<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.28951,2.68536,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.103.107.17" dst_port="25" proto="tcp" src_ip="20.236.74.123" src_port="44982"/>
      <from sec="1081055572" usec="0"/>
      <to sec="1081055575" usec="0"/>
    </slice>
    <from sec="1081055572" usec="0"/>
    <to sec="1081055575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.102.219.221" dst_port="80" proto="tcp" src_ip="196.101.36.200" src_port="22545"/>
      <filter dst_ip="130.102.219.221" dst_port="80" proto="tcp" src_ip="196.101.36.200" src_port="22721"/>
      <from sec="1081055338" usec="0"/>
      <to sec="1081055342" usec="0"/>
    </slice>
    <from sec="1081055338" usec="0"/>
    <to sec="1081055342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <filter dst_ip="197.183.74.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <from sec="1081055054" usec="0"/>
      <to sec="1081055149" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="1080"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <filter dst_ip="159.31.202.107" proto="tcp" src_ip="197.183.74.107" src_port="80"/>
      <from sec="1081055054" usec="0"/>
      <to sec="1081055144" usec="0"/>
    </slice>
    <from sec="1081055054" usec="0"/>
    <to sec="1081055149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="210.211.74.14" src_port="1047"/>
      <from sec="1081054983" usec="0"/>
      <to sec="1081054986" usec="0"/>
    </slice>
    <from sec="1081054983" usec="0"/>
    <to sec="1081054986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.71.195.182" dst_port="137" proto="tcp" src_ip="90.162.191.78" src_port="1031"/>
      <filter dst_ip="205.71.195.182" dst_port="137" proto="udp" src_ip="90.162.191.78" src_port="1031"/>
      <from sec="1081055240" usec="0"/>
      <to sec="1081055246" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="205.71.195.182" dst_port="137" proto="tcp" src_ip="214.20.203.78" src_port="1031"/>
      <filter dst_ip="205.71.195.182" dst_port="137" proto="udp" src_ip="214.20.203.78" src_port="1031"/>
      <from sec="1081055242" usec="0"/>
      <to sec="1081055246" usec="0"/>
    </slice>
    <from sec="1081055240" usec="0"/>
    <to sec="1081055246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="6.247.71.88" src_port="1028"/>
      <from sec="1081055066" usec="0"/>
      <to sec="1081055070" usec="0"/>
    </slice>
    <from sec="1081055066" usec="0"/>
    <to sec="1081055070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="90.132.88.226" src_port="1026"/>
      <from sec="1081055095" usec="0"/>
      <to sec="1081055107" usec="0"/>
    </slice>
    <from sec="1081055095" usec="0"/>
    <to sec="1081055107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="208.113.174.92" src_port="80"/>
      <from sec="1081054818" usec="0"/>
      <to sec="1081055473" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="210.194.218.92" src_port="80"/>
      <from sec="1081054817" usec="0"/>
      <to sec="1081055473" usec="0"/>
    </slice>
    <from sec="1081054817" usec="0"/>
    <to sec="1081055473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="132.237.25.36" dst_port="445" proto="tcp" src_ip="160.193.50.98" src_port="4662"/>
      <filter dst_ip="132.237.25.36" dst_port="445" proto="tcp" src_ip="160.193.50.98" src_port="4662"/>
      <filter dst_ip="132.237.25.36" dst_port="445" proto="tcp" src_ip="160.193.50.98" src_port="4662"/>
      <filter dst_ip="132.237.25.36" dst_port="445" proto="tcp" src_ip="160.193.50.98" src_port="4662"/>
      <from sec="1081055657" usec="0"/>
      <to sec="1081055661" usec="0"/>
    </slice>
    <from sec="1081055657" usec="0"/>
    <to sec="1081055661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28951,2.68536,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="117.91.178.109" proto="icmp"/>
      <filter dst_ip="117.91.178.109" proto="icmp"/>
      <filter dst_ip="117.91.178.109" proto="icmp"/>
      <filter dst_ip="117.91.178.109" proto="icmp"/>
      <from sec="1081054964" usec="0"/>
      <to sec="1081054977" usec="0"/>
    </slice>
    <from sec="1081054964" usec="0"/>
    <to sec="1081054977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43516,2.6376,901,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
13[label="20.187.124.71s;1pkt 1fpkt", shape=rectangle, color=red];
153[label="20.187.124.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
216[label="16.173.37.183;s;2pkt 2fpkt", shape=diamond, color=yellow];
300[label="197.39.199.61;d;5pkt 5fpkt", shape=diamond, color=yellow];
444[label="20.198.234.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.198.234.20:1027, 197.39.199.61:3958}[20%]&lt;BR/&gt;{20.187.124.71:1760, 197.39.199.61:3898}[20%]&lt;BR/&gt;{16.2.215.117:6667, 197.39.199.61:1028}[20%]&lt;BR/&gt;{16.173.37.183:1029, 197.39.199.61:3389}[20%]&lt;BR/&gt;{16.173.37.183:1029, 197.39.199.61:4101}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (20%)&lt;BR/&gt; 3898: (15%)&lt;BR/&gt; 1760: (15%)&lt;BR/&gt; 4101: (10%)&lt;BR/&gt; 3958: (10%)&gt;];
}
13--153[label="1;1pkt 1fpkt"];
13--300[label="1;1pkt 1fpkt"];
153--300[label="1;1pkt 1fpkt"];
216--300[label="1;2pkt 2fpkt"];
300--444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.39.199.61" dst_port="4101" src_ip="16.173.37.183" src_port="1029"/>
      <filter dst_ip="197.39.199.61" dst_port="3389" src_ip="16.173.37.183" src_port="1029"/>
      <filter dst_ip="197.39.199.61" dst_port="1028" src_ip="16.2.215.117" src_port="6667"/>
      <filter dst_ip="197.39.199.61" dst_port="3898" src_ip="20.187.124.71" src_port="1760"/>
      <filter dst_ip="197.39.199.61" dst_port="3958" src_ip="20.198.234.20" src_port="1027"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43598,2.60963,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
30[label="196.127.58.122s;1pkt 1fpkt", shape=rectangle, color=red];
179[label="117.210.87.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
310[label="196.127.58.122;s;105pkt 105fpkt", shape=diamond, color=yellow];
2365[label="196.127.58.122;135pkt 135fpkt", shape=pentagon, color=darkviolet];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.58.122:80, *:*}[95.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.314%)&lt;BR/&gt; 554: (1.8595%)&lt;BR/&gt; 18910: (0.826446%)&lt;BR/&gt; 8888: (0.826446%)&lt;BR/&gt; 34532: (0.619835%)&gt;];
}
30--179[label="1;1pkt 1fpkt"];
30--310[label="1;1pkt 1fpkt"];
30--2365[label="1;1pkt 1fpkt"];
179--310[label="1;1pkt 1fpkt"];
179--2365[label="1;1pkt 1fpkt"];
310--2365[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.58.122" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.54386,2.5685,901,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
40[label="132.237.78.157s;1pkt 1fpkt", shape=rectangle, color=red];
184[label="136.190.170.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
185[label="132.237.78.157;s;2pkt 2fpkt", shape=diamond, color=yellow];
2642[label="132.237.78.157;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3983[label="132.237.78.157;2pkt 2fpkt", shape=invtriangle, color=brown];
4693[label="132.237.78.157;2pkt 2fpkt", shape=invhouse, color=bisque];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.87.90.165:0, 136.190.170.5:0}[25%]&lt;BR/&gt;{132.237.78.157:80, 217.231.233.116:1373}[25%]&lt;BR/&gt;{132.237.78.157:80, 22.231.49.199:58723}[25%]&lt;BR/&gt;{132.237.78.157:80, 136.190.170.5:49270}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8333%)&lt;BR/&gt; 49270: (25%)&lt;BR/&gt; 1373: (12.5%)&lt;BR/&gt; 58723: (8.33333%)&lt;BR/&gt; 0: (8.33333%)&gt;];
}
40--184[label="1;1pkt 1fpkt"];
40--185[label="1;1pkt 1fpkt"];
40--2642[label="1;1pkt 1fpkt"];
40--3983[label="1;1pkt 1fpkt"];
40--4693[label="1;1pkt 1fpkt"];
184--185[label="0.5;1pkt 1fpkt"];
184--2642[label="0.5;1pkt 1fpkt"];
184--3983[label="0.5;1pkt 1fpkt"];
184--4693[label="0.5;1pkt 1fpkt"];
185--2642[label="1;2pkt 2fpkt"];
185--3983[label="0.5;1pkt 1fpkt"];
185--4693[label="0.5;1pkt 1fpkt"];
2642--3983[label="1;2pkt 2fpkt"];
2642--4693[label="1;2pkt 2fpkt"];
3983--4693[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.190.170.5" dst_port="49270" src_ip="132.237.78.157" src_port="80"/>
      <filter dst_ip="22.231.49.199" dst_port="58723" src_ip="132.237.78.157" src_port="80"/>
      <filter dst_ip="217.231.233.116" dst_port="1373" src_ip="132.237.78.157" src_port="80"/>
      <filter dst_ip="136.190.170.5" src_ip="159.87.90.165"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
206[label="196.127.62.133;s;2746pkt 2746fpkt", shape=diamond, color=yellow];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.62.133:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
206--656[label="0.00246305;1pkt 1fpkt"];
206--811[label="0.00269542;1pkt 1fpkt"];
206--834[label="0.00293255;1pkt 1fpkt"];
206--937[label="0.00310559;1pkt 1fpkt"];
206--998[label="0.00374532;1pkt 1fpkt"];
206--1115[label="0.00315457;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.62.133"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
229[label="196.127.57.71;s;1808pkt 1808fpkt", shape=diamond, color=yellow];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.57.71:53, *:*}[98.8385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.6692%)&lt;BR/&gt; 32768: (1.82522%)&lt;BR/&gt; 1024: (1.24447%)&lt;BR/&gt; 32769: (1.02323%)&lt;BR/&gt; 0: (0.940265%)&gt;];
}
229--1267[label="0.00884956;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.57.71" src_port="53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
236[label="159.31.35.58;s;935pkt 935fpkt", shape=diamond, color=yellow];
237[label="210.214.89.156;d;935pkt 935fpkt", shape=diamond, color=yellow];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.35.58:*, 210.214.89.156:21}[99.6791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.8396%)&lt;BR/&gt; 20004: (0.0534759%)&lt;BR/&gt; 20002: (0.0534759%)&lt;BR/&gt; 20001: (0.0534759%)&lt;BR/&gt; 4361: (0.0534759%)&gt;];
}
236--237[label="1;935pkt 935fpkt"];
</description>
    <slice>
      <filter dst_ip="210.214.89.156" dst_port="21" src_ip="159.31.35.58"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="159.31.160.113"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055628" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
252[label="90.186.53.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
253[label="160.204.60.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.186.53.160:15081, 160.204.60.136:3654}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15081: (50%)&lt;BR/&gt; 3654: (50%)&gt;];
}
252--253[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.60.136" dst_port="3654" src_ip="90.186.53.160" src_port="15081"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.0.89.106"/>
      <from sec="1081054824" usec="0"/>
      <to sec="1081054850" usec="0"/>
    </slice>
    <from sec="1081054824" usec="0"/>
    <to sec="1081054850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
275[label="130.103.107.37;s;159pkt 159fpkt", shape=diamond, color=yellow];
297[label="96.197.77.91;d;3pkt 3fpkt", shape=diamond, color=yellow];
763[label="17.92.74.50;d;31pkt 31fpkt", shape=diamond, color=yellow];
791[label="210.148.170.229;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.107.37:80, 17.92.74.50:*}[21.3836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57114: (0.5%)&lt;BR/&gt; 57113: (0.5%)&lt;BR/&gt; 57112: (0.5%)&lt;BR/&gt; 57111: (0.5%)&gt;];
}
275--297[label="1;3pkt 3fpkt"];
275--763[label="1;31pkt 31fpkt"];
275--791[label="1;7pkt 7fpkt"];
275--1017[label="0.325;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="17.92.74.50" src_ip="130.103.107.37" src_port="80"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
189[label="206.239.193.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
258[label="206.239.193.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
302[label="166.43.171.83;d;2pkt 2fpkt", shape=diamond, color=yellow];
303[label="196.127.56.12;s;36pkt 36fpkt", shape=diamond, color=yellow];
388[label="166.43.140.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
461[label="197.133.239.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
616[label="210.220.68.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
1102[label="90.19.232.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
1179[label="197.114.73.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.56.12:80, 210.0.33.19:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.9149%)&lt;BR/&gt; 873: (8.51064%)&lt;BR/&gt; 0: (6.38298%)&lt;BR/&gt; 21: (3.19149%)&lt;BR/&gt; 60645: (2.12766%)&gt;];
}
189--303[label="1;1pkt 1fpkt"];
258--303[label="1;1pkt 1fpkt"];
302--303[label="1;2pkt 2fpkt"];
303--388[label="1;1pkt 1fpkt"];
303--461[label="1;1pkt 1fpkt"];
303--616[label="1;1pkt 1fpkt"];
303--1102[label="1;2pkt 2fpkt"];
303--1179[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.0.33.19" src_ip="196.127.56.12" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43516,2.6376,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
9[label="130.103.9.39s;2pkt 2fpkt", shape=rectangle, color=red];
308[label="130.103.9.39;s;5pkt 5fpkt", shape=diamond, color=yellow];
309[label="214.193.242.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
345[label="214.251.176.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.9.39:1044, 192.189.61.0:1863}[20%]&lt;BR/&gt;{130.103.9.39:2725, 214.193.242.40:15035}[20%]&lt;BR/&gt;{130.103.9.39:3556, 192.189.61.57:1863}[20%]&lt;BR/&gt;{130.103.9.39:1029, 210.0.38.144:10015}[20%]&lt;BR/&gt;{130.103.9.39:2799, 214.251.176.221:15006}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15035: (16.6667%)&lt;BR/&gt; 15006: (16.6667%)&lt;BR/&gt; 2799: (16.6667%)&lt;BR/&gt; 2725: (16.6667%)&lt;BR/&gt; 1863: (11.1111%)&gt;];
}
9--308[label="1;2pkt 2fpkt"];
9--309[label="1;1pkt 1fpkt"];
9--345[label="1;1pkt 1fpkt"];
308--309[label="1;1pkt 1fpkt"];
308--345[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.251.176.221" dst_port="15006" src_ip="130.103.9.39" src_port="2799"/>
      <filter dst_ip="210.0.38.144" dst_port="10015" src_ip="130.103.9.39" src_port="1029"/>
      <filter dst_ip="192.189.61.57" dst_port="1863" src_ip="130.103.9.39" src_port="3556"/>
      <filter dst_ip="214.193.242.40" dst_port="15035" src_ip="130.103.9.39" src_port="2725"/>
      <filter dst_ip="192.189.61.0" dst_port="1863" src_ip="130.103.9.39" src_port="1044"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
331[label="130.103.3.76;s;33pkt 33fpkt", shape=diamond, color=yellow];
332[label="90.170.182.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
509[label="196.2.99.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.3.76:*, 210.133.185.221:9970}[42.4242%]&lt;BR/&gt;{130.103.3.76:*, 210.135.90.158:9951}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9970: (20%)&lt;BR/&gt; 9951: (10%)&lt;BR/&gt; 32088: (4.28571%)&lt;BR/&gt; 28994: (4.28571%)&lt;BR/&gt; 6882: (4.28571%)&gt;];
}
331--332[label="1;1pkt 1fpkt"];
331--509[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.133.185.221" dst_port="9970" src_ip="130.103.3.76"/>
      <filter dst_ip="210.135.90.158" dst_port="9951" src_ip="130.103.3.76"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.162.49.34"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055244" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
231[label="130.103.65.81;s;219pkt 219fpkt", shape=diamond, color=yellow];
362[label="169.8.244.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
475[label="208.181.22.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
853[label="88.17.120.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
945[label="5.81.29.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
1114[label="21.103.174.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
1158[label="4.141.40.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
2088[label="130.103.65.81;364pkt 364fpkt", shape=pentagon, color=darkviolet];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.65.81:*, *:6881}[28.8462%]&lt;BR/&gt;{130.103.65.81:*, *:80}[25.5495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (17.2034%)&lt;BR/&gt; 80: (10.5932%)&lt;BR/&gt; 6882: (6.27119%)&lt;BR/&gt; 6883: (4.32203%)&lt;BR/&gt; 6884: (2.9661%)&gt;];
}
231--362[label="1;1pkt 1fpkt"];
231--475[label="1;1pkt 1fpkt"];
231--853[label="1;1pkt 1fpkt"];
231--945[label="0.5;1pkt 1fpkt"];
231--1114[label="1;1pkt 1fpkt"];
231--1158[label="1;1pkt 1fpkt"];
231--1287[label="0.0182648;4pkt 4fpkt"];
231--1302[label="0.0182648;4pkt 4fpkt"];
231--2088[label="1;219pkt 219fpkt"];
362--2088[label="1;1pkt 1fpkt"];
475--2088[label="1;1pkt 1fpkt"];
853--2088[label="1;1pkt 1fpkt"];
945--2088[label="1;2pkt 2fpkt"];
1114--2088[label="1;1pkt 1fpkt"];
1158--2088[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6881" src_ip="130.103.65.81"/>
      <filter dst_port="80" src_ip="130.103.65.81"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.102.48.53"/>
      <from sec="1081054807" usec="0"/>
      <to sec="1081055049" usec="0"/>
    </slice>
    <from sec="1081054807" usec="0"/>
    <to sec="1081055049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
293[label="197.39.27.134;s;33pkt 33fpkt", shape=diamond, color=yellow];
410[label="21.21.30.173;d;33pkt 33fpkt", shape=diamond, color=yellow];
2460[label="197.39.27.134;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.39.27.134:80, 21.21.30.173:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1452: (1.51515%)&lt;BR/&gt; 1443: (1.51515%)&lt;BR/&gt; 1437: (1.51515%)&lt;BR/&gt; 1430: (1.51515%)&gt;];
}
293--410[label="1;33pkt 33fpkt"];
293--2460[label="1;33pkt 33fpkt"];
410--2460[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="21.21.30.173" src_ip="197.39.27.134" src_port="80"/>
    </slice>
    <from sec="1081054827" usec="0"/>
    <to sec="1081054868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
370[label="197.42.248.209;d;225pkt 225fpkt", shape=diamond, color=yellow];
411[label="5.158.255.45;s;84pkt 84fpkt", shape=diamond, color=yellow];
1418[label="221.109.84.9;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2091[label="79.29.123.81;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.158.255.45:80, 197.42.248.209:*}[37.3333%]&lt;BR/&gt;{22.202.69.23:80, 197.42.248.209:*}[32.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1477%)&lt;BR/&gt; 0: (1.70455%)&lt;BR/&gt; 15486: (0.284091%)&lt;BR/&gt; 15485: (0.284091%)&lt;BR/&gt; 15484: (0.284091%)&gt;];
}
370--411[label="1;84pkt 84fpkt"];
370--1418[label="1;16pkt 16fpkt"];
370--2091[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="197.42.248.209" src_ip="5.158.255.45" src_port="80"/>
      <filter dst_ip="197.42.248.209" src_ip="22.202.69.23" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
280[label="159.31.0.193;s;104pkt 104fpkt", shape=diamond, color=yellow];
415[label="16.105.82.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.0.193:80, *:*}[82.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.5094%)&lt;BR/&gt; 0: (16.9811%)&lt;BR/&gt; 2861: (0.943396%)&lt;BR/&gt; 2860: (0.943396%)&lt;BR/&gt; 61641: (0.471698%)&gt;];
}
280--415[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="159.31.0.193" src_port="80"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43516,2.6376,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
49[label="159.31.93.210s;2pkt 2fpkt", shape=rectangle, color=red];
424[label="217.19.69.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
525[label="159.31.93.210;s;27pkt 27fpkt", shape=diamond, color=yellow];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.93.210:*, 214.244.231.8:80}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3333%)&lt;BR/&gt; 1280: (5%)&lt;BR/&gt; 4716: (1.66667%)&lt;BR/&gt; 1863: (1.66667%)&lt;BR/&gt; 1364: (1.66667%)&gt;];
}
49--424[label="1;1pkt 1fpkt"];
49--525[label="0.5;1pkt 1fpkt"];
424--525[label="1;1pkt 1fpkt"];
525--1287[label="0.111111;3pkt 3fpkt"];
525--1302[label="0.111111;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.244.231.8" dst_port="80" src_ip="159.31.93.210"/>
    </slice>
    <from sec="1081054819" usec="0"/>
    <to sec="1081055580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
311[label="22.240.2.126;d;4pkt 4fpkt", shape=diamond, color=yellow];
439[label="197.42.248.193;s;50pkt 50fpkt", shape=diamond, color=yellow];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.42.248.193:1214, *:*}[38%]&lt;BR/&gt;{197.42.248.193:*, *:2406}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (25%)&lt;BR/&gt; 2406: (11.1111%)&lt;BR/&gt; 80: (5.55556%)&lt;BR/&gt; 17842: (1.85185%)&lt;BR/&gt; 17819: (1.85185%)&gt;];
}
311--439[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="197.42.248.193" src_port="1214"/>
      <filter dst_port="2406" src_ip="197.42.248.193"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45833,2.58735,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
11[label="197.39.199.61s;2pkt 2fpkt", shape=rectangle, color=red];
152[label="20.187.124.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
154[label="197.39.199.61;s;5pkt 5fpkt", shape=diamond, color=yellow];
343[label="16.173.37.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
443[label="20.198.234.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
1890[label="197.39.199.61;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3585[label="197.39.199.61;4pkt 4fpkt", shape=invtriangle, color=brown];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.39.199.61:3958, 20.198.234.20:1027}[20%]&lt;BR/&gt;{197.39.199.61:3898, 20.187.124.71:1760}[20%]&lt;BR/&gt;{197.39.199.61:1028, 16.2.215.117:6667}[20%]&lt;BR/&gt;{197.39.199.61:3389, 16.173.37.183:1029}[20%]&lt;BR/&gt;{197.39.199.61:4101, 16.173.37.183:1029}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (21.0526%)&lt;BR/&gt; 3958: (13.1579%)&lt;BR/&gt; 1027: (13.1579%)&lt;BR/&gt; 4101: (10.5263%)&lt;BR/&gt; 3389: (10.5263%)&gt;];
}
11--154[label="1;2pkt 2fpkt"];
11--443[label="1;1pkt 1fpkt"];
11--1890[label="1;2pkt 2fpkt"];
11--3585[label="1;2pkt 2fpkt"];
152--154[label="1;1pkt 1fpkt"];
152--1890[label="1;1pkt 1fpkt"];
154--343[label="1;1pkt 1fpkt"];
154--443[label="1;1pkt 1fpkt"];
154--1890[label="1;5pkt 5fpkt"];
154--3585[label="1;4pkt 4fpkt"];
343--1890[label="1;1pkt 1fpkt"];
343--3585[label="1;1pkt 1fpkt"];
443--1890[label="1;1pkt 1fpkt"];
443--3585[label="1;1pkt 1fpkt"];
1890--3585[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="16.173.37.183" dst_port="1029" src_ip="197.39.199.61" src_port="4101"/>
      <filter dst_ip="16.173.37.183" dst_port="1029" src_ip="197.39.199.61" src_port="3389"/>
      <filter dst_ip="16.2.215.117" dst_port="6667" src_ip="197.39.199.61" src_port="1028"/>
      <filter dst_ip="20.187.124.71" dst_port="1760" src_ip="197.39.199.61" src_port="3898"/>
      <filter dst_ip="20.198.234.20" dst_port="1027" src_ip="197.39.199.61" src_port="3958"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
198[label="197.42.248.163;s;1277pkt 1277fpkt", shape=diamond, color=yellow];
452[label="211.66.230.20;d;13pkt 13fpkt", shape=diamond, color=yellow];
456[label="210.128.32.201;d;2pkt 2fpkt", shape=diamond, color=yellow];
477[label="16.173.153.51;d;5pkt 5fpkt", shape=diamond, color=yellow];
479[label="210.128.13.29;d;3pkt 3fpkt", shape=diamond, color=yellow];
487[label="21.58.226.193;d;3pkt 3fpkt", shape=diamond, color=yellow];
491[label="202.204.67.31;d;2pkt 2fpkt", shape=diamond, color=yellow];
496[label="210.133.188.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
636[label="211.90.153.56;d;3pkt 3fpkt", shape=diamond, color=yellow];
642[label="146.80.127.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
650[label="220.223.123.62;d;9pkt 9fpkt", shape=diamond, color=yellow];
680[label="20.98.207.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
683[label="210.220.134.146;d;62pkt 62fpkt", shape=diamond, color=yellow];
690[label="23.152.62.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
699[label="208.11.166.240;d;2pkt 2fpkt", shape=diamond, color=yellow];
704[label="206.243.117.204;d;2pkt 2fpkt", shape=diamond, color=yellow];
706[label="96.214.169.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
741[label="196.114.44.195;d;4pkt 4fpkt", shape=diamond, color=yellow];
816[label="215.0.121.140;d;4pkt 4fpkt", shape=diamond, color=yellow];
833[label="5.240.114.88;d;2pkt 2fpkt", shape=diamond, color=yellow];
843[label="6.84.156.35;d;3pkt 3fpkt", shape=diamond, color=yellow];
854[label="154.80.255.228;d;3pkt 3fpkt", shape=diamond, color=yellow];
930[label="90.225.94.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
936[label="20.98.207.246;d;4pkt 4fpkt", shape=diamond, color=yellow];
958[label="23.2.147.178;d;8pkt 8fpkt", shape=diamond, color=yellow];
1003[label="17.174.179.133;d;2pkt 2fpkt", shape=diamond, color=yellow];
1004[label="117.86.47.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
1006[label="20.98.207.245;d;4pkt 4fpkt", shape=diamond, color=yellow];
1007[label="90.166.162.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1019[label="17.233.214.62;d;3pkt 3fpkt", shape=diamond, color=yellow];
1109[label="5.55.136.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1120[label="117.90.82.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
1123[label="20.98.207.240;d;2pkt 2fpkt", shape=diamond, color=yellow];
1128[label="210.133.0.176;d;2pkt 2fpkt", shape=diamond, color=yellow];
1173[label="210.148.37.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
2695[label="197.42.248.163;3309pkt 3309fpkt", shape=pentagon, color=darkviolet];
4009[label="197.42.248.163;3308pkt 3308fpkt", shape=invtriangle, color=brown];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.42.248.163:6881, *:*}[37.4433%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (19.7728%)&lt;BR/&gt; 1214: (4.40775%)&lt;BR/&gt; 80: (1.78793%)&lt;BR/&gt; 30466: (1.14229%)&lt;BR/&gt; 26037: (0.788428%)&gt;];
}
198--452[label="0.384615;5pkt 5fpkt"];
198--456[label="1;2pkt 2fpkt"];
198--477[label="0.8;4pkt 4fpkt"];
198--479[label="1;3pkt 3fpkt"];
198--487[label="1;3pkt 3fpkt"];
198--491[label="1;2pkt 2fpkt"];
198--496[label="1;1pkt 1fpkt"];
198--636[label="1;3pkt 3fpkt"];
198--642[label="1;1pkt 1fpkt"];
198--650[label="0.555556;5pkt 5fpkt"];
198--680[label="1;2pkt 2fpkt"];
198--683[label="0.322581;20pkt 20fpkt"];
198--690[label="1;1pkt 1fpkt"];
198--699[label="1;2pkt 2fpkt"];
198--704[label="1;2pkt 2fpkt"];
198--706[label="1;1pkt 1fpkt"];
198--741[label="0.75;3pkt 3fpkt"];
198--816[label="0.25;1pkt 1fpkt"];
198--833[label="1;2pkt 2fpkt"];
198--843[label="1;3pkt 3fpkt"];
198--854[label="1;3pkt 3fpkt"];
198--930[label="1;1pkt 1fpkt"];
198--936[label="1;4pkt 4fpkt"];
198--958[label="0.75;6pkt 6fpkt"];
198--1003[label="1;2pkt 2fpkt"];
198--1004[label="1;2pkt 2fpkt"];
198--1006[label="1;4pkt 4fpkt"];
198--1007[label="1;1pkt 1fpkt"];
198--1019[label="0.333333;1pkt 1fpkt"];
198--1109[label="1;1pkt 1fpkt"];
198--1120[label="1;1pkt 1fpkt"];
198--1123[label="1;2pkt 2fpkt"];
198--1128[label="1;2pkt 2fpkt"];
198--1287[label="0.00704777;9pkt 9fpkt"];
198--1302[label="0.00704777;9pkt 9fpkt"];
198--2695[label="1;1277pkt 1277fpkt"];
198--4009[label="0.999217;1276pkt 1276fpkt"];
452--2695[label="1;13pkt 13fpkt"];
452--4009[label="1;13pkt 13fpkt"];
456--2695[label="1;2pkt 2fpkt"];
456--4009[label="1;2pkt 2fpkt"];
477--2695[label="1;5pkt 5fpkt"];
477--4009[label="1;5pkt 5fpkt"];
479--2695[label="1;3pkt 3fpkt"];
479--4009[label="1;3pkt 3fpkt"];
487--2695[label="1;3pkt 3fpkt"];
487--4009[label="1;3pkt 3fpkt"];
491--2695[label="1;2pkt 2fpkt"];
491--4009[label="1;2pkt 2fpkt"];
496--2695[label="1;1pkt 1fpkt"];
496--4009[label="1;1pkt 1fpkt"];
636--2695[label="1;3pkt 3fpkt"];
636--4009[label="1;3pkt 3fpkt"];
642--2695[label="1;1pkt 1fpkt"];
642--4009[label="1;1pkt 1fpkt"];
650--2695[label="1;9pkt 9fpkt"];
650--4009[label="1;9pkt 9fpkt"];
680--2695[label="1;2pkt 2fpkt"];
680--4009[label="1;2pkt 2fpkt"];
683--2695[label="1;62pkt 62fpkt"];
683--4009[label="1;62pkt 62fpkt"];
690--2695[label="1;1pkt 1fpkt"];
690--4009[label="1;1pkt 1fpkt"];
699--2695[label="1;2pkt 2fpkt"];
699--4009[label="1;2pkt 2fpkt"];
704--2695[label="1;2pkt 2fpkt"];
704--4009[label="1;2pkt 2fpkt"];
706--2695[label="1;1pkt 1fpkt"];
706--4009[label="1;1pkt 1fpkt"];
741--2695[label="1;4pkt 4fpkt"];
741--4009[label="1;4pkt 4fpkt"];
816--2695[label="1;4pkt 4fpkt"];
816--4009[label="1;4pkt 4fpkt"];
833--2695[label="1;2pkt 2fpkt"];
833--4009[label="1;2pkt 2fpkt"];
843--2695[label="1;3pkt 3fpkt"];
843--4009[label="1;3pkt 3fpkt"];
854--2695[label="1;3pkt 3fpkt"];
854--4009[label="1;3pkt 3fpkt"];
930--2695[label="1;1pkt 1fpkt"];
930--4009[label="1;1pkt 1fpkt"];
936--2695[label="1;4pkt 4fpkt"];
936--4009[label="1;4pkt 4fpkt"];
958--2695[label="1;8pkt 8fpkt"];
958--4009[label="1;8pkt 8fpkt"];
1003--2695[label="1;2pkt 2fpkt"];
1003--4009[label="1;2pkt 2fpkt"];
1004--2695[label="1;2pkt 2fpkt"];
1004--4009[label="1;2pkt 2fpkt"];
1006--2695[label="1;4pkt 4fpkt"];
1006--4009[label="1;4pkt 4fpkt"];
1007--2695[label="1;1pkt 1fpkt"];
1007--4009[label="1;1pkt 1fpkt"];
1019--2695[label="1;3pkt 3fpkt"];
1019--4009[label="1;3pkt 3fpkt"];
1109--2695[label="1;1pkt 1fpkt"];
1109--4009[label="1;1pkt 1fpkt"];
1120--2695[label="1;1pkt 1fpkt"];
1120--4009[label="1;1pkt 1fpkt"];
1123--2695[label="1;2pkt 2fpkt"];
1123--4009[label="1;2pkt 2fpkt"];
1128--2695[label="1;2pkt 2fpkt"];
1128--4009[label="1;2pkt 2fpkt"];
1173--2695[label="1;1pkt 1fpkt"];
1173--4009[label="1;1pkt 1fpkt"];
2695--4009[label="1;3308pkt 3308fpkt"];
</description>
    <slice>
      <filter src_ip="197.42.248.163" src_port="6881"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,501,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
160[label="196.127.60.210;s;13pkt 13fpkt", shape=diamond, color=yellow];
459[label="211.84.91.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
552[label="90.88.173.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
923[label="212.35.21.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
1002[label="90.165.33.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
3025[label="196.127.60.210;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4204[label="196.127.60.210;13pkt 13fpkt", shape=invtriangle, color=brown];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.60.210:21, 221.111.43.241:*}[23.0769%]&lt;BR/&gt;{196.127.60.210:*, 90.65.162.69:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.5909%)&lt;BR/&gt; 62751: (4.54545%)&lt;BR/&gt; 61449: (4.54545%)&lt;BR/&gt; 38310: (4.54545%)&lt;BR/&gt; 33060: (4.54545%)&gt;];
}
160--459[label="1;1pkt 1fpkt"];
160--552[label="1;1pkt 1fpkt"];
160--923[label="1;2pkt 2fpkt"];
160--1002[label="1;1pkt 1fpkt"];
160--3025[label="1;13pkt 13fpkt"];
160--4204[label="1;13pkt 13fpkt"];
459--3025[label="1;1pkt 1fpkt"];
459--4204[label="1;1pkt 1fpkt"];
552--3025[label="1;1pkt 1fpkt"];
552--4204[label="1;1pkt 1fpkt"];
923--3025[label="1;2pkt 2fpkt"];
923--4204[label="1;2pkt 2fpkt"];
1002--3025[label="1;1pkt 1fpkt"];
1002--4204[label="1;1pkt 1fpkt"];
3025--4204[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="90.65.162.69" src_ip="196.127.60.210"/>
      <filter dst_ip="221.111.43.241" src_ip="196.127.60.210" src_port="21"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
460[label="90.153.49.188;s;1369pkt 1369fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.153.49.188:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63544: (0.073046%)&lt;BR/&gt; 61458: (0.073046%)&lt;BR/&gt; 60789: (0.073046%)&lt;BR/&gt; 58890: (0.073046%)&gt;];
}
460--1138[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="90.153.49.188" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
470[label="160.204.60.87;s;3pkt 3fpkt", shape=diamond, color=yellow];
471[label="209.162.139.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.60.87:1124, 209.251.48.30:5050}[33.3333%]&lt;BR/&gt;{160.204.60.87:1152, 20.96.129.81:5190}[33.3333%]&lt;BR/&gt;{160.204.60.87:1914, 209.162.139.170:20636}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20636: (25%)&lt;BR/&gt; 1914: (25%)&lt;BR/&gt; 5190: (12.5%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 1152: (12.5%)&gt;];
}
470--471[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.162.139.170" dst_port="20636" src_ip="160.204.60.87" src_port="1914"/>
      <filter dst_ip="20.96.129.81" dst_port="5190" src_ip="160.204.60.87" src_port="1152"/>
      <filter dst_ip="209.251.48.30" dst_port="5050" src_ip="160.204.60.87" src_port="1124"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
481[label="196.127.58.145;s;194pkt 194fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.58.145:0, *:0}[99.4845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4845%)&lt;BR/&gt; 2335: (0.257732%)&lt;BR/&gt; 445: (0.257732%)&gt;];
}
481--656[label="0.00515464;1pkt 1fpkt"];
481--998[label="0.00515464;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.58.145"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45833,2.58735,901,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
32[label="159.31.182.131s;1pkt 1fpkt", shape=rectangle, color=red];
483[label="159.31.182.131;s;17pkt 17fpkt", shape=diamond, color=yellow];
621[label="217.16.104.223;d;4pkt 4fpkt", shape=diamond, color=yellow];
2439[label="159.31.182.131;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3885[label="159.31.182.131;17pkt 17fpkt", shape=invtriangle, color=brown];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.182.131:*, 217.16.104.223:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33400: (8.03571%)&lt;BR/&gt; 9000: (8.03571%)&lt;BR/&gt; 80: (8.03571%)&lt;BR/&gt; 33401: (7.14286%)&lt;BR/&gt; 51201: (6.25%)&gt;];
}
32--483[label="1;1pkt 1fpkt"];
32--621[label="1;1pkt 1fpkt"];
32--2439[label="1;1pkt 1fpkt"];
32--3885[label="1;1pkt 1fpkt"];
483--621[label="1;4pkt 4fpkt"];
483--2439[label="1;17pkt 17fpkt"];
483--3885[label="1;17pkt 17fpkt"];
621--2439[label="1;4pkt 4fpkt"];
621--3885[label="1;4pkt 4fpkt"];
2439--3885[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="217.16.104.223" src_ip="159.31.182.131"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
484[label="159.31.119.203;d;1470pkt 1470fpkt", shape=diamond, color=yellow];
485[label="167.65.96.19;s;1471pkt 1471fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.65.96.19:*, 159.31.119.203:9010}[99.7962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9010: (49.949%)&lt;BR/&gt; 65510: (0.034002%)&lt;BR/&gt; 65434: (0.034002%)&lt;BR/&gt; 65433: (0.034002%)&lt;BR/&gt; 65407: (0.034002%)&gt;];
}
484--485[label="0.99932;1469pkt 1469fpkt"];
484--540[label="0.000680272;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.119.203" dst_port="9010" src_ip="167.65.96.19"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="159.87.1.154"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055628" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
497[label="208.233.118.106;s;1650pkt 1650fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.233.118.106:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50.0606%)&lt;BR/&gt; 4522: (0.151515%)&lt;BR/&gt; 4552: (0.121212%)&lt;BR/&gt; 2605: (0.121212%)&lt;BR/&gt; 2033: (0.121212%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1433" src_ip="208.233.118.106"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43598,2.60963,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
73[label="203.225.13.94s;1pkt 1fpkt", shape=rectangle, color=red];
406[label="130.103.9.40;d;104pkt 104fpkt", shape=diamond, color=yellow];
533[label="217.19.21.94;s;108pkt 108fpkt", shape=diamond, color=yellow];
610[label="214.244.231.143;s;27pkt 27fpkt", shape=diamond, color=yellow];
961[label="130.103.91.183;d;60pkt 60fpkt", shape=diamond, color=yellow];
2031[label="90.76.110.75;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.19.21.94:80, 130.103.9.40:*}[31.8841%]&lt;BR/&gt;{217.19.20.23:80, 130.103.9.40:*}[20.7729%]&lt;BR/&gt;{217.19.21.94:80, 130.103.91.183:*}[20.2899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6764%)&lt;BR/&gt; 30844: (0.485437%)&lt;BR/&gt; 32605: (0.323625%)&lt;BR/&gt; 32433: (0.323625%)&lt;BR/&gt; 31899: (0.323625%)&gt;];
}
73--406[label="1;1pkt 1fpkt"];
73--533[label="1;1pkt 1fpkt"];
406--533[label="0.326923;34pkt 34fpkt"];
406--610[label="0.62963;17pkt 17fpkt"];
406--2031[label="0.444444;4pkt 4fpkt"];
533--961[label="0.7;42pkt 42fpkt"];
610--961[label="0.111111;3pkt 3fpkt"];
961--2031[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.9.40" src_ip="217.19.21.94" src_port="80"/>
      <filter dst_ip="130.103.91.183" src_ip="217.19.21.94" src_port="80"/>
      <filter dst_ip="130.103.9.40" src_ip="217.19.20.23" src_port="80"/>
    </slice>
    <from sec="1081054815" usec="0"/>
    <to sec="1081055448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
561[label="205.71.234.7;s;691pkt 691fpkt", shape=diamond, color=yellow];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.71.234.7:53, *:*}[92.6194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.2301%)&lt;BR/&gt; 25: (3.6903%)&lt;BR/&gt; 32768: (1.44718%)&lt;BR/&gt; 1028: (1.08538%)&lt;BR/&gt; 1024: (0.795948%)&gt;];
}
561--1267[label="0.00723589;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="205.71.234.7" src_port="53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
469[label="160.204.60.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
566[label="209.162.139.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
2746[label="209.162.139.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4044[label="209.162.139.170;1pkt 1fpkt", shape=invtriangle, color=brown];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.162.139.170:20636, 160.204.60.87:1914}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20636: (50%)&lt;BR/&gt; 1914: (50%)&gt;];
}
469--566[label="1;1pkt 1fpkt"];
469--2746[label="1;1pkt 1fpkt"];
469--4044[label="1;1pkt 1fpkt"];
566--2746[label="1;1pkt 1fpkt"];
566--4044[label="1;1pkt 1fpkt"];
2746--4044[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.60.87" dst_port="1914" src_ip="209.162.139.170" src_port="20636"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,051,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
238[label="210.214.89.156;s;935pkt 935fpkt", shape=diamond, color=yellow];
568[label="159.31.35.58;d;795pkt 795fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.214.89.156:21, 159.31.35.58:*}[99.6791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.8266%)&lt;BR/&gt; 20004: (0.0578035%)&lt;BR/&gt; 20002: (0.0578035%)&lt;BR/&gt; 20001: (0.0578035%)&lt;BR/&gt; 4361: (0.0578035%)&gt;];
}
238--568[label="1;795pkt 795fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.35.58" src_ip="210.214.89.156" src_port="21"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="159.31.3.7"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055268" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.144.109.224"/>
      <from sec="1081054801" usec="0"/>
      <to sec="1081055628" usec="0"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
586[label="197.42.249.227;s;760pkt 760fpkt", shape=diamond, color=yellow];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.42.249.227:53, *:*}[97.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.3289%)&lt;BR/&gt; 0: (2.10526%)&lt;BR/&gt; 32768: (1.90789%)&lt;BR/&gt; 32769: (1.44737%)&lt;BR/&gt; 1024: (1.38158%)&gt;];
}
586--1267[label="0.00921053;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="197.42.249.227" src_port="53"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
515[label="6.202.91.38;d;116pkt 116fpkt", shape=diamond, color=yellow];
597[label="197.32.58.113;s;69pkt 69fpkt", shape=diamond, color=yellow];
714[label="196.127.63.43;s;129pkt 129fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.63.43:*, 6.202.91.38:25}[37.3737%]&lt;BR/&gt;{197.32.58.113:25, 6.202.91.38:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.242%)&lt;BR/&gt; 80: (4.93631%)&lt;BR/&gt; 1032: (3.66242%)&lt;BR/&gt; 53: (3.66242%)&lt;BR/&gt; 3798: (0.477707%)&gt;];
}
515--597[label="0.84058;58pkt 58fpkt"];
515--714[label="0.5;58pkt 58fpkt"];
714--1010[label="0.0107527;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.202.91.38" dst_port="25" src_ip="196.127.63.43"/>
      <filter dst_ip="6.202.91.38" src_ip="197.32.58.113" src_port="25"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43598,2.60963,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
111[label="203.225.13.94d;1pkt 1fpkt", shape=rectangle, color=red];
604[label="130.103.9.40;s;193pkt 193fpkt", shape=diamond, color=yellow];
611[label="217.19.21.94;d;108pkt 108fpkt", shape=diamond, color=yellow];
1096[label="210.0.89.8;d;4pkt 4fpkt", shape=diamond, color=yellow];
1163[label="130.103.91.183;s;66pkt 66fpkt", shape=diamond, color=yellow];
1689[label="130.103.9.40;192pkt 192fpkt", shape=pentagon, color=darkviolet];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.9.40:*, 217.19.21.94:80}[25.4826%]&lt;BR/&gt;{130.103.91.183:*, *:80}[25.4826%]&lt;BR/&gt;{130.103.9.40:*, 217.19.20.23:80}[20.8494%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6454%)&lt;BR/&gt; 30844: (0.35461%)&lt;BR/&gt; 32364: (0.265957%)&lt;BR/&gt; 31899: (0.265957%)&lt;BR/&gt; 30868: (0.265957%)&gt;];
}
111--604[label="1;1pkt 1fpkt"];
111--611[label="1;1pkt 1fpkt"];
111--1689[label="1;1pkt 1fpkt"];
604--611[label="0.611111;66pkt 66fpkt"];
604--1096[label="1;4pkt 4fpkt"];
604--1287[label="0.0103627;2pkt 2fpkt"];
604--1302[label="0.0103627;2pkt 2fpkt"];
604--1689[label="1;192pkt 192fpkt"];
611--1163[label="0.636364;42pkt 42fpkt"];
611--1689[label="0.611111;66pkt 66fpkt"];
1096--1689[label="1;4pkt 4fpkt"];
1163--1287[label="0.106061;7pkt 7fpkt"];
1163--1302[label="0.106061;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.103.91.183"/>
      <filter dst_ip="217.19.21.94" dst_port="80" src_ip="130.103.9.40"/>
      <filter dst_ip="217.19.20.23" dst_port="80" src_ip="130.103.9.40"/>
    </slice>
    <from sec="1081054815" usec="0"/>
    <to sec="1081055691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
409[label="130.103.100.78;s;380pkt 380fpkt", shape=diamond, color=yellow];
615[label="217.165.10.140;d;12pkt 12fpkt", shape=diamond, color=yellow];
2055[label="130.103.100.78;525pkt 525fpkt", shape=pentagon, color=darkviolet];
3681[label="130.103.100.78;524pkt 524fpkt", shape=invtriangle, color=brown];
4537[label="130.103.100.78;524pkt 524fpkt", shape=invhouse, color=bisque];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.100.78:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33273: (0.127226%)&lt;BR/&gt; 33246: (0.127226%)&lt;BR/&gt; 33227: (0.127226%)&lt;BR/&gt; 33212: (0.127226%)&gt;];
}
409--615[label="1;12pkt 12fpkt"];
409--1287[label="0.00263158;1pkt 1fpkt"];
409--1302[label="0.00263158;1pkt 1fpkt"];
409--2055[label="1;380pkt 380fpkt"];
409--3681[label="0.997368;379pkt 379fpkt"];
409--4537[label="0.997368;379pkt 379fpkt"];
615--2055[label="1;12pkt 12fpkt"];
615--3681[label="1;12pkt 12fpkt"];
615--4537[label="1;12pkt 12fpkt"];
2055--3681[label="1;524pkt 524fpkt"];
2055--4537[label="1;524pkt 524fpkt"];
3681--4537[label="1;524pkt 524fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.103.100.78"/>
    </slice>
    <from sec="1081054827" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
437[label="132.237.96.128;d;318pkt 318fpkt", shape=diamond, color=yellow];
622[label="207.63.71.252;s;33pkt 33fpkt", shape=diamond, color=yellow];
3250[label="207.63.71.252;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4313[label="207.63.71.252;33pkt 33fpkt", shape=invtriangle, color=brown];
4858[label="207.63.71.252;33pkt 33fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 132.237.96.128:*}[53.1447%]&lt;BR/&gt;{*:0, 132.237.96.128:0}[46.5409%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.4444%)&lt;BR/&gt; 0: (32.8889%)&lt;BR/&gt; 4990: (0.666667%)&lt;BR/&gt; 3261: (0.666667%)&lt;BR/&gt; 4799: (0.555556%)&gt;];
}
437--622[label="1;33pkt 33fpkt"];
437--3250[label="1;33pkt 33fpkt"];
437--4313[label="1;33pkt 33fpkt"];
437--4858[label="1;33pkt 33fpkt"];
622--3250[label="1;33pkt 33fpkt"];
622--4313[label="1;33pkt 33fpkt"];
622--4858[label="1;33pkt 33fpkt"];
3250--4313[label="1;33pkt 33fpkt"];
3250--4858[label="1;33pkt 33fpkt"];
4313--4858[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="132.237.96.128" src_port="80"/>
      <filter dst_ip="132.237.96.128"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
204[label="159.31.34.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
641[label="20.226.233.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1668[label="20.226.233.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.226.233.37:80, 159.31.34.132:49684}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49684: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
204--641[label="1;1pkt 1fpkt"];
204--1668[label="1;1pkt 1fpkt"];
641--1668[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.34.132" dst_port="49684" src_ip="20.226.233.37" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.911153,2.67291,503,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
652[label="130.103.40.136;d;11pkt 11fpkt", shape=diamond, color=yellow];
653[label="23.38.26.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
4845[label="23.38.26.238;1pkt 1fpkt", shape=invhouse, color=bisque];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.141.77.205:80, 130.103.40.136:*}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.0769%)&lt;BR/&gt; 2281: (11.5385%)&lt;BR/&gt; 22: (11.5385%)&lt;BR/&gt; 1863: (7.69231%)&lt;BR/&gt; 52710: (3.84615%)&gt;];
}
652--653[label="1;1pkt 1fpkt"];
652--4845[label="1;1pkt 1fpkt"];
653--4845[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.40.136" src_ip="22.141.77.205" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
542[label="20.241.163.103;d;102pkt 102fpkt", shape=diamond, color=yellow];
658[label="130.103.110.193;s;127pkt 127fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.110.193:*, 20.241.163.103:80}[80.315%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9782%)&lt;BR/&gt; 58945: (4.80349%)&lt;BR/&gt; 2687: (0.436681%)&lt;BR/&gt; 2685: (0.436681%)&lt;BR/&gt; 2680: (0.436681%)&gt;];
}
542--658[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="20.241.163.103" dst_port="80" src_ip="130.103.110.193"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
671[label="159.31.32.81;d;4pkt 4fpkt", shape=diamond, color=yellow];
672[label="197.68.28.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.189.61.18:1863, 159.31.32.81:2448}[25%]&lt;BR/&gt;{197.68.28.22:554, 159.31.32.81:4265}[25%]&lt;BR/&gt;{197.68.28.17:80, 159.31.32.81:4464}[25%]&lt;BR/&gt;{197.68.28.17:80, 159.31.32.81:4465}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4265: (20%)&lt;BR/&gt; 554: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 4465: (10%)&lt;BR/&gt; 4464: (10%)&gt;];
}
671--672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.32.81" dst_port="4465" src_ip="197.68.28.17" src_port="80"/>
      <filter dst_ip="159.31.32.81" dst_port="4464" src_ip="197.68.28.17" src_port="80"/>
      <filter dst_ip="159.31.32.81" dst_port="4265" src_ip="197.68.28.22" src_port="554"/>
      <filter dst_ip="159.31.32.81" dst_port="2448" src_ip="192.189.61.18" src_port="1863"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.100.15.109"/>
      <from sec="1081054801" usec="0"/>
      <to sec="1081055268" usec="0"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
687[label="130.102.195.137;s;225pkt 225fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.195.137:1024, *:53}[37.7778%]&lt;BR/&gt;{130.102.195.137:25, *:*}[24%]&lt;BR/&gt;{130.102.195.137:*, *:113}[23.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24.6667%)&lt;BR/&gt; 1024: (18.8889%)&lt;BR/&gt; 25: (14.2222%)&lt;BR/&gt; 113: (11.5556%)&lt;BR/&gt; 33701: (0.444444%)&gt;];
}
687--1231[label="0.00444444;1pkt 1fpkt"];
687--1263[label="0.00444444;1pkt 1fpkt"];
687--1267[label="0.00444444;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="130.102.195.137" src_port="25"/>
      <filter dst_port="113" src_ip="130.102.195.137"/>
      <filter dst_port="53" src_ip="130.102.195.137" src_port="1024"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.214.171.50"/>
      <from sec="1081054802" usec="0"/>
      <to sec="1081055625" usec="0"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
398[label="130.103.124.118;d;284pkt 284fpkt", shape=diamond, color=yellow];
716[label="196.69.11.57;s;204pkt 204fpkt", shape=diamond, color=yellow];
1626[label="196.69.11.33;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.69.11.57:80, 130.103.124.118:*}[86.0627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1585: (0.190114%)&lt;BR/&gt; 1584: (0.190114%)&lt;BR/&gt; 1582: (0.190114%)&lt;BR/&gt; 1561: (0.190114%)&gt;];
}
398--716[label="1;204pkt 204fpkt"];
398--1626[label="0.921053;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.124.118" src_ip="196.69.11.57" src_port="80"/>
    </slice>
    <from sec="1081054812" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
662[label="4.101.207.185;d;105pkt 105fpkt", shape=diamond, color=yellow];
727[label="196.127.57.64;s;176pkt 176fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.57.64:80, 4.101.207.185:*}[69.2308%]&lt;BR/&gt;{196.127.57.64:80, 215.23.150.60:*}[24.1758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3922: (0.355872%)&lt;BR/&gt; 3884: (0.355872%)&lt;BR/&gt; 3883: (0.355872%)&lt;BR/&gt; 3882: (0.355872%)&gt;];
}
662--727[label="0.942857;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="4.101.207.185" src_ip="196.127.57.64" src_port="80"/>
      <filter dst_ip="215.23.150.60" src_ip="196.127.57.64" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.102.81.80"/>
      <from sec="1081054864" usec="0"/>
      <to sec="1081055373" usec="0"/>
    </slice>
    <from sec="1081054864" usec="0"/>
    <to sec="1081055373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="5.240.2.31"/>
      <from sec="1081054948" usec="0"/>
      <to sec="1081055184" usec="0"/>
    </slice>
    <from sec="1081054948" usec="0"/>
    <to sec="1081055184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43516,2.6376,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
8[label="130.102.28.35s;1pkt 1fpkt", shape=rectangle, color=red];
745[label="23.98.25.4;d;3pkt 3fpkt", shape=diamond, color=yellow];
894[label="130.102.28.35;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.28.35:554, 23.98.25.4:57345}[33.3333%]&lt;BR/&gt;{130.102.28.35:1755, 23.98.25.4:57346}[33.3333%]&lt;BR/&gt;{130.102.28.35:1755, 23.98.25.4:57345}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57345: (35.7143%)&lt;BR/&gt; 1755: (35.7143%)&lt;BR/&gt; 57346: (14.2857%)&lt;BR/&gt; 554: (14.2857%)&gt;];
}
8--745[label="1;1pkt 1fpkt"];
8--894[label="1;1pkt 1fpkt"];
745--894[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="23.98.25.4" dst_port="57345" src_ip="130.102.28.35" src_port="1755"/>
      <filter dst_ip="23.98.25.4" dst_port="57346" src_ip="130.102.28.35" src_port="1755"/>
      <filter dst_ip="23.98.25.4" dst_port="57345" src_ip="130.102.28.35" src_port="554"/>
    </slice>
    <from sec="1081054972" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
725[label="130.103.97.91;s;35pkt 35fpkt", shape=diamond, color=yellow];
746[label="21.2.56.242;d;23pkt 23fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.97.91:*, 21.2.56.242:80}[65.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1034%)&lt;BR/&gt; 1863: (4.31034%)&lt;BR/&gt; 1048: (2.58621%)&lt;BR/&gt; 53: (2.58621%)&lt;BR/&gt; 2748: (1.72414%)&gt;];
}
725--746[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="21.2.56.242" dst_port="80" src_ip="130.103.97.91"/>
    </slice>
    <from sec="1081054825" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="16.22.26.219"/>
      <from sec="1081055018" usec="0"/>
      <to sec="1081055358" usec="0"/>
    </slice>
    <from sec="1081055018" usec="0"/>
    <to sec="1081055358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
774[label="209.171.30.92;d;8pkt 8fpkt", shape=diamond, color=yellow];
775[label="130.103.67.74;s;15pkt 15fpkt", shape=diamond, color=yellow];
786[label="209.171.29.83;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.67.74:*, 209.171.30.92:80}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28618: (4%)&lt;BR/&gt; 28614: (4%)&lt;BR/&gt; 28611: (4%)&lt;BR/&gt; 28601: (4%)&gt;];
}
774--775[label="1;8pkt 8fpkt"];
775--786[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.171.30.92" dst_port="80" src_ip="130.103.67.74"/>
    </slice>
    <from sec="1081055111" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
804[label="130.102.229.79;s;466pkt 466fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.229.79:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
804--811[label="0.00269542;1pkt 1fpkt"];
804--825[label="0.00266667;1pkt 1fpkt"];
804--834[label="0.00293255;1pkt 1fpkt"];
804--937[label="0.00310559;1pkt 1fpkt"];
804--998[label="0.00374532;1pkt 1fpkt"];
804--1115[label="0.00315457;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="130.102.229.79"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
811[label="193.110.9.165;d;371pkt 371fpkt", shape=diamond, color=yellow];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 193.110.9.165:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
811--940[label="0.012987;1pkt 1fpkt"];
811--1018[label="0.00990099;1pkt 1fpkt"];
811--1367[label="0.0116279;1pkt 1fpkt"];
811--1632[label="0.00269542;1pkt 1fpkt"];
811--2061[label="0.00269542;1pkt 1fpkt"];
811--2132[label="0.00438596;1pkt 1fpkt"];
811--2647[label="0.00578035;1pkt 1fpkt"];
811--3451[label="0.00269542;1pkt 1fpkt"];
811--3684[label="0.00269542;1pkt 1fpkt"];
811--3716[label="0.00440529;1pkt 1fpkt"];
811--3746[label="0.0121951;1pkt 1fpkt"];
811--3986[label="0.00581395;1pkt 1fpkt"];
811--4413[label="0.00269542;1pkt 1fpkt"];
811--4539[label="0.00269542;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.110.9.165"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="16.98.88.243"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055447" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
825[label="128.10.7.132;d;375pkt 375fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 128.10.7.132:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
825--940[label="0.012987;1pkt 1fpkt"];
825--1018[label="0.00990099;1pkt 1fpkt"];
825--1139[label="0.011236;1pkt 1fpkt"];
825--1367[label="0.0116279;1pkt 1fpkt"];
825--1632[label="0.00266667;1pkt 1fpkt"];
825--2061[label="0.00266667;1pkt 1fpkt"];
825--2132[label="0.00438596;1pkt 1fpkt"];
825--2647[label="0.00578035;1pkt 1fpkt"];
825--3451[label="0.00266667;1pkt 1fpkt"];
825--3684[label="0.00266667;1pkt 1fpkt"];
825--3716[label="0.00440529;1pkt 1fpkt"];
825--3746[label="0.0121951;1pkt 1fpkt"];
825--3986[label="0.00581395;1pkt 1fpkt"];
825--4413[label="0.00266667;1pkt 1fpkt"];
825--4539[label="0.00266667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.10.7.132"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.102.244.175"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055628" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.42.225.66"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055538" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
834[label="20.118.182.29;d;341pkt 341fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 20.118.182.29:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
834--861[label="0.0119048;1pkt 1fpkt"];
834--1018[label="0.00990099;1pkt 1fpkt"];
834--1139[label="0.011236;1pkt 1fpkt"];
834--1632[label="0.00293255;1pkt 1fpkt"];
834--2061[label="0.00293255;1pkt 1fpkt"];
834--2132[label="0.00438596;1pkt 1fpkt"];
834--2437[label="0.0104167;1pkt 1fpkt"];
834--2647[label="0.00578035;1pkt 1fpkt"];
834--3451[label="0.00293255;1pkt 1fpkt"];
834--3684[label="0.00293255;1pkt 1fpkt"];
834--3716[label="0.00440529;1pkt 1fpkt"];
834--3884[label="0.0105263;1pkt 1fpkt"];
834--3986[label="0.00581395;1pkt 1fpkt"];
834--4413[label="0.00293255;1pkt 1fpkt"];
834--4539[label="0.00293255;1pkt 1fpkt"];
834--4643[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.118.182.29"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.103.140.84"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055403" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.103.148.153"/>
      <from sec="1081054861" usec="0"/>
      <to sec="1081055412" usec="0"/>
    </slice>
    <from sec="1081054861" usec="0"/>
    <to sec="1081055412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.103.40.236"/>
      <from sec="1081055010" usec="0"/>
      <to sec="1081055338" usec="0"/>
    </slice>
    <from sec="1081055010" usec="0"/>
    <to sec="1081055338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
789[label="160.204.23.147;d;15pkt 15fpkt", shape=diamond, color=yellow];
909[label="22.140.203.229;s;15pkt 15fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.140.203.229:80, 160.204.23.147:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4971: (3.33333%)&lt;BR/&gt; 4970: (3.33333%)&lt;BR/&gt; 4969: (3.33333%)&lt;BR/&gt; 4968: (3.33333%)&gt;];
}
789--909[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.23.147" src_ip="22.140.203.229" src_port="80"/>
    </slice>
    <from sec="1081055189" usec="0"/>
    <to sec="1081055316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
937[label="21.104.169.211;d;322pkt 322fpkt", shape=diamond, color=yellow];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 21.104.169.211:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
937--940[label="0.012987;1pkt 1fpkt"];
937--1139[label="0.011236;1pkt 1fpkt"];
937--1367[label="0.0116279;1pkt 1fpkt"];
937--1632[label="0.00310559;1pkt 1fpkt"];
937--2061[label="0.00310559;1pkt 1fpkt"];
937--2132[label="0.00438596;1pkt 1fpkt"];
937--2647[label="0.00578035;1pkt 1fpkt"];
937--3451[label="0.00310559;1pkt 1fpkt"];
937--3684[label="0.00310559;1pkt 1fpkt"];
937--3716[label="0.00440529;1pkt 1fpkt"];
937--3746[label="0.0121951;1pkt 1fpkt"];
937--3986[label="0.00581395;1pkt 1fpkt"];
937--4413[label="0.00310559;1pkt 1fpkt"];
937--4539[label="0.00310559;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="21.104.169.211"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.127.58.145"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055448" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
950[label="130.102.83.149;s;84pkt 84fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.83.149:*, *:25}[58.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (38.6905%)&lt;BR/&gt; 113: (8.92857%)&lt;BR/&gt; 80: (1.78571%)&lt;BR/&gt; 58906: (0.595238%)&lt;BR/&gt; 58905: (0.595238%)&gt;];
}
950--1010[label="0.0119048;1pkt 1fpkt"];
950--1287[label="0.0119048;1pkt 1fpkt"];
950--1302[label="0.0119048;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="130.102.83.149"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
960[label="130.103.110.209;s;102pkt 102fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.110.209:*, 217.103.95.28:80}[78.4314%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 86: (4.90196%)&lt;BR/&gt; 0: (0.980392%)&lt;BR/&gt; 3103: (0.490196%)&lt;BR/&gt; 3102: (0.490196%)&gt;];
}
960--1287[label="0.00980392;1pkt 1fpkt"];
960--1302[label="0.00980392;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.103.95.28" dst_port="80" src_ip="130.103.110.209"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
790[label="160.204.23.147;s;15pkt 15fpkt", shape=diamond, color=yellow];
983[label="22.140.203.229;d;15pkt 15fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.23.147:*, 22.140.203.229:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4971: (3.33333%)&lt;BR/&gt; 4970: (3.33333%)&lt;BR/&gt; 4969: (3.33333%)&lt;BR/&gt; 4968: (3.33333%)&gt;];
}
790--983[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="22.140.203.229" dst_port="80" src_ip="160.204.23.147"/>
    </slice>
    <from sec="1081055189" usec="0"/>
    <to sec="1081055316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="159.31.17.184"/>
      <from sec="1081055337" usec="0"/>
      <to sec="1081055627" usec="0"/>
    </slice>
    <from sec="1081055337" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
276[label="130.103.6.22;s;313pkt 313fpkt", shape=diamond, color=yellow];
996[label="210.158.39.33;d;87pkt 87fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.6.22:*, 210.158.39.33:80}[31.6294%]&lt;BR/&gt;{130.103.6.22:*, 210.158.64.243:80}[22.0447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5%)&lt;BR/&gt; 0: (0.5%)&lt;BR/&gt; 23697: (0.25%)&lt;BR/&gt; 23658: (0.25%)&lt;BR/&gt; 23653: (0.25%)&gt;];
}
276--996[label="1;87pkt 87fpkt"];
276--1287[label="0.00638978;2pkt 2fpkt"];
276--1302[label="0.00638978;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.158.39.33" dst_port="80" src_ip="130.103.6.22"/>
      <filter dst_ip="210.158.64.243" dst_port="80" src_ip="130.103.6.22"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.6.28.47"/>
      <from sec="1081054800" usec="0"/>
      <to sec="1081055538" usec="0"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
1018[label="196.127.62.174;s;101pkt 101fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.62.174:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="196.127.62.174"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="159.31.33.131"/>
      <from sec="1081054801" usec="0"/>
      <to sec="1081055627" usec="0"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.127.57.217"/>
      <from sec="1081054801" usec="0"/>
      <to sec="1081055628" usec="0"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="16.98.88.134"/>
      <from sec="1081054806" usec="0"/>
      <to sec="1081055538" usec="0"/>
    </slice>
    <from sec="1081054806" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.102.28.65"/>
      <from sec="1081054814" usec="0"/>
      <to sec="1081055537" usec="0"/>
    </slice>
    <from sec="1081054814" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
595[label="160.204.62.204;s;207pkt 207fpkt", shape=diamond, color=yellow];
1062[label="217.44.84.242;d;43pkt 43fpkt", shape=diamond, color=yellow];
2999[label="160.204.62.204;284pkt 284fpkt", shape=pentagon, color=darkviolet];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.62.204:*, *:80}[94.3662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0974%)&lt;BR/&gt; 51200: (0.93633%)&lt;BR/&gt; 8080: (0.655431%)&lt;BR/&gt; 9000: (0.374532%)&lt;BR/&gt; 8688: (0.374532%)&gt;];
}
595--1062[label="1;43pkt 43fpkt"];
595--2999[label="1;207pkt 207fpkt"];
1062--2999[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="160.204.62.204"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
963[label="130.103.99.66;s;39pkt 39fpkt", shape=diamond, color=yellow];
1066[label="221.44.84.92;d;29pkt 29fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.99.66:*, 221.44.84.92:80}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2647%)&lt;BR/&gt; 64496: (1.47059%)&lt;BR/&gt; 64495: (1.47059%)&lt;BR/&gt; 64494: (1.47059%)&lt;BR/&gt; 64493: (1.47059%)&gt;];
}
963--1066[label="0.586207;17pkt 17fpkt"];
963--1287[label="0.025641;1pkt 1fpkt"];
963--1302[label="0.025641;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.44.84.92" dst_port="80" src_ip="130.103.99.66"/>
    </slice>
    <from sec="1081054818" usec="0"/>
    <to sec="1081055518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
967[label="130.102.30.169;s;67pkt 67fpkt", shape=diamond, color=yellow];
1084[label="17.81.238.63;d;49pkt 49fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.30.169:80, 17.81.238.63:*}[73.1343%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.569%)&lt;BR/&gt; 3907: (0.862069%)&lt;BR/&gt; 3905: (0.862069%)&lt;BR/&gt; 3903: (0.862069%)&lt;BR/&gt; 3901: (0.862069%)&gt;];
}
967--1084[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="17.81.238.63" src_ip="130.102.30.169" src_port="80"/>
    </slice>
    <from sec="1081054837" usec="0"/>
    <to sec="1081055611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
1115[label="197.189.155.239;d;317pkt 317fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 197.189.155.239:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1115--1367[label="0.0116279;1pkt 1fpkt"];
1115--1632[label="0.00315457;1pkt 1fpkt"];
1115--2061[label="0.00315457;1pkt 1fpkt"];
1115--2132[label="0.00438596;1pkt 1fpkt"];
1115--2437[label="0.0104167;1pkt 1fpkt"];
1115--2647[label="0.00578035;1pkt 1fpkt"];
1115--3451[label="0.00315457;1pkt 1fpkt"];
1115--3684[label="0.00315457;1pkt 1fpkt"];
1115--3716[label="0.00440529;1pkt 1fpkt"];
1115--3746[label="0.0121951;1pkt 1fpkt"];
1115--3884[label="0.0105263;1pkt 1fpkt"];
1115--3986[label="0.00581395;1pkt 1fpkt"];
1115--4413[label="0.00315457;1pkt 1fpkt"];
1115--4539[label="0.00315457;1pkt 1fpkt"];
1115--4643[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.189.155.239"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1139[label="196.127.58.152;s;89pkt 89fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.58.152:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="196.127.58.152"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.103.183.128"/>
      <from sec="1081054803" usec="0"/>
      <to sec="1081055625" usec="0"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.204.146.200"/>
      <from sec="1081054814" usec="0"/>
      <to sec="1081055627" usec="0"/>
    </slice>
    <from sec="1081054814" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.103.21.37"/>
      <from sec="1081055041" usec="0"/>
      <to sec="1081055609" usec="0"/>
    </slice>
    <from sec="1081055041" usec="0"/>
    <to sec="1081055609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.106.222.40"/>
      <from sec="1081055501" usec="0"/>
      <to sec="1081055537" usec="0"/>
    </slice>
    <from sec="1081055501" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="154.123.13.61"/>
      <from sec="1081055548" usec="0"/>
      <to sec="1081055619" usec="0"/>
    </slice>
    <from sec="1081055548" usec="0"/>
    <to sec="1081055619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="154.123.13.61"/>
      <from sec="1081055548" usec="0"/>
      <to sec="1081055619" usec="0"/>
    </slice>
    <from sec="1081055548" usec="0"/>
    <to sec="1081055619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
1215[label="159.31.155.62;d;5pkt 5fpkt", shape=diamond, color=yellow];
1216[label="194.200.127.229;s;3pkt 3fpkt", shape=diamond, color=yellow];
2775[label="108.134.174.173;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.134.174.173:80, 159.31.155.62:*}[57.1429%]&lt;BR/&gt;{194.200.127.229:80, 159.31.155.62:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3399: (8.33333%)&lt;BR/&gt; 3398: (8.33333%)&lt;BR/&gt; 3396: (8.33333%)&lt;BR/&gt; 3395: (8.33333%)&gt;];
}
1215--1216[label="1;3pkt 3fpkt"];
1215--2775[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.155.62" src_ip="108.134.174.173" src_port="80"/>
      <filter dst_ip="159.31.155.62" src_ip="194.200.127.229" src_port="80"/>
    </slice>
    <from sec="1081055585" usec="0"/>
    <to sec="1081055641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.189.61.0"/>
    </slice>
    <from sec="1081054822" usec="0"/>
    <to sec="1081055688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.130.144.0"/>
    </slice>
    <from sec="1081055382" usec="0"/>
    <to sec="1081055399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.185.147.0"/>
    </slice>
    <from sec="1081055546" usec="0"/>
    <to sec="1081055598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.60.209.0"/>
    </slice>
    <from sec="1081055389" usec="0"/>
    <to sec="1081055428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.189.221.0"/>
    </slice>
    <from sec="1081055290" usec="0"/>
    <to sec="1081055295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.208.3.2"/>
    </slice>
    <from sec="1081054975" usec="0"/>
    <to sec="1081054982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.167.44.2"/>
    </slice>
    <from sec="1081055331" usec="0"/>
    <to sec="1081055339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.213.241.2"/>
    </slice>
    <from sec="1081054975" usec="0"/>
    <to sec="1081054980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.149.15.3"/>
    </slice>
    <from sec="1081055076" usec="0"/>
    <to sec="1081055092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.32.52.3"/>
    </slice>
    <from sec="1081055460" usec="0"/>
    <to sec="1081055492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.167.160.3"/>
    </slice>
    <from sec="1081055524" usec="0"/>
    <to sec="1081055559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.208.30.4"/>
    </slice>
    <from sec="1081055082" usec="0"/>
    <to sec="1081055100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.81.200.4"/>
    </slice>
    <from sec="1081055546" usec="0"/>
    <to sec="1081055575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.196.249.6"/>
    </slice>
    <from sec="1081055568" usec="0"/>
    <to sec="1081055677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.145.252.6"/>
    </slice>
    <from sec="1081054886" usec="0"/>
    <to sec="1081054910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.131.117.7"/>
    </slice>
    <from sec="1081055104" usec="0"/>
    <to sec="1081055128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
1097[label="210.0.89.8;s;4pkt 4fpkt", shape=diamond, color=yellow];
1406[label="210.0.89.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3315[label="210.0.89.8;3pkt 3fpkt", shape=invtriangle, color=brown];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.0.89.8:80, 130.103.9.40:15309}[25%]&lt;BR/&gt;{210.0.89.8:80, 130.103.9.40:15338}[25%]&lt;BR/&gt;{210.0.89.8:80, 130.103.9.40:15966}[25%]&lt;BR/&gt;{210.0.89.8:80, 130.103.9.40:27932}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27932: (13.6364%)&lt;BR/&gt; 15966: (13.6364%)&lt;BR/&gt; 15338: (13.6364%)&lt;BR/&gt; 15309: (9.09091%)&gt;];
}
1097--1406[label="1;4pkt 4fpkt"];
1097--3315[label="1;3pkt 3fpkt"];
1406--3315[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.9.40" dst_port="27932" src_ip="210.0.89.8" src_port="80"/>
      <filter dst_ip="130.103.9.40" dst_port="15966" src_ip="210.0.89.8" src_port="80"/>
      <filter dst_ip="130.103.9.40" dst_port="15338" src_ip="210.0.89.8" src_port="80"/>
      <filter dst_ip="130.103.9.40" dst_port="15309" src_ip="210.0.89.8" src_port="80"/>
    </slice>
    <from sec="1081055441" usec="0"/>
    <to sec="1081055499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.138.223.8"/>
    </slice>
    <from sec="1081055457" usec="0"/>
    <to sec="1081055484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40949,2.61752,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
67[label="199.25.33.9s;243pkt 243fpkt", shape=rectangle, color=red];
1413[label="199.25.33.9;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3319[label="199.25.33.9;254pkt 254fpkt", shape=invtriangle, color=brown];
4345[label="199.25.33.9;254pkt 254fpkt", shape=invhouse, color=bisque];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.25.33.9:62865, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62865: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
67--1413[label="1;243pkt 243fpkt"];
67--3319[label="1;243pkt 243fpkt"];
67--4345[label="1;243pkt 243fpkt"];
1413--3319[label="1;254pkt 254fpkt"];
1413--4345[label="1;254pkt 254fpkt"];
3319--4345[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.25.33.9" src_port="62865"/>
    </slice>
    <from sec="1081055628" usec="0"/>
    <to sec="1081055643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.93.136.9"/>
    </slice>
    <from sec="1081054853" usec="0"/>
    <to sec="1081054864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.82.165.9"/>
    </slice>
    <from sec="1081054994" usec="0"/>
    <to sec="1081055039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.17.36.10"/>
    </slice>
    <from sec="1081054875" usec="0"/>
    <to sec="1081054886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.199.162.10"/>
    </slice>
    <from sec="1081054976" usec="0"/>
    <to sec="1081054982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.206.192.10"/>
    </slice>
    <from sec="1081055109" usec="0"/>
    <to sec="1081055148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.32.0.11"/>
    </slice>
    <from sec="1081055524" usec="0"/>
    <to sec="1081055539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.194.40.11"/>
    </slice>
    <from sec="1081055131" usec="0"/>
    <to sec="1081055203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.37.103.11"/>
    </slice>
    <from sec="1081055554" usec="0"/>
    <to sec="1081055588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.218.165.11"/>
    </slice>
    <from sec="1081055114" usec="0"/>
    <to sec="1081055130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.120.167.11"/>
    </slice>
    <from sec="1081055196" usec="0"/>
    <to sec="1081055230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.33.43.12"/>
    </slice>
    <from sec="1081055012" usec="0"/>
    <to sec="1081055031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.100.250.12"/>
    </slice>
    <from sec="1081055350" usec="0"/>
    <to sec="1081055666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.196.0.13"/>
    </slice>
    <from sec="1081055075" usec="0"/>
    <to sec="1081055106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.42.23.13"/>
    </slice>
    <from sec="1081055208" usec="0"/>
    <to sec="1081055212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.82.53.13"/>
    </slice>
    <from sec="1081055022" usec="0"/>
    <to sec="1081055034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.132.68.13"/>
    </slice>
    <from sec="1081055030" usec="0"/>
    <to sec="1081055484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.213.174.13"/>
    </slice>
    <from sec="1081055488" usec="0"/>
    <to sec="1081055496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.213.184.13"/>
    </slice>
    <from sec="1081054903" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.186.239.13"/>
    </slice>
    <from sec="1081055366" usec="0"/>
    <to sec="1081055376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.119.107.14"/>
    </slice>
    <from sec="1081055043" usec="0"/>
    <to sec="1081055074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.20.120.14"/>
    </slice>
    <from sec="1081055636" usec="0"/>
    <to sec="1081055660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.55.131.14"/>
    </slice>
    <from sec="1081055017" usec="0"/>
    <to sec="1081055024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.5.219.14"/>
    </slice>
    <from sec="1081055677" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.69.15"/>
    </slice>
    <from sec="1081054909" usec="0"/>
    <to sec="1081055626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.234.134.15"/>
    </slice>
    <from sec="1081055056" usec="0"/>
    <to sec="1081055067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.13.187.15"/>
    </slice>
    <from sec="1081055253" usec="0"/>
    <to sec="1081055267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.144.11.16"/>
    </slice>
    <from sec="1081055540" usec="0"/>
    <to sec="1081055562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.168.78.16"/>
    </slice>
    <from sec="1081054878" usec="0"/>
    <to sec="1081054883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.192.144.16"/>
    </slice>
    <from sec="1081055119" usec="0"/>
    <to sec="1081055133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.192.20.17"/>
    </slice>
    <from sec="1081055558" usec="0"/>
    <to sec="1081055595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.3.84.17"/>
    </slice>
    <from sec="1081055064" usec="0"/>
    <to sec="1081055076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.137.109.17"/>
    </slice>
    <from sec="1081054985" usec="0"/>
    <to sec="1081055000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.84.169.18"/>
    </slice>
    <from sec="1081054833" usec="0"/>
    <to sec="1081054842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.102.201.18"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.189.213.18"/>
    </slice>
    <from sec="1081054921" usec="0"/>
    <to sec="1081054925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.137.20.19"/>
    </slice>
    <from sec="1081055042" usec="0"/>
    <to sec="1081055067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.158.117.19"/>
    </slice>
    <from sec="1081055535" usec="0"/>
    <to sec="1081055545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
197[label="132.24.225.19;s;6916pkt 6916fpkt", shape=diamond, color=yellow];
1510[label="132.24.225.19;7361pkt 7361fpkt", shape=pentagon, color=darkviolet];
3378[label="132.24.225.19;7361pkt 7361fpkt", shape=invtriangle, color=brown];
4374[label="132.24.225.19;7361pkt 7361fpkt", shape=invhouse, color=bisque];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.24.225.19:25, *:*}[93.969%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.0516%)&lt;BR/&gt; 53: (2.72078%)&lt;BR/&gt; 113: (0.427601%)&lt;BR/&gt; 0: (0.262078%)&lt;BR/&gt; 33701: (0.0586227%)&gt;];
}
197--1267[label="0.00207361;4pkt 4fpkt"];
197--1510[label="0.999855;6915pkt 6915fpkt"];
197--3378[label="0.999855;6915pkt 6915fpkt"];
197--4374[label="0.999855;6915pkt 6915fpkt"];
1510--3378[label="1;7361pkt 7361fpkt"];
1510--4374[label="1;7361pkt 7361fpkt"];
3378--4374[label="1;7361pkt 7361fpkt"];
</description>
    <slice>
      <filter src_ip="132.24.225.19" src_port="25"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.32.26.20"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.206.156.20"/>
    </slice>
    <from sec="1081055478" usec="0"/>
    <to sec="1081055495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.168.163.20"/>
    </slice>
    <from sec="1081055592" usec="0"/>
    <to sec="1081055603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.16.173.20"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.211.185.20"/>
    </slice>
    <from sec="1081055347" usec="0"/>
    <to sec="1081055366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.198.234.20"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081054992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.88.250.20"/>
    </slice>
    <from sec="1081054974" usec="0"/>
    <to sec="1081054995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.208.0.21"/>
    </slice>
    <from sec="1081055667" usec="0"/>
    <to sec="1081055677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.13.10.21"/>
    </slice>
    <from sec="1081055501" usec="0"/>
    <to sec="1081055515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.145.82.21"/>
    </slice>
    <from sec="1081055466" usec="0"/>
    <to sec="1081055479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.145.114.21"/>
    </slice>
    <from sec="1081055581" usec="0"/>
    <to sec="1081055598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
1537[label="130.102.141.22;398pkt 398fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.141.22:53, *:*}[96.4824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.2764%)&lt;BR/&gt; 33701: (1.75879%)&lt;BR/&gt; 32768: (1.50754%)&lt;BR/&gt; 1024: (1.50754%)&lt;BR/&gt; 32770: (0.879397%)&gt;];
}
</description>
    <slice>
      <filter src_ip="130.102.141.22" src_port="53"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.8.166.22"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081054811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.188.23.23"/>
    </slice>
    <from sec="1081055547" usec="0"/>
    <to sec="1081055555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.14.153.23"/>
    </slice>
    <from sec="1081055649" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.203.40.24"/>
    </slice>
    <from sec="1081055028" usec="0"/>
    <to sec="1081055086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40949,2.61752,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
62[label="160.204.60.107s;1pkt 1fpkt", shape=rectangle, color=red];
1547[label="210.201.65.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3403[label="210.201.65.24;1pkt 1fpkt", shape=invtriangle, color=brown];
4390[label="210.201.65.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.201.65.24:1216, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1216: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
62--1547[label="1;1pkt 1fpkt"];
62--3403[label="1;1pkt 1fpkt"];
62--4390[label="1;1pkt 1fpkt"];
1547--3403[label="1;1pkt 1fpkt"];
1547--4390[label="1;1pkt 1fpkt"];
3403--4390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.201.65.24" src_port="1216"/>
    </slice>
    <from sec="1081055659" usec="0"/>
    <to sec="1081055678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.3.83.24"/>
    </slice>
    <from sec="1081055205" usec="0"/>
    <to sec="1081055222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.134.142.24"/>
    </slice>
    <from sec="1081055391" usec="0"/>
    <to sec="1081055404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.195.146.24"/>
    </slice>
    <from sec="1081055011" usec="0"/>
    <to sec="1081055016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.149.5.25"/>
    </slice>
    <from sec="1081055356" usec="0"/>
    <to sec="1081055367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.42.30.25"/>
    </slice>
    <from sec="1081055450" usec="0"/>
    <to sec="1081055457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.84.195.25"/>
    </slice>
    <from sec="1081054851" usec="0"/>
    <to sec="1081054863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.244.69.26"/>
    </slice>
    <from sec="1081055010" usec="0"/>
    <to sec="1081055022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.5.107.26"/>
    </slice>
    <from sec="1081054970" usec="0"/>
    <to sec="1081054986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.139.119.26"/>
    </slice>
    <from sec="1081055172" usec="0"/>
    <to sec="1081055187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.129.148.26"/>
    </slice>
    <from sec="1081055491" usec="0"/>
    <to sec="1081055500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.206.153.26"/>
    </slice>
    <from sec="1081055242" usec="0"/>
    <to sec="1081055266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.228.19.27"/>
    </slice>
    <from sec="1081054825" usec="0"/>
    <to sec="1081054836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.83.50.27"/>
    </slice>
    <from sec="1081055213" usec="0"/>
    <to sec="1081055223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.88.72.27"/>
    </slice>
    <from sec="1081055018" usec="0"/>
    <to sec="1081055023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.92.27"/>
    </slice>
    <from sec="1081055371" usec="0"/>
    <to sec="1081055439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
959[label="130.103.110.209;d;70pkt 70fpkt", shape=diamond, color=yellow];
1584[label="217.103.95.28;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.103.95.28:80, 130.103.110.209:*}[85.8268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2067%)&lt;BR/&gt; 86: (2.23464%)&lt;BR/&gt; 3068: (0.558659%)&lt;BR/&gt; 3067: (0.558659%)&lt;BR/&gt; 3066: (0.558659%)&gt;];
}
959--1584[label="0.742857;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.110.209" src_ip="217.103.95.28" src_port="80"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081055688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.106.232.29"/>
    </slice>
    <from sec="1081055394" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.37.68.30"/>
    </slice>
    <from sec="1081055366" usec="0"/>
    <to sec="1081055375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.202.210.30"/>
    </slice>
    <from sec="1081055440" usec="0"/>
    <to sec="1081055450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.194.212.30"/>
    </slice>
    <from sec="1081055626" usec="0"/>
    <to sec="1081055656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.145.241.30"/>
    </slice>
    <from sec="1081055568" usec="0"/>
    <to sec="1081055581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.13.249.30"/>
    </slice>
    <from sec="1081055500" usec="0"/>
    <to sec="1081055519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.45.31"/>
    </slice>
    <from sec="1081054965" usec="0"/>
    <to sec="1081054997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.6.73.31"/>
    </slice>
    <from sec="1081054960" usec="0"/>
    <to sec="1081054978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.170.16.32"/>
    </slice>
    <from sec="1081055087" usec="0"/>
    <to sec="1081055098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.128.41.32"/>
    </slice>
    <from sec="1081055073" usec="0"/>
    <to sec="1081055085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.80.84.32"/>
    </slice>
    <from sec="1081054880" usec="0"/>
    <to sec="1081054947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.202.129.32"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.146.212.32"/>
    </slice>
    <from sec="1081055008" usec="0"/>
    <to sec="1081055015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.174.31.33"/>
    </slice>
    <from sec="1081054833" usec="0"/>
    <to sec="1081054868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
559[label="196.127.56.33;s;809pkt 809fpkt", shape=diamond, color=yellow];
1632[label="196.127.56.33;881pkt 881fpkt", shape=pentagon, color=darkviolet];
3451[label="196.127.56.33;881pkt 881fpkt", shape=invtriangle, color=brown];
4413[label="196.127.56.33;880pkt 880fpkt", shape=invhouse, color=bisque];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.56.33:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
559--593[label="0.0588235;1pkt 1fpkt"];
559--656[label="0.00246305;1pkt 1fpkt"];
559--811[label="0.00269542;1pkt 1fpkt"];
559--825[label="0.00266667;1pkt 1fpkt"];
559--834[label="0.00293255;1pkt 1fpkt"];
559--937[label="0.00310559;1pkt 1fpkt"];
559--998[label="0.00374532;1pkt 1fpkt"];
559--1115[label="0.00315457;1pkt 1fpkt"];
559--1632[label="1;809pkt 809fpkt"];
559--3451[label="1;809pkt 809fpkt"];
559--4413[label="0.998764;808pkt 808fpkt"];
1632--3451[label="1;881pkt 881fpkt"];
1632--4413[label="1;880pkt 880fpkt"];
3451--4413[label="1;880pkt 880fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.56.33"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.62.170.33"/>
    </slice>
    <from sec="1081055475" usec="0"/>
    <to sec="1081055509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.142.195.33"/>
    </slice>
    <from sec="1081054837" usec="0"/>
    <to sec="1081054847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.167.44.34"/>
    </slice>
    <from sec="1081055549" usec="0"/>
    <to sec="1081055560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.135.76.34"/>
    </slice>
    <from sec="1081055251" usec="0"/>
    <to sec="1081055270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.73.161.34"/>
    </slice>
    <from sec="1081055442" usec="0"/>
    <to sec="1081055456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.16.89.35"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.30.196.35"/>
    </slice>
    <from sec="1081055246" usec="0"/>
    <to sec="1081055454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.81.200.35"/>
    </slice>
    <from sec="1081055110" usec="0"/>
    <to sec="1081055122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
335[label="169.4.236.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
344[label="206.35.188.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
349[label="208.163.180.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
367[label="5.59.236.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
473[label="5.55.170.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
557[label="20.198.11.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
599[label="6.146.77.23;d;2pkt 2fpkt", shape=diamond, color=yellow];
635[label="132.237.25.36;s;2009pkt 2009fpkt", shape=diamond, color=yellow];
643[label="7.128.30.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
707[label="4.178.94.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
852[label="204.182.65.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
1654[label="132.237.25.36;2480pkt 2480fpkt", shape=pentagon, color=darkviolet];
3466[label="132.237.25.36;2480pkt 2480fpkt", shape=invtriangle, color=brown];
4420[label="132.237.25.36;2480pkt 2480fpkt", shape=invhouse, color=bisque];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.25.36:*, *:4662}[71.371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (35.7981%)&lt;BR/&gt; 5662: (1.54334%)&lt;BR/&gt; 4661: (1.47463%)&lt;BR/&gt; 80: (0.845666%)&lt;BR/&gt; 1104: (0.660677%)&gt;];
}
335--635[label="1;1pkt 1fpkt"];
335--1654[label="1;1pkt 1fpkt"];
335--3466[label="1;1pkt 1fpkt"];
335--4420[label="1;1pkt 1fpkt"];
344--635[label="1;1pkt 1fpkt"];
344--1654[label="1;1pkt 1fpkt"];
344--3466[label="1;1pkt 1fpkt"];
344--4420[label="1;1pkt 1fpkt"];
349--635[label="1;1pkt 1fpkt"];
349--1654[label="1;1pkt 1fpkt"];
349--3466[label="1;1pkt 1fpkt"];
349--4420[label="1;1pkt 1fpkt"];
367--635[label="1;1pkt 1fpkt"];
367--1654[label="1;1pkt 1fpkt"];
367--3466[label="1;1pkt 1fpkt"];
367--4420[label="1;1pkt 1fpkt"];
473--635[label="1;1pkt 1fpkt"];
473--1654[label="1;1pkt 1fpkt"];
473--3466[label="1;1pkt 1fpkt"];
473--4420[label="1;1pkt 1fpkt"];
557--635[label="1;1pkt 1fpkt"];
557--1654[label="1;1pkt 1fpkt"];
557--3466[label="1;1pkt 1fpkt"];
557--4420[label="1;1pkt 1fpkt"];
599--635[label="1;2pkt 2fpkt"];
599--1654[label="1;2pkt 2fpkt"];
599--3466[label="1;2pkt 2fpkt"];
599--4420[label="1;2pkt 2fpkt"];
635--643[label="1;1pkt 1fpkt"];
635--707[label="1;1pkt 1fpkt"];
635--852[label="1;1pkt 1fpkt"];
635--1286[label="0.00273224;1pkt 1fpkt"];
635--1301[label="0.00273224;1pkt 1fpkt"];
635--1315[label="0.00273224;1pkt 1fpkt"];
635--1654[label="1;2009pkt 2009fpkt"];
635--3466[label="1;2009pkt 2009fpkt"];
635--4420[label="1;2009pkt 2009fpkt"];
643--1654[label="1;1pkt 1fpkt"];
643--3466[label="1;1pkt 1fpkt"];
643--4420[label="1;1pkt 1fpkt"];
707--1654[label="1;1pkt 1fpkt"];
707--3466[label="1;1pkt 1fpkt"];
707--4420[label="1;1pkt 1fpkt"];
852--1654[label="1;1pkt 1fpkt"];
852--3466[label="1;1pkt 1fpkt"];
852--4420[label="1;1pkt 1fpkt"];
1654--3466[label="1;2480pkt 2480fpkt"];
1654--4420[label="1;2480pkt 2480fpkt"];
3466--4420[label="1;2480pkt 2480fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="132.237.25.36"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.208.78.36"/>
    </slice>
    <from sec="1081055126" usec="0"/>
    <to sec="1081055144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.39.208.36"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081055659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
676[label="159.31.251.36;s;93pkt 93fpkt", shape=diamond, color=yellow];
1660[label="159.31.251.36;93pkt 93fpkt", shape=pentagon, color=darkviolet];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.251.36:*, 192.235.68.66:80}[30.1075%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.9355%)&lt;BR/&gt; 443: (3.22581%)&lt;BR/&gt; 2002: (1.6129%)&lt;BR/&gt; 3400: (1.07527%)&lt;BR/&gt; 110: (1.07527%)&gt;];
}
676--1660[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="192.235.68.66" dst_port="80" src_ip="159.31.251.36"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.206.2.37"/>
    </slice>
    <from sec="1081055022" usec="0"/>
    <to sec="1081055030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.114.9.38"/>
    </slice>
    <from sec="1081055527" usec="0"/>
    <to sec="1081055582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.195.19.39"/>
    </slice>
    <from sec="1081055191" usec="0"/>
    <to sec="1081055198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1684[label="210.213.118.39;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.213.118.39:*, 205.196.148.98:*}[83.3333%]&lt;BR/&gt;{210.213.118.39:*, *:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 39881: (8.33333%)&lt;BR/&gt; 39872: (8.33333%)&lt;BR/&gt; 39832: (8.33333%)&lt;BR/&gt; 39591: (8.33333%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="205.196.148.98" src_ip="210.213.118.39"/>
      <filter dst_port="80" src_ip="210.213.118.39"/>
    </slice>
    <from sec="1081054999" usec="0"/>
    <to sec="1081055405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.201.201.39"/>
    </slice>
    <from sec="1081055441" usec="0"/>
    <to sec="1081055452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.119.24.40"/>
    </slice>
    <from sec="1081055289" usec="0"/>
    <to sec="1081055654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.16.55.40"/>
    </slice>
    <from sec="1081054846" usec="0"/>
    <to sec="1081054855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.83.87.40"/>
    </slice>
    <from sec="1081054978" usec="0"/>
    <to sec="1081054995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.9.203.40"/>
    </slice>
    <from sec="1081055569" usec="0"/>
    <to sec="1081055594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.193.242.40"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.201.68.41"/>
    </slice>
    <from sec="1081055633" usec="0"/>
    <to sec="1081055640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.14.75.41"/>
    </slice>
    <from sec="1081055444" usec="0"/>
    <to sec="1081055457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.237.194.41"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.20.224.41"/>
    </slice>
    <from sec="1081054874" usec="0"/>
    <to sec="1081054883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.119.102.42"/>
    </slice>
    <from sec="1081055204" usec="0"/>
    <to sec="1081055220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.137.154.42"/>
    </slice>
    <from sec="1081054968" usec="0"/>
    <to sec="1081054979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.2.181.42"/>
    </slice>
    <from sec="1081055234" usec="0"/>
    <to sec="1081055244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.213.188.42"/>
    </slice>
    <from sec="1081055128" usec="0"/>
    <to sec="1081055138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.148.204.42"/>
    </slice>
    <from sec="1081055630" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.163.39.43"/>
    </slice>
    <from sec="1081055237" usec="0"/>
    <to sec="1081055249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.45.112.43"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081054813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.194.76.44"/>
    </slice>
    <from sec="1081055217" usec="0"/>
    <to sec="1081055223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.209.82.44"/>
    </slice>
    <from sec="1081055590" usec="0"/>
    <to sec="1081055600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.213.173.44"/>
    </slice>
    <from sec="1081054814" usec="0"/>
    <to sec="1081054821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.147.177.44"/>
    </slice>
    <from sec="1081055457" usec="0"/>
    <to sec="1081055479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.216.0.45"/>
    </slice>
    <from sec="1081055261" usec="0"/>
    <to sec="1081055271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.186.38.45"/>
    </slice>
    <from sec="1081055479" usec="0"/>
    <to sec="1081055489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.7.42.45"/>
    </slice>
    <from sec="1081055511" usec="0"/>
    <to sec="1081055533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.153.180.45"/>
    </slice>
    <from sec="1081055466" usec="0"/>
    <to sec="1081055487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.188.181.45"/>
    </slice>
    <from sec="1081054843" usec="0"/>
    <to sec="1081054852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.218.242.45"/>
    </slice>
    <from sec="1081055175" usec="0"/>
    <to sec="1081055200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.82.46"/>
    </slice>
    <from sec="1081055020" usec="0"/>
    <to sec="1081055028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.209.93.46"/>
    </slice>
    <from sec="1081055533" usec="0"/>
    <to sec="1081055565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.168.183.46"/>
    </slice>
    <from sec="1081055631" usec="0"/>
    <to sec="1081055641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
657[label="197.39.25.47;s;158pkt 158fpkt", shape=diamond, color=yellow];
1738[label="197.39.25.47;160pkt 160fpkt", shape=pentagon, color=darkviolet];
3514[label="197.39.25.47;160pkt 160fpkt", shape=invtriangle, color=brown];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.39.25.47:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49892: (0.627615%)&lt;BR/&gt; 65384: (0.313808%)&lt;BR/&gt; 65164: (0.313808%)&lt;BR/&gt; 64893: (0.313808%)&gt;];
}
657--1738[label="1;158pkt 158fpkt"];
657--3514[label="1;158pkt 158fpkt"];
1738--3514[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter src_ip="197.39.25.47" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.189.147.48"/>
    </slice>
    <from sec="1081055150" usec="0"/>
    <to sec="1081055204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.142.157.48"/>
    </slice>
    <from sec="1081055084" usec="0"/>
    <to sec="1081055133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.1.10.49"/>
    </slice>
    <from sec="1081055111" usec="0"/>
    <to sec="1081055121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.20.19.49"/>
    </slice>
    <from sec="1081055138" usec="0"/>
    <to sec="1081055150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
495[label="205.214.171.49;s;90pkt 90fpkt", shape=diamond, color=yellow];
1764[label="205.214.171.49;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.214.171.49:6667, *:*}[42.2222%]&lt;BR/&gt;{205.214.171.49:*, 196.181.169.81:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (21.1111%)&lt;BR/&gt; 6668: (5.55556%)&lt;BR/&gt; 6662: (3.88889%)&lt;BR/&gt; 6665: (2.77778%)&lt;BR/&gt; 10080: (2.22222%)&gt;];
}
495--1764[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="196.181.169.81" src_ip="205.214.171.49"/>
      <filter src_ip="205.214.171.49" src_port="6667"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.161.72.50"/>
    </slice>
    <from sec="1081055420" usec="0"/>
    <to sec="1081055441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.237.117.51"/>
    </slice>
    <from sec="1081055389" usec="0"/>
    <to sec="1081055457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.220.217.51"/>
    </slice>
    <from sec="1081055048" usec="0"/>
    <to sec="1081055059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.60.52"/>
    </slice>
    <from sec="1081054898" usec="0"/>
    <to sec="1081055638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.194.217.52"/>
    </slice>
    <from sec="1081054938" usec="0"/>
    <to sec="1081054948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.128.234.52"/>
    </slice>
    <from sec="1081055622" usec="0"/>
    <to sec="1081055636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.129.67.53"/>
    </slice>
    <from sec="1081055679" usec="0"/>
    <to sec="1081055684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.1.200.53"/>
    </slice>
    <from sec="1081055411" usec="0"/>
    <to sec="1081055422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
500[label="206.160.247.53;s;737pkt 737fpkt", shape=diamond, color=yellow];
1810[label="206.160.247.53;1068pkt 1068fpkt", shape=pentagon, color=darkviolet];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.160.247.53:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
500--1810[label="1;737pkt 737fpkt"];
</description>
    <slice>
      <filter src_ip="206.160.247.53"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.188.36.54"/>
    </slice>
    <from sec="1081055378" usec="0"/>
    <to sec="1081055388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.123.10.55"/>
    </slice>
    <from sec="1081055661" usec="0"/>
    <to sec="1081055671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.37.72.56"/>
    </slice>
    <from sec="1081055374" usec="0"/>
    <to sec="1081055676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.183.146.56"/>
    </slice>
    <from sec="1081055350" usec="0"/>
    <to sec="1081055366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.69.11.57"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.185.57"/>
    </slice>
    <from sec="1081054823" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.221.18.58"/>
    </slice>
    <from sec="1081054822" usec="0"/>
    <to sec="1081054914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.174.31.58"/>
    </slice>
    <from sec="1081055052" usec="0"/>
    <to sec="1081055065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.42.236.58"/>
    </slice>
    <from sec="1081055005" usec="0"/>
    <to sec="1081055620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.93.84.59"/>
    </slice>
    <from sec="1081054860" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
1868[label="159.194.1.60;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.194.1.60:*, *:80}[20%]&lt;BR/&gt;{159.194.1.60:*, *:139}[20%]&lt;BR/&gt;{159.194.1.60:*, *:445}[20%]&lt;BR/&gt;{159.194.1.60:*, *:1025}[20%]&lt;BR/&gt;{159.194.1.60:*, *:6129}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (10%)&lt;BR/&gt; 1025: (10%)&lt;BR/&gt; 445: (10%)&lt;BR/&gt; 139: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
</description>
    <slice>
      <filter dst_port="6129" src_ip="159.194.1.60"/>
      <filter dst_port="1025" src_ip="159.194.1.60"/>
      <filter dst_port="445" src_ip="159.194.1.60"/>
      <filter dst_port="139" src_ip="159.194.1.60"/>
      <filter dst_port="80" src_ip="159.194.1.60"/>
    </slice>
    <from sec="1081054828" usec="0"/>
    <to sec="1081055675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1053[label="160.204.71.60;s;205pkt 205fpkt", shape=diamond, color=yellow];
1873[label="160.204.71.60;205pkt 205fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.71.60:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4681: (0.243902%)&lt;BR/&gt; 4679: (0.243902%)&lt;BR/&gt; 4677: (0.243902%)&lt;BR/&gt; 4675: (0.243902%)&gt;];
}
1053--1873[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="160.204.71.60"/>
    </slice>
    <from sec="1081054850" usec="0"/>
    <to sec="1081055556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.186.170.60"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43598,2.60963,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
94[label="130.103.84.100s;1pkt 1fpkt", shape=rectangle, color=red];
454[label="130.103.84.100;s;187pkt 187fpkt", shape=diamond, color=yellow];
589[label="130.103.111.16;s;169pkt 169fpkt", shape=diamond, color=yellow];
1485[label="130.103.111.16;168pkt 168fpkt", shape=pentagon, color=darkviolet];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.84.100:*, *:80}[50.2809%]&lt;BR/&gt;{130.103.111.16:*, *:80}[45.2247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4762%)&lt;BR/&gt; 53: (0.952381%)&lt;BR/&gt; 8080: (0.571429%)&lt;BR/&gt; 60897: (0.190476%)&lt;BR/&gt; 35807: (0.190476%)&gt;];
}
94--454[label="1;1pkt 1fpkt"];
454--1164[label="0.0212766;1pkt 1fpkt"];
454--1287[label="0.0213904;4pkt 4fpkt"];
454--1302[label="0.0213904;4pkt 4fpkt"];
589--1164[label="0.0212766;1pkt 1fpkt"];
589--1287[label="0.0177515;3pkt 3fpkt"];
589--1302[label="0.0177515;3pkt 3fpkt"];
589--1485[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.103.84.100"/>
      <filter dst_port="80" src_ip="130.103.111.16"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.130.164.61"/>
    </slice>
    <from sec="1081054957" usec="0"/>
    <to sec="1081055013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.195.30.63"/>
    </slice>
    <from sec="1081055502" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.162.186.63"/>
    </slice>
    <from sec="1081055196" usec="0"/>
    <to sec="1081055202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
612[label="160.204.94.64;s;59pkt 59fpkt", shape=diamond, color=yellow];
1917[label="160.204.94.64;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3597[label="160.204.94.64;69pkt 69fpkt", shape=invtriangle, color=brown];
4490[label="160.204.94.64;70pkt 70fpkt", shape=invhouse, color=bisque];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.94.64:*, 197.118.52.198:80}[27.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2537%)&lt;BR/&gt; 5050: (0.746269%)&lt;BR/&gt; 4550: (0.746269%)&lt;BR/&gt; 1142: (0.746269%)&lt;BR/&gt; 1141: (0.746269%)&gt;];
}
612--1917[label="1;59pkt 59fpkt"];
612--3597[label="0.983051;58pkt 58fpkt"];
612--4490[label="1;59pkt 59fpkt"];
1917--3597[label="1;69pkt 69fpkt"];
1917--4490[label="1;70pkt 70fpkt"];
3597--4490[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="197.118.52.198" dst_port="80" src_ip="160.204.94.64"/>
    </slice>
    <from sec="1081054889" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.99.127.65"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1192[label="20.106.252.42;d;9pkt 9fpkt", shape=diamond, color=yellow];
1940[label="130.103.124.66;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3613[label="130.103.124.66;46pkt 46fpkt", shape=invtriangle, color=brown];
4500[label="130.103.124.66;47pkt 47fpkt", shape=invhouse, color=bisque];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.124.66:*, 20.106.252.42:80}[34.0426%]&lt;BR/&gt;{130.103.124.66:*, 192.235.68.64:80}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9933%)&lt;BR/&gt; 0: (2.01342%)&lt;BR/&gt; 1499: (1.34228%)&lt;BR/&gt; 1496: (1.34228%)&lt;BR/&gt; 1493: (1.34228%)&gt;];
}
1192--1940[label="1;9pkt 9fpkt"];
1192--3613[label="1;9pkt 9fpkt"];
1192--4500[label="1;9pkt 9fpkt"];
1940--3613[label="1;46pkt 46fpkt"];
1940--4500[label="1;47pkt 47fpkt"];
3613--4500[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="20.106.252.42" dst_port="80" src_ip="130.103.124.66"/>
      <filter dst_ip="192.235.68.64" dst_port="80" src_ip="130.103.124.66"/>
    </slice>
    <from sec="1081055377" usec="0"/>
    <to sec="1081055691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.179.104.67"/>
    </slice>
    <from sec="1081054891" usec="0"/>
    <to sec="1081054899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.89.160.67"/>
    </slice>
    <from sec="1081055075" usec="0"/>
    <to sec="1081055084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.5.232.67"/>
    </slice>
    <from sec="1081055484" usec="0"/>
    <to sec="1081055503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.162.68"/>
    </slice>
    <from sec="1081054832" usec="0"/>
    <to sec="1081055672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.73.222.70"/>
    </slice>
    <from sec="1081055580" usec="0"/>
    <to sec="1081055591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.112.23.71"/>
    </slice>
    <from sec="1081055563" usec="0"/>
    <to sec="1081055636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.123.161.71"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
864[label="160.204.62.136;d;4pkt 4fpkt", shape=diamond, color=yellow];
918[label="88.37.38.72;s;6pkt 6fpkt", shape=diamond, color=yellow];
2003[label="88.37.38.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3652[label="88.37.38.72;1pkt 1fpkt", shape=invtriangle, color=brown];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.37.38.72:554, 160.204.62.136:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (45.8333%)&lt;BR/&gt; 6970: (16.6667%)&lt;BR/&gt; 1588: (8.33333%)&lt;BR/&gt; 1585: (8.33333%)&lt;BR/&gt; 1863: (4.16667%)&gt;];
}
864--918[label="0.75;3pkt 3fpkt"];
864--2003[label="1;1pkt 1fpkt"];
864--3652[label="1;1pkt 1fpkt"];
918--2003[label="1;1pkt 1fpkt"];
918--3652[label="1;1pkt 1fpkt"];
2003--3652[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.62.136" src_ip="88.37.38.72" src_port="554"/>
    </slice>
    <from sec="1081054805" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
819[label="196.127.57.72;s;141pkt 141fpkt", shape=diamond, color=yellow];
2004[label="196.127.57.72;151pkt 151fpkt", shape=pentagon, color=darkviolet];
3653[label="196.127.57.72;150pkt 150fpkt", shape=invtriangle, color=brown];
4522[label="196.127.57.72;151pkt 151fpkt", shape=invhouse, color=bisque];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.57.72:25, *:*}[51.6556%]&lt;BR/&gt;{196.127.57.72:*, *:113}[47.6821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.801%)&lt;BR/&gt; 113: (23.8617%)&lt;BR/&gt; 0: (0.674536%)&lt;BR/&gt; 3531: (0.590219%)&lt;BR/&gt; 63704: (0.337268%)&gt;];
}
819--2004[label="1;141pkt 141fpkt"];
819--3653[label="0.992908;140pkt 140fpkt"];
819--4522[label="1;141pkt 141fpkt"];
2004--3653[label="1;150pkt 150fpkt"];
2004--4522[label="1;151pkt 151fpkt"];
3653--4522[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.57.72" src_port="25"/>
      <filter dst_port="113" src_ip="196.127.57.72"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.83.73.72"/>
    </slice>
    <from sec="1081055262" usec="0"/>
    <to sec="1081055273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.106.213.72"/>
    </slice>
    <from sec="1081054829" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.192.20.73"/>
    </slice>
    <from sec="1081055646" usec="0"/>
    <to sec="1081055652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.58.85.73"/>
    </slice>
    <from sec="1081054910" usec="0"/>
    <to sec="1081055660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.160.24.75"/>
    </slice>
    <from sec="1081055336" usec="0"/>
    <to sec="1081055350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.189.60.75"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081055672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40949,2.61752,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
16[label="159.31.92.75s;3pkt 3fpkt", shape=rectangle, color=red];
2028[label="159.31.92.75;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3666[label="159.31.92.75;13pkt 13fpkt", shape=invtriangle, color=brown];
4530[label="159.31.92.75;13pkt 13fpkt", shape=invhouse, color=bisque];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.92.75:*, 196.41.184.120:80}[35.7143%]&lt;BR/&gt;{159.31.92.75:*, 20.18.19.172:80}[28.5714%]&lt;BR/&gt;{159.31.92.75:*, 22.64.13.193:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5116%)&lt;BR/&gt; 1306: (4.65116%)&lt;BR/&gt; 1305: (4.65116%)&lt;BR/&gt; 1303: (4.65116%)&lt;BR/&gt; 1863: (3.48837%)&gt;];
}
16--2028[label="1;3pkt 3fpkt"];
16--3666[label="1;3pkt 3fpkt"];
16--4530[label="1;3pkt 3fpkt"];
2028--3666[label="1;13pkt 13fpkt"];
2028--4530[label="1;13pkt 13fpkt"];
3666--4530[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="196.41.184.120" dst_port="80" src_ip="159.31.92.75"/>
      <filter dst_ip="20.18.19.172" dst_port="80" src_ip="159.31.92.75"/>
      <filter dst_ip="22.64.13.193" dst_port="80" src_ip="159.31.92.75"/>
    </slice>
    <from sec="1081054807" usec="0"/>
    <to sec="1081055697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
2034[label="130.102.161.75;263pkt 263fpkt", shape=pentagon, color=darkviolet];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.161.75:0, *:0}[99.6198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6198%)&lt;BR/&gt; 2918: (0.190114%)&lt;BR/&gt; 1080: (0.190114%)&gt;];
}
</description>
    <slice>
      <filter src_ip="130.102.161.75"/>
    </slice>
    <from sec="1081054809" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
2038[label="130.102.86.76;228pkt 228fpkt", shape=pentagon, color=darkviolet];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.86.76:0, *:0}[99.5614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5614%)&lt;BR/&gt; 2391: (0.219298%)&lt;BR/&gt; 1080: (0.219298%)&gt;];
}
</description>
    <slice>
      <filter src_ip="130.102.86.76"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.117.160.76"/>
    </slice>
    <from sec="1081055226" usec="0"/>
    <to sec="1081055254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.246.77"/>
    </slice>
    <from sec="1081055003" usec="0"/>
    <to sec="1081055543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
849[label="197.42.249.77;s;59pkt 59fpkt", shape=diamond, color=yellow];
2050[label="197.42.249.77;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3676[label="197.42.249.77;58pkt 58fpkt", shape=invtriangle, color=brown];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.42.249.77:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
849--2050[label="1;59pkt 59fpkt"];
849--3676[label="1;58pkt 58fpkt"];
2050--3676[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="197.42.249.77"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.75725,2.69102,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
970[label="130.102.14.117;d;96pkt 96fpkt", shape=diamond, color=yellow];
1063[label="89.51.2.253;s;84pkt 84fpkt", shape=diamond, color=yellow];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.51.2.253:*, 130.102.14.117:25}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.2222%)&lt;BR/&gt; 80: (1.94444%)&lt;BR/&gt; 61789: (0.555556%)&lt;BR/&gt; 61788: (0.555556%)&lt;BR/&gt; 61786: (0.555556%)&gt;];
}
970--1046[label="0.0166667;1pkt 1fpkt"];
970--1063[label="1;84pkt 84fpkt"];
970--1222[label="0.0104167;1pkt 1fpkt"];
970--1260[label="0.0104167;1pkt 1fpkt"];
970--2058[label="0.0131579;1pkt 1fpkt"];
970--2342[label="0.0104167;1pkt 1fpkt"];
970--3683[label="0.0133333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.14.117" dst_port="25" src_ip="89.51.2.253"/>
    </slice>
    <from sec="1081054883" usec="0"/>
    <to sec="1081055467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.11.199.78"/>
    </slice>
    <from sec="1081055411" usec="0"/>
    <to sec="1081055452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.42.209.79"/>
    </slice>
    <from sec="1081054814" usec="0"/>
    <to sec="1081055697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.137.225.79"/>
    </slice>
    <from sec="1081054929" usec="0"/>
    <to sec="1081054941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.208.164.80"/>
    </slice>
    <from sec="1081055034" usec="0"/>
    <to sec="1081055066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.32.36.81"/>
    </slice>
    <from sec="1081055148" usec="0"/>
    <to sec="1081055159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.217.219.81"/>
    </slice>
    <from sec="1081055041" usec="0"/>
    <to sec="1081055051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.171.29.83"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="159.31.33.83"/>
    </slice>
    <from sec="1081054816" usec="0"/>
    <to sec="1081055688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.202.80.83"/>
    </slice>
    <from sec="1081055343" usec="0"/>
    <to sec="1081055381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.102.28.85"/>
    </slice>
    <from sec="1081055606" usec="0"/>
    <to sec="1081055613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
712[label="205.85.157.85;s;215pkt 215fpkt", shape=diamond, color=yellow];
2132[label="205.85.157.85;228pkt 228fpkt", shape=pentagon, color=darkviolet];
3716[label="205.85.157.85;227pkt 227fpkt", shape=invtriangle, color=brown];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.85.157.85:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
712--811[label="0.00465116;1pkt 1fpkt"];
712--825[label="0.00465116;1pkt 1fpkt"];
712--834[label="0.00465116;1pkt 1fpkt"];
712--937[label="0.00465116;1pkt 1fpkt"];
712--998[label="0.00465116;1pkt 1fpkt"];
712--1115[label="0.00465116;1pkt 1fpkt"];
712--2132[label="1;215pkt 215fpkt"];
712--3716[label="0.995349;214pkt 214fpkt"];
2132--3716[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter src_ip="205.85.157.85"/>
    </slice>
    <from sec="1081054807" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.92.40.86"/>
    </slice>
    <from sec="1081055575" usec="0"/>
    <to sec="1081055580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
422[label="216.209.16.88;s;3pkt 3fpkt", shape=diamond, color=yellow];
2148[label="216.209.16.88;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.209.16.88:80, 159.31.93.210:1174}[25%]&lt;BR/&gt;{216.209.16.88:80, 159.31.93.210:1175}[25%]&lt;BR/&gt;{216.209.16.88:80, 159.31.93.210:1180}[25%]&lt;BR/&gt;{216.209.16.88:80, 159.31.93.210:1186}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1180: (14.2857%)&lt;BR/&gt; 1175: (14.2857%)&lt;BR/&gt; 1174: (14.2857%)&lt;BR/&gt; 1186: (7.14286%)&gt;];
}
422--2148[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.93.210" dst_port="1186" src_ip="216.209.16.88" src_port="80"/>
      <filter dst_ip="159.31.93.210" dst_port="1180" src_ip="216.209.16.88" src_port="80"/>
      <filter dst_ip="159.31.93.210" dst_port="1175" src_ip="216.209.16.88" src_port="80"/>
      <filter dst_ip="159.31.93.210" dst_port="1174" src_ip="216.209.16.88" src_port="80"/>
    </slice>
    <from sec="1081054872" usec="0"/>
    <to sec="1081055100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.168.90.89"/>
    </slice>
    <from sec="1081055365" usec="0"/>
    <to sec="1081055383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.145.39.90"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.121.218.90"/>
    </slice>
    <from sec="1081055438" usec="0"/>
    <to sec="1081055478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
182[label="160.204.60.3;d;47pkt 47fpkt", shape=diamond, color=yellow];
555[label="210.45.74.171;s;4pkt 4fpkt", shape=diamond, color=yellow];
877[label="130.103.83.178;d;81pkt 81fpkt", shape=diamond, color=yellow];
1759[label="197.192.45.49;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2171[label="198.19.142.91;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2523[label="197.192.44.141;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.204.60.3:*}[32.8125%]&lt;BR/&gt;{198.19.142.91:80, 130.103.83.178:*}[30.4688%]&lt;BR/&gt;{197.192.45.49:80, *:*}[27.3438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46%)&lt;BR/&gt; 62565: (1.77778%)&lt;BR/&gt; 110: (1.77778%)&lt;BR/&gt; 62583: (0.888889%)&lt;BR/&gt; 62564: (0.888889%)&gt;];
}
182--555[label="1;4pkt 4fpkt"];
182--1759[label="0.628571;22pkt 22fpkt"];
182--2523[label="1;19pkt 19fpkt"];
877--1759[label="0.371429;13pkt 13fpkt"];
877--2171[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="197.192.45.49" src_port="80"/>
      <filter dst_ip="160.204.60.3" src_port="80"/>
      <filter dst_ip="130.103.83.178" src_ip="198.19.142.91" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.153.61.92"/>
    </slice>
    <from sec="1081054805" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
467[label="210.194.218.92;s;3289pkt 3289fpkt", shape=diamond, color=yellow];
2177[label="210.194.218.92;4000pkt 4000fpkt", shape=pentagon, color=darkviolet];
3745[label="210.194.218.92;3999pkt 3999fpkt", shape=invtriangle, color=brown];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.194.218.92:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42361: (0.0398653%)&lt;BR/&gt; 41941: (0.0398653%)&lt;BR/&gt; 41744: (0.0398653%)&lt;BR/&gt; 31034: (0.0398653%)&gt;];
}
467--2177[label="1;3289pkt 3289fpkt"];
467--3745[label="0.999696;3288pkt 3288fpkt"];
2177--3745[label="1;3999pkt 3999fpkt"];
</description>
    <slice>
      <filter src_ip="210.194.218.92" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.198.11.93"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.128.93"/>
    </slice>
    <from sec="1081055587" usec="0"/>
    <to sec="1081055609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.225.13.94"/>
    </slice>
    <from sec="1081055033" usec="0"/>
    <to sec="1081055047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.25.94"/>
    </slice>
    <from sec="1081055119" usec="0"/>
    <to sec="1081055146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.14.51.95"/>
    </slice>
    <from sec="1081055604" usec="0"/>
    <to sec="1081055614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.29.96"/>
    </slice>
    <from sec="1081054824" usec="0"/>
    <to sec="1081055428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="159.31.35.96"/>
    </slice>
    <from sec="1081054866" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.66.65.97"/>
    </slice>
    <from sec="1081055387" usec="0"/>
    <to sec="1081055403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.163.8.99"/>
    </slice>
    <from sec="1081055367" usec="0"/>
    <to sec="1081055397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.74.16.99"/>
    </slice>
    <from sec="1081055389" usec="0"/>
    <to sec="1081055402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.248.211.99"/>
    </slice>
    <from sec="1081054878" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.102.218.101"/>
    </slice>
    <from sec="1081054806" usec="0"/>
    <to sec="1081055684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.172.204.102"/>
    </slice>
    <from sec="1081055582" usec="0"/>
    <to sec="1081055610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.196.32.104"/>
    </slice>
    <from sec="1081055478" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.64.96.104"/>
    </slice>
    <from sec="1081055586" usec="0"/>
    <to sec="1081055625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
850[label="117.46.149.104;s;730pkt 730fpkt", shape=diamond, color=yellow];
2256[label="117.46.149.104;1100pkt 1100fpkt", shape=pentagon, color=darkviolet];
3790[label="117.46.149.104;1099pkt 1099fpkt", shape=invtriangle, color=brown];
4591[label="117.46.149.104;1100pkt 1100fpkt", shape=invhouse, color=bisque];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.46.149.104:*, *:1027}[65.6676%]&lt;BR/&gt;{117.46.149.104:*, *:1026}[34.3324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (32.9362%)&lt;BR/&gt; 1026: (17.1507%)&lt;BR/&gt; 3402: (0.14892%)&lt;BR/&gt; 2248: (0.14892%)&lt;BR/&gt; 4633: (0.13651%)&gt;];
}
850--2256[label="0.99863;729pkt 729fpkt"];
850--3790[label="0.99726;728pkt 728fpkt"];
850--4591[label="0.99863;729pkt 729fpkt"];
2256--3790[label="1;1099pkt 1099fpkt"];
2256--4591[label="1;1100pkt 1100fpkt"];
3790--4591[label="1;1099pkt 1099fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="117.46.149.104"/>
      <filter dst_port="1026" src_ip="117.46.149.104"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.221.25.106"/>
    </slice>
    <from sec="1081055403" usec="0"/>
    <to sec="1081055421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
689[label="221.168.43.106;s;2pkt 2fpkt", shape=diamond, color=yellow];
2266[label="221.168.43.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.168.43.106:80, 159.31.32.37:50769}[50%]&lt;BR/&gt;{221.168.43.106:80, 159.31.32.37:50770}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50770: (25%)&lt;BR/&gt; 50769: (25%)&gt;];
}
689--2266[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.32.37" dst_port="50770" src_ip="221.168.43.106" src_port="80"/>
      <filter dst_ip="159.31.32.37" dst_port="50769" src_ip="221.168.43.106" src_port="80"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
875[label="130.102.142.107;s;98pkt 98fpkt", shape=diamond, color=yellow];
2285[label="130.102.142.107;106pkt 106fpkt", shape=pentagon, color=darkviolet];
3803[label="130.102.142.107;105pkt 105fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.142.107:25, *:*}[97.1698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.7055%)&lt;BR/&gt; 53: (1.45631%)&lt;BR/&gt; 1069: (0.970874%)&lt;BR/&gt; 0: (0.647249%)&lt;BR/&gt; 63624: (0.485437%)&gt;];
}
875--2285[label="1;98pkt 98fpkt"];
875--3803[label="0.989796;97pkt 97fpkt"];
2285--3803[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="130.102.142.107" src_port="25"/>
    </slice>
    <from sec="1081054824" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.89.45.108"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.158.77.109"/>
    </slice>
    <from sec="1081055387" usec="0"/>
    <to sec="1081055397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.127.32.110"/>
    </slice>
    <from sec="1081054812" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.21.65.115"/>
    </slice>
    <from sec="1081055481" usec="0"/>
    <to sec="1081055532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
971[label="130.102.14.117;s;97pkt 97fpkt", shape=diamond, color=yellow];
2343[label="130.102.14.117;97pkt 97fpkt", shape=pentagon, color=darkviolet];
3836[label="130.102.14.117;96pkt 96fpkt", shape=invtriangle, color=brown];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.14.117:25, 89.51.2.253:*}[86.5979%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.4828%)&lt;BR/&gt; 80: (4.65517%)&lt;BR/&gt; 61789: (0.517241%)&lt;BR/&gt; 61788: (0.517241%)&lt;BR/&gt; 61786: (0.517241%)&gt;];
}
971--2343[label="1;97pkt 97fpkt"];
971--3836[label="1;96pkt 96fpkt"];
2343--3836[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="89.51.2.253" src_ip="130.102.14.117" src_port="25"/>
    </slice>
    <from sec="1081054883" usec="0"/>
    <to sec="1081055467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.2.215.117"/>
    </slice>
    <from sec="1081054839" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1107[label="211.71.90.118;s;686pkt 686fpkt", shape=diamond, color=yellow];
2350[label="211.71.90.118;731pkt 731fpkt", shape=pentagon, color=darkviolet];
3840[label="211.71.90.118;731pkt 731fpkt", shape=invtriangle, color=brown];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.71.90.118:7100, *:*}[33.4699%]&lt;BR/&gt;{211.71.90.118:7300, *:*}[33.3333%]&lt;BR/&gt;{211.71.90.118:7200, *:*}[33.1967%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7100: (16.7365%)&lt;BR/&gt; 7200: (16.6667%)&lt;BR/&gt; 7300: (16.5968%)&lt;BR/&gt; 38971: (0.139665%)&lt;BR/&gt; 20637: (0.139665%)&gt;];
}
1107--2350[label="0.998542;685pkt 685fpkt"];
1107--3840[label="0.998542;685pkt 685fpkt"];
2350--3840[label="1;731pkt 731fpkt"];
</description>
    <slice>
      <filter src_ip="211.71.90.118" src_port="7100"/>
      <filter src_ip="211.71.90.118" src_port="7300"/>
      <filter src_ip="211.71.90.118" src_port="7200"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.179.141.118"/>
    </slice>
    <from sec="1081055172" usec="0"/>
    <to sec="1081055655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.38.114.119"/>
    </slice>
    <from sec="1081055151" usec="0"/>
    <to sec="1081055206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.245.97.122"/>
    </slice>
    <from sec="1081055290" usec="0"/>
    <to sec="1081055313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.18.123"/>
    </slice>
    <from sec="1081055461" usec="0"/>
    <to sec="1081055470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.137.146.125"/>
    </slice>
    <from sec="1081055204" usec="0"/>
    <to sec="1081055220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.81.40.126"/>
    </slice>
    <from sec="1081055042" usec="0"/>
    <to sec="1081055076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2398[label="197.184.193.127;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.184.193.127:*, *:80}[23.8095%]&lt;BR/&gt;{197.184.193.127:*, 197.42.249.32:*}[23.8095%]&lt;BR/&gt;{197.184.193.127:*, 197.39.199.81:*}[23.8095%]&lt;BR/&gt;{197.184.193.127:*, 197.42.195.129:*}[23.8095%]&lt;BR/&gt;{197.184.193.127:*, 197.42.238.205:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (11.9048%)&lt;BR/&gt; 6129: (9.52381%)&lt;BR/&gt; 3127: (9.52381%)&lt;BR/&gt; 2745: (9.52381%)&lt;BR/&gt; 1025: (9.52381%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="197.42.238.205" src_ip="197.184.193.127"/>
      <filter dst_ip="197.42.195.129" src_ip="197.184.193.127"/>
      <filter dst_ip="197.39.199.81" src_ip="197.184.193.127"/>
      <filter dst_ip="197.42.249.32" src_ip="197.184.193.127"/>
      <filter dst_port="80" src_ip="197.184.193.127"/>
    </slice>
    <from sec="1081054885" usec="0"/>
    <to sec="1081055387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.205.224.127"/>
    </slice>
    <from sec="1081055334" usec="0"/>
    <to sec="1081055360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.79.26.128"/>
    </slice>
    <from sec="1081055332" usec="0"/>
    <to sec="1081055365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.68.68.128"/>
    </slice>
    <from sec="1081054967" usec="0"/>
    <to sec="1081055003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
1051[label="130.103.120.128;s;19pkt 19fpkt", shape=diamond, color=yellow];
1064[label="160.38.58.101;d;21pkt 21fpkt", shape=diamond, color=yellow];
2407[label="130.103.120.128;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3866[label="130.103.120.128;26pkt 26fpkt", shape=invtriangle, color=brown];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.120.128:*, 160.38.58.101:80}[58.6207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3043%)&lt;BR/&gt; 113: (3.26087%)&lt;BR/&gt; 25: (3.26087%)&lt;BR/&gt; 2119: (2.17391%)&lt;BR/&gt; 2118: (2.17391%)&gt;];
}
1051--1064[label="0.684211;13pkt 13fpkt"];
1051--2407[label="0.947368;18pkt 18fpkt"];
1051--3866[label="0.947368;18pkt 18fpkt"];
1064--2407[label="0.904762;19pkt 19fpkt"];
1064--3866[label="0.904762;19pkt 19fpkt"];
2407--3866[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="160.38.58.101" dst_port="80" src_ip="130.103.120.128"/>
    </slice>
    <from sec="1081054837" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.53.154.128"/>
    </slice>
    <from sec="1081055448" usec="0"/>
    <to sec="1081055631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
861[label="196.127.58.131;s;84pkt 84fpkt", shape=diamond, color=yellow];
2437[label="196.127.58.131;96pkt 96fpkt", shape=pentagon, color=darkviolet];
3884[label="196.127.58.131;95pkt 95fpkt", shape=invtriangle, color=brown];
4643[label="196.127.58.131;96pkt 96fpkt", shape=invhouse, color=bisque];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.127.58.131:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
861--1115[label="0.0119048;1pkt 1fpkt"];
861--2437[label="1;84pkt 84fpkt"];
861--3884[label="0.988095;83pkt 83fpkt"];
861--4643[label="1;84pkt 84fpkt"];
2437--3884[label="1;95pkt 95fpkt"];
2437--4643[label="1;96pkt 96fpkt"];
3884--4643[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="196.127.58.131"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.91.206.132"/>
    </slice>
    <from sec="1081055619" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.91.215.132"/>
    </slice>
    <from sec="1081055171" usec="0"/>
    <to sec="1081055192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.102.137.133"/>
    </slice>
    <from sec="1081054853" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.24.225.133"/>
    </slice>
    <from sec="1081054943" usec="0"/>
    <to sec="1081055607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.13.134"/>
    </slice>
    <from sec="1081055466" usec="0"/>
    <to sec="1081055479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.80.134"/>
    </slice>
    <from sec="1081055121" usec="0"/>
    <to sec="1081055130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.197.205.134"/>
    </slice>
    <from sec="1081055020" usec="0"/>
    <to sec="1081055049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.217.209.135"/>
    </slice>
    <from sec="1081055097" usec="0"/>
    <to sec="1081055258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.42.251.135"/>
    </slice>
    <from sec="1081054809" usec="0"/>
    <to sec="1081055684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.147.36.136"/>
    </slice>
    <from sec="1081055487" usec="0"/>
    <to sec="1081055544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.60.136"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.27.142.137"/>
    </slice>
    <from sec="1081055539" usec="0"/>
    <to sec="1081055553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.35.222.138"/>
    </slice>
    <from sec="1081054806" usec="0"/>
    <to sec="1081054810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.218.15.139"/>
    </slice>
    <from sec="1081054852" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
330[label="130.103.3.76;d;44pkt 44fpkt", shape=diamond, color=yellow];
455[label="90.170.182.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
2472[label="90.170.182.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3900[label="90.170.182.135;1pkt 1fpkt", shape=invtriangle, color=brown];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.133.185.221:9970, 130.103.3.76:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9970: (14.8936%)&lt;BR/&gt; 11898: (7.44681%)&lt;BR/&gt; 9951: (7.44681%)&lt;BR/&gt; 6881: (6.38298%)&lt;BR/&gt; 8881: (4.25532%)&gt;];
}
330--455[label="1;1pkt 1fpkt"];
330--2472[label="1;1pkt 1fpkt"];
330--2511[label="0.0227273;1pkt 1fpkt"];
330--3900[label="1;1pkt 1fpkt"];
455--2472[label="1;1pkt 1fpkt"];
455--3900[label="1;1pkt 1fpkt"];
2472--3900[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.3.76" src_ip="210.133.185.221" src_port="9970"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.189.60.140"/>
    </slice>
    <from sec="1081054812" usec="0"/>
    <to sec="1081055664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.192.128.141"/>
    </slice>
    <from sec="1081055061" usec="0"/>
    <to sec="1081055069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.78.220.141"/>
    </slice>
    <from sec="1081055408" usec="0"/>
    <to sec="1081055443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
870[label="196.127.63.43;d;114pkt 114fpkt", shape=diamond, color=yellow];
1034[label="6.202.91.38;s;66pkt 66fpkt", shape=diamond, color=yellow];
1048[label="130.103.142.160;d;97pkt 97fpkt", shape=diamond, color=yellow];
1198[label="208.117.10.107;s;77pkt 77fpkt", shape=diamond, color=yellow];
2277[label="208.117.10.107;77pkt 77fpkt", shape=pentagon, color=darkviolet];
3797[label="208.117.10.107;76pkt 76fpkt", shape=invtriangle, color=brown];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.117.10.107:80, 130.103.142.160:*}[36.4929%]&lt;BR/&gt;{6.202.91.38:25, 196.127.63.43:*}[35.0711%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.2209%)&lt;BR/&gt; 25: (13.8067%)&lt;BR/&gt; 53: (1.77515%)&lt;BR/&gt; 1032: (0.887574%)&lt;BR/&gt; 32769: (0.788955%)&gt;];
}
870--1034[label="1;66pkt 66fpkt"];
870--1287[label="0.0175439;2pkt 2fpkt"];
870--1302[label="0.0175439;2pkt 2fpkt"];
870--3263[label="0.0140845;1pkt 1fpkt"];
1048--1198[label="1;77pkt 77fpkt"];
1048--2277[label="1;77pkt 77fpkt"];
1048--3263[label="0.0140845;1pkt 1fpkt"];
1048--3797[label="1;76pkt 76fpkt"];
1198--2277[label="1;77pkt 77fpkt"];
1198--3797[label="1;76pkt 76fpkt"];
2277--3797[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.142.160" src_ip="208.117.10.107" src_port="80"/>
      <filter dst_ip="196.127.63.43" src_ip="6.202.91.38" src_port="25"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.62.144"/>
    </slice>
    <from sec="1081054887" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.34.178.144"/>
    </slice>
    <from sec="1081055084" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.199.65.145"/>
    </slice>
    <from sec="1081054811" usec="0"/>
    <to sec="1081055412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.218.70.146"/>
    </slice>
    <from sec="1081055358" usec="0"/>
    <to sec="1081055374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.148.146"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
673[label="130.103.140.84;d;13pkt 13fpkt", shape=diamond, color=yellow];
2571[label="90.77.229.146;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.77.229.146:*, 130.103.140.84:25}[37.5%]&lt;BR/&gt;{90.77.230.76:*, 130.103.140.84:25}[25%]&lt;BR/&gt;{*:25, 130.103.140.84:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.7368%)&lt;BR/&gt; 0: (10.5263%)&lt;BR/&gt; 4806: (5.26316%)&lt;BR/&gt; 4775: (5.26316%)&lt;BR/&gt; 1040: (5.26316%)&gt;];
}
673--2571[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.140.84" src_port="25"/>
      <filter dst_ip="130.103.140.84" dst_port="25" src_ip="90.77.229.146"/>
      <filter dst_ip="130.103.140.84" dst_port="25" src_ip="90.77.230.76"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.72.245.147"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.18.148"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.39.220.148"/>
    </slice>
    <from sec="1081054823" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.102.83.149"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.201.12.150"/>
    </slice>
    <from sec="1081054869" usec="0"/>
    <to sec="1081054879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.102.153"/>
    </slice>
    <from sec="1081055067" usec="0"/>
    <to sec="1081055650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.220.114.153"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.43.10.154"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081054812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.167.116.154"/>
    </slice>
    <from sec="1081054978" usec="0"/>
    <to sec="1081054985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.134.229.154"/>
    </slice>
    <from sec="1081054998" usec="0"/>
    <to sec="1081055017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.189.56.156"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.102.45.157"/>
    </slice>
    <from sec="1081054848" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.6.59.157"/>
    </slice>
    <from sec="1081055338" usec="0"/>
    <to sec="1081055345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.168.65.157"/>
    </slice>
    <from sec="1081054895" usec="0"/>
    <to sec="1081054903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.27.176.158"/>
    </slice>
    <from sec="1081055667" usec="0"/>
    <to sec="1081055670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31526,2.63602,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
77[label="210.195.178.158s;85pkt 85fpkt", shape=rectangle, color=red];
2652[label="210.195.178.158;256pkt 256fpkt", shape=pentagon, color=darkviolet];
3989[label="210.195.178.158;256pkt 256fpkt", shape=invtriangle, color=brown];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.195.178.158:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
77--2652[label="1;85pkt 85fpkt"];
77--3989[label="1;85pkt 85fpkt"];
2652--3989[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.195.178.158" src_port="1028"/>
    </slice>
    <from sec="1081054908" usec="0"/>
    <to sec="1081054923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
2664[label="90.157.226.159;168pkt 168fpkt", shape=pentagon, color=darkviolet];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.157.226.159:1111, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1111: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="90.157.226.159" src_port="1111"/>
    </slice>
    <from sec="1081055237" usec="0"/>
    <to sec="1081055266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.93.213.160"/>
    </slice>
    <from sec="1081055480" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
1073[label="130.102.21.162;s;18pkt 18fpkt", shape=diamond, color=yellow];
2685[label="130.102.21.162;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4004[label="130.102.21.162;18pkt 18fpkt", shape=invtriangle, color=brown];
4703[label="130.102.21.162;17pkt 17fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.21.162:*, 219.90.83.85:20}[55.5556%]&lt;BR/&gt;{130.102.21.162:*, 90.153.183.84:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (28.169%)&lt;BR/&gt; 137: (5.6338%)&lt;BR/&gt; 0: (5.6338%)&lt;BR/&gt; 4771: (2.8169%)&lt;BR/&gt; 4020: (2.8169%)&gt;];
}
1073--2685[label="1;18pkt 18fpkt"];
1073--4004[label="1;18pkt 18fpkt"];
1073--4703[label="1;17pkt 17fpkt"];
2685--4004[label="1;18pkt 18fpkt"];
2685--4703[label="1;17pkt 17fpkt"];
4004--4703[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="90.153.183.84" src_ip="130.102.21.162"/>
      <filter dst_ip="219.90.83.85" dst_port="20" src_ip="130.102.21.162"/>
    </slice>
    <from sec="1081055274" usec="0"/>
    <to sec="1081055613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.40.25.163"/>
    </slice>
    <from sec="1081055282" usec="0"/>
    <to sec="1081055306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.189.58.165"/>
    </slice>
    <from sec="1081055027" usec="0"/>
    <to sec="1081055466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
594[label="160.204.223.165;s;154pkt 154fpkt", shape=diamond, color=yellow];
953[label="192.168.229.1;d;103pkt 103fpkt", shape=diamond, color=yellow];
2709[label="160.204.223.165;222pkt 222fpkt", shape=pentagon, color=darkviolet];
4019[label="160.204.223.165;221pkt 221fpkt", shape=invtriangle, color=brown];
4711[label="160.204.223.165;221pkt 221fpkt", shape=invhouse, color=bisque];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.223.165:139, 192.168.203.1:*}[50.4505%]&lt;BR/&gt;{160.204.223.165:139, 192.168.229.1:*}[49.5495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2271: (0.271444%)&lt;BR/&gt; 2263: (0.271444%)&lt;BR/&gt; 2259: (0.271444%)&lt;BR/&gt; 2255: (0.271444%)&gt;];
}
594--953[label="0.737864;76pkt 76fpkt"];
594--2709[label="1;154pkt 154fpkt"];
594--4019[label="0.993506;153pkt 153fpkt"];
594--4711[label="0.993506;153pkt 153fpkt"];
953--2709[label="1;103pkt 103fpkt"];
953--4019[label="1;103pkt 103fpkt"];
953--4711[label="1;103pkt 103fpkt"];
2709--4019[label="1;221pkt 221fpkt"];
2709--4711[label="1;221pkt 221fpkt"];
4019--4711[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.203.1" src_ip="160.204.223.165" src_port="139"/>
      <filter dst_ip="192.168.229.1" src_ip="160.204.223.165" src_port="139"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.128.42.166"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.188.102.166"/>
    </slice>
    <from sec="1081055424" usec="0"/>
    <to sec="1081055437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.128.166"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.97.171.166"/>
    </slice>
    <from sec="1081054836" usec="0"/>
    <to sec="1081054848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.16.172.166"/>
    </slice>
    <from sec="1081055577" usec="0"/>
    <to sec="1081055586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.210.37.167"/>
    </slice>
    <from sec="1081055532" usec="0"/>
    <to sec="1081055541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.238.43.170"/>
    </slice>
    <from sec="1081054853" usec="0"/>
    <to sec="1081055693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.226.180.170"/>
    </slice>
    <from sec="1081055022" usec="0"/>
    <to sec="1081055045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.99.17.171"/>
    </slice>
    <from sec="1081055640" usec="0"/>
    <to sec="1081055653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.105.23.171"/>
    </slice>
    <from sec="1081055147" usec="0"/>
    <to sec="1081055286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.16.119.171"/>
    </slice>
    <from sec="1081055242" usec="0"/>
    <to sec="1081055252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.239.42.172"/>
    </slice>
    <from sec="1081054825" usec="0"/>
    <to sec="1081055673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.106.222.173"/>
    </slice>
    <from sec="1081055652" usec="0"/>
    <to sec="1081055659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.136.231.174"/>
    </slice>
    <from sec="1081055420" usec="0"/>
    <to sec="1081055447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40949,2.61752,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
79[label="90.6.76.175s;92pkt 92fpkt", shape=rectangle, color=red];
2789[label="90.6.76.175;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4073[label="90.6.76.175;255pkt 255fpkt", shape=invtriangle, color=brown];
4744[label="90.6.76.175;255pkt 255fpkt", shape=invhouse, color=bisque];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.6.76.175:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
79--2789[label="1;92pkt 92fpkt"];
79--4073[label="1;92pkt 92fpkt"];
79--4744[label="1;92pkt 92fpkt"];
2789--4073[label="1;255pkt 255fpkt"];
2789--4744[label="1;255pkt 255fpkt"];
4073--4744[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.6.76.175" src_port="1031"/>
    </slice>
    <from sec="1081055380" usec="0"/>
    <to sec="1081055395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.233.132.175"/>
    </slice>
    <from sec="1081055546" usec="0"/>
    <to sec="1081055614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.72.144.176"/>
    </slice>
    <from sec="1081055196" usec="0"/>
    <to sec="1081055205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.43.86.177"/>
    </slice>
    <from sec="1081055371" usec="0"/>
    <to sec="1081055382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
878[label="130.103.83.178;s;170pkt 170fpkt", shape=diamond, color=yellow];
2809[label="130.103.83.178;173pkt 173fpkt", shape=pentagon, color=darkviolet];
4090[label="130.103.83.178;172pkt 172fpkt", shape=invtriangle, color=brown];
4753[label="130.103.83.178;173pkt 173fpkt", shape=invhouse, color=bisque];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.83.178:*, 198.19.142.91:80}[22.5434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5843%)&lt;BR/&gt; 110: (2.25291%)&lt;BR/&gt; 62565: (2.03488%)&lt;BR/&gt; 62656: (1.45349%)&lt;BR/&gt; 62650: (1.45349%)&gt;];
}
878--1287[label="0.00588235;1pkt 1fpkt"];
878--1302[label="0.00588235;1pkt 1fpkt"];
878--2809[label="1;170pkt 170fpkt"];
878--4090[label="0.994118;169pkt 169fpkt"];
878--4753[label="1;170pkt 170fpkt"];
2809--4090[label="1;172pkt 172fpkt"];
2809--4753[label="1;173pkt 173fpkt"];
4090--4753[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_ip="198.19.142.91" dst_port="80" src_ip="130.103.83.178"/>
    </slice>
    <from sec="1081054835" usec="0"/>
    <to sec="1081055691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.35.18.179"/>
    </slice>
    <from sec="1081055502" usec="0"/>
    <to sec="1081055510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.2.104.180"/>
    </slice>
    <from sec="1081055455" usec="0"/>
    <to sec="1081055500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.211.27.182"/>
    </slice>
    <from sec="1081055630" usec="0"/>
    <to sec="1081055642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29043,2.65789,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
80[label="215.35.41.182s;51pkt 51fpkt", shape=rectangle, color=red];
2834[label="215.35.41.182;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.35.41.182:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
80--2834[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.35.41.182" src_port="1025"/>
    </slice>
    <from sec="1081055370" usec="0"/>
    <to sec="1081055394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.219.74.184"/>
    </slice>
    <from sec="1081054843" usec="0"/>
    <to sec="1081054860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.32.204.184"/>
    </slice>
    <from sec="1081055235" usec="0"/>
    <to sec="1081055284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.11.186.186"/>
    </slice>
    <from sec="1081055340" usec="0"/>
    <to sec="1081055671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31526,2.63602,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
82[label="90.225.148.187s;102pkt 102fpkt", shape=rectangle, color=red];
2867[label="90.225.148.187;249pkt 249fpkt", shape=pentagon, color=darkviolet];
4120[label="90.225.148.187;248pkt 248fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.225.148.187:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
82--2867[label="1;102pkt 102fpkt"];
82--4120[label="0.990196;101pkt 101fpkt"];
2867--4120[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.225.148.187" src_port="1028"/>
    </slice>
    <from sec="1081054952" usec="0"/>
    <to sec="1081054967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.237.193.187"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.197.75.188"/>
    </slice>
    <from sec="1081055214" usec="0"/>
    <to sec="1081055222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.84.117.188"/>
    </slice>
    <from sec="1081055480" usec="0"/>
    <to sec="1081055682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.194.211.188"/>
    </slice>
    <from sec="1081055632" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.134.160.189"/>
    </slice>
    <from sec="1081055455" usec="0"/>
    <to sec="1081055508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.0.21.191"/>
    </slice>
    <from sec="1081055635" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.149.176.191"/>
    </slice>
    <from sec="1081054807" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40949,2.61752,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
83[label="17.2.223.191s;85pkt 85fpkt", shape=rectangle, color=red];
2905[label="17.2.223.191;230pkt 230fpkt", shape=pentagon, color=darkviolet];
4145[label="17.2.223.191;230pkt 230fpkt", shape=invtriangle, color=brown];
4779[label="17.2.223.191;230pkt 230fpkt", shape=invhouse, color=bisque];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.2.223.191:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
83--2905[label="1;85pkt 85fpkt"];
83--4145[label="1;85pkt 85fpkt"];
83--4779[label="1;85pkt 85fpkt"];
2905--4145[label="1;230pkt 230fpkt"];
2905--4779[label="1;230pkt 230fpkt"];
4145--4779[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.2.223.191" src_port="1026"/>
    </slice>
    <from sec="1081055505" usec="0"/>
    <to sec="1081055520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.145.17.192"/>
    </slice>
    <from sec="1081055463" usec="0"/>
    <to sec="1081055491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="159.31.0.193"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.69.46.193"/>
    </slice>
    <from sec="1081055655" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.231.49.193"/>
    </slice>
    <from sec="1081054907" usec="0"/>
    <to sec="1081055677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.146.194"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
696[label="132.24.225.194;s;347pkt 347fpkt", shape=diamond, color=yellow];
2933[label="132.24.225.194;376pkt 376fpkt", shape=pentagon, color=darkviolet];
4158[label="132.24.225.194;375pkt 375fpkt", shape=invtriangle, color=brown];
4784[label="132.24.225.194;375pkt 375fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.24.225.194:53, *:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.9165%)&lt;BR/&gt; 0: (6.17787%)&lt;BR/&gt; 1024: (3.97149%)&lt;BR/&gt; 80: (1.56144%)&lt;BR/&gt; 32768: (1.42566%)&gt;];
}
696--1124[label="0.0136986;1pkt 1fpkt"];
696--2933[label="0.997118;346pkt 346fpkt"];
696--4158[label="0.994236;345pkt 345fpkt"];
696--4784[label="0.994236;345pkt 345fpkt"];
2933--4158[label="1;375pkt 375fpkt"];
2933--4784[label="1;375pkt 375fpkt"];
4158--4784[label="1;375pkt 375fpkt"];
</description>
    <slice>
      <filter src_ip="132.24.225.194" src_port="53"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.100.84.196"/>
    </slice>
    <from sec="1081054847" usec="0"/>
    <to sec="1081055029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.143.146.197"/>
    </slice>
    <from sec="1081055579" usec="0"/>
    <to sec="1081055618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
2958[label="196.52.196.197;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.52.196.197:*, 196.127.1.192:*}[66.6667%]&lt;BR/&gt;{196.52.196.197:*, *:80}[33.3333%]&lt;BR/&gt;{196.52.196.197:*, *:2745}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 6129: (8.33333%)&lt;BR/&gt; 3524: (8.33333%)&lt;BR/&gt; 2687: (8.33333%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="196.127.1.192" src_ip="196.52.196.197"/>
      <filter dst_port="2745" src_ip="196.52.196.197"/>
      <filter dst_port="80" src_ip="196.52.196.197"/>
    </slice>
    <from sec="1081055283" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.75.222.197"/>
    </slice>
    <from sec="1081055123" usec="0"/>
    <to sec="1081055132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.225.94.198"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.157.32.200"/>
    </slice>
    <from sec="1081054844" usec="0"/>
    <to sec="1081054866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.6.74.200"/>
    </slice>
    <from sec="1081055064" usec="0"/>
    <to sec="1081055080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.133.24.201"/>
    </slice>
    <from sec="1081055494" usec="0"/>
    <to sec="1081055508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.233.132.201"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.140.83.203"/>
    </slice>
    <from sec="1081055172" usec="0"/>
    <to sec="1081055178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
668[label="205.144.109.203;s;268pkt 268fpkt", shape=diamond, color=yellow];
2990[label="205.144.109.203;281pkt 281fpkt", shape=pentagon, color=darkviolet];
4186[label="205.144.109.203;280pkt 280fpkt", shape=invtriangle, color=brown];
4796[label="205.144.109.203;280pkt 280fpkt", shape=invhouse, color=bisque];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.144.109.203:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 4647: (0.360685%)&lt;BR/&gt; 4015: (0.360685%)&lt;BR/&gt; 2656: (0.360685%)&lt;BR/&gt; 2223: (0.360685%)&gt;];
}
668--2990[label="1;268pkt 268fpkt"];
668--4186[label="0.996269;267pkt 267fpkt"];
668--4796[label="0.996269;267pkt 267fpkt"];
2990--4186[label="1;280pkt 280fpkt"];
2990--4796[label="1;280pkt 280fpkt"];
4186--4796[label="1;280pkt 280fpkt"];
</description>
    <slice>
      <filter src_ip="205.144.109.203" src_port="53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.204.59.204"/>
    </slice>
    <from sec="1081055440" usec="0"/>
    <to sec="1081055580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912448,2.64531,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
159[label="196.127.60.210;d;6pkt 6fpkt", shape=diamond, color=yellow];
203[label="90.165.33.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
210[label="211.84.91.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
364[label="197.133.136.125;s;3pkt 3fpkt", shape=diamond, color=yellow];
629[label="90.88.173.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
1807[label="90.88.173.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3000[label="211.84.91.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4628[label="197.133.136.125;2pkt 2fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.133.136.125:*, 196.127.60.210:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62751: (9.375%)&lt;BR/&gt; 61449: (9.375%)&lt;BR/&gt; 43302: (9.375%)&lt;BR/&gt; 38310: (9.375%)&lt;BR/&gt; 38061: (9.375%)&gt;];
}
159--203[label="1;1pkt 1fpkt"];
159--210[label="1;1pkt 1fpkt"];
159--364[label="1;3pkt 3fpkt"];
159--629[label="1;1pkt 1fpkt"];
159--1807[label="1;1pkt 1fpkt"];
159--3000[label="1;1pkt 1fpkt"];
159--4628[label="1;2pkt 2fpkt"];
210--3000[label="1;1pkt 1fpkt"];
364--4628[label="1;2pkt 2fpkt"];
629--1807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.127.60.210" src_ip="197.133.136.125"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.104.20.205"/>
    </slice>
    <from sec="1081054841" usec="0"/>
    <to sec="1081054851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.130.168.206"/>
    </slice>
    <from sec="1081055068" usec="0"/>
    <to sec="1081055085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.55.194.209"/>
    </slice>
    <from sec="1081054819" usec="0"/>
    <to sec="1081055663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.178.40.211"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.245.67.213"/>
    </slice>
    <from sec="1081054920" usec="0"/>
    <to sec="1081054942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.128.254.213"/>
    </slice>
    <from sec="1081055516" usec="0"/>
    <to sec="1081055548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.130.21.216"/>
    </slice>
    <from sec="1081055344" usec="0"/>
    <to sec="1081055353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.218.183.217"/>
    </slice>
    <from sec="1081054867" usec="0"/>
    <to sec="1081054883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.130.152.218"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.237.114.219"/>
    </slice>
    <from sec="1081054811" usec="0"/>
    <to sec="1081055551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
1076[label="130.103.18.221;s;27pkt 27fpkt", shape=diamond, color=yellow];
3089[label="130.103.18.221;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4234[label="130.103.18.221;34pkt 34fpkt", shape=invtriangle, color=brown];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.18.221:*, 218.214.38.247:80}[51.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1875%)&lt;BR/&gt; 443: (7.8125%)&lt;BR/&gt; 4504: (1.5625%)&lt;BR/&gt; 4501: (1.5625%)&lt;BR/&gt; 4500: (1.5625%)&gt;];
}
1076--3089[label="1;27pkt 27fpkt"];
1076--4234[label="0.962963;26pkt 26fpkt"];
3089--4234[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="218.214.38.247" dst_port="80" src_ip="130.103.18.221"/>
    </slice>
    <from sec="1081055296" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.163.24.221"/>
    </slice>
    <from sec="1081055361" usec="0"/>
    <to sec="1081055409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.147.5.222"/>
    </slice>
    <from sec="1081055302" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.237.32.222"/>
    </slice>
    <from sec="1081054817" usec="0"/>
    <to sec="1081055311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.88.81.222"/>
    </slice>
    <from sec="1081054840" usec="0"/>
    <to sec="1081054854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.196.242.222"/>
    </slice>
    <from sec="1081054939" usec="0"/>
    <to sec="1081054976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758808,2.66362,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
195[label="132.237.220.246;s;278pkt 278fpkt", shape=diamond, color=yellow];
682[label="132.237.213.224;s;132pkt 132fpkt", shape=diamond, color=yellow];
729[label="132.237.195.28;s;108pkt 108fpkt", shape=diamond, color=yellow];
788[label="211.71.40.128;d;97pkt 97fpkt", shape=diamond, color=yellow];
3114[label="132.237.213.224;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.220.246:80, *:*}[47.3779%]&lt;BR/&gt;{132.237.213.224:80, *:*}[29.8373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1434%)&lt;BR/&gt; 0: (2.56082%)&lt;BR/&gt; 53: (0.640205%)&lt;BR/&gt; 33234: (0.192061%)&lt;BR/&gt; 16080: (0.192061%)&gt;];
}
195--788[label="0.0721649;7pkt 7fpkt"];
682--732[label="0.0263158;1pkt 1fpkt"];
682--788[label="0.0412371;4pkt 4fpkt"];
682--3114[label="1;132pkt 132fpkt"];
729--788[label="0.865979;84pkt 84fpkt"];
788--830[label="0.0103093;1pkt 1fpkt"];
788--3114[label="0.0515464;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="132.237.220.246" src_port="80"/>
      <filter src_ip="132.237.213.224" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.103.10.228"/>
    </slice>
    <from sec="1081054878" usec="0"/>
    <to sec="1081054938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
835[label="205.144.109.228;s;222pkt 222fpkt", shape=diamond, color=yellow];
3130[label="205.144.109.228;296pkt 296fpkt", shape=pentagon, color=darkviolet];
4254[label="205.144.109.228;296pkt 296fpkt", shape=invtriangle, color=brown];
4829[label="205.144.109.228;295pkt 295fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.144.109.228:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2569: (0.360685%)&lt;BR/&gt; 1522: (0.360685%)&lt;BR/&gt; 1132: (0.360685%)&lt;BR/&gt; 4699: (0.3156%)&gt;];
}
835--3130[label="1;222pkt 222fpkt"];
835--4254[label="1;222pkt 222fpkt"];
835--4829[label="0.995495;221pkt 221fpkt"];
3130--4254[label="1;296pkt 296fpkt"];
3130--4829[label="1;295pkt 295fpkt"];
4254--4829[label="1;295pkt 295fpkt"];
</description>
    <slice>
      <filter src_ip="205.144.109.228" src_port="53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.10.43.229"/>
    </slice>
    <from sec="1081055480" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.59.236.229"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.7.242.229"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.54386,2.5685,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
102[label="197.193.64.169s;1pkt 1fpkt", shape=rectangle, color=red];
285[label="160.204.61.136;d;79pkt 79fpkt", shape=diamond, color=yellow];
633[label="159.31.150.117;d;75pkt 75fpkt", shape=diamond, color=yellow];
797[label="214.244.154.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
867[label="209.35.7.49;s;22pkt 22fpkt", shape=diamond, color=yellow];
920[label="160.204.41.181;d;11pkt 11fpkt", shape=diamond, color=yellow];
965[label="209.164.91.123;s;53pkt 53fpkt", shape=diamond, color=yellow];
1033[label="197.39.199.11;d;19pkt 19fpkt", shape=diamond, color=yellow];
1060[label="130.103.181.40;d;81pkt 81fpkt", shape=diamond, color=yellow];
1077[label="6.94.49.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
1182[label="17.221.188.169;s;2pkt 2fpkt", shape=diamond, color=yellow];
1203[label="214.244.154.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
1426[label="196.8.96.10;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1754[label="209.35.7.49;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2108[label="6.94.49.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2374[label="209.164.91.123;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2557[label="214.244.154.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2740[label="17.221.188.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2912[label="214.244.154.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3095[label="210.0.89.221;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3122[label="207.137.25.227;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3159[label="202.118.147.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3329[label="196.8.96.10;21pkt 21fpkt", shape=invtriangle, color=brown];
3851[label="209.164.91.123;67pkt 67fpkt", shape=invtriangle, color=brown];
3942[label="214.244.154.145;1pkt 1fpkt", shape=invtriangle, color=brown];
4148[label="214.244.154.192;1pkt 1fpkt", shape=invtriangle, color=brown];
4624[label="209.164.91.123;67pkt 67fpkt", shape=invhouse, color=bisque];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.103.181.40:*}[27.0769%]&lt;BR/&gt;{*:80, 159.31.150.117:*}[23.0769%]&lt;BR/&gt;{*:80, 160.204.61.136:*}[23.0769%]&lt;BR/&gt;{209.164.91.123:80, *:*}[20.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5858%)&lt;BR/&gt; 53: (4.09583%)&lt;BR/&gt; 6257: (2.55023%)&lt;BR/&gt; 6699: (0.540958%)&lt;BR/&gt; 51909: (0.386399%)&gt;];
}
102--1033[label="1;1pkt 1fpkt"];
102--1182[label="1;1pkt 1fpkt"];
102--2740[label="1;1pkt 1fpkt"];
285--797[label="1;1pkt 1fpkt"];
285--965[label="0.113208;6pkt 6fpkt"];
285--1203[label="1;1pkt 1fpkt"];
285--2374[label="0.0895522;6pkt 6fpkt"];
285--2557[label="1;1pkt 1fpkt"];
285--2912[label="1;1pkt 1fpkt"];
285--3095[label="0.5;4pkt 4fpkt"];
285--3851[label="0.0895522;6pkt 6fpkt"];
285--3942[label="1;1pkt 1fpkt"];
285--4148[label="1;1pkt 1fpkt"];
285--4624[label="0.0895522;6pkt 6fpkt"];
633--867[label="0.863636;19pkt 19fpkt"];
633--965[label="0.0377358;2pkt 2fpkt"];
633--1426[label="1;21pkt 21fpkt"];
633--1754[label="0.904762;19pkt 19fpkt"];
633--2374[label="0.0298507;2pkt 2fpkt"];
633--3329[label="1;21pkt 21fpkt"];
633--3851[label="0.0298507;2pkt 2fpkt"];
633--4624[label="0.0298507;2pkt 2fpkt"];
797--2912[label="1;1pkt 1fpkt"];
797--4148[label="1;1pkt 1fpkt"];
867--1754[label="1;21pkt 21fpkt"];
920--965[label="0.181818;2pkt 2fpkt"];
920--2374[label="0.181818;2pkt 2fpkt"];
920--3159[label="1;1pkt 1fpkt"];
920--3851[label="0.181818;2pkt 2fpkt"];
920--4624[label="0.181818;2pkt 2fpkt"];
965--1033[label="0.105263;2pkt 2fpkt"];
965--1060[label="0.264151;14pkt 14fpkt"];
965--2374[label="0.981132;52pkt 52fpkt"];
965--3851[label="0.981132;52pkt 52fpkt"];
965--4624[label="0.981132;52pkt 52fpkt"];
1033--1077[label="1;2pkt 2fpkt"];
1033--1182[label="1;2pkt 2fpkt"];
1033--2108[label="1;1pkt 1fpkt"];
1033--2374[label="0.105263;2pkt 2fpkt"];
1033--2740[label="1;1pkt 1fpkt"];
1033--3851[label="0.105263;2pkt 2fpkt"];
1033--4624[label="0.105263;2pkt 2fpkt"];
1060--1168[label="0.0416667;2pkt 2fpkt"];
1060--1852[label="0.0192308;1pkt 1fpkt"];
1060--2374[label="0.253731;17pkt 17fpkt"];
1060--3122[label="0.333333;7pkt 7fpkt"];
1060--3263[label="0.0704225;5pkt 5fpkt"];
1060--3851[label="0.253731;17pkt 17fpkt"];
1060--4624[label="0.253731;17pkt 17fpkt"];
1077--2108[label="1;1pkt 1fpkt"];
1182--2740[label="1;1pkt 1fpkt"];
1203--2557[label="1;1pkt 1fpkt"];
1203--3942[label="1;1pkt 1fpkt"];
1426--3329[label="1;21pkt 21fpkt"];
2374--3851[label="1;67pkt 67fpkt"];
2374--4624[label="1;67pkt 67fpkt"];
2557--3942[label="1;1pkt 1fpkt"];
2912--4148[label="1;1pkt 1fpkt"];
3851--4624[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.181.40"/>
      <filter src_ip="209.164.91.123" src_port="80"/>
      <filter dst_ip="160.204.61.136" src_port="80"/>
      <filter dst_ip="159.31.150.117" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.3.230.233"/>
    </slice>
    <from sec="1081054991" usec="0"/>
    <to sec="1081055063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.189.58.234"/>
    </slice>
    <from sec="1081054861" usec="0"/>
    <to sec="1081055462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.199.110.234"/>
    </slice>
    <from sec="1081054913" usec="0"/>
    <to sec="1081055665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.4.144.234"/>
    </slice>
    <from sec="1081054806" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.136.91.237"/>
    </slice>
    <from sec="1081055610" usec="0"/>
    <to sec="1081055651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.38.26.238"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.198.113.239"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.11.218.239"/>
    </slice>
    <from sec="1081055475" usec="0"/>
    <to sec="1081055503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.237.36.240"/>
    </slice>
    <from sec="1081054822" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.237.220.240"/>
    </slice>
    <from sec="1081054908" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.68.244"/>
    </slice>
    <from sec="1081055455" usec="0"/>
    <to sec="1081055476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.111.161.245"/>
    </slice>
    <from sec="1081054875" usec="0"/>
    <to sec="1081054913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.169.172.248"/>
    </slice>
    <from sec="1081055602" usec="0"/>
    <to sec="1081055637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.174.136.254"/>
    </slice>
    <from sec="1081055076" usec="0"/>
    <to sec="1081055111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423026,2.71092,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.141.78.255"/>
    </slice>
    <from sec="1081054975" usec="0"/>
    <to sec="1081055032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
1316[label="23.105.0.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3266[label="23.105.0.0;1pkt 1fpkt", shape=invtriangle, color=brown];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.105.0.0:3954, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3954: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1316--3266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="23.105.0.0" src_port="3954"/>
    </slice>
    <from sec="1081055660" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.130.144.0"/>
    </slice>
    <from sec="1081055382" usec="0"/>
    <to sec="1081055399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.185.147.0"/>
    </slice>
    <from sec="1081055546" usec="0"/>
    <to sec="1081055598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.189.221.0"/>
    </slice>
    <from sec="1081055290" usec="0"/>
    <to sec="1081055295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.19.186.1"/>
    </slice>
    <from sec="1081055534" usec="0"/>
    <to sec="1081055548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.208.3.2"/>
    </slice>
    <from sec="1081054975" usec="0"/>
    <to sec="1081054982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.167.44.2"/>
    </slice>
    <from sec="1081055331" usec="0"/>
    <to sec="1081055339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.84.143.3"/>
    </slice>
    <from sec="1081055124" usec="0"/>
    <to sec="1081055132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.218.193.3"/>
    </slice>
    <from sec="1081054870" usec="0"/>
    <to sec="1081054890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.81.201.3"/>
    </slice>
    <from sec="1081055325" usec="0"/>
    <to sec="1081055337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.90.233.3"/>
    </slice>
    <from sec="1081055507" usec="0"/>
    <to sec="1081055523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
1357[label="211.80.20.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3288[label="211.80.20.4;2pkt 2fpkt", shape=invtriangle, color=brown];
4329[label="211.80.20.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.80.20.4:3181, 130.102.30.84:80}[50%]&lt;BR/&gt;{211.80.20.4:3435, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3435: (30%)&lt;BR/&gt; 3181: (20%)&gt;];
}
1357--3288[label="1;2pkt 2fpkt"];
1357--4329[label="1;1pkt 1fpkt"];
3288--4329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="211.80.20.4" src_port="3435"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="211.80.20.4" src_port="3181"/>
    </slice>
    <from sec="1081055633" usec="0"/>
    <to sec="1081055655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
351[label="210.194.159.185;s;2pkt 2fpkt", shape=diamond, color=yellow];
466[label="159.31.32.12;d;5pkt 5fpkt", shape=diamond, color=yellow];
884[label="130.103.148.153;d;108pkt 108fpkt", shape=diamond, color=yellow];
1374[label="22.10.164.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1766[label="215.46.234.49;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3256[label="209.4.7.254;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3297[label="22.10.164.5;2pkt 2fpkt", shape=invtriangle, color=brown];
4336[label="22.10.164.5;3pkt 3fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.46.234.49:80, 130.103.148.153:*}[32.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.978%)&lt;BR/&gt; 49363: (1.0989%)&lt;BR/&gt; 49362: (1.0989%)&lt;BR/&gt; 9300: (1.0989%)&lt;BR/&gt; 49359: (0.549451%)&gt;];
}
351--466[label="1;2pkt 2fpkt"];
466--3256[label="0.4;2pkt 2fpkt"];
884--1374[label="1;2pkt 2fpkt"];
884--1766[label="0.95;38pkt 38fpkt"];
884--3256[label="0.85;17pkt 17fpkt"];
884--3297[label="1;2pkt 2fpkt"];
884--4336[label="1;3pkt 3fpkt"];
1374--3297[label="1;2pkt 2fpkt"];
1374--4336[label="1;2pkt 2fpkt"];
3297--4336[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.148.153" src_ip="215.46.234.49" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
1379[label="212.202.8.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3299[label="212.202.8.6;1pkt 1fpkt", shape=invtriangle, color=brown];
4337[label="212.202.8.6;1pkt 1fpkt", shape=invhouse, color=bisque];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.202.8.6:3069, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3069: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1379--3299[label="1;1pkt 1fpkt"];
1379--4337[label="1;1pkt 1fpkt"];
3299--4337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="212.202.8.6" src_port="3069"/>
    </slice>
    <from sec="1081055694" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.145.252.6"/>
    </slice>
    <from sec="1081054886" usec="0"/>
    <to sec="1081054910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1394[label="196.51.26.7;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3308[label="196.51.26.7;22pkt 22fpkt", shape=invtriangle, color=brown];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.51.26.7:*, *:2745}[36.3636%]&lt;BR/&gt;{196.51.26.7:*, *:80}[22.7273%]&lt;BR/&gt;{196.51.26.7:*, *:1025}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (18.1818%)&lt;BR/&gt; 1025: (11.3636%)&lt;BR/&gt; 80: (11.3636%)&lt;BR/&gt; 6129: (9.09091%)&lt;BR/&gt; 4860: (2.27273%)&gt;];
}
1394--3308[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="196.51.26.7"/>
      <filter dst_port="1025" src_ip="196.51.26.7"/>
      <filter dst_port="80" src_ip="196.51.26.7"/>
    </slice>
    <from sec="1081054836" usec="0"/>
    <to sec="1081055561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.102.131.7"/>
    </slice>
    <from sec="1081054813" usec="0"/>
    <to sec="1081055691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.20.162.7"/>
    </slice>
    <from sec="1081055590" usec="0"/>
    <to sec="1081055603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
1407[label="210.8.136.8;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3316[label="210.8.136.8;15pkt 15fpkt", shape=invtriangle, color=brown];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.8.136.8:80, 130.103.107.74:*}[60%]&lt;BR/&gt;{210.8.136.8:80, 130.103.107.72:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 22581: (3.33333%)&lt;BR/&gt; 22580: (3.33333%)&lt;BR/&gt; 22579: (3.33333%)&lt;BR/&gt; 22578: (3.33333%)&gt;];
}
1407--3316[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.107.74" src_ip="210.8.136.8" src_port="80"/>
      <filter dst_ip="130.103.107.72" src_ip="210.8.136.8" src_port="80"/>
    </slice>
    <from sec="1081055667" usec="0"/>
    <to sec="1081055693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.165.228.8"/>
    </slice>
    <from sec="1081055025" usec="0"/>
    <to sec="1081055033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
1141[label="201.170.250.29;d;2pkt 2fpkt", shape=diamond, color=yellow];
1414[label="130.103.40.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3320[label="130.103.40.9;2pkt 2fpkt", shape=invtriangle, color=brown];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.165.8:0, 201.170.250.29:0}[33.3333%]&lt;BR/&gt;{130.103.40.9:0, 221.167.177.54:0}[33.3333%]&lt;BR/&gt;{130.103.40.9:0, 201.170.250.29:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1141--1414[label="0.5;1pkt 1fpkt"];
1141--3320[label="0.5;1pkt 1fpkt"];
1414--3320[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.170.250.29" src_ip="130.103.40.9"/>
      <filter dst_ip="221.167.177.54" src_ip="130.103.40.9"/>
      <filter dst_ip="201.170.250.29" src_ip="130.102.165.8"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
1416[label="192.189.61.9;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3322[label="192.189.61.9;3pkt 3fpkt", shape=invtriangle, color=brown];
4346[label="192.189.61.9;3pkt 3fpkt", shape=invhouse, color=bisque];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.189.61.9:1863, 130.103.98.99:5385}[33.3333%]&lt;BR/&gt;{192.189.61.9:1863, 160.204.223.169:1033}[33.3333%]&lt;BR/&gt;{192.189.61.9:1863, 159.31.214.232:2276}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 5385: (16.6667%)&lt;BR/&gt; 2276: (16.6667%)&lt;BR/&gt; 1033: (16.6667%)&gt;];
}
1416--3322[label="1;3pkt 3fpkt"];
1416--4346[label="1;3pkt 3fpkt"];
3322--4346[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.214.232" dst_port="2276" src_ip="192.189.61.9" src_port="1863"/>
      <filter dst_ip="160.204.223.169" dst_port="1033" src_ip="192.189.61.9" src_port="1863"/>
      <filter dst_ip="130.103.98.99" dst_port="5385" src_ip="192.189.61.9" src_port="1863"/>
    </slice>
    <from sec="1081054811" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.93.136.9"/>
    </slice>
    <from sec="1081054853" usec="0"/>
    <to sec="1081054864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.82.165.9"/>
    </slice>
    <from sec="1081054994" usec="0"/>
    <to sec="1081055039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.191.254.9"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.14.44.10"/>
    </slice>
    <from sec="1081055122" usec="0"/>
    <to sec="1081055133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.235.82.10"/>
    </slice>
    <from sec="1081055420" usec="0"/>
    <to sec="1081055478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.33.43.12"/>
    </slice>
    <from sec="1081055013" usec="0"/>
    <to sec="1081055031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
520[label="192.189.239.132;d;18pkt 18fpkt", shape=diamond, color=yellow];
1442[label="160.204.48.12;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2243[label="160.204.65.103;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3337[label="160.204.48.12;7pkt 7fpkt", shape=invtriangle, color=brown];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.189.239.132:443}[37.5%]&lt;BR/&gt;{*:*, 192.189.239.132:80}[37.5%]&lt;BR/&gt;{160.204.65.103:*, *:80}[20.8333%]&lt;BR/&gt;{160.204.48.12:*, *:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.0811%)&lt;BR/&gt; 443: (18.9189%)&lt;BR/&gt; 2257: (4.05405%)&lt;BR/&gt; 2253: (4.05405%)&lt;BR/&gt; 2250: (4.05405%)&gt;];
}
520--1442[label="0.666667;4pkt 4fpkt"];
520--1885[label="0.0555556;1pkt 1fpkt"];
520--2243[label="0.5;3pkt 3fpkt"];
520--3337[label="0.571429;4pkt 4fpkt"];
1442--3337[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="160.204.48.12"/>
      <filter dst_port="80" src_ip="160.204.65.103"/>
      <filter dst_ip="192.189.239.132" dst_port="80"/>
      <filter dst_ip="192.189.239.132" dst_port="443"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081055128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.42.23.13"/>
    </slice>
    <from sec="1081055208" usec="0"/>
    <to sec="1081055212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
1454[label="198.18.148.13;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3344[label="198.18.148.13;20pkt 20fpkt", shape=invtriangle, color=brown];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.18.148.13:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4653: (2.5%)&lt;BR/&gt; 4652: (2.5%)&lt;BR/&gt; 4651: (2.5%)&lt;BR/&gt; 4650: (2.5%)&gt;];
}
1454--3344[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="198.18.148.13"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
1457[label="130.102.220.13;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3346[label="130.102.220.13;8pkt 8fpkt", shape=invtriangle, color=brown];
4356[label="130.102.220.13;7pkt 7fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.220.13:80, 205.109.28.139:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50501: (6.81818%)&lt;BR/&gt; 41653: (6.81818%)&lt;BR/&gt; 24423: (6.81818%)&lt;BR/&gt; 24416: (6.81818%)&gt;];
}
1457--3346[label="1;7pkt 7fpkt"];
1457--4356[label="1;7pkt 7fpkt"];
3346--4356[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="205.109.28.139" src_ip="130.102.220.13" src_port="80"/>
    </slice>
    <from sec="1081055068" usec="0"/>
    <to sec="1081055233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
1156[label="130.103.99.14;s;98pkt 98fpkt", shape=diamond, color=yellow];
1464[label="130.103.99.14;107pkt 107fpkt", shape=pentagon, color=darkviolet];
3352[label="130.103.99.14;108pkt 108fpkt", shape=invtriangle, color=brown];
4359[label="130.103.99.14;108pkt 108fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.99.14:*, 195.10.73.159:80}[66.6667%]&lt;BR/&gt;{130.103.99.14:*, *:53}[21.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.848%)&lt;BR/&gt; 53: (10.5701%)&lt;BR/&gt; 0: (7.36342%)&lt;BR/&gt; 65460: (0.475059%)&lt;BR/&gt; 56164: (0.475059%)&gt;];
}
1156--1287[label="0.0408163;4pkt 4fpkt"];
1156--1302[label="0.0408163;4pkt 4fpkt"];
1156--1464[label="1;98pkt 98fpkt"];
1156--3352[label="1;98pkt 98fpkt"];
1156--4359[label="1;98pkt 98fpkt"];
1464--3352[label="1;107pkt 107fpkt"];
1464--4359[label="1;107pkt 107fpkt"];
3352--4359[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="130.103.99.14"/>
      <filter dst_ip="195.10.73.159" dst_port="80" src_ip="130.103.99.14"/>
    </slice>
    <from sec="1081054806" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.119.107.14"/>
    </slice>
    <from sec="1081055043" usec="0"/>
    <to sec="1081055074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.144.11.16"/>
    </slice>
    <from sec="1081055540" usec="0"/>
    <to sec="1081055562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
1489[label="130.102.6.17;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3366[label="130.102.6.17;5pkt 5fpkt", shape=invtriangle, color=brown];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.6.17:0, 192.248.168.1:0}[20%]&lt;BR/&gt;{130.102.6.17:0, 215.1.72.14:0}[20%]&lt;BR/&gt;{130.102.6.17:0, 210.6.99.156:0}[20%]&lt;BR/&gt;{130.102.6.17:0, 17.250.87.187:0}[20%]&lt;BR/&gt;{130.102.6.17:0, 134.196.6.237:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1489--3366[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="134.196.6.237" src_ip="130.102.6.17"/>
      <filter dst_ip="17.250.87.187" src_ip="130.102.6.17"/>
      <filter dst_ip="210.6.99.156" src_ip="130.102.6.17"/>
      <filter dst_ip="215.1.72.14" src_ip="130.102.6.17"/>
      <filter dst_ip="192.248.168.1" src_ip="130.102.6.17"/>
    </slice>
    <from sec="1081054947" usec="0"/>
    <to sec="1081055572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.192.20.17"/>
    </slice>
    <from sec="1081055558" usec="0"/>
    <to sec="1081055595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
1491[label="130.103.40.17;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3368[label="130.103.40.17;7pkt 7fpkt", shape=invtriangle, color=brown];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.40.17:80, 22.231.49.61:*}[28.5714%]&lt;BR/&gt;{130.103.40.17:80, 22.231.49.227:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 53120: (7.14286%)&lt;BR/&gt; 48952: (7.14286%)&lt;BR/&gt; 48459: (7.14286%)&lt;BR/&gt; 39641: (7.14286%)&gt;];
}
1491--3368[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="22.231.49.227" src_ip="130.103.40.17" src_port="80"/>
      <filter dst_ip="22.231.49.61" src_ip="130.103.40.17" src_port="80"/>
    </slice>
    <from sec="1081054811" usec="0"/>
    <to sec="1081055211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
384[label="130.103.9.44;d;147pkt 147fpkt", shape=diamond, color=yellow];
386[label="22.10.164.17;s;230pkt 230fpkt", shape=diamond, color=yellow];
809[label="132.237.25.53;d;99pkt 99fpkt", shape=diamond, color=yellow];
1159[label="130.102.35.128;d;154pkt 154fpkt", shape=diamond, color=yellow];
1495[label="22.10.164.17;365pkt 365fpkt", shape=pentagon, color=darkviolet];
2260[label="89.76.162.105;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2443[label="216.168.32.132;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2544[label="216.168.32.144;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3371[label="22.10.164.17;365pkt 365fpkt", shape=invtriangle, color=brown];
3792[label="89.76.162.105;31pkt 31fpkt", shape=invtriangle, color=brown];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.10.164.17:80, 130.103.9.44:*}[50.3571%]&lt;BR/&gt;{*:80, 130.102.35.128:*}[28.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8966%)&lt;BR/&gt; 15715: (0.137836%)&lt;BR/&gt; 15714: (0.137836%)&lt;BR/&gt; 15705: (0.137836%)&lt;BR/&gt; 15704: (0.137836%)&gt;];
}
384--386[label="0.972789;143pkt 143fpkt"];
384--1495[label="0.965986;142pkt 142fpkt"];
384--3371[label="0.965986;142pkt 142fpkt"];
386--1495[label="0.995652;229pkt 229fpkt"];
386--3371[label="0.995652;229pkt 229fpkt"];
809--831[label="0.0769231;1pkt 1fpkt"];
809--1269[label="0.010101;1pkt 1fpkt"];
809--1289[label="0.010101;1pkt 1fpkt"];
809--2443[label="0.0625;1pkt 1fpkt"];
809--2450[label="0.0322581;1pkt 1fpkt"];
809--2544[label="0.307692;4pkt 4fpkt"];
809--2676[label="0.0588235;1pkt 1fpkt"];
809--4000[label="0.0625;1pkt 1fpkt"];
809--4700[label="0.0625;1pkt 1fpkt"];
1159--1222[label="0.00649351;1pkt 1fpkt"];
1159--1260[label="0.00649351;1pkt 1fpkt"];
1159--1281[label="0.00649351;1pkt 1fpkt"];
1159--1296[label="0.00649351;1pkt 1fpkt"];
1159--1310[label="0.00649351;1pkt 1fpkt"];
1159--1495[label="0.5;77pkt 77fpkt"];
1159--2260[label="1;31pkt 31fpkt"];
1159--2273[label="0.0714286;2pkt 2fpkt"];
1159--2413[label="0.0263158;1pkt 1fpkt"];
1159--2443[label="0.4375;7pkt 7fpkt"];
1159--2544[label="0.230769;3pkt 3fpkt"];
1159--3371[label="0.5;77pkt 77fpkt"];
1159--3792[label="1;31pkt 31fpkt"];
1159--3870[label="0.0263158;1pkt 1fpkt"];
1495--3371[label="1;365pkt 365fpkt"];
2260--3792[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.35.128" src_port="80"/>
      <filter dst_ip="130.103.9.44" src_ip="22.10.164.17" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
1511[label="90.134.246.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3379[label="90.134.246.19;1pkt 1fpkt", shape=invtriangle, color=brown];
4375[label="90.134.246.19;2pkt 2fpkt", shape=invhouse, color=bisque];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.134.246.19:46261, 130.102.30.84:80}[50%]&lt;BR/&gt;{90.134.246.19:51119, 197.42.220.130:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46261: (37.5%)&lt;BR/&gt; 51119: (12.5%)&gt;];
}
1511--3379[label="1;1pkt 1fpkt"];
1511--4375[label="1;1pkt 1fpkt"];
3379--4375[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.42.220.130" dst_port="80" src_ip="90.134.246.19" src_port="51119"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.134.246.19" src_port="46261"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.32.26.20"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
1516[label="197.179.136.20;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3382[label="197.179.136.20;63pkt 63fpkt", shape=invtriangle, color=brown];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.179.136.20:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (7.14286%)&lt;BR/&gt; 3127: (7.14286%)&lt;BR/&gt; 2745: (7.14286%)&lt;BR/&gt; 1025: (7.14286%)&lt;BR/&gt; 445: (7.14286%)&gt;];
}
1516--3382[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter src_ip="197.179.136.20"/>
    </slice>
    <from sec="1081054931" usec="0"/>
    <to sec="1081055644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.16.173.20"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.211.185.20"/>
    </slice>
    <from sec="1081055347" usec="0"/>
    <to sec="1081055366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.198.234.20"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081054992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.208.0.21"/>
    </slice>
    <from sec="1081055667" usec="0"/>
    <to sec="1081055677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
403[label="159.31.93.210;d;6pkt 6fpkt", shape=diamond, color=yellow];
425[label="217.19.69.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
1530[label="217.19.22.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1671[label="217.19.69.38;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3392[label="217.19.22.22;3pkt 3fpkt", shape=invtriangle, color=brown];
3476[label="217.19.69.38;4pkt 4fpkt", shape=invtriangle, color=brown];
4384[label="217.19.22.22;4pkt 4fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.19.22.22:80, 159.31.93.210:*}[40%]&lt;BR/&gt;{217.19.69.38:80, 159.31.93.210:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 1329: (8%)&lt;BR/&gt; 1327: (8%)&lt;BR/&gt; 1280: (8%)&lt;BR/&gt; 1365: (6%)&gt;];
}
403--425[label="1;2pkt 2fpkt"];
403--1530[label="0.333333;1pkt 1fpkt"];
403--1671[label="0.666667;2pkt 2fpkt"];
403--3392[label="0.333333;1pkt 1fpkt"];
403--3476[label="0.5;2pkt 2fpkt"];
403--4384[label="0.5;2pkt 2fpkt"];
425--1671[label="1;2pkt 2fpkt"];
425--3476[label="1;2pkt 2fpkt"];
1530--3392[label="1;3pkt 3fpkt"];
1530--4384[label="1;3pkt 3fpkt"];
1671--3476[label="1;3pkt 3fpkt"];
3392--4384[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.93.210" src_ip="217.19.69.38" src_port="80"/>
      <filter dst_ip="159.31.93.210" src_ip="217.19.22.22" src_port="80"/>
    </slice>
    <from sec="1081054900" usec="0"/>
    <to sec="1081055644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.9.39.22"/>
    </slice>
    <from sec="1081054839" usec="0"/>
    <to sec="1081054845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.8.166.22"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081054811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
1541[label="117.222.36.23;148pkt 148fpkt", shape=pentagon, color=darkviolet];
3398[label="117.222.36.23;148pkt 148fpkt", shape=invtriangle, color=brown];
4387[label="117.222.36.23;148pkt 148fpkt", shape=invhouse, color=bisque];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.222.36.23:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1541--3398[label="1;148pkt 148fpkt"];
1541--4387[label="1;148pkt 148fpkt"];
3398--4387[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="117.222.36.23" src_port="1026"/>
    </slice>
    <from sec="1081054894" usec="0"/>
    <to sec="1081054917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
1542[label="6.146.77.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3399[label="6.146.77.23;1pkt 1fpkt", shape=invtriangle, color=brown];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.146.77.23:4662, 132.237.25.36:4056}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4056: (50%)&gt;];
}
1542--3399[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.237.25.36" dst_port="4056" src_ip="6.146.77.23" src_port="4662"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081055599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.14.153.23"/>
    </slice>
    <from sec="1081055649" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.203.40.24"/>
    </slice>
    <from sec="1081055028" usec="0"/>
    <to sec="1081055086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.137.52.24"/>
    </slice>
    <from sec="1081055684" usec="0"/>
    <to sec="1081055692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.195.146.24"/>
    </slice>
    <from sec="1081055011" usec="0"/>
    <to sec="1081055016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.149.5.25"/>
    </slice>
    <from sec="1081055356" usec="0"/>
    <to sec="1081055367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.42.30.25"/>
    </slice>
    <from sec="1081055450" usec="0"/>
    <to sec="1081055457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.206.153.26"/>
    </slice>
    <from sec="1081055242" usec="0"/>
    <to sec="1081055266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
1568[label="132.237.195.26;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3416[label="132.237.195.26;83pkt 83fpkt", shape=invtriangle, color=brown];
4396[label="132.237.195.26;83pkt 83fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.195.26:*, *:80}[46.988%]&lt;BR/&gt;{132.237.195.26:0, *:0}[39.759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.5161%)&lt;BR/&gt; 80: (23.5887%)&lt;BR/&gt; 53: (6.65323%)&lt;BR/&gt; 32770: (6.04839%)&lt;BR/&gt; 51105: (0.604839%)&gt;];
}
1568--3416[label="1;82pkt 82fpkt"];
1568--4396[label="1;82pkt 82fpkt"];
3416--4396[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.237.195.26"/>
      <filter src_ip="132.237.195.26"/>
    </slice>
    <from sec="1081054811" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.228.19.27"/>
    </slice>
    <from sec="1081054825" usec="0"/>
    <to sec="1081054836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.132.77.27"/>
    </slice>
    <from sec="1081054887" usec="0"/>
    <to sec="1081054893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
1579[label="192.189.238.27;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3423[label="192.189.238.27;18pkt 18fpkt", shape=invtriangle, color=brown];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.189.238.27:80, *:*}[52.6316%]&lt;BR/&gt;{192.189.238.27:443, *:*}[47.3684%]&lt;BR/&gt;{192.189.238.27:*, 160.204.48.77:*}[21.0526%]&lt;BR/&gt;{192.189.238.27:*, 130.103.21.82:*}[21.0526%]&lt;BR/&gt;{192.189.238.27:*, 196.127.40.174:*}[21.0526%]&lt;BR/&gt;{192.189.238.27:*, 160.204.68.235:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.6757%)&lt;BR/&gt; 443: (24.3243%)&lt;BR/&gt; 4548: (2.7027%)&lt;BR/&gt; 4544: (2.7027%)&lt;BR/&gt; 4541: (2.7027%)&gt;];
}
1579--3423[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.68.235" src_ip="192.189.238.27"/>
      <filter dst_ip="196.127.40.174" src_ip="192.189.238.27"/>
      <filter dst_ip="130.103.21.82" src_ip="192.189.238.27"/>
      <filter dst_ip="160.204.48.77" src_ip="192.189.238.27"/>
      <filter src_ip="192.189.238.27" src_port="80"/>
      <filter src_ip="192.189.238.27" src_port="443"/>
    </slice>
    <from sec="1081054819" usec="0"/>
    <to sec="1081055657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.80.111.29"/>
    </slice>
    <from sec="1081054869" usec="0"/>
    <to sec="1081054872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
1590[label="210.130.146.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3427[label="210.130.146.29;1pkt 1fpkt", shape=invtriangle, color=brown];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.130.146.29:1058, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1058: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1590--3427[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.130.146.29" src_port="1058"/>
    </slice>
    <from sec="1081055632" usec="0"/>
    <to sec="1081055683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.106.232.29"/>
    </slice>
    <from sec="1081055394" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
948[label="159.31.33.131;d;161pkt 161fpkt", shape=diamond, color=yellow];
1597[label="192.189.61.30;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3431[label="192.189.61.30;2pkt 2fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 159.31.33.131:34440}[97.546%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34440: (47.8916%)&lt;BR/&gt; 1863: (1.80723%)&lt;BR/&gt; 1041: (0.903614%)&lt;BR/&gt; 61436: (0.60241%)&lt;BR/&gt; 65428: (0.301205%)&gt;];
}
948--1597[label="0.333333;1pkt 1fpkt"];
948--3431[label="0.5;1pkt 1fpkt"];
1597--3431[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.33.131" dst_port="34440"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.166.162.30"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.33.186.30"/>
    </slice>
    <from sec="1081055182" usec="0"/>
    <to sec="1081055199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.145.241.30"/>
    </slice>
    <from sec="1081055568" usec="0"/>
    <to sec="1081055581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.13.249.30"/>
    </slice>
    <from sec="1081055500" usec="0"/>
    <to sec="1081055519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.54386,2.5685,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
34[label="160.204.61.136s;2pkt 2fpkt", shape=rectangle, color=red];
286[label="160.204.61.136;s;94pkt 94fpkt", shape=diamond, color=yellow];
576[label="209.164.84.190;d;108pkt 108fpkt", shape=diamond, color=yellow];
692[label="197.39.25.107;s;17pkt 17fpkt", shape=diamond, color=yellow];
767[label="130.102.159.108;s;112pkt 112fpkt", shape=diamond, color=yellow];
796[label="214.244.154.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
851[label="132.237.213.31;s;64pkt 64fpkt", shape=diamond, color=yellow];
964[label="209.164.91.123;d;64pkt 64fpkt", shape=diamond, color=yellow];
981[label="130.102.60.198;s;97pkt 97fpkt", shape=diamond, color=yellow];
1040[label="209.139.103.214;d;86pkt 86fpkt", shape=diamond, color=yellow];
1041[label="160.204.60.223;s;99pkt 99fpkt", shape=diamond, color=yellow];
1061[label="130.103.181.40;s;173pkt 173fpkt", shape=diamond, color=yellow];
1148[label="197.39.199.11;s;100pkt 100fpkt", shape=diamond, color=yellow];
1623[label="130.102.214.32;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1653[label="132.237.24.36;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1693[label="130.103.181.40;194pkt 194fpkt", shape=pentagon, color=darkviolet];
1724[label="130.103.65.45;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2462[label="196.127.61.134;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2872[label="130.102.208.187;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2961[label="130.102.60.198;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3107[label="160.204.60.223;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3446[label="130.102.214.32;6pkt 6fpkt", shape=invtriangle, color=brown];
3489[label="130.103.181.40;195pkt 195fpkt", shape=invtriangle, color=brown];
4429[label="130.103.181.40;194pkt 194fpkt", shape=invhouse, color=bisque];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[72.1925%]&lt;BR/&gt;{130.103.181.40:*, *:*}[20.8556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.5021%)&lt;BR/&gt; 53: (12.8731%)&lt;BR/&gt; 7144: (2.05224%)&lt;BR/&gt; 6257: (0.799574%)&lt;BR/&gt; 1863: (0.319829%)&gt;];
}
34--55[label="0.5;1pkt 1fpkt"];
34--155[label="0.5;1pkt 1fpkt"];
34--286[label="0.5;1pkt 1fpkt"];
34--796[label="1;1pkt 1fpkt"];
34--916[label="0.5;1pkt 1fpkt"];
34--1217[label="0.5;1pkt 1fpkt"];
34--1257[label="0.5;1pkt 1fpkt"];
286--796[label="1;1pkt 1fpkt"];
286--964[label="0.109375;7pkt 7fpkt"];
286--1267[label="0.0106383;1pkt 1fpkt"];
286--1287[label="0.106383;10pkt 10fpkt"];
286--1302[label="0.106383;10pkt 10fpkt"];
576--692[label="0.647059;11pkt 11fpkt"];
576--851[label="0.484375;31pkt 31fpkt"];
576--981[label="0.0618557;6pkt 6fpkt"];
576--1074[label="0.0430108;4pkt 4fpkt"];
576--1287[label="0.0833333;9pkt 9fpkt"];
576--1302[label="0.0833333;9pkt 9fpkt"];
576--1623[label="0.2;1pkt 1fpkt"];
576--1653[label="0.0909091;1pkt 1fpkt"];
576--2462[label="0.25;7pkt 7fpkt"];
576--2872[label="0.125;1pkt 1fpkt"];
576--2961[label="0.0576923;6pkt 6fpkt"];
576--3446[label="0.333333;2pkt 2fpkt"];
692--964[label="0.0588235;1pkt 1fpkt"];
692--1287[label="0.0588235;1pkt 1fpkt"];
692--1302[label="0.0588235;1pkt 1fpkt"];
767--1040[label="0.0465116;4pkt 4fpkt"];
767--1231[label="0.00892857;1pkt 1fpkt"];
767--1263[label="0.00892857;1pkt 1fpkt"];
851--862[label="0.125;8pkt 8fpkt"];
851--1012[label="0.16;4pkt 4fpkt"];
964--1061[label="0.265625;17pkt 17fpkt"];
964--1148[label="0.03125;2pkt 2fpkt"];
964--1287[label="0.109375;7pkt 7fpkt"];
964--1302[label="0.109375;7pkt 7fpkt"];
964--1693[label="0.328125;21pkt 21fpkt"];
964--1724[label="0.25;1pkt 1fpkt"];
964--1885[label="0.015625;1pkt 1fpkt"];
964--1941[label="0.0526316;1pkt 1fpkt"];
964--3489[label="0.328125;21pkt 21fpkt"];
964--4429[label="0.328125;21pkt 21fpkt"];
981--1164[label="0.0212766;1pkt 1fpkt"];
981--2961[label="1;97pkt 97fpkt"];
1040--1041[label="0.930233;80pkt 80fpkt"];
1040--1061[label="0.0232558;2pkt 2fpkt"];
1040--1287[label="0.0348837;3pkt 3fpkt"];
1040--1302[label="0.0348837;3pkt 3fpkt"];
1040--1693[label="0.0232558;2pkt 2fpkt"];
1040--3107[label="0.930233;80pkt 80fpkt"];
1040--3489[label="0.0232558;2pkt 2fpkt"];
1040--4429[label="0.0232558;2pkt 2fpkt"];
1041--1287[label="0.030303;3pkt 3fpkt"];
1041--1302[label="0.030303;3pkt 3fpkt"];
1041--3107[label="1;99pkt 99fpkt"];
1061--1124[label="0.0410959;3pkt 3fpkt"];
1061--1693[label="0.99422;172pkt 172fpkt"];
1061--3489[label="1;173pkt 173fpkt"];
1061--4429[label="0.99422;172pkt 172fpkt"];
1148--1287[label="0.01;1pkt 1fpkt"];
1148--1302[label="0.01;1pkt 1fpkt"];
1623--3446[label="1;5pkt 5fpkt"];
1693--3489[label="1;194pkt 194fpkt"];
1693--4429[label="1;194pkt 194fpkt"];
3489--4429[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter src_ip="130.103.181.40"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.135.76.34"/>
    </slice>
    <from sec="1081055251" usec="0"/>
    <to sec="1081055270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
1647[label="217.90.233.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3462[label="217.90.233.34;2pkt 2fpkt", shape=invtriangle, color=brown];
4418[label="217.90.233.34;1pkt 1fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.90.233.34:1035, 130.102.30.84:80}[50%]&lt;BR/&gt;{217.90.233.34:1048, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1048: (37.5%)&lt;BR/&gt; 1035: (12.5%)&gt;];
}
1647--3462[label="1;1pkt 1fpkt"];
1647--4418[label="1;1pkt 1fpkt"];
3462--4418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="217.90.233.34" src_port="1048"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="217.90.233.34" src_port="1035"/>
    </slice>
    <from sec="1081055654" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.11.68.36"/>
    </slice>
    <from sec="1081055048" usec="0"/>
    <to sec="1081055066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
1681[label="210.192.50.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3482[label="210.192.50.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.192.50.39:1064, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1064: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1681--3482[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.192.50.39" src_port="1064"/>
    </slice>
    <from sec="1081055636" usec="0"/>
    <to sec="1081055654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
1683[label="21.36.72.39;220pkt 220fpkt", shape=pentagon, color=darkviolet];
3484[label="21.36.72.39;220pkt 220fpkt", shape=invtriangle, color=brown];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.36.72.39:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1683--3484[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="21.36.72.39" src_port="1028"/>
    </slice>
    <from sec="1081054960" usec="0"/>
    <to sec="1081055004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.83.87.40"/>
    </slice>
    <from sec="1081054978" usec="0"/>
    <to sec="1081054995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
217[label="214.251.176.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
438[label="214.193.242.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
927[label="130.103.9.39;d;5pkt 5fpkt", shape=diamond, color=yellow];
3096[label="214.251.176.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3490[label="214.193.242.40;1pkt 1fpkt", shape=invtriangle, color=brown];
4238[label="214.251.176.221;1pkt 1fpkt", shape=invtriangle, color=brown];
4430[label="214.193.242.40;1pkt 1fpkt", shape=invhouse, color=bisque];
4823[label="214.251.176.221;1pkt 1fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.189.61.0:1863, 130.103.9.39:1044}[20%]&lt;BR/&gt;{214.193.242.40:15035, 130.103.9.39:2725}[20%]&lt;BR/&gt;{192.189.61.57:1863, 130.103.9.39:3556}[20%]&lt;BR/&gt;{210.0.38.144:10015, 130.103.9.39:1029}[20%]&lt;BR/&gt;{214.251.176.221:15006, 130.103.9.39:2799}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15006: (20.8333%)&lt;BR/&gt; 2799: (20.8333%)&lt;BR/&gt; 15035: (16.6667%)&lt;BR/&gt; 2725: (16.6667%)&lt;BR/&gt; 1863: (8.33333%)&gt;];
}
217--927[label="1;1pkt 1fpkt"];
217--3096[label="1;1pkt 1fpkt"];
217--4238[label="1;1pkt 1fpkt"];
217--4823[label="1;1pkt 1fpkt"];
438--927[label="1;1pkt 1fpkt"];
438--3490[label="1;1pkt 1fpkt"];
438--4430[label="1;1pkt 1fpkt"];
927--3096[label="1;1pkt 1fpkt"];
927--3490[label="1;1pkt 1fpkt"];
927--4238[label="1;1pkt 1fpkt"];
927--4430[label="1;1pkt 1fpkt"];
927--4823[label="1;1pkt 1fpkt"];
3096--4238[label="1;1pkt 1fpkt"];
3096--4823[label="1;1pkt 1fpkt"];
3490--4430[label="1;1pkt 1fpkt"];
4238--4823[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.9.39" dst_port="2799" src_ip="214.251.176.221" src_port="15006"/>
      <filter dst_ip="130.103.9.39" dst_port="1029" src_ip="210.0.38.144" src_port="10015"/>
      <filter dst_ip="130.103.9.39" dst_port="3556" src_ip="192.189.61.57" src_port="1863"/>
      <filter dst_ip="130.103.9.39" dst_port="2725" src_ip="214.193.242.40" src_port="15035"/>
      <filter dst_ip="130.103.9.39" dst_port="1044" src_ip="192.189.61.0" src_port="1863"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.20.224.41"/>
    </slice>
    <from sec="1081054874" usec="0"/>
    <to sec="1081054883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
1718[label="130.102.187.44;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3501[label="130.102.187.44;105pkt 105fpkt", shape=invtriangle, color=brown];
4439[label="130.102.187.44;104pkt 104fpkt", shape=invhouse, color=bisque];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.187.44:*, *:25}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.3738%)&lt;BR/&gt; 113: (8.14696%)&lt;BR/&gt; 50797: (0.479233%)&lt;BR/&gt; 40541: (0.479233%)&lt;BR/&gt; 40540: (0.479233%)&gt;];
}
1718--3501[label="1;104pkt 104fpkt"];
1718--4439[label="1;104pkt 104fpkt"];
3501--4439[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="130.102.187.44"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.216.0.45"/>
    </slice>
    <from sec="1081055261" usec="0"/>
    <to sec="1081055271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.188.181.45"/>
    </slice>
    <from sec="1081054843" usec="0"/>
    <to sec="1081054852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31436,2.66371,503,1 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
10[label="210.168.183.46s;1pkt 1fpkt", shape=rectangle, color=red];
3513[label="210.168.183.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.168.183.46:2610, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2610: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10--55[label="1;1pkt 1fpkt"];
10--3513[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.168.183.46" src_port="2610"/>
    </slice>
    <from sec="1081055631" usec="0"/>
    <to sec="1081055641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
1745[label="22.243.33.48;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3517[label="22.243.33.48;6pkt 6fpkt", shape=invtriangle, color=brown];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.243.33.48:80, 130.103.13.134:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1192: (8.33333%)&lt;BR/&gt; 1191: (8.33333%)&lt;BR/&gt; 1190: (8.33333%)&lt;BR/&gt; 1189: (8.33333%)&gt;];
}
1745--3517[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.13.134" src_ip="22.243.33.48" src_port="80"/>
    </slice>
    <from sec="1081055105" usec="0"/>
    <to sec="1081055115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.133.72.50"/>
    </slice>
    <from sec="1081055513" usec="0"/>
    <to sec="1081055523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.140.112.50"/>
    </slice>
    <from sec="1081055117" usec="0"/>
    <to sec="1081055137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.132.196.50"/>
    </slice>
    <from sec="1081055274" usec="0"/>
    <to sec="1081055299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.137.73.51"/>
    </slice>
    <from sec="1081055677" usec="0"/>
    <to sec="1081055687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.131.231.51"/>
    </slice>
    <from sec="1081055358" usec="0"/>
    <to sec="1081055390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.193.53.52"/>
    </slice>
    <from sec="1081055522" usec="0"/>
    <to sec="1081055536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.11.73.52"/>
    </slice>
    <from sec="1081054979" usec="0"/>
    <to sec="1081054988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.132.98.52"/>
    </slice>
    <from sec="1081054928" usec="0"/>
    <to sec="1081054938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.194.217.52"/>
    </slice>
    <from sec="1081054938" usec="0"/>
    <to sec="1081054948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.128.234.52"/>
    </slice>
    <from sec="1081055622" usec="0"/>
    <to sec="1081055636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.147.61.53"/>
    </slice>
    <from sec="1081055177" usec="0"/>
    <to sec="1081055182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
1805[label="210.141.89.53;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3547[label="210.141.89.53;251pkt 251fpkt", shape=invtriangle, color=brown];
4462[label="210.141.89.53;251pkt 251fpkt", shape=invhouse, color=bisque];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.141.89.53:1487, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1487: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1805--3547[label="1;251pkt 251fpkt"];
1805--4462[label="1;251pkt 251fpkt"];
3547--4462[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.141.89.53" src_port="1487"/>
    </slice>
    <from sec="1081055231" usec="0"/>
    <to sec="1081055248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.88.173.53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.188.36.54"/>
    </slice>
    <from sec="1081055378" usec="0"/>
    <to sec="1081055388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.194.134.54"/>
    </slice>
    <from sec="1081055010" usec="0"/>
    <to sec="1081055015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.11.190.54"/>
    </slice>
    <from sec="1081055148" usec="0"/>
    <to sec="1081055160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.168.246.54"/>
    </slice>
    <from sec="1081055535" usec="0"/>
    <to sec="1081055545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
1027[label="130.103.102.180;d;111pkt 111fpkt", shape=diamond, color=yellow];
1533[label="22.141.77.22;48pkt 48fpkt", shape=pentagon, color=darkviolet];
1824[label="22.141.77.55;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3395[label="22.141.77.22;49pkt 49fpkt", shape=invtriangle, color=brown];
3557[label="22.141.77.55;44pkt 44fpkt", shape=invtriangle, color=brown];
4385[label="22.141.77.22;49pkt 49fpkt", shape=invhouse, color=bisque];
4465[label="22.141.77.55;43pkt 43fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.141.77.55:*, *:*}[26.1905%]&lt;BR/&gt;{22.141.77.39:2703, 130.103.102.180:*}[21.4286%]&lt;BR/&gt;{22.141.77.22:2703, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (34.9227%)&lt;BR/&gt; 7: (10.0515%)&lt;BR/&gt; 53: (4.12371%)&lt;BR/&gt; 49152: (3.86598%)&lt;BR/&gt; 3902: (0.773196%)&gt;];
}
1027--1533[label="0.416667;20pkt 20fpkt"];
1027--1824[label="0.363636;16pkt 16fpkt"];
1027--1852[label="0.0192308;1pkt 1fpkt"];
1027--3263[label="0.0140845;1pkt 1fpkt"];
1027--3395[label="0.408163;20pkt 20fpkt"];
1027--3557[label="0.363636;16pkt 16fpkt"];
1027--4385[label="0.408163;20pkt 20fpkt"];
1027--4465[label="0.372093;16pkt 16fpkt"];
1533--3395[label="1;48pkt 48fpkt"];
1533--4385[label="1;48pkt 48fpkt"];
1824--3557[label="1;44pkt 44fpkt"];
1824--4465[label="1;43pkt 43fpkt"];
3395--4385[label="1;49pkt 49fpkt"];
3557--4465[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="22.141.77.55"/>
      <filter src_ip="22.141.77.22" src_port="2703"/>
      <filter dst_ip="130.103.102.180" src_ip="22.141.77.39" src_port="2703"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.138.165.55"/>
    </slice>
    <from sec="1081055344" usec="0"/>
    <to sec="1081055354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.74.198.57"/>
    </slice>
    <from sec="1081055265" usec="0"/>
    <to sec="1081055275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.193.5.59"/>
    </slice>
    <from sec="1081054822" usec="0"/>
    <to sec="1081054836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
1187[label="117.11.51.59;s;2pkt 2fpkt", shape=diamond, color=yellow];
1857[label="117.11.51.59;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3571[label="117.11.51.59;9pkt 9fpkt", shape=invtriangle, color=brown];
4477[label="117.11.51.59;8pkt 8fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.11.51.59:*, 196.127.4.116:*}[66.6667%]&lt;BR/&gt;{117.11.51.59:*, 130.102.30.84:80}[22.2222%]&lt;BR/&gt;{117.11.51.59:*, *:2745}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.6429%)&lt;BR/&gt; 2745: (8.92857%)&lt;BR/&gt; 1241: (7.14286%)&lt;BR/&gt; 1220: (7.14286%)&lt;BR/&gt; 6129: (5.35714%)&gt;];
}
1187--1217[label="1;2pkt 2fpkt"];
1187--1257[label="1;2pkt 2fpkt"];
1187--1857[label="1;2pkt 2fpkt"];
1187--3571[label="1;2pkt 2fpkt"];
1187--4477[label="1;2pkt 2fpkt"];
1857--3571[label="1;9pkt 9fpkt"];
1857--4477[label="1;8pkt 8fpkt"];
3571--4477[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="196.127.4.116" src_ip="117.11.51.59"/>
      <filter dst_port="2745" src_ip="117.11.51.59"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="117.11.51.59"/>
    </slice>
    <from sec="1081055222" usec="0"/>
    <to sec="1081055540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.153.224.59"/>
    </slice>
    <from sec="1081054943" usec="0"/>
    <to sec="1081054957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
1869[label="130.103.2.60;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3578[label="130.103.2.60;10pkt 10fpkt", shape=invtriangle, color=brown];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.2.60:80, 22.231.49.224:*}[40%]&lt;BR/&gt;{130.103.2.60:80, 20.232.208.153:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61774: (5%)&lt;BR/&gt; 60209: (5%)&lt;BR/&gt; 59405: (5%)&lt;BR/&gt; 51370: (5%)&gt;];
}
1869--3578[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="22.231.49.224" src_ip="130.103.2.60" src_port="80"/>
      <filter dst_ip="20.232.208.153" src_ip="130.103.2.60" src_port="80"/>
    </slice>
    <from sec="1081054826" usec="0"/>
    <to sec="1081055641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.186.170.60"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.157.36.61"/>
    </slice>
    <from sec="1081055594" usec="0"/>
    <to sec="1081055609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
1895[label="159.31.155.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3587[label="159.31.155.62;1pkt 1fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.31.155.62:3396, 194.200.127.229:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3396: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1895--3587[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.200.127.229" dst_port="80" src_ip="159.31.155.62" src_port="3396"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.197.168.62"/>
    </slice>
    <from sec="1081055563" usec="0"/>
    <to sec="1081055660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.195.30.63"/>
    </slice>
    <from sec="1081055502" usec="0"/>
    <to sec="1081055537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
1903[label="194.58.76.63;312pkt 312fpkt", shape=pentagon, color=darkviolet];
3591[label="194.58.76.63;312pkt 312fpkt", shape=invtriangle, color=brown];
4486[label="194.58.76.63;312pkt 312fpkt", shape=invhouse, color=bisque];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.58.76.63:*, *:1026}[51.6026%]&lt;BR/&gt;{194.58.76.63:*, *:1027}[48.3974%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.8013%)&lt;BR/&gt; 1027: (24.1987%)&lt;BR/&gt; 4746: (0.320513%)&lt;BR/&gt; 4619: (0.320513%)&lt;BR/&gt; 4192: (0.320513%)&gt;];
}
1903--3591[label="1;312pkt 312fpkt"];
1903--4486[label="1;312pkt 312fpkt"];
3591--4486[label="1;312pkt 312fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="194.58.76.63"/>
      <filter dst_port="1027" src_ip="194.58.76.63"/>
    </slice>
    <from sec="1081055281" usec="0"/>
    <to sec="1081055449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
1912[label="90.196.35.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3593[label="90.196.35.64;1pkt 1fpkt", shape=invtriangle, color=brown];
4488[label="90.196.35.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.196.35.64:1049, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1049: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1912--3593[label="1;1pkt 1fpkt"];
1912--4488[label="1;1pkt 1fpkt"];
3593--4488[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.196.35.64" src_port="1049"/>
    </slice>
    <from sec="1081055640" usec="0"/>
    <to sec="1081055647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.74.71.64"/>
    </slice>
    <from sec="1081055653" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
355[label="196.127.57.71;d;1044pkt 1044fpkt", shape=diamond, color=yellow];
537[label="208.5.171.22;s;3pkt 3fpkt", shape=diamond, color=yellow];
541[label="196.127.60.0;d;17pkt 17fpkt", shape=diamond, color=yellow];
646[label="196.127.57.83;d;458pkt 458fpkt", shape=diamond, color=yellow];
818[label="132.237.114.218;d;501pkt 501fpkt", shape=diamond, color=yellow];
888[label="221.155.27.210;s;7pkt 7fpkt", shape=diamond, color=yellow];
889[label="221.155.27.222;s;6pkt 6fpkt", shape=diamond, color=yellow];
972[label="221.251.118.65;s;3pkt 3fpkt", shape=diamond, color=yellow];
973[label="221.155.27.216;s;5pkt 5fpkt", shape=diamond, color=yellow];
974[label="221.155.27.223;s;4pkt 4fpkt", shape=diamond, color=yellow];
976[label="221.251.118.71;s;3pkt 3fpkt", shape=diamond, color=yellow];
1055[label="221.155.27.211;s;6pkt 6fpkt", shape=diamond, color=yellow];
1143[label="196.127.60.131;d;96pkt 96fpkt", shape=diamond, color=yellow];
1539[label="208.5.171.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1918[label="221.251.118.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1928[label="221.251.118.65;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1938[label="221.251.118.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1983[label="221.251.118.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1998[label="221.251.118.71;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3031[label="221.155.27.211;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3066[label="221.155.27.216;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3070[label="221.155.27.217;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3076[label="221.155.27.218;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3091[label="221.155.27.221;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3100[label="221.155.27.222;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3598[label="221.251.118.64;2pkt 2fpkt", shape=invtriangle, color=brown];
3604[label="221.251.118.65;2pkt 2fpkt", shape=invtriangle, color=brown];
3611[label="221.251.118.66;2pkt 2fpkt", shape=invtriangle, color=brown];
3649[label="221.251.118.71;2pkt 2fpkt", shape=invtriangle, color=brown];
4228[label="221.155.27.218;3pkt 3fpkt", shape=invtriangle, color=brown];
4491[label="221.251.118.64;3pkt 3fpkt", shape=invhouse, color=bisque];
4494[label="221.251.118.65;2pkt 2fpkt", shape=invhouse, color=bisque];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.127.57.71:53}[48.2872%]&lt;BR/&gt;{*:*, 132.237.114.218:53}[23.0408%]&lt;BR/&gt;{*:*, 196.127.57.83:*}[21.4923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.685%)&lt;BR/&gt; 65534: (2.07581%)&lt;BR/&gt; 32768: (1.48917%)&lt;BR/&gt; 0: (1.30866%)&lt;BR/&gt; 35180: (1.08303%)&gt;];
}
355--396[label="0.0140845;1pkt 1fpkt"];
355--537[label="0.333333;1pkt 1fpkt"];
355--888[label="0.142857;1pkt 1fpkt"];
355--889[label="0.166667;1pkt 1fpkt"];
355--972[label="0.333333;1pkt 1fpkt"];
355--973[label="0.2;1pkt 1fpkt"];
355--974[label="0.25;1pkt 1fpkt"];
355--976[label="0.333333;1pkt 1fpkt"];
355--986[label="0.0208333;1pkt 1fpkt"];
355--1055[label="0.166667;1pkt 1fpkt"];
355--1267[label="0.066092;69pkt 69fpkt"];
355--1539[label="0.333333;1pkt 1fpkt"];
355--1569[label="0.0192308;1pkt 1fpkt"];
355--1621[label="0.015873;1pkt 1fpkt"];
355--1918[label="0.333333;1pkt 1fpkt"];
355--1928[label="0.333333;1pkt 1fpkt"];
355--1938[label="0.333333;1pkt 1fpkt"];
355--1983[label="0.5;1pkt 1fpkt"];
355--1998[label="0.333333;1pkt 1fpkt"];
355--2493[label="0.0238095;1pkt 1fpkt"];
355--2932[label="0.0123457;1pkt 1fpkt"];
355--3031[label="0.166667;1pkt 1fpkt"];
355--3050[label="0.0338983;2pkt 2fpkt"];
355--3066[label="0.2;1pkt 1fpkt"];
355--3070[label="0.2;1pkt 1fpkt"];
355--3076[label="0.25;1pkt 1fpkt"];
355--3091[label="0.25;1pkt 1fpkt"];
355--3100[label="0.166667;1pkt 1fpkt"];
355--3417[label="0.0192308;1pkt 1fpkt"];
355--3598[label="0.5;1pkt 1fpkt"];
355--3604[label="0.5;1pkt 1fpkt"];
355--3611[label="0.5;1pkt 1fpkt"];
355--3649[label="0.5;1pkt 1fpkt"];
355--3910[label="0.0243902;1pkt 1fpkt"];
355--4228[label="0.333333;1pkt 1fpkt"];
355--4397[label="0.0192308;1pkt 1fpkt"];
355--4491[label="0.333333;1pkt 1fpkt"];
355--4494[label="0.5;1pkt 1fpkt"];
355--4655[label="0.0238095;1pkt 1fpkt"];
537--541[label="0.333333;1pkt 1fpkt"];
537--646[label="0.333333;1pkt 1fpkt"];
537--1539[label="1;3pkt 3fpkt"];
541--888[label="0.142857;1pkt 1fpkt"];
541--889[label="0.166667;1pkt 1fpkt"];
541--972[label="0.333333;1pkt 1fpkt"];
541--973[label="0.2;1pkt 1fpkt"];
541--974[label="0.25;1pkt 1fpkt"];
541--976[label="0.333333;1pkt 1fpkt"];
541--1055[label="0.166667;1pkt 1fpkt"];
541--1539[label="0.333333;1pkt 1fpkt"];
541--1918[label="0.333333;1pkt 1fpkt"];
541--1928[label="0.333333;1pkt 1fpkt"];
541--1938[label="0.333333;1pkt 1fpkt"];
541--1983[label="0.5;1pkt 1fpkt"];
541--1998[label="0.333333;1pkt 1fpkt"];
541--3031[label="0.166667;1pkt 1fpkt"];
541--3066[label="0.2;1pkt 1fpkt"];
541--3070[label="0.2;1pkt 1fpkt"];
541--3076[label="0.25;1pkt 1fpkt"];
541--3091[label="0.25;1pkt 1fpkt"];
541--3100[label="0.166667;1pkt 1fpkt"];
541--3598[label="0.5;1pkt 1fpkt"];
541--3604[label="0.5;1pkt 1fpkt"];
541--3611[label="0.5;1pkt 1fpkt"];
541--3649[label="0.5;1pkt 1fpkt"];
541--4228[label="0.333333;1pkt 1fpkt"];
541--4491[label="0.333333;1pkt 1fpkt"];
541--4494[label="0.5;1pkt 1fpkt"];
646--888[label="0.142857;1pkt 1fpkt"];
646--889[label="0.166667;1pkt 1fpkt"];
646--972[label="0.333333;1pkt 1fpkt"];
646--973[label="0.2;1pkt 1fpkt"];
646--974[label="0.25;1pkt 1fpkt"];
646--976[label="0.333333;1pkt 1fpkt"];
646--1055[label="0.166667;1pkt 1fpkt"];
646--1180[label="0.0222222;1pkt 1fpkt"];
646--1267[label="0.0545852;25pkt 25fpkt"];
646--1539[label="0.333333;1pkt 1fpkt"];
646--1918[label="0.333333;1pkt 1fpkt"];
646--1920[label="0.025641;1pkt 1fpkt"];
646--1928[label="0.333333;1pkt 1fpkt"];
646--1938[label="0.333333;1pkt 1fpkt"];
646--1998[label="0.333333;1pkt 1fpkt"];
646--2916[label="0.0416667;1pkt 1fpkt"];
646--3031[label="0.166667;1pkt 1fpkt"];
646--3050[label="0.0169492;1pkt 1fpkt"];
646--3066[label="0.2;1pkt 1fpkt"];
646--3070[label="0.2;1pkt 1fpkt"];
646--3076[label="0.25;1pkt 1fpkt"];
646--3100[label="0.166667;1pkt 1fpkt"];
646--3246[label="0.05;1pkt 1fpkt"];
646--3263[label="0.0140845;1pkt 1fpkt"];
646--3456[label="0.0163934;1pkt 1fpkt"];
646--3600[label="0.0263158;1pkt 1fpkt"];
646--3805[label="0.0175439;1pkt 1fpkt"];
646--4150[label="0.0416667;1pkt 1fpkt"];
646--4491[label="0.333333;1pkt 1fpkt"];
646--4857[label="0.05;1pkt 1fpkt"];
818--1055[label="0.166667;1pkt 1fpkt"];
818--1267[label="0.0838323;42pkt 42fpkt"];
818--1270[label="0.00199601;1pkt 1fpkt"];
818--1290[label="0.00199601;1pkt 1fpkt"];
818--1305[label="0.00199601;1pkt 1fpkt"];
818--3031[label="0.166667;1pkt 1fpkt"];
888--1143[label="0.142857;1pkt 1fpkt"];
889--1143[label="0.166667;1pkt 1fpkt"];
889--3100[label="1;6pkt 6fpkt"];
972--1928[label="1;3pkt 3fpkt"];
972--3604[label="1;2pkt 2fpkt"];
972--4494[label="1;2pkt 2fpkt"];
973--3066[label="1;5pkt 5fpkt"];
976--1998[label="1;3pkt 3fpkt"];
976--3649[label="1;2pkt 2fpkt"];
1055--3031[label="1;6pkt 6fpkt"];
1143--1254[label="0.0416667;1pkt 1fpkt"];
1143--1267[label="0.0104167;1pkt 1fpkt"];
1143--1852[label="0.0192308;1pkt 1fpkt"];
1143--2996[label="0.0181818;1pkt 1fpkt"];
1143--3100[label="0.166667;1pkt 1fpkt"];
1143--3263[label="0.0140845;1pkt 1fpkt"];
1143--3805[label="0.0175439;1pkt 1fpkt"];
1918--3598[label="1;2pkt 2fpkt"];
1918--4491[label="1;3pkt 3fpkt"];
1928--3604[label="1;2pkt 2fpkt"];
1928--4494[label="1;2pkt 2fpkt"];
1938--3611[label="1;2pkt 2fpkt"];
1998--3649[label="1;2pkt 2fpkt"];
3076--4228[label="1;3pkt 3fpkt"];
3598--4491[label="1;2pkt 2fpkt"];
3604--4494[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.127.57.83"/>
      <filter dst_ip="196.127.57.71" dst_port="53"/>
      <filter dst_ip="132.237.114.218" dst_port="53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.9.185.64"/>
    </slice>
    <from sec="1081055453" usec="0"/>
    <to sec="1081055466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.99.127.65"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.219.34.66"/>
    </slice>
    <from sec="1081054976" usec="0"/>
    <to sec="1081054982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
510[label="210.172.80.66;s;26pkt 26fpkt", shape=diamond, color=yellow];
1936[label="210.172.80.66;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3609[label="210.172.80.66;32pkt 32fpkt", shape=invtriangle, color=brown];
4497[label="210.172.80.66;32pkt 32fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.172.80.66:*, *:80}[78.7879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.6179%)&lt;BR/&gt; 1025: (4.87805%)&lt;BR/&gt; 2745: (3.25203%)&lt;BR/&gt; 55482: (1.62602%)&lt;BR/&gt; 54296: (1.62602%)&gt;];
}
510--1217[label="0.153846;4pkt 4fpkt"];
510--1257[label="0.153846;4pkt 4fpkt"];
510--1287[label="0.0769231;2pkt 2fpkt"];
510--1302[label="0.0769231;2pkt 2fpkt"];
510--1936[label="1;26pkt 26fpkt"];
510--3609[label="0.961538;25pkt 25fpkt"];
510--4497[label="0.961538;25pkt 25fpkt"];
1936--3609[label="1;32pkt 32fpkt"];
1936--4497[label="1;32pkt 32fpkt"];
3609--4497[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="210.172.80.66"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.188.106.66"/>
    </slice>
    <from sec="1081055380" usec="0"/>
    <to sec="1081055392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.7.120.66"/>
    </slice>
    <from sec="1081055606" usec="0"/>
    <to sec="1081055620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.16.211.66"/>
    </slice>
    <from sec="1081055519" usec="0"/>
    <to sec="1081055530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
1946[label="210.0.33.67;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3615[label="210.0.33.67;3pkt 3fpkt", shape=invtriangle, color=brown];
4502[label="210.0.33.67;3pkt 3fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.0.33.67:48939, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{210.0.33.67:48960, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{210.0.33.67:49262, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49262: (16.6667%)&lt;BR/&gt; 48960: (16.6667%)&lt;BR/&gt; 48939: (16.6667%)&gt;];
}
1946--3615[label="1;3pkt 3fpkt"];
1946--4502[label="1;3pkt 3fpkt"];
3615--4502[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.0.33.67" src_port="49262"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.0.33.67" src_port="48960"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.0.33.67" src_port="48939"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.212.44.67"/>
    </slice>
    <from sec="1081055285" usec="0"/>
    <to sec="1081055295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
527[label="130.102.76.211;s;214pkt 214fpkt", shape=diamond, color=yellow];
966[label="202.220.169.13;d;143pkt 143fpkt", shape=diamond, color=yellow];
1049[label="202.220.169.65;d;60pkt 60fpkt", shape=diamond, color=yellow];
1949[label="130.102.64.67;80pkt 80fpkt", shape=pentagon, color=darkviolet];
3618[label="130.102.64.67;79pkt 79fpkt", shape=invtriangle, color=brown];
4505[label="130.102.64.67;80pkt 80fpkt", shape=invhouse, color=bisque];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.76.211:*, 202.220.169.13:80}[45.2381%]&lt;BR/&gt;{130.102.64.67:*, *:80}[26.8707%]&lt;BR/&gt;{*:*, 202.220.169.65:80}[20.4082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7713%)&lt;BR/&gt; 49484: (0.457317%)&lt;BR/&gt; 49476: (0.457317%)&lt;BR/&gt; 49475: (0.457317%)&lt;BR/&gt; 49527: (0.304878%)&gt;];
}
527--966[label="0.93007;133pkt 133fpkt"];
527--1049[label="0.966667;58pkt 58fpkt"];
527--1287[label="0.0420561;9pkt 9fpkt"];
527--1302[label="0.0420561;9pkt 9fpkt"];
966--1287[label="0.00699301;1pkt 1fpkt"];
966--1302[label="0.00699301;1pkt 1fpkt"];
966--1949[label="0.125;10pkt 10fpkt"];
966--3618[label="0.126582;10pkt 10fpkt"];
966--4505[label="0.125;10pkt 10fpkt"];
1049--1287[label="0.1;6pkt 6fpkt"];
1049--1302[label="0.1;6pkt 6fpkt"];
1049--1949[label="0.0333333;2pkt 2fpkt"];
1049--3618[label="0.0166667;1pkt 1fpkt"];
1049--4505[label="0.0333333;2pkt 2fpkt"];
1949--3618[label="1;79pkt 79fpkt"];
1949--4505[label="1;80pkt 80fpkt"];
3618--4505[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.102.64.67"/>
      <filter dst_ip="202.220.169.65" dst_port="80"/>
      <filter dst_ip="202.220.169.13" dst_port="80" src_ip="130.102.76.211"/>
    </slice>
    <from sec="1081054821" usec="0"/>
    <to sec="1081055633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.128.70.67"/>
    </slice>
    <from sec="1081055456" usec="0"/>
    <to sec="1081055480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.199.133.67"/>
    </slice>
    <from sec="1081054935" usec="0"/>
    <to sec="1081054942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.5.232.67"/>
    </slice>
    <from sec="1081055484" usec="0"/>
    <to sec="1081055503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.146.7.68"/>
    </slice>
    <from sec="1081055268" usec="0"/>
    <to sec="1081055279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
1959[label="159.87.49.68;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3624[label="159.87.49.68;3pkt 3fpkt", shape=invtriangle, color=brown];
4507[label="159.87.49.68;3pkt 3fpkt", shape=invhouse, color=bisque];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.87.49.68:0, 96.212.74.12:0}[25%]&lt;BR/&gt;{159.87.49.68:0, 90.227.59.39:0}[25%]&lt;BR/&gt;{159.87.49.68:0, 5.100.146.116:0}[25%]&lt;BR/&gt;{159.87.49.68:0, 210.10.10.208:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1959--3624[label="1;3pkt 3fpkt"];
1959--4507[label="1;3pkt 3fpkt"];
3624--4507[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="210.10.10.208" src_ip="159.87.49.68"/>
      <filter dst_ip="5.100.146.116" src_ip="159.87.49.68"/>
      <filter dst_ip="90.227.59.39" src_ip="159.87.49.68"/>
      <filter dst_ip="96.212.74.12" src_ip="159.87.49.68"/>
    </slice>
    <from sec="1081054850" usec="0"/>
    <to sec="1081055531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
1960[label="130.102.53.68;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3625[label="130.102.53.68;19pkt 19fpkt", shape=invtriangle, color=brown];
4508[label="130.102.53.68;19pkt 19fpkt", shape=invhouse, color=bisque];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.53.68:80, *:*}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4138%)&lt;BR/&gt; 64612: (2.58621%)&lt;BR/&gt; 64488: (2.58621%)&lt;BR/&gt; 58702: (2.58621%)&lt;BR/&gt; 51478: (2.58621%)&gt;];
}
1960--3625[label="1;19pkt 19fpkt"];
1960--4508[label="1;19pkt 19fpkt"];
3625--4508[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="130.102.53.68" src_port="80"/>
    </slice>
    <from sec="1081054930" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.187.92.68"/>
    </slice>
    <from sec="1081055297" usec="0"/>
    <to sec="1081055302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.141.159.68"/>
    </slice>
    <from sec="1081055531" usec="0"/>
    <to sec="1081055558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.154.167.68"/>
    </slice>
    <from sec="1081054832" usec="0"/>
    <to sec="1081054894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.144.172.68"/>
    </slice>
    <from sec="1081054855" usec="0"/>
    <to sec="1081055057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
1973[label="90.2.194.68;174pkt 174fpkt", shape=pentagon, color=darkviolet];
3632[label="90.2.194.68;173pkt 173fpkt", shape=invtriangle, color=brown];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.2.194.68:1081, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1081: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1973--3632[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.2.194.68" src_port="1081"/>
    </slice>
    <from sec="1081055150" usec="0"/>
    <to sec="1081055186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.222.237.68"/>
    </slice>
    <from sec="1081055097" usec="0"/>
    <to sec="1081055120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,004,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
325[label="197.39.199.4;d;230pkt 230fpkt", shape=diamond, color=yellow];
421[label="21.9.2.124;s;2pkt 2fpkt", shape=diamond, color=yellow];
783[label="21.9.2.72;s;2pkt 2fpkt", shape=diamond, color=yellow];
1975[label="21.9.2.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2811[label="21.8.128.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3634[label="21.9.2.69;1pkt 1fpkt", shape=invtriangle, color=brown];
4513[label="21.9.2.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 197.39.199.4:*}[89.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (44.7479%)&lt;BR/&gt; 0: (7.14286%)&lt;BR/&gt; 139: (1.2605%)&lt;BR/&gt; 4078: (0.840336%)&lt;BR/&gt; 4080: (0.420168%)&gt;];
}
325--421[label="1;2pkt 2fpkt"];
325--783[label="1;2pkt 2fpkt"];
325--1975[label="1;1pkt 1fpkt"];
325--2811[label="1;1pkt 1fpkt"];
325--3634[label="1;1pkt 1fpkt"];
325--4513[label="1;1pkt 1fpkt"];
1975--3634[label="1;1pkt 1fpkt"];
1975--4513[label="1;1pkt 1fpkt"];
3634--4513[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.39.199.4" src_port="445"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.154.41.69"/>
    </slice>
    <from sec="1081055121" usec="0"/>
    <to sec="1081055153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.219.44.69"/>
    </slice>
    <from sec="1081054909" usec="0"/>
    <to sec="1081054914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.137.250.69"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081054822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.216.111.70"/>
    </slice>
    <from sec="1081055103" usec="0"/>
    <to sec="1081055109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.73.222.70"/>
    </slice>
    <from sec="1081055580" usec="0"/>
    <to sec="1081055591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.80.85.71"/>
    </slice>
    <from sec="1081055590" usec="0"/>
    <to sec="1081055602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.172.136.71"/>
    </slice>
    <from sec="1081054825" usec="0"/>
    <to sec="1081054833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.83.73.72"/>
    </slice>
    <from sec="1081055262" usec="0"/>
    <to sec="1081055273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.192.20.73"/>
    </slice>
    <from sec="1081055646" usec="0"/>
    <to sec="1081055652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.78.33.73"/>
    </slice>
    <from sec="1081055100" usec="0"/>
    <to sec="1081055111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
2012[label="160.204.68.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3658[label="160.204.68.73;2pkt 2fpkt", shape=invtriangle, color=brown];
4525[label="160.204.68.73;2pkt 2fpkt", shape=invhouse, color=bisque];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.68.73:3189, 209.231.116.94:80}[50%]&lt;BR/&gt;{160.204.68.73:3191, 22.246.53.115:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3191: (25%)&lt;BR/&gt; 3189: (25%)&gt;];
}
2012--3658[label="1;2pkt 2fpkt"];
2012--4525[label="1;2pkt 2fpkt"];
3658--4525[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="22.246.53.115" dst_port="80" src_ip="160.204.68.73" src_port="3191"/>
      <filter dst_ip="209.231.116.94" dst_port="80" src_ip="160.204.68.73" src_port="3189"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.137.0.74"/>
    </slice>
    <from sec="1081055208" usec="0"/>
    <to sec="1081055216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
2020[label="197.189.155.74;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3662[label="197.189.155.74;40pkt 40fpkt", shape=invtriangle, color=brown];
4526[label="197.189.155.74;40pkt 40fpkt", shape=invhouse, color=bisque];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.189.155.74:80, 130.103.100.78:*}[87.8049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34025: (1.23967%)&lt;BR/&gt; 34024: (1.23967%)&lt;BR/&gt; 34023: (1.23967%)&lt;BR/&gt; 34013: (1.23967%)&gt;];
}
2020--3662[label="1;40pkt 40fpkt"];
2020--4526[label="1;40pkt 40fpkt"];
3662--4526[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.100.78" src_ip="197.189.155.74" src_port="80"/>
    </slice>
    <from sec="1081055644" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.4.9.75"/>
    </slice>
    <from sec="1081055573" usec="0"/>
    <to sec="1081055603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.160.24.75"/>
    </slice>
    <from sec="1081055336" usec="0"/>
    <to sec="1081055350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
2029[label="4.178.94.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3667[label="4.178.94.75;1pkt 1fpkt", shape=invtriangle, color=brown];
4531[label="4.178.94.75;1pkt 1fpkt", shape=invhouse, color=bisque];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.178.94.75:4462, 132.237.25.36:1060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4462: (50%)&lt;BR/&gt; 1060: (50%)&gt;];
}
2029--3667[label="1;1pkt 1fpkt"];
2029--4531[label="1;1pkt 1fpkt"];
3667--4531[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.237.25.36" dst_port="1060" src_ip="4.178.94.75" src_port="4462"/>
    </slice>
    <from sec="1081054807" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.117.160.76"/>
    </slice>
    <from sec="1081055226" usec="0"/>
    <to sec="1081055254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
2042[label="215.11.180.76;234pkt 234fpkt", shape=pentagon, color=darkviolet];
3672[label="215.11.180.76;234pkt 234fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.11.180.76:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65237: (0.213675%)&lt;BR/&gt; 65119: (0.213675%)&lt;BR/&gt; 65083: (0.213675%)&lt;BR/&gt; 65043: (0.213675%)&gt;];
}
2042--3672[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.11.180.76"/>
    </slice>
    <from sec="1081055008" usec="0"/>
    <to sec="1081055046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.13.177.77"/>
    </slice>
    <from sec="1081055294" usec="0"/>
    <to sec="1081055303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.228.40.78"/>
    </slice>
    <from sec="1081055324" usec="0"/>
    <to sec="1081055345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.43.68.78"/>
    </slice>
    <from sec="1081055196" usec="0"/>
    <to sec="1081055218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
2054[label="130.103.84.78;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3680[label="130.103.84.78;34pkt 34fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.84.78:*, *:25}[31.4286%]&lt;BR/&gt;{130.103.84.78:*, *:113}[22.8571%]&lt;BR/&gt;{130.103.84.78:25, *:*}[22.8571%]&lt;BR/&gt;{130.103.84.78:53, *:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.8116%)&lt;BR/&gt; 53: (20.2899%)&lt;BR/&gt; 113: (11.5942%)&lt;BR/&gt; 0: (2.89855%)&lt;BR/&gt; 41857: (1.44928%)&gt;];
}
2054--3680[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="130.103.84.78" src_port="25"/>
      <filter dst_port="25" src_ip="130.103.84.78"/>
      <filter dst_port="113" src_ip="130.103.84.78"/>
      <filter dst_port="53" src_ip="130.103.84.78" src_port="53"/>
    </slice>
    <from sec="1081054911" usec="0"/>
    <to sec="1081055673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
408[label="130.103.100.78;d;416pkt 416fpkt", shape=diamond, color=yellow];
432[label="217.165.10.140;s;12pkt 12fpkt", shape=diamond, color=yellow];
453[label="130.103.84.100;d;177pkt 177fpkt", shape=diamond, color=yellow];
1058[label="90.156.21.7;s;22pkt 22fpkt", shape=diamond, color=yellow];
1082[label="90.135.99.164;s;37pkt 37fpkt", shape=diamond, color=yellow];
1471[label="90.135.99.15;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1532[label="90.153.45.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1616[label="90.156.21.32;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2056[label="197.185.113.78;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2084[label="90.156.21.81;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2204[label="90.156.21.98;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2218[label="197.179.44.101;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2245[label="90.76.97.103;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2333[label="197.187.162.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2366[label="90.191.72.122;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2481[label="90.135.99.136;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2510[label="217.165.10.140;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2646[label="90.162.232.157;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2711[label="90.156.16.166;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3394[label="90.153.45.22;2pkt 2fpkt", shape=invtriangle, color=brown];
3682[label="197.185.113.78;11pkt 11fpkt", shape=invtriangle, color=brown];
3693[label="90.156.21.81;5pkt 5fpkt", shape=invtriangle, color=brown];
3770[label="197.179.44.101;4pkt 4fpkt", shape=invtriangle, color=brown];
3784[label="90.76.97.103;2pkt 2fpkt", shape=invtriangle, color=brown];
3847[label="90.191.72.122;14pkt 14fpkt", shape=invtriangle, color=brown];
3985[label="90.162.232.157;22pkt 22fpkt", shape=invtriangle, color=brown];
4021[label="90.156.16.166;14pkt 14fpkt", shape=invtriangle, color=brown];
4538[label="197.185.113.78;11pkt 11fpkt", shape=invhouse, color=bisque];
4686[label="192.189.56.153;9pkt 9fpkt", shape=invhouse, color=bisque];
4694[label="90.162.232.157;22pkt 22fpkt", shape=invhouse, color=bisque];
4712[label="90.156.16.166;14pkt 14fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.103.100.78:*}[69.9346%]&lt;BR/&gt;{*:80, 130.103.84.100:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5233%)&lt;BR/&gt; 8080: (0.317797%)&lt;BR/&gt; 33513: (0.211864%)&lt;BR/&gt; 33512: (0.211864%)&lt;BR/&gt; 33504: (0.211864%)&gt;];
}
408--432[label="1;12pkt 12fpkt"];
408--1058[label="0.863636;19pkt 19fpkt"];
408--1082[label="0.864865;32pkt 32fpkt"];
408--1168[label="0.0625;3pkt 3fpkt"];
408--1471[label="1;9pkt 9fpkt"];
408--1532[label="1;2pkt 2fpkt"];
408--2056[label="1;11pkt 11fpkt"];
408--2084[label="1;5pkt 5fpkt"];
408--2204[label="1;11pkt 11fpkt"];
408--2218[label="1;4pkt 4fpkt"];
408--2333[label="1;1pkt 1fpkt"];
408--2366[label="0.857143;12pkt 12fpkt"];
408--2481[label="1;28pkt 28fpkt"];
408--2510[label="1;12pkt 12fpkt"];
408--2646[label="1;23pkt 23fpkt"];
408--2711[label="1;14pkt 14fpkt"];
408--3394[label="1;2pkt 2fpkt"];
408--3682[label="1;11pkt 11fpkt"];
408--3693[label="1;5pkt 5fpkt"];
408--3770[label="1;4pkt 4fpkt"];
408--3847[label="0.857143;12pkt 12fpkt"];
408--3985[label="1;22pkt 22fpkt"];
408--4021[label="1;14pkt 14fpkt"];
408--4538[label="1;11pkt 11fpkt"];
408--4694[label="1;22pkt 22fpkt"];
408--4712[label="1;14pkt 14fpkt"];
432--2510[label="1;12pkt 12fpkt"];
453--1045[label="0.0227273;1pkt 1fpkt"];
453--1616[label="0.461538;6pkt 6fpkt"];
453--1851[label="0.0833333;3pkt 3fpkt"];
453--1913[label="0.0232558;1pkt 1fpkt"];
453--2245[label="1;3pkt 3fpkt"];
453--2273[label="0.0357143;1pkt 1fpkt"];
453--2366[label="0.142857;2pkt 2fpkt"];
453--2373[label="0.047619;2pkt 2fpkt"];
453--3073[label="0.0666667;1pkt 1fpkt"];
453--3594[label="0.0238095;1pkt 1fpkt"];
453--3784[label="1;2pkt 2fpkt"];
453--3847[label="0.142857;2pkt 2fpkt"];
453--4686[label="0.555556;5pkt 5fpkt"];
1532--3394[label="1;2pkt 2fpkt"];
2056--3682[label="1;11pkt 11fpkt"];
2056--4538[label="1;11pkt 11fpkt"];
2084--3693[label="1;5pkt 5fpkt"];
2218--3770[label="1;4pkt 4fpkt"];
2245--3784[label="1;2pkt 2fpkt"];
2366--3847[label="1;14pkt 14fpkt"];
2646--3985[label="1;22pkt 22fpkt"];
2646--4694[label="1;22pkt 22fpkt"];
2711--4021[label="1;14pkt 14fpkt"];
2711--4712[label="1;14pkt 14fpkt"];
3682--4538[label="1;11pkt 11fpkt"];
3985--4694[label="1;22pkt 22fpkt"];
4021--4712[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.100.78" src_port="80"/>
      <filter dst_ip="130.103.84.100" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.84.67.79"/>
    </slice>
    <from sec="1081055163" usec="0"/>
    <to sec="1081055183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
2076[label="211.83.36.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3690[label="211.83.36.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.83.36.80:3750, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3750: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2076--3690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="211.83.36.80" src_port="3750"/>
    </slice>
    <from sec="1081055632" usec="0"/>
    <to sec="1081055647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.54386,2.5685,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
47[label="209.233.132.200s;3pkt 3fpkt", shape=rectangle, color=red];
200[label="130.103.107.74;d;405pkt 405fpkt", shape=diamond, color=yellow];
245[label="130.102.240.1;d;376pkt 376fpkt", shape=diamond, color=yellow];
288[label="160.204.67.203;d;17pkt 17fpkt", shape=diamond, color=yellow];
290[label="209.233.132.200;s;186pkt 186fpkt", shape=diamond, color=yellow];
296[label="215.82.34.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
321[label="22.140.250.228;s;4pkt 4fpkt", shape=diamond, color=yellow];
357[label="130.103.65.81;d;114pkt 114fpkt", shape=diamond, color=yellow];
407[label="209.164.66.59;s;54pkt 54fpkt", shape=diamond, color=yellow];
519[label="216.168.32.149;s;181pkt 181fpkt", shape=diamond, color=yellow];
536[label="130.103.128.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
602[label="159.31.34.84;d;58pkt 58fpkt", shape=diamond, color=yellow];
623[label="196.34.5.82;s;15pkt 15fpkt", shape=diamond, color=yellow];
638[label="130.103.107.72;d;540pkt 540fpkt", shape=diamond, color=yellow];
675[label="159.31.251.36;d;106pkt 106fpkt", shape=diamond, color=yellow];
731[label="130.102.86.69;d;32pkt 32fpkt", shape=diamond, color=yellow];
742[label="20.106.224.88;s;16pkt 16fpkt", shape=diamond, color=yellow];
755[label="209.233.132.201;s;7pkt 7fpkt", shape=diamond, color=yellow];
787[label="209.171.29.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
836[label="216.168.32.128;s;43pkt 43fpkt", shape=diamond, color=yellow];
863[label="209.164.84.179;s;116pkt 116fpkt", shape=diamond, color=yellow];
873[label="130.103.3.128;d;65pkt 65fpkt", shape=diamond, color=yellow];
890[label="22.243.45.149;s;66pkt 66fpkt", shape=diamond, color=yellow];
941[label="197.42.205.210;d;142pkt 142fpkt", shape=diamond, color=yellow];
954[label="20.206.13.209;s;46pkt 46fpkt", shape=diamond, color=yellow];
982[label="209.171.30.92;s;12pkt 12fpkt", shape=diamond, color=yellow];
1023[label="192.189.56.136;s;3pkt 3fpkt", shape=diamond, color=yellow];
1031[label="88.17.120.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
1059[label="130.103.67.74;d;15pkt 15fpkt", shape=diamond, color=yellow];
1069[label="192.235.83.176;s;16pkt 16fpkt", shape=diamond, color=yellow];
1125[label="5.81.29.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
1168[label="20.206.13.219;s;48pkt 48fpkt", shape=diamond, color=yellow];
1435[label="209.238.157.11;15pkt 15fpkt", shape=pentagon, color=darkviolet];
1586[label="90.138.139.28;33pkt 33fpkt", shape=pentagon, color=darkviolet];
1588[label="22.243.53.29;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1613[label="192.189.132.31;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1619[label="217.85.90.32;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1739[label="210.0.36.47;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1935[label="192.235.68.66;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1954[label="21.96.145.67;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2048[label="210.136.231.77;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2094[label="196.34.5.82;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2153[label="20.106.224.88;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2229[label="192.189.199.101;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2373[label="192.189.62.123;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2415[label="192.189.56.129;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2426[label="209.164.66.130;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2497[label="209.164.66.138;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2588[label="22.243.45.149;81pkt 81fpkt", shape=pentagon, color=darkviolet];
2632[label="209.176.92.156;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2676[label="209.35.0.161;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2681[label="217.146.149.161;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2779[label="90.162.232.173;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2796[label="192.235.83.176;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2878[label="210.0.36.188;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2906[label="20.106.224.191;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2913[label="20.64.185.192;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2926[label="210.0.36.194;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2975[label="209.233.132.200;316pkt 316fpkt", shape=pentagon, color=darkviolet];
3073[label="21.96.148.217;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3133[label="22.140.250.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3197[label="90.166.21.241;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3204[label="192.189.225.241;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3442[label="192.189.132.31;21pkt 21fpkt", shape=invtriangle, color=brown];
3444[label="217.85.90.32;10pkt 10fpkt", shape=invtriangle, color=brown];
3621[label="21.96.145.67;11pkt 11fpkt", shape=invtriangle, color=brown];
3675[label="210.136.231.77;21pkt 21fpkt", shape=invtriangle, color=brown];
3695[label="196.34.5.82;14pkt 14fpkt", shape=invtriangle, color=brown];
3728[label="20.106.224.88;21pkt 21fpkt", shape=invtriangle, color=brown];
3872[label="192.189.56.129;2pkt 2fpkt", shape=invtriangle, color=brown];
3913[label="209.164.66.138;36pkt 36fpkt", shape=invtriangle, color=brown];
3957[label="22.243.45.149;80pkt 80fpkt", shape=invtriangle, color=brown];
4000[label="209.35.0.161;16pkt 16fpkt", shape=invtriangle, color=brown];
4080[label="192.235.83.176;18pkt 18fpkt", shape=invtriangle, color=brown];
4146[label="20.106.224.191;41pkt 41fpkt", shape=invtriangle, color=brown];
4149[label="20.64.185.192;19pkt 19fpkt", shape=invtriangle, color=brown];
4154[label="210.0.36.194;16pkt 16fpkt", shape=invtriangle, color=brown];
4408[label="192.189.132.31;20pkt 20fpkt", shape=invhouse, color=bisque];
4409[label="217.85.90.32;9pkt 9fpkt", shape=invhouse, color=bisque];
4535[label="210.136.231.77;20pkt 20fpkt", shape=invhouse, color=bisque];
4546[label="196.34.5.82;14pkt 14fpkt", shape=invhouse, color=bisque];
4657[label="209.164.66.138;36pkt 36fpkt", shape=invhouse, color=bisque];
4700[label="209.35.0.161;16pkt 16fpkt", shape=invhouse, color=bisque];
4747[label="192.235.83.176;17pkt 17fpkt", shape=invhouse, color=bisque];
4780[label="20.106.224.191;41pkt 41fpkt", shape=invhouse, color=bisque];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.103.107.72:*}[22.8547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.426%)&lt;BR/&gt; 443: (1.02115%)&lt;BR/&gt; 53: (0.559203%)&lt;BR/&gt; 1863: (0.547046%)&lt;BR/&gt; 6881: (0.303914%)&gt;];
}
47--941[label="0.333333;1pkt 1fpkt"];
47--2975[label="1;3pkt 3fpkt"];
200--321[label="0.75;3pkt 3fpkt"];
200--407[label="0.111111;6pkt 6fpkt"];
200--623[label="0.4;6pkt 6fpkt"];
200--863[label="0.37069;43pkt 43fpkt"];
200--867[label="0.0454545;1pkt 1fpkt"];
200--890[label="0.409091;27pkt 27fpkt"];
200--954[label="0.195652;9pkt 9fpkt"];
200--1023[label="1;3pkt 3fpkt"];
200--1045[label="0.0454545;2pkt 2fpkt"];
200--1069[label="0.1875;3pkt 3fpkt"];
200--1435[label="0.6;9pkt 9fpkt"];
200--1588[label="0.307692;4pkt 4fpkt"];
200--1613[label="0.4;8pkt 8fpkt"];
200--1619[label="0.444444;4pkt 4fpkt"];
200--1739[label="1;16pkt 16fpkt"];
200--1754[label="0.047619;1pkt 1fpkt"];
200--1851[label="0.0277778;1pkt 1fpkt"];
200--2048[label="0.333333;7pkt 7fpkt"];
200--2094[label="0.4;6pkt 6fpkt"];
200--2153[label="0.0952381;2pkt 2fpkt"];
200--2373[label="0.0238095;1pkt 1fpkt"];
200--2426[label="0.171429;6pkt 6fpkt"];
200--2497[label="0.194444;7pkt 7fpkt"];
200--2588[label="0.395062;32pkt 32fpkt"];
200--2676[label="0.235294;4pkt 4fpkt"];
200--2681[label="0.125;1pkt 1fpkt"];
200--2779[label="0.75;3pkt 3fpkt"];
200--2796[label="0.166667;3pkt 3fpkt"];
200--2878[label="0.4375;7pkt 7fpkt"];
200--2906[label="0.390244;16pkt 16fpkt"];
200--3095[label="0.25;2pkt 2fpkt"];
200--3133[label="0.75;3pkt 3fpkt"];
200--3442[label="0.380952;8pkt 8fpkt"];
200--3444[label="0.5;5pkt 5fpkt"];
200--3675[label="0.333333;7pkt 7fpkt"];
200--3695[label="0.357143;5pkt 5fpkt"];
200--3728[label="0.0952381;2pkt 2fpkt"];
200--3913[label="0.194444;7pkt 7fpkt"];
200--3957[label="0.4;32pkt 32fpkt"];
200--4000[label="0.25;4pkt 4fpkt"];
200--4080[label="0.166667;3pkt 3fpkt"];
200--4146[label="0.390244;16pkt 16fpkt"];
200--4408[label="0.4;8pkt 8fpkt"];
200--4409[label="0.444444;4pkt 4fpkt"];
200--4535[label="0.3;6pkt 6fpkt"];
200--4546[label="0.357143;5pkt 5fpkt"];
200--4657[label="0.194444;7pkt 7fpkt"];
200--4700[label="0.25;4pkt 4fpkt"];
200--4747[label="0.117647;2pkt 2fpkt"];
200--4780[label="0.390244;16pkt 16fpkt"];
245--290[label="0.951613;177pkt 177fpkt"];
245--296[label="1;1pkt 1fpkt"];
245--519[label="0.475138;86pkt 86fpkt"];
245--742[label="0.875;14pkt 14fpkt"];
245--755[label="0.142857;1pkt 1fpkt"];
245--1122[label="0.0227273;1pkt 1fpkt"];
245--1222[label="0.00265957;1pkt 1fpkt"];
245--1260[label="0.00265957;1pkt 1fpkt"];
245--1913[label="0.162791;7pkt 7fpkt"];
245--2109[label="0.0222222;1pkt 1fpkt"];
245--2153[label="0.666667;14pkt 14fpkt"];
245--2413[label="0.0263158;1pkt 1fpkt"];
245--2906[label="0.121951;5pkt 5fpkt"];
245--2975[label="0.702532;222pkt 222fpkt"];
245--3594[label="0.166667;7pkt 7fpkt"];
245--3701[label="0.0227273;1pkt 1fpkt"];
245--3728[label="0.666667;14pkt 14fpkt"];
245--3870[label="0.0263158;1pkt 1fpkt"];
245--4146[label="0.121951;5pkt 5fpkt"];
245--4780[label="0.121951;5pkt 5fpkt"];
288--290[label="0.529412;9pkt 9fpkt"];
288--755[label="0.857143;6pkt 6fpkt"];
288--2975[label="0.529412;9pkt 9fpkt"];
290--2975[label="1;186pkt 186fpkt"];
321--638[label="0.25;1pkt 1fpkt"];
321--3133[label="1;4pkt 4fpkt"];
357--954[label="0.0652174;3pkt 3fpkt"];
357--1031[label="1;1pkt 1fpkt"];
357--1125[label="1;2pkt 2fpkt"];
357--1168[label="0.0208333;1pkt 1fpkt"];
357--3257[label="0.00877193;1pkt 1fpkt"];
357--4317[label="0.00877193;1pkt 1fpkt"];
357--4860[label="0.00877193;1pkt 1fpkt"];
407--536[label="1;3pkt 3fpkt"];
407--638[label="0.148148;8pkt 8fpkt"];
407--856[label="0.0377358;2pkt 2fpkt"];
407--873[label="0.240741;13pkt 13fpkt"];
519--731[label="0.25;8pkt 8fpkt"];
519--809[label="0.0909091;9pkt 9fpkt"];
519--980[label="0.0215054;2pkt 2fpkt"];
602--798[label="0.0344828;2pkt 2fpkt"];
602--1935[label="0.027027;1pkt 1fpkt"];
602--1954[label="0.0833333;1pkt 1fpkt"];
602--2373[label="0.0238095;1pkt 1fpkt"];
602--2676[label="0.117647;2pkt 2fpkt"];
602--2906[label="0.0243902;1pkt 1fpkt"];
602--3621[label="0.0909091;1pkt 1fpkt"];
602--4000[label="0.125;2pkt 2fpkt"];
602--4146[label="0.0243902;1pkt 1fpkt"];
602--4700[label="0.125;2pkt 2fpkt"];
602--4780[label="0.0243902;1pkt 1fpkt"];
623--638[label="0.6;9pkt 9fpkt"];
623--2094[label="1;15pkt 15fpkt"];
623--3695[label="1;14pkt 14fpkt"];
623--4546[label="1;14pkt 14fpkt"];
638--863[label="0.37069;43pkt 43fpkt"];
638--890[label="0.424242;28pkt 28fpkt"];
638--954[label="0.23913;11pkt 11fpkt"];
638--1045[label="0.0454545;2pkt 2fpkt"];
638--1069[label="0.5;8pkt 8fpkt"];
638--1168[label="0.208333;10pkt 10fpkt"];
638--1435[label="0.333333;5pkt 5fpkt"];
638--1586[label="1;33pkt 33fpkt"];
638--1588[label="0.384615;5pkt 5fpkt"];
638--1613[label="0.05;1pkt 1fpkt"];
638--1619[label="0.555556;5pkt 5fpkt"];
638--1851[label="0.0555556;2pkt 2fpkt"];
638--1913[label="0.162791;7pkt 7fpkt"];
638--2048[label="0.666667;14pkt 14fpkt"];
638--2094[label="0.6;9pkt 9fpkt"];
638--2153[label="0.0952381;2pkt 2fpkt"];
638--2229[label="0.0909091;1pkt 1fpkt"];
638--2273[label="0.0357143;1pkt 1fpkt"];
638--2373[label="0.0952381;4pkt 4fpkt"];
638--2415[label="0.666667;2pkt 2fpkt"];
638--2426[label="0.342857;12pkt 12fpkt"];
638--2497[label="0.277778;10pkt 10fpkt"];
638--2588[label="0.419753;34pkt 34fpkt"];
638--2676[label="0.411765;7pkt 7fpkt"];
638--2681[label="0.875;7pkt 7fpkt"];
638--2796[label="0.444444;8pkt 8fpkt"];
638--2878[label="0.5625;9pkt 9fpkt"];
638--2906[label="0.463415;19pkt 19fpkt"];
638--2926[label="1;16pkt 16fpkt"];
638--3004[label="0.1;1pkt 1fpkt"];
638--3073[label="0.266667;4pkt 4fpkt"];
638--3095[label="0.125;1pkt 1fpkt"];
638--3133[label="0.25;1pkt 1fpkt"];
638--3204[label="0.166667;1pkt 1fpkt"];
638--3236[label="0.0125;1pkt 1fpkt"];
638--3442[label="0.047619;1pkt 1fpkt"];
638--3444[label="0.5;5pkt 5fpkt"];
638--3594[label="0.166667;7pkt 7fpkt"];
638--3675[label="0.666667;14pkt 14fpkt"];
638--3695[label="0.642857;9pkt 9fpkt"];
638--3728[label="0.0952381;2pkt 2fpkt"];
638--3872[label="0.5;1pkt 1fpkt"];
638--3913[label="0.277778;10pkt 10fpkt"];
638--3957[label="0.425;34pkt 34fpkt"];
638--4000[label="0.4375;7pkt 7fpkt"];
638--4080[label="0.444444;8pkt 8fpkt"];
638--4146[label="0.463415;19pkt 19fpkt"];
638--4154[label="1;16pkt 16fpkt"];
638--4190[label="0.111111;1pkt 1fpkt"];
638--4408[label="0.05;1pkt 1fpkt"];
638--4409[label="0.555556;5pkt 5fpkt"];
638--4535[label="0.7;14pkt 14fpkt"];
638--4546[label="0.642857;9pkt 9fpkt"];
638--4657[label="0.277778;10pkt 10fpkt"];
638--4686[label="0.111111;1pkt 1fpkt"];
638--4700[label="0.4375;7pkt 7fpkt"];
638--4747[label="0.470588;8pkt 8fpkt"];
638--4780[label="0.463415;19pkt 19fpkt"];
638--4799[label="0.1;1pkt 1fpkt"];
675--1935[label="0.756757;28pkt 28fpkt"];
675--1954[label="0.0833333;1pkt 1fpkt"];
675--2632[label="1;14pkt 14fpkt"];
675--3073[label="0.4;6pkt 6fpkt"];
675--3197[label="1;4pkt 4fpkt"];
675--3621[label="0.0909091;1pkt 1fpkt"];
731--836[label="0.03125;1pkt 1fpkt"];
731--1045[label="0.03125;1pkt 1fpkt"];
731--1222[label="0.03125;1pkt 1fpkt"];
731--1260[label="0.03125;1pkt 1fpkt"];
731--1279[label="0.0625;2pkt 2fpkt"];
731--1295[label="0.0625;2pkt 2fpkt"];
731--1309[label="0.0625;2pkt 2fpkt"];
731--1913[label="0.03125;1pkt 1fpkt"];
731--3594[label="0.03125;1pkt 1fpkt"];
742--2153[label="1;16pkt 16fpkt"];
742--3728[label="1;16pkt 16fpkt"];
787--1059[label="1;2pkt 2fpkt"];
863--951[label="0.111111;8pkt 8fpkt"];
873--1851[label="0.0277778;1pkt 1fpkt"];
890--2588[label="1;66pkt 66fpkt"];
890--3957[label="0.984848;65pkt 65fpkt"];
941--965[label="0.0188679;1pkt 1fpkt"];
941--1381[label="0.0208333;1pkt 1fpkt"];
941--1851[label="0.0277778;1pkt 1fpkt"];
941--1852[label="0.0384615;2pkt 2fpkt"];
941--1920[label="0.025641;1pkt 1fpkt"];
941--2377[label="0.0384615;1pkt 1fpkt"];
941--2913[label="0.15;3pkt 3fpkt"];
941--2975[label="0.394366;56pkt 56fpkt"];
941--3263[label="0.0422535;3pkt 3fpkt"];
941--3301[label="0.0212766;1pkt 1fpkt"];
941--3600[label="0.0263158;1pkt 1fpkt"];
941--3805[label="0.0350877;2pkt 2fpkt"];
941--4149[label="0.157895;3pkt 3fpkt"];
941--4338[label="0.0208333;1pkt 1fpkt"];
954--1048[label="0.0434783;2pkt 2fpkt"];
982--1059[label="1;12pkt 12fpkt"];
1059--1168[label="0.0666667;1pkt 1fpkt"];
1069--2796[label="1;16pkt 16fpkt"];
1069--4080[label="1;16pkt 16fpkt"];
1069--4747[label="0.9375;15pkt 15fpkt"];
1613--3442[label="1;20pkt 20fpkt"];
1613--4408[label="1;20pkt 20fpkt"];
1619--3444[label="1;9pkt 9fpkt"];
1619--4409[label="1;9pkt 9fpkt"];
1954--3621[label="1;11pkt 11fpkt"];
2048--3675[label="1;21pkt 21fpkt"];
2048--4535[label="1;20pkt 20fpkt"];
2094--3695[label="1;14pkt 14fpkt"];
2094--4546[label="1;14pkt 14fpkt"];
2153--3728[label="1;21pkt 21fpkt"];
2415--3872[label="1;2pkt 2fpkt"];
2497--3913[label="1;36pkt 36fpkt"];
2497--4657[label="1;36pkt 36fpkt"];
2588--3957[label="1;80pkt 80fpkt"];
2676--4000[label="1;16pkt 16fpkt"];
2676--4700[label="1;16pkt 16fpkt"];
2796--4080[label="1;18pkt 18fpkt"];
2796--4747[label="1;17pkt 17fpkt"];
2906--4146[label="1;41pkt 41fpkt"];
2906--4780[label="1;41pkt 41fpkt"];
2913--4149[label="1;19pkt 19fpkt"];
2926--4154[label="1;16pkt 16fpkt"];
3442--4408[label="1;20pkt 20fpkt"];
3444--4409[label="1;9pkt 9fpkt"];
3675--4535[label="1;20pkt 20fpkt"];
3695--4546[label="1;14pkt 14fpkt"];
3913--4657[label="1;36pkt 36fpkt"];
4000--4700[label="1;16pkt 16fpkt"];
4080--4747[label="1;17pkt 17fpkt"];
4146--4780[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.107.72" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.189.47.83"/>
    </slice>
    <from sec="1081054978" usec="0"/>
    <to sec="1081054986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.80.110.83"/>
    </slice>
    <from sec="1081055108" usec="0"/>
    <to sec="1081055124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
2116[label="90.19.14.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3706[label="90.19.14.84;1pkt 1fpkt", shape=invtriangle, color=brown];
4551[label="90.19.14.84;2pkt 2fpkt", shape=invhouse, color=bisque];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.19.14.84:1111, 130.102.30.84:80}[50%]&lt;BR/&gt;{90.19.14.84:1132, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1132: (30%)&lt;BR/&gt; 1111: (20%)&gt;];
}
2116--3706[label="1;1pkt 1fpkt"];
2116--4551[label="1;2pkt 2fpkt"];
3706--4551[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.19.14.84" src_port="1132"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.19.14.84" src_port="1111"/>
    </slice>
    <from sec="1081055627" usec="0"/>
    <to sec="1081055649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.128.98.84"/>
    </slice>
    <from sec="1081055607" usec="0"/>
    <to sec="1081055619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
2123[label="217.68.108.84;147pkt 147fpkt", shape=pentagon, color=darkviolet];
3712[label="217.68.108.84;146pkt 146fpkt", shape=invtriangle, color=brown];
4555[label="217.68.108.84;146pkt 146fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.68.108.84:9600, 132.24.80.100:*}[23.1293%]&lt;BR/&gt;{217.68.108.84:9600, 132.78.2.17:*}[21.7687%]&lt;BR/&gt;{217.68.108.84:9600, 132.128.56.77:*}[20.4082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9600: (50%)&lt;BR/&gt; 32907: (0.683371%)&lt;BR/&gt; 65178: (0.341686%)&lt;BR/&gt; 65074: (0.341686%)&lt;BR/&gt; 64856: (0.341686%)&gt;];
}
2123--3712[label="1;146pkt 146fpkt"];
2123--4555[label="1;146pkt 146fpkt"];
3712--4555[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_ip="132.24.80.100" src_ip="217.68.108.84" src_port="9600"/>
      <filter dst_ip="132.78.2.17" src_ip="217.68.108.84" src_port="9600"/>
      <filter dst_ip="132.128.56.77" src_ip="217.68.108.84" src_port="9600"/>
    </slice>
    <from sec="1081055265" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.137.173.85"/>
    </slice>
    <from sec="1081055554" usec="0"/>
    <to sec="1081055565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
2137[label="90.161.42.86;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3719[label="90.161.42.86;11pkt 11fpkt", shape=invtriangle, color=brown];
4559[label="90.161.42.86;11pkt 11fpkt", shape=invhouse, color=bisque];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.161.42.86:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59869: (4.41176%)&lt;BR/&gt; 57020: (4.41176%)&lt;BR/&gt; 55082: (4.41176%)&lt;BR/&gt; 45471: (4.41176%)&gt;];
}
2137--3719[label="1;11pkt 11fpkt"];
2137--4559[label="1;11pkt 11fpkt"];
3719--4559[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="90.161.42.86"/>
    </slice>
    <from sec="1081054823" usec="0"/>
    <to sec="1081055676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
2141[label="214.13.180.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3721[label="214.13.180.86;1pkt 1fpkt", shape=invtriangle, color=brown];
4560[label="214.13.180.86;1pkt 1fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.13.180.86:3082, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3082: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2141--3721[label="1;1pkt 1fpkt"];
2141--4560[label="1;1pkt 1fpkt"];
3721--4560[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="214.13.180.86" src_port="3082"/>
    </slice>
    <from sec="1081055640" usec="0"/>
    <to sec="1081055653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
2146[label="214.205.149.87;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3725[label="214.205.149.87;47pkt 47fpkt", shape=invtriangle, color=brown];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.205.149.87:*, *:2745}[44.6809%]&lt;BR/&gt;{214.205.149.87:*, *:1025}[36.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (22.3404%)&lt;BR/&gt; 1025: (18.0851%)&lt;BR/&gt; 6129: (9.57447%)&lt;BR/&gt; 1670: (2.12766%)&lt;BR/&gt; 1175: (2.12766%)&gt;];
}
2146--3725[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="214.205.149.87"/>
      <filter dst_port="1025" src_ip="214.205.149.87"/>
    </slice>
    <from sec="1081055492" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.39.196.88"/>
    </slice>
    <from sec="1081055231" usec="0"/>
    <to sec="1081055237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.129.75.89"/>
    </slice>
    <from sec="1081055025" usec="0"/>
    <to sec="1081055032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.168.90.89"/>
    </slice>
    <from sec="1081055365" usec="0"/>
    <to sec="1081055383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
2158[label="210.193.148.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3733[label="210.193.148.89;1pkt 1fpkt", shape=invtriangle, color=brown];
4564[label="210.193.148.89;1pkt 1fpkt", shape=invhouse, color=bisque];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.193.148.89:3037, 130.102.30.84:80}[50%]&lt;BR/&gt;{210.193.148.89:3041, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3041: (37.5%)&lt;BR/&gt; 3037: (12.5%)&gt;];
}
2158--3733[label="1;1pkt 1fpkt"];
2158--4564[label="1;1pkt 1fpkt"];
3733--4564[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.193.148.89" src_port="3041"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.193.148.89" src_port="3037"/>
    </slice>
    <from sec="1081055650" usec="0"/>
    <to sec="1081055676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.145.39.90"/>
    </slice>
    <from sec="1081054804" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.67.86.90"/>
    </slice>
    <from sec="1081054847" usec="0"/>
    <to sec="1081054865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.86.88.90"/>
    </slice>
    <from sec="1081055230" usec="0"/>
    <to sec="1081055258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.181.171.90"/>
    </slice>
    <from sec="1081055631" usec="0"/>
    <to sec="1081055643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.121.218.90"/>
    </slice>
    <from sec="1081055438" usec="0"/>
    <to sec="1081055478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
2167[label="90.148.3.91;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3740[label="90.148.3.91;5pkt 5fpkt", shape=invtriangle, color=brown];
4567[label="90.148.3.91;5pkt 5fpkt", shape=invhouse, color=bisque];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.148.3.91:80, 197.42.251.146:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4829: (9.375%)&lt;BR/&gt; 4123: (9.375%)&lt;BR/&gt; 4089: (9.375%)&lt;BR/&gt; 4051: (9.375%)&gt;];
}
2167--3740[label="1;5pkt 5fpkt"];
2167--4567[label="1;5pkt 5fpkt"];
3740--4567[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="197.42.251.146" src_ip="90.148.3.91" src_port="80"/>
    </slice>
    <from sec="1081055501" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.16.33.91"/>
    </slice>
    <from sec="1081055166" usec="0"/>
    <to sec="1081055179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798827,2.66942,020,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
940[label="132.24.225.92;s;77pkt 77fpkt", shape=diamond, color=yellow];
3746[label="132.24.225.92;82pkt 82fpkt", shape=invtriangle, color=brown];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.24.225.92:0, *:0}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.4843%)&lt;BR/&gt; 3641: (0.628931%)&lt;BR/&gt; 3625: (0.628931%)&lt;BR/&gt; 3128: (0.628931%)&lt;BR/&gt; 1080: (0.628931%)&gt;];
}
940--998[label="0.012987;1pkt 1fpkt"];
940--1115[label="0.012987;1pkt 1fpkt"];
940--3746[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="132.24.225.92"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.198.11.93"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.203.91.93"/>
    </slice>
    <from sec="1081055215" usec="0"/>
    <to sec="1081055227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.14.51.95"/>
    </slice>
    <from sec="1081055604" usec="0"/>
    <to sec="1081055614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.131.9.98"/>
    </slice>
    <from sec="1081055235" usec="0"/>
    <to sec="1081055242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.74.16.99"/>
    </slice>
    <from sec="1081055389" usec="0"/>
    <to sec="1081055402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.129.88.99"/>
    </slice>
    <from sec="1081055154" usec="0"/>
    <to sec="1081055176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
2213[label="210.221.119.99;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3766[label="210.221.119.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.221.119.99:1781, 130.102.30.84:80}[50%]&lt;BR/&gt;{210.221.119.99:3653, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1781: (33.3333%)&lt;BR/&gt; 3653: (16.6667%)&gt;];
}
2213--3766[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.221.119.99" src_port="3653"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.221.119.99" src_port="1781"/>
    </slice>
    <from sec="1081055677" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.248.211.99"/>
    </slice>
    <from sec="1081054878" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.138.45.101"/>
    </slice>
    <from sec="1081054829" usec="0"/>
    <to sec="1081054847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.88.131.101"/>
    </slice>
    <from sec="1081055160" usec="0"/>
    <to sec="1081055170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
2227[label="216.29.182.101;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3775[label="216.29.182.101;3pkt 3fpkt", shape=invtriangle, color=brown];
4584[label="216.29.182.101;3pkt 3fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.29.182.101:2645, 159.87.224.0:445}[33.3333%]&lt;BR/&gt;{216.29.182.101:2265, 132.24.195.9:445}[33.3333%]&lt;BR/&gt;{216.29.182.101:4549, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 4549: (16.6667%)&lt;BR/&gt; 2645: (16.6667%)&lt;BR/&gt; 2265: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
2227--3775[label="1;3pkt 3fpkt"];
2227--4584[label="1;3pkt 3fpkt"];
3775--4584[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="216.29.182.101" src_port="4549"/>
      <filter dst_ip="132.24.195.9" dst_port="445" src_ip="216.29.182.101" src_port="2265"/>
      <filter dst_ip="159.87.224.0" dst_port="445" src_ip="216.29.182.101" src_port="2645"/>
    </slice>
    <from sec="1081055302" usec="0"/>
    <to sec="1081055432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
2238[label="210.209.112.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3781[label="210.209.112.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.209.112.102:2264, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2264: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2238--3781[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.209.112.102" src_port="2264"/>
    </slice>
    <from sec="1081054984" usec="0"/>
    <to sec="1081055693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.172.204.102"/>
    </slice>
    <from sec="1081055582" usec="0"/>
    <to sec="1081055610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.84.193.103"/>
    </slice>
    <from sec="1081055688" usec="0"/>
    <to sec="1081055694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.64.96.104"/>
    </slice>
    <from sec="1081055586" usec="0"/>
    <to sec="1081055625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.43.67.107"/>
    </slice>
    <from sec="1081055136" usec="0"/>
    <to sec="1081055153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40949,2.61752,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
25[label="215.149.74.107s;1pkt 1fpkt", shape=rectangle, color=red];
2279[label="215.149.74.107;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3799[label="215.149.74.107;58pkt 58fpkt", shape=invtriangle, color=brown];
4597[label="215.149.74.107;59pkt 59fpkt", shape=invhouse, color=bisque];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.149.74.107:*, *:2745}[27.1186%]&lt;BR/&gt;{215.149.74.107:*, *:80}[23.7288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.2768%)&lt;BR/&gt; 80: (12.1469%)&lt;BR/&gt; 1025: (9.32203%)&lt;BR/&gt; 6129: (7.62712%)&lt;BR/&gt; 3127: (7.62712%)&gt;];
}
25--55[label="1;1pkt 1fpkt"];
25--2279[label="1;1pkt 1fpkt"];
25--3799[label="1;1pkt 1fpkt"];
25--4597[label="1;1pkt 1fpkt"];
2279--3799[label="1;58pkt 58fpkt"];
2279--4597[label="1;59pkt 59fpkt"];
3799--4597[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="215.149.74.107"/>
      <filter dst_port="80" src_ip="215.149.74.107"/>
    </slice>
    <from sec="1081054866" usec="0"/>
    <to sec="1081055678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.131.76.107"/>
    </slice>
    <from sec="1081054874" usec="0"/>
    <to sec="1081054879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.131.10.108"/>
    </slice>
    <from sec="1081054950" usec="0"/>
    <to sec="1081054957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
2298[label="117.91.178.109;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3812[label="117.91.178.109;120pkt 120fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.91.178.109:1049, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1049: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2298--3812[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="117.91.178.109" src_port="1049"/>
    </slice>
    <from sec="1081054958" usec="0"/>
    <to sec="1081054977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.138.61.111"/>
    </slice>
    <from sec="1081054911" usec="0"/>
    <to sec="1081054920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.23.175.111"/>
    </slice>
    <from sec="1081054852" usec="0"/>
    <to sec="1081054860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
606[label="130.103.97.91;d;29pkt 29fpkt", shape=diamond, color=yellow];
895[label="21.2.56.242;s;23pkt 23fpkt", shape=diamond, color=yellow];
2313[label="192.189.61.112;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3207[label="21.2.56.242;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3820[label="192.189.61.112;6pkt 6fpkt", shape=invtriangle, color=brown];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.2.56.242:80, 130.103.97.91:*}[73.5294%]&lt;BR/&gt;{192.189.61.112:1863, *:*}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.4444%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 2748: (1.66667%)&lt;BR/&gt; 2746: (1.66667%)&lt;BR/&gt; 2745: (1.66667%)&gt;];
}
606--895[label="1;23pkt 23fpkt"];
606--2313[label="0.571429;4pkt 4fpkt"];
606--3207[label="0.92;23pkt 23fpkt"];
606--3820[label="0.666667;4pkt 4fpkt"];
895--3207[label="1;23pkt 23fpkt"];
2313--3820[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="192.189.61.112" src_port="1863"/>
      <filter dst_ip="130.103.97.91" src_ip="21.2.56.242" src_port="80"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081055692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.159.110.112"/>
    </slice>
    <from sec="1081055202" usec="0"/>
    <to sec="1081055221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
2330[label="132.237.213.114;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3830[label="132.237.213.114;35pkt 35fpkt", shape=invtriangle, color=brown];
4610[label="132.237.213.114;35pkt 35fpkt", shape=invhouse, color=bisque];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.213.114:*, 22.141.77.39:2703}[50%]&lt;BR/&gt;{132.237.213.114:*, 22.141.77.22:2703}[27.7778%]&lt;BR/&gt;{132.237.213.114:*, 22.141.77.55:2703}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 37359: (1.41509%)&lt;BR/&gt; 37358: (1.41509%)&lt;BR/&gt; 37357: (1.41509%)&lt;BR/&gt; 37356: (1.41509%)&gt;];
}
2330--3830[label="1;35pkt 35fpkt"];
2330--4610[label="1;35pkt 35fpkt"];
3830--4610[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="22.141.77.39" dst_port="2703" src_ip="132.237.213.114"/>
      <filter dst_ip="22.141.77.22" dst_port="2703" src_ip="132.237.213.114"/>
      <filter dst_ip="22.141.77.55" dst_port="2703" src_ip="132.237.213.114"/>
    </slice>
    <from sec="1081054938" usec="0"/>
    <to sec="1081055437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.21.65.115"/>
    </slice>
    <from sec="1081055481" usec="0"/>
    <to sec="1081055532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.131.176.115"/>
    </slice>
    <from sec="1081055683" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.43.79.116"/>
    </slice>
    <from sec="1081055395" usec="0"/>
    <to sec="1081055411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.2.215.117"/>
    </slice>
    <from sec="1081054839" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.130.170.118"/>
    </slice>
    <from sec="1081054917" usec="0"/>
    <to sec="1081054922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.221.21.120"/>
    </slice>
    <from sec="1081054962" usec="0"/>
    <to sec="1081054970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.197.148.121"/>
    </slice>
    <from sec="1081055302" usec="0"/>
    <to sec="1081055310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.88.221.122"/>
    </slice>
    <from sec="1081055326" usec="0"/>
    <to sec="1081055338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.82.177.123"/>
    </slice>
    <from sec="1081054868" usec="0"/>
    <to sec="1081054872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.165.71.125"/>
    </slice>
    <from sec="1081054917" usec="0"/>
    <to sec="1081054953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.8.128.125"/>
    </slice>
    <from sec="1081055032" usec="0"/>
    <to sec="1081055048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800304,2.64179,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
802[label="205.71.200.125;s;165pkt 165fpkt", shape=diamond, color=yellow];
2387[label="205.71.200.125;180pkt 180fpkt", shape=pentagon, color=darkviolet];
3858[label="205.71.200.125;179pkt 179fpkt", shape=invtriangle, color=brown];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.71.200.125:53, 220.36.201.196:*}[23.2044%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.4313%)&lt;BR/&gt; 4272: (0.572519%)&lt;BR/&gt; 1615: (0.572519%)&lt;BR/&gt; 1591: (0.572519%)&lt;BR/&gt; 1585: (0.572519%)&gt;];
}
802--2387[label="0.993939;164pkt 164fpkt"];
802--3858[label="0.987879;163pkt 163fpkt"];
2387--3858[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_ip="220.36.201.196" src_ip="205.71.200.125" src_port="53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.243.20.126"/>
    </slice>
    <from sec="1081055512" usec="0"/>
    <to sec="1081055531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.205.224.127"/>
    </slice>
    <from sec="1081055334" usec="0"/>
    <to sec="1081055360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
2410[label="215.39.168.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3867[label="215.39.168.128;1pkt 1fpkt", shape=invtriangle, color=brown];
4633[label="215.39.168.128;2pkt 2fpkt", shape=invhouse, color=bisque];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.39.168.128:1084, 130.102.30.84:80}[50%]&lt;BR/&gt;{215.39.168.128:2226, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2226: (30%)&lt;BR/&gt; 1084: (20%)&gt;];
}
2410--3867[label="1;1pkt 1fpkt"];
2410--4633[label="1;2pkt 2fpkt"];
3867--4633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="215.39.168.128" src_port="2226"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="215.39.168.128" src_port="1084"/>
    </slice>
    <from sec="1081055673" usec="0"/>
    <to sec="1081055694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
2412[label="130.102.244.128;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3869[label="130.102.244.128;65pkt 65fpkt", shape=invtriangle, color=brown];
4634[label="130.102.244.128;65pkt 65fpkt", shape=invhouse, color=bisque];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.244.128:1026, *:53}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (32.1429%)&lt;BR/&gt; 53: (32.1429%)&lt;BR/&gt; 0: (16.8367%)&lt;BR/&gt; 80: (4.84694%)&lt;BR/&gt; 443: (3.06122%)&gt;];
}
2412--3869[label="1;65pkt 65fpkt"];
2412--4634[label="1;65pkt 65fpkt"];
3869--4634[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="130.102.244.128" src_port="1026"/>
    </slice>
    <from sec="1081054836" usec="0"/>
    <to sec="1081055697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.37.36.129"/>
    </slice>
    <from sec="1081055411" usec="0"/>
    <to sec="1081055450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.12.120.129"/>
    </slice>
    <from sec="1081055041" usec="0"/>
    <to sec="1081055077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.29.51.130"/>
    </slice>
    <from sec="1081055025" usec="0"/>
    <to sec="1081055032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.239.193.131"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.91.215.132"/>
    </slice>
    <from sec="1081055171" usec="0"/>
    <to sec="1081055192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
2455[label="210.144.156.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3892[label="210.144.156.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.144.156.133:1387, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1387: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2455--3892[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.144.156.133" src_port="1387"/>
    </slice>
    <from sec="1081055687" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.138.180.133"/>
    </slice>
    <from sec="1081055332" usec="0"/>
    <to sec="1081055337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.144.13.134"/>
    </slice>
    <from sec="1081055466" usec="0"/>
    <to sec="1081055479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.144.80.134"/>
    </slice>
    <from sec="1081055121" usec="0"/>
    <to sec="1081055130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
2468[label="130.102.206.134;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3896[label="130.102.206.134;33pkt 33fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.206.134:*, 203.18.150.193:80}[84.8485%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.9394%)&lt;BR/&gt; 443: (4.54545%)&lt;BR/&gt; 0: (3.0303%)&lt;BR/&gt; 49202: (1.51515%)&lt;BR/&gt; 49201: (1.51515%)&gt;];
}
2468--3896[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="203.18.150.193" dst_port="80" src_ip="130.102.206.134"/>
    </slice>
    <from sec="1081055031" usec="0"/>
    <to sec="1081055670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
2470[label="20.198.2.135;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3898[label="20.198.2.135;3pkt 3fpkt", shape=invtriangle, color=brown];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.198.2.135:1119, 132.27.166.181:1025}[33.3333%]&lt;BR/&gt;{20.198.2.135:1121, 132.27.166.181:3127}[33.3333%]&lt;BR/&gt;{20.198.2.135:1124, 132.27.166.181:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 1124: (16.6667%)&lt;BR/&gt; 1121: (16.6667%)&lt;BR/&gt; 1119: (16.6667%)&lt;BR/&gt; 1025: (16.6667%)&gt;];
}
2470--3898[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.27.166.181" dst_port="80" src_ip="20.198.2.135" src_port="1124"/>
      <filter dst_ip="132.27.166.181" dst_port="3127" src_ip="20.198.2.135" src_port="1121"/>
      <filter dst_ip="132.27.166.181" dst_port="1025" src_ip="20.198.2.135" src_port="1119"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.217.209.135"/>
    </slice>
    <from sec="1081055097" usec="0"/>
    <to sec="1081055258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.221.228.135"/>
    </slice>
    <from sec="1081055610" usec="0"/>
    <to sec="1081055636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.27.142.137"/>
    </slice>
    <from sec="1081055539" usec="0"/>
    <to sec="1081055553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
2491[label="217.4.145.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3908[label="217.4.145.137;11pkt 11fpkt", shape=invtriangle, color=brown];
4653[label="217.4.145.137;12pkt 12fpkt", shape=invhouse, color=bisque];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.4.145.137:80, 160.204.59.170:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4164: (4.28571%)&lt;BR/&gt; 4163: (4.28571%)&lt;BR/&gt; 4162: (4.28571%)&lt;BR/&gt; 4161: (4.28571%)&gt;];
}
2491--3908[label="1;11pkt 11fpkt"];
2491--4653[label="1;12pkt 12fpkt"];
3908--4653[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.59.170" src_ip="217.4.145.137" src_port="80"/>
    </slice>
    <from sec="1081054842" usec="0"/>
    <to sec="1081055446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
2504[label="205.109.28.139;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3916[label="205.109.28.139;6pkt 6fpkt", shape=invtriangle, color=brown];
4659[label="205.109.28.139;5pkt 5fpkt", shape=invhouse, color=bisque];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.109.28.139:*, 130.102.220.13:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24423: (8.82353%)&lt;BR/&gt; 24416: (8.82353%)&lt;BR/&gt; 24415: (8.82353%)&lt;BR/&gt; 24402: (8.82353%)&gt;];
}
2504--3916[label="1;6pkt 6fpkt"];
2504--4659[label="1;5pkt 5fpkt"];
3916--4659[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.220.13" dst_port="80" src_ip="205.109.28.139"/>
    </slice>
    <from sec="1081055217" usec="0"/>
    <to sec="1081055233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.218.133.140"/>
    </slice>
    <from sec="1081055197" usec="0"/>
    <to sec="1081055208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
2519[label="16.204.189.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3922[label="16.204.189.140;1pkt 1fpkt", shape=invtriangle, color=brown];
4664[label="16.204.189.140;1pkt 1fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.204.189.140:1504, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1504: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2519--3922[label="1;1pkt 1fpkt"];
2519--4664[label="1;1pkt 1fpkt"];
3922--4664[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="16.204.189.140" src_port="1504"/>
    </slice>
    <from sec="1081055570" usec="0"/>
    <to sec="1081055653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
395[label="159.31.0.193;d;144pkt 144fpkt", shape=diamond, color=yellow];
1105[label="210.148.222.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
1496[label="90.168.136.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1746[label="90.132.39.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2135[label="217.81.31.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2520[label="210.204.252.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2521[label="210.215.11.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3023[label="210.148.222.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3086[label="210.196.146.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3923[label="210.204.252.140;1pkt 1fpkt", shape=invtriangle, color=brown];
4665[label="210.204.252.140;1pkt 1fpkt", shape=invhouse, color=bisque];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 159.31.0.193:80}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8387%)&lt;BR/&gt; 0: (10.3226%)&lt;BR/&gt; 1955: (1.29032%)&lt;BR/&gt; 21346: (0.967742%)&lt;BR/&gt; 56651: (0.645161%)&gt;];
}
395--396[label="0.0422535;3pkt 3fpkt"];
395--472[label="0.0724638;5pkt 5fpkt"];
395--503[label="0.0111111;1pkt 1fpkt"];
395--598[label="0.0307692;2pkt 2fpkt"];
395--724[label="0.037037;2pkt 2fpkt"];
395--987[label="0.0227273;1pkt 1fpkt"];
395--1046[label="0.0166667;1pkt 1fpkt"];
395--1105[label="1;1pkt 1fpkt"];
395--1180[label="0.0222222;1pkt 1fpkt"];
395--1287[label="0.0347222;5pkt 5fpkt"];
395--1302[label="0.0347222;5pkt 5fpkt"];
395--1438[label="0.0625;1pkt 1fpkt"];
395--1496[label="1;2pkt 2fpkt"];
395--1569[label="0.0384615;2pkt 2fpkt"];
395--1639[label="0.0166667;1pkt 1fpkt"];
395--1746[label="1;1pkt 1fpkt"];
395--1838[label="0.0454545;2pkt 2fpkt"];
395--2058[label="0.0657895;5pkt 5fpkt"];
395--2135[label="1;1pkt 1fpkt"];
395--2520[label="1;1pkt 1fpkt"];
395--2521[label="1;1pkt 1fpkt"];
395--2932[label="0.037037;3pkt 3fpkt"];
395--2996[label="0.0181818;1pkt 1fpkt"];
395--3023[label="1;1pkt 1fpkt"];
395--3043[label="0.1;1pkt 1fpkt"];
395--3050[label="0.0338983;2pkt 2fpkt"];
395--3086[label="1;1pkt 1fpkt"];
395--3217[label="0.0357143;1pkt 1fpkt"];
395--3334[label="0.0625;1pkt 1fpkt"];
395--3417[label="0.0384615;2pkt 2fpkt"];
395--3456[label="0.0163934;1pkt 1fpkt"];
395--3563[label="0.0454545;2pkt 2fpkt"];
395--3683[label="0.0666667;5pkt 5fpkt"];
395--3923[label="1;1pkt 1fpkt"];
395--4397[label="0.0384615;2pkt 2fpkt"];
395--4470[label="0.0454545;2pkt 2fpkt"];
395--4665[label="1;1pkt 1fpkt"];
1105--3023[label="1;1pkt 1fpkt"];
2520--3923[label="1;1pkt 1fpkt"];
2520--4665[label="1;1pkt 1fpkt"];
3923--4665[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.0.193" dst_port="80"/>
    </slice>
    <from sec="1081054808" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.215.11.141"/>
    </slice>
    <from sec="1081055152" usec="0"/>
    <to sec="1081055186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.192.128.141"/>
    </slice>
    <from sec="1081055061" usec="0"/>
    <to sec="1081055069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.78.203.141"/>
    </slice>
    <from sec="1081054977" usec="0"/>
    <to sec="1081055021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.78.220.141"/>
    </slice>
    <from sec="1081055408" usec="0"/>
    <to sec="1081055443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.207.112.142"/>
    </slice>
    <from sec="1081055581" usec="0"/>
    <to sec="1081055587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.2.59.143"/>
    </slice>
    <from sec="1081055049" usec="0"/>
    <to sec="1081055086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.10.114.144"/>
    </slice>
    <from sec="1081054996" usec="0"/>
    <to sec="1081055003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.130.157.144"/>
    </slice>
    <from sec="1081055526" usec="0"/>
    <to sec="1081055538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.188.173.144"/>
    </slice>
    <from sec="1081055481" usec="0"/>
    <to sec="1081055488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
2560[label="210.140.19.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3944[label="210.140.19.146;2pkt 2fpkt", shape=invtriangle, color=brown];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.140.19.146:20130, 205.196.148.16:3410}[50%]&lt;BR/&gt;{210.140.19.146:7671, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20130: (25%)&lt;BR/&gt; 7671: (25%)&lt;BR/&gt; 3410: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
2560--3944[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.140.19.146" src_port="7671"/>
      <filter dst_ip="205.196.148.16" dst_port="3410" src_ip="210.140.19.146" src_port="20130"/>
    </slice>
    <from sec="1081055189" usec="0"/>
    <to sec="1081055585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.60.224.146"/>
    </slice>
    <from sec="1081055450" usec="0"/>
    <to sec="1081055463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.182.1.147"/>
    </slice>
    <from sec="1081055161" usec="0"/>
    <to sec="1081055175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.45.123.147"/>
    </slice>
    <from sec="1081054839" usec="0"/>
    <to sec="1081054841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.132.160.148"/>
    </slice>
    <from sec="1081054925" usec="0"/>
    <to sec="1081054931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.39.220.148"/>
    </slice>
    <from sec="1081054823" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.67.228.148"/>
    </slice>
    <from sec="1081055538" usec="0"/>
    <to sec="1081055553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.210.153.149"/>
    </slice>
    <from sec="1081055239" usec="0"/>
    <to sec="1081055251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.201.12.150"/>
    </slice>
    <from sec="1081054869" usec="0"/>
    <to sec="1081054879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
2598[label="160.172.86.151;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3962[label="160.172.86.151;47pkt 47fpkt", shape=invtriangle, color=brown];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.172.86.151:*, *:2745}[56.25%]&lt;BR/&gt;{160.172.86.151:*, *:1025}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (27.8947%)&lt;BR/&gt; 1025: (12.6316%)&lt;BR/&gt; 6129: (3.15789%)&lt;BR/&gt; 5000: (3.15789%)&lt;BR/&gt; 80: (3.15789%)&gt;];
}
2598--3962[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="160.172.86.151"/>
      <filter dst_port="1025" src_ip="160.172.86.151"/>
    </slice>
    <from sec="1081054826" usec="0"/>
    <to sec="1081055655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
2599[label="17.5.177.151;227pkt 227fpkt", shape=pentagon, color=darkviolet];
3963[label="17.5.177.151;227pkt 227fpkt", shape=invtriangle, color=brown];
4684[label="17.5.177.151;226pkt 226fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.5.177.151:3380, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3380: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2599--3963[label="1;227pkt 227fpkt"];
2599--4684[label="1;226pkt 226fpkt"];
3963--4684[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.5.177.151" src_port="3380"/>
    </slice>
    <from sec="1081054924" usec="0"/>
    <to sec="1081054952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.24.210.152"/>
    </slice>
    <from sec="1081055213" usec="0"/>
    <to sec="1081055226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.133.68.153"/>
    </slice>
    <from sec="1081054899" usec="0"/>
    <to sec="1081054903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.220.114.153"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.43.10.154"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081054812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.167.116.154"/>
    </slice>
    <from sec="1081054978" usec="0"/>
    <to sec="1081054983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
2624[label="90.25.210.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3974[label="90.25.210.154;2pkt 2fpkt", shape=invtriangle, color=brown];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.25.210.154:1731, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{90.25.210.154:1757, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{90.25.210.154:2079, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2079: (20%)&lt;BR/&gt; 1757: (20%)&lt;BR/&gt; 1731: (10%)&gt;];
}
2624--3974[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.25.210.154" src_port="2079"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.25.210.154" src_port="1757"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.25.210.154" src_port="1731"/>
    </slice>
    <from sec="1081055624" usec="0"/>
    <to sec="1081055652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.192.150.155"/>
    </slice>
    <from sec="1081054868" usec="0"/>
    <to sec="1081054903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
2629[label="16.193.2.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3977[label="16.193.2.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.193.2.156:6881, 197.42.248.163:2579}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2579: (50%)&gt;];
}
2629--3977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.42.248.163" dst_port="2579" src_ip="16.193.2.156" src_port="6881"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
2630[label="132.237.37.156;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3978[label="132.237.37.156;18pkt 18fpkt", shape=invtriangle, color=brown];
4689[label="132.237.37.156;18pkt 18fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.37.156:*, *:80}[73.6842%]&lt;BR/&gt;{132.237.37.156:80, *:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59472: (2.72727%)&lt;BR/&gt; 59471: (2.72727%)&lt;BR/&gt; 59461: (2.72727%)&lt;BR/&gt; 59460: (2.72727%)&gt;];
}
2630--3978[label="1;18pkt 18fpkt"];
2630--4689[label="1;18pkt 18fpkt"];
3978--4689[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="132.237.37.156" src_port="80"/>
      <filter dst_port="80" src_ip="132.237.37.156"/>
    </slice>
    <from sec="1081054837" usec="0"/>
    <to sec="1081055619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
2635[label="210.145.224.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3979[label="210.145.224.156;2pkt 2fpkt", shape=invtriangle, color=brown];
4690[label="210.145.224.156;1pkt 1fpkt", shape=invhouse, color=bisque];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.145.224.156:6435, 132.24.42.64:80}[50%]&lt;BR/&gt;{210.145.224.156:12484, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 12484: (30%)&lt;BR/&gt; 6435: (20%)&gt;];
}
2635--3979[label="1;2pkt 2fpkt"];
2635--4690[label="1;1pkt 1fpkt"];
3979--4690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.145.224.156" src_port="12484"/>
      <filter dst_ip="132.24.42.64" dst_port="80" src_ip="210.145.224.156" src_port="6435"/>
    </slice>
    <from sec="1081055668" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
2636[label="130.102.1.157;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3980[label="130.102.1.157;20pkt 20fpkt", shape=invtriangle, color=brown];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.1.157:80, 22.123.56.174:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52799: (2.5%)&lt;BR/&gt; 48704: (2.5%)&lt;BR/&gt; 48679: (2.5%)&lt;BR/&gt; 42699: (2.5%)&gt;];
}
2636--3980[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="22.123.56.174" src_ip="130.102.1.157" src_port="80"/>
    </slice>
    <from sec="1081055231" usec="0"/>
    <to sec="1081055500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
2637[label="210.205.26.157;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3981[label="210.205.26.157;2pkt 2fpkt", shape=invtriangle, color=brown];
4691[label="210.205.26.157;2pkt 2fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.205.26.157:33360, 132.24.65.80:445}[33.3333%]&lt;BR/&gt;{210.205.26.157:41264, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{210.205.26.157:16640, 132.78.153.230:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 41264: (21.4286%)&lt;BR/&gt; 33360: (21.4286%)&lt;BR/&gt; 445: (21.4286%)&lt;BR/&gt; 16640: (7.14286%)&gt;];
}
2637--3981[label="1;2pkt 2fpkt"];
2637--4691[label="1;2pkt 2fpkt"];
3981--4691[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="132.78.153.230" dst_port="80" src_ip="210.205.26.157" src_port="16640"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.205.26.157" src_port="41264"/>
      <filter dst_ip="132.24.65.80" dst_port="445" src_ip="210.205.26.157" src_port="33360"/>
    </slice>
    <from sec="1081054931" usec="0"/>
    <to sec="1081055277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.5.136.157"/>
    </slice>
    <from sec="1081055337" usec="0"/>
    <to sec="1081055345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
2647[label="197.42.239.157;173pkt 173fpkt", shape=pentagon, color=darkviolet];
3986[label="197.42.239.157;172pkt 172fpkt", shape=invtriangle, color=brown];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.42.239.157:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2647--3986[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter src_ip="197.42.239.157"/>
    </slice>
    <from sec="1081054805" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
667[label="159.31.182.131;d;15pkt 15fpkt", shape=diamond, color=yellow];
700[label="160.204.62.204;d;72pkt 72fpkt", shape=diamond, color=yellow];
759[label="217.16.104.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
784[label="90.200.9.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
1422[label="90.200.9.10;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2465[label="210.0.89.134;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2654[label="214.244.192.158;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3109[label="217.16.104.223;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3326[label="90.200.9.10;36pkt 36fpkt", shape=invtriangle, color=brown];
3991[label="214.244.192.158;5pkt 5fpkt", shape=invtriangle, color=brown];
4242[label="217.16.104.223;1pkt 1fpkt", shape=invtriangle, color=brown];
4348[label="90.200.9.10;37pkt 37fpkt", shape=invhouse, color=bisque];
4697[label="214.244.192.158;5pkt 5fpkt", shape=invhouse, color=bisque];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.200.9.10:80, 160.204.62.204:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2222%)&lt;BR/&gt; 51200: (2.22222%)&lt;BR/&gt; 51201: (1.77778%)&lt;BR/&gt; 9000: (1.11111%)&lt;BR/&gt; 33401: (0.888889%)&gt;];
}
667--759[label="1;2pkt 2fpkt"];
667--1422[label="0.133333;2pkt 2fpkt"];
667--3109[label="1;2pkt 2fpkt"];
667--3326[label="0.0666667;1pkt 1fpkt"];
667--4242[label="1;1pkt 1fpkt"];
667--4348[label="0.133333;2pkt 2fpkt"];
700--784[label="1;2pkt 2fpkt"];
700--1045[label="0.0227273;1pkt 1fpkt"];
700--1422[label="0.945946;35pkt 35fpkt"];
700--2465[label="0.333333;2pkt 2fpkt"];
700--2654[label="1;5pkt 5fpkt"];
700--3326[label="0.972222;35pkt 35fpkt"];
700--3991[label="1;5pkt 5fpkt"];
700--4348[label="0.945946;35pkt 35fpkt"];
700--4697[label="1;5pkt 5fpkt"];
759--3109[label="1;2pkt 2fpkt"];
759--4242[label="1;1pkt 1fpkt"];
1422--3326[label="1;36pkt 36fpkt"];
1422--4348[label="1;37pkt 37fpkt"];
2654--3991[label="1;5pkt 5fpkt"];
2654--4697[label="1;5pkt 5fpkt"];
3109--4242[label="1;1pkt 1fpkt"];
3326--4348[label="1;36pkt 36fpkt"];
3991--4697[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.204.62.204" src_ip="90.200.9.10" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.218.196.159"/>
    </slice>
    <from sec="1081055629" usec="0"/>
    <to sec="1081055650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.188.137.160"/>
    </slice>
    <from sec="1081055659" usec="0"/>
    <to sec="1081055667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.72.146.161"/>
    </slice>
    <from sec="1081055252" usec="0"/>
    <to sec="1081055265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
2683[label="22.224.219.161;228pkt 228fpkt", shape=pentagon, color=darkviolet];
4002[label="22.224.219.161;228pkt 228fpkt", shape=invtriangle, color=brown];
4702[label="22.224.219.161;227pkt 227fpkt", shape=invhouse, color=bisque];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.224.219.161:7876, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7876: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2683--4002[label="1;228pkt 228fpkt"];
2683--4702[label="1;227pkt 227fpkt"];
4002--4702[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="22.224.219.161" src_port="7876"/>
    </slice>
    <from sec="1081055415" usec="0"/>
    <to sec="1081055457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.40.25.163"/>
    </slice>
    <from sec="1081055282" usec="0"/>
    <to sec="1081055306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.144.135.163"/>
    </slice>
    <from sec="1081055485" usec="0"/>
    <to sec="1081055505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.198.169.164"/>
    </slice>
    <from sec="1081055550" usec="0"/>
    <to sec="1081055572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.189.58.165"/>
    </slice>
    <from sec="1081055027" usec="0"/>
    <to sec="1081055466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.145.231.165"/>
    </slice>
    <from sec="1081055334" usec="0"/>
    <to sec="1081055346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.110.73.166"/>
    </slice>
    <from sec="1081055472" usec="0"/>
    <to sec="1081055484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.188.102.166"/>
    </slice>
    <from sec="1081055424" usec="0"/>
    <to sec="1081055437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.169.157.166"/>
    </slice>
    <from sec="1081055597" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.97.171.166"/>
    </slice>
    <from sec="1081054836" usec="0"/>
    <to sec="1081054848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.144.80.167"/>
    </slice>
    <from sec="1081054935" usec="0"/>
    <to sec="1081054944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.220.129.167"/>
    </slice>
    <from sec="1081054848" usec="0"/>
    <to sec="1081054860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
2737[label="90.222.1.169;173pkt 173fpkt", shape=pentagon, color=darkviolet];
4040[label="90.222.1.169;172pkt 172fpkt", shape=invtriangle, color=brown];
4724[label="90.222.1.169;172pkt 172fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.222.1.169:17792, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17792: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2737--4040[label="1;172pkt 172fpkt"];
2737--4724[label="1;172pkt 172fpkt"];
4040--4724[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.222.1.169" src_port="17792"/>
    </slice>
    <from sec="1081055156" usec="0"/>
    <to sec="1081055193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.193.67.169"/>
    </slice>
    <from sec="1081055379" usec="0"/>
    <to sec="1081055391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.190.112.169"/>
    </slice>
    <from sec="1081055046" usec="0"/>
    <to sec="1081055064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.254.53.170"/>
    </slice>
    <from sec="1081055200" usec="0"/>
    <to sec="1081055203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.145.229.170"/>
    </slice>
    <from sec="1081055058" usec="0"/>
    <to sec="1081055070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.192.2.171"/>
    </slice>
    <from sec="1081055458" usec="0"/>
    <to sec="1081055462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.16.119.171"/>
    </slice>
    <from sec="1081055242" usec="0"/>
    <to sec="1081055252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.239.42.172"/>
    </slice>
    <from sec="1081054825" usec="0"/>
    <to sec="1081055673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.144.106.172"/>
    </slice>
    <from sec="1081055223" usec="0"/>
    <to sec="1081055229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
2772[label="211.66.146.173;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4064[label="211.66.146.173;38pkt 38fpkt", shape=invtriangle, color=brown];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.146.173:*, *:80}[86.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3333%)&lt;BR/&gt; 445: (6.66667%)&lt;BR/&gt; 48218: (1.33333%)&lt;BR/&gt; 48118: (1.33333%)&lt;BR/&gt; 46100: (1.33333%)&gt;];
}
2772--4064[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="211.66.146.173"/>
    </slice>
    <from sec="1081054829" usec="0"/>
    <to sec="1081055684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.208.171.173"/>
    </slice>
    <from sec="1081055418" usec="0"/>
    <to sec="1081055449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.21.238.173"/>
    </slice>
    <from sec="1081054890" usec="0"/>
    <to sec="1081054895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.136.231.174"/>
    </slice>
    <from sec="1081055420" usec="0"/>
    <to sec="1081055447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.150.32.175"/>
    </slice>
    <from sec="1081055292" usec="0"/>
    <to sec="1081055299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.84.184.175"/>
    </slice>
    <from sec="1081054944" usec="0"/>
    <to sec="1081054952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.1.245.175"/>
    </slice>
    <from sec="1081055465" usec="0"/>
    <to sec="1081055474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
2794[label="23.101.35.176;466pkt 466fpkt", shape=pentagon, color=darkviolet];
4078[label="23.101.35.176;465pkt 465fpkt", shape=invtriangle, color=brown];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.101.35.176:3571, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3571: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2794--4078[label="1;465pkt 465fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="23.101.35.176" src_port="3571"/>
    </slice>
    <from sec="1081054952" usec="0"/>
    <to sec="1081055184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.72.144.176"/>
    </slice>
    <from sec="1081055196" usec="0"/>
    <to sec="1081055205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.191.104.177"/>
    </slice>
    <from sec="1081055224" usec="0"/>
    <to sec="1081055230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
2806[label="210.209.24.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4087[label="210.209.24.178;1pkt 1fpkt", shape=invtriangle, color=brown];
4752[label="210.209.24.178;1pkt 1fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.209.24.178:37914, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37914: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2806--4087[label="1;1pkt 1fpkt"];
2806--4752[label="1;1pkt 1fpkt"];
4087--4752[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="210.209.24.178" src_port="37914"/>
    </slice>
    <from sec="1081055678" usec="0"/>
    <to sec="1081055695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
2808[label="90.128.68.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4089[label="90.128.68.178;1pkt 1fpkt", shape=invtriangle, color=brown];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.128.68.178:5931, 130.102.30.84:80}[50%]&lt;BR/&gt;{90.128.68.178:8038, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 8038: (33.3333%)&lt;BR/&gt; 5931: (16.6667%)&gt;];
}
2808--4089[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.128.68.178" src_port="8038"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.128.68.178" src_port="5931"/>
    </slice>
    <from sec="1081055089" usec="0"/>
    <to sec="1081055683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
2814[label="21.43.218.178;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4091[label="21.43.218.178;4pkt 4fpkt", shape=invtriangle, color=brown];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.43.218.178:80, 130.103.9.46:12609}[20%]&lt;BR/&gt;{21.43.218.178:80, 130.103.9.46:12638}[20%]&lt;BR/&gt;{21.43.218.178:80, 130.103.9.46:12666}[20%]&lt;BR/&gt;{21.43.218.178:80, 130.103.9.46:12709}[20%]&lt;BR/&gt;{21.43.218.178:80, 130.103.9.46:32335}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32335: (11.1111%)&lt;BR/&gt; 12709: (11.1111%)&lt;BR/&gt; 12666: (11.1111%)&lt;BR/&gt; 12638: (11.1111%)&gt;];
}
2814--4091[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.9.46" dst_port="32335" src_ip="21.43.218.178" src_port="80"/>
      <filter dst_ip="130.103.9.46" dst_port="12709" src_ip="21.43.218.178" src_port="80"/>
      <filter dst_ip="130.103.9.46" dst_port="12666" src_ip="21.43.218.178" src_port="80"/>
      <filter dst_ip="130.103.9.46" dst_port="12638" src_ip="21.43.218.178" src_port="80"/>
      <filter dst_ip="130.103.9.46" dst_port="12609" src_ip="21.43.218.178" src_port="80"/>
    </slice>
    <from sec="1081055658" usec="0"/>
    <to sec="1081055678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.35.18.179"/>
    </slice>
    <from sec="1081055502" usec="0"/>
    <to sec="1081055510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.2.104.180"/>
    </slice>
    <from sec="1081055455" usec="0"/>
    <to sec="1081055500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
2823[label="214.20.162.180;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4098[label="214.20.162.180;3pkt 3fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.20.162.180:1627, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{214.20.162.180:2453, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{214.20.162.180:4611, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4611: (16.6667%)&lt;BR/&gt; 2453: (16.6667%)&lt;BR/&gt; 1627: (16.6667%)&gt;];
}
2823--4098[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="214.20.162.180" src_port="4611"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="214.20.162.180" src_port="2453"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="214.20.162.180" src_port="1627"/>
    </slice>
    <from sec="1081055518" usec="0"/>
    <to sec="1081055683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.100.57.181"/>
    </slice>
    <from sec="1081055625" usec="0"/>
    <to sec="1081055637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.211.27.182"/>
    </slice>
    <from sec="1081055630" usec="0"/>
    <to sec="1081055642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.18.97.182"/>
    </slice>
    <from sec="1081054985" usec="0"/>
    <to sec="1081055004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.6.76.183"/>
    </slice>
    <from sec="1081055675" usec="0"/>
    <to sec="1081055684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.219.74.184"/>
    </slice>
    <from sec="1081054843" usec="0"/>
    <to sec="1081054860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.104.111.184"/>
    </slice>
    <from sec="1081055634" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.63.1.185"/>
    </slice>
    <from sec="1081055156" usec="0"/>
    <to sec="1081055463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.85.85.185"/>
    </slice>
    <from sec="1081054876" usec="0"/>
    <to sec="1081054895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.147.86.187"/>
    </slice>
    <from sec="1081055538" usec="0"/>
    <to sec="1081055544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
2871[label="216.209.204.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4122[label="216.209.204.187;2pkt 2fpkt", shape=invtriangle, color=brown];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.209.204.187:2975, 132.78.186.44:80}[50%]&lt;BR/&gt;{216.209.204.187:1310, 130.102.30.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2975: (25%)&lt;BR/&gt; 1310: (25%)&gt;];
}
2871--4122[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="216.209.204.187" src_port="1310"/>
      <filter dst_ip="132.78.186.44" dst_port="80" src_ip="216.209.204.187" src_port="2975"/>
    </slice>
    <from sec="1081055320" usec="0"/>
    <to sec="1081055369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
2875[label="129.184.3.188;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4125[label="129.184.3.188;27pkt 27fpkt", shape=invtriangle, color=brown];
4768[label="129.184.3.188;27pkt 27fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.184.3.188:80, 130.102.64.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49578: (1.85185%)&lt;BR/&gt; 49577: (1.85185%)&lt;BR/&gt; 49576: (1.85185%)&lt;BR/&gt; 49575: (1.85185%)&gt;];
}
2875--4125[label="1;27pkt 27fpkt"];
2875--4768[label="1;27pkt 27fpkt"];
4125--4768[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.64.67" src_ip="129.184.3.188" src_port="80"/>
    </slice>
    <from sec="1081055514" usec="0"/>
    <to sec="1081055633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
2876[label="90.191.7.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4126[label="90.191.7.188;3pkt 3fpkt", shape=invtriangle, color=brown];
4769[label="90.191.7.188;3pkt 3fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.191.7.188:1081, 130.102.30.84:80}[33.3333%]&lt;BR/&gt;{90.191.7.188:4854, 130.103.219.26:3127}[33.3333%]&lt;BR/&gt;{90.191.7.188:4855, 130.103.219.26:6129}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (16.6667%)&lt;BR/&gt; 4855: (16.6667%)&lt;BR/&gt; 4854: (16.6667%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 1081: (16.6667%)&gt;];
}
2876--4126[label="1;3pkt 3fpkt"];
2876--4769[label="1;3pkt 3fpkt"];
4126--4769[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.219.26" dst_port="6129" src_ip="90.191.7.188" src_port="4855"/>
      <filter dst_ip="130.103.219.26" dst_port="3127" src_ip="90.191.7.188" src_port="4854"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.191.7.188" src_port="1081"/>
    </slice>
    <from sec="1081055247" usec="0"/>
    <to sec="1081055661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
2877[label="130.102.13.188;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4127[label="130.102.13.188;32pkt 32fpkt", shape=invtriangle, color=brown];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.13.188:80, 22.200.133.80:*}[28.125%]&lt;BR/&gt;{130.102.13.188:25, *:*}[25%]&lt;BR/&gt;{130.102.13.188:*, *:25}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.4375%)&lt;BR/&gt; 25: (23.4375%)&lt;BR/&gt; 58660: (1.5625%)&lt;BR/&gt; 57332: (1.5625%)&lt;BR/&gt; 56083: (1.5625%)&gt;];
}
2877--4127[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="130.102.13.188" src_port="25"/>
      <filter dst_port="25" src_ip="130.102.13.188"/>
      <filter dst_ip="22.200.133.80" src_ip="130.102.13.188" src_port="80"/>
    </slice>
    <from sec="1081054829" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.22.49.188"/>
    </slice>
    <from sec="1081055041" usec="0"/>
    <to sec="1081055050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.197.75.188"/>
    </slice>
    <from sec="1081055214" usec="0"/>
    <to sec="1081055222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
2883[label="17.173.136.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4131[label="17.173.136.188;1pkt 1fpkt", shape=invtriangle, color=brown];
4770[label="17.173.136.188;1pkt 1fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.173.136.188:1220, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1220: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2883--4131[label="1;1pkt 1fpkt"];
2883--4770[label="1;1pkt 1fpkt"];
4131--4770[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="17.173.136.188" src_port="1220"/>
    </slice>
    <from sec="1081055640" usec="0"/>
    <to sec="1081055664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
2874[label="166.84.219.187;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4124[label="166.84.219.187;20pkt 20fpkt", shape=invtriangle, color=brown];
4767[label="166.84.219.187;19pkt 19fpkt", shape=invhouse, color=bisque];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.84.219.187:*, 130.102.28.83:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57866: (2.54237%)&lt;BR/&gt; 52274: (2.54237%)&lt;BR/&gt; 47887: (2.54237%)&lt;BR/&gt; 44116: (2.54237%)&gt;];
}
2874--4124[label="1;20pkt 20fpkt"];
2874--4767[label="1;19pkt 19fpkt"];
4124--4767[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.28.83" dst_port="80" src_ip="166.84.219.187"/>
    </slice>
    <from sec="1081054866" usec="0"/>
    <to sec="1081055693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
2892[label="4.25.59.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4135[label="4.25.59.190;1pkt 1fpkt", shape=invtriangle, color=brown];
4773[label="4.25.59.190;2pkt 2fpkt", shape=invhouse, color=bisque];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.25.59.190:3829, 132.3.101.132:3127}[50%]&lt;BR/&gt;{4.25.59.190:1133, 132.3.101.133:3127}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1133: (37.5%)&lt;BR/&gt; 3829: (12.5%)&gt;];
}
2892--4135[label="1;1pkt 1fpkt"];
2892--4773[label="1;1pkt 1fpkt"];
4135--4773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.3.101.133" dst_port="3127" src_ip="4.25.59.190" src_port="1133"/>
      <filter dst_ip="132.3.101.132" dst_port="3127" src_ip="4.25.59.190" src_port="3829"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.155.163.190"/>
    </slice>
    <from sec="1081055438" usec="0"/>
    <to sec="1081055452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.0.21.191"/>
    </slice>
    <from sec="1081055635" usec="0"/>
    <to sec="1081055668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
2900[label="210.13.86.191;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4142[label="210.13.86.191;38pkt 38fpkt", shape=invtriangle, color=brown];
4777[label="210.13.86.191;37pkt 37fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.13.86.191:*, *:2745}[28.9474%]&lt;BR/&gt;{210.13.86.191:*, *:1025}[26.3158%]&lt;BR/&gt;{210.13.86.191:*, *:80}[23.6842%]&lt;BR/&gt;{210.13.86.191:*, *:6129}[21.0526%]&lt;BR/&gt;{210.13.86.191:*, 196.127.109.34:*}[21.0526%]&lt;BR/&gt;{210.13.86.191:*, 196.127.48.109:*}[21.0526%]&lt;BR/&gt;{210.13.86.191:*, 196.127.74.124:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (14.6018%)&lt;BR/&gt; 1025: (12.8319%)&lt;BR/&gt; 80: (11.9469%)&lt;BR/&gt; 6129: (10.6195%)&lt;BR/&gt; 19676: (1.32743%)&gt;];
}
2900--4142[label="1;38pkt 38fpkt"];
2900--4777[label="1;37pkt 37fpkt"];
4142--4777[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="196.127.74.124" src_ip="210.13.86.191"/>
      <filter dst_ip="196.127.48.109" src_ip="210.13.86.191"/>
      <filter dst_ip="196.127.109.34" src_ip="210.13.86.191"/>
      <filter dst_port="2745" src_ip="210.13.86.191"/>
      <filter dst_port="1025" src_ip="210.13.86.191"/>
      <filter dst_port="80" src_ip="210.13.86.191"/>
      <filter dst_port="6129" src_ip="210.13.86.191"/>
    </slice>
    <from sec="1081055028" usec="0"/>
    <to sec="1081055661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.81.204.191"/>
    </slice>
    <from sec="1081055131" usec="0"/>
    <to sec="1081055146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.146.49.193"/>
    </slice>
    <from sec="1081054966" usec="0"/>
    <to sec="1081054996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
2925[label="214.7.250.193;197pkt 197fpkt", shape=pentagon, color=darkviolet];
4153[label="214.7.250.193;196pkt 196fpkt", shape=invtriangle, color=brown];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.250.193:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2925--4153[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.7.250.193" src_port="1025"/>
    </slice>
    <from sec="1081055577" usec="0"/>
    <to sec="1081055620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.43.64.195"/>
    </slice>
    <from sec="1081055186" usec="0"/>
    <to sec="1081055201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.173.24.197"/>
    </slice>
    <from sec="1081055629" usec="0"/>
    <to sec="1081055637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.162.184.198"/>
    </slice>
    <from sec="1081055046" usec="0"/>
    <to sec="1081055071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.6.74.200"/>
    </slice>
    <from sec="1081055064" usec="0"/>
    <to sec="1081055080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
2980[label="160.204.80.201;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4179[label="160.204.80.201;11pkt 11fpkt", shape=invtriangle, color=brown];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.80.201:*, 89.35.25.162:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3043%)&lt;BR/&gt; 443: (8.69565%)&lt;BR/&gt; 1388: (4.34783%)&lt;BR/&gt; 1387: (4.34783%)&lt;BR/&gt; 1378: (4.34783%)&gt;];
}
2980--4179[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="89.35.25.162" dst_port="80" src_ip="160.204.80.201"/>
    </slice>
    <from sec="1081055408" usec="0"/>
    <to sec="1081055688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
2984[label="90.134.183.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4181[label="90.134.183.201;1pkt 1fpkt", shape=invtriangle, color=brown];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.134.183.201:13122, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13122: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2984--4181[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.134.183.201" src_port="13122"/>
    </slice>
    <from sec="1081055596" usec="0"/>
    <to sec="1081055656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
988[label="215.38.236.202;s;3pkt 3fpkt", shape=diamond, color=yellow];
2987[label="215.38.236.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4183[label="215.38.236.202;4pkt 4fpkt", shape=invtriangle, color=brown];
4795[label="215.38.236.202;4pkt 4fpkt", shape=invhouse, color=bisque];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.38.236.202:3315, 197.42.230.171:445}[25%]&lt;BR/&gt;{215.38.236.202:3560, 130.102.30.84:80}[25%]&lt;BR/&gt;{215.38.236.202:4591, 130.102.30.84:80}[25%]&lt;BR/&gt;{215.38.236.202:4865, 130.102.30.84:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 4865: (13.3333%)&lt;BR/&gt; 4591: (13.3333%)&lt;BR/&gt; 3560: (13.3333%)&lt;BR/&gt; 3315: (10%)&gt;];
}
988--1217[label="1;3pkt 3fpkt"];
988--1257[label="1;3pkt 3fpkt"];
988--2987[label="1;3pkt 3fpkt"];
988--4183[label="1;3pkt 3fpkt"];
988--4795[label="1;3pkt 3fpkt"];
2987--4183[label="1;4pkt 4fpkt"];
2987--4795[label="1;4pkt 4fpkt"];
4183--4795[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="215.38.236.202" src_port="4865"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="215.38.236.202" src_port="4591"/>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="215.38.236.202" src_port="3560"/>
      <filter dst_ip="197.42.230.171" dst_port="445" src_ip="215.38.236.202" src_port="3315"/>
    </slice>
    <from sec="1081055280" usec="0"/>
    <to sec="1081055522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.140.83.203"/>
    </slice>
    <from sec="1081055172" usec="0"/>
    <to sec="1081055178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
2994[label="218.198.158.203;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4187[label="218.198.158.203;47pkt 47fpkt", shape=invtriangle, color=brown];
4797[label="218.198.158.203;46pkt 46fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.198.158.203:80, 159.31.3.61:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53503: (1.07143%)&lt;BR/&gt; 53497: (1.07143%)&lt;BR/&gt; 53489: (1.07143%)&lt;BR/&gt; 53470: (1.07143%)&gt;];
}
2994--4187[label="1;47pkt 47fpkt"];
2994--4797[label="1;46pkt 46fpkt"];
4187--4797[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.3.61" src_ip="218.198.158.203" src_port="80"/>
    </slice>
    <from sec="1081055302" usec="0"/>
    <to sec="1081055694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
3001[label="16.66.108.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4189[label="16.66.108.204;1pkt 1fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.66.108.204:80, 159.31.142.166:1209}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1209: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3001--4189[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.142.166" dst_port="1209" src_ip="16.66.108.204" src_port="80"/>
    </slice>
    <from sec="1081055398" usec="0"/>
    <to sec="1081055597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.104.20.205"/>
    </slice>
    <from sec="1081054841" usec="0"/>
    <to sec="1081054851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
3011[label="210.200.144.206;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4196[label="210.200.144.206;7pkt 7fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.200.144.206:*, 205.70.64.173:*}[87.5%]&lt;BR/&gt;{210.200.144.206:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.3333%)&lt;BR/&gt; 30077: (6.66667%)&lt;BR/&gt; 30076: (6.66667%)&lt;BR/&gt; 30075: (6.66667%)&lt;BR/&gt; 30074: (6.66667%)&gt;];
}
3011--4196[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="205.70.64.173" src_ip="210.200.144.206"/>
      <filter dst_port="80" src_ip="210.200.144.206"/>
    </slice>
    <from sec="1081055175" usec="0"/>
    <to sec="1081055186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
3019[label="129.179.156.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4199[label="129.179.156.208;2pkt 2fpkt", shape=invtriangle, color=brown];
4805[label="129.179.156.208;3pkt 3fpkt", shape=invhouse, color=bisque];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.179.156.208:80, 130.102.188.130:2437}[33.3333%]&lt;BR/&gt;{129.179.156.208:80, 130.102.188.130:2987}[33.3333%]&lt;BR/&gt;{129.179.156.208:80, 130.102.188.130:29138}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2987: (21.4286%)&lt;BR/&gt; 2437: (21.4286%)&lt;BR/&gt; 29138: (7.14286%)&gt;];
}
3019--4199[label="1;2pkt 2fpkt"];
3019--4805[label="1;2pkt 2fpkt"];
4199--4805[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.188.130" dst_port="29138" src_ip="129.179.156.208" src_port="80"/>
      <filter dst_ip="130.102.188.130" dst_port="2987" src_ip="129.179.156.208" src_port="80"/>
      <filter dst_ip="130.102.188.130" dst_port="2437" src_ip="129.179.156.208" src_port="80"/>
    </slice>
    <from sec="1081054887" usec="0"/>
    <to sec="1081054971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
3021[label="20.206.13.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4201[label="20.206.13.209;1pkt 1fpkt", shape=invtriangle, color=brown];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.206.13.209:80, 130.103.107.74:22765}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22765: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3021--4201[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.107.74" dst_port="22765" src_ip="20.206.13.209" src_port="80"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.55.194.209"/>
    </slice>
    <from sec="1081054819" usec="0"/>
    <to sec="1081055663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.148.222.209"/>
    </slice>
    <from sec="1081055510" usec="0"/>
    <to sec="1081055552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.245.67.213"/>
    </slice>
    <from sec="1081054920" usec="0"/>
    <to sec="1081054942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.209.233.213"/>
    </slice>
    <from sec="1081055093" usec="0"/>
    <to sec="1081055119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
337[label="169.86.189.253;d;4pkt 4fpkt", shape=diamond, color=yellow];
338[label="130.103.110.215;s;4pkt 4fpkt", shape=diamond, color=yellow];
3062[label="130.103.110.215;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4220[label="130.103.110.215;8pkt 8fpkt", shape=invtriangle, color=brown];
4814[label="130.103.110.215;9pkt 9fpkt", shape=invhouse, color=bisque];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.110.215:80, 169.86.189.253:*}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.7059%)&lt;BR/&gt; 0: (8.82353%)&lt;BR/&gt; 26760: (5.88235%)&lt;BR/&gt; 8080: (5.88235%)&lt;BR/&gt; 4619: (5.88235%)&gt;];
}
337--3062[label="1;4pkt 4fpkt"];
337--4220[label="1;4pkt 4fpkt"];
337--4814[label="1;4pkt 4fpkt"];
338--3062[label="1;4pkt 4fpkt"];
338--4220[label="0.75;3pkt 3fpkt"];
338--4814[label="1;4pkt 4fpkt"];
3062--4220[label="1;8pkt 8fpkt"];
3062--4814[label="1;9pkt 9fpkt"];
4220--4814[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="169.86.189.253" src_ip="130.103.110.215" src_port="80"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.189.141.215"/>
    </slice>
    <from sec="1081054951" usec="0"/>
    <to sec="1081054957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.71.197.216"/>
    </slice>
    <from sec="1081054812" usec="0"/>
    <to sec="1081054822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.187.72.217"/>
    </slice>
    <from sec="1081055432" usec="0"/>
    <to sec="1081055467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
3072[label="210.228.77.217;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4226[label="210.228.77.217;22pkt 22fpkt", shape=invtriangle, color=brown];
4818[label="210.228.77.217;21pkt 21fpkt", shape=invhouse, color=bisque];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.228.77.217:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58118: (2.30769%)&lt;BR/&gt; 54359: (2.30769%)&lt;BR/&gt; 53369: (2.30769%)&lt;BR/&gt; 51809: (2.30769%)&gt;];
}
3072--4226[label="1;22pkt 22fpkt"];
3072--4818[label="1;21pkt 21fpkt"];
4226--4818[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="210.228.77.217"/>
    </slice>
    <from sec="1081054810" usec="0"/>
    <to sec="1081055660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.130.152.218"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.192.178.218"/>
    </slice>
    <from sec="1081055664" usec="0"/>
    <to sec="1081055674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
3088[label="130.102.1.221;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4233[label="130.102.1.221;16pkt 16fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.102.1.221:80, 20.154.98.18:*}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57696: (3.125%)&lt;BR/&gt; 56863: (3.125%)&lt;BR/&gt; 53220: (3.125%)&lt;BR/&gt; 52470: (3.125%)&gt;];
}
3088--4233[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="20.154.98.18" src_ip="130.102.1.221" src_port="80"/>
    </slice>
    <from sec="1081054836" usec="0"/>
    <to sec="1081055666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.163.24.221"/>
    </slice>
    <from sec="1081055361" usec="0"/>
    <to sec="1081055409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.88.81.222"/>
    </slice>
    <from sec="1081054840" usec="0"/>
    <to sec="1081054854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.132.249.222"/>
    </slice>
    <from sec="1081055516" usec="0"/>
    <to sec="1081055530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
1091[label="211.66.200.223;s;3pkt 3fpkt", shape=diamond, color=yellow];
3110[label="211.66.200.223;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4243[label="211.66.200.223;6pkt 6fpkt", shape=invtriangle, color=brown];
4824[label="211.66.200.223;6pkt 6fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.200.223:*, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63306: (9.52381%)&lt;BR/&gt; 57774: (9.52381%)&lt;BR/&gt; 20813: (9.52381%)&lt;BR/&gt; 59023: (7.14286%)&gt;];
}
1091--1217[label="1;3pkt 3fpkt"];
1091--1257[label="1;3pkt 3fpkt"];
1091--3110[label="1;3pkt 3fpkt"];
1091--4243[label="1;3pkt 3fpkt"];
1091--4824[label="1;3pkt 3fpkt"];
3110--4243[label="1;6pkt 6fpkt"];
3110--4824[label="1;6pkt 6fpkt"];
4243--4824[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="211.66.200.223"/>
    </slice>
    <from sec="1081054996" usec="0"/>
    <to sec="1081055675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.199.169.227"/>
    </slice>
    <from sec="1081055162" usec="0"/>
    <to sec="1081055172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.195.172.227"/>
    </slice>
    <from sec="1081055326" usec="0"/>
    <to sec="1081055339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.193.168.229"/>
    </slice>
    <from sec="1081054847" usec="0"/>
    <to sec="1081054940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
3139[label="192.137.189.229;130pkt 130fpkt", shape=pentagon, color=darkviolet];
4257[label="192.137.189.229;130pkt 130fpkt", shape=invtriangle, color=brown];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.137.189.229:*, *:1026}[51.5385%]&lt;BR/&gt;{192.137.189.229:*, *:1027}[48.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.7692%)&lt;BR/&gt; 1027: (24.2308%)&lt;BR/&gt; 3566: (0.769231%)&lt;BR/&gt; 1696: (0.769231%)&lt;BR/&gt; 4993: (0.384615%)&gt;];
}
3139--4257[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="192.137.189.229"/>
      <filter dst_port="1027" src_ip="192.137.189.229"/>
    </slice>
    <from sec="1081054807" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.59.236.229"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.7.242.229"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.149.128.230"/>
    </slice>
    <from sec="1081055025" usec="0"/>
    <to sec="1081055041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.90.133.231"/>
    </slice>
    <from sec="1081055586" usec="0"/>
    <to sec="1081055592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
3153[label="160.204.62.232;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4266[label="160.204.62.232;12pkt 12fpkt", shape=invtriangle, color=brown];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.204.62.232:*, 218.169.89.5:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1697: (4.16667%)&lt;BR/&gt; 1696: (4.16667%)&lt;BR/&gt; 1695: (4.16667%)&lt;BR/&gt; 1694: (4.16667%)&gt;];
}
3153--4266[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="218.169.89.5" dst_port="80" src_ip="160.204.62.232"/>
    </slice>
    <from sec="1081055163" usec="0"/>
    <to sec="1081055240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.89.80.232"/>
    </slice>
    <from sec="1081055005" usec="0"/>
    <to sec="1081055013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
3156[label="90.179.134.232;150pkt 150fpkt", shape=pentagon, color=darkviolet];
4269[label="90.179.134.232;150pkt 150fpkt", shape=invtriangle, color=brown];
4836[label="90.179.134.232;150pkt 150fpkt", shape=invhouse, color=bisque];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.179.134.232:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3156--4269[label="1;150pkt 150fpkt"];
3156--4836[label="1;150pkt 150fpkt"];
4269--4836[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.179.134.232" src_port="1036"/>
    </slice>
    <from sec="1081055048" usec="0"/>
    <to sec="1081055080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.118.147.233"/>
    </slice>
    <from sec="1081055303" usec="0"/>
    <to sec="1081055327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.3.230.233"/>
    </slice>
    <from sec="1081054991" usec="0"/>
    <to sec="1081055063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
3169[label="132.237.220.234;173pkt 173fpkt", shape=pentagon, color=darkviolet];
4277[label="132.237.220.234;173pkt 173fpkt", shape=invtriangle, color=brown];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.220.234:57621, 207.170.56.217:*}[26.0116%]&lt;BR/&gt;{132.237.220.234:57690, 207.170.56.217:*}[26.0116%]&lt;BR/&gt;{132.237.220.234:57758, 207.170.56.217:*}[26.0116%]&lt;BR/&gt;{132.237.220.234:57644, 220.18.28.172:*}[20.8092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57758: (13.0058%)&lt;BR/&gt; 57690: (13.0058%)&lt;BR/&gt; 57621: (13.0058%)&lt;BR/&gt; 57644: (10.4046%)&lt;BR/&gt; 33488: (1.15607%)&gt;];
}
3169--4277[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_ip="207.170.56.217" src_ip="132.237.220.234" src_port="57758"/>
      <filter dst_ip="207.170.56.217" src_ip="132.237.220.234" src_port="57690"/>
      <filter dst_ip="207.170.56.217" src_ip="132.237.220.234" src_port="57621"/>
      <filter dst_ip="220.18.28.172" src_ip="132.237.220.234" src_port="57644"/>
    </slice>
    <from sec="1081054941" usec="0"/>
    <to sec="1081055669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
3175[label="130.103.40.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4279[label="130.103.40.236;1pkt 1fpkt", shape=invtriangle, color=brown];
4842[label="130.103.40.236;1pkt 1fpkt", shape=invhouse, color=bisque];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.103.40.236:49985, 205.172.21.2:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49985: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3175--4279[label="1;1pkt 1fpkt"];
3175--4842[label="1;1pkt 1fpkt"];
4279--4842[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.172.21.2" dst_port="80" src_ip="130.103.40.236" src_port="49985"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
3179[label="132.237.220.236;117pkt 117fpkt", shape=pentagon, color=darkviolet];
4282[label="132.237.220.236;116pkt 116fpkt", shape=invtriangle, color=brown];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.237.220.236:50649, 207.170.56.217:*}[38.4615%]&lt;BR/&gt;{132.237.220.236:50677, 220.18.28.172:*}[30.7692%]&lt;BR/&gt;{132.237.220.236:50696, 220.18.28.172:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50649: (19.3133%)&lt;BR/&gt; 50696: (15.4506%)&lt;BR/&gt; 50677: (15.2361%)&lt;BR/&gt; 33488: (1.28755%)&lt;BR/&gt; 33487: (1.28755%)&gt;];
}
3179--4282[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="220.18.28.172" src_ip="132.237.220.236" src_port="50696"/>
      <filter dst_ip="220.18.28.172" src_ip="132.237.220.236" src_port="50677"/>
      <filter dst_ip="207.170.56.217" src_ip="132.237.220.236" src_port="50649"/>
    </slice>
    <from sec="1081054822" usec="0"/>
    <to sec="1081055431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.136.91.237"/>
    </slice>
    <from sec="1081055610" usec="0"/>
    <to sec="1081055651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.38.26.238"/>
    </slice>
    <from sec="1081054801" usec="0"/>
    <to sec="1081055343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
3185[label="196.32.21.239;68pkt 68fpkt", shape=pentagon, color=darkviolet];
4287[label="196.32.21.239;67pkt 67fpkt", shape=invtriangle, color=brown];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.32.21.239:*, *:2745}[27.9412%]&lt;BR/&gt;{196.32.21.239:*, *:1025}[26.4706%]&lt;BR/&gt;{196.32.21.239:*, *:6129}[23.5294%]&lt;BR/&gt;{196.32.21.239:*, *:80}[22.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.7037%)&lt;BR/&gt; 1025: (13.3333%)&lt;BR/&gt; 6129: (11.8519%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 3729: (1.48148%)&gt;];
}
3185--4287[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="196.32.21.239"/>
      <filter dst_port="1025" src_ip="196.32.21.239"/>
      <filter dst_port="6129" src_ip="196.32.21.239"/>
      <filter dst_port="80" src_ip="196.32.21.239"/>
    </slice>
    <from sec="1081054835" usec="0"/>
    <to sec="1081055661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.219.52.239"/>
    </slice>
    <from sec="1081055152" usec="0"/>
    <to sec="1081055166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
3205[label="21.58.249.241;210pkt 210fpkt", shape=pentagon, color=darkviolet];
4292[label="21.58.249.241;210pkt 210fpkt", shape=invtriangle, color=brown];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.58.249.241:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3205--4292[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="21.58.249.241" src_port="1029"/>
    </slice>
    <from sec="1081055266" usec="0"/>
    <to sec="1081055299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
754[label="194.200.127.228;s;14pkt 14fpkt", shape=diamond, color=yellow];
856[label="130.103.40.10;d;53pkt 53fpkt", shape=diamond, color=yellow];
3131[label="194.200.127.228;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3213[label="194.200.127.243;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4297[label="194.200.127.243;11pkt 11fpkt", shape=invtriangle, color=brown];
4851[label="194.200.127.243;11pkt 11fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.200.127.228:80, 130.103.40.10:*}[49.0566%]&lt;BR/&gt;{194.200.127.243:80, 130.103.40.10:*}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6032%)&lt;BR/&gt; 3016: (1.5873%)&lt;BR/&gt; 3015: (1.5873%)&lt;BR/&gt; 2932: (1.5873%)&lt;BR/&gt; 2900: (1.5873%)&gt;];
}
754--856[label="1;14pkt 14fpkt"];
754--3131[label="1;14pkt 14fpkt"];
856--857[label="0.0188679;1pkt 1fpkt"];
856--1045[label="0.0227273;1pkt 1fpkt"];
856--1046[label="0.0188679;1pkt 1fpkt"];
856--1287[label="0.0566038;3pkt 3fpkt"];
856--1302[label="0.0566038;3pkt 3fpkt"];
856--1851[label="0.0277778;1pkt 1fpkt"];
856--2058[label="0.0188679;1pkt 1fpkt"];
856--2373[label="0.0238095;1pkt 1fpkt"];
856--3131[label="1;26pkt 26fpkt"];
856--3213[label="1;11pkt 11fpkt"];
856--4297[label="1;11pkt 11fpkt"];
856--4851[label="1;11pkt 11fpkt"];
3213--4297[label="1;11pkt 11fpkt"];
3213--4851[label="1;11pkt 11fpkt"];
4297--4851[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.40.10" src_ip="194.200.127.228" src_port="80"/>
      <filter dst_ip="130.103.40.10" src_ip="194.200.127.243" src_port="80"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081055429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
3215[label="220.198.186.243;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4299[label="220.198.186.243;11pkt 11fpkt", shape=invtriangle, color=brown];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.198.186.243:80, 130.103.98.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49212: (4.34783%)&lt;BR/&gt; 49211: (4.34783%)&lt;BR/&gt; 49210: (4.34783%)&lt;BR/&gt; 49209: (4.34783%)&gt;];
}
3215--4299[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.98.73" src_ip="220.198.186.243" src_port="80"/>
    </slice>
    <from sec="1081054813" usec="0"/>
    <to sec="1081054935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.22.1.244"/>
    </slice>
    <from sec="1081054957" usec="0"/>
    <to sec="1081054969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
3228[label="117.224.232.246;118pkt 118fpkt", shape=pentagon, color=darkviolet];
4302[label="117.224.232.246;118pkt 118fpkt", shape=invtriangle, color=brown];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.224.232.246:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3228--4302[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="117.224.232.246" src_port="1031"/>
    </slice>
    <from sec="1081054971" usec="0"/>
    <to sec="1081054991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
3233[label="219.157.169.248;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4303[label="219.157.169.248;2pkt 2fpkt", shape=invtriangle, color=brown];
4852[label="219.157.169.248;2pkt 2fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.157.169.248:80, 159.31.175.165:1119}[50%]&lt;BR/&gt;{219.157.169.248:80, 159.31.175.165:1121}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1121: (25%)&lt;BR/&gt; 1119: (25%)&gt;];
}
3233--4303[label="1;2pkt 2fpkt"];
3233--4852[label="1;2pkt 2fpkt"];
4303--4852[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="159.31.175.165" dst_port="1121" src_ip="219.157.169.248" src_port="80"/>
      <filter dst_ip="159.31.175.165" dst_port="1119" src_ip="219.157.169.248" src_port="80"/>
    </slice>
    <from sec="1081055552" usec="0"/>
    <to sec="1081055574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.88.64.250"/>
    </slice>
    <from sec="1081055426" usec="0"/>
    <to sec="1081055435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.707404,2.67134,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
3254[label="90.84.160.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4316[label="90.84.160.253;1pkt 1fpkt", shape=invtriangle, color=brown];
4859[label="90.84.160.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.84.160.253:1282, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1282: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3254--4316[label="1;1pkt 1fpkt"];
3254--4859[label="1;1pkt 1fpkt"];
4316--4859[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.84.160.253" src_port="1282"/>
    </slice>
    <from sec="1081055688" usec="0"/>
    <to sec="1081055696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493606,2.68947,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
3258[label="89.94.37.254;132pkt 132fpkt", shape=pentagon, color=darkviolet];
4318[label="89.94.37.254;131pkt 131fpkt", shape=invtriangle, color=brown];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.94.37.254:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 47601: (0.380228%)&lt;BR/&gt; 47598: (0.380228%)&lt;BR/&gt; 47595: (0.380228%)&lt;BR/&gt; 47589: (0.380228%)&gt;];
}
3258--4318[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="89.94.37.254"/>
    </slice>
    <from sec="1081054908" usec="0"/>
    <to sec="1081054931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491208,2.71662,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.174.136.254"/>
    </slice>
    <from sec="1081055076" usec="0"/>
    <to sec="1081055111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.130.144.0"/>
    </slice>
    <from sec="1081055382" usec="0"/>
    <to sec="1081055399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.189.221.0"/>
    </slice>
    <from sec="1081055290" usec="0"/>
    <to sec="1081055295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.84.143.3"/>
    </slice>
    <from sec="1081055124" usec="0"/>
    <to sec="1081055132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.93.108.4"/>
    </slice>
    <from sec="1081055589" usec="0"/>
    <to sec="1081055595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.20.14.5"/>
    </slice>
    <from sec="1081055060" usec="0"/>
    <to sec="1081055080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.93.136.9"/>
    </slice>
    <from sec="1081054853" usec="0"/>
    <to sec="1081054864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.42.23.13"/>
    </slice>
    <from sec="1081055208" usec="0"/>
    <to sec="1081055212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.705732,2.69867,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
3354[label="90.5.219.14;1pkt 1fpkt", shape=invtriangle, color=brown];
4360[label="90.5.219.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.5.219.14:4847, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4847: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3354--4360[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.5.219.14" src_port="4847"/>
    </slice>
    <from sec="1081055677" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.13.187.15"/>
    </slice>
    <from sec="1081055253" usec="0"/>
    <to sec="1081055267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.192.20.17"/>
    </slice>
    <from sec="1081055558" usec="0"/>
    <to sec="1081055595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.137.20.19"/>
    </slice>
    <from sec="1081055042" usec="0"/>
    <to sec="1081055067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.158.117.19"/>
    </slice>
    <from sec="1081055535" usec="0"/>
    <to sec="1081055545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.32.26.20"/>
    </slice>
    <from sec="1081054802" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.16.173.20"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.211.185.20"/>
    </slice>
    <from sec="1081055347" usec="0"/>
    <to sec="1081055366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947238,2.62333,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
334[label="146.80.127.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
378[label="210.133.188.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
478[label="16.173.153.51;s;5pkt 5fpkt", shape=diamond, color=yellow];
492[label="202.204.67.31;s;2pkt 2fpkt", shape=diamond, color=yellow];
558[label="211.66.230.20;s;13pkt 13fpkt", shape=diamond, color=yellow];
572[label="21.58.226.193;s;3pkt 3fpkt", shape=diamond, color=yellow];
575[label="20.98.207.252;s;8pkt 8fpkt", shape=diamond, color=yellow];
579[label="20.98.207.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
585[label="210.220.134.146;s;63pkt 63fpkt", shape=diamond, color=yellow];
654[label="20.98.207.245;s;4pkt 4fpkt", shape=diamond, color=yellow];
655[label="90.166.162.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
663[label="210.128.13.29;s;3pkt 3fpkt", shape=diamond, color=yellow];
805[label="197.42.248.163;d;1387pkt 1387fpkt", shape=diamond, color=yellow];
807[label="17.174.179.133;s;2pkt 2fpkt", shape=diamond, color=yellow];
808[label="210.128.32.201;s;2pkt 2fpkt", shape=diamond, color=yellow];
817[label="215.0.121.140;s;4pkt 4fpkt", shape=diamond, color=yellow];
823[label="20.98.207.246;s;4pkt 4fpkt", shape=diamond, color=yellow];
842[label="17.233.214.62;s;2pkt 2fpkt", shape=diamond, color=yellow];
858[label="208.11.166.240;s;2pkt 2fpkt", shape=diamond, color=yellow];
944[label="5.240.114.88;s;2pkt 2fpkt", shape=diamond, color=yellow];
1000[label="211.90.153.56;s;3pkt 3fpkt", shape=diamond, color=yellow];
1001[label="5.55.136.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
1013[label="20.98.207.240;s;2pkt 2fpkt", shape=diamond, color=yellow];
1024[label="20.98.207.226;s;2pkt 2fpkt", shape=diamond, color=yellow];
1025[label="6.84.156.35;s;3pkt 3fpkt", shape=diamond, color=yellow];
1111[label="90.225.94.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1112[label="220.223.123.62;s;9pkt 9fpkt", shape=diamond, color=yellow];
1126[label="4.32.26.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1130[label="211.84.82.154;s;53pkt 53fpkt", shape=diamond, color=yellow];
1174[label="210.148.37.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
1522[label="211.66.230.20;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1600[label="90.166.162.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1650[label="6.84.156.35;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1717[label="210.145.182.44;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1782[label="16.173.153.51;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2317[label="210.145.129.112;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2567[label="210.220.134.146;70pkt 70fpkt", shape=pentagon, color=darkviolet];
2621[label="211.84.82.154;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2793[label="210.133.0.176;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2812[label="23.2.147.178;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2924[label="21.58.226.193;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3027[label="5.83.100.210;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3118[label="90.4.128.225;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3160[label="16.109.207.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3176[label="203.208.48.236;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3386[label="211.66.230.20;13pkt 13fpkt", shape=invtriangle, color=brown];
3464[label="6.84.156.35;3pkt 3fpkt", shape=invtriangle, color=brown];
3822[label="210.145.129.112;17pkt 17fpkt", shape=invtriangle, color=brown];
3972[label="211.84.82.154;58pkt 58fpkt", shape=invtriangle, color=brown];
4077[label="210.133.0.176;1pkt 1fpkt", shape=invtriangle, color=brown];
4170[label="90.225.94.198;1pkt 1fpkt", shape=invtriangle, color=brown];
4206[label="5.83.100.210;4pkt 4fpkt", shape=invtriangle, color=brown];
4273[label="16.109.207.233;1pkt 1fpkt", shape=invtriangle, color=brown];
4381[label="211.66.230.20;14pkt 14fpkt", shape=invhouse, color=bisque];
4745[label="210.133.0.176;1pkt 1fpkt", shape=invhouse, color=bisque];
4808[label="5.83.100.210;4pkt 4fpkt", shape=invhouse, color=bisque];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.42.248.163:6881}[54.1953%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (30.0361%)&lt;BR/&gt; 1214: (2.00927%)&lt;BR/&gt; 80: (1.46832%)&lt;BR/&gt; 6882: (0.953117%)&lt;BR/&gt; 38488: (0.772798%)&gt;];
}
334--805[label="1;1pkt 1fpkt"];
378--805[label="1;1pkt 1fpkt"];
478--805[label="0.8;4pkt 4fpkt"];
478--1782[label="1;4pkt 4fpkt"];
492--805[label="1;2pkt 2fpkt"];
558--805[label="0.846154;11pkt 11fpkt"];
558--1522[label="0.923077;12pkt 12fpkt"];
558--3386[label="0.923077;12pkt 12fpkt"];
558--4381[label="1;13pkt 13fpkt"];
572--805[label="1;3pkt 3fpkt"];
572--2924[label="1;3pkt 3fpkt"];
575--805[label="1;8pkt 8fpkt"];
579--805[label="1;2pkt 2fpkt"];
585--805[label="0.650794;41pkt 41fpkt"];
585--2567[label="0.984127;62pkt 62fpkt"];
654--805[label="1;4pkt 4fpkt"];
655--805[label="1;1pkt 1fpkt"];
655--1600[label="1;1pkt 1fpkt"];
663--805[label="1;3pkt 3fpkt"];
805--807[label="1;2pkt 2fpkt"];
805--808[label="1;2pkt 2fpkt"];
805--817[label="0.75;3pkt 3fpkt"];
805--823[label="1;4pkt 4fpkt"];
805--842[label="1;2pkt 2fpkt"];
805--858[label="1;2pkt 2fpkt"];
805--944[label="1;2pkt 2fpkt"];
805--1000[label="1;3pkt 3fpkt"];
805--1001[label="1;1pkt 1fpkt"];
805--1013[label="1;2pkt 2fpkt"];
805--1024[label="1;2pkt 2fpkt"];
805--1025[label="1;3pkt 3fpkt"];
805--1111[label="1;1pkt 1fpkt"];
805--1112[label="0.888889;8pkt 8fpkt"];
805--1121[label="0.0344828;1pkt 1fpkt"];
805--1126[label="1;1pkt 1fpkt"];
805--1130[label="0.716981;38pkt 38fpkt"];
805--1174[label="1;1pkt 1fpkt"];
805--1522[label="0.769231;10pkt 10fpkt"];
805--1600[label="1;1pkt 1fpkt"];
805--1650[label="1;3pkt 3fpkt"];
805--1717[label="0.902439;37pkt 37fpkt"];
805--1782[label="0.75;3pkt 3fpkt"];
805--2317[label="0.777778;14pkt 14fpkt"];
805--2373[label="0.047619;2pkt 2fpkt"];
805--2567[label="0.571429;40pkt 40fpkt"];
805--2621[label="0.655172;38pkt 38fpkt"];
805--2793[label="1;2pkt 2fpkt"];
805--2812[label="1;7pkt 7fpkt"];
805--2924[label="1;3pkt 3fpkt"];
805--3007[label="0.0322581;1pkt 1fpkt"];
805--3027[label="1;4pkt 4fpkt"];
805--3118[label="0.5;3pkt 3fpkt"];
805--3160[label="1;1pkt 1fpkt"];
805--3176[label="1;6pkt 6fpkt"];
805--3386[label="0.769231;10pkt 10fpkt"];
805--3464[label="1;3pkt 3fpkt"];
805--3822[label="0.764706;13pkt 13fpkt"];
805--3972[label="0.655172;38pkt 38fpkt"];
805--4077[label="1;1pkt 1fpkt"];
805--4170[label="1;1pkt 1fpkt"];
805--4194[label="0.0333333;1pkt 1fpkt"];
805--4206[label="1;4pkt 4fpkt"];
805--4273[label="1;1pkt 1fpkt"];
805--4381[label="0.785714;11pkt 11fpkt"];
805--4745[label="1;1pkt 1fpkt"];
805--4803[label="0.0322581;1pkt 1fpkt"];
805--4808[label="1;4pkt 4fpkt"];
1025--1650[label="1;3pkt 3fpkt"];
1025--3464[label="1;3pkt 3fpkt"];
1111--4170[label="1;1pkt 1fpkt"];
1130--2621[label="1;53pkt 53fpkt"];
1130--3972[label="1;53pkt 53fpkt"];
1522--3386[label="1;13pkt 13fpkt"];
1522--4381[label="1;13pkt 13fpkt"];
1650--3464[label="1;3pkt 3fpkt"];
2317--3822[label="1;17pkt 17fpkt"];
2621--3972[label="1;58pkt 58fpkt"];
2793--4077[label="1;1pkt 1fpkt"];
2793--4745[label="1;1pkt 1fpkt"];
3027--4206[label="1;4pkt 4fpkt"];
3027--4808[label="1;4pkt 4fpkt"];
3160--4273[label="1;1pkt 1fpkt"];
3386--4381[label="1;13pkt 13fpkt"];
4077--4745[label="1;1pkt 1fpkt"];
4206--4808[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="197.42.248.163" dst_port="6881"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.208.0.21"/>
    </slice>
    <from sec="1081055667" usec="0"/>
    <to sec="1081055677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.14.153.23"/>
    </slice>
    <from sec="1081055649" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.203.40.24"/>
    </slice>
    <from sec="1081055028" usec="0"/>
    <to sec="1081055086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.82.52.28"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081054813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.80.208.29"/>
    </slice>
    <from sec="1081055144" usec="0"/>
    <to sec="1081055158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.145.241.30"/>
    </slice>
    <from sec="1081055568" usec="0"/>
    <to sec="1081055581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.13.249.30"/>
    </slice>
    <from sec="1081055500" usec="0"/>
    <to sec="1081055519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.146.212.32"/>
    </slice>
    <from sec="1081055008" usec="0"/>
    <to sec="1081055015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.142.195.33"/>
    </slice>
    <from sec="1081054837" usec="0"/>
    <to sec="1081054847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.167.44.34"/>
    </slice>
    <from sec="1081055549" usec="0"/>
    <to sec="1081055560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.11.68.36"/>
    </slice>
    <from sec="1081055048" usec="0"/>
    <to sec="1081055066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.209.196.37"/>
    </slice>
    <from sec="1081055506" usec="0"/>
    <to sec="1081055518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.5.243.38"/>
    </slice>
    <from sec="1081055219" usec="0"/>
    <to sec="1081055225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.80.197.39"/>
    </slice>
    <from sec="1081054821" usec="0"/>
    <to sec="1081054836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.705732,2.69867,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
3491[label="214.201.68.41;1pkt 1fpkt", shape=invtriangle, color=brown];
4431[label="214.201.68.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.201.68.41:1833, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1833: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3491--4431[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="214.201.68.41" src_port="1833"/>
    </slice>
    <from sec="1081055633" usec="0"/>
    <to sec="1081055640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.213.188.42"/>
    </slice>
    <from sec="1081055128" usec="0"/>
    <to sec="1081055138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.213.173.44"/>
    </slice>
    <from sec="1081054814" usec="0"/>
    <to sec="1081054821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.171.151.48"/>
    </slice>
    <from sec="1081054929" usec="0"/>
    <to sec="1081054947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.90.233.49"/>
    </slice>
    <from sec="1081055017" usec="0"/>
    <to sec="1081055028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.208.10.50"/>
    </slice>
    <from sec="1081055406" usec="0"/>
    <to sec="1081055419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.140.112.50"/>
    </slice>
    <from sec="1081055117" usec="0"/>
    <to sec="1081055137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.137.73.51"/>
    </slice>
    <from sec="1081055677" usec="0"/>
    <to sec="1081055687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.131.231.51"/>
    </slice>
    <from sec="1081055358" usec="0"/>
    <to sec="1081055390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.11.73.52"/>
    </slice>
    <from sec="1081054979" usec="0"/>
    <to sec="1081054988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.128.234.52"/>
    </slice>
    <from sec="1081055622" usec="0"/>
    <to sec="1081055636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.88.173.53"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660093,2.69293,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
1827[label="217.43.168.55;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4468[label="217.43.168.55;112pkt 112fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.43.168.55:*, *:2745}[24.1071%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (11.9658%)&lt;BR/&gt; 1025: (9.82906%)&lt;BR/&gt; 6129: (7.26496%)&lt;BR/&gt; 445: (7.26496%)&lt;BR/&gt; 139: (7.26496%)&gt;];
}
1827--4468[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="217.43.168.55"/>
    </slice>
    <from sec="1081055480" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.89.169.56"/>
    </slice>
    <from sec="1081054899" usec="0"/>
    <to sec="1081054904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.0.65.57"/>
    </slice>
    <from sec="1081055075" usec="0"/>
    <to sec="1081055099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.90.233.58"/>
    </slice>
    <from sec="1081055291" usec="0"/>
    <to sec="1081055297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.193.5.59"/>
    </slice>
    <from sec="1081054822" usec="0"/>
    <to sec="1081054836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.74.71.64"/>
    </slice>
    <from sec="1081055653" usec="0"/>
    <to sec="1081055662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.7.120.66"/>
    </slice>
    <from sec="1081055606" usec="0"/>
    <to sec="1081055620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.16.211.66"/>
    </slice>
    <from sec="1081055519" usec="0"/>
    <to sec="1081055530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.212.44.67"/>
    </slice>
    <from sec="1081055285" usec="0"/>
    <to sec="1081055295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.154.167.68"/>
    </slice>
    <from sec="1081054832" usec="0"/>
    <to sec="1081054894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.144.172.68"/>
    </slice>
    <from sec="1081054855" usec="0"/>
    <to sec="1081055057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.216.111.70"/>
    </slice>
    <from sec="1081055106" usec="0"/>
    <to sec="1081055109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.83.73.72"/>
    </slice>
    <from sec="1081055262" usec="0"/>
    <to sec="1081055273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.4.9.75"/>
    </slice>
    <from sec="1081055573" usec="0"/>
    <to sec="1081055603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.160.24.75"/>
    </slice>
    <from sec="1081055336" usec="0"/>
    <to sec="1081055350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.117.160.76"/>
    </slice>
    <from sec="1081055226" usec="0"/>
    <to sec="1081055254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.137.19.80"/>
    </slice>
    <from sec="1081055502" usec="0"/>
    <to sec="1081055519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.149.241.91"/>
    </slice>
    <from sec="1081055589" usec="0"/>
    <to sec="1081055592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.14.160.92"/>
    </slice>
    <from sec="1081055280" usec="0"/>
    <to sec="1081055283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.198.11.93"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.66.48.93"/>
    </slice>
    <from sec="1081055496" usec="0"/>
    <to sec="1081055502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.203.91.93"/>
    </slice>
    <from sec="1081055215" usec="0"/>
    <to sec="1081055227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.14.51.95"/>
    </slice>
    <from sec="1081055604" usec="0"/>
    <to sec="1081055614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.1.236.101"/>
    </slice>
    <from sec="1081055016" usec="0"/>
    <to sec="1081055027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660093,2.69293,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
2249[label="211.84.193.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4589[label="211.84.193.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.84.193.103:3035, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3035: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2249--4589[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="211.84.193.103" src_port="3035"/>
    </slice>
    <from sec="1081055688" usec="0"/>
    <to sec="1081055694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660093,2.69293,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
2290[label="214.228.82.108;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4600[label="214.228.82.108;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.228.82.108:80, 130.103.9.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16248: (4.34783%)&lt;BR/&gt; 16178: (4.34783%)&lt;BR/&gt; 16152: (4.34783%)&lt;BR/&gt; 16140: (4.34783%)&gt;];
}
2290--4600[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="130.103.9.40" src_ip="214.228.82.108" src_port="80"/>
    </slice>
    <from sec="1081055396" usec="0"/>
    <to sec="1081055437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.88.152.114"/>
    </slice>
    <from sec="1081055410" usec="0"/>
    <to sec="1081055441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.219.178.114"/>
    </slice>
    <from sec="1081055305" usec="0"/>
    <to sec="1081055426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.21.65.115"/>
    </slice>
    <from sec="1081055481" usec="0"/>
    <to sec="1081055532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.131.176.115"/>
    </slice>
    <from sec="1081055683" usec="0"/>
    <to sec="1081055698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.43.79.116"/>
    </slice>
    <from sec="1081055395" usec="0"/>
    <to sec="1081055411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.2.215.117"/>
    </slice>
    <from sec="1081054839" usec="0"/>
    <to sec="1081055689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.130.170.118"/>
    </slice>
    <from sec="1081054917" usec="0"/>
    <to sec="1081054922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.14.143.119"/>
    </slice>
    <from sec="1081055610" usec="0"/>
    <to sec="1081055632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.66.245.119"/>
    </slice>
    <from sec="1081055013" usec="0"/>
    <to sec="1081055031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.221.21.120"/>
    </slice>
    <from sec="1081054962" usec="0"/>
    <to sec="1081054970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.2.180.121"/>
    </slice>
    <from sec="1081055457" usec="0"/>
    <to sec="1081055466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.66.18.125"/>
    </slice>
    <from sec="1081055280" usec="0"/>
    <to sec="1081055284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.8.128.125"/>
    </slice>
    <from sec="1081055032" usec="0"/>
    <to sec="1081055048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.37.36.129"/>
    </slice>
    <from sec="1081055411" usec="0"/>
    <to sec="1081055450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.81.195.130"/>
    </slice>
    <from sec="1081054999" usec="0"/>
    <to sec="1081055033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.91.215.132"/>
    </slice>
    <from sec="1081055171" usec="0"/>
    <to sec="1081055192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.90.210.134"/>
    </slice>
    <from sec="1081055287" usec="0"/>
    <to sec="1081055297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.84.189.142"/>
    </slice>
    <from sec="1081055267" usec="0"/>
    <to sec="1081055274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.2.6.144"/>
    </slice>
    <from sec="1081055207" usec="0"/>
    <to sec="1081055244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.244.154.145"/>
    </slice>
    <from sec="1081055499" usec="0"/>
    <to sec="1081055567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.103.148.146"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.60.224.146"/>
    </slice>
    <from sec="1081055450" usec="0"/>
    <to sec="1081055463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.182.1.147"/>
    </slice>
    <from sec="1081055161" usec="0"/>
    <to sec="1081055175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.67.228.148"/>
    </slice>
    <from sec="1081055538" usec="0"/>
    <to sec="1081055553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.210.153.149"/>
    </slice>
    <from sec="1081055239" usec="0"/>
    <to sec="1081055251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.43.188.153"/>
    </slice>
    <from sec="1081055433" usec="0"/>
    <to sec="1081055447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.80.90.155"/>
    </slice>
    <from sec="1081055209" usec="0"/>
    <to sec="1081055221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.168.65.157"/>
    </slice>
    <from sec="1081054895" usec="0"/>
    <to sec="1081054903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.14.186.160"/>
    </slice>
    <from sec="1081055224" usec="0"/>
    <to sec="1081055232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.72.146.161"/>
    </slice>
    <from sec="1081055252" usec="0"/>
    <to sec="1081055265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.172.138.164"/>
    </slice>
    <from sec="1081055098" usec="0"/>
    <to sec="1081055117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.198.169.164"/>
    </slice>
    <from sec="1081055550" usec="0"/>
    <to sec="1081055572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.21.225.164"/>
    </slice>
    <from sec="1081054862" usec="0"/>
    <to sec="1081054877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.189.58.165"/>
    </slice>
    <from sec="1081055027" usec="0"/>
    <to sec="1081055466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.16.215.165"/>
    </slice>
    <from sec="1081055385" usec="0"/>
    <to sec="1081055398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.188.102.166"/>
    </slice>
    <from sec="1081055424" usec="0"/>
    <to sec="1081055437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.169.157.166"/>
    </slice>
    <from sec="1081055597" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.172.2.167"/>
    </slice>
    <from sec="1081054865" usec="0"/>
    <to sec="1081054872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.144.80.167"/>
    </slice>
    <from sec="1081054935" usec="0"/>
    <to sec="1081054944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.220.129.167"/>
    </slice>
    <from sec="1081054848" usec="0"/>
    <to sec="1081054860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.33.186.167"/>
    </slice>
    <from sec="1081055100" usec="0"/>
    <to sec="1081055391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.193.67.169"/>
    </slice>
    <from sec="1081055379" usec="0"/>
    <to sec="1081055391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.190.112.169"/>
    </slice>
    <from sec="1081055046" usec="0"/>
    <to sec="1081055064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.162.139.170"/>
    </slice>
    <from sec="1081054800" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.145.229.170"/>
    </slice>
    <from sec="1081055058" usec="0"/>
    <to sec="1081055070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.21.246.170"/>
    </slice>
    <from sec="1081055251" usec="0"/>
    <to sec="1081055266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.105.23.171"/>
    </slice>
    <from sec="1081055147" usec="0"/>
    <to sec="1081055286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.21.238.173"/>
    </slice>
    <from sec="1081054890" usec="0"/>
    <to sec="1081054895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.167.45.174"/>
    </slice>
    <from sec="1081055066" usec="0"/>
    <to sec="1081055081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.136.231.174"/>
    </slice>
    <from sec="1081055420" usec="0"/>
    <to sec="1081055447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.72.144.176"/>
    </slice>
    <from sec="1081055196" usec="0"/>
    <to sec="1081055205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.11.182.176"/>
    </slice>
    <from sec="1081054803" usec="0"/>
    <to sec="1081054806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.35.18.179"/>
    </slice>
    <from sec="1081055502" usec="0"/>
    <to sec="1081055510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.2.104.180"/>
    </slice>
    <from sec="1081055455" usec="0"/>
    <to sec="1081055500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.133.24.183"/>
    </slice>
    <from sec="1081055466" usec="0"/>
    <to sec="1081055473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660093,2.69293,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
2839[label="90.6.76.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4761[label="90.6.76.183;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.6.76.183:4262, 130.102.30.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4262: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2839--4761[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.102.30.84" dst_port="80" src_ip="90.6.76.183" src_port="4262"/>
    </slice>
    <from sec="1081055675" usec="0"/>
    <to sec="1081055684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.219.74.184"/>
    </slice>
    <from sec="1081054843" usec="0"/>
    <to sec="1081054860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.147.86.187"/>
    </slice>
    <from sec="1081055538" usec="0"/>
    <to sec="1081055544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.155.163.190"/>
    </slice>
    <from sec="1081055438" usec="0"/>
    <to sec="1081055452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.81.204.191"/>
    </slice>
    <from sec="1081055131" usec="0"/>
    <to sec="1081055146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.43.64.195"/>
    </slice>
    <from sec="1081055186" usec="0"/>
    <to sec="1081055201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.225.94.198"/>
    </slice>
    <from sec="1081055700" usec="0"/>
    <to sec="1081055701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.162.184.198"/>
    </slice>
    <from sec="1081055046" usec="0"/>
    <to sec="1081055071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.6.74.200"/>
    </slice>
    <from sec="1081055064" usec="0"/>
    <to sec="1081055080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.104.20.205"/>
    </slice>
    <from sec="1081054841" usec="0"/>
    <to sec="1081054851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.55.194.209"/>
    </slice>
    <from sec="1081054819" usec="0"/>
    <to sec="1081055663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.189.141.215"/>
    </slice>
    <from sec="1081054951" usec="0"/>
    <to sec="1081054957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.130.21.216"/>
    </slice>
    <from sec="1081055344" usec="0"/>
    <to sec="1081055353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.219.50.220"/>
    </slice>
    <from sec="1081055158" usec="0"/>
    <to sec="1081055165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.163.24.221"/>
    </slice>
    <from sec="1081055361" usec="0"/>
    <to sec="1081055409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.195.172.227"/>
    </slice>
    <from sec="1081055326" usec="0"/>
    <to sec="1081055339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.149.128.230"/>
    </slice>
    <from sec="1081055025" usec="0"/>
    <to sec="1081055041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.90.133.231"/>
    </slice>
    <from sec="1081055586" usec="0"/>
    <to sec="1081055592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.198.113.239"/>
    </slice>
    <from sec="1081055622" usec="0"/>
    <to sec="1081055700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.149.15.242"/>
    </slice>
    <from sec="1081054873" usec="0"/>
    <to sec="1081054884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658302,2.72004,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.78.84.242"/>
    </slice>
    <from sec="1081055014" usec="0"/>
    <to sec="1081055021" usec="0"/>
  </anomaly>

</admd:annotation>
