brown];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.78.59.32:80, 144.134.129.120:1838}[25%]&lt;BR/&gt;{220.78.59.32:80, 144.134.129.120:1840}[25%]&lt;BR/&gt;{220.78.59.32:80, 144.134.129.120:1844}[25%]&lt;BR/&gt;{220.78.59.32:80, 144.134.129.120:1848}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1848: (12.5%)&lt;BR/&gt; 1844: (12.5%)&lt;BR/&gt; 1840: (12.5%)&lt;BR/&gt; 1838: (12.5%)&gt;];
}
2217--3672[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.129.120" dst_port="1848" src_ip="220.78.59.32" src_port="80"/>
      <filter dst_ip="144.134.129.120" dst_port="1844" src_ip="220.78.59.32" src_port="80"/>
      <filter dst_ip="144.134.129.120" dst_port="1840" src_ip="220.78.59.32" src_port="80"/>
      <filter dst_ip="144.134.129.120" dst_port="1838" src_ip="220.78.59.32" src_port="80"/>
    </slice>
    <from sec="1078290638" usec="0"/>
    <to sec="1078290772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
2221[label="207.51.178.32;84pkt 84fpkt", shape=pentagon, color=darkviolet];
3674[label="207.51.178.32;84pkt 84fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.51.178.32:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1430: (1.19048%)&lt;BR/&gt; 4948: (0.595238%)&lt;BR/&gt; 4809: (0.595238%)&lt;BR/&gt; 4671: (0.595238%)&gt;];
}
2221--3674[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="207.51.178.32"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
298[label="144.135.176.194;d;263pkt 263fpkt", shape=diamond, color=yellow];
611[label="195.36.172.33;s;38pkt 38fpkt", shape=diamond, color=yellow];
1123[label="206.12.150.40;s;74pkt 74fpkt", shape=diamond, color=yellow];
1142[label="144.135.205.180;d;99pkt 99fpkt", shape=diamond, color=yellow];
1758[label="206.12.150.40;s;58pkt 58fpkt", shape=hexagon, color=black];
2083[label="194.24.92.12;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2192[label="213.28.145.28;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2226[label="195.36.172.33;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2280[label="206.12.150.40;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3049[label="37.26.168.159;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3336[label="213.28.150.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3432[label="204.148.195.225;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3532[label="213.28.144.246;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3675[label="195.36.172.33;51pkt 51fpkt", shape=invtriangle, color=brown];
3698[label="206.12.150.40;79pkt 79fpkt", shape=invtriangle, color=brown];
4177[label="213.28.150.208;5pkt 5fpkt", shape=invtriangle, color=brown];
4225[label="204.148.195.225;7pkt 7fpkt", shape=invtriangle, color=brown];
4265[label="213.28.144.246;5pkt 5fpkt", shape=invtriangle, color=brown];
4333[label="195.36.172.33;51pkt 51fpkt", shape=invhouse, color=bisque];
4343[label="206.12.150.40;78pkt 78fpkt", shape=invhouse, color=bisque];
4576[label="213.28.150.208;5pkt 5fpkt", shape=invhouse, color=bisque];
4601[label="204.148.195.225;7pkt 7fpkt", shape=invhouse, color=bisque];
4619[label="213.28.144.246;4pkt 4fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.135.176.194:*}[43.1169%]&lt;BR/&gt;{*:*, 144.135.205.180:*}[25.7143%]&lt;BR/&gt;{206.12.150.40:443, 144.135.176.194:*}[20.5195%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.1038%)&lt;BR/&gt; 443: (22.3553%)&lt;BR/&gt; 1863: (2.69461%)&lt;BR/&gt; 53: (1.0978%)&lt;BR/&gt; 32769: (0.648703%)&gt;];
}
298--447[label="0.0114068;3pkt 3fpkt"];
298--528[label="0.00813008;1pkt 1fpkt"];
298--611[label="1;38pkt 38fpkt"];
298--695[label="0.00380228;1pkt 1fpkt"];
298--702[label="0.0114068;3pkt 3fpkt"];
298--709[label="0.017094;2pkt 2fpkt"];
298--758[label="0.00380228;1pkt 1fpkt"];
298--770[label="0.0204082;2pkt 2fpkt"];
298--873[label="0.00574713;1pkt 1fpkt"];
298--999[label="0.00537634;1pkt 1fpkt"];
298--1000[label="0.0162602;2pkt 2fpkt"];
298--1012[label="0.0235294;2pkt 2fpkt"];
298--1123[label="1;74pkt 74fpkt"];
298--1139[label="0.0125;1pkt 1fpkt"];
298--1237[label="0.0307692;2pkt 2fpkt"];
298--1246[label="0.0307692;2pkt 2fpkt"];
298--1252[label="0.0384615;3pkt 3fpkt"];
298--1361[label="0.0190476;2pkt 2fpkt"];
298--1571[label="0.0192308;1pkt 1fpkt"];
298--1681[label="0.00689655;1pkt 1fpkt"];
298--1756[label="0.0210526;2pkt 2fpkt"];
298--1758[label="1;58pkt 58fpkt"];
298--1965[label="0.0418251;11pkt 11fpkt"];
298--1980[label="0.0418251;11pkt 11fpkt"];
298--2083[label="1;10pkt 10fpkt"];
298--2163[label="0.018018;2pkt 2fpkt"];
298--2205[label="0.0307692;2pkt 2fpkt"];
298--2226[label="1;51pkt 51fpkt"];
298--2280[label="0.936709;74pkt 74fpkt"];
298--2299[label="0.5;1pkt 1fpkt"];
298--2409[label="0.0149254;2pkt 2fpkt"];
298--2657[label="0.00917431;1pkt 1fpkt"];
298--2795[label="0.0357143;1pkt 1fpkt"];
298--2842[label="0.166667;1pkt 1fpkt"];
298--2849[label="0.142857;1pkt 1fpkt"];
298--2900[label="0.222222;2pkt 2fpkt"];
298--2959[label="0.0210526;2pkt 2fpkt"];
298--3049[label="0.411765;7pkt 7fpkt"];
298--3069[label="0.00380228;1pkt 1fpkt"];
298--3070[label="0.016;2pkt 2fpkt"];
298--3072[label="0.0114068;3pkt 3fpkt"];
298--3104[label="0.0183486;2pkt 2fpkt"];
298--3336[label="0.2;1pkt 1fpkt"];
298--3432[label="1;8pkt 8fpkt"];
298--3532[label="0.2;1pkt 1fpkt"];
298--3572[label="0.0114068;3pkt 3fpkt"];
298--3667[label="0.03125;2pkt 2fpkt"];
298--3675[label="1;51pkt 51fpkt"];
298--3698[label="0.936709;74pkt 74fpkt"];
298--3756[label="0.0148148;2pkt 2fpkt"];
298--3864[label="0.00925926;1pkt 1fpkt"];
298--3979[label="0.125;1pkt 1fpkt"];
298--4061[label="0.0183486;2pkt 2fpkt"];
298--4177[label="0.2;1pkt 1fpkt"];
298--4225[label="1;7pkt 7fpkt"];
298--4265[label="0.2;1pkt 1fpkt"];
298--4285[label="0.0114068;3pkt 3fpkt"];
298--4333[label="1;51pkt 51fpkt"];
298--4343[label="0.935897;73pkt 73fpkt"];
298--4428[label="0.00925926;1pkt 1fpkt"];
298--4576[label="0.2;1pkt 1fpkt"];
298--4590[label="0.00380228;1pkt 1fpkt"];
298--4601[label="1;7pkt 7fpkt"];
298--4629[label="0.0114068;3pkt 3fpkt"];
611--1965[label="0.105263;4pkt 4fpkt"];
611--1980[label="0.105263;4pkt 4fpkt"];
611--2226[label="1;38pkt 38fpkt"];
611--3675[label="1;38pkt 38fpkt"];
611--4333[label="1;38pkt 38fpkt"];
1123--1758[label="1;58pkt 58fpkt"];
1123--2280[label="1;74pkt 74fpkt"];
1123--3698[label="1;74pkt 74fpkt"];
1123--4343[label="0.986486;73pkt 73fpkt"];
1142--1256[label="0.015873;1pkt 1fpkt"];
1142--1748[label="0.222222;22pkt 22fpkt"];
1142--1750[label="0.0163934;1pkt 1fpkt"];
1142--2192[label="0.333333;1pkt 1fpkt"];
1142--2289[label="0.25;1pkt 1fpkt"];
1142--2416[label="0.25;1pkt 1fpkt"];
1142--2687[label="0.0144928;1pkt 1fpkt"];
1142--2878[label="0.020202;2pkt 2fpkt"];
1142--2927[label="0.0333333;2pkt 2fpkt"];
1142--3180[label="0.0185185;1pkt 1fpkt"];
1142--3256[label="0.0212766;1pkt 1fpkt"];
1142--3336[label="0.4;2pkt 2fpkt"];
1142--3454[label="0.010101;1pkt 1fpkt"];
1142--3880[label="0.0144928;1pkt 1fpkt"];
1142--4100[label="0.0185185;1pkt 1fpkt"];
1142--4177[label="0.4;2pkt 2fpkt"];
1142--4436[label="0.0144928;1pkt 1fpkt"];
1142--4576[label="0.4;2pkt 2fpkt"];
1758--2280[label="1;58pkt 58fpkt"];
1758--3698[label="1;58pkt 58fpkt"];
1758--4343[label="0.982759;57pkt 57fpkt"];
2226--3675[label="1;51pkt 51fpkt"];
2226--4333[label="1;51pkt 51fpkt"];
2280--3698[label="1;79pkt 79fpkt"];
2280--4343[label="1;78pkt 78fpkt"];
3336--4177[label="1;5pkt 5fpkt"];
3336--4576[label="1;5pkt 5fpkt"];
3432--4225[label="1;7pkt 7fpkt"];
3432--4601[label="1;7pkt 7fpkt"];
3532--4265[label="1;5pkt 5fpkt"];
3532--4619[label="1;4pkt 4fpkt"];
3675--4333[label="1;51pkt 51fpkt"];
3698--4343[label="1;78pkt 78fpkt"];
4177--4576[label="1;5pkt 5fpkt"];
4225--4601[label="1;7pkt 7fpkt"];
4265--4619[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.205.180"/>
      <filter dst_ip="144.135.176.194" src_port="80"/>
      <filter dst_ip="144.135.176.194" src_ip="206.12.150.40" src_port="443"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
2227[label="194.173.197.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3676[label="194.173.197.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.197.33:3762, 168.168.49.174:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3762: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
2227--3676[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.49.174" dst_port="3127" src_ip="194.173.197.33" src_port="3762"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
2228[label="197.1.215.33;113pkt 113fpkt", shape=pentagon, color=darkviolet];
3677[label="197.1.215.33;113pkt 113fpkt", shape=invtriangle, color=brown];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.1.215.33:2589, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2589: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2228--3677[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.1.215.33" src_port="2589"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
2231[label="204.90.60.34;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3679[label="204.90.60.34;8pkt 8fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.90.60.34:80, 144.135.205.180:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1299: (6.66667%)&lt;BR/&gt; 1298: (6.66667%)&lt;BR/&gt; 1297: (6.66667%)&lt;BR/&gt; 1296: (6.66667%)&gt;];
}
2231--3679[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.205.180" src_ip="204.90.60.34" src_port="80"/>
    </slice>
    <from sec="1078290822" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
2235[label="90.75.140.34;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3680[label="90.75.140.34;20pkt 20fpkt", shape=invtriangle, color=brown];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.75.140.34:80, 144.134.0.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1664: (2.5%)&lt;BR/&gt; 1663: (2.5%)&lt;BR/&gt; 1662: (2.5%)&lt;BR/&gt; 1661: (2.5%)&gt;];
}
2235--3680[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.0.1" src_ip="90.75.140.34" src_port="80"/>
    </slice>
    <from sec="1078290865" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
2236[label="90.166.155.34;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3681[label="90.166.155.34;99pkt 99fpkt", shape=invtriangle, color=brown];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.166.155.34:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2980: (1.00503%)&lt;BR/&gt; 1198: (1.00503%)&lt;BR/&gt; 1114: (1.00503%)&lt;BR/&gt; 4759: (0.502513%)&gt;];
}
2236--3681[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="90.166.155.34"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
2250[label="197.246.162.36;202pkt 202fpkt", shape=pentagon, color=darkviolet];
3684[label="197.246.162.36;201pkt 201fpkt", shape=invtriangle, color=brown];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.246.162.36:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2250--3684[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.246.162.36" src_port="1025"/>
    </slice>
    <from sec="1078290256" usec="0"/>
    <to sec="1078290288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
2260[label="195.48.24.38;115pkt 115fpkt", shape=pentagon, color=darkviolet];
3687[label="195.48.24.38;114pkt 114fpkt", shape=invtriangle, color=brown];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.48.24.38:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4997: (0.436681%)&lt;BR/&gt; 4989: (0.436681%)&lt;BR/&gt; 4943: (0.436681%)&lt;BR/&gt; 4903: (0.436681%)&gt;];
}
2260--3687[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="195.48.24.38"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
2265[label="213.28.144.38;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3690[label="213.28.144.38;4pkt 4fpkt", shape=invtriangle, color=brown];
4338[label="213.28.144.38;5pkt 5fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.144.38:1863, 144.135.121.32:33484}[20%]&lt;BR/&gt;{213.28.144.38:1863, 131.6.51.95:1029}[20%]&lt;BR/&gt;{213.28.144.38:1863, 144.135.148.112:2217}[20%]&lt;BR/&gt;{213.28.144.38:1863, 131.6.217.128:1031}[20%]&lt;BR/&gt;{213.28.144.38:1863, 172.136.84.129:1034}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2217: (10.7143%)&lt;BR/&gt; 1034: (10.7143%)&lt;BR/&gt; 1031: (10.7143%)&lt;BR/&gt; 1029: (10.7143%)&gt;];
}
2265--3690[label="1;4pkt 4fpkt"];
2265--4338[label="1;5pkt 5fpkt"];
3690--4338[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.84.129" dst_port="1034" src_ip="213.28.144.38" src_port="1863"/>
      <filter dst_ip="131.6.217.128" dst_port="1031" src_ip="213.28.144.38" src_port="1863"/>
      <filter dst_ip="144.135.148.112" dst_port="2217" src_ip="213.28.144.38" src_port="1863"/>
      <filter dst_ip="131.6.51.95" dst_port="1029" src_ip="213.28.144.38" src_port="1863"/>
      <filter dst_ip="144.135.121.32" dst_port="33484" src_ip="213.28.144.38" src_port="1863"/>
    </slice>
    <from sec="1078290020" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
2267[label="148.66.234.38;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3691[label="148.66.234.38;43pkt 43fpkt", shape=invtriangle, color=brown];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.66.234.38:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2267--3691[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="148.66.234.38"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
1241[label="39.218.191.58;d;109pkt 109fpkt", shape=diamond, color=yellow];
2268[label="144.135.71.39;69pkt 69fpkt", shape=pentagon, color=darkviolet];
3692[label="144.135.71.39;69pkt 69fpkt", shape=invtriangle, color=brown];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.71.39:*, 39.218.191.58:8200}[46.7742%]&lt;BR/&gt;{144.135.134.80:*, 39.218.191.58:80}[44.3548%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (38.4615%)&lt;BR/&gt; 80: (11.1336%)&lt;BR/&gt; 2131: (0.809717%)&lt;BR/&gt; 2126: (0.809717%)&lt;BR/&gt; 2149: (0.607287%)&gt;];
}
1241--1967[label="0.0275229;3pkt 3fpkt"];
1241--1971[label="0.0275229;3pkt 3fpkt"];
1241--1981[label="0.0275229;3pkt 3fpkt"];
1241--1983[label="0.0275229;3pkt 3fpkt"];
1241--1991[label="0.0275229;3pkt 3fpkt"];
1241--1992[label="0.0275229;3pkt 3fpkt"];
1241--2268[label="0.782609;54pkt 54fpkt"];
1241--3692[label="0.782609;54pkt 54fpkt"];
2268--3692[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="39.218.191.58" dst_port="8200" src_ip="144.135.71.39"/>
      <filter dst_ip="39.218.191.58" dst_port="80" src_ip="144.135.134.80"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
2276[label="88.11.41.40;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3695[label="88.11.41.40;112pkt 112fpkt", shape=invtriangle, color=brown];
4340[label="88.11.41.40;112pkt 112fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.11.41.40:*, *:1080}[33.9286%]&lt;BR/&gt;{88.11.41.40:*, *:3127}[33.0357%]&lt;BR/&gt;{88.11.41.40:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.9643%)&lt;BR/&gt; 3128: (16.5179%)&lt;BR/&gt; 3127: (16.5179%)&lt;BR/&gt; 4994: (0.446429%)&lt;BR/&gt; 4967: (0.446429%)&gt;];
}
2276--3695[label="1;112pkt 112fpkt"];
2276--4340[label="1;112pkt 112fpkt"];
3695--4340[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="88.11.41.40"/>
      <filter dst_port="3128" src_ip="88.11.41.40"/>
      <filter dst_port="3127" src_ip="88.11.41.40"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
954[label="144.135.245.27;d;14pkt 14fpkt", shape=diamond, color=yellow];
2279[label="213.28.145.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3697[label="213.28.145.40;2pkt 2fpkt", shape=invtriangle, color=brown];
4342[label="213.28.145.40;3pkt 3fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.135.245.27:*}[50%]&lt;BR/&gt;{*:1863, 144.135.245.27:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (29.5455%)&lt;BR/&gt; 80: (18.1818%)&lt;BR/&gt; 29412: (9.09091%)&lt;BR/&gt; 3736: (6.81818%)&lt;BR/&gt; 3406: (4.54545%)&gt;];
}
954--1000[label="0.142857;2pkt 2fpkt"];
954--1756[label="0.142857;2pkt 2fpkt"];
954--1965[label="0.142857;2pkt 2fpkt"];
954--1980[label="0.142857;2pkt 2fpkt"];
954--2279[label="0.333333;1pkt 1fpkt"];
954--2409[label="0.142857;2pkt 2fpkt"];
954--2913[label="0.142857;2pkt 2fpkt"];
954--3697[label="0.5;1pkt 1fpkt"];
954--3756[label="0.142857;2pkt 2fpkt"];
954--4342[label="0.333333;1pkt 1fpkt"];
2279--3697[label="1;2pkt 2fpkt"];
2279--4342[label="1;3pkt 3fpkt"];
3697--4342[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.245.27" src_port="80"/>
      <filter dst_ip="144.135.245.27" src_port="1863"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
2288[label="37.104.144.41;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3701[label="37.104.144.41;3pkt 3fpkt", shape=invtriangle, color=brown];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.104.144.41:80, 148.33.131.74:4274}[33.3333%]&lt;BR/&gt;{37.104.144.41:80, 172.136.150.144:4724}[33.3333%]&lt;BR/&gt;{37.104.144.41:80, 172.136.84.171:1257}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4724: (16.6667%)&lt;BR/&gt; 4274: (16.6667%)&lt;BR/&gt; 1257: (16.6667%)&gt;];
}
2288--3701[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.84.171" dst_port="1257" src_ip="37.104.144.41" src_port="80"/>
      <filter dst_ip="172.136.150.144" dst_port="4724" src_ip="37.104.144.41" src_port="80"/>
      <filter dst_ip="148.33.131.74" dst_port="4274" src_ip="37.104.144.41" src_port="80"/>
    </slice>
    <from sec="1078290061" usec="0"/>
    <to sec="1078290783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
2292[label="90.225.218.41;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3702[label="90.225.218.41;255pkt 255fpkt", shape=invtriangle, color=brown];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.225.218.41:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2292--3702[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.225.218.41" src_port="1033"/>
    </slice>
    <from sec="1078290586" usec="0"/>
    <to sec="1078290601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
2296[label="33.70.82.42;215pkt 215fpkt", shape=pentagon, color=darkviolet];
3704[label="33.70.82.42;215pkt 215fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.70.82.42:29965, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29965: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2296--3704[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="33.70.82.42" src_port="29965"/>
    </slice>
    <from sec="1078290424" usec="0"/>
    <to sec="1078290457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
2298[label="213.28.144.42;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3706[label="213.28.144.42;4pkt 4fpkt", shape=invtriangle, color=brown];
4345[label="213.28.144.42;3pkt 3fpkt", shape=invhouse, color=bisque];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.144.42:1863, 144.135.245.22:1044}[25%]&lt;BR/&gt;{213.28.144.42:1863, 172.136.183.50:1038}[25%]&lt;BR/&gt;{213.28.144.42:1863, 144.135.225.59:1033}[25%]&lt;BR/&gt;{213.28.144.42:1863, 144.135.76.229:1036}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1044: (13.6364%)&lt;BR/&gt; 1038: (13.6364%)&lt;BR/&gt; 1033: (13.6364%)&lt;BR/&gt; 1036: (9.09091%)&gt;];
}
2298--3706[label="1;4pkt 4fpkt"];
2298--4345[label="1;3pkt 3fpkt"];
3706--4345[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.76.229" dst_port="1036" src_ip="213.28.144.42" src_port="1863"/>
      <filter dst_ip="144.135.225.59" dst_port="1033" src_ip="213.28.144.42" src_port="1863"/>
      <filter dst_ip="172.136.183.50" dst_port="1038" src_ip="213.28.144.42" src_port="1863"/>
      <filter dst_ip="144.135.245.22" dst_port="1044" src_ip="213.28.144.42" src_port="1863"/>
    </slice>
    <from sec="1078290025" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
1089[label="38.131.57.43;s;245pkt 245fpkt", shape=diamond, color=yellow];
2302[label="38.131.57.43;268pkt 268fpkt", shape=pentagon, color=darkviolet];
3707[label="38.131.57.43;268pkt 268fpkt", shape=invtriangle, color=brown];
4346[label="38.131.57.43;267pkt 267fpkt", shape=invhouse, color=bisque];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.131.57.43:*, *:3127}[33.4572%]&lt;BR/&gt;{38.131.57.43:*, *:3128}[33.4572%]&lt;BR/&gt;{38.131.57.43:*, *:1080}[33.0855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7939%)&lt;BR/&gt; 3127: (16.6031%)&lt;BR/&gt; 1080: (16.6031%)&lt;BR/&gt; 4368: (0.381679%)&lt;BR/&gt; 3617: (0.333969%)&gt;];
}
1089--2302[label="0.995918;244pkt 244fpkt"];
1089--3707[label="0.995918;244pkt 244fpkt"];
1089--4346[label="0.991837;243pkt 243fpkt"];
2302--3707[label="1;268pkt 268fpkt"];
2302--4346[label="1;267pkt 267fpkt"];
3707--4346[label="1;267pkt 267fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="38.131.57.43"/>
      <filter dst_port="3127" src_ip="38.131.57.43"/>
      <filter dst_port="1080" src_ip="38.131.57.43"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
2310[label="107.208.38.44;225pkt 225fpkt", shape=pentagon, color=darkviolet];
3712[label="107.208.38.44;225pkt 225fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.208.38.44:*, *:3128}[33.7778%]&lt;BR/&gt;{107.208.38.44:*, *:1080}[33.3333%]&lt;BR/&gt;{107.208.38.44:*, *:3127}[32.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.8889%)&lt;BR/&gt; 1080: (16.6667%)&lt;BR/&gt; 3127: (16.4444%)&lt;BR/&gt; 4254: (0.444444%)&lt;BR/&gt; 3145: (0.444444%)&gt;];
}
2310--3712[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="107.208.38.44"/>
      <filter dst_port="1080" src_ip="107.208.38.44"/>
      <filter dst_port="3127" src_ip="107.208.38.44"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
2324[label="144.135.172.45;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3719[label="144.135.172.45;33pkt 33fpkt", shape=invtriangle, color=brown];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.172.45:*, *:113}[21.2121%]&lt;BR/&gt;{144.135.172.45:25, *:*}[21.2121%]&lt;BR/&gt;{144.135.172.45:53, *:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (18.4615%)&lt;BR/&gt; 0: (18.4615%)&lt;BR/&gt; 25: (15.3846%)&lt;BR/&gt; 113: (10.7692%)&lt;BR/&gt; 80: (4.61538%)&gt;];
}
2324--3719[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="144.135.172.45" src_port="53"/>
      <filter src_ip="144.135.172.45" src_port="25"/>
      <filter dst_port="113" src_ip="144.135.172.45"/>
    </slice>
    <from sec="1078290120" usec="0"/>
    <to sec="1078290814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
2332[label="209.97.101.46;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3720[label="209.97.101.46;2pkt 2fpkt", shape=invtriangle, color=brown];
4354[label="209.97.101.46;2pkt 2fpkt", shape=invhouse, color=bisque];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.101.46:46530, 208.145.5.39:80}[50%]&lt;BR/&gt;{209.97.101.46:48909, 208.145.5.39:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48909: (25%)&lt;BR/&gt; 46530: (25%)&gt;];
}
2332--3720[label="1;2pkt 2fpkt"];
2332--4354[label="1;2pkt 2fpkt"];
3720--4354[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.5.39" dst_port="80" src_ip="209.97.101.46" src_port="48909"/>
      <filter dst_ip="208.145.5.39" dst_port="80" src_ip="209.97.101.46" src_port="46530"/>
    </slice>
    <from sec="1078290393" usec="0"/>
    <to sec="1078290401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
2333[label="192.41.105.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3721[label="192.41.105.46;1pkt 1fpkt", shape=invtriangle, color=brown];
4355[label="192.41.105.46;1pkt 1fpkt", shape=invhouse, color=bisque];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.41.105.46:80, 168.168.37.57:4503}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4503: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2333--3721[label="1;1pkt 1fpkt"];
2333--4355[label="1;1pkt 1fpkt"];
3721--4355[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.37.57" dst_port="4503" src_ip="192.41.105.46" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
2338[label="37.1.39.47;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3722[label="37.1.39.47;112pkt 112fpkt", shape=invtriangle, color=brown];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.1.39.47:*, *:3127}[33.9286%]&lt;BR/&gt;{37.1.39.47:*, *:1080}[33.0357%]&lt;BR/&gt;{37.1.39.47:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.9643%)&lt;BR/&gt; 3128: (16.5179%)&lt;BR/&gt; 1080: (16.5179%)&lt;BR/&gt; 4918: (0.446429%)&lt;BR/&gt; 4842: (0.446429%)&gt;];
}
2338--3722[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="37.1.39.47"/>
      <filter dst_port="3128" src_ip="37.1.39.47"/>
      <filter dst_port="1080" src_ip="37.1.39.47"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
2343[label="208.158.34.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3725[label="208.158.34.48;1pkt 1fpkt", shape=invtriangle, color=brown];
4357[label="208.158.34.48;2pkt 2fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.158.34.48:0, 204.34.19.103:0}[50%]&lt;BR/&gt;{208.158.34.48:0, 55.162.250.191:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2343--3725[label="1;1pkt 1fpkt"];
2343--4357[label="1;1pkt 1fpkt"];
3725--4357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="55.162.250.191" src_ip="208.158.34.48"/>
      <filter dst_ip="204.34.19.103" src_ip="208.158.34.48"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
2345[label="32.20.105.48;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3726[label="32.20.105.48;121pkt 121fpkt", shape=invtriangle, color=brown];
4359[label="32.20.105.48;121pkt 121fpkt", shape=invhouse, color=bisque];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.20.105.48:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2345--3726[label="1;120pkt 120fpkt"];
2345--4359[label="1;120pkt 120fpkt"];
3726--4359[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="32.20.105.48" src_port="1027"/>
    </slice>
    <from sec="1078290539" usec="0"/>
    <to sec="1078290563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
2348[label="194.189.194.48;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3728[label="194.189.194.48;54pkt 54fpkt", shape=invtriangle, color=brown];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.189.194.48:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4930: (0.917431%)&lt;BR/&gt; 4903: (0.917431%)&lt;BR/&gt; 4896: (0.917431%)&lt;BR/&gt; 4815: (0.917431%)&gt;];
}
2348--3728[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.189.194.48"/>
    </slice>
    <from sec="1078290681" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
2349[label="202.137.73.49;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3729[label="202.137.73.49;100pkt 100fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.137.73.49:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3200: (1%)&lt;BR/&gt; 4992: (0.5%)&lt;BR/&gt; 4949: (0.5%)&lt;BR/&gt; 4864: (0.5%)&gt;];
}
2349--3729[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="202.137.73.49"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
2369[label="53.40.0.53;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3735[label="53.40.0.53;38pkt 38fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.40.0.53:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4999: (1.31579%)&lt;BR/&gt; 4888: (1.31579%)&lt;BR/&gt; 4784: (1.31579%)&lt;BR/&gt; 4766: (1.31579%)&gt;];
}
2369--3735[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="53.40.0.53"/>
    </slice>
    <from sec="1078290018" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
2373[label="107.210.130.53;91pkt 91fpkt", shape=pentagon, color=darkviolet];
3736[label="107.210.130.53;91pkt 91fpkt", shape=invtriangle, color=brown];
4362[label="107.210.130.53;91pkt 91fpkt", shape=invhouse, color=bisque];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.210.130.53:*, *:3128}[35.1648%]&lt;BR/&gt;{107.210.130.53:*, *:1080}[32.967%]&lt;BR/&gt;{107.210.130.53:*, *:3127}[31.8681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.5824%)&lt;BR/&gt; 1080: (16.4835%)&lt;BR/&gt; 3127: (15.9341%)&lt;BR/&gt; 4917: (0.549451%)&lt;BR/&gt; 4904: (0.549451%)&gt;];
}
2373--3736[label="1;91pkt 91fpkt"];
2373--4362[label="1;91pkt 91fpkt"];
3736--4362[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="107.210.130.53"/>
      <filter dst_port="1080" src_ip="107.210.130.53"/>
      <filter dst_port="3127" src_ip="107.210.130.53"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.170.109.54"/>
    </slice>
    <from sec="1078290804" usec="0"/>
    <to sec="1078290874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.76.163.54"/>
    </slice>
    <from sec="1078290448" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.40.250.55"/>
    </slice>
    <from sec="1078290543" usec="0"/>
    <to sec="1078290809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
2404[label="37.96.10.59;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3753[label="37.96.10.59;99pkt 99fpkt", shape=invtriangle, color=brown];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.96.10.59:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4912: (0.507614%)&lt;BR/&gt; 4880: (0.507614%)&lt;BR/&gt; 4834: (0.507614%)&lt;BR/&gt; 4628: (0.507614%)&gt;];
}
2404--3753[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="37.96.10.59"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
2406[label="39.133.48.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3755[label="39.133.48.59;1pkt 1fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.133.48.59:80, 172.136.189.180:3405}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3405: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2406--3755[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.189.180" dst_port="3405" src_ip="39.133.48.59" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
203[label="168.168.36.85;d;180pkt 180fpkt", shape=diamond, color=yellow];
291[label="144.135.138.228;d;413pkt 413fpkt", shape=diamond, color=yellow];
317[label="144.135.138.225;d;516pkt 516fpkt", shape=diamond, color=yellow];
388[label="168.168.36.69;d;585pkt 585fpkt", shape=diamond, color=yellow];
402[label="144.135.70.154;d;275pkt 275fpkt", shape=diamond, color=yellow];
473[label="168.168.51.108;d;414pkt 414fpkt", shape=diamond, color=yellow];
474[label="88.0.65.141;s;149pkt 149fpkt", shape=diamond, color=yellow];
485[label="144.134.52.155;d;236pkt 236fpkt", shape=diamond, color=yellow];
487[label="131.6.149.207;d;173pkt 173fpkt", shape=diamond, color=yellow];
533[label="168.168.14.8;d;63pkt 63fpkt", shape=diamond, color=yellow];
565[label="147.21.16.222;s;223pkt 223fpkt", shape=diamond, color=yellow];
574[label="168.168.45.249;d;138pkt 138fpkt", shape=diamond, color=yellow];
598[label="36.229.7.164;s;157pkt 157fpkt", shape=diamond, color=yellow];
606[label="36.228.99.62;s;74pkt 74fpkt", shape=diamond, color=yellow];
618[label="168.168.57.163;d;186pkt 186fpkt", shape=diamond, color=yellow];
619[label="144.134.243.45;d;361pkt 361fpkt", shape=diamond, color=yellow];
623[label="36.228.99.60;s;109pkt 109fpkt", shape=diamond, color=yellow];
624[label="168.168.37.198;d;71pkt 71fpkt", shape=diamond, color=yellow];
632[label="131.6.150.4;d;205pkt 205fpkt", shape=diamond, color=yellow];
708[label="36.58.102.74;s;57pkt 57fpkt", shape=diamond, color=yellow];
717[label="168.168.6.171;d;109pkt 109fpkt", shape=diamond, color=yellow];
718[label="168.168.13.209;d;90pkt 90fpkt", shape=diamond, color=yellow];
725[label="33.100.132.166;s;489pkt 489fpkt", shape=diamond, color=yellow];
727[label="37.26.180.249;s;50pkt 50fpkt", shape=diamond, color=yellow];
752[label="168.168.40.145;d;92pkt 92fpkt", shape=diamond, color=yellow];
774[label="148.33.104.131;d;171pkt 171fpkt", shape=diamond, color=yellow];
828[label="36.229.7.165;s;56pkt 56fpkt", shape=diamond, color=yellow];
856[label="37.26.160.126;s;65pkt 65fpkt", shape=diamond, color=yellow];
861[label="168.168.51.104;d;82pkt 82fpkt", shape=diamond, color=yellow];
879[label="144.134.18.196;d;82pkt 82fpkt", shape=diamond, color=yellow];
882[label="37.26.161.21;s;98pkt 98fpkt", shape=diamond, color=yellow];
886[label="37.26.180.31;s;58pkt 58fpkt", shape=diamond, color=yellow];
894[label="37.26.161.131;s;62pkt 62fpkt", shape=diamond, color=yellow];
898[label="168.168.6.172;d;31pkt 31fpkt", shape=diamond, color=yellow];
927[label="39.185.253.253;s;4pkt 4fpkt", shape=diamond, color=yellow];
938[label="36.58.113.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
978[label="38.213.111.203;s;76pkt 76fpkt", shape=diamond, color=yellow];
1010[label="37.26.160.171;s;72pkt 72fpkt", shape=diamond, color=yellow];
1028[label="36.58.102.178;s;81pkt 81fpkt", shape=diamond, color=yellow];
1082[label="168.168.64.58;d;71pkt 71fpkt", shape=diamond, color=yellow];
1097[label="147.21.16.220;s;152pkt 152fpkt", shape=diamond, color=yellow];
1137[label="36.228.99.63;s;48pkt 48fpkt", shape=diamond, color=yellow];
1141[label="168.168.55.1;d;89pkt 89fpkt", shape=diamond, color=yellow];
1152[label="172.136.179.28;d;116pkt 116fpkt", shape=diamond, color=yellow];
1200[label="168.168.13.222;d;86pkt 86fpkt", shape=diamond, color=yellow];
1233[label="36.184.67.196;s;107pkt 107fpkt", shape=diamond, color=yellow];
1262[label="168.168.67.85;d;38pkt 38fpkt", shape=diamond, color=yellow];
1308[label="168.168.100.175;d;38pkt 38fpkt", shape=diamond, color=yellow];
1352[label="168.168.9.189;d;15pkt 15fpkt", shape=diamond, color=yellow];
1365[label="144.134.34.85;d;79pkt 79fpkt", shape=diamond, color=yellow];
1396[label="39.185.253.232;s;6pkt 6fpkt", shape=diamond, color=yellow];
1475[label="144.135.138.225;d;516pkt 516fpkt", shape=hexagon, color=black];
1489[label="168.168.14.8;d;58pkt 58fpkt", shape=hexagon, color=black];
1491[label="144.135.70.154;d;275pkt 275fpkt", shape=hexagon, color=black];
1510[label="36.228.99.62;s;33pkt 33fpkt", shape=hexagon, color=black];
1514[label="168.168.37.198;d;47pkt 47fpkt", shape=hexagon, color=black];
1563[label="131.6.149.207;d;151pkt 151fpkt", shape=hexagon, color=black];
1600[label="168.168.6.171;d;89pkt 89fpkt", shape=hexagon, color=black];
1603[label="168.168.13.209;d;47pkt 47fpkt", shape=hexagon, color=black];
1605[label="33.100.132.166;s;273pkt 273fpkt", shape=hexagon, color=black];
1612[label="131.6.150.4;d;130pkt 130fpkt", shape=hexagon, color=black];
1617[label="37.26.161.21;s;70pkt 70fpkt", shape=hexagon, color=black];
1652[label="168.168.45.249;d;102pkt 102fpkt", shape=hexagon, color=black];
1669[label="37.26.180.249;s;37pkt 37fpkt", shape=hexagon, color=black];
1737[label="88.0.65.141;s;124pkt 124fpkt", shape=hexagon, color=black];
1752[label="168.168.51.104;d;69pkt 69fpkt", shape=hexagon, color=black];
1804[label="144.134.243.45;d;361pkt 361fpkt", shape=hexagon, color=black];
1817[label="168.168.67.85;d;38pkt 38fpkt", shape=hexagon, color=black];
1840[label="147.21.16.222;s;223pkt 223fpkt", shape=hexagon, color=black];
1846[label="168.168.100.175;d;38pkt 38fpkt", shape=hexagon, color=black];
1857[label="37.26.160.126;s;65pkt 65fpkt", shape=hexagon, color=black];
1875[label="36.228.99.63;s;48pkt 48fpkt", shape=hexagon, color=black];
2005[label="220.233.4.1;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2006[label="79.13.9.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2021[label="32.92.235.2;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2099[label="39.185.253.13;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2137[label="32.92.235.20;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2142[label="37.26.161.21;100pkt 100fpkt", shape=pentagon, color=darkviolet];
2166[label="208.42.20.24;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2214[label="32.62.3.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2215[label="206.219.7.32;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2317[label="39.83.237.44;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2321[label="197.4.86.45;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2335[label="39.83.237.46;86pkt 86fpkt", shape=pentagon, color=darkviolet];
2410[label="147.21.16.60;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2412[label="36.228.99.60;118pkt 118fpkt", shape=pentagon, color=darkviolet];
2435[label="36.228.99.63;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2495[label="208.25.51.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2520[label="36.58.102.74;61pkt 61fpkt", shape=pentagon, color=darkviolet];
2533[label="119.160.98.77;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2618[label="36.58.113.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2752[label="206.219.4.110;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2796[label="32.82.209.116;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2834[label="206.98.212.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2850[label="37.26.160.126;73pkt 73fpkt", shape=pentagon, color=darkviolet];
2905[label="192.161.26.136;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2921[label="192.161.26.138;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3033[label="33.208.149.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3053[label="192.166.51.160;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3439[label="192.62.128.226;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3466[label="39.185.253.232;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3489[label="39.185.253.237;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3506[label="39.185.253.240;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3543[label="39.185.253.249;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3565[label="39.185.253.253;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3574[label="39.185.253.255;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3579[label="220.233.4.1;10pkt 10fpkt", shape=invtriangle, color=brown];
3585[label="32.92.235.2;13pkt 13fpkt", shape=invtriangle, color=brown];
3616[label="39.185.253.13;16pkt 16fpkt", shape=invtriangle, color=brown];
3638[label="32.92.235.20;9pkt 9fpkt", shape=invtriangle, color=brown];
3640[label="37.26.161.21;101pkt 101fpkt", shape=invtriangle, color=brown];
3716[label="39.83.237.44;42pkt 42fpkt", shape=invtriangle, color=brown];
3757[label="147.21.16.60;68pkt 68fpkt", shape=invtriangle, color=brown];
3809[label="36.58.102.74;61pkt 61fpkt", shape=invtriangle, color=brown];
3930[label="32.82.209.116;3pkt 3fpkt", shape=invtriangle, color=brown];
3981[label="192.161.26.136;18pkt 18fpkt", shape=invtriangle, color=brown];
3990[label="192.161.26.138;16pkt 16fpkt", shape=invtriangle, color=brown];
4031[label="33.208.149.155;1pkt 1fpkt", shape=invtriangle, color=brown];
4044[label="192.166.51.160;2pkt 2fpkt", shape=invtriangle, color=brown];
4253[label="39.185.253.240;13pkt 13fpkt", shape=invtriangle, color=brown];
4305[label="39.185.253.13;15pkt 15fpkt", shape=invhouse, color=bisque];
4315[label="32.92.235.20;9pkt 9fpkt", shape=invhouse, color=bisque];
4352[label="39.83.237.44;43pkt 43fpkt", shape=invhouse, color=bisque];
4372[label="147.21.16.60;68pkt 68fpkt", shape=invhouse, color=bisque];
4395[label="36.58.102.74;60pkt 60fpkt", shape=invhouse, color=bisque];
4398[label="207.56.22.78;14pkt 14fpkt", shape=invhouse, color=bisque];
4490[label="192.161.26.138;16pkt 16fpkt", shape=invhouse, color=bisque];
4508[label="33.208.149.155;2pkt 2fpkt", shape=invhouse, color=bisque];
4519[label="192.166.51.160;3pkt 3fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[48.8299%]&lt;BR/&gt;{*:*, *:25}[35.2999%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.4114%)&lt;BR/&gt; 53: (1.52482%)&lt;BR/&gt; 3127: (1.16218%)&lt;BR/&gt; 3128: (1.14907%)&lt;BR/&gt; 1080: (1.1447%)&gt;];
}
203--598[label="0.0382166;6pkt 6fpkt"];
203--606[label="0.0675676;5pkt 5fpkt"];
203--623[label="0.0275229;3pkt 3fpkt"];
203--708[label="0.0175439;1pkt 1fpkt"];
203--828[label="0.0535714;3pkt 3fpkt"];
203--856[label="0.0307692;2pkt 2fpkt"];
203--882[label="0.0204082;2pkt 2fpkt"];
203--886[label="0.0344828;2pkt 2fpkt"];
203--894[label="0.0322581;2pkt 2fpkt"];
203--978[label="0.0394737;3pkt 3fpkt"];
203--1010[label="0.0277778;2pkt 2fpkt"];
203--1137[label="0.0416667;2pkt 2fpkt"];
203--1510[label="0.121212;4pkt 4fpkt"];
203--1617[label="0.0285714;2pkt 2fpkt"];
203--1857[label="0.0307692;2pkt 2fpkt"];
203--1875[label="0.0416667;2pkt 2fpkt"];
203--1967[label="0.00555556;1pkt 1fpkt"];
203--1981[label="0.00555556;1pkt 1fpkt"];
203--1991[label="0.00555556;1pkt 1fpkt"];
203--2005[label="0.181818;2pkt 2fpkt"];
203--2006[label="0.5;1pkt 1fpkt"];
203--2099[label="0.0666667;1pkt 1fpkt"];
203--2142[label="0.02;2pkt 2fpkt"];
203--2215[label="0.4;2pkt 2fpkt"];
203--2412[label="0.0254237;3pkt 3fpkt"];
203--2435[label="0.0416667;2pkt 2fpkt"];
203--2520[label="0.0163934;1pkt 1fpkt"];
203--2752[label="0.146341;6pkt 6fpkt"];
203--2850[label="0.0273973;2pkt 2fpkt"];
203--3579[label="0.2;2pkt 2fpkt"];
203--3616[label="0.0625;1pkt 1fpkt"];
203--3640[label="0.019802;2pkt 2fpkt"];
203--3809[label="0.0163934;1pkt 1fpkt"];
203--4305[label="0.0666667;1pkt 1fpkt"];
203--4395[label="0.0166667;1pkt 1fpkt"];
291--598[label="0.0127389;2pkt 2fpkt"];
291--708[label="0.0350877;2pkt 2fpkt"];
291--727[label="0.02;1pkt 1fpkt"];
291--828[label="0.0357143;2pkt 2fpkt"];
291--856[label="0.0153846;1pkt 1fpkt"];
291--882[label="0.0510204;5pkt 5fpkt"];
291--886[label="0.0517241;3pkt 3fpkt"];
291--894[label="0.016129;1pkt 1fpkt"];
291--978[label="0.0263158;2pkt 2fpkt"];
291--1010[label="0.0416667;3pkt 3fpkt"];
291--1028[label="0.0740741;6pkt 6fpkt"];
291--1617[label="0.0714286;5pkt 5fpkt"];
291--1669[label="0.027027;1pkt 1fpkt"];
291--1857[label="0.0153846;1pkt 1fpkt"];
291--2142[label="0.05;5pkt 5fpkt"];
291--2166[label="0.4;2pkt 2fpkt"];
291--2400[label="0.1;1pkt 1fpkt"];
291--2520[label="0.0327869;2pkt 2fpkt"];
291--2850[label="0.0136986;1pkt 1fpkt"];
291--3640[label="0.049505;5pkt 5fpkt"];
291--3751[label="0.1;1pkt 1fpkt"];
291--3809[label="0.0327869;2pkt 2fpkt"];
291--4395[label="0.0333333;2pkt 2fpkt"];
317--598[label="0.375796;59pkt 59fpkt"];
317--708[label="0.0701754;4pkt 4fpkt"];
317--727[label="0.04;2pkt 2fpkt"];
317--828[label="0.392857;22pkt 22fpkt"];
317--856[label="0.123077;8pkt 8fpkt"];
317--882[label="0.0816327;8pkt 8fpkt"];
317--886[label="0.103448;6pkt 6fpkt"];
317--894[label="0.112903;7pkt 7fpkt"];
317--938[label="1;1pkt 1fpkt"];
317--978[label="0.486842;37pkt 37fpkt"];
317--1010[label="0.0694444;5pkt 5fpkt"];
317--1028[label="0.0246914;2pkt 2fpkt"];
317--1475[label="1;516pkt 516fpkt"];
317--1617[label="0.0714286;5pkt 5fpkt"];
317--1857[label="0.123077;8pkt 8fpkt"];
317--2142[label="0.08;8pkt 8fpkt"];
317--2212[label="0.0289855;2pkt 2fpkt"];
317--2355[label="0.222222;2pkt 2fpkt"];
317--2520[label="0.0655738;4pkt 4fpkt"];
317--2618[label="1;1pkt 1fpkt"];
317--2752[label="0.0487805;2pkt 2fpkt"];
317--2850[label="0.109589;8pkt 8fpkt"];
317--2905[label="0.111111;2pkt 2fpkt"];
317--2921[label="0.176471;3pkt 3fpkt"];
317--3640[label="0.0792079;8pkt 8fpkt"];
317--3809[label="0.0655738;4pkt 4fpkt"];
317--3981[label="0.111111;2pkt 2fpkt"];
317--3990[label="0.1875;3pkt 3fpkt"];
317--4395[label="0.0666667;4pkt 4fpkt"];
317--4490[label="0.1875;3pkt 3fpkt"];
388--474[label="0.0201342;3pkt 3fpkt"];
388--598[label="0.0828025;13pkt 13fpkt"];
388--606[label="0.310811;23pkt 23fpkt"];
388--623[label="0.238532;26pkt 26fpkt"];
388--708[label="0.315789;18pkt 18fpkt"];
388--727[label="0.3;15pkt 15fpkt"];
388--828[label="0.160714;9pkt 9fpkt"];
388--856[label="0.230769;15pkt 15fpkt"];
388--882[label="0.234694;23pkt 23fpkt"];
388--886[label="0.275862;16pkt 16fpkt"];
388--894[label="0.16129;10pkt 10fpkt"];
388--978[label="0.144737;11pkt 11fpkt"];
388--1010[label="0.319444;23pkt 23fpkt"];
388--1028[label="0.469136;38pkt 38fpkt"];
388--1137[label="0.229167;11pkt 11fpkt"];
388--1510[label="0.151515;5pkt 5fpkt"];
388--1617[label="0.328571;23pkt 23fpkt"];
388--1669[label="0.405405;15pkt 15fpkt"];
388--1737[label="0.0241935;3pkt 3fpkt"];
388--1857[label="0.230769;15pkt 15fpkt"];
388--1875[label="0.229167;11pkt 11fpkt"];
388--1971[label="0.0034188;2pkt 2fpkt"];
388--1983[label="0.0034188;2pkt 2fpkt"];
388--1992[label="0.0034188;2pkt 2fpkt"];
388--2005[label="0.363636;4pkt 4fpkt"];
388--2099[label="0.533333;8pkt 8fpkt"];
388--2142[label="0.23;23pkt 23fpkt"];
388--2215[label="0.2;1pkt 1fpkt"];
388--2412[label="0.220339;26pkt 26fpkt"];
388--2435[label="0.208333;10pkt 10fpkt"];
388--2520[label="0.295082;18pkt 18fpkt"];
388--2752[label="0.609756;25pkt 25fpkt"];
388--2850[label="0.205479;15pkt 15fpkt"];
388--3579[label="0.4;4pkt 4fpkt"];
388--3616[label="0.5;8pkt 8fpkt"];
388--3640[label="0.227723;23pkt 23fpkt"];
388--3809[label="0.295082;18pkt 18fpkt"];
388--4305[label="0.533333;8pkt 8fpkt"];
388--4395[label="0.3;18pkt 18fpkt"];
402--598[label="0.0191083;3pkt 3fpkt"];
402--727[label="0.02;1pkt 1fpkt"];
402--828[label="0.0357143;2pkt 2fpkt"];
402--856[label="0.0307692;2pkt 2fpkt"];
402--882[label="0.0408163;4pkt 4fpkt"];
402--886[label="0.0344828;2pkt 2fpkt"];
402--894[label="0.0645161;4pkt 4fpkt"];
402--1010[label="0.0277778;2pkt 2fpkt"];
402--1491[label="1;275pkt 275fpkt"];
402--1617[label="0.0285714;2pkt 2fpkt"];
402--1669[label="0.027027;1pkt 1fpkt"];
402--1857[label="0.0307692;2pkt 2fpkt"];
402--1974[label="0.00363636;1pkt 1fpkt"];
402--1986[label="0.00363636;1pkt 1fpkt"];
402--2142[label="0.04;4pkt 4fpkt"];
402--2212[label="0.0144928;1pkt 1fpkt"];
402--2752[label="0.0243902;1pkt 1fpkt"];
402--2850[label="0.0273973;2pkt 2fpkt"];
402--3640[label="0.039604;4pkt 4fpkt"];
473--474[label="0.248322;37pkt 37fpkt"];
473--565[label="0.367713;82pkt 82fpkt"];
473--606[label="0.0135135;1pkt 1fpkt"];
473--708[label="0.0350877;2pkt 2fpkt"];
473--725[label="0.0144928;6pkt 6fpkt"];
473--727[label="0.04;2pkt 2fpkt"];
473--882[label="0.0102041;1pkt 1fpkt"];
473--1028[label="0.0123457;1pkt 1fpkt"];
473--1097[label="0.394737;60pkt 60fpkt"];
473--1233[label="0.317757;34pkt 34fpkt"];
473--1510[label="0.030303;1pkt 1fpkt"];
473--1605[label="0.021978;6pkt 6fpkt"];
473--1617[label="0.0142857;1pkt 1fpkt"];
473--1669[label="0.0540541;2pkt 2fpkt"];
473--1737[label="0.233871;29pkt 29fpkt"];
473--1840[label="0.367713;82pkt 82fpkt"];
473--1970[label="0.00241546;1pkt 1fpkt"];
473--2021[label="0.333333;4pkt 4fpkt"];
473--2137[label="0.25;2pkt 2fpkt"];
473--2142[label="0.01;1pkt 1fpkt"];
473--2335[label="0.0930233;8pkt 8fpkt"];
473--2400[label="0.1;1pkt 1fpkt"];
473--2410[label="0.268657;18pkt 18fpkt"];
473--2502[label="0.0344828;1pkt 1fpkt"];
473--2520[label="0.0327869;2pkt 2fpkt"];
473--3585[label="0.307692;4pkt 4fpkt"];
473--3638[label="0.222222;2pkt 2fpkt"];
473--3640[label="0.00990099;1pkt 1fpkt"];
473--3751[label="0.1;1pkt 1fpkt"];
473--3757[label="0.279412;19pkt 19fpkt"];
473--3809[label="0.0327869;2pkt 2fpkt"];
473--4315[label="0.222222;2pkt 2fpkt"];
473--4372[label="0.279412;19pkt 19fpkt"];
473--4395[label="0.0333333;2pkt 2fpkt"];
474--735[label="0.00671141;1pkt 1fpkt"];
474--752[label="0.782609;72pkt 72fpkt"];
474--861[label="0.402439;33pkt 33fpkt"];
474--1473[label="0.00671141;1pkt 1fpkt"];
474--1585[label="0.00671141;1pkt 1fpkt"];
474--1737[label="1;124pkt 124fpkt"];
474--1752[label="0.391304;27pkt 27fpkt"];
474--1964[label="0.0201342;3pkt 3fpkt"];
485--708[label="0.105263;6pkt 6fpkt"];
485--727[label="0.04;2pkt 2fpkt"];
485--856[label="0.0615385;4pkt 4fpkt"];
485--882[label="0.0408163;4pkt 4fpkt"];
485--886[label="0.0517241;3pkt 3fpkt"];
485--894[label="0.0806452;5pkt 5fpkt"];
485--978[label="0.0131579;1pkt 1fpkt"];
485--1010[label="0.0277778;2pkt 2fpkt"];
485--1028[label="0.0493827;4pkt 4fpkt"];
485--1617[label="0.0285714;2pkt 2fpkt"];
485--1857[label="0.0615385;4pkt 4fpkt"];
485--2142[label="0.04;4pkt 4fpkt"];
485--2520[label="0.0983607;6pkt 6fpkt"];
485--2850[label="0.0547945;4pkt 4fpkt"];
485--3640[label="0.039604;4pkt 4fpkt"];
485--3809[label="0.0983607;6pkt 6fpkt"];
485--4395[label="0.0833333;5pkt 5fpkt"];
487--1563[label="1;151pkt 151fpkt"];
487--2212[label="0.0144928;1pkt 1fpkt"];
487--3053[label="1;3pkt 3fpkt"];
487--3489[label="0.0833333;1pkt 1fpkt"];
487--3543[label="0.142857;1pkt 1fpkt"];
487--4044[label="1;2pkt 2fpkt"];
487--4519[label="1;3pkt 3fpkt"];
533--606[label="0.015873;1pkt 1fpkt"];
533--1137[label="0.104167;5pkt 5fpkt"];
533--1489[label="1;58pkt 58fpkt"];
533--1875[label="0.104167;5pkt 5fpkt"];
533--2214[label="1;3pkt 3fpkt"];
533--2435[label="0.104167;5pkt 5fpkt"];
533--2533[label="0.666667;8pkt 8fpkt"];
533--2796[label="1;3pkt 3fpkt"];
533--3930[label="1;3pkt 3fpkt"];
565--718[label="0.144444;13pkt 13fpkt"];
565--1200[label="0.151163;13pkt 13fpkt"];
565--1603[label="0.276596;13pkt 13fpkt"];
565--1840[label="1;223pkt 223fpkt"];
574--598[label="0.101449;14pkt 14fpkt"];
574--623[label="0.00917431;1pkt 1fpkt"];
574--995[label="0.0140845;1pkt 1fpkt"];
574--1652[label="1;102pkt 102fpkt"];
574--1964[label="0.0507246;7pkt 7fpkt"];
574--2005[label="0.181818;2pkt 2fpkt"];
574--2006[label="0.5;1pkt 1fpkt"];
574--2412[label="0.00847458;1pkt 1fpkt"];
574--2549[label="0.0333333;1pkt 1fpkt"];
574--2942[label="0.0138889;1pkt 1fpkt"];
574--2992[label="0.0769231;1pkt 1fpkt"];
574--3256[label="0.0212766;1pkt 1fpkt"];
574--3579[label="0.2;2pkt 2fpkt"];
574--4398[label="0.214286;3pkt 3fpkt"];
598--618[label="0.0573248;9pkt 9fpkt"];
598--619[label="0.0318471;5pkt 5fpkt"];
598--624[label="0.0140845;1pkt 1fpkt"];
598--632[label="0.0191083;3pkt 3fpkt"];
598--717[label="0.0183486;2pkt 2fpkt"];
598--733[label="0.00636943;1pkt 1fpkt"];
598--774[label="0.0254777;4pkt 4fpkt"];
598--861[label="0.0365854;3pkt 3fpkt"];
598--879[label="0.0365854;3pkt 3fpkt"];
598--1152[label="0.00862069;1pkt 1fpkt"];
598--1262[label="0.263158;10pkt 10fpkt"];
598--1365[label="0.0126582;1pkt 1fpkt"];
598--1475[label="0.375796;59pkt 59fpkt"];
598--1491[label="0.0191083;3pkt 3fpkt"];
598--1600[label="0.0224719;2pkt 2fpkt"];
598--1612[label="0.00769231;1pkt 1fpkt"];
598--1652[label="0.0882353;9pkt 9fpkt"];
598--1752[label="0.0289855;2pkt 2fpkt"];
598--1804[label="0.0318471;5pkt 5fpkt"];
598--1817[label="0.263158;10pkt 10fpkt"];
606--618[label="0.256757;19pkt 19fpkt"];
606--624[label="0.0140845;1pkt 1fpkt"];
606--632[label="0.027027;2pkt 2fpkt"];
606--861[label="0.0540541;4pkt 4fpkt"];
606--1308[label="0.315789;12pkt 12fpkt"];
606--1510[label="1;33pkt 33fpkt"];
606--1514[label="0.0212766;1pkt 1fpkt"];
606--1752[label="0.0434783;3pkt 3fpkt"];
606--1846[label="0.315789;12pkt 12fpkt"];
618--623[label="0.211009;23pkt 23fpkt"];
618--828[label="0.107143;6pkt 6fpkt"];
618--978[label="0.0263158;2pkt 2fpkt"];
618--1137[label="0.395833;19pkt 19fpkt"];
618--1510[label="0.212121;7pkt 7fpkt"];
618--1875[label="0.395833;19pkt 19fpkt"];
618--2005[label="0.0909091;1pkt 1fpkt"];
618--2215[label="0.2;1pkt 1fpkt"];
618--2412[label="0.194915;23pkt 23fpkt"];
618--2435[label="0.395833;19pkt 19fpkt"];
618--2752[label="0.0243902;1pkt 1fpkt"];
618--2834[label="1;2pkt 2fpkt"];
618--3579[label="0.1;1pkt 1fpkt"];
619--708[label="0.0350877;2pkt 2fpkt"];
619--727[label="0.06;3pkt 3fpkt"];
619--749[label="0.0133333;1pkt 1fpkt"];
619--754[label="0.0126582;1pkt 1fpkt"];
619--856[label="0.0153846;1pkt 1fpkt"];
619--882[label="0.0102041;1pkt 1fpkt"];
619--886[label="0.0172414;1pkt 1fpkt"];
619--995[label="0.0140845;1pkt 1fpkt"];
619--1010[label="0.0138889;1pkt 1fpkt"];
619--1028[label="0.0246914;2pkt 2fpkt"];
619--1093[label="0.0119048;1pkt 1fpkt"];
619--1617[label="0.0142857;1pkt 1fpkt"];
619--1669[label="0.0810811;3pkt 3fpkt"];
619--1678[label="0.0133333;1pkt 1fpkt"];
619--1804[label="1;361pkt 361fpkt"];
619--1857[label="0.0153846;1pkt 1fpkt"];
619--1932[label="0.015625;1pkt 1fpkt"];
619--1964[label="0.0554017;20pkt 20fpkt"];
619--2142[label="0.01;1pkt 1fpkt"];
619--2212[label="0.0144928;1pkt 1fpkt"];
619--2520[label="0.0327869;2pkt 2fpkt"];
619--2605[label="0.0217391;1pkt 1fpkt"];
619--2850[label="0.0136986;1pkt 1fpkt"];
619--2942[label="0.0138889;1pkt 1fpkt"];
619--3084[label="0.05;1pkt 1fpkt"];
619--3347[label="0.0147059;1pkt 1fpkt"];
619--3390[label="0.0285714;1pkt 1fpkt"];
619--3640[label="0.00990099;1pkt 1fpkt"];
619--3809[label="0.0327869;2pkt 2fpkt"];
619--4054[label="0.05;1pkt 1fpkt"];
619--4205[label="0.0285714;1pkt 1fpkt"];
619--4395[label="0.0333333;2pkt 2fpkt"];
619--4591[label="0.0285714;1pkt 1fpkt"];
623--632[label="0.0458716;5pkt 5fpkt"];
623--861[label="0.0487805;4pkt 4fpkt"];
623--1082[label="0.507042;36pkt 36fpkt"];
623--1262[label="0.157895;6pkt 6fpkt"];
623--1612[label="0.0183486;2pkt 2fpkt"];
623--1652[label="0.00980392;1pkt 1fpkt"];
623--1752[label="0.0434783;3pkt 3fpkt"];
623--1817[label="0.157895;6pkt 6fpkt"];
623--2412[label="0.990826;108pkt 108fpkt"];
624--856[label="0.0461538;3pkt 3fpkt"];
624--886[label="0.0344828;2pkt 2fpkt"];
624--927[label="0.25;1pkt 1fpkt"];
624--1010[label="0.0140845;1pkt 1fpkt"];
624--1137[label="0.0208333;1pkt 1fpkt"];
624--1396[label="0.166667;1pkt 1fpkt"];
624--1510[label="0.030303;1pkt 1fpkt"];
624--1514[label="1;47pkt 47fpkt"];
624--1857[label="0.0461538;3pkt 3fpkt"];
624--1875[label="0.0208333;1pkt 1fpkt"];
624--2435[label="0.0208333;1pkt 1fpkt"];
624--2850[label="0.0422535;3pkt 3fpkt"];
624--3466[label="0.111111;1pkt 1fpkt"];
624--3565[label="0.25;1pkt 1fpkt"];
624--3574[label="0.111111;1pkt 1fpkt"];
632--708[label="0.0175439;1pkt 1fpkt"];
632--882[label="0.0408163;4pkt 4fpkt"];
632--886[label="0.0344828;2pkt 2fpkt"];
632--894[label="0.0483871;3pkt 3fpkt"];
632--978[label="0.0263158;2pkt 2fpkt"];
632--1137[label="0.0208333;1pkt 1fpkt"];
632--1612[label="1;130pkt 130fpkt"];
632--1617[label="0.0571429;4pkt 4fpkt"];
632--1875[label="0.0208333;1pkt 1fpkt"];
632--2142[label="0.04;4pkt 4fpkt"];
632--2412[label="0.0423729;5pkt 5fpkt"];
632--2435[label="0.0208333;1pkt 1fpkt"];
632--2520[label="0.0163934;1pkt 1fpkt"];
632--3640[label="0.039604;4pkt 4fpkt"];
632--3809[label="0.0163934;1pkt 1fpkt"];
632--4395[label="0.0166667;1pkt 1fpkt"];
708--1152[label="0.157895;9pkt 9fpkt"];
708--1308[label="0.0526316;2pkt 2fpkt"];
708--1475[label="0.0701754;4pkt 4fpkt"];
708--1804[label="0.0350877;2pkt 2fpkt"];
708--1846[label="0.0526316;2pkt 2fpkt"];
708--2520[label="1;57pkt 57fpkt"];
708--3809[label="1;57pkt 57fpkt"];
708--4395[label="0.982456;56pkt 56fpkt"];
717--828[label="0.0178571;1pkt 1fpkt"];
717--1233[label="0.682243;73pkt 73fpkt"];
717--1396[label="0.166667;1pkt 1fpkt"];
717--1600[label="1;89pkt 89fpkt"];
717--1971[label="0.0275229;3pkt 3fpkt"];
717--1983[label="0.0275229;3pkt 3fpkt"];
717--1992[label="0.0275229;3pkt 3fpkt"];
717--2005[label="0.0909091;1pkt 1fpkt"];
717--2021[label="0.0833333;1pkt 1fpkt"];
717--2137[label="0.25;2pkt 2fpkt"];
717--2495[label="1;12pkt 12fpkt"];
717--3466[label="0.111111;1pkt 1fpkt"];
717--3579[label="0.1;1pkt 1fpkt"];
717--3585[label="0.0769231;1pkt 1fpkt"];
717--3638[label="0.222222;2pkt 2fpkt"];
717--4315[label="0.222222;2pkt 2fpkt"];
718--1603[label="1;47pkt 47fpkt"];
718--1840[label="0.144444;13pkt 13fpkt"];
718--2410[label="0.298507;20pkt 20fpkt"];
718--3489[label="0.166667;2pkt 2fpkt"];
718--3506[label="0.153846;2pkt 2fpkt"];
718--3574[label="0.111111;1pkt 1fpkt"];
718--3757[label="0.294118;20pkt 20fpkt"];
718--4253[label="0.153846;2pkt 2fpkt"];
718--4372[label="0.294118;20pkt 20fpkt"];
725--861[label="0.0731707;6pkt 6fpkt"];
725--1605[label="1;273pkt 273fpkt"];
725--1752[label="0.0869565;6pkt 6fpkt"];
727--742[label="0.02;1pkt 1fpkt"];
727--879[label="0.02;1pkt 1fpkt"];
727--1125[label="0.02;1pkt 1fpkt"];
727--1152[label="0.26;13pkt 13fpkt"];
727--1262[label="0.0263158;1pkt 1fpkt"];
727--1308[label="0.0526316;2pkt 2fpkt"];
727--1475[label="0.04;2pkt 2fpkt"];
727--1491[label="0.02;1pkt 1fpkt"];
727--1564[label="0.02;1pkt 1fpkt"];
727--1669[label="1;37pkt 37fpkt"];
727--1804[label="0.06;3pkt 3fpkt"];
727--1817[label="0.0263158;1pkt 1fpkt"];
727--1846[label="0.0526316;2pkt 2fpkt"];
727--1868[label="0.02;1pkt 1fpkt"];
727--1921[label="0.02;1pkt 1fpkt"];
752--1737[label="0.663043;61pkt 61fpkt"];
752--1970[label="0.0108696;1pkt 1fpkt"];
752--2317[label="0.285714;12pkt 12fpkt"];
752--3716[label="0.285714;12pkt 12fpkt"];
752--4352[label="0.27907;12pkt 12fpkt"];
774--856[label="0.107692;7pkt 7fpkt"];
774--882[label="0.132653;13pkt 13fpkt"];
774--894[label="0.193548;12pkt 12fpkt"];
774--1010[label="0.194444;14pkt 14fpkt"];
774--1062[label="0.00584795;1pkt 1fpkt"];
774--1527[label="0.0116279;1pkt 1fpkt"];
774--1617[label="0.1;7pkt 7fpkt"];
774--1720[label="0.00584795;1pkt 1fpkt"];
774--1857[label="0.107692;7pkt 7fpkt"];
774--1939[label="0.00584795;1pkt 1fpkt"];
774--2142[label="0.13;13pkt 13fpkt"];
774--2554[label="0.0322581;3pkt 3fpkt"];
774--2850[label="0.0958904;7pkt 7fpkt"];
774--2905[label="0.0555556;1pkt 1fpkt"];
774--3033[label="1;2pkt 2fpkt"];
774--3640[label="0.128713;13pkt 13fpkt"];
774--3822[label="0.0326087;3pkt 3fpkt"];
774--3981[label="0.0555556;1pkt 1fpkt"];
774--4031[label="1;1pkt 1fpkt"];
774--4190[label="0.00584795;1pkt 1fpkt"];
774--4405[label="0.0322581;3pkt 3fpkt"];
774--4508[label="1;2pkt 2fpkt"];
828--861[label="0.0357143;2pkt 2fpkt"];
828--1109[label="0.0178571;1pkt 1fpkt"];
828--1475[label="0.392857;22pkt 22fpkt"];
828--1491[label="0.0357143;2pkt 2fpkt"];
828--1564[label="0.0178571;1pkt 1fpkt"];
828--1600[label="0.0178571;1pkt 1fpkt"];
828--1752[label="0.0357143;2pkt 2fpkt"];
828--1921[label="0.0178571;1pkt 1fpkt"];
856--1152[label="0.0923077;6pkt 6fpkt"];
856--1475[label="0.123077;8pkt 8fpkt"];
856--1491[label="0.0307692;2pkt 2fpkt"];
856--1514[label="0.0638298;3pkt 3fpkt"];
856--1560[label="0.123077;8pkt 8fpkt"];
856--1804[label="0.0153846;1pkt 1fpkt"];
856--1857[label="1;65pkt 65fpkt"];
856--1924[label="0.123077;8pkt 8fpkt"];
856--2850[label="1;65pkt 65fpkt"];
861--882[label="0.0121951;1pkt 1fpkt"];
861--894[label="0.0322581;2pkt 2fpkt"];
861--1028[label="0.0123457;1pkt 1fpkt"];
861--1137[label="0.0208333;1pkt 1fpkt"];
861--1510[label="0.0909091;3pkt 3fpkt"];
861--1605[label="0.0731707;6pkt 6fpkt"];
861--1617[label="0.0142857;1pkt 1fpkt"];
861--1737[label="0.329268;27pkt 27fpkt"];
861--1752[label="1;69pkt 69fpkt"];
861--1875[label="0.0208333;1pkt 1fpkt"];
861--2142[label="0.0121951;1pkt 1fpkt"];
861--2215[label="0.2;1pkt 1fpkt"];
861--2335[label="0.0121951;1pkt 1fpkt"];
861--2412[label="0.0487805;4pkt 4fpkt"];
861--2435[label="0.0208333;1pkt 1fpkt"];
861--3640[label="0.0121951;1pkt 1fpkt"];
879--978[label="0.0131579;1pkt 1fpkt"];
879--1028[label="0.037037;3pkt 3fpkt"];
879--1669[label="0.027027;1pkt 1fpkt"];
882--1152[label="0.132653;13pkt 13fpkt"];
882--1340[label="0.0102041;1pkt 1fpkt"];
882--1475[label="0.0816327;8pkt 8fpkt"];
882--1491[label="0.0408163;4pkt 4fpkt"];
882--1612[label="0.0408163;4pkt 4fpkt"];
882--1617[label="1;70pkt 70fpkt"];
882--1752[label="0.0144928;1pkt 1fpkt"];
882--1804[label="0.0102041;1pkt 1fpkt"];
882--2142[label="0.989796;97pkt 97fpkt"];
882--3640[label="1;98pkt 98fpkt"];
886--1125[label="0.0172414;1pkt 1fpkt"];
886--1152[label="0.172414;10pkt 10fpkt"];
886--1475[label="0.103448;6pkt 6fpkt"];
886--1491[label="0.0344828;2pkt 2fpkt"];
886--1612[label="0.0172414;1pkt 1fpkt"];
886--1804[label="0.0172414;1pkt 1fpkt"];
886--1868[label="0.0172414;1pkt 1fpkt"];
894--1152[label="0.177419;11pkt 11fpkt"];
894--1340[label="0.016129;1pkt 1fpkt"];
894--1365[label="0.016129;1pkt 1fpkt"];
894--1475[label="0.112903;7pkt 7fpkt"];
894--1491[label="0.0645161;4pkt 4fpkt"];
894--1612[label="0.0322581;2pkt 2fpkt"];
894--1752[label="0.0322581;2pkt 2fpkt"];
898--1305[label="0.125;1pkt 1fpkt"];
898--2204[label="0.0322581;1pkt 1fpkt"];
898--2321[label="0.111111;2pkt 2fpkt"];
898--3439[label="0.111111;1pkt 1fpkt"];
898--3489[label="0.166667;2pkt 2fpkt"];
898--3506[label="0.153846;2pkt 2fpkt"];
898--3543[label="0.142857;1pkt 1fpkt"];
898--3574[label="0.111111;1pkt 1fpkt"];
898--3666[label="0.0322581;1pkt 1fpkt"];
898--4253[label="0.153846;2pkt 2fpkt"];
927--1352[label="0.25;1pkt 1fpkt"];
927--3565[label="1;4pkt 4fpkt"];
938--1475[label="1;1pkt 1fpkt"];
938--2618[label="1;1pkt 1fpkt"];
978--1082[label="0.0704225;5pkt 5fpkt"];
978--1109[label="0.0131579;1pkt 1fpkt"];
978--1152[label="0.0131579;1pkt 1fpkt"];
978--1365[label="0.0131579;1pkt 1fpkt"];
978--1475[label="0.486842;37pkt 37fpkt"];
978--1612[label="0.0263158;2pkt 2fpkt"];
1010--1125[label="0.0138889;1pkt 1fpkt"];
1010--1152[label="0.152778;11pkt 11fpkt"];
1010--1475[label="0.0694444;5pkt 5fpkt"];
1010--1491[label="0.0277778;2pkt 2fpkt"];
1010--1804[label="0.0138889;1pkt 1fpkt"];
1010--1868[label="0.0138889;1pkt 1fpkt"];
1028--1152[label="0.17284;14pkt 14fpkt"];
1028--1262[label="0.0263158;1pkt 1fpkt"];
1028--1308[label="0.0263158;1pkt 1fpkt"];
1028--1365[label="0.0253165;2pkt 2fpkt"];
1028--1475[label="0.0246914;2pkt 2fpkt"];
1028--1752[label="0.0144928;1pkt 1fpkt"];
1028--1804[label="0.0246914;2pkt 2fpkt"];
1028--1817[label="0.0263158;1pkt 1fpkt"];
1028--1846[label="0.0263158;1pkt 1fpkt"];
1082--2099[label="0.133333;2pkt 2fpkt"];
1082--2412[label="0.507042;36pkt 36fpkt"];
1082--3616[label="0.125;2pkt 2fpkt"];
1082--4305[label="0.133333;2pkt 2fpkt"];
1137--1489[label="0.0833333;4pkt 4fpkt"];
1137--1514[label="0.0212766;1pkt 1fpkt"];
1137--1752[label="0.0208333;1pkt 1fpkt"];
1137--1875[label="1;48pkt 48fpkt"];
1137--2435[label="0.979167;47pkt 47fpkt"];
1141--1485[label="0.0147059;1pkt 1fpkt"];
1141--1678[label="0.0133333;1pkt 1fpkt"];
1141--1932[label="0.015625;1pkt 1fpkt"];
1141--1964[label="0.0224719;2pkt 2fpkt"];
1141--1970[label="0.011236;1pkt 1fpkt"];
1141--2905[label="0.777778;14pkt 14fpkt"];
1141--2921[label="0.764706;13pkt 13fpkt"];
1141--2942[label="0.0138889;1pkt 1fpkt"];
1141--3363[label="0.0344828;1pkt 1fpkt"];
1141--3390[label="0.0285714;1pkt 1fpkt"];
1141--3506[label="0.0769231;1pkt 1fpkt"];
1141--3543[label="0.142857;1pkt 1fpkt"];
1141--3981[label="0.777778;14pkt 14fpkt"];
1141--3990[label="0.75;12pkt 12fpkt"];
1141--4205[label="0.0285714;1pkt 1fpkt"];
1141--4253[label="0.0769231;1pkt 1fpkt"];
1141--4490[label="0.75;12pkt 12fpkt"];
1141--4591[label="0.0285714;1pkt 1fpkt"];
1152--1617[label="0.0571429;4pkt 4fpkt"];
1152--1669[label="0.108108;4pkt 4fpkt"];
1152--1857[label="0.0923077;6pkt 6fpkt"];
1152--2142[label="0.13;13pkt 13fpkt"];
1152--2520[label="0.147541;9pkt 9fpkt"];
1152--2850[label="0.0821918;6pkt 6fpkt"];
1152--3640[label="0.128713;13pkt 13fpkt"];
1152--3809[label="0.147541;9pkt 9fpkt"];
1152--4395[label="0.15;9pkt 9fpkt"];
1200--1840[label="0.151163;13pkt 13fpkt"];
1200--2410[label="0.283582;19pkt 19fpkt"];
1200--3757[label="0.279412;19pkt 19fpkt"];
1200--4372[label="0.279412;19pkt 19fpkt"];
1233--1600[label="0.617978;55pkt 55fpkt"];
1262--1669[label="0.027027;1pkt 1fpkt"];
1262--1817[label="1;38pkt 38fpkt"];
1262--2412[label="0.131579;5pkt 5fpkt"];
1262--2533[label="0.0833333;1pkt 1fpkt"];
1262--2752[label="0.0526316;2pkt 2fpkt"];
1308--1510[label="0.212121;7pkt 7fpkt"];
1308--1669[label="0.0540541;2pkt 2fpkt"];
1308--1846[label="1;38pkt 38fpkt"];
1308--2005[label="0.0909091;1pkt 1fpkt"];
1308--2099[label="0.0666667;1pkt 1fpkt"];
1308--2520[label="0.0526316;2pkt 2fpkt"];
1308--2752[label="0.0263158;1pkt 1fpkt"];
1308--3616[label="0.0625;1pkt 1fpkt"];
1308--3809[label="0.0526316;2pkt 2fpkt"];
1308--4305[label="0.0666667;1pkt 1fpkt"];
1308--4395[label="0.0526316;2pkt 2fpkt"];
1352--3543[label="0.142857;1pkt 1fpkt"];
1352--3565[label="0.25;1pkt 1fpkt"];
1352--3574[label="0.222222;2pkt 2fpkt"];
1396--1600[label="0.166667;1pkt 1fpkt"];
1396--3466[label="1;6pkt 6fpkt"];
1475--1617[label="0.0714286;5pkt 5fpkt"];
1475--1857[label="0.123077;8pkt 8fpkt"];
1475--2142[label="0.08;8pkt 8fpkt"];
1475--2212[label="0.0289855;2pkt 2fpkt"];
1475--2355[label="0.222222;2pkt 2fpkt"];
1475--2520[label="0.0655738;4pkt 4fpkt"];
1475--2618[label="1;1pkt 1fpkt"];
1475--2752[label="0.0487805;2pkt 2fpkt"];
1475--2850[label="0.109589;8pkt 8fpkt"];
1475--2905[label="0.111111;2pkt 2fpkt"];
1475--2921[label="0.176471;3pkt 3fpkt"];
1475--3640[label="0.0792079;8pkt 8fpkt"];
1475--3809[label="0.0655738;4pkt 4fpkt"];
1475--3981[label="0.111111;2pkt 2fpkt"];
1475--3990[label="0.1875;3pkt 3fpkt"];
1475--4395[label="0.0666667;4pkt 4fpkt"];
1475--4490[label="0.1875;3pkt 3fpkt"];
1489--1875[label="0.0833333;4pkt 4fpkt"];
1489--2214[label="0.333333;1pkt 1fpkt"];
1489--2435[label="0.0833333;4pkt 4fpkt"];
1489--2533[label="0.666667;8pkt 8fpkt"];
1489--2796[label="1;3pkt 3fpkt"];
1489--3930[label="1;3pkt 3fpkt"];
1491--1617[label="0.0285714;2pkt 2fpkt"];
1491--1669[label="0.027027;1pkt 1fpkt"];
1491--1857[label="0.0307692;2pkt 2fpkt"];
1491--1974[label="0.00363636;1pkt 1fpkt"];
1491--1986[label="0.00363636;1pkt 1fpkt"];
1491--2142[label="0.04;4pkt 4fpkt"];
1491--2212[label="0.0144928;1pkt 1fpkt"];
1491--2752[label="0.0243902;1pkt 1fpkt"];
1491--2850[label="0.0273973;2pkt 2fpkt"];
1491--3640[label="0.039604;4pkt 4fpkt"];
1510--1514[label="0.030303;1pkt 1fpkt"];
1510--1752[label="0.0909091;3pkt 3fpkt"];
1510--1846[label="0.212121;7pkt 7fpkt"];
1514--1857[label="0.0638298;3pkt 3fpkt"];
1514--1875[label="0.0212766;1pkt 1fpkt"];
1514--2435[label="0.0212766;1pkt 1fpkt"];
1514--2850[label="0.0638298;3pkt 3fpkt"];
1563--2212[label="0.0144928;1pkt 1fpkt"];
1563--3489[label="0.0833333;1pkt 1fpkt"];
1563--3543[label="0.142857;1pkt 1fpkt"];
1600--1971[label="0.0337079;3pkt 3fpkt"];
1600--1983[label="0.0337079;3pkt 3fpkt"];
1600--1992[label="0.0337079;3pkt 3fpkt"];
1600--2005[label="0.0909091;1pkt 1fpkt"];
1600--2021[label="0.0833333;1pkt 1fpkt"];
1600--2137[label="0.25;2pkt 2fpkt"];
1600--2495[label="1;12pkt 12fpkt"];
1600--3466[label="0.111111;1pkt 1fpkt"];
1600--3579[label="0.1;1pkt 1fpkt"];
1600--3585[label="0.0769231;1pkt 1fpkt"];
1600--3638[label="0.222222;2pkt 2fpkt"];
1600--4315[label="0.222222;2pkt 2fpkt"];
1603--1840[label="0.276596;13pkt 13fpkt"];
1603--2410[label="0.0425532;2pkt 2fpkt"];
1603--3489[label="0.166667;2pkt 2fpkt"];
1603--3506[label="0.153846;2pkt 2fpkt"];
1603--3757[label="0.0425532;2pkt 2fpkt"];
1603--4253[label="0.153846;2pkt 2fpkt"];
1603--4372[label="0.0425532;2pkt 2fpkt"];
1605--1752[label="0.0869565;6pkt 6fpkt"];
1612--1617[label="0.0571429;4pkt 4fpkt"];
1612--2142[label="0.04;4pkt 4fpkt"];
1612--2412[label="0.0169492;2pkt 2fpkt"];
1612--3640[label="0.039604;4pkt 4fpkt"];
1617--1752[label="0.0144928;1pkt 1fpkt"];
1617--1804[label="0.0142857;1pkt 1fpkt"];
1617--2142[label="0.985714;69pkt 69fpkt"];
1617--3640[label="1;70pkt 70fpkt"];
1652--1964[label="0.0686275;7pkt 7fpkt"];
1652--2005[label="0.181818;2pkt 2fpkt"];
1652--2006[label="0.5;1pkt 1fpkt"];
1652--2412[label="0.00980392;1pkt 1fpkt"];
1652--2549[label="0.0333333;1pkt 1fpkt"];
1652--2942[label="0.0138889;1pkt 1fpkt"];
1652--2992[label="0.0769231;1pkt 1fpkt"];
1652--3256[label="0.0212766;1pkt 1fpkt"];
1652--3579[label="0.2;2pkt 2fpkt"];
1652--4398[label="0.214286;3pkt 3fpkt"];
1669--1804[label="0.0810811;3pkt 3fpkt"];
1669--1817[label="0.027027;1pkt 1fpkt"];
1669--1846[label="0.0540541;2pkt 2fpkt"];
1669--1868[label="0.027027;1pkt 1fpkt"];
1669--1921[label="0.027027;1pkt 1fpkt"];
1737--1752[label="0.391304;27pkt 27fpkt"];
1737--1964[label="0.0241935;3pkt 3fpkt"];
1752--1875[label="0.0208333;1pkt 1fpkt"];
1752--2142[label="0.0144928;1pkt 1fpkt"];
1752--2215[label="0.2;1pkt 1fpkt"];
1752--2412[label="0.0434783;3pkt 3fpkt"];
1752--2435[label="0.0208333;1pkt 1fpkt"];
1752--3640[label="0.0144928;1pkt 1fpkt"];
1804--1857[label="0.0153846;1pkt 1fpkt"];
1804--1932[label="0.015625;1pkt 1fpkt"];
1804--1964[label="0.0554017;20pkt 20fpkt"];
1804--2142[label="0.01;1pkt 1fpkt"];
1804--2212[label="0.0144928;1pkt 1fpkt"];
1804--2520[label="0.0327869;2pkt 2fpkt"];
1804--2605[label="0.0217391;1pkt 1fpkt"];
1804--2850[label="0.0136986;1pkt 1fpkt"];
1804--2942[label="0.0138889;1pkt 1fpkt"];
1804--3084[label="0.05;1pkt 1fpkt"];
1804--3347[label="0.0147059;1pkt 1fpkt"];
1804--3390[label="0.0285714;1pkt 1fpkt"];
1804--3640[label="0.00990099;1pkt 1fpkt"];
1804--3809[label="0.0327869;2pkt 2fpkt"];
1804--4054[label="0.05;1pkt 1fpkt"];
1804--4205[label="0.0285714;1pkt 1fpkt"];
1804--4395[label="0.0333333;2pkt 2fpkt"];
1804--4591[label="0.0285714;1pkt 1fpkt"];
1817--2412[label="0.131579;5pkt 5fpkt"];
1817--2533[label="0.0833333;1pkt 1fpkt"];
1817--2752[label="0.0526316;2pkt 2fpkt"];
1846--2005[label="0.0909091;1pkt 1fpkt"];
1846--2099[label="0.0666667;1pkt 1fpkt"];
1846--2520[label="0.0526316;2pkt 2fpkt"];
1846--2752[label="0.0263158;1pkt 1fpkt"];
1846--3616[label="0.0625;1pkt 1fpkt"];
1846--3809[label="0.0526316;2pkt 2fpkt"];
1846--4305[label="0.0666667;1pkt 1fpkt"];
1846--4395[label="0.0526316;2pkt 2fpkt"];
1857--1924[label="0.123077;8pkt 8fpkt"];
1857--2850[label="1;65pkt 65fpkt"];
1875--2435[label="0.979167;47pkt 47fpkt"];
2005--3579[label="1;10pkt 10fpkt"];
2021--3585[label="1;12pkt 12fpkt"];
2099--3616[label="1;15pkt 15fpkt"];
2099--4305[label="1;15pkt 15fpkt"];
2137--3638[label="1;8pkt 8fpkt"];
2137--4315[label="1;8pkt 8fpkt"];
2142--3640[label="1;100pkt 100fpkt"];
2317--3716[label="1;42pkt 42fpkt"];
2317--4352[label="1;42pkt 42fpkt"];
2410--3757[label="1;67pkt 67fpkt"];
2410--4372[label="1;67pkt 67fpkt"];
2520--3809[label="1;61pkt 61fpkt"];
2520--4395[label="1;60pkt 60fpkt"];
2796--3930[label="1;3pkt 3fpkt"];
2905--3981[label="1;18pkt 18fpkt"];
2921--3990[label="1;16pkt 16fpkt"];
2921--4490[label="1;16pkt 16fpkt"];
3033--4031[label="1;1pkt 1fpkt"];
3033--4508[label="1;2pkt 2fpkt"];
3053--4044[label="1;2pkt 2fpkt"];
3053--4519[label="1;3pkt 3fpkt"];
3506--4253[label="1;13pkt 13fpkt"];
3616--4305[label="1;15pkt 15fpkt"];
3638--4315[label="1;9pkt 9fpkt"];
3716--4352[label="1;42pkt 42fpkt"];
3757--4372[label="1;68pkt 68fpkt"];
3809--4395[label="1;60pkt 60fpkt"];
3990--4490[label="1;16pkt 16fpkt"];
4031--4508[label="1;1pkt 1fpkt"];
4044--4519[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.162.215.60"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
2423[label="195.53.125.61;204pkt 204fpkt", shape=pentagon, color=darkviolet];
3764[label="195.53.125.61;205pkt 205fpkt", shape=invtriangle, color=brown];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.53.125.61:*, *:3128}[34.6341%]&lt;BR/&gt;{195.53.125.61:*, *:1080}[33.6585%]&lt;BR/&gt;{195.53.125.61:*, *:3127}[31.7073%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.3594%)&lt;BR/&gt; 1080: (16.8704%)&lt;BR/&gt; 3127: (15.7702%)&lt;BR/&gt; 4881: (0.488998%)&lt;BR/&gt; 4512: (0.488998%)&gt;];
}
2423--3764[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="195.53.125.61"/>
      <filter dst_port="1080" src_ip="195.53.125.61"/>
      <filter dst_port="3127" src_ip="195.53.125.61"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
64[label="209.70.136.61s;99pkt 99fpkt", shape=rectangle, color=red];
2424[label="209.70.136.61;232pkt 232fpkt", shape=pentagon, color=darkviolet];
3765[label="209.70.136.61;233pkt 233fpkt", shape=invtriangle, color=brown];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.70.136.61:17018, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17018: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
64--2424[label="0.989899;98pkt 98fpkt"];
64--3765[label="1;99pkt 99fpkt"];
2424--3765[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.70.136.61" src_port="17018"/>
    </slice>
    <from sec="1078290699" usec="0"/>
    <to sec="1078290713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938025,1.99438,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
65[label="90.146.70.62s;76pkt 76fpkt", shape=rectangle, color=red];
2428[label="90.146.70.62;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3767[label="90.146.70.62;252pkt 252fpkt", shape=invtriangle, color=brown];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.146.70.62:64785, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64785: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
65--2428[label="0.986842;75pkt 75fpkt"];
65--3767[label="0.986842;75pkt 75fpkt"];
2428--3767[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.146.70.62" src_port="64785"/>
    </slice>
    <from sec="1078290657" usec="0"/>
    <to sec="1078290672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09703,1.98307,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
66[label="194.211.72.63s;241pkt 241fpkt", shape=rectangle, color=red];
2433[label="194.211.72.63;253pkt 253fpkt", shape=pentagon, color=darkviolet];
3769[label="194.211.72.63;253pkt 253fpkt", shape=invtriangle, color=brown];
4377[label="194.211.72.63;253pkt 253fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.211.72.63:64523, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64523: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
66--2433[label="0.995851;240pkt 240fpkt"];
66--3769[label="0.995851;240pkt 240fpkt"];
66--4377[label="0.995851;240pkt 240fpkt"];
2433--3769[label="1;253pkt 253fpkt"];
2433--4377[label="1;253pkt 253fpkt"];
3769--4377[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.211.72.63" src_port="64523"/>
    </slice>
    <from sec="1078290732" usec="0"/>
    <to sec="1078290746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
2436[label="195.39.137.63;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3770[label="195.39.137.63;100pkt 100fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.39.137.63:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4978: (0.5%)&lt;BR/&gt; 4957: (0.5%)&lt;BR/&gt; 4929: (0.5%)&lt;BR/&gt; 4917: (0.5%)&gt;];
}
2436--3770[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="195.39.137.63"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
2438[label="210.48.150.63;93pkt 93fpkt", shape=pentagon, color=darkviolet];
3772[label="210.48.150.63;93pkt 93fpkt", shape=invtriangle, color=brown];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.48.150.63:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3384: (1.07527%)&lt;BR/&gt; 4972: (0.537634%)&lt;BR/&gt; 4929: (0.537634%)&lt;BR/&gt; 4917: (0.537634%)&gt;];
}
2438--3772[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.48.150.63"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.53.184.63"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.205.11.65"/>
    </slice>
    <from sec="1078290308" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
2449[label="144.135.115.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3779[label="144.135.115.65;1pkt 1fpkt", shape=invtriangle, color=brown];
4381[label="144.135.115.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.115.65:44781, 211.82.43.0:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44781: (50%)&lt;BR/&gt; 6667: (50%)&gt;];
}
2449--3779[label="1;1pkt 1fpkt"];
2449--4381[label="1;1pkt 1fpkt"];
3779--4381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.82.43.0" dst_port="6667" src_ip="144.135.115.65" src_port="44781"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
2451[label="33.67.159.65;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3781[label="33.67.159.65;102pkt 102fpkt", shape=invtriangle, color=brown];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.67.159.65:*, *:3127}[35.9223%]&lt;BR/&gt;{33.67.159.65:*, *:1080}[32.0388%]&lt;BR/&gt;{33.67.159.65:*, *:3128}[32.0388%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (17.8922%)&lt;BR/&gt; 3128: (16.1765%)&lt;BR/&gt; 1080: (15.9314%)&lt;BR/&gt; 4983: (0.490196%)&lt;BR/&gt; 4874: (0.490196%)&gt;];
}
2451--3781[label="0.990196;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.67.159.65"/>
      <filter dst_port="3128" src_ip="33.67.159.65"/>
      <filter dst_port="1080" src_ip="33.67.159.65"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
2452[label="144.135.212.65;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3782[label="144.135.212.65;20pkt 20fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.212.65:*, 206.172.199.129:80}[25%]&lt;BR/&gt;{144.135.212.65:*, 36.226.171.128:80}[20%]&lt;BR/&gt;{144.135.212.65:*, 192.71.1.169:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5%)&lt;BR/&gt; 39521: (2.5%)&lt;BR/&gt; 39420: (2.5%)&lt;BR/&gt; 39419: (2.5%)&lt;BR/&gt; 39417: (2.5%)&gt;];
}
2452--3782[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="206.172.199.129" dst_port="80" src_ip="144.135.212.65"/>
      <filter dst_ip="192.71.1.169" dst_port="80" src_ip="144.135.212.65"/>
      <filter dst_ip="36.226.171.128" dst_port="80" src_ip="144.135.212.65"/>
    </slice>
    <from sec="1078290052" usec="0"/>
    <to sec="1078290856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
2455[label="207.56.22.66;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3784[label="207.56.22.66;17pkt 17fpkt", shape=invtriangle, color=brown];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.56.22.66:21, 168.168.110.89:*}[47.0588%]&lt;BR/&gt;{207.56.22.66:21, 168.168.80.196:*}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 61526: (2.94118%)&lt;BR/&gt; 61513: (2.94118%)&lt;BR/&gt; 61469: (2.94118%)&lt;BR/&gt; 2758: (2.94118%)&gt;];
}
2455--3784[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.110.89" src_ip="207.56.22.66" src_port="21"/>
      <filter dst_ip="168.168.80.196" src_ip="207.56.22.66" src_port="21"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
2464[label="207.56.22.67;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3788[label="207.56.22.67;35pkt 35fpkt", shape=invtriangle, color=brown];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.56.22.67:21, 168.168.7.77:*}[22.8571%]&lt;BR/&gt;{207.56.22.67:21, 168.168.42.223:*}[22.8571%]&lt;BR/&gt;{207.56.22.67:21, 168.168.229.60:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 62478: (1.44928%)&lt;BR/&gt; 61612: (1.44928%)&lt;BR/&gt; 61605: (1.44928%)&lt;BR/&gt; 61599: (1.44928%)&gt;];
}
2464--3788[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.42.223" src_ip="207.56.22.67" src_port="21"/>
      <filter dst_ip="168.168.7.77" src_ip="207.56.22.67" src_port="21"/>
      <filter dst_ip="168.168.229.60" src_ip="207.56.22.67" src_port="21"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
2471[label="144.135.118.67;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3790[label="144.135.118.67;5pkt 5fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.118.67:*, *:1863}[50%]&lt;BR/&gt;{144.135.118.67:4649, *:3544}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (27.2727%)&lt;BR/&gt; 4649: (13.6364%)&lt;BR/&gt; 3544: (13.6364%)&lt;BR/&gt; 5050: (9.09091%)&lt;BR/&gt; 3045: (9.09091%)&gt;];
}
2471--3790[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="144.135.118.67"/>
      <filter dst_port="3544" src_ip="144.135.118.67" src_port="4649"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
310[label="131.6.177.124;d;55pkt 55fpkt", shape=diamond, color=yellow];
311[label="90.156.55.31;s;54pkt 54fpkt", shape=diamond, color=yellow];
2209[label="90.156.55.31;59pkt 59fpkt", shape=pentagon, color=darkviolet];
2473[label="213.28.144.67;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3669[label="90.156.55.31;58pkt 58fpkt", shape=invtriangle, color=brown];
3791[label="213.28.144.67;4pkt 4fpkt", shape=invtriangle, color=brown];
4387[label="213.28.144.67;4pkt 4fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.156.55.31:80, 131.6.177.124:*}[93.6508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2689%)&lt;BR/&gt; 1863: (2.73109%)&lt;BR/&gt; 1939: (0.840336%)&lt;BR/&gt; 1938: (0.840336%)&lt;BR/&gt; 1937: (0.840336%)&gt;];
}
310--311[label="1;54pkt 54fpkt"];
310--1965[label="0.363636;20pkt 20fpkt"];
310--1980[label="0.363636;20pkt 20fpkt"];
310--2209[label="0.981818;54pkt 54fpkt"];
310--2473[label="0.25;1pkt 1fpkt"];
310--3669[label="0.963636;53pkt 53fpkt"];
310--3791[label="0.25;1pkt 1fpkt"];
310--4387[label="0.25;1pkt 1fpkt"];
311--1965[label="0.37037;20pkt 20fpkt"];
311--1980[label="0.37037;20pkt 20fpkt"];
311--2209[label="1;54pkt 54fpkt"];
311--3669[label="0.981481;53pkt 53fpkt"];
2209--3669[label="1;58pkt 58fpkt"];
2473--3791[label="1;4pkt 4fpkt"];
2473--4387[label="1;4pkt 4fpkt"];
3791--4387[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.177.124" src_ip="90.156.55.31" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
2476[label="194.205.172.67;393pkt 393fpkt", shape=pentagon, color=darkviolet];
3792[label="194.205.172.67;392pkt 392fpkt", shape=invtriangle, color=brown];
4388[label="194.205.172.67;392pkt 392fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.205.172.67:1028, *:137}[61.0687%]&lt;BR/&gt;{194.205.172.67:1029, *:137}[38.9313%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (30.5013%)&lt;BR/&gt; 1029: (19.4987%)&gt;];
}
2476--3792[label="1;392pkt 392fpkt"];
2476--4388[label="1;392pkt 392fpkt"];
3792--4388[label="1;392pkt 392fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.205.172.67" src_port="1028"/>
      <filter dst_port="137" src_ip="194.205.172.67" src_port="1029"/>
    </slice>
    <from sec="1078290225" usec="0"/>
    <to sec="1078290767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
2496[label="194.201.53.70;177pkt 177fpkt", shape=pentagon, color=darkviolet];
3801[label="194.201.53.70;176pkt 176fpkt", shape=invtriangle, color=brown];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.201.53.70:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2496--3801[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.201.53.70" src_port="1031"/>
    </slice>
    <from sec="1078290168" usec="0"/>
    <to sec="1078290198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
2499[label="148.143.163.70;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3802[label="148.143.163.70;41pkt 41fpkt", shape=invtriangle, color=brown];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.143.163.70:60232, *:53}[95.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60232: (47.561%)&lt;BR/&gt; 53: (47.561%)&lt;BR/&gt; 0: (2.43902%)&lt;BR/&gt; 53581: (1.21951%)&lt;BR/&gt; 80: (1.21951%)&gt;];
}
2499--3802[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="148.143.163.70" src_port="60232"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12171,1.91309,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
238[label="144.135.130.121;d;206pkt 206fpkt", shape=diamond, color=yellow];
500[label="37.26.177.182;s;175pkt 175fpkt", shape=diamond, color=yellow];
544[label="203.129.200.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
877[label="144.135.71.5;d;90pkt 90fpkt", shape=diamond, color=yellow];
1337[label="192.62.128.193;s;11pkt 11fpkt", shape=diamond, color=yellow];
1493[label="144.135.130.121;d;79pkt 79fpkt", shape=hexagon, color=black];
1683[label="144.135.71.5;d;68pkt 68fpkt", shape=hexagon, color=black];
2474[label="213.28.145.67;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2530[label="213.28.144.76;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2640[label="213.28.145.91;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3189[label="37.26.177.182;248pkt 248fpkt", shape=pentagon, color=darkviolet];
3244[label="90.135.8.194;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3527[label="213.28.150.245;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3571[label="203.129.200.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3811[label="213.28.144.76;5pkt 5fpkt", shape=invtriangle, color=brown];
3856[label="213.28.145.91;4pkt 4fpkt", shape=invtriangle, color=brown];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.26.177.182:80, *:*}[46.7925%]&lt;BR/&gt;{*:80, 144.135.130.121:*}[36.2264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0753%)&lt;BR/&gt; 1863: (2.63441%)&lt;BR/&gt; 5050: (0.483871%)&lt;BR/&gt; 1031: (0.376344%)&lt;BR/&gt; 1554: (0.322581%)&gt;];
}
238--395[label="0.00485437;1pkt 1fpkt"];
238--500[label="0.211429;37pkt 37fpkt"];
238--501[label="0.0194175;4pkt 4fpkt"];
238--528[label="0.00813008;1pkt 1fpkt"];
238--544[label="1;1pkt 1fpkt"];
238--627[label="0.0291262;6pkt 6fpkt"];
238--629[label="0.00694444;1pkt 1fpkt"];
238--667[label="0.0909091;3pkt 3fpkt"];
238--702[label="0.00970874;2pkt 2fpkt"];
238--758[label="0.0145631;3pkt 3fpkt"];
238--864[label="0.0135135;1pkt 1fpkt"];
238--873[label="0.00574713;1pkt 1fpkt"];
238--1101[label="0.00537634;1pkt 1fpkt"];
238--1115[label="0.0222222;2pkt 2fpkt"];
238--1134[label="0.0106383;1pkt 1fpkt"];
238--1139[label="0.025;2pkt 2fpkt"];
238--1246[label="0.0307692;2pkt 2fpkt"];
238--1323[label="0.015625;1pkt 1fpkt"];
238--1337[label="0.0909091;1pkt 1fpkt"];
238--1448[label="0.0952381;8pkt 8fpkt"];
238--1493[label="1;79pkt 79fpkt"];
238--1517[label="0.0104167;1pkt 1fpkt"];
238--1565[label="0.0291262;6pkt 6fpkt"];
238--1614[label="0.0151515;3pkt 3fpkt"];
238--1754[label="0.0135135;1pkt 1fpkt"];
238--1755[label="0.0194175;4pkt 4fpkt"];
238--1770[label="0.0120482;1pkt 1fpkt"];
238--1931[label="0.0291262;6pkt 6fpkt"];
238--1965[label="0.160194;33pkt 33fpkt"];
238--1980[label="0.160194;33pkt 33fpkt"];
238--2017[label="0.010101;1pkt 1fpkt"];
238--2275[label="0.0810811;3pkt 3fpkt"];
238--2530[label="0.2;1pkt 1fpkt"];
238--2640[label="0.2;1pkt 1fpkt"];
238--2961[label="0.00515464;1pkt 1fpkt"];
238--3069[label="0.0145631;3pkt 3fpkt"];
238--3072[label="0.00970874;2pkt 2fpkt"];
238--3189[label="0.179612;37pkt 37fpkt"];
238--3527[label="0.333333;1pkt 1fpkt"];
238--3571[label="1;1pkt 1fpkt"];
238--3582[label="0.010101;1pkt 1fpkt"];
238--3694[label="0.0833333;3pkt 3fpkt"];
238--3811[label="0.2;1pkt 1fpkt"];
238--3856[label="0.25;1pkt 1fpkt"];
238--4289[label="0.0102041;1pkt 1fpkt"];
238--4339[label="0.0810811;3pkt 3fpkt"];
500--1469[label="0.205714;36pkt 36fpkt"];
500--1493[label="0.468354;37pkt 37fpkt"];
500--1639[label="0.148148;20pkt 20fpkt"];
500--1965[label="0.308571;54pkt 54fpkt"];
500--1980[label="0.308571;54pkt 54fpkt"];
500--3189[label="1;175pkt 175fpkt"];
544--1493[label="1;1pkt 1fpkt"];
544--3571[label="1;1pkt 1fpkt"];
877--887[label="0.0111111;1pkt 1fpkt"];
877--1151[label="0.0111111;1pkt 1fpkt"];
877--1380[label="0.133333;12pkt 12fpkt"];
877--1650[label="0.122222;11pkt 11fpkt"];
877--1683[label="1;68pkt 68fpkt"];
877--1965[label="0.0222222;2pkt 2fpkt"];
877--1980[label="0.0222222;2pkt 2fpkt"];
877--2039[label="0.0111111;1pkt 1fpkt"];
877--2474[label="0.25;1pkt 1fpkt"];
877--2530[label="0.2;1pkt 1fpkt"];
877--2878[label="0.0111111;1pkt 1fpkt"];
877--3058[label="0.0222222;2pkt 2fpkt"];
877--3244[label="0.96;24pkt 24fpkt"];
877--3591[label="0.0111111;1pkt 1fpkt"];
877--3811[label="0.2;1pkt 1fpkt"];
877--4294[label="0.0111111;1pkt 1fpkt"];
1337--1469[label="0.0909091;1pkt 1fpkt"];
1337--1493[label="0.0909091;1pkt 1fpkt"];
1493--1517[label="0.0126582;1pkt 1fpkt"];
1493--1614[label="0.0379747;3pkt 3fpkt"];
1493--1755[label="0.0379747;3pkt 3fpkt"];
1493--1965[label="0.417722;33pkt 33fpkt"];
1493--1980[label="0.417722;33pkt 33fpkt"];
1493--2017[label="0.0126582;1pkt 1fpkt"];
1493--2530[label="0.2;1pkt 1fpkt"];
1493--2640[label="0.2;1pkt 1fpkt"];
1493--3069[label="0.0379747;3pkt 3fpkt"];
1493--3072[label="0.0253165;2pkt 2fpkt"];
1493--3189[label="0.468354;37pkt 37fpkt"];
1493--3571[label="1;1pkt 1fpkt"];
1493--3582[label="0.0126582;1pkt 1fpkt"];
1493--3811[label="0.2;1pkt 1fpkt"];
1493--3856[label="0.25;1pkt 1fpkt"];
1493--4289[label="0.0126582;1pkt 1fpkt"];
1683--1965[label="0.0294118;2pkt 2fpkt"];
1683--1980[label="0.0294118;2pkt 2fpkt"];
1683--2039[label="0.0147059;1pkt 1fpkt"];
1683--2474[label="0.25;1pkt 1fpkt"];
1683--2530[label="0.2;1pkt 1fpkt"];
1683--2878[label="0.0147059;1pkt 1fpkt"];
1683--3058[label="0.0294118;2pkt 2fpkt"];
1683--3244[label="0.64;16pkt 16fpkt"];
1683--3591[label="0.0147059;1pkt 1fpkt"];
1683--3811[label="0.2;1pkt 1fpkt"];
1683--4294[label="0.0147059;1pkt 1fpkt"];
2530--3811[label="1;5pkt 5fpkt"];
2640--3856[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="37.26.177.182" src_port="80"/>
      <filter dst_ip="144.135.130.121" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
2543[label="39.204.116.78;445pkt 445fpkt", shape=pentagon, color=darkviolet];
3816[label="39.204.116.78;444pkt 444fpkt", shape=invtriangle, color=brown];
4400[label="39.204.116.78;444pkt 444fpkt", shape=invhouse, color=bisque];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.204.116.78:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2543--3816[label="1;444pkt 444fpkt"];
2543--4400[label="1;444pkt 444fpkt"];
3816--4400[label="1;444pkt 444fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.204.116.78" src_port="1025"/>
    </slice>
    <from sec="1078290648" usec="0"/>
    <to sec="1078290728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
2547[label="204.89.41.79;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3818[label="204.89.41.79;3pkt 3fpkt", shape=invtriangle, color=brown];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.89.41.79:80, 131.6.11.165:34431}[33.3333%]&lt;BR/&gt;{204.89.41.79:80, 131.6.11.165:34432}[33.3333%]&lt;BR/&gt;{204.89.41.79:80, 131.6.11.165:34433}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34433: (16.6667%)&lt;BR/&gt; 34432: (16.6667%)&lt;BR/&gt; 34431: (16.6667%)&gt;];
}
2547--3818[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.11.165" dst_port="34433" src_ip="204.89.41.79" src_port="80"/>
      <filter dst_ip="131.6.11.165" dst_port="34432" src_ip="204.89.41.79" src_port="80"/>
      <filter dst_ip="131.6.11.165" dst_port="34431" src_ip="204.89.41.79" src_port="80"/>
    </slice>
    <from sec="1078290853" usec="0"/>
    <to sec="1078290888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.28.148.79"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
2551[label="37.160.154.79;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3820[label="37.160.154.79;97pkt 97fpkt", shape=invtriangle, color=brown];
4403[label="37.160.154.79;98pkt 98fpkt", shape=invhouse, color=bisque];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.160.154.79:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4131: (1.02389%)&lt;BR/&gt; 4068: (1.02389%)&lt;BR/&gt; 3719: (1.02389%)&lt;BR/&gt; 3033: (0.853242%)&gt;];
}
2551--3820[label="1;97pkt 97fpkt"];
2551--4403[label="1;98pkt 98fpkt"];
3820--4403[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="37.160.154.79"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.179.22.80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
2572[label="33.113.101.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3830[label="33.113.101.81;1pkt 1fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.113.101.81:1521, 148.33.188.67:10132}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10132: (50%)&lt;BR/&gt; 1521: (50%)&gt;];
}
2572--3830[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.188.67" dst_port="10132" src_ip="33.113.101.81" src_port="1521"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
2583[label="39.56.88.83;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3834[label="39.56.88.83;6pkt 6fpkt", shape=invtriangle, color=brown];
4410[label="39.56.88.83;5pkt 5fpkt", shape=invhouse, color=bisque];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.56.88.83:80, 131.6.178.233:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1293: (8.82353%)&lt;BR/&gt; 1292: (8.82353%)&lt;BR/&gt; 1287: (8.82353%)&lt;BR/&gt; 1286: (8.82353%)&gt;];
}
2583--3834[label="1;6pkt 6fpkt"];
2583--4410[label="1;5pkt 5fpkt"];
3834--4410[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.178.233" src_ip="39.56.88.83" src_port="80"/>
    </slice>
    <from sec="1078290310" usec="0"/>
    <to sec="1078290437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_672{
style=filled;
color=gray75;
2585[label="208.158.4.84;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3835[label="208.158.4.84;38pkt 38fpkt", shape=invtriangle, color=brown];
stat672[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.158.4.84:*, *:25}[55.2632%]&lt;BR/&gt;{208.158.4.84:25, *:*}[23.6842%]&lt;BR/&gt;{208.158.4.84:*, *:113}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.4737%)&lt;BR/&gt; 113: (10.5263%)&lt;BR/&gt; 65021: (1.31579%)&lt;BR/&gt; 48199: (1.31579%)&lt;BR/&gt; 35438: (1.31579%)&gt;];
}
2585--3835[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="208.158.4.84" src_port="25"/>
      <filter dst_port="25" src_ip="208.158.4.84"/>
      <filter dst_port="113" src_ip="208.158.4.84"/>
    </slice>
    <from sec="1078290019" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
2588[label="206.50.70.84;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3837[label="206.50.70.84;14pkt 14fpkt", shape=invtriangle, color=brown];
4411[label="206.50.70.84;13pkt 13fpkt", shape=invhouse, color=bisque];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.50.70.84:443, 168.168.36.91:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 54547: (3.65854%)&lt;BR/&gt; 54546: (3.65854%)&lt;BR/&gt; 54542: (3.65854%)&lt;BR/&gt; 54515: (3.65854%)&gt;];
}
2588--3837[label="1;14pkt 14fpkt"];
2588--4411[label="1;13pkt 13fpkt"];
3837--4411[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.36.91" src_ip="206.50.70.84" src_port="443"/>
    </slice>
    <from sec="1078290849" usec="0"/>
    <to sec="1078290886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
2594[label="133.173.181.84;146pkt 146fpkt", shape=pentagon, color=darkviolet];
3840[label="133.173.181.84;146pkt 146fpkt", shape=invtriangle, color=brown];
4414[label="133.173.181.84;146pkt 146fpkt", shape=invhouse, color=bisque];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.173.181.84:2422, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2422: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2594--3840[label="1;146pkt 146fpkt"];
2594--4414[label="1;146pkt 146fpkt"];
3840--4414[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="133.173.181.84" src_port="2422"/>
    </slice>
    <from sec="1078290013" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
2603[label="175.227.27.86;99pkt 99fpkt", shape=pentagon, color=darkviolet];
3844[label="175.227.27.86;99pkt 99fpkt", shape=invtriangle, color=brown];
4415[label="175.227.27.86;99pkt 99fpkt", shape=invhouse, color=bisque];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.227.27.86:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1884: (1.0101%)&lt;BR/&gt; 4937: (0.505051%)&lt;BR/&gt; 4864: (0.505051%)&lt;BR/&gt; 4753: (0.505051%)&gt;];
}
2603--3844[label="1;99pkt 99fpkt"];
2603--4415[label="1;99pkt 99fpkt"];
3844--4415[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="175.227.27.86"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
2616[label="216.180.57.88;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3847[label="216.180.57.88;4pkt 4fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.180.57.88:80, 168.168.36.67:4404}[25%]&lt;BR/&gt;{216.180.57.88:80, 168.168.36.67:4405}[25%]&lt;BR/&gt;{216.180.57.88:80, 168.168.36.67:4407}[25%]&lt;BR/&gt;{216.180.57.88:80, 168.168.36.67:4408}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4408: (12.5%)&lt;BR/&gt; 4407: (12.5%)&lt;BR/&gt; 4405: (12.5%)&lt;BR/&gt; 4404: (12.5%)&gt;];
}
2616--3847[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.36.67" dst_port="4408" src_ip="216.180.57.88" src_port="80"/>
      <filter dst_ip="168.168.36.67" dst_port="4407" src_ip="216.180.57.88" src_port="80"/>
      <filter dst_ip="168.168.36.67" dst_port="4405" src_ip="216.180.57.88" src_port="80"/>
      <filter dst_ip="168.168.36.67" dst_port="4404" src_ip="216.180.57.88" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
2627[label="213.28.144.89;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3850[label="213.28.144.89;5pkt 5fpkt", shape=invtriangle, color=brown];
4420[label="213.28.144.89;4pkt 4fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.144.89:1863, 144.134.0.1:1034}[20%]&lt;BR/&gt;{213.28.144.89:1863, 144.134.0.25:3096}[20%]&lt;BR/&gt;{213.28.144.89:1863, 148.33.226.88:3106}[20%]&lt;BR/&gt;{213.28.144.89:1863, 148.33.205.166:50969}[20%]&lt;BR/&gt;{213.28.144.89:1863, 144.134.231.243:1214}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 50969: (10.7143%)&lt;BR/&gt; 3096: (10.7143%)&lt;BR/&gt; 1214: (10.7143%)&lt;BR/&gt; 1034: (10.7143%)&gt;];
}
2627--3850[label="1;5pkt 5fpkt"];
2627--4420[label="1;4pkt 4fpkt"];
3850--4420[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.231.243" dst_port="1214" src_ip="213.28.144.89" src_port="1863"/>
      <filter dst_ip="148.33.205.166" dst_port="50969" src_ip="213.28.144.89" src_port="1863"/>
      <filter dst_ip="148.33.226.88" dst_port="3106" src_ip="213.28.144.89" src_port="1863"/>
      <filter dst_ip="144.134.0.25" dst_port="3096" src_ip="213.28.144.89" src_port="1863"/>
      <filter dst_ip="144.134.0.1" dst_port="1034" src_ip="213.28.144.89" src_port="1863"/>
    </slice>
    <from sec="1078290014" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
2636[label="39.214.22.91;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3853[label="39.214.22.91;9pkt 9fpkt", shape=invtriangle, color=brown];
4422[label="39.214.22.91;9pkt 9fpkt", shape=invhouse, color=bisque];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.214.22.91:220, *:6129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (50%)&lt;BR/&gt; 220: (50%)&gt;];
}
2636--3853[label="1;9pkt 9fpkt"];
2636--4422[label="1;9pkt 9fpkt"];
3853--4422[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="39.214.22.91" src_port="220"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
2637[label="202.237.63.91;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3854[label="202.237.63.91;30pkt 30fpkt", shape=invtriangle, color=brown];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.237.63.91:21, 168.168.7.23:*}[23.3333%]&lt;BR/&gt;{202.237.63.91:21, 168.168.100.186:*}[23.3333%]&lt;BR/&gt;{202.237.63.91:21, 168.168.105.12:*}[20%]&lt;BR/&gt;{202.237.63.91:21, 168.168.0.118:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1087: (3.33333%)&lt;BR/&gt; 1067: (3.33333%)&lt;BR/&gt; 61684: (1.66667%)&lt;BR/&gt; 1384: (1.66667%)&gt;];
}
2637--3854[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.100.186" src_ip="202.237.63.91" src_port="21"/>
      <filter dst_ip="168.168.7.23" src_ip="202.237.63.91" src_port="21"/>
      <filter dst_ip="168.168.0.118" src_ip="202.237.63.91" src_port="21"/>
      <filter dst_ip="168.168.105.12" src_ip="202.237.63.91" src_port="21"/>
    </slice>
    <from sec="1078290049" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.48.8.92"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
2650[label="194.27.106.93;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3860[label="194.27.106.93;56pkt 56fpkt", shape=invtriangle, color=brown];
4426[label="194.27.106.93;56pkt 56fpkt", shape=invhouse, color=bisque];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.27.106.93:*, 131.72.198.161:443}[71.4286%]&lt;BR/&gt;{194.27.106.93:*, 131.72.198.139:80}[26.7857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (35.7143%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 65072: (0.892857%)&lt;BR/&gt; 64283: (0.892857%)&lt;BR/&gt; 64258: (0.892857%)&gt;];
}
2650--3860[label="1;56pkt 56fpkt"];
2650--4426[label="1;56pkt 56fpkt"];
3860--4426[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="131.72.198.161" dst_port="443" src_ip="194.27.106.93"/>
      <filter dst_ip="131.72.198.139" dst_port="80" src_ip="194.27.106.93"/>
    </slice>
    <from sec="1078290242" usec="0"/>
    <to sec="1078290744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
2655[label="205.40.220.93;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3863[label="205.40.220.93;77pkt 77fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.40.220.93:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3158: (1.29032%)&lt;BR/&gt; 3018: (1.29032%)&lt;BR/&gt; 4988: (0.645161%)&lt;BR/&gt; 4902: (0.645161%)&gt;];
}
2655--3863[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="205.40.220.93"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
2662[label="204.14.253.94;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3867[label="204.14.253.94;74pkt 74fpkt", shape=invtriangle, color=brown];
4429[label="204.14.253.94;74pkt 74fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.14.253.94:*, *:3128}[50.6667%]&lt;BR/&gt;{204.14.253.94:*, *:1080}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.1121%)&lt;BR/&gt; 1080: (24.8879%)&lt;BR/&gt; 4989: (0.672646%)&lt;BR/&gt; 4801: (0.672646%)&lt;BR/&gt; 4736: (0.672646%)&gt;];
}
2662--3867[label="1;74pkt 74fpkt"];
2662--4429[label="1;74pkt 74fpkt"];
3867--4429[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="204.14.253.94"/>
      <filter dst_port="1080" src_ip="204.14.253.94"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
3868[label="52.163.84.95;77pkt 77fpkt", shape=invtriangle, color=brown];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.163.84.95:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3660: (1.2987%)&lt;BR/&gt; 2446: (1.2987%)&lt;BR/&gt; 4984: (0.649351%)&lt;BR/&gt; 4922: (0.649351%)&gt;];
}
</description>
    <slice>
      <filter dst_port="3127" src_ip="52.163.84.95"/>
    </slice>
    <from sec="1078290212" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.196.39.96"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
2678[label="144.135.97.97;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3875[label="144.135.97.97;6pkt 6fpkt", shape=invtriangle, color=brown];
4433[label="144.135.97.97;6pkt 6fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.97.97:*, 213.28.36.1:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34226: (8.33333%)&lt;BR/&gt; 34225: (8.33333%)&lt;BR/&gt; 34224: (8.33333%)&lt;BR/&gt; 34223: (8.33333%)&gt;];
}
2678--3875[label="1;6pkt 6fpkt"];
2678--4433[label="1;6pkt 6fpkt"];
3875--4433[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="213.28.36.1" dst_port="80" src_ip="144.135.97.97"/>
    </slice>
    <from sec="1078290521" usec="0"/>
    <to sec="1078290532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
2680[label="194.212.74.98;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3878[label="194.212.74.98;22pkt 22fpkt", shape=invtriangle, color=brown];
4434[label="194.212.74.98;23pkt 23fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.74.98:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32813: (2.20588%)&lt;BR/&gt; 31522: (2.20588%)&lt;BR/&gt; 30324: (2.20588%)&lt;BR/&gt; 29126: (2.20588%)&gt;];
}
2680--3878[label="1;22pkt 22fpkt"];
2680--4434[label="1;23pkt 23fpkt"];
3878--4434[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.74.98" src_port="80"/>
    </slice>
    <from sec="1078290144" usec="0"/>
    <to sec="1078290716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
2694[label="196.59.232.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3883[label="196.59.232.99;1pkt 1fpkt", shape=invtriangle, color=brown];
4438[label="196.59.232.99;1pkt 1fpkt", shape=invhouse, color=bisque];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.59.232.99:80, 144.135.132.103:3933}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3933: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2694--3883[label="1;1pkt 1fpkt"];
2694--4438[label="1;1pkt 1fpkt"];
3883--4438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.132.103" dst_port="3933" src_ip="196.59.232.99" src_port="80"/>
    </slice>
    <from sec="1078290848" usec="0"/>
    <to sec="1078290872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
2699[label="144.135.175.100;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3887[label="144.135.175.100;53pkt 53fpkt", shape=invtriangle, color=brown];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.175.100:*, 222.51.6.3:80}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2560: (0.943396%)&lt;BR/&gt; 2558: (0.943396%)&lt;BR/&gt; 2556: (0.943396%)&lt;BR/&gt; 2555: (0.943396%)&gt;];
}
2699--3887[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="222.51.6.3" dst_port="80" src_ip="144.135.175.100"/>
    </slice>
    <from sec="1078290819" usec="0"/>
    <to sec="1078290877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
2701[label="155.107.2.101;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3888[label="155.107.2.101;100pkt 100fpkt", shape=invtriangle, color=brown];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.107.2.101:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3892: (1%)&lt;BR/&gt; 2984: (1%)&lt;BR/&gt; 2031: (1%)&lt;BR/&gt; 2026: (1%)&gt;];
}
2701--3888[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="155.107.2.101"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
1331[label="208.158.50.216;d;56pkt 56fpkt", shape=diamond, color=yellow];
2185[label="213.28.145.26;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3659[label="213.28.145.26;4pkt 4fpkt", shape=invtriangle, color=brown];
3889[label="33.107.34.101;1pkt 1fpkt", shape=invtriangle, color=brown];
4325[label="213.28.145.26;4pkt 4fpkt", shape=invhouse, color=bisque];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 208.158.50.216:1024}[33.8983%]&lt;BR/&gt;{*:53, 208.158.50.216:1032}[20.339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (23.5294%)&lt;BR/&gt; 1024: (14.7059%)&lt;BR/&gt; 1863: (8.82353%)&lt;BR/&gt; 1032: (8.82353%)&lt;BR/&gt; 5050: (8.08824%)&gt;];
}
1331--1678[label="0.0178571;1pkt 1fpkt"];
1331--1714[label="0.0178571;1pkt 1fpkt"];
1331--1932[label="0.0178571;1pkt 1fpkt"];
1331--1938[label="0.0178571;1pkt 1fpkt"];
1331--1964[label="0.142857;8pkt 8fpkt"];
1331--1965[label="0.0714286;4pkt 4fpkt"];
1331--1980[label="0.0714286;4pkt 4fpkt"];
1331--2459[label="0.0416667;1pkt 1fpkt"];
1331--3390[label="0.0285714;1pkt 1fpkt"];
1331--3516[label="0.0769231;1pkt 1fpkt"];
1331--3659[label="0.25;1pkt 1fpkt"];
1331--3889[label="1;1pkt 1fpkt"];
1331--4205[label="0.0285714;1pkt 1fpkt"];
1331--4258[label="0.0769231;1pkt 1fpkt"];
1331--4325[label="0.25;1pkt 1fpkt"];
1331--4591[label="0.0285714;1pkt 1fpkt"];
2185--3659[label="1;3pkt 3fpkt"];
2185--4325[label="1;3pkt 3fpkt"];
3659--4325[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.158.50.216" dst_port="1024" src_port="53"/>
      <filter dst_ip="208.158.50.216" dst_port="1032" src_port="53"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
2712[label="193.190.104.102;228pkt 228fpkt", shape=pentagon, color=darkviolet];
3892[label="193.190.104.102;227pkt 227fpkt", shape=invtriangle, color=brown];
4442[label="193.190.104.102;227pkt 227fpkt", shape=invhouse, color=bisque];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.190.104.102:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2991: (0.219941%)&lt;BR/&gt; 2985: (0.219941%)&lt;BR/&gt; 2984: (0.219941%)&lt;BR/&gt; 2983: (0.219941%)&gt;];
}
2712--3892[label="1;227pkt 227fpkt"];
2712--4442[label="1;227pkt 227fpkt"];
3892--4442[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.190.104.102"/>
    </slice>
    <from sec="1078290610" usec="0"/>
    <to sec="1078290647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.128.215.103"/>
    </slice>
    <from sec="1078290369" usec="0"/>
    <to sec="1078290606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
2722[label="208.236.236.104;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3896[label="208.236.236.104;100pkt 100fpkt", shape=invtriangle, color=brown];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.236.236.104:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4898: (0.497512%)&lt;BR/&gt; 4886: (0.497512%)&lt;BR/&gt; 4876: (0.497512%)&lt;BR/&gt; 4871: (0.497512%)&gt;];
}
2722--3896[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="208.236.236.104"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.9.25.105"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
2731[label="144.135.205.106;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3901[label="144.135.205.106;21pkt 21fpkt", shape=invtriangle, color=brown];
4448[label="144.135.205.106;21pkt 21fpkt", shape=invhouse, color=bisque];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.205.106:*, *:80}[76.1905%]&lt;BR/&gt;{144.135.205.106:80, *:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41257: (2.38095%)&lt;BR/&gt; 41256: (2.38095%)&lt;BR/&gt; 41227: (2.38095%)&lt;BR/&gt; 41226: (2.38095%)&gt;];
}
2731--3901[label="1;21pkt 21fpkt"];
2731--4448[label="1;21pkt 21fpkt"];
3901--4448[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="144.135.205.106" src_port="80"/>
      <filter dst_port="80" src_ip="144.135.205.106"/>
    </slice>
    <from sec="1078290077" usec="0"/>
    <to sec="1078290850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
358[label="144.134.9.103;d;46pkt 46fpkt", shape=diamond, color=yellow];
651[label="38.135.170.241;s;5pkt 5fpkt", shape=diamond, color=yellow];
851[label="196.215.44.111;s;928pkt 928fpkt", shape=diamond, color=yellow];
2734[label="209.166.20.107;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2762[label="196.215.44.111;927pkt 927fpkt", shape=pentagon, color=darkviolet];
2954[label="204.252.213.142;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3513[label="38.135.170.241;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3903[label="209.166.20.107;4pkt 4fpkt", shape=invtriangle, color=brown];
4449[label="209.166.20.107;4pkt 4fpkt", shape=invhouse, color=bisque];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.215.44.111:7000, *:*}[47.2112%]&lt;BR/&gt;{196.215.44.111:7200, *:*}[45.2191%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (24.123%)&lt;BR/&gt; 7200: (23.0808%)&lt;BR/&gt; 80: (2.08439%)&lt;BR/&gt; 443: (0.686324%)&lt;BR/&gt; 41067: (0.203355%)&gt;];
}
358--651[label="0.4;2pkt 2fpkt"];
358--797[label="0.166667;1pkt 1fpkt"];
358--851[label="0.0434783;2pkt 2fpkt"];
358--1967[label="0.282609;13pkt 13fpkt"];
358--1971[label="0.0217391;1pkt 1fpkt"];
358--1981[label="0.282609;13pkt 13fpkt"];
358--1983[label="0.0217391;1pkt 1fpkt"];
358--1991[label="0.282609;13pkt 13fpkt"];
358--1992[label="0.0217391;1pkt 1fpkt"];
358--2734[label="1;5pkt 5fpkt"];
358--2762[label="0.0434783;2pkt 2fpkt"];
358--2954[label="0.325581;14pkt 14fpkt"];
358--3508[label="1;15pkt 15fpkt"];
358--3513[label="0.4;2pkt 2fpkt"];
358--3903[label="1;4pkt 4fpkt"];
358--4255[label="1;15pkt 15fpkt"];
358--4449[label="1;4pkt 4fpkt"];
651--1967[label="0.2;1pkt 1fpkt"];
651--1981[label="0.2;1pkt 1fpkt"];
651--1991[label="0.2;1pkt 1fpkt"];
651--3513[label="1;5pkt 5fpkt"];
851--1495[label="0.0114286;2pkt 2fpkt"];
851--2762[label="1;927pkt 927fpkt"];
2734--3903[label="1;4pkt 4fpkt"];
2734--4449[label="1;4pkt 4fpkt"];
3903--4449[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="196.215.44.111" src_port="7000"/>
      <filter src_ip="196.215.44.111" src_port="7200"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
2736[label="210.155.54.107;80pkt 80fpkt", shape=pentagon, color=darkviolet];
3904[label="210.155.54.107;79pkt 79fpkt", shape=invtriangle, color=brown];
4450[label="210.155.54.107;79pkt 79fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.155.54.107:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4963: (0.630252%)&lt;BR/&gt; 4835: (0.630252%)&lt;BR/&gt; 4775: (0.630252%)&lt;BR/&gt; 4601: (0.630252%)&gt;];
}
2736--3904[label="1;79pkt 79fpkt"];
2736--4450[label="1;79pkt 79fpkt"];
3904--4450[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.155.54.107"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
2737[label="33.107.56.107;97pkt 97fpkt", shape=pentagon, color=darkviolet];
3905[label="33.107.56.107;97pkt 97fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.107.56.107:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4767: (1.03093%)&lt;BR/&gt; 4605: (1.03093%)&lt;BR/&gt; 4387: (1.03093%)&lt;BR/&gt; 4167: (1.03093%)&gt;];
}
2737--3905[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.107.56.107"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
2742[label="196.140.195.108;214pkt 214fpkt", shape=pentagon, color=darkviolet];
3907[label="196.140.195.108;213pkt 213fpkt", shape=invtriangle, color=brown];
4452[label="196.140.195.108;213pkt 213fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.140.195.108:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4683: (0.46875%)&lt;BR/&gt; 4344: (0.46875%)&lt;BR/&gt; 4998: (0.234375%)&lt;BR/&gt; 4973: (0.234375%)&gt;];
}
2742--3907[label="1;213pkt 213fpkt"];
2742--4452[label="1;213pkt 213fpkt"];
3907--4452[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.140.195.108"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
2757[label="195.133.169.110;141pkt 141fpkt", shape=pentagon, color=darkviolet];
3914[label="195.133.169.110;140pkt 140fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.133.169.110:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2757--3914[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.133.169.110" src_port="1029"/>
    </slice>
    <from sec="1078290194" usec="0"/>
    <to sec="1078290228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.86.169.112"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.67.88.114"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
2786[label="194.233.217.115;235pkt 235fpkt", shape=pentagon, color=darkviolet];
3926[label="194.233.217.115;235pkt 235fpkt", shape=invtriangle, color=brown];
4462[label="194.233.217.115;234pkt 234fpkt", shape=invhouse, color=bisque];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.233.217.115:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2786--3926[label="1;235pkt 235fpkt"];
2786--4462[label="1;234pkt 234fpkt"];
3926--4462[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.233.217.115" src_port="1028"/>
    </slice>
    <from sec="1078290338" usec="0"/>
    <to sec="1078290382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
2793[label="53.190.145.116;85pkt 85fpkt", shape=pentagon, color=darkviolet];
3929[label="53.190.145.116;85pkt 85fpkt", shape=invtriangle, color=brown];
4464[label="53.190.145.116;85pkt 85fpkt", shape=invhouse, color=bisque];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.190.145.116:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3217: (1.17647%)&lt;BR/&gt; 4967: (0.588235%)&lt;BR/&gt; 4956: (0.588235%)&lt;BR/&gt; 4828: (0.588235%)&gt;];
}
2793--3929[label="1;85pkt 85fpkt"];
2793--4464[label="1;85pkt 85fpkt"];
3929--4464[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="53.190.145.116"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
2801[label="144.135.175.117;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3932[label="144.135.175.117;2pkt 2fpkt", shape=invtriangle, color=brown];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.175.117:51780, 213.86.166.73:80}[33.3333%]&lt;BR/&gt;{144.135.175.117:51781, 213.86.166.73:80}[33.3333%]&lt;BR/&gt;{144.135.175.117:51782, 213.86.166.73:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51782: (20%)&lt;BR/&gt; 51781: (20%)&lt;BR/&gt; 51780: (10%)&gt;];
}
2801--3932[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.86.166.73" dst_port="80" src_ip="144.135.175.117" src_port="51782"/>
      <filter dst_ip="213.86.166.73" dst_port="80" src_ip="144.135.175.117" src_port="51781"/>
      <filter dst_ip="213.86.166.73" dst_port="80" src_ip="144.135.175.117" src_port="51780"/>
    </slice>
    <from sec="1078290729" usec="0"/>
    <to sec="1078290738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.145.32.118"/>
    </slice>
    <from sec="1078290773" usec="0"/>
    <to sec="1078290790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
2806[label="213.128.94.118;116pkt 116fpkt", shape=pentagon, color=darkviolet];
3935[label="213.128.94.118;115pkt 115fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.128.94.118:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4983: (0.4329%)&lt;BR/&gt; 4952: (0.4329%)&lt;BR/&gt; 4842: (0.4329%)&lt;BR/&gt; 4776: (0.4329%)&gt;];
}
2806--3935[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="213.128.94.118"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
2810[label="107.60.78.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3936[label="107.60.78.119;1pkt 1fpkt", shape=invtriangle, color=brown];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.60.78.119:4145, 148.146.17.222:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4145: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
2810--3936[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.146.17.222" dst_port="3128" src_ip="107.60.78.119" src_port="4145"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
2812[label="194.202.163.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3938[label="194.202.163.119;2pkt 2fpkt", shape=invtriangle, color=brown];
4467[label="194.202.163.119;3pkt 3fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.163.119:4300, 172.136.97.58:3127}[33.3333%]&lt;BR/&gt;{194.202.163.119:4080, 172.136.97.135:3127}[33.3333%]&lt;BR/&gt;{194.202.163.119:4333, 172.136.97.149:3127}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4333: (21.4286%)&lt;BR/&gt; 4080: (21.4286%)&lt;BR/&gt; 4300: (7.14286%)&gt;];
}
2812--3938[label="1;2pkt 2fpkt"];
2812--4467[label="1;2pkt 2fpkt"];
3938--4467[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.97.149" dst_port="3127" src_ip="194.202.163.119" src_port="4333"/>
      <filter dst_ip="172.136.97.135" dst_port="3127" src_ip="194.202.163.119" src_port="4080"/>
      <filter dst_ip="172.136.97.58" dst_port="3127" src_ip="194.202.163.119" src_port="4300"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
2814[label="193.213.0.120;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3939[label="193.213.0.120;6pkt 6fpkt", shape=invtriangle, color=brown];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.213.0.120:33982, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33982: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2814--3939[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.213.0.120" src_port="33982"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
2824[label="195.40.93.121;226pkt 226fpkt", shape=pentagon, color=darkviolet];
3944[label="195.40.93.121;225pkt 225fpkt", shape=invtriangle, color=brown];
4470[label="195.40.93.121;225pkt 225fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.40.93.121:*, *:3127}[33.6283%]&lt;BR/&gt;{195.40.93.121:*, *:3128}[33.6283%]&lt;BR/&gt;{195.40.93.121:*, *:1080}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.0858%)&lt;BR/&gt; 3127: (16.716%)&lt;BR/&gt; 1080: (16.4201%)&lt;BR/&gt; 4420: (0.443787%)&lt;BR/&gt; 4289: (0.443787%)&gt;];
}
2824--3944[label="1;225pkt 225fpkt"];
2824--4470[label="1;225pkt 225fpkt"];
3944--4470[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="195.40.93.121"/>
      <filter dst_port="3127" src_ip="195.40.93.121"/>
      <filter dst_port="1080" src_ip="195.40.93.121"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
2829[label="221.177.216.121;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3946[label="221.177.216.121;1pkt 1fpkt", shape=invtriangle, color=brown];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.177.216.121:41119, 144.134.214.61:53}[50%]&lt;BR/&gt;{221.177.216.121:41119, 148.33.104.130:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41119: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
2829--3946[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.104.130" dst_port="53" src_ip="221.177.216.121" src_port="41119"/>
      <filter dst_ip="144.134.214.61" dst_port="53" src_ip="221.177.216.121" src_port="41119"/>
    </slice>
    <from sec="1078290852" usec="0"/>
    <to sec="1078290857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
2830[label="194.210.231.121;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3947[label="194.210.231.121;100pkt 100fpkt", shape=invtriangle, color=brown];
4472[label="194.210.231.121;100pkt 100fpkt", shape=invhouse, color=bisque];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.210.231.121:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3422: (0.996678%)&lt;BR/&gt; 3368: (0.996678%)&lt;BR/&gt; 4925: (0.498339%)&lt;BR/&gt; 4911: (0.498339%)&gt;];
}
2830--3947[label="1;100pkt 100fpkt"];
2830--4472[label="1;100pkt 100fpkt"];
3947--4472[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.210.231.121"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.239.128.123"/>
    </slice>
    <from sec="1078290085" usec="0"/>
    <to sec="1078290099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
2851[label="209.97.164.126;175pkt 175fpkt", shape=pentagon, color=darkviolet];
3954[label="209.97.164.126;174pkt 174fpkt", shape=invtriangle, color=brown];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.164.126:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2851--3954[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.97.164.126" src_port="1029"/>
    </slice>
    <from sec="1078290192" usec="0"/>
    <to sec="1078290210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
2857[label="144.135.121.128;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3959[label="144.135.121.128;2pkt 2fpkt", shape=invtriangle, color=brown];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.121.128:9834, 138.213.17.209:14592}[33.3333%]&lt;BR/&gt;{144.135.121.128:80, 36.116.113.10:3851}[33.3333%]&lt;BR/&gt;{144.135.121.128:80, 36.116.113.10:3852}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 3852: (20%)&lt;BR/&gt; 3851: (20%)&lt;BR/&gt; 14592: (10%)&lt;BR/&gt; 9834: (10%)&gt;];
}
2857--3959[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.116.113.10" dst_port="3852" src_ip="144.135.121.128" src_port="80"/>
      <filter dst_ip="36.116.113.10" dst_port="3851" src_ip="144.135.121.128" src_port="80"/>
      <filter dst_ip="138.213.17.209" dst_port="14592" src_ip="144.135.121.128" src_port="9834"/>
    </slice>
    <from sec="1078290381" usec="0"/>
    <to sec="1078290414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
2858[label="196.59.128.128;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3960[label="196.59.128.128;38pkt 38fpkt", shape=invtriangle, color=brown];
4477[label="196.59.128.128;38pkt 38fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.59.128.128:80, 144.134.0.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1634: (1.30435%)&lt;BR/&gt; 1633: (1.30435%)&lt;BR/&gt; 1632: (1.30435%)&lt;BR/&gt; 1631: (1.30435%)&gt;];
}
2858--3960[label="1;38pkt 38fpkt"];
2858--4477[label="1;38pkt 38fpkt"];
3960--4477[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.0.1" src_ip="196.59.128.128" src_port="80"/>
    </slice>
    <from sec="1078290864" usec="0"/>
    <to sec="1078290871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.83.15.129"/>
    </slice>
    <from sec="1078290101" usec="0"/>
    <to sec="1078290126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
2874[label="213.28.150.131;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3966[label="213.28.150.131;3pkt 3fpkt", shape=invtriangle, color=brown];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.150.131:1863, 208.145.201.32:14322}[25%]&lt;BR/&gt;{213.28.150.131:1863, 144.135.182.240:41482}[25%]&lt;BR/&gt;{213.28.150.131:1863, 144.135.182.248:32774}[25%]&lt;BR/&gt;{213.28.150.131:1863, 144.135.182.248:32783}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 41482: (14.2857%)&lt;BR/&gt; 32783: (14.2857%)&lt;BR/&gt; 32774: (14.2857%)&lt;BR/&gt; 14322: (7.14286%)&gt;];
}
2874--3966[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.182.248" dst_port="32783" src_ip="213.28.150.131" src_port="1863"/>
      <filter dst_ip="144.135.182.248" dst_port="32774" src_ip="213.28.150.131" src_port="1863"/>
      <filter dst_ip="144.135.182.240" dst_port="41482" src_ip="213.28.150.131" src_port="1863"/>
      <filter dst_ip="208.145.201.32" dst_port="14322" src_ip="213.28.150.131" src_port="1863"/>
    </slice>
    <from sec="1078290387" usec="0"/>
    <to sec="1078290808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
2881[label="39.160.123.132;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3969[label="39.160.123.132;2pkt 2fpkt", shape=invtriangle, color=brown];
4479[label="39.160.123.132;2pkt 2fpkt", shape=invhouse, color=bisque];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.160.123.132:53883, 144.135.195.62:80}[33.3333%]&lt;BR/&gt;{39.160.123.132:56725, 144.135.131.107:80}[33.3333%]&lt;BR/&gt;{39.160.123.132:52969, 172.136.8.165:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56725: (21.4286%)&lt;BR/&gt; 52969: (21.4286%)&lt;BR/&gt; 53883: (7.14286%)&gt;];
}
2881--3969[label="1;2pkt 2fpkt"];
2881--4479[label="1;2pkt 2fpkt"];
3969--4479[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.8.165" dst_port="80" src_ip="39.160.123.132" src_port="52969"/>
      <filter dst_ip="144.135.131.107" dst_port="80" src_ip="39.160.123.132" src_port="56725"/>
      <filter dst_ip="144.135.195.62" dst_port="80" src_ip="39.160.123.132" src_port="53883"/>
    </slice>
    <from sec="1078290255" usec="0"/>
    <to sec="1078290543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
2883[label="213.28.150.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3971[label="213.28.150.132;1pkt 1fpkt", shape=invtriangle, color=brown];
4481[label="213.28.150.132;1pkt 1fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.150.132:1863, 148.33.84.165:3768}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3768: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
2883--3971[label="1;1pkt 1fpkt"];
2883--4481[label="1;1pkt 1fpkt"];
3971--4481[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.84.165" dst_port="3768" src_ip="213.28.150.132" src_port="1863"/>
    </slice>
    <from sec="1078290042" usec="0"/>
    <to sec="1078290889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
2894[label="194.166.37.134;99pkt 99fpkt", shape=pentagon, color=darkviolet];
3976[label="194.166.37.134;98pkt 98fpkt", shape=invtriangle, color=brown];
4485[label="194.166.37.134;98pkt 98fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.166.37.134:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4990: (0.508475%)&lt;BR/&gt; 4881: (0.508475%)&lt;BR/&gt; 4772: (0.508475%)&lt;BR/&gt; 4674: (0.508475%)&gt;];
}
2894--3976[label="1;98pkt 98fpkt"];
2894--4485[label="1;98pkt 98fpkt"];
3976--4485[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.166.37.134"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.11.92.134"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
2902[label="192.117.167.135;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3980[label="192.117.167.135;4pkt 4fpkt", shape=invtriangle, color=brown];
4486[label="192.117.167.135;4pkt 4fpkt", shape=invhouse, color=bisque];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.117.167.135:80, 168.168.37.56:2890}[25%]&lt;BR/&gt;{192.117.167.135:80, 168.168.37.56:2896}[25%]&lt;BR/&gt;{192.117.167.135:80, 168.168.37.57:4494}[25%]&lt;BR/&gt;{192.117.167.135:80, 168.168.37.57:4502}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4502: (12.5%)&lt;BR/&gt; 4494: (12.5%)&lt;BR/&gt; 2896: (12.5%)&lt;BR/&gt; 2890: (12.5%)&gt;];
}
2902--3980[label="1;4pkt 4fpkt"];
2902--4486[label="1;4pkt 4fpkt"];
3980--4486[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.37.57" dst_port="4502" src_ip="192.117.167.135" src_port="80"/>
      <filter dst_ip="168.168.37.57" dst_port="4494" src_ip="192.117.167.135" src_port="80"/>
      <filter dst_ip="168.168.37.56" dst_port="2896" src_ip="192.117.167.135" src_port="80"/>
      <filter dst_ip="168.168.37.56" dst_port="2890" src_ip="192.117.167.135" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
325[label="209.77.166.229;d;164pkt 164fpkt", shape=diamond, color=yellow];
467[label="39.214.147.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
479[label="209.77.138.1;d;335pkt 335fpkt", shape=diamond, color=yellow];
677[label="207.101.226.142;s;26pkt 26fpkt", shape=diamond, color=yellow];
923[label="90.144.65.90;s;4pkt 4fpkt", shape=diamond, color=yellow];
1071[label="192.33.236.168;s;114pkt 114fpkt", shape=diamond, color=yellow];
1476[label="209.77.166.229;d;109pkt 109fpkt", shape=hexagon, color=black];
1555[label="39.214.147.93;s;1pkt 1fpkt", shape=hexagon, color=black];
2010[label="37.109.115.1;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2026[label="88.50.144.3;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2088[label="39.193.51.13;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2243[label="39.25.189.35;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2903[label="88.50.201.135;74pkt 74fpkt", shape=pentagon, color=darkviolet];
2908[label="90.167.104.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2955[label="207.101.226.142;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3103[label="192.33.236.168;113pkt 113fpkt", shape=pentagon, color=darkviolet];
3586[label="88.50.144.3;3pkt 3fpkt", shape=invtriangle, color=brown];
3609[label="39.193.51.13;57pkt 57fpkt", shape=invtriangle, color=brown];
3982[label="90.167.104.136;1pkt 1fpkt", shape=invtriangle, color=brown];
4290[label="88.50.144.3;2pkt 2fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.77.138.1:*}[59.325%]&lt;BR/&gt;{*:80, 209.77.166.229:*}[32.5044%]&lt;BR/&gt;{192.33.236.168:80, *:*}[20.2487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9556%)&lt;BR/&gt; 44140: (0.222222%)&lt;BR/&gt; 43755: (0.222222%)&lt;BR/&gt; 43596: (0.222222%)&lt;BR/&gt; 60242: (0.177778%)&gt;];
}
325--467[label="1;1pkt 1fpkt"];
325--1071[label="0.236842;27pkt 27fpkt"];
325--1476[label="1;109pkt 109fpkt"];
325--1555[label="1;1pkt 1fpkt"];
325--1965[label="0.176829;29pkt 29fpkt"];
325--1980[label="0.176829;29pkt 29fpkt"];
325--2010[label="1;8pkt 8fpkt"];
325--2020[label="0.211538;11pkt 11fpkt"];
325--2026[label="1;3pkt 3fpkt"];
325--2088[label="0.672414;39pkt 39fpkt"];
325--2903[label="0.689189;51pkt 51fpkt"];
325--3103[label="0.230088;26pkt 26fpkt"];
325--3586[label="1;3pkt 3fpkt"];
325--3609[label="0.666667;38pkt 38fpkt"];
325--4290[label="1;2pkt 2fpkt"];
467--1476[label="1;1pkt 1fpkt"];
467--1555[label="1;1pkt 1fpkt"];
467--1965[label="1;1pkt 1fpkt"];
467--1980[label="1;1pkt 1fpkt"];
479--629[label="0.229167;33pkt 33fpkt"];
479--631[label="0.229167;33pkt 33fpkt"];
479--677[label="1;26pkt 26fpkt"];
479--923[label="1;4pkt 4fpkt"];
479--1000[label="0.00813008;1pkt 1fpkt"];
479--1071[label="0.570175;65pkt 65fpkt"];
479--1517[label="0.260417;25pkt 25fpkt"];
479--1566[label="0.242647;33pkt 33fpkt"];
479--1965[label="0.0507463;17pkt 17fpkt"];
479--1980[label="0.0507463;17pkt 17fpkt"];
479--2020[label="0.0769231;4pkt 4fpkt"];
479--2243[label="1;23pkt 23fpkt"];
479--2257[label="0.4;10pkt 10fpkt"];
479--2409[label="0.00746269;1pkt 1fpkt"];
479--2908[label="1;1pkt 1fpkt"];
479--2955[label="1;28pkt 28fpkt"];
479--3103[label="0.575221;65pkt 65fpkt"];
479--3479[label="0.0357143;1pkt 1fpkt"];
479--3685[label="0.4;10pkt 10fpkt"];
479--3756[label="0.00740741;1pkt 1fpkt"];
479--3982[label="1;1pkt 1fpkt"];
677--2955[label="0.961538;25pkt 25fpkt"];
1071--1476[label="0.229358;25pkt 25fpkt"];
1071--1965[label="0.184211;21pkt 21fpkt"];
1071--1980[label="0.184211;21pkt 21fpkt"];
1071--3103[label="1;113pkt 113fpkt"];
1476--1555[label="1;1pkt 1fpkt"];
1476--1965[label="0.266055;29pkt 29fpkt"];
1476--1980[label="0.266055;29pkt 29fpkt"];
1476--2010[label="1;8pkt 8fpkt"];
1476--2020[label="0.0576923;3pkt 3fpkt"];
1476--2026[label="0.333333;1pkt 1fpkt"];
1476--2088[label="0.0689655;4pkt 4fpkt"];
1476--2903[label="0.689189;51pkt 51fpkt"];
1476--3103[label="0.220183;24pkt 24fpkt"];
1476--3586[label="0.333333;1pkt 1fpkt"];
1476--3609[label="0.0526316;3pkt 3fpkt"];
1555--1965[label="1;1pkt 1fpkt"];
1555--1980[label="1;1pkt 1fpkt"];
2026--3586[label="1;3pkt 3fpkt"];
2026--4290[label="1;2pkt 2fpkt"];
2088--3609[label="1;57pkt 57fpkt"];
2908--3982[label="1;1pkt 1fpkt"];
3586--4290[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="192.33.236.168" src_port="80"/>
      <filter dst_ip="209.77.138.1" src_port="80"/>
      <filter dst_ip="209.77.166.229" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
360[label="144.135.149.78;d;145pkt 145fpkt", shape=diamond, color=yellow];
361[label="192.37.57.137;s;142pkt 142fpkt", shape=diamond, color=yellow];
2914[label="192.37.57.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3984[label="192.37.57.137;1pkt 1fpkt", shape=invtriangle, color=brown];
4488[label="192.37.57.137;2pkt 2fpkt", shape=invhouse, color=bisque];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.37.57.137:80, 144.135.149.78:*}[98.6207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43330: (0.687285%)&lt;BR/&gt; 43166: (0.515464%)&lt;BR/&gt; 43329: (0.343643%)&lt;BR/&gt; 43328: (0.343643%)&gt;];
}
360--361[label="1;142pkt 142fpkt"];
360--770[label="0.0204082;2pkt 2fpkt"];
360--1965[label="0.0206897;3pkt 3fpkt"];
360--1980[label="0.0206897;3pkt 3fpkt"];
360--2914[label="1;1pkt 1fpkt"];
360--3104[label="0.0183486;2pkt 2fpkt"];
360--3984[label="1;1pkt 1fpkt"];
360--4061[label="0.0183486;2pkt 2fpkt"];
360--4488[label="1;2pkt 2fpkt"];
361--1965[label="0.0211268;3pkt 3fpkt"];
361--1980[label="0.0211268;3pkt 3fpkt"];
361--4488[label="0.5;1pkt 1fpkt"];
2914--3984[label="1;1pkt 1fpkt"];
2914--4488[label="1;1pkt 1fpkt"];
3984--4488[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.149.78" src_ip="192.37.57.137" src_port="80"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
329[label="205.37.150.72;s;3pkt 3fpkt", shape=diamond, color=yellow];
580[label="172.136.38.161;d;96pkt 96fpkt", shape=diamond, color=yellow];
2159[label="205.32.134.23;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2916[label="204.214.104.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3209[label="205.32.134.186;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3648[label="205.32.134.23;14pkt 14fpkt", shape=invtriangle, color=brown];
3986[label="204.214.104.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.32.134.186:80, 172.136.38.161:*}[20.4082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 1387: (1%)&lt;BR/&gt; 1384: (1%)&lt;BR/&gt; 1383: (1%)&lt;BR/&gt; 1382: (1%)&gt;];
}
329--580[label="0.333333;1pkt 1fpkt"];
580--2159[label="1;14pkt 14fpkt"];
580--2916[label="1;2pkt 2fpkt"];
580--3209[label="1;20pkt 20fpkt"];
580--3648[label="1;14pkt 14fpkt"];
580--3986[label="1;1pkt 1fpkt"];
2159--3648[label="1;14pkt 14fpkt"];
2916--3986[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.38.161" src_ip="205.32.134.186" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
2919[label="208.114.250.137;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3989[label="208.114.250.137;3pkt 3fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.114.250.137:80, 144.134.26.63:1821}[33.3333%]&lt;BR/&gt;{208.114.250.137:80, 144.134.26.63:1822}[33.3333%]&lt;BR/&gt;{208.114.250.137:80, 144.134.26.63:1823}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1823: (16.6667%)&lt;BR/&gt; 1822: (16.6667%)&lt;BR/&gt; 1821: (16.6667%)&gt;];
}
2919--3989[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.26.63" dst_port="1823" src_ip="208.114.250.137" src_port="80"/>
      <filter dst_ip="144.134.26.63" dst_port="1822" src_ip="208.114.250.137" src_port="80"/>
      <filter dst_ip="144.134.26.63" dst_port="1821" src_ip="208.114.250.137" src_port="80"/>
    </slice>
    <from sec="1078290686" usec="0"/>
    <to sec="1078290734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
505[label="144.134.246.12;d;166pkt 166fpkt", shape=diamond, color=yellow];
628[label="194.67.67.1;s;58pkt 58fpkt", shape=diamond, color=yellow];
746[label="144.134.6.105;d;241pkt 241fpkt", shape=diamond, color=yellow];
2007[label="194.67.67.1;61pkt 61fpkt", shape=pentagon, color=darkviolet];
2230[label="36.21.54.34;55pkt 55fpkt", shape=pentagon, color=darkviolet];
2816[label="194.67.67.120;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2875[label="192.126.159.131;125pkt 125fpkt", shape=pentagon, color=darkviolet];
2877[label="52.109.171.131;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3873[label="194.67.67.97;15pkt 15fpkt", shape=invtriangle, color=brown];
3941[label="194.67.67.120;30pkt 30fpkt", shape=invtriangle, color=brown];
3967[label="192.126.159.131;124pkt 124fpkt", shape=invtriangle, color=brown];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.134.246.12:*}[31.7907%]&lt;BR/&gt;{192.126.159.131:80, 144.134.6.105:*}[22.5352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.5257%)&lt;BR/&gt; 25: (3.94304%)&lt;BR/&gt; 33436: (1.86199%)&lt;BR/&gt; 33435: (1.86199%)&lt;BR/&gt; 113: (1.15005%)&gt;];
}
505--628[label="0.948276;55pkt 55fpkt"];
505--652[label="0.0212766;2pkt 2fpkt"];
505--1012[label="0.0117647;1pkt 1fpkt"];
505--1965[label="0.168675;28pkt 28fpkt"];
505--1980[label="0.168675;28pkt 28fpkt"];
505--2007[label="0.901639;55pkt 55fpkt"];
505--2582[label="0.025641;1pkt 1fpkt"];
505--2816[label="0.741935;23pkt 23fpkt"];
505--2877[label="0.285714;2pkt 2fpkt"];
505--2959[label="0.0105263;1pkt 1fpkt"];
505--3572[label="0.0060241;1pkt 1fpkt"];
505--3873[label="0.866667;13pkt 13fpkt"];
505--3941[label="0.766667;23pkt 23fpkt"];
505--4285[label="0.0060241;1pkt 1fpkt"];
505--4629[label="0.0060241;1pkt 1fpkt"];
628--1644[label="0.0172414;1pkt 1fpkt"];
628--1965[label="0.275862;16pkt 16fpkt"];
628--1980[label="0.275862;16pkt 16fpkt"];
628--2007[label="0.982759;57pkt 57fpkt"];
746--1025[label="0.02;1pkt 1fpkt"];
746--1116[label="0.0204082;1pkt 1fpkt"];
746--1237[label="0.0307692;2pkt 2fpkt"];
746--1378[label="0.0344828;1pkt 1fpkt"];
746--1553[label="0.0207469;5pkt 5fpkt"];
746--1861[label="0.0204082;1pkt 1fpkt"];
746--1965[label="0.0124481;3pkt 3fpkt"];
746--1980[label="0.0124481;3pkt 3fpkt"];
746--2205[label="0.0307692;2pkt 2fpkt"];
746--2230[label="0.254545;14pkt 14fpkt"];
746--2351[label="0.0373444;9pkt 9fpkt"];
746--2355[label="0.222222;2pkt 2fpkt"];
746--2582[label="0.025641;1pkt 1fpkt"];
746--2875[label="0.768;96pkt 96fpkt"];
746--2877[label="0.285714;2pkt 2fpkt"];
746--2905[label="0.0555556;1pkt 1fpkt"];
746--3418[label="0.0188679;1pkt 1fpkt"];
746--3572[label="0.0124481;3pkt 3fpkt"];
746--3667[label="0.03125;2pkt 2fpkt"];
746--3967[label="0.774194;96pkt 96fpkt"];
746--3981[label="0.0555556;1pkt 1fpkt"];
746--4220[label="0.0188679;1pkt 1fpkt"];
746--4285[label="0.0124481;3pkt 3fpkt"];
746--4629[label="0.0124481;3pkt 3fpkt"];
2816--3941[label="1;30pkt 30fpkt"];
2875--3967[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.246.12" src_port="80"/>
      <filter dst_ip="144.134.6.105" src_ip="192.126.159.131" src_port="80"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
2923[label="192.71.30.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3992[label="192.71.30.138;2pkt 2fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.71.30.138:80, 168.168.37.57:4493}[50%]&lt;BR/&gt;{192.71.30.138:80, 168.168.36.91:54563}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54563: (25%)&lt;BR/&gt; 4493: (25%)&gt;];
}
2923--3992[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.36.91" dst_port="54563" src_ip="192.71.30.138" src_port="80"/>
      <filter dst_ip="168.168.37.57" dst_port="4493" src_ip="192.71.30.138" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
2933[label="213.235.116.140;241pkt 241fpkt", shape=pentagon, color=darkviolet];
3995[label="213.235.116.140;240pkt 240fpkt", shape=invtriangle, color=brown];
4493[label="213.235.116.140;241pkt 241fpkt", shape=invhouse, color=bisque];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.235.116.140:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2933--3995[label="1;240pkt 240fpkt"];
2933--4493[label="1;241pkt 241fpkt"];
3995--4493[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.235.116.140" src_port="1031"/>
    </slice>
    <from sec="1078290053" usec="0"/>
    <to sec="1078290091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
2938[label="194.202.178.140;208pkt 208fpkt", shape=pentagon, color=darkviolet];
3997[label="194.202.178.140;208pkt 208fpkt", shape=invtriangle, color=brown];
4494[label="194.202.178.140;207pkt 207fpkt", shape=invhouse, color=bisque];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.178.140:64905, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64905: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2938--3997[label="1;208pkt 208fpkt"];
2938--4494[label="1;207pkt 207fpkt"];
3997--4494[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.202.178.140" src_port="64905"/>
    </slice>
    <from sec="1078290546" usec="0"/>
    <to sec="1078290578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
2944[label="88.0.65.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4000[label="88.0.65.141;1pkt 1fpkt", shape=invtriangle, color=brown];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.0.65.141:25, 168.168.51.104:1193}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1193: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2944--4000[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.51.104" dst_port="1193" src_ip="88.0.65.141" src_port="25"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.53.103.142"/>
    </slice>
    <from sec="1078290027" usec="0"/>
    <to sec="1078290092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
2951[label="209.22.109.142;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4003[label="209.22.109.142;40pkt 40fpkt", shape=invtriangle, color=brown];
4496[label="209.22.109.142;40pkt 40fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.22.109.142:*, *:6129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (50%)&lt;BR/&gt; 4980: (1.23967%)&lt;BR/&gt; 4926: (1.23967%)&lt;BR/&gt; 4569: (1.23967%)&lt;BR/&gt; 4450: (1.23967%)&gt;];
}
2951--4003[label="1;40pkt 40fpkt"];
2951--4496[label="1;40pkt 40fpkt"];
4003--4496[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="209.22.109.142"/>
    </slice>
    <from sec="1078290035" usec="0"/>
    <to sec="1078290865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
608[label="131.6.18.213;d;734pkt 734fpkt", shape=diamond, color=yellow];
808[label="222.119.0.241;s;33pkt 33fpkt", shape=diamond, color=yellow];
1052[label="161.210.39.252;s;33pkt 33fpkt", shape=diamond, color=yellow];
1607[label="131.6.18.213;d;421pkt 421fpkt", shape=hexagon, color=black];
1628[label="222.119.0.241;s;33pkt 33fpkt", shape=hexagon, color=black];
2053[label="192.56.134.7;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2963[label="210.87.53.144;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3031[label="223.119.83.155;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3557[label="161.210.39.252;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4006[label="210.87.53.144;18pkt 18fpkt", shape=invtriangle, color=brown];
4277[label="161.210.39.252;32pkt 32fpkt", shape=invtriangle, color=brown];
4497[label="210.87.53.144;18pkt 18fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 131.6.18.213:*}[56.4033%]&lt;BR/&gt;{*:0, 131.6.18.213:0}[43.5967%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (35.8156%)&lt;BR/&gt; 80: (32.0922%)&lt;BR/&gt; 3366: (0.248227%)&lt;BR/&gt; 3843: (0.212766%)&lt;BR/&gt; 3240: (0.212766%)&gt;];
}
608--808[label="1;33pkt 33fpkt"];
608--1052[label="1;33pkt 33fpkt"];
608--1607[label="1;421pkt 421fpkt"];
608--1628[label="1;33pkt 33fpkt"];
608--1965[label="0.0149864;11pkt 11fpkt"];
608--1980[label="0.0149864;11pkt 11fpkt"];
608--2053[label="1;18pkt 18fpkt"];
608--2963[label="1;19pkt 19fpkt"];
608--3031[label="1;19pkt 19fpkt"];
608--3557[label="1;32pkt 32fpkt"];
608--4006[label="1;18pkt 18fpkt"];
608--4277[label="1;32pkt 32fpkt"];
608--4497[label="1;18pkt 18fpkt"];
808--1607[label="1;33pkt 33fpkt"];
808--1628[label="1;33pkt 33fpkt"];
1052--1607[label="0.333333;11pkt 11fpkt"];
1052--3557[label="1;32pkt 32fpkt"];
1052--4277[label="1;32pkt 32fpkt"];
1607--1628[label="1;33pkt 33fpkt"];
1607--1965[label="0.0261283;11pkt 11fpkt"];
1607--1980[label="0.0261283;11pkt 11fpkt"];
1607--2053[label="1;18pkt 18fpkt"];
1607--3557[label="0.3125;10pkt 10fpkt"];
1607--4277[label="0.3125;10pkt 10fpkt"];
2963--4006[label="1;18pkt 18fpkt"];
2963--4497[label="1;18pkt 18fpkt"];
3557--4277[label="1;32pkt 32fpkt"];
4006--4497[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.18.213" src_port="80"/>
      <filter dst_ip="131.6.18.213"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.26.137.145"/>
    </slice>
    <from sec="1078290356" usec="0"/>
    <to sec="1078290574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
2973[label="213.221.10.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4011[label="213.221.10.146;2pkt 2fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.221.10.146:53, 168.168.0.33:2683}[50%]&lt;BR/&gt;{213.221.10.146:53, 168.168.0.33:2684}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2684: (25%)&lt;BR/&gt; 2683: (25%)&gt;];
}
2973--4011[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.0.33" dst_port="2684" src_ip="213.221.10.146" src_port="53"/>
      <filter dst_ip="168.168.0.33" dst_port="2683" src_ip="213.221.10.146" src_port="53"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
2978[label="194.202.237.146;142pkt 142fpkt", shape=pentagon, color=darkviolet];
4013[label="194.202.237.146;142pkt 142fpkt", shape=invtriangle, color=brown];
4499[label="194.202.237.146;141pkt 141fpkt", shape=invhouse, color=bisque];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.237.146:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2978--4013[label="1;142pkt 142fpkt"];
2978--4499[label="1;141pkt 141fpkt"];
4013--4499[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.202.237.146" src_port="1029"/>
    </slice>
    <from sec="1078290353" usec="0"/>
    <to sec="1078290395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.154.91.147"/>
    </slice>
    <from sec="1078290848" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
2987[label="144.135.104.148;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4017[label="144.135.104.148;23pkt 23fpkt", shape=invtriangle, color=brown];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.104.148:*, 213.189.122.121:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49596: (2.17391%)&lt;BR/&gt; 49595: (2.17391%)&lt;BR/&gt; 49593: (2.17391%)&lt;BR/&gt; 49592: (2.17391%)&gt;];
}
2987--4017[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="213.189.122.121" dst_port="80" src_ip="144.135.104.148"/>
    </slice>
    <from sec="1078290053" usec="0"/>
    <to sec="1078290848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
2991[label="90.180.218.148;130pkt 130fpkt", shape=pentagon, color=darkviolet];
4018[label="90.180.218.148;129pkt 129fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.180.218.148:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50.3861%)&lt;BR/&gt; 4744: (0.772201%)&lt;BR/&gt; 4083: (0.772201%)&lt;BR/&gt; 3839: (0.772201%)&lt;BR/&gt; 3715: (0.772201%)&gt;];
}
2991--4018[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="90.180.218.148"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
2999[label="194.110.242.150;157pkt 157fpkt", shape=pentagon, color=darkviolet];
4019[label="194.110.242.150;156pkt 156fpkt", shape=invtriangle, color=brown];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.110.242.150:65138, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65138: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2999--4019[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.110.242.150" src_port="65138"/>
    </slice>
    <from sec="1078290301" usec="0"/>
    <to sec="1078290326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
3007[label="209.13.109.152;62pkt 62fpkt", shape=pentagon, color=darkviolet];
4020[label="209.13.109.152;61pkt 61fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.13.109.152:*, *:6129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (50%)&lt;BR/&gt; 4989: (0.813008%)&lt;BR/&gt; 4972: (0.813008%)&lt;BR/&gt; 4816: (0.813008%)&lt;BR/&gt; 4746: (0.813008%)&gt;];
}
3007--4020[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="209.13.109.152"/>
    </slice>
    <from sec="1078290017" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.48.227.152"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.28.150.153"/>
    </slice>
    <from sec="1078290520" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
3023[label="194.165.39.154;52pkt 52fpkt", shape=pentagon, color=darkviolet];
4025[label="194.165.39.154;52pkt 52fpkt", shape=invtriangle, color=brown];
4504[label="194.165.39.154;52pkt 52fpkt", shape=invhouse, color=bisque];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.165.39.154:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 46736: (0.961538%)&lt;BR/&gt; 46682: (0.961538%)&lt;BR/&gt; 46629: (0.961538%)&lt;BR/&gt; 46480: (0.961538%)&gt;];
}
3023--4025[label="1;52pkt 52fpkt"];
3023--4504[label="1;52pkt 52fpkt"];
4025--4504[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.165.39.154"/>
    </slice>
    <from sec="1078290031" usec="0"/>
    <to sec="1078290604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
3024[label="194.67.70.154;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4026[label="194.67.70.154;7pkt 7fpkt", shape=invtriangle, color=brown];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.67.70.154:*, 144.135.224.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 9272: (6.66667%)&lt;BR/&gt; 9240: (6.66667%)&lt;BR/&gt; 9237: (6.66667%)&lt;BR/&gt; 9236: (6.66667%)&gt;];
}
3024--4026[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.224.8" dst_port="80" src_ip="194.67.70.154"/>
    </slice>
    <from sec="1078290239" usec="0"/>
    <to sec="1078290258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.98.145.154"/>
    </slice>
    <from sec="1078290601" usec="0"/>
    <to sec="1078290617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.18.170.156"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
3044[label="90.167.161.158;113pkt 113fpkt", shape=pentagon, color=darkviolet];
4038[label="90.167.161.158;112pkt 112fpkt", shape=invtriangle, color=brown];
4514[label="90.167.161.158;113pkt 113fpkt", shape=invhouse, color=bisque];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.167.161.158:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3044--4038[label="1;112pkt 112fpkt"];
3044--4514[label="1;113pkt 113fpkt"];
4038--4514[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.167.161.158" src_port="1032"/>
    </slice>
    <from sec="1078290659" usec="0"/>
    <to sec="1078290673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.75.30.160"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
3055[label="170.68.81.160;59pkt 59fpkt", shape=pentagon, color=darkviolet];
4045[label="170.68.81.160;59pkt 59fpkt", shape=invtriangle, color=brown];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.68.81.160:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4869: (0.847458%)&lt;BR/&gt; 4798: (0.847458%)&lt;BR/&gt; 4717: (0.847458%)&lt;BR/&gt; 4543: (0.847458%)&gt;];
}
3055--4045[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="170.68.81.160"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.28.150.162"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
3088[label="194.210.198.166;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4055[label="194.210.198.166;68pkt 68fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.210.198.166:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2004: (1.45985%)&lt;BR/&gt; 2975: (0.729927%)&lt;BR/&gt; 2916: (0.729927%)&lt;BR/&gt; 2885: (0.729927%)&gt;];
}
3088--4055[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.210.198.166"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
3093[label="207.38.68.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4057[label="207.38.68.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.38.68.168:80, 208.158.49.144:3668}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3668: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3093--4057[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.158.49.144" dst_port="3668" src_ip="207.38.68.168" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.160.85.168"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
3096[label="212.185.126.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4059[label="212.185.126.168;2pkt 2fpkt", shape=invtriangle, color=brown];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.126.168:80, 208.158.49.193:7514}[50%]&lt;BR/&gt;{212.185.126.168:80, 208.158.49.193:7549}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7549: (25%)&lt;BR/&gt; 7514: (25%)&gt;];
}
3096--4059[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.158.49.193" dst_port="7549" src_ip="212.185.126.168" src_port="80"/>
      <filter dst_ip="208.158.49.193" dst_port="7514" src_ip="212.185.126.168" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
3102[label="195.133.231.168;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4060[label="195.133.231.168;253pkt 253fpkt", shape=invtriangle, color=brown];
4528[label="195.133.231.168;254pkt 254fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.133.231.168:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3102--4060[label="1;253pkt 253fpkt"];
3102--4528[label="1;254pkt 254fpkt"];
4060--4528[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.133.231.168" src_port="1044"/>
    </slice>
    <from sec="1078290655" usec="0"/>
    <to sec="1078290669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
3107[label="213.28.85.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4063[label="213.28.85.169;1pkt 1fpkt", shape=invtriangle, color=brown];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.85.169:80, 144.134.227.100:61208}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61208: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3107--4063[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.227.100" dst_port="61208" src_ip="213.28.85.169" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
3110[label="213.28.150.169;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4065[label="213.28.150.169;2pkt 2fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.150.169:1863, 209.117.93.50:1288}[33.3333%]&lt;BR/&gt;{213.28.150.169:1863, 144.135.148.87:1070}[33.3333%]&lt;BR/&gt;{213.28.150.169:1863, 131.6.50.231:3572}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3572: (20%)&lt;BR/&gt; 1288: (20%)&lt;BR/&gt; 1070: (10%)&gt;];
}
3110--4065[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.50.231" dst_port="3572" src_ip="213.28.150.169" src_port="1863"/>
      <filter dst_ip="144.135.148.87" dst_port="1070" src_ip="213.28.150.169" src_port="1863"/>
      <filter dst_ip="209.117.93.50" dst_port="1288" src_ip="213.28.150.169" src_port="1863"/>
    </slice>
    <from sec="1078290389" usec="0"/>
    <to sec="1078290887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
3115[label="196.62.14.170;116pkt 116fpkt", shape=pentagon, color=darkviolet];
4067[label="196.62.14.170;115pkt 115fpkt", shape=invtriangle, color=brown];
4530[label="196.62.14.170;116pkt 116fpkt", shape=invhouse, color=bisque];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.62.14.170:*, *:1080}[50%]&lt;BR/&gt;{196.62.14.170:*, *:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.072%)&lt;BR/&gt; 3128: (24.928%)&lt;BR/&gt; 2780: (0.864553%)&lt;BR/&gt; 4910: (0.432277%)&lt;BR/&gt; 4909: (0.432277%)&gt;];
}
3115--4067[label="1;115pkt 115fpkt"];
3115--4530[label="1;116pkt 116fpkt"];
4067--4530[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="196.62.14.170"/>
      <filter dst_port="1080" src_ip="196.62.14.170"/>
    </slice>
    <from sec="1078290210" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.62.133.170"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
3120[label="206.232.27.171;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4071[label="206.232.27.171;5pkt 5fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.232.27.171:80, 172.136.14.132:1306}[20%]&lt;BR/&gt;{206.232.27.171:80, 172.136.14.132:1308}[20%]&lt;BR/&gt;{206.232.27.171:80, 172.136.14.132:1310}[20%]&lt;BR/&gt;{206.232.27.171:80, 172.136.14.132:1311}[20%]&lt;BR/&gt;{206.232.27.171:80, 172.136.14.132:1314}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1314: (10%)&lt;BR/&gt; 1311: (10%)&lt;BR/&gt; 1310: (10%)&lt;BR/&gt; 1308: (10%)&gt;];
}
3120--4071[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.14.132" dst_port="1314" src_ip="206.232.27.171" src_port="80"/>
      <filter dst_ip="172.136.14.132" dst_port="1311" src_ip="206.232.27.171" src_port="80"/>
      <filter dst_ip="172.136.14.132" dst_port="1310" src_ip="206.232.27.171" src_port="80"/>
      <filter dst_ip="172.136.14.132" dst_port="1308" src_ip="206.232.27.171" src_port="80"/>
      <filter dst_ip="172.136.14.132" dst_port="1306" src_ip="206.232.27.171" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
497[label="172.136.84.167;d;167pkt 167fpkt", shape=diamond, color=yellow];
499[label="144.135.134.80;d;391pkt 391fpkt", shape=diamond, color=yellow];
635[label="37.26.134.174;s;62pkt 62fpkt", shape=diamond, color=yellow];
1002[label="213.28.148.108;s;7pkt 7fpkt", shape=diamond, color=yellow];
1279[label="172.136.8.165;d;4pkt 4fpkt", shape=diamond, color=yellow];
1567[label="144.135.134.80;d;305pkt 305fpkt", shape=hexagon, color=black];
1890[label="172.136.8.165;d;4pkt 4fpkt", shape=hexagon, color=black];
2402[label="39.218.191.58;116pkt 116fpkt", shape=pentagon, color=darkviolet];
2632[label="39.160.99.90;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2657[label="37.26.137.94;109pkt 109fpkt", shape=pentagon, color=darkviolet];
2730[label="213.86.171.106;80pkt 80fpkt", shape=pentagon, color=darkviolet];
2741[label="213.28.148.108;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3122[label="39.160.123.171;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3561[label="37.26.228.252;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3864[label="37.26.137.94;108pkt 108fpkt", shape=invtriangle, color=brown];
3906[label="213.28.148.108;7pkt 7fpkt", shape=invtriangle, color=brown];
4073[label="39.160.123.171;4pkt 4fpkt", shape=invtriangle, color=brown];
4280[label="37.26.228.252;20pkt 20fpkt", shape=invtriangle, color=brown];
4428[label="37.26.137.94;108pkt 108fpkt", shape=invhouse, color=bisque];
4451[label="213.28.148.108;6pkt 6fpkt", shape=invhouse, color=bisque];
4531[label="39.160.123.171;5pkt 5fpkt", shape=invhouse, color=bisque];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.135.134.80:*}[41.2005%]&lt;BR/&gt;{*:80, 172.136.84.167:*}[22.6467%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.7419%)&lt;BR/&gt; 11234: (3.76135%)&lt;BR/&gt; 8200: (1.88067%)&lt;BR/&gt; 53: (0.453956%)&lt;BR/&gt; 1991: (0.194553%)&gt;];
}
497--635[label="0.870968;54pkt 54fpkt"];
497--1965[label="0.0239521;4pkt 4fpkt"];
497--1980[label="0.0239521;4pkt 4fpkt"];
497--2657[label="0.40367;44pkt 44fpkt"];
497--2730[label="0.6625;53pkt 53fpkt"];
497--3864[label="0.407407;44pkt 44fpkt"];
497--4428[label="0.407407;44pkt 44fpkt"];
499--501[label="0.00323625;1pkt 1fpkt"];
499--517[label="0.09;9pkt 9fpkt"];
499--663[label="0.342105;52pkt 52fpkt"];
499--696[label="0.0078125;1pkt 1fpkt"];
499--702[label="0.00732601;2pkt 2fpkt"];
499--709[label="0.025641;3pkt 3fpkt"];
499--758[label="0.00940439;3pkt 3fpkt"];
499--768[label="0.00714286;1pkt 1fpkt"];
499--770[label="0.0306122;3pkt 3fpkt"];
499--873[label="0.00574713;1pkt 1fpkt"];
499--887[label="0.00952381;1pkt 1fpkt"];
499--973[label="0.00900901;1pkt 1fpkt"];
499--1000[label="0.0406504;5pkt 5fpkt"];
499--1002[label="0.571429;4pkt 4fpkt"];
499--1012[label="0.0235294;2pkt 2fpkt"];
499--1070[label="0.0114943;1pkt 1fpkt"];
499--1134[label="0.0106383;1pkt 1fpkt"];
499--1232[label="0.0144928;1pkt 1fpkt"];
499--1242[label="0.0196078;1pkt 1fpkt"];
499--1246[label="0.0307692;2pkt 2fpkt"];
499--1249[label="0.0104167;1pkt 1fpkt"];
499--1252[label="0.025641;2pkt 2fpkt"];
499--1256[label="0.015873;1pkt 1fpkt"];
499--1266[label="0.0192308;1pkt 1fpkt"];
499--1361[label="0.00952381;1pkt 1fpkt"];
499--1371[label="0.0123457;1pkt 1fpkt"];
499--1380[label="0.0217391;2pkt 2fpkt"];
499--1465[label="0.0253165;2pkt 2fpkt"];
499--1520[label="0.183673;9pkt 9fpkt"];
499--1567[label="1;305pkt 305fpkt"];
499--1571[label="0.0192308;1pkt 1fpkt"];
499--1614[label="0.0151515;3pkt 3fpkt"];
499--1755[label="0.00398406;1pkt 1fpkt"];
499--1756[label="0.0526316;5pkt 5fpkt"];
499--1919[label="0.183673;9pkt 9fpkt"];
499--1965[label="0.0460358;18pkt 18fpkt"];
499--1967[label="0.00255754;1pkt 1fpkt"];
499--1970[label="0.00767263;3pkt 3fpkt"];
499--1980[label="0.0460358;18pkt 18fpkt"];
499--1981[label="0.00255754;1pkt 1fpkt"];
499--1991[label="0.00255754;1pkt 1fpkt"];
499--2017[label="0.010101;1pkt 1fpkt"];
499--2019[label="0.0175439;1pkt 1fpkt"];
499--2068[label="0.0181818;1pkt 1fpkt"];
499--2127[label="0.0873786;9pkt 9fpkt"];
499--2163[label="0.00900901;1pkt 1fpkt"];
499--2172[label="0.0222222;2pkt 2fpkt"];
499--2219[label="0.00869565;1pkt 1fpkt"];
499--2303[label="0.00641026;1pkt 1fpkt"];
499--2402[label="0.465517;54pkt 54fpkt"];
499--2409[label="0.0373134;5pkt 5fpkt"];
499--2450[label="0.0322581;1pkt 1fpkt"];
499--2490[label="0.0238095;1pkt 1fpkt"];
499--2632[label="0.142857;1pkt 1fpkt"];
499--2657[label="0.0275229;3pkt 3fpkt"];
499--2741[label="0.571429;4pkt 4fpkt"];
499--2782[label="0.0147059;1pkt 1fpkt"];
499--2878[label="0.00909091;1pkt 1fpkt"];
499--2959[label="0.0210526;2pkt 2fpkt"];
499--3057[label="0.0441176;3pkt 3fpkt"];
499--3058[label="0.00666667;1pkt 1fpkt"];
499--3069[label="0.00872093;3pkt 3fpkt"];
499--3070[label="0.024;3pkt 3fpkt"];
499--3072[label="0.00595238;2pkt 2fpkt"];
499--3104[label="0.0275229;3pkt 3fpkt"];
499--3122[label="0.2;1pkt 1fpkt"];
499--3334[label="0.0125;1pkt 1fpkt"];
499--3454[label="0.00862069;1pkt 1fpkt"];
499--3475[label="0.028169;2pkt 2fpkt"];
499--3520[label="0.02;1pkt 1fpkt"];
499--3561[label="1;20pkt 20fpkt"];
499--3572[label="0.0030581;1pkt 1fpkt"];
499--3582[label="0.010101;1pkt 1fpkt"];
499--3584[label="0.0175439;1pkt 1fpkt"];
499--3653[label="0.0222222;2pkt 2fpkt"];
499--3708[label="0.00641026;1pkt 1fpkt"];
499--3756[label="0.037037;5pkt 5fpkt"];
499--3780[label="0.0322581;1pkt 1fpkt"];
499--3864[label="0.0277778;3pkt 3fpkt"];
499--3906[label="0.571429;4pkt 4fpkt"];
499--3922[label="0.0149254;1pkt 1fpkt"];
499--4061[label="0.0275229;3pkt 3fpkt"];
499--4073[label="0.25;1pkt 1fpkt"];
499--4176[label="0.0126582;1pkt 1fpkt"];
499--4241[label="0.0142857;1pkt 1fpkt"];
499--4261[label="0.02;1pkt 1fpkt"];
499--4280[label="1;20pkt 20fpkt"];
499--4285[label="0.00306748;1pkt 1fpkt"];
499--4289[label="0.0102041;1pkt 1fpkt"];
499--4428[label="0.0277778;3pkt 3fpkt"];
499--4451[label="0.666667;4pkt 4fpkt"];
499--4459[label="0.0147059;1pkt 1fpkt"];
499--4531[label="0.2;1pkt 1fpkt"];
499--4575[label="0.0126582;1pkt 1fpkt"];
499--4629[label="0.00306748;1pkt 1fpkt"];
635--1965[label="0.0322581;2pkt 2fpkt"];
635--1980[label="0.0322581;2pkt 2fpkt"];
1002--1451[label="0.142857;1pkt 1fpkt"];
1002--1469[label="0.142857;1pkt 1fpkt"];
1002--1567[label="0.571429;4pkt 4fpkt"];
1002--1793[label="0.142857;1pkt 1fpkt"];
1002--1908[label="0.142857;1pkt 1fpkt"];
1002--1965[label="0.285714;2pkt 2fpkt"];
1002--1980[label="0.285714;2pkt 2fpkt"];
1002--2741[label="1;7pkt 7fpkt"];
1002--3906[label="1;7pkt 7fpkt"];
1002--4451[label="1;6pkt 6fpkt"];
1279--1890[label="1;4pkt 4fpkt"];
1279--3122[label="0.25;1pkt 1fpkt"];
1279--3309[label="0.25;1pkt 1fpkt"];
1279--4073[label="0.25;1pkt 1fpkt"];
1279--4531[label="0.25;1pkt 1fpkt"];
1567--1571[label="0.0192308;1pkt 1fpkt"];
1567--1614[label="0.0151515;3pkt 3fpkt"];
1567--1755[label="0.00398406;1pkt 1fpkt"];
1567--1756[label="0.0526316;5pkt 5fpkt"];
1567--1919[label="0.183673;9pkt 9fpkt"];
1567--1965[label="0.0590164;18pkt 18fpkt"];
1567--1967[label="0.00327869;1pkt 1fpkt"];
1567--1970[label="0.00983607;3pkt 3fpkt"];
1567--1980[label="0.0590164;18pkt 18fpkt"];
1567--1981[label="0.00327869;1pkt 1fpkt"];
1567--1991[label="0.00327869;1pkt 1fpkt"];
1567--2017[label="0.010101;1pkt 1fpkt"];
1567--2019[label="0.0175439;1pkt 1fpkt"];
1567--2068[label="0.0181818;1pkt 1fpkt"];
1567--2127[label="0.0873786;9pkt 9fpkt"];
1567--2163[label="0.00900901;1pkt 1fpkt"];
1567--2172[label="0.0111111;1pkt 1fpkt"];
1567--2219[label="0.00869565;1pkt 1fpkt"];
1567--2303[label="0.00641026;1pkt 1fpkt"];
1567--2402[label="0.310345;36pkt 36fpkt"];
1567--2409[label="0.0373134;5pkt 5fpkt"];
1567--2450[label="0.0322581;1pkt 1fpkt"];
1567--2490[label="0.0238095;1pkt 1fpkt"];
1567--2632[label="0.142857;1pkt 1fpkt"];
1567--2657[label="0.0275229;3pkt 3fpkt"];
1567--2741[label="0.571429;4pkt 4fpkt"];
1567--2782[label="0.0147059;1pkt 1fpkt"];
1567--2878[label="0.00909091;1pkt 1fpkt"];
1567--2959[label="0.0210526;2pkt 2fpkt"];
1567--3057[label="0.0441176;3pkt 3fpkt"];
1567--3058[label="0.00666667;1pkt 1fpkt"];
1567--3069[label="0.00983607;3pkt 3fpkt"];
1567--3070[label="0.024;3pkt 3fpkt"];
1567--3072[label="0.00655738;2pkt 2fpkt"];
1567--3104[label="0.0275229;3pkt 3fpkt"];
1567--3122[label="0.2;1pkt 1fpkt"];
1567--3454[label="0.00862069;1pkt 1fpkt"];
1567--3475[label="0.028169;2pkt 2fpkt"];
1567--3520[label="0.02;1pkt 1fpkt"];
1567--3561[label="1;20pkt 20fpkt"];
1567--3572[label="0.00327869;1pkt 1fpkt"];
1567--3582[label="0.010101;1pkt 1fpkt"];
1567--3584[label="0.0175439;1pkt 1fpkt"];
1567--3653[label="0.0111111;1pkt 1fpkt"];
1567--3708[label="0.00641026;1pkt 1fpkt"];
1567--3756[label="0.037037;5pkt 5fpkt"];
1567--3780[label="0.0322581;1pkt 1fpkt"];
1567--3864[label="0.0277778;3pkt 3fpkt"];
1567--3906[label="0.571429;4pkt 4fpkt"];
1567--3922[label="0.0149254;1pkt 1fpkt"];
1567--4061[label="0.0275229;3pkt 3fpkt"];
1567--4073[label="0.25;1pkt 1fpkt"];
1567--4241[label="0.0142857;1pkt 1fpkt"];
1567--4261[label="0.02;1pkt 1fpkt"];
1567--4280[label="1;20pkt 20fpkt"];
1567--4285[label="0.00327869;1pkt 1fpkt"];
1567--4289[label="0.0102041;1pkt 1fpkt"];
1567--4428[label="0.0277778;3pkt 3fpkt"];
1567--4451[label="0.666667;4pkt 4fpkt"];
1567--4459[label="0.0147059;1pkt 1fpkt"];
1567--4531[label="0.2;1pkt 1fpkt"];
1567--4629[label="0.00327869;1pkt 1fpkt"];
1890--3122[label="0.25;1pkt 1fpkt"];
1890--3309[label="0.25;1pkt 1fpkt"];
1890--4073[label="0.25;1pkt 1fpkt"];
1890--4531[label="0.25;1pkt 1fpkt"];
2657--3864[label="1;108pkt 108fpkt"];
2657--4428[label="1;108pkt 108fpkt"];
2741--3906[label="1;7pkt 7fpkt"];
2741--4451[label="1;6pkt 6fpkt"];
3122--4073[label="1;4pkt 4fpkt"];
3122--4531[label="1;5pkt 5fpkt"];
3561--4280[label="1;20pkt 20fpkt"];
3864--4428[label="1;108pkt 108fpkt"];
3906--4451[label="1;6pkt 6fpkt"];
4073--4531[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.134.80" src_port="80"/>
      <filter dst_ip="172.136.84.167" src_port="80"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
3123[label="37.26.160.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4074[label="37.26.160.171;1pkt 1fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.26.160.171:25, 144.135.138.225:4302}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4302: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3123--4074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.138.225" dst_port="4302" src_ip="37.26.160.171" src_port="25"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
3125[label="90.165.196.171;150pkt 150fpkt", shape=pentagon, color=darkviolet];
4075[label="90.165.196.171;150pkt 150fpkt", shape=invtriangle, color=brown];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.165.196.171:1043, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1043: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3125--4075[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.165.196.171" src_port="1043"/>
    </slice>
    <from sec="1078290479" usec="0"/>
    <to sec="1078290493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
3126[label="208.201.198.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4076[label="208.201.198.171;1pkt 1fpkt", shape=invtriangle, color=brown];
4532[label="208.201.198.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.201.198.171:80, 144.134.39.181:3230}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3230: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3126--4076[label="1;1pkt 1fpkt"];
3126--4532[label="1;1pkt 1fpkt"];
4076--4532[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.39.181" dst_port="3230" src_ip="208.201.198.171" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
3135[label="194.186.40.173;205pkt 205fpkt", shape=pentagon, color=darkviolet];
4079[label="194.186.40.173;205pkt 205fpkt", shape=invtriangle, color=brown];
4535[label="194.186.40.173;204pkt 204fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.186.40.173:39683, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39683: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3135--4079[label="1;205pkt 205fpkt"];
3135--4535[label="1;204pkt 204fpkt"];
4079--4535[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.186.40.173" src_port="39683"/>
    </slice>
    <from sec="1078290531" usec="0"/>
    <to sec="1078290564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.62.133.173"/>
    </slice>
    <from sec="1078290579" usec="0"/>
    <to sec="1078290665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.89.120.176"/>
    </slice>
    <from sec="1078290829" usec="0"/>
    <to sec="1078290846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
3161[label="213.16.224.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4090[label="213.16.224.177;2pkt 2fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.16.224.177:5190, 168.168.56.209:4844}[50%]&lt;BR/&gt;{213.16.224.177:5190, 168.168.56.209:4845}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 4845: (25%)&lt;BR/&gt; 4844: (25%)&gt;];
}
3161--4090[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.56.209" dst_port="4845" src_ip="213.16.224.177" src_port="5190"/>
      <filter dst_ip="168.168.56.209" dst_port="4844" src_ip="213.16.224.177" src_port="5190"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
3167[label="32.20.192.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4093[label="32.20.192.178;1pkt 1fpkt", shape=invtriangle, color=brown];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.20.192.178:1260, 144.134.16.74:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1260: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3167--4093[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.16.74" dst_port="80" src_ip="32.20.192.178" src_port="1260"/>
    </slice>
    <from sec="1078290832" usec="0"/>
    <to sec="1078290846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.24.214.179"/>
    </slice>
    <from sec="1078290848" usec="0"/>
    <to sec="1078290880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.10.236.182"/>
    </slice>
    <from sec="1078290263" usec="0"/>
    <to sec="1078290287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.125.194.183"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
3198[label="32.20.198.184;92pkt 92fpkt", shape=pentagon, color=darkviolet];
4109[label="32.20.198.184;92pkt 92fpkt", shape=invtriangle, color=brown];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.20.198.184:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3652: (1.08696%)&lt;BR/&gt; 3405: (1.08696%)&lt;BR/&gt; 3228: (1.08696%)&lt;BR/&gt; 3227: (1.08696%)&gt;];
}
3198--4109[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="32.20.198.184"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
3199[label="90.9.219.184;100pkt 100fpkt", shape=pentagon, color=darkviolet];
4110[label="90.9.219.184;99pkt 99fpkt", shape=invtriangle, color=brown];
4545[label="90.9.219.184;99pkt 99fpkt", shape=invhouse, color=bisque];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.9.219.184:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 46836: (0.503356%)&lt;BR/&gt; 46662: (0.503356%)&lt;BR/&gt; 46592: (0.503356%)&lt;BR/&gt; 46516: (0.503356%)&gt;];
}
3199--4110[label="1;99pkt 99fpkt"];
3199--4545[label="1;99pkt 99fpkt"];
4110--4545[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="90.9.219.184"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
3205[label="145.78.91.185;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4112[label="145.78.91.185;101pkt 101fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.78.91.185:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2018: (0.990099%)&lt;BR/&gt; 1386: (0.990099%)&lt;BR/&gt; 4995: (0.49505%)&lt;BR/&gt; 4956: (0.49505%)&gt;];
}
3205--4112[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="145.78.91.185"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
3206[label="194.202.160.185;100pkt 100fpkt", shape=pentagon, color=darkviolet];
4113[label="194.202.160.185;99pkt 99fpkt", shape=invtriangle, color=brown];
4547[label="194.202.160.185;100pkt 100fpkt", shape=invhouse, color=bisque];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.160.185:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1423: (1.50502%)&lt;BR/&gt; 2467: (1.00334%)&lt;BR/&gt; 4988: (0.501672%)&lt;BR/&gt; 4971: (0.501672%)&gt;];
}
3206--4113[label="1;99pkt 99fpkt"];
3206--4547[label="1;100pkt 100fpkt"];
4113--4547[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.202.160.185"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
3211[label="36.210.176.186;113pkt 113fpkt", shape=pentagon, color=darkviolet];
4114[label="36.210.176.186;112pkt 112fpkt", shape=invtriangle, color=brown];
4548[label="36.210.176.186;113pkt 113fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.210.176.186:*, *:1080}[33.6283%]&lt;BR/&gt;{36.210.176.186:*, *:3127}[33.6283%]&lt;BR/&gt;{36.210.176.186:*, *:3128}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.8639%)&lt;BR/&gt; 3127: (16.716%)&lt;BR/&gt; 3128: (16.4201%)&lt;BR/&gt; 3124: (1.33136%)&lt;BR/&gt; 4826: (0.887574%)&gt;];
}
3211--4114[label="1;112pkt 112fpkt"];
3211--4548[label="1;113pkt 113fpkt"];
4114--4548[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="36.210.176.186"/>
      <filter dst_port="1080" src_ip="36.210.176.186"/>
      <filter dst_port="3128" src_ip="36.210.176.186"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.239.173.187"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.34.204.187"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
3229[label="145.40.177.190;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4121[label="145.40.177.190;17pkt 17fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.40.177.190:*, 144.134.10.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24264: (2.94118%)&lt;BR/&gt; 24263: (2.94118%)&lt;BR/&gt; 24262: (2.94118%)&lt;BR/&gt; 24254: (2.94118%)&gt;];
}
3229--4121[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.10.56" dst_port="80" src_ip="145.40.177.190"/>
    </slice>
    <from sec="1078290091" usec="0"/>
    <to sec="1078290110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
3230[label="33.46.185.190;113pkt 113fpkt", shape=pentagon, color=darkviolet];
4122[label="33.46.185.190;113pkt 113fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.46.185.190:*, *:1080}[33.6283%]&lt;BR/&gt;{33.46.185.190:*, *:3128}[33.6283%]&lt;BR/&gt;{33.46.185.190:*, *:3127}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.8142%)&lt;BR/&gt; 1080: (16.8142%)&lt;BR/&gt; 3127: (16.3717%)&lt;BR/&gt; 4972: (0.884956%)&lt;BR/&gt; 2905: (0.884956%)&gt;];
}
3230--4122[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="33.46.185.190"/>
      <filter dst_port="1080" src_ip="33.46.185.190"/>
      <filter dst_port="3127" src_ip="33.46.185.190"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
3232[label="213.28.40.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4123[label="213.28.40.191;2pkt 2fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.40.191:80, 148.33.255.114:2779}[50%]&lt;BR/&gt;{213.28.40.191:80, 148.33.255.114:2780}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2780: (25%)&lt;BR/&gt; 2779: (25%)&gt;];
}
3232--4123[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.255.114" dst_port="2780" src_ip="213.28.40.191" src_port="80"/>
      <filter dst_ip="148.33.255.114" dst_port="2779" src_ip="213.28.40.191" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.48.157.192"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
3243[label="144.135.205.193;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4130[label="144.135.205.193;3pkt 3fpkt", shape=invtriangle, color=brown];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.205.193:80, 194.208.86.35:1210}[33.3333%]&lt;BR/&gt;{144.135.205.193:80, 194.208.86.35:1211}[33.3333%]&lt;BR/&gt;{144.135.205.193:80, 194.208.86.35:1212}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1212: (16.6667%)&lt;BR/&gt; 1211: (16.6667%)&lt;BR/&gt; 1210: (16.6667%)&gt;];
}
3243--4130[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.208.86.35" dst_port="1212" src_ip="144.135.205.193" src_port="80"/>
      <filter dst_ip="194.208.86.35" dst_port="1211" src_ip="144.135.205.193" src_port="80"/>
      <filter dst_ip="194.208.86.35" dst_port="1210" src_ip="144.135.205.193" src_port="80"/>
    </slice>
    <from sec="1078290651" usec="0"/>
    <to sec="1078290700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
3245[label="194.197.19.194;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4131[label="194.197.19.194;18pkt 18fpkt", shape=invtriangle, color=brown];
4553[label="194.197.19.194;18pkt 18fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.197.19.194:80, 172.136.37.172:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2015: (2.77778%)&lt;BR/&gt; 2014: (2.77778%)&lt;BR/&gt; 2013: (2.77778%)&lt;BR/&gt; 2009: (2.77778%)&gt;];
}
3245--4131[label="1;18pkt 18fpkt"];
3245--4553[label="1;18pkt 18fpkt"];
4131--4553[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.37.172" src_ip="194.197.19.194" src_port="80"/>
    </slice>
    <from sec="1078290704" usec="0"/>
    <to sec="1078290890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
3249[label="144.135.100.194;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4132[label="144.135.100.194;30pkt 30fpkt", shape=invtriangle, color=brown];
4554[label="144.135.100.194;29pkt 29fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.100.194:*, 36.85.57.221:21}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.1461%)&lt;BR/&gt; 59838: (1.68539%)&lt;BR/&gt; 59797: (1.68539%)&lt;BR/&gt; 59756: (1.68539%)&lt;BR/&gt; 59723: (1.68539%)&gt;];
}
3249--4132[label="1;30pkt 30fpkt"];
3249--4554[label="1;29pkt 29fpkt"];
4132--4554[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="36.85.57.221" dst_port="21" src_ip="144.135.100.194"/>
    </slice>
    <from sec="1078290039" usec="0"/>
    <to sec="1078290673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
3251[label="33.77.113.194;100pkt 100fpkt", shape=pentagon, color=darkviolet];
4133[label="33.77.113.194;99pkt 99fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.77.113.194:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4961: (0.502513%)&lt;BR/&gt; 4828: (0.502513%)&lt;BR/&gt; 4756: (0.502513%)&lt;BR/&gt; 4700: (0.502513%)&gt;];
}
3251--4133[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.77.113.194"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
3259[label="204.59.64.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4136[label="204.59.64.195;2pkt 2fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.59.64.195:32530, 131.6.177.114:51200}[50%]&lt;BR/&gt;{204.59.64.195:32531, 131.6.177.114:51201}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51201: (33.3333%)&lt;BR/&gt; 32531: (33.3333%)&lt;BR/&gt; 51200: (16.6667%)&lt;BR/&gt; 32530: (16.6667%)&gt;];
}
3259--4136[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.177.114" dst_port="51201" src_ip="204.59.64.195" src_port="32531"/>
      <filter dst_ip="131.6.177.114" dst_port="51200" src_ip="204.59.64.195" src_port="32530"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
3262[label="213.28.150.195;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4138[label="213.28.150.195;3pkt 3fpkt", shape=invtriangle, color=brown];
4556[label="213.28.150.195;2pkt 2fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.150.195:1863, 172.136.111.1:4499}[33.3333%]&lt;BR/&gt;{213.28.150.195:1863, 172.136.156.197:1465}[33.3333%]&lt;BR/&gt;{213.28.150.195:1863, 144.135.133.214:1173}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4499: (18.75%)&lt;BR/&gt; 1465: (18.75%)&lt;BR/&gt; 1173: (12.5%)&gt;];
}
3262--4138[label="1;3pkt 3fpkt"];
3262--4556[label="1;2pkt 2fpkt"];
4138--4556[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.133.214" dst_port="1173" src_ip="213.28.150.195" src_port="1863"/>
      <filter dst_ip="172.136.156.197" dst_port="1465" src_ip="213.28.150.195" src_port="1863"/>
      <filter dst_ip="172.136.111.1" dst_port="4499" src_ip="213.28.150.195" src_port="1863"/>
    </slice>
    <from sec="1078290067" usec="0"/>
    <to sec="1078290754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.86.164.198"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
3284[label="54.16.133.200;135pkt 135fpkt", shape=pentagon, color=darkviolet];
4147[label="54.16.133.200;135pkt 135fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.16.133.200:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4252: (0.740741%)&lt;BR/&gt; 4153: (0.740741%)&lt;BR/&gt; 3828: (0.740741%)&lt;BR/&gt; 3706: (0.740741%)&gt;];
}
3284--4147[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="54.16.133.200"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.75.137.200"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
3288[label="204.186.149.200;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4150[label="204.186.149.200;75pkt 75fpkt", shape=invtriangle, color=brown];
4560[label="204.186.149.200;74pkt 74fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.186.149.200:*, *:3128}[50.6667%]&lt;BR/&gt;{204.186.149.200:*, *:1080}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.2232%)&lt;BR/&gt; 1080: (24.7768%)&lt;BR/&gt; 4953: (0.669643%)&lt;BR/&gt; 4904: (0.669643%)&lt;BR/&gt; 4723: (0.669643%)&gt;];
}
3288--4150[label="1;75pkt 75fpkt"];
3288--4560[label="1;74pkt 74fpkt"];
4150--4560[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="204.186.149.200"/>
      <filter dst_port="1080" src_ip="204.186.149.200"/>
    </slice>
    <from sec="1078290012" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
3292[label="194.168.168.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4152[label="194.168.168.200;1pkt 1fpkt", shape=invtriangle, color=brown];
4561[label="194.168.168.200;1pkt 1fpkt", shape=invhouse, color=bisque];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.168.168.200:38587, 144.134.244.9:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38587: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3292--4152[label="1;1pkt 1fpkt"];
3292--4561[label="1;1pkt 1fpkt"];
4152--4561[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.244.9" dst_port="25" src_ip="194.168.168.200" src_port="38587"/>
    </slice>
    <from sec="1078290610" usec="0"/>
    <to sec="1078290668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
3297[label="213.28.150.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4155[label="213.28.150.201;1pkt 1fpkt", shape=invtriangle, color=brown];
4563[label="213.28.150.201;2pkt 2fpkt", shape=invhouse, color=bisque];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.150.201:1863, 131.6.218.89:33984}[50%]&lt;BR/&gt;{213.28.150.201:1863, 131.6.223.98:1073}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 33984: (37.5%)&lt;BR/&gt; 1073: (12.5%)&gt;];
}
3297--4155[label="1;1pkt 1fpkt"];
3297--4563[label="1;1pkt 1fpkt"];
4155--4563[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.223.98" dst_port="1073" src_ip="213.28.150.201" src_port="1863"/>
      <filter dst_ip="131.6.218.89" dst_port="33984" src_ip="213.28.150.201" src_port="1863"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
3298[label="205.75.218.201;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4156[label="205.75.218.201;6pkt 6fpkt", shape=invtriangle, color=brown];
4564[label="205.75.218.201;6pkt 6fpkt", shape=invhouse, color=bisque];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.75.218.201:80, 144.134.17.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2868: (8.33333%)&lt;BR/&gt; 2866: (8.33333%)&lt;BR/&gt; 2863: (8.33333%)&lt;BR/&gt; 2859: (8.33333%)&gt;];
}
3298--4156[label="1;6pkt 6fpkt"];
3298--4564[label="1;6pkt 6fpkt"];
4156--4564[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.17.117" src_ip="205.75.218.201" src_port="80"/>
    </slice>
    <from sec="1078290660" usec="0"/>
    <to sec="1078290694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
3303[label="144.135.145.202;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4160[label="144.135.145.202;8pkt 8fpkt", shape=invtriangle, color=brown];
4565[label="144.135.145.202;7pkt 7fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.145.202:*, 213.28.8.144:80}[75%]&lt;BR/&gt;{144.135.145.202:*, 37.26.218.77:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4783%)&lt;BR/&gt; 1043: (6.52174%)&lt;BR/&gt; 1041: (6.52174%)&lt;BR/&gt; 1040: (6.52174%)&lt;BR/&gt; 1039: (6.52174%)&gt;];
}
3303--4160[label="1;8pkt 8fpkt"];
3303--4565[label="1;7pkt 7fpkt"];
4160--4565[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="37.26.218.77" src_ip="144.135.145.202"/>
      <filter dst_ip="213.28.8.144" dst_port="80" src_ip="144.135.145.202"/>
    </slice>
    <from sec="1078290487" usec="0"/>
    <to sec="1078290499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
3308[label="130.60.91.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4162[label="130.60.91.203;1pkt 1fpkt", shape=invtriangle, color=brown];
4567[label="130.60.91.203;1pkt 1fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.60.91.203:80, 144.135.148.91:1206}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1206: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3308--4162[label="1;1pkt 1fpkt"];
3308--4567[label="1;1pkt 1fpkt"];
4162--4567[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.148.91" dst_port="1206" src_ip="130.60.91.203" src_port="80"/>
    </slice>
    <from sec="1078290178" usec="0"/>
    <to sec="1078290203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
3310[label="213.28.144.203;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4164[label="213.28.144.203;3pkt 3fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.144.203:1863, 144.134.169.34:1678}[25%]&lt;BR/&gt;{213.28.144.203:1863, 172.136.139.94:32783}[25%]&lt;BR/&gt;{213.28.144.203:1863, 172.136.150.105:2746}[25%]&lt;BR/&gt;{213.28.144.203:1863, 144.134.237.153:2798}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2798: (14.2857%)&lt;BR/&gt; 2746: (14.2857%)&lt;BR/&gt; 1678: (14.2857%)&lt;BR/&gt; 32783: (7.14286%)&gt;];
}
3310--4164[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.237.153" dst_port="2798" src_ip="213.28.144.203" src_port="1863"/>
      <filter dst_ip="172.136.150.105" dst_port="2746" src_ip="213.28.144.203" src_port="1863"/>
      <filter dst_ip="172.136.139.94" dst_port="32783" src_ip="213.28.144.203" src_port="1863"/>
      <filter dst_ip="144.134.169.34" dst_port="1678" src_ip="213.28.144.203" src_port="1863"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
3311[label="204.243.159.203;76pkt 76fpkt", shape=pentagon, color=darkviolet];
4165[label="204.243.159.203;75pkt 75fpkt", shape=invtriangle, color=brown];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.243.159.203:*, *:1080}[50%]&lt;BR/&gt;{204.243.159.203:*, *:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.1656%)&lt;BR/&gt; 3128: (24.8344%)&lt;BR/&gt; 4910: (0.662252%)&lt;BR/&gt; 4834: (0.662252%)&lt;BR/&gt; 4812: (0.662252%)&gt;];
}
3311--4165[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="204.243.159.203"/>
      <filter dst_port="1080" src_ip="204.243.159.203"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
3320[label="192.121.11.205;148pkt 148fpkt", shape=pentagon, color=darkviolet];
4169[label="192.121.11.205;147pkt 147fpkt", shape=invtriangle, color=brown];
4571[label="192.121.11.205;148pkt 148fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.121.11.205:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3320--4169[label="1;147pkt 147fpkt"];
3320--4571[label="1;148pkt 148fpkt"];
4169--4571[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.121.11.205" src_port="1028"/>
    </slice>
    <from sec="1078290688" usec="0"/>
    <to sec="1078290702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
3321[label="37.123.61.205;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4170[label="37.123.61.205;58pkt 58fpkt", shape=invtriangle, color=brown];
4572[label="37.123.61.205;58pkt 58fpkt", shape=invhouse, color=bisque];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.123.61.205:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 65285: (0.862069%)&lt;BR/&gt; 63473: (0.862069%)&lt;BR/&gt; 62676: (0.862069%)&lt;BR/&gt; 61927: (0.862069%)&gt;];
}
3321--4170[label="1;58pkt 58fpkt"];
3321--4572[label="1;58pkt 58fpkt"];
4170--4572[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="37.123.61.205"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
3322[label="196.60.68.205;74pkt 74fpkt", shape=pentagon, color=darkviolet];
4171[label="196.60.68.205;74pkt 74fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.60.68.205:*, *:1080}[50%]&lt;BR/&gt;{196.60.68.205:*, *:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25%)&lt;BR/&gt; 1080: (25%)&lt;BR/&gt; 4962: (0.675676%)&lt;BR/&gt; 4853: (0.675676%)&lt;BR/&gt; 4738: (0.675676%)&gt;];
}
3322--4171[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="196.60.68.205"/>
      <filter dst_port="1080" src_ip="196.60.68.205"/>
    </slice>
    <from sec="1078290016" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
3326[label="33.54.140.206;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4173[label="33.54.140.206;69pkt 69fpkt", shape=invtriangle, color=brown];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.54.140.206:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4978: (0.719424%)&lt;BR/&gt; 4836: (0.719424%)&lt;BR/&gt; 4774: (0.719424%)&lt;BR/&gt; 4639: (0.719424%)&gt;];
}
3326--4173[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.54.140.206"/>
    </slice>
    <from sec="1078290276" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
3332[label="89.37.23.208;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4175[label="89.37.23.208;100pkt 100fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.37.23.208:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4200: (0.995025%)&lt;BR/&gt; 4991: (0.497512%)&lt;BR/&gt; 4985: (0.497512%)&lt;BR/&gt; 4982: (0.497512%)&gt;];
}
3332--4175[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="89.37.23.208"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
1416[label="192.148.160.199;s;9pkt 9fpkt", shape=diamond, color=yellow];
1423[label="131.6.5.112;d;22pkt 22fpkt", shape=diamond, color=yellow];
2586[label="207.56.22.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3836[label="207.56.22.84;1pkt 1fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.148.160.199:80, 131.6.5.112:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1116: (4.54545%)&lt;BR/&gt; 1129: (3.0303%)&lt;BR/&gt; 1128: (3.0303%)&lt;BR/&gt; 1127: (3.0303%)&gt;];
}
1416--1423[label="0.777778;7pkt 7fpkt"];
1423--2294[label="0.0909091;2pkt 2fpkt"];
1423--2586[label="1;1pkt 1fpkt"];
1423--2878[label="0.0454545;1pkt 1fpkt"];
1423--3337[label="0.136364;3pkt 3fpkt"];
1423--3544[label="0.0454545;1pkt 1fpkt"];
1423--3836[label="1;1pkt 1fpkt"];
1423--4178[label="0.136364;3pkt 3fpkt"];
1423--4577[label="0.136364;3pkt 3fpkt"];
2586--3836[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.5.112" src_ip="192.148.160.199" src_port="80"/>
    </slice>
    <from sec="1078290668" usec="0"/>
    <to sec="1078290821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.222.56.209"/>
    </slice>
    <from sec="1078290285" usec="0"/>
    <to sec="1078290389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.201.28.210"/>
    </slice>
    <from sec="1078290015" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
543[label="148.33.74.137;d;1246pkt 1246fpkt", shape=diamond, color=yellow];
676[label="144.134.231.195;d;108pkt 108fpkt", shape=diamond, color=yellow];
802[label="133.150.241.21;s;142pkt 142fpkt", shape=diamond, color=yellow];
804[label="39.133.3.116;s;170pkt 170fpkt", shape=diamond, color=yellow];
805[label="39.83.22.131;s;12pkt 12fpkt", shape=diamond, color=yellow];
809[label="39.133.32.10;s;14pkt 14fpkt", shape=diamond, color=yellow];
904[label="192.36.186.16;s;8pkt 8fpkt", shape=diamond, color=yellow];
1040[label="36.174.101.31;s;76pkt 76fpkt", shape=diamond, color=yellow];
1265[label="39.133.37.132;s;47pkt 47fpkt", shape=diamond, color=yellow];
1580[label="148.33.74.137;d;1246pkt 1246fpkt", shape=hexagon, color=black];
1775[label="39.133.3.116;s;170pkt 170fpkt", shape=hexagon, color=black];
2059[label="32.122.5.8;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2061[label="88.29.32.8;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2074[label="39.133.32.10;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2084[label="79.13.196.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2109[label="192.36.186.16;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2125[label="32.72.86.19;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2208[label="39.133.8.31;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2340[label="192.134.214.47;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2390[label="36.174.120.57;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2419[label="192.229.41.61;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2569[label="39.133.13.81;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2677[label="32.72.86.97;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2769[label="39.83.87.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2789[label="39.133.3.116;170pkt 170fpkt", shape=pentagon, color=darkviolet];
2930[label="39.133.34.140;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3001[label="39.133.48.151;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3059[label="79.13.196.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3080[label="39.14.42.165;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3194[label="36.174.104.184;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3203[label="39.83.20.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3240[label="39.14.34.193;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3254[label="213.245.152.194;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3312[label="79.152.1.204;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3348[label="192.37.48.210;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3358[label="39.133.38.211;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3376[label="39.133.54.215;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3421[label="213.245.136.223;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3622[label="192.36.186.16;7pkt 7fpkt", shape=invtriangle, color=brown];
3746[label="36.174.120.57;5pkt 5fpkt", shape=invtriangle, color=brown];
3761[label="192.229.41.61;3pkt 3fpkt", shape=invtriangle, color=brown];
3874[label="32.72.86.97;31pkt 31fpkt", shape=invtriangle, color=brown];
4108[label="36.174.104.184;14pkt 14fpkt", shape=invtriangle, color=brown];
4111[label="39.83.20.185;2pkt 2fpkt", shape=invtriangle, color=brown];
4128[label="39.14.34.193;26pkt 26fpkt", shape=invtriangle, color=brown];
4166[label="79.152.1.204;3pkt 3fpkt", shape=invtriangle, color=brown];
4184[label="192.37.48.210;1pkt 1fpkt", shape=invtriangle, color=brown];
4188[label="39.133.38.211;3pkt 3fpkt", shape=invtriangle, color=brown];
4375[label="192.229.41.61;2pkt 2fpkt", shape=invhouse, color=bisque];
4432[label="32.72.86.97;31pkt 31fpkt", shape=invhouse, color=bisque];
4546[label="39.83.20.185;2pkt 2fpkt", shape=invhouse, color=bisque];
4552[label="39.14.34.193;26pkt 26fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.33.74.137:*}[91.116%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8244%)&lt;BR/&gt; 81: (0.125408%)&lt;BR/&gt; 2820: (0.0627038%)&lt;BR/&gt; 2774: (0.0627038%)&lt;BR/&gt; 2605: (0.0627038%)&gt;];
}
543--802[label="1;142pkt 142fpkt"];
543--804[label="1;170pkt 170fpkt"];
543--809[label="1;14pkt 14fpkt"];
543--904[label="1;8pkt 8fpkt"];
543--1040[label="1;76pkt 76fpkt"];
543--1062[label="0.000802568;1pkt 1fpkt"];
543--1265[label="1;47pkt 47fpkt"];
543--1580[label="1;1246pkt 1246fpkt"];
543--1720[label="0.000802568;1pkt 1fpkt"];
543--1775[label="1;170pkt 170fpkt"];
543--1939[label="0.000802568;1pkt 1fpkt"];
543--2059[label="1;26pkt 26fpkt"];
543--2061[label="1;18pkt 18fpkt"];
543--2074[label="1;21pkt 21fpkt"];
543--2084[label="1;1pkt 1fpkt"];
543--2109[label="1;7pkt 7fpkt"];
543--2125[label="0.469388;23pkt 23fpkt"];
543--2208[label="1;46pkt 46fpkt"];
543--2340[label="1;22pkt 22fpkt"];
543--2390[label="1;4pkt 4fpkt"];
543--2419[label="1;2pkt 2fpkt"];
543--2569[label="1;27pkt 27fpkt"];
543--2769[label="1;2pkt 2fpkt"];
543--2789[label="1;170pkt 170fpkt"];
543--2930[label="1;4pkt 4fpkt"];
543--3001[label="1;9pkt 9fpkt"];
543--3059[label="1;2pkt 2fpkt"];
543--3080[label="1;31pkt 31fpkt"];
543--3146[label="0.571429;8pkt 8fpkt"];
543--3194[label="1;15pkt 15fpkt"];
543--3203[label="1;2pkt 2fpkt"];
543--3240[label="1;26pkt 26fpkt"];
543--3254[label="0.6;9pkt 9fpkt"];
543--3312[label="1;4pkt 4fpkt"];
543--3348[label="1;2pkt 2fpkt"];
543--3358[label="0.5;2pkt 2fpkt"];
543--3376[label="1;17pkt 17fpkt"];
543--3421[label="1;35pkt 35fpkt"];
543--3622[label="1;7pkt 7fpkt"];
543--3746[label="1;5pkt 5fpkt"];
543--3761[label="1;3pkt 3fpkt"];
543--3868[label="0.012987;1pkt 1fpkt"];
543--4085[label="0.571429;8pkt 8fpkt"];
543--4108[label="1;14pkt 14fpkt"];
543--4111[label="1;2pkt 2fpkt"];
543--4128[label="1;26pkt 26fpkt"];
543--4166[label="1;3pkt 3fpkt"];
543--4184[label="1;1pkt 1fpkt"];
543--4188[label="0.333333;1pkt 1fpkt"];
543--4190[label="0.000802568;1pkt 1fpkt"];
543--4375[label="1;2pkt 2fpkt"];
543--4546[label="1;2pkt 2fpkt"];
543--4552[label="1;26pkt 26fpkt"];
676--805[label="1;12pkt 12fpkt"];
676--2125[label="0.530612;26pkt 26fpkt"];
676--2677[label="1;31pkt 31fpkt"];
676--3874[label="1;31pkt 31fpkt"];
676--4432[label="1;31pkt 31fpkt"];
802--1580[label="1;142pkt 142fpkt"];
804--1580[label="1;170pkt 170fpkt"];
804--1775[label="1;170pkt 170fpkt"];
804--2789[label="1;170pkt 170fpkt"];
809--1580[label="1;14pkt 14fpkt"];
809--2074[label="0.928571;13pkt 13fpkt"];
904--1580[label="1;8pkt 8fpkt"];
904--2109[label="1;7pkt 7fpkt"];
904--3622[label="1;7pkt 7fpkt"];
1040--1580[label="1;76pkt 76fpkt"];
1265--1580[label="1;47pkt 47fpkt"];
1580--1720[label="0.000802568;1pkt 1fpkt"];
1580--1775[label="1;170pkt 170fpkt"];
1580--1939[label="0.000802568;1pkt 1fpkt"];
1580--2059[label="1;26pkt 26fpkt"];
1580--2061[label="1;18pkt 18fpkt"];
1580--2074[label="1;21pkt 21fpkt"];
1580--2084[label="1;1pkt 1fpkt"];
1580--2109[label="1;7pkt 7fpkt"];
1580--2125[label="0.469388;23pkt 23fpkt"];
1580--2208[label="1;46pkt 46fpkt"];
1580--2340[label="1;22pkt 22fpkt"];
1580--2390[label="1;4pkt 4fpkt"];
1580--2419[label="1;2pkt 2fpkt"];
1580--2569[label="1;27pkt 27fpkt"];
1580--2769[label="1;2pkt 2fpkt"];
1580--2789[label="1;170pkt 170fpkt"];
1580--2930[label="1;4pkt 4fpkt"];
1580--3001[label="1;9pkt 9fpkt"];
1580--3059[label="1;2pkt 2fpkt"];
1580--3080[label="1;31pkt 31fpkt"];
1580--3146[label="0.571429;8pkt 8fpkt"];
1580--3194[label="1;15pkt 15fpkt"];
1580--3203[label="1;2pkt 2fpkt"];
1580--3240[label="1;26pkt 26fpkt"];
1580--3254[label="0.6;9pkt 9fpkt"];
1580--3312[label="1;4pkt 4fpkt"];
1580--3348[label="1;2pkt 2fpkt"];
1580--3358[label="0.5;2pkt 2fpkt"];
1580--3376[label="1;17pkt 17fpkt"];
1580--3421[label="1;35pkt 35fpkt"];
1580--3622[label="1;7pkt 7fpkt"];
1580--3746[label="1;5pkt 5fpkt"];
1580--3761[label="1;3pkt 3fpkt"];
1580--3868[label="0.012987;1pkt 1fpkt"];
1580--4085[label="0.571429;8pkt 8fpkt"];
1580--4108[label="1;14pkt 14fpkt"];
1580--4111[label="1;2pkt 2fpkt"];
1580--4128[label="1;26pkt 26fpkt"];
1580--4166[label="1;3pkt 3fpkt"];
1580--4184[label="1;1pkt 1fpkt"];
1580--4188[label="0.333333;1pkt 1fpkt"];
1580--4190[label="0.000802568;1pkt 1fpkt"];
1580--4375[label="1;2pkt 2fpkt"];
1580--4546[label="1;2pkt 2fpkt"];
1580--4552[label="1;26pkt 26fpkt"];
1775--2789[label="1;170pkt 170fpkt"];
2109--3622[label="1;7pkt 7fpkt"];
2390--3746[label="1;4pkt 4fpkt"];
2419--3761[label="1;2pkt 2fpkt"];
2419--4375[label="1;2pkt 2fpkt"];
2677--3874[label="1;31pkt 31fpkt"];
2677--4432[label="1;31pkt 31fpkt"];
3194--4108[label="1;14pkt 14fpkt"];
3203--4111[label="1;2pkt 2fpkt"];
3203--4546[label="1;2pkt 2fpkt"];
3240--4128[label="1;26pkt 26fpkt"];
3240--4552[label="1;26pkt 26fpkt"];
3312--4166[label="1;3pkt 3fpkt"];
3348--4184[label="1;1pkt 1fpkt"];
3358--4188[label="1;3pkt 3fpkt"];
3761--4375[label="1;2pkt 2fpkt"];
3874--4432[label="1;31pkt 31fpkt"];
4111--4546[label="1;2pkt 2fpkt"];
4128--4552[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.74.137" src_port="80"/>
    </slice>
    <from sec="1078290104" usec="0"/>
    <to sec="1078290868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
3366[label="39.185.225.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4192[label="39.185.225.212;1pkt 1fpkt", shape=invtriangle, color=brown];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.185.225.212:80, 168.168.36.91:54426}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54426: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3366--4192[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.36.91" dst_port="54426" src_ip="39.185.225.212" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
3368[label="38.177.150.213;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4193[label="38.177.150.213;72pkt 72fpkt", shape=invtriangle, color=brown];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.177.150.213:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3984: (1.38889%)&lt;BR/&gt; 3009: (1.38889%)&lt;BR/&gt; 4981: (0.694444%)&lt;BR/&gt; 4946: (0.694444%)&gt;];
}
3368--4193[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="38.177.150.213"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.88.196.213"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.180.42.215"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
3379[label="192.62.128.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4199[label="192.62.128.215;1pkt 1fpkt", shape=invtriangle, color=brown];
4587[label="192.62.128.215;2pkt 2fpkt", shape=invhouse, color=bisque];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.128.215:23, 168.168.7.67:1100}[50%]&lt;BR/&gt;{192.62.128.215:23, 168.168.89.128:1081}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 1081: (37.5%)&lt;BR/&gt; 1100: (12.5%)&gt;];
}
3379--4199[label="1;1pkt 1fpkt"];
3379--4587[label="1;1pkt 1fpkt"];
4199--4587[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.168.89.128" dst_port="1081" src_ip="192.62.128.215" src_port="23"/>
      <filter dst_ip="168.168.7.67" dst_port="1100" src_ip="192.62.128.215" src_port="23"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
3381[label="205.191.165.215;59pkt 59fpkt", shape=pentagon, color=darkviolet];
4200[label="205.191.165.215;58pkt 58fpkt", shape=invtriangle, color=brown];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.191.165.215:*, *:1080}[50.8475%]&lt;BR/&gt;{205.191.165.215:*, *:3128}[49.1525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.641%)&lt;BR/&gt; 3128: (24.359%)&lt;BR/&gt; 4977: (0.854701%)&lt;BR/&gt; 4976: (0.854701%)&lt;BR/&gt; 4834: (0.854701%)&gt;];
}
3381--4200[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="205.191.165.215"/>
      <filter dst_port="3128" src_ip="205.191.165.215"/>
    </slice>
    <from sec="1078290560" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
3387[label="213.28.150.216;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4203[label="213.28.150.216;4pkt 4fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.150.216:1863, 144.134.75.6:1759}[25%]&lt;BR/&gt;{213.28.150.216:1863, 172.136.85.19:4520}[25%]&lt;BR/&gt;{213.28.150.216:1863, 148.33.82.52:3587}[25%]&lt;BR/&gt;{213.28.150.216:1863, 148.33.82.142:3626}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4520: (12.5%)&lt;BR/&gt; 3626: (12.5%)&lt;BR/&gt; 3587: (12.5%)&lt;BR/&gt; 1759: (12.5%)&gt;];
}
3387--4203[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.82.142" dst_port="3626" src_ip="213.28.150.216" src_port="1863"/>
      <filter dst_ip="148.33.82.52" dst_port="3587" src_ip="213.28.150.216" src_port="1863"/>
      <filter dst_ip="172.136.85.19" dst_port="4520" src_ip="213.28.150.216" src_port="1863"/>
      <filter dst_ip="144.134.75.6" dst_port="1759" src_ip="213.28.150.216" src_port="1863"/>
    </slice>
    <from sec="1078290018" usec="0"/>
    <to sec="1078290706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
3391[label="90.157.6.218;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4206[label="90.157.6.218;16pkt 16fpkt", shape=invtriangle, color=brown];
4592[label="90.157.6.218;16pkt 16fpkt", shape=invhouse, color=bisque];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.157.6.218:*, 209.117.90.31:80}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32243: (3.06122%)&lt;BR/&gt; 32237: (3.06122%)&lt;BR/&gt; 32232: (3.06122%)&lt;BR/&gt; 32224: (3.06122%)&gt;];
}
3391--4206[label="1;16pkt 16fpkt"];
3391--4592[label="1;16pkt 16fpkt"];
4206--4592[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="209.117.90.31" dst_port="80" src_ip="90.157.6.218"/>
    </slice>
    <from sec="1078290545" usec="0"/>
    <to sec="1078290683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
3397[label="194.202.172.219;112pkt 112fpkt", shape=pentagon, color=darkviolet];
4210[label="194.202.172.219;112pkt 112fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.172.219:*, *:3127}[33.9286%]&lt;BR/&gt;{194.202.172.219:*, *:1080}[33.0357%]&lt;BR/&gt;{194.202.172.219:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.9643%)&lt;BR/&gt; 3128: (16.5179%)&lt;BR/&gt; 1080: (16.5179%)&lt;BR/&gt; 4511: (0.892857%)&lt;BR/&gt; 3353: (0.892857%)&gt;];
}
3397--4210[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.202.172.219"/>
      <filter dst_port="3128" src_ip="194.202.172.219"/>
      <filter dst_port="1080" src_ip="194.202.172.219"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.1.53.221"/>
    </slice>
    <from sec="1078290071" usec="0"/>
    <to sec="1078290838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
3407[label="36.85.57.221;59pkt 59fpkt", shape=pentagon, color=darkviolet];
4212[label="36.85.57.221;58pkt 58fpkt", shape=invtriangle, color=brown];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.85.57.221:21, 144.135.100.194:*}[33.8983%]&lt;BR/&gt;{36.85.57.221:*, 144.135.107.186:*}[27.1186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (36.3248%)&lt;BR/&gt; 64564: (0.854701%)&lt;BR/&gt; 64520: (0.854701%)&lt;BR/&gt; 61717: (0.854701%)&lt;BR/&gt; 61713: (0.854701%)&gt;];
}
3407--4212[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.107.186" src_ip="36.85.57.221"/>
      <filter dst_ip="144.135.100.194" src_ip="36.85.57.221" src_port="21"/>
    </slice>
    <from sec="1078290039" usec="0"/>
    <to sec="1078290887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.180.46.222"/>
    </slice>
    <from sec="1078290612" usec="0"/>
    <to sec="1078290702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
3417[label="213.28.144.222;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4219[label="213.28.144.222;2pkt 2fpkt", shape=invtriangle, color=brown];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.144.222:1863, 148.33.33.16:3073}[33.3333%]&lt;BR/&gt;{213.28.144.222:1863, 131.6.177.178:4106}[33.3333%]&lt;BR/&gt;{213.28.144.222:1863, 172.136.13.249:1029}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4106: (20%)&lt;BR/&gt; 3073: (20%)&lt;BR/&gt; 1029: (10%)&gt;];
}
3417--4219[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.136.13.249" dst_port="1029" src_ip="213.28.144.222" src_port="1863"/>
      <filter dst_ip="131.6.177.178" dst_port="4106" src_ip="213.28.144.222" src_port="1863"/>
      <filter dst_ip="148.33.33.16" dst_port="3073" src_ip="213.28.144.222" src_port="1863"/>
    </slice>
    <from sec="1078290027" usec="0"/>
    <to sec="1078290880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
432[label="208.145.198.237;d;232pkt 232fpkt", shape=diamond, color=yellow];
542[label="90.77.123.168;s;33pkt 33fpkt", shape=diamond, color=yellow];
1234[label="144.135.181.31;d;119pkt 119fpkt", shape=diamond, color=yellow];
1809[label="144.135.181.31;d;119pkt 119fpkt", shape=hexagon, color=black];
2387[label="90.75.140.56;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2415[label="90.77.123.60;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2430[label="90.77.123.62;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2461[label="204.57.124.66;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2882[label="196.59.128.132;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2934[label="90.77.123.140;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3425[label="196.59.130.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3744[label="90.75.140.56;29pkt 29fpkt", shape=invtriangle, color=brown];
3970[label="196.59.128.132;57pkt 57fpkt", shape=invtriangle, color=brown];
3996[label="90.77.123.140;5pkt 5fpkt", shape=invtriangle, color=brown];
4222[label="196.59.130.224;1pkt 1fpkt", shape=invtriangle, color=brown];
4480[label="196.59.128.132;57pkt 57fpkt", shape=invhouse, color=bisque];
4600[label="196.59.130.224;2pkt 2fpkt", shape=invhouse, color=bisque];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.135.181.31:*}[31.6527%]&lt;BR/&gt;{90.75.140.6:80, 208.145.198.237:*}[21.8487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7975%)&lt;BR/&gt; 3991: (0.506329%)&lt;BR/&gt; 8080: (0.443038%)&lt;BR/&gt; 3967: (0.443038%)&lt;BR/&gt; 3965: (0.443038%)&gt;];
}
432--542[label="1;33pkt 33fpkt"];
432--1025[label="0.04;2pkt 2fpkt"];
432--1116[label="0.0204082;1pkt 1fpkt"];
432--1861[label="0.0204082;1pkt 1fpkt"];
432--1965[label="0.0258621;6pkt 6fpkt"];
432--1980[label="0.0258621;6pkt 6fpkt"];
432--2415[label="1;11pkt 11fpkt"];
432--2430[label="1;20pkt 20fpkt"];
432--2461[label="0.461538;6pkt 6fpkt"];
432--2488[label="1;4pkt 4fpkt"];
432--2934[label="1;5pkt 5fpkt"];
432--3418[label="0.0188679;1pkt 1fpkt"];
432--3996[label="1;5pkt 5fpkt"];
432--4220[label="0.0188679;1pkt 1fpkt"];
1234--1809[label="1;119pkt 119fpkt"];
1234--2387[label="1;28pkt 28fpkt"];
1234--2461[label="0.153846;2pkt 2fpkt"];
1234--2625[label="0.153846;4pkt 4fpkt"];
1234--2882[label="1;57pkt 57fpkt"];
1234--3425[label="0.5;1pkt 1fpkt"];
1234--3572[label="0.00840336;1pkt 1fpkt"];
1234--3744[label="1;29pkt 29fpkt"];
1234--3970[label="1;57pkt 57fpkt"];
1234--4285[label="0.00840336;1pkt 1fpkt"];
1234--4480[label="1;57pkt 57fpkt"];
1234--4600[label="0.5;1pkt 1fpkt"];
1234--4629[label="0.00840336;1pkt 1fpkt"];
1809--2387[label="1;28pkt 28fpkt"];
1809--2461[label="0.153846;2pkt 2fpkt"];
1809--2625[label="0.153846;4pkt 4fpkt"];
1809--2882[label="1;57pkt 57fpkt"];
1809--3425[label="0.5;1pkt 1fpkt"];
1809--3572[label="0.00840336;1pkt 1fpkt"];
1809--3744[label="1;29pkt 29fpkt"];
1809--3970[label="1;57pkt 57fpkt"];
1809--4285[label="0.00840336;1pkt 1fpkt"];
1809--4480[label="1;57pkt 57fpkt"];
1809--4600[label="0.5;1pkt 1fpkt"];
1809--4629[label="0.00840336;1pkt 1fpkt"];
2387--3744[label="1;28pkt 28fpkt"];
2882--3970[label="1;57pkt 57fpkt"];
2882--4480[label="1;57pkt 57fpkt"];
2934--3996[label="1;5pkt 5fpkt"];
3425--4222[label="1;1pkt 1fpkt"];
3425--4600[label="1;2pkt 2fpkt"];
3970--4480[label="1;57pkt 57fpkt"];
4222--4600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.181.31" src_port="80"/>
      <filter dst_ip="208.145.198.237" src_ip="90.75.140.6" src_port="80"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
3441[label="33.193.211.226;168pkt 168fpkt", shape=pentagon, color=darkviolet];
4227[label="33.193.211.226;168pkt 168fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.193.211.226:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4996: (0.297619%)&lt;BR/&gt; 4993: (0.297619%)&lt;BR/&gt; 4910: (0.297619%)&lt;BR/&gt; 4869: (0.297619%)&gt;];
}
3441--4227[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="33.193.211.226"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.10.213.226"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
3444[label="192.170.103.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4229[label="192.170.103.227;1pkt 1fpkt", shape=invtriangle, color=brown];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.170.103.227:80, 144.135.138.169:2881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2881: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3444--4229[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.135.138.169" dst_port="2881" src_ip="192.170.103.227" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
3451[label="194.202.212.228;82pkt 82fpkt", shape=pentagon, color=darkviolet];
4234[label="194.202.212.228;82pkt 82fpkt", shape=invtriangle, color=brown];
4605[label="194.202.212.228;81pkt 81fpkt", shape=invhouse, color=bisque];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.212.228:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 42118: (1.22449%)&lt;BR/&gt; 46803: (0.612245%)&lt;BR/&gt; 46548: (0.612245%)&lt;BR/&gt; 46498: (0.612245%)&gt;];
}
3451--4234[label="1;82pkt 82fpkt"];
3451--4605[label="1;81pkt 81fpkt"];
4234--4605[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.202.212.228"/>
    </slice>
    <from sec="1078290003" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
3460[label="88.13.88.231;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4236[label="88.13.88.231;101pkt 101fpkt", shape=invtriangle, color=brown];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.13.88.231:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4169: (0.990099%)&lt;BR/&gt; 4990: (0.49505%)&lt;BR/&gt; 4940: (0.49505%)&lt;BR/&gt; 4932: (0.49505%)&gt;];
}
3460--4236[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="88.13.88.231"/>
    </slice>
    <from sec="1078290004" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
3471[label="38.155.45.234;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4240[label="38.155.45.234;94pkt 94fpkt", shape=invtriangle, color=brown];
4608[label="38.155.45.234;93pkt 93fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.155.45.234:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4364: (1.06762%)&lt;BR/&gt; 3661: (1.06762%)&lt;BR/&gt; 3540: (1.06762%)&lt;BR/&gt; 4985: (0.533808%)&gt;];
}
3471--4240[label="1;94pkt 94fpkt"];
3471--4608[label="1;93pkt 93fpkt"];
4240--4608[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="38.155.45.234"/>
    </slice>
    <from sec="1078290005" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769009,1.97122,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
884[label="144.134.56.151;d;48pkt 48fpkt", shape=diamond, color=yellow];
2840[label="36.36.209.123;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3478[label="192.57.66.235;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4242[label="192.57.66.235;38pkt 38fpkt", shape=invtriangle, color=brown];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.57.66.235:80, 144.134.56.151:*}[75.5102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1294: (1.13636%)&lt;BR/&gt; 1293: (1.13636%)&lt;BR/&gt; 1292: (1.13636%)&lt;BR/&gt; 1291: (1.13636%)&gt;];
}
884--1965[label="0.0208333;1pkt 1fpkt"];
884--1980[label="0.0208333;1pkt 1fpkt"];
884--2840[label="1;8pkt 8fpkt"];
884--3478[label="0.973684;37pkt 37fpkt"];
884--4242[label="0.973684;37pkt 37fpkt"];
3478--4242[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.56.151" src_ip="192.57.66.235" src_port="80"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742904,2.11189,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.23.92.240"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
3509[label="220.218.24.241;190pkt 190fpkt", shape=pentagon, color=darkviolet];
4256[label="220.218.24.241;189pkt 189fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.218.24.241:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3509--4256[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.218.24.241" src_port="1027"/>
    </slice>
    <from sec="1078290147" usec="0"/>
    <to sec="1078290177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
3518[label="174.41.138.242;274pkt 274fpkt", shape=pentagon, color=darkviolet];
4260[label="174.41.138.242;274pkt 274fpkt", shape=invtriangle, color=brown];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.41.138.242:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3518--4260[label="1;274pkt 274fpkt"];
</description>
    <slice>
      <filter src_ip="174.41.138.242"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
3523[label="197.10.93.243;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4262[label="197.10.93.243;2pkt 2fpkt", shape=invtriangle, color=brown];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.93.243:1053, 148.66.221.156:1434}[50%]&lt;BR/&gt;{197.10.93.243:1053, 131.72.116.185:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1053: (50%)&gt;];
}
3523--4262[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.72.116.185" dst_port="1434" src_ip="197.10.93.243" src_port="1053"/>
      <filter dst_ip="148.66.221.156" dst_port="1434" src_ip="197.10.93.243" src_port="1053"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
3537[label="107.129.76.247;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4266[label="107.129.76.247;93pkt 93fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.129.76.247:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4957: (0.534759%)&lt;BR/&gt; 4941: (0.534759%)&lt;BR/&gt; 4940: (0.534759%)&lt;BR/&gt; 4911: (0.534759%)&gt;];
}
3537--4266[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="107.129.76.247"/>
    </slice>
    <from sec="1078290006" usec="0"/>
    <to sec="1078290845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.466695,2.02767,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
3539[label="203.208.75.248;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4268[label="203.208.75.248;19pkt 19fpkt", shape=invtriangle, color=brown];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.208.75.248:80, 131.6.34.179:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54984: (2.63158%)&lt;BR/&gt; 54982: (2.63158%)&lt;BR/&gt; 54981: (2.63158%)&lt;BR/&gt; 54980: (2.63158%)&gt;];
}
3539--4268[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="131.6.34.179" src_ip="203.208.75.248" src_port="80"/>
    </slice>
    <from sec="1078290812" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
3555[label="212.11.249.251;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4276[label="212.11.249.251;4pkt 4fpkt", shape=invtriangle, color=brown];
4625[label="212.11.249.251;4pkt 4fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.11.249.251:80, 208.145.209.211:1972}[20%]&lt;BR/&gt;{212.11.249.251:80, 208.145.209.211:1990}[20%]&lt;BR/&gt;{212.11.249.251:80, 208.145.209.211:1994}[20%]&lt;BR/&gt;{212.11.249.251:80, 208.145.209.211:2000}[20%]&lt;BR/&gt;{212.11.249.251:80, 208.145.209.211:2002}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2002: (11.5385%)&lt;BR/&gt; 2000: (11.5385%)&lt;BR/&gt; 1994: (11.5385%)&lt;BR/&gt; 1990: (11.5385%)&gt;];
}
3555--4276[label="1;4pkt 4fpkt"];
3555--4625[label="1;4pkt 4fpkt"];
4276--4625[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.209.211" dst_port="2002" src_ip="212.11.249.251" src_port="80"/>
      <filter dst_ip="208.145.209.211" dst_port="2000" src_ip="212.11.249.251" src_port="80"/>
      <filter dst_ip="208.145.209.211" dst_port="1994" src_ip="212.11.249.251" src_port="80"/>
      <filter dst_ip="208.145.209.211" dst_port="1990" src_ip="212.11.249.251" src_port="80"/>
      <filter dst_ip="208.145.209.211" dst_port="1972" src_ip="212.11.249.251" src_port="80"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
3558[label="192.62.128.252;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4278[label="192.62.128.252;7pkt 7fpkt", shape=invtriangle, color=brown];
4626[label="192.62.128.252;7pkt 7fpkt", shape=invhouse, color=bisque];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.128.252:5050, *:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.1818%)&lt;BR/&gt; 62308: (6.81818%)&lt;BR/&gt; 62263: (6.81818%)&lt;BR/&gt; 3373: (6.81818%)&lt;BR/&gt; 1451: (6.81818%)&gt;];
}
3558--4278[label="1;7pkt 7fpkt"];
3558--4626[label="1;7pkt 7fpkt"];
4278--4626[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="192.62.128.252" src_port="5050"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735787,2.01655,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
3566[label="36.65.254.253;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4282[label="36.65.254.253;3pkt 3fpkt", shape=invtriangle, color=brown];
4627[label="36.65.254.253;3pkt 3fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.65.254.253:80, 144.134.39.249:1061}[33.3333%]&lt;BR/&gt;{36.65.254.253:80, 144.134.39.202:1169}[33.3333%]&lt;BR/&gt;{36.65.254.253:80, 144.134.39.202:1171}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1171: (16.6667%)&lt;BR/&gt; 1169: (16.6667%)&lt;BR/&gt; 1061: (16.6667%)&gt;];
}
3566--4282[label="1;3pkt 3fpkt"];
3566--4627[label="1;3pkt 3fpkt"];
4282--4627[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.39.202" dst_port="1171" src_ip="36.65.254.253" src_port="80"/>
      <filter dst_ip="144.134.39.202" dst_port="1169" src_ip="36.65.254.253" src_port="80"/>
      <filter dst_ip="144.134.39.249" dst_port="1061" src_ip="36.65.254.253" src_port="80"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.106.87.5"/>
    </slice>
    <from sec="1078290459" usec="0"/>
    <to sec="1078290489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.40.240.15"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.97.154.37"/>
    </slice>
    <from sec="1078290047" usec="0"/>
    <to sec="1078290324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666381,2.0395,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
2344[label="209.42.98.48;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4358[label="209.42.98.48;34pkt 34fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.42.98.48:80, 144.134.39.225:*}[85.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1584: (1.47059%)&lt;BR/&gt; 1582: (1.47059%)&lt;BR/&gt; 1581: (1.47059%)&lt;BR/&gt; 1570: (1.47059%)&gt;];
}
2344--4358[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="144.134.39.225" src_ip="209.42.98.48" src_port="80"/>
    </slice>
    <from sec="1078290557" usec="0"/>
    <to sec="1078290661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.40.250.55"/>
    </slice>
    <from sec="1078290543" usec="0"/>
    <to sec="1078290809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956531,1.95978,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
734[label="144.135.136.58;s;214pkt 214fpkt", shape=diamond, color=yellow];
2401[label="144.135.136.58;226pkt 226fpkt", shape=pentagon, color=darkviolet];
3752[label="144.135.136.58;226pkt 226fpkt", shape=invtriangle, color=brown];
4370[label="144.135.136.58;227pkt 227fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.135.136.58:*, *:53}[70.9251%]&lt;BR/&gt;{144.135.136.58:*, *:25}[24.6696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (35.3303%)&lt;BR/&gt; 25: (13.3259%)&lt;BR/&gt; 113: (0.895857%)&lt;BR/&gt; 0: (0.895857%)&lt;BR/&gt; 40592: (0.223964%)&gt;];
}
734--1318[label="0.0121951;1pkt 1fpkt"];
734--1970[label="0.0420561;9pkt 9fpkt"];
734--2401[label="0.995327;213pkt 213fpkt"];
734--3752[label="0.995327;213pkt 213fpkt"];
734--4370[label="1;214pkt 214fpkt"];
2401--3752[label="1;226pkt 226fpkt"];
2401--4370[label="1;226pkt 226fpkt"];
3752--4370[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="144.135.136.58"/>
      <filter dst_port="25" src_ip="144.135.136.58"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.162.215.60"/>
    </slice>
    <from sec="1078290009" usec="0"/>
    <to sec="1078290055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.53.184.63"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.95.53.66"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.28.148.79"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.48.8.92"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2577,1.9013,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
240[label="206.171.216.45;s;465pkt 465fpkt", shape=diamond, color=yellow];
281[label="90.34.36.231;s;139pkt 139fpkt", shape=diamond, color=yellow];
342[label="168.168.52.21;d;122pkt 122fpkt", shape=diamond, color=yellow];
406[label="220.233.255.108;s;10pkt 10fpkt", shape=diamond, color=yellow];
415[label="168.168.57.51;d;32pkt 32fpkt", shape=diamond, color=yellow];
704[label="168.168.57.36;d;32pkt 32fpkt", shape=diamond, color=yellow];
714[label="168.168.53.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
715[label="168.168.57.186;d;233pkt 233fpkt", shape=diamond, color=yellow];
730[label="223.106.37.179;s;6pkt 6fpkt", shape=diamond, color=yellow];
736[label="168.168.84.16;d;4pkt 4fpkt", shape=diamond, color=yellow];
751[label="168.168.56.49;d;53pkt 53fpkt", shape=diamond, color=yellow];
832[label="36.52.61.110;s;25pkt 25fpkt", shape=diamond, color=yellow];
943[label="168.168.84.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
951[label="168.168.37.88;d;4pkt 4fpkt", shape=diamond, color=yellow];
955[label="36.72.206.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
958[label="168.168.84.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
968[label="168.168.84.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
969[label="168.168.84.13;d;6pkt 6fpkt", shape=diamond, color=yellow];
970[label="168.168.32.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
979[label="168.168.228.69;d;84pkt 84fpkt", shape=diamond, color=yellow];
1064[label="192.60.25.37;s;10pkt 10fpkt", shape=diamond, color=yellow];
1081[label="168.168.56.133;d;2pkt 2fpkt", shape=diamond, color=yellow];
1084[label="168.168.56.216;d;3pkt 3fpkt", shape=diamond, color=yellow];
1092[label="168.168.58.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
1094[label="168.168.84.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
1098[label="39.240.197.217;s;224pkt 224fpkt", shape=diamond, color=yellow];
1121[label="192.62.128.223;s;17pkt 17fpkt", shape=diamond, color=yellow];
1156[label="168.168.57.194;d;52pkt 52fpkt", shape=diamond, color=yellow];
1206[label="213.221.10.146;s;509pkt 509fpkt", shape=diamond, color=yellow];
1212[label="192.60.17.93;s;9pkt 9fpkt", shape=diamond, color=yellow];
1214[label="168.168.84.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
1215[label="168.168.62.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
1221[label="220.236.13.202;s;2pkt 2fpkt", shape=diamond, color=yellow];
1231[label="168.168.90.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
1297[label="168.168.228.213;d;125pkt 125fpkt", shape=diamond, color=yellow];
1319[label="168.168.84.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
1321[label="168.168.84.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
1329[label="168.168.57.57;d;9pkt 9fpkt", shape=diamond, color=yellow];
1369[label="168.168.57.200;d;29pkt 29fpkt", shape=diamond, color=yellow];
1584[label="220.233.255.108;s;8pkt 8fpkt", shape=hexagon, color=black];
1641[label="168.168.57.51;d;21pkt 21fpkt", shape=hexagon, color=black];
1657[label="168.168.57.186;d;77pkt 77fpkt", shape=hexagon, color=black];
1664[label="168.168.84.20;d;1pkt 1fpkt", shape=hexagon, color=black];
1723[label="192.60.25.37;s;8pkt 8fpkt", shape=hexagon, color=black];
1742[label="168.168.58.218;d;1pkt 1fpkt", shape=hexagon, color=black];
1789[label="206.171.216.45;s;364pkt 364fpkt", shape=hexagon, color=black];
1832[label="168.168.228.213;d;125pkt 125fpkt", shape=hexagon, color=black];
1849[label="192.60.17.93;s;9pkt 9fpkt", shape=hexagon, color=black];
1888[label="168.168.57.194;d;52pkt 52fpkt", shape=hexagon, color=black];
2253[label="192.60.25.37;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2326[label="206.171.216.45;487pkt 487fpkt", shape=pentagon, color=darkviolet];
2649[label="192.60.17.93;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2669[label="39.196.39.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2744[label="220.233.255.108;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2754[label="36.52.61.110;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2984[label="203.129.5.148;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3035[label="36.72.206.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3168[label="220.251.37.179;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3270[label="192.62.128.197;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3301[label="220.236.13.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3459[label="90.34.36.231;148pkt 148fpkt", shape=pentagon, color=darkviolet];
3493[label="192.60.18.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3516[label="192.62.128.242;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3859[label="192.60.17.93;8pkt 8fpkt", shape=invtriangle, color=brown];
3908[label="220.233.255.108;10pkt 10fpkt", shape=invtriangle, color=brown];
4033[label="36.72.206.155;1pkt 1fpkt", shape=invtriangle, color=brown];
4094[label="220.251.37.179;4pkt 4fpkt", shape=invtriangle, color=brown];
4141[label="192.62.128.197;11pkt 11fpkt", shape=invtriangle, color=brown];
4158[label="220.236.13.202;1pkt 1fpkt", shape=invtriangle, color=brown];
4258[label="192.62.128.242;13pkt 13fpkt", shape=invtriangle, color=brown];
4430[label="39.196.39.96;1pkt 1fpkt", shape=invhouse, color=bisque];
4510[label="36.72.206.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.221.10.146:53, *:*}[30.0823%]&lt;BR/&gt;{206.171.216.45:5050, *:*}[28.6134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25.6808%)&lt;BR/&gt; 53: (11.1081%)&lt;BR/&gt; 6667: (6.24157%)&lt;BR/&gt; 113: (2.53438%)&lt;BR/&gt; 1080: (1.15934%)&gt;];
}
240--415[label="0.71875;23pkt 23fpkt"];
240--704[label="1;32pkt 32fpkt"];
240--715[label="0.957082;223pkt 223fpkt"];
240--751[label="1;53pkt 53fpkt"];
240--1156[label="0.730769;38pkt 38fpkt"];
240--1369[label="0.896552;26pkt 26fpkt"];
240--1641[label="0.571429;12pkt 12fpkt"];
240--1657[label="0.883117;68pkt 68fpkt"];
240--1789[label="1;364pkt 364fpkt"];
240--1888[label="0.730769;38pkt 38fpkt"];
240--2326[label="0.997849;464pkt 464fpkt"];
281--342[label="0.745902;91pkt 91fpkt"];
281--714[label="1;2pkt 2fpkt"];
281--736[label="0.75;3pkt 3fpkt"];
281--943[label="1;1pkt 1fpkt"];
281--951[label="0.25;1pkt 1fpkt"];
281--958[label="1;1pkt 1fpkt"];
281--968[label="1;2pkt 2fpkt"];
281--969[label="0.666667;4pkt 4fpkt"];
281--970[label="0.5;1pkt 1fpkt"];
281--1081[label="0.5;1pkt 1fpkt"];
281--1092[label="1;1pkt 1fpkt"];
281--1094[label="1;1pkt 1fpkt"];
281--1214[label="1;1pkt 1fpkt"];
281--1215[label="1;1pkt 1fpkt"];
281--1319[label="1;1pkt 1fpkt"];
281--1321[label="0.5;1pkt 1fpkt"];
281--1369[label="0.0689655;2pkt 2fpkt"];
281--1664[label="1;1pkt 1fpkt"];
281--1742[label="1;1pkt 1fpkt"];
281--3459[label="1;139pkt 139fpkt"];
342--730[label="0.333333;2pkt 2fpkt"];
342--955[label="1;2pkt 2fpkt"];
342--1212[label="0.111111;1pkt 1fpkt"];
342--1849[label="0.111111;1pkt 1fpkt"];
342--2649[label="0.111111;1pkt 1fpkt"];
342--2669[label="1;1pkt 1fpkt"];
342--3035[label="1;1pkt 1fpkt"];
342--3459[label="0.745902;91pkt 91fpkt"];
342--3493[label="1;2pkt 2fpkt"];
342--3859[label="0.125;1pkt 1fpkt"];
342--4033[label="1;1pkt 1fpkt"];
342--4430[label="1;1pkt 1fpkt"];
342--4510[label="1;1pkt 1fpkt"];
406--818[label="0.1;1pkt 1fpkt"];
406--970[label="0.5;1pkt 1fpkt"];
406--1084[label="0.333333;1pkt 1fpkt"];
406--1231[label="0.5;1pkt 1fpkt"];
406--1584[label="1;8pkt 8fpkt"];
406--2744[label="1;10pkt 10fpkt"];
406--3908[label="1;10pkt 10fpkt"];
415--832[label="0.24;6pkt 6fpkt"];
415--1098[label="0.09375;3pkt 3fpkt"];
415--1641[label="1;21pkt 21fpkt"];
415--1789[label="0.375;12pkt 12fpkt"];
415--2326[label="0.71875;23pkt 23fpkt"];
415--2754[label="0.214286;6pkt 6fpkt"];
704--1789[label="1;32pkt 32fpkt"];
704--2326[label="1;32pkt 32fpkt"];
714--3459[label="1;2pkt 2fpkt"];
715--1121[label="0.0588235;1pkt 1fpkt"];
715--1657[label="1;77pkt 77fpkt"];
715--1789[label="0.72103;168pkt 168fpkt"];
715--2326[label="0.957082;223pkt 223fpkt"];
715--3270[label="0.0833333;1pkt 1fpkt"];
715--4141[label="0.0909091;1pkt 1fpkt"];
730--979[label="0.333333;2pkt 2fpkt"];
736--1064[label="0.25;1pkt 1fpkt"];
736--1723[label="0.25;1pkt 1fpkt"];
736--2253[label="0.25;1pkt 1fpkt"];
736--3459[label="0.75;3pkt 3fpkt"];
751--1789[label="1;53pkt 53fpkt"];
751--2326[label="1;53pkt 53fpkt"];
832--1084[label="0.666667;2pkt 2fpkt"];
832--1641[label="0.285714;6pkt 6fpkt"];
832--2754[label="1;25pkt 25fpkt"];
943--3459[label="1;1pkt 1fpkt"];
951--3459[label="0.25;1pkt 1fpkt"];
951--3516[label="0.25;1pkt 1fpkt"];
951--4258[label="0.25;1pkt 1fpkt"];
955--3035[label="1;1pkt 1fpkt"];
955--4033[label="1;1pkt 1fpkt"];
955--4510[label="1;1pkt 1fpkt"];
958--1664[label="1;1pkt 1fpkt"];
958--3459[label="1;1pkt 1fpkt"];
968--3459[label="1;2pkt 2fpkt"];
969--3459[label="0.666667;4pkt 4fpkt"];
970--1584[label="0.5;1pkt 1fpkt"];
970--2744[label="0.5;1pkt 1fpkt"];
970--3459[label="0.5;1pkt 1fpkt"];
970--3908[label="0.5;1pkt 1fpkt"];
979--1064[label="0.5;5pkt 5fpkt"];
979--1206[label="0.5;42pkt 42fpkt"];
979--1221[label="0.5;1pkt 1fpkt"];
979--1723[label="0.375;3pkt 3fpkt"];
979--1964[label="0.047619;4pkt 4fpkt"];
979--1970[label="0.0119048;1pkt 1fpkt"];
979--2253[label="0.5;5pkt 5fpkt"];
979--3168[label="0.4;2pkt 2fpkt"];
979--3301[label="0.5;1pkt 1fpkt"];
979--4094[label="0.5;2pkt 2fpkt"];
979--4158[label="1;1pkt 1fpkt"];
1064--1723[label="1;8pkt 8fpkt"];
1064--2253[label="1;10pkt 10fpkt"];
1081--3459[label="0.5;1pkt 1fpkt"];
1084--1584[label="0.333333;1pkt 1fpkt"];
1084--2744[label="0.333333;1pkt 1fpkt"];
1084--2754[label="0.666667;2pkt 2fpkt"];
1084--3908[label="0.333333;1pkt 1fpkt"];
1092--1742[label="1;1pkt 1fpkt"];
1092--3459[label="1;1pkt 1fpkt"];
1094--3459[label="1;1pkt 1fpkt"];
1098--1329[label="0.333333;3pkt 3fpkt"];
1098--1641[label="0.142857;3pkt 3fpkt"];
1121--1369[label="0.0588235;1pkt 1fpkt"];
1121--1657[label="0.0588235;1pkt 1fpkt"];
1156--1789[label="0.442308;23pkt 23fpkt"];
1156--1888[label="1;52pkt 52fpkt"];
1156--2326[label="0.730769;38pkt 38fpkt"];
1206--1473[label="0.00232019;1pkt 1fpkt"];
1206--1479[label="0.00196464;1pkt 1fpkt"];
1206--1540[label="0.00196464;1pkt 1fpkt"];
1206--1964[label="0.0609037;31pkt 31fpkt"];
1212--1849[label="1;9pkt 9fpkt"];
1212--2649[label="1;9pkt 9fpkt"];
1212--3859[label="1;8pkt 8fpkt"];
1214--3459[label="1;1pkt 1fpkt"];
1215--3459[label="1;1pkt 1fpkt"];
1221--3301[label="1;2pkt 2fpkt"];
1221--4158[label="1;1pkt 1fpkt"];
1231--1584[label="0.5;1pkt 1fpkt"];
1231--2744[label="0.5;1pkt 1fpkt"];
1231--3908[label="0.5;1pkt 1fpkt"];
1297--1750[label="0.0163934;1pkt 1fpkt"];
1297--1832[label="1;125pkt 125fpkt"];
1297--1964[label="0.064;8pkt 8fpkt"];
1297--1970[label="0.12;15pkt 15fpkt"];
1297--2204[label="0.008;1pkt 1fpkt"];
1297--2549[label="0.0333333;1pkt 1fpkt"];
1297--2984[label="0.95;38pkt 38fpkt"];
1297--2992[label="0.0769231;1pkt 1fpkt"];
1297--3100[label="0.0833333;1pkt 1fpkt"];
1297--3168[label="0.2;1pkt 1fpkt"];
1319--3459[label="1;1pkt 1fpkt"];
1321--3459[label="0.5;1pkt 1fpkt"];
1369--1789[label="0.896552;26pkt 26fpkt"];
1369--2326[label="0.896552;26pkt 26fpkt"];
1369--3459[label="0.0689655;2pkt 2fpkt"];
1584--2744[label="1;8pkt 8fpkt"];
1584--3908[label="1;8pkt 8fpkt"];
1641--1789[label="0.571429;12pkt 12fpkt"];
1641--2326[label="0.571429;12pkt 12fpkt"];
1641--2754[label="0.285714;6pkt 6fpkt"];
1657--1789[label="0.883117;68pkt 68fpkt"];
1657--2326[label="0.883117;68pkt 68fpkt"];
1657--3270[label="0.0833333;1pkt 1fpkt"];
1657--4141[label="0.0909091;1pkt 1fpkt"];
1664--3459[label="1;1pkt 1fpkt"];
1723--2253[label="1;8pkt 8fpkt"];
1742--3459[label="1;1pkt 1fpkt"];
1789--1888[label="0.442308;23pkt 23fpkt"];
1789--2326[label="0.997253;363pkt 363fpkt"];
1832--1964[label="0.064;8pkt 8fpkt"];
1832--1970[label="0.12;15pkt 15fpkt"];
1832--2204[label="0.008;1pkt 1fpkt"];
1832--2549[label="0.0333333;1pkt 1fpkt"];
1832--2984[label="0.95;38pkt 38fpkt"];
1832--2992[label="0.0769231;1pkt 1fpkt"];
1832--3100[label="0.0833333;1pkt 1fpkt"];
1832--3168[label="0.2;1pkt 1fpkt"];
1849--2649[label="1;9pkt 9fpkt"];
1849--3859[label="1;8pkt 8fpkt"];
1888--2326[label="0.730769;38pkt 38fpkt"];
2649--3859[label="1;8pkt 8fpkt"];
2669--4430[label="1;1pkt 1fpkt"];
2744--3908[label="1;10pkt 10fpkt"];
3035--4033[label="1;1pkt 1fpkt"];
3035--4510[label="1;1pkt 1fpkt"];
3168--4094[label="1;4pkt 4fpkt"];
3270--4141[label="1;11pkt 11fpkt"];
3301--4158[label="1;1pkt 1fpkt"];
3516--4258[label="1;13pkt 13fpkt"];
4033--4510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.221.10.146" src_port="53"/>
      <filter src_ip="206.171.216.45" src_port="5050"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.67.88.114"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.239.128.123"/>
    </slice>
    <from sec="1078290085" usec="0"/>
    <to sec="1078290099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.18.170.156"/>
    </slice>
    <from sec="1078290008" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666381,2.0395,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
3040[label="194.210.198.156;226pkt 226fpkt", shape=pentagon, color=darkviolet];
4513[label="194.210.198.156;224pkt 224fpkt", shape=invhouse, color=bisque];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.210.198.156:*, *:1080}[33.6283%]&lt;BR/&gt;{194.210.198.156:*, *:3128}[33.6283%]&lt;BR/&gt;{194.210.198.156:*, *:3127}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.8889%)&lt;BR/&gt; 3128: (16.6667%)&lt;BR/&gt; 3127: (16.4444%)&lt;BR/&gt; 4215: (0.444444%)&lt;BR/&gt; 1290: (0.444444%)&gt;];
}
3040--4513[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="194.210.198.156"/>
      <filter dst_port="1080" src_ip="194.210.198.156"/>
      <filter dst_port="3127" src_ip="194.210.198.156"/>
    </slice>
    <from sec="1078290002" usec="0"/>
    <to sec="1078290899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.75.30.160"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.28.150.162"/>
    </slice>
    <from sec="1078290011" usec="0"/>
    <to sec="1078290518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.160.85.168"/>
    </slice>
    <from sec="1078290900" usec="0"/>
    <to sec="1078290901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.89.120.176"/>
    </slice>
    <from sec="1078290829" usec="0"/>
    <to sec="1078290846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.77.171.179"/>
    </slice>
    <from sec="1078290000" usec="0"/>
    <to sec="1078290896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.88.196.213"/>
    </slice>
    <from sec="1078290007" usec="0"/>
    <to sec="1078290897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.180.46.222"/>
    </slice>
    <from sec="1078290612" usec="0"/>
    <to sec="1078290702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882137,2.12325,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.23.92.240"/>
    </slice>
    <from sec="1078290001" usec="0"/>
    <to sec="1078290898" usec="0"/>
  </anomaly>

</admd:annotation>
