<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.817262,2.20652,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.106.181.60" dst_port="80" proto="tcp" src_ip="169.51.76.18" src_port="1810"/>
      <filter dst_ip="208.106.181.60" dst_port="80" proto="tcp" src_ip="169.51.76.18" src_port="1813"/>
      <filter dst_ip="208.106.181.56" dst_port="80" proto="tcp" src_ip="169.51.76.18" src_port="1810"/>
      <filter dst_ip="208.106.181.56" dst_port="80" proto="tcp" src_ip="169.51.76.18" src_port="1813"/>
      <from sec="1089177259" usec="0"/>
      <to sec="1089177261" usec="0"/>
    </slice>
    <from sec="1089177257" usec="0"/>
    <to sec="1089177261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="210.227.42.26" src_port="80"/>
      <filter dst_port="5554" proto="tcp" src_ip="210.227.42.26" src_port="80"/>
      <from sec="1089176443" usec="0"/>
      <to sec="1089176656" usec="0"/>
    </slice>
    <from sec="1089176443" usec="0"/>
    <to sec="1089176659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="tcp" src_ip="214.170.97.27" src_port="1235"/>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="udp" src_ip="214.170.97.27" src_port="1235"/>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="tcp" src_ip="214.170.97.27" src_port="80"/>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="udp" src_ip="214.170.97.27" src_port="80"/>
      <from sec="1089176937" usec="0"/>
      <to sec="1089176951" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="tcp" src_ip="19.211.77.27" src_port="1235"/>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="udp" src_ip="19.211.77.27" src_port="1235"/>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="tcp" src_ip="19.211.77.27" src_port="80"/>
      <filter dst_ip="136.213.34.19" dst_port="137" proto="udp" src_ip="19.211.77.27" src_port="80"/>
      <from sec="1089176938" usec="0"/>
      <to sec="1089176950" usec="0"/>
    </slice>
    <from sec="1089176937" usec="0"/>
    <to sec="1089176951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.88.52.85" dst_port="80" proto="tcp" src_ip="136.213.210.164" src_port="45289"/>
      <filter dst_ip="143.88.52.85" dst_port="80" proto="tcp" src_ip="136.213.210.164" src_port="45291"/>
      <from sec="1089177239" usec="0"/>
      <to sec="1089177244" usec="0"/>
    </slice>
    <from sec="1089177239" usec="0"/>
    <to sec="1089177244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.213.39.2" dst_port="3839" proto="tcp" src_ip="87.154.49.176" src_port="80"/>
      <from sec="1089177244" usec="0"/>
      <to sec="1089177247" usec="0"/>
    </slice>
    <from sec="1089177244" usec="0"/>
    <to sec="1089177247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="19.66.106.13" dst_port="38714" proto="tcp" src_ip="141.169.85.194" src_port="80"/>
      <from sec="1089177119" usec="0"/>
      <to sec="1089177123" usec="0"/>
    </slice>
    <from sec="1089177119" usec="0"/>
    <to sec="1089177123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.202.87.222" dst_port="25" proto="tcp" src_ip="173.19.86.212" src_port="1088"/>
      <from sec="1089177279" usec="0"/>
      <to sec="1089177284" usec="0"/>
    </slice>
    <from sec="1089177279" usec="0"/>
    <to sec="1089177284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.223.221.45" src_port="1027"/>
      <from sec="1089176730" usec="0"/>
      <to sec="1089176742" usec="0"/>
    </slice>
    <from sec="1089176730" usec="0"/>
    <to sec="1089176742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="209.40.54.69" src_port="80"/>
      <filter dst_port="9898" proto="tcp" src_ip="209.40.54.69" src_port="80"/>
      <filter dst_port="80" proto="tcp" src_ip="209.40.54.69" src_port="80"/>
      <from sec="1089177090" usec="0"/>
      <to sec="1089177092" usec="0"/>
    </slice>
    <from sec="1089177090" usec="0"/>
    <to sec="1089177094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="215.30.209.139" src_port="63140"/>
      <filter dst_port="137" proto="udp" src_ip="215.30.209.139" src_port="63140"/>
      <from sec="1089176984" usec="0"/>
      <to sec="1089176990" usec="0"/>
    </slice>
    <from sec="1089176984" usec="0"/>
    <to sec="1089176990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="73.171.136.141" src_port="1035"/>
      <filter dst_port="137" proto="udp" src_ip="73.171.136.141" src_port="1035"/>
      <filter dst_port="1863" proto="tcp" src_ip="73.171.136.141" src_port="1035"/>
      <filter dst_port="1863" proto="udp" src_ip="73.171.136.141" src_port="1035"/>
      <filter dst_port="80" proto="tcp" src_ip="73.171.136.141" src_port="1035"/>
      <filter dst_port="80" proto="udp" src_ip="73.171.136.141" src_port="1035"/>
      <from sec="1089177295" usec="0"/>
      <to sec="1089177300" usec="0"/>
    </slice>
    <from sec="1089177295" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="17.30.160.166" src_port="80"/>
      <filter dst_port="5554" proto="tcp" src_ip="17.30.160.166" src_port="80"/>
      <from sec="1089176874" usec="0"/>
      <to sec="1089176877" usec="0"/>
    </slice>
    <from sec="1089176874" usec="0"/>
    <to sec="1089176880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="19.217.7.165" dst_port="137" proto="tcp" src_ip="17.15.94.211" src_port="1048"/>
      <filter dst_ip="19.217.7.165" dst_port="137" proto="udp" src_ip="17.15.94.211" src_port="1048"/>
      <filter dst_ip="19.217.7.165" dst_port="80" proto="tcp" src_ip="17.15.94.211" src_port="1048"/>
      <filter dst_ip="19.217.7.165" dst_port="80" proto="udp" src_ip="17.15.94.211" src_port="1048"/>
      <from sec="1089176620" usec="0"/>
      <to sec="1089176656" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="19.217.7.165" dst_port="137" proto="tcp" src_ip="141.169.130.211" src_port="1048"/>
      <filter dst_ip="19.217.7.165" dst_port="137" proto="udp" src_ip="141.169.130.211" src_port="1048"/>
      <filter dst_ip="19.217.7.165" dst_port="80" proto="tcp" src_ip="141.169.130.211" src_port="1048"/>
      <filter dst_ip="19.217.7.165" dst_port="80" proto="udp" src_ip="141.169.130.211" src_port="1048"/>
      <from sec="1089176620" usec="0"/>
      <to sec="1089176625" usec="0"/>
    </slice>
    <from sec="1089176620" usec="0"/>
    <to sec="1089176656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="215.220.82.226" src_port="80"/>
      <filter dst_port="9898" proto="tcp" src_ip="215.220.82.226" src_port="80"/>
      <from sec="1089176854" usec="0"/>
      <to sec="1089176857" usec="0"/>
    </slice>
    <from sec="1089176854" usec="0"/>
    <to sec="1089176859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="73.148.97.13" src_port="80"/>
      <from sec="1089177191" usec="0"/>
      <to sec="1089177193" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="18.210.41.13" src_port="80"/>
      <from sec="1089177190" usec="0"/>
      <to sec="1089177194" usec="0"/>
    </slice>
    <from sec="1089177190" usec="0"/>
    <to sec="1089177194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="0.150.173.40"/>
      <filter dst_port="5554" proto="tcp" src_ip="0.150.173.40"/>
      <filter dst_port="445" proto="tcp" src_ip="0.150.173.40"/>
      <from sec="1089176771" usec="0"/>
      <to sec="1089176772" usec="0"/>
    </slice>
    <from sec="1089176769" usec="0"/>
    <to sec="1089176773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="2.253.162.62"/>
      <filter dst_port="5554" proto="tcp" src_ip="2.253.162.62"/>
      <from sec="1089176539" usec="0"/>
      <to sec="1089176541" usec="0"/>
    </slice>
    <from sec="1089176538" usec="0"/>
    <to sec="1089176541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.39.52.37" dst_port="9898" proto="tcp" src_ip="215.98.176.62"/>
      <filter dst_ip="21.39.52.37" dst_port="5554" proto="tcp" src_ip="215.98.176.62"/>
      <filter dst_ip="21.39.52.37" dst_port="80" proto="tcp" src_ip="215.98.176.62"/>
      <from sec="1089177262" usec="0"/>
      <to sec="1089177265" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="21.39.52.37" dst_port="9898" proto="tcp" src_ip="141.169.112.53"/>
      <filter dst_ip="21.39.52.37" dst_port="5554" proto="tcp" src_ip="141.169.112.53"/>
      <filter dst_ip="21.39.52.37" dst_port="80" proto="tcp" src_ip="141.169.112.53"/>
      <from sec="1089177261" usec="0"/>
      <to sec="1089177263" usec="0"/>
    </slice>
    <from sec="1089177261" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.169.84.84" dst_port="9898" proto="tcp" src_ip="73.148.34.77" src_port="80"/>
      <from sec="1089176998" usec="0"/>
      <to sec="1089176999" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.169.84.84" dst_port="9898" proto="tcp" src_ip="19.211.82.77" src_port="80"/>
      <from sec="1089176997" usec="0"/>
      <to sec="1089177002" usec="0"/>
    </slice>
    <from sec="1089176997" usec="0"/>
    <to sec="1089177002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="5.53.56.80"/>
      <filter dst_port="5554" proto="tcp" src_ip="5.53.56.80"/>
      <from sec="1089177243" usec="0"/>
      <to sec="1089177246" usec="0"/>
    </slice>
    <from sec="1089177243" usec="0"/>
    <to sec="1089177247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="215.17.242.91"/>
      <from sec="1089176917" usec="0"/>
      <to sec="1089176918" usec="0"/>
    </slice>
    <from sec="1089176917" usec="0"/>
    <to sec="1089176918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="208.186.51.95"/>
      <from sec="1089177037" usec="0"/>
      <to sec="1089177039" usec="0"/>
    </slice>
    <from sec="1089177036" usec="0"/>
    <to sec="1089177040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="215.188.140.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176891" usec="0"/>
    </slice>
    <from sec="1089176889" usec="0"/>
    <to sec="1089176893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="73.148.188.147" src_port="80"/>
      <from sec="1089176709" usec="0"/>
      <to sec="1089176718" usec="0"/>
    </slice>
    <from sec="1089176709" usec="0"/>
    <to sec="1089176719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="3.242.227.206"/>
      <from sec="1089177264" usec="0"/>
      <to sec="1089177277" usec="0"/>
    </slice>
    <from sec="1089177264" usec="0"/>
    <to sec="1089177277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.250.187.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <filter dst_ip="220.250.187.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <filter dst_ip="220.250.187.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <filter dst_ip="220.250.187.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <from sec="1089176935" usec="0"/>
      <to sec="1089176937" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.170.143.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <filter dst_ip="145.170.143.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <filter dst_ip="145.170.143.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <filter dst_ip="145.170.143.45" dst_port="80" proto="tcp" src_ip="194.54.48.51" src_port="9898"/>
      <from sec="1089176934" usec="0"/>
      <to sec="1089176938" usec="0"/>
    </slice>
    <from sec="1089176934" usec="0"/>
    <to sec="1089176938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="75.53.27.200" dst_port="80" proto="tcp" src_ip="141.169.78.9" src_port="1027"/>
      <filter dst_ip="75.53.27.200" dst_port="80" proto="udp" src_ip="141.169.78.9" src_port="1027"/>
      <filter dst_ip="75.53.27.200" dst_port="1863" proto="tcp" src_ip="141.169.78.9" src_port="1027"/>
      <filter dst_ip="75.53.27.200" dst_port="1863" proto="udp" src_ip="141.169.78.9" src_port="1027"/>
      <from sec="1089176652" usec="0"/>
      <to sec="1089176655" usec="0"/>
    </slice>
    <from sec="1089176652" usec="0"/>
    <to sec="1089176657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817262,2.20652,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="136.213.129.238" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="80" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="tcp" src_ip="215.189.65.255" src_port="1027"/>
      <filter dst_ip="205.140.166.53" dst_port="137" proto="udp" src_ip="215.189.65.255" src_port="1027"/>
      <from sec="1089176813" usec="0"/>
      <to sec="1089176818" usec="0"/>
    </slice>
    <from sec="1089176813" usec="0"/>
    <to sec="1089176818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
161[label="214.190.155.6s;500pkt 500fpkt", shape=rectangle, color=red];
512[label="214.190.155.6s;500pkt 500fpkt", shape=ellipse, color=green];
831[label="214.190.155.6s;500pkt 500fpkt", shape=triangle, color=blue];
2822[label="214.190.155.6;s;500pkt 500fpkt", shape=diamond, color=yellow];
4734[label="214.190.155.6;499pkt 499fpkt", shape=pentagon, color=darkviolet];
7330[label="214.190.155.6;500pkt 500fpkt", shape=invtriangle, color=brown];
8862[label="214.190.155.6;499pkt 499fpkt", shape=invhouse, color=bisque];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.155.6:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2770: (0.200114%)&lt;BR/&gt; 2769: (0.200114%)&lt;BR/&gt; 3304: (0.100057%)&lt;BR/&gt; 3292: (0.100057%)&gt;];
}
161--512[label="1;500pkt 500fpkt"];
161--831[label="1;500pkt 500fpkt"];
161--2822[label="1;500pkt 500fpkt"];
161--4734[label="1;499pkt 499fpkt"];
161--7330[label="1;500pkt 500fpkt"];
161--8862[label="1;499pkt 499fpkt"];
512--831[label="1;500pkt 500fpkt"];
512--2822[label="1;500pkt 500fpkt"];
512--4734[label="1;499pkt 499fpkt"];
512--7330[label="1;500pkt 500fpkt"];
512--8862[label="1;499pkt 499fpkt"];
831--2822[label="1;500pkt 500fpkt"];
831--4734[label="1;499pkt 499fpkt"];
831--7330[label="1;500pkt 500fpkt"];
831--8862[label="1;499pkt 499fpkt"];
2822--4734[label="1;499pkt 499fpkt"];
2822--7330[label="1;500pkt 500fpkt"];
2822--8862[label="1;499pkt 499fpkt"];
4734--7330[label="1;499pkt 499fpkt"];
4734--8862[label="1;499pkt 499fpkt"];
7330--8862[label="1;499pkt 499fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.155.6"/>
    </slice>
    <from sec="1089176904" usec="0"/>
    <to sec="1089176939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10516,2.14572,503,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
19[label="136.213.39.28s;1pkt 1fpkt", shape=rectangle, color=red];
516[label="136.213.39.28s;1pkt 1fpkt", shape=ellipse, color=green];
2772[label="136.213.39.28;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.39.28:*, 122.16.168.46:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1038: (18.75%)&lt;BR/&gt; 53541: (6.25%)&lt;BR/&gt; 1055: (6.25%)&lt;BR/&gt; 1054: (6.25%)&gt;];
}
19--516[label="1;1pkt 1fpkt"];
19--2772[label="1;1pkt 1fpkt"];
516--2772[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="122.16.168.46" dst_port="80" src_ip="136.213.39.28"/>
    </slice>
    <from sec="1089176732" usec="0"/>
    <to sec="1089176863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891341,2.02724,503,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
49[label="136.213.24.80s;1pkt 1fpkt", shape=rectangle, color=red];
521[label="136.213.24.80s;1pkt 1fpkt", shape=ellipse, color=green];
5631[label="136.213.24.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7862[label="136.213.24.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.24.80:1033, 75.50.146.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
49--521[label="1;1pkt 1fpkt"];
49--5631[label="1;1pkt 1fpkt"];
49--7862[label="1;1pkt 1fpkt"];
521--5631[label="1;1pkt 1fpkt"];
521--7862[label="1;1pkt 1fpkt"];
5631--7862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.50.146.72" dst_port="80" src_ip="136.213.24.80" src_port="1033"/>
    </slice>
    <from sec="1089176942" usec="0"/>
    <to sec="1089176981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16039,2.01257,999,1 1 1 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
70[label="65.31.17.131s;212pkt 212fpkt", shape=rectangle, color=red];
132[label="73.41.143.215d;38pkt 38fpkt", shape=rectangle, color=red];
524[label="65.31.17.131s;195pkt 195fpkt", shape=ellipse, color=green];
539[label="73.41.143.215d;38pkt 38fpkt", shape=ellipse, color=green];
839[label="65.31.17.131s;188pkt 188fpkt", shape=triangle, color=blue];
1165[label="65.31.17.131;d;258pkt 258fpkt", shape=diamond, color=yellow];
1166[label="65.31.17.131;s;274pkt 274fpkt", shape=diamond, color=yellow];
6103[label="65.31.17.131;299pkt 299fpkt", shape=pentagon, color=darkviolet];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.31.17.131:13364, 65.31.17.131:*}[89.6321%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (45.2064%)&lt;BR/&gt; 0: (1.93076%)&lt;BR/&gt; 80: (1.7976%)&lt;BR/&gt; 13392: (1.06525%)&lt;BR/&gt; 53: (0.732357%)&gt;];
}
70--132[label="0.973684;37pkt 37fpkt"];
70--518[label="0.00471698;1pkt 1fpkt"];
70--524[label="1;195pkt 195fpkt"];
70--539[label="0.973684;37pkt 37fpkt"];
70--834[label="0.00471698;1pkt 1fpkt"];
70--839[label="1;188pkt 188fpkt"];
70--1165[label="0.806604;171pkt 171fpkt"];
70--1166[label="0.882075;187pkt 187fpkt"];
70--4619[label="0.00943396;2pkt 2fpkt"];
70--4623[label="0.00943396;2pkt 2fpkt"];
70--4625[label="0.00471698;1pkt 1fpkt"];
70--4627[label="0.0141509;3pkt 3fpkt"];
70--4628[label="0.0188679;4pkt 4fpkt"];
70--4629[label="0.00471698;1pkt 1fpkt"];
70--4630[label="0.00471698;1pkt 1fpkt"];
70--4631[label="0.00943396;2pkt 2fpkt"];
70--4634[label="0.0141509;3pkt 3fpkt"];
70--4635[label="0.0188679;4pkt 4fpkt"];
70--4636[label="0.00471698;1pkt 1fpkt"];
70--6103[label="1;212pkt 212fpkt"];
132--518[label="0.0263158;1pkt 1fpkt"];
132--524[label="0.973684;37pkt 37fpkt"];
132--539[label="1;38pkt 38fpkt"];
132--834[label="0.0263158;1pkt 1fpkt"];
132--839[label="0.973684;37pkt 37fpkt"];
132--1165[label="1;38pkt 38fpkt"];
132--1166[label="1;38pkt 38fpkt"];
132--4619[label="0.0526316;2pkt 2fpkt"];
132--4623[label="0.0526316;2pkt 2fpkt"];
132--4625[label="0.0263158;1pkt 1fpkt"];
132--4627[label="0.0526316;2pkt 2fpkt"];
132--4628[label="0.0526316;2pkt 2fpkt"];
132--4629[label="0.0263158;1pkt 1fpkt"];
132--4630[label="0.0263158;1pkt 1fpkt"];
132--4631[label="0.0526316;2pkt 2fpkt"];
132--4634[label="0.0526316;2pkt 2fpkt"];
132--4635[label="0.0526316;2pkt 2fpkt"];
132--4636[label="0.0263158;1pkt 1fpkt"];
132--6103[label="1;38pkt 38fpkt"];
524--539[label="0.973684;37pkt 37fpkt"];
524--834[label="0.00512821;1pkt 1fpkt"];
524--839[label="1;188pkt 188fpkt"];
524--1165[label="0.851282;166pkt 166fpkt"];
524--1166[label="0.933333;182pkt 182fpkt"];
524--4619[label="0.0102564;2pkt 2fpkt"];
524--4623[label="0.0102564;2pkt 2fpkt"];
524--4625[label="0.00512821;1pkt 1fpkt"];
524--4627[label="0.0153846;3pkt 3fpkt"];
524--4628[label="0.0205128;4pkt 4fpkt"];
524--4629[label="0.00512821;1pkt 1fpkt"];
524--4630[label="0.00512821;1pkt 1fpkt"];
524--4631[label="0.0102564;2pkt 2fpkt"];
524--4634[label="0.0153846;3pkt 3fpkt"];
524--4635[label="0.0205128;4pkt 4fpkt"];
524--4636[label="0.00512821;1pkt 1fpkt"];
524--6103[label="1;195pkt 195fpkt"];
539--834[label="0.0263158;1pkt 1fpkt"];
539--839[label="0.973684;37pkt 37fpkt"];
539--1165[label="1;38pkt 38fpkt"];
539--1166[label="1;38pkt 38fpkt"];
539--4619[label="0.0526316;2pkt 2fpkt"];
539--4623[label="0.0526316;2pkt 2fpkt"];
539--4625[label="0.0263158;1pkt 1fpkt"];
539--4627[label="0.0526316;2pkt 2fpkt"];
539--4628[label="0.0526316;2pkt 2fpkt"];
539--4629[label="0.0263158;1pkt 1fpkt"];
539--4630[label="0.0263158;1pkt 1fpkt"];
539--4631[label="0.0526316;2pkt 2fpkt"];
539--4634[label="0.0526316;2pkt 2fpkt"];
539--4635[label="0.0526316;2pkt 2fpkt"];
539--4636[label="0.0263158;1pkt 1fpkt"];
539--6103[label="1;38pkt 38fpkt"];
839--1165[label="0.882979;166pkt 166fpkt"];
839--1166[label="0.968085;182pkt 182fpkt"];
839--4619[label="0.0106383;2pkt 2fpkt"];
839--4623[label="0.0106383;2pkt 2fpkt"];
839--4625[label="0.00531915;1pkt 1fpkt"];
839--4627[label="0.0159574;3pkt 3fpkt"];
839--4628[label="0.0212766;4pkt 4fpkt"];
839--4629[label="0.00531915;1pkt 1fpkt"];
839--4630[label="0.00531915;1pkt 1fpkt"];
839--4631[label="0.0106383;2pkt 2fpkt"];
839--4634[label="0.0159574;3pkt 3fpkt"];
839--4635[label="0.0212766;4pkt 4fpkt"];
839--4636[label="0.00531915;1pkt 1fpkt"];
839--6103[label="1;188pkt 188fpkt"];
1165--1166[label="1;258pkt 258fpkt"];
1165--4619[label="0.00775194;2pkt 2fpkt"];
1165--4623[label="0.0155039;4pkt 4fpkt"];
1165--4625[label="0.00387597;1pkt 1fpkt"];
1165--4627[label="0.0116279;3pkt 3fpkt"];
1165--4628[label="0.0155039;4pkt 4fpkt"];
1165--4629[label="0.00387597;1pkt 1fpkt"];
1165--4630[label="0.00387597;1pkt 1fpkt"];
1165--4631[label="0.00775194;2pkt 2fpkt"];
1165--4634[label="0.0116279;3pkt 3fpkt"];
1165--4635[label="0.0155039;4pkt 4fpkt"];
1165--4636[label="0.00387597;1pkt 1fpkt"];
1165--6103[label="1;258pkt 258fpkt"];
1166--4619[label="0.00729927;2pkt 2fpkt"];
1166--4623[label="0.0145985;4pkt 4fpkt"];
1166--4625[label="0.00364964;1pkt 1fpkt"];
1166--4627[label="0.0109489;3pkt 3fpkt"];
1166--4628[label="0.0145985;4pkt 4fpkt"];
1166--4629[label="0.00364964;1pkt 1fpkt"];
1166--4630[label="0.00364964;1pkt 1fpkt"];
1166--4631[label="0.00729927;2pkt 2fpkt"];
1166--4634[label="0.0109489;3pkt 3fpkt"];
1166--4635[label="0.0145985;4pkt 4fpkt"];
1166--4636[label="0.00364964;1pkt 1fpkt"];
1166--6103[label="1;274pkt 274fpkt"];
</description>
    <slice>
      <filter dst_ip="65.31.17.131" src_ip="65.31.17.131" src_port="13364"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.169.142.84" dst_port="5554" proto="tcp" src_ip="17.29.44.152" src_port="80"/>
      <filter dst_ip="141.169.142.84" dst_port="9898" proto="tcp" src_ip="17.29.44.152" src_port="80"/>
      <from sec="1089176905" usec="0"/>
      <to sec="1089176907" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.169.142.84" dst_port="5554" proto="tcp" src_ip="75.20.168.152" src_port="80"/>
      <filter dst_ip="141.169.142.84" dst_port="9898" proto="tcp" src_ip="75.20.168.152" src_port="80"/>
      <from sec="1089176905" usec="0"/>
      <to sec="1089176908" usec="0"/>
    </slice>
    <from sec="1089176904" usec="0"/>
    <to sec="1089176908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.869515,2.07959,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
159[label="192.146.1.1s;254pkt 254fpkt", shape=rectangle, color=red];
540[label="192.146.1.1s;254pkt 254fpkt", shape=ellipse, color=green];
4647[label="192.146.1.1;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.146.1.1:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
159--540[label="1;254pkt 254fpkt"];
159--4647[label="1;253pkt 253fpkt"];
540--4647[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.146.1.1" src_port="1025"/>
    </slice>
    <from sec="1089176878" usec="0"/>
    <to sec="1089176892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,002,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
160[label="2.197.77.2s;225pkt 225fpkt", shape=rectangle, color=red];
541[label="2.197.77.2s;225pkt 225fpkt", shape=ellipse, color=green];
851[label="2.197.77.2s;66pkt 66fpkt", shape=triangle, color=blue];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.197.77.2:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
160--541[label="1;225pkt 225fpkt"];
160--851[label="1;66pkt 66fpkt"];
541--851[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="2.197.77.2" src_port="1037"/>
    </slice>
    <from sec="1089176413" usec="0"/>
    <to sec="1089176443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891341,2.02724,901,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
163[label="74.122.66.10s;256pkt 256fpkt", shape=rectangle, color=red];
543[label="74.122.66.10s;256pkt 256fpkt", shape=ellipse, color=green];
4799[label="74.122.66.10;255pkt 255fpkt", shape=pentagon, color=darkviolet];
7368[label="74.122.66.10;255pkt 255fpkt", shape=invtriangle, color=brown];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.122.66.10:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
163--543[label="1;256pkt 256fpkt"];
163--4799[label="1;255pkt 255fpkt"];
163--7368[label="1;255pkt 255fpkt"];
543--4799[label="1;255pkt 255fpkt"];
543--7368[label="1;255pkt 255fpkt"];
4799--7368[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="74.122.66.10" src_port="1026"/>
    </slice>
    <from sec="1089176777" usec="0"/>
    <to sec="1089176792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10516,2.14572,901,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
166[label="73.51.73.29s;509pkt 509fpkt", shape=rectangle, color=red];
545[label="73.51.73.29s;386pkt 386fpkt", shape=ellipse, color=green];
2058[label="73.51.73.29;s;509pkt 509fpkt", shape=diamond, color=yellow];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.51.73.29:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
166--545[label="1;386pkt 386fpkt"];
166--2058[label="1;509pkt 509fpkt"];
545--2058[label="1;386pkt 386fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.51.73.29" src_port="1027"/>
    </slice>
    <from sec="1089176624" usec="0"/>
    <to sec="1089176658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891341,2.02724,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
167[label="73.21.77.36s;241pkt 241fpkt", shape=rectangle, color=red];
546[label="73.21.77.36s;168pkt 168fpkt", shape=ellipse, color=green];
5107[label="73.21.77.36;250pkt 250fpkt", shape=pentagon, color=darkviolet];
7542[label="73.21.77.36;249pkt 249fpkt", shape=invtriangle, color=brown];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.21.77.36:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
167--546[label="1;168pkt 168fpkt"];
167--5107[label="1;241pkt 241fpkt"];
167--7542[label="0.995851;240pkt 240fpkt"];
546--5107[label="1;168pkt 168fpkt"];
546--7542[label="0.994048;167pkt 167fpkt"];
5107--7542[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.21.77.36" src_port="1026"/>
    </slice>
    <from sec="1089177253" usec="0"/>
    <to sec="1089177267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
169[label="215.186.208.44s;862pkt 862fpkt", shape=rectangle, color=red];
547[label="215.186.208.44s;862pkt 862fpkt", shape=ellipse, color=green];
855[label="215.186.208.44s;862pkt 862fpkt", shape=triangle, color=blue];
5222[label="215.186.208.44;863pkt 863fpkt", shape=pentagon, color=darkviolet];
7610[label="215.186.208.44;863pkt 863fpkt", shape=invtriangle, color=brown];
9014[label="215.186.208.44;863pkt 863fpkt", shape=invhouse, color=bisque];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.186.208.44:*, *:9898}[54.5139%]&lt;BR/&gt;{215.186.208.44:*, *:5554}[45.2546%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.3043%)&lt;BR/&gt; 5554: (22.6377%)&lt;BR/&gt; 4997: (0.115942%)&lt;BR/&gt; 4989: (0.115942%)&lt;BR/&gt; 4979: (0.115942%)&gt;];
}
169--547[label="1;862pkt 862fpkt"];
169--855[label="1;862pkt 862fpkt"];
169--1667[label="0.00704225;1pkt 1fpkt"];
169--5222[label="0.99884;861pkt 861fpkt"];
169--7610[label="0.99884;861pkt 861fpkt"];
169--9014[label="0.99884;861pkt 861fpkt"];
547--855[label="1;862pkt 862fpkt"];
547--1667[label="0.00704225;1pkt 1fpkt"];
547--5222[label="0.99884;861pkt 861fpkt"];
547--7610[label="0.99884;861pkt 861fpkt"];
547--9014[label="0.99884;861pkt 861fpkt"];
855--1667[label="0.00704225;1pkt 1fpkt"];
855--5222[label="0.99884;861pkt 861fpkt"];
855--7610[label="0.99884;861pkt 861fpkt"];
855--9014[label="0.99884;861pkt 861fpkt"];
5222--7610[label="1;863pkt 863fpkt"];
5222--9014[label="1;863pkt 863fpkt"];
7610--9014[label="1;863pkt 863fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.186.208.44"/>
      <filter dst_port="5554" src_ip="215.186.208.44"/>
    </slice>
    <from sec="1089176499" usec="0"/>
    <to sec="1089177030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,002,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
171[label="73.105.236.46s;722pkt 722fpkt", shape=rectangle, color=red];
549[label="73.105.236.46s;318pkt 318fpkt", shape=ellipse, color=green];
857[label="73.105.236.46s;318pkt 318fpkt", shape=triangle, color=blue];
3052[label="73.105.236.46;s;758pkt 758fpkt", shape=diamond, color=yellow];
5243[label="73.105.236.46;758pkt 758fpkt", shape=pentagon, color=darkviolet];
7626[label="73.105.236.46;757pkt 757fpkt", shape=invtriangle, color=brown];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.105.236.46:64225, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64225: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
171--549[label="1;318pkt 318fpkt"];
171--857[label="1;318pkt 318fpkt"];
171--3052[label="1;722pkt 722fpkt"];
171--5243[label="1;722pkt 722fpkt"];
171--7626[label="0.998615;721pkt 721fpkt"];
549--857[label="1;318pkt 318fpkt"];
549--3052[label="1;318pkt 318fpkt"];
549--5243[label="1;318pkt 318fpkt"];
549--7626[label="1;318pkt 318fpkt"];
857--3052[label="1;318pkt 318fpkt"];
857--5243[label="1;318pkt 318fpkt"];
857--7626[label="1;318pkt 318fpkt"];
3052--5243[label="1;758pkt 758fpkt"];
3052--7626[label="1;757pkt 757fpkt"];
5243--7626[label="1;757pkt 757fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.105.236.46" src_port="64225"/>
    </slice>
    <from sec="1089177005" usec="0"/>
    <to sec="1089177055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.99.140.72" dst_port="5554" proto="tcp" src_ip="21.210.173.54" src_port="80"/>
      <filter dst_ip="149.99.140.72" dst_port="9898" proto="tcp" src_ip="21.210.173.54" src_port="80"/>
      <from sec="1089176852" usec="0"/>
      <to sec="1089176855" usec="0"/>
    </slice>
    <from sec="1089176848" usec="0"/>
    <to sec="1089176855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,901,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
292[label="208.173.31.65s;748pkt 748fpkt", shape=rectangle, color=red];
551[label="208.173.31.65s;499pkt 499fpkt", shape=ellipse, color=green];
858[label="208.173.31.65s;488pkt 488fpkt", shape=triangle, color=blue];
5440[label="208.173.31.65;754pkt 754fpkt", shape=pentagon, color=darkviolet];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.31.65:*, *:1023}[33.687%]&lt;BR/&gt;{208.173.31.65:*, *:5554}[33.2891%]&lt;BR/&gt;{208.173.31.65:*, *:9898}[33.0239%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (20.4098%)&lt;BR/&gt; 5554: (19.5862%)&lt;BR/&gt; 9898: (10.004%)&lt;BR/&gt; 3601: (0.0803536%)&lt;BR/&gt; 3596: (0.0803536%)&gt;];
}
292--551[label="1;499pkt 499fpkt"];
292--858[label="1;488pkt 488fpkt"];
292--5440[label="1;748pkt 748fpkt"];
551--858[label="1;488pkt 488fpkt"];
551--5440[label="1;499pkt 499fpkt"];
858--5440[label="1;488pkt 488fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="208.173.31.65"/>
      <filter dst_port="5554" src_ip="208.173.31.65"/>
      <filter dst_port="9898" src_ip="208.173.31.65"/>
    </slice>
    <from sec="1089177253" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.869515,2.07959,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
174[label="215.213.66.66s;205pkt 205fpkt", shape=rectangle, color=red];
552[label="215.213.66.66s;72pkt 72fpkt", shape=ellipse, color=green];
5462[label="215.213.66.66;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.213.66.66:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
174--552[label="1;72pkt 72fpkt"];
174--5462[label="0.995122;204pkt 204fpkt"];
552--5462[label="0.986111;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.213.66.66" src_port="1028"/>
    </slice>
    <from sec="1089176747" usec="0"/>
    <to sec="1089176770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,002,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
175[label="220.247.4.68s;213pkt 213fpkt", shape=rectangle, color=red];
553[label="220.247.4.68s;213pkt 213fpkt", shape=ellipse, color=green];
859[label="220.247.4.68s;213pkt 213fpkt", shape=triangle, color=blue];
5483[label="220.247.4.68;212pkt 212fpkt", shape=pentagon, color=darkviolet];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.247.4.68:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
175--553[label="1;213pkt 213fpkt"];
175--859[label="1;213pkt 213fpkt"];
175--5483[label="1;212pkt 212fpkt"];
553--859[label="1;213pkt 213fpkt"];
553--5483[label="1;212pkt 212fpkt"];
859--5483[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.247.4.68" src_port="1026"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
180[label="215.179.19.87s;207pkt 207fpkt", shape=rectangle, color=red];
556[label="215.179.19.87s;207pkt 207fpkt", shape=ellipse, color=green];
5714[label="215.179.19.87;207pkt 207fpkt", shape=pentagon, color=darkviolet];
7918[label="215.179.19.87;206pkt 206fpkt", shape=invtriangle, color=brown];
9164[label="215.179.19.87;206pkt 206fpkt", shape=invhouse, color=bisque];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.179.19.87:64107, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64107: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
180--556[label="1;207pkt 207fpkt"];
180--5714[label="1;207pkt 207fpkt"];
180--7918[label="1;206pkt 206fpkt"];
180--9164[label="1;206pkt 206fpkt"];
556--5714[label="1;207pkt 207fpkt"];
556--7918[label="1;206pkt 206fpkt"];
556--9164[label="1;206pkt 206fpkt"];
5714--7918[label="1;206pkt 206fpkt"];
5714--9164[label="1;206pkt 206fpkt"];
7918--9164[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.179.19.87" src_port="64107"/>
    </slice>
    <from sec="1089176737" usec="0"/>
    <to sec="1089176751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="210.250.107.94" src_port="80"/>
      <filter dst_port="5554" proto="tcp" src_ip="210.250.107.94" src_port="80"/>
      <from sec="1089176563" usec="0"/>
      <to sec="1089176565" usec="0"/>
    </slice>
    <from sec="1089176562" usec="0"/>
    <to sec="1089176568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
182[label="74.213.226.99s;252pkt 252fpkt", shape=rectangle, color=red];
558[label="74.213.226.99s;252pkt 252fpkt", shape=ellipse, color=green];
5839[label="74.213.226.99;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7993[label="74.213.226.99;252pkt 252fpkt", shape=invtriangle, color=brown];
9208[label="74.213.226.99;251pkt 251fpkt", shape=invhouse, color=bisque];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.213.226.99:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
182--558[label="1;252pkt 252fpkt"];
182--5839[label="1;252pkt 252fpkt"];
182--7993[label="1;252pkt 252fpkt"];
182--9208[label="1;251pkt 251fpkt"];
558--5839[label="1;252pkt 252fpkt"];
558--7993[label="1;252pkt 252fpkt"];
558--9208[label="1;251pkt 251fpkt"];
5839--7993[label="1;252pkt 252fpkt"];
5839--9208[label="1;251pkt 251fpkt"];
7993--9208[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="74.213.226.99" src_port="1026"/>
    </slice>
    <from sec="1089177251" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
183[label="215.188.244.100s;1007pkt 1007fpkt", shape=rectangle, color=red];
559[label="215.188.244.100s;1007pkt 1007fpkt", shape=ellipse, color=green];
864[label="215.188.244.100s;1007pkt 1007fpkt", shape=triangle, color=blue];
2547[label="215.188.244.100;s;507pkt 507fpkt", shape=diamond, color=yellow];
5857[label="215.188.244.100;1006pkt 1006fpkt", shape=pentagon, color=darkviolet];
8005[label="215.188.244.100;1007pkt 1007fpkt", shape=invtriangle, color=brown];
9213[label="215.188.244.100;1006pkt 1006fpkt", shape=invhouse, color=bisque];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.244.100:*, *:5554}[50.149%]&lt;BR/&gt;{215.188.244.100:*, *:9898}[49.851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.0649%)&lt;BR/&gt; 9898: (24.9351%)&lt;BR/&gt; 3614: (0.0534596%)&lt;BR/&gt; 3611: (0.0534596%)&lt;BR/&gt; 3610: (0.0534596%)&gt;];
}
183--559[label="1;1007pkt 1007fpkt"];
183--864[label="1;1007pkt 1007fpkt"];
183--2547[label="1;507pkt 507fpkt"];
183--5857[label="1;1006pkt 1006fpkt"];
183--8005[label="1;1007pkt 1007fpkt"];
183--9213[label="1;1006pkt 1006fpkt"];
559--864[label="1;1007pkt 1007fpkt"];
559--2547[label="1;507pkt 507fpkt"];
559--5857[label="1;1006pkt 1006fpkt"];
559--8005[label="1;1007pkt 1007fpkt"];
559--9213[label="1;1006pkt 1006fpkt"];
864--2547[label="1;507pkt 507fpkt"];
864--5857[label="1;1006pkt 1006fpkt"];
864--8005[label="1;1007pkt 1007fpkt"];
864--9213[label="1;1006pkt 1006fpkt"];
2547--5857[label="0.998028;506pkt 506fpkt"];
2547--8005[label="1;507pkt 507fpkt"];
2547--9213[label="0.998028;506pkt 506fpkt"];
5857--8005[label="1;1006pkt 1006fpkt"];
5857--9213[label="1;1006pkt 1006fpkt"];
8005--9213[label="1;1006pkt 1006fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.188.244.100"/>
      <filter dst_port="9898" src_ip="215.188.244.100"/>
    </slice>
    <from sec="1089176865" usec="0"/>
    <to sec="1089177222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.99.12.35" dst_port="9898" proto="tcp" src_ip="215.188.140.144" src_port="80"/>
      <filter dst_ip="141.169.0.221" dst_port="9898" proto="tcp" src_ip="215.188.140.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176891" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="149.99.12.35" dst_port="9898" proto="tcp" src_ip="196.128.36.144" src_port="80"/>
      <filter dst_ip="141.169.0.221" dst_port="9898" proto="tcp" src_ip="196.128.36.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176893" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="149.99.12.35" dst_port="9898" proto="tcp" src_ip="16.130.80.144" src_port="80"/>
      <filter dst_ip="141.169.0.221" dst_port="9898" proto="tcp" src_ip="16.130.80.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176893" usec="0"/>
    </slice>
    <from sec="1089176889" usec="0"/>
    <to sec="1089176893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.869515,2.07959,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
192[label="215.206.232.147s;196pkt 196fpkt", shape=rectangle, color=red];
561[label="215.206.232.147s;145pkt 145fpkt", shape=ellipse, color=green];
6279[label="215.206.232.147;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.206.232.147:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
192--561[label="1;145pkt 145fpkt"];
192--6279[label="0.994898;195pkt 195fpkt"];
561--6279[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.206.232.147" src_port="1030"/>
    </slice>
    <from sec="1089177180" usec="0"/>
    <to sec="1089177198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,002,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
198[label="73.80.211.170s;229pkt 229fpkt", shape=rectangle, color=red];
564[label="73.80.211.170s;229pkt 229fpkt", shape=ellipse, color=green];
869[label="73.80.211.170s;229pkt 229fpkt", shape=triangle, color=blue];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.80.211.170:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
198--564[label="1;229pkt 229fpkt"];
198--869[label="1;229pkt 229fpkt"];
564--869[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.80.211.170" src_port="1025"/>
    </slice>
    <from sec="1089176510" usec="0"/>
    <to sec="1089176526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,002,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
199[label="215.218.236.185s;215pkt 215fpkt", shape=rectangle, color=red];
566[label="215.218.236.185s;162pkt 162fpkt", shape=ellipse, color=green];
870[label="215.218.236.185s;162pkt 162fpkt", shape=triangle, color=blue];
6658[label="215.218.236.185;254pkt 254fpkt", shape=pentagon, color=darkviolet];
8478[label="215.218.236.185;253pkt 253fpkt", shape=invtriangle, color=brown];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.218.236.185:50183, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50183: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
199--566[label="1;162pkt 162fpkt"];
199--870[label="1;162pkt 162fpkt"];
199--6658[label="1;215pkt 215fpkt"];
199--8478[label="0.995349;214pkt 214fpkt"];
566--870[label="1;162pkt 162fpkt"];
566--6658[label="1;162pkt 162fpkt"];
566--8478[label="0.993827;161pkt 161fpkt"];
870--6658[label="1;162pkt 162fpkt"];
870--8478[label="0.993827;161pkt 161fpkt"];
6658--8478[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.218.236.185" src_port="50183"/>
    </slice>
    <from sec="1089176641" usec="0"/>
    <to sec="1089176656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891341,2.02724,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
200[label="215.179.181.189s;253pkt 253fpkt", shape=rectangle, color=red];
567[label="215.179.181.189s;204pkt 204fpkt", shape=ellipse, color=green];
6692[label="215.179.181.189;253pkt 253fpkt", shape=pentagon, color=darkviolet];
8496[label="215.179.181.189;253pkt 253fpkt", shape=invtriangle, color=brown];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.179.181.189:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
200--567[label="1;204pkt 204fpkt"];
200--6692[label="1;253pkt 253fpkt"];
200--8496[label="1;253pkt 253fpkt"];
567--6692[label="1;204pkt 204fpkt"];
567--8496[label="1;204pkt 204fpkt"];
6692--8496[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.179.181.189" src_port="1030"/>
    </slice>
    <from sec="1089176880" usec="0"/>
    <to sec="1089176895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
451[label="19.31.73.197s;455pkt 455fpkt", shape=rectangle, color=red];
568[label="19.31.73.197s;455pkt 455fpkt", shape=ellipse, color=green];
871[label="19.31.73.197s;455pkt 455fpkt", shape=triangle, color=blue];
6756[label="19.31.73.197;455pkt 455fpkt", shape=pentagon, color=darkviolet];
8531[label="19.31.73.197;454pkt 454fpkt", shape=invtriangle, color=brown];
9487[label="19.31.73.197;454pkt 454fpkt", shape=invhouse, color=bisque];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.31.73.197:*, *:9898}[50.5495%]&lt;BR/&gt;{19.31.73.197:*, *:5554}[49.4505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.2933%)&lt;BR/&gt; 5554: (24.7067%)&lt;BR/&gt; 4996: (0.109971%)&lt;BR/&gt; 4988: (0.109971%)&lt;BR/&gt; 4985: (0.109971%)&gt;];
}
451--568[label="1;455pkt 455fpkt"];
451--871[label="1;455pkt 455fpkt"];
451--6756[label="1;455pkt 455fpkt"];
451--8531[label="1;454pkt 454fpkt"];
451--9487[label="1;454pkt 454fpkt"];
568--871[label="1;455pkt 455fpkt"];
568--6756[label="1;455pkt 455fpkt"];
568--8531[label="1;454pkt 454fpkt"];
568--9487[label="1;454pkt 454fpkt"];
871--6756[label="1;455pkt 455fpkt"];
871--8531[label="1;454pkt 454fpkt"];
871--9487[label="1;454pkt 454fpkt"];
6756--8531[label="1;454pkt 454fpkt"];
6756--9487[label="1;454pkt 454fpkt"];
8531--9487[label="1;454pkt 454fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="19.31.73.197"/>
      <filter dst_port="5554" src_ip="19.31.73.197"/>
    </slice>
    <from sec="1089177246" usec="0"/>
    <to sec="1089177251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,010,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
201[label="18.99.216.200s;254pkt 254fpkt", shape=rectangle, color=red];
569[label="18.99.216.200s;254pkt 254fpkt", shape=ellipse, color=green];
872[label="18.99.216.200s;254pkt 254fpkt", shape=triangle, color=blue];
6799[label="18.99.216.200;254pkt 254fpkt", shape=pentagon, color=darkviolet];
8555[label="18.99.216.200;254pkt 254fpkt", shape=invtriangle, color=brown];
9502[label="18.99.216.200;254pkt 254fpkt", shape=invhouse, color=bisque];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.99.216.200:21142, *:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21142: (50%)&lt;BR/&gt; 1080: (50%)&gt;];
}
201--569[label="1;254pkt 254fpkt"];
201--872[label="1;254pkt 254fpkt"];
201--6799[label="1;254pkt 254fpkt"];
201--8555[label="1;254pkt 254fpkt"];
201--9502[label="1;254pkt 254fpkt"];
569--872[label="1;254pkt 254fpkt"];
569--6799[label="1;254pkt 254fpkt"];
569--8555[label="1;254pkt 254fpkt"];
569--9502[label="1;254pkt 254fpkt"];
872--6799[label="1;254pkt 254fpkt"];
872--8555[label="1;254pkt 254fpkt"];
872--9502[label="1;254pkt 254fpkt"];
6799--8555[label="1;254pkt 254fpkt"];
6799--9502[label="1;254pkt 254fpkt"];
8555--9502[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="18.99.216.200" src_port="21142"/>
    </slice>
    <from sec="1089177120" usec="0"/>
    <to sec="1089177123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,002,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
203[label="19.40.88.205s;252pkt 252fpkt", shape=rectangle, color=red];
571[label="19.40.88.205s;203pkt 203fpkt", shape=ellipse, color=green];
874[label="19.40.88.205s;109pkt 109fpkt", shape=triangle, color=blue];
6855[label="19.40.88.205;252pkt 252fpkt", shape=pentagon, color=darkviolet];
8589[label="19.40.88.205;252pkt 252fpkt", shape=invtriangle, color=brown];
9511[label="19.40.88.205;252pkt 252fpkt", shape=invhouse, color=bisque];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.40.88.205:63524, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63524: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
203--571[label="1;203pkt 203fpkt"];
203--874[label="1;109pkt 109fpkt"];
203--6855[label="1;252pkt 252fpkt"];
203--8589[label="1;252pkt 252fpkt"];
203--9511[label="1;252pkt 252fpkt"];
571--874[label="1;109pkt 109fpkt"];
571--6855[label="1;203pkt 203fpkt"];
571--8589[label="1;203pkt 203fpkt"];
571--9511[label="1;203pkt 203fpkt"];
874--6855[label="1;109pkt 109fpkt"];
874--8589[label="1;109pkt 109fpkt"];
874--9511[label="1;109pkt 109fpkt"];
6855--8589[label="1;252pkt 252fpkt"];
6855--9511[label="1;252pkt 252fpkt"];
8589--9511[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="19.40.88.205" src_port="63524"/>
    </slice>
    <from sec="1089176625" usec="0"/>
    <to sec="1089176640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.54.48.36" dst_port="5554" proto="tcp" src_ip="208.178.170.240" src_port="80"/>
      <filter dst_ip="194.54.48.36" dst_port="9898" proto="tcp" src_ip="208.178.170.240" src_port="80"/>
      <from sec="1089177163" usec="0"/>
      <to sec="1089177166" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="194.54.48.36" dst_port="5554" proto="tcp" src_ip="222.71.134.240" src_port="80"/>
      <filter dst_ip="194.54.48.36" dst_port="9898" proto="tcp" src_ip="222.71.134.240" src_port="80"/>
      <from sec="1089177162" usec="0"/>
      <to sec="1089177167" usec="0"/>
    </slice>
    <from sec="1089177162" usec="0"/>
    <to sec="1089177167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
209[label="208.166.53.0s;312pkt 312fpkt", shape=rectangle, color=red];
573[label="208.166.53.0s;312pkt 312fpkt", shape=ellipse, color=green];
876[label="208.166.53.0s;312pkt 312fpkt", shape=triangle, color=blue];
4640[label="208.166.53.0;311pkt 311fpkt", shape=pentagon, color=darkviolet];
7276[label="208.166.53.0;312pkt 312fpkt", shape=invtriangle, color=brown];
8839[label="208.166.53.0;312pkt 312fpkt", shape=invhouse, color=bisque];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.53.0:*, *:9898}[64.7436%]&lt;BR/&gt;{208.166.53.0:*, *:5554}[35.2564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (32.3624%)&lt;BR/&gt; 5554: (17.6376%)&lt;BR/&gt; 4173: (0.160342%)&lt;BR/&gt; 4168: (0.160342%)&lt;BR/&gt; 4167: (0.160342%)&gt;];
}
209--573[label="1;312pkt 312fpkt"];
209--876[label="1;312pkt 312fpkt"];
209--4640[label="1;311pkt 311fpkt"];
209--7276[label="1;312pkt 312fpkt"];
209--8839[label="1;312pkt 312fpkt"];
573--876[label="1;312pkt 312fpkt"];
573--4640[label="1;311pkt 311fpkt"];
573--7276[label="1;312pkt 312fpkt"];
573--8839[label="1;312pkt 312fpkt"];
876--4640[label="1;311pkt 311fpkt"];
876--7276[label="1;312pkt 312fpkt"];
876--8839[label="1;312pkt 312fpkt"];
4640--7276[label="1;311pkt 311fpkt"];
4640--8839[label="1;311pkt 311fpkt"];
7276--8839[label="1;312pkt 312fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.166.53.0"/>
      <filter dst_port="5554" src_ip="208.166.53.0"/>
    </slice>
    <from sec="1089176843" usec="0"/>
    <to sec="1089176848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
210[label="73.54.17.2s;403pkt 403fpkt", shape=rectangle, color=red];
574[label="73.54.17.2s;403pkt 403fpkt", shape=ellipse, color=green];
877[label="73.54.17.2s;403pkt 403fpkt", shape=triangle, color=blue];
4665[label="73.54.17.2;403pkt 403fpkt", shape=pentagon, color=darkviolet];
7287[label="73.54.17.2;403pkt 403fpkt", shape=invtriangle, color=brown];
8843[label="73.54.17.2;403pkt 403fpkt", shape=invhouse, color=bisque];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.54.17.2:*, *:9898}[50.1241%]&lt;BR/&gt;{73.54.17.2:*, *:5554}[49.8759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.062%)&lt;BR/&gt; 5554: (24.938%)&lt;BR/&gt; 4314: (0.124069%)&lt;BR/&gt; 4310: (0.124069%)&lt;BR/&gt; 4308: (0.124069%)&gt;];
}
210--574[label="1;403pkt 403fpkt"];
210--877[label="1;403pkt 403fpkt"];
210--4665[label="1;403pkt 403fpkt"];
210--7287[label="1;403pkt 403fpkt"];
210--8843[label="1;403pkt 403fpkt"];
574--877[label="1;403pkt 403fpkt"];
574--4665[label="1;403pkt 403fpkt"];
574--7287[label="1;403pkt 403fpkt"];
574--8843[label="1;403pkt 403fpkt"];
877--4665[label="1;403pkt 403fpkt"];
877--7287[label="1;403pkt 403fpkt"];
877--8843[label="1;403pkt 403fpkt"];
4665--7287[label="1;403pkt 403fpkt"];
4665--8843[label="1;403pkt 403fpkt"];
7287--8843[label="1;403pkt 403fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.54.17.2"/>
      <filter dst_port="5554" src_ip="73.54.17.2"/>
    </slice>
    <from sec="1089176892" usec="0"/>
    <to sec="1089176896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
211[label="215.188.129.2s;507pkt 507fpkt", shape=rectangle, color=red];
575[label="215.188.129.2s;507pkt 507fpkt", shape=ellipse, color=green];
878[label="215.188.129.2s;507pkt 507fpkt", shape=triangle, color=blue];
4673[label="215.188.129.2;507pkt 507fpkt", shape=pentagon, color=darkviolet];
7292[label="215.188.129.2;506pkt 506fpkt", shape=invtriangle, color=brown];
8846[label="215.188.129.2;507pkt 507fpkt", shape=invhouse, color=bisque];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.129.2:*, *:9898}[50.0986%]&lt;BR/&gt;{215.188.129.2:*, *:5554}[49.9014%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0575%)&lt;BR/&gt; 5554: (24.9425%)&lt;BR/&gt; 4243: (0.0986518%)&lt;BR/&gt; 4240: (0.0986518%)&lt;BR/&gt; 4239: (0.0986518%)&gt;];
}
211--575[label="1;507pkt 507fpkt"];
211--878[label="1;507pkt 507fpkt"];
211--4673[label="1;507pkt 507fpkt"];
211--7292[label="1;506pkt 506fpkt"];
211--8846[label="1;507pkt 507fpkt"];
575--878[label="1;507pkt 507fpkt"];
575--4673[label="1;507pkt 507fpkt"];
575--7292[label="1;506pkt 506fpkt"];
575--8846[label="1;507pkt 507fpkt"];
878--4673[label="1;507pkt 507fpkt"];
878--7292[label="1;506pkt 506fpkt"];
878--8846[label="1;507pkt 507fpkt"];
4673--7292[label="1;506pkt 506fpkt"];
4673--8846[label="1;507pkt 507fpkt"];
7292--8846[label="1;506pkt 506fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.129.2"/>
      <filter dst_port="5554" src_ip="215.188.129.2"/>
    </slice>
    <from sec="1089177285" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
214[label="214.161.129.5s;382pkt 382fpkt", shape=rectangle, color=red];
578[label="214.161.129.5s;382pkt 382fpkt", shape=ellipse, color=green];
881[label="214.161.129.5s;382pkt 382fpkt", shape=triangle, color=blue];
4713[label="214.161.129.5;381pkt 381fpkt", shape=pentagon, color=darkviolet];
7319[label="214.161.129.5;382pkt 382fpkt", shape=invtriangle, color=brown];
8856[label="214.161.129.5;382pkt 382fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.129.5:*, *:9898}[53.1414%]&lt;BR/&gt;{214.161.129.5:*, *:5554}[46.8586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (26.5823%)&lt;BR/&gt; 5554: (23.4177%)&lt;BR/&gt; 4481: (0.130947%)&lt;BR/&gt; 4474: (0.130947%)&lt;BR/&gt; 4469: (0.130947%)&gt;];
}
214--578[label="1;382pkt 382fpkt"];
214--881[label="1;382pkt 382fpkt"];
214--4713[label="1;381pkt 381fpkt"];
214--7319[label="1;382pkt 382fpkt"];
214--8856[label="1;382pkt 382fpkt"];
578--881[label="1;382pkt 382fpkt"];
578--4713[label="1;381pkt 381fpkt"];
578--7319[label="1;382pkt 382fpkt"];
578--8856[label="1;382pkt 382fpkt"];
881--4713[label="1;381pkt 381fpkt"];
881--7319[label="1;382pkt 382fpkt"];
881--8856[label="1;382pkt 382fpkt"];
4713--7319[label="1;381pkt 381fpkt"];
4713--8856[label="1;381pkt 381fpkt"];
7319--8856[label="1;382pkt 382fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.129.5"/>
      <filter dst_port="5554" src_ip="214.161.129.5"/>
    </slice>
    <from sec="1089176814" usec="0"/>
    <to sec="1089176818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,001,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
215[label="73.49.190.6s;356pkt 356fpkt", shape=rectangle, color=red];
579[label="73.49.190.6s;356pkt 356fpkt", shape=ellipse, color=green];
4738[label="73.49.190.6;356pkt 356fpkt", shape=pentagon, color=darkviolet];
7332[label="73.49.190.6;356pkt 356fpkt", shape=invtriangle, color=brown];
8863[label="73.49.190.6;356pkt 356fpkt", shape=invhouse, color=bisque];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.49.190.6:*, *:9898}[56.1798%]&lt;BR/&gt;{73.49.190.6:*, *:5554}[43.8202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.0899%)&lt;BR/&gt; 5554: (21.9101%)&lt;BR/&gt; 4999: (0.140449%)&lt;BR/&gt; 4996: (0.140449%)&lt;BR/&gt; 4992: (0.140449%)&gt;];
}
215--579[label="1;356pkt 356fpkt"];
215--4738[label="1;356pkt 356fpkt"];
215--7332[label="1;356pkt 356fpkt"];
215--8863[label="1;356pkt 356fpkt"];
579--4738[label="1;356pkt 356fpkt"];
579--7332[label="1;356pkt 356fpkt"];
579--8863[label="1;356pkt 356fpkt"];
4738--7332[label="1;356pkt 356fpkt"];
4738--8863[label="1;356pkt 356fpkt"];
7332--8863[label="1;356pkt 356fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.49.190.6"/>
      <filter dst_port="5554" src_ip="73.49.190.6"/>
    </slice>
    <from sec="1089176749" usec="0"/>
    <to sec="1089176753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
218[label="19.31.232.8s;505pkt 505fpkt", shape=rectangle, color=red];
582[label="19.31.232.8s;505pkt 505fpkt", shape=ellipse, color=green];
883[label="19.31.232.8s;505pkt 505fpkt", shape=triangle, color=blue];
3285[label="19.31.232.8;s;505pkt 505fpkt", shape=diamond, color=yellow];
4776[label="19.31.232.8;505pkt 505fpkt", shape=pentagon, color=darkviolet];
7356[label="19.31.232.8;504pkt 504fpkt", shape=invtriangle, color=brown];
8878[label="19.31.232.8;505pkt 505fpkt", shape=invhouse, color=bisque];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.31.232.8:*, *:9898}[50.297%]&lt;BR/&gt;{19.31.232.8:*, *:5554}[49.703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1556%)&lt;BR/&gt; 5554: (24.8444%)&lt;BR/&gt; 4859: (0.0990379%)&lt;BR/&gt; 4795: (0.0990379%)&lt;BR/&gt; 4794: (0.0990379%)&gt;];
}
218--582[label="1;505pkt 505fpkt"];
218--883[label="1;505pkt 505fpkt"];
218--3285[label="1;505pkt 505fpkt"];
218--4776[label="1;505pkt 505fpkt"];
218--7356[label="1;504pkt 504fpkt"];
218--8878[label="1;505pkt 505fpkt"];
582--883[label="1;505pkt 505fpkt"];
582--3285[label="1;505pkt 505fpkt"];
582--4776[label="1;505pkt 505fpkt"];
582--7356[label="1;504pkt 504fpkt"];
582--8878[label="1;505pkt 505fpkt"];
883--3285[label="1;505pkt 505fpkt"];
883--4776[label="1;505pkt 505fpkt"];
883--7356[label="1;504pkt 504fpkt"];
883--8878[label="1;505pkt 505fpkt"];
3285--4776[label="1;505pkt 505fpkt"];
3285--7356[label="1;504pkt 504fpkt"];
3285--8878[label="1;505pkt 505fpkt"];
4776--7356[label="1;504pkt 504fpkt"];
4776--8878[label="1;505pkt 505fpkt"];
7356--8878[label="1;504pkt 504fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="19.31.232.8"/>
      <filter dst_port="5554" src_ip="19.31.232.8"/>
    </slice>
    <from sec="1089177062" usec="0"/>
    <to sec="1089177070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.869515,2.07959,001,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
220[label="192.129.63.10s;110pkt 110fpkt", shape=rectangle, color=red];
583[label="192.129.63.10s;110pkt 110fpkt", shape=ellipse, color=green];
4797[label="192.129.63.10;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.129.63.10:*, *:5554}[78.0645%]&lt;BR/&gt;{192.129.63.10:*, *:9898}[21.9355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (45.4545%)&lt;BR/&gt; 9898: (4.54545%)&lt;BR/&gt; 1204: (0.40107%)&lt;BR/&gt; 1203: (0.40107%)&lt;BR/&gt; 1202: (0.40107%)&gt;];
}
220--583[label="1;110pkt 110fpkt"];
220--4797[label="0.990909;109pkt 109fpkt"];
583--4797[label="0.990909;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="192.129.63.10"/>
      <filter dst_port="9898" src_ip="192.129.63.10"/>
    </slice>
    <from sec="1089176657" usec="0"/>
    <to sec="1089176672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
222[label="209.26.52.11s;254pkt 254fpkt", shape=rectangle, color=red];
585[label="209.26.52.11s;254pkt 254fpkt", shape=ellipse, color=green];
885[label="209.26.52.11s;254pkt 254fpkt", shape=triangle, color=blue];
4812[label="209.26.52.11;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7374[label="209.26.52.11;253pkt 253fpkt", shape=invtriangle, color=brown];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.26.52.11:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3400: (0.197161%)&lt;BR/&gt; 3369: (0.197161%)&lt;BR/&gt; 3368: (0.197161%)&lt;BR/&gt; 3367: (0.197161%)&gt;];
}
222--585[label="1;254pkt 254fpkt"];
222--885[label="1;254pkt 254fpkt"];
222--4812[label="1;253pkt 253fpkt"];
222--7374[label="1;253pkt 253fpkt"];
585--885[label="1;254pkt 254fpkt"];
585--4812[label="1;253pkt 253fpkt"];
585--7374[label="1;253pkt 253fpkt"];
885--4812[label="1;253pkt 253fpkt"];
885--7374[label="1;253pkt 253fpkt"];
4812--7374[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.26.52.11"/>
    </slice>
    <from sec="1089176773" usec="0"/>
    <to sec="1089176781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
224[label="208.169.80.13s;506pkt 506fpkt", shape=rectangle, color=red];
586[label="208.169.80.13s;506pkt 506fpkt", shape=ellipse, color=green];
886[label="208.169.80.13s;506pkt 506fpkt", shape=triangle, color=blue];
2800[label="208.169.80.13;s;506pkt 506fpkt", shape=diamond, color=yellow];
4841[label="208.169.80.13;505pkt 505fpkt", shape=pentagon, color=darkviolet];
7395[label="208.169.80.13;506pkt 506fpkt", shape=invtriangle, color=brown];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.169.80.13:*, *:9898}[50.1976%]&lt;BR/&gt;{208.169.80.13:*, *:5554}[49.8024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1071%)&lt;BR/&gt; 5554: (24.8929%)&lt;BR/&gt; 4996: (0.0988468%)&lt;BR/&gt; 4991: (0.0988468%)&lt;BR/&gt; 4981: (0.0988468%)&gt;];
}
224--586[label="1;506pkt 506fpkt"];
224--886[label="1;506pkt 506fpkt"];
224--2800[label="1;506pkt 506fpkt"];
224--4841[label="1;505pkt 505fpkt"];
224--7395[label="1;506pkt 506fpkt"];
586--886[label="1;506pkt 506fpkt"];
586--2800[label="1;506pkt 506fpkt"];
586--4841[label="1;505pkt 505fpkt"];
586--7395[label="1;506pkt 506fpkt"];
886--2800[label="1;506pkt 506fpkt"];
886--4841[label="1;505pkt 505fpkt"];
886--7395[label="1;506pkt 506fpkt"];
2800--4841[label="1;505pkt 505fpkt"];
2800--7395[label="1;506pkt 506fpkt"];
4841--7395[label="1;505pkt 505fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.169.80.13"/>
      <filter dst_port="5554" src_ip="208.169.80.13"/>
    </slice>
    <from sec="1089176821" usec="0"/>
    <to sec="1089176829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
227[label="214.184.152.14s;457pkt 457fpkt", shape=rectangle, color=red];
588[label="214.184.152.14s;457pkt 457fpkt", shape=ellipse, color=green];
888[label="214.184.152.14s;457pkt 457fpkt", shape=triangle, color=blue];
4852[label="214.184.152.14;457pkt 457fpkt", shape=pentagon, color=darkviolet];
7401[label="214.184.152.14;457pkt 457fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.184.152.14:*, *:9898}[52.0788%]&lt;BR/&gt;{214.184.152.14:*, *:5554}[47.9212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (26.0394%)&lt;BR/&gt; 5554: (23.9606%)&lt;BR/&gt; 2363: (0.109409%)&lt;BR/&gt; 2362: (0.109409%)&lt;BR/&gt; 2361: (0.109409%)&gt;];
}
227--588[label="1;457pkt 457fpkt"];
227--888[label="1;457pkt 457fpkt"];
227--4852[label="1;457pkt 457fpkt"];
227--7401[label="1;457pkt 457fpkt"];
588--888[label="1;457pkt 457fpkt"];
588--4852[label="1;457pkt 457fpkt"];
588--7401[label="1;457pkt 457fpkt"];
888--4852[label="1;457pkt 457fpkt"];
888--7401[label="1;457pkt 457fpkt"];
4852--7401[label="1;457pkt 457fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.184.152.14"/>
      <filter dst_port="5554" src_ip="214.184.152.14"/>
    </slice>
    <from sec="1089176729" usec="0"/>
    <to sec="1089176735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
229[label="215.188.200.15s;252pkt 252fpkt", shape=rectangle, color=red];
590[label="215.188.200.15s;252pkt 252fpkt", shape=ellipse, color=green];
890[label="215.188.200.15s;252pkt 252fpkt", shape=triangle, color=blue];
4861[label="215.188.200.15;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7407[label="215.188.200.15;251pkt 251fpkt", shape=invtriangle, color=brown];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.200.15:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2387: (0.19857%)&lt;BR/&gt; 2253: (0.19857%)&lt;BR/&gt; 2252: (0.19857%)&lt;BR/&gt; 2251: (0.19857%)&gt;];
}
229--590[label="1;252pkt 252fpkt"];
229--890[label="1;252pkt 252fpkt"];
229--4861[label="1;252pkt 252fpkt"];
229--7407[label="1;251pkt 251fpkt"];
590--890[label="1;252pkt 252fpkt"];
590--4861[label="1;252pkt 252fpkt"];
590--7407[label="1;251pkt 251fpkt"];
890--4861[label="1;252pkt 252fpkt"];
890--7407[label="1;251pkt 251fpkt"];
4861--7407[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.200.15"/>
    </slice>
    <from sec="1089177257" usec="0"/>
    <to sec="1089177262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
234[label="209.5.24.24s;504pkt 504fpkt", shape=rectangle, color=red];
594[label="209.5.24.24s;504pkt 504fpkt", shape=ellipse, color=green];
895[label="209.5.24.24s;504pkt 504fpkt", shape=triangle, color=blue];
1757[label="209.5.24.24;s;504pkt 504fpkt", shape=diamond, color=yellow];
4956[label="209.5.24.24;503pkt 503fpkt", shape=pentagon, color=darkviolet];
7450[label="209.5.24.24;503pkt 503fpkt", shape=invtriangle, color=brown];
8927[label="209.5.24.24;504pkt 504fpkt", shape=invhouse, color=bisque];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.5.24.24:*, *:9898}[50.3968%]&lt;BR/&gt;{209.5.24.24:*, *:5554}[49.6032%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.2127%)&lt;BR/&gt; 5554: (24.7873%)&lt;BR/&gt; 3609: (0.0992626%)&lt;BR/&gt; 3608: (0.0992626%)&lt;BR/&gt; 3607: (0.0992626%)&gt;];
}
234--594[label="1;504pkt 504fpkt"];
234--895[label="1;504pkt 504fpkt"];
234--1752[label="0.0150376;2pkt 2fpkt"];
234--1757[label="1;504pkt 504fpkt"];
234--4956[label="1;503pkt 503fpkt"];
234--7450[label="1;503pkt 503fpkt"];
234--8927[label="1;504pkt 504fpkt"];
594--895[label="1;504pkt 504fpkt"];
594--1752[label="0.0150376;2pkt 2fpkt"];
594--1757[label="1;504pkt 504fpkt"];
594--4956[label="1;503pkt 503fpkt"];
594--7450[label="1;503pkt 503fpkt"];
594--8927[label="1;504pkt 504fpkt"];
895--1752[label="0.0150376;2pkt 2fpkt"];
895--1757[label="1;504pkt 504fpkt"];
895--4956[label="1;503pkt 503fpkt"];
895--7450[label="1;503pkt 503fpkt"];
895--8927[label="1;504pkt 504fpkt"];
1757--4956[label="1;503pkt 503fpkt"];
1757--7450[label="1;503pkt 503fpkt"];
1757--8927[label="1;504pkt 504fpkt"];
4956--7450[label="1;503pkt 503fpkt"];
4956--8927[label="1;503pkt 503fpkt"];
7450--8927[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.5.24.24"/>
      <filter dst_port="5554" src_ip="209.5.24.24"/>
    </slice>
    <from sec="1089176498" usec="0"/>
    <to sec="1089176507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
235[label="209.190.50.24s;247pkt 247fpkt", shape=rectangle, color=red];
595[label="209.190.50.24s;247pkt 247fpkt", shape=ellipse, color=green];
896[label="209.190.50.24s;247pkt 247fpkt", shape=triangle, color=blue];
4960[label="209.190.50.24;246pkt 246fpkt", shape=pentagon, color=darkviolet];
7454[label="209.190.50.24;246pkt 246fpkt", shape=invtriangle, color=brown];
8930[label="209.190.50.24;246pkt 246fpkt", shape=invhouse, color=bisque];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.190.50.24:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3627: (0.20284%)&lt;BR/&gt; 3626: (0.20284%)&lt;BR/&gt; 3625: (0.20284%)&lt;BR/&gt; 3624: (0.20284%)&gt;];
}
235--595[label="1;247pkt 247fpkt"];
235--896[label="1;247pkt 247fpkt"];
235--4960[label="1;246pkt 246fpkt"];
235--7454[label="1;246pkt 246fpkt"];
235--8930[label="1;246pkt 246fpkt"];
595--896[label="1;247pkt 247fpkt"];
595--4960[label="1;246pkt 246fpkt"];
595--7454[label="1;246pkt 246fpkt"];
595--8930[label="1;246pkt 246fpkt"];
896--4960[label="1;246pkt 246fpkt"];
896--7454[label="1;246pkt 246fpkt"];
896--8930[label="1;246pkt 246fpkt"];
4960--7454[label="1;246pkt 246fpkt"];
4960--8930[label="1;246pkt 246fpkt"];
7454--8930[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.190.50.24"/>
    </slice>
    <from sec="1089177190" usec="0"/>
    <to sec="1089177195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
236[label="214.161.80.24s;440pkt 440fpkt", shape=rectangle, color=red];
596[label="214.161.80.24s;440pkt 440fpkt", shape=ellipse, color=green];
897[label="214.161.80.24s;440pkt 440fpkt", shape=triangle, color=blue];
4961[label="214.161.80.24;440pkt 440fpkt", shape=pentagon, color=darkviolet];
7455[label="214.161.80.24;440pkt 440fpkt", shape=invtriangle, color=brown];
8931[label="214.161.80.24;440pkt 440fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.80.24:*, *:9898}[56.6893%]&lt;BR/&gt;{214.161.80.24:*, *:5554}[43.0839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.4091%)&lt;BR/&gt; 5554: (21.5341%)&lt;BR/&gt; 4304: (0.170455%)&lt;BR/&gt; 4995: (0.113636%)&lt;BR/&gt; 4994: (0.113636%)&gt;];
}
236--596[label="1;440pkt 440fpkt"];
236--897[label="1;440pkt 440fpkt"];
236--4961[label="0.997727;439pkt 439fpkt"];
236--7455[label="0.997727;439pkt 439fpkt"];
236--8931[label="0.997727;439pkt 439fpkt"];
596--897[label="1;440pkt 440fpkt"];
596--4961[label="0.997727;439pkt 439fpkt"];
596--7455[label="0.997727;439pkt 439fpkt"];
596--8931[label="0.997727;439pkt 439fpkt"];
897--4961[label="0.997727;439pkt 439fpkt"];
897--7455[label="0.997727;439pkt 439fpkt"];
897--8931[label="0.997727;439pkt 439fpkt"];
4961--7455[label="1;440pkt 440fpkt"];
4961--8931[label="1;440pkt 440fpkt"];
7455--8931[label="1;440pkt 440fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.80.24"/>
      <filter dst_port="5554" src_ip="214.161.80.24"/>
    </slice>
    <from sec="1089176675" usec="0"/>
    <to sec="1089176787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
237[label="73.148.136.24s;253pkt 253fpkt", shape=rectangle, color=red];
597[label="73.148.136.24s;253pkt 253fpkt", shape=ellipse, color=green];
898[label="73.148.136.24s;253pkt 253fpkt", shape=triangle, color=blue];
4966[label="73.148.136.24;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7458[label="73.148.136.24;253pkt 253fpkt", shape=invtriangle, color=brown];
8933[label="73.148.136.24;252pkt 252fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.148.136.24:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3232: (0.197889%)&lt;BR/&gt; 3231: (0.197889%)&lt;BR/&gt; 3229: (0.197889%)&lt;BR/&gt; 3220: (0.197889%)&gt;];
}
237--597[label="1;253pkt 253fpkt"];
237--898[label="1;253pkt 253fpkt"];
237--4966[label="1;252pkt 252fpkt"];
237--7458[label="1;253pkt 253fpkt"];
237--8933[label="1;252pkt 252fpkt"];
597--898[label="1;253pkt 253fpkt"];
597--4966[label="1;252pkt 252fpkt"];
597--7458[label="1;253pkt 253fpkt"];
597--8933[label="1;252pkt 252fpkt"];
898--4966[label="1;252pkt 252fpkt"];
898--7458[label="1;253pkt 253fpkt"];
898--8933[label="1;252pkt 252fpkt"];
4966--7458[label="1;252pkt 252fpkt"];
4966--8933[label="1;252pkt 252fpkt"];
7458--8933[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.148.136.24"/>
    </slice>
    <from sec="1089177250" usec="0"/>
    <to sec="1089177252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
239[label="214.162.110.26s;325pkt 325fpkt", shape=rectangle, color=red];
600[label="214.162.110.26s;325pkt 325fpkt", shape=ellipse, color=green];
901[label="214.162.110.26s;325pkt 325fpkt", shape=triangle, color=blue];
4989[label="214.162.110.26;324pkt 324fpkt", shape=pentagon, color=darkviolet];
7474[label="214.162.110.26;324pkt 324fpkt", shape=invtriangle, color=brown];
8940[label="214.162.110.26;325pkt 325fpkt", shape=invhouse, color=bisque];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.162.110.26:*, *:9898}[73.2308%]&lt;BR/&gt;{214.162.110.26:*, *:5554}[26.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (36.6016%)&lt;BR/&gt; 5554: (13.3984%)&lt;BR/&gt; 4565: (0.154004%)&lt;BR/&gt; 4563: (0.154004%)&lt;BR/&gt; 4562: (0.154004%)&gt;];
}
239--600[label="1;325pkt 325fpkt"];
239--901[label="1;325pkt 325fpkt"];
239--4989[label="1;324pkt 324fpkt"];
239--7474[label="1;324pkt 324fpkt"];
239--8940[label="1;325pkt 325fpkt"];
600--901[label="1;325pkt 325fpkt"];
600--4989[label="1;324pkt 324fpkt"];
600--7474[label="1;324pkt 324fpkt"];
600--8940[label="1;325pkt 325fpkt"];
901--4989[label="1;324pkt 324fpkt"];
901--7474[label="1;324pkt 324fpkt"];
901--8940[label="1;325pkt 325fpkt"];
4989--7474[label="1;324pkt 324fpkt"];
4989--8940[label="1;324pkt 324fpkt"];
7474--8940[label="1;324pkt 324fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.162.110.26"/>
      <filter dst_port="5554" src_ip="214.162.110.26"/>
    </slice>
    <from sec="1089176470" usec="0"/>
    <to sec="1089176477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
240[label="73.14.114.26s;251pkt 251fpkt", shape=rectangle, color=red];
601[label="73.14.114.26s;251pkt 251fpkt", shape=ellipse, color=green];
902[label="73.14.114.26s;251pkt 251fpkt", shape=triangle, color=blue];
4991[label="73.14.114.26;250pkt 250fpkt", shape=pentagon, color=darkviolet];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.14.114.26:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4259: (0.199402%)&lt;BR/&gt; 4258: (0.199402%)&lt;BR/&gt; 4257: (0.199402%)&lt;BR/&gt; 4250: (0.199402%)&gt;];
}
240--601[label="1;251pkt 251fpkt"];
240--902[label="1;251pkt 251fpkt"];
240--4991[label="1;250pkt 250fpkt"];
601--902[label="1;251pkt 251fpkt"];
601--4991[label="1;250pkt 250fpkt"];
902--4991[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.14.114.26"/>
    </slice>
    <from sec="1089176744" usec="0"/>
    <to sec="1089176749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
242[label="214.176.74.27s;400pkt 400fpkt", shape=rectangle, color=red];
603[label="214.176.74.27s;400pkt 400fpkt", shape=ellipse, color=green];
904[label="214.176.74.27s;400pkt 400fpkt", shape=triangle, color=blue];
5002[label="214.176.74.27;399pkt 399fpkt", shape=pentagon, color=darkviolet];
7483[label="214.176.74.27;400pkt 400fpkt", shape=invtriangle, color=brown];
8946[label="214.176.74.27;400pkt 400fpkt", shape=invhouse, color=bisque];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.176.74.27:*, *:9898}[63%]&lt;BR/&gt;{214.176.74.27:*, *:5554}[37%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (31.5131%)&lt;BR/&gt; 5554: (18.4869%)&lt;BR/&gt; 2525: (0.125052%)&lt;BR/&gt; 2518: (0.125052%)&lt;BR/&gt; 2517: (0.125052%)&gt;];
}
242--603[label="1;400pkt 400fpkt"];
242--904[label="1;400pkt 400fpkt"];
242--5002[label="1;399pkt 399fpkt"];
242--7483[label="1;400pkt 400fpkt"];
242--8946[label="1;400pkt 400fpkt"];
603--904[label="1;400pkt 400fpkt"];
603--5002[label="1;399pkt 399fpkt"];
603--7483[label="1;400pkt 400fpkt"];
603--8946[label="1;400pkt 400fpkt"];
904--5002[label="1;399pkt 399fpkt"];
904--7483[label="1;400pkt 400fpkt"];
904--8946[label="1;400pkt 400fpkt"];
5002--7483[label="1;399pkt 399fpkt"];
5002--8946[label="1;399pkt 399fpkt"];
7483--8946[label="1;400pkt 400fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.176.74.27"/>
      <filter dst_port="5554" src_ip="214.176.74.27"/>
    </slice>
    <from sec="1089176737" usec="0"/>
    <to sec="1089176740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
243[label="18.140.71.28s;404pkt 404fpkt", shape=rectangle, color=red];
604[label="18.140.71.28s;404pkt 404fpkt", shape=ellipse, color=green];
905[label="18.140.71.28s;404pkt 404fpkt", shape=triangle, color=blue];
5014[label="18.140.71.28;404pkt 404fpkt", shape=pentagon, color=darkviolet];
7485[label="18.140.71.28;404pkt 404fpkt", shape=invtriangle, color=brown];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.140.71.28:*, *:5554}[50.495%]&lt;BR/&gt;{18.140.71.28:*, *:9898}[49.505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.2475%)&lt;BR/&gt; 9898: (24.7525%)&lt;BR/&gt; 3332: (0.123762%)&lt;BR/&gt; 3331: (0.123762%)&lt;BR/&gt; 3330: (0.123762%)&gt;];
}
243--604[label="1;404pkt 404fpkt"];
243--905[label="1;404pkt 404fpkt"];
243--5014[label="1;404pkt 404fpkt"];
243--7485[label="1;404pkt 404fpkt"];
604--905[label="1;404pkt 404fpkt"];
604--5014[label="1;404pkt 404fpkt"];
604--7485[label="1;404pkt 404fpkt"];
905--5014[label="1;404pkt 404fpkt"];
905--7485[label="1;404pkt 404fpkt"];
5014--7485[label="1;404pkt 404fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="18.140.71.28"/>
      <filter dst_port="9898" src_ip="18.140.71.28"/>
    </slice>
    <from sec="1089176461" usec="0"/>
    <to sec="1089176467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
244[label="215.225.152.28s;218pkt 218fpkt", shape=rectangle, color=red];
605[label="215.225.152.28s;218pkt 218fpkt", shape=ellipse, color=green];
906[label="215.225.152.28s;218pkt 218fpkt", shape=triangle, color=blue];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.225.152.28:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3657: (0.229358%)&lt;BR/&gt; 3642: (0.229358%)&lt;BR/&gt; 3640: (0.229358%)&lt;BR/&gt; 3639: (0.229358%)&gt;];
}
244--605[label="1;218pkt 218fpkt"];
244--906[label="1;218pkt 218fpkt"];
605--906[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.225.152.28"/>
    </slice>
    <from sec="1089177194" usec="0"/>
    <to sec="1089177198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
246[label="73.148.34.29s;249pkt 249fpkt", shape=rectangle, color=red];
606[label="73.148.34.29s;249pkt 249fpkt", shape=ellipse, color=green];
907[label="73.148.34.29s;249pkt 249fpkt", shape=triangle, color=blue];
5020[label="73.148.34.29;249pkt 249fpkt", shape=pentagon, color=darkviolet];
7491[label="73.148.34.29;249pkt 249fpkt", shape=invtriangle, color=brown];
8950[label="73.148.34.29;249pkt 249fpkt", shape=invhouse, color=bisque];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.148.34.29:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3828: (0.200803%)&lt;BR/&gt; 3827: (0.200803%)&lt;BR/&gt; 3826: (0.200803%)&lt;BR/&gt; 3825: (0.200803%)&gt;];
}
246--606[label="1;249pkt 249fpkt"];
246--907[label="1;249pkt 249fpkt"];
246--5020[label="1;249pkt 249fpkt"];
246--7491[label="1;249pkt 249fpkt"];
246--8950[label="1;249pkt 249fpkt"];
606--907[label="1;249pkt 249fpkt"];
606--5020[label="1;249pkt 249fpkt"];
606--7491[label="1;249pkt 249fpkt"];
606--8950[label="1;249pkt 249fpkt"];
907--5020[label="1;249pkt 249fpkt"];
907--7491[label="1;249pkt 249fpkt"];
907--8950[label="1;249pkt 249fpkt"];
5020--7491[label="1;249pkt 249fpkt"];
5020--8950[label="1;249pkt 249fpkt"];
7491--8950[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.148.34.29"/>
    </slice>
    <from sec="1089176824" usec="0"/>
    <to sec="1089176829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
247[label="208.69.144.29s;251pkt 251fpkt", shape=rectangle, color=red];
607[label="208.69.144.29s;251pkt 251fpkt", shape=ellipse, color=green];
908[label="208.69.144.29s;251pkt 251fpkt", shape=triangle, color=blue];
5027[label="208.69.144.29;251pkt 251fpkt", shape=pentagon, color=darkviolet];
7496[label="208.69.144.29;251pkt 251fpkt", shape=invtriangle, color=brown];
8954[label="208.69.144.29;251pkt 251fpkt", shape=invhouse, color=bisque];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.69.144.29:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1721: (0.199203%)&lt;BR/&gt; 1719: (0.199203%)&lt;BR/&gt; 1717: (0.199203%)&lt;BR/&gt; 1716: (0.199203%)&gt;];
}
247--607[label="1;251pkt 251fpkt"];
247--908[label="1;251pkt 251fpkt"];
247--5027[label="1;251pkt 251fpkt"];
247--7496[label="1;251pkt 251fpkt"];
247--8954[label="1;251pkt 251fpkt"];
607--908[label="1;251pkt 251fpkt"];
607--5027[label="1;251pkt 251fpkt"];
607--7496[label="1;251pkt 251fpkt"];
607--8954[label="1;251pkt 251fpkt"];
908--5027[label="1;251pkt 251fpkt"];
908--7496[label="1;251pkt 251fpkt"];
908--8954[label="1;251pkt 251fpkt"];
5027--7496[label="1;251pkt 251fpkt"];
5027--8954[label="1;251pkt 251fpkt"];
7496--8954[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.69.144.29"/>
    </slice>
    <from sec="1089177129" usec="0"/>
    <to sec="1089177132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
249[label="208.162.68.31s;485pkt 485fpkt", shape=rectangle, color=red];
609[label="208.162.68.31s;485pkt 485fpkt", shape=ellipse, color=green];
910[label="208.162.68.31s;485pkt 485fpkt", shape=triangle, color=blue];
5040[label="208.162.68.31;485pkt 485fpkt", shape=pentagon, color=darkviolet];
7503[label="208.162.68.31;485pkt 485fpkt", shape=invtriangle, color=brown];
8957[label="208.162.68.31;484pkt 484fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.162.68.31:*, *:5554}[52.3711%]&lt;BR/&gt;{208.162.68.31:*, *:9898}[47.6289%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (26.1774%)&lt;BR/&gt; 9898: (23.8226%)&lt;BR/&gt; 5000: (0.103128%)&lt;BR/&gt; 4999: (0.103128%)&lt;BR/&gt; 4998: (0.103128%)&gt;];
}
249--609[label="1;485pkt 485fpkt"];
249--910[label="1;485pkt 485fpkt"];
249--5040[label="1;485pkt 485fpkt"];
249--7503[label="1;485pkt 485fpkt"];
249--8957[label="1;484pkt 484fpkt"];
609--910[label="1;485pkt 485fpkt"];
609--5040[label="1;485pkt 485fpkt"];
609--7503[label="1;485pkt 485fpkt"];
609--8957[label="1;484pkt 484fpkt"];
910--5040[label="1;485pkt 485fpkt"];
910--7503[label="1;485pkt 485fpkt"];
910--8957[label="1;484pkt 484fpkt"];
5040--7503[label="1;485pkt 485fpkt"];
5040--8957[label="1;484pkt 484fpkt"];
7503--8957[label="1;484pkt 484fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.162.68.31"/>
      <filter dst_port="9898" src_ip="208.162.68.31"/>
    </slice>
    <from sec="1089177205" usec="0"/>
    <to sec="1089177209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
250[label="214.190.137.32s;248pkt 248fpkt", shape=rectangle, color=red];
610[label="214.190.137.32s;248pkt 248fpkt", shape=ellipse, color=green];
911[label="214.190.137.32s;248pkt 248fpkt", shape=triangle, color=blue];
5051[label="214.190.137.32;249pkt 249fpkt", shape=pentagon, color=darkviolet];
7509[label="214.190.137.32;249pkt 249fpkt", shape=invtriangle, color=brown];
8960[label="214.190.137.32;249pkt 249fpkt", shape=invhouse, color=bisque];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.137.32:*, *:9898}[99.5984%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (49.8994%)&lt;BR/&gt; 3517: (0.201207%)&lt;BR/&gt; 3511: (0.201207%)&lt;BR/&gt; 3450: (0.201207%)&lt;BR/&gt; 3446: (0.201207%)&gt;];
}
250--610[label="1;248pkt 248fpkt"];
250--911[label="1;248pkt 248fpkt"];
250--5051[label="1;248pkt 248fpkt"];
250--7509[label="1;248pkt 248fpkt"];
250--8960[label="1;248pkt 248fpkt"];
610--911[label="1;248pkt 248fpkt"];
610--5051[label="1;248pkt 248fpkt"];
610--7509[label="1;248pkt 248fpkt"];
610--8960[label="1;248pkt 248fpkt"];
911--5051[label="1;248pkt 248fpkt"];
911--7509[label="1;248pkt 248fpkt"];
911--8960[label="1;248pkt 248fpkt"];
5051--7509[label="1;249pkt 249fpkt"];
5051--8960[label="1;249pkt 249fpkt"];
7509--8960[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.137.32"/>
    </slice>
    <from sec="1089176903" usec="0"/>
    <to sec="1089176907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
252[label="214.176.72.33s;454pkt 454fpkt", shape=rectangle, color=red];
612[label="214.176.72.33s;454pkt 454fpkt", shape=ellipse, color=green];
912[label="214.176.72.33s;454pkt 454fpkt", shape=triangle, color=blue];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.176.72.33:*, *:9898}[51.5419%]&lt;BR/&gt;{214.176.72.33:*, *:5554}[48.4581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.7709%)&lt;BR/&gt; 5554: (24.2291%)&lt;BR/&gt; 3752: (0.110132%)&lt;BR/&gt; 3751: (0.110132%)&lt;BR/&gt; 3750: (0.110132%)&gt;];
}
252--612[label="1;454pkt 454fpkt"];
252--912[label="1;454pkt 454fpkt"];
612--912[label="1;454pkt 454fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.176.72.33"/>
      <filter dst_port="5554" src_ip="214.176.72.33"/>
    </slice>
    <from sec="1089176896" usec="0"/>
    <to sec="1089176902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
253[label="208.162.20.34s;387pkt 387fpkt", shape=rectangle, color=red];
613[label="208.162.20.34s;387pkt 387fpkt", shape=ellipse, color=green];
913[label="208.162.20.34s;387pkt 387fpkt", shape=triangle, color=blue];
5076[label="208.162.20.34;387pkt 387fpkt", shape=pentagon, color=darkviolet];
7523[label="208.162.20.34;387pkt 387fpkt", shape=invtriangle, color=brown];
8967[label="208.162.20.34;386pkt 386fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.162.20.34:*, *:5554}[50.1292%]&lt;BR/&gt;{208.162.20.34:*, *:9898}[49.8708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.0539%)&lt;BR/&gt; 9898: (24.9461%)&lt;BR/&gt; 2069: (0.129255%)&lt;BR/&gt; 2068: (0.129255%)&lt;BR/&gt; 2067: (0.129255%)&gt;];
}
253--613[label="1;387pkt 387fpkt"];
253--913[label="1;387pkt 387fpkt"];
253--5076[label="1;387pkt 387fpkt"];
253--7523[label="1;387pkt 387fpkt"];
253--8967[label="1;386pkt 386fpkt"];
613--913[label="1;387pkt 387fpkt"];
613--5076[label="1;387pkt 387fpkt"];
613--7523[label="1;387pkt 387fpkt"];
613--8967[label="1;386pkt 386fpkt"];
913--5076[label="1;387pkt 387fpkt"];
913--7523[label="1;387pkt 387fpkt"];
913--8967[label="1;386pkt 386fpkt"];
5076--7523[label="1;387pkt 387fpkt"];
5076--8967[label="1;386pkt 386fpkt"];
7523--8967[label="1;386pkt 386fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.162.20.34"/>
      <filter dst_port="9898" src_ip="208.162.20.34"/>
    </slice>
    <from sec="1089176780" usec="0"/>
    <to sec="1089176783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
256[label="214.181.142.36s;348pkt 348fpkt", shape=rectangle, color=red];
616[label="214.181.142.36s;348pkt 348fpkt", shape=ellipse, color=green];
915[label="214.181.142.36s;348pkt 348fpkt", shape=triangle, color=blue];
5113[label="214.181.142.36;347pkt 347fpkt", shape=pentagon, color=darkviolet];
7546[label="214.181.142.36;348pkt 348fpkt", shape=invtriangle, color=brown];
8979[label="214.181.142.36;348pkt 348fpkt", shape=invhouse, color=bisque];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.181.142.36:*, *:9898}[55.1724%]&lt;BR/&gt;{214.181.142.36:*, *:5554}[44.8276%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.5994%)&lt;BR/&gt; 5554: (22.4006%)&lt;BR/&gt; 2877: (0.143747%)&lt;BR/&gt; 2875: (0.143747%)&lt;BR/&gt; 2874: (0.143747%)&gt;];
}
256--616[label="1;348pkt 348fpkt"];
256--915[label="1;348pkt 348fpkt"];
256--5113[label="1;347pkt 347fpkt"];
256--7546[label="1;348pkt 348fpkt"];
256--8979[label="1;348pkt 348fpkt"];
616--915[label="1;348pkt 348fpkt"];
616--5113[label="1;347pkt 347fpkt"];
616--7546[label="1;348pkt 348fpkt"];
616--8979[label="1;348pkt 348fpkt"];
915--5113[label="1;347pkt 347fpkt"];
915--7546[label="1;348pkt 348fpkt"];
915--8979[label="1;348pkt 348fpkt"];
5113--7546[label="1;347pkt 347fpkt"];
5113--8979[label="1;347pkt 347fpkt"];
7546--8979[label="1;348pkt 348fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.181.142.36"/>
      <filter dst_port="5554" src_ip="214.181.142.36"/>
    </slice>
    <from sec="1089176731" usec="0"/>
    <to sec="1089176734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
257[label="214.186.194.39s;254pkt 254fpkt", shape=rectangle, color=red];
618[label="214.186.194.39s;254pkt 254fpkt", shape=ellipse, color=green];
917[label="214.186.194.39s;254pkt 254fpkt", shape=triangle, color=blue];
5152[label="214.186.194.39;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7568[label="214.186.194.39;253pkt 253fpkt", shape=invtriangle, color=brown];
8990[label="214.186.194.39;253pkt 253fpkt", shape=invhouse, color=bisque];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.186.194.39:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4976: (0.197109%)&lt;BR/&gt; 4967: (0.197109%)&lt;BR/&gt; 4966: (0.197109%)&lt;BR/&gt; 4965: (0.197109%)&gt;];
}
257--618[label="1;254pkt 254fpkt"];
257--917[label="1;254pkt 254fpkt"];
257--5152[label="1;254pkt 254fpkt"];
257--7568[label="1;253pkt 253fpkt"];
257--8990[label="1;253pkt 253fpkt"];
618--917[label="1;254pkt 254fpkt"];
618--5152[label="1;254pkt 254fpkt"];
618--7568[label="1;253pkt 253fpkt"];
618--8990[label="1;253pkt 253fpkt"];
917--5152[label="1;254pkt 254fpkt"];
917--7568[label="1;253pkt 253fpkt"];
917--8990[label="1;253pkt 253fpkt"];
5152--7568[label="1;253pkt 253fpkt"];
5152--8990[label="1;253pkt 253fpkt"];
7568--8990[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.186.194.39"/>
    </slice>
    <from sec="1089176734" usec="0"/>
    <to sec="1089176738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
258[label="220.250.9.40s;252pkt 252fpkt", shape=rectangle, color=red];
619[label="220.250.9.40s;252pkt 252fpkt", shape=ellipse, color=green];
918[label="220.250.9.40s;252pkt 252fpkt", shape=triangle, color=blue];
5155[label="220.250.9.40;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7570[label="220.250.9.40;252pkt 252fpkt", shape=invtriangle, color=brown];
8992[label="220.250.9.40;252pkt 252fpkt", shape=invhouse, color=bisque];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.9.40:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3112: (0.198413%)&lt;BR/&gt; 3110: (0.198413%)&lt;BR/&gt; 3109: (0.198413%)&lt;BR/&gt; 3108: (0.198413%)&gt;];
}
258--619[label="1;252pkt 252fpkt"];
258--918[label="1;252pkt 252fpkt"];
258--5155[label="1;252pkt 252fpkt"];
258--7570[label="1;252pkt 252fpkt"];
258--8992[label="1;252pkt 252fpkt"];
619--918[label="1;252pkt 252fpkt"];
619--5155[label="1;252pkt 252fpkt"];
619--7570[label="1;252pkt 252fpkt"];
619--8992[label="1;252pkt 252fpkt"];
918--5155[label="1;252pkt 252fpkt"];
918--7570[label="1;252pkt 252fpkt"];
918--8992[label="1;252pkt 252fpkt"];
5155--7570[label="1;252pkt 252fpkt"];
5155--8992[label="1;252pkt 252fpkt"];
7570--8992[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="220.250.9.40"/>
    </slice>
    <from sec="1089176734" usec="0"/>
    <to sec="1089176738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
260[label="17.29.226.42s;503pkt 503fpkt", shape=rectangle, color=red];
620[label="17.29.226.42s;503pkt 503fpkt", shape=ellipse, color=green];
919[label="17.29.226.42s;503pkt 503fpkt", shape=triangle, color=blue];
3061[label="17.29.226.42;s;503pkt 503fpkt", shape=diamond, color=yellow];
5192[label="17.29.226.42;503pkt 503fpkt", shape=pentagon, color=darkviolet];
7589[label="17.29.226.42;502pkt 502fpkt", shape=invtriangle, color=brown];
9003[label="17.29.226.42;503pkt 503fpkt", shape=invhouse, color=bisque];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.29.226.42:*, *:5554}[50.0994%]&lt;BR/&gt;{17.29.226.42:*, *:9898}[49.9006%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.0426%)&lt;BR/&gt; 9898: (24.9574%)&lt;BR/&gt; 3930: (0.0994318%)&lt;BR/&gt; 3929: (0.0994318%)&lt;BR/&gt; 3928: (0.0994318%)&gt;];
}
260--620[label="1;503pkt 503fpkt"];
260--919[label="1;503pkt 503fpkt"];
260--3061[label="1;503pkt 503fpkt"];
260--5192[label="1;503pkt 503fpkt"];
260--7589[label="1;502pkt 502fpkt"];
260--9003[label="1;503pkt 503fpkt"];
620--919[label="1;503pkt 503fpkt"];
620--3061[label="1;503pkt 503fpkt"];
620--5192[label="1;503pkt 503fpkt"];
620--7589[label="1;502pkt 502fpkt"];
620--9003[label="1;503pkt 503fpkt"];
919--3061[label="1;503pkt 503fpkt"];
919--5192[label="1;503pkt 503fpkt"];
919--7589[label="1;502pkt 502fpkt"];
919--9003[label="1;503pkt 503fpkt"];
3061--5192[label="1;503pkt 503fpkt"];
3061--7589[label="1;502pkt 502fpkt"];
3061--9003[label="1;503pkt 503fpkt"];
5192--7589[label="1;502pkt 502fpkt"];
5192--9003[label="1;503pkt 503fpkt"];
7589--9003[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="17.29.226.42"/>
      <filter dst_port="9898" src_ip="17.29.226.42"/>
    </slice>
    <from sec="1089177014" usec="0"/>
    <to sec="1089177021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
261[label="215.89.112.43s;254pkt 254fpkt", shape=rectangle, color=red];
621[label="215.89.112.43s;254pkt 254fpkt", shape=ellipse, color=green];
920[label="215.89.112.43s;254pkt 254fpkt", shape=triangle, color=blue];
5202[label="215.89.112.43;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7596[label="215.89.112.43;253pkt 253fpkt", shape=invtriangle, color=brown];
9006[label="215.89.112.43;254pkt 254fpkt", shape=invhouse, color=bisque];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.89.112.43:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2244: (0.197109%)&lt;BR/&gt; 2243: (0.197109%)&lt;BR/&gt; 2242: (0.197109%)&lt;BR/&gt; 2241: (0.197109%)&gt;];
}
261--621[label="1;254pkt 254fpkt"];
261--920[label="1;254pkt 254fpkt"];
261--5202[label="1;253pkt 253fpkt"];
261--7596[label="1;253pkt 253fpkt"];
261--9006[label="1;254pkt 254fpkt"];
621--920[label="1;254pkt 254fpkt"];
621--5202[label="1;253pkt 253fpkt"];
621--7596[label="1;253pkt 253fpkt"];
621--9006[label="1;254pkt 254fpkt"];
920--5202[label="1;253pkt 253fpkt"];
920--7596[label="1;253pkt 253fpkt"];
920--9006[label="1;254pkt 254fpkt"];
5202--7596[label="1;253pkt 253fpkt"];
5202--9006[label="1;253pkt 253fpkt"];
7596--9006[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.89.112.43"/>
    </slice>
    <from sec="1089176689" usec="0"/>
    <to sec="1089176697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891341,2.02724,001,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
262[label="208.71.134.43s;235pkt 235fpkt", shape=rectangle, color=red];
622[label="208.71.134.43s;235pkt 235fpkt", shape=ellipse, color=green];
5204[label="208.71.134.43;235pkt 235fpkt", shape=pentagon, color=darkviolet];
7597[label="208.71.134.43;234pkt 234fpkt", shape=invtriangle, color=brown];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.71.134.43:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2440: (0.212993%)&lt;BR/&gt; 2439: (0.212993%)&lt;BR/&gt; 2438: (0.212993%)&lt;BR/&gt; 2437: (0.212993%)&gt;];
}
262--622[label="1;235pkt 235fpkt"];
262--5204[label="1;235pkt 235fpkt"];
262--7597[label="1;234pkt 234fpkt"];
622--5204[label="1;235pkt 235fpkt"];
622--7597[label="1;234pkt 234fpkt"];
5204--7597[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.71.134.43"/>
    </slice>
    <from sec="1089177289" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
266[label="212.120.118.46s;411pkt 411fpkt", shape=rectangle, color=red];
625[label="212.120.118.46s;411pkt 411fpkt", shape=ellipse, color=green];
923[label="212.120.118.46s;406pkt 406fpkt", shape=triangle, color=blue];
5241[label="212.120.118.46;411pkt 411fpkt", shape=pentagon, color=darkviolet];
7625[label="212.120.118.46;410pkt 410fpkt", shape=invtriangle, color=brown];
9022[label="212.120.118.46;411pkt 411fpkt", shape=invhouse, color=bisque];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.120.118.46:*, *:9898}[50.1217%]&lt;BR/&gt;{212.120.118.46:*, *:5554}[49.8783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.122%)&lt;BR/&gt; 5554: (24.878%)&lt;BR/&gt; 3388: (0.121951%)&lt;BR/&gt; 3384: (0.121951%)&lt;BR/&gt; 3380: (0.121951%)&gt;];
}
266--625[label="1;411pkt 411fpkt"];
266--923[label="1;406pkt 406fpkt"];
266--5241[label="1;411pkt 411fpkt"];
266--7625[label="1;410pkt 410fpkt"];
266--9022[label="1;411pkt 411fpkt"];
625--923[label="1;406pkt 406fpkt"];
625--5241[label="1;411pkt 411fpkt"];
625--7625[label="1;410pkt 410fpkt"];
625--9022[label="1;411pkt 411fpkt"];
923--5241[label="1;406pkt 406fpkt"];
923--7625[label="0.997537;405pkt 405fpkt"];
923--9022[label="1;406pkt 406fpkt"];
5241--7625[label="1;410pkt 410fpkt"];
5241--9022[label="1;411pkt 411fpkt"];
7625--9022[label="1;410pkt 410fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="212.120.118.46"/>
      <filter dst_port="5554" src_ip="212.120.118.46"/>
    </slice>
    <from sec="1089177068" usec="0"/>
    <to sec="1089177076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
267[label="208.163.4.47s;439pkt 439fpkt", shape=rectangle, color=red];
626[label="208.163.4.47s;439pkt 439fpkt", shape=ellipse, color=green];
924[label="208.163.4.47s;439pkt 439fpkt", shape=triangle, color=blue];
5244[label="208.163.4.47;439pkt 439fpkt", shape=pentagon, color=darkviolet];
7627[label="208.163.4.47;438pkt 438fpkt", shape=invtriangle, color=brown];
9023[label="208.163.4.47;439pkt 439fpkt", shape=invhouse, color=bisque];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.163.4.47:*, *:5554}[54.4419%]&lt;BR/&gt;{208.163.4.47:*, *:9898}[45.5581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (27.2123%)&lt;BR/&gt; 9898: (22.7877%)&lt;BR/&gt; 4998: (0.113938%)&lt;BR/&gt; 4997: (0.113938%)&lt;BR/&gt; 4996: (0.113938%)&gt;];
}
267--626[label="1;439pkt 439fpkt"];
267--924[label="1;439pkt 439fpkt"];
267--5244[label="1;439pkt 439fpkt"];
267--7627[label="1;438pkt 438fpkt"];
267--9023[label="1;439pkt 439fpkt"];
626--924[label="1;439pkt 439fpkt"];
626--5244[label="1;439pkt 439fpkt"];
626--7627[label="1;438pkt 438fpkt"];
626--9023[label="1;439pkt 439fpkt"];
924--5244[label="1;439pkt 439fpkt"];
924--7627[label="1;438pkt 438fpkt"];
924--9023[label="1;439pkt 439fpkt"];
5244--7627[label="1;438pkt 438fpkt"];
5244--9023[label="1;439pkt 439fpkt"];
7627--9023[label="1;438pkt 438fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.163.4.47"/>
      <filter dst_port="9898" src_ip="208.163.4.47"/>
    </slice>
    <from sec="1089177255" usec="0"/>
    <to sec="1089177257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
268[label="215.194.19.47s;234pkt 234fpkt", shape=rectangle, color=red];
627[label="215.194.19.47s;234pkt 234fpkt", shape=ellipse, color=green];
925[label="215.194.19.47s;234pkt 234fpkt", shape=triangle, color=blue];
5245[label="215.194.19.47;233pkt 233fpkt", shape=pentagon, color=darkviolet];
7628[label="215.194.19.47;233pkt 233fpkt", shape=invtriangle, color=brown];
9024[label="215.194.19.47;233pkt 233fpkt", shape=invhouse, color=bisque];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.194.19.47:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2258: (0.214133%)&lt;BR/&gt; 2241: (0.214133%)&lt;BR/&gt; 2240: (0.214133%)&lt;BR/&gt; 2239: (0.214133%)&gt;];
}
268--627[label="1;234pkt 234fpkt"];
268--925[label="1;234pkt 234fpkt"];
268--5245[label="1;233pkt 233fpkt"];
268--7628[label="1;233pkt 233fpkt"];
268--9024[label="1;233pkt 233fpkt"];
627--925[label="1;234pkt 234fpkt"];
627--5245[label="1;233pkt 233fpkt"];
627--7628[label="1;233pkt 233fpkt"];
627--9024[label="1;233pkt 233fpkt"];
925--5245[label="1;233pkt 233fpkt"];
925--7628[label="1;233pkt 233fpkt"];
925--9024[label="1;233pkt 233fpkt"];
5245--7628[label="1;233pkt 233fpkt"];
5245--9024[label="1;233pkt 233fpkt"];
7628--9024[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.194.19.47"/>
    </slice>
    <from sec="1089176821" usec="0"/>
    <to sec="1089176823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
269[label="215.187.34.48s;480pkt 480fpkt", shape=rectangle, color=red];
628[label="215.187.34.48s;480pkt 480fpkt", shape=ellipse, color=green];
926[label="215.187.34.48s;480pkt 480fpkt", shape=triangle, color=blue];
5252[label="215.187.34.48;479pkt 479fpkt", shape=pentagon, color=darkviolet];
7632[label="215.187.34.48;479pkt 479fpkt", shape=invtriangle, color=brown];
9026[label="215.187.34.48;480pkt 480fpkt", shape=invhouse, color=bisque];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.187.34.48:*, *:5554}[51.0417%]&lt;BR/&gt;{215.187.34.48:*, *:9898}[48.9583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.5038%)&lt;BR/&gt; 9898: (24.4962%)&lt;BR/&gt; 2658: (0.104239%)&lt;BR/&gt; 2654: (0.104239%)&lt;BR/&gt; 2652: (0.104239%)&gt;];
}
269--628[label="1;480pkt 480fpkt"];
269--926[label="1;480pkt 480fpkt"];
269--5252[label="1;479pkt 479fpkt"];
269--7632[label="1;479pkt 479fpkt"];
269--9026[label="1;480pkt 480fpkt"];
628--926[label="1;480pkt 480fpkt"];
628--5252[label="1;479pkt 479fpkt"];
628--7632[label="1;479pkt 479fpkt"];
628--9026[label="1;480pkt 480fpkt"];
926--5252[label="1;479pkt 479fpkt"];
926--7632[label="1;479pkt 479fpkt"];
926--9026[label="1;480pkt 480fpkt"];
5252--7632[label="1;479pkt 479fpkt"];
5252--9026[label="1;479pkt 479fpkt"];
7632--9026[label="1;479pkt 479fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.187.34.48"/>
      <filter dst_port="9898" src_ip="215.187.34.48"/>
    </slice>
    <from sec="1089176514" usec="0"/>
    <to sec="1089176521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
271[label="215.188.194.48s;357pkt 357fpkt", shape=rectangle, color=red];
629[label="215.188.194.48s;357pkt 357fpkt", shape=ellipse, color=green];
927[label="215.188.194.48s;357pkt 357fpkt", shape=triangle, color=blue];
5260[label="215.188.194.48;357pkt 357fpkt", shape=pentagon, color=darkviolet];
7639[label="215.188.194.48;356pkt 356fpkt", shape=invtriangle, color=brown];
9030[label="215.188.194.48;357pkt 357fpkt", shape=invhouse, color=bisque];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.194.48:*, *:9898}[51.2605%]&lt;BR/&gt;{215.188.194.48:*, *:5554}[48.7395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.6422%)&lt;BR/&gt; 5554: (24.3578%)&lt;BR/&gt; 4929: (0.140121%)&lt;BR/&gt; 4927: (0.140121%)&lt;BR/&gt; 4925: (0.140121%)&gt;];
}
271--629[label="1;357pkt 357fpkt"];
271--927[label="1;357pkt 357fpkt"];
271--5260[label="1;357pkt 357fpkt"];
271--7639[label="1;356pkt 356fpkt"];
271--9030[label="1;357pkt 357fpkt"];
629--927[label="1;357pkt 357fpkt"];
629--5260[label="1;357pkt 357fpkt"];
629--7639[label="1;356pkt 356fpkt"];
629--9030[label="1;357pkt 357fpkt"];
927--5260[label="1;357pkt 357fpkt"];
927--7639[label="1;356pkt 356fpkt"];
927--9030[label="1;357pkt 357fpkt"];
5260--7639[label="1;356pkt 356fpkt"];
5260--9030[label="1;357pkt 357fpkt"];
7639--9030[label="1;356pkt 356fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.194.48"/>
      <filter dst_port="5554" src_ip="215.188.194.48"/>
    </slice>
    <from sec="1089176804" usec="0"/>
    <to sec="1089176809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
272[label="208.164.56.49s;396pkt 396fpkt", shape=rectangle, color=red];
630[label="208.164.56.49s;396pkt 396fpkt", shape=ellipse, color=green];
928[label="208.164.56.49s;396pkt 396fpkt", shape=triangle, color=blue];
5267[label="208.164.56.49;396pkt 396fpkt", shape=pentagon, color=darkviolet];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.164.56.49:*, *:5554}[61.461%]&lt;BR/&gt;{208.164.56.49:*, *:9898}[38.2872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (30.7765%)&lt;BR/&gt; 9898: (19.1919%)&lt;BR/&gt; 4992: (0.126263%)&lt;BR/&gt; 4930: (0.126263%)&lt;BR/&gt; 4928: (0.126263%)&gt;];
}
272--630[label="1;396pkt 396fpkt"];
272--928[label="1;396pkt 396fpkt"];
272--5267[label="0.997475;395pkt 395fpkt"];
630--928[label="1;396pkt 396fpkt"];
630--5267[label="0.997475;395pkt 395fpkt"];
928--5267[label="0.997475;395pkt 395fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.164.56.49"/>
      <filter dst_port="9898" src_ip="208.164.56.49"/>
    </slice>
    <from sec="1089176725" usec="0"/>
    <to sec="1089177037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
274[label="209.17.46.50s;555pkt 555fpkt", shape=rectangle, color=red];
632[label="209.17.46.50s;517pkt 517fpkt", shape=ellipse, color=green];
930[label="209.17.46.50s;517pkt 517fpkt", shape=triangle, color=blue];
5278[label="209.17.46.50;43pkt 43fpkt", shape=pentagon, color=darkviolet];
7647[label="209.17.46.50;43pkt 43fpkt", shape=invtriangle, color=brown];
9034[label="209.17.46.50;43pkt 43fpkt", shape=invhouse, color=bisque];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.17.46.50:*, *:1023}[35.1351%]&lt;BR/&gt;{209.17.46.50:*, *:5554}[33.8739%]&lt;BR/&gt;{209.17.46.50:*, *:9898}[30.991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (18.7718%)&lt;BR/&gt; 1023: (17.0256%)&lt;BR/&gt; 5554: (14.2026%)&lt;BR/&gt; 3220: (0.261932%)&lt;BR/&gt; 3196: (0.261932%)&gt;];
}
274--632[label="1;517pkt 517fpkt"];
274--930[label="1;517pkt 517fpkt"];
274--5278[label="1;43pkt 43fpkt"];
274--7647[label="1;43pkt 43fpkt"];
274--9034[label="1;43pkt 43fpkt"];
632--930[label="1;517pkt 517fpkt"];
632--5278[label="1;43pkt 43fpkt"];
632--7647[label="1;43pkt 43fpkt"];
632--9034[label="1;43pkt 43fpkt"];
930--5278[label="1;43pkt 43fpkt"];
930--7647[label="1;43pkt 43fpkt"];
930--9034[label="1;43pkt 43fpkt"];
5278--7647[label="1;43pkt 43fpkt"];
5278--9034[label="1;43pkt 43fpkt"];
7647--9034[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="209.17.46.50"/>
      <filter dst_port="5554" src_ip="209.17.46.50"/>
      <filter dst_port="9898" src_ip="209.17.46.50"/>
    </slice>
    <from sec="1089177294" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
275[label="214.186.94.52s;254pkt 254fpkt", shape=rectangle, color=red];
633[label="214.186.94.52s;254pkt 254fpkt", shape=ellipse, color=green];
931[label="214.186.94.52s;254pkt 254fpkt", shape=triangle, color=blue];
5304[label="214.186.94.52;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7664[label="214.186.94.52;254pkt 254fpkt", shape=invtriangle, color=brown];
9042[label="214.186.94.52;253pkt 253fpkt", shape=invhouse, color=bisque];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.186.94.52:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4023: (0.197109%)&lt;BR/&gt; 4022: (0.197109%)&lt;BR/&gt; 4021: (0.197109%)&lt;BR/&gt; 4020: (0.197109%)&gt;];
}
275--633[label="1;254pkt 254fpkt"];
275--931[label="1;254pkt 254fpkt"];
275--5304[label="1;253pkt 253fpkt"];
275--7664[label="1;254pkt 254fpkt"];
275--9042[label="1;253pkt 253fpkt"];
633--931[label="1;254pkt 254fpkt"];
633--5304[label="1;253pkt 253fpkt"];
633--7664[label="1;254pkt 254fpkt"];
633--9042[label="1;253pkt 253fpkt"];
931--5304[label="1;253pkt 253fpkt"];
931--7664[label="1;254pkt 254fpkt"];
931--9042[label="1;253pkt 253fpkt"];
5304--7664[label="1;253pkt 253fpkt"];
5304--9042[label="1;253pkt 253fpkt"];
7664--9042[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.186.94.52"/>
    </slice>
    <from sec="1089176537" usec="0"/>
    <to sec="1089176542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
276[label="215.187.222.52s;445pkt 445fpkt", shape=rectangle, color=red];
634[label="215.187.222.52s;445pkt 445fpkt", shape=ellipse, color=green];
932[label="215.187.222.52s;445pkt 445fpkt", shape=triangle, color=blue];
5311[label="215.187.222.52;445pkt 445fpkt", shape=pentagon, color=darkviolet];
7668[label="215.187.222.52;444pkt 444fpkt", shape=invtriangle, color=brown];
9045[label="215.187.222.52;445pkt 445fpkt", shape=invhouse, color=bisque];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.187.222.52:*, *:9898}[50.3371%]&lt;BR/&gt;{215.187.222.52:*, *:5554}[49.6629%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.178%)&lt;BR/&gt; 5554: (24.822%)&lt;BR/&gt; 3385: (0.112402%)&lt;BR/&gt; 3384: (0.112402%)&lt;BR/&gt; 3363: (0.112402%)&gt;];
}
276--634[label="1;445pkt 445fpkt"];
276--932[label="1;445pkt 445fpkt"];
276--1225[label="0.00449438;2pkt 2fpkt"];
276--1677[label="0.00527704;2pkt 2fpkt"];
276--2139[label="0.00581395;1pkt 1fpkt"];
276--2165[label="0.00558659;2pkt 2fpkt"];
276--2226[label="0.00483092;1pkt 1fpkt"];
276--3593[label="0.00449438;2pkt 2fpkt"];
276--3996[label="0.00943396;1pkt 1fpkt"];
276--4122[label="0.00558659;2pkt 2fpkt"];
276--4144[label="0.00598802;1pkt 1fpkt"];
276--5311[label="1;445pkt 445fpkt"];
276--7668[label="1;444pkt 444fpkt"];
276--9045[label="1;445pkt 445fpkt"];
634--932[label="1;445pkt 445fpkt"];
634--1225[label="0.00449438;2pkt 2fpkt"];
634--1677[label="0.00527704;2pkt 2fpkt"];
634--2139[label="0.00581395;1pkt 1fpkt"];
634--2165[label="0.00558659;2pkt 2fpkt"];
634--2226[label="0.00483092;1pkt 1fpkt"];
634--3593[label="0.00449438;2pkt 2fpkt"];
634--3996[label="0.00943396;1pkt 1fpkt"];
634--4122[label="0.00558659;2pkt 2fpkt"];
634--4144[label="0.00598802;1pkt 1fpkt"];
634--5311[label="1;445pkt 445fpkt"];
634--7668[label="1;444pkt 444fpkt"];
634--9045[label="1;445pkt 445fpkt"];
932--1225[label="0.00449438;2pkt 2fpkt"];
932--1677[label="0.00527704;2pkt 2fpkt"];
932--2139[label="0.00581395;1pkt 1fpkt"];
932--2165[label="0.00558659;2pkt 2fpkt"];
932--2226[label="0.00483092;1pkt 1fpkt"];
932--3593[label="0.00449438;2pkt 2fpkt"];
932--3996[label="0.00943396;1pkt 1fpkt"];
932--4122[label="0.00558659;2pkt 2fpkt"];
932--4144[label="0.00598802;1pkt 1fpkt"];
932--5311[label="1;445pkt 445fpkt"];
932--7668[label="1;444pkt 444fpkt"];
932--9045[label="1;445pkt 445fpkt"];
5311--7668[label="1;444pkt 444fpkt"];
5311--9045[label="1;445pkt 445fpkt"];
7668--9045[label="1;444pkt 444fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.187.222.52"/>
      <filter dst_port="5554" src_ip="215.187.222.52"/>
    </slice>
    <from sec="1089176931" usec="0"/>
    <to sec="1089176935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
277[label="215.219.54.53s;454pkt 454fpkt", shape=rectangle, color=red];
635[label="215.219.54.53s;454pkt 454fpkt", shape=ellipse, color=green];
933[label="215.219.54.53s;454pkt 454fpkt", shape=triangle, color=blue];
5317[label="215.219.54.53;454pkt 454fpkt", shape=pentagon, color=darkviolet];
7673[label="215.219.54.53;454pkt 454fpkt", shape=invtriangle, color=brown];
9049[label="215.219.54.53;453pkt 453fpkt", shape=invhouse, color=bisque];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.219.54.53:*, *:9898}[55.0661%]&lt;BR/&gt;{215.219.54.53:*, *:5554}[44.9339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.5432%)&lt;BR/&gt; 5554: (22.4568%)&lt;BR/&gt; 3102: (0.220345%)&lt;BR/&gt; 3101: (0.220345%)&lt;BR/&gt; 3094: (0.220345%)&gt;];
}
277--635[label="1;454pkt 454fpkt"];
277--933[label="1;454pkt 454fpkt"];
277--5317[label="1;454pkt 454fpkt"];
277--7673[label="1;454pkt 454fpkt"];
277--9049[label="1;453pkt 453fpkt"];
635--933[label="1;454pkt 454fpkt"];
635--5317[label="1;454pkt 454fpkt"];
635--7673[label="1;454pkt 454fpkt"];
635--9049[label="1;453pkt 453fpkt"];
933--5317[label="1;454pkt 454fpkt"];
933--7673[label="1;454pkt 454fpkt"];
933--9049[label="1;453pkt 453fpkt"];
5317--7673[label="1;454pkt 454fpkt"];
5317--9049[label="1;453pkt 453fpkt"];
7673--9049[label="1;453pkt 453fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.219.54.53"/>
      <filter dst_port="5554" src_ip="215.219.54.53"/>
    </slice>
    <from sec="1089176977" usec="0"/>
    <to sec="1089176981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999004,2.1815,001,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
278[label="73.13.55.53s;74pkt 74fpkt", shape=rectangle, color=red];
636[label="73.13.55.53s;74pkt 74fpkt", shape=ellipse, color=green];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.13.55.53:*, *:5554}[78.3784%]&lt;BR/&gt;{73.13.55.53:*, *:9898}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (39.1892%)&lt;BR/&gt; 9898: (10.8108%)&lt;BR/&gt; 3871: (0.675676%)&lt;BR/&gt; 3860: (0.675676%)&lt;BR/&gt; 3855: (0.675676%)&gt;];
}
278--636[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="73.13.55.53"/>
      <filter dst_port="9898" src_ip="73.13.55.53"/>
    </slice>
    <from sec="1089176989" usec="0"/>
    <to sec="1089176993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
281[label="215.220.32.55s;390pkt 390fpkt", shape=rectangle, color=red];
639[label="215.220.32.55s;390pkt 390fpkt", shape=ellipse, color=green];
936[label="215.220.32.55s;390pkt 390fpkt", shape=triangle, color=blue];
5338[label="215.220.32.55;389pkt 389fpkt", shape=pentagon, color=darkviolet];
7690[label="215.220.32.55;390pkt 390fpkt", shape=invtriangle, color=brown];
9057[label="215.220.32.55;390pkt 390fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.220.32.55:*, *:9898}[50.2564%]&lt;BR/&gt;{215.220.32.55:*, *:5554}[49.7436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1389%)&lt;BR/&gt; 5554: (24.8611%)&lt;BR/&gt; 5000: (0.12826%)&lt;BR/&gt; 4999: (0.12826%)&lt;BR/&gt; 4998: (0.12826%)&gt;];
}
281--639[label="1;390pkt 390fpkt"];
281--936[label="1;390pkt 390fpkt"];
281--5338[label="1;389pkt 389fpkt"];
281--7690[label="1;390pkt 390fpkt"];
281--9057[label="1;390pkt 390fpkt"];
639--936[label="1;390pkt 390fpkt"];
639--5338[label="1;389pkt 389fpkt"];
639--7690[label="1;390pkt 390fpkt"];
639--9057[label="1;390pkt 390fpkt"];
936--5338[label="1;389pkt 389fpkt"];
936--7690[label="1;390pkt 390fpkt"];
936--9057[label="1;390pkt 390fpkt"];
5338--7690[label="1;389pkt 389fpkt"];
5338--9057[label="1;389pkt 389fpkt"];
7690--9057[label="1;390pkt 390fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.220.32.55"/>
      <filter dst_port="5554" src_ip="215.220.32.55"/>
    </slice>
    <from sec="1089176954" usec="0"/>
    <to sec="1089176958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
282[label="208.185.88.61s;505pkt 505fpkt", shape=rectangle, color=red];
640[label="208.185.88.61s;505pkt 505fpkt", shape=ellipse, color=green];
937[label="208.185.88.61s;505pkt 505fpkt", shape=triangle, color=blue];
2338[label="208.185.88.61;s;505pkt 505fpkt", shape=diamond, color=yellow];
5393[label="208.185.88.61;505pkt 505fpkt", shape=pentagon, color=darkviolet];
7726[label="208.185.88.61;505pkt 505fpkt", shape=invtriangle, color=brown];
9074[label="208.185.88.61;504pkt 504fpkt", shape=invhouse, color=bisque];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.185.88.61:*, *:9898}[50.297%]&lt;BR/&gt;{208.185.88.61:*, *:5554}[49.703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1556%)&lt;BR/&gt; 5554: (24.8444%)&lt;BR/&gt; 4864: (0.0990379%)&lt;BR/&gt; 4863: (0.0990379%)&lt;BR/&gt; 4862: (0.0990379%)&gt;];
}
282--640[label="1;505pkt 505fpkt"];
282--937[label="1;505pkt 505fpkt"];
282--2338[label="1;505pkt 505fpkt"];
282--5393[label="1;505pkt 505fpkt"];
282--7726[label="1;505pkt 505fpkt"];
282--9074[label="1;504pkt 504fpkt"];
640--937[label="1;505pkt 505fpkt"];
640--2338[label="1;505pkt 505fpkt"];
640--5393[label="1;505pkt 505fpkt"];
640--7726[label="1;505pkt 505fpkt"];
640--9074[label="1;504pkt 504fpkt"];
937--2338[label="1;505pkt 505fpkt"];
937--5393[label="1;505pkt 505fpkt"];
937--7726[label="1;505pkt 505fpkt"];
937--9074[label="1;504pkt 504fpkt"];
2338--5393[label="1;505pkt 505fpkt"];
2338--7726[label="1;505pkt 505fpkt"];
2338--9074[label="1;504pkt 504fpkt"];
5393--7726[label="1;505pkt 505fpkt"];
5393--9074[label="1;504pkt 504fpkt"];
7726--9074[label="1;504pkt 504fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.185.88.61"/>
      <filter dst_port="5554" src_ip="208.185.88.61"/>
    </slice>
    <from sec="1089176730" usec="0"/>
    <to sec="1089176737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31749,1.98517,001,1 1 1 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
283[label="73.54.162.61s;505pkt 505fpkt", shape=rectangle, color=red];
641[label="73.54.162.61s;505pkt 505fpkt", shape=ellipse, color=green];
938[label="73.54.162.61s;505pkt 505fpkt", shape=triangle, color=blue];
2053[label="73.54.162.61;s;505pkt 505fpkt", shape=diamond, color=yellow];
3752[label="73.54.162.61;s;505pkt 505fpkt", shape=hexagon, color=black];
5397[label="73.54.162.61;505pkt 505fpkt", shape=pentagon, color=darkviolet];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.54.162.61:*, *:9898}[50.297%]&lt;BR/&gt;{73.54.162.61:*, *:5554}[49.703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1485%)&lt;BR/&gt; 5554: (24.8515%)&lt;BR/&gt; 3919: (0.0990099%)&lt;BR/&gt; 3913: (0.0990099%)&lt;BR/&gt; 3912: (0.0990099%)&gt;];
}
283--641[label="1;505pkt 505fpkt"];
283--938[label="1;505pkt 505fpkt"];
283--2053[label="1;505pkt 505fpkt"];
283--3752[label="1;505pkt 505fpkt"];
283--5397[label="1;505pkt 505fpkt"];
641--938[label="1;505pkt 505fpkt"];
641--2053[label="1;505pkt 505fpkt"];
641--3752[label="1;505pkt 505fpkt"];
641--5397[label="1;505pkt 505fpkt"];
938--2053[label="1;505pkt 505fpkt"];
938--3752[label="1;505pkt 505fpkt"];
938--5397[label="1;505pkt 505fpkt"];
2053--3752[label="1;505pkt 505fpkt"];
2053--5397[label="1;505pkt 505fpkt"];
3752--5397[label="1;505pkt 505fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.54.162.61"/>
      <filter dst_port="5554" src_ip="73.54.162.61"/>
    </slice>
    <from sec="1089176606" usec="0"/>
    <to sec="1089176614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,001,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
285[label="215.200.50.62s;151pkt 151fpkt", shape=rectangle, color=red];
643[label="215.200.50.62s;151pkt 151fpkt", shape=ellipse, color=green];
5401[label="215.200.50.62;150pkt 150fpkt", shape=pentagon, color=darkviolet];
7729[label="215.200.50.62;151pkt 151fpkt", shape=invtriangle, color=brown];
9076[label="215.200.50.62;151pkt 151fpkt", shape=invhouse, color=bisque];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.200.50.62:*, *:9898}[86.0927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (43.0371%)&lt;BR/&gt; 5554: (6.96286%)&lt;BR/&gt; 4707: (0.331565%)&lt;BR/&gt; 4706: (0.331565%)&lt;BR/&gt; 4705: (0.331565%)&gt;];
}
285--643[label="1;151pkt 151fpkt"];
285--5401[label="1;150pkt 150fpkt"];
285--7729[label="1;151pkt 151fpkt"];
285--9076[label="1;151pkt 151fpkt"];
643--5401[label="1;150pkt 150fpkt"];
643--7729[label="1;151pkt 151fpkt"];
643--9076[label="1;151pkt 151fpkt"];
5401--7729[label="1;150pkt 150fpkt"];
5401--9076[label="1;150pkt 150fpkt"];
7729--9076[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.200.50.62"/>
    </slice>
    <from sec="1089177285" usec="0"/>
    <to sec="1089177288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
286[label="73.14.67.62s;251pkt 251fpkt", shape=rectangle, color=red];
644[label="73.14.67.62s;251pkt 251fpkt", shape=ellipse, color=green];
940[label="73.14.67.62s;251pkt 251fpkt", shape=triangle, color=blue];
5402[label="73.14.67.62;251pkt 251fpkt", shape=pentagon, color=darkviolet];
7730[label="73.14.67.62;250pkt 250fpkt", shape=invtriangle, color=brown];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.14.67.62:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4202: (0.199362%)&lt;BR/&gt; 4201: (0.199362%)&lt;BR/&gt; 4200: (0.199362%)&lt;BR/&gt; 4199: (0.199362%)&gt;];
}
286--644[label="1;251pkt 251fpkt"];
286--940[label="1;251pkt 251fpkt"];
286--5402[label="1;251pkt 251fpkt"];
286--7730[label="1;250pkt 250fpkt"];
644--940[label="1;251pkt 251fpkt"];
644--5402[label="1;251pkt 251fpkt"];
644--7730[label="1;250pkt 250fpkt"];
940--5402[label="1;251pkt 251fpkt"];
940--7730[label="1;250pkt 250fpkt"];
5402--7730[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.14.67.62"/>
    </slice>
    <from sec="1089177292" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,503,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.169.164.91" dst_port="9898" proto="tcp" src_ip="215.98.176.62" src_port="80"/>
      <filter dst_ip="141.169.164.91" dst_port="5554" proto="tcp" src_ip="215.98.176.62" src_port="80"/>
      <filter dst_ip="141.169.164.91" dst_port="2445" proto="tcp" src_ip="215.98.176.62" src_port="80"/>
      <from sec="1089177262" usec="0"/>
      <to sec="1089177265" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.169.164.91" dst_port="9898" proto="tcp" src_ip="21.10.160.62" src_port="80"/>
      <filter dst_ip="141.169.164.91" dst_port="5554" proto="tcp" src_ip="21.10.160.62" src_port="80"/>
      <filter dst_ip="141.169.164.91" dst_port="2445" proto="tcp" src_ip="21.10.160.62" src_port="80"/>
      <from sec="1089177262" usec="0"/>
      <to sec="1089177265" usec="0"/>
    </slice>
    <from sec="1089177262" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
291[label="215.203.170.64s;378pkt 378fpkt", shape=rectangle, color=red];
647[label="215.203.170.64s;378pkt 378fpkt", shape=ellipse, color=green];
942[label="215.203.170.64s;378pkt 378fpkt", shape=triangle, color=blue];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.203.170.64:*, *:9898}[58.2011%]&lt;BR/&gt;{215.203.170.64:*, *:5554}[41.7989%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (29.1005%)&lt;BR/&gt; 5554: (20.8995%)&lt;BR/&gt; 3623: (0.132275%)&lt;BR/&gt; 3622: (0.132275%)&lt;BR/&gt; 3618: (0.132275%)&gt;];
}
291--647[label="1;378pkt 378fpkt"];
291--942[label="1;378pkt 378fpkt"];
647--942[label="1;378pkt 378fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.203.170.64"/>
      <filter dst_port="5554" src_ip="215.203.170.64"/>
    </slice>
    <from sec="1089176561" usec="0"/>
    <to sec="1089176565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
301[label="18.140.72.70s;475pkt 475fpkt", shape=rectangle, color=red];
656[label="18.140.72.70s;475pkt 475fpkt", shape=ellipse, color=green];
951[label="18.140.72.70s;475pkt 475fpkt", shape=triangle, color=blue];
5519[label="18.140.72.70;474pkt 474fpkt", shape=pentagon, color=darkviolet];
7796[label="18.140.72.70;475pkt 475fpkt", shape=invtriangle, color=brown];
9103[label="18.140.72.70;474pkt 474fpkt", shape=invhouse, color=bisque];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.140.72.70:*, *:9898}[52%]&lt;BR/&gt;{18.140.72.70:*, *:5554}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.9831%)&lt;BR/&gt; 5554: (24.0169%)&lt;BR/&gt; 2431: (0.105337%)&lt;BR/&gt; 2415: (0.105337%)&lt;BR/&gt; 2414: (0.105337%)&gt;];
}
301--656[label="1;475pkt 475fpkt"];
301--951[label="1;475pkt 475fpkt"];
301--5519[label="1;474pkt 474fpkt"];
301--7796[label="1;475pkt 475fpkt"];
301--9103[label="1;474pkt 474fpkt"];
656--951[label="1;475pkt 475fpkt"];
656--5519[label="1;474pkt 474fpkt"];
656--7796[label="1;475pkt 475fpkt"];
656--9103[label="1;474pkt 474fpkt"];
951--5519[label="1;474pkt 474fpkt"];
951--7796[label="1;475pkt 475fpkt"];
951--9103[label="1;474pkt 474fpkt"];
5519--7796[label="1;474pkt 474fpkt"];
5519--9103[label="1;474pkt 474fpkt"];
7796--9103[label="1;474pkt 474fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="18.140.72.70"/>
      <filter dst_port="5554" src_ip="18.140.72.70"/>
    </slice>
    <from sec="1089176813" usec="0"/>
    <to sec="1089176817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
305[label="209.189.105.74s;246pkt 246fpkt", shape=rectangle, color=red];
660[label="209.189.105.74s;246pkt 246fpkt", shape=ellipse, color=green];
954[label="209.189.105.74s;246pkt 246fpkt", shape=triangle, color=blue];
5565[label="209.189.105.74;245pkt 245fpkt", shape=pentagon, color=darkviolet];
7825[label="209.189.105.74;246pkt 246fpkt", shape=invtriangle, color=brown];
9119[label="209.189.105.74;245pkt 245fpkt", shape=invhouse, color=bisque];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.189.105.74:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3862: (0.203528%)&lt;BR/&gt; 3855: (0.203528%)&lt;BR/&gt; 3854: (0.203528%)&lt;BR/&gt; 3847: (0.203528%)&gt;];
}
305--660[label="1;246pkt 246fpkt"];
305--954[label="1;246pkt 246fpkt"];
305--5565[label="1;245pkt 245fpkt"];
305--7825[label="1;246pkt 246fpkt"];
305--9119[label="1;245pkt 245fpkt"];
660--954[label="1;246pkt 246fpkt"];
660--5565[label="1;245pkt 245fpkt"];
660--7825[label="1;246pkt 246fpkt"];
660--9119[label="1;245pkt 245fpkt"];
954--5565[label="1;245pkt 245fpkt"];
954--7825[label="1;246pkt 246fpkt"];
954--9119[label="1;245pkt 245fpkt"];
5565--7825[label="1;245pkt 245fpkt"];
5565--9119[label="1;245pkt 245fpkt"];
7825--9119[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.189.105.74"/>
    </slice>
    <from sec="1089177025" usec="0"/>
    <to sec="1089177029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
307[label="210.252.106.75s;252pkt 252fpkt", shape=rectangle, color=red];
662[label="210.252.106.75s;252pkt 252fpkt", shape=ellipse, color=green];
956[label="210.252.106.75s;252pkt 252fpkt", shape=triangle, color=blue];
5578[label="210.252.106.75;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7831[label="210.252.106.75;252pkt 252fpkt", shape=invtriangle, color=brown];
9123[label="210.252.106.75;252pkt 252fpkt", shape=invhouse, color=bisque];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.252.106.75:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4999: (0.198413%)&lt;BR/&gt; 4998: (0.198413%)&lt;BR/&gt; 4997: (0.198413%)&lt;BR/&gt; 4996: (0.198413%)&gt;];
}
307--662[label="1;252pkt 252fpkt"];
307--956[label="1;252pkt 252fpkt"];
307--5578[label="1;252pkt 252fpkt"];
307--7831[label="1;252pkt 252fpkt"];
307--9123[label="1;252pkt 252fpkt"];
662--956[label="1;252pkt 252fpkt"];
662--5578[label="1;252pkt 252fpkt"];
662--7831[label="1;252pkt 252fpkt"];
662--9123[label="1;252pkt 252fpkt"];
956--5578[label="1;252pkt 252fpkt"];
956--7831[label="1;252pkt 252fpkt"];
956--9123[label="1;252pkt 252fpkt"];
5578--7831[label="1;252pkt 252fpkt"];
5578--9123[label="1;252pkt 252fpkt"];
7831--9123[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="210.252.106.75"/>
    </slice>
    <from sec="1089176570" usec="0"/>
    <to sec="1089176574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
316[label="214.182.8.82s;507pkt 507fpkt", shape=rectangle, color=red];
667[label="214.182.8.82s;507pkt 507fpkt", shape=ellipse, color=green];
960[label="214.182.8.82s;507pkt 507fpkt", shape=triangle, color=blue];
5650[label="214.182.8.82;507pkt 507fpkt", shape=pentagon, color=darkviolet];
7875[label="214.182.8.82;506pkt 506fpkt", shape=invtriangle, color=brown];
9144[label="214.182.8.82;506pkt 506fpkt", shape=invhouse, color=bisque];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.8.82:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4831: (0.0986842%)&lt;BR/&gt; 4828: (0.0986842%)&lt;BR/&gt; 4827: (0.0986842%)&lt;BR/&gt; 4825: (0.0986842%)&gt;];
}
316--667[label="1;507pkt 507fpkt"];
316--960[label="1;507pkt 507fpkt"];
316--5650[label="1;507pkt 507fpkt"];
316--7875[label="1;506pkt 506fpkt"];
316--9144[label="1;506pkt 506fpkt"];
667--960[label="1;507pkt 507fpkt"];
667--5650[label="1;507pkt 507fpkt"];
667--7875[label="1;506pkt 506fpkt"];
667--9144[label="1;506pkt 506fpkt"];
960--5650[label="1;507pkt 507fpkt"];
960--7875[label="1;506pkt 506fpkt"];
960--9144[label="1;506pkt 506fpkt"];
5650--7875[label="1;506pkt 506fpkt"];
5650--9144[label="1;506pkt 506fpkt"];
7875--9144[label="1;506pkt 506fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.182.8.82"/>
    </slice>
    <from sec="1089176465" usec="0"/>
    <to sec="1089176899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
320[label="19.31.192.85s;501pkt 501fpkt", shape=rectangle, color=red];
670[label="19.31.192.85s;501pkt 501fpkt", shape=ellipse, color=green];
963[label="19.31.192.85s;501pkt 501fpkt", shape=triangle, color=blue];
5700[label="19.31.192.85;501pkt 501fpkt", shape=pentagon, color=darkviolet];
7906[label="19.31.192.85;501pkt 501fpkt", shape=invtriangle, color=brown];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.31.192.85:*, *:5554}[50.2994%]&lt;BR/&gt;{19.31.192.85:*, *:9898}[49.7006%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.1497%)&lt;BR/&gt; 9898: (24.8503%)&lt;BR/&gt; 2236: (0.0998004%)&lt;BR/&gt; 2235: (0.0998004%)&lt;BR/&gt; 2234: (0.0998004%)&gt;];
}
320--670[label="1;501pkt 501fpkt"];
320--963[label="1;501pkt 501fpkt"];
320--5700[label="1;501pkt 501fpkt"];
320--7906[label="1;501pkt 501fpkt"];
670--963[label="1;501pkt 501fpkt"];
670--5700[label="1;501pkt 501fpkt"];
670--7906[label="1;501pkt 501fpkt"];
963--5700[label="1;501pkt 501fpkt"];
963--7906[label="1;501pkt 501fpkt"];
5700--7906[label="1;501pkt 501fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="19.31.192.85"/>
      <filter dst_port="9898" src_ip="19.31.192.85"/>
    </slice>
    <from sec="1089177295" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
321[label="208.160.17.86s;442pkt 442fpkt", shape=rectangle, color=red];
671[label="208.160.17.86s;442pkt 442fpkt", shape=ellipse, color=green];
964[label="208.160.17.86s;442pkt 442fpkt", shape=triangle, color=blue];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.160.17.86:*, *:9898}[51.5837%]&lt;BR/&gt;{208.160.17.86:*, *:5554}[48.4163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.7919%)&lt;BR/&gt; 5554: (24.2081%)&lt;BR/&gt; 3259: (0.113122%)&lt;BR/&gt; 3214: (0.113122%)&lt;BR/&gt; 3213: (0.113122%)&gt;];
}
321--671[label="1;442pkt 442fpkt"];
321--964[label="1;442pkt 442fpkt"];
671--964[label="1;442pkt 442fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.160.17.86"/>
      <filter dst_port="5554" src_ip="208.160.17.86"/>
    </slice>
    <from sec="1089177204" usec="0"/>
    <to sec="1089177208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
323[label="215.203.6.87s;225pkt 225fpkt", shape=rectangle, color=red];
673[label="215.203.6.87s;225pkt 225fpkt", shape=ellipse, color=green];
966[label="215.203.6.87s;225pkt 225fpkt", shape=triangle, color=blue];
5713[label="215.203.6.87;224pkt 224fpkt", shape=pentagon, color=darkviolet];
7917[label="215.203.6.87;225pkt 225fpkt", shape=invtriangle, color=brown];
9163[label="215.203.6.87;224pkt 224fpkt", shape=invhouse, color=bisque];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.203.6.87:*, *:9898}[64%]&lt;BR/&gt;{215.203.6.87:*, *:5554}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (31.9733%)&lt;BR/&gt; 5554: (18.0267%)&lt;BR/&gt; 60293: (0.222552%)&lt;BR/&gt; 60290: (0.222552%)&lt;BR/&gt; 60289: (0.222552%)&gt;];
}
323--673[label="1;225pkt 225fpkt"];
323--966[label="1;225pkt 225fpkt"];
323--1225[label="0.00444444;1pkt 1fpkt"];
323--1677[label="0.00444444;1pkt 1fpkt"];
323--2139[label="0.00581395;1pkt 1fpkt"];
323--3593[label="0.00444444;1pkt 1fpkt"];
323--3996[label="0.00943396;1pkt 1fpkt"];
323--5713[label="1;224pkt 224fpkt"];
323--7917[label="1;225pkt 225fpkt"];
323--9163[label="1;224pkt 224fpkt"];
673--966[label="1;225pkt 225fpkt"];
673--1225[label="0.00444444;1pkt 1fpkt"];
673--1677[label="0.00444444;1pkt 1fpkt"];
673--2139[label="0.00581395;1pkt 1fpkt"];
673--3593[label="0.00444444;1pkt 1fpkt"];
673--3996[label="0.00943396;1pkt 1fpkt"];
673--5713[label="1;224pkt 224fpkt"];
673--7917[label="1;225pkt 225fpkt"];
673--9163[label="1;224pkt 224fpkt"];
966--1225[label="0.00444444;1pkt 1fpkt"];
966--1677[label="0.00444444;1pkt 1fpkt"];
966--2139[label="0.00581395;1pkt 1fpkt"];
966--3593[label="0.00444444;1pkt 1fpkt"];
966--3996[label="0.00943396;1pkt 1fpkt"];
966--5713[label="1;224pkt 224fpkt"];
966--7917[label="1;225pkt 225fpkt"];
966--9163[label="1;224pkt 224fpkt"];
5713--7917[label="1;224pkt 224fpkt"];
5713--9163[label="1;224pkt 224fpkt"];
7917--9163[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.203.6.87"/>
      <filter dst_port="5554" src_ip="215.203.6.87"/>
    </slice>
    <from sec="1089176530" usec="0"/>
    <to sec="1089176535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
325[label="215.173.178.87s;503pkt 503fpkt", shape=rectangle, color=red];
675[label="215.173.178.87s;503pkt 503fpkt", shape=ellipse, color=green];
968[label="215.173.178.87s;503pkt 503fpkt", shape=triangle, color=blue];
3298[label="215.173.178.87;s;503pkt 503fpkt", shape=diamond, color=yellow];
5723[label="215.173.178.87;503pkt 503fpkt", shape=pentagon, color=darkviolet];
7922[label="215.173.178.87;502pkt 502fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.173.178.87:*, *:9898}[50.0994%]&lt;BR/&gt;{215.173.178.87:*, *:5554}[49.9006%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.058%)&lt;BR/&gt; 5554: (24.942%)&lt;BR/&gt; 4851: (0.0994365%)&lt;BR/&gt; 4850: (0.0994365%)&lt;BR/&gt; 4849: (0.0994365%)&gt;];
}
325--675[label="1;503pkt 503fpkt"];
325--968[label="1;503pkt 503fpkt"];
325--3298[label="1;503pkt 503fpkt"];
325--4630[label="0.00795229;4pkt 4fpkt"];
325--5723[label="1;503pkt 503fpkt"];
325--7922[label="1;502pkt 502fpkt"];
675--968[label="1;503pkt 503fpkt"];
675--3298[label="1;503pkt 503fpkt"];
675--4630[label="0.00795229;4pkt 4fpkt"];
675--5723[label="1;503pkt 503fpkt"];
675--7922[label="1;502pkt 502fpkt"];
968--3298[label="1;503pkt 503fpkt"];
968--4630[label="0.00795229;4pkt 4fpkt"];
968--5723[label="1;503pkt 503fpkt"];
968--7922[label="1;502pkt 502fpkt"];
3298--4630[label="0.00795229;4pkt 4fpkt"];
3298--5723[label="1;503pkt 503fpkt"];
3298--7922[label="1;502pkt 502fpkt"];
5723--7922[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.173.178.87"/>
      <filter dst_port="5554" src_ip="215.173.178.87"/>
    </slice>
    <from sec="1089177121" usec="0"/>
    <to sec="1089177126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
326[label="208.136.6.88s;429pkt 429fpkt", shape=rectangle, color=red];
676[label="208.136.6.88s;429pkt 429fpkt", shape=ellipse, color=green];
969[label="208.136.6.88s;429pkt 429fpkt", shape=triangle, color=blue];
5726[label="208.136.6.88;430pkt 430fpkt", shape=pentagon, color=darkviolet];
7925[label="208.136.6.88;429pkt 429fpkt", shape=invtriangle, color=brown];
9167[label="208.136.6.88;430pkt 430fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.136.6.88:*, *:5554}[54.4186%]&lt;BR/&gt;{208.136.6.88:*, *:9898}[45.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (27.2321%)&lt;BR/&gt; 9898: (22.7096%)&lt;BR/&gt; 3329: (0.11646%)&lt;BR/&gt; 3328: (0.11646%)&lt;BR/&gt; 3327: (0.11646%)&gt;];
}
326--676[label="1;429pkt 429fpkt"];
326--969[label="1;429pkt 429fpkt"];
326--5726[label="1;429pkt 429fpkt"];
326--7925[label="0.997669;428pkt 428fpkt"];
326--9167[label="1;429pkt 429fpkt"];
676--969[label="1;429pkt 429fpkt"];
676--5726[label="1;429pkt 429fpkt"];
676--7925[label="0.997669;428pkt 428fpkt"];
676--9167[label="1;429pkt 429fpkt"];
969--5726[label="1;429pkt 429fpkt"];
969--7925[label="0.997669;428pkt 428fpkt"];
969--9167[label="1;429pkt 429fpkt"];
5726--7925[label="1;429pkt 429fpkt"];
5726--9167[label="1;430pkt 430fpkt"];
7925--9167[label="1;429pkt 429fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.136.6.88"/>
      <filter dst_port="9898" src_ip="208.136.6.88"/>
    </slice>
    <from sec="1089176868" usec="0"/>
    <to sec="1089177250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
327[label="1.211.233.88s;514pkt 514fpkt", shape=rectangle, color=red];
677[label="1.211.233.88s;514pkt 514fpkt", shape=ellipse, color=green];
970[label="1.211.233.88s;251pkt 251fpkt", shape=triangle, color=blue];
5737[label="1.211.233.88;513pkt 513fpkt", shape=pentagon, color=darkviolet];
7930[label="1.211.233.88;513pkt 513fpkt", shape=invtriangle, color=brown];
9171[label="1.211.233.88;514pkt 514fpkt", shape=invhouse, color=bisque];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.211.233.88:*, *:9898}[56.0311%]&lt;BR/&gt;{1.211.233.88:*, *:5554}[43.9689%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.9532%)&lt;BR/&gt; 5554: (22.0468%)&lt;BR/&gt; 4156: (0.195105%)&lt;BR/&gt; 4152: (0.195105%)&lt;BR/&gt; 4148: (0.195105%)&gt;];
}
327--677[label="1;514pkt 514fpkt"];
327--970[label="1;251pkt 251fpkt"];
327--5737[label="1;513pkt 513fpkt"];
327--7930[label="1;513pkt 513fpkt"];
327--9171[label="1;514pkt 514fpkt"];
677--970[label="1;251pkt 251fpkt"];
677--5737[label="1;513pkt 513fpkt"];
677--7930[label="1;513pkt 513fpkt"];
677--9171[label="1;514pkt 514fpkt"];
970--5737[label="1;251pkt 251fpkt"];
970--7930[label="1;251pkt 251fpkt"];
970--9171[label="1;251pkt 251fpkt"];
5737--7930[label="1;513pkt 513fpkt"];
5737--9171[label="1;513pkt 513fpkt"];
7930--9171[label="1;513pkt 513fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="1.211.233.88"/>
      <filter dst_port="5554" src_ip="1.211.233.88"/>
    </slice>
    <from sec="1089176597" usec="0"/>
    <to sec="1089176818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
329[label="215.194.16.91s;250pkt 250fpkt", shape=rectangle, color=red];
680[label="215.194.16.91s;250pkt 250fpkt", shape=ellipse, color=green];
973[label="215.194.16.91s;250pkt 250fpkt", shape=triangle, color=blue];
5759[label="215.194.16.91;249pkt 249fpkt", shape=pentagon, color=darkviolet];
7944[label="215.194.16.91;249pkt 249fpkt", shape=invtriangle, color=brown];
9181[label="215.194.16.91;250pkt 250fpkt", shape=invhouse, color=bisque];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.194.16.91:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3372: (0.200267%)&lt;BR/&gt; 3371: (0.200267%)&lt;BR/&gt; 3370: (0.200267%)&lt;BR/&gt; 3369: (0.200267%)&gt;];
}
329--680[label="1;250pkt 250fpkt"];
329--973[label="1;250pkt 250fpkt"];
329--5759[label="1;249pkt 249fpkt"];
329--7944[label="1;249pkt 249fpkt"];
329--9181[label="1;250pkt 250fpkt"];
680--973[label="1;250pkt 250fpkt"];
680--5759[label="1;249pkt 249fpkt"];
680--7944[label="1;249pkt 249fpkt"];
680--9181[label="1;250pkt 250fpkt"];
973--5759[label="1;249pkt 249fpkt"];
973--7944[label="1;249pkt 249fpkt"];
973--9181[label="1;250pkt 250fpkt"];
5759--7944[label="1;249pkt 249fpkt"];
5759--9181[label="1;249pkt 249fpkt"];
7944--9181[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.194.16.91"/>
    </slice>
    <from sec="1089176954" usec="0"/>
    <to sec="1089176958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
332[label="208.171.77.95s;496pkt 496fpkt", shape=rectangle, color=red];
681[label="208.171.77.95s;496pkt 496fpkt", shape=ellipse, color=green];
974[label="208.171.77.95s;496pkt 496fpkt", shape=triangle, color=blue];
5792[label="208.171.77.95;495pkt 495fpkt", shape=pentagon, color=darkviolet];
7966[label="208.171.77.95;496pkt 496fpkt", shape=invtriangle, color=brown];
9193[label="208.171.77.95;496pkt 496fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.171.77.95:*, *:9898}[50.2016%]&lt;BR/&gt;{208.171.77.95:*, *:5554}[49.7984%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1092%)&lt;BR/&gt; 5554: (24.8908%)&lt;BR/&gt; 4196: (0.10084%)&lt;BR/&gt; 4195: (0.10084%)&lt;BR/&gt; 4194: (0.10084%)&gt;];
}
332--681[label="1;496pkt 496fpkt"];
332--974[label="1;496pkt 496fpkt"];
332--5792[label="1;495pkt 495fpkt"];
332--7966[label="1;496pkt 496fpkt"];
332--9193[label="1;496pkt 496fpkt"];
681--974[label="1;496pkt 496fpkt"];
681--5792[label="1;495pkt 495fpkt"];
681--7966[label="1;496pkt 496fpkt"];
681--9193[label="1;496pkt 496fpkt"];
974--5792[label="1;495pkt 495fpkt"];
974--7966[label="1;496pkt 496fpkt"];
974--9193[label="1;496pkt 496fpkt"];
5792--7966[label="1;495pkt 495fpkt"];
5792--9193[label="1;495pkt 495fpkt"];
7966--9193[label="1;496pkt 496fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.171.77.95"/>
      <filter dst_port="5554" src_ip="208.171.77.95"/>
    </slice>
    <from sec="1089176923" usec="0"/>
    <to sec="1089176930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16039,2.01257,001,1 1 1 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
334[label="215.213.192.96s;1001pkt 1001fpkt", shape=rectangle, color=red];
683[label="215.213.192.96s;1001pkt 1001fpkt", shape=ellipse, color=green];
976[label="215.213.192.96s;922pkt 922fpkt", shape=triangle, color=blue];
3050[label="215.213.192.96;s;1016pkt 1016fpkt", shape=diamond, color=yellow];
5810[label="215.213.192.96;1015pkt 1015fpkt", shape=pentagon, color=darkviolet];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.213.192.96:*, *:445}[25%]&lt;BR/&gt;{215.213.192.96:*, *:1023}[25%]&lt;BR/&gt;{215.213.192.96:*, *:5554}[25%]&lt;BR/&gt;{215.213.192.96:*, *:9898}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (12.8153%)&lt;BR/&gt; 5554: (12.8052%)&lt;BR/&gt; 445: (12.6539%)&lt;BR/&gt; 9898: (11.7255%)&lt;BR/&gt; 4952: (0.0504541%)&gt;];
}
334--683[label="1;1001pkt 1001fpkt"];
334--976[label="1;922pkt 922fpkt"];
334--3050[label="1;1001pkt 1001fpkt"];
334--5810[label="0.999001;1000pkt 1000fpkt"];
683--976[label="1;922pkt 922fpkt"];
683--3050[label="1;1001pkt 1001fpkt"];
683--5810[label="0.999001;1000pkt 1000fpkt"];
976--3050[label="1;922pkt 922fpkt"];
976--5810[label="0.998915;921pkt 921fpkt"];
3050--5810[label="1;1015pkt 1015fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.213.192.96"/>
      <filter dst_port="5554" src_ip="215.213.192.96"/>
      <filter dst_port="1023" src_ip="215.213.192.96"/>
      <filter dst_port="445" src_ip="215.213.192.96"/>
    </slice>
    <from sec="1089176998" usec="0"/>
    <to sec="1089177118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
337[label="17.30.4.99s;496pkt 496fpkt", shape=rectangle, color=red];
685[label="17.30.4.99s;496pkt 496fpkt", shape=ellipse, color=green];
978[label="17.30.4.99s;496pkt 496fpkt", shape=triangle, color=blue];
5833[label="17.30.4.99;496pkt 496fpkt", shape=pentagon, color=darkviolet];
7988[label="17.30.4.99;496pkt 496fpkt", shape=invtriangle, color=brown];
9203[label="17.30.4.99;495pkt 495fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.30.4.99:*, *:9898}[50.8065%]&lt;BR/&gt;{17.30.4.99:*, *:5554}[49.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.4118%)&lt;BR/&gt; 5554: (24.5882%)&lt;BR/&gt; 2013: (0.10084%)&lt;BR/&gt; 2012: (0.10084%)&lt;BR/&gt; 2011: (0.10084%)&gt;];
}
337--685[label="1;496pkt 496fpkt"];
337--978[label="1;496pkt 496fpkt"];
337--5833[label="1;496pkt 496fpkt"];
337--7988[label="1;496pkt 496fpkt"];
337--9203[label="1;495pkt 495fpkt"];
685--978[label="1;496pkt 496fpkt"];
685--5833[label="1;496pkt 496fpkt"];
685--7988[label="1;496pkt 496fpkt"];
685--9203[label="1;495pkt 495fpkt"];
978--5833[label="1;496pkt 496fpkt"];
978--7988[label="1;496pkt 496fpkt"];
978--9203[label="1;495pkt 495fpkt"];
5833--7988[label="1;496pkt 496fpkt"];
5833--9203[label="1;495pkt 495fpkt"];
7988--9203[label="1;495pkt 495fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="17.30.4.99"/>
      <filter dst_port="5554" src_ip="17.30.4.99"/>
    </slice>
    <from sec="1089177124" usec="0"/>
    <to sec="1089177130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
338[label="208.166.8.99s;498pkt 498fpkt", shape=rectangle, color=red];
686[label="208.166.8.99s;498pkt 498fpkt", shape=ellipse, color=green];
979[label="208.166.8.99s;498pkt 498fpkt", shape=triangle, color=blue];
5834[label="208.166.8.99;498pkt 498fpkt", shape=pentagon, color=darkviolet];
7989[label="208.166.8.99;498pkt 498fpkt", shape=invtriangle, color=brown];
9204[label="208.166.8.99;498pkt 498fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.8.99:*, *:9898}[50.6024%]&lt;BR/&gt;{208.166.8.99:*, *:5554}[49.3976%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.3012%)&lt;BR/&gt; 5554: (24.6988%)&lt;BR/&gt; 2185: (0.100402%)&lt;BR/&gt; 2042: (0.100402%)&lt;BR/&gt; 2041: (0.100402%)&gt;];
}
338--686[label="1;498pkt 498fpkt"];
338--979[label="1;498pkt 498fpkt"];
338--5834[label="1;498pkt 498fpkt"];
338--7989[label="1;498pkt 498fpkt"];
338--9204[label="1;498pkt 498fpkt"];
686--979[label="1;498pkt 498fpkt"];
686--5834[label="1;498pkt 498fpkt"];
686--7989[label="1;498pkt 498fpkt"];
686--9204[label="1;498pkt 498fpkt"];
979--5834[label="1;498pkt 498fpkt"];
979--7989[label="1;498pkt 498fpkt"];
979--9204[label="1;498pkt 498fpkt"];
5834--7989[label="1;498pkt 498fpkt"];
5834--9204[label="1;498pkt 498fpkt"];
7989--9204[label="1;498pkt 498fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.166.8.99"/>
      <filter dst_port="5554" src_ip="208.166.8.99"/>
    </slice>
    <from sec="1089177054" usec="0"/>
    <to sec="1089177058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
339[label="215.220.81.99s;462pkt 462fpkt", shape=rectangle, color=red];
687[label="215.220.81.99s;462pkt 462fpkt", shape=ellipse, color=green];
980[label="215.220.81.99s;462pkt 462fpkt", shape=triangle, color=blue];
5837[label="215.220.81.99;461pkt 461fpkt", shape=pentagon, color=darkviolet];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.220.81.99:*, *:9898}[51.9481%]&lt;BR/&gt;{215.220.81.99:*, *:5554}[48.0519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.9881%)&lt;BR/&gt; 5554: (24.0119%)&lt;BR/&gt; 2750: (0.108284%)&lt;BR/&gt; 2748: (0.108284%)&lt;BR/&gt; 2746: (0.108284%)&gt;];
}
339--687[label="1;462pkt 462fpkt"];
339--980[label="1;462pkt 462fpkt"];
339--5837[label="1;461pkt 461fpkt"];
687--980[label="1;462pkt 462fpkt"];
687--5837[label="1;461pkt 461fpkt"];
980--5837[label="1;461pkt 461fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.220.81.99"/>
      <filter dst_port="5554" src_ip="215.220.81.99"/>
    </slice>
    <from sec="1089176588" usec="0"/>
    <to sec="1089176593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
342[label="215.188.196.101s;492pkt 492fpkt", shape=rectangle, color=red];
690[label="215.188.196.101s;492pkt 492fpkt", shape=ellipse, color=green];
983[label="215.188.196.101s;492pkt 492fpkt", shape=triangle, color=blue];
5864[label="215.188.196.101;492pkt 492fpkt", shape=pentagon, color=darkviolet];
8011[label="215.188.196.101;491pkt 491fpkt", shape=invtriangle, color=brown];
9216[label="215.188.196.101;492pkt 492fpkt", shape=invhouse, color=bisque];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.196.101:*, *:9898}[50.2033%]&lt;BR/&gt;{215.188.196.101:*, *:5554}[49.7967%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1101%)&lt;BR/&gt; 5554: (24.8899%)&lt;BR/&gt; 4941: (0.10166%)&lt;BR/&gt; 4940: (0.10166%)&lt;BR/&gt; 4932: (0.10166%)&gt;];
}
342--690[label="1;492pkt 492fpkt"];
342--983[label="1;492pkt 492fpkt"];
342--5864[label="1;492pkt 492fpkt"];
342--8011[label="1;491pkt 491fpkt"];
342--9216[label="1;492pkt 492fpkt"];
690--983[label="1;492pkt 492fpkt"];
690--5864[label="1;492pkt 492fpkt"];
690--8011[label="1;491pkt 491fpkt"];
690--9216[label="1;492pkt 492fpkt"];
983--5864[label="1;492pkt 492fpkt"];
983--8011[label="1;491pkt 491fpkt"];
983--9216[label="1;492pkt 492fpkt"];
5864--8011[label="1;491pkt 491fpkt"];
5864--9216[label="1;492pkt 492fpkt"];
8011--9216[label="1;491pkt 491fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.196.101"/>
      <filter dst_port="5554" src_ip="215.188.196.101"/>
    </slice>
    <from sec="1089177275" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
346[label="208.160.43.105s;493pkt 493fpkt", shape=rectangle, color=red];
693[label="208.160.43.105s;493pkt 493fpkt", shape=ellipse, color=green];
986[label="208.160.43.105s;493pkt 493fpkt", shape=triangle, color=blue];
5893[label="208.160.43.105;492pkt 492fpkt", shape=pentagon, color=darkviolet];
8028[label="208.160.43.105;493pkt 493fpkt", shape=invtriangle, color=brown];
9225[label="208.160.43.105;492pkt 492fpkt", shape=invhouse, color=bisque];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.160.43.105:*, *:9898}[51.1156%]&lt;BR/&gt;{208.160.43.105:*, *:5554}[48.8844%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.5751%)&lt;BR/&gt; 5554: (24.4249%)&lt;BR/&gt; 4936: (0.101488%)&lt;BR/&gt; 4925: (0.101488%)&lt;BR/&gt; 4924: (0.101488%)&gt;];
}
346--693[label="1;493pkt 493fpkt"];
346--986[label="1;493pkt 493fpkt"];
346--5893[label="1;492pkt 492fpkt"];
346--8028[label="1;493pkt 493fpkt"];
346--9225[label="1;492pkt 492fpkt"];
693--986[label="1;493pkt 493fpkt"];
693--5893[label="1;492pkt 492fpkt"];
693--8028[label="1;493pkt 493fpkt"];
693--9225[label="1;492pkt 492fpkt"];
986--5893[label="1;492pkt 492fpkt"];
986--8028[label="1;493pkt 493fpkt"];
986--9225[label="1;492pkt 492fpkt"];
5893--8028[label="1;492pkt 492fpkt"];
5893--9225[label="1;492pkt 492fpkt"];
8028--9225[label="1;492pkt 492fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.160.43.105"/>
      <filter dst_port="5554" src_ip="208.160.43.105"/>
    </slice>
    <from sec="1089176976" usec="0"/>
    <to sec="1089176978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999004,2.1815,010,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
347[label="220.205.145.105s;949pkt 949fpkt", shape=rectangle, color=red];
694[label="220.205.145.105s;515pkt 515fpkt", shape=ellipse, color=green];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.205.145.105:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3539: (0.102459%)&lt;BR/&gt; 3538: (0.102459%)&lt;BR/&gt; 3537: (0.102459%)&lt;BR/&gt; 3536: (0.102459%)&gt;];
}
347--694[label="1;515pkt 515fpkt"];
347--1382[label="0.004329;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="220.205.145.105"/>
    </slice>
    <from sec="1089177211" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,010,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
348[label="73.47.223.105s;254pkt 254fpkt", shape=rectangle, color=red];
695[label="73.47.223.105s;254pkt 254fpkt", shape=ellipse, color=green];
987[label="73.47.223.105s;254pkt 254fpkt", shape=triangle, color=blue];
1764[label="73.47.223.105;s;256pkt 256fpkt", shape=diamond, color=yellow];
5899[label="73.47.223.105;256pkt 256fpkt", shape=pentagon, color=darkviolet];
8030[label="73.47.223.105;255pkt 255fpkt", shape=invtriangle, color=brown];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.47.223.105:*, *:139}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.8038%)&lt;BR/&gt; 0: (0.392413%)&lt;BR/&gt; 16128: (0.196207%)&lt;BR/&gt; 16127: (0.196207%)&lt;BR/&gt; 16126: (0.196207%)&gt;];
}
348--695[label="1;254pkt 254fpkt"];
348--987[label="1;254pkt 254fpkt"];
348--1764[label="1;254pkt 254fpkt"];
348--5899[label="1;254pkt 254fpkt"];
348--8030[label="0.996063;253pkt 253fpkt"];
695--987[label="1;254pkt 254fpkt"];
695--1764[label="1;254pkt 254fpkt"];
695--5899[label="1;254pkt 254fpkt"];
695--8030[label="0.996063;253pkt 253fpkt"];
987--1764[label="1;254pkt 254fpkt"];
987--5899[label="1;254pkt 254fpkt"];
987--8030[label="0.996063;253pkt 253fpkt"];
1764--5899[label="1;256pkt 256fpkt"];
1764--8030[label="1;255pkt 255fpkt"];
5899--8030[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="73.47.223.105"/>
    </slice>
    <from sec="1089176517" usec="0"/>
    <to sec="1089176545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
349[label="17.28.5.106s;502pkt 502fpkt", shape=rectangle, color=red];
696[label="17.28.5.106s;375pkt 375fpkt", shape=ellipse, color=green];
988[label="17.28.5.106s;375pkt 375fpkt", shape=triangle, color=blue];
2336[label="17.28.5.106;s;502pkt 502fpkt", shape=diamond, color=yellow];
5901[label="17.28.5.106;502pkt 502fpkt", shape=pentagon, color=darkviolet];
8032[label="17.28.5.106;502pkt 502fpkt", shape=invtriangle, color=brown];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.28.5.106:*, *:5554}[50%]&lt;BR/&gt;{17.28.5.106:*, *:9898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.417%)&lt;BR/&gt; 9898: (24.583%)&lt;BR/&gt; 1508: (0.108774%)&lt;BR/&gt; 1507: (0.108774%)&lt;BR/&gt; 1506: (0.108774%)&gt;];
}
349--696[label="1;375pkt 375fpkt"];
349--988[label="1;375pkt 375fpkt"];
349--2336[label="1;502pkt 502fpkt"];
349--5901[label="1;502pkt 502fpkt"];
349--8032[label="1;502pkt 502fpkt"];
696--988[label="1;375pkt 375fpkt"];
696--2336[label="1;375pkt 375fpkt"];
696--5901[label="1;375pkt 375fpkt"];
696--8032[label="1;375pkt 375fpkt"];
988--2336[label="1;375pkt 375fpkt"];
988--5901[label="1;375pkt 375fpkt"];
988--8032[label="1;375pkt 375fpkt"];
2336--5901[label="1;502pkt 502fpkt"];
2336--8032[label="1;502pkt 502fpkt"];
5901--8032[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="17.28.5.106"/>
      <filter dst_port="5554" src_ip="17.28.5.106"/>
    </slice>
    <from sec="1089176728" usec="0"/>
    <to sec="1089176739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
350[label="209.190.11.109s;238pkt 238fpkt", shape=rectangle, color=red];
697[label="209.190.11.109s;238pkt 238fpkt", shape=ellipse, color=green];
989[label="209.190.11.109s;238pkt 238fpkt", shape=triangle, color=blue];
5925[label="209.190.11.109;238pkt 238fpkt", shape=pentagon, color=darkviolet];
8046[label="209.190.11.109;238pkt 238fpkt", shape=invtriangle, color=brown];
9231[label="209.190.11.109;238pkt 238fpkt", shape=invhouse, color=bisque];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.190.11.109:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4978: (0.210084%)&lt;BR/&gt; 4973: (0.210084%)&lt;BR/&gt; 4971: (0.210084%)&lt;BR/&gt; 4961: (0.210084%)&gt;];
}
350--697[label="1;238pkt 238fpkt"];
350--989[label="1;238pkt 238fpkt"];
350--5925[label="1;238pkt 238fpkt"];
350--8046[label="1;238pkt 238fpkt"];
350--9231[label="1;238pkt 238fpkt"];
697--989[label="1;238pkt 238fpkt"];
697--5925[label="1;238pkt 238fpkt"];
697--8046[label="1;238pkt 238fpkt"];
697--9231[label="1;238pkt 238fpkt"];
989--5925[label="1;238pkt 238fpkt"];
989--8046[label="1;238pkt 238fpkt"];
989--9231[label="1;238pkt 238fpkt"];
5925--8046[label="1;238pkt 238fpkt"];
5925--9231[label="1;238pkt 238fpkt"];
8046--9231[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.190.11.109"/>
    </slice>
    <from sec="1089177152" usec="0"/>
    <to sec="1089177155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
351[label="214.161.173.109s;400pkt 400fpkt", shape=rectangle, color=red];
698[label="214.161.173.109s;400pkt 400fpkt", shape=ellipse, color=green];
990[label="214.161.173.109s;400pkt 400fpkt", shape=triangle, color=blue];
5932[label="214.161.173.109;434pkt 434fpkt", shape=pentagon, color=darkviolet];
8050[label="214.161.173.109;433pkt 433fpkt", shape=invtriangle, color=brown];
9234[label="214.161.173.109;433pkt 433fpkt", shape=invhouse, color=bisque];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.173.109:*, *:9898}[58.2949%]&lt;BR/&gt;{214.161.173.109:*, *:5554}[41.7051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (30.36%)&lt;BR/&gt; 5554: (19.64%)&lt;BR/&gt; 4999: (0.12%)&lt;BR/&gt; 4996: (0.12%)&lt;BR/&gt; 4995: (0.12%)&gt;];
}
351--698[label="1;400pkt 400fpkt"];
351--990[label="1;400pkt 400fpkt"];
351--5932[label="1;400pkt 400fpkt"];
351--8050[label="0.9975;399pkt 399fpkt"];
351--9234[label="0.9975;399pkt 399fpkt"];
698--990[label="1;400pkt 400fpkt"];
698--5932[label="1;400pkt 400fpkt"];
698--8050[label="0.9975;399pkt 399fpkt"];
698--9234[label="0.9975;399pkt 399fpkt"];
990--5932[label="1;400pkt 400fpkt"];
990--8050[label="0.9975;399pkt 399fpkt"];
990--9234[label="0.9975;399pkt 399fpkt"];
5932--8050[label="1;433pkt 433fpkt"];
5932--9234[label="1;433pkt 433fpkt"];
8050--9234[label="1;433pkt 433fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.173.109"/>
      <filter dst_port="5554" src_ip="214.161.173.109"/>
    </slice>
    <from sec="1089176662" usec="0"/>
    <to sec="1089176668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
352[label="73.148.42.110s;225pkt 225fpkt", shape=rectangle, color=red];
699[label="73.148.42.110s;225pkt 225fpkt", shape=ellipse, color=green];
991[label="73.148.42.110s;225pkt 225fpkt", shape=triangle, color=blue];
5937[label="73.148.42.110;224pkt 224fpkt", shape=pentagon, color=darkviolet];
8053[label="73.148.42.110;225pkt 225fpkt", shape=invtriangle, color=brown];
9236[label="73.148.42.110;225pkt 225fpkt", shape=invhouse, color=bisque];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.148.42.110:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4224: (0.222387%)&lt;BR/&gt; 4118: (0.222387%)&lt;BR/&gt; 4111: (0.222387%)&lt;BR/&gt; 4094: (0.222387%)&gt;];
}
352--699[label="1;225pkt 225fpkt"];
352--991[label="1;225pkt 225fpkt"];
352--5937[label="1;224pkt 224fpkt"];
352--8053[label="1;225pkt 225fpkt"];
352--9236[label="1;225pkt 225fpkt"];
699--991[label="1;225pkt 225fpkt"];
699--5937[label="1;224pkt 224fpkt"];
699--8053[label="1;225pkt 225fpkt"];
699--9236[label="1;225pkt 225fpkt"];
991--5937[label="1;224pkt 224fpkt"];
991--8053[label="1;225pkt 225fpkt"];
991--9236[label="1;225pkt 225fpkt"];
5937--8053[label="1;224pkt 224fpkt"];
5937--9236[label="1;224pkt 224fpkt"];
8053--9236[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.148.42.110"/>
    </slice>
    <from sec="1089176971" usec="0"/>
    <to sec="1089176974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
185[label="215.203.180.111s;899pkt 899fpkt", shape=rectangle, color=red];
701[label="215.203.180.111s;899pkt 899fpkt", shape=ellipse, color=green];
993[label="215.203.180.111s;899pkt 899fpkt", shape=triangle, color=blue];
5945[label="215.203.180.111;898pkt 898fpkt", shape=pentagon, color=darkviolet];
8059[label="215.203.180.111;799pkt 799fpkt", shape=invtriangle, color=brown];
9240[label="215.203.180.111;799pkt 799fpkt", shape=invhouse, color=bisque];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.203.180.111:*, *:9898}[55.3949%]&lt;BR/&gt;{215.203.180.111:*, *:5554}[44.6051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.7695%)&lt;BR/&gt; 5554: (21.2305%)&lt;BR/&gt; 2449: (0.0962835%)&lt;BR/&gt; 2433: (0.0962835%)&lt;BR/&gt; 2417: (0.0962835%)&gt;];
}
185--701[label="1;899pkt 899fpkt"];
185--993[label="1;899pkt 899fpkt"];
185--5945[label="1;898pkt 898fpkt"];
185--8059[label="1;799pkt 799fpkt"];
185--9240[label="1;799pkt 799fpkt"];
701--993[label="1;899pkt 899fpkt"];
701--5945[label="1;898pkt 898fpkt"];
701--8059[label="1;799pkt 799fpkt"];
701--9240[label="1;799pkt 799fpkt"];
993--5945[label="1;898pkt 898fpkt"];
993--8059[label="1;799pkt 799fpkt"];
993--9240[label="1;799pkt 799fpkt"];
5945--8059[label="1;799pkt 799fpkt"];
5945--9240[label="1;799pkt 799fpkt"];
8059--9240[label="1;799pkt 799fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.203.180.111"/>
      <filter dst_port="5554" src_ip="215.203.180.111"/>
    </slice>
    <from sec="1089176900" usec="0"/>
    <to sec="1089177239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
354[label="215.200.33.112s;362pkt 362fpkt", shape=rectangle, color=red];
702[label="215.200.33.112s;362pkt 362fpkt", shape=ellipse, color=green];
994[label="215.200.33.112s;362pkt 362fpkt", shape=triangle, color=blue];
5948[label="215.200.33.112;362pkt 362fpkt", shape=pentagon, color=darkviolet];
8061[label="215.200.33.112;362pkt 362fpkt", shape=invtriangle, color=brown];
9242[label="215.200.33.112;362pkt 362fpkt", shape=invhouse, color=bisque];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.200.33.112:*, *:9898}[66.5746%]&lt;BR/&gt;{215.200.33.112:*, *:5554}[33.4254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (33.2873%)&lt;BR/&gt; 5554: (16.7127%)&lt;BR/&gt; 4392: (0.138122%)&lt;BR/&gt; 4391: (0.138122%)&lt;BR/&gt; 4390: (0.138122%)&gt;];
}
354--702[label="1;362pkt 362fpkt"];
354--994[label="1;362pkt 362fpkt"];
354--1895[label="0.00865801;2pkt 2fpkt"];
354--5948[label="1;362pkt 362fpkt"];
354--8061[label="1;362pkt 362fpkt"];
354--9242[label="1;362pkt 362fpkt"];
702--994[label="1;362pkt 362fpkt"];
702--1895[label="0.00865801;2pkt 2fpkt"];
702--5948[label="1;362pkt 362fpkt"];
702--8061[label="1;362pkt 362fpkt"];
702--9242[label="1;362pkt 362fpkt"];
994--1895[label="0.00865801;2pkt 2fpkt"];
994--5948[label="1;362pkt 362fpkt"];
994--8061[label="1;362pkt 362fpkt"];
994--9242[label="1;362pkt 362fpkt"];
5948--8061[label="1;362pkt 362fpkt"];
5948--9242[label="1;362pkt 362fpkt"];
8061--9242[label="1;362pkt 362fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.200.33.112"/>
      <filter dst_port="5554" src_ip="215.200.33.112"/>
    </slice>
    <from sec="1089177219" usec="0"/>
    <to sec="1089177224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26034,2.11771,001,1 1 1 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
356[label="73.130.49.117s;572pkt 572fpkt", shape=rectangle, color=red];
704[label="73.130.49.117s;572pkt 572fpkt", shape=ellipse, color=green];
996[label="73.130.49.117s;572pkt 572fpkt", shape=triangle, color=blue];
1483[label="73.130.49.117;s;572pkt 572fpkt", shape=diamond, color=yellow];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.130.49.117:*, *:1023}[25.3497%]&lt;BR/&gt;{73.130.49.117:*, *:5554}[25.3497%]&lt;BR/&gt;{73.130.49.117:*, *:9898}[25.1748%]&lt;BR/&gt;{73.130.49.117:*, *:445}[24.1259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (12.6748%)&lt;BR/&gt; 1023: (12.6748%)&lt;BR/&gt; 9898: (12.5874%)&lt;BR/&gt; 445: (12.0629%)&lt;BR/&gt; 5000: (0.0874126%)&gt;];
}
356--704[label="1;572pkt 572fpkt"];
356--996[label="1;572pkt 572fpkt"];
356--1483[label="1;572pkt 572fpkt"];
704--996[label="1;572pkt 572fpkt"];
704--1483[label="1;572pkt 572fpkt"];
996--1483[label="1;572pkt 572fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="73.130.49.117"/>
      <filter dst_port="1023" src_ip="73.130.49.117"/>
      <filter dst_port="9898" src_ip="73.130.49.117"/>
      <filter dst_port="445" src_ip="73.130.49.117"/>
    </slice>
    <from sec="1089176473" usec="0"/>
    <to sec="1089176482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
357[label="214.186.92.117s;241pkt 241fpkt", shape=rectangle, color=red];
705[label="214.186.92.117s;241pkt 241fpkt", shape=ellipse, color=green];
997[label="214.186.92.117s;241pkt 241fpkt", shape=triangle, color=blue];
6001[label="214.186.92.117;240pkt 240fpkt", shape=pentagon, color=darkviolet];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.186.92.117:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3340: (0.207684%)&lt;BR/&gt; 3339: (0.207684%)&lt;BR/&gt; 3338: (0.207684%)&lt;BR/&gt; 3337: (0.207684%)&gt;];
}
357--705[label="1;241pkt 241fpkt"];
357--997[label="1;241pkt 241fpkt"];
357--6001[label="1;240pkt 240fpkt"];
705--997[label="1;241pkt 241fpkt"];
705--6001[label="1;240pkt 240fpkt"];
997--6001[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.186.92.117"/>
    </slice>
    <from sec="1089176604" usec="0"/>
    <to sec="1089176608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
358[label="208.188.186.117s;418pkt 418fpkt", shape=rectangle, color=red];
706[label="208.188.186.117s;418pkt 418fpkt", shape=ellipse, color=green];
998[label="208.188.186.117s;418pkt 418fpkt", shape=triangle, color=blue];
6005[label="208.188.186.117;418pkt 418fpkt", shape=pentagon, color=darkviolet];
8092[label="208.188.186.117;418pkt 418fpkt", shape=invtriangle, color=brown];
9254[label="208.188.186.117;418pkt 418fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.188.186.117:*, *:9898}[57.177%]&lt;BR/&gt;{208.188.186.117:*, *:5554}[42.823%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.5885%)&lt;BR/&gt; 5554: (21.4115%)&lt;BR/&gt; 4883: (0.119617%)&lt;BR/&gt; 4882: (0.119617%)&lt;BR/&gt; 4881: (0.119617%)&gt;];
}
358--706[label="1;418pkt 418fpkt"];
358--998[label="1;418pkt 418fpkt"];
358--6005[label="1;418pkt 418fpkt"];
358--8092[label="1;418pkt 418fpkt"];
358--9254[label="1;418pkt 418fpkt"];
706--998[label="1;418pkt 418fpkt"];
706--6005[label="1;418pkt 418fpkt"];
706--8092[label="1;418pkt 418fpkt"];
706--9254[label="1;418pkt 418fpkt"];
998--6005[label="1;418pkt 418fpkt"];
998--8092[label="1;418pkt 418fpkt"];
998--9254[label="1;418pkt 418fpkt"];
6005--8092[label="1;418pkt 418fpkt"];
6005--9254[label="1;418pkt 418fpkt"];
8092--9254[label="1;418pkt 418fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.188.186.117"/>
      <filter dst_port="5554" src_ip="208.188.186.117"/>
    </slice>
    <from sec="1089176518" usec="0"/>
    <to sec="1089176523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
361[label="194.133.42.122s;363pkt 363fpkt", shape=rectangle, color=red];
709[label="194.133.42.122s;363pkt 363fpkt", shape=ellipse, color=green];
1000[label="194.133.42.122s;363pkt 363fpkt", shape=triangle, color=blue];
6032[label="194.133.42.122;363pkt 363fpkt", shape=pentagon, color=darkviolet];
8110[label="194.133.42.122;362pkt 362fpkt", shape=invtriangle, color=brown];
9263[label="194.133.42.122;363pkt 363fpkt", shape=invhouse, color=bisque];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.133.42.122:*, *:5554}[59.5041%]&lt;BR/&gt;{194.133.42.122:*, *:9898}[40.4959%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (29.7428%)&lt;BR/&gt; 9898: (20.2572%)&lt;BR/&gt; 3856: (0.137804%)&lt;BR/&gt; 3855: (0.137804%)&lt;BR/&gt; 3854: (0.137804%)&gt;];
}
361--709[label="1;363pkt 363fpkt"];
361--1000[label="1;363pkt 363fpkt"];
361--6032[label="1;363pkt 363fpkt"];
361--8110[label="1;362pkt 362fpkt"];
361--9263[label="1;363pkt 363fpkt"];
709--1000[label="1;363pkt 363fpkt"];
709--6032[label="1;363pkt 363fpkt"];
709--8110[label="1;362pkt 362fpkt"];
709--9263[label="1;363pkt 363fpkt"];
1000--6032[label="1;363pkt 363fpkt"];
1000--8110[label="1;362pkt 362fpkt"];
1000--9263[label="1;363pkt 363fpkt"];
6032--8110[label="1;362pkt 362fpkt"];
6032--9263[label="1;363pkt 363fpkt"];
8110--9263[label="1;362pkt 362fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="194.133.42.122"/>
      <filter dst_port="9898" src_ip="194.133.42.122"/>
    </slice>
    <from sec="1089176854" usec="0"/>
    <to sec="1089176859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
363[label="215.188.216.126s;252pkt 252fpkt", shape=rectangle, color=red];
711[label="215.188.216.126s;252pkt 252fpkt", shape=ellipse, color=green];
1002[label="215.188.216.126s;252pkt 252fpkt", shape=triangle, color=blue];
6064[label="215.188.216.126;252pkt 252fpkt", shape=pentagon, color=darkviolet];
8128[label="215.188.216.126;251pkt 251fpkt", shape=invtriangle, color=brown];
9276[label="215.188.216.126;251pkt 251fpkt", shape=invhouse, color=bisque];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.216.126:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4002: (0.198675%)&lt;BR/&gt; 4001: (0.198675%)&lt;BR/&gt; 4000: (0.198675%)&lt;BR/&gt; 3999: (0.198675%)&gt;];
}
363--711[label="1;252pkt 252fpkt"];
363--1002[label="1;252pkt 252fpkt"];
363--6064[label="1;252pkt 252fpkt"];
363--8128[label="1;251pkt 251fpkt"];
363--9276[label="1;251pkt 251fpkt"];
711--1002[label="1;252pkt 252fpkt"];
711--6064[label="1;252pkt 252fpkt"];
711--8128[label="1;251pkt 251fpkt"];
711--9276[label="1;251pkt 251fpkt"];
1002--6064[label="1;252pkt 252fpkt"];
1002--8128[label="1;251pkt 251fpkt"];
1002--9276[label="1;251pkt 251fpkt"];
6064--8128[label="1;251pkt 251fpkt"];
6064--9276[label="1;251pkt 251fpkt"];
8128--9276[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.216.126"/>
    </slice>
    <from sec="1089176534" usec="0"/>
    <to sec="1089176537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.169.112.53" dst_port="135" proto="tcp" src_ip="1.52.186.127" src_port="80"/>
      <from sec="1089177182" usec="0"/>
      <to sec="1089177280" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.169.112.53" dst_port="135" proto="tcp" src_ip="198.21.150.127" src_port="80"/>
      <from sec="1089177275" usec="0"/>
      <to sec="1089177279" usec="0"/>
    </slice>
    <from sec="1089177182" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
367[label="215.216.208.128s;491pkt 491fpkt", shape=rectangle, color=red];
716[label="215.216.208.128s;491pkt 491fpkt", shape=ellipse, color=green];
1006[label="215.216.208.128s;491pkt 491fpkt", shape=triangle, color=blue];
6079[label="215.216.208.128;491pkt 491fpkt", shape=pentagon, color=darkviolet];
8137[label="215.216.208.128;491pkt 491fpkt", shape=invtriangle, color=brown];
9281[label="215.216.208.128;490pkt 490fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.216.208.128:*, *:9898}[51.5275%]&lt;BR/&gt;{215.216.208.128:*, *:5554}[48.4725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.7725%)&lt;BR/&gt; 5554: (24.2275%)&lt;BR/&gt; 4049: (0.101868%)&lt;BR/&gt; 4048: (0.101868%)&lt;BR/&gt; 4047: (0.101868%)&gt;];
}
367--716[label="1;491pkt 491fpkt"];
367--1006[label="1;491pkt 491fpkt"];
367--6079[label="1;491pkt 491fpkt"];
367--8137[label="1;491pkt 491fpkt"];
367--9281[label="1;490pkt 490fpkt"];
716--1006[label="1;491pkt 491fpkt"];
716--6079[label="1;491pkt 491fpkt"];
716--8137[label="1;491pkt 491fpkt"];
716--9281[label="1;490pkt 490fpkt"];
1006--6079[label="1;491pkt 491fpkt"];
1006--8137[label="1;491pkt 491fpkt"];
1006--9281[label="1;490pkt 490fpkt"];
6079--8137[label="1;491pkt 491fpkt"];
6079--9281[label="1;490pkt 490fpkt"];
8137--9281[label="1;490pkt 490fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.216.208.128"/>
      <filter dst_port="5554" src_ip="215.216.208.128"/>
    </slice>
    <from sec="1089177156" usec="0"/>
    <to sec="1089177159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
374[label="215.165.154.134s;486pkt 486fpkt", shape=rectangle, color=red];
723[label="215.165.154.134s;486pkt 486fpkt", shape=ellipse, color=green];
1012[label="215.165.154.134s;486pkt 486fpkt", shape=triangle, color=blue];
6152[label="215.165.154.134;486pkt 486fpkt", shape=pentagon, color=darkviolet];
8184[label="215.165.154.134;486pkt 486fpkt", shape=invtriangle, color=brown];
9303[label="215.165.154.134;486pkt 486fpkt", shape=invhouse, color=bisque];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.165.154.134:*, *:9898}[52.2634%]&lt;BR/&gt;{215.165.154.134:*, *:5554}[47.7366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (26.1317%)&lt;BR/&gt; 5554: (23.8683%)&lt;BR/&gt; 1931: (0.102881%)&lt;BR/&gt; 1926: (0.102881%)&lt;BR/&gt; 1903: (0.102881%)&gt;];
}
374--723[label="1;486pkt 486fpkt"];
374--1012[label="1;486pkt 486fpkt"];
374--6152[label="1;486pkt 486fpkt"];
374--8184[label="1;486pkt 486fpkt"];
374--9303[label="1;486pkt 486fpkt"];
723--1012[label="1;486pkt 486fpkt"];
723--6152[label="1;486pkt 486fpkt"];
723--8184[label="1;486pkt 486fpkt"];
723--9303[label="1;486pkt 486fpkt"];
1012--6152[label="1;486pkt 486fpkt"];
1012--8184[label="1;486pkt 486fpkt"];
1012--9303[label="1;486pkt 486fpkt"];
6152--8184[label="1;486pkt 486fpkt"];
6152--9303[label="1;486pkt 486fpkt"];
8184--9303[label="1;486pkt 486fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.165.154.134"/>
      <filter dst_port="5554" src_ip="215.165.154.134"/>
    </slice>
    <from sec="1089177179" usec="0"/>
    <to sec="1089177183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
375[label="214.187.215.134s;311pkt 311fpkt", shape=rectangle, color=red];
724[label="214.187.215.134s;311pkt 311fpkt", shape=ellipse, color=green];
1013[label="214.187.215.134s;311pkt 311fpkt", shape=triangle, color=blue];
6155[label="214.187.215.134;310pkt 310fpkt", shape=pentagon, color=darkviolet];
8187[label="214.187.215.134;311pkt 311fpkt", shape=invtriangle, color=brown];
9306[label="214.187.215.134;310pkt 310fpkt", shape=invhouse, color=bisque];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.187.215.134:*, *:9898}[80.7074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (40.397%)&lt;BR/&gt; 5554: (9.603%)&lt;BR/&gt; 2424: (0.160944%)&lt;BR/&gt; 2422: (0.160944%)&lt;BR/&gt; 2420: (0.160944%)&gt;];
}
375--724[label="1;311pkt 311fpkt"];
375--1013[label="1;311pkt 311fpkt"];
375--6155[label="1;310pkt 310fpkt"];
375--8187[label="1;311pkt 311fpkt"];
375--9306[label="1;310pkt 310fpkt"];
724--1013[label="1;311pkt 311fpkt"];
724--6155[label="1;310pkt 310fpkt"];
724--8187[label="1;311pkt 311fpkt"];
724--9306[label="1;310pkt 310fpkt"];
1013--6155[label="1;310pkt 310fpkt"];
1013--8187[label="1;311pkt 311fpkt"];
1013--9306[label="1;310pkt 310fpkt"];
6155--8187[label="1;310pkt 310fpkt"];
6155--9306[label="1;310pkt 310fpkt"];
8187--9306[label="1;310pkt 310fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.187.215.134"/>
    </slice>
    <from sec="1089176963" usec="0"/>
    <to sec="1089176966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
377[label="73.13.44.135s;488pkt 488fpkt", shape=rectangle, color=red];
726[label="73.13.44.135s;488pkt 488fpkt", shape=ellipse, color=green];
1014[label="73.13.44.135s;436pkt 436fpkt", shape=triangle, color=blue];
6160[label="73.13.44.135;488pkt 488fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.13.44.135:*, *:9898}[51.0246%]&lt;BR/&gt;{73.13.44.135:*, *:5554}[48.9754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (26.2105%)&lt;BR/&gt; 5554: (23.7895%)&lt;BR/&gt; 4567: (0.105263%)&lt;BR/&gt; 4565: (0.105263%)&lt;BR/&gt; 4563: (0.105263%)&gt;];
}
377--726[label="1;488pkt 488fpkt"];
377--1014[label="1;436pkt 436fpkt"];
377--6160[label="1;488pkt 488fpkt"];
726--1014[label="1;436pkt 436fpkt"];
726--6160[label="1;488pkt 488fpkt"];
1014--6160[label="1;436pkt 436fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.13.44.135"/>
      <filter dst_port="5554" src_ip="73.13.44.135"/>
    </slice>
    <from sec="1089176600" usec="0"/>
    <to sec="1089176605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
381[label="208.164.58.141s;414pkt 414fpkt", shape=rectangle, color=red];
729[label="208.164.58.141s;414pkt 414fpkt", shape=ellipse, color=green];
1016[label="208.164.58.141s;414pkt 414fpkt", shape=triangle, color=blue];
6211[label="208.164.58.141;413pkt 413fpkt", shape=pentagon, color=darkviolet];
8221[label="208.164.58.141;414pkt 414fpkt", shape=invtriangle, color=brown];
9326[label="208.164.58.141;413pkt 413fpkt", shape=invhouse, color=bisque];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.164.58.141:*, *:5554}[51.2077%]&lt;BR/&gt;{208.164.58.141:*, *:9898}[48.7923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.5842%)&lt;BR/&gt; 9898: (24.4158%)&lt;BR/&gt; 4981: (0.483481%)&lt;BR/&gt; 4771: (0.483481%)&lt;BR/&gt; 4378: (0.483481%)&gt;];
}
381--729[label="1;414pkt 414fpkt"];
381--1016[label="1;414pkt 414fpkt"];
381--6211[label="1;413pkt 413fpkt"];
381--8221[label="1;414pkt 414fpkt"];
381--9326[label="1;413pkt 413fpkt"];
729--1016[label="1;414pkt 414fpkt"];
729--6211[label="1;413pkt 413fpkt"];
729--8221[label="1;414pkt 414fpkt"];
729--9326[label="1;413pkt 413fpkt"];
1016--6211[label="1;413pkt 413fpkt"];
1016--8221[label="1;414pkt 414fpkt"];
1016--9326[label="1;413pkt 413fpkt"];
6211--8221[label="1;413pkt 413fpkt"];
6211--9326[label="1;413pkt 413fpkt"];
8221--9326[label="1;413pkt 413fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.164.58.141"/>
      <filter dst_port="9898" src_ip="208.164.58.141"/>
    </slice>
    <from sec="1089176934" usec="0"/>
    <to sec="1089176939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
383[label="214.177.21.142s;504pkt 504fpkt", shape=rectangle, color=red];
731[label="214.177.21.142s;504pkt 504fpkt", shape=ellipse, color=green];
1018[label="214.177.21.142s;504pkt 504fpkt", shape=triangle, color=blue];
2049[label="214.177.21.142;s;504pkt 504fpkt", shape=diamond, color=yellow];
6220[label="214.177.21.142;503pkt 503fpkt", shape=pentagon, color=darkviolet];
8226[label="214.177.21.142;503pkt 503fpkt", shape=invtriangle, color=brown];
9329[label="214.177.21.142;503pkt 503fpkt", shape=invhouse, color=bisque];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.177.21.142:*, *:5554}[50%]&lt;BR/&gt;{214.177.21.142:*, *:9898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0213%)&lt;BR/&gt; 5554: (24.9787%)&lt;BR/&gt; 4202: (0.0992908%)&lt;BR/&gt; 4198: (0.0992908%)&lt;BR/&gt; 4197: (0.0992908%)&gt;];
}
383--731[label="1;504pkt 504fpkt"];
383--1018[label="1;504pkt 504fpkt"];
383--2049[label="1;504pkt 504fpkt"];
383--6220[label="1;503pkt 503fpkt"];
383--8226[label="1;503pkt 503fpkt"];
383--9329[label="1;503pkt 503fpkt"];
731--1018[label="1;504pkt 504fpkt"];
731--2049[label="1;504pkt 504fpkt"];
731--6220[label="1;503pkt 503fpkt"];
731--8226[label="1;503pkt 503fpkt"];
731--9329[label="1;503pkt 503fpkt"];
1018--2049[label="1;504pkt 504fpkt"];
1018--6220[label="1;503pkt 503fpkt"];
1018--8226[label="1;503pkt 503fpkt"];
1018--9329[label="1;503pkt 503fpkt"];
2049--6220[label="1;503pkt 503fpkt"];
2049--8226[label="1;503pkt 503fpkt"];
2049--9329[label="1;503pkt 503fpkt"];
6220--8226[label="1;503pkt 503fpkt"];
6220--9329[label="1;503pkt 503fpkt"];
8226--9329[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.177.21.142"/>
      <filter dst_port="5554" src_ip="214.177.21.142"/>
    </slice>
    <from sec="1089176604" usec="0"/>
    <to sec="1089176607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
395[label="215.160.170.151s;253pkt 253fpkt", shape=rectangle, color=red];
741[label="215.160.170.151s;253pkt 253fpkt", shape=ellipse, color=green];
1027[label="215.160.170.151s;253pkt 253fpkt", shape=triangle, color=blue];
6320[label="215.160.170.151;253pkt 253fpkt", shape=pentagon, color=darkviolet];
8280[label="215.160.170.151;253pkt 253fpkt", shape=invtriangle, color=brown];
9361[label="215.160.170.151;252pkt 252fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.160.170.151:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4546: (0.197759%)&lt;BR/&gt; 4531: (0.197759%)&lt;BR/&gt; 4520: (0.197759%)&lt;BR/&gt; 4491: (0.197759%)&gt;];
}
395--741[label="1;253pkt 253fpkt"];
395--1027[label="1;253pkt 253fpkt"];
395--6320[label="1;253pkt 253fpkt"];
395--8280[label="1;253pkt 253fpkt"];
395--9361[label="1;252pkt 252fpkt"];
741--1027[label="1;253pkt 253fpkt"];
741--6320[label="1;253pkt 253fpkt"];
741--8280[label="1;253pkt 253fpkt"];
741--9361[label="1;252pkt 252fpkt"];
1027--6320[label="1;253pkt 253fpkt"];
1027--8280[label="1;253pkt 253fpkt"];
1027--9361[label="1;252pkt 252fpkt"];
6320--8280[label="1;253pkt 253fpkt"];
6320--9361[label="1;252pkt 252fpkt"];
8280--9361[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.160.170.151"/>
    </slice>
    <from sec="1089176962" usec="0"/>
    <to sec="1089176966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,001,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
399[label="214.161.181.155s;358pkt 358fpkt", shape=rectangle, color=red];
744[label="214.161.181.155s;233pkt 233fpkt", shape=ellipse, color=green];
6370[label="214.161.181.155;358pkt 358fpkt", shape=pentagon, color=darkviolet];
8303[label="214.161.181.155;358pkt 358fpkt", shape=invtriangle, color=brown];
9381[label="214.161.181.155;357pkt 357fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.181.155:*, *:9898}[69.2737%]&lt;BR/&gt;{214.161.181.155:*, *:5554}[30.7263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (36.8089%)&lt;BR/&gt; 5554: (13.1911%)&lt;BR/&gt; 2415: (0.15024%)&lt;BR/&gt; 2410: (0.15024%)&lt;BR/&gt; 2407: (0.15024%)&gt;];
}
399--744[label="1;233pkt 233fpkt"];
399--6370[label="1;358pkt 358fpkt"];
399--8303[label="1;358pkt 358fpkt"];
399--9381[label="1;357pkt 357fpkt"];
744--6370[label="1;233pkt 233fpkt"];
744--8303[label="1;233pkt 233fpkt"];
744--9381[label="1;233pkt 233fpkt"];
6370--8303[label="1;358pkt 358fpkt"];
6370--9381[label="1;357pkt 357fpkt"];
8303--9381[label="1;357pkt 357fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.181.155"/>
      <filter dst_port="5554" src_ip="214.161.181.155"/>
    </slice>
    <from sec="1089176887" usec="0"/>
    <to sec="1089176892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
402[label="73.4.196.156s;504pkt 504fpkt", shape=rectangle, color=red];
747[label="73.4.196.156s;504pkt 504fpkt", shape=ellipse, color=green];
1032[label="73.4.196.156s;504pkt 504fpkt", shape=triangle, color=blue];
6381[label="73.4.196.156;504pkt 504fpkt", shape=pentagon, color=darkviolet];
8311[label="73.4.196.156;503pkt 503fpkt", shape=invtriangle, color=brown];
9384[label="73.4.196.156;503pkt 503fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.4.196.156:*, *:5554}[50%]&lt;BR/&gt;{73.4.196.156:*, *:9898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0165%)&lt;BR/&gt; 5554: (24.9835%)&lt;BR/&gt; 3314: (0.198544%)&lt;BR/&gt; 3003: (0.198544%)&lt;BR/&gt; 2982: (0.198544%)&gt;];
}
402--747[label="1;504pkt 504fpkt"];
402--1032[label="1;504pkt 504fpkt"];
402--6381[label="1;504pkt 504fpkt"];
402--8311[label="1;503pkt 503fpkt"];
402--9384[label="1;503pkt 503fpkt"];
747--1032[label="1;504pkt 504fpkt"];
747--6381[label="1;504pkt 504fpkt"];
747--8311[label="1;503pkt 503fpkt"];
747--9384[label="1;503pkt 503fpkt"];
1032--6381[label="1;504pkt 504fpkt"];
1032--8311[label="1;503pkt 503fpkt"];
1032--9384[label="1;503pkt 503fpkt"];
6381--8311[label="1;503pkt 503fpkt"];
6381--9384[label="1;503pkt 503fpkt"];
8311--9384[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.4.196.156"/>
      <filter dst_port="5554" src_ip="73.4.196.156"/>
    </slice>
    <from sec="1089177132" usec="0"/>
    <to sec="1089177141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
405[label="214.190.195.160s;219pkt 219fpkt", shape=rectangle, color=red];
750[label="214.190.195.160s;219pkt 219fpkt", shape=ellipse, color=green];
1035[label="214.190.195.160s;219pkt 219fpkt", shape=triangle, color=blue];
6413[label="214.190.195.160;219pkt 219fpkt", shape=pentagon, color=darkviolet];
8331[label="214.190.195.160;218pkt 218fpkt", shape=invtriangle, color=brown];
9393[label="214.190.195.160;219pkt 219fpkt", shape=invhouse, color=bisque];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.195.160:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3742: (0.228484%)&lt;BR/&gt; 3741: (0.228484%)&lt;BR/&gt; 3740: (0.228484%)&lt;BR/&gt; 3739: (0.228484%)&gt;];
}
405--750[label="1;219pkt 219fpkt"];
405--1035[label="1;219pkt 219fpkt"];
405--6413[label="1;219pkt 219fpkt"];
405--8331[label="1;218pkt 218fpkt"];
405--9393[label="1;219pkt 219fpkt"];
750--1035[label="1;219pkt 219fpkt"];
750--6413[label="1;219pkt 219fpkt"];
750--8331[label="1;218pkt 218fpkt"];
750--9393[label="1;219pkt 219fpkt"];
1035--6413[label="1;219pkt 219fpkt"];
1035--8331[label="1;218pkt 218fpkt"];
1035--9393[label="1;219pkt 219fpkt"];
6413--8331[label="1;218pkt 218fpkt"];
6413--9393[label="1;219pkt 219fpkt"];
8331--9393[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.195.160"/>
    </slice>
    <from sec="1089176803" usec="0"/>
    <to sec="1089176805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
411[label="208.169.93.163s;499pkt 499fpkt", shape=rectangle, color=red];
754[label="208.169.93.163s;499pkt 499fpkt", shape=ellipse, color=green];
1039[label="208.169.93.163s;499pkt 499fpkt", shape=triangle, color=blue];
6438[label="208.169.93.163;499pkt 499fpkt", shape=pentagon, color=darkviolet];
8346[label="208.169.93.163;498pkt 498fpkt", shape=invtriangle, color=brown];
9400[label="208.169.93.163;498pkt 498fpkt", shape=invhouse, color=bisque];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.169.93.163:*, *:9898}[50.3006%]&lt;BR/&gt;{208.169.93.163:*, *:5554}[49.6994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1671%)&lt;BR/&gt; 5554: (24.8329%)&lt;BR/&gt; 2323: (0.100267%)&lt;BR/&gt; 2321: (0.100267%)&lt;BR/&gt; 2320: (0.100267%)&gt;];
}
411--754[label="1;499pkt 499fpkt"];
411--1039[label="1;499pkt 499fpkt"];
411--6438[label="1;499pkt 499fpkt"];
411--8346[label="1;498pkt 498fpkt"];
411--9400[label="1;498pkt 498fpkt"];
754--1039[label="1;499pkt 499fpkt"];
754--6438[label="1;499pkt 499fpkt"];
754--8346[label="1;498pkt 498fpkt"];
754--9400[label="1;498pkt 498fpkt"];
1039--6438[label="1;499pkt 499fpkt"];
1039--8346[label="1;498pkt 498fpkt"];
1039--9400[label="1;498pkt 498fpkt"];
6438--8346[label="1;498pkt 498fpkt"];
6438--9400[label="1;498pkt 498fpkt"];
8346--9400[label="1;498pkt 498fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.169.93.163"/>
      <filter dst_port="5554" src_ip="208.169.93.163"/>
    </slice>
    <from sec="1089177205" usec="0"/>
    <to sec="1089177209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
412[label="220.250.154.165s;239pkt 239fpkt", shape=rectangle, color=red];
755[label="220.250.154.165s;239pkt 239fpkt", shape=ellipse, color=green];
1040[label="220.250.154.165s;239pkt 239fpkt", shape=triangle, color=blue];
6460[label="220.250.154.165;239pkt 239fpkt", shape=pentagon, color=darkviolet];
8359[label="220.250.154.165;239pkt 239fpkt", shape=invtriangle, color=brown];
9406[label="220.250.154.165;239pkt 239fpkt", shape=invhouse, color=bisque];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.154.165:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2186: (0.209205%)&lt;BR/&gt; 2185: (0.209205%)&lt;BR/&gt; 2184: (0.209205%)&lt;BR/&gt; 2183: (0.209205%)&gt;];
}
412--755[label="1;239pkt 239fpkt"];
412--1040[label="1;239pkt 239fpkt"];
412--6460[label="1;239pkt 239fpkt"];
412--8359[label="1;239pkt 239fpkt"];
412--9406[label="1;239pkt 239fpkt"];
755--1040[label="1;239pkt 239fpkt"];
755--6460[label="1;239pkt 239fpkt"];
755--8359[label="1;239pkt 239fpkt"];
755--9406[label="1;239pkt 239fpkt"];
1040--6460[label="1;239pkt 239fpkt"];
1040--8359[label="1;239pkt 239fpkt"];
1040--9406[label="1;239pkt 239fpkt"];
6460--8359[label="1;239pkt 239fpkt"];
6460--9406[label="1;239pkt 239fpkt"];
8359--9406[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="220.250.154.165"/>
    </slice>
    <from sec="1089176922" usec="0"/>
    <to sec="1089176927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
417[label="73.4.222.170s;497pkt 497fpkt", shape=rectangle, color=red];
760[label="73.4.222.170s;497pkt 497fpkt", shape=ellipse, color=green];
1045[label="73.4.222.170s;497pkt 497fpkt", shape=triangle, color=blue];
6508[label="73.4.222.170;497pkt 497fpkt", shape=pentagon, color=darkviolet];
8387[label="73.4.222.170;496pkt 496fpkt", shape=invtriangle, color=brown];
9418[label="73.4.222.170;496pkt 496fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.4.222.170:*, *:5554}[50.1006%]&lt;BR/&gt;{73.4.222.170:*, *:9898}[49.8994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.0336%)&lt;BR/&gt; 9898: (24.9664%)&lt;BR/&gt; 4631: (0.100671%)&lt;BR/&gt; 4619: (0.100671%)&lt;BR/&gt; 4618: (0.100671%)&gt;];
}
417--760[label="1;497pkt 497fpkt"];
417--1045[label="1;497pkt 497fpkt"];
417--6508[label="1;497pkt 497fpkt"];
417--8387[label="1;496pkt 496fpkt"];
417--9418[label="1;496pkt 496fpkt"];
760--1045[label="1;497pkt 497fpkt"];
760--6508[label="1;497pkt 497fpkt"];
760--8387[label="1;496pkt 496fpkt"];
760--9418[label="1;496pkt 496fpkt"];
1045--6508[label="1;497pkt 497fpkt"];
1045--8387[label="1;496pkt 496fpkt"];
1045--9418[label="1;496pkt 496fpkt"];
6508--8387[label="1;496pkt 496fpkt"];
6508--9418[label="1;496pkt 496fpkt"];
8387--9418[label="1;496pkt 496fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="73.4.222.170"/>
      <filter dst_port="9898" src_ip="73.4.222.170"/>
    </slice>
    <from sec="1089177254" usec="0"/>
    <to sec="1089177258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
419[label="72.33.149.172s;250pkt 250fpkt", shape=rectangle, color=red];
762[label="72.33.149.172s;250pkt 250fpkt", shape=ellipse, color=green];
1047[label="72.33.149.172s;250pkt 250fpkt", shape=triangle, color=blue];
6532[label="72.33.149.172;250pkt 250fpkt", shape=pentagon, color=darkviolet];
8403[label="72.33.149.172;250pkt 250fpkt", shape=invtriangle, color=brown];
9426[label="72.33.149.172;250pkt 250fpkt", shape=invhouse, color=bisque];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.33.149.172:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2272: (0.2%)&lt;BR/&gt; 2271: (0.2%)&lt;BR/&gt; 2269: (0.2%)&lt;BR/&gt; 2268: (0.2%)&gt;];
}
419--762[label="1;250pkt 250fpkt"];
419--1047[label="1;250pkt 250fpkt"];
419--6532[label="1;250pkt 250fpkt"];
419--8403[label="1;250pkt 250fpkt"];
419--9426[label="1;250pkt 250fpkt"];
762--1047[label="1;250pkt 250fpkt"];
762--6532[label="1;250pkt 250fpkt"];
762--8403[label="1;250pkt 250fpkt"];
762--9426[label="1;250pkt 250fpkt"];
1047--6532[label="1;250pkt 250fpkt"];
1047--8403[label="1;250pkt 250fpkt"];
1047--9426[label="1;250pkt 250fpkt"];
6532--8403[label="1;250pkt 250fpkt"];
6532--9426[label="1;250pkt 250fpkt"];
8403--9426[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="72.33.149.172"/>
    </slice>
    <from sec="1089176593" usec="0"/>
    <to sec="1089176597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
421[label="208.160.146.173s;383pkt 383fpkt", shape=rectangle, color=red];
763[label="208.160.146.173s;357pkt 357fpkt", shape=ellipse, color=green];
1048[label="208.160.146.173s;357pkt 357fpkt", shape=triangle, color=blue];
6539[label="208.160.146.173;491pkt 491fpkt", shape=pentagon, color=darkviolet];
8406[label="208.160.146.173;490pkt 490fpkt", shape=invtriangle, color=brown];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.160.146.173:*, *:9898}[30.3462%]&lt;BR/&gt;{208.160.146.173:*, *:445}[26.0692%]&lt;BR/&gt;{208.160.146.173:*, *:5554}[21.9959%]&lt;BR/&gt;{208.160.146.173:*, *:1023}[21.5886%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (17.9259%)&lt;BR/&gt; 445: (15.3994%)&lt;BR/&gt; 1023: (11.4774%)&lt;BR/&gt; 5554: (5.19731%)&lt;BR/&gt; 54287: (0.120308%)&gt;];
}
421--763[label="1;357pkt 357fpkt"];
421--1048[label="1;357pkt 357fpkt"];
421--6539[label="1;383pkt 383fpkt"];
421--8406[label="0.997389;382pkt 382fpkt"];
763--1048[label="1;357pkt 357fpkt"];
763--6539[label="1;357pkt 357fpkt"];
763--8406[label="0.997199;356pkt 356fpkt"];
1048--6539[label="1;357pkt 357fpkt"];
1048--8406[label="0.997199;356pkt 356fpkt"];
6539--8406[label="1;490pkt 490fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.160.146.173"/>
      <filter dst_port="445" src_ip="208.160.146.173"/>
      <filter dst_port="5554" src_ip="208.160.146.173"/>
      <filter dst_port="1023" src_ip="208.160.146.173"/>
    </slice>
    <from sec="1089177006" usec="0"/>
    <to sec="1089177012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
423[label="209.5.38.175s;507pkt 507fpkt", shape=rectangle, color=red];
765[label="209.5.38.175s;507pkt 507fpkt", shape=ellipse, color=green];
1050[label="209.5.38.175s;507pkt 507fpkt", shape=triangle, color=blue];
3503[label="209.5.38.175;s;507pkt 507fpkt", shape=diamond, color=yellow];
6554[label="209.5.38.175;507pkt 507fpkt", shape=pentagon, color=darkviolet];
8416[label="209.5.38.175;506pkt 506fpkt", shape=invtriangle, color=brown];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.5.38.175:*, *:5554}[50.0986%]&lt;BR/&gt;{209.5.38.175:*, *:9898}[49.9014%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.0411%)&lt;BR/&gt; 9898: (24.9589%)&lt;BR/&gt; 4270: (0.0986518%)&lt;BR/&gt; 4268: (0.0986518%)&lt;BR/&gt; 4267: (0.0986518%)&gt;];
}
423--765[label="1;507pkt 507fpkt"];
423--1050[label="1;507pkt 507fpkt"];
423--3503[label="1;507pkt 507fpkt"];
423--6554[label="1;507pkt 507fpkt"];
423--8416[label="1;506pkt 506fpkt"];
765--1050[label="1;507pkt 507fpkt"];
765--3503[label="1;507pkt 507fpkt"];
765--6554[label="1;507pkt 507fpkt"];
765--8416[label="1;506pkt 506fpkt"];
1050--3503[label="1;507pkt 507fpkt"];
1050--6554[label="1;507pkt 507fpkt"];
1050--8416[label="1;506pkt 506fpkt"];
3503--6554[label="1;507pkt 507fpkt"];
3503--8416[label="1;506pkt 506fpkt"];
6554--8416[label="1;506pkt 506fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="209.5.38.175"/>
      <filter dst_port="9898" src_ip="209.5.38.175"/>
    </slice>
    <from sec="1089177186" usec="0"/>
    <to sec="1089177194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
424[label="214.186.69.175s;249pkt 249fpkt", shape=rectangle, color=red];
766[label="214.186.69.175s;249pkt 249fpkt", shape=ellipse, color=green];
1051[label="214.186.69.175s;249pkt 249fpkt", shape=triangle, color=blue];
6556[label="214.186.69.175;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.186.69.175:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2624: (0.200803%)&lt;BR/&gt; 2623: (0.200803%)&lt;BR/&gt; 2622: (0.200803%)&lt;BR/&gt; 2621: (0.200803%)&gt;];
}
424--766[label="1;249pkt 249fpkt"];
424--1051[label="1;249pkt 249fpkt"];
424--6556[label="1;249pkt 249fpkt"];
766--1051[label="1;249pkt 249fpkt"];
766--6556[label="1;249pkt 249fpkt"];
1051--6556[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.186.69.175"/>
    </slice>
    <from sec="1089177110" usec="0"/>
    <to sec="1089177116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
426[label="214.170.34.178s;155pkt 155fpkt", shape=rectangle, color=red];
767[label="214.170.34.178s;155pkt 155fpkt", shape=ellipse, color=green];
1052[label="214.170.34.178s;155pkt 155fpkt", shape=triangle, color=blue];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.170.34.178:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4996: (0.322581%)&lt;BR/&gt; 4988: (0.322581%)&lt;BR/&gt; 4978: (0.322581%)&lt;BR/&gt; 4968: (0.322581%)&gt;];
}
426--767[label="1;155pkt 155fpkt"];
426--1052[label="1;155pkt 155fpkt"];
767--1052[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.170.34.178"/>
    </slice>
    <from sec="1089177166" usec="0"/>
    <to sec="1089177170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
427[label="73.57.41.178s;500pkt 500fpkt", shape=rectangle, color=red];
768[label="73.57.41.178s;500pkt 500fpkt", shape=ellipse, color=green];
1053[label="73.57.41.178s;500pkt 500fpkt", shape=triangle, color=blue];
6583[label="73.57.41.178;500pkt 500fpkt", shape=pentagon, color=darkviolet];
8434[label="73.57.41.178;500pkt 500fpkt", shape=invtriangle, color=brown];
9440[label="73.57.41.178;499pkt 499fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.57.41.178:*, *:5554}[50%]&lt;BR/&gt;{73.57.41.178:*, *:9898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0083%)&lt;BR/&gt; 5554: (24.9917%)&lt;BR/&gt; 3768: (0.100033%)&lt;BR/&gt; 3766: (0.100033%)&lt;BR/&gt; 3765: (0.100033%)&gt;];
}
427--768[label="1;500pkt 500fpkt"];
427--1053[label="1;500pkt 500fpkt"];
427--6583[label="1;500pkt 500fpkt"];
427--8434[label="1;500pkt 500fpkt"];
427--9440[label="1;499pkt 499fpkt"];
768--1053[label="1;500pkt 500fpkt"];
768--6583[label="1;500pkt 500fpkt"];
768--8434[label="1;500pkt 500fpkt"];
768--9440[label="1;499pkt 499fpkt"];
1053--6583[label="1;500pkt 500fpkt"];
1053--8434[label="1;500pkt 500fpkt"];
1053--9440[label="1;499pkt 499fpkt"];
6583--8434[label="1;500pkt 500fpkt"];
6583--9440[label="1;499pkt 499fpkt"];
8434--9440[label="1;499pkt 499fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.57.41.178"/>
      <filter dst_port="5554" src_ip="73.57.41.178"/>
    </slice>
    <from sec="1089177235" usec="0"/>
    <to sec="1089177251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,001,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
428[label="208.71.136.178s;238pkt 238fpkt", shape=rectangle, color=red];
769[label="208.71.136.178s;238pkt 238fpkt", shape=ellipse, color=green];
6585[label="208.71.136.178;238pkt 238fpkt", shape=pentagon, color=darkviolet];
8435[label="208.71.136.178;237pkt 237fpkt", shape=invtriangle, color=brown];
9441[label="208.71.136.178;237pkt 237fpkt", shape=invhouse, color=bisque];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.71.136.178:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2794: (0.210438%)&lt;BR/&gt; 2793: (0.210438%)&lt;BR/&gt; 2792: (0.210438%)&lt;BR/&gt; 2791: (0.210438%)&gt;];
}
428--769[label="1;238pkt 238fpkt"];
428--6585[label="1;238pkt 238fpkt"];
428--8435[label="1;237pkt 237fpkt"];
428--9441[label="1;237pkt 237fpkt"];
769--6585[label="1;238pkt 238fpkt"];
769--8435[label="1;237pkt 237fpkt"];
769--9441[label="1;237pkt 237fpkt"];
6585--8435[label="1;237pkt 237fpkt"];
6585--9441[label="1;237pkt 237fpkt"];
8435--9441[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.71.136.178"/>
    </slice>
    <from sec="1089176569" usec="0"/>
    <to sec="1089176572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
429[label="220.250.149.178s;246pkt 246fpkt", shape=rectangle, color=red];
770[label="220.250.149.178s;246pkt 246fpkt", shape=ellipse, color=green];
1054[label="220.250.149.178s;246pkt 246fpkt", shape=triangle, color=blue];
6587[label="220.250.149.178;246pkt 246fpkt", shape=pentagon, color=darkviolet];
8436[label="220.250.149.178;246pkt 246fpkt", shape=invtriangle, color=brown];
9442[label="220.250.149.178;245pkt 245fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.149.178:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2613: (0.20339%)&lt;BR/&gt; 2612: (0.20339%)&lt;BR/&gt; 2611: (0.20339%)&lt;BR/&gt; 2610: (0.20339%)&gt;];
}
429--770[label="1;246pkt 246fpkt"];
429--1054[label="1;246pkt 246fpkt"];
429--6587[label="1;246pkt 246fpkt"];
429--8436[label="1;246pkt 246fpkt"];
429--9442[label="1;245pkt 245fpkt"];
770--1054[label="1;246pkt 246fpkt"];
770--6587[label="1;246pkt 246fpkt"];
770--8436[label="1;246pkt 246fpkt"];
770--9442[label="1;245pkt 245fpkt"];
1054--6587[label="1;246pkt 246fpkt"];
1054--8436[label="1;246pkt 246fpkt"];
1054--9442[label="1;245pkt 245fpkt"];
6587--8436[label="1;246pkt 246fpkt"];
6587--9442[label="1;245pkt 245fpkt"];
8436--9442[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="220.250.149.178"/>
    </slice>
    <from sec="1089176625" usec="0"/>
    <to sec="1089176627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
430[label="209.40.45.180s;430pkt 430fpkt", shape=rectangle, color=red];
771[label="209.40.45.180s;430pkt 430fpkt", shape=ellipse, color=green];
1055[label="209.40.45.180s;430pkt 430fpkt", shape=triangle, color=blue];
6603[label="209.40.45.180;430pkt 430fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.40.45.180:*, *:9898}[50.2326%]&lt;BR/&gt;{209.40.45.180:*, *:5554}[49.7674%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.1163%)&lt;BR/&gt; 5554: (24.8837%)&lt;BR/&gt; 3944: (0.116279%)&lt;BR/&gt; 3943: (0.116279%)&lt;BR/&gt; 3942: (0.116279%)&gt;];
}
430--771[label="1;430pkt 430fpkt"];
430--1055[label="1;430pkt 430fpkt"];
430--6603[label="1;430pkt 430fpkt"];
771--1055[label="1;430pkt 430fpkt"];
771--6603[label="1;430pkt 430fpkt"];
1055--6603[label="1;430pkt 430fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.40.45.180"/>
      <filter dst_port="5554" src_ip="209.40.45.180"/>
    </slice>
    <from sec="1089176584" usec="0"/>
    <to sec="1089176589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
431[label="19.31.74.181s;296pkt 296fpkt", shape=rectangle, color=red];
772[label="19.31.74.181s;296pkt 296fpkt", shape=ellipse, color=green];
1056[label="19.31.74.181s;296pkt 296fpkt", shape=triangle, color=blue];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.31.74.181:*, *:9898}[55.0676%]&lt;BR/&gt;{19.31.74.181:*, *:5554}[44.9324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.5338%)&lt;BR/&gt; 5554: (22.4662%)&lt;BR/&gt; 4764: (0.168919%)&lt;BR/&gt; 4761: (0.168919%)&lt;BR/&gt; 4759: (0.168919%)&gt;];
}
431--772[label="1;296pkt 296fpkt"];
431--1056[label="1;296pkt 296fpkt"];
772--1056[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="19.31.74.181"/>
      <filter dst_port="5554" src_ip="19.31.74.181"/>
    </slice>
    <from sec="1089176585" usec="0"/>
    <to sec="1089176590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
313[label="209.16.42.80s;276pkt 276fpkt", shape=rectangle, color=red];
432[label="215.201.98.181s;487pkt 487fpkt", shape=rectangle, color=red];
665[label="209.16.42.80s;276pkt 276fpkt", shape=ellipse, color=green];
773[label="215.201.98.181s;487pkt 487fpkt", shape=ellipse, color=green];
1057[label="215.201.98.181s;639pkt 639fpkt", shape=triangle, color=blue];
5632[label="209.16.42.80;275pkt 275fpkt", shape=pentagon, color=darkviolet];
6615[label="215.201.98.181;487pkt 487fpkt", shape=pentagon, color=darkviolet];
7863[label="209.16.42.80;275pkt 275fpkt", shape=invtriangle, color=brown];
8451[label="215.201.98.181;486pkt 486fpkt", shape=invtriangle, color=brown];
9451[label="215.201.98.181;486pkt 486fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.201.98.181:*, *:9898}[63.827%]&lt;BR/&gt;{209.16.42.80:*, *:*}[36.173%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (44.0824%)&lt;BR/&gt; 5554: (5.91759%)&lt;BR/&gt; 2319: (0.119789%)&lt;BR/&gt; 2303: (0.119789%)&lt;BR/&gt; 2302: (0.119789%)&gt;];
}
313--665[label="1;276pkt 276fpkt"];
313--1057[label="0.550725;152pkt 152fpkt"];
313--5632[label="1;275pkt 275fpkt"];
313--7863[label="1;275pkt 275fpkt"];
432--773[label="1;487pkt 487fpkt"];
432--1057[label="1;487pkt 487fpkt"];
432--6615[label="1;487pkt 487fpkt"];
432--8451[label="1;486pkt 486fpkt"];
432--9451[label="1;486pkt 486fpkt"];
665--1057[label="0.550725;152pkt 152fpkt"];
665--5632[label="1;275pkt 275fpkt"];
665--7863[label="1;275pkt 275fpkt"];
773--1057[label="1;487pkt 487fpkt"];
773--6615[label="1;487pkt 487fpkt"];
773--8451[label="1;486pkt 486fpkt"];
773--9451[label="1;486pkt 486fpkt"];
1057--5632[label="0.552727;152pkt 152fpkt"];
1057--6615[label="1;487pkt 487fpkt"];
1057--7863[label="0.552727;152pkt 152fpkt"];
1057--8451[label="1;486pkt 486fpkt"];
1057--9451[label="1;486pkt 486fpkt"];
5632--7863[label="1;275pkt 275fpkt"];
6615--8451[label="1;486pkt 486fpkt"];
6615--9451[label="1;486pkt 486fpkt"];
8451--9451[label="1;486pkt 486fpkt"];
</description>
    <slice>
      <filter src_ip="209.16.42.80"/>
      <filter dst_port="9898" src_ip="215.201.98.181"/>
    </slice>
    <from sec="1089176918" usec="0"/>
    <to sec="1089177178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876783,2.22234,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="215.194.27.183" src_port="80"/>
      <from sec="1089177049" usec="0"/>
      <to sec="1089177051" usec="0"/>
    </slice>
    <from sec="1089177048" usec="0"/>
    <to sec="1089177055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
438[label="215.188.153.184s;508pkt 508fpkt", shape=rectangle, color=red];
778[label="215.188.153.184s;508pkt 508fpkt", shape=ellipse, color=green];
1061[label="215.188.153.184s;508pkt 508fpkt", shape=triangle, color=blue];
1771[label="215.188.153.184;s;508pkt 508fpkt", shape=diamond, color=yellow];
6644[label="215.188.153.184;508pkt 508fpkt", shape=pentagon, color=darkviolet];
8472[label="215.188.153.184;507pkt 507fpkt", shape=invtriangle, color=brown];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.153.184:*, *:5554}[50%]&lt;BR/&gt;{215.188.153.184:*, *:9898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0082%)&lt;BR/&gt; 5554: (24.9918%)&lt;BR/&gt; 4341: (0.0984575%)&lt;BR/&gt; 4291: (0.0984575%)&lt;BR/&gt; 4276: (0.0984575%)&gt;];
}
438--778[label="1;508pkt 508fpkt"];
438--1061[label="1;508pkt 508fpkt"];
438--1771[label="1;508pkt 508fpkt"];
438--6644[label="1;508pkt 508fpkt"];
438--8472[label="1;507pkt 507fpkt"];
778--1061[label="1;508pkt 508fpkt"];
778--1771[label="1;508pkt 508fpkt"];
778--6644[label="1;508pkt 508fpkt"];
778--8472[label="1;507pkt 507fpkt"];
1061--1771[label="1;508pkt 508fpkt"];
1061--6644[label="1;508pkt 508fpkt"];
1061--8472[label="1;507pkt 507fpkt"];
1771--6644[label="1;508pkt 508fpkt"];
1771--8472[label="1;507pkt 507fpkt"];
6644--8472[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.153.184"/>
      <filter dst_port="5554" src_ip="215.188.153.184"/>
    </slice>
    <from sec="1089176537" usec="0"/>
    <to sec="1089176542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
443[label="215.90.109.187s;245pkt 245fpkt", shape=rectangle, color=red];
782[label="215.90.109.187s;245pkt 245fpkt", shape=ellipse, color=green];
1064[label="215.90.109.187s;245pkt 245fpkt", shape=triangle, color=blue];
6674[label="215.90.109.187;245pkt 245fpkt", shape=pentagon, color=darkviolet];
8487[label="215.90.109.187;244pkt 244fpkt", shape=invtriangle, color=brown];
9467[label="215.90.109.187;244pkt 244fpkt", shape=invhouse, color=bisque];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.109.187:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2480: (0.20436%)&lt;BR/&gt; 2479: (0.20436%)&lt;BR/&gt; 2478: (0.20436%)&lt;BR/&gt; 2477: (0.20436%)&gt;];
}
443--782[label="1;245pkt 245fpkt"];
443--1064[label="1;245pkt 245fpkt"];
443--6674[label="1;245pkt 245fpkt"];
443--8487[label="1;244pkt 244fpkt"];
443--9467[label="1;244pkt 244fpkt"];
782--1064[label="1;245pkt 245fpkt"];
782--6674[label="1;245pkt 245fpkt"];
782--8487[label="1;244pkt 244fpkt"];
782--9467[label="1;244pkt 244fpkt"];
1064--6674[label="1;245pkt 245fpkt"];
1064--8487[label="1;244pkt 244fpkt"];
1064--9467[label="1;244pkt 244fpkt"];
6674--8487[label="1;244pkt 244fpkt"];
6674--9467[label="1;244pkt 244fpkt"];
8487--9467[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.90.109.187"/>
    </slice>
    <from sec="1089177177" usec="0"/>
    <to sec="1089177182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
447[label="210.238.129.191s;460pkt 460fpkt", shape=rectangle, color=red];
785[label="210.238.129.191s;460pkt 460fpkt", shape=ellipse, color=green];
1067[label="210.238.129.191s;460pkt 460fpkt", shape=triangle, color=blue];
6706[label="210.238.129.191;461pkt 461fpkt", shape=pentagon, color=darkviolet];
8506[label="210.238.129.191;461pkt 461fpkt", shape=invtriangle, color=brown];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.238.129.191:*, *:5554}[55.0976%]&lt;BR/&gt;{210.238.129.191:*, *:9898}[44.6855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (27.5847%)&lt;BR/&gt; 9898: (22.3719%)&lt;BR/&gt; 4890: (0.108601%)&lt;BR/&gt; 4889: (0.108601%)&lt;BR/&gt; 4888: (0.108601%)&gt;];
}
447--785[label="1;460pkt 460fpkt"];
447--1067[label="1;460pkt 460fpkt"];
447--6706[label="1;460pkt 460fpkt"];
447--8506[label="1;460pkt 460fpkt"];
785--1067[label="1;460pkt 460fpkt"];
785--6706[label="1;460pkt 460fpkt"];
785--8506[label="1;460pkt 460fpkt"];
1067--6706[label="1;460pkt 460fpkt"];
1067--8506[label="1;460pkt 460fpkt"];
6706--8506[label="1;461pkt 461fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="210.238.129.191"/>
      <filter dst_port="9898" src_ip="210.238.129.191"/>
    </slice>
    <from sec="1089177159" usec="0"/>
    <to sec="1089177276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
449[label="209.34.169.196s;252pkt 252fpkt", shape=rectangle, color=red];
787[label="209.34.169.196s;252pkt 252fpkt", shape=ellipse, color=green];
1069[label="209.34.169.196s;252pkt 252fpkt", shape=triangle, color=blue];
6749[label="209.34.169.196;252pkt 252fpkt", shape=pentagon, color=darkviolet];
8525[label="209.34.169.196;252pkt 252fpkt", shape=invtriangle, color=brown];
9482[label="209.34.169.196;252pkt 252fpkt", shape=invhouse, color=bisque];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.34.169.196:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 60594: (0.198413%)&lt;BR/&gt; 60593: (0.198413%)&lt;BR/&gt; 60533: (0.198413%)&lt;BR/&gt; 60426: (0.198413%)&gt;];
}
449--787[label="1;252pkt 252fpkt"];
449--1069[label="1;252pkt 252fpkt"];
449--2309[label="0.00943396;1pkt 1fpkt"];
449--6749[label="1;252pkt 252fpkt"];
449--8525[label="1;252pkt 252fpkt"];
449--9482[label="1;252pkt 252fpkt"];
787--1069[label="1;252pkt 252fpkt"];
787--2309[label="0.00943396;1pkt 1fpkt"];
787--6749[label="1;252pkt 252fpkt"];
787--8525[label="1;252pkt 252fpkt"];
787--9482[label="1;252pkt 252fpkt"];
1069--2309[label="0.00943396;1pkt 1fpkt"];
1069--6749[label="1;252pkt 252fpkt"];
1069--8525[label="1;252pkt 252fpkt"];
1069--9482[label="1;252pkt 252fpkt"];
6749--8525[label="1;252pkt 252fpkt"];
6749--9482[label="1;252pkt 252fpkt"];
8525--9482[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.34.169.196"/>
    </slice>
    <from sec="1089177195" usec="0"/>
    <to sec="1089177200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
456[label="215.194.32.204s;329pkt 329fpkt", shape=rectangle, color=red];
792[label="215.194.32.204s;329pkt 329fpkt", shape=ellipse, color=green];
1073[label="215.194.32.204s;329pkt 329fpkt", shape=triangle, color=blue];
6843[label="215.194.32.204;329pkt 329fpkt", shape=pentagon, color=darkviolet];
8580[label="215.194.32.204;328pkt 328fpkt", shape=invtriangle, color=brown];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.194.32.204:*, *:9898}[68.997%]&lt;BR/&gt;{215.194.32.204:*, *:5554}[31.003%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (34.5195%)&lt;BR/&gt; 5554: (15.4805%)&lt;BR/&gt; 4973: (0.152068%)&lt;BR/&gt; 4970: (0.152068%)&lt;BR/&gt; 4966: (0.152068%)&gt;];
}
456--792[label="1;329pkt 329fpkt"];
456--1073[label="1;329pkt 329fpkt"];
456--6843[label="1;329pkt 329fpkt"];
456--8580[label="1;328pkt 328fpkt"];
792--1073[label="1;329pkt 329fpkt"];
792--6843[label="1;329pkt 329fpkt"];
792--8580[label="1;328pkt 328fpkt"];
1073--6843[label="1;329pkt 329fpkt"];
1073--8580[label="1;328pkt 328fpkt"];
6843--8580[label="1;328pkt 328fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.194.32.204"/>
      <filter dst_port="5554" src_ip="215.194.32.204"/>
    </slice>
    <from sec="1089176783" usec="0"/>
    <to sec="1089176788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26034,2.11771,010,1 1 1 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
457[label="73.13.114.204s;254pkt 254fpkt", shape=rectangle, color=red];
793[label="73.13.114.204s;254pkt 254fpkt", shape=ellipse, color=green];
1074[label="73.13.114.204s;196pkt 196fpkt", shape=triangle, color=blue];
2070[label="73.13.114.204;s;256pkt 256fpkt", shape=diamond, color=yellow];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.13.114.204:*, *:139}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.8958%)&lt;BR/&gt; 23342: (0.208333%)&lt;BR/&gt; 23328: (0.208333%)&lt;BR/&gt; 23317: (0.208333%)&lt;BR/&gt; 23308: (0.208333%)&gt;];
}
457--793[label="1;254pkt 254fpkt"];
457--1074[label="1;196pkt 196fpkt"];
457--2070[label="1;254pkt 254fpkt"];
793--1074[label="1;196pkt 196fpkt"];
793--2070[label="1;254pkt 254fpkt"];
1074--2070[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="73.13.114.204"/>
    </slice>
    <from sec="1089176652" usec="0"/>
    <to sec="1089176690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999004,2.1815,001,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
458[label="73.151.105.205s;212pkt 212fpkt", shape=rectangle, color=red];
794[label="73.151.105.205s;212pkt 212fpkt", shape=ellipse, color=green];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.151.105.205:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2285: (0.235849%)&lt;BR/&gt; 2284: (0.235849%)&lt;BR/&gt; 2277: (0.235849%)&lt;BR/&gt; 2276: (0.235849%)&gt;];
}
458--794[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.151.105.205"/>
    </slice>
    <from sec="1089176843" usec="0"/>
    <to sec="1089176849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995108,1.98932,001,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
459[label="220.250.182.206s;235pkt 235fpkt", shape=rectangle, color=red];
795[label="220.250.182.206s;235pkt 235fpkt", shape=ellipse, color=green];
6860[label="220.250.182.206;235pkt 235fpkt", shape=pentagon, color=darkviolet];
8592[label="220.250.182.206;235pkt 235fpkt", shape=invtriangle, color=brown];
9512[label="220.250.182.206;234pkt 234fpkt", shape=invhouse, color=bisque];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.182.206:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2237: (0.212947%)&lt;BR/&gt; 2236: (0.212947%)&lt;BR/&gt; 2235: (0.212947%)&lt;BR/&gt; 2233: (0.212947%)&gt;];
}
459--795[label="1;235pkt 235fpkt"];
459--6860[label="1;235pkt 235fpkt"];
459--8592[label="1;235pkt 235fpkt"];
459--9512[label="1;234pkt 234fpkt"];
795--6860[label="1;235pkt 235fpkt"];
795--8592[label="1;235pkt 235fpkt"];
795--9512[label="1;234pkt 234fpkt"];
6860--8592[label="1;235pkt 235fpkt"];
6860--9512[label="1;234pkt 234fpkt"];
8592--9512[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="220.250.182.206"/>
    </slice>
    <from sec="1089176620" usec="0"/>
    <to sec="1089176626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
461[label="215.194.38.209s;377pkt 377fpkt", shape=rectangle, color=red];
796[label="215.194.38.209s;377pkt 377fpkt", shape=ellipse, color=green];
1075[label="215.194.38.209s;254pkt 254fpkt", shape=triangle, color=blue];
6878[label="215.194.38.209;377pkt 377fpkt", shape=pentagon, color=darkviolet];
8604[label="215.194.38.209;376pkt 376fpkt", shape=invtriangle, color=brown];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.194.38.209:*, *:9898}[67.374%]&lt;BR/&gt;{215.194.38.209:*, *:5554}[32.626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (36.0591%)&lt;BR/&gt; 5554: (13.9409%)&lt;BR/&gt; 1688: (0.141965%)&lt;BR/&gt; 1685: (0.141965%)&lt;BR/&gt; 1682: (0.141965%)&gt;];
}
461--796[label="1;377pkt 377fpkt"];
461--1075[label="1;254pkt 254fpkt"];
461--6878[label="1;377pkt 377fpkt"];
461--8604[label="1;376pkt 376fpkt"];
796--1075[label="1;254pkt 254fpkt"];
796--6878[label="1;377pkt 377fpkt"];
796--8604[label="1;376pkt 376fpkt"];
1075--6878[label="1;254pkt 254fpkt"];
1075--8604[label="1;254pkt 254fpkt"];
6878--8604[label="1;376pkt 376fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.194.38.209"/>
      <filter dst_port="5554" src_ip="215.194.38.209"/>
    </slice>
    <from sec="1089176643" usec="0"/>
    <to sec="1089176648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
463[label="214.186.18.211s;216pkt 216fpkt", shape=rectangle, color=red];
798[label="214.186.18.211s;216pkt 216fpkt", shape=ellipse, color=green];
1077[label="214.186.18.211s;216pkt 216fpkt", shape=triangle, color=blue];
6895[label="214.186.18.211;216pkt 216fpkt", shape=pentagon, color=darkviolet];
8616[label="214.186.18.211;215pkt 215fpkt", shape=invtriangle, color=brown];
9524[label="214.186.18.211;215pkt 215fpkt", shape=invhouse, color=bisque];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.186.18.211:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4106: (0.231839%)&lt;BR/&gt; 4105: (0.231839%)&lt;BR/&gt; 4104: (0.231839%)&lt;BR/&gt; 4103: (0.231839%)&gt;];
}
463--798[label="1;216pkt 216fpkt"];
463--1077[label="1;216pkt 216fpkt"];
463--6895[label="1;216pkt 216fpkt"];
463--8616[label="1;215pkt 215fpkt"];
463--9524[label="1;215pkt 215fpkt"];
798--1077[label="1;216pkt 216fpkt"];
798--6895[label="1;216pkt 216fpkt"];
798--8616[label="1;215pkt 215fpkt"];
798--9524[label="1;215pkt 215fpkt"];
1077--6895[label="1;216pkt 216fpkt"];
1077--8616[label="1;215pkt 215fpkt"];
1077--9524[label="1;215pkt 215fpkt"];
6895--8616[label="1;215pkt 215fpkt"];
6895--9524[label="1;215pkt 215fpkt"];
8616--9524[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.186.18.211"/>
    </slice>
    <from sec="1089177292" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
464[label="214.190.155.211s;247pkt 247fpkt", shape=rectangle, color=red];
799[label="214.190.155.211s;308pkt 308fpkt", shape=ellipse, color=green];
1078[label="214.190.155.211s;308pkt 308fpkt", shape=triangle, color=blue];
6901[label="214.190.155.211;247pkt 247fpkt", shape=pentagon, color=darkviolet];
8618[label="214.190.155.211;247pkt 247fpkt", shape=invtriangle, color=brown];
9525[label="214.190.155.211;247pkt 247fpkt", shape=invhouse, color=bisque];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.155.211:*, *:9898}[80.1948%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4470: (0.187032%)&lt;BR/&gt; 4469: (0.187032%)&lt;BR/&gt; 4468: (0.187032%)&lt;BR/&gt; 4467: (0.187032%)&gt;];
}
464--799[label="1;247pkt 247fpkt"];
464--1078[label="1;247pkt 247fpkt"];
464--6901[label="1;247pkt 247fpkt"];
464--8618[label="1;247pkt 247fpkt"];
464--9525[label="1;247pkt 247fpkt"];
799--1078[label="1;308pkt 308fpkt"];
799--6901[label="1;247pkt 247fpkt"];
799--8618[label="1;247pkt 247fpkt"];
799--9525[label="1;247pkt 247fpkt"];
1078--6901[label="1;247pkt 247fpkt"];
1078--8618[label="1;247pkt 247fpkt"];
1078--9525[label="1;247pkt 247fpkt"];
6901--8618[label="1;247pkt 247fpkt"];
6901--9525[label="1;247pkt 247fpkt"];
8618--9525[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.155.211"/>
    </slice>
    <from sec="1089176696" usec="0"/>
    <to sec="1089176699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
468[label="215.227.1.220s;442pkt 442fpkt", shape=rectangle, color=red];
803[label="215.227.1.220s;442pkt 442fpkt", shape=ellipse, color=green];
1082[label="215.227.1.220s;442pkt 442fpkt", shape=triangle, color=blue];
6976[label="215.227.1.220;443pkt 443fpkt", shape=pentagon, color=darkviolet];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.227.1.220:*, *:9898}[50.1129%]&lt;BR/&gt;{215.227.1.220:*, *:5554}[49.6614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0989%)&lt;BR/&gt; 5554: (24.8728%)&lt;BR/&gt; 14467: (0.113058%)&lt;BR/&gt; 14466: (0.113058%)&lt;BR/&gt; 14464: (0.113058%)&gt;];
}
468--803[label="1;442pkt 442fpkt"];
468--1082[label="1;442pkt 442fpkt"];
468--6976[label="1;442pkt 442fpkt"];
803--1082[label="1;442pkt 442fpkt"];
803--6976[label="1;442pkt 442fpkt"];
1082--6976[label="1;442pkt 442fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.227.1.220"/>
      <filter dst_port="5554" src_ip="215.227.1.220"/>
    </slice>
    <from sec="1089176542" usec="0"/>
    <to sec="1089177126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
471[label="215.89.116.221s;500pkt 500fpkt", shape=rectangle, color=red];
805[label="215.89.116.221s;500pkt 500fpkt", shape=ellipse, color=green];
1084[label="215.89.116.221s;500pkt 500fpkt", shape=triangle, color=blue];
6989[label="215.89.116.221;500pkt 500fpkt", shape=pentagon, color=darkviolet];
8671[label="215.89.116.221;499pkt 499fpkt", shape=invtriangle, color=brown];
9552[label="215.89.116.221;499pkt 499fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.89.116.221:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4998: (0.100067%)&lt;BR/&gt; 4993: (0.100067%)&lt;BR/&gt; 4990: (0.100067%)&lt;BR/&gt; 4987: (0.100067%)&gt;];
}
471--805[label="1;500pkt 500fpkt"];
471--1084[label="1;500pkt 500fpkt"];
471--6989[label="1;500pkt 500fpkt"];
471--8671[label="1;499pkt 499fpkt"];
471--9552[label="1;499pkt 499fpkt"];
805--1084[label="1;500pkt 500fpkt"];
805--6989[label="1;500pkt 500fpkt"];
805--8671[label="1;499pkt 499fpkt"];
805--9552[label="1;499pkt 499fpkt"];
1084--6989[label="1;500pkt 500fpkt"];
1084--8671[label="1;499pkt 499fpkt"];
1084--9552[label="1;499pkt 499fpkt"];
6989--8671[label="1;499pkt 499fpkt"];
6989--9552[label="1;499pkt 499fpkt"];
8671--9552[label="1;499pkt 499fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.89.116.221"/>
    </slice>
    <from sec="1089176691" usec="0"/>
    <to sec="1089177101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
473[label="73.148.200.221s;254pkt 254fpkt", shape=rectangle, color=red];
807[label="73.148.200.221s;254pkt 254fpkt", shape=ellipse, color=green];
1086[label="73.148.200.221s;254pkt 254fpkt", shape=triangle, color=blue];
6992[label="73.148.200.221;254pkt 254fpkt", shape=pentagon, color=darkviolet];
8673[label="73.148.200.221;253pkt 253fpkt", shape=invtriangle, color=brown];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.148.200.221:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1945: (0.197006%)&lt;BR/&gt; 1944: (0.197006%)&lt;BR/&gt; 1943: (0.197006%)&lt;BR/&gt; 1942: (0.197006%)&gt;];
}
473--807[label="1;254pkt 254fpkt"];
473--1086[label="1;254pkt 254fpkt"];
473--6992[label="1;254pkt 254fpkt"];
473--8673[label="1;253pkt 253fpkt"];
807--1086[label="1;254pkt 254fpkt"];
807--6992[label="1;254pkt 254fpkt"];
807--8673[label="1;253pkt 253fpkt"];
1086--6992[label="1;254pkt 254fpkt"];
1086--8673[label="1;253pkt 253fpkt"];
6992--8673[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.148.200.221"/>
    </slice>
    <from sec="1089176915" usec="0"/>
    <to sec="1089176920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
475[label="73.215.212.222s;499pkt 499fpkt", shape=rectangle, color=red];
809[label="73.215.212.222s;499pkt 499fpkt", shape=ellipse, color=green];
1088[label="73.215.212.222s;499pkt 499fpkt", shape=triangle, color=blue];
7000[label="73.215.212.222;499pkt 499fpkt", shape=pentagon, color=darkviolet];
8680[label="73.215.212.222;498pkt 498fpkt", shape=invtriangle, color=brown];
9556[label="73.215.212.222;499pkt 499fpkt", shape=invhouse, color=bisque];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.215.212.222:*, *:9898}[50.1002%]&lt;BR/&gt;{73.215.212.222:*, *:5554}[49.8998%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0585%)&lt;BR/&gt; 5554: (24.9415%)&lt;BR/&gt; 4217: (0.100234%)&lt;BR/&gt; 4216: (0.100234%)&lt;BR/&gt; 4215: (0.100234%)&gt;];
}
475--809[label="1;499pkt 499fpkt"];
475--1088[label="1;499pkt 499fpkt"];
475--7000[label="1;499pkt 499fpkt"];
475--8680[label="1;498pkt 498fpkt"];
475--9556[label="1;499pkt 499fpkt"];
809--1088[label="1;499pkt 499fpkt"];
809--7000[label="1;499pkt 499fpkt"];
809--8680[label="1;498pkt 498fpkt"];
809--9556[label="1;499pkt 499fpkt"];
1088--7000[label="1;499pkt 499fpkt"];
1088--8680[label="1;498pkt 498fpkt"];
1088--9556[label="1;499pkt 499fpkt"];
7000--8680[label="1;498pkt 498fpkt"];
7000--9556[label="1;499pkt 499fpkt"];
8680--9556[label="1;498pkt 498fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.215.212.222"/>
      <filter dst_port="5554" src_ip="73.215.212.222"/>
    </slice>
    <from sec="1089176629" usec="0"/>
    <to sec="1089176631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
479[label="208.69.150.225s;507pkt 507fpkt", shape=rectangle, color=red];
812[label="208.69.150.225s;507pkt 507fpkt", shape=ellipse, color=green];
1091[label="208.69.150.225s;507pkt 507fpkt", shape=triangle, color=blue];
7021[label="208.69.150.225;507pkt 507fpkt", shape=pentagon, color=darkviolet];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.69.150.225:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4734: (0.0986193%)&lt;BR/&gt; 4733: (0.0986193%)&lt;BR/&gt; 4732: (0.0986193%)&lt;BR/&gt; 4731: (0.0986193%)&gt;];
}
479--812[label="1;507pkt 507fpkt"];
479--1091[label="1;507pkt 507fpkt"];
479--7021[label="1;507pkt 507fpkt"];
812--1091[label="1;507pkt 507fpkt"];
812--7021[label="1;507pkt 507fpkt"];
1091--7021[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.69.150.225"/>
    </slice>
    <from sec="1089176733" usec="0"/>
    <to sec="1089177124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
480[label="73.146.106.227s;437pkt 437fpkt", shape=rectangle, color=red];
813[label="73.146.106.227s;437pkt 437fpkt", shape=ellipse, color=green];
1092[label="73.146.106.227s;437pkt 437fpkt", shape=triangle, color=blue];
7040[label="73.146.106.227;437pkt 437fpkt", shape=pentagon, color=darkviolet];
8706[label="73.146.106.227;437pkt 437fpkt", shape=invtriangle, color=brown];
9568[label="73.146.106.227;436pkt 436fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.146.106.227:*, *:9898}[51.2586%]&lt;BR/&gt;{73.146.106.227:*, *:5554}[48.7414%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.6391%)&lt;BR/&gt; 5554: (24.3609%)&lt;BR/&gt; 58888: (0.11446%)&lt;BR/&gt; 58887: (0.11446%)&lt;BR/&gt; 58886: (0.11446%)&gt;];
}
480--813[label="1;437pkt 437fpkt"];
480--1092[label="1;437pkt 437fpkt"];
480--7040[label="1;437pkt 437fpkt"];
480--8706[label="1;437pkt 437fpkt"];
480--9568[label="1;436pkt 436fpkt"];
813--1092[label="1;437pkt 437fpkt"];
813--7040[label="1;437pkt 437fpkt"];
813--8706[label="1;437pkt 437fpkt"];
813--9568[label="1;436pkt 436fpkt"];
1092--7040[label="1;437pkt 437fpkt"];
1092--8706[label="1;437pkt 437fpkt"];
1092--9568[label="1;436pkt 436fpkt"];
7040--8706[label="1;437pkt 437fpkt"];
7040--9568[label="1;436pkt 436fpkt"];
8706--9568[label="1;436pkt 436fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.146.106.227"/>
      <filter dst_port="5554" src_ip="73.146.106.227"/>
    </slice>
    <from sec="1089177124" usec="0"/>
    <to sec="1089177126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
482[label="210.245.214.229s;252pkt 252fpkt", shape=rectangle, color=red];
814[label="210.245.214.229s;252pkt 252fpkt", shape=ellipse, color=green];
1093[label="210.245.214.229s;252pkt 252fpkt", shape=triangle, color=blue];
7051[label="210.245.214.229;252pkt 252fpkt", shape=pentagon, color=darkviolet];
8714[label="210.245.214.229;251pkt 251fpkt", shape=invtriangle, color=brown];
9572[label="210.245.214.229;251pkt 251fpkt", shape=invhouse, color=bisque];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.245.214.229:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4974: (0.198675%)&lt;BR/&gt; 4973: (0.198675%)&lt;BR/&gt; 4972: (0.198675%)&lt;BR/&gt; 4971: (0.198675%)&gt;];
}
482--814[label="1;252pkt 252fpkt"];
482--1093[label="1;252pkt 252fpkt"];
482--7051[label="1;252pkt 252fpkt"];
482--8714[label="1;251pkt 251fpkt"];
482--9572[label="1;251pkt 251fpkt"];
814--1093[label="1;252pkt 252fpkt"];
814--7051[label="1;252pkt 252fpkt"];
814--8714[label="1;251pkt 251fpkt"];
814--9572[label="1;251pkt 251fpkt"];
1093--7051[label="1;252pkt 252fpkt"];
1093--8714[label="1;251pkt 251fpkt"];
1093--9572[label="1;251pkt 251fpkt"];
7051--8714[label="1;251pkt 251fpkt"];
7051--9572[label="1;251pkt 251fpkt"];
8714--9572[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="210.245.214.229"/>
    </slice>
    <from sec="1089176596" usec="0"/>
    <to sec="1089176602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
483[label="220.250.4.232s;503pkt 503fpkt", shape=rectangle, color=red];
815[label="220.250.4.232s;503pkt 503fpkt", shape=ellipse, color=green];
1094[label="220.250.4.232s;503pkt 503fpkt", shape=triangle, color=blue];
7065[label="220.250.4.232;503pkt 503fpkt", shape=pentagon, color=darkviolet];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.4.232:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4948: (0.0994036%)&lt;BR/&gt; 4942: (0.0994036%)&lt;BR/&gt; 4908: (0.0994036%)&lt;BR/&gt; 4907: (0.0994036%)&gt;];
}
483--815[label="1;503pkt 503fpkt"];
483--1094[label="1;503pkt 503fpkt"];
483--7065[label="1;503pkt 503fpkt"];
815--1094[label="1;503pkt 503fpkt"];
815--7065[label="1;503pkt 503fpkt"];
1094--7065[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="220.250.4.232"/>
    </slice>
    <from sec="1089176555" usec="0"/>
    <to sec="1089177200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
484[label="215.185.161.238s;503pkt 503fpkt", shape=rectangle, color=red];
816[label="215.185.161.238s;503pkt 503fpkt", shape=ellipse, color=green];
1095[label="215.185.161.238s;503pkt 503fpkt", shape=triangle, color=blue];
3071[label="215.185.161.238;s;503pkt 503fpkt", shape=diamond, color=yellow];
7137[label="215.185.161.238;503pkt 503fpkt", shape=pentagon, color=darkviolet];
8763[label="215.185.161.238;503pkt 503fpkt", shape=invtriangle, color=brown];
9594[label="215.185.161.238;502pkt 502fpkt", shape=invhouse, color=bisque];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.185.161.238:*, *:5554}[50.2982%]&lt;BR/&gt;{215.185.161.238:*, *:9898}[49.7018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.142%)&lt;BR/&gt; 9898: (24.858%)&lt;BR/&gt; 4228: (0.0994318%)&lt;BR/&gt; 4227: (0.0994318%)&lt;BR/&gt; 4222: (0.0994318%)&gt;];
}
484--816[label="1;503pkt 503fpkt"];
484--1095[label="1;503pkt 503fpkt"];
484--3071[label="1;503pkt 503fpkt"];
484--7137[label="1;503pkt 503fpkt"];
484--8763[label="1;503pkt 503fpkt"];
484--9594[label="1;502pkt 502fpkt"];
816--1095[label="1;503pkt 503fpkt"];
816--3071[label="1;503pkt 503fpkt"];
816--7137[label="1;503pkt 503fpkt"];
816--8763[label="1;503pkt 503fpkt"];
816--9594[label="1;502pkt 502fpkt"];
1095--3071[label="1;503pkt 503fpkt"];
1095--7137[label="1;503pkt 503fpkt"];
1095--8763[label="1;503pkt 503fpkt"];
1095--9594[label="1;502pkt 502fpkt"];
3071--7137[label="1;503pkt 503fpkt"];
3071--8763[label="1;503pkt 503fpkt"];
3071--9594[label="1;502pkt 502fpkt"];
7137--8763[label="1;503pkt 503fpkt"];
7137--9594[label="1;502pkt 502fpkt"];
8763--9594[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.185.161.238"/>
      <filter dst_port="9898" src_ip="215.185.161.238"/>
    </slice>
    <from sec="1089177036" usec="0"/>
    <to sec="1089177044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
487[label="214.161.205.240s;375pkt 375fpkt", shape=rectangle, color=red];
817[label="214.161.205.240s;375pkt 375fpkt", shape=ellipse, color=green];
1096[label="214.161.205.240s;375pkt 375fpkt", shape=triangle, color=blue];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.205.240:*, *:9898}[67.4667%]&lt;BR/&gt;{214.161.205.240:*, *:5554}[32.5333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (33.7333%)&lt;BR/&gt; 5554: (16.2667%)&lt;BR/&gt; 4335: (0.133333%)&lt;BR/&gt; 4334: (0.133333%)&lt;BR/&gt; 4333: (0.133333%)&gt;];
}
487--817[label="1;375pkt 375fpkt"];
487--1096[label="1;375pkt 375fpkt"];
817--1096[label="1;375pkt 375fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.205.240"/>
      <filter dst_port="5554" src_ip="214.161.205.240"/>
    </slice>
    <from sec="1089176455" usec="0"/>
    <to sec="1089176458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16039,2.01257,001,1 1 1 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
488[label="215.199.100.241s;759pkt 759fpkt", shape=rectangle, color=red];
818[label="215.199.100.241s;759pkt 759fpkt", shape=ellipse, color=green];
1097[label="215.199.100.241s;759pkt 759fpkt", shape=triangle, color=blue];
2063[label="215.199.100.241;s;759pkt 759fpkt", shape=diamond, color=yellow];
7163[label="215.199.100.241;759pkt 759fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.199.100.241:*, *:5554}[33.4651%]&lt;BR/&gt;{215.199.100.241:*, *:1023}[33.3333%]&lt;BR/&gt;{215.199.100.241:*, *:9898}[33.2016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (16.7325%)&lt;BR/&gt; 1023: (16.6667%)&lt;BR/&gt; 9898: (16.6008%)&lt;BR/&gt; 4749: (0.0658762%)&lt;BR/&gt; 4718: (0.0658762%)&gt;];
}
488--818[label="1;759pkt 759fpkt"];
488--1097[label="1;759pkt 759fpkt"];
488--2063[label="1;759pkt 759fpkt"];
488--7163[label="1;759pkt 759fpkt"];
818--1097[label="1;759pkt 759fpkt"];
818--2063[label="1;759pkt 759fpkt"];
818--7163[label="1;759pkt 759fpkt"];
1097--2063[label="1;759pkt 759fpkt"];
1097--7163[label="1;759pkt 759fpkt"];
2063--7163[label="1;759pkt 759fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.199.100.241"/>
      <filter dst_port="1023" src_ip="215.199.100.241"/>
      <filter dst_port="9898" src_ip="215.199.100.241"/>
    </slice>
    <from sec="1089176639" usec="0"/>
    <to sec="1089176646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
490[label="220.250.145.244s;233pkt 233fpkt", shape=rectangle, color=red];
820[label="220.250.145.244s;233pkt 233fpkt", shape=ellipse, color=green];
1099[label="220.250.145.244s;233pkt 233fpkt", shape=triangle, color=blue];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.145.244:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3137: (0.214592%)&lt;BR/&gt; 3136: (0.214592%)&lt;BR/&gt; 3135: (0.214592%)&lt;BR/&gt; 3134: (0.214592%)&gt;];
}
490--820[label="1;233pkt 233fpkt"];
490--1099[label="1;233pkt 233fpkt"];
820--1099[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="220.250.145.244"/>
    </slice>
    <from sec="1089176541" usec="0"/>
    <to sec="1089176545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
491[label="214.186.224.244s;253pkt 253fpkt", shape=rectangle, color=red];
821[label="214.186.224.244s;253pkt 253fpkt", shape=ellipse, color=green];
1100[label="214.186.224.244s;253pkt 253fpkt", shape=triangle, color=blue];
7189[label="214.186.224.244;253pkt 253fpkt", shape=pentagon, color=darkviolet];
8796[label="214.186.224.244;253pkt 253fpkt", shape=invtriangle, color=brown];
9610[label="214.186.224.244;253pkt 253fpkt", shape=invhouse, color=bisque];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.186.224.244:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1404: (0.197628%)&lt;BR/&gt; 1403: (0.197628%)&lt;BR/&gt; 1402: (0.197628%)&lt;BR/&gt; 1401: (0.197628%)&gt;];
}
491--821[label="1;253pkt 253fpkt"];
491--1100[label="1;253pkt 253fpkt"];
491--7189[label="1;253pkt 253fpkt"];
491--8796[label="1;253pkt 253fpkt"];
491--9610[label="1;253pkt 253fpkt"];
821--1100[label="1;253pkt 253fpkt"];
821--7189[label="1;253pkt 253fpkt"];
821--8796[label="1;253pkt 253fpkt"];
821--9610[label="1;253pkt 253fpkt"];
1100--7189[label="1;253pkt 253fpkt"];
1100--8796[label="1;253pkt 253fpkt"];
1100--9610[label="1;253pkt 253fpkt"];
7189--8796[label="1;253pkt 253fpkt"];
7189--9610[label="1;253pkt 253fpkt"];
8796--9610[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.186.224.244"/>
    </slice>
    <from sec="1089177155" usec="0"/>
    <to sec="1089177159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
492[label="210.165.228.244s;215pkt 215fpkt", shape=rectangle, color=red];
822[label="210.165.228.244s;215pkt 215fpkt", shape=ellipse, color=green];
1101[label="210.165.228.244s;215pkt 215fpkt", shape=triangle, color=blue];
7190[label="210.165.228.244;215pkt 215fpkt", shape=pentagon, color=darkviolet];
8797[label="210.165.228.244;214pkt 214fpkt", shape=invtriangle, color=brown];
9611[label="210.165.228.244;215pkt 215fpkt", shape=invhouse, color=bisque];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.165.228.244:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3609: (0.232739%)&lt;BR/&gt; 3606: (0.232739%)&lt;BR/&gt; 3604: (0.232739%)&lt;BR/&gt; 3603: (0.232739%)&gt;];
}
492--822[label="1;215pkt 215fpkt"];
492--1101[label="1;215pkt 215fpkt"];
492--7190[label="1;215pkt 215fpkt"];
492--8797[label="1;214pkt 214fpkt"];
492--9611[label="1;215pkt 215fpkt"];
822--1101[label="1;215pkt 215fpkt"];
822--7190[label="1;215pkt 215fpkt"];
822--8797[label="1;214pkt 214fpkt"];
822--9611[label="1;215pkt 215fpkt"];
1101--7190[label="1;215pkt 215fpkt"];
1101--8797[label="1;214pkt 214fpkt"];
1101--9611[label="1;215pkt 215fpkt"];
7190--8797[label="1;214pkt 214fpkt"];
7190--9611[label="1;215pkt 215fpkt"];
8797--9611[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="210.165.228.244"/>
    </slice>
    <from sec="1089176534" usec="0"/>
    <to sec="1089176538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
495[label="209.32.74.247s;505pkt 505fpkt", shape=rectangle, color=red];
825[label="209.32.74.247s;505pkt 505fpkt", shape=ellipse, color=green];
1104[label="209.32.74.247s;505pkt 505fpkt", shape=triangle, color=blue];
2541[label="209.32.74.247;s;505pkt 505fpkt", shape=diamond, color=yellow];
7214[label="209.32.74.247;505pkt 505fpkt", shape=pentagon, color=darkviolet];
8809[label="209.32.74.247;505pkt 505fpkt", shape=invtriangle, color=brown];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.32.74.247:*, *:9898}[50.099%]&lt;BR/&gt;{209.32.74.247:*, *:5554}[49.901%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0495%)&lt;BR/&gt; 5554: (24.9505%)&lt;BR/&gt; 4976: (0.0990099%)&lt;BR/&gt; 4975: (0.0990099%)&lt;BR/&gt; 4974: (0.0990099%)&gt;];
}
495--825[label="1;505pkt 505fpkt"];
495--1104[label="1;505pkt 505fpkt"];
495--2541[label="1;505pkt 505fpkt"];
495--7214[label="1;505pkt 505fpkt"];
495--8809[label="1;505pkt 505fpkt"];
825--1104[label="1;505pkt 505fpkt"];
825--2541[label="1;505pkt 505fpkt"];
825--7214[label="1;505pkt 505fpkt"];
825--8809[label="1;505pkt 505fpkt"];
1104--2541[label="1;505pkt 505fpkt"];
1104--7214[label="1;505pkt 505fpkt"];
1104--8809[label="1;505pkt 505fpkt"];
2541--7214[label="1;505pkt 505fpkt"];
2541--8809[label="1;505pkt 505fpkt"];
7214--8809[label="1;505pkt 505fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.32.74.247"/>
      <filter dst_port="5554" src_ip="209.32.74.247"/>
    </slice>
    <from sec="1089176830" usec="0"/>
    <to sec="1089176834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17684,1.95843,001,1 1 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
496[label="215.165.146.247s;504pkt 504fpkt", shape=rectangle, color=red];
826[label="215.165.146.247s;504pkt 504fpkt", shape=ellipse, color=green];
1105[label="215.165.146.247s;504pkt 504fpkt", shape=triangle, color=blue];
1744[label="215.165.146.247;s;504pkt 504fpkt", shape=diamond, color=yellow];
7216[label="215.165.146.247;504pkt 504fpkt", shape=pentagon, color=darkviolet];
8811[label="215.165.146.247;504pkt 504fpkt", shape=invtriangle, color=brown];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.165.146.247:*, *:5554}[50.1984%]&lt;BR/&gt;{215.165.146.247:*, *:9898}[49.8016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.0992%)&lt;BR/&gt; 9898: (24.9008%)&lt;BR/&gt; 4482: (0.0992063%)&lt;BR/&gt; 4481: (0.0992063%)&lt;BR/&gt; 4480: (0.0992063%)&gt;];
}
496--826[label="1;504pkt 504fpkt"];
496--1105[label="1;504pkt 504fpkt"];
496--1744[label="1;504pkt 504fpkt"];
496--7216[label="1;504pkt 504fpkt"];
496--8811[label="1;504pkt 504fpkt"];
826--1105[label="1;504pkt 504fpkt"];
826--1744[label="1;504pkt 504fpkt"];
826--7216[label="1;504pkt 504fpkt"];
826--8811[label="1;504pkt 504fpkt"];
1105--1744[label="1;504pkt 504fpkt"];
1105--7216[label="1;504pkt 504fpkt"];
1105--8811[label="1;504pkt 504fpkt"];
1744--7216[label="1;504pkt 504fpkt"];
1744--8811[label="1;504pkt 504fpkt"];
7216--8811[label="1;504pkt 504fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.165.146.247"/>
      <filter dst_port="9898" src_ip="215.165.146.247"/>
    </slice>
    <from sec="1089176456" usec="0"/>
    <to sec="1089176462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
497[label="18.141.17.250s;506pkt 506fpkt", shape=rectangle, color=red];
827[label="18.141.17.250s;506pkt 506fpkt", shape=ellipse, color=green];
1106[label="18.141.17.250s;506pkt 506fpkt", shape=triangle, color=blue];
2059[label="18.141.17.250;s;506pkt 506fpkt", shape=diamond, color=yellow];
7232[label="18.141.17.250;506pkt 506fpkt", shape=pentagon, color=darkviolet];
8819[label="18.141.17.250;505pkt 505fpkt", shape=invtriangle, color=brown];
9625[label="18.141.17.250;505pkt 505fpkt", shape=invhouse, color=bisque];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.141.17.250:*, *:9898}[50.1976%]&lt;BR/&gt;{18.141.17.250:*, *:5554}[49.8024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.113%)&lt;BR/&gt; 5554: (24.887%)&lt;BR/&gt; 4388: (0.0988701%)&lt;BR/&gt; 4365: (0.0988701%)&lt;BR/&gt; 4362: (0.0988701%)&gt;];
}
497--827[label="1;506pkt 506fpkt"];
497--1106[label="1;506pkt 506fpkt"];
497--2059[label="1;506pkt 506fpkt"];
497--7232[label="1;506pkt 506fpkt"];
497--8819[label="1;505pkt 505fpkt"];
497--9625[label="1;505pkt 505fpkt"];
827--1106[label="1;506pkt 506fpkt"];
827--2059[label="1;506pkt 506fpkt"];
827--7232[label="1;506pkt 506fpkt"];
827--8819[label="1;505pkt 505fpkt"];
827--9625[label="1;505pkt 505fpkt"];
1106--2059[label="1;506pkt 506fpkt"];
1106--7232[label="1;506pkt 506fpkt"];
1106--8819[label="1;505pkt 505fpkt"];
1106--9625[label="1;505pkt 505fpkt"];
2059--7232[label="1;506pkt 506fpkt"];
2059--8819[label="1;505pkt 505fpkt"];
2059--9625[label="1;505pkt 505fpkt"];
7232--8819[label="1;505pkt 505fpkt"];
7232--9625[label="1;505pkt 505fpkt"];
8819--9625[label="1;505pkt 505fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="18.141.17.250"/>
      <filter dst_port="5554" src_ip="18.141.17.250"/>
    </slice>
    <from sec="1089176625" usec="0"/>
    <to sec="1089176630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
498[label="214.190.136.252s;483pkt 483fpkt", shape=rectangle, color=red];
828[label="214.190.136.252s;483pkt 483fpkt", shape=ellipse, color=green];
1107[label="214.190.136.252s;483pkt 483fpkt", shape=triangle, color=blue];
7254[label="214.190.136.252;483pkt 483fpkt", shape=pentagon, color=darkviolet];
8832[label="214.190.136.252;482pkt 482fpkt", shape=invtriangle, color=brown];
9632[label="214.190.136.252;483pkt 483fpkt", shape=invhouse, color=bisque];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.136.252:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4010: (0.103555%)&lt;BR/&gt; 4009: (0.103555%)&lt;BR/&gt; 3969: (0.103555%)&lt;BR/&gt; 3968: (0.103555%)&gt;];
}
498--828[label="1;483pkt 483fpkt"];
498--1107[label="1;483pkt 483fpkt"];
498--7254[label="1;483pkt 483fpkt"];
498--8832[label="1;482pkt 482fpkt"];
498--9632[label="1;483pkt 483fpkt"];
828--1107[label="1;483pkt 483fpkt"];
828--7254[label="1;483pkt 483fpkt"];
828--8832[label="1;482pkt 482fpkt"];
828--9632[label="1;483pkt 483fpkt"];
1107--7254[label="1;483pkt 483fpkt"];
1107--8832[label="1;482pkt 482fpkt"];
1107--9632[label="1;483pkt 483fpkt"];
7254--8832[label="1;482pkt 482fpkt"];
7254--9632[label="1;483pkt 483fpkt"];
8832--9632[label="1;482pkt 482fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.136.252"/>
    </slice>
    <from sec="1089176780" usec="0"/>
    <to sec="1089177272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16837,2.15396,001,1 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
507[label="214.161.205.240d;149pkt 149fpkt", shape=rectangle, color=red];
830[label="214.161.205.240d;149pkt 149fpkt", shape=ellipse, color=green];
1110[label="214.161.205.240d;149pkt 149fpkt", shape=triangle, color=blue];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:9898, 214.161.205.240:*}[67.1141%]&lt;BR/&gt;{*:5554, 214.161.205.240:*}[32.8859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (33.557%)&lt;BR/&gt; 5554: (16.443%)&lt;BR/&gt; 4121: (0.33557%)&lt;BR/&gt; 4118: (0.33557%)&lt;BR/&gt; 4117: (0.33557%)&gt;];
}
507--830[label="1;149pkt 149fpkt"];
507--1110[label="1;149pkt 149fpkt"];
830--1110[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_ip="214.161.205.240" src_port="9898"/>
      <filter dst_ip="214.161.205.240" src_port="5554"/>
    </slice>
    <from sec="1089176456" usec="0"/>
    <to sec="1089176457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.54.51.192" dst_port="9898" proto="tcp" src_ip="16.73.181.6" src_port="80"/>
      <filter dst_ip="194.54.51.192" dst_port="5554" proto="tcp" src_ip="16.73.181.6" src_port="80"/>
      <from sec="1089176545" usec="0"/>
      <to sec="1089176554" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="194.54.51.192" dst_port="9898" proto="tcp" src_ip="17.29.217.6" src_port="80"/>
      <filter dst_ip="194.54.51.192" dst_port="5554" proto="tcp" src_ip="17.29.217.6" src_port="80"/>
      <from sec="1089176547" usec="0"/>
      <to sec="1089176550" usec="0"/>
    </slice>
    <from sec="1089176545" usec="0"/>
    <to sec="1089176554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.99.140.72" dst_port="5554" proto="tcp" src_ip="21.210.173.54" src_port="80"/>
      <filter dst_ip="149.99.140.72" dst_port="9898" proto="tcp" src_ip="21.210.173.54" src_port="80"/>
      <from sec="1089176852" usec="0"/>
      <to sec="1089176855" usec="0"/>
    </slice>
    <from sec="1089176848" usec="0"/>
    <to sec="1089176855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.169.142.84" dst_port="5554" proto="tcp" src_ip="17.29.44.152" src_port="80"/>
      <filter dst_ip="141.169.142.84" dst_port="9898" proto="tcp" src_ip="17.29.44.152" src_port="80"/>
      <from sec="1089176905" usec="0"/>
      <to sec="1089176907" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.169.142.84" dst_port="5554" proto="tcp" src_ip="75.20.168.152" src_port="80"/>
      <filter dst_ip="141.169.142.84" dst_port="9898" proto="tcp" src_ip="75.20.168.152" src_port="80"/>
      <from sec="1089176905" usec="0"/>
      <to sec="1089176908" usec="0"/>
    </slice>
    <from sec="1089176904" usec="0"/>
    <to sec="1089176908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06575,2.19531,999,0 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
544[label="215.203.11.29s;1pkt 1fpkt", shape=ellipse, color=green];
852[label="215.203.11.29s;1pkt 1fpkt", shape=triangle, color=blue];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.39.29:1863, 136.213.34.127:49980}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49980: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
544--852[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.34.127" dst_port="49980" src_ip="197.30.39.29" src_port="1863"/>
    </slice>
    <from sec="1089177065" usec="0"/>
    <to sec="1089177069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06575,2.19531,011,0 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
548[label="215.223.221.45s;1pkt 1fpkt", shape=ellipse, color=green];
856[label="215.223.221.45s;1pkt 1fpkt", shape=triangle, color=blue];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.187.17.45:4278, 141.169.45.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4278: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
548--856[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.45.65" dst_port="80" src_ip="215.187.17.45" src_port="4278"/>
    </slice>
    <from sec="1089176730" usec="0"/>
    <to sec="1089176735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="210.250.107.94" src_port="80"/>
      <filter dst_port="5554" proto="tcp" src_ip="210.250.107.94" src_port="80"/>
      <from sec="1089176563" usec="0"/>
      <to sec="1089176565" usec="0"/>
    </slice>
    <from sec="1089176562" usec="0"/>
    <to sec="1089176568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,503,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="tcp" src_ip="74.213.226.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="udp" src_ip="74.213.226.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="tcp" src_ip="74.213.226.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="udp" src_ip="74.213.226.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="tcp" src_ip="74.213.226.99" src_port="2590"/>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="udp" src_ip="74.213.226.99" src_port="2590"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="tcp" src_ip="74.213.226.99" src_port="2590"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="udp" src_ip="74.213.226.99" src_port="2590"/>
      <from sec="1089177261" usec="0"/>
      <to sec="1089177265" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="tcp" src_ip="169.51.222.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="udp" src_ip="169.51.222.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="tcp" src_ip="169.51.222.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="udp" src_ip="169.51.222.99" src_port="1026"/>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="tcp" src_ip="169.51.222.99" src_port="2590"/>
      <filter dst_ip="16.0.106.1" dst_port="137" proto="udp" src_ip="169.51.222.99" src_port="2590"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="tcp" src_ip="169.51.222.99" src_port="2590"/>
      <filter dst_ip="16.0.106.1" dst_port="80" proto="udp" src_ip="169.51.222.99" src_port="2590"/>
      <from sec="1089177262" usec="0"/>
      <to sec="1089177263" usec="0"/>
    </slice>
    <from sec="1089177261" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.99.12.35" dst_port="9898" proto="tcp" src_ip="215.188.140.144" src_port="80"/>
      <filter dst_ip="141.169.0.221" dst_port="9898" proto="tcp" src_ip="215.188.140.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176891" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="149.99.12.35" dst_port="9898" proto="tcp" src_ip="196.128.36.144" src_port="80"/>
      <filter dst_ip="141.169.0.221" dst_port="9898" proto="tcp" src_ip="196.128.36.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176893" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="149.99.12.35" dst_port="9898" proto="tcp" src_ip="16.130.80.144" src_port="80"/>
      <filter dst_ip="141.169.0.221" dst_port="9898" proto="tcp" src_ip="16.130.80.144" src_port="80"/>
      <from sec="1089176889" usec="0"/>
      <to sec="1089176893" usec="0"/>
    </slice>
    <from sec="1089176889" usec="0"/>
    <to sec="1089176893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.911856,2.02487,002,1 0 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
194[label="16.50.36.156s;254pkt 254fpkt", shape=rectangle, color=red];
867[label="16.50.36.156s;186pkt 186fpkt", shape=triangle, color=blue];
6371[label="16.50.36.156;480pkt 480fpkt", shape=pentagon, color=darkviolet];
8304[label="16.50.36.156;480pkt 480fpkt", shape=invtriangle, color=brown];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.50.36.156:1030, *:137}[52.9167%]&lt;BR/&gt;{16.50.36.156:1026, *:137}[47.0833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (33.8571%)&lt;BR/&gt; 1026: (16.1429%)&gt;];
}
194--867[label="1;186pkt 186fpkt"];
194--6371[label="1;254pkt 254fpkt"];
194--8304[label="1;254pkt 254fpkt"];
867--6371[label="1;186pkt 186fpkt"];
867--8304[label="1;186pkt 186fpkt"];
6371--8304[label="1;480pkt 480fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="16.50.36.156" src_port="1030"/>
      <filter dst_port="137" src_ip="16.50.36.156" src_port="1026"/>
    </slice>
    <from sec="1089176788" usec="0"/>
    <to sec="1089177039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="16.74.120.203" src_port="80"/>
      <from sec="1089176421" usec="0"/>
      <to sec="1089177120" usec="0"/>
    </slice>
    <from sec="1089176421" usec="0"/>
    <to sec="1089177120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.54.48.36" dst_port="5554" proto="tcp" src_ip="208.178.170.240" src_port="80"/>
      <filter dst_ip="194.54.48.36" dst_port="9898" proto="tcp" src_ip="208.178.170.240" src_port="80"/>
      <from sec="1089177163" usec="0"/>
      <to sec="1089177166" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="194.54.48.36" dst_port="5554" proto="tcp" src_ip="222.71.134.240" src_port="80"/>
      <filter dst_ip="194.54.48.36" dst_port="9898" proto="tcp" src_ip="222.71.134.240" src_port="80"/>
      <from sec="1089177162" usec="0"/>
      <to sec="1089177167" usec="0"/>
    </slice>
    <from sec="1089177162" usec="0"/>
    <to sec="1089177167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02706,1.98627,001,1 0 1 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
293[label="73.53.90.65s;501pkt 501fpkt", shape=rectangle, color=red];
943[label="73.53.90.65s;381pkt 381fpkt", shape=triangle, color=blue];
3493[label="73.53.90.65;s;501pkt 501fpkt", shape=diamond, color=yellow];
5446[label="73.53.90.65;501pkt 501fpkt", shape=pentagon, color=darkviolet];
7757[label="73.53.90.65;501pkt 501fpkt", shape=invtriangle, color=brown];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.53.90.65:*, *:9898}[50.0998%]&lt;BR/&gt;{73.53.90.65:*, *:5554}[49.9002%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.7652%)&lt;BR/&gt; 5554: (24.2348%)&lt;BR/&gt; 2080: (0.104822%)&lt;BR/&gt; 2079: (0.104822%)&lt;BR/&gt; 2078: (0.104822%)&gt;];
}
293--943[label="1;381pkt 381fpkt"];
293--3493[label="1;501pkt 501fpkt"];
293--5446[label="1;501pkt 501fpkt"];
293--7757[label="1;501pkt 501fpkt"];
943--3493[label="1;381pkt 381fpkt"];
943--5446[label="1;381pkt 381fpkt"];
943--7757[label="1;381pkt 381fpkt"];
3493--5446[label="1;501pkt 501fpkt"];
3493--7757[label="1;501pkt 501fpkt"];
5446--7757[label="1;501pkt 501fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.53.90.65"/>
      <filter dst_port="5554" src_ip="73.53.90.65"/>
    </slice>
    <from sec="1089177156" usec="0"/>
    <to sec="1089177167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0621,2.00445,001,0 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
678[label="208.163.140.90s;501pkt 501fpkt", shape=ellipse, color=green];
971[label="208.163.140.90s;501pkt 501fpkt", shape=triangle, color=blue];
5754[label="208.163.140.90;501pkt 501fpkt", shape=pentagon, color=darkviolet];
7940[label="208.163.140.90;500pkt 500fpkt", shape=invtriangle, color=brown];
9178[label="208.163.140.90;500pkt 500fpkt", shape=invhouse, color=bisque];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.163.140.90:*, *:5554}[50.0998%]&lt;BR/&gt;{208.163.140.90:*, *:9898}[49.9002%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.03%)&lt;BR/&gt; 9898: (24.97%)&lt;BR/&gt; 2882: (0.0998801%)&lt;BR/&gt; 2881: (0.0998801%)&lt;BR/&gt; 2880: (0.0998801%)&gt;];
}
678--971[label="1;501pkt 501fpkt"];
678--5754[label="1;501pkt 501fpkt"];
678--7940[label="1;500pkt 500fpkt"];
678--9178[label="1;500pkt 500fpkt"];
971--5754[label="1;501pkt 501fpkt"];
971--7940[label="1;500pkt 500fpkt"];
971--9178[label="1;500pkt 500fpkt"];
5754--7940[label="1;500pkt 500fpkt"];
5754--9178[label="1;500pkt 500fpkt"];
7940--9178[label="1;500pkt 500fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.163.140.90"/>
      <filter dst_port="9898" src_ip="208.163.140.90"/>
    </slice>
    <from sec="1089176861" usec="0"/>
    <to sec="1089176865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89763,2.22017,001,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.211.233.88" proto="tcp" src_port="9898"/>
      <filter dst_ip="1.211.233.88" proto="tcp" src_port="9898"/>
      <filter dst_ip="1.211.233.88" proto="tcp" src_port="9898"/>
      <filter dst_ip="1.211.233.88" proto="tcp" src_port="9898"/>
      <from sec="1089176813" usec="0"/>
      <to sec="1089176815" usec="0"/>
    </slice>
    <from sec="1089176813" usec="0"/>
    <to sec="1089176817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1189[label="210.222.253.203;d;2pkt 2fpkt", shape=diamond, color=yellow];
1192[label="195.46.102.58;s;237pkt 237fpkt", shape=diamond, color=yellow];
5368[label="195.46.102.58;255pkt 255fpkt", shape=pentagon, color=darkviolet];
7712[label="195.46.102.58;256pkt 256fpkt", shape=invtriangle, color=brown];
9065[label="195.46.102.58;255pkt 255fpkt", shape=invhouse, color=bisque];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.102.58:80, 18.210.92.46:*}[24.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0448%)&lt;BR/&gt; 554: (8.55721%)&lt;BR/&gt; 65275: (0.39801%)&lt;BR/&gt; 25500: (0.39801%)&lt;BR/&gt; 8888: (0.39801%)&gt;];
}
1189--1192[label="1;2pkt 2fpkt"];
1189--5368[label="1;2pkt 2fpkt"];
1189--7712[label="1;2pkt 2fpkt"];
1189--9065[label="1;2pkt 2fpkt"];
1192--4618[label="0.0253165;6pkt 6fpkt"];
1192--5368[label="1;237pkt 237fpkt"];
1192--7712[label="1;237pkt 237fpkt"];
1192--9065[label="1;237pkt 237fpkt"];
5368--7712[label="1;255pkt 255fpkt"];
5368--9065[label="1;255pkt 255fpkt"];
7712--9065[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_ip="18.210.92.46" src_ip="195.46.102.58" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1221[label="222.38.193.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
1222[label="141.169.212.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
4227[label="222.38.193.193;d;1pkt 1fpkt", shape=hexagon, color=black];
4228[label="141.169.212.228;s;1pkt 1fpkt", shape=hexagon, color=black];
7046[label="141.169.212.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8711[label="141.169.212.228;1pkt 1fpkt", shape=invtriangle, color=brown];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.212.228:2046, 222.38.193.193:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2046: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
1221--1222[label="1;1pkt 1fpkt"];
1221--4227[label="1;1pkt 1fpkt"];
1221--4228[label="1;1pkt 1fpkt"];
1221--7046[label="1;1pkt 1fpkt"];
1221--8711[label="1;1pkt 1fpkt"];
1222--4227[label="1;1pkt 1fpkt"];
1222--4228[label="1;1pkt 1fpkt"];
1222--7046[label="1;1pkt 1fpkt"];
1222--8711[label="1;1pkt 1fpkt"];
4227--4228[label="1;1pkt 1fpkt"];
4227--7046[label="1;1pkt 1fpkt"];
4227--8711[label="1;1pkt 1fpkt"];
4228--7046[label="1;1pkt 1fpkt"];
4228--8711[label="1;1pkt 1fpkt"];
7046--8711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.38.193.193" dst_port="1755" src_ip="141.169.212.228" src_port="2046"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11102,2.00444,999,1 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
32[label="141.169.197.62s;1pkt 1fpkt", shape=rectangle, color=red];
1266[label="198.1.135.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
1267[label="141.169.197.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
3533[label="141.169.197.62;s;1pkt 1fpkt", shape=hexagon, color=black];
5411[label="141.169.197.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9079[label="141.169.197.62;1pkt 1fpkt", shape=invhouse, color=bisque];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.197.62:49390, 198.1.135.23:8018}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49390: (50%)&lt;BR/&gt; 8018: (50%)&gt;];
}
32--1266[label="1;1pkt 1fpkt"];
32--1267[label="1;1pkt 1fpkt"];
32--3533[label="1;1pkt 1fpkt"];
32--5411[label="1;1pkt 1fpkt"];
32--9079[label="1;1pkt 1fpkt"];
1266--1267[label="1;1pkt 1fpkt"];
1266--3533[label="1;1pkt 1fpkt"];
1266--5411[label="1;1pkt 1fpkt"];
1266--9079[label="1;1pkt 1fpkt"];
1267--3533[label="1;1pkt 1fpkt"];
1267--5411[label="1;1pkt 1fpkt"];
1267--9079[label="1;1pkt 1fpkt"];
3533--5411[label="1;1pkt 1fpkt"];
3533--9079[label="1;1pkt 1fpkt"];
5411--9079[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.1.135.23" dst_port="8018" src_ip="141.169.197.62" src_port="49390"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
5091[label="169.51.80.35;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6489[label="169.51.193.168;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.80.35:*, *:80}[56.8627%]&lt;BR/&gt;{169.51.193.168:*, *:80}[31.3725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 5190: (4.90196%)&lt;BR/&gt; 2624: (0.980392%)&lt;BR/&gt; 2623: (0.980392%)&lt;BR/&gt; 2622: (0.980392%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="169.51.80.35"/>
      <filter dst_port="80" src_ip="169.51.193.168"/>
    </slice>
    <from sec="1089176426" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31749,1.98517,503,1 1 1 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
85[label="169.51.4.171s;2pkt 2fpkt", shape=rectangle, color=red];
154[label="136.213.156.162s;1pkt 1fpkt", shape=rectangle, color=red];
761[label="73.56.100.171s;1pkt 1fpkt", shape=ellipse, color=green];
1046[label="73.56.100.171s;1pkt 1fpkt", shape=triangle, color=blue];
1132[label="18.142.155.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
1135[label="169.51.4.171;s;3pkt 3fpkt", shape=diamond, color=yellow];
1293[label="149.99.12.35;d;7pkt 7fpkt", shape=diamond, color=yellow];
1296[label="16.130.80.144;s;9pkt 9fpkt", shape=diamond, color=yellow];
3078[label="197.30.34.77;d;6pkt 6fpkt", shape=diamond, color=yellow];
4073[label="18.142.155.54;d;1pkt 1fpkt", shape=hexagon, color=black];
4230[label="197.30.34.77;d;6pkt 6fpkt", shape=hexagon, color=black];
6240[label="16.130.80.144;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.130.80.144:80, 149.99.12.35:*}[52.9412%]&lt;BR/&gt;{*:*, 197.30.34.77:1863}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.7234%)&lt;BR/&gt; 1863: (14.8936%)&lt;BR/&gt; 50786: (6.38298%)&lt;BR/&gt; 28698: (6.38298%)&lt;BR/&gt; 54527: (4.25532%)&gt;];
}
85--761[label="1;1pkt 1fpkt"];
85--1046[label="1;1pkt 1fpkt"];
85--1132[label="1;1pkt 1fpkt"];
85--1135[label="0.5;1pkt 1fpkt"];
85--1293[label="0.5;1pkt 1fpkt"];
85--1296[label="0.5;1pkt 1fpkt"];
85--4073[label="1;1pkt 1fpkt"];
85--6240[label="0.5;1pkt 1fpkt"];
154--1293[label="1;1pkt 1fpkt"];
154--1296[label="1;1pkt 1fpkt"];
154--4618[label="1;1pkt 1fpkt"];
154--6240[label="1;1pkt 1fpkt"];
761--1046[label="1;1pkt 1fpkt"];
761--1132[label="1;1pkt 1fpkt"];
761--1135[label="1;1pkt 1fpkt"];
761--4073[label="1;1pkt 1fpkt"];
1046--1132[label="1;1pkt 1fpkt"];
1046--1135[label="1;1pkt 1fpkt"];
1046--4073[label="1;1pkt 1fpkt"];
1132--1135[label="1;1pkt 1fpkt"];
1132--4073[label="1;1pkt 1fpkt"];
1135--3078[label="0.333333;1pkt 1fpkt"];
1135--4073[label="1;1pkt 1fpkt"];
1135--4230[label="0.333333;1pkt 1fpkt"];
1293--1296[label="1;7pkt 7fpkt"];
1293--4618[label="0.142857;1pkt 1fpkt"];
1293--6240[label="1;7pkt 7fpkt"];
1296--4618[label="0.111111;1pkt 1fpkt"];
1296--6240[label="1;9pkt 9fpkt"];
3078--4230[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.77" dst_port="1863"/>
      <filter dst_ip="149.99.12.35" src_ip="16.130.80.144" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
1301[label="136.213.27.145;d;417pkt 417fpkt", shape=diamond, color=yellow];
1302[label="218.170.45.176;s;417pkt 417fpkt", shape=diamond, color=yellow];
3673[label="218.170.45.176;s;144pkt 144fpkt", shape=hexagon, color=black];
4239[label="136.213.27.145;d;417pkt 417fpkt", shape=hexagon, color=black];
6561[label="218.170.45.176;448pkt 448fpkt", shape=pentagon, color=darkviolet];
8419[label="218.170.45.176;447pkt 447fpkt", shape=invtriangle, color=brown];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.170.45.176:*, 136.213.27.145:80}[38.6161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.2009%)&lt;BR/&gt; 53: (2.48908%)&lt;BR/&gt; 445: (2.40175%)&lt;BR/&gt; 25: (1.9869%)&lt;BR/&gt; 1863: (1.76856%)&gt;];
}
1301--1302[label="1;417pkt 417fpkt"];
1301--3673[label="1;144pkt 144fpkt"];
1301--4239[label="1;417pkt 417fpkt"];
1301--4618[label="0.00719424;3pkt 3fpkt"];
1301--4619[label="0.0191847;8pkt 8fpkt"];
1301--4623[label="0.0311751;13pkt 13fpkt"];
1301--4624[label="0.00239808;1pkt 1fpkt"];
1301--4627[label="0.00239808;1pkt 1fpkt"];
1301--4628[label="0.0143885;6pkt 6fpkt"];
1301--4631[label="0.0191847;8pkt 8fpkt"];
1301--4634[label="0.00239808;1pkt 1fpkt"];
1301--4635[label="0.0143885;6pkt 6fpkt"];
1301--6561[label="1;417pkt 417fpkt"];
1301--8419[label="0.997602;416pkt 416fpkt"];
1302--3673[label="1;144pkt 144fpkt"];
1302--4239[label="1;417pkt 417fpkt"];
1302--4618[label="0.00719424;3pkt 3fpkt"];
1302--4619[label="0.0191847;8pkt 8fpkt"];
1302--4623[label="0.0311751;13pkt 13fpkt"];
1302--4624[label="0.00239808;1pkt 1fpkt"];
1302--4627[label="0.00239808;1pkt 1fpkt"];
1302--4628[label="0.0143885;6pkt 6fpkt"];
1302--4631[label="0.0191847;8pkt 8fpkt"];
1302--4634[label="0.00239808;1pkt 1fpkt"];
1302--4635[label="0.0143885;6pkt 6fpkt"];
1302--6561[label="1;417pkt 417fpkt"];
1302--8419[label="0.997602;416pkt 416fpkt"];
3673--4239[label="1;144pkt 144fpkt"];
3673--4618[label="0.0208333;3pkt 3fpkt"];
3673--4619[label="0.0555556;8pkt 8fpkt"];
3673--4623[label="0.0555556;8pkt 8fpkt"];
3673--4624[label="0.00694444;1pkt 1fpkt"];
3673--4627[label="0.00694444;1pkt 1fpkt"];
3673--4631[label="0.0555556;8pkt 8fpkt"];
3673--4634[label="0.00694444;1pkt 1fpkt"];
3673--6561[label="1;144pkt 144fpkt"];
3673--8419[label="0.993056;143pkt 143fpkt"];
4239--4618[label="0.00719424;3pkt 3fpkt"];
4239--4619[label="0.0191847;8pkt 8fpkt"];
4239--4623[label="0.0311751;13pkt 13fpkt"];
4239--4624[label="0.00239808;1pkt 1fpkt"];
4239--4627[label="0.00239808;1pkt 1fpkt"];
4239--4628[label="0.0143885;6pkt 6fpkt"];
4239--4631[label="0.0191847;8pkt 8fpkt"];
4239--4634[label="0.00239808;1pkt 1fpkt"];
4239--4635[label="0.0143885;6pkt 6fpkt"];
4239--6561[label="1;417pkt 417fpkt"];
4239--8419[label="0.997602;416pkt 416fpkt"];
6561--8419[label="1;447pkt 447fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.27.145" dst_port="80" src_ip="218.170.45.176"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944082,2.17115,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
336[label="215.185.131.97s;35pkt 35fpkt", shape=rectangle, color=red];
1327[label="220.87.35.97;s;4857pkt 4857fpkt", shape=diamond, color=yellow];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.87.35.97:1036, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
336--1327[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.87.35.97" src_port="1036"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1435[label="192.168.1.112;d;994pkt 994fpkt", shape=diamond, color=yellow];
1436[label="141.169.173.24;s;996pkt 996fpkt", shape=diamond, color=yellow];
4970[label="141.169.173.24;995pkt 995fpkt", shape=pentagon, color=darkviolet];
7461[label="141.169.173.24;996pkt 996fpkt", shape=invtriangle, color=brown];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.173.24:139, 192.168.1.112:*}[99.7992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.9372%)&lt;BR/&gt; 4998: (0.0502386%)&lt;BR/&gt; 4995: (0.0502386%)&lt;BR/&gt; 4987: (0.0502386%)&lt;BR/&gt; 4984: (0.0502386%)&gt;];
}
1435--1436[label="1;994pkt 994fpkt"];
1435--4970[label="1;994pkt 994fpkt"];
1435--7461[label="1;994pkt 994fpkt"];
1436--4970[label="1;995pkt 995fpkt"];
1436--7461[label="1;996pkt 996fpkt"];
4970--7461[label="1;995pkt 995fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.1.112" src_ip="141.169.173.24" src_port="139"/>
    </slice>
    <from sec="1089176413" usec="0"/>
    <to sec="1089176900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13162,2.14577,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
7[label="194.138.94.13s;4pkt 4fpkt", shape=rectangle, color=red];
1444[label="194.138.94.13;s;25pkt 25fpkt", shape=diamond, color=yellow];
1445[label="149.99.160.194;d;25pkt 25fpkt", shape=diamond, color=yellow];
3930[label="149.99.160.194;d;9pkt 9fpkt", shape=hexagon, color=black];
4307[label="194.138.94.13;s;25pkt 25fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.138.94.13:554, 149.99.160.194:*}[64%]&lt;BR/&gt;{194.138.94.13:*, 149.99.160.194:6970}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (30.6818%)&lt;BR/&gt; 6970: (19.3182%)&lt;BR/&gt; 18890: (2.84091%)&lt;BR/&gt; 11134: (2.84091%)&lt;BR/&gt; 19352: (2.27273%)&gt;];
}
7--1444[label="1;4pkt 4fpkt"];
7--1445[label="1;4pkt 4fpkt"];
7--3930[label="0.5;2pkt 2fpkt"];
7--4307[label="1;4pkt 4fpkt"];
1444--1445[label="1;25pkt 25fpkt"];
1444--3930[label="1;9pkt 9fpkt"];
1444--4307[label="1;25pkt 25fpkt"];
1445--3930[label="1;9pkt 9fpkt"];
1445--4307[label="1;25pkt 25fpkt"];
3930--4307[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.160.194" src_ip="194.138.94.13" src_port="554"/>
      <filter dst_ip="149.99.160.194" dst_port="6970" src_ip="194.138.94.13"/>
    </slice>
    <from sec="1089176422" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.169.26.171"/>
      <from sec="1089176482" usec="0"/>
      <to sec="1089176494" usec="0"/>
    </slice>
    <from sec="1089176482" usec="0"/>
    <to sec="1089176494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1285[label="16.48.120.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
1554[label="136.213.169.243;s;2pkt 2fpkt", shape=diamond, color=yellow];
3665[label="16.48.120.226;d;1pkt 1fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.169.243:3755, 197.30.200.119:28801}[50%]&lt;BR/&gt;{136.213.169.243:2300, 16.48.120.226:2300}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2300: (75%)&lt;BR/&gt; 28801: (12.5%)&lt;BR/&gt; 3755: (12.5%)&gt;];
}
1285--1554[label="1;1pkt 1fpkt"];
1285--3665[label="1;1pkt 1fpkt"];
1554--3665[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.48.120.226" dst_port="2300" src_ip="136.213.169.243" src_port="2300"/>
      <filter dst_ip="197.30.200.119" dst_port="28801" src_ip="136.213.169.243" src_port="3755"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1540[label="149.99.160.151;s;5pkt 5fpkt", shape=diamond, color=yellow];
1558[label="195.134.219.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
3776[label="149.99.160.151;s;5pkt 5fpkt", shape=hexagon, color=black];
3876[label="195.134.219.50;d;1pkt 1fpkt", shape=hexagon, color=black];
6318[label="149.99.160.151;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.160.151:1306, 195.134.219.50:8000}[20%]&lt;BR/&gt;{149.99.160.151:2071, 197.30.34.73:1863}[20%]&lt;BR/&gt;{149.99.160.151:2001, 197.30.34.120:1863}[20%]&lt;BR/&gt;{149.99.160.151:1720, 197.30.39.149:1863}[20%]&lt;BR/&gt;{149.99.160.151:1036, 212.32.38.227:5050}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (26.4706%)&lt;BR/&gt; 8000: (14.7059%)&lt;BR/&gt; 1306: (14.7059%)&lt;BR/&gt; 5050: (8.82353%)&lt;BR/&gt; 2071: (8.82353%)&gt;];
}
1540--1558[label="1;1pkt 1fpkt"];
1540--3776[label="1;5pkt 5fpkt"];
1540--3876[label="1;1pkt 1fpkt"];
1540--6318[label="1;5pkt 5fpkt"];
1558--3776[label="1;1pkt 1fpkt"];
1558--3876[label="1;1pkt 1fpkt"];
1558--6318[label="1;1pkt 1fpkt"];
3776--3876[label="1;1pkt 1fpkt"];
3776--6318[label="1;5pkt 5fpkt"];
3876--6318[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.32.38.227" dst_port="5050" src_ip="149.99.160.151" src_port="1036"/>
      <filter dst_ip="197.30.39.149" dst_port="1863" src_ip="149.99.160.151" src_port="1720"/>
      <filter dst_ip="197.30.34.120" dst_port="1863" src_ip="149.99.160.151" src_port="2001"/>
      <filter dst_ip="197.30.34.73" dst_port="1863" src_ip="149.99.160.151" src_port="2071"/>
      <filter dst_ip="195.134.219.50" dst_port="8000" src_ip="149.99.160.151" src_port="1306"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1567[label="195.46.104.137;s;450pkt 450fpkt", shape=diamond, color=yellow];
1568[label="110.146.57.205;d;341pkt 341fpkt", shape=diamond, color=yellow];
3671[label="195.46.104.137;s;358pkt 358fpkt", shape=hexagon, color=black];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.104.137:139, 110.146.57.205:*}[42.8889%]&lt;BR/&gt;{195.46.104.137:445, 110.146.57.205:*}[40.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.5004%)&lt;BR/&gt; 445: (24.369%)&lt;BR/&gt; 4548: (0.261097%)&lt;BR/&gt; 4448: (0.261097%)&lt;BR/&gt; 2419: (0.261097%)&gt;];
}
1567--1568[label="1;341pkt 341fpkt"];
1567--3671[label="1;358pkt 358fpkt"];
1568--3671[label="0.876833;299pkt 299fpkt"];
</description>
    <slice>
      <filter dst_ip="110.146.57.205" src_ip="195.46.104.137" src_port="139"/>
      <filter dst_ip="110.146.57.205" src_ip="195.46.104.137" src_port="445"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
1304[label="204.80.137.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
1573[label="169.51.203.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
6399[label="169.51.203.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8322[label="169.51.203.158;1pkt 1fpkt", shape=invtriangle, color=brown];
9390[label="169.51.203.158;1pkt 1fpkt", shape=invhouse, color=bisque];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.203.158:4846, 204.80.137.6:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4846: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
1304--1573[label="1;1pkt 1fpkt"];
1304--6399[label="1;1pkt 1fpkt"];
1304--8322[label="1;1pkt 1fpkt"];
1304--9390[label="1;1pkt 1fpkt"];
1573--6399[label="1;1pkt 1fpkt"];
1573--8322[label="1;1pkt 1fpkt"];
1573--9390[label="1;1pkt 1fpkt"];
6399--8322[label="1;1pkt 1fpkt"];
6399--9390[label="1;1pkt 1fpkt"];
8322--9390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.137.6" dst_port="1755" src_ip="169.51.203.158" src_port="4846"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1585[label="141.169.158.85;s;4pkt 4fpkt", shape=diamond, color=yellow];
1586[label="223.139.116.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
3880[label="141.169.158.85;s;4pkt 4fpkt", shape=hexagon, color=black];
4383[label="223.139.116.152;d;1pkt 1fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.158.85:0, 203.204.32.98:0}[25%]&lt;BR/&gt;{141.169.158.85:8277, 223.139.116.152:8292}[25%]&lt;BR/&gt;{141.169.158.85:5554, 215.182.38.5:4158}[25%]&lt;BR/&gt;{141.169.158.85:9898, 215.182.38.5:4540}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (20%)&lt;BR/&gt; 8277: (20%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 9898: (10%)&lt;BR/&gt; 5554: (10%)&gt;];
}
1585--1586[label="1;1pkt 1fpkt"];
1585--3880[label="1;4pkt 4fpkt"];
1585--4383[label="1;1pkt 1fpkt"];
1586--3880[label="1;1pkt 1fpkt"];
1586--4383[label="1;1pkt 1fpkt"];
3880--4383[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.182.38.5" dst_port="4540" src_ip="141.169.158.85" src_port="9898"/>
      <filter dst_ip="215.182.38.5" dst_port="4158" src_ip="141.169.158.85" src_port="5554"/>
      <filter dst_ip="223.139.116.152" dst_port="8292" src_ip="141.169.158.85" src_port="8277"/>
      <filter dst_ip="203.204.32.98" src_ip="141.169.158.85"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
1589[label="18.230.241.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
1590[label="141.169.200.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
3882[label="141.169.200.235;s;1pkt 1fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.200.235:49333, 18.230.241.84:8004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49333: (50%)&lt;BR/&gt; 8004: (50%)&gt;];
}
1589--1590[label="1;1pkt 1fpkt"];
1589--3882[label="1;1pkt 1fpkt"];
1590--3882[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.230.241.84" dst_port="8004" src_ip="141.169.200.235" src_port="49333"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1755[label="141.169.132.219;s;195pkt 195fpkt", shape=diamond, color=yellow];
1767[label="153.42.123.226;d;187pkt 187fpkt", shape=diamond, color=yellow];
4164[label="141.169.132.219;s;195pkt 195fpkt", shape=hexagon, color=black];
6975[label="141.169.132.219;200pkt 200fpkt", shape=pentagon, color=darkviolet];
8664[label="141.169.132.219;200pkt 200fpkt", shape=invtriangle, color=brown];
9548[label="141.169.132.219;200pkt 200fpkt", shape=invhouse, color=bisque];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.132.219:*, 153.42.123.226:80}[93.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3628%)&lt;BR/&gt; 5554: (0.424809%)&lt;BR/&gt; 3779: (0.254885%)&lt;BR/&gt; 3778: (0.254885%)&lt;BR/&gt; 3777: (0.254885%)&gt;];
}
1755--1767[label="1;187pkt 187fpkt"];
1755--4164[label="1;195pkt 195fpkt"];
1755--6975[label="1;195pkt 195fpkt"];
1755--8664[label="1;195pkt 195fpkt"];
1755--9548[label="1;195pkt 195fpkt"];
1767--4164[label="1;187pkt 187fpkt"];
1767--6975[label="1;187pkt 187fpkt"];
1767--8664[label="1;187pkt 187fpkt"];
1767--9548[label="1;187pkt 187fpkt"];
4164--6975[label="1;195pkt 195fpkt"];
4164--8664[label="1;195pkt 195fpkt"];
4164--9548[label="1;195pkt 195fpkt"];
6975--8664[label="1;200pkt 200fpkt"];
6975--9548[label="1;200pkt 200fpkt"];
8664--9548[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_ip="153.42.123.226" dst_port="80" src_ip="141.169.132.219"/>
    </slice>
    <from sec="1089176494" usec="0"/>
    <to sec="1089177264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,001,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
181[label="210.250.107.94s;503pkt 503fpkt", shape=rectangle, color=red];
1778[label="210.250.107.94;s;503pkt 503fpkt", shape=diamond, color=yellow];
3641[label="210.250.107.94;s;503pkt 503fpkt", shape=hexagon, color=black];
5785[label="210.250.107.94;502pkt 502fpkt", shape=pentagon, color=darkviolet];
7962[label="210.250.107.94;502pkt 502fpkt", shape=invtriangle, color=brown];
9190[label="210.250.107.94;503pkt 503fpkt", shape=invhouse, color=bisque];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.250.107.94:*, *:5554}[50.497%]&lt;BR/&gt;{210.250.107.94:*, *:9898}[49.503%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.2321%)&lt;BR/&gt; 9898: (24.7679%)&lt;BR/&gt; 4180: (0.0994695%)&lt;BR/&gt; 4179: (0.0994695%)&lt;BR/&gt; 4178: (0.0994695%)&gt;];
}
181--1778[label="1;503pkt 503fpkt"];
181--3641[label="1;503pkt 503fpkt"];
181--5785[label="1;502pkt 502fpkt"];
181--7962[label="1;502pkt 502fpkt"];
181--9190[label="1;503pkt 503fpkt"];
1778--3641[label="1;503pkt 503fpkt"];
1778--5785[label="1;502pkt 502fpkt"];
1778--7962[label="1;502pkt 502fpkt"];
1778--9190[label="1;503pkt 503fpkt"];
3641--5785[label="1;502pkt 502fpkt"];
3641--7962[label="1;502pkt 502fpkt"];
3641--9190[label="1;503pkt 503fpkt"];
5785--7962[label="1;502pkt 502fpkt"];
5785--9190[label="1;502pkt 502fpkt"];
7962--9190[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="210.250.107.94"/>
      <filter dst_port="9898" src_ip="210.250.107.94"/>
    </slice>
    <from sec="1089176562" usec="0"/>
    <to sec="1089176568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
1805[label="149.99.247.44;d;1631pkt 1631fpkt", shape=diamond, color=yellow];
1806[label="174.66.118.138;s;1455pkt 1455fpkt", shape=diamond, color=yellow];
4367[label="149.99.247.44;d;1631pkt 1631fpkt", shape=hexagon, color=black];
6188[label="174.66.118.138;1770pkt 1770fpkt", shape=pentagon, color=darkviolet];
8208[label="174.66.118.138;1770pkt 1770fpkt", shape=invtriangle, color=brown];
9317[label="174.66.118.138;1769pkt 1769fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.66.118.138:*, 149.99.247.44:9010}[99.8871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9010: (49.9801%)&lt;BR/&gt; 65446: (0.0299222%)&lt;BR/&gt; 65445: (0.0299222%)&lt;BR/&gt; 65433: (0.0299222%)&lt;BR/&gt; 65431: (0.0299222%)&gt;];
}
1805--1806[label="1;1455pkt 1455fpkt"];
1805--4367[label="1;1631pkt 1631fpkt"];
1805--6188[label="0.998774;1629pkt 1629fpkt"];
1805--8208[label="0.998774;1629pkt 1629fpkt"];
1805--9317[label="0.998161;1628pkt 1628fpkt"];
1806--4367[label="1;1455pkt 1455fpkt"];
1806--6188[label="1;1455pkt 1455fpkt"];
1806--8208[label="1;1455pkt 1455fpkt"];
1806--9317[label="0.999313;1454pkt 1454fpkt"];
4367--6188[label="0.998774;1629pkt 1629fpkt"];
4367--8208[label="0.998774;1629pkt 1629fpkt"];
4367--9317[label="0.998161;1628pkt 1628fpkt"];
6188--8208[label="1;1770pkt 1770fpkt"];
6188--9317[label="1;1769pkt 1769fpkt"];
8208--9317[label="1;1769pkt 1769fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.247.44" dst_port="9010" src_ip="174.66.118.138"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1817[label="73.162.59.72;d;2pkt 2fpkt", shape=diamond, color=yellow];
1818[label="136.213.34.226;s;4pkt 4fpkt", shape=diamond, color=yellow];
3982[label="136.213.34.226;s;4pkt 4fpkt", shape=hexagon, color=black];
4092[label="73.162.59.72;d;2pkt 2fpkt", shape=hexagon, color=black];
7027[label="136.213.34.226;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8697[label="136.213.34.226;3pkt 3fpkt", shape=invtriangle, color=brown];
9565[label="136.213.34.226;4pkt 4fpkt", shape=invhouse, color=bisque];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.34.226:1142, 197.30.34.95:1863}[25%]&lt;BR/&gt;{136.213.34.226:1036, 197.30.38.237:1863}[25%]&lt;BR/&gt;{136.213.34.226:1124, 73.162.59.72:10553}[25%]&lt;BR/&gt;{136.213.34.226:1128, 73.162.59.72:10553}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10553: (30.4348%)&lt;BR/&gt; 1863: (19.5652%)&lt;BR/&gt; 1128: (15.2174%)&lt;BR/&gt; 1124: (15.2174%)&lt;BR/&gt; 1036: (10.8696%)&gt;];
}
1817--1818[label="1;2pkt 2fpkt"];
1817--3982[label="1;2pkt 2fpkt"];
1817--4092[label="1;2pkt 2fpkt"];
1817--7027[label="1;2pkt 2fpkt"];
1817--8697[label="1;2pkt 2fpkt"];
1817--9565[label="1;2pkt 2fpkt"];
1818--3982[label="1;4pkt 4fpkt"];
1818--4092[label="1;2pkt 2fpkt"];
1818--7027[label="1;4pkt 4fpkt"];
1818--8697[label="1;3pkt 3fpkt"];
1818--9565[label="1;4pkt 4fpkt"];
3982--4092[label="1;2pkt 2fpkt"];
3982--7027[label="1;4pkt 4fpkt"];
3982--8697[label="1;3pkt 3fpkt"];
3982--9565[label="1;4pkt 4fpkt"];
4092--7027[label="1;2pkt 2fpkt"];
4092--8697[label="1;2pkt 2fpkt"];
4092--9565[label="1;2pkt 2fpkt"];
7027--8697[label="1;3pkt 3fpkt"];
7027--9565[label="1;4pkt 4fpkt"];
8697--9565[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="73.162.59.72" dst_port="10553" src_ip="136.213.34.226" src_port="1128"/>
      <filter dst_ip="73.162.59.72" dst_port="10553" src_ip="136.213.34.226" src_port="1124"/>
      <filter dst_ip="197.30.38.237" dst_port="1863" src_ip="136.213.34.226" src_port="1036"/>
      <filter dst_ip="197.30.34.95" dst_port="1863" src_ip="136.213.34.226" src_port="1142"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1572[label="192.152.167.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
1831[label="149.99.108.221;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.108.221:4013, 197.30.39.26:1863}[20%]&lt;BR/&gt;{149.99.108.221:1026, 192.152.167.113:1030}[20%]&lt;BR/&gt;{149.99.108.221:4168, 212.32.38.247:5050}[20%]&lt;BR/&gt;{149.99.108.221:4662, 213.152.209.202:64639}[20%]&lt;BR/&gt;{149.99.108.221:4662, 213.152.209.202:65357}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (16.6667%)&lt;BR/&gt; 1030: (16.6667%)&lt;BR/&gt; 1026: (16.6667%)&lt;BR/&gt; 65357: (8.33333%)&lt;BR/&gt; 64639: (8.33333%)&gt;];
}
1572--1831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.152.209.202" dst_port="65357" src_ip="149.99.108.221" src_port="4662"/>
      <filter dst_ip="213.152.209.202" dst_port="64639" src_ip="149.99.108.221" src_port="4662"/>
      <filter dst_ip="212.32.38.247" dst_port="5050" src_ip="149.99.108.221" src_port="4168"/>
      <filter dst_ip="192.152.167.113" dst_port="1030" src_ip="149.99.108.221" src_port="1026"/>
      <filter dst_ip="197.30.39.26" dst_port="1863" src_ip="149.99.108.221" src_port="4013"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
1574[label="194.60.0.145;s;3pkt 3fpkt", shape=diamond, color=yellow];
1836[label="20.85.162.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
2034[label="195.184.133.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
3674[label="194.60.0.145;s;3pkt 3fpkt", shape=hexagon, color=black];
6248[label="194.60.0.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8245[label="194.60.0.145;3pkt 3fpkt", shape=invtriangle, color=brown];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.0.145:6699, 20.85.162.63:3024}[33.3333%]&lt;BR/&gt;{194.60.0.145:6699, 195.184.133.137:3294}[33.3333%]&lt;BR/&gt;{194.60.0.145:1050, 75.39.15.253:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3294: (17.8571%)&lt;BR/&gt; 3024: (17.8571%)&lt;BR/&gt; 1050: (14.2857%)&gt;];
}
1574--1836[label="1;1pkt 1fpkt"];
1574--2034[label="1;1pkt 1fpkt"];
1574--3674[label="1;3pkt 3fpkt"];
1574--6248[label="1;3pkt 3fpkt"];
1574--8245[label="1;3pkt 3fpkt"];
1836--3674[label="1;1pkt 1fpkt"];
1836--6248[label="1;1pkt 1fpkt"];
1836--8245[label="1;1pkt 1fpkt"];
2034--3674[label="1;1pkt 1fpkt"];
2034--6248[label="1;1pkt 1fpkt"];
2034--8245[label="1;1pkt 1fpkt"];
3674--6248[label="1;3pkt 3fpkt"];
3674--8245[label="1;3pkt 3fpkt"];
6248--8245[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="75.39.15.253" dst_port="6699" src_ip="194.60.0.145" src_port="1050"/>
      <filter dst_ip="195.184.133.137" dst_port="3294" src_ip="194.60.0.145" src_port="6699"/>
      <filter dst_ip="20.85.162.63" dst_port="3024" src_ip="194.60.0.145" src_port="6699"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1853[label="192.180.116.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
1854[label="141.169.141.173;s;2pkt 2fpkt", shape=diamond, color=yellow];
3799[label="141.169.141.173;s;2pkt 2fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.141.173:64776, 197.30.38.34:1863}[50%]&lt;BR/&gt;{141.169.141.173:61395, 192.180.116.140:8080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61395: (30%)&lt;BR/&gt; 8080: (30%)&lt;BR/&gt; 64776: (20%)&lt;BR/&gt; 1863: (20%)&gt;];
}
1853--1854[label="1;1pkt 1fpkt"];
1853--3799[label="1;1pkt 1fpkt"];
1854--3799[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.180.116.140" dst_port="8080" src_ip="141.169.141.173" src_port="61395"/>
      <filter dst_ip="197.30.38.34" dst_port="1863" src_ip="141.169.141.173" src_port="64776"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1886[label="73.162.59.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
1887[label="194.60.149.89;s;3pkt 3fpkt", shape=diamond, color=yellow];
3694[label="73.162.59.77;d;2pkt 2fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.149.89:1113, 197.30.38.14:1863}[33.3333%]&lt;BR/&gt;{194.60.149.89:1327, 73.162.59.77:10352}[33.3333%]&lt;BR/&gt;{194.60.149.89:1340, 73.162.59.77:10352}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10352: (42.8571%)&lt;BR/&gt; 1340: (21.4286%)&lt;BR/&gt; 1327: (21.4286%)&lt;BR/&gt; 1863: (7.14286%)&lt;BR/&gt; 1113: (7.14286%)&gt;];
}
1886--1887[label="1;2pkt 2fpkt"];
1886--3694[label="1;2pkt 2fpkt"];
1887--3694[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="73.162.59.77" dst_port="10352" src_ip="194.60.149.89" src_port="1340"/>
      <filter dst_ip="73.162.59.77" dst_port="10352" src_ip="194.60.149.89" src_port="1327"/>
      <filter dst_ip="197.30.38.14" dst_port="1863" src_ip="194.60.149.89" src_port="1113"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1892[label="16.106.7.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
1893[label="149.99.91.125;s;4pkt 4fpkt", shape=diamond, color=yellow];
4265[label="16.106.7.0;d;2pkt 2fpkt", shape=hexagon, color=black];
4399[label="149.99.91.125;s;4pkt 4fpkt", shape=hexagon, color=black];
6054[label="149.99.91.125;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.91.125:1045, 197.30.38.59:1863}[25%]&lt;BR/&gt;{149.99.91.125:1082, 212.32.38.237:119}[25%]&lt;BR/&gt;{149.99.91.125:3836, 16.106.7.0:554}[25%]&lt;BR/&gt;{149.99.91.125:6970, 16.106.7.0:22926}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22926: (16.6667%)&lt;BR/&gt; 6970: (16.6667%)&lt;BR/&gt; 3836: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&lt;BR/&gt; 1863: (10%)&gt;];
}
1892--1893[label="1;2pkt 2fpkt"];
1892--4265[label="1;2pkt 2fpkt"];
1892--4399[label="1;2pkt 2fpkt"];
1892--6054[label="1;2pkt 2fpkt"];
1893--4265[label="1;2pkt 2fpkt"];
1893--4399[label="1;4pkt 4fpkt"];
1893--6054[label="1;3pkt 3fpkt"];
4265--4399[label="1;2pkt 2fpkt"];
4265--6054[label="1;2pkt 2fpkt"];
4399--6054[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="16.106.7.0" dst_port="22926" src_ip="149.99.91.125" src_port="6970"/>
      <filter dst_ip="16.106.7.0" dst_port="554" src_ip="149.99.91.125" src_port="3836"/>
      <filter dst_ip="212.32.38.237" dst_port="119" src_ip="149.99.91.125" src_port="1082"/>
      <filter dst_ip="197.30.38.59" dst_port="1863" src_ip="149.99.91.125" src_port="1045"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1895[label="195.46.99.117;d;231pkt 231fpkt", shape=diamond, color=yellow];
1896[label="215.184.168.183;s;208pkt 208fpkt", shape=diamond, color=yellow];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.168.183:*, 195.46.99.117:139}[49.3506%]&lt;BR/&gt;{215.184.168.183:*, 195.46.99.117:445}[49.3506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (24.9431%)&lt;BR/&gt; 139: (24.8292%)&lt;BR/&gt; 65431: (0.22779%)&lt;BR/&gt; 65430: (0.22779%)&lt;BR/&gt; 64533: (0.22779%)&gt;];
}
1895--1896[label="1;208pkt 208fpkt"];
1895--5948[label="0.00865801;2pkt 2fpkt"];
1895--8061[label="0.00865801;2pkt 2fpkt"];
1895--9242[label="0.00865801;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.46.99.117" dst_port="445" src_ip="215.184.168.183"/>
      <filter dst_ip="195.46.99.117" dst_port="139" src_ip="215.184.168.183"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944082,2.17115,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
150[label="141.169.12.121s;1pkt 1fpkt", shape=rectangle, color=red];
1898[label="141.169.12.121;s;129pkt 129fpkt", shape=diamond, color=yellow];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.12.121:*, 220.44.188.136:80}[26.3566%]&lt;BR/&gt;{141.169.12.121:*, 194.216.48.100:80}[22.4806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2308%)&lt;BR/&gt; 2259: (0.769231%)&lt;BR/&gt; 443: (0.769231%)&lt;BR/&gt; 2349: (0.384615%)&lt;BR/&gt; 2348: (0.384615%)&gt;];
}
150--1898[label="1;1pkt 1fpkt"];
1898--3162[label="0.0147059;1pkt 1fpkt"];
1898--4619[label="0.0697674;9pkt 9fpkt"];
1898--4623[label="0.0310078;4pkt 4fpkt"];
1898--4631[label="0.0697674;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="220.44.188.136" dst_port="80" src_ip="141.169.12.121"/>
      <filter dst_ip="194.216.48.100" dst_port="80" src_ip="141.169.12.121"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
2046[label="141.169.137.88;d;3pkt 3fpkt", shape=diamond, color=yellow];
2047[label="221.12.71.43;s;3pkt 3fpkt", shape=diamond, color=yellow];
5199[label="221.12.71.43;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7594[label="221.12.71.43;2pkt 2fpkt", shape=invtriangle, color=brown];
9005[label="221.12.71.43;3pkt 3fpkt", shape=invhouse, color=bisque];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.12.71.43:49422, 141.169.137.88:80}[33.3333%]&lt;BR/&gt;{221.12.71.43:49430, 141.169.137.88:80}[33.3333%]&lt;BR/&gt;{221.12.71.43:49432, 141.169.137.88:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49432: (17.8571%)&lt;BR/&gt; 49430: (17.8571%)&lt;BR/&gt; 49422: (14.2857%)&gt;];
}
2046--2047[label="1;3pkt 3fpkt"];
2046--4623[label="0.333333;1pkt 1fpkt"];
2046--5199[label="1;3pkt 3fpkt"];
2046--7594[label="1;2pkt 2fpkt"];
2046--9005[label="1;3pkt 3fpkt"];
2047--4623[label="0.333333;1pkt 1fpkt"];
2047--5199[label="1;3pkt 3fpkt"];
2047--7594[label="1;2pkt 2fpkt"];
2047--9005[label="1;3pkt 3fpkt"];
5199--7594[label="1;2pkt 2fpkt"];
5199--9005[label="1;3pkt 3fpkt"];
7594--9005[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.137.88" dst_port="80" src_ip="221.12.71.43" src_port="49432"/>
      <filter dst_ip="141.169.137.88" dst_port="80" src_ip="221.12.71.43" src_port="49430"/>
      <filter dst_ip="141.169.137.88" dst_port="80" src_ip="221.12.71.43" src_port="49422"/>
    </slice>
    <from sec="1089176600" usec="0"/>
    <to sec="1089176677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
168[label="208.226.211.36s;980pkt 980fpkt", shape=rectangle, color=red];
439[label="73.145.92.185s;315pkt 315fpkt", shape=rectangle, color=red];
617[label="208.226.211.36s;980pkt 980fpkt", shape=ellipse, color=green];
779[label="73.145.92.185s;315pkt 315fpkt", shape=ellipse, color=green];
916[label="208.226.211.36s;1295pkt 1295fpkt", shape=triangle, color=blue];
2073[label="208.226.211.36;s;985pkt 985fpkt", shape=diamond, color=yellow];
5116[label="208.226.211.36;984pkt 984fpkt", shape=pentagon, color=darkviolet];
6650[label="73.145.92.185;315pkt 315fpkt", shape=pentagon, color=darkviolet];
7549[label="208.226.211.36;985pkt 985fpkt", shape=invtriangle, color=brown];
8475[label="73.145.92.185;315pkt 315fpkt", shape=invtriangle, color=brown];
8981[label="208.226.211.36;984pkt 984fpkt", shape=invhouse, color=bisque];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.226.211.36:*, *:*}[75.7692%]&lt;BR/&gt;{*:*, *:5554}[32.6154%]&lt;BR/&gt;{*:*, *:9898}[30.6923%]&lt;BR/&gt;{73.145.92.185:*, *:*}[24.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (15.4442%)&lt;BR/&gt; 9898: (14.8054%)&lt;BR/&gt; 1023: (10.1857%)&lt;BR/&gt; 445: (9.56465%)&lt;BR/&gt; 3050: (0.0591506%)&gt;];
}
168--617[label="1;980pkt 980fpkt"];
168--916[label="1;980pkt 980fpkt"];
168--2073[label="1;980pkt 980fpkt"];
168--5116[label="0.99898;979pkt 979fpkt"];
168--7549[label="1;980pkt 980fpkt"];
168--8981[label="0.99898;979pkt 979fpkt"];
439--779[label="1;315pkt 315fpkt"];
439--916[label="1;315pkt 315fpkt"];
439--6650[label="1;315pkt 315fpkt"];
439--8475[label="1;315pkt 315fpkt"];
617--916[label="1;980pkt 980fpkt"];
617--2073[label="1;980pkt 980fpkt"];
617--5116[label="0.99898;979pkt 979fpkt"];
617--7549[label="1;980pkt 980fpkt"];
617--8981[label="0.99898;979pkt 979fpkt"];
779--916[label="1;315pkt 315fpkt"];
779--6650[label="1;315pkt 315fpkt"];
779--8475[label="1;315pkt 315fpkt"];
916--2073[label="0.994924;980pkt 980fpkt"];
916--5116[label="0.994919;979pkt 979fpkt"];
916--6650[label="1;315pkt 315fpkt"];
916--7549[label="0.994924;980pkt 980fpkt"];
916--8475[label="1;315pkt 315fpkt"];
916--8981[label="0.994919;979pkt 979fpkt"];
2073--5116[label="1;984pkt 984fpkt"];
2073--7549[label="1;985pkt 985fpkt"];
2073--8981[label="1;984pkt 984fpkt"];
5116--7549[label="1;984pkt 984fpkt"];
5116--8981[label="1;984pkt 984fpkt"];
6650--8475[label="1;315pkt 315fpkt"];
7549--8981[label="1;984pkt 984fpkt"];
</description>
    <slice>
      <filter src_ip="208.226.211.36"/>
      <filter src_ip="73.145.92.185"/>
      <filter dst_port="5554"/>
      <filter dst_port="9898"/>
    </slice>
    <from sec="1089176666" usec="0"/>
    <to sec="1089176673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
2162[label="73.162.59.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
2163[label="136.213.34.41;s;3pkt 3fpkt", shape=diamond, color=yellow];
3808[label="73.162.59.82;d;2pkt 2fpkt", shape=hexagon, color=black];
4413[label="136.213.34.41;s;3pkt 3fpkt", shape=hexagon, color=black];
5170[label="136.213.34.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.34.41:3725, 197.30.39.146:1863}[33.3333%]&lt;BR/&gt;{136.213.34.41:4117, 73.162.59.82:10320}[33.3333%]&lt;BR/&gt;{136.213.34.41:4119, 73.162.59.82:10320}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10320: (41.6667%)&lt;BR/&gt; 4119: (20.8333%)&lt;BR/&gt; 4117: (20.8333%)&lt;BR/&gt; 3725: (8.33333%)&lt;BR/&gt; 1863: (8.33333%)&gt;];
}
2162--2163[label="1;2pkt 2fpkt"];
2162--3808[label="1;2pkt 2fpkt"];
2162--4413[label="1;2pkt 2fpkt"];
2162--5170[label="1;2pkt 2fpkt"];
2163--3808[label="1;2pkt 2fpkt"];
2163--4413[label="1;3pkt 3fpkt"];
2163--5170[label="1;2pkt 2fpkt"];
3808--4413[label="1;2pkt 2fpkt"];
3808--5170[label="1;2pkt 2fpkt"];
4413--5170[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="73.162.59.82" dst_port="10320" src_ip="136.213.34.41" src_port="4119"/>
      <filter dst_ip="73.162.59.82" dst_port="10320" src_ip="136.213.34.41" src_port="4117"/>
      <filter dst_ip="197.30.39.146" dst_port="1863" src_ip="136.213.34.41" src_port="3725"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.51.177.231"/>
      <from sec="1089176402" usec="0"/>
      <to sec="1089177224" usec="0"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944082,2.17115,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
105[label="149.99.107.202s;1pkt 1fpkt", shape=rectangle, color=red];
2199[label="149.99.107.202;s;51pkt 51fpkt", shape=diamond, color=yellow];
2759[label="215.139.133.211;d;43pkt 43fpkt", shape=diamond, color=yellow];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.107.202:*, 215.139.133.211:20}[72.549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (39.4737%)&lt;BR/&gt; 21: (6.31579%)&lt;BR/&gt; 80: (4.21053%)&lt;BR/&gt; 2616: (1.57895%)&lt;BR/&gt; 2646: (1.05263%)&gt;];
}
105--2199[label="1;1pkt 1fpkt"];
105--2759[label="1;1pkt 1fpkt"];
2199--2759[label="1;43pkt 43fpkt"];
2199--3621[label="0.0588235;3pkt 3fpkt"];
2199--4619[label="0.0392157;2pkt 2fpkt"];
2199--4623[label="0.0196078;1pkt 1fpkt"];
2199--4628[label="0.0196078;1pkt 1fpkt"];
2199--4631[label="0.0392157;2pkt 2fpkt"];
2199--4635[label="0.0196078;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.139.133.211" dst_port="20" src_ip="149.99.107.202"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
2243[label="194.138.94.13;d;26pkt 26fpkt", shape=diamond, color=yellow];
2244[label="149.99.160.194;s;22pkt 22fpkt", shape=diamond, color=yellow];
4149[label="194.138.94.13;d;26pkt 26fpkt", shape=hexagon, color=black];
4150[label="149.99.160.194;s;22pkt 22fpkt", shape=hexagon, color=black];
6736[label="149.99.160.194;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.160.194:*, 194.138.94.13:554}[61.5385%]&lt;BR/&gt;{149.99.160.194:6970, 194.138.94.13:*}[34.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (31.1475%)&lt;BR/&gt; 6970: (16.8033%)&lt;BR/&gt; 0: (4.09836%)&lt;BR/&gt; 30870: (2.04918%)&lt;BR/&gt; 27706: (2.04918%)&gt;];
}
2243--2244[label="1;22pkt 22fpkt"];
2243--4149[label="1;26pkt 26fpkt"];
2243--4150[label="1;22pkt 22fpkt"];
2243--6736[label="1;26pkt 26fpkt"];
2244--4149[label="1;22pkt 22fpkt"];
2244--4150[label="1;22pkt 22fpkt"];
2244--6736[label="1;22pkt 22fpkt"];
4149--4150[label="1;22pkt 22fpkt"];
4149--6736[label="1;26pkt 26fpkt"];
4150--6736[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="194.138.94.13" src_ip="149.99.160.194" src_port="6970"/>
      <filter dst_ip="194.138.94.13" dst_port="554" src_ip="149.99.160.194"/>
    </slice>
    <from sec="1089176422" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.805815,2.06873,053,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
79[label="218.83.36.157s;2pkt 2fpkt", shape=rectangle, color=red];
2279[label="218.83.36.157;s;9pkt 9fpkt", shape=diamond, color=yellow];
2692[label="141.169.8.138;d;53pkt 53fpkt", shape=diamond, color=yellow];
6385[label="218.83.36.157;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.83.36.129:80, 141.169.8.138:*}[81.1321%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3151%)&lt;BR/&gt; 41424: (2.73973%)&lt;BR/&gt; 41423: (2.73973%)&lt;BR/&gt; 41467: (2.05479%)&lt;BR/&gt; 41458: (2.05479%)&gt;];
}
79--2279[label="1;2pkt 2fpkt"];
79--2692[label="1;2pkt 2fpkt"];
79--6385[label="1;2pkt 2fpkt"];
2279--2692[label="1;9pkt 9fpkt"];
2279--6385[label="1;9pkt 9fpkt"];
2692--6385[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.8.138" src_ip="218.83.36.129" src_port="80"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
2253[label="169.51.20.101;s;5pkt 5fpkt", shape=diamond, color=yellow];
2328[label="208.132.101.48;d;3pkt 3fpkt", shape=diamond, color=yellow];
3830[label="169.51.20.101;s;4pkt 4fpkt", shape=hexagon, color=black];
5859[label="169.51.20.101;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8007[label="169.51.20.101;5pkt 5fpkt", shape=invtriangle, color=brown];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.20.101:80, 16.177.52.80:49831}[20%]&lt;BR/&gt;{169.51.20.101:80, 16.177.52.100:40103}[20%]&lt;BR/&gt;{169.51.20.101:80, 208.132.101.48:62913}[20%]&lt;BR/&gt;{169.51.20.101:80, 208.132.101.48:63899}[20%]&lt;BR/&gt;{169.51.20.101:80, 208.132.101.48:63925}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63925: (11.3636%)&lt;BR/&gt; 63899: (11.3636%)&lt;BR/&gt; 62913: (11.3636%)&lt;BR/&gt; 49831: (9.09091%)&gt;];
}
2253--2328[label="1;3pkt 3fpkt"];
2253--3830[label="1;4pkt 4fpkt"];
2253--5859[label="1;5pkt 5fpkt"];
2253--8007[label="1;5pkt 5fpkt"];
2328--3830[label="1;3pkt 3fpkt"];
2328--5859[label="1;3pkt 3fpkt"];
2328--8007[label="1;3pkt 3fpkt"];
3830--5859[label="1;4pkt 4fpkt"];
3830--8007[label="1;4pkt 4fpkt"];
5859--8007[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.132.101.48" dst_port="63925" src_ip="169.51.20.101" src_port="80"/>
      <filter dst_ip="208.132.101.48" dst_port="63899" src_ip="169.51.20.101" src_port="80"/>
      <filter dst_ip="208.132.101.48" dst_port="62913" src_ip="169.51.20.101" src_port="80"/>
      <filter dst_ip="16.177.52.100" dst_port="40103" src_ip="169.51.20.101" src_port="80"/>
      <filter dst_ip="16.177.52.80" dst_port="49831" src_ip="169.51.20.101" src_port="80"/>
    </slice>
    <from sec="1089176429" usec="0"/>
    <to sec="1089177155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
2078[label="136.213.152.4;s;133pkt 133fpkt", shape=diamond, color=yellow];
2346[label="208.98.148.60;d;54pkt 54fpkt", shape=diamond, color=yellow];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.152.4:*, *:25}[45.8647%]&lt;BR/&gt;{136.213.152.4:25, 208.98.148.60:*}[32.3308%]&lt;BR/&gt;{136.213.152.4:*, 208.98.148.60:113}[21.8045%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.3636%)&lt;BR/&gt; 113: (13.6364%)&lt;BR/&gt; 50126: (0.534759%)&lt;BR/&gt; 50121: (0.534759%)&lt;BR/&gt; 50120: (0.534759%)&gt;];
}
2078--2346[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.213.152.4"/>
      <filter dst_ip="208.98.148.60" src_ip="136.213.152.4" src_port="25"/>
      <filter dst_ip="208.98.148.60" dst_port="113" src_ip="136.213.152.4"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.54.1.24"/>
      <from sec="1089176402" usec="0"/>
      <to sec="1089177152" usec="0"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
2218[label="200.235.149.25;d;62pkt 62fpkt", shape=diamond, color=yellow];
2444[label="195.46.126.197;s;87pkt 87fpkt", shape=diamond, color=yellow];
4140[label="195.46.126.197;s;52pkt 52fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.126.197:*, 200.235.149.25:*}[71.2644%]&lt;BR/&gt;{195.46.126.197:*, *:80}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (6.96517%)&lt;BR/&gt; 110: (2.23881%)&lt;BR/&gt; 123: (0.995025%)&lt;BR/&gt; 64873: (0.746269%)&lt;BR/&gt; 63572: (0.746269%)&gt;];
}
2218--2444[label="1;62pkt 62fpkt"];
2218--4140[label="0.903846;47pkt 47fpkt"];
2444--4140[label="1;52pkt 52fpkt"];
2444--4628[label="0.0229885;2pkt 2fpkt"];
2444--4635[label="0.0229885;2pkt 2fpkt"];
4140--4628[label="0.0192308;1pkt 1fpkt"];
4140--4635[label="0.0192308;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.235.149.25" src_ip="195.46.126.197"/>
      <filter dst_port="80" src_ip="195.46.126.197"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
2334[label="212.91.35.58;s;53pkt 53fpkt", shape=diamond, color=yellow];
2515[label="141.169.132.233;d;53pkt 53fpkt", shape=diamond, color=yellow];
5366[label="212.91.35.58;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7710[label="212.91.35.58;53pkt 53fpkt", shape=invtriangle, color=brown];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.91.35.58:80, 141.169.132.233:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2103: (0.943396%)&lt;BR/&gt; 2101: (0.943396%)&lt;BR/&gt; 2100: (0.943396%)&lt;BR/&gt; 2099: (0.943396%)&gt;];
}
2334--2515[label="1;53pkt 53fpkt"];
2334--5366[label="1;53pkt 53fpkt"];
2334--7710[label="1;53pkt 53fpkt"];
2515--5366[label="1;53pkt 53fpkt"];
2515--7710[label="1;53pkt 53fpkt"];
5366--7710[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.132.233" src_ip="212.91.35.58" src_port="80"/>
    </slice>
    <from sec="1089176720" usec="0"/>
    <to sec="1089176790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
437[label="208.170.18.184s;535pkt 535fpkt", shape=rectangle, color=red];
440[label="210.239.163.185s;502pkt 502fpkt", shape=rectangle, color=red];
780[label="210.239.163.185s;746pkt 746fpkt", shape=ellipse, color=green];
1062[label="210.239.163.185s;684pkt 684fpkt", shape=triangle, color=blue];
2529[label="210.239.163.185;s;502pkt 502fpkt", shape=diamond, color=yellow];
2530[label="208.170.18.184;s;535pkt 535fpkt", shape=diamond, color=yellow];
6639[label="208.170.18.184;535pkt 535fpkt", shape=pentagon, color=darkviolet];
6655[label="210.239.163.185;502pkt 502fpkt", shape=pentagon, color=darkviolet];
8467[label="208.170.18.184;535pkt 535fpkt", shape=invtriangle, color=brown];
8476[label="210.239.163.185;501pkt 501fpkt", shape=invtriangle, color=brown];
9461[label="208.170.18.184;534pkt 534fpkt", shape=invhouse, color=bisque];
9464[label="210.239.163.185;502pkt 502fpkt", shape=invhouse, color=bisque];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.170.18.184:*, *:*}[51.5911%]&lt;BR/&gt;{210.239.163.185:*, *:9898}[24.2044%]&lt;BR/&gt;{210.239.163.185:*, *:5554}[24.2044%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (20.8907%)&lt;BR/&gt; 9898: (18.1083%)&lt;BR/&gt; 1023: (6.54015%)&lt;BR/&gt; 445: (4.46091%)&lt;BR/&gt; 4976: (0.105852%)&gt;];
}
437--780[label="0.456075;244pkt 244fpkt"];
437--1062[label="0.340187;182pkt 182fpkt"];
437--2530[label="1;535pkt 535fpkt"];
437--6639[label="1;535pkt 535fpkt"];
437--8467[label="1;535pkt 535fpkt"];
437--9461[label="1;534pkt 534fpkt"];
440--780[label="1;502pkt 502fpkt"];
440--1062[label="1;502pkt 502fpkt"];
440--2529[label="1;502pkt 502fpkt"];
440--6655[label="1;502pkt 502fpkt"];
440--8476[label="1;501pkt 501fpkt"];
440--9464[label="1;502pkt 502fpkt"];
780--1062[label="1;684pkt 684fpkt"];
780--2529[label="1;502pkt 502fpkt"];
780--2530[label="0.456075;244pkt 244fpkt"];
780--6639[label="0.456075;244pkt 244fpkt"];
780--6655[label="1;502pkt 502fpkt"];
780--8467[label="0.456075;244pkt 244fpkt"];
780--8476[label="1;501pkt 501fpkt"];
780--9461[label="0.455056;243pkt 243fpkt"];
780--9464[label="1;502pkt 502fpkt"];
1062--2529[label="1;502pkt 502fpkt"];
1062--2530[label="0.340187;182pkt 182fpkt"];
1062--6639[label="0.340187;182pkt 182fpkt"];
1062--6655[label="1;502pkt 502fpkt"];
1062--8467[label="0.340187;182pkt 182fpkt"];
1062--8476[label="1;501pkt 501fpkt"];
1062--9461[label="0.338951;181pkt 181fpkt"];
1062--9464[label="1;502pkt 502fpkt"];
2529--6655[label="1;502pkt 502fpkt"];
2529--8476[label="1;501pkt 501fpkt"];
2529--9464[label="1;502pkt 502fpkt"];
2530--6639[label="1;535pkt 535fpkt"];
2530--8467[label="1;535pkt 535fpkt"];
2530--9461[label="1;534pkt 534fpkt"];
6639--8467[label="1;535pkt 535fpkt"];
6639--9461[label="1;534pkt 534fpkt"];
6655--8476[label="1;501pkt 501fpkt"];
6655--9464[label="1;502pkt 502fpkt"];
8467--9461[label="1;534pkt 534fpkt"];
8476--9464[label="1;501pkt 501fpkt"];
</description>
    <slice>
      <filter src_ip="208.170.18.184"/>
      <filter dst_port="5554" src_ip="210.239.163.185"/>
      <filter dst_port="9898" src_ip="210.239.163.185"/>
    </slice>
    <from sec="1089176783" usec="0"/>
    <to sec="1089176792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944082,2.17115,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
10[label="141.169.164.18s;2pkt 2fpkt", shape=rectangle, color=red];
2066[label="210.205.244.249;d;2pkt 2fpkt", shape=diamond, color=yellow];
2069[label="141.169.164.18;s;261pkt 261fpkt", shape=diamond, color=yellow];
2539[label="210.205.244.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.164.18:*, 220.182.250.153:80}[34.2205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6255%)&lt;BR/&gt; 3150: (0.374532%)&lt;BR/&gt; 2957: (0.374532%)&lt;BR/&gt; 2954: (0.374532%)&lt;BR/&gt; 2930: (0.374532%)&gt;];
}
10--2069[label="0.5;1pkt 1fpkt"];
2066--2069[label="0.5;1pkt 1fpkt"];
2066--4623[label="0.5;1pkt 1fpkt"];
2069--2539[label="1;2pkt 2fpkt"];
2069--4623[label="0.00383142;1pkt 1fpkt"];
2069--4628[label="0.00383142;1pkt 1fpkt"];
2069--4635[label="0.00383142;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.182.250.153" dst_port="80" src_ip="141.169.164.18"/>
    </slice>
    <from sec="1089176648" usec="0"/>
    <to sec="1089177262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
2354[label="75.1.13.204;d;2pkt 2fpkt", shape=diamond, color=yellow];
2565[label="149.99.179.131;s;3pkt 3fpkt", shape=diamond, color=yellow];
4088[label="75.1.13.204;d;2pkt 2fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.179.131:3572, 212.32.38.254:5050}[33.3333%]&lt;BR/&gt;{149.99.179.131:3568, 75.1.13.204:554}[33.3333%]&lt;BR/&gt;{149.99.179.131:6970, 75.1.13.204:9738}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9738: (21.4286%)&lt;BR/&gt; 6970: (21.4286%)&lt;BR/&gt; 3568: (21.4286%)&lt;BR/&gt; 554: (21.4286%)&lt;BR/&gt; 5050: (7.14286%)&gt;];
}
2354--2565[label="1;2pkt 2fpkt"];
2354--4088[label="1;2pkt 2fpkt"];
2565--4088[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="75.1.13.204" dst_port="9738" src_ip="149.99.179.131" src_port="6970"/>
      <filter dst_ip="75.1.13.204" dst_port="554" src_ip="149.99.179.131" src_port="3568"/>
      <filter dst_ip="212.32.38.254" dst_port="5050" src_ip="149.99.179.131" src_port="3572"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
2581[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
2582[label="141.169.117.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
4244[label="192.168.128.255;d;1pkt 1fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.117.37:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
2581--2582[label="1;1pkt 1fpkt"];
2581--4244[label="1;1pkt 1fpkt"];
2582--4244[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="141.169.117.37" src_port="4445"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
2592[label="75.1.132.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
2593[label="169.51.116.65;s;2pkt 2fpkt", shape=diamond, color=yellow];
3991[label="169.51.116.65;s;2pkt 2fpkt", shape=hexagon, color=black];
5450[label="169.51.116.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7758[label="169.51.116.65;1pkt 1fpkt", shape=invtriangle, color=brown];
9090[label="169.51.116.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.116.65:4814, 75.1.132.150:554}[50%]&lt;BR/&gt;{169.51.116.65:6970, 75.1.132.150:20614}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4814: (33.3333%)&lt;BR/&gt; 554: (33.3333%)&lt;BR/&gt; 20614: (16.6667%)&lt;BR/&gt; 6970: (16.6667%)&gt;];
}
2592--2593[label="1;2pkt 2fpkt"];
2592--3991[label="1;2pkt 2fpkt"];
2592--5450[label="1;1pkt 1fpkt"];
2592--7758[label="1;1pkt 1fpkt"];
2592--9090[label="1;1pkt 1fpkt"];
2593--3991[label="1;2pkt 2fpkt"];
2593--5450[label="1;1pkt 1fpkt"];
2593--7758[label="1;1pkt 1fpkt"];
2593--9090[label="1;1pkt 1fpkt"];
3991--5450[label="1;1pkt 1fpkt"];
3991--7758[label="1;1pkt 1fpkt"];
3991--9090[label="1;1pkt 1fpkt"];
5450--7758[label="1;1pkt 1fpkt"];
5450--9090[label="1;1pkt 1fpkt"];
7758--9090[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.1.132.150" dst_port="20614" src_ip="169.51.116.65" src_port="6970"/>
      <filter dst_ip="75.1.132.150" dst_port="554" src_ip="169.51.116.65" src_port="4814"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
2382[label="173.19.179.199;s;188pkt 188fpkt", shape=diamond, color=yellow];
2611[label="219.21.46.55;d;166pkt 166fpkt", shape=diamond, color=yellow];
6785[label="173.19.179.199;204pkt 204fpkt", shape=pentagon, color=darkviolet];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.179.199:*, 219.21.46.55:6667}[44.1176%]&lt;BR/&gt;{173.19.179.199:113, 219.21.46.55:*}[44.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (23.2975%)&lt;BR/&gt; 113: (22.9391%)&lt;BR/&gt; 53: (6.81004%)&lt;BR/&gt; 40186: (0.268817%)&lt;BR/&gt; 40123: (0.268817%)&gt;];
}
2382--2437[label="0.0131579;1pkt 1fpkt"];
2382--2611[label="1;166pkt 166fpkt"];
2382--3352[label="0.0151515;1pkt 1fpkt"];
2382--3599[label="0.00735294;1pkt 1fpkt"];
2382--3695[label="0.01;1pkt 1fpkt"];
2382--4284[label="0.00833333;1pkt 1fpkt"];
2382--4421[label="0.00819672;1pkt 1fpkt"];
2382--4627[label="0.0106383;2pkt 2fpkt"];
2382--4634[label="0.0106383;2pkt 2fpkt"];
2382--6785[label="1;188pkt 188fpkt"];
2611--6785[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_ip="219.21.46.55" src_ip="173.19.179.199" src_port="113"/>
      <filter dst_ip="219.21.46.55" dst_port="6667" src_ip="173.19.179.199"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.46.101.26"/>
      <from sec="1089176401" usec="0"/>
      <to sec="1089177226" usec="0"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.200.36.73"/>
      <from sec="1089176629" usec="0"/>
      <to sec="1089177184" usec="0"/>
    </slice>
    <from sec="1089176629" usec="0"/>
    <to sec="1089177184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="73.145.24.136"/>
      <from sec="1089176734" usec="0"/>
      <to sec="1089177227" usec="0"/>
    </slice>
    <from sec="1089176734" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00254,2.04881,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
2798[label="141.169.142.84;d;8pkt 8fpkt", shape=diamond, color=yellow];
2801[label="75.20.168.152;s;8pkt 8fpkt", shape=diamond, color=yellow];
4187[label="75.20.168.152;s;8pkt 8fpkt", shape=hexagon, color=black];
6335[label="75.20.168.152;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9369[label="75.20.168.152;8pkt 8fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.20.168.152:80, 141.169.142.84:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2808: (6.09756%)&lt;BR/&gt; 2807: (6.09756%)&lt;BR/&gt; 2806: (6.09756%)&lt;BR/&gt; 2804: (6.09756%)&gt;];
}
2798--2801[label="1;8pkt 8fpkt"];
2798--4187[label="1;8pkt 8fpkt"];
2798--6335[label="1;8pkt 8fpkt"];
2798--9369[label="0.875;7pkt 7fpkt"];
2801--4187[label="1;8pkt 8fpkt"];
2801--6335[label="1;8pkt 8fpkt"];
2801--9369[label="0.875;7pkt 7fpkt"];
4187--6335[label="1;8pkt 8fpkt"];
4187--9369[label="0.875;7pkt 7fpkt"];
6335--9369[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.142.84" src_ip="75.20.168.152" src_port="80"/>
    </slice>
    <from sec="1089176822" usec="0"/>
    <to sec="1089177277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
2804[label="136.213.23.5;s;11pkt 11fpkt", shape=diamond, color=yellow];
2811[label="75.9.212.11;d;3pkt 3fpkt", shape=diamond, color=yellow];
4703[label="136.213.23.5;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7313[label="136.213.23.5;13pkt 13fpkt", shape=invtriangle, color=brown];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.23.5:*, 75.9.193.241:80}[20%]&lt;BR/&gt;{136.213.23.5:*, 75.9.212.11:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.0244%)&lt;BR/&gt; 554: (6.09756%)&lt;BR/&gt; 2822: (4.87805%)&lt;BR/&gt; 2821: (4.87805%)&lt;BR/&gt; 2820: (4.87805%)&gt;];
}
2804--2811[label="1;3pkt 3fpkt"];
2804--4628[label="0.0909091;1pkt 1fpkt"];
2804--4635[label="0.0909091;1pkt 1fpkt"];
2804--4703[label="0.909091;10pkt 10fpkt"];
2804--7313[label="0.909091;10pkt 10fpkt"];
2811--4628[label="0.333333;1pkt 1fpkt"];
2811--4635[label="0.333333;1pkt 1fpkt"];
2811--4703[label="1;3pkt 3fpkt"];
2811--7313[label="1;3pkt 3fpkt"];
4703--7313[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="75.9.212.11" src_ip="136.213.23.5"/>
      <filter dst_ip="75.9.193.241" dst_port="80" src_ip="136.213.23.5"/>
    </slice>
    <from sec="1089176833" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
2771[label="136.213.195.173;s;18pkt 18fpkt", shape=diamond, color=yellow];
2816[label="122.16.138.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.195.173:*, 18.7.1.167:80}[44.4444%]&lt;BR/&gt;{136.213.195.173:*, 203.72.19.205:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1323: (5.26316%)&lt;BR/&gt; 1326: (2.63158%)&lt;BR/&gt; 1325: (2.63158%)&lt;BR/&gt; 1311: (2.63158%)&gt;];
}
2771--2816[label="1;1pkt 1fpkt"];
2771--4623[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.7.1.167" dst_port="80" src_ip="136.213.195.173"/>
      <filter dst_ip="203.72.19.205" dst_port="80" src_ip="136.213.195.173"/>
    </slice>
    <from sec="1089176730" usec="0"/>
    <to sec="1089176945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.19.75.203"/>
      <from sec="1089176400" usec="0"/>
      <to sec="1089177188" usec="0"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
2865[label="73.33.161.188;d;159pkt 159fpkt", shape=diamond, color=yellow];
2866[label="149.99.8.131;s;189pkt 189fpkt", shape=diamond, color=yellow];
4264[label="73.33.161.188;d;142pkt 142fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.8.131:*, 73.33.161.188:21}[84.127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (46.9388%)&lt;BR/&gt; 6668: (2.85714%)&lt;BR/&gt; 3381: (0.306122%)&lt;BR/&gt; 3380: (0.306122%)&lt;BR/&gt; 3379: (0.306122%)&gt;];
}
2865--2866[label="1;159pkt 159fpkt"];
2865--4264[label="1;142pkt 142fpkt"];
2866--4264[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_ip="73.33.161.188" dst_port="21" src_ip="149.99.8.131"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.46.97.35"/>
      <from sec="1089176402" usec="0"/>
      <to sec="1089177228" usec="0"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.46.102.161"/>
      <from sec="1089176402" usec="0"/>
      <to sec="1089177138" usec="0"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
2918[label="18.1.226.185;d;46pkt 46fpkt", shape=diamond, color=yellow];
2919[label="194.60.2.202;s;48pkt 48fpkt", shape=diamond, color=yellow];
6812[label="194.60.2.202;52pkt 52fpkt", shape=pentagon, color=darkviolet];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.2.202:80, 18.1.226.185:*}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6301%)&lt;BR/&gt; 0: (2.73973%)&lt;BR/&gt; 57395: (1.0274%)&lt;BR/&gt; 57218: (1.0274%)&lt;BR/&gt; 56012: (1.0274%)&gt;];
}
2918--2919[label="1;46pkt 46fpkt"];
2918--4618[label="0.0652174;3pkt 3fpkt"];
2918--6812[label="1;46pkt 46fpkt"];
2919--4618[label="0.0625;3pkt 3fpkt"];
2919--6812[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="18.1.226.185" src_ip="194.60.2.202" src_port="80"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
2443[label="171.48.96.84;s;55pkt 55fpkt", shape=diamond, color=yellow];
2920[label="209.90.191.6;d;55pkt 55fpkt", shape=diamond, color=yellow];
3915[label="171.48.96.84;s;46pkt 46fpkt", shape=hexagon, color=black];
5683[label="171.48.96.84;58pkt 58fpkt", shape=pentagon, color=darkviolet];
7896[label="171.48.96.84;58pkt 58fpkt", shape=invtriangle, color=brown];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.48.96.84:25, 209.90.191.6:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4905: (0.919118%)&lt;BR/&gt; 4858: (0.919118%)&lt;BR/&gt; 4801: (0.919118%)&lt;BR/&gt; 4691: (0.919118%)&gt;];
}
2443--2920[label="1;55pkt 55fpkt"];
2443--3915[label="1;46pkt 46fpkt"];
2443--5683[label="0.981818;54pkt 54fpkt"];
2443--7896[label="0.981818;54pkt 54fpkt"];
2920--3915[label="1;46pkt 46fpkt"];
2920--5683[label="0.981818;54pkt 54fpkt"];
2920--7896[label="0.981818;54pkt 54fpkt"];
3915--5683[label="0.978261;45pkt 45fpkt"];
3915--7896[label="0.978261;45pkt 45fpkt"];
5683--7896[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="209.90.191.6" src_ip="171.48.96.84" src_port="25"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2991[label="73.58.177.10;s;412pkt 412fpkt", shape=diamond, color=yellow];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.58.177.10:*, *:139}[50%]&lt;BR/&gt;{73.58.177.10:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 4992: (0.121359%)&lt;BR/&gt; 4991: (0.121359%)&lt;BR/&gt; 4974: (0.121359%)&gt;];
}
2991--4626[label="0.00242718;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="73.58.177.10"/>
      <filter dst_port="139" src_ip="73.58.177.10"/>
    </slice>
    <from sec="1089176776" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.170.148.155"/>
      <from sec="1089176840" usec="0"/>
      <to sec="1089177228" usec="0"/>
    </slice>
    <from sec="1089176840" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
3081[label="214.187.157.228;d;4pkt 4fpkt", shape=diamond, color=yellow];
3082[label="149.99.162.211;s;4pkt 4fpkt", shape=diamond, color=yellow];
6902[label="149.99.162.211;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.162.211:3013, 214.187.157.228:3003}[25%]&lt;BR/&gt;{149.99.162.211:3014, 214.187.157.228:2002}[25%]&lt;BR/&gt;{149.99.162.211:3030, 214.187.157.228:3003}[25%]&lt;BR/&gt;{149.99.162.211:3031, 214.187.157.228:2002}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3003: (25%)&lt;BR/&gt; 2002: (25%)&lt;BR/&gt; 3031: (12.5%)&lt;BR/&gt; 3030: (12.5%)&lt;BR/&gt; 3014: (12.5%)&gt;];
}
3081--3082[label="1;4pkt 4fpkt"];
3081--6902[label="1;4pkt 4fpkt"];
3082--6902[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="214.187.157.228" dst_port="2002" src_ip="149.99.162.211" src_port="3031"/>
      <filter dst_ip="214.187.157.228" dst_port="3003" src_ip="149.99.162.211" src_port="3030"/>
      <filter dst_ip="214.187.157.228" dst_port="2002" src_ip="149.99.162.211" src_port="3014"/>
      <filter dst_ip="214.187.157.228" dst_port="3003" src_ip="149.99.162.211" src_port="3013"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="149.99.163.202"/>
      <from sec="1089176401" usec="0"/>
      <to sec="1089177228" usec="0"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
3156[label="194.60.4.38;s;115pkt 115fpkt", shape=diamond, color=yellow];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.4.38:*, *:25}[93.0435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.5652%)&lt;BR/&gt; 0: (0.869565%)&lt;BR/&gt; 39330: (0.434783%)&lt;BR/&gt; 39328: (0.434783%)&lt;BR/&gt; 39327: (0.434783%)&gt;];
}
3156--4014[label="0.00869565;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="194.60.4.38"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.204.161.5"/>
      <from sec="1089176884" usec="0"/>
      <to sec="1089177227" usec="0"/>
    </slice>
    <from sec="1089176884" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
3305[label="214.187.157.228;s;4pkt 4fpkt", shape=diamond, color=yellow];
3306[label="149.99.162.211;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.187.157.228:2002, 149.99.162.211:3014}[25%]&lt;BR/&gt;{214.187.157.228:2002, 149.99.162.211:3031}[25%]&lt;BR/&gt;{214.187.157.228:3003, 149.99.162.211:3013}[25%]&lt;BR/&gt;{214.187.157.228:3003, 149.99.162.211:3030}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3003: (25%)&lt;BR/&gt; 2002: (25%)&lt;BR/&gt; 3031: (12.5%)&lt;BR/&gt; 3030: (12.5%)&lt;BR/&gt; 3014: (12.5%)&gt;];
}
3305--3306[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.162.211" dst_port="3030" src_ip="214.187.157.228" src_port="3003"/>
      <filter dst_ip="149.99.162.211" dst_port="3013" src_ip="214.187.157.228" src_port="3003"/>
      <filter dst_ip="149.99.162.211" dst_port="3031" src_ip="214.187.157.228" src_port="2002"/>
      <filter dst_ip="149.99.162.211" dst_port="3014" src_ip="214.187.157.228" src_port="2002"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813653,2.21218,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.19.15.44"/>
      <from sec="1089176400" usec="0"/>
      <to sec="1089177188" usec="0"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,051,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
3329[label="73.33.161.188;s;159pkt 159fpkt", shape=diamond, color=yellow];
3330[label="149.99.8.131;d;161pkt 161fpkt", shape=diamond, color=yellow];
6686[label="73.33.161.188;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.33.161.188:21, 149.99.8.131:*}[98.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.7972%)&lt;BR/&gt; 3408: (0.30426%)&lt;BR/&gt; 3405: (0.30426%)&lt;BR/&gt; 3404: (0.30426%)&lt;BR/&gt; 3401: (0.30426%)&gt;];
}
3329--3330[label="1;159pkt 159fpkt"];
3329--6686[label="1;159pkt 159fpkt"];
3330--6686[label="0.987578;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.8.131" src_ip="73.33.161.188" src_port="21"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
3022[label="194.60.5.216;d;124pkt 124fpkt", shape=diamond, color=yellow];
3447[label="212.62.176.223;s;62pkt 62fpkt", shape=diamond, color=yellow];
3449[label="212.62.176.220;s;62pkt 62fpkt", shape=diamond, color=yellow];
4339[label="194.60.5.216;d;124pkt 124fpkt", shape=hexagon, color=black];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.62.176.220:80, 194.60.5.216:*}[50%]&lt;BR/&gt;{212.62.176.223:80, 194.60.5.216:*}[45.9677%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9839%)&lt;BR/&gt; 8080: (2.01613%)&lt;BR/&gt; 1297: (0.403226%)&lt;BR/&gt; 1295: (0.403226%)&lt;BR/&gt; 1293: (0.403226%)&gt;];
}
3022--3447[label="1;62pkt 62fpkt"];
3022--3449[label="1;62pkt 62fpkt"];
3022--4339[label="1;124pkt 124fpkt"];
3447--4339[label="1;62pkt 62fpkt"];
3449--4339[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.5.216" src_ip="212.62.176.223" src_port="80"/>
      <filter dst_ip="194.60.5.216" src_ip="212.62.176.220" src_port="80"/>
    </slice>
    <from sec="1089176907" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
3473[label="136.213.34.13;d;127pkt 127fpkt", shape=diamond, color=yellow];
3474[label="156.68.167.210;s;123pkt 123fpkt", shape=diamond, color=yellow];
6892[label="156.68.167.210;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.68.167.210:80, 136.213.34.13:*}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3495: (0.396825%)&lt;BR/&gt; 3493: (0.396825%)&lt;BR/&gt; 3492: (0.396825%)&lt;BR/&gt; 3489: (0.396825%)&gt;];
}
3473--3474[label="1;123pkt 123fpkt"];
3473--6892[label="0.968504;123pkt 123fpkt"];
3474--6892[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.34.13" src_ip="156.68.167.210" src_port="80"/>
    </slice>
    <from sec="1089177089" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31749,1.98517,001,1 1 1 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
343[label="17.30.37.102s;503pkt 503fpkt", shape=rectangle, color=red];
691[label="17.30.37.102s;634pkt 634fpkt", shape=ellipse, color=green];
984[label="17.30.37.102s;634pkt 634fpkt", shape=triangle, color=blue];
3491[label="17.30.37.102;s;507pkt 507fpkt", shape=diamond, color=yellow];
4496[label="17.30.37.102;s;507pkt 507fpkt", shape=hexagon, color=black];
6750[label="214.161.221.196;144pkt 144fpkt", shape=pentagon, color=darkviolet];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.30.37.102:*, *:9898}[39.0169%]&lt;BR/&gt;{17.30.37.102:*, *:5554}[38.8633%]&lt;BR/&gt;{214.161.221.196:*, *:*}[22.1198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (26.7497%)&lt;BR/&gt; 5554: (23.2503%)&lt;BR/&gt; 3779: (0.136565%)&lt;BR/&gt; 3778: (0.136565%)&lt;BR/&gt; 3768: (0.136565%)&gt;];
}
343--691[label="1;503pkt 503fpkt"];
343--984[label="1;503pkt 503fpkt"];
343--3491[label="1;503pkt 503fpkt"];
343--4496[label="1;503pkt 503fpkt"];
691--984[label="1;634pkt 634fpkt"];
691--3491[label="0.99211;503pkt 503fpkt"];
691--4496[label="0.99211;503pkt 503fpkt"];
691--6750[label="0.909722;131pkt 131fpkt"];
984--3491[label="0.99211;503pkt 503fpkt"];
984--4496[label="0.99211;503pkt 503fpkt"];
984--6750[label="0.909722;131pkt 131fpkt"];
3491--4496[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter src_ip="214.161.221.196"/>
      <filter dst_port="9898" src_ip="17.30.37.102"/>
      <filter dst_port="5554" src_ip="17.30.37.102"/>
    </slice>
    <from sec="1089177145" usec="0"/>
    <to sec="1089177169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
3439[label="173.19.14.27;s;3pkt 3fpkt", shape=diamond, color=yellow];
3492[label="21.88.131.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
4998[label="173.19.14.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7479[label="173.19.14.27;1pkt 1fpkt", shape=invtriangle, color=brown];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.14.27:80, 16.177.52.11:37245}[33.3333%]&lt;BR/&gt;{173.19.14.27:80, 21.88.131.178:4455}[33.3333%]&lt;BR/&gt;{173.19.14.27:80, 16.177.52.214:52311}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4455: (33.3333%)&lt;BR/&gt; 52311: (8.33333%)&lt;BR/&gt; 37245: (8.33333%)&gt;];
}
3439--3492[label="1;1pkt 1fpkt"];
3439--4998[label="1;1pkt 1fpkt"];
3439--7479[label="1;1pkt 1fpkt"];
3492--4998[label="1;1pkt 1fpkt"];
3492--7479[label="1;1pkt 1fpkt"];
4998--7479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.177.52.214" dst_port="52311" src_ip="173.19.14.27" src_port="80"/>
      <filter dst_ip="21.88.131.178" dst_port="4455" src_ip="173.19.14.27" src_port="80"/>
      <filter dst_ip="16.177.52.11" dst_port="37245" src_ip="173.19.14.27" src_port="80"/>
    </slice>
    <from sec="1089176867" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
3499[label="194.60.3.217;s;11pkt 11fpkt", shape=diamond, color=yellow];
3504[label="19.208.17.49;d;10pkt 10fpkt", shape=diamond, color=yellow];
6947[label="194.60.3.217;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.3.217:*, 19.208.17.49:80}[62.5%]&lt;BR/&gt;{194.60.3.217:*, 18.231.25.230:80}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6486%)&lt;BR/&gt; 3213: (4.05405%)&lt;BR/&gt; 3212: (4.05405%)&lt;BR/&gt; 3211: (4.05405%)&lt;BR/&gt; 3210: (4.05405%)&gt;];
}
3499--3504[label="1;10pkt 10fpkt"];
3499--6947[label="1;11pkt 11fpkt"];
3504--6947[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="19.208.17.49" dst_port="80" src_ip="194.60.3.217"/>
      <filter dst_ip="18.231.25.230" dst_port="80" src_ip="194.60.3.217"/>
    </slice>
    <from sec="1089176455" usec="0"/>
    <to sec="1089177203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
3498[label="194.60.3.217;d;10pkt 10fpkt", shape=diamond, color=yellow];
3505[label="19.208.17.49;s;10pkt 10fpkt", shape=diamond, color=yellow];
4498[label="194.60.3.217;d;10pkt 10fpkt", shape=hexagon, color=black];
4499[label="19.208.17.49;s;10pkt 10fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.208.17.49:80, 194.60.3.217:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3213: (5%)&lt;BR/&gt; 3212: (5%)&lt;BR/&gt; 3211: (5%)&lt;BR/&gt; 3210: (5%)&gt;];
}
3498--3505[label="1;10pkt 10fpkt"];
3498--4498[label="1;10pkt 10fpkt"];
3498--4499[label="1;10pkt 10fpkt"];
3505--4498[label="1;10pkt 10fpkt"];
3505--4499[label="1;10pkt 10fpkt"];
4498--4499[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.3.217" src_ip="19.208.17.49" src_port="80"/>
    </slice>
    <from sec="1089177175" usec="0"/>
    <to sec="1089177203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1314[label="10.141.20.120;s;1590pkt 1590fpkt", shape=diamond, color=yellow];
3543[label="10.141.20.120;s;1590pkt 1590fpkt", shape=hexagon, color=black];
6021[label="10.141.20.120;1705pkt 1705fpkt", shape=pentagon, color=darkviolet];
8103[label="10.141.20.120;1704pkt 1704fpkt", shape=invtriangle, color=brown];
9259[label="10.141.20.120;1705pkt 1705fpkt", shape=invhouse, color=bisque];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.20.120:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4999: (0.0301423%)&lt;BR/&gt; 4995: (0.0301423%)&lt;BR/&gt; 4992: (0.0301423%)&lt;BR/&gt; 4991: (0.0301423%)&gt;];
}
1314--3543[label="1;1590pkt 1590fpkt"];
1314--6021[label="1;1590pkt 1590fpkt"];
1314--8103[label="0.999371;1589pkt 1589fpkt"];
1314--9259[label="1;1590pkt 1590fpkt"];
3543--6021[label="1;1590pkt 1590fpkt"];
3543--8103[label="0.999371;1589pkt 1589fpkt"];
3543--9259[label="1;1590pkt 1590fpkt"];
6021--8103[label="1;1704pkt 1704fpkt"];
6021--9259[label="1;1705pkt 1705fpkt"];
8103--9259[label="1;1704pkt 1704fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="10.141.20.120"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
306[label="214.184.153.74s;478pkt 478fpkt", shape=rectangle, color=red];
318[label="215.165.141.85s;333pkt 333fpkt", shape=rectangle, color=red];
661[label="214.184.153.74s;478pkt 478fpkt", shape=ellipse, color=green];
668[label="215.165.141.85s;289pkt 289fpkt", shape=ellipse, color=green];
955[label="214.184.153.74s;478pkt 478fpkt", shape=triangle, color=blue];
961[label="215.165.141.85s;289pkt 289fpkt", shape=triangle, color=blue];
3049[label="215.165.141.85;s;389pkt 389fpkt", shape=diamond, color=yellow];
5567[label="214.184.153.74;478pkt 478fpkt", shape=pentagon, color=darkviolet];
5698[label="215.165.141.85;388pkt 388fpkt", shape=pentagon, color=darkviolet];
7826[label="214.184.153.74;478pkt 478fpkt", shape=invtriangle, color=brown];
7904[label="215.165.141.85;389pkt 389fpkt", shape=invtriangle, color=brown];
9120[label="214.184.153.74;477pkt 477fpkt", shape=invhouse, color=bisque];
9157[label="215.165.141.85;388pkt 388fpkt", shape=invhouse, color=bisque];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.184.153.74:*, *:9898}[28.489%]&lt;BR/&gt;{214.184.153.74:*, *:5554}[26.6436%]&lt;BR/&gt;{215.165.141.85:*, *:5554}[25.9516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (27.3068%)&lt;BR/&gt; 9898: (22.6932%)&lt;BR/&gt; 4468: (0.121905%)&lt;BR/&gt; 4457: (0.121905%)&lt;BR/&gt; 4456: (0.121905%)&gt;];
}
306--661[label="1;478pkt 478fpkt"];
306--955[label="1;478pkt 478fpkt"];
306--1337[label="0.00552486;2pkt 2fpkt"];
306--3425[label="0.016;2pkt 2fpkt"];
306--5567[label="1;478pkt 478fpkt"];
306--7826[label="1;478pkt 478fpkt"];
306--9120[label="1;477pkt 477fpkt"];
318--668[label="1;289pkt 289fpkt"];
318--961[label="1;289pkt 289fpkt"];
318--3049[label="1;333pkt 333fpkt"];
318--3257[label="0.0416667;2pkt 2fpkt"];
318--4341[label="0.0833333;2pkt 2fpkt"];
318--5698[label="0.996997;332pkt 332fpkt"];
318--7904[label="1;333pkt 333fpkt"];
318--9157[label="0.996997;332pkt 332fpkt"];
661--955[label="1;478pkt 478fpkt"];
661--1337[label="0.00552486;2pkt 2fpkt"];
661--3425[label="0.016;2pkt 2fpkt"];
661--5567[label="1;478pkt 478fpkt"];
661--7826[label="1;478pkt 478fpkt"];
661--9120[label="1;477pkt 477fpkt"];
668--961[label="1;289pkt 289fpkt"];
668--3049[label="1;289pkt 289fpkt"];
668--3257[label="0.0416667;2pkt 2fpkt"];
668--4341[label="0.0833333;2pkt 2fpkt"];
668--5698[label="0.99654;288pkt 288fpkt"];
668--7904[label="1;289pkt 289fpkt"];
668--9157[label="0.99654;288pkt 288fpkt"];
955--1337[label="0.00552486;2pkt 2fpkt"];
955--3425[label="0.016;2pkt 2fpkt"];
955--5567[label="1;478pkt 478fpkt"];
955--7826[label="1;478pkt 478fpkt"];
955--9120[label="1;477pkt 477fpkt"];
961--3049[label="1;289pkt 289fpkt"];
961--3257[label="0.0416667;2pkt 2fpkt"];
961--4341[label="0.0833333;2pkt 2fpkt"];
961--5698[label="0.99654;288pkt 288fpkt"];
961--7904[label="1;289pkt 289fpkt"];
961--9157[label="0.99654;288pkt 288fpkt"];
3049--3257[label="0.0416667;2pkt 2fpkt"];
3049--4341[label="0.0833333;2pkt 2fpkt"];
3049--5698[label="1;388pkt 388fpkt"];
3049--7904[label="1;389pkt 389fpkt"];
3049--9157[label="1;388pkt 388fpkt"];
5567--7826[label="1;478pkt 478fpkt"];
5567--9120[label="1;477pkt 477fpkt"];
5698--7904[label="1;388pkt 388fpkt"];
5698--9157[label="1;388pkt 388fpkt"];
7826--9120[label="1;477pkt 477fpkt"];
7904--9157[label="1;388pkt 388fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="214.184.153.74"/>
      <filter dst_port="9898" src_ip="214.184.153.74"/>
      <filter dst_port="5554" src_ip="215.165.141.85"/>
    </slice>
    <from sec="1089176995" usec="0"/>
    <to sec="1089177179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
5392[label="141.169.164.60;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.164.60:*, 21.2.179.177:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 9898: (1.38889%)&lt;BR/&gt; 5554: (1.38889%)&lt;BR/&gt; 2942: (1.38889%)&lt;BR/&gt; 2621: (1.38889%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="21.2.179.177" dst_port="80" src_ip="141.169.164.60"/>
    </slice>
    <from sec="1089176805" usec="0"/>
    <to sec="1089177147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1521[label="215.212.200.73;s;2848pkt 2848fpkt", shape=diamond, color=yellow];
3653[label="215.212.200.73;s;1037pkt 1037fpkt", shape=hexagon, color=black];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.212.200.73:*, *:1026}[50.2107%]&lt;BR/&gt;{215.212.200.73:*, *:1027}[49.7893%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.1223%)&lt;BR/&gt; 1027: (24.8906%)&lt;BR/&gt; 4444: (0.0900901%)&lt;BR/&gt; 4314: (0.0900901%)&lt;BR/&gt; 3762: (0.0900901%)&gt;];
}
1521--3653[label="1;1037pkt 1037fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="215.212.200.73"/>
      <filter dst_port="1027" src_ip="215.212.200.73"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1588[label="73.37.13.165;s;1106pkt 1106fpkt", shape=diamond, color=yellow];
3678[label="73.37.13.165;s;998pkt 998fpkt", shape=hexagon, color=black];
6453[label="73.37.13.165;1208pkt 1208fpkt", shape=pentagon, color=darkviolet];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.37.13.165:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48762: (0.0905797%)&lt;BR/&gt; 46644: (0.0905797%)&lt;BR/&gt; 46096: (0.0905797%)&lt;BR/&gt; 41847: (0.0905797%)&gt;];
}
1588--3678[label="1;998pkt 998fpkt"];
1588--4618[label="0.0614828;68pkt 68fpkt"];
1588--6453[label="1;1106pkt 1106fpkt"];
3678--4618[label="0.0681363;68pkt 68fpkt"];
3678--6453[label="1;998pkt 998fpkt"];
</description>
    <slice>
      <filter src_ip="73.37.13.165" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1328[label="73.68.144.66;s;4825pkt 4825fpkt", shape=diamond, color=yellow];
3681[label="73.68.144.66;s;3777pkt 3777fpkt", shape=hexagon, color=black];
5467[label="73.68.144.66;5237pkt 5237fpkt", shape=pentagon, color=darkviolet];
7768[label="73.68.144.66;5236pkt 5236fpkt", shape=invtriangle, color=brown];
9092[label="73.68.144.66;5237pkt 5237fpkt", shape=invhouse, color=bisque];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.68.144.66:1660, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1660: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1328--1823[label="0.00473934;1pkt 1fpkt"];
1328--2317[label="0.00877193;1pkt 1fpkt"];
1328--3681[label="1;3777pkt 3777fpkt"];
1328--5467[label="1;4825pkt 4825fpkt"];
1328--7768[label="0.999793;4824pkt 4824fpkt"];
1328--9092[label="1;4825pkt 4825fpkt"];
3681--5467[label="1;3777pkt 3777fpkt"];
3681--7768[label="0.999735;3776pkt 3776fpkt"];
3681--9092[label="1;3777pkt 3777fpkt"];
5467--7768[label="1;5236pkt 5236fpkt"];
5467--9092[label="1;5237pkt 5237fpkt"];
7768--9092[label="1;5236pkt 5236fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="73.68.144.66" src_port="1660"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1607[label="156.191.29.235;s;755pkt 755fpkt", shape=diamond, color=yellow];
3682[label="156.191.29.235;s;240pkt 240fpkt", shape=hexagon, color=black];
7094[label="156.191.29.235;800pkt 800fpkt", shape=pentagon, color=darkviolet];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.191.29.235:*, *:2745}[90.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (45.5432%)&lt;BR/&gt; 1025: (2.92479%)&lt;BR/&gt; 3127: (1.00279%)&lt;BR/&gt; 6129: (0.752089%)&lt;BR/&gt; 3674: (0.194986%)&gt;];
}
1607--3682[label="1;240pkt 240fpkt"];
1607--7094[label="1;755pkt 755fpkt"];
3682--7094[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="156.191.29.235"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
1865[label="141.169.153.164;d;3pkt 3fpkt", shape=diamond, color=yellow];
1912[label="223.139.116.130;s;2pkt 2fpkt", shape=diamond, color=yellow];
3698[label="223.139.116.130;s;2pkt 2fpkt", shape=hexagon, color=black];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.139.116.130:8292, 141.169.145.89:8277}[25%]&lt;BR/&gt;{223.139.116.130:8292, 141.169.153.164:8277}[25%]&lt;BR/&gt;{223.139.116.172:8195, 141.169.153.164:8200}[25%]&lt;BR/&gt;{223.139.116.172:8196, 141.169.153.164:8201}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (35.7143%)&lt;BR/&gt; 8277: (35.7143%)&lt;BR/&gt; 8201: (7.14286%)&lt;BR/&gt; 8200: (7.14286%)&lt;BR/&gt; 8196: (7.14286%)&gt;];
}
1865--1912[label="0.5;1pkt 1fpkt"];
1865--3698[label="0.5;1pkt 1fpkt"];
1912--3698[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.153.164" dst_port="8201" src_ip="223.139.116.172" src_port="8196"/>
      <filter dst_ip="141.169.153.164" dst_port="8200" src_ip="223.139.116.172" src_port="8195"/>
      <filter dst_ip="141.169.153.164" dst_port="8277" src_ip="223.139.116.130" src_port="8292"/>
      <filter dst_ip="141.169.145.89" dst_port="8277" src_ip="223.139.116.130" src_port="8292"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
2195[label="122.227.213.230;d;20pkt 20fpkt", shape=diamond, color=yellow];
2196[label="141.169.188.100;s;24pkt 24fpkt", shape=diamond, color=yellow];
5853[label="141.169.188.100;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8002[label="141.169.188.100;23pkt 23fpkt", shape=invtriangle, color=brown];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.188.100:*, 122.227.213.230:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7033%)&lt;BR/&gt; 1749: (2.1978%)&lt;BR/&gt; 1748: (2.1978%)&lt;BR/&gt; 1747: (2.1978%)&lt;BR/&gt; 1746: (2.1978%)&gt;];
}
2195--2196[label="1;20pkt 20fpkt"];
2195--4619[label="0.15;3pkt 3fpkt"];
2195--4623[label="0.2;4pkt 4fpkt"];
2195--4631[label="0.15;3pkt 3fpkt"];
2195--5853[label="1;20pkt 20fpkt"];
2195--8002[label="0.95;19pkt 19fpkt"];
2196--3762[label="0.0833333;2pkt 2fpkt"];
2196--4619[label="0.208333;5pkt 5fpkt"];
2196--4623[label="0.166667;4pkt 4fpkt"];
2196--4631[label="0.208333;5pkt 5fpkt"];
2196--5853[label="1;24pkt 24fpkt"];
2196--8002[label="1;23pkt 23fpkt"];
5853--8002[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="122.227.213.230" dst_port="80" src_ip="141.169.188.100"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089176745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1820[label="169.51.193.251;s;299pkt 299fpkt", shape=diamond, color=yellow];
3126[label="208.173.126.45;d;23pkt 23fpkt", shape=diamond, color=yellow];
3783[label="169.51.193.251;s;299pkt 299fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.193.251:54396, *:*}[87.0432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54396: (42.2705%)&lt;BR/&gt; 44312: (5.15298%)&lt;BR/&gt; 37314: (0.805153%)&lt;BR/&gt; 52244: (0.644122%)&lt;BR/&gt; 1863: (0.483092%)&gt;];
}
1820--3126[label="0.913043;21pkt 21fpkt"];
1820--3783[label="1;299pkt 299fpkt"];
1820--4619[label="0.00334448;1pkt 1fpkt"];
1820--4631[label="0.00334448;1pkt 1fpkt"];
3126--3783[label="0.913043;21pkt 21fpkt"];
3783--4619[label="0.00334448;1pkt 1fpkt"];
3783--4631[label="0.00334448;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="169.51.193.251" src_port="54396"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18622,1.96095,001,1 1 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
213[label="215.182.38.5s;399pkt 399fpkt", shape=rectangle, color=red];
577[label="215.182.38.5s;399pkt 399fpkt", shape=ellipse, color=green];
1584[label="141.169.158.85;d;4pkt 4fpkt", shape=diamond, color=yellow];
1587[label="223.139.116.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
3794[label="223.139.116.152;s;1pkt 1fpkt", shape=hexagon, color=black];
4241[label="141.169.158.85;d;4pkt 4fpkt", shape=hexagon, color=black];
4705[label="215.182.38.5;399pkt 399fpkt", shape=pentagon, color=darkviolet];
6330[label="223.139.116.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7314[label="215.182.38.5;399pkt 399fpkt", shape=invtriangle, color=brown];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.182.38.5:*, *:9898}[57.3566%]&lt;BR/&gt;{215.182.38.5:*, *:5554}[42.1446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.687%)&lt;BR/&gt; 5554: (21.0952%)&lt;BR/&gt; 4540: (0.186683%)&lt;BR/&gt; 4158: (0.186683%)&lt;BR/&gt; 8292: (0.155569%)&gt;];
}
213--577[label="1;399pkt 399fpkt"];
213--1584[label="0.5;2pkt 2fpkt"];
213--4241[label="0.5;2pkt 2fpkt"];
213--4705[label="1;399pkt 399fpkt"];
213--7314[label="1;399pkt 399fpkt"];
577--1584[label="0.5;2pkt 2fpkt"];
577--4241[label="0.5;2pkt 2fpkt"];
577--4705[label="1;399pkt 399fpkt"];
577--7314[label="1;399pkt 399fpkt"];
1584--1587[label="1;1pkt 1fpkt"];
1584--3794[label="1;1pkt 1fpkt"];
1584--4241[label="1;4pkt 4fpkt"];
1584--4705[label="0.5;2pkt 2fpkt"];
1584--6330[label="1;1pkt 1fpkt"];
1584--7314[label="0.5;2pkt 2fpkt"];
1587--3794[label="1;1pkt 1fpkt"];
1587--4241[label="1;1pkt 1fpkt"];
1587--6330[label="1;1pkt 1fpkt"];
3794--4241[label="1;1pkt 1fpkt"];
3794--6330[label="1;1pkt 1fpkt"];
4241--4705[label="0.5;2pkt 2fpkt"];
4241--6330[label="1;1pkt 1fpkt"];
4241--7314[label="0.5;2pkt 2fpkt"];
4705--7314[label="1;399pkt 399fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.182.38.5"/>
      <filter dst_port="5554" src_ip="215.182.38.5"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2288[label="223.45.119.122;s;13pkt 13fpkt", shape=diamond, color=yellow];
3845[label="223.45.119.122;s;13pkt 13fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.45.119.122:80, 169.51.76.98:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3667: (3.84615%)&lt;BR/&gt; 3665: (3.84615%)&lt;BR/&gt; 3663: (3.84615%)&lt;BR/&gt; 3661: (3.84615%)&gt;];
}
2288--3845[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.76.98" src_ip="223.45.119.122" src_port="80"/>
    </slice>
    <from sec="1089176590" usec="0"/>
    <to sec="1089176784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,004,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
2149[label="195.46.99.117;s;231pkt 231fpkt", shape=diamond, color=yellow];
2612[label="215.184.168.183;d;228pkt 228fpkt", shape=diamond, color=yellow];
3898[label="195.46.99.117;s;149pkt 149fpkt", shape=hexagon, color=black];
4000[label="215.184.168.183;d;190pkt 190fpkt", shape=hexagon, color=black];
6002[label="195.46.99.117;247pkt 247fpkt", shape=pentagon, color=darkviolet];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.99.117:139, 215.184.168.183:*}[49.3927%]&lt;BR/&gt;{195.46.99.117:445, 215.184.168.183:*}[49.3927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (24.9761%)&lt;BR/&gt; 139: (24.8325%)&lt;BR/&gt; 65431: (0.239234%)&lt;BR/&gt; 65430: (0.239234%)&lt;BR/&gt; 64533: (0.239234%)&gt;];
}
2149--2612[label="1;228pkt 228fpkt"];
2149--3898[label="1;149pkt 149fpkt"];
2149--4000[label="1;190pkt 190fpkt"];
2149--6002[label="1;231pkt 231fpkt"];
2612--3898[label="0.993289;148pkt 148fpkt"];
2612--4000[label="1;190pkt 190fpkt"];
2612--6002[label="1;228pkt 228fpkt"];
3898--4000[label="0.993289;148pkt 148fpkt"];
3898--6002[label="1;149pkt 149fpkt"];
4000--6002[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.168.183" src_ip="195.46.99.117" src_port="445"/>
      <filter dst_ip="215.184.168.183" src_ip="195.46.99.117" src_port="139"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
1645[label="169.51.68.112;s;5pkt 5fpkt", shape=diamond, color=yellow];
2431[label="122.233.212.140;d;2pkt 2fpkt", shape=diamond, color=yellow];
2868[label="194.116.18.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
3900[label="169.51.68.112;s;5pkt 5fpkt", shape=hexagon, color=black];
3912[label="122.233.212.140;d;2pkt 2fpkt", shape=hexagon, color=black];
4113[label="194.116.18.71;d;1pkt 1fpkt", shape=hexagon, color=black];
5950[label="169.51.68.112;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.68.112:2510, 194.116.18.71:1000}[20%]&lt;BR/&gt;{169.51.68.112:3125, 122.233.212.137:443}[20%]&lt;BR/&gt;{169.51.68.112:3126, 122.233.212.137:443}[20%]&lt;BR/&gt;{169.51.68.112:2501, 122.233.212.140:3020}[20%]&lt;BR/&gt;{169.51.68.112:2502, 122.233.212.140:900}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (15%)&lt;BR/&gt; 3020: (12.5%)&lt;BR/&gt; 2502: (12.5%)&lt;BR/&gt; 2501: (12.5%)&lt;BR/&gt; 900: (12.5%)&gt;];
}
1645--2431[label="1;2pkt 2fpkt"];
1645--2868[label="1;1pkt 1fpkt"];
1645--3900[label="1;5pkt 5fpkt"];
1645--3912[label="1;2pkt 2fpkt"];
1645--4113[label="1;1pkt 1fpkt"];
1645--5950[label="1;4pkt 4fpkt"];
2431--3900[label="1;2pkt 2fpkt"];
2431--3912[label="1;2pkt 2fpkt"];
2431--5950[label="1;2pkt 2fpkt"];
2868--3900[label="1;1pkt 1fpkt"];
2868--4113[label="1;1pkt 1fpkt"];
3900--3912[label="1;2pkt 2fpkt"];
3900--4113[label="1;1pkt 1fpkt"];
3900--5950[label="1;4pkt 4fpkt"];
3912--5950[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="122.233.212.140" dst_port="900" src_ip="169.51.68.112" src_port="2502"/>
      <filter dst_ip="122.233.212.140" dst_port="3020" src_ip="169.51.68.112" src_port="2501"/>
      <filter dst_ip="122.233.212.137" dst_port="443" src_ip="169.51.68.112" src_port="3126"/>
      <filter dst_ip="122.233.212.137" dst_port="443" src_ip="169.51.68.112" src_port="3125"/>
      <filter dst_ip="194.116.18.71" dst_port="1000" src_ip="169.51.68.112" src_port="2510"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
2277[label="210.250.217.237;s;528pkt 528fpkt", shape=diamond, color=yellow];
3940[label="210.250.217.237;s;528pkt 528fpkt", shape=hexagon, color=black];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.250.217.237:*, *:139}[50%]&lt;BR/&gt;{210.250.217.237:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 2379: (0.094697%)&lt;BR/&gt; 2378: (0.094697%)&lt;BR/&gt; 2375: (0.094697%)&gt;];
}
2277--3940[label="1;528pkt 528fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="210.250.217.237"/>
      <filter dst_port="139" src_ip="210.250.217.237"/>
    </slice>
    <from sec="1089176548" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
2500[label="220.84.49.50;s;508pkt 508fpkt", shape=diamond, color=yellow];
3948[label="220.84.49.50;s;270pkt 270fpkt", shape=hexagon, color=black];
5281[label="220.84.49.50;511pkt 511fpkt", shape=pentagon, color=darkviolet];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.84.49.50:*, *:139}[50%]&lt;BR/&gt;{220.84.49.50:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.0194%)&lt;BR/&gt; 445: (24.9806%)&lt;BR/&gt; 8121: (0.116369%)&lt;BR/&gt; 8035: (0.116369%)&lt;BR/&gt; 8018: (0.116369%)&gt;];
}
2500--3948[label="1;270pkt 270fpkt"];
2500--5281[label="0.998031;507pkt 507fpkt"];
3948--5281[label="0.996296;269pkt 269fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="220.84.49.50"/>
      <filter dst_port="139" src_ip="220.84.49.50"/>
    </slice>
    <from sec="1089176655" usec="0"/>
    <to sec="1089177244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,001,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
2546[label="215.220.82.226;s;505pkt 505fpkt", shape=diamond, color=yellow];
3960[label="215.220.82.226;s;505pkt 505fpkt", shape=hexagon, color=black];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.220.82.226:*, *:5554}[50.297%]&lt;BR/&gt;{215.220.82.226:*, *:9898}[49.703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.1485%)&lt;BR/&gt; 9898: (24.8515%)&lt;BR/&gt; 4999: (0.0990099%)&lt;BR/&gt; 4998: (0.0990099%)&lt;BR/&gt; 4997: (0.0990099%)&gt;];
}
2546--3960[label="1;505pkt 505fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.220.82.226"/>
      <filter dst_port="9898" src_ip="215.220.82.226"/>
    </slice>
    <from sec="1089176854" usec="0"/>
    <to sec="1089176856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
1186[label="141.169.164.192;s;48pkt 48fpkt", shape=diamond, color=yellow];
1187[label="194.139.119.140;d;54pkt 54fpkt", shape=diamond, color=yellow];
3523[label="141.169.164.192;s;14pkt 14fpkt", shape=hexagon, color=black];
3967[label="194.139.119.140;d;21pkt 21fpkt", shape=hexagon, color=black];
6715[label="141.169.164.192;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.164.192:*, 194.139.119.140:80}[93.1034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9744%)&lt;BR/&gt; 1647: (1.28205%)&lt;BR/&gt; 1646: (1.28205%)&lt;BR/&gt; 1645: (1.28205%)&lt;BR/&gt; 1644: (1.28205%)&gt;];
}
1186--1187[label="0.9375;45pkt 45fpkt"];
1186--3523[label="1;14pkt 14fpkt"];
1186--3967[label="1;21pkt 21fpkt"];
1186--4619[label="0.104167;5pkt 5fpkt"];
1186--4623[label="0.0625;3pkt 3fpkt"];
1186--4628[label="0.166667;8pkt 8fpkt"];
1186--4631[label="0.104167;5pkt 5fpkt"];
1186--4635[label="0.166667;8pkt 8fpkt"];
1186--6715[label="1;48pkt 48fpkt"];
1187--3523[label="1;14pkt 14fpkt"];
1187--3967[label="1;21pkt 21fpkt"];
1187--4619[label="0.0925926;5pkt 5fpkt"];
1187--4623[label="0.0555556;3pkt 3fpkt"];
1187--4628[label="0.148148;8pkt 8fpkt"];
1187--4631[label="0.0925926;5pkt 5fpkt"];
1187--4635[label="0.148148;8pkt 8fpkt"];
1187--6715[label="1;54pkt 54fpkt"];
3523--3967[label="1;14pkt 14fpkt"];
3523--4619[label="0.357143;5pkt 5fpkt"];
3523--4631[label="0.357143;5pkt 5fpkt"];
3523--6715[label="1;14pkt 14fpkt"];
3967--4619[label="0.238095;5pkt 5fpkt"];
3967--4623[label="0.142857;3pkt 3fpkt"];
3967--4631[label="0.238095;5pkt 5fpkt"];
3967--6715[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="194.139.119.140" dst_port="80" src_ip="141.169.164.192"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
120[label="194.60.135.231s;1pkt 1fpkt", shape=rectangle, color=red];
1162[label="194.60.135.231;s;33pkt 33fpkt", shape=diamond, color=yellow];
1163[label="0.182.130.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
1278[label="20.75.180.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
1324[label="73.13.54.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
1551[label="19.109.135.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
1592[label="19.242.220.127;d;8pkt 8fpkt", shape=diamond, color=yellow];
1619[label="110.238.215.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
1974[label="110.135.206.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
2193[label="16.48.137.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
2214[label="222.178.83.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
2377[label="192.225.41.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
3598[label="19.109.135.153;d;1pkt 1fpkt", shape=hexagon, color=black];
3611[label="110.238.215.244;d;1pkt 1fpkt", shape=hexagon, color=black];
3680[label="73.13.54.154;d;1pkt 1fpkt", shape=hexagon, color=black];
3816[label="16.48.137.194;d;1pkt 1fpkt", shape=hexagon, color=black];
4234[label="20.75.180.197;d;1pkt 1fpkt", shape=hexagon, color=black];
7060[label="194.60.135.231;33pkt 33fpkt", shape=pentagon, color=darkviolet];
8719[label="194.60.135.231;32pkt 32fpkt", shape=invtriangle, color=brown];
9574[label="194.60.135.231;33pkt 33fpkt", shape=invhouse, color=bisque];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.135.231:*, *:6881}[30.303%]&lt;BR/&gt;{194.60.135.231:*, 19.242.220.127:*}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (16.2338%)&lt;BR/&gt; 6969: (9.74026%)&lt;BR/&gt; 6888: (4.54545%)&lt;BR/&gt; 2706: (3.24675%)&lt;BR/&gt; 6893: (2.5974%)&gt;];
}
120--1162[label="1;1pkt 1fpkt"];
120--1278[label="1;1pkt 1fpkt"];
120--4234[label="1;1pkt 1fpkt"];
120--7060[label="1;1pkt 1fpkt"];
120--8719[label="1;1pkt 1fpkt"];
120--9574[label="1;1pkt 1fpkt"];
1162--1163[label="1;1pkt 1fpkt"];
1162--1199[label="0.030303;1pkt 1fpkt"];
1162--1278[label="1;1pkt 1fpkt"];
1162--1324[label="1;1pkt 1fpkt"];
1162--1551[label="1;1pkt 1fpkt"];
1162--1592[label="1;8pkt 8fpkt"];
1162--1619[label="1;1pkt 1fpkt"];
1162--1974[label="1;1pkt 1fpkt"];
1162--2193[label="1;1pkt 1fpkt"];
1162--2214[label="1;1pkt 1fpkt"];
1162--2377[label="1;1pkt 1fpkt"];
1162--3598[label="1;1pkt 1fpkt"];
1162--3611[label="1;1pkt 1fpkt"];
1162--3680[label="1;1pkt 1fpkt"];
1162--3816[label="1;1pkt 1fpkt"];
1162--3970[label="0.030303;1pkt 1fpkt"];
1162--4234[label="1;1pkt 1fpkt"];
1162--7060[label="1;33pkt 33fpkt"];
1162--8719[label="1;32pkt 32fpkt"];
1162--9574[label="1;33pkt 33fpkt"];
1163--7060[label="1;1pkt 1fpkt"];
1163--8719[label="1;1pkt 1fpkt"];
1163--9574[label="1;1pkt 1fpkt"];
1278--4234[label="1;1pkt 1fpkt"];
1278--7060[label="1;1pkt 1fpkt"];
1278--8719[label="1;1pkt 1fpkt"];
1278--9574[label="1;1pkt 1fpkt"];
1324--3680[label="1;1pkt 1fpkt"];
1324--7060[label="1;1pkt 1fpkt"];
1324--8719[label="1;1pkt 1fpkt"];
1324--9574[label="1;1pkt 1fpkt"];
1551--3598[label="1;1pkt 1fpkt"];
1551--7060[label="1;1pkt 1fpkt"];
1551--8719[label="1;1pkt 1fpkt"];
1551--9574[label="1;1pkt 1fpkt"];
1592--7060[label="1;8pkt 8fpkt"];
1592--8719[label="1;8pkt 8fpkt"];
1592--9574[label="1;8pkt 8fpkt"];
1619--3611[label="1;1pkt 1fpkt"];
1619--7060[label="1;1pkt 1fpkt"];
1619--8719[label="1;1pkt 1fpkt"];
1619--9574[label="1;1pkt 1fpkt"];
1974--7060[label="1;1pkt 1fpkt"];
1974--8719[label="1;1pkt 1fpkt"];
1974--9574[label="1;1pkt 1fpkt"];
2193--3816[label="1;1pkt 1fpkt"];
2193--7060[label="1;1pkt 1fpkt"];
2193--8719[label="1;1pkt 1fpkt"];
2193--9574[label="1;1pkt 1fpkt"];
2214--7060[label="1;1pkt 1fpkt"];
2214--8719[label="1;1pkt 1fpkt"];
2214--9574[label="1;1pkt 1fpkt"];
2377--7060[label="1;1pkt 1fpkt"];
2377--8719[label="1;1pkt 1fpkt"];
2377--9574[label="1;1pkt 1fpkt"];
3598--7060[label="1;1pkt 1fpkt"];
3598--8719[label="1;1pkt 1fpkt"];
3598--9574[label="1;1pkt 1fpkt"];
3611--7060[label="1;1pkt 1fpkt"];
3611--8719[label="1;1pkt 1fpkt"];
3611--9574[label="1;1pkt 1fpkt"];
3680--7060[label="1;1pkt 1fpkt"];
3680--8719[label="1;1pkt 1fpkt"];
3680--9574[label="1;1pkt 1fpkt"];
3816--7060[label="1;1pkt 1fpkt"];
3816--8719[label="1;1pkt 1fpkt"];
3816--9574[label="1;1pkt 1fpkt"];
4234--7060[label="1;1pkt 1fpkt"];
4234--8719[label="1;1pkt 1fpkt"];
4234--9574[label="1;1pkt 1fpkt"];
7060--8719[label="1;32pkt 32fpkt"];
7060--9574[label="1;33pkt 33fpkt"];
8719--9574[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="19.242.220.127" src_ip="194.60.135.231"/>
      <filter dst_port="6881" src_ip="194.60.135.231"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
2601[label="195.46.102.185;d;98pkt 98fpkt", shape=diamond, color=yellow];
3994[label="195.46.102.185;d;98pkt 98fpkt", shape=hexagon, color=black];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 195.46.102.185:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2601--3994[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_ip="195.46.102.185"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
2177[label="169.51.177.231;s;33pkt 33fpkt", shape=diamond, color=yellow];
4019[label="169.51.177.231;s;33pkt 33fpkt", shape=hexagon, color=black];
7063[label="169.51.177.231;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.177.231:58379, *:*}[78.7879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58379: (39.3939%)&lt;BR/&gt; 443: (9.09091%)&lt;BR/&gt; 64437: (1.51515%)&lt;BR/&gt; 61871: (1.51515%)&lt;BR/&gt; 58376: (1.51515%)&gt;];
}
2177--4019[label="1;33pkt 33fpkt"];
2177--7063[label="1;33pkt 33fpkt"];
4019--7063[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="169.51.177.231" src_port="58379"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
2225[label="141.169.8.138;s;53pkt 53fpkt", shape=diamond, color=yellow];
2278[label="218.83.36.157;d;9pkt 9fpkt", shape=diamond, color=yellow];
4035[label="141.169.8.138;s;53pkt 53fpkt", shape=hexagon, color=black];
6182[label="141.169.8.138;53pkt 53fpkt", shape=pentagon, color=darkviolet];
8202[label="141.169.8.138;53pkt 53fpkt", shape=invtriangle, color=brown];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.8.138:*, 218.83.36.129:80}[81.1321%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.095%)&lt;BR/&gt; 41467: (1.13122%)&lt;BR/&gt; 41458: (1.13122%)&lt;BR/&gt; 41455: (1.13122%)&lt;BR/&gt; 41452: (1.13122%)&gt;];
}
2225--2278[label="1;9pkt 9fpkt"];
2225--4035[label="1;53pkt 53fpkt"];
2225--4623[label="0.245283;13pkt 13fpkt"];
2225--6182[label="1;53pkt 53fpkt"];
2225--8202[label="1;53pkt 53fpkt"];
2278--4035[label="1;9pkt 9fpkt"];
2278--4623[label="0.444444;4pkt 4fpkt"];
2278--6182[label="1;9pkt 9fpkt"];
2278--8202[label="1;9pkt 9fpkt"];
4035--4623[label="0.245283;13pkt 13fpkt"];
4035--6182[label="1;53pkt 53fpkt"];
4035--8202[label="1;53pkt 53fpkt"];
6182--8202[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="218.83.36.129" dst_port="80" src_ip="141.169.8.138"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
2077[label="136.213.152.4;d;134pkt 134fpkt", shape=diamond, color=yellow];
2549[label="208.98.148.60;s;73pkt 73fpkt", shape=diamond, color=yellow];
4072[label="136.213.152.4;d;100pkt 100fpkt", shape=hexagon, color=black];
5390[label="208.98.148.60;86pkt 86fpkt", shape=pentagon, color=darkviolet];
7724[label="208.98.148.60;85pkt 85fpkt", shape=invtriangle, color=brown];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 136.213.152.4:*}[41.4966%]&lt;BR/&gt;{208.98.148.60:*, 136.213.152.4:25}[35.3741%]&lt;BR/&gt;{208.98.148.60:113, 136.213.152.4:*}[23.1293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.8326%)&lt;BR/&gt; 113: (15.1674%)&lt;BR/&gt; 50114: (0.523013%)&lt;BR/&gt; 50108: (0.523013%)&lt;BR/&gt; 50107: (0.523013%)&gt;];
}
2077--2549[label="1;73pkt 73fpkt"];
2077--4072[label="1;100pkt 100fpkt"];
2077--5390[label="0.848837;73pkt 73fpkt"];
2077--7724[label="0.847059;72pkt 72fpkt"];
2549--4072[label="0.671233;49pkt 49fpkt"];
2549--5390[label="1;73pkt 73fpkt"];
2549--7724[label="0.986301;72pkt 72fpkt"];
4072--5390[label="0.569767;49pkt 49fpkt"];
4072--7724[label="0.564706;48pkt 48fpkt"];
5390--7724[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.152.4" src_port="25"/>
      <filter dst_ip="136.213.152.4" src_ip="208.98.148.60" src_port="113"/>
      <filter dst_ip="136.213.152.4" dst_port="25" src_ip="208.98.148.60"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
1857[label="156.191.29.13;s;662pkt 662fpkt", shape=diamond, color=yellow];
4098[label="156.191.29.13;s;517pkt 517fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.191.29.13:*, *:2745}[87.7644%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (43.7659%)&lt;BR/&gt; 1025: (5.21628%)&lt;BR/&gt; 3127: (1.01781%)&lt;BR/&gt; 3736: (0.254453%)&lt;BR/&gt; 3732: (0.254453%)&gt;];
}
1857--4098[label="1;517pkt 517fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="156.191.29.13"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
2594[label="136.68.182.98;d;280pkt 280fpkt", shape=diamond, color=yellow];
4105[label="136.68.182.98;d;224pkt 224fpkt", shape=hexagon, color=black];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.68.182.98:4662}[99.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (49.6032%)&lt;BR/&gt; 4523: (0.396825%)&lt;BR/&gt; 4465: (0.396825%)&lt;BR/&gt; 4392: (0.396825%)&lt;BR/&gt; 4288: (0.396825%)&gt;];
}
2594--4105[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_ip="136.68.182.98" dst_port="4662"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1335[label="141.169.153.164;s;5pkt 5fpkt", shape=diamond, color=yellow];
1864[label="196.203.144.23;d;4pkt 4fpkt", shape=diamond, color=yellow];
1911[label="223.139.116.130;d;2pkt 2fpkt", shape=diamond, color=yellow];
3548[label="141.169.153.164;s;5pkt 5fpkt", shape=hexagon, color=black];
3686[label="196.203.144.23;d;4pkt 4fpkt", shape=hexagon, color=black];
4117[label="223.139.116.130;d;2pkt 2fpkt", shape=hexagon, color=black];
6450[label="141.169.153.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8354[label="141.169.153.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8277, 223.139.116.130:8292}[25%]&lt;BR/&gt;{*:8199, 196.203.144.23:8196}[25%]&lt;BR/&gt;{*:*, 196.203.144.23:8195}[25%]&lt;BR/&gt;{141.169.145.89:*, 196.203.144.23:*}[25%]&lt;BR/&gt;{141.169.153.164:*, *:8195}[25%]&lt;BR/&gt;{141.169.153.164:*, *:8196}[25%]&lt;BR/&gt;{141.169.153.164:*, 223.139.116.172:*}[25%]&lt;BR/&gt;{141.169.153.164:*, 196.203.144.23:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (16.6667%)&lt;BR/&gt; 8277: (16.6667%)&lt;BR/&gt; 8196: (16.6667%)&lt;BR/&gt; 8195: (16.6667%)&lt;BR/&gt; 8199: (12.5%)&gt;];
}
1335--1864[label="0.5;2pkt 2fpkt"];
1335--1911[label="0.5;1pkt 1fpkt"];
1335--3548[label="1;5pkt 5fpkt"];
1335--3686[label="0.5;2pkt 2fpkt"];
1335--4117[label="0.5;1pkt 1fpkt"];
1335--6450[label="1;1pkt 1fpkt"];
1335--8354[label="1;1pkt 1fpkt"];
1864--3548[label="0.5;2pkt 2fpkt"];
1864--3686[label="1;4pkt 4fpkt"];
1911--3548[label="0.5;1pkt 1fpkt"];
1911--4117[label="1;2pkt 2fpkt"];
1911--6450[label="1;1pkt 1fpkt"];
1911--8354[label="1;1pkt 1fpkt"];
3548--3686[label="0.5;2pkt 2fpkt"];
3548--4117[label="0.5;1pkt 1fpkt"];
3548--6450[label="1;1pkt 1fpkt"];
3548--8354[label="1;1pkt 1fpkt"];
4117--6450[label="1;1pkt 1fpkt"];
4117--8354[label="1;1pkt 1fpkt"];
6450--8354[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.203.144.23" src_ip="141.169.153.164"/>
      <filter dst_ip="223.139.116.172" src_ip="141.169.153.164"/>
      <filter dst_port="8196" src_ip="141.169.153.164"/>
      <filter dst_port="8195" src_ip="141.169.153.164"/>
      <filter dst_ip="196.203.144.23" src_ip="141.169.145.89"/>
      <filter dst_ip="196.203.144.23" dst_port="8195"/>
      <filter dst_ip="196.203.144.23" dst_port="8196" src_port="8199"/>
      <filter dst_ip="223.139.116.130" dst_port="8292" src_port="8277"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
2412[label="141.169.61.253;s;144pkt 144fpkt", shape=diamond, color=yellow];
4018[label="141.169.61.253;s;144pkt 144fpkt", shape=hexagon, color=black];
7259[label="141.169.61.253;146pkt 146fpkt", shape=pentagon, color=darkviolet];
8834[label="141.169.61.253;146pkt 146fpkt", shape=invtriangle, color=brown];
9633[label="141.169.61.253;145pkt 145fpkt", shape=invhouse, color=bisque];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.61.253:*, 213.17.144.69:80}[30.137%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8966%)&lt;BR/&gt; 5190: (1.37931%)&lt;BR/&gt; 0: (0.689655%)&lt;BR/&gt; 29446: (0.344828%)&lt;BR/&gt; 29438: (0.344828%)&gt;];
}
2412--2973[label="0.00694444;1pkt 1fpkt"];
2412--3139[label="0.0521739;6pkt 6fpkt"];
2412--3312[label="0.00990099;1pkt 1fpkt"];
2412--4018[label="1;144pkt 144fpkt"];
2412--4387[label="0.00990099;1pkt 1fpkt"];
2412--4619[label="0.0138889;2pkt 2fpkt"];
2412--4623[label="0.152778;22pkt 22fpkt"];
2412--4628[label="0.0138889;2pkt 2fpkt"];
2412--4631[label="0.0138889;2pkt 2fpkt"];
2412--4635[label="0.0138889;2pkt 2fpkt"];
2412--7259[label="1;144pkt 144fpkt"];
2412--8834[label="1;144pkt 144fpkt"];
2412--9633[label="0.993056;143pkt 143fpkt"];
4018--4387[label="0.00990099;1pkt 1fpkt"];
4018--4619[label="0.0138889;2pkt 2fpkt"];
4018--4623[label="0.152778;22pkt 22fpkt"];
4018--4628[label="0.0138889;2pkt 2fpkt"];
4018--4631[label="0.0138889;2pkt 2fpkt"];
4018--4635[label="0.0138889;2pkt 2fpkt"];
4018--7259[label="1;144pkt 144fpkt"];
4018--8834[label="1;144pkt 144fpkt"];
4018--9633[label="0.993056;143pkt 143fpkt"];
7259--8834[label="1;146pkt 146fpkt"];
7259--9633[label="1;145pkt 145fpkt"];
8834--9633[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.144.69" dst_port="80" src_ip="141.169.61.253"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
2465[label="197.30.34.91;s;8pkt 8fpkt", shape=diamond, color=yellow];
4157[label="197.30.34.91;s;6pkt 6fpkt", shape=hexagon, color=black];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.91:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4022: (7.14286%)&lt;BR/&gt; 3390: (7.14286%)&lt;BR/&gt; 1533: (7.14286%)&lt;BR/&gt; 1194: (7.14286%)&gt;];
}
2465--4157[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="197.30.34.91" src_port="1863"/>
    </slice>
    <from sec="1089176436" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
2481[label="214.169.145.89;s;853pkt 853fpkt", shape=diamond, color=yellow];
4166[label="214.169.145.89;s;727pkt 727fpkt", shape=hexagon, color=black];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.169.145.89:*, *:1027}[50.0586%]&lt;BR/&gt;{214.169.145.89:*, *:1026}[49.9414%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (25.1266%)&lt;BR/&gt; 1026: (24.8734%)&lt;BR/&gt; 3851: (0.221519%)&lt;BR/&gt; 4967: (0.189873%)&lt;BR/&gt; 4778: (0.189873%)&gt;];
}
2481--4166[label="1;727pkt 727fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="214.169.145.89"/>
      <filter dst_port="1026" src_ip="214.169.145.89"/>
    </slice>
    <from sec="1089176521" usec="0"/>
    <to sec="1089177226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
2525[label="169.51.20.5;s;6pkt 6fpkt", shape=diamond, color=yellow];
4180[label="169.51.20.5;s;6pkt 6fpkt", shape=hexagon, color=black];
4702[label="169.51.20.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7312[label="169.51.20.5;6pkt 6fpkt", shape=invtriangle, color=brown];
8853[label="169.51.20.5;5pkt 5fpkt", shape=invhouse, color=bisque];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.20.5:*, 200.163.46.239:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1043: (8.62069%)&lt;BR/&gt; 1039: (8.62069%)&lt;BR/&gt; 1038: (8.62069%)&lt;BR/&gt; 1037: (8.62069%)&gt;];
}
2525--3762[label="0.166667;1pkt 1fpkt"];
2525--4180[label="1;6pkt 6fpkt"];
2525--4702[label="1;6pkt 6fpkt"];
2525--7312[label="1;6pkt 6fpkt"];
2525--8853[label="1;5pkt 5fpkt"];
4180--4702[label="1;6pkt 6fpkt"];
4180--7312[label="1;6pkt 6fpkt"];
4180--8853[label="1;5pkt 5fpkt"];
4702--7312[label="1;6pkt 6fpkt"];
4702--8853[label="1;5pkt 5fpkt"];
7312--8853[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.163.46.239" dst_port="80" src_ip="169.51.20.5"/>
    </slice>
    <from sec="1089176768" usec="0"/>
    <to sec="1089176952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
2814[label="194.60.3.222;s;61pkt 61fpkt", shape=diamond, color=yellow];
4193[label="194.60.3.222;s;62pkt 62fpkt", shape=hexagon, color=black];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.3.222:*, 16.170.0.144:80}[82.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5935%)&lt;BR/&gt; 3166: (0.813008%)&lt;BR/&gt; 3165: (0.813008%)&lt;BR/&gt; 3164: (0.813008%)&lt;BR/&gt; 3163: (0.813008%)&gt;];
}
2814--4193[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="16.170.0.144" dst_port="80" src_ip="194.60.3.222"/>
    </slice>
    <from sec="1089176853" usec="0"/>
    <to sec="1089176950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
3020[label="141.169.166.157;s;35pkt 35fpkt", shape=diamond, color=yellow];
3024[label="198.1.217.184;d;29pkt 29fpkt", shape=diamond, color=yellow];
4200[label="141.169.166.157;s;35pkt 35fpkt", shape=hexagon, color=black];
6390[label="141.169.166.157;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8318[label="141.169.166.157;35pkt 35fpkt", shape=invtriangle, color=brown];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.166.157:*, 198.1.217.184:80}[36.1702%]&lt;BR/&gt;{194.60.2.52:*, 198.1.217.184:80}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8166%)&lt;BR/&gt; 1236: (1.47929%)&lt;BR/&gt; 1235: (1.47929%)&lt;BR/&gt; 1234: (1.47929%)&lt;BR/&gt; 1228: (1.47929%)&gt;];
}
3020--3024[label="0.586207;17pkt 17fpkt"];
3020--4200[label="1;35pkt 35fpkt"];
3020--6390[label="1;35pkt 35fpkt"];
3020--8318[label="1;35pkt 35fpkt"];
3024--4200[label="0.586207;17pkt 17fpkt"];
3024--6390[label="0.586207;17pkt 17fpkt"];
3024--8318[label="0.586207;17pkt 17fpkt"];
4200--6390[label="1;35pkt 35fpkt"];
4200--8318[label="1;35pkt 35fpkt"];
6390--8318[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="198.1.217.184" dst_port="80" src_ip="141.169.166.157"/>
      <filter dst_ip="198.1.217.184" dst_port="80" src_ip="194.60.2.52"/>
    </slice>
    <from sec="1089176902" usec="0"/>
    <to sec="1089177039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
3038[label="222.248.37.216;s;5pkt 5fpkt", shape=diamond, color=yellow];
3039[label="169.51.68.53;d;22pkt 22fpkt", shape=diamond, color=yellow];
3275[label="19.102.234.72;s;17pkt 17fpkt", shape=diamond, color=yellow];
4209[label="222.248.37.216;s;5pkt 5fpkt", shape=hexagon, color=black];
4481[label="169.51.68.53;d;22pkt 22fpkt", shape=hexagon, color=black];
5547[label="19.102.234.72;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6940[label="222.248.37.216;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7814[label="19.102.234.72;16pkt 16fpkt", shape=invtriangle, color=brown];
8642[label="222.248.37.216;4pkt 4fpkt", shape=invtriangle, color=brown];
9114[label="19.102.234.72;16pkt 16fpkt", shape=invhouse, color=bisque];
9535[label="222.248.37.216;4pkt 4fpkt", shape=invhouse, color=bisque];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.102.234.72:80, 169.51.68.53:*}[77.2727%]&lt;BR/&gt;{222.248.37.216:80, 169.51.68.53:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51154: (2.65152%)&lt;BR/&gt; 51135: (2.65152%)&lt;BR/&gt; 51134: (2.65152%)&lt;BR/&gt; 51133: (2.65152%)&gt;];
}
3038--3039[label="1;5pkt 5fpkt"];
3038--4209[label="1;5pkt 5fpkt"];
3038--4481[label="1;5pkt 5fpkt"];
3038--6940[label="1;4pkt 4fpkt"];
3038--8642[label="1;4pkt 4fpkt"];
3038--9535[label="1;4pkt 4fpkt"];
3039--3275[label="1;17pkt 17fpkt"];
3039--4209[label="1;5pkt 5fpkt"];
3039--4481[label="1;22pkt 22fpkt"];
3039--5547[label="1;17pkt 17fpkt"];
3039--6940[label="1;4pkt 4fpkt"];
3039--7814[label="1;16pkt 16fpkt"];
3039--8642[label="1;4pkt 4fpkt"];
3039--9114[label="1;16pkt 16fpkt"];
3039--9535[label="1;4pkt 4fpkt"];
3275--4481[label="1;17pkt 17fpkt"];
3275--5547[label="1;17pkt 17fpkt"];
3275--7814[label="1;16pkt 16fpkt"];
3275--9114[label="1;16pkt 16fpkt"];
4209--4481[label="1;5pkt 5fpkt"];
4209--6940[label="1;4pkt 4fpkt"];
4209--8642[label="1;4pkt 4fpkt"];
4209--9535[label="1;4pkt 4fpkt"];
4481--5547[label="1;17pkt 17fpkt"];
4481--6940[label="1;4pkt 4fpkt"];
4481--7814[label="1;16pkt 16fpkt"];
4481--8642[label="1;4pkt 4fpkt"];
4481--9114[label="1;16pkt 16fpkt"];
4481--9535[label="1;4pkt 4fpkt"];
5547--7814[label="1;16pkt 16fpkt"];
5547--9114[label="1;16pkt 16fpkt"];
6940--8642[label="1;4pkt 4fpkt"];
6940--9535[label="1;4pkt 4fpkt"];
7814--9114[label="1;16pkt 16fpkt"];
8642--9535[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.68.53" src_ip="19.102.234.72" src_port="80"/>
      <filter dst_ip="169.51.68.53" src_ip="222.248.37.216" src_port="80"/>
    </slice>
    <from sec="1089176974" usec="0"/>
    <to sec="1089177217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
2850[label="197.30.34.34;s;3pkt 3fpkt", shape=diamond, color=yellow];
4247[label="197.30.34.34;s;3pkt 3fpkt", shape=hexagon, color=black];
5077[label="197.30.34.34;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7524[label="197.30.34.34;2pkt 2fpkt", shape=invtriangle, color=brown];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.34:1863, 136.213.169.34:4968}[33.3333%]&lt;BR/&gt;{197.30.34.34:1863, 136.213.91.75:49166}[33.3333%]&lt;BR/&gt;{197.30.34.34:1863, 141.169.141.100:1493}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49166: (20%)&lt;BR/&gt; 4968: (20%)&lt;BR/&gt; 1493: (10%)&gt;];
}
2850--4247[label="1;3pkt 3fpkt"];
2850--5077[label="1;2pkt 2fpkt"];
2850--7524[label="1;2pkt 2fpkt"];
4247--5077[label="1;2pkt 2fpkt"];
4247--7524[label="1;2pkt 2fpkt"];
5077--7524[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.141.100" dst_port="1493" src_ip="197.30.34.34" src_port="1863"/>
      <filter dst_ip="136.213.91.75" dst_port="49166" src_ip="197.30.34.34" src_port="1863"/>
      <filter dst_ip="136.213.169.34" dst_port="4968" src_ip="197.30.34.34" src_port="1863"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
3121[label="141.169.36.59;s;48pkt 48fpkt", shape=diamond, color=yellow];
4274[label="141.169.36.59;s;45pkt 45fpkt", shape=hexagon, color=black];
5374[label="141.169.36.59;76pkt 76fpkt", shape=pentagon, color=darkviolet];
7716[label="141.169.36.59;75pkt 75fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.36.59:*, *:80}[44.7368%]&lt;BR/&gt;{141.169.36.59:*, 194.140.27.185:110}[39.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (23.3607%)&lt;BR/&gt; 80: (17.2131%)&lt;BR/&gt; 1863: (4.91803%)&lt;BR/&gt; 5190: (1.43443%)&lt;BR/&gt; 0: (1.22951%)&gt;];
}
3121--4274[label="1;45pkt 45fpkt"];
3121--5374[label="1;48pkt 48fpkt"];
3121--7716[label="0.979167;47pkt 47fpkt"];
4274--5374[label="1;45pkt 45fpkt"];
4274--7716[label="0.977778;44pkt 44fpkt"];
5374--7716[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.169.36.59"/>
      <filter dst_ip="194.140.27.185" dst_port="110" src_ip="141.169.36.59"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1638[label="141.169.3.129;s;112pkt 112fpkt", shape=diamond, color=yellow];
3279[label="202.253.106.60;d;60pkt 60fpkt", shape=diamond, color=yellow];
4349[label="202.253.106.60;d;60pkt 60fpkt", shape=hexagon, color=black];
4486[label="141.169.3.129;s;112pkt 112fpkt", shape=hexagon, color=black];
6080[label="141.169.3.129;178pkt 178fpkt", shape=pentagon, color=darkviolet];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.3.129:*, 202.253.106.60:80}[33.7079%]&lt;BR/&gt;{141.169.3.129:*, 219.41.126.243:80}[22.4719%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5211%)&lt;BR/&gt; 33051: (0.478927%)&lt;BR/&gt; 33050: (0.478927%)&lt;BR/&gt; 33048: (0.478927%)&lt;BR/&gt; 33047: (0.478927%)&gt;];
}
1638--3279[label="1;60pkt 60fpkt"];
1638--4349[label="1;60pkt 60fpkt"];
1638--4486[label="1;112pkt 112fpkt"];
1638--4628[label="0.133929;15pkt 15fpkt"];
1638--4635[label="0.133929;15pkt 15fpkt"];
1638--6080[label="1;112pkt 112fpkt"];
3279--4349[label="1;60pkt 60fpkt"];
3279--4486[label="1;60pkt 60fpkt"];
3279--4628[label="0.0666667;4pkt 4fpkt"];
3279--4635[label="0.0666667;4pkt 4fpkt"];
3279--6080[label="1;60pkt 60fpkt"];
4349--4486[label="1;60pkt 60fpkt"];
4349--4628[label="0.0666667;4pkt 4fpkt"];
4349--4635[label="0.0666667;4pkt 4fpkt"];
4349--6080[label="1;60pkt 60fpkt"];
4486--4628[label="0.133929;15pkt 15fpkt"];
4486--4635[label="0.133929;15pkt 15fpkt"];
4486--6080[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="202.253.106.60" dst_port="80" src_ip="141.169.3.129"/>
      <filter dst_ip="219.41.126.243" dst_port="80" src_ip="141.169.3.129"/>
    </slice>
    <from sec="1089176426" usec="0"/>
    <to sec="1089177269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
1569[label="73.48.202.185;s;2208pkt 2208fpkt", shape=diamond, color=yellow];
4378[label="73.48.202.185;s;2208pkt 2208fpkt", shape=hexagon, color=black];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.48.202.185:80, *:*}[33.5598%]&lt;BR/&gt;{73.48.202.185:3389, *:*}[33.4239%]&lt;BR/&gt;{73.48.202.185:21, *:*}[33.0163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (16.7799%)&lt;BR/&gt; 3389: (16.712%)&lt;BR/&gt; 21: (16.5082%)&lt;BR/&gt; 34844: (0.0679348%)&lt;BR/&gt; 49876: (0.0452899%)&gt;];
}
1569--4378[label="1;2208pkt 2208fpkt"];
1569--4618[label="0.0217391;48pkt 48fpkt"];
4378--4618[label="0.0217391;48pkt 48fpkt"];
</description>
    <slice>
      <filter src_ip="73.48.202.185" src_port="80"/>
      <filter src_ip="73.48.202.185" src_port="3389"/>
      <filter src_ip="73.48.202.185" src_port="21"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
2110[label="20.185.100.201;s;543pkt 543fpkt", shape=diamond, color=yellow];
4384[label="20.185.100.201;s;543pkt 543fpkt", shape=hexagon, color=black];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.185.100.201:*, *:17300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17300: (50%)&lt;BR/&gt; 3664: (0.368324%)&lt;BR/&gt; 3965: (0.276243%)&lt;BR/&gt; 3378: (0.276243%)&lt;BR/&gt; 3220: (0.276243%)&gt;];
}
2110--4384[label="1;543pkt 543fpkt"];
</description>
    <slice>
      <filter dst_port="17300" src_ip="20.185.100.201"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
2622[label="73.53.9.40;s;294pkt 294fpkt", shape=diamond, color=yellow];
4407[label="73.53.9.40;s;294pkt 294fpkt", shape=hexagon, color=black];
5154[label="73.53.9.40;318pkt 318fpkt", shape=pentagon, color=darkviolet];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.53.9.40:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4842: (0.331126%)&lt;BR/&gt; 4824: (0.331126%)&lt;BR/&gt; 4765: (0.331126%)&lt;BR/&gt; 4547: (0.331126%)&gt;];
}
2622--4407[label="1;294pkt 294fpkt"];
2622--5154[label="1;294pkt 294fpkt"];
4407--5154[label="1;294pkt 294fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="73.53.9.40"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
3343[label="220.66.43.206;s;265pkt 265fpkt", shape=diamond, color=yellow];
4412[label="220.66.43.206;s;265pkt 265fpkt", shape=hexagon, color=black];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.43.206:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4676: (0.566038%)&lt;BR/&gt; 4952: (0.377358%)&lt;BR/&gt; 4834: (0.377358%)&lt;BR/&gt; 4747: (0.377358%)&gt;];
}
3343--4412[label="1;265pkt 265fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="220.66.43.206"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1920[label="73.162.59.78;d;4pkt 4fpkt", shape=diamond, color=yellow];
2648[label="194.60.3.188;s;2pkt 2fpkt", shape=diamond, color=yellow];
2885[label="194.60.3.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
3700[label="73.162.59.78;d;4pkt 4fpkt", shape=hexagon, color=black];
4130[label="194.60.3.188;s;2pkt 2fpkt", shape=hexagon, color=black];
4418[label="194.60.3.191;s;2pkt 2fpkt", shape=hexagon, color=black];
6702[label="194.60.3.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8503[label="194.60.3.191;2pkt 2fpkt", shape=invtriangle, color=brown];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.3.188:1494, 73.162.59.78:10300}[25%]&lt;BR/&gt;{194.60.3.188:1497, 73.162.59.78:10300}[25%]&lt;BR/&gt;{194.60.3.191:1498, 73.162.59.78:10300}[25%]&lt;BR/&gt;{194.60.3.191:1500, 73.162.59.78:10300}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10300: (50%)&lt;BR/&gt; 1500: (15%)&lt;BR/&gt; 1498: (15%)&lt;BR/&gt; 1497: (10%)&lt;BR/&gt; 1494: (10%)&gt;];
}
1920--2648[label="1;2pkt 2fpkt"];
1920--2885[label="1;2pkt 2fpkt"];
1920--3700[label="1;4pkt 4fpkt"];
1920--4130[label="1;2pkt 2fpkt"];
1920--4418[label="1;2pkt 2fpkt"];
1920--6702[label="1;2pkt 2fpkt"];
1920--8503[label="1;2pkt 2fpkt"];
2648--3700[label="1;2pkt 2fpkt"];
2648--4130[label="1;2pkt 2fpkt"];
2885--3700[label="1;2pkt 2fpkt"];
2885--4418[label="1;2pkt 2fpkt"];
2885--6702[label="1;2pkt 2fpkt"];
2885--8503[label="1;2pkt 2fpkt"];
3700--4130[label="1;2pkt 2fpkt"];
3700--4418[label="1;2pkt 2fpkt"];
3700--6702[label="1;2pkt 2fpkt"];
3700--8503[label="1;2pkt 2fpkt"];
4418--6702[label="1;2pkt 2fpkt"];
4418--8503[label="1;2pkt 2fpkt"];
6702--8503[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="73.162.59.78" dst_port="10300" src_ip="194.60.3.191" src_port="1500"/>
      <filter dst_ip="73.162.59.78" dst_port="10300" src_ip="194.60.3.191" src_port="1498"/>
      <filter dst_ip="73.162.59.78" dst_port="10300" src_ip="194.60.3.188" src_port="1497"/>
      <filter dst_ip="73.162.59.78" dst_port="10300" src_ip="194.60.3.188" src_port="1494"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01912,2.04208,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
153[label="136.70.186.157s;318pkt 318fpkt", shape=rectangle, color=red];
1309[label="136.70.186.157;s;2351pkt 2351fpkt", shape=diamond, color=yellow];
1310[label="137.93.91.183;d;2312pkt 2312fpkt", shape=diamond, color=yellow];
4380[label="136.70.186.157;s;2351pkt 2351fpkt", shape=hexagon, color=black];
6391[label="136.70.186.157;2599pkt 2599fpkt", shape=pentagon, color=darkviolet];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.70.186.157:*, 137.93.91.183:80}[98.0791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2851%)&lt;BR/&gt; 53: (0.553821%)&lt;BR/&gt; 65534: (0.533682%)&lt;BR/&gt; 0: (0.251737%)&lt;BR/&gt; 443: (0.0402779%)&gt;];
}
153--1309[label="1;318pkt 318fpkt"];
153--1310[label="1;318pkt 318fpkt"];
153--4380[label="1;318pkt 318fpkt"];
153--6391[label="1;318pkt 318fpkt"];
1309--1310[label="0.99827;2308pkt 2308fpkt"];
1309--1676[label="0.00775194;1pkt 1fpkt"];
1309--1923[label="0.00819672;1pkt 1fpkt"];
1309--4284[label="0.00833333;1pkt 1fpkt"];
1309--4380[label="1;2351pkt 2351fpkt"];
1309--4421[label="0.00819672;1pkt 1fpkt"];
1309--4619[label="0.0659294;155pkt 155fpkt"];
1309--4623[label="0.0527435;124pkt 124fpkt"];
1309--4627[label="0.00510421;12pkt 12fpkt"];
1309--4628[label="0.0646533;152pkt 152fpkt"];
1309--4631[label="0.0659294;155pkt 155fpkt"];
1309--4634[label="0.00510421;12pkt 12fpkt"];
1309--4635[label="0.0646533;152pkt 152fpkt"];
1309--6391[label="1;2351pkt 2351fpkt"];
1310--2173[label="0.00215054;1pkt 1fpkt"];
1310--3218[label="0.0588235;1pkt 1fpkt"];
1310--4380[label="0.99827;2308pkt 2308fpkt"];
1310--4619[label="0.0670415;155pkt 155fpkt"];
1310--4623[label="0.0536332;124pkt 124fpkt"];
1310--4628[label="0.0657439;152pkt 152fpkt"];
1310--4631[label="0.0670415;155pkt 155fpkt"];
1310--4635[label="0.0657439;152pkt 152fpkt"];
1310--5570[label="0.000432526;1pkt 1fpkt"];
1310--6391[label="0.99827;2308pkt 2308fpkt"];
1310--6879[label="0.00606061;1pkt 1fpkt"];
4380--4421[label="0.00819672;1pkt 1fpkt"];
4380--4619[label="0.0659294;155pkt 155fpkt"];
4380--4623[label="0.0527435;124pkt 124fpkt"];
4380--4627[label="0.00510421;12pkt 12fpkt"];
4380--4628[label="0.0646533;152pkt 152fpkt"];
4380--4631[label="0.0659294;155pkt 155fpkt"];
4380--4634[label="0.00510421;12pkt 12fpkt"];
4380--4635[label="0.0646533;152pkt 152fpkt"];
4380--6391[label="1;2351pkt 2351fpkt"];
</description>
    <slice>
      <filter dst_ip="137.93.91.183" dst_port="80" src_ip="136.70.186.157"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
3367[label="197.30.34.41;d;2pkt 2fpkt", shape=diamond, color=yellow];
4435[label="197.30.34.41;d;2pkt 2fpkt", shape=hexagon, color=black];
4868[label="141.169.151.16;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.41.72:1355, 197.30.34.41:1863}[20%]&lt;BR/&gt;{141.169.151.16:3903, 197.30.34.84:1863}[20%]&lt;BR/&gt;{141.169.151.16:3032, 197.30.34.104:1863}[20%]&lt;BR/&gt;{141.169.151.16:3010, 197.30.38.176:1863}[20%]&lt;BR/&gt;{141.169.151.16:4771, 197.30.34.41:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4771: (18.75%)&lt;BR/&gt; 1355: (12.5%)&lt;BR/&gt; 3903: (6.25%)&lt;BR/&gt; 3032: (6.25%)&gt;];
}
3367--4435[label="1;2pkt 2fpkt"];
3367--4868[label="0.5;1pkt 1fpkt"];
4435--4868[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.41" dst_port="1863" src_ip="141.169.151.16" src_port="4771"/>
      <filter dst_ip="197.30.38.176" dst_port="1863" src_ip="141.169.151.16" src_port="3010"/>
      <filter dst_ip="197.30.34.104" dst_port="1863" src_ip="141.169.151.16" src_port="3032"/>
      <filter dst_ip="197.30.34.84" dst_port="1863" src_ip="141.169.151.16" src_port="3903"/>
      <filter dst_ip="197.30.34.41" dst_port="1863" src_ip="141.169.41.72" src_port="1355"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
3368[label="197.30.34.41;s;2pkt 2fpkt", shape=diamond, color=yellow];
4436[label="197.30.34.41;s;2pkt 2fpkt", shape=hexagon, color=black];
5169[label="197.30.34.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7578[label="197.30.34.41;3pkt 3fpkt", shape=invtriangle, color=brown];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.41:1863, 141.169.151.16:4771}[33.3333%]&lt;BR/&gt;{197.30.34.41:1863, 141.169.41.72:1355}[33.3333%]&lt;BR/&gt;{197.30.34.41:1863, 136.213.39.125:1100}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4771: (22.2222%)&lt;BR/&gt; 1355: (22.2222%)&lt;BR/&gt; 1100: (5.55556%)&gt;];
}
3368--4436[label="1;2pkt 2fpkt"];
3368--5169[label="1;2pkt 2fpkt"];
3368--7578[label="1;2pkt 2fpkt"];
4436--5169[label="1;2pkt 2fpkt"];
4436--7578[label="1;2pkt 2fpkt"];
5169--7578[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.39.125" dst_port="1100" src_ip="197.30.34.41" src_port="1863"/>
      <filter dst_ip="141.169.41.72" dst_port="1355" src_ip="197.30.34.41" src_port="1863"/>
      <filter dst_ip="141.169.151.16" dst_port="4771" src_ip="197.30.34.41" src_port="1863"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01912,2.04208,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
26[label="149.99.198.42s;2pkt 2fpkt", shape=rectangle, color=red];
109[label="141.169.181.203s;3pkt 3fpkt", shape=rectangle, color=red];
3165[label="149.99.198.42;s;80pkt 80fpkt", shape=diamond, color=yellow];
3506[label="16.225.25.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
3507[label="141.169.181.203;s;2pkt 2fpkt", shape=diamond, color=yellow];
4447[label="149.99.198.42;s;80pkt 80fpkt", shape=hexagon, color=black];
5026[label="141.169.142.29;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6836[label="141.169.181.203;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.198.42:*, 87.157.11.48:80}[52.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.435%)&lt;BR/&gt; 1533: (1.41243%)&lt;BR/&gt; 1532: (1.41243%)&lt;BR/&gt; 1581: (0.847458%)&lt;BR/&gt; 1529: (0.847458%)&gt;];
}
26--3165[label="0.5;1pkt 1fpkt"];
26--4447[label="0.5;1pkt 1fpkt"];
26--5026[label="0.5;1pkt 1fpkt"];
109--518[label="0.333333;1pkt 1fpkt"];
109--834[label="0.333333;1pkt 1fpkt"];
109--3165[label="0.333333;1pkt 1fpkt"];
109--3461[label="0.333333;1pkt 1fpkt"];
109--3506[label="1;2pkt 2fpkt"];
109--3507[label="1;2pkt 2fpkt"];
109--4447[label="0.333333;1pkt 1fpkt"];
109--6836[label="1;2pkt 2fpkt"];
3165--3461[label="0.4;2pkt 2fpkt"];
3165--3762[label="0.025;2pkt 2fpkt"];
3165--3879[label="0.0125;1pkt 1fpkt"];
3165--4447[label="1;80pkt 80fpkt"];
3165--4628[label="0.125;10pkt 10fpkt"];
3165--4635[label="0.125;10pkt 10fpkt"];
3506--3507[label="1;2pkt 2fpkt"];
3506--6836[label="1;2pkt 2fpkt"];
3507--6836[label="1;2pkt 2fpkt"];
4447--4628[label="0.125;10pkt 10fpkt"];
4447--4635[label="0.125;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="87.157.11.48" dst_port="80" src_ip="149.99.198.42"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
2939[label="173.19.69.181;s;13pkt 13fpkt", shape=diamond, color=yellow];
2940[label="197.30.41.128;d;9pkt 9fpkt", shape=diamond, color=yellow];
4450[label="173.19.69.181;s;13pkt 13fpkt", shape=hexagon, color=black];
6614[label="173.19.69.181;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8450[label="173.19.69.181;14pkt 14fpkt", shape=invtriangle, color=brown];
9450[label="173.19.69.181;14pkt 14fpkt", shape=invhouse, color=bisque];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.69.181:80, 197.30.41.128:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5065%)&lt;BR/&gt; 25: (6.49351%)&lt;BR/&gt; 53413: (3.8961%)&lt;BR/&gt; 49858: (3.8961%)&lt;BR/&gt; 44205: (3.8961%)&gt;];
}
2939--2940[label="1;9pkt 9fpkt"];
2939--4450[label="1;13pkt 13fpkt"];
2939--4618[label="0.0769231;1pkt 1fpkt"];
2939--6614[label="1;13pkt 13fpkt"];
2939--8450[label="1;13pkt 13fpkt"];
2939--9450[label="1;13pkt 13fpkt"];
2940--4450[label="1;9pkt 9fpkt"];
2940--4618[label="0.111111;1pkt 1fpkt"];
2940--6614[label="1;9pkt 9fpkt"];
2940--8450[label="1;9pkt 9fpkt"];
2940--9450[label="1;9pkt 9fpkt"];
4450--4618[label="0.0769231;1pkt 1fpkt"];
4450--6614[label="1;13pkt 13fpkt"];
4450--8450[label="1;13pkt 13fpkt"];
4450--9450[label="1;13pkt 13fpkt"];
6614--8450[label="1;14pkt 14fpkt"];
6614--9450[label="1;14pkt 14fpkt"];
8450--9450[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.41.128" src_ip="173.19.69.181" src_port="80"/>
    </slice>
    <from sec="1089176419" usec="0"/>
    <to sec="1089177269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2966[label="136.213.11.36;s;80pkt 80fpkt", shape=diamond, color=yellow];
3409[label="16.219.85.117;d;84pkt 84fpkt", shape=diamond, color=yellow];
4462[label="16.219.85.117;d;84pkt 84fpkt", shape=hexagon, color=black];
5131[label="136.213.11.38;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5156[label="136.213.11.40;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5221[label="169.51.193.44;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.11.36:*, 16.219.85.117:2703}[28.5714%]&lt;BR/&gt;{136.213.11.38:*, *:2703}[22.3602%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (49.8433%)&lt;BR/&gt; 60717: (0.470219%)&lt;BR/&gt; 60715: (0.470219%)&lt;BR/&gt; 60708: (0.470219%)&lt;BR/&gt; 60706: (0.470219%)&gt;];
}
2966--3409[label="0.5;40pkt 40fpkt"];
2966--4462[label="0.5;40pkt 40fpkt"];
3409--4462[label="1;84pkt 84fpkt"];
3409--5131[label="0.444444;16pkt 16fpkt"];
3409--5156[label="0.5;8pkt 8fpkt"];
3409--5221[label="0.526316;10pkt 10fpkt"];
4462--5131[label="0.444444;16pkt 16fpkt"];
4462--5156[label="0.5;8pkt 8fpkt"];
4462--5221[label="0.526316;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="2703" src_ip="136.213.11.38"/>
      <filter dst_ip="16.219.85.117" dst_port="2703" src_ip="136.213.11.36"/>
    </slice>
    <from sec="1089176488" usec="0"/>
    <to sec="1089177263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
1452[label="199.212.229.54;d;63pkt 63fpkt", shape=diamond, color=yellow];
1453[label="194.60.138.200;s;63pkt 63fpkt", shape=diamond, color=yellow];
3569[label="199.212.229.54;d;63pkt 63fpkt", shape=hexagon, color=black];
6793[label="194.60.138.200;71pkt 71fpkt", shape=pentagon, color=darkviolet];
8550[label="194.60.138.200;71pkt 71fpkt", shape=invtriangle, color=brown];
9498[label="194.60.138.200;70pkt 70fpkt", shape=invhouse, color=bisque];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.138.200:*, 199.212.229.54:80}[88.7324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4189: (0.74813%)&lt;BR/&gt; 4188: (0.74813%)&lt;BR/&gt; 4187: (0.74813%)&lt;BR/&gt; 4186: (0.74813%)&gt;];
}
1452--1453[label="1;63pkt 63fpkt"];
1452--3569[label="1;63pkt 63fpkt"];
1452--4619[label="0.269841;17pkt 17fpkt"];
1452--4631[label="0.269841;17pkt 17fpkt"];
1452--6793[label="1;63pkt 63fpkt"];
1452--8550[label="1;63pkt 63fpkt"];
1452--9498[label="1;63pkt 63fpkt"];
1453--3569[label="1;63pkt 63fpkt"];
1453--4619[label="0.269841;17pkt 17fpkt"];
1453--4631[label="0.269841;17pkt 17fpkt"];
1453--6793[label="1;63pkt 63fpkt"];
1453--8550[label="1;63pkt 63fpkt"];
1453--9498[label="1;63pkt 63fpkt"];
3569--4619[label="0.269841;17pkt 17fpkt"];
3569--4631[label="0.269841;17pkt 17fpkt"];
3569--6793[label="1;63pkt 63fpkt"];
3569--8550[label="1;63pkt 63fpkt"];
3569--9498[label="1;63pkt 63fpkt"];
6793--8550[label="1;71pkt 71fpkt"];
6793--9498[label="1;70pkt 70fpkt"];
8550--9498[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="199.212.229.54" dst_port="80" src_ip="194.60.138.200"/>
    </slice>
    <from sec="1089176426" usec="0"/>
    <to sec="1089176997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02533,2.18728,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
3136[label="141.169.36.148;s;39pkt 39fpkt", shape=diamond, color=yellow];
3229[label="205.208.172.41;d;16pkt 16fpkt", shape=diamond, color=yellow];
4427[label="141.169.36.148;s;39pkt 39fpkt", shape=hexagon, color=black];
4475[label="205.208.172.41;d;16pkt 16fpkt", shape=hexagon, color=black];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.36.148:*, 205.208.172.41:80}[41.0256%]&lt;BR/&gt;{141.169.36.148:*, 212.84.68.13:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.7273%)&lt;BR/&gt; 32769: (5.45455%)&lt;BR/&gt; 53: (5.45455%)&lt;BR/&gt; 1145: (2.72727%)&lt;BR/&gt; 1143: (2.72727%)&gt;];
}
3136--3229[label="1;16pkt 16fpkt"];
3136--4284[label="0.025641;1pkt 1fpkt"];
3136--4427[label="1;39pkt 39fpkt"];
3136--4475[label="1;16pkt 16fpkt"];
3136--4623[label="0.0769231;3pkt 3fpkt"];
3136--4628[label="0.0512821;2pkt 2fpkt"];
3136--4635[label="0.0512821;2pkt 2fpkt"];
3229--4427[label="1;16pkt 16fpkt"];
3229--4475[label="1;16pkt 16fpkt"];
3229--4628[label="0.0625;1pkt 1fpkt"];
3229--4635[label="0.0625;1pkt 1fpkt"];
4427--4475[label="1;16pkt 16fpkt"];
4427--4623[label="0.0769231;3pkt 3fpkt"];
4427--4628[label="0.0512821;2pkt 2fpkt"];
4427--4635[label="0.0512821;2pkt 2fpkt"];
4475--4628[label="0.0625;1pkt 1fpkt"];
4475--4635[label="0.0625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.208.172.41" dst_port="80" src_ip="141.169.36.148"/>
      <filter dst_ip="212.84.68.13" dst_port="80" src_ip="141.169.36.148"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
3244[label="136.213.156.0;s;41pkt 41fpkt", shape=diamond, color=yellow];
4643[label="136.213.156.0;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7278[label="136.213.156.0;41pkt 41fpkt", shape=invtriangle, color=brown];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.156.0:*, 222.138.109.37:80}[87.8049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1166: (1.22951%)&lt;BR/&gt; 1165: (1.22951%)&lt;BR/&gt; 1164: (1.22951%)&lt;BR/&gt; 1163: (1.22951%)&gt;];
}
3244--4628[label="0.097561;4pkt 4fpkt"];
3244--4635[label="0.097561;4pkt 4fpkt"];
3244--4643[label="1;40pkt 40fpkt"];
3244--7278[label="1;41pkt 41fpkt"];
4643--7278[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="222.138.109.37" dst_port="80" src_ip="136.213.156.0"/>
    </slice>
    <from sec="1089176885" usec="0"/>
    <to sec="1089177113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.195.163.0"/>
    </slice>
    <from sec="1089176789" usec="0"/>
    <to sec="1089177148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.168.11.1"/>
    </slice>
    <from sec="1089176417" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.176.24.1"/>
    </slice>
    <from sec="1089177143" usec="0"/>
    <to sec="1089177165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.1"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.187.45.1"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.219.93.2"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.147.253.3"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.74.41.5"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.104.5"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.177.52.6"/>
    </slice>
    <from sec="1089176476" usec="0"/>
    <to sec="1089177270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.2.8"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.36.8"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.102.8"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.188.8"/>
    </slice>
    <from sec="1089176528" usec="0"/>
    <to sec="1089176956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
4785[label="195.79.124.9;62pkt 62fpkt", shape=pentagon, color=darkviolet];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.79.124.9:*, *:2745}[24.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (12.0968%)&lt;BR/&gt; 6129: (9.67742%)&lt;BR/&gt; 3127: (9.67742%)&lt;BR/&gt; 1025: (9.67742%)&lt;BR/&gt; 80: (8.87097%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="195.79.124.9"/>
    </slice>
    <from sec="1089176461" usec="0"/>
    <to sec="1089177206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.53.205.9"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089176730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.147.253.9"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.160.12.10"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.197.90.10"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.58.177.10"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.147.232.10"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.70.11"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.42.83.11"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.75.94.11"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
2803[label="136.213.23.5;d;11pkt 11fpkt", shape=diamond, color=yellow];
2812[label="75.9.212.11;s;3pkt 3fpkt", shape=diamond, color=yellow];
3502[label="75.9.212.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
4822[label="75.9.212.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7166[label="75.9.193.241;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7380[label="75.9.212.11;2pkt 2fpkt", shape=invtriangle, color=brown];
8894[label="75.9.212.11;3pkt 3fpkt", shape=invhouse, color=bisque];
8897[label="75.9.212.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.9.193.241:80, 136.213.11.100:*}[58.0645%]&lt;BR/&gt;{*:80, 136.213.23.5:*}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.2174%)&lt;BR/&gt; 2822: (5.43478%)&lt;BR/&gt; 2821: (5.43478%)&lt;BR/&gt; 1755: (5.43478%)&lt;BR/&gt; 554: (4.34783%)&gt;];
}
2803--2812[label="1;3pkt 3fpkt"];
2803--3502[label="1;1pkt 1fpkt"];
2803--4822[label="1;2pkt 2fpkt"];
2803--7166[label="0.272727;3pkt 3fpkt"];
2803--7380[label="1;2pkt 2fpkt"];
2803--8894[label="1;3pkt 3fpkt"];
2803--8897[label="1;1pkt 1fpkt"];
2812--4822[label="1;2pkt 2fpkt"];
2812--7380[label="1;2pkt 2fpkt"];
2812--8894[label="1;3pkt 3fpkt"];
4822--7380[label="1;2pkt 2fpkt"];
4822--8894[label="1;2pkt 2fpkt"];
7380--8894[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.23.5" src_port="80"/>
      <filter dst_ip="136.213.11.100" src_ip="75.9.193.241" src_port="80"/>
    </slice>
    <from sec="1089176698" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.10.5.12"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.9.212.12"/>
    </slice>
    <from sec="1089177131" usec="0"/>
    <to sec="1089177159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.37.13"/>
    </slice>
    <from sec="1089176444" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.148.97.13"/>
    </slice>
    <from sec="1089177191" usec="0"/>
    <to sec="1089177193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.20.105.14"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.159.21.17"/>
    </slice>
    <from sec="1089176910" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.46.101.17"/>
    </slice>
    <from sec="1089176918" usec="0"/>
    <to sec="1089177218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.190.142.18"/>
    </slice>
    <from sec="1089176916" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.222.172.18"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.81.15.20"/>
    </slice>
    <from sec="1089176415" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.98.20"/>
    </slice>
    <from sec="1089176787" usec="0"/>
    <to sec="1089177167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.52.133.20"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.106.191.20"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.130.21"/>
    </slice>
    <from sec="1089176591" usec="0"/>
    <to sec="1089176951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.652659,2.10583,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
165[label="2.84.148.21s;39pkt 39fpkt", shape=rectangle, color=red];
4931[label="2.84.148.21;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.84.148.21:43461, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43461: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
165--4931[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="2.84.148.21" src_port="43461"/>
    </slice>
    <from sec="1089176762" usec="0"/>
    <to sec="1089176802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
1524[label="214.161.195.21;s;1878pkt 1878fpkt", shape=diamond, color=yellow];
4932[label="214.161.195.21;1876pkt 1876fpkt", shape=pentagon, color=darkviolet];
7437[label="214.161.195.21;1876pkt 1876fpkt", shape=invtriangle, color=brown];
8921[label="214.161.195.21;1877pkt 1877fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.195.21:*, *:1027}[50.3195%]&lt;BR/&gt;{214.161.195.21:*, *:1026}[49.6805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (25.1765%)&lt;BR/&gt; 1026: (24.8235%)&lt;BR/&gt; 4264: (0.159851%)&lt;BR/&gt; 4175: (0.159851%)&lt;BR/&gt; 4147: (0.159851%)&gt;];
}
1524--4932[label="1;1876pkt 1876fpkt"];
1524--7437[label="1;1876pkt 1876fpkt"];
1524--8921[label="1;1877pkt 1877fpkt"];
4932--7437[label="1;1876pkt 1876fpkt"];
4932--8921[label="1;1876pkt 1876fpkt"];
7437--8921[label="1;1876pkt 1876fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="214.161.195.21"/>
      <filter dst_port="1026" src_ip="214.161.195.21"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.91.201.21"/>
    </slice>
    <from sec="1089176999" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.652659,2.10583,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
501[label="208.71.134.43d;1pkt 1fpkt", shape=rectangle, color=red];
4940[label="136.213.85.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.85.22:3220, 16.240.90.43:4056}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4056: (50%)&lt;BR/&gt; 3220: (50%)&gt;];
}
501--4940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.240.90.43" dst_port="4056" src_ip="136.213.85.22" src_port="3220"/>
    </slice>
    <from sec="1089177288" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.138.52.23"/>
    </slice>
    <from sec="1089176666" usec="0"/>
    <to sec="1089176669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.219.11.24"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.46.101.26"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.130.26"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.149.243.27"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089176702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.28"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.28"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
245[label="215.203.11.29s;455pkt 455fpkt", shape=rectangle, color=red];
5017[label="215.203.11.29;454pkt 454fpkt", shape=pentagon, color=darkviolet];
7488[label="215.203.11.29;454pkt 454fpkt", shape=invtriangle, color=brown];
8949[label="215.203.11.29;455pkt 455fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.203.11.29:*, *:9898}[54.9451%]&lt;BR/&gt;{215.203.11.29:*, *:5554}[45.0549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.4477%)&lt;BR/&gt; 5554: (22.5523%)&lt;BR/&gt; 4318: (0.110011%)&lt;BR/&gt; 4316: (0.110011%)&lt;BR/&gt; 4315: (0.110011%)&gt;];
}
245--5017[label="1;454pkt 454fpkt"];
245--7488[label="1;454pkt 454fpkt"];
245--8949[label="1;455pkt 455fpkt"];
5017--7488[label="1;454pkt 454fpkt"];
5017--8949[label="1;454pkt 454fpkt"];
7488--8949[label="1;454pkt 454fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.203.11.29"/>
      <filter dst_port="5554" src_ip="215.203.11.29"/>
    </slice>
    <from sec="1089177065" usec="0"/>
    <to sec="1089177069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.31"/>
    </slice>
    <from sec="1089176438" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.4.32"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.39.32"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.245.33"/>
    </slice>
    <from sec="1089176797" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.92.34"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82932,2.0161,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
21[label="200.99.76.35s;1pkt 1fpkt", shape=rectangle, color=red];
3235[label="149.99.116.240;d;12pkt 12fpkt", shape=diamond, color=yellow];
3289[label="200.99.76.35;s;2pkt 2fpkt", shape=diamond, color=yellow];
5090[label="200.99.76.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7014[label="197.30.39.225;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7530[label="200.99.76.35;4pkt 4fpkt", shape=invtriangle, color=brown];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.39.225:1863, *:*}[29.4118%]&lt;BR/&gt;{200.99.76.35:80, 149.99.116.240:*}[23.5294%]&lt;BR/&gt;{200.99.76.180:443, 149.99.116.240:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.7586%)&lt;BR/&gt; 1863: (10.3448%)&lt;BR/&gt; 3632: (6.89655%)&lt;BR/&gt; 3611: (6.89655%)&lt;BR/&gt; 3610: (6.89655%)&gt;];
}
21--3235[label="1;1pkt 1fpkt"];
21--5090[label="1;1pkt 1fpkt"];
21--7530[label="1;1pkt 1fpkt"];
3235--3289[label="1;2pkt 2fpkt"];
3235--5090[label="0.8;4pkt 4fpkt"];
3235--7014[label="0.2;1pkt 1fpkt"];
3235--7530[label="1;4pkt 4fpkt"];
3289--5090[label="1;2pkt 2fpkt"];
3289--7530[label="1;2pkt 2fpkt"];
5090--7530[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="197.30.39.225" src_port="1863"/>
      <filter dst_ip="149.99.116.240" src_ip="200.99.76.180" src_port="443"/>
      <filter dst_ip="149.99.116.240" src_ip="200.99.76.35" src_port="80"/>
    </slice>
    <from sec="1089176417" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.81.135.35"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089176700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.21.177.35"/>
    </slice>
    <from sec="1089176485" usec="0"/>
    <to sec="1089177201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.13.36"/>
    </slice>
    <from sec="1089176443" usec="0"/>
    <to sec="1089177245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.39.52.37"/>
    </slice>
    <from sec="1089177241" usec="0"/>
    <to sec="1089177263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.38"/>
    </slice>
    <from sec="1089176431" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
3433[label="215.189.152.38;s;185pkt 185fpkt", shape=diamond, color=yellow];
5138[label="215.189.152.38;220pkt 220fpkt", shape=pentagon, color=darkviolet];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.189.152.38:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4999: (0.246914%)&lt;BR/&gt; 4988: (0.246914%)&lt;BR/&gt; 4977: (0.246914%)&lt;BR/&gt; 4969: (0.246914%)&gt;];
}
3433--5138[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="215.189.152.38"/>
    </slice>
    <from sec="1089176821" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.164.182.38"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.129.39"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.13.2.41"/>
    </slice>
    <from sec="1089176580" usec="0"/>
    <to sec="1089176623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.160.141.41"/>
    </slice>
    <from sec="1089177238" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.118.221.41"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.42"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.43"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.185.201.43"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.152.26.44"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.11.88.44"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.138.56.45"/>
    </slice>
    <from sec="1089176619" usec="0"/>
    <to sec="1089176924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.210.91.45"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
193[label="73.134.33.150s;2pkt 2fpkt", shape=rectangle, color=red];
1382[label="194.60.2.52;d;231pkt 231fpkt", shape=diamond, color=yellow];
1419[label="73.48.193.151;s;34pkt 34fpkt", shape=diamond, color=yellow];
1686[label="169.51.6.100;d;128pkt 128fpkt", shape=diamond, color=yellow];
1707[label="149.99.228.182;d;226pkt 226fpkt", shape=diamond, color=yellow];
1997[label="194.216.63.161;s;186pkt 186fpkt", shape=diamond, color=yellow];
3712[label="169.51.6.100;d;128pkt 128fpkt", shape=hexagon, color=black];
3720[label="73.48.193.151;s;34pkt 34fpkt", shape=hexagon, color=black];
4798[label="73.32.64.10;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5104[label="73.23.67.36;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5125[label="73.32.92.37;56pkt 56fpkt", shape=pentagon, color=darkviolet];
5232[label="194.129.165.45;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5496[label="73.20.4.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5871[label="73.32.64.102;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6122[label="73.52.109.132;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6322[label="73.48.193.151;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6409[label="73.32.92.160;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6447[label="194.216.63.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6846[label="73.32.69.204;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7015[label="73.32.65.225;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7367[label="73.32.64.10;13pkt 13fpkt", shape=invtriangle, color=brown];
7539[label="73.23.67.36;5pkt 5fpkt", shape=invtriangle, color=brown];
7617[label="194.129.165.45;8pkt 8fpkt", shape=invtriangle, color=brown];
7784[label="73.20.4.69;5pkt 5fpkt", shape=invtriangle, color=brown];
8282[label="73.48.193.151;34pkt 34fpkt", shape=invtriangle, color=brown];
8327[label="73.32.92.160;38pkt 38fpkt", shape=invtriangle, color=brown];
8688[label="73.32.65.225;4pkt 4fpkt", shape=invtriangle, color=brown];
8885[label="73.32.64.10;14pkt 14fpkt", shape=invhouse, color=bisque];
8975[label="73.23.67.36;5pkt 5fpkt", shape=invhouse, color=bisque];
9018[label="194.129.165.45;9pkt 9fpkt", shape=invhouse, color=bisque];
9363[label="73.48.193.151;34pkt 34fpkt", shape=invhouse, color=bisque];
9559[label="73.32.65.225;3pkt 3fpkt", shape=invhouse, color=bisque];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.99.228.182:*}[32.6055%]&lt;BR/&gt;{*:80, 194.60.2.52:*}[32.0233%]&lt;BR/&gt;{194.216.63.161:80, *:*}[27.0742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.29%)&lt;BR/&gt; 1206: (0.373692%)&lt;BR/&gt; 1198: (0.373692%)&lt;BR/&gt; 1188: (0.373692%)&lt;BR/&gt; 1161: (0.373692%)&gt;];
}
193--1113[label="0.5;1pkt 1fpkt"];
193--1382[label="0.5;1pkt 1fpkt"];
193--1419[label="0.5;1pkt 1fpkt"];
193--2596[label="0.5;1pkt 1fpkt"];
193--3720[label="0.5;1pkt 1fpkt"];
193--3863[label="0.5;1pkt 1fpkt"];
193--4618[label="1;2pkt 2fpkt"];
193--6322[label="0.5;1pkt 1fpkt"];
193--8282[label="0.5;1pkt 1fpkt"];
193--9363[label="0.5;1pkt 1fpkt"];
1382--1419[label="0.147059;5pkt 5fpkt"];
1382--1647[label="0.004329;1pkt 1fpkt"];
1382--1885[label="0.004329;1pkt 1fpkt"];
1382--3204[label="0.0327869;2pkt 2fpkt"];
1382--3720[label="0.147059;5pkt 5fpkt"];
1382--3974[label="0.0995671;23pkt 23fpkt"];
1382--4007[label="0.004329;1pkt 1fpkt"];
1382--4323[label="0.04;2pkt 2fpkt"];
1382--4618[label="0.0519481;12pkt 12fpkt"];
1382--4798[label="0.0769231;1pkt 1fpkt"];
1382--4921[label="0.0995671;23pkt 23fpkt"];
1382--4952[label="0.0322581;1pkt 1fpkt"];
1382--5057[label="0.004329;1pkt 1fpkt"];
1382--5104[label="1;6pkt 6fpkt"];
1382--5125[label="0.785714;44pkt 44fpkt"];
1382--5134[label="0.0307692;2pkt 2fpkt"];
1382--5218[label="0.0333333;1pkt 1fpkt"];
1382--5496[label="1;4pkt 4fpkt"];
1382--5801[label="0.012987;3pkt 3fpkt"];
1382--5871[label="1;15pkt 15fpkt"];
1382--6222[label="0.00865801;2pkt 2fpkt"];
1382--6322[label="0.171429;6pkt 6fpkt"];
1382--6406[label="0.0232558;2pkt 2fpkt"];
1382--6409[label="0.605263;23pkt 23fpkt"];
1382--6558[label="0.0645161;2pkt 2fpkt"];
1382--6846[label="0.2;2pkt 2fpkt"];
1382--7367[label="0.0769231;1pkt 1fpkt"];
1382--7432[label="0.0995671;23pkt 23fpkt"];
1382--7539[label="1;5pkt 5fpkt"];
1382--7784[label="1;5pkt 5fpkt"];
1382--7970[label="0.012987;3pkt 3fpkt"];
1382--8228[label="0.00865801;2pkt 2fpkt"];
1382--8282[label="0.147059;5pkt 5fpkt"];
1382--8327[label="0.605263;23pkt 23fpkt"];
1382--8885[label="0.142857;2pkt 2fpkt"];
1382--8920[label="0.0995671;23pkt 23fpkt"];
1382--8975[label="1;5pkt 5fpkt"];
1382--9331[label="0.00865801;2pkt 2fpkt"];
1382--9363[label="0.147059;5pkt 5fpkt"];
1419--1686[label="0.441176;15pkt 15fpkt"];
1419--1707[label="0.352941;12pkt 12fpkt"];
1419--3712[label="0.441176;15pkt 15fpkt"];
1419--3720[label="1;34pkt 34fpkt"];
1419--4618[label="0.235294;8pkt 8fpkt"];
1419--6322[label="1;34pkt 34fpkt"];
1419--8282[label="0.970588;33pkt 33fpkt"];
1419--9363[label="0.970588;33pkt 33fpkt"];
1686--2910[label="0.101852;11pkt 11fpkt"];
1686--3358[label="0.0982143;11pkt 11fpkt"];
1686--3690[label="0.0078125;1pkt 1fpkt"];
1686--3712[label="1;128pkt 128fpkt"];
1686--3720[label="0.441176;15pkt 15fpkt"];
1686--4618[label="0.140625;18pkt 18fpkt"];
1686--4798[label="0.538462;7pkt 7fpkt"];
1686--5232[label="1;8pkt 8fpkt"];
1686--6122[label="0.666667;2pkt 2fpkt"];
1686--6322[label="0.428571;15pkt 15fpkt"];
1686--6409[label="0.289474;11pkt 11fpkt"];
1686--7367[label="0.538462;7pkt 7fpkt"];
1686--7617[label="1;8pkt 8fpkt"];
1686--8282[label="0.441176;15pkt 15fpkt"];
1686--8327[label="0.289474;11pkt 11fpkt"];
1686--8885[label="0.5;7pkt 7fpkt"];
1686--9018[label="0.888889;8pkt 8fpkt"];
1686--9363[label="0.441176;15pkt 15fpkt"];
1707--1997[label="0.505376;94pkt 94fpkt"];
1707--3720[label="0.352941;12pkt 12fpkt"];
1707--4618[label="0.269912;61pkt 61fpkt"];
1707--4798[label="0.307692;4pkt 4fpkt"];
1707--5125[label="0.214286;12pkt 12fpkt"];
1707--5778[label="0.137931;4pkt 4fpkt"];
1707--6322[label="0.342857;12pkt 12fpkt"];
1707--6409[label="0.105263;4pkt 4fpkt"];
1707--6447[label="0.4;2pkt 2fpkt"];
1707--6846[label="0.7;7pkt 7fpkt"];
1707--7015[label="1;4pkt 4fpkt"];
1707--7367[label="0.307692;4pkt 4fpkt"];
1707--8282[label="0.352941;12pkt 12fpkt"];
1707--8327[label="0.105263;4pkt 4fpkt"];
1707--8688[label="1;4pkt 4fpkt"];
1707--8885[label="0.285714;4pkt 4fpkt"];
1707--9363[label="0.352941;12pkt 12fpkt"];
1707--9559[label="1;3pkt 3fpkt"];
1997--3936[label="0.0107527;2pkt 2fpkt"];
1997--4618[label="0.00537634;1pkt 1fpkt"];
3712--3720[label="0.441176;15pkt 15fpkt"];
3712--4618[label="0.140625;18pkt 18fpkt"];
3712--4798[label="0.538462;7pkt 7fpkt"];
3712--5232[label="1;8pkt 8fpkt"];
3712--6122[label="0.666667;2pkt 2fpkt"];
3712--6322[label="0.428571;15pkt 15fpkt"];
3712--6409[label="0.289474;11pkt 11fpkt"];
3712--7367[label="0.538462;7pkt 7fpkt"];
3712--7617[label="1;8pkt 8fpkt"];
3712--8282[label="0.441176;15pkt 15fpkt"];
3712--8327[label="0.289474;11pkt 11fpkt"];
3712--8885[label="0.5;7pkt 7fpkt"];
3712--9018[label="0.888889;8pkt 8fpkt"];
3712--9363[label="0.441176;15pkt 15fpkt"];
3720--4618[label="0.235294;8pkt 8fpkt"];
3720--6322[label="1;34pkt 34fpkt"];
3720--8282[label="0.970588;33pkt 33fpkt"];
3720--9363[label="0.970588;33pkt 33fpkt"];
4798--7367[label="1;13pkt 13fpkt"];
4798--8885[label="1;13pkt 13fpkt"];
5104--7539[label="1;5pkt 5fpkt"];
5104--8975[label="1;5pkt 5fpkt"];
5232--7617[label="1;8pkt 8fpkt"];
5232--9018[label="1;8pkt 8fpkt"];
5496--7784[label="1;4pkt 4fpkt"];
6322--8282[label="1;34pkt 34fpkt"];
6322--9363[label="1;34pkt 34fpkt"];
6409--8327[label="1;38pkt 38fpkt"];
7015--8688[label="1;4pkt 4fpkt"];
7015--9559[label="1;3pkt 3fpkt"];
7367--8885[label="1;13pkt 13fpkt"];
7539--8975[label="1;5pkt 5fpkt"];
7617--9018[label="1;8pkt 8fpkt"];
8282--9363[label="1;34pkt 34fpkt"];
8688--9559[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="194.216.63.161" src_port="80"/>
      <filter dst_ip="194.60.2.52" src_port="80"/>
      <filter dst_ip="149.99.228.182" src_port="80"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.33.46"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.211.178.46"/>
    </slice>
    <from sec="1089176879" usec="0"/>
    <to sec="1089176922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.2.48"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.135.33.48"/>
    </slice>
    <from sec="1089177175" usec="0"/>
    <to sec="1089177192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
270[label="209.26.114.48s;230pkt 230fpkt", shape=rectangle, color=red];
5255[label="209.26.114.48;230pkt 230fpkt", shape=pentagon, color=darkviolet];
7635[label="209.26.114.48;229pkt 229fpkt", shape=invtriangle, color=brown];
9028[label="209.26.114.48;230pkt 230fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.26.114.48:*, *:1023}[51.3043%]&lt;BR/&gt;{209.26.114.48:*, *:9898}[48.6957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (25.6257%)&lt;BR/&gt; 9898: (24.3743%)&lt;BR/&gt; 3845: (0.217628%)&lt;BR/&gt; 3843: (0.217628%)&lt;BR/&gt; 3842: (0.217628%)&gt;];
}
270--5255[label="1;230pkt 230fpkt"];
270--7635[label="1;229pkt 229fpkt"];
270--9028[label="1;230pkt 230fpkt"];
5255--7635[label="1;229pkt 229fpkt"];
5255--9028[label="1;230pkt 230fpkt"];
7635--9028[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="209.26.114.48"/>
      <filter dst_port="9898" src_ip="209.26.114.48"/>
    </slice>
    <from sec="1089176907" usec="0"/>
    <to sec="1089176913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.178.153.48"/>
    </slice>
    <from sec="1089176886" usec="0"/>
    <to sec="1089176919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
172[label="194.138.99.49s;40pkt 40fpkt", shape=rectangle, color=red];
5268[label="194.138.99.49;742pkt 742fpkt", shape=pentagon, color=darkviolet];
7642[label="194.138.99.49;741pkt 741fpkt", shape=invtriangle, color=brown];
9033[label="194.138.99.49;742pkt 742fpkt", shape=invhouse, color=bisque];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.138.99.49:1025, *:137}[99.1914%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (49.6026%)&lt;BR/&gt; 137: (49.6026%)&lt;BR/&gt; 139: (0.397351%)&lt;BR/&gt; 1313: (0.0662252%)&lt;BR/&gt; 1310: (0.0662252%)&gt;];
}
172--5268[label="1;40pkt 40fpkt"];
172--7642[label="1;40pkt 40fpkt"];
172--9033[label="1;40pkt 40fpkt"];
5268--7642[label="1;741pkt 741fpkt"];
5268--9033[label="1;742pkt 742fpkt"];
7642--9033[label="1;741pkt 741fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.138.99.49" src_port="1025"/>
    </slice>
    <from sec="1089177128" usec="0"/>
    <to sec="1089177250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.54.45.50"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.198.138.52"/>
    </slice>
    <from sec="1089176810" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.204.55"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.178.83.57"/>
    </slice>
    <from sec="1089176416" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.59"/>
    </slice>
    <from sec="1089176419" usec="0"/>
    <to sec="1089177170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.59"/>
    </slice>
    <from sec="1089176452" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
2710[label="197.30.34.60;s;5pkt 5fpkt", shape=diamond, color=yellow];
5384[label="197.30.34.60;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.60:1863, 149.99.31.39:41789}[20%]&lt;BR/&gt;{197.30.34.60:1863, 136.213.37.64:2731}[20%]&lt;BR/&gt;{197.30.34.60:1863, 136.213.38.77:3254}[20%]&lt;BR/&gt;{197.30.34.60:1863, 136.213.20.112:1297}[20%]&lt;BR/&gt;{197.30.34.60:1863, 136.213.39.116:1148}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 41789: (10%)&lt;BR/&gt; 3254: (10%)&lt;BR/&gt; 2731: (10%)&lt;BR/&gt; 1297: (10%)&gt;];
}
2710--5384[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.39.116" dst_port="1148" src_ip="197.30.34.60" src_port="1863"/>
      <filter dst_ip="136.213.20.112" dst_port="1297" src_ip="197.30.34.60" src_port="1863"/>
      <filter dst_ip="136.213.38.77" dst_port="3254" src_ip="197.30.34.60" src_port="1863"/>
      <filter dst_ip="136.213.37.64" dst_port="2731" src_ip="197.30.34.60" src_port="1863"/>
      <filter dst_ip="149.99.31.39" dst_port="41789" src_ip="197.30.34.60" src_port="1863"/>
    </slice>
    <from sec="1089176420" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.142.61"/>
    </slice>
    <from sec="1089177277" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.681467,2.05414,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
287[label="209.191.83.62s;234pkt 234fpkt", shape=rectangle, color=red];
5405[label="209.191.83.62;234pkt 234fpkt", shape=pentagon, color=darkviolet];
7733[label="209.191.83.62;234pkt 234fpkt", shape=invtriangle, color=brown];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.191.83.62:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4995: (0.213675%)&lt;BR/&gt; 4994: (0.213675%)&lt;BR/&gt; 4946: (0.213675%)&lt;BR/&gt; 4945: (0.213675%)&gt;];
}
287--5405[label="1;234pkt 234fpkt"];
287--7733[label="1;234pkt 234fpkt"];
5405--7733[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.191.83.62"/>
    </slice>
    <from sec="1089176847" usec="0"/>
    <to sec="1089176851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.121.87.62"/>
    </slice>
    <from sec="1089177049" usec="0"/>
    <to sec="1089177144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
396[label="215.185.214.151s;354pkt 354fpkt", shape=rectangle, color=red];
742[label="215.185.214.151s;354pkt 354fpkt", shape=ellipse, color=green];
1028[label="215.185.214.151s;354pkt 354fpkt", shape=triangle, color=blue];
5413[label="210.165.243.62;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6323[label="215.185.214.151;229pkt 229fpkt", shape=pentagon, color=darkviolet];
7738[label="210.165.243.62;124pkt 124fpkt", shape=invtriangle, color=brown];
8283[label="215.185.214.151;228pkt 228fpkt", shape=invtriangle, color=brown];
9080[label="210.165.243.62;124pkt 124fpkt", shape=invhouse, color=bisque];
9364[label="215.185.214.151;228pkt 228fpkt", shape=invhouse, color=bisque];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.185.214.151:*, *:9898}[64.6893%]&lt;BR/&gt;{210.165.243.62:*, *:9898}[35.3107%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4329: (0.283019%)&lt;BR/&gt; 4328: (0.283019%)&lt;BR/&gt; 4327: (0.283019%)&lt;BR/&gt; 4301: (0.283019%)&gt;];
}
396--742[label="1;354pkt 354fpkt"];
396--1028[label="1;354pkt 354fpkt"];
396--5413[label="1;125pkt 125fpkt"];
396--6323[label="1;229pkt 229fpkt"];
396--7738[label="1;124pkt 124fpkt"];
396--8283[label="1;228pkt 228fpkt"];
396--9080[label="1;124pkt 124fpkt"];
396--9364[label="1;228pkt 228fpkt"];
742--1028[label="1;354pkt 354fpkt"];
742--5413[label="1;125pkt 125fpkt"];
742--6323[label="1;229pkt 229fpkt"];
742--7738[label="1;124pkt 124fpkt"];
742--8283[label="1;228pkt 228fpkt"];
742--9080[label="1;124pkt 124fpkt"];
742--9364[label="1;228pkt 228fpkt"];
1028--5413[label="1;125pkt 125fpkt"];
1028--6323[label="1;229pkt 229fpkt"];
1028--7738[label="1;124pkt 124fpkt"];
1028--8283[label="1;228pkt 228fpkt"];
1028--9080[label="1;124pkt 124fpkt"];
1028--9364[label="1;228pkt 228fpkt"];
5413--7738[label="1;124pkt 124fpkt"];
5413--9080[label="1;124pkt 124fpkt"];
6323--8283[label="1;228pkt 228fpkt"];
6323--9364[label="1;228pkt 228fpkt"];
7738--9080[label="1;124pkt 124fpkt"];
8283--9364[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.185.214.151"/>
      <filter dst_port="9898" src_ip="210.165.243.62"/>
    </slice>
    <from sec="1089177260" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.141.1.64"/>
    </slice>
    <from sec="1089176962" usec="0"/>
    <to sec="1089176965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.112.64"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.9.212.64"/>
    </slice>
    <from sec="1089177220" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.195.136.65"/>
    </slice>
    <from sec="1089177219" usec="0"/>
    <to sec="1089177240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.167.166.66"/>
    </slice>
    <from sec="1089177242" usec="0"/>
    <to sec="1089177257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
297[label="215.160.176.67s;239pkt 239fpkt", shape=rectangle, color=red];
5480[label="215.160.176.67;239pkt 239fpkt", shape=pentagon, color=darkviolet];
7776[label="215.160.176.67;239pkt 239fpkt", shape=invtriangle, color=brown];
9095[label="215.160.176.67;238pkt 238fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.160.176.67:*, *:5554}[58.159%]&lt;BR/&gt;{215.160.176.67:*, *:9898}[41.841%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (29.1099%)&lt;BR/&gt; 9898: (20.8901%)&lt;BR/&gt; 4765: (0.209424%)&lt;BR/&gt; 4530: (0.209424%)&lt;BR/&gt; 4529: (0.209424%)&gt;];
}
297--5480[label="1;239pkt 239fpkt"];
297--7776[label="1;239pkt 239fpkt"];
297--9095[label="1;238pkt 238fpkt"];
5480--7776[label="1;239pkt 239fpkt"];
5480--9095[label="1;238pkt 238fpkt"];
7776--9095[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.160.176.67"/>
      <filter dst_port="9898" src_ip="215.160.176.67"/>
    </slice>
    <from sec="1089177201" usec="0"/>
    <to sec="1089177205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
2929[label="197.30.34.68;s;10pkt 10fpkt", shape=diamond, color=yellow];
2948[label="149.99.105.89;d;7pkt 7fpkt", shape=diamond, color=yellow];
2995[label="73.198.138.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
5485[label="197.30.34.68;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7666[label="73.198.138.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.68:1863, *:*}[62.5%]&lt;BR/&gt;{*:*, 149.99.105.89:*}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (37.931%)&lt;BR/&gt; 12320: (8.62069%)&lt;BR/&gt; 3595: (5.17241%)&lt;BR/&gt; 3588: (5.17241%)&lt;BR/&gt; 64733: (3.44828%)&gt;];
}
2929--2948[label="0.142857;1pkt 1fpkt"];
2929--5485[label="1;10pkt 10fpkt"];
2948--2995[label="1;1pkt 1fpkt"];
2948--5485[label="0.142857;1pkt 1fpkt"];
2948--7666[label="1;1pkt 1fpkt"];
2995--7666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.105.89"/>
      <filter src_ip="197.30.34.68" src_port="1863"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.134.156.68"/>
    </slice>
    <from sec="1089177249" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.9.212.68"/>
    </slice>
    <from sec="1089177263" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.652659,2.10583,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
176[label="215.180.0.69s;184pkt 184fpkt", shape=rectangle, color=red];
5494[label="215.180.0.69;245pkt 245fpkt", shape=pentagon, color=darkviolet];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.180.0.69:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
176--5494[label="0.994565;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.180.0.69" src_port="1034"/>
    </slice>
    <from sec="1089177025" usec="0"/>
    <to sec="1089177040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05978,2.05068,001,1 1 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
299[label="215.203.45.69s;175pkt 175fpkt", shape=rectangle, color=red];
654[label="215.203.45.69s;231pkt 231fpkt", shape=ellipse, color=green];
949[label="215.203.45.69s;231pkt 231fpkt", shape=triangle, color=blue];
5501[label="215.203.45.69;318pkt 318fpkt", shape=pentagon, color=darkviolet];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.203.45.69:*, *:9898}[54.8589%]&lt;BR/&gt;{215.203.45.69:*, *:5554}[45.1411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (35.445%)&lt;BR/&gt; 5554: (14.555%)&lt;BR/&gt; 3729: (0.209424%)&lt;BR/&gt; 3725: (0.209424%)&lt;BR/&gt; 3718: (0.209424%)&gt;];
}
299--654[label="0.937143;164pkt 164fpkt"];
299--949[label="0.937143;164pkt 164fpkt"];
299--5501[label="0.994286;174pkt 174fpkt"];
654--949[label="1;231pkt 231fpkt"];
654--5501[label="0.995671;230pkt 230fpkt"];
949--5501[label="0.995671;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.203.45.69"/>
      <filter dst_port="5554" src_ip="215.203.45.69"/>
    </slice>
    <from sec="1089176906" usec="0"/>
    <to sec="1089176917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.70.69"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.681467,2.05414,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
300[label="214.161.130.69s;327pkt 327fpkt", shape=rectangle, color=red];
5506[label="214.161.130.69;332pkt 332fpkt", shape=pentagon, color=darkviolet];
7789[label="214.161.130.69;333pkt 333fpkt", shape=invtriangle, color=brown];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.130.69:*, *:9898}[56.1562%]&lt;BR/&gt;{214.161.130.69:*, *:5554}[43.8438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.2258%)&lt;BR/&gt; 5554: (21.7742%)&lt;BR/&gt; 3778: (0.15121%)&lt;BR/&gt; 3774: (0.15121%)&lt;BR/&gt; 3773: (0.15121%)&gt;];
}
300--5506[label="0.996942;326pkt 326fpkt"];
300--7789[label="1;327pkt 327fpkt"];
5506--7789[label="1;332pkt 332fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.130.69"/>
      <filter dst_port="5554" src_ip="214.161.130.69"/>
    </slice>
    <from sec="1089176988" usec="0"/>
    <to sec="1089176992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.177.46.70"/>
    </slice>
    <from sec="1089176441" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.130.70"/>
    </slice>
    <from sec="1089176607" usec="0"/>
    <to sec="1089176956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.225.200.70"/>
    </slice>
    <from sec="1089176803" usec="0"/>
    <to sec="1089177045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.13.6.71"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.33.73"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.4.59.73"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.219.85.73"/>
    </slice>
    <from sec="1089176439" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.222.205.73"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.64.74"/>
    </slice>
    <from sec="1089176499" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.55.87.75"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.76"/>
    </slice>
    <from sec="1089176518" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.202.140.76"/>
    </slice>
    <from sec="1089177045" usec="0"/>
    <to sec="1089177099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
1133[label="18.142.155.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
1134[label="169.51.4.171;d;3pkt 3fpkt", shape=diamond, color=yellow];
3079[label="197.30.34.77;s;6pkt 6fpkt", shape=diamond, color=yellow];
3580[label="18.142.155.54;s;1pkt 1fpkt", shape=hexagon, color=black];
3581[label="169.51.4.171;d;3pkt 3fpkt", shape=hexagon, color=black];
5335[label="18.142.155.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5602[label="197.30.34.77;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.77:1863, 136.213.130.80:*}[37.5%]&lt;BR/&gt;{*:1863, 169.51.4.171:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (37.5%)&lt;BR/&gt; 50786: (12.5%)&lt;BR/&gt; 28698: (12.5%)&lt;BR/&gt; 1146: (7.5%)&lt;BR/&gt; 4257: (5%)&gt;];
}
1133--1134[label="1;1pkt 1fpkt"];
1133--3580[label="1;1pkt 1fpkt"];
1133--3581[label="1;1pkt 1fpkt"];
1133--5335[label="1;1pkt 1fpkt"];
1134--3079[label="0.333333;1pkt 1fpkt"];
1134--3580[label="1;1pkt 1fpkt"];
1134--3581[label="1;3pkt 3fpkt"];
1134--5335[label="1;1pkt 1fpkt"];
3079--3581[label="0.333333;1pkt 1fpkt"];
3079--5602[label="1;5pkt 5fpkt"];
3580--3581[label="1;1pkt 1fpkt"];
3580--5335[label="1;1pkt 1fpkt"];
3581--5335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.4.171" src_port="1863"/>
      <filter dst_ip="136.213.130.80" src_ip="197.30.34.77" src_port="1863"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.155.52.78"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1737[label="141.169.165.148;d;206pkt 206fpkt", shape=diamond, color=yellow];
1743[label="194.248.132.78;s;100pkt 100fpkt", shape=diamond, color=yellow];
3936[label="141.169.165.148;d;188pkt 188fpkt", shape=hexagon, color=black];
5613[label="194.248.132.78;120pkt 120fpkt", shape=pentagon, color=darkviolet];
6359[label="16.243.210.154;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7854[label="194.248.132.78;120pkt 120fpkt", shape=invtriangle, color=brown];
8298[label="16.243.210.154;25pkt 25fpkt", shape=invtriangle, color=brown];
9377[label="16.243.210.154;25pkt 25fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.248.132.78:80, 141.169.165.148:*}[57.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3955: (0.308642%)&lt;BR/&gt; 3954: (0.308642%)&lt;BR/&gt; 3953: (0.308642%)&lt;BR/&gt; 3952: (0.308642%)&gt;];
}
1737--1743[label="1;100pkt 100fpkt"];
1737--1997[label="0.0107527;2pkt 2fpkt"];
1737--2263[label="0.00485437;1pkt 1fpkt"];
1737--3834[label="0.0075188;1pkt 1fpkt"];
1737--3936[label="1;188pkt 188fpkt"];
1737--5613[label="1;120pkt 120fpkt"];
1737--6359[label="0.923077;24pkt 24fpkt"];
1737--7225[label="0.00485437;1pkt 1fpkt"];
1737--7854[label="1;120pkt 120fpkt"];
1737--8298[label="0.96;24pkt 24fpkt"];
1737--9377[label="0.96;24pkt 24fpkt"];
1743--3936[label="1;100pkt 100fpkt"];
1743--5613[label="1;100pkt 100fpkt"];
1743--7854[label="1;100pkt 100fpkt"];
3936--5613[label="0.983333;118pkt 118fpkt"];
3936--6359[label="0.923077;24pkt 24fpkt"];
3936--7225[label="0.00531915;1pkt 1fpkt"];
3936--7854[label="0.983333;118pkt 118fpkt"];
3936--8298[label="0.96;24pkt 24fpkt"];
3936--9377[label="0.96;24pkt 24fpkt"];
5613--7854[label="1;120pkt 120fpkt"];
6359--8298[label="1;25pkt 25fpkt"];
6359--9377[label="1;25pkt 25fpkt"];
8298--9377[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.165.148" src_ip="194.248.132.78" src_port="80"/>
    </slice>
    <from sec="1089176448" usec="0"/>
    <to sec="1089177114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.255.140.78"/>
    </slice>
    <from sec="1089177115" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.156.144.78"/>
    </slice>
    <from sec="1089177018" usec="0"/>
    <to sec="1089177106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.652659,2.10583,001,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
312[label="214.161.9.79s;450pkt 450fpkt", shape=rectangle, color=red];
5621[label="214.161.9.79;450pkt 450fpkt", shape=pentagon, color=darkviolet];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.9.79:*, *:9898}[56.2222%]&lt;BR/&gt;{214.161.9.79:*, *:5554}[43.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.1111%)&lt;BR/&gt; 5554: (21.8889%)&lt;BR/&gt; 4999: (0.111111%)&lt;BR/&gt; 4998: (0.111111%)&lt;BR/&gt; 4997: (0.111111%)&gt;];
}
312--5621[label="1;450pkt 450fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.9.79"/>
      <filter dst_port="5554" src_ip="214.161.9.79"/>
    </slice>
    <from sec="1089176948" usec="0"/>
    <to sec="1089176951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.4.52.79"/>
    </slice>
    <from sec="1089176438" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.106.79"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.66.235.79"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.36.82"/>
    </slice>
    <from sec="1089176421" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.33.130.82"/>
    </slice>
    <from sec="1089176500" usec="0"/>
    <to sec="1089177268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
317[label="192.162.212.82s;161pkt 161fpkt", shape=rectangle, color=red];
5666[label="192.162.212.82;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7885[label="192.162.212.82;160pkt 160fpkt", shape=invtriangle, color=brown];
9148[label="192.162.212.82;161pkt 161fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.162.212.82:*, *:9898}[52.1739%]&lt;BR/&gt;{192.162.212.82:*, *:5554}[47.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (26.0498%)&lt;BR/&gt; 5554: (23.9502%)&lt;BR/&gt; 4185: (0.311042%)&lt;BR/&gt; 4171: (0.311042%)&lt;BR/&gt; 4167: (0.311042%)&gt;];
}
317--5666[label="1;161pkt 161fpkt"];
317--7885[label="1;160pkt 160fpkt"];
317--9148[label="1;161pkt 161fpkt"];
5666--7885[label="1;160pkt 160fpkt"];
5666--9148[label="1;161pkt 161fpkt"];
7885--9148[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="192.162.212.82"/>
      <filter dst_port="5554" src_ip="192.162.212.82"/>
    </slice>
    <from sec="1089177046" usec="0"/>
    <to sec="1089177050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.140.65.83"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.84"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.36.84"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.85"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.64.85"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.681467,2.05414,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
179[label="214.175.201.86s;39pkt 39fpkt", shape=rectangle, color=red];
5711[label="214.175.201.86;230pkt 230fpkt", shape=pentagon, color=darkviolet];
7915[label="214.175.201.86;230pkt 230fpkt", shape=invtriangle, color=brown];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.175.201.86:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
179--5711[label="1;39pkt 39fpkt"];
179--7915[label="1;39pkt 39fpkt"];
5711--7915[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.175.201.86" src_port="1029"/>
    </slice>
    <from sec="1089176888" usec="0"/>
    <to sec="1089176925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.155.146.87"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
315[label="73.148.34.81s;415pkt 415fpkt", shape=rectangle, color=red];
666[label="73.148.34.81s;415pkt 415fpkt", shape=ellipse, color=green];
959[label="73.148.34.81s;227pkt 227fpkt", shape=triangle, color=blue];
5640[label="73.148.34.81;227pkt 227fpkt", shape=pentagon, color=darkviolet];
5724[label="214.190.200.87;188pkt 188fpkt", shape=pentagon, color=darkviolet];
7868[label="73.148.34.81;226pkt 226fpkt", shape=invtriangle, color=brown];
7923[label="214.190.200.87;188pkt 188fpkt", shape=invtriangle, color=brown];
9140[label="73.148.34.81;226pkt 226fpkt", shape=invhouse, color=bisque];
9166[label="214.190.200.87;187pkt 187fpkt", shape=invhouse, color=bisque];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.148.34.81:*, *:9898}[54.6988%]&lt;BR/&gt;{214.190.200.87:*, *:9898}[45.3012%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1656: (0.130492%)&lt;BR/&gt; 1655: (0.130492%)&lt;BR/&gt; 1654: (0.130492%)&lt;BR/&gt; 1653: (0.130492%)&gt;];
}
315--666[label="1;415pkt 415fpkt"];
315--959[label="1;227pkt 227fpkt"];
315--5640[label="1;227pkt 227fpkt"];
315--5724[label="1;188pkt 188fpkt"];
315--7868[label="1;226pkt 226fpkt"];
315--7923[label="1;188pkt 188fpkt"];
315--9140[label="1;226pkt 226fpkt"];
315--9166[label="1;187pkt 187fpkt"];
666--959[label="1;227pkt 227fpkt"];
666--5640[label="1;227pkt 227fpkt"];
666--5724[label="1;188pkt 188fpkt"];
666--7868[label="1;226pkt 226fpkt"];
666--7923[label="1;188pkt 188fpkt"];
666--9140[label="1;226pkt 226fpkt"];
666--9166[label="1;187pkt 187fpkt"];
959--5640[label="1;227pkt 227fpkt"];
959--7868[label="1;226pkt 226fpkt"];
959--9140[label="1;226pkt 226fpkt"];
5640--7868[label="1;226pkt 226fpkt"];
5640--9140[label="1;226pkt 226fpkt"];
5724--7923[label="1;188pkt 188fpkt"];
5724--9166[label="1;187pkt 187fpkt"];
7868--9140[label="1;226pkt 226fpkt"];
7923--9166[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.148.34.81"/>
      <filter dst_port="9898" src_ip="214.190.200.87"/>
    </slice>
    <from sec="1089177223" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.146.89.88"/>
    </slice>
    <from sec="1089177081" usec="0"/>
    <to sec="1089177146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
4768[label="195.79.124.8;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.79.124.8:*, *:1025}[22.449%]&lt;BR/&gt;{195.79.124.8:*, *:2745}[22.449%]&lt;BR/&gt;{195.79.124.8:*, *:3127}[22.449%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (11.2245%)&lt;BR/&gt; 2745: (11.2245%)&lt;BR/&gt; 1025: (11.2245%)&lt;BR/&gt; 6129: (9.18367%)&lt;BR/&gt; 80: (7.14286%)&gt;];
}
</description>
    <slice>
      <filter dst_port="3127" src_ip="195.79.124.8"/>
      <filter dst_port="2745" src_ip="195.79.124.8"/>
      <filter dst_port="1025" src_ip="195.79.124.8"/>
    </slice>
    <from sec="1089176626" usec="0"/>
    <to sec="1089177253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.208.14.90"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
328[label="208.69.151.90s;252pkt 252fpkt", shape=rectangle, color=red];
452[label="215.169.130.198s;342pkt 342fpkt", shape=rectangle, color=red];
467[label="208.170.253.218s;253pkt 253fpkt", shape=rectangle, color=red];
679[label="208.69.151.90s;310pkt 310fpkt", shape=ellipse, color=green];
802[label="208.170.253.218s;314pkt 314fpkt", shape=ellipse, color=green];
972[label="208.69.151.90s;310pkt 310fpkt", shape=triangle, color=blue];
1081[label="208.170.253.218s;314pkt 314fpkt", shape=triangle, color=blue];
2344[label="215.169.130.198;s;357pkt 357fpkt", shape=diamond, color=yellow];
5755[label="208.69.151.90;251pkt 251fpkt", shape=pentagon, color=darkviolet];
6771[label="215.169.130.198;357pkt 357fpkt", shape=pentagon, color=darkviolet];
6969[label="208.170.253.218;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7941[label="208.69.151.90;250pkt 250fpkt", shape=invtriangle, color=brown];
8538[label="215.169.130.198;356pkt 356fpkt", shape=invtriangle, color=brown];
8659[label="208.170.253.218;252pkt 252fpkt", shape=invtriangle, color=brown];
9179[label="208.69.151.90;251pkt 251fpkt", shape=invhouse, color=bisque];
9492[label="215.169.130.198;357pkt 357fpkt", shape=invhouse, color=bisque];
9545[label="208.170.253.218;252pkt 252fpkt", shape=invhouse, color=bisque];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.170.253.218:*, *:9898}[29.3503%]&lt;BR/&gt;{208.69.151.90:*, *:9898}[29.2343%]&lt;BR/&gt;{215.169.130.198:*, *:9898}[21.3457%]&lt;BR/&gt;{215.169.130.198:*, *:5554}[20.0696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (41.4132%)&lt;BR/&gt; 5554: (8.58676%)&lt;BR/&gt; 1243: (0.149076%)&lt;BR/&gt; 1218: (0.149076%)&lt;BR/&gt; 1205: (0.149076%)&gt;];
}
328--679[label="1;252pkt 252fpkt"];
328--972[label="1;252pkt 252fpkt"];
328--5755[label="1;251pkt 251fpkt"];
328--7941[label="1;250pkt 250fpkt"];
328--9179[label="1;251pkt 251fpkt"];
452--679[label="0.187097;58pkt 58fpkt"];
452--802[label="0.194268;61pkt 61fpkt"];
452--972[label="0.187097;58pkt 58fpkt"];
452--1081[label="0.194268;61pkt 61fpkt"];
452--2344[label="1;342pkt 342fpkt"];
452--6771[label="1;342pkt 342fpkt"];
452--8538[label="0.997076;341pkt 341fpkt"];
452--9492[label="1;342pkt 342fpkt"];
467--802[label="1;253pkt 253fpkt"];
467--1081[label="1;253pkt 253fpkt"];
467--6969[label="1;253pkt 253fpkt"];
467--8659[label="1;252pkt 252fpkt"];
467--9545[label="1;252pkt 252fpkt"];
679--802[label="0.187097;58pkt 58fpkt"];
679--972[label="1;310pkt 310fpkt"];
679--1081[label="0.187097;58pkt 58fpkt"];
679--2344[label="0.187097;58pkt 58fpkt"];
679--5755[label="1;251pkt 251fpkt"];
679--6771[label="0.187097;58pkt 58fpkt"];
679--7941[label="1;250pkt 250fpkt"];
679--8538[label="0.187097;58pkt 58fpkt"];
679--9179[label="1;251pkt 251fpkt"];
679--9492[label="0.187097;58pkt 58fpkt"];
802--972[label="0.187097;58pkt 58fpkt"];
802--1081[label="1;314pkt 314fpkt"];
802--2344[label="0.194268;61pkt 61fpkt"];
802--6771[label="0.194268;61pkt 61fpkt"];
802--6969[label="1;253pkt 253fpkt"];
802--8538[label="0.194268;61pkt 61fpkt"];
802--8659[label="1;252pkt 252fpkt"];
802--9492[label="0.194268;61pkt 61fpkt"];
802--9545[label="1;252pkt 252fpkt"];
972--1081[label="0.187097;58pkt 58fpkt"];
972--2344[label="0.187097;58pkt 58fpkt"];
972--5755[label="1;251pkt 251fpkt"];
972--6771[label="0.187097;58pkt 58fpkt"];
972--7941[label="1;250pkt 250fpkt"];
972--8538[label="0.187097;58pkt 58fpkt"];
972--9179[label="1;251pkt 251fpkt"];
972--9492[label="0.187097;58pkt 58fpkt"];
1081--2344[label="0.194268;61pkt 61fpkt"];
1081--6771[label="0.194268;61pkt 61fpkt"];
1081--6969[label="1;253pkt 253fpkt"];
1081--8538[label="0.194268;61pkt 61fpkt"];
1081--8659[label="1;252pkt 252fpkt"];
1081--9492[label="0.194268;61pkt 61fpkt"];
1081--9545[label="1;252pkt 252fpkt"];
2344--6771[label="1;357pkt 357fpkt"];
2344--8538[label="1;356pkt 356fpkt"];
2344--9492[label="1;357pkt 357fpkt"];
5755--7941[label="1;250pkt 250fpkt"];
5755--9179[label="1;251pkt 251fpkt"];
6771--8538[label="1;356pkt 356fpkt"];
6771--9492[label="1;357pkt 357fpkt"];
6969--8659[label="1;252pkt 252fpkt"];
6969--9545[label="1;252pkt 252fpkt"];
7941--9179[label="1;250pkt 250fpkt"];
8538--9492[label="1;356pkt 356fpkt"];
8659--9545[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.169.130.198"/>
      <filter dst_port="5554" src_ip="215.169.130.198"/>
      <filter dst_port="9898" src_ip="208.170.253.218"/>
      <filter dst_port="9898" src_ip="208.69.151.90"/>
    </slice>
    <from sec="1089176749" usec="0"/>
    <to sec="1089176764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.98.176.90"/>
    </slice>
    <from sec="1089176945" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.95"/>
    </slice>
    <from sec="1089176442" usec="0"/>
    <to sec="1089176951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
5799[label="195.38.248.95;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.38.248.95:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (9.45946%)&lt;BR/&gt; 6129: (8.10811%)&lt;BR/&gt; 3127: (8.10811%)&lt;BR/&gt; 1025: (8.10811%)&lt;BR/&gt; 135: (8.10811%)&gt;];
}
</description>
    <slice>
      <filter src_ip="195.38.248.95"/>
    </slice>
    <from sec="1089176594" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.105.25.96"/>
    </slice>
    <from sec="1089176789" usec="0"/>
    <to sec="1089176865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.37.96"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.132.249.96"/>
    </slice>
    <from sec="1089176797" usec="0"/>
    <to sec="1089176857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.68.216.97"/>
    </slice>
    <from sec="1089176410" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.36.2.98"/>
    </slice>
    <from sec="1089176574" usec="0"/>
    <to sec="1089176953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
2090[label="149.99.140.115;d;82pkt 82fpkt", shape=diamond, color=yellow];
5823[label="73.145.8.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.99.140.115:25}[95.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.5904%)&lt;BR/&gt; 0: (4.81928%)&lt;BR/&gt; 18129: (1.20482%)&lt;BR/&gt; 4760: (1.20482%)&lt;BR/&gt; 65390: (0.60241%)&gt;];
}
2090--5823[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.140.115" dst_port="25"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.36.98"/>
    </slice>
    <from sec="1089176817" usec="0"/>
    <to sec="1089176823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.86.100"/>
    </slice>
    <from sec="1089176540" usec="0"/>
    <to sec="1089177276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.141.100"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.51.28.101"/>
    </slice>
    <from sec="1089176578" usec="0"/>
    <to sec="1089177028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.68.228.101"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
5875[label="220.113.215.102;422pkt 422fpkt", shape=pentagon, color=darkviolet];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.113.215.102:1360, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1360: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.113.215.102" src_port="1360"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.219.85.104"/>
    </slice>
    <from sec="1089176486" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
1347[label="194.54.10.56;d;357pkt 357fpkt", shape=diamond, color=yellow];
1349[label="212.236.26.141;s;321pkt 321fpkt", shape=diamond, color=yellow];
3612[label="194.54.10.56;d;357pkt 357fpkt", shape=hexagon, color=black];
5748[label="222.135.15.90;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5889[label="19.48.232.104;45pkt 45fpkt", shape=pentagon, color=darkviolet];
6207[label="212.236.26.141;326pkt 326fpkt", shape=pentagon, color=darkviolet];
7935[label="222.135.15.90;21pkt 21fpkt", shape=invtriangle, color=brown];
8025[label="19.48.232.104;45pkt 45fpkt", shape=invtriangle, color=brown];
9224[label="19.48.232.104;45pkt 45fpkt", shape=invhouse, color=bisque];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.236.26.141:80, 194.54.10.56:*}[71.0723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2720: (0.162549%)&lt;BR/&gt; 2714: (0.162549%)&lt;BR/&gt; 2709: (0.162549%)&lt;BR/&gt; 2704: (0.162549%)&gt;];
}
1347--1349[label="0.88785;285pkt 285fpkt"];
1347--1665[label="0.00364964;1pkt 1fpkt"];
1347--2927[label="0.125;2pkt 2fpkt"];
1347--3612[label="1;357pkt 357fpkt"];
1347--4132[label="0.00421941;1pkt 1fpkt"];
1347--4618[label="0.103641;37pkt 37fpkt"];
1347--5748[label="0.904762;19pkt 19fpkt"];
1347--5889[label="1;45pkt 45fpkt"];
1347--6207[label="0.871166;284pkt 284fpkt"];
1347--7935[label="0.904762;19pkt 19fpkt"];
1347--8025[label="1;45pkt 45fpkt"];
1347--9224[label="1;45pkt 45fpkt"];
1349--3515[label="0.11215;36pkt 36fpkt"];
1349--3612[label="0.88785;285pkt 285fpkt"];
1349--4501[label="0.11215;36pkt 36fpkt"];
1349--4618[label="0.0934579;30pkt 30fpkt"];
1349--6207[label="0.996885;320pkt 320fpkt"];
3612--4132[label="0.00421941;1pkt 1fpkt"];
3612--4618[label="0.103641;37pkt 37fpkt"];
3612--5748[label="0.904762;19pkt 19fpkt"];
3612--5889[label="1;45pkt 45fpkt"];
3612--6207[label="0.871166;284pkt 284fpkt"];
3612--7935[label="0.904762;19pkt 19fpkt"];
3612--8025[label="1;45pkt 45fpkt"];
3612--9224[label="1;45pkt 45fpkt"];
5748--7935[label="1;21pkt 21fpkt"];
5889--8025[label="1;45pkt 45fpkt"];
5889--9224[label="1;45pkt 45fpkt"];
8025--9224[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.10.56" src_ip="212.236.26.141" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.86.108"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.144.95.108"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
353[label="215.203.209.110s;255pkt 255fpkt", shape=rectangle, color=red];
5941[label="215.203.209.110;255pkt 255fpkt", shape=pentagon, color=darkviolet];
8055[label="215.203.209.110;255pkt 255fpkt", shape=invtriangle, color=brown];
9238[label="215.203.209.110;255pkt 255fpkt", shape=invhouse, color=bisque];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.203.209.110:*, *:5554}[56.0784%]&lt;BR/&gt;{215.203.209.110:*, *:9898}[43.9216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (28.0392%)&lt;BR/&gt; 9898: (21.9608%)&lt;BR/&gt; 34755: (0.196078%)&lt;BR/&gt; 34738: (0.196078%)&lt;BR/&gt; 34736: (0.196078%)&gt;];
}
353--5941[label="1;255pkt 255fpkt"];
353--8055[label="1;255pkt 255fpkt"];
353--9238[label="1;255pkt 255fpkt"];
5941--8055[label="1;255pkt 255fpkt"];
5941--9238[label="1;255pkt 255fpkt"];
8055--9238[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.203.209.110"/>
      <filter dst_port="9898" src_ip="215.203.209.110"/>
    </slice>
    <from sec="1089176976" usec="0"/>
    <to sec="1089176978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
2954[label="173.19.86.111;s;43pkt 43fpkt", shape=diamond, color=yellow];
5943[label="173.19.86.111;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8057[label="173.19.86.111;57pkt 57fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.86.111:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65205: (0.955414%)&lt;BR/&gt; 60481: (0.955414%)&lt;BR/&gt; 55893: (0.955414%)&lt;BR/&gt; 55613: (0.955414%)&gt;];
}
2954--5943[label="1;43pkt 43fpkt"];
2954--8057[label="1;43pkt 43fpkt"];
5943--8057[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="173.19.86.111" src_port="25"/>
    </slice>
    <from sec="1089176441" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.37.112"/>
    </slice>
    <from sec="1089176429" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
57[label="73.32.89.98s;1pkt 1fpkt", shape=rectangle, color=red];
1803[label="149.99.162.130;d;6pkt 6fpkt", shape=diamond, color=yellow];
1804[label="73.32.89.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
2340[label="194.133.227.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
4232[label="73.32.89.98;s;1pkt 1fpkt", shape=hexagon, color=black];
5829[label="73.32.89.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5956[label="194.133.227.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7986[label="73.32.89.98;1pkt 1fpkt", shape=invtriangle, color=brown];
9244[label="194.133.227.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.52.103.43:80, 149.99.162.130:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1755: (21.4286%)&lt;BR/&gt; 1052: (21.4286%)&lt;BR/&gt; 1064: (14.2857%)&lt;BR/&gt; 1863: (3.57143%)&gt;];
}
57--1803[label="1;1pkt 1fpkt"];
57--1804[label="1;1pkt 1fpkt"];
57--4232[label="1;1pkt 1fpkt"];
57--5829[label="1;1pkt 1fpkt"];
57--7986[label="1;1pkt 1fpkt"];
1803--1804[label="1;1pkt 1fpkt"];
1803--2340[label="1;1pkt 1fpkt"];
1803--4232[label="1;1pkt 1fpkt"];
1803--5829[label="1;1pkt 1fpkt"];
1803--5956[label="1;1pkt 1fpkt"];
1803--7986[label="1;1pkt 1fpkt"];
1803--9244[label="1;1pkt 1fpkt"];
1804--4232[label="1;1pkt 1fpkt"];
1804--5829[label="1;1pkt 1fpkt"];
1804--7986[label="1;1pkt 1fpkt"];
2340--5956[label="1;1pkt 1fpkt"];
2340--9244[label="1;1pkt 1fpkt"];
4232--5829[label="1;1pkt 1fpkt"];
4232--7986[label="1;1pkt 1fpkt"];
5829--7986[label="1;1pkt 1fpkt"];
5956--9244[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.162.130" src_ip="73.52.103.43" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.170.2.114"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.6.6.114"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.54.49.114"/>
    </slice>
    <from sec="1089176417" usec="0"/>
    <to sec="1089177283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
6193[label="136.213.38.139;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.38.139:*, 19.165.20.108:80}[64.5161%]&lt;BR/&gt;{136.213.38.139:*, 218.222.82.63:80}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3084: (1.6129%)&lt;BR/&gt; 3081: (1.6129%)&lt;BR/&gt; 3079: (1.6129%)&lt;BR/&gt; 3077: (1.6129%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="19.165.20.108" dst_port="80" src_ip="136.213.38.139"/>
      <filter dst_ip="218.222.82.63" dst_port="80" src_ip="136.213.38.139"/>
    </slice>
    <from sec="1089176950" usec="0"/>
    <to sec="1089177032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
3403[label="197.30.34.116;s;4pkt 4fpkt", shape=diamond, color=yellow];
5992[label="197.30.34.116;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8087[label="197.30.34.116;3pkt 3fpkt", shape=invtriangle, color=brown];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.116:1863, 149.99.25.16:3241}[25%]&lt;BR/&gt;{197.30.34.116:1863, 136.213.39.64:1136}[25%]&lt;BR/&gt;{197.30.34.116:1863, 141.169.41.65:3616}[25%]&lt;BR/&gt;{197.30.34.116:1863, 173.19.70.229:1529}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3616: (13.6364%)&lt;BR/&gt; 1529: (13.6364%)&lt;BR/&gt; 1136: (13.6364%)&lt;BR/&gt; 3241: (9.09091%)&gt;];
}
3403--5992[label="1;4pkt 4fpkt"];
3403--8087[label="1;3pkt 3fpkt"];
5992--8087[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.70.229" dst_port="1529" src_ip="197.30.34.116" src_port="1863"/>
      <filter dst_ip="141.169.41.65" dst_port="3616" src_ip="197.30.34.116" src_port="1863"/>
      <filter dst_ip="136.213.39.64" dst_port="1136" src_ip="197.30.34.116" src_port="1863"/>
      <filter dst_ip="149.99.25.16" dst_port="3241" src_ip="197.30.34.116" src_port="1863"/>
    </slice>
    <from sec="1089176442" usec="0"/>
    <to sec="1089177263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
3410[label="16.219.85.117;s;84pkt 84fpkt", shape=diamond, color=yellow];
5999[label="16.219.85.117;86pkt 86fpkt", shape=pentagon, color=darkviolet];
8091[label="16.219.85.117;86pkt 86fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.219.85.117:2703, 136.213.11.36:*}[53.4884%]&lt;BR/&gt;{16.219.85.117:2703, 136.213.11.38:*}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 60717: (0.585938%)&lt;BR/&gt; 60715: (0.585938%)&lt;BR/&gt; 60708: (0.585938%)&lt;BR/&gt; 60706: (0.585938%)&gt;];
}
3410--5999[label="1;84pkt 84fpkt"];
3410--8091[label="1;84pkt 84fpkt"];
5999--8091[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.11.36" src_ip="16.219.85.117" src_port="2703"/>
      <filter dst_ip="136.213.11.38" src_ip="16.219.85.117" src_port="2703"/>
    </slice>
    <from sec="1089176488" usec="0"/>
    <to sec="1089177263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.131.117"/>
    </slice>
    <from sec="1089176543" usec="0"/>
    <to sec="1089177232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.118"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.102.120"/>
    </slice>
    <from sec="1089176427" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.179.204.120"/>
    </slice>
    <from sec="1089176766" usec="0"/>
    <to sec="1089177035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.153.170.121"/>
    </slice>
    <from sec="1089177196" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.55.29.123"/>
    </slice>
    <from sec="1089176410" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.74.123"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.226.28.125"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.33.132.125"/>
    </slice>
    <from sec="1089177223" usec="0"/>
    <to sec="1089177270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.34.126"/>
    </slice>
    <from sec="1089176533" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.81.94.127"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82932,2.0161,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
187[label="1.52.186.127s;1604pkt 1604fpkt", shape=rectangle, color=red];
3485[label="1.52.186.127;s;886pkt 886fpkt", shape=diamond, color=yellow];
6071[label="1.52.186.127;1678pkt 1678fpkt", shape=pentagon, color=darkviolet];
8132[label="1.52.186.127;1677pkt 1677fpkt", shape=invtriangle, color=brown];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.52.186.127:*, *:135}[99.8212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.923%)&lt;BR/&gt; 4444: (0.111206%)&lt;BR/&gt; 4507: (0.0342173%)&lt;BR/&gt; 4506: (0.0342173%)&lt;BR/&gt; 4505: (0.0342173%)&gt;];
}
187--1297[label="0.00213675;1pkt 1fpkt"];
187--3485[label="0.939052;832pkt 832fpkt"];
187--6071[label="1;1604pkt 1604fpkt"];
187--8132[label="0.999377;1603pkt 1603fpkt"];
3485--6071[label="1;886pkt 886fpkt"];
3485--8132[label="0.998871;885pkt 885fpkt"];
6071--8132[label="1;1677pkt 1677fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="1.52.186.127"/>
    </slice>
    <from sec="1089177138" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.172.204.127"/>
    </slice>
    <from sec="1089176449" usec="0"/>
    <to sec="1089176497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.155.224.127"/>
    </slice>
    <from sec="1089176433" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.101.128"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.193.128"/>
    </slice>
    <from sec="1089176565" usec="0"/>
    <to sec="1089177254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
2847[label="212.32.38.192;d;16pkt 16fpkt", shape=diamond, color=yellow];
6084[label="173.19.72.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.32.38.192:5050}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.1176%)&lt;BR/&gt; 1059: (5.88235%)&lt;BR/&gt; 63700: (2.94118%)&lt;BR/&gt; 4515: (2.94118%)&lt;BR/&gt; 3161: (2.94118%)&gt;];
}
2847--6084[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.32.38.192" dst_port="5050"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
1632[label="21.88.123.155;d;123pkt 123fpkt", shape=diamond, color=yellow];
1934[label="194.54.10.3;s;186pkt 186fpkt", shape=diamond, color=yellow];
3551[label="194.60.153.66;s;118pkt 118fpkt", shape=hexagon, color=black];
4679[label="194.54.10.3;186pkt 186fpkt", shape=pentagon, color=darkviolet];
5468[label="194.60.153.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.54.10.3:*, *:80}[58.125%]&lt;BR/&gt;{194.60.153.66:*, 21.88.123.155:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2713: (0.325203%)&lt;BR/&gt; 2710: (0.325203%)&lt;BR/&gt; 2683: (0.325203%)&lt;BR/&gt; 2726: (0.243902%)&gt;];
}
1632--1934[label="0.422764;52pkt 52fpkt"];
1632--2261[label="0.0352941;3pkt 3fpkt"];
1632--3551[label="0.474576;56pkt 56fpkt"];
1632--4619[label="0.0894309;11pkt 11fpkt"];
1632--4631[label="0.0894309;11pkt 11fpkt"];
1632--4679[label="0.422764;52pkt 52fpkt"];
1632--5068[label="0.0357143;3pkt 3fpkt"];
1632--5303[label="0.047619;2pkt 2fpkt"];
1632--5843[label="0.0162602;2pkt 2fpkt"];
1632--7517[label="0.0352941;3pkt 3fpkt"];
1632--7997[label="0.0162602;2pkt 2fpkt"];
1632--8964[label="0.0357143;3pkt 3fpkt"];
1632--9209[label="0.0162602;2pkt 2fpkt"];
1934--2668[label="0.00909091;1pkt 1fpkt"];
1934--2908[label="0.00877193;1pkt 1fpkt"];
1934--4619[label="0.0430108;8pkt 8fpkt"];
1934--4623[label="0.0806452;15pkt 15fpkt"];
1934--4628[label="0.0215054;4pkt 4fpkt"];
1934--4631[label="0.0430108;8pkt 8fpkt"];
1934--4635[label="0.0215054;4pkt 4fpkt"];
1934--4679[label="1;186pkt 186fpkt"];
3551--4619[label="0.279661;33pkt 33fpkt"];
3551--4631[label="0.279661;33pkt 33fpkt"];
3551--5468[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="194.54.10.3"/>
      <filter dst_ip="21.88.123.155" dst_port="80" src_ip="194.60.153.66"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
3149[label="73.9.52.132;s;548pkt 548fpkt", shape=diamond, color=yellow];
6116[label="73.9.52.132;667pkt 667fpkt", shape=pentagon, color=darkviolet];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.9.52.132:*, *:1026}[50.075%]&lt;BR/&gt;{73.9.52.132:*, *:1027}[49.925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.0617%)&lt;BR/&gt; 1027: (24.9383%)&lt;BR/&gt; 1741: (0.246914%)&lt;BR/&gt; 3550: (0.205761%)&lt;BR/&gt; 1028: (0.205761%)&gt;];
}
3149--6116[label="1;548pkt 548fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="73.9.52.132"/>
      <filter dst_port="1027" src_ip="73.9.52.132"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.58.133"/>
    </slice>
    <from sec="1089176448" usec="0"/>
    <to sec="1089177089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.46.98.133"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.80.134"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.35.224.134"/>
    </slice>
    <from sec="1089177131" usec="0"/>
    <to sec="1089177214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.145.24.136"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.215.31.136"/>
    </slice>
    <from sec="1089176752" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.184.133.137"/>
    </slice>
    <from sec="1089176580" usec="0"/>
    <to sec="1089176769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
390[label="210.237.201.145s;741pkt 741fpkt", shape=rectangle, color=red];
737[label="210.237.201.145s;741pkt 741fpkt", shape=ellipse, color=green];
1023[label="210.237.201.145s;741pkt 741fpkt", shape=triangle, color=blue];
6191[label="215.220.32.139;239pkt 239fpkt", shape=pentagon, color=darkviolet];
6256[label="210.237.201.145;501pkt 501fpkt", shape=pentagon, color=darkviolet];
8211[label="215.220.32.139;240pkt 240fpkt", shape=invtriangle, color=brown];
8247[label="210.237.201.145;500pkt 500fpkt", shape=invtriangle, color=brown];
9320[label="215.220.32.139;239pkt 239fpkt", shape=invhouse, color=bisque];
9343[label="210.237.201.145;500pkt 500fpkt", shape=invhouse, color=bisque];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.237.201.145:*, *:5554}[34.278%]&lt;BR/&gt;{210.237.201.145:*, *:9898}[33.3333%]&lt;BR/&gt;{215.220.32.139:*, *:*}[32.3887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.6866%)&lt;BR/&gt; 9898: (24.3134%)&lt;BR/&gt; 2143: (0.135074%)&lt;BR/&gt; 2130: (0.135074%)&lt;BR/&gt; 2129: (0.135074%)&gt;];
}
390--737[label="1;741pkt 741fpkt"];
390--1023[label="1;741pkt 741fpkt"];
390--6191[label="1;239pkt 239fpkt"];
390--6256[label="1;501pkt 501fpkt"];
390--8211[label="1;240pkt 240fpkt"];
390--8247[label="1;500pkt 500fpkt"];
390--9320[label="1;239pkt 239fpkt"];
390--9343[label="1;500pkt 500fpkt"];
737--1023[label="1;741pkt 741fpkt"];
737--6191[label="1;239pkt 239fpkt"];
737--6256[label="1;501pkt 501fpkt"];
737--8211[label="1;240pkt 240fpkt"];
737--8247[label="1;500pkt 500fpkt"];
737--9320[label="1;239pkt 239fpkt"];
737--9343[label="1;500pkt 500fpkt"];
1023--6191[label="1;239pkt 239fpkt"];
1023--6256[label="1;501pkt 501fpkt"];
1023--8211[label="1;240pkt 240fpkt"];
1023--8247[label="1;500pkt 500fpkt"];
1023--9320[label="1;239pkt 239fpkt"];
1023--9343[label="1;500pkt 500fpkt"];
6191--8211[label="1;239pkt 239fpkt"];
6191--9320[label="1;239pkt 239fpkt"];
6256--8247[label="1;500pkt 500fpkt"];
6256--9343[label="1;500pkt 500fpkt"];
8211--9320[label="1;239pkt 239fpkt"];
8247--9343[label="1;500pkt 500fpkt"];
</description>
    <slice>
      <filter src_ip="215.220.32.139"/>
      <filter dst_port="5554" src_ip="210.237.201.145"/>
      <filter dst_port="9898" src_ip="210.237.201.145"/>
    </slice>
    <from sec="1089177227" usec="0"/>
    <to sec="1089177234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
380[label="215.188.118.139s;254pkt 254fpkt", shape=rectangle, color=red];
6197[label="215.188.118.139;253pkt 253fpkt", shape=pentagon, color=darkviolet];
8215[label="215.188.118.139;254pkt 254fpkt", shape=invtriangle, color=brown];
9322[label="215.188.118.139;254pkt 254fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.118.139:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3749: (0.197044%)&lt;BR/&gt; 3748: (0.197044%)&lt;BR/&gt; 3747: (0.197044%)&lt;BR/&gt; 3746: (0.197044%)&gt;];
}
380--6197[label="1;253pkt 253fpkt"];
380--8215[label="1;254pkt 254fpkt"];
380--9322[label="1;254pkt 254fpkt"];
6197--8215[label="1;253pkt 253fpkt"];
6197--9322[label="1;253pkt 253fpkt"];
8215--9322[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.118.139"/>
    </slice>
    <from sec="1089176456" usec="0"/>
    <to sec="1089176461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.108.110.143"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.105.145"/>
    </slice>
    <from sec="1089176555" usec="0"/>
    <to sec="1089177261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.30.160.145"/>
    </slice>
    <from sec="1089176473" usec="0"/>
    <to sec="1089177284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.34.146"/>
    </slice>
    <from sec="1089176415" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.33.134.146"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.37.147"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.39.148"/>
    </slice>
    <from sec="1089176433" usec="0"/>
    <to sec="1089177277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.58.148"/>
    </slice>
    <from sec="1089176503" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.106.182.148"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.205.244.148"/>
    </slice>
    <from sec="1089177244" usec="0"/>
    <to sec="1089177268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.106.182.149"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.59.127.150"/>
    </slice>
    <from sec="1089176687" usec="0"/>
    <to sec="1089176939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
144[label="141.169.136.58s;1pkt 1fpkt", shape=rectangle, color=red];
1205[label="141.169.136.58;s;317pkt 317fpkt", shape=diamond, color=yellow];
1718[label="220.56.106.75;d;13pkt 13fpkt", shape=diamond, color=yellow];
1758[label="220.182.252.100;d;156pkt 156fpkt", shape=diamond, color=yellow];
2029[label="141.169.130.150;s;239pkt 239fpkt", shape=diamond, color=yellow];
2041[label="221.61.88.96;d;52pkt 52fpkt", shape=diamond, color=yellow];
2310[label="141.169.147.232;s;80pkt 80fpkt", shape=diamond, color=yellow];
2670[label="208.96.152.115;d;32pkt 32fpkt", shape=diamond, color=yellow];
2742[label="221.61.88.101;d;11pkt 11fpkt", shape=diamond, color=yellow];
2971[label="221.61.88.102;d;102pkt 102fpkt", shape=diamond, color=yellow];
3415[label="220.150.116.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
3631[label="220.56.106.75;d;13pkt 13fpkt", shape=hexagon, color=black];
3765[label="141.169.136.58;s;317pkt 317fpkt", shape=hexagon, color=black];
3943[label="221.61.88.96;d;46pkt 46fpkt", shape=hexagon, color=black];
4170[label="221.61.88.102;d;102pkt 102fpkt", shape=hexagon, color=black];
5370[label="141.169.136.58;317pkt 317fpkt", shape=pentagon, color=darkviolet];
6302[label="141.169.130.150;239pkt 239fpkt", shape=pentagon, color=darkviolet];
7071[label="141.169.147.232;222pkt 222fpkt", shape=pentagon, color=darkviolet];
7713[label="141.169.136.58;316pkt 316fpkt", shape=invtriangle, color=brown];
8270[label="141.169.130.150;238pkt 238fpkt", shape=invtriangle, color=brown];
8726[label="141.169.147.232;221pkt 221fpkt", shape=invtriangle, color=brown];
9066[label="141.169.136.58;316pkt 316fpkt", shape=invhouse, color=bisque];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.130.150:*, *:80}[28.8243%]&lt;BR/&gt;{141.169.147.232:*, *:80}[27.4336%]&lt;BR/&gt;{141.169.136.58:*, 220.182.252.100:80}[20.4804%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6432%)&lt;BR/&gt; 8080: (0.820406%)&lt;BR/&gt; 5050: (0.417661%)&lt;BR/&gt; 7878: (0.343079%)&lt;BR/&gt; 1755: (0.25358%)&gt;];
}
144--1205[label="1;1pkt 1fpkt"];
144--3765[label="1;1pkt 1fpkt"];
144--5370[label="1;1pkt 1fpkt"];
144--7713[label="1;1pkt 1fpkt"];
144--9066[label="1;1pkt 1fpkt"];
1205--1718[label="1;13pkt 13fpkt"];
1205--1758[label="1;156pkt 156fpkt"];
1205--2670[label="0.3125;10pkt 10fpkt"];
1205--3415[label="1;2pkt 2fpkt"];
1205--3631[label="1;13pkt 13fpkt"];
1205--3765[label="1;317pkt 317fpkt"];
1205--4619[label="0.0504732;16pkt 16fpkt"];
1205--4623[label="0.0662461;21pkt 21fpkt"];
1205--4628[label="0.00315457;1pkt 1fpkt"];
1205--4631[label="0.0504732;16pkt 16fpkt"];
1205--4635[label="0.00315457;1pkt 1fpkt"];
1205--5370[label="1;317pkt 317fpkt"];
1205--7713[label="1;316pkt 316fpkt"];
1205--9066[label="1;316pkt 316fpkt"];
1718--3631[label="1;13pkt 13fpkt"];
1718--3765[label="1;13pkt 13fpkt"];
1718--4619[label="0.230769;3pkt 3fpkt"];
1718--4631[label="0.230769;3pkt 3fpkt"];
1718--5370[label="1;13pkt 13fpkt"];
1718--7713[label="1;13pkt 13fpkt"];
1718--9066[label="1;13pkt 13fpkt"];
1758--3765[label="1;156pkt 156fpkt"];
1758--4623[label="0.0320513;5pkt 5fpkt"];
1758--5370[label="1;156pkt 156fpkt"];
1758--7713[label="1;156pkt 156fpkt"];
1758--9066[label="1;156pkt 156fpkt"];
2029--2041[label="0.615385;32pkt 32fpkt"];
2029--2232[label="0.0194175;2pkt 2fpkt"];
2029--2670[label="0.25;8pkt 8fpkt"];
2029--2742[label="0.545455;6pkt 6fpkt"];
2029--2873[label="0.01;1pkt 1fpkt"];
2029--2971[label="0.823529;84pkt 84fpkt"];
2029--3131[label="0.0111111;1pkt 1fpkt"];
2029--3943[label="0.630435;29pkt 29fpkt"];
2029--4170[label="0.823529;84pkt 84fpkt"];
2029--4295[label="0.0520833;5pkt 5fpkt"];
2029--4403[label="0.0083682;2pkt 2fpkt"];
2029--4595[label="0.0083682;2pkt 2fpkt"];
2029--4623[label="0.175732;42pkt 42fpkt"];
2029--4628[label="0.0920502;22pkt 22fpkt"];
2029--4635[label="0.0920502;22pkt 22fpkt"];
2029--6302[label="1;239pkt 239fpkt"];
2029--8270[label="1;238pkt 238fpkt"];
2041--3943[label="1;46pkt 46fpkt"];
2041--4623[label="0.269231;14pkt 14fpkt"];
2041--4628[label="0.0384615;2pkt 2fpkt"];
2041--4635[label="0.0384615;2pkt 2fpkt"];
2041--6302[label="0.615385;32pkt 32fpkt"];
2041--7071[label="0.326923;17pkt 17fpkt"];
2041--8270[label="0.615385;32pkt 32fpkt"];
2041--8726[label="0.326923;17pkt 17fpkt"];
2310--4628[label="0.1;8pkt 8fpkt"];
2310--4635[label="0.1;8pkt 8fpkt"];
2310--7071[label="1;80pkt 80fpkt"];
2310--8726[label="0.9875;79pkt 79fpkt"];
2670--3765[label="0.3125;10pkt 10fpkt"];
2670--4619[label="0.15625;5pkt 5fpkt"];
2670--4623[label="0.25;8pkt 8fpkt"];
2670--4628[label="0.0625;2pkt 2fpkt"];
2670--4631[label="0.15625;5pkt 5fpkt"];
2670--4635[label="0.0625;2pkt 2fpkt"];
2670--5370[label="0.3125;10pkt 10fpkt"];
2670--6302[label="0.25;8pkt 8fpkt"];
2670--6970[label="0.238095;5pkt 5fpkt"];
2670--7071[label="0.15625;5pkt 5fpkt"];
2670--7713[label="0.3125;10pkt 10fpkt"];
2670--8270[label="0.25;8pkt 8fpkt"];
2670--8660[label="0.238095;5pkt 5fpkt"];
2670--8726[label="0.15625;5pkt 5fpkt"];
2670--9066[label="0.3125;10pkt 10fpkt"];
2742--4623[label="0.363636;4pkt 4fpkt"];
2742--4628[label="0.181818;2pkt 2fpkt"];
2742--4635[label="0.181818;2pkt 2fpkt"];
2742--6302[label="0.545455;6pkt 6fpkt"];
2742--7071[label="0.363636;4pkt 4fpkt"];
2742--8270[label="0.545455;6pkt 6fpkt"];
2742--8726[label="0.363636;4pkt 4fpkt"];
2971--4170[label="1;102pkt 102fpkt"];
2971--4623[label="0.27451;28pkt 28fpkt"];
2971--4628[label="0.0392157;4pkt 4fpkt"];
2971--4635[label="0.0392157;4pkt 4fpkt"];
2971--6302[label="0.823529;84pkt 84fpkt"];
2971--7071[label="0.176471;18pkt 18fpkt"];
2971--8270[label="0.823529;84pkt 84fpkt"];
2971--8726[label="0.176471;18pkt 18fpkt"];
3415--3765[label="1;2pkt 2fpkt"];
3415--5370[label="1;2pkt 2fpkt"];
3415--7713[label="1;2pkt 2fpkt"];
3415--9066[label="1;2pkt 2fpkt"];
3631--3765[label="1;13pkt 13fpkt"];
3631--4619[label="0.230769;3pkt 3fpkt"];
3631--4631[label="0.230769;3pkt 3fpkt"];
3631--5370[label="1;13pkt 13fpkt"];
3631--7713[label="1;13pkt 13fpkt"];
3631--9066[label="1;13pkt 13fpkt"];
3765--4619[label="0.0504732;16pkt 16fpkt"];
3765--4623[label="0.0662461;21pkt 21fpkt"];
3765--4628[label="0.00315457;1pkt 1fpkt"];
3765--4631[label="0.0504732;16pkt 16fpkt"];
3765--4635[label="0.00315457;1pkt 1fpkt"];
3765--5370[label="1;317pkt 317fpkt"];
3765--7713[label="1;316pkt 316fpkt"];
3765--9066[label="1;316pkt 316fpkt"];
3943--4623[label="0.304348;14pkt 14fpkt"];
3943--6302[label="0.630435;29pkt 29fpkt"];
3943--7071[label="0.369565;17pkt 17fpkt"];
3943--8270[label="0.630435;29pkt 29fpkt"];
3943--8726[label="0.369565;17pkt 17fpkt"];
4170--4623[label="0.27451;28pkt 28fpkt"];
4170--4628[label="0.0392157;4pkt 4fpkt"];
4170--4635[label="0.0392157;4pkt 4fpkt"];
4170--6302[label="0.823529;84pkt 84fpkt"];
4170--7071[label="0.176471;18pkt 18fpkt"];
4170--8270[label="0.823529;84pkt 84fpkt"];
4170--8726[label="0.176471;18pkt 18fpkt"];
5370--7713[label="1;316pkt 316fpkt"];
5370--9066[label="1;316pkt 316fpkt"];
6302--8270[label="1;238pkt 238fpkt"];
7071--8726[label="1;221pkt 221fpkt"];
7713--9066[label="1;316pkt 316fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.169.130.150"/>
      <filter dst_port="80" src_ip="141.169.147.232"/>
      <filter dst_ip="220.182.252.100" dst_port="80" src_ip="141.169.136.58"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.111.179.150"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.681467,2.05414,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
394[label="19.29.193.150s;145pkt 145fpkt", shape=rectangle, color=red];
6308[label="19.29.193.150;145pkt 145fpkt", shape=pentagon, color=darkviolet];
8274[label="19.29.193.150;145pkt 145fpkt", shape=invtriangle, color=brown];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.29.193.150:*, *:9898}[60.6897%]&lt;BR/&gt;{19.29.193.150:*, *:5554}[39.3103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (30.3448%)&lt;BR/&gt; 5554: (19.6552%)&lt;BR/&gt; 4393: (0.344828%)&lt;BR/&gt; 4392: (0.344828%)&lt;BR/&gt; 4391: (0.344828%)&gt;];
}
394--6308[label="1;145pkt 145fpkt"];
394--8274[label="1;145pkt 145fpkt"];
6308--8274[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="19.29.193.150"/>
      <filter dst_port="5554" src_ip="19.29.193.150"/>
    </slice>
    <from sec="1089177133" usec="0"/>
    <to sec="1089177135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.42.108.151"/>
    </slice>
    <from sec="1089176731" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
397[label="17.29.44.152s;497pkt 497fpkt", shape=rectangle, color=red];
6326[label="17.29.44.152;497pkt 497fpkt", shape=pentagon, color=darkviolet];
8284[label="17.29.44.152;496pkt 496fpkt", shape=invtriangle, color=brown];
9365[label="17.29.44.152;496pkt 496fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.29.44.152:*, *:9898}[50.1006%]&lt;BR/&gt;{17.29.44.152:*, *:5554}[49.8994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.0755%)&lt;BR/&gt; 5554: (24.9245%)&lt;BR/&gt; 4771: (0.100705%)&lt;BR/&gt; 4770: (0.100705%)&lt;BR/&gt; 4769: (0.100705%)&gt;];
}
397--6326[label="1;497pkt 497fpkt"];
397--8284[label="1;496pkt 496fpkt"];
397--9365[label="1;496pkt 496fpkt"];
6326--8284[label="1;496pkt 496fpkt"];
6326--9365[label="1;496pkt 496fpkt"];
8284--9365[label="1;496pkt 496fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="17.29.44.152"/>
      <filter dst_port="5554" src_ip="17.29.44.152"/>
    </slice>
    <from sec="1089176904" usec="0"/>
    <to sec="1089176907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.58.152"/>
    </slice>
    <from sec="1089176564" usec="0"/>
    <to sec="1089177177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.21.163.152"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.111.179.152"/>
    </slice>
    <from sec="1089176433" usec="0"/>
    <to sec="1089177273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.100.118.153"/>
    </slice>
    <from sec="1089177025" usec="0"/>
    <to sec="1089177168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.51.146.153"/>
    </slice>
    <from sec="1089176839" usec="0"/>
    <to sec="1089176886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.143.154.153"/>
    </slice>
    <from sec="1089176788" usec="0"/>
    <to sec="1089176828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.14.155"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.58.155"/>
    </slice>
    <from sec="1089176456" usec="0"/>
    <to sec="1089177248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.70.155"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.104.155"/>
    </slice>
    <from sec="1089176414" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.170.148.155"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.138.161.156"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.1.114.158"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
195[label="128.206.97.160s;255pkt 255fpkt", shape=rectangle, color=red];
6410[label="128.206.97.160;255pkt 255fpkt", shape=pentagon, color=darkviolet];
8328[label="128.206.97.160;255pkt 255fpkt", shape=invtriangle, color=brown];
9392[label="128.206.97.160;255pkt 255fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.206.97.160:1040, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1040: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
195--6410[label="1;255pkt 255fpkt"];
195--8328[label="1;255pkt 255fpkt"];
195--9392[label="1;255pkt 255fpkt"];
6410--8328[label="1;255pkt 255fpkt"];
6410--9392[label="1;255pkt 255fpkt"];
8328--9392[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="128.206.97.160" src_port="1040"/>
    </slice>
    <from sec="1089177067" usec="0"/>
    <to sec="1089177081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.54.31.164"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.221.118.165"/>
    </slice>
    <from sec="1089177130" usec="0"/>
    <to sec="1089177152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.32.155.166"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.195.166"/>
    </slice>
    <from sec="1089177193" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.7.22.167"/>
    </slice>
    <from sec="1089176939" usec="0"/>
    <to sec="1089177020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.32.32.167"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.99.166.167"/>
    </slice>
    <from sec="1089176475" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.20.168"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.39.168"/>
    </slice>
    <from sec="1089176409" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.652659,2.10583,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
197[label="213.209.148.169s;38pkt 38fpkt", shape=rectangle, color=red];
6495[label="213.209.148.169;248pkt 248fpkt", shape=pentagon, color=darkviolet];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.209.148.169:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
197--6495[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.209.148.169" src_port="1027"/>
    </slice>
    <from sec="1089177172" usec="0"/>
    <to sec="1089177211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
1316[label="194.54.51.210;d;324pkt 324fpkt", shape=diamond, color=yellow];
1624[label="220.117.252.170;s;4pkt 4fpkt", shape=diamond, color=yellow];
2255[label="18.81.63.98;s;16pkt 16fpkt", shape=diamond, color=yellow];
2688[label="196.252.113.17;s;49pkt 49fpkt", shape=diamond, color=yellow];
2893[label="212.84.92.224;s;69pkt 69fpkt", shape=diamond, color=yellow];
3545[label="194.54.51.210;d;324pkt 324fpkt", shape=hexagon, color=black];
4424[label="212.84.92.224;s;69pkt 69fpkt", shape=hexagon, color=black];
4857[label="212.84.92.15;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4875[label="196.252.113.17;52pkt 52fpkt", shape=pentagon, color=darkviolet];
5013[label="18.81.63.28;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5579[label="212.54.112.75;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5891[label="222.16.22.105;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5977[label="213.213.18.115;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6509[label="220.117.252.170;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6853[label="212.32.38.205;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7079[label="212.84.92.233;62pkt 62fpkt", shape=pentagon, color=darkviolet];
8026[label="222.16.22.105;18pkt 18fpkt", shape=invtriangle, color=brown];
8075[label="213.213.18.115;25pkt 25fpkt", shape=invtriangle, color=brown];
8388[label="220.117.252.170;4pkt 4fpkt", shape=invtriangle, color=brown];
8587[label="212.32.38.205;16pkt 16fpkt", shape=invtriangle, color=brown];
8730[label="212.84.92.233;62pkt 62fpkt", shape=invtriangle, color=brown];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 194.54.51.210:*}[70.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4848%)&lt;BR/&gt; 5050: (1.10565%)&lt;BR/&gt; 41840: (0.20475%)&lt;BR/&gt; 41571: (0.20475%)&lt;BR/&gt; 41343: (0.20475%)&gt;];
}
1316--1624[label="1;4pkt 4fpkt"];
1316--1642[label="0.00390625;1pkt 1fpkt"];
1316--1647[label="0.0075188;2pkt 2fpkt"];
1316--1962[label="0.0133333;1pkt 1fpkt"];
1316--2255[label="0.9375;15pkt 15fpkt"];
1316--2357[label="0.0113636;3pkt 3fpkt"];
1316--2688[label="0.387755;19pkt 19fpkt"];
1316--2893[label="0.478261;33pkt 33fpkt"];
1316--3112[label="0.00961538;1pkt 1fpkt"];
1316--3114[label="0.00869565;1pkt 1fpkt"];
1316--3422[label="0.272727;6pkt 6fpkt"];
1316--3545[label="1;324pkt 324fpkt"];
1316--3649[label="0.00308642;1pkt 1fpkt"];
1316--3696[label="0.00649351;1pkt 1fpkt"];
1316--4007[label="0.0075188;2pkt 2fpkt"];
1316--4424[label="0.478261;33pkt 33fpkt"];
1316--4525[label="0.003125;1pkt 1fpkt"];
1316--4535[label="0.0106383;1pkt 1fpkt"];
1316--4618[label="0.0802469;26pkt 26fpkt"];
1316--4857[label="0.73913;34pkt 34fpkt"];
1316--4875[label="0.365385;19pkt 19fpkt"];
1316--5013[label="0.555556;5pkt 5fpkt"];
1316--5126[label="0.32;8pkt 8fpkt"];
1316--5215[label="0.00925926;3pkt 3fpkt"];
1316--5417[label="0.037037;1pkt 1fpkt"];
1316--5579[label="0.5;4pkt 4fpkt"];
1316--5624[label="0.00308642;1pkt 1fpkt"];
1316--5891[label="1;18pkt 18fpkt"];
1316--5977[label="1;25pkt 25fpkt"];
1316--6418[label="0.00819672;1pkt 1fpkt"];
1316--6509[label="1;4pkt 4fpkt"];
1316--6712[label="0.0116279;1pkt 1fpkt"];
1316--6853[label="0.0588235;1pkt 1fpkt"];
1316--7079[label="0.580645;36pkt 36fpkt"];
1316--7606[label="0.00925926;3pkt 3fpkt"];
1316--7742[label="0.0384615;1pkt 1fpkt"];
1316--8026[label="1;18pkt 18fpkt"];
1316--8075[label="1;25pkt 25fpkt"];
1316--8388[label="1;4pkt 4fpkt"];
1316--8587[label="0.0625;1pkt 1fpkt"];
1316--8730[label="0.580645;36pkt 36fpkt"];
1624--3545[label="1;4pkt 4fpkt"];
1624--4618[label="0.25;1pkt 1fpkt"];
1624--6509[label="1;4pkt 4fpkt"];
1624--8388[label="1;4pkt 4fpkt"];
2255--3545[label="0.9375;15pkt 15fpkt"];
2255--4618[label="0.0625;1pkt 1fpkt"];
2688--2769[label="0.0816327;4pkt 4fpkt"];
2688--3513[label="0.0204082;1pkt 1fpkt"];
2688--3545[label="0.387755;19pkt 19fpkt"];
2688--3578[label="0.265306;13pkt 13fpkt"];
2688--3863[label="0.0408163;2pkt 2fpkt"];
2688--4354[label="0.122449;6pkt 6fpkt"];
2688--4469[label="0.0816327;4pkt 4fpkt"];
2688--4564[label="0.0204082;1pkt 1fpkt"];
2688--4618[label="0.0408163;2pkt 2fpkt"];
2688--4875[label="1;49pkt 49fpkt"];
2893--3513[label="0.0434783;3pkt 3fpkt"];
2893--3515[label="0.0144928;1pkt 1fpkt"];
2893--3545[label="0.478261;33pkt 33fpkt"];
2893--3578[label="0.0144928;1pkt 1fpkt"];
2893--4128[label="0.0144928;1pkt 1fpkt"];
2893--4424[label="1;69pkt 69fpkt"];
2893--4501[label="0.0144928;1pkt 1fpkt"];
2893--4564[label="0.0434783;3pkt 3fpkt"];
2893--4618[label="0.0434783;3pkt 3fpkt"];
3545--3649[label="0.00308642;1pkt 1fpkt"];
3545--3696[label="0.00649351;1pkt 1fpkt"];
3545--4007[label="0.0075188;2pkt 2fpkt"];
3545--4424[label="0.478261;33pkt 33fpkt"];
3545--4525[label="0.003125;1pkt 1fpkt"];
3545--4535[label="0.0106383;1pkt 1fpkt"];
3545--4618[label="0.0802469;26pkt 26fpkt"];
3545--4857[label="0.73913;34pkt 34fpkt"];
3545--4875[label="0.365385;19pkt 19fpkt"];
3545--5013[label="0.555556;5pkt 5fpkt"];
3545--5126[label="0.32;8pkt 8fpkt"];
3545--5215[label="0.00925926;3pkt 3fpkt"];
3545--5417[label="0.037037;1pkt 1fpkt"];
3545--5579[label="0.5;4pkt 4fpkt"];
3545--5624[label="0.00308642;1pkt 1fpkt"];
3545--5891[label="1;18pkt 18fpkt"];
3545--5977[label="1;25pkt 25fpkt"];
3545--6418[label="0.00819672;1pkt 1fpkt"];
3545--6509[label="1;4pkt 4fpkt"];
3545--6712[label="0.0116279;1pkt 1fpkt"];
3545--6853[label="0.0588235;1pkt 1fpkt"];
3545--7079[label="0.580645;36pkt 36fpkt"];
3545--7606[label="0.00925926;3pkt 3fpkt"];
3545--7742[label="0.0384615;1pkt 1fpkt"];
3545--8026[label="1;18pkt 18fpkt"];
3545--8075[label="1;25pkt 25fpkt"];
3545--8388[label="1;4pkt 4fpkt"];
3545--8587[label="0.0625;1pkt 1fpkt"];
3545--8730[label="0.580645;36pkt 36fpkt"];
4424--4501[label="0.0144928;1pkt 1fpkt"];
4424--4564[label="0.0434783;3pkt 3fpkt"];
4424--4618[label="0.0434783;3pkt 3fpkt"];
5891--8026[label="1;18pkt 18fpkt"];
5977--8075[label="1;25pkt 25fpkt"];
6509--8388[label="1;4pkt 4fpkt"];
6853--8587[label="1;16pkt 16fpkt"];
7079--8730[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.51.210" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
418[label="73.56.100.171s;455pkt 455fpkt", shape=rectangle, color=red];
6514[label="73.56.100.171;455pkt 455fpkt", shape=pentagon, color=darkviolet];
8393[label="73.56.100.171;454pkt 454fpkt", shape=invtriangle, color=brown];
9420[label="73.56.100.171;454pkt 454fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.56.100.171:*, *:9898}[55.6044%]&lt;BR/&gt;{73.56.100.171:*, *:5554}[44.3956%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (27.8328%)&lt;BR/&gt; 5554: (22.1672%)&lt;BR/&gt; 2370: (0.220022%)&lt;BR/&gt; 2357: (0.220022%)&lt;BR/&gt; 2355: (0.220022%)&gt;];
}
418--6514[label="1;455pkt 455fpkt"];
418--8393[label="1;454pkt 454fpkt"];
418--9420[label="1;454pkt 454fpkt"];
6514--8393[label="1;454pkt 454fpkt"];
6514--9420[label="1;454pkt 454fpkt"];
8393--9420[label="1;454pkt 454fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.56.100.171"/>
      <filter dst_port="5554" src_ip="73.56.100.171"/>
    </slice>
    <from sec="1089176646" usec="0"/>
    <to sec="1089176648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
3482[label="196.147.119.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
6530[label="196.147.119.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.147.119.172:21, 136.213.37.91:1111}[50%]&lt;BR/&gt;{196.147.119.172:10604, 136.213.37.91:1112}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10604: (33.3333%)&lt;BR/&gt; 1112: (33.3333%)&lt;BR/&gt; 1111: (16.6667%)&lt;BR/&gt; 21: (16.6667%)&gt;];
}
3482--6530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.37.91" dst_port="1112" src_ip="196.147.119.172" src_port="10604"/>
      <filter dst_ip="136.213.37.91" dst_port="1111" src_ip="196.147.119.172" src_port="21"/>
    </slice>
    <from sec="1089177129" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.170.9.173"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089176756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.72.173"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089176848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.8.174"/>
    </slice>
    <from sec="1089176554" usec="0"/>
    <to sec="1089177253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.148.117.174"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.37.176"/>
    </slice>
    <from sec="1089176434" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.104.176"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.173.193.176"/>
    </slice>
    <from sec="1089176476" usec="0"/>
    <to sec="1089176973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.72.177"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.21.168.177"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.51.128.178"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.53.9.179"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.179"/>
    </slice>
    <from sec="1089176442" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.226.65.179"/>
    </slice>
    <from sec="1089176746" usec="0"/>
    <to sec="1089176769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.40.147.179"/>
    </slice>
    <from sec="1089176874" usec="0"/>
    <to sec="1089176930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.104.180"/>
    </slice>
    <from sec="1089176420" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.165.56.182"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.99.14.183"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
433[label="209.30.128.181s;219pkt 219fpkt", shape=rectangle, color=red];
435[label="215.194.27.183s;254pkt 254fpkt", shape=rectangle, color=red];
774[label="209.30.128.181s;219pkt 219fpkt", shape=ellipse, color=green];
1059[label="215.194.27.183s;473pkt 473fpkt", shape=triangle, color=blue];
6631[label="215.194.27.183;254pkt 254fpkt", shape=pentagon, color=darkviolet];
8462[label="215.194.27.183;253pkt 253fpkt", shape=invtriangle, color=brown];
9456[label="215.194.27.183;253pkt 253fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.194.27.183:*, *:9898}[53.6998%]&lt;BR/&gt;{209.30.128.181:*, *:9898}[46.3002%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4997: (0.207792%)&lt;BR/&gt; 4986: (0.207792%)&lt;BR/&gt; 4999: (0.12987%)&lt;BR/&gt; 4998: (0.12987%)&gt;];
}
433--774[label="1;219pkt 219fpkt"];
433--1059[label="1;219pkt 219fpkt"];
435--1059[label="1;254pkt 254fpkt"];
435--6631[label="1;254pkt 254fpkt"];
435--8462[label="1;253pkt 253fpkt"];
435--9456[label="1;253pkt 253fpkt"];
774--1059[label="1;219pkt 219fpkt"];
1059--6631[label="1;254pkt 254fpkt"];
1059--8462[label="1;253pkt 253fpkt"];
1059--9456[label="1;253pkt 253fpkt"];
6631--8462[label="1;253pkt 253fpkt"];
6631--9456[label="1;253pkt 253fpkt"];
8462--9456[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.194.27.183"/>
      <filter dst_port="9898" src_ip="209.30.128.181"/>
    </slice>
    <from sec="1089177048" usec="0"/>
    <to sec="1089177058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.198.253.184"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.64.185"/>
    </slice>
    <from sec="1089176781" usec="0"/>
    <to sec="1089177277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.0.80.185"/>
    </slice>
    <from sec="1089177268" usec="0"/>
    <to sec="1089177275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.146.160.185"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.48.202.185"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.168.18.188"/>
    </slice>
    <from sec="1089176409" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.87.23.188"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.85.103.188"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.42.189"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.64.190"/>
    </slice>
    <from sec="1089176409" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.85.103.190"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.165.190"/>
    </slice>
    <from sec="1089177250" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.130.200.190"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
2848[label="212.32.38.192;s;17pkt 17fpkt", shape=diamond, color=yellow];
6708[label="212.32.38.192;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8507[label="212.32.38.192;16pkt 16fpkt", shape=invtriangle, color=brown];
9473[label="212.32.38.192;16pkt 16fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.192:5050, *:*}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.9394%)&lt;BR/&gt; 63700: (3.0303%)&lt;BR/&gt; 4515: (3.0303%)&lt;BR/&gt; 3161: (3.0303%)&lt;BR/&gt; 3041: (3.0303%)&gt;];
}
2848--6708[label="1;17pkt 17fpkt"];
2848--8507[label="1;16pkt 16fpkt"];
2848--9473[label="1;16pkt 16fpkt"];
6708--8507[label="1;16pkt 16fpkt"];
6708--9473[label="1;16pkt 16fpkt"];
8507--9473[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="212.32.38.192" src_port="5050"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.32.194"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.110.76.194"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
1748[label="173.44.79.24;d;32pkt 32fpkt", shape=diamond, color=yellow];
1881[label="141.169.36.195;s;75pkt 75fpkt", shape=diamond, color=yellow];
3803[label="141.169.36.195;s;75pkt 75fpkt", shape=hexagon, color=black];
6741[label="141.169.36.195;76pkt 76fpkt", shape=pentagon, color=darkviolet];
8522[label="141.169.36.195;76pkt 76fpkt", shape=invtriangle, color=brown];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.36.195:*, 173.44.79.26:80}[56.5789%]&lt;BR/&gt;{141.169.36.195:*, 173.44.79.24:80}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2513: (0.748503%)&lt;BR/&gt; 2512: (0.748503%)&lt;BR/&gt; 2511: (0.748503%)&lt;BR/&gt; 2509: (0.748503%)&gt;];
}
1748--1881[label="1;32pkt 32fpkt"];
1748--3803[label="1;32pkt 32fpkt"];
1748--4623[label="0.21875;7pkt 7fpkt"];
1748--6741[label="1;32pkt 32fpkt"];
1748--8522[label="1;32pkt 32fpkt"];
1881--3803[label="1;75pkt 75fpkt"];
1881--4619[label="0.2;15pkt 15fpkt"];
1881--4623[label="0.0933333;7pkt 7fpkt"];
1881--4631[label="0.2;15pkt 15fpkt"];
1881--6741[label="1;75pkt 75fpkt"];
1881--8522[label="1;75pkt 75fpkt"];
3803--4619[label="0.2;15pkt 15fpkt"];
3803--4623[label="0.0933333;7pkt 7fpkt"];
3803--4631[label="0.2;15pkt 15fpkt"];
3803--6741[label="1;75pkt 75fpkt"];
3803--8522[label="1;75pkt 75fpkt"];
6741--8522[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="173.44.79.26" dst_port="80" src_ip="141.169.36.195"/>
      <filter dst_ip="173.44.79.24" dst_port="80" src_ip="141.169.36.195"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.210.85.196"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.176.14.197"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.59.137.197"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.200.197"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.76.198"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648134,2.11176,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
3431[label="208.164.210.198;s;180pkt 180fpkt", shape=diamond, color=yellow];
6774[label="208.164.210.198;210pkt 210fpkt", shape=pentagon, color=darkviolet];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.164.210.198:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3776: (0.25641%)&lt;BR/&gt; 3774: (0.25641%)&lt;BR/&gt; 3772: (0.25641%)&lt;BR/&gt; 3769: (0.25641%)&gt;];
}
3431--6774[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.164.210.198"/>
    </slice>
    <from sec="1089176815" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.132.200"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.203"/>
    </slice>
    <from sec="1089176434" usec="0"/>
    <to sec="1089177281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
1549[label="149.99.199.203;s;324pkt 324fpkt", shape=diamond, color=yellow];
3980[label="149.99.199.203;s;324pkt 324fpkt", shape=hexagon, color=black];
6839[label="149.99.199.203;389pkt 389fpkt", shape=pentagon, color=darkviolet];
8577[label="149.99.199.203;389pkt 389fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.199.203:*, 222.85.190.184:80}[34.4473%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2665: (0.140252%)&lt;BR/&gt; 2664: (0.140252%)&lt;BR/&gt; 2663: (0.140252%)&lt;BR/&gt; 2660: (0.140252%)&gt;];
}
1549--1570[label="0.233333;7pkt 7fpkt"];
1549--3980[label="1;324pkt 324fpkt"];
1549--4619[label="0.0864198;28pkt 28fpkt"];
1549--4623[label="0.0709877;23pkt 23fpkt"];
1549--4628[label="0.0833333;27pkt 27fpkt"];
1549--4631[label="0.0864198;28pkt 28fpkt"];
1549--4635[label="0.0833333;27pkt 27fpkt"];
1549--6839[label="1;324pkt 324fpkt"];
1549--8577[label="1;324pkt 324fpkt"];
3980--4619[label="0.0864198;28pkt 28fpkt"];
3980--4623[label="0.0709877;23pkt 23fpkt"];
3980--4628[label="0.0833333;27pkt 27fpkt"];
3980--4631[label="0.0864198;28pkt 28fpkt"];
3980--4635[label="0.0833333;27pkt 27fpkt"];
3980--6839[label="1;324pkt 324fpkt"];
3980--8577[label="1;324pkt 324fpkt"];
6839--8577[label="1;389pkt 389fpkt"];
</description>
    <slice>
      <filter dst_ip="222.85.190.184" dst_port="80" src_ip="149.99.199.203"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.6.205"/>
    </slice>
    <from sec="1089176458" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.69.110.208"/>
    </slice>
    <from sec="1089176532" usec="0"/>
    <to sec="1089176554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
204[label="212.17.17.210s;99pkt 99fpkt", shape=rectangle, color=red];
6884[label="212.17.17.210;103pkt 103fpkt", shape=pentagon, color=darkviolet];
8607[label="212.17.17.210;103pkt 103fpkt", shape=invtriangle, color=brown];
9517[label="212.17.17.210;103pkt 103fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.17.17.210:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
204--6884[label="1;99pkt 99fpkt"];
204--8607[label="1;99pkt 99fpkt"];
204--9517[label="1;99pkt 99fpkt"];
6884--8607[label="1;103pkt 103fpkt"];
6884--9517[label="1;103pkt 103fpkt"];
8607--9517[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.17.17.210" src_port="1028"/>
    </slice>
    <from sec="1089176649" usec="0"/>
    <to sec="1089176661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.213.38.210"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.153.161.210"/>
    </slice>
    <from sec="1089176539" usec="0"/>
    <to sec="1089176555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.32.38.211"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
284[label="209.180.18.62s;254pkt 254fpkt", shape=rectangle, color=red];
290[label="17.29.202.62s;243pkt 243fpkt", shape=rectangle, color=red];
466[label="21.169.169.216s;496pkt 496fpkt", shape=rectangle, color=red];
642[label="209.180.18.62s;497pkt 497fpkt", shape=ellipse, color=green];
801[label="21.169.169.216s;739pkt 739fpkt", shape=ellipse, color=green];
939[label="209.180.18.62s;497pkt 497fpkt", shape=triangle, color=blue];
1080[label="21.169.169.216s;739pkt 739fpkt", shape=triangle, color=blue];
5399[label="209.180.18.62;253pkt 253fpkt", shape=pentagon, color=darkviolet];
5412[label="17.29.202.62;242pkt 242fpkt", shape=pentagon, color=darkviolet];
6945[label="21.169.169.216;496pkt 496fpkt", shape=pentagon, color=darkviolet];
7728[label="209.180.18.62;254pkt 254fpkt", shape=invtriangle, color=brown];
8644[label="21.169.169.216;496pkt 496fpkt", shape=invtriangle, color=brown];
9075[label="209.180.18.62;253pkt 253fpkt", shape=invhouse, color=bisque];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.180.18.62:*, *:9898}[25.5791%]&lt;BR/&gt;{21.169.169.216:*, *:5554}[24.9748%]&lt;BR/&gt;{21.169.169.216:*, *:9898}[24.9748%]&lt;BR/&gt;{17.29.202.62:*, *:*}[24.4713%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (33.3211%)&lt;BR/&gt; 5554: (16.6789%)&lt;BR/&gt; 3856: (0.100751%)&lt;BR/&gt; 3852: (0.100751%)&lt;BR/&gt; 3851: (0.100751%)&gt;];
}
284--642[label="1;254pkt 254fpkt"];
284--939[label="1;254pkt 254fpkt"];
284--5399[label="1;253pkt 253fpkt"];
284--7728[label="1;254pkt 254fpkt"];
284--9075[label="1;253pkt 253fpkt"];
290--642[label="1;243pkt 243fpkt"];
290--801[label="1;243pkt 243fpkt"];
290--939[label="1;243pkt 243fpkt"];
290--1080[label="1;243pkt 243fpkt"];
290--5412[label="1;242pkt 242fpkt"];
466--801[label="1;496pkt 496fpkt"];
466--1080[label="1;496pkt 496fpkt"];
466--6945[label="1;496pkt 496fpkt"];
466--8644[label="1;496pkt 496fpkt"];
642--801[label="0.488934;243pkt 243fpkt"];
642--939[label="1;497pkt 497fpkt"];
642--1080[label="0.488934;243pkt 243fpkt"];
642--5399[label="1;253pkt 253fpkt"];
642--5412[label="1;242pkt 242fpkt"];
642--7728[label="1;254pkt 254fpkt"];
642--9075[label="1;253pkt 253fpkt"];
801--939[label="0.488934;243pkt 243fpkt"];
801--1080[label="1;739pkt 739fpkt"];
801--5412[label="1;242pkt 242fpkt"];
801--6945[label="1;496pkt 496fpkt"];
801--8644[label="1;496pkt 496fpkt"];
939--1080[label="0.488934;243pkt 243fpkt"];
939--5399[label="1;253pkt 253fpkt"];
939--5412[label="1;242pkt 242fpkt"];
939--7728[label="1;254pkt 254fpkt"];
939--9075[label="1;253pkt 253fpkt"];
1080--5412[label="1;242pkt 242fpkt"];
1080--6945[label="1;496pkt 496fpkt"];
1080--8644[label="1;496pkt 496fpkt"];
5399--7728[label="1;253pkt 253fpkt"];
5399--9075[label="1;253pkt 253fpkt"];
6945--8644[label="1;496pkt 496fpkt"];
7728--9075[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter src_ip="17.29.202.62"/>
      <filter dst_port="9898" src_ip="21.169.169.216"/>
      <filter dst_port="5554" src_ip="21.169.169.216"/>
      <filter dst_port="9898" src_ip="209.180.18.62"/>
    </slice>
    <from sec="1089176451" usec="0"/>
    <to sec="1089176457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.210.26.217"/>
    </slice>
    <from sec="1089176938" usec="0"/>
    <to sec="1089176951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.195.134.217"/>
    </slice>
    <from sec="1089177193" usec="0"/>
    <to sec="1089177267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.35.165.217"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
1972[label="197.30.230.146;s;76pkt 76fpkt", shape=diamond, color=yellow];
2635[label="212.84.70.2;s;56pkt 56fpkt", shape=diamond, color=yellow];
3208[label="149.99.117.235;d;39pkt 39fpkt", shape=diamond, color=yellow];
3392[label="197.30.230.12;s;79pkt 79fpkt", shape=diamond, color=yellow];
4446[label="197.30.230.146;s;76pkt 76fpkt", shape=hexagon, color=black];
4465[label="149.99.117.235;d;39pkt 39fpkt", shape=hexagon, color=black];
4669[label="212.84.70.2;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4833[label="197.30.230.12;83pkt 83fpkt", shape=pentagon, color=darkviolet];
6271[label="197.30.230.146;79pkt 79fpkt", shape=pentagon, color=darkviolet];
6964[label="19.26.78.218;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8655[label="19.26.78.218;16pkt 16fpkt", shape=invtriangle, color=brown];
9543[label="19.26.78.218;17pkt 17fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.230.12:80, *:*}[33.2016%]&lt;BR/&gt;{212.84.70.2:80, *:*}[24.1107%]&lt;BR/&gt;{197.30.230.146:80, *:*}[22.9249%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.906%)&lt;BR/&gt; 443: (5.09404%)&lt;BR/&gt; 1119: (0.626959%)&lt;BR/&gt; 1133: (0.470219%)&lt;BR/&gt; 1132: (0.470219%)&gt;];
}
1972--2734[label="0.157895;3pkt 3fpkt"];
1972--2757[label="0.0689655;4pkt 4fpkt"];
1972--2769[label="0.0394737;3pkt 3fpkt"];
1972--3208[label="0.128205;5pkt 5fpkt"];
1972--3513[label="0.0131579;1pkt 1fpkt"];
1972--3535[label="0.0394737;3pkt 3fpkt"];
1972--4097[label="0.0441176;3pkt 3fpkt"];
1972--4446[label="1;76pkt 76fpkt"];
1972--4465[label="0.128205;5pkt 5fpkt"];
1972--4469[label="0.0394737;3pkt 3fpkt"];
1972--4577[label="0.0394737;3pkt 3fpkt"];
1972--4618[label="0.0394737;3pkt 3fpkt"];
1972--6271[label="1;76pkt 76fpkt"];
2635--3208[label="0.0512821;2pkt 2fpkt"];
2635--3393[label="0.0178571;1pkt 1fpkt"];
2635--3515[label="0.0178571;1pkt 1fpkt"];
2635--3578[label="0.0357143;2pkt 2fpkt"];
2635--3863[label="0.0178571;1pkt 1fpkt"];
2635--4354[label="0.0178571;1pkt 1fpkt"];
2635--4465[label="0.0512821;2pkt 2fpkt"];
2635--4501[label="0.0178571;1pkt 1fpkt"];
2635--4618[label="0.0892857;5pkt 5fpkt"];
2635--4669[label="1;56pkt 56fpkt"];
3208--3392[label="0.0769231;3pkt 3fpkt"];
3208--4446[label="0.128205;5pkt 5fpkt"];
3208--4465[label="1;39pkt 39fpkt"];
3208--4669[label="0.0512821;2pkt 2fpkt"];
3208--4833[label="0.0769231;3pkt 3fpkt"];
3208--5477[label="0.0512821;2pkt 2fpkt"];
3208--6271[label="0.128205;5pkt 5fpkt"];
3208--6406[label="0.102564;4pkt 4fpkt"];
3208--6964[label="1;17pkt 17fpkt"];
3208--8655[label="1;16pkt 16fpkt"];
3208--9543[label="1;17pkt 17fpkt"];
3392--3513[label="0.0126582;1pkt 1fpkt"];
3392--3578[label="0.0126582;1pkt 1fpkt"];
3392--4465[label="0.0769231;3pkt 3fpkt"];
3392--4564[label="0.0126582;1pkt 1fpkt"];
3392--4618[label="0.0253165;2pkt 2fpkt"];
3392--4833[label="0.987342;78pkt 78fpkt"];
4446--4465[label="0.128205;5pkt 5fpkt"];
4446--4469[label="0.0394737;3pkt 3fpkt"];
4446--4577[label="0.0394737;3pkt 3fpkt"];
4446--4618[label="0.0394737;3pkt 3fpkt"];
4446--6271[label="1;76pkt 76fpkt"];
4465--4669[label="0.0512821;2pkt 2fpkt"];
4465--4833[label="0.0769231;3pkt 3fpkt"];
4465--5477[label="0.0512821;2pkt 2fpkt"];
4465--6271[label="0.128205;5pkt 5fpkt"];
4465--6406[label="0.102564;4pkt 4fpkt"];
4465--6964[label="1;17pkt 17fpkt"];
4465--8655[label="1;16pkt 16fpkt"];
4465--9543[label="1;17pkt 17fpkt"];
6964--8655[label="1;16pkt 16fpkt"];
6964--9543[label="1;17pkt 17fpkt"];
8655--9543[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="197.30.230.12" src_port="80"/>
      <filter src_ip="197.30.230.146" src_port="80"/>
      <filter src_ip="212.84.70.2" src_port="80"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0378,1.98875,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
469[label="214.190.164.220s;23pkt 23fpkt", shape=rectangle, color=red];
1150[label="201.76.191.255;d;876pkt 876fpkt", shape=diamond, color=yellow];
1499[label="194.59.107.208;s;455pkt 455fpkt", shape=diamond, color=yellow];
1557[label="199.23.121.53;d;12pkt 12fpkt", shape=diamond, color=yellow];
1566[label="195.46.96.220;s;701pkt 701fpkt", shape=diamond, color=yellow];
1654[label="199.23.112.26;d;252pkt 252fpkt", shape=diamond, color=yellow];
3902[label="199.23.112.26;d;144pkt 144fpkt", shape=hexagon, color=black];
6871[label="194.59.107.208;458pkt 458fpkt", shape=pentagon, color=darkviolet];
6979[label="195.46.96.220;724pkt 724fpkt", shape=pentagon, color=darkviolet];
8667[label="195.46.96.220;723pkt 723fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.59.107.208:25, 201.76.191.255:*}[37.3942%]&lt;BR/&gt;{195.46.96.220:*, 201.76.191.255:25}[36.7174%]&lt;BR/&gt;{195.46.96.220:*, 199.23.112.26:25}[23.2657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7253%)&lt;BR/&gt; 53: (0.274725%)&lt;BR/&gt; 4761: (0.251832%)&lt;BR/&gt; 4334: (0.103022%)&lt;BR/&gt; 4330: (0.103022%)&gt;];
}
469--1150[label="0.391304;9pkt 9fpkt"];
469--1566[label="1;23pkt 23fpkt"];
469--1654[label="0.608696;14pkt 14fpkt"];
469--3902[label="0.608696;14pkt 14fpkt"];
469--6979[label="1;23pkt 23fpkt"];
469--8667[label="1;23pkt 23fpkt"];
1150--1499[label="0.971429;442pkt 442fpkt"];
1150--1566[label="0.619116;434pkt 434fpkt"];
1150--6871[label="0.965066;442pkt 442fpkt"];
1150--6979[label="0.599448;434pkt 434fpkt"];
1150--8667[label="0.600277;434pkt 434fpkt"];
1499--1557[label="1;12pkt 12fpkt"];
1499--6871[label="1;455pkt 455fpkt"];
1557--6871[label="1;12pkt 12fpkt"];
1566--1654[label="1;252pkt 252fpkt"];
1566--1676[label="0.00775194;1pkt 1fpkt"];
1566--3902[label="1;144pkt 144fpkt"];
1566--4284[label="0.00833333;1pkt 1fpkt"];
1566--6979[label="1;701pkt 701fpkt"];
1566--8667[label="0.998573;700pkt 700fpkt"];
1654--3902[label="1;144pkt 144fpkt"];
1654--6979[label="1;252pkt 252fpkt"];
1654--8667[label="0.996032;251pkt 251fpkt"];
3902--6979[label="1;144pkt 144fpkt"];
3902--8667[label="0.993056;143pkt 143fpkt"];
6979--8667[label="1;723pkt 723fpkt"];
</description>
    <slice>
      <filter dst_ip="201.76.191.255" dst_port="25" src_ip="195.46.96.220"/>
      <filter dst_ip="199.23.112.26" dst_port="25" src_ip="195.46.96.220"/>
      <filter dst_ip="201.76.191.255" src_ip="194.59.107.208" src_port="25"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.154.34.221"/>
    </slice>
    <from sec="1089176883" usec="0"/>
    <to sec="1089176997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.113.39.221"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.120.85.221"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.50.53.222"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.180.18.224"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.219.223.225"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.48.77.227"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.70.229"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.32.38.231"/>
    </slice>
    <from sec="1089176415" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.10.203.233"/>
    </slice>
    <from sec="1089177193" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.5.5.235"/>
    </slice>
    <from sec="1089176646" usec="0"/>
    <to sec="1089176667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.39.236"/>
    </slice>
    <from sec="1089176424" usec="0"/>
    <to sec="1089177284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.19.106.236"/>
    </slice>
    <from sec="1089176421" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.165.21.237"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.238"/>
    </slice>
    <from sec="1089176441" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.16.138.238"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.38.239"/>
    </slice>
    <from sec="1089176417" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.32.38.240"/>
    </slice>
    <from sec="1089176414" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.66.48.240"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.681467,2.05414,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
486[label="208.178.170.240s;472pkt 472fpkt", shape=rectangle, color=red];
7153[label="208.178.170.240;472pkt 472fpkt", shape=pentagon, color=darkviolet];
8771[label="208.178.170.240;471pkt 471fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.178.170.240:*, *:5554}[50.8475%]&lt;BR/&gt;{208.178.170.240:*, *:9898}[49.1525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.4064%)&lt;BR/&gt; 9898: (24.5936%)&lt;BR/&gt; 4992: (0.106007%)&lt;BR/&gt; 4991: (0.106007%)&lt;BR/&gt; 4990: (0.106007%)&gt;];
}
486--7153[label="1;472pkt 472fpkt"];
486--8771[label="1;471pkt 471fpkt"];
7153--8771[label="1;471pkt 471fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.178.170.240"/>
      <filter dst_port="9898" src_ip="208.178.170.240"/>
    </slice>
    <from sec="1089177163" usec="0"/>
    <to sec="1089177166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
3157[label="16.36.188.240;s;55pkt 55fpkt", shape=diamond, color=yellow];
7154[label="16.36.188.240;60pkt 60fpkt", shape=pentagon, color=darkviolet];
8772[label="16.36.188.240;59pkt 59fpkt", shape=invtriangle, color=brown];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.36.188.240:*, 141.169.33.140:80}[50%]&lt;BR/&gt;{16.36.188.240:*, 195.46.96.154:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48953: (0.862069%)&lt;BR/&gt; 48596: (0.862069%)&lt;BR/&gt; 47949: (0.862069%)&lt;BR/&gt; 47612: (0.862069%)&gt;];
}
3157--4619[label="0.0545455;3pkt 3fpkt"];
3157--4623[label="0.0727273;4pkt 4fpkt"];
3157--4628[label="0.0545455;3pkt 3fpkt"];
3157--4631[label="0.0545455;3pkt 3fpkt"];
3157--4635[label="0.0545455;3pkt 3fpkt"];
3157--7154[label="1;55pkt 55fpkt"];
3157--8772[label="0.981818;54pkt 54fpkt"];
7154--8772[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="195.46.96.154" dst_port="80" src_ip="16.36.188.240"/>
      <filter dst_ip="141.169.33.140" dst_port="80" src_ip="16.36.188.240"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
2118[label="73.34.221.240;s;1665pkt 1665fpkt", shape=diamond, color=yellow];
3798[label="73.34.221.240;s;761pkt 761fpkt", shape=hexagon, color=black];
7157[label="73.34.221.240;1808pkt 1808fpkt", shape=pentagon, color=darkviolet];
8774[label="73.34.221.240;1808pkt 1808fpkt", shape=invtriangle, color=brown];
9597[label="73.34.221.240;1807pkt 1807fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.34.221.240:8485, *:*}[83.9049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8485: (41.948%)&lt;BR/&gt; 80: (8.05198%)&lt;BR/&gt; 49059: (0.0637024%)&lt;BR/&gt; 42966: (0.0637024%)&lt;BR/&gt; 38881: (0.0637024%)&gt;];
}
2118--3798[label="1;761pkt 761fpkt"];
2118--4618[label="0.0132132;22pkt 22fpkt"];
2118--7157[label="1;1665pkt 1665fpkt"];
2118--8774[label="1;1665pkt 1665fpkt"];
2118--9597[label="0.999399;1664pkt 1664fpkt"];
3798--4618[label="0.0289093;22pkt 22fpkt"];
3798--7157[label="1;761pkt 761fpkt"];
3798--8774[label="1;761pkt 761fpkt"];
3798--9597[label="1;761pkt 761fpkt"];
7157--8774[label="1;1808pkt 1808fpkt"];
7157--9597[label="1;1807pkt 1807fpkt"];
8774--9597[label="1;1807pkt 1807fpkt"];
</description>
    <slice>
      <filter src_ip="73.34.221.240" src_port="8485"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.146.16.246"/>
    </slice>
    <from sec="1089176418" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
2067[label="210.205.244.249;s;2pkt 2fpkt", shape=diamond, color=yellow];
7231[label="210.205.244.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8818[label="210.205.244.249;1pkt 1fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.205.244.249:80, 141.169.164.18:2928}[50%]&lt;BR/&gt;{210.205.244.249:80, 141.169.164.18:2930}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2930: (37.5%)&lt;BR/&gt; 2928: (12.5%)&gt;];
}
2067--7231[label="1;1pkt 1fpkt"];
2067--8818[label="1;1pkt 1fpkt"];
7231--8818[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.164.18" dst_port="2930" src_ip="210.205.244.249" src_port="80"/>
      <filter dst_ip="141.169.164.18" dst_port="2928" src_ip="210.205.244.249" src_port="80"/>
    </slice>
    <from sec="1089176648" usec="0"/>
    <to sec="1089176667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.9.12.251"/>
    </slice>
    <from sec="1089176485" usec="0"/>
    <to sec="1089177214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.32.38.251"/>
    </slice>
    <from sec="1089176426" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
1889[label="194.138.51.251;s;1738pkt 1738fpkt", shape=diamond, color=yellow];
7243[label="194.138.51.251;1846pkt 1846fpkt", shape=pentagon, color=darkviolet];
8825[label="194.138.51.251;1845pkt 1845fpkt", shape=invtriangle, color=brown];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.138.51.251:2383, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2383: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1889--7243[label="1;1738pkt 1738fpkt"];
1889--8825[label="0.999425;1737pkt 1737fpkt"];
7243--8825[label="1;1845pkt 1845fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="194.138.51.251" src_port="2383"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.169.67.251"/>
    </slice>
    <from sec="1089177265" usec="0"/>
    <to sec="1089177266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.226.86.251"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089176700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.4.93.251"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.652659,2.10583,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
208[label="215.189.65.255s;255pkt 255fpkt", shape=rectangle, color=red];
7270[label="215.189.65.255;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.189.65.255:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
208--7270[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.189.65.255" src_port="1027"/>
    </slice>
    <from sec="1089176812" usec="0"/>
    <to sec="1089176829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.443512,2.1481,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
7271[label="215.230.120.255;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.230.120.255:*, 141.169.45.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4246: (2.17391%)&lt;BR/&gt; 3801: (2.17391%)&lt;BR/&gt; 3752: (2.17391%)&lt;BR/&gt; 3744: (2.17391%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="141.169.45.65" dst_port="80" src_ip="215.230.120.255"/>
    </slice>
    <from sec="1089176439" usec="0"/>
    <to sec="1089177288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
4641[label="220.182.148.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7277[label="220.182.148.0;1pkt 1fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.182.148.0:80, 136.213.54.10:3299}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3299: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4641--7277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.54.10" dst_port="3299" src_ip="220.182.148.0" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
4662[label="169.51.188.1;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7285[label="169.51.188.1;9pkt 9fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.188.1:*, 197.30.152.114:80}[33.3333%]&lt;BR/&gt;{169.51.188.1:*, 197.30.152.25:80}[22.2222%]&lt;BR/&gt;{169.51.188.1:*, 197.30.233.90:443}[22.2222%]&lt;BR/&gt;{169.51.188.1:*, 197.30.233.90:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 443: (11.1111%)&lt;BR/&gt; 3882: (5.55556%)&lt;BR/&gt; 3878: (5.55556%)&lt;BR/&gt; 3876: (5.55556%)&gt;];
}
4662--7285[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.233.90" dst_port="80" src_ip="169.51.188.1"/>
      <filter dst_ip="197.30.233.90" dst_port="443" src_ip="169.51.188.1"/>
      <filter dst_ip="197.30.152.114" dst_port="80" src_ip="169.51.188.1"/>
      <filter dst_ip="197.30.152.25" dst_port="80" src_ip="169.51.188.1"/>
    </slice>
    <from sec="1089177229" usec="0"/>
    <to sec="1089177250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
4668[label="212.84.68.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7290[label="212.84.68.2;3pkt 3fpkt", shape=invtriangle, color=brown];
8844[label="212.84.68.2;3pkt 3fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.68.2:80, 136.213.34.246:1881}[33.3333%]&lt;BR/&gt;{212.84.68.2:80, 136.213.54.203:3238}[33.3333%]&lt;BR/&gt;{212.84.68.2:80, 136.213.54.203:3239}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3239: (16.6667%)&lt;BR/&gt; 3238: (16.6667%)&lt;BR/&gt; 1881: (16.6667%)&gt;];
}
4668--7290[label="1;3pkt 3fpkt"];
4668--8844[label="1;3pkt 3fpkt"];
7290--8844[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.54.203" dst_port="3239" src_ip="212.84.68.2" src_port="80"/>
      <filter dst_ip="136.213.54.203" dst_port="3238" src_ip="212.84.68.2" src_port="80"/>
      <filter dst_ip="136.213.34.246" dst_port="1881" src_ip="212.84.68.2" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.219.93.2"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
4680[label="73.59.22.3;46pkt 46fpkt", shape=pentagon, color=darkviolet];
7298[label="73.59.22.3;46pkt 46fpkt", shape=invtriangle, color=brown];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.59.22.3:*, *:1025}[26.087%]&lt;BR/&gt;{73.59.22.3:*, *:2745}[26.087%]&lt;BR/&gt;{73.59.22.3:*, *:80}[23.913%]&lt;BR/&gt;{73.59.22.3:*, *:6129}[23.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.0435%)&lt;BR/&gt; 1025: (13.0435%)&lt;BR/&gt; 6129: (11.9565%)&lt;BR/&gt; 80: (11.9565%)&lt;BR/&gt; 4449: (2.17391%)&gt;];
}
4680--7298[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="73.59.22.3"/>
      <filter dst_port="1025" src_ip="73.59.22.3"/>
      <filter dst_port="6129" src_ip="73.59.22.3"/>
      <filter dst_port="80" src_ip="73.59.22.3"/>
    </slice>
    <from sec="1089176414" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
4681[label="209.40.128.3;159pkt 159fpkt", shape=pentagon, color=darkviolet];
7299[label="209.40.128.3;159pkt 159fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.40.128.3:*, *:1027}[54.0881%]&lt;BR/&gt;{209.40.128.3:*, *:1026}[45.9119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (27.044%)&lt;BR/&gt; 1026: (22.956%)&lt;BR/&gt; 3408: (0.943396%)&lt;BR/&gt; 4832: (0.628931%)&lt;BR/&gt; 4672: (0.628931%)&gt;];
}
4681--7299[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="209.40.128.3"/>
      <filter dst_port="1026" src_ip="209.40.128.3"/>
    </slice>
    <from sec="1089176827" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
4689[label="149.99.245.3;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7304[label="149.99.245.3;12pkt 12fpkt", shape=invtriangle, color=brown];
8851[label="149.99.245.3;12pkt 12fpkt", shape=invhouse, color=bisque];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.245.3:*, 196.252.113.168:80}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2357: (4.05405%)&lt;BR/&gt; 2354: (4.05405%)&lt;BR/&gt; 2353: (4.05405%)&lt;BR/&gt; 2348: (4.05405%)&gt;];
}
4689--7304[label="1;12pkt 12fpkt"];
4689--8851[label="1;12pkt 12fpkt"];
7304--8851[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.252.113.168" dst_port="80" src_ip="149.99.245.3"/>
    </slice>
    <from sec="1089176461" usec="0"/>
    <to sec="1089176590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.147.253.3"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
4697[label="141.169.130.4;29pkt 29fpkt", shape=pentagon, color=darkviolet];
7309[label="141.169.130.4;28pkt 28fpkt", shape=invtriangle, color=brown];
8852[label="141.169.130.4;29pkt 29fpkt", shape=invhouse, color=bisque];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.130.4:*, 215.43.144.179:80}[72.4138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3488%)&lt;BR/&gt; 0: (3.48837%)&lt;BR/&gt; 9898: (1.74419%)&lt;BR/&gt; 3214: (1.74419%)&lt;BR/&gt; 1366: (1.74419%)&gt;];
}
4697--7309[label="1;28pkt 28fpkt"];
4697--8852[label="1;29pkt 29fpkt"];
7309--8852[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="215.43.144.179" dst_port="80" src_ip="141.169.130.4"/>
    </slice>
    <from sec="1089176607" usec="0"/>
    <to sec="1089176935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
4700[label="73.41.232.4;230pkt 230fpkt", shape=pentagon, color=darkviolet];
7310[label="73.41.232.4;230pkt 230fpkt", shape=invtriangle, color=brown];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.41.232.4:*, *:139}[50.4348%]&lt;BR/&gt;{73.41.232.4:*, *:445}[49.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.2174%)&lt;BR/&gt; 445: (24.7826%)&lt;BR/&gt; 33767: (0.217391%)&lt;BR/&gt; 33756: (0.217391%)&lt;BR/&gt; 33751: (0.217391%)&gt;];
}
4700--7310[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="73.41.232.4"/>
      <filter dst_port="445" src_ip="73.41.232.4"/>
    </slice>
    <from sec="1089176994" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
4724[label="141.169.15.6;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7324[label="141.169.15.6;5pkt 5fpkt", shape=invtriangle, color=brown];
8861[label="141.169.15.6;5pkt 5fpkt", shape=invhouse, color=bisque];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.15.6:*, *:80}[33.3333%]&lt;BR/&gt;{141.169.15.6:*, *:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 35281: (9.375%)&lt;BR/&gt; 35280: (9.375%)&lt;BR/&gt; 35279: (9.375%)&gt;];
}
4724--7324[label="1;5pkt 5fpkt"];
4724--8861[label="1;5pkt 5fpkt"];
7324--8861[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="141.169.15.6"/>
      <filter dst_port="80" src_ip="141.169.15.6"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
4730[label="195.46.103.6;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7327[label="195.46.103.6;18pkt 18fpkt", shape=invtriangle, color=brown];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.103.6:*, 17.44.138.176:*}[26.3158%]&lt;BR/&gt;{195.46.103.6:1036, *:3544}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (33.7838%)&lt;BR/&gt; 3544: (9.45946%)&lt;BR/&gt; 135: (5.40541%)&lt;BR/&gt; 61975: (2.7027%)&lt;BR/&gt; 56772: (2.7027%)&gt;];
}
4730--7327[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="17.44.138.176" src_ip="195.46.103.6"/>
      <filter dst_port="3544" src_ip="195.46.103.6" src_port="1036"/>
    </slice>
    <from sec="1089176422" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677135,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
3278[label="194.60.152.188;d;21pkt 21fpkt", shape=diamond, color=yellow];
3287[label="194.134.221.248;s;4pkt 4fpkt", shape=diamond, color=yellow];
4731[label="73.23.126.6;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7328[label="73.23.126.6;3pkt 3fpkt", shape=invtriangle, color=brown];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 194.60.152.188:4000}[28.5714%]&lt;BR/&gt;{*:80, 194.60.152.188:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.3548%)&lt;BR/&gt; 8000: (11.2903%)&lt;BR/&gt; 4000: (9.67742%)&lt;BR/&gt; 21: (6.45161%)&lt;BR/&gt; 1045: (4.83871%)&gt;];
}
3278--3287[label="1;4pkt 4fpkt"];
3278--4731[label="1;3pkt 3fpkt"];
3278--7328[label="1;3pkt 3fpkt"];
4731--7328[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.152.188" src_port="80"/>
      <filter dst_ip="194.60.152.188" dst_port="4000" src_port="8000"/>
    </slice>
    <from sec="1089177031" usec="0"/>
    <to sec="1089177275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.2.8"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
4752[label="136.213.23.8;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7340[label="136.213.23.8;7pkt 7fpkt", shape=invtriangle, color=brown];
8869[label="136.213.23.8;7pkt 7fpkt", shape=invhouse, color=bisque];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.23.8:*, 197.30.230.12:80}[28.5714%]&lt;BR/&gt;{136.213.23.8:*, 197.30.232.129:80}[28.5714%]&lt;BR/&gt;{136.213.23.8:*, *:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 443: (14.2857%)&lt;BR/&gt; 4446: (7.14286%)&lt;BR/&gt; 4442: (7.14286%)&lt;BR/&gt; 4440: (7.14286%)&gt;];
}
4752--7340[label="1;7pkt 7fpkt"];
4752--8869[label="1;7pkt 7fpkt"];
7340--8869[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="136.213.23.8"/>
      <filter dst_ip="197.30.232.129" dst_port="80" src_ip="136.213.23.8"/>
      <filter dst_ip="197.30.230.12" dst_port="80" src_ip="136.213.23.8"/>
    </slice>
    <from sec="1089176723" usec="0"/>
    <to sec="1089177271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
4755[label="197.30.34.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7342[label="197.30.34.8;4pkt 4fpkt", shape=invtriangle, color=brown];
8870[label="197.30.34.8;3pkt 3fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.8:1863, 136.213.39.10:1398}[25%]&lt;BR/&gt;{197.30.34.8:1863, 136.213.38.114:1756}[25%]&lt;BR/&gt;{197.30.34.8:1863, 149.99.106.122:1277}[25%]&lt;BR/&gt;{197.30.34.8:1863, 149.99.106.122:1372}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1398: (15%)&lt;BR/&gt; 1372: (15%)&lt;BR/&gt; 1277: (15%)&lt;BR/&gt; 1756: (5%)&gt;];
}
4755--7342[label="1;3pkt 3fpkt"];
4755--8870[label="1;3pkt 3fpkt"];
7342--8870[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.106.122" dst_port="1372" src_ip="197.30.34.8" src_port="1863"/>
      <filter dst_ip="149.99.106.122" dst_port="1277" src_ip="197.30.34.8" src_port="1863"/>
      <filter dst_ip="136.213.38.114" dst_port="1756" src_ip="197.30.34.8" src_port="1863"/>
      <filter dst_ip="136.213.39.10" dst_port="1398" src_ip="197.30.34.8" src_port="1863"/>
    </slice>
    <from sec="1089176508" usec="0"/>
    <to sec="1089177217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
4758[label="215.170.52.8;118pkt 118fpkt", shape=pentagon, color=darkviolet];
7344[label="215.170.52.8;119pkt 119fpkt", shape=invtriangle, color=brown];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.170.52.8:*, *:1027}[50.4202%]&lt;BR/&gt;{215.170.52.8:*, *:1026}[49.5798%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (25.3165%)&lt;BR/&gt; 1026: (24.6835%)&lt;BR/&gt; 2933: (0.843882%)&lt;BR/&gt; 1594: (0.843882%)&lt;BR/&gt; 1391: (0.843882%)&gt;];
}
4758--7344[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="215.170.52.8"/>
      <filter dst_port="1026" src_ip="215.170.52.8"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
4763[label="75.75.94.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7348[label="75.75.94.8;7pkt 7fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.75.94.8:80, 141.169.34.236:*}[57.1429%]&lt;BR/&gt;{75.75.94.8:80, 136.213.34.216:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49285: (7.69231%)&lt;BR/&gt; 49284: (7.69231%)&lt;BR/&gt; 2187: (7.69231%)&lt;BR/&gt; 2186: (7.69231%)&gt;];
}
4763--7348[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.34.236" src_ip="75.75.94.8" src_port="80"/>
      <filter dst_ip="136.213.34.216" src_ip="75.75.94.8" src_port="80"/>
    </slice>
    <from sec="1089177106" usec="0"/>
    <to sec="1089177183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
4769[label="141.169.131.8;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7350[label="141.169.131.8;51pkt 51fpkt", shape=invtriangle, color=brown];
8872[label="141.169.131.8;50pkt 50fpkt", shape=invhouse, color=bisque];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.131.8:*, 137.112.185.9:80}[96.0784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0132%)&lt;BR/&gt; 1772: (1.98675%)&lt;BR/&gt; 9898: (0.993377%)&lt;BR/&gt; 1863: (0.993377%)&lt;BR/&gt; 1780: (0.993377%)&gt;];
}
4769--7350[label="1;50pkt 50fpkt"];
4769--8872[label="1;50pkt 50fpkt"];
7350--8872[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="137.112.185.9" dst_port="80" src_ip="141.169.131.8"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
4771[label="141.169.166.8;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7352[label="141.169.166.8;19pkt 19fpkt", shape=invtriangle, color=brown];
8874[label="141.169.166.8;20pkt 20fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.166.8:*, 19.211.114.98:80}[40%]&lt;BR/&gt;{141.169.166.8:*, 197.30.195.5:80}[30%]&lt;BR/&gt;{141.169.166.8:*, 197.30.133.39:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4576%)&lt;BR/&gt; 1069: (2.54237%)&lt;BR/&gt; 1068: (2.54237%)&lt;BR/&gt; 1067: (2.54237%)&lt;BR/&gt; 1066: (2.54237%)&gt;];
}
4771--7352[label="1;19pkt 19fpkt"];
4771--8874[label="1;20pkt 20fpkt"];
7352--8874[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.133.39" src_ip="141.169.166.8"/>
      <filter dst_ip="19.211.114.98" dst_port="80" src_ip="141.169.166.8"/>
      <filter dst_ip="197.30.195.5" dst_port="80" src_ip="141.169.166.8"/>
    </slice>
    <from sec="1089177245" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
4772[label="208.160.184.8;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7353[label="208.160.184.8;253pkt 253fpkt", shape=invtriangle, color=brown];
8875[label="208.160.184.8;253pkt 253fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.160.184.8:56286, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56286: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4772--7353[label="1;253pkt 253fpkt"];
4772--8875[label="1;253pkt 253fpkt"];
7353--8875[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.160.184.8" src_port="56286"/>
    </slice>
    <from sec="1089177075" usec="0"/>
    <to sec="1089177091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
4780[label="16.170.8.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7357[label="16.170.8.9;3pkt 3fpkt", shape=invtriangle, color=brown];
8879[label="16.170.8.9;3pkt 3fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.170.8.9:30928, 173.19.36.22:25}[33.3333%]&lt;BR/&gt;{16.170.8.9:29939, 173.19.12.128:25}[33.3333%]&lt;BR/&gt;{16.170.8.9:33308, 173.19.2.205:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 30928: (18.75%)&lt;BR/&gt; 29939: (18.75%)&lt;BR/&gt; 33308: (12.5%)&gt;];
}
4780--7357[label="1;2pkt 2fpkt"];
4780--8879[label="1;2pkt 2fpkt"];
7357--8879[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.2.205" dst_port="25" src_ip="16.170.8.9" src_port="33308"/>
      <filter dst_ip="173.19.12.128" dst_port="25" src_ip="16.170.8.9" src_port="29939"/>
      <filter dst_ip="173.19.36.22" dst_port="25" src_ip="16.170.8.9" src_port="30928"/>
    </slice>
    <from sec="1089176967" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
4784[label="214.7.121.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7359[label="214.7.121.9;1pkt 1fpkt", shape=invtriangle, color=brown];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.121.9:44193, 173.19.85.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44193: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4784--7359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.85.65" dst_port="80" src_ip="214.7.121.9" src_port="44193"/>
    </slice>
    <from sec="1089176435" usec="0"/>
    <to sec="1089176500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
4789[label="137.112.185.9;49pkt 49fpkt", shape=pentagon, color=darkviolet];
7362[label="137.112.185.9;50pkt 50fpkt", shape=invtriangle, color=brown];
8882[label="137.112.185.9;49pkt 49fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.112.185.9:80, 141.169.131.8:*}[98%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3540: (1.01351%)&lt;BR/&gt; 1780: (1.01351%)&lt;BR/&gt; 1778: (1.01351%)&lt;BR/&gt; 1777: (1.01351%)&gt;];
}
4789--7362[label="1;49pkt 49fpkt"];
4789--8882[label="1;49pkt 49fpkt"];
7362--8882[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.131.8" src_ip="137.112.185.9" src_port="80"/>
    </slice>
    <from sec="1089177223" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
4796[label="136.213.54.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7366[label="136.213.54.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.54.10:3299, 220.182.148.0:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3299: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4796--7366[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.182.148.0" dst_port="80" src_ip="136.213.54.10" src_port="3299"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
4807[label="3.239.232.10;141pkt 141fpkt", shape=pentagon, color=darkviolet];
7370[label="3.239.232.10;141pkt 141fpkt", shape=invtriangle, color=brown];
8887[label="3.239.232.10;142pkt 142fpkt", shape=invhouse, color=bisque];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.239.232.10:*, *:5554}[56.338%]&lt;BR/&gt;{3.239.232.10:*, *:9898}[43.662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (28.066%)&lt;BR/&gt; 9898: (21.934%)&lt;BR/&gt; 2827: (0.353774%)&lt;BR/&gt; 2823: (0.353774%)&lt;BR/&gt; 2810: (0.353774%)&gt;];
}
4807--7370[label="1;141pkt 141fpkt"];
4807--8887[label="1;141pkt 141fpkt"];
7370--8887[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="3.239.232.10"/>
      <filter dst_port="9898" src_ip="3.239.232.10"/>
    </slice>
    <from sec="1089176830" usec="0"/>
    <to sec="1089176832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
2096[label="169.51.193.251;d;153pkt 153fpkt", shape=diamond, color=yellow];
2644[label="208.173.126.45;s;23pkt 23fpkt", shape=diamond, color=yellow];
4809[label="197.30.34.11;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4936[label="197.30.34.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5228[label="208.173.126.45;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6678[label="218.46.146.187;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7372[label="197.30.34.11;5pkt 5fpkt", shape=invtriangle, color=brown];
7439[label="197.30.34.22;1pkt 1fpkt", shape=invtriangle, color=brown];
7613[label="208.173.126.45;22pkt 22fpkt", shape=invtriangle, color=brown];
8889[label="197.30.34.11;6pkt 6fpkt", shape=invhouse, color=bisque];
8922[label="197.30.34.22;2pkt 2fpkt", shape=invhouse, color=bisque];
9016[label="208.173.126.45;23pkt 23fpkt", shape=invhouse, color=bisque];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.51.193.251:54396}[74.5342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54396: (23.1343%)&lt;BR/&gt; 44312: (20.1493%)&lt;BR/&gt; 1863: (4.29104%)&lt;BR/&gt; 37314: (1.6791%)&lt;BR/&gt; 3743: (0.932836%)&gt;];
}
2096--2644[label="0.913043;21pkt 21fpkt"];
2096--4618[label="0.00653595;1pkt 1fpkt"];
2096--4809[label="0.2;1pkt 1fpkt"];
2096--5228[label="0.913043;21pkt 21fpkt"];
2096--6678[label="1;4pkt 4fpkt"];
2096--7372[label="0.2;1pkt 1fpkt"];
2096--7613[label="0.954545;21pkt 21fpkt"];
2096--8889[label="0.166667;1pkt 1fpkt"];
2096--8922[label="0.5;1pkt 1fpkt"];
2096--9016[label="0.913043;21pkt 21fpkt"];
2644--5228[label="1;23pkt 23fpkt"];
2644--7613[label="1;22pkt 22fpkt"];
2644--9016[label="1;23pkt 23fpkt"];
4809--7372[label="1;5pkt 5fpkt"];
4809--8889[label="1;5pkt 5fpkt"];
4936--7439[label="1;1pkt 1fpkt"];
4936--8922[label="1;1pkt 1fpkt"];
5228--7613[label="1;22pkt 22fpkt"];
5228--9016[label="1;23pkt 23fpkt"];
7372--8889[label="1;5pkt 5fpkt"];
7439--8922[label="1;1pkt 1fpkt"];
7613--9016[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.193.251" dst_port="54396"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.70.11"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.42.83.11"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
4821[label="169.51.203.11;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7379[label="169.51.203.11;24pkt 24fpkt", shape=invtriangle, color=brown];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.203.11:*, 21.52.45.166:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.4167%)&lt;BR/&gt; 110: (6.25%)&lt;BR/&gt; 81: (6.25%)&lt;BR/&gt; 4333: (2.08333%)&lt;BR/&gt; 4332: (2.08333%)&gt;];
}
4821--7379[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="21.52.45.166" dst_port="80" src_ip="169.51.203.11"/>
    </slice>
    <from sec="1089176442" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.10.5.12"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.9.212.12"/>
    </slice>
    <from sec="1089177131" usec="0"/>
    <to sec="1089177159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
4832[label="73.5.223.12;226pkt 226fpkt", shape=pentagon, color=darkviolet];
7388[label="73.5.223.12;226pkt 226fpkt", shape=invtriangle, color=brown];
8898[label="73.5.223.12;227pkt 227fpkt", shape=invhouse, color=bisque];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.5.223.12:*, *:1027}[51.1013%]&lt;BR/&gt;{73.5.223.12:*, *:1026}[48.8987%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (25.6259%)&lt;BR/&gt; 1026: (24.3741%)&lt;BR/&gt; 4207: (0.441826%)&lt;BR/&gt; 4103: (0.441826%)&lt;BR/&gt; 3802: (0.441826%)&gt;];
}
4832--7388[label="1;226pkt 226fpkt"];
4832--8898[label="1;226pkt 226fpkt"];
7388--8898[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="73.5.223.12"/>
      <filter dst_port="1026" src_ip="73.5.223.12"/>
    </slice>
    <from sec="1089177020" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
4834[label="141.169.36.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7389[label="141.169.36.13;2pkt 2fpkt", shape=invtriangle, color=brown];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.36.13:0, 202.48.108.43:0}[50%]&lt;BR/&gt;{141.169.36.13:0, 194.134.217.255:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4834--7389[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.134.217.255" src_ip="141.169.36.13"/>
      <filter dst_ip="202.48.108.43" src_ip="141.169.36.13"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
2138[label="215.213.2.14;s;227pkt 227fpkt", shape=diamond, color=yellow];
4847[label="215.213.2.14;227pkt 227fpkt", shape=pentagon, color=darkviolet];
7398[label="215.213.2.14;228pkt 228fpkt", shape=invtriangle, color=brown];
8905[label="215.213.2.14;228pkt 228fpkt", shape=invhouse, color=bisque];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.213.2.14:*, *:445}[50.4386%]&lt;BR/&gt;{215.213.2.14:*, *:139}[49.5614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1648%)&lt;BR/&gt; 139: (24.8352%)&lt;BR/&gt; 4366: (0.21978%)&lt;BR/&gt; 4096: (0.21978%)&lt;BR/&gt; 4095: (0.21978%)&gt;];
}
2138--4847[label="0.995595;226pkt 226fpkt"];
2138--7398[label="1;227pkt 227fpkt"];
2138--8905[label="1;227pkt 227fpkt"];
4847--7398[label="1;227pkt 227fpkt"];
4847--8905[label="1;227pkt 227fpkt"];
7398--8905[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="215.213.2.14"/>
      <filter dst_port="139" src_ip="215.213.2.14"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
4859[label="195.46.97.15;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7405[label="195.46.97.15;31pkt 31fpkt", shape=invtriangle, color=brown];
8908[label="195.46.97.15;31pkt 31fpkt", shape=invhouse, color=bisque];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.97.15:22, 172.28.3.248:*}[48.3871%]&lt;BR/&gt;{195.46.97.15:22, 172.28.1.217:*}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 10023: (4.83871%)&lt;BR/&gt; 10022: (4.83871%)&lt;BR/&gt; 10021: (4.83871%)&lt;BR/&gt; 10026: (3.22581%)&gt;];
}
4859--7405[label="1;31pkt 31fpkt"];
4859--8908[label="1;31pkt 31fpkt"];
7405--8908[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="172.28.3.248" src_ip="195.46.97.15" src_port="22"/>
      <filter dst_ip="172.28.1.217" src_ip="195.46.97.15" src_port="22"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
4885[label="169.51.76.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7415[label="169.51.76.18;3pkt 3fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.76.18:1844, 208.106.182.148:80}[33.3333%]&lt;BR/&gt;{169.51.76.18:1845, 208.106.182.149:80}[33.3333%]&lt;BR/&gt;{169.51.76.18:1846, 208.106.182.149:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1846: (16.6667%)&lt;BR/&gt; 1845: (16.6667%)&lt;BR/&gt; 1844: (16.6667%)&gt;];
}
4885--7415[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.106.182.149" dst_port="80" src_ip="169.51.76.18" src_port="1846"/>
      <filter dst_ip="208.106.182.149" dst_port="80" src_ip="169.51.76.18" src_port="1845"/>
      <filter dst_ip="208.106.182.148" dst_port="80" src_ip="169.51.76.18" src_port="1844"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
1351[label="194.60.153.66;d;379pkt 379fpkt", shape=diamond, color=yellow];
3365[label="194.60.150.38;d;217pkt 217fpkt", shape=diamond, color=yellow];
4707[label="21.0.80.5;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4887[label="212.239.111.18;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4928[label="223.186.133.21;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5357[label="16.106.184.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5609[label="16.157.10.78;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5643[label="21.0.98.81;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5674[label="16.130.95.83;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5975[label="18.205.234.114;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6196[label="21.90.82.139;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6295[label="87.153.161.149;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6401[label="19.22.129.159;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6513[label="16.130.90.171;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6538[label="75.59.142.173;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6809[label="19.22.155.201;57pkt 57fpkt", shape=pentagon, color=darkviolet];
7316[label="21.0.80.5;15pkt 15fpkt", shape=invtriangle, color=brown];
7417[label="212.239.111.18;21pkt 21fpkt", shape=invtriangle, color=brown];
7704[label="16.106.184.56;4pkt 4fpkt", shape=invtriangle, color=brown];
7852[label="16.157.10.78;6pkt 6fpkt", shape=invtriangle, color=brown];
7870[label="21.0.98.81;17pkt 17fpkt", shape=invtriangle, color=brown];
7891[label="16.130.95.83;54pkt 54fpkt", shape=invtriangle, color=brown];
8214[label="21.90.82.139;5pkt 5fpkt", shape=invtriangle, color=brown];
8392[label="16.130.90.171;2pkt 2fpkt", shape=invtriangle, color=brown];
8563[label="19.22.155.201;57pkt 57fpkt", shape=invtriangle, color=brown];
8913[label="212.239.111.18;22pkt 22fpkt", shape=invhouse, color=bisque];
9150[label="16.130.95.83;54pkt 54fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 194.60.153.66:*}[58.8785%]&lt;BR/&gt;{*:53, 194.60.150.38:1846}[27.1028%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.5434%)&lt;BR/&gt; 53: (9.68037%)&lt;BR/&gt; 1846: (8.21918%)&lt;BR/&gt; 0: (1.55251%)&lt;BR/&gt; 1794: (0.228311%)&gt;];
}
1351--3007[label="0.0689655;6pkt 6fpkt"];
1351--4707[label="1;16pkt 16fpkt"];
1351--4887[label="1;21pkt 21fpkt"];
1351--4928[label="0.0952381;4pkt 4fpkt"];
1351--5357[label="0.75;3pkt 3fpkt"];
1351--5609[label="0.6;3pkt 3fpkt"];
1351--5643[label="1;17pkt 17fpkt"];
1351--5674[label="1;55pkt 55fpkt"];
1351--5975[label="0.4;4pkt 4fpkt"];
1351--6196[label="1;5pkt 5fpkt"];
1351--6295[label="0.666667;2pkt 2fpkt"];
1351--6365[label="0.0847458;15pkt 15fpkt"];
1351--6401[label="1;2pkt 2fpkt"];
1351--6513[label="0.666667;2pkt 2fpkt"];
1351--6538[label="1;2pkt 2fpkt"];
1351--6632[label="0.0416667;2pkt 2fpkt"];
1351--6687[label="0.428571;12pkt 12fpkt"];
1351--6809[label="1;57pkt 57fpkt"];
1351--7316[label="1;15pkt 15fpkt"];
1351--7417[label="1;21pkt 21fpkt"];
1351--7704[label="0.75;3pkt 3fpkt"];
1351--7852[label="0.666667;4pkt 4fpkt"];
1351--7870[label="1;17pkt 17fpkt"];
1351--7891[label="1;54pkt 54fpkt"];
1351--8214[label="1;5pkt 5fpkt"];
1351--8392[label="0.5;1pkt 1fpkt"];
1351--8494[label="0.428571;12pkt 12fpkt"];
1351--8563[label="1;57pkt 57fpkt"];
1351--8913[label="1;22pkt 22fpkt"];
1351--9150[label="1;54pkt 54fpkt"];
3365--4393[label="0.0172414;1pkt 1fpkt"];
3365--4408[label="0.0196078;1pkt 1fpkt"];
3365--4415[label="0.0208333;1pkt 1fpkt"];
3365--4597[label="0.0196078;1pkt 1fpkt"];
3365--4617[label="0.0599078;13pkt 13fpkt"];
3365--4627[label="0.00460829;1pkt 1fpkt"];
3365--4634[label="0.00460829;1pkt 1fpkt"];
3365--4790[label="0.025;1pkt 1fpkt"];
3365--4838[label="0.0204082;1pkt 1fpkt"];
3365--4858[label="0.0263158;1pkt 1fpkt"];
3365--5004[label="0.027027;1pkt 1fpkt"];
3365--5098[label="0.0185185;1pkt 1fpkt"];
3365--5357[label="0.25;1pkt 1fpkt"];
3365--5566[label="0.015873;1pkt 1fpkt"];
3365--5697[label="0.0188679;1pkt 1fpkt"];
3365--5798[label="0.0149254;1pkt 1fpkt"];
3365--6190[label="0.05;1pkt 1fpkt"];
3365--6295[label="0.333333;1pkt 1fpkt"];
3365--6473[label="0.0322581;1pkt 1fpkt"];
3365--6513[label="0.333333;1pkt 1fpkt"];
3365--6927[label="0.025641;1pkt 1fpkt"];
3365--7100[label="0.012987;1pkt 1fpkt"];
3365--7363[label="0.0243902;1pkt 1fpkt"];
3365--7392[label="0.0204082;1pkt 1fpkt"];
3365--7404[label="0.027027;1pkt 1fpkt"];
3365--7534[label="0.0181818;1pkt 1fpkt"];
3365--7704[label="0.25;1pkt 1fpkt"];
3365--8369[label="0.0333333;1pkt 1fpkt"];
3365--8392[label="0.5;1pkt 1fpkt"];
3365--8633[label="0.0263158;1pkt 1fpkt"];
3365--8742[label="0.012987;1pkt 1fpkt"];
3365--8901[label="0.02;1pkt 1fpkt"];
3365--9319[label="0.05;1pkt 1fpkt"];
3365--9587[label="0.0131579;1pkt 1fpkt"];
4707--7316[label="1;15pkt 15fpkt"];
4887--7417[label="1;21pkt 21fpkt"];
4887--8913[label="1;21pkt 21fpkt"];
5357--7704[label="1;4pkt 4fpkt"];
5609--7852[label="1;5pkt 5fpkt"];
5643--7870[label="1;17pkt 17fpkt"];
5674--7891[label="1;54pkt 54fpkt"];
5674--9150[label="1;54pkt 54fpkt"];
6196--8214[label="1;5pkt 5fpkt"];
6513--8392[label="1;2pkt 2fpkt"];
6809--8563[label="1;57pkt 57fpkt"];
7417--8913[label="1;21pkt 21fpkt"];
7891--9150[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.153.66" src_port="80"/>
      <filter dst_ip="194.60.150.38" dst_port="1846" src_port="53"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
4909[label="18.210.90.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7426[label="18.210.90.20;1pkt 1fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.210.90.20:80, 194.54.45.50:1361}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1361: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4909--7426[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.45.50" dst_port="1361" src_ip="18.210.90.20" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
4924[label="173.19.98.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7434[label="173.19.98.21;1pkt 1fpkt", shape=invtriangle, color=brown];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.98.21:80, 195.72.161.197:33752}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33752: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4924--7434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.72.161.197" dst_port="33752" src_ip="173.19.98.21" src_port="80"/>
    </slice>
    <from sec="1089176581" usec="0"/>
    <to sec="1089176770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
4929[label="141.86.134.21;43pkt 43fpkt", shape=pentagon, color=darkviolet];
7436[label="141.86.134.21;42pkt 42fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.86.134.21:*, *:2745}[30.2326%]&lt;BR/&gt;{141.86.134.21:*, *:1025}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (14.7059%)&lt;BR/&gt; 1025: (11.7647%)&lt;BR/&gt; 6129: (8.23529%)&lt;BR/&gt; 3127: (8.23529%)&lt;BR/&gt; 80: (7.05882%)&gt;];
}
4929--7436[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="141.86.134.21"/>
      <filter dst_port="1025" src_ip="141.86.134.21"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
4939[label="136.213.38.22;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7440[label="136.213.38.22;5pkt 5fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.38.22:3085, 197.30.34.11:1863}[20%]&lt;BR/&gt;{136.213.38.22:3077, 197.30.34.16:1863}[20%]&lt;BR/&gt;{136.213.38.22:3080, 197.30.34.17:1863}[20%]&lt;BR/&gt;{136.213.38.22:3061, 197.30.39.22:1863}[20%]&lt;BR/&gt;{136.213.38.22:3076, 197.30.34.98:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3085: (11.1111%)&lt;BR/&gt; 3080: (11.1111%)&lt;BR/&gt; 3077: (11.1111%)&lt;BR/&gt; 3076: (11.1111%)&gt;];
}
4939--7440[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.98" dst_port="1863" src_ip="136.213.38.22" src_port="3076"/>
      <filter dst_ip="197.30.39.22" dst_port="1863" src_ip="136.213.38.22" src_port="3061"/>
      <filter dst_ip="197.30.34.17" dst_port="1863" src_ip="136.213.38.22" src_port="3080"/>
      <filter dst_ip="197.30.34.16" dst_port="1863" src_ip="136.213.38.22" src_port="3077"/>
      <filter dst_ip="197.30.34.11" dst_port="1863" src_ip="136.213.38.22" src_port="3085"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.138.52.23"/>
    </slice>
    <from sec="1089176666" usec="0"/>
    <to sec="1089176669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
4953[label="214.170.161.23;244pkt 244fpkt", shape=pentagon, color=darkviolet];
7448[label="214.170.161.23;245pkt 245fpkt", shape=invtriangle, color=brown];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.170.161.23:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4953--7448[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.170.161.23" src_port="1025"/>
    </slice>
    <from sec="1089176599" usec="0"/>
    <to sec="1089176639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
4955[label="194.54.16.24;82pkt 82fpkt", shape=pentagon, color=darkviolet];
7449[label="194.54.16.24;82pkt 82fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.54.16.24:56414, 200.225.63.97:*}[32.9268%]&lt;BR/&gt;{194.54.16.24:56442, 200.225.63.102:*}[31.7073%]&lt;BR/&gt;{194.54.16.24:49342, 200.225.63.102:*}[30.4878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56414: (16.4634%)&lt;BR/&gt; 56442: (15.8537%)&lt;BR/&gt; 49342: (15.2439%)&lt;BR/&gt; 33464: (1.82927%)&lt;BR/&gt; 33463: (1.82927%)&gt;];
}
4955--7449[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="200.225.63.102" src_ip="194.54.16.24" src_port="56442"/>
      <filter dst_ip="200.225.63.102" src_ip="194.54.16.24" src_port="49342"/>
      <filter dst_ip="200.225.63.97" src_ip="194.54.16.24" src_port="56414"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
4963[label="21.110.111.24;155pkt 155fpkt", shape=pentagon, color=darkviolet];
7457[label="21.110.111.24;156pkt 156fpkt", shape=invtriangle, color=brown];
8932[label="21.110.111.24;156pkt 156fpkt", shape=invhouse, color=bisque];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.110.111.24:3279, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3279: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4963--7457[label="1;155pkt 155fpkt"];
4963--8932[label="1;155pkt 155fpkt"];
7457--8932[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="21.110.111.24" src_port="3279"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
4969[label="215.168.165.24;103pkt 103fpkt", shape=pentagon, color=darkviolet];
7460[label="215.168.165.24;103pkt 103fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.168.165.24:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 61981: (0.485437%)&lt;BR/&gt; 58755: (0.485437%)&lt;BR/&gt; 57630: (0.485437%)&lt;BR/&gt; 56437: (0.485437%)&gt;];
}
4969--7460[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="215.168.165.24" src_port="7000"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
4975[label="197.30.34.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7465[label="197.30.34.25;4pkt 4fpkt", shape=invtriangle, color=brown];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.25:1863, 136.213.34.89:3293}[25%]&lt;BR/&gt;{197.30.34.25:1863, 136.213.36.104:3077}[25%]&lt;BR/&gt;{197.30.34.25:1863, 136.213.32.38:3076}[25%]&lt;BR/&gt;{197.30.34.25:1863, 136.213.32.38:3077}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3077: (21.4286%)&lt;BR/&gt; 3293: (14.2857%)&lt;BR/&gt; 3076: (14.2857%)&gt;];
}
4975--7465[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.32.38" dst_port="3077" src_ip="197.30.34.25" src_port="1863"/>
      <filter dst_ip="136.213.32.38" dst_port="3076" src_ip="197.30.34.25" src_port="1863"/>
      <filter dst_ip="136.213.36.104" dst_port="3077" src_ip="197.30.34.25" src_port="1863"/>
      <filter dst_ip="136.213.34.89" dst_port="3293" src_ip="197.30.34.25" src_port="1863"/>
    </slice>
    <from sec="1089176912" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
4984[label="73.219.190.25;75pkt 75fpkt", shape=pentagon, color=darkviolet];
7471[label="73.219.190.25;76pkt 76fpkt", shape=invtriangle, color=brown];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.219.190.25:*, *:1080}[50%]&lt;BR/&gt;{73.219.190.25:*, *:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.1656%)&lt;BR/&gt; 3128: (24.8344%)&lt;BR/&gt; 1085: (1.3245%)&lt;BR/&gt; 4958: (0.662252%)&lt;BR/&gt; 4893: (0.662252%)&gt;];
}
4984--7471[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="73.219.190.25"/>
      <filter dst_port="1080" src_ip="73.219.190.25"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
4996[label="149.99.203.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7477[label="149.99.203.26;3pkt 3fpkt", shape=invtriangle, color=brown];
8943[label="149.99.203.26;3pkt 3fpkt", shape=invhouse, color=bisque];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.203.26:51621, 212.82.160.10:80}[33.3333%]&lt;BR/&gt;{149.99.203.26:51622, 212.82.161.17:20040}[33.3333%]&lt;BR/&gt;{149.99.203.26:51623, 212.82.161.17:20040}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20040: (31.25%)&lt;BR/&gt; 51623: (18.75%)&lt;BR/&gt; 51621: (18.75%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 51622: (12.5%)&gt;];
}
4996--7477[label="1;2pkt 2fpkt"];
4996--8943[label="1;2pkt 2fpkt"];
7477--8943[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.82.161.17" dst_port="20040" src_ip="149.99.203.26" src_port="51623"/>
      <filter dst_ip="212.82.161.17" dst_port="20040" src_ip="149.99.203.26" src_port="51622"/>
      <filter dst_ip="212.82.160.10" dst_port="80" src_ip="149.99.203.26" src_port="51621"/>
    </slice>
    <from sec="1089177196" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
4999[label="19.48.14.27;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7480[label="19.48.14.27;18pkt 18fpkt", shape=invtriangle, color=brown];
8944[label="19.48.14.27;19pkt 19fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.48.14.27:80, 194.60.153.66:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1688: (2.72727%)&lt;BR/&gt; 1687: (2.72727%)&lt;BR/&gt; 1686: (2.72727%)&lt;BR/&gt; 1685: (2.72727%)&gt;];
}
4999--7480[label="1;18pkt 18fpkt"];
4999--8944[label="1;18pkt 18fpkt"];
7480--8944[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.153.66" src_ip="19.48.14.27" src_port="80"/>
    </slice>
    <from sec="1089176524" usec="0"/>
    <to sec="1089176530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
5000[label="197.30.34.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7481[label="197.30.34.27;3pkt 3fpkt", shape=invtriangle, color=brown];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.27:1863, 136.213.38.65:4398}[33.3333%]&lt;BR/&gt;{197.30.34.27:1863, 141.169.220.120:1515}[33.3333%]&lt;BR/&gt;{197.30.34.27:1863, 169.51.87.177:1535}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4398: (16.6667%)&lt;BR/&gt; 1535: (16.6667%)&lt;BR/&gt; 1515: (16.6667%)&gt;];
}
5000--7481[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.87.177" dst_port="1535" src_ip="197.30.34.27" src_port="1863"/>
      <filter dst_ip="141.169.220.120" dst_port="1515" src_ip="197.30.34.27" src_port="1863"/>
      <filter dst_ip="136.213.38.65" dst_port="4398" src_ip="197.30.34.27" src_port="1863"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
5018[label="194.54.16.29;73pkt 73fpkt", shape=pentagon, color=darkviolet];
7489[label="194.54.16.29;73pkt 73fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.54.16.29:42735, 200.225.63.102:*}[36.9863%]&lt;BR/&gt;{194.54.16.29:64651, 200.225.63.97:*}[36.9863%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64651: (18.4932%)&lt;BR/&gt; 42735: (18.4932%)&lt;BR/&gt; 33434: (5.47945%)&lt;BR/&gt; 11234: (5.47945%)&lt;BR/&gt; 42984: (4.79452%)&gt;];
}
5018--7489[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="200.225.63.97" src_ip="194.54.16.29" src_port="64651"/>
      <filter dst_ip="200.225.63.102" src_ip="194.54.16.29" src_port="42735"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
5019[label="197.30.34.29;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7490[label="197.30.34.29;5pkt 5fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.29:1863, 136.213.38.26:1848}[20%]&lt;BR/&gt;{197.30.34.29:1863, 136.213.32.38:3061}[20%]&lt;BR/&gt;{197.30.34.29:1863, 136.213.33.71:1051}[20%]&lt;BR/&gt;{197.30.34.29:1863, 141.169.141.100:1497}[20%]&lt;BR/&gt;{197.30.34.29:1863, 136.213.34.134:1054}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3061: (10%)&lt;BR/&gt; 1848: (10%)&lt;BR/&gt; 1497: (10%)&lt;BR/&gt; 1054: (10%)&gt;];
}
5019--7490[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.34.134" dst_port="1054" src_ip="197.30.34.29" src_port="1863"/>
      <filter dst_ip="141.169.141.100" dst_port="1497" src_ip="197.30.34.29" src_port="1863"/>
      <filter dst_ip="136.213.33.71" dst_port="1051" src_ip="197.30.34.29" src_port="1863"/>
      <filter dst_ip="136.213.32.38" dst_port="3061" src_ip="197.30.34.29" src_port="1863"/>
      <filter dst_ip="136.213.38.26" dst_port="1848" src_ip="197.30.34.29" src_port="1863"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
5047[label="169.51.80.32;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7507[label="169.51.80.32;19pkt 19fpkt", shape=invtriangle, color=brown];
8959[label="169.51.80.32;19pkt 19fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.80.32:*, 222.140.144.36:80}[52.6316%]&lt;BR/&gt;{169.51.80.32:*, 220.182.148.0:80}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 21: (5.26316%)&lt;BR/&gt; 3065: (2.63158%)&lt;BR/&gt; 3064: (2.63158%)&lt;BR/&gt; 3061: (2.63158%)&gt;];
}
5047--7507[label="1;19pkt 19fpkt"];
5047--8959[label="1;19pkt 19fpkt"];
7507--8959[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="222.140.144.36" dst_port="80" src_ip="169.51.80.32"/>
      <filter dst_ip="220.182.148.0" dst_port="80" src_ip="169.51.80.32"/>
    </slice>
    <from sec="1089176784" usec="0"/>
    <to sec="1089177267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
5058[label="194.54.16.33;60pkt 60fpkt", shape=pentagon, color=darkviolet];
7511[label="194.54.16.33;60pkt 60fpkt", shape=invtriangle, color=brown];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.54.16.33:*, 112.2.51.72:2010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2010: (50%)&lt;BR/&gt; 4276: (0.833333%)&lt;BR/&gt; 4275: (0.833333%)&lt;BR/&gt; 4274: (0.833333%)&lt;BR/&gt; 4273: (0.833333%)&gt;];
}
5058--7511[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="112.2.51.72" dst_port="2010" src_ip="194.54.16.33"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
5069[label="141.169.159.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7518[label="141.169.159.33;2pkt 2fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.159.33:3923, 110.52.108.92:443}[50%]&lt;BR/&gt;{141.169.159.33:3922, 110.52.108.94:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3923: (33.3333%)&lt;BR/&gt; 443: (33.3333%)&lt;BR/&gt; 3922: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
5069--7518[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="110.52.108.94" dst_port="80" src_ip="141.169.159.33" src_port="3922"/>
      <filter dst_ip="110.52.108.92" dst_port="443" src_ip="141.169.159.33" src_port="3923"/>
    </slice>
    <from sec="1089177008" usec="0"/>
    <to sec="1089177021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
5083[label="219.219.133.34;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7526[label="219.219.133.34;7pkt 7fpkt", shape=invtriangle, color=brown];
8968[label="219.219.133.34;7pkt 7fpkt", shape=invhouse, color=bisque];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.219.133.34:80, 141.169.165.42:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4503: (7.5%)&lt;BR/&gt; 1452: (7.5%)&lt;BR/&gt; 1450: (7.5%)&lt;BR/&gt; 1449: (7.5%)&gt;];
}
5083--7526[label="1;6pkt 6fpkt"];
5083--8968[label="1;6pkt 6fpkt"];
7526--8968[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.165.42" src_ip="219.219.133.34" src_port="80"/>
    </slice>
    <from sec="1089176768" usec="0"/>
    <to sec="1089176891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
5086[label="149.99.213.34;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7528[label="149.99.213.34;28pkt 28fpkt", shape=invtriangle, color=brown];
8970[label="149.99.213.34;28pkt 28fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.213.34:*, 19.211.96.53:80}[50%]&lt;BR/&gt;{149.99.213.34:*, 19.211.64.217:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4996: (1.80723%)&lt;BR/&gt; 4994: (1.80723%)&lt;BR/&gt; 4992: (1.80723%)&lt;BR/&gt; 4990: (1.80723%)&gt;];
}
5086--7528[label="1;27pkt 27fpkt"];
5086--8970[label="1;27pkt 27fpkt"];
7528--8970[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="19.211.64.217" dst_port="80" src_ip="149.99.213.34"/>
      <filter dst_ip="19.211.96.53" dst_port="80" src_ip="149.99.213.34"/>
    </slice>
    <from sec="1089176460" usec="0"/>
    <to sec="1089177268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
5092[label="169.91.132.35;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7531[label="169.91.132.35;36pkt 36fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.91.132.35:53, *:*}[59.4595%]&lt;BR/&gt;{169.91.132.35:1024, *:53}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.8356%)&lt;BR/&gt; 1024: (12.3288%)&lt;BR/&gt; 25: (4.10959%)&lt;BR/&gt; 9253: (2.73973%)&lt;BR/&gt; 113: (2.73973%)&gt;];
}
5092--7531[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="169.91.132.35" src_port="53"/>
      <filter dst_port="53" src_ip="169.91.132.35" src_port="1024"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.81.135.35"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089176700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
5099[label="16.243.222.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7535[label="16.243.222.35;1pkt 1fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.243.222.35:80, 194.54.48.36:11139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11139: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5099--7535[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.48.36" dst_port="11139" src_ip="16.243.222.35" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.13.36"/>
    </slice>
    <from sec="1089176443" usec="0"/>
    <to sec="1089177245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
5105[label="2.162.68.36;108pkt 108fpkt", shape=pentagon, color=darkviolet];
7540[label="2.162.68.36;107pkt 107fpkt", shape=invtriangle, color=brown];
8976[label="2.162.68.36;108pkt 108fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.162.68.36:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4627: (0.464396%)&lt;BR/&gt; 4624: (0.464396%)&lt;BR/&gt; 4613: (0.464396%)&lt;BR/&gt; 4612: (0.464396%)&gt;];
}
5105--7540[label="1;107pkt 107fpkt"];
5105--8976[label="1;108pkt 108fpkt"];
7540--8976[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="2.162.68.36"/>
    </slice>
    <from sec="1089176410" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
5117[label="203.76.232.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7550[label="203.76.232.36;1pkt 1fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.76.232.36:6667, 173.19.102.63:1367}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1367: (50%)&gt;];
}
5117--7550[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.102.63" dst_port="1367" src_ip="203.76.232.36" src_port="6667"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
5133[label="220.87.42.38;187pkt 187fpkt", shape=pentagon, color=darkviolet];
7555[label="220.87.42.38;186pkt 186fpkt", shape=invtriangle, color=brown];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.87.42.38:1592, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1592: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5133--7555[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.87.42.38" src_port="1592"/>
    </slice>
    <from sec="1089176426" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
5149[label="220.202.155.39;61pkt 61fpkt", shape=pentagon, color=darkviolet];
7565[label="220.202.155.39;60pkt 60fpkt", shape=invtriangle, color=brown];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.202.155.39:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4971: (0.826446%)&lt;BR/&gt; 4667: (0.826446%)&lt;BR/&gt; 4579: (0.826446%)&lt;BR/&gt; 4525: (0.826446%)&gt;];
}
5149--7565[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="220.202.155.39"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089176952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
5157[label="192.162.20.40;110pkt 110fpkt", shape=pentagon, color=darkviolet];
7571[label="192.162.20.40;109pkt 109fpkt", shape=invtriangle, color=brown];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.162.20.40:*, *:5554}[50%]&lt;BR/&gt;{192.162.20.40:*, *:9898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.1142%)&lt;BR/&gt; 9898: (24.8858%)&lt;BR/&gt; 4252: (0.456621%)&lt;BR/&gt; 4250: (0.456621%)&lt;BR/&gt; 4248: (0.456621%)&gt;];
}
5157--7571[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="192.162.20.40"/>
      <filter dst_port="5554" src_ip="192.162.20.40"/>
    </slice>
    <from sec="1089176482" usec="0"/>
    <to sec="1089176485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
5158[label="197.30.34.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7572[label="197.30.34.40;3pkt 3fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.40:1863, 136.213.130.64:1364}[33.3333%]&lt;BR/&gt;{197.30.34.40:1863, 136.213.39.140:3070}[33.3333%]&lt;BR/&gt;{197.30.34.40:1863, 136.213.38.189:1144}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3070: (16.6667%)&lt;BR/&gt; 1364: (16.6667%)&lt;BR/&gt; 1144: (16.6667%)&gt;];
}
5158--7572[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.38.189" dst_port="1144" src_ip="197.30.34.40" src_port="1863"/>
      <filter dst_ip="136.213.39.140" dst_port="3070" src_ip="197.30.34.40" src_port="1863"/>
      <filter dst_ip="136.213.130.64" dst_port="1364" src_ip="197.30.34.40" src_port="1863"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
5162[label="195.46.100.40;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7574[label="195.46.100.40;22pkt 22fpkt", shape=invtriangle, color=brown];
8993[label="195.46.100.40;23pkt 23fpkt", shape=invhouse, color=bisque];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.100.40:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5162--7574[label="1;22pkt 22fpkt"];
5162--8993[label="1;23pkt 23fpkt"];
7574--8993[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="195.46.100.40"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
5166[label="141.169.212.40;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7576[label="141.169.212.40;40pkt 40fpkt", shape=invtriangle, color=brown];
8994[label="141.169.212.40;40pkt 40fpkt", shape=invhouse, color=bisque];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.212.40:*, 208.110.76.194:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49713: (1.25%)&lt;BR/&gt; 49711: (1.25%)&lt;BR/&gt; 49710: (1.25%)&lt;BR/&gt; 49709: (1.25%)&gt;];
}
5166--7576[label="1;40pkt 40fpkt"];
5166--8994[label="1;40pkt 40fpkt"];
7576--8994[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="208.110.76.194" dst_port="80" src_ip="141.169.212.40"/>
    </slice>
    <from sec="1089177235" usec="0"/>
    <to sec="1089177262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
5177[label="17.97.72.41;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7581[label="17.97.72.41;162pkt 162fpkt", shape=invtriangle, color=brown];
8996[label="17.97.72.41;161pkt 161fpkt", shape=invhouse, color=bisque];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.97.72.41:1049, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1049: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5177--7581[label="1;161pkt 161fpkt"];
5177--8996[label="1;161pkt 161fpkt"];
7581--8996[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.97.72.41" src_port="1049"/>
    </slice>
    <from sec="1089176865" usec="0"/>
    <to sec="1089176891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.30.34.42"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
5235[label="149.99.203.45;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7620[label="149.99.203.45;6pkt 6fpkt", shape=invtriangle, color=brown];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.203.45:*, 197.30.34.73:1863}[42.8571%]&lt;BR/&gt;{149.99.203.45:*, 199.139.159.102:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (30.7692%)&lt;BR/&gt; 80: (19.2308%)&lt;BR/&gt; 1350: (7.69231%)&lt;BR/&gt; 1349: (7.69231%)&lt;BR/&gt; 1322: (7.69231%)&gt;];
}
5235--7620[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.73" dst_port="1863" src_ip="149.99.203.45"/>
      <filter dst_ip="199.139.159.102" dst_port="80" src_ip="149.99.203.45"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
5236[label="173.19.15.46;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7621[label="173.19.15.46;12pkt 12fpkt", shape=invtriangle, color=brown];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.15.46:25, *:*}[61.5385%]&lt;BR/&gt;{173.19.15.46:0, *:0}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36%)&lt;BR/&gt; 0: (28%)&lt;BR/&gt; 44841: (4%)&lt;BR/&gt; 36625: (4%)&lt;BR/&gt; 34158: (4%)&gt;];
}
5236--7621[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="173.19.15.46" src_port="25"/>
      <filter src_ip="173.19.15.46"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
5238[label="197.30.38.46;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7622[label="197.30.38.46;4pkt 4fpkt", shape=invtriangle, color=brown];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.38.46:1863, 136.213.34.18:1056}[25%]&lt;BR/&gt;{197.30.38.46:1863, 149.99.242.97:1081}[25%]&lt;BR/&gt;{197.30.38.46:1863, 136.213.38.114:1535}[25%]&lt;BR/&gt;{197.30.38.46:1863, 169.91.132.141:3256}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3256: (12.5%)&lt;BR/&gt; 1535: (12.5%)&lt;BR/&gt; 1081: (12.5%)&lt;BR/&gt; 1056: (12.5%)&gt;];
}
5238--7622[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.91.132.141" dst_port="3256" src_ip="197.30.38.46" src_port="1863"/>
      <filter dst_ip="136.213.38.114" dst_port="1535" src_ip="197.30.38.46" src_port="1863"/>
      <filter dst_ip="149.99.242.97" dst_port="1081" src_ip="197.30.38.46" src_port="1863"/>
      <filter dst_ip="136.213.34.18" dst_port="1056" src_ip="197.30.38.46" src_port="1863"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
5239[label="149.99.81.46;36pkt 36fpkt", shape=pentagon, color=darkviolet];
7623[label="149.99.81.46;36pkt 36fpkt", shape=invtriangle, color=brown];
9021[label="149.99.81.46;37pkt 37fpkt", shape=invhouse, color=bisque];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.81.46:*, 142.118.3.27:80}[54.0541%]&lt;BR/&gt;{149.99.81.46:*, 201.213.182.11:80}[45.9459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49665: (1.37615%)&lt;BR/&gt; 49664: (1.37615%)&lt;BR/&gt; 49663: (1.37615%)&lt;BR/&gt; 49662: (1.37615%)&gt;];
}
5239--7623[label="1;36pkt 36fpkt"];
5239--9021[label="1;36pkt 36fpkt"];
7623--9021[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="142.118.3.27" dst_port="80" src_ip="149.99.81.46"/>
      <filter dst_ip="201.213.182.11" dst_port="80" src_ip="149.99.81.46"/>
    </slice>
    <from sec="1089176819" usec="0"/>
    <to sec="1089177143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.2.48"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.153.117.48"/>
    </slice>
    <from sec="1089176571" usec="0"/>
    <to sec="1089176783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
5261[label="141.169.200.48;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7640[label="141.169.200.48;21pkt 21fpkt", shape=invtriangle, color=brown];
9031[label="141.169.200.48;22pkt 22fpkt", shape=invhouse, color=bisque];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.200.48:*, 197.180.63.152:80}[36.3636%]&lt;BR/&gt;{141.169.200.48:*, 19.219.146.87:80}[27.2727%]&lt;BR/&gt;{141.169.200.48:*, 212.192.57.160:80}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6923%)&lt;BR/&gt; 49384: (2.30769%)&lt;BR/&gt; 49383: (2.30769%)&lt;BR/&gt; 49382: (2.30769%)&lt;BR/&gt; 49381: (2.30769%)&gt;];
}
5261--7640[label="1;21pkt 21fpkt"];
5261--9031[label="1;22pkt 22fpkt"];
7640--9031[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="197.180.63.152" dst_port="80" src_ip="141.169.200.48"/>
      <filter dst_ip="19.219.146.87" dst_port="80" src_ip="141.169.200.48"/>
      <filter dst_ip="212.192.57.160" dst_port="80" src_ip="141.169.200.48"/>
    </slice>
    <from sec="1089176811" usec="0"/>
    <to sec="1089176997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
5262[label="87.157.11.49;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7641[label="87.157.11.49;26pkt 26fpkt", shape=invtriangle, color=brown];
9032[label="87.157.11.49;27pkt 27fpkt", shape=invhouse, color=bisque];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.157.11.49:80, 141.169.204.64:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49834: (1.89873%)&lt;BR/&gt; 49833: (1.89873%)&lt;BR/&gt; 49832: (1.89873%)&lt;BR/&gt; 49831: (1.89873%)&gt;];
}
5262--7641[label="1;26pkt 26fpkt"];
5262--9032[label="1;26pkt 26fpkt"];
7641--9032[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.204.64" src_ip="87.157.11.49" src_port="80"/>
    </slice>
    <from sec="1089176690" usec="0"/>
    <to sec="1089176784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
5280[label="19.108.48.50;217pkt 217fpkt", shape=pentagon, color=darkviolet];
7649[label="19.108.48.50;217pkt 217fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.108.48.50:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5280--7649[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="19.108.48.50" src_port="1030"/>
    </slice>
    <from sec="1089176722" usec="0"/>
    <to sec="1089176756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
5282[label="19.211.96.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7650[label="19.211.96.50;1pkt 1fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.211.96.50:80, 141.169.165.210:2512}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2512: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5282--7650[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.165.210" dst_port="2512" src_ip="19.211.96.50" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
5289[label="141.169.212.50;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7657[label="141.169.212.50;12pkt 12fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.212.50:*, 222.48.50.124:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49849: (4%)&lt;BR/&gt; 49848: (4%)&lt;BR/&gt; 49847: (4%)&lt;BR/&gt; 49846: (4%)&gt;];
}
5289--7657[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="222.48.50.124" dst_port="443" src_ip="141.169.212.50"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
3037[label="222.248.37.216;d;5pkt 5fpkt", shape=diamond, color=yellow];
3040[label="169.51.68.53;s;22pkt 22fpkt", shape=diamond, color=yellow];
3274[label="19.102.234.72;d;17pkt 17fpkt", shape=diamond, color=yellow];
5318[label="169.51.68.53;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7674[label="169.51.68.53;23pkt 23fpkt", shape=invtriangle, color=brown];
9050[label="169.51.68.53;24pkt 24fpkt", shape=invhouse, color=bisque];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.68.53:*, 19.102.234.72:80}[70.8333%]&lt;BR/&gt;{169.51.68.53:*, 222.248.37.216:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51171: (2.17391%)&lt;BR/&gt; 51170: (2.17391%)&lt;BR/&gt; 51169: (2.17391%)&lt;BR/&gt; 51168: (2.17391%)&gt;];
}
3037--3040[label="1;5pkt 5fpkt"];
3037--5318[label="1;5pkt 5fpkt"];
3037--7674[label="1;5pkt 5fpkt"];
3037--9050[label="1;5pkt 5fpkt"];
3040--3274[label="1;17pkt 17fpkt"];
3040--4628[label="0.409091;9pkt 9fpkt"];
3040--4635[label="0.409091;9pkt 9fpkt"];
3040--5318[label="1;22pkt 22fpkt"];
3040--7674[label="0.954545;21pkt 21fpkt"];
3040--9050[label="1;22pkt 22fpkt"];
3274--4628[label="0.529412;9pkt 9fpkt"];
3274--4635[label="0.529412;9pkt 9fpkt"];
3274--5318[label="1;17pkt 17fpkt"];
3274--7674[label="0.941176;16pkt 16fpkt"];
3274--9050[label="1;17pkt 17fpkt"];
5318--7674[label="1;23pkt 23fpkt"];
5318--9050[label="1;24pkt 24fpkt"];
7674--9050[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="19.102.234.72" dst_port="80" src_ip="169.51.68.53"/>
      <filter dst_ip="222.248.37.216" dst_port="80" src_ip="169.51.68.53"/>
    </slice>
    <from sec="1089176974" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
5319[label="141.169.80.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7675[label="141.169.80.53;5pkt 5fpkt", shape=invtriangle, color=brown];
9051[label="141.169.80.53;6pkt 6fpkt", shape=invhouse, color=bisque];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.80.53:*, *:113}[50%]&lt;BR/&gt;{141.169.80.53:25, *:*}[50%]&lt;BR/&gt;{141.169.80.53:*, 18.81.244.2:*}[33.3333%]&lt;BR/&gt;{141.169.80.53:*, 18.210.91.162:*}[33.3333%]&lt;BR/&gt;{141.169.80.53:*, 201.7.169.251:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (26.4706%)&lt;BR/&gt; 25: (23.5294%)&lt;BR/&gt; 54203: (8.82353%)&lt;BR/&gt; 1935: (8.82353%)&lt;BR/&gt; 1279: (8.82353%)&gt;];
}
5319--7675[label="1;5pkt 5fpkt"];
5319--9051[label="1;6pkt 6fpkt"];
7675--9051[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.7.169.251" src_ip="141.169.80.53"/>
      <filter dst_ip="18.210.91.162" src_ip="141.169.80.53"/>
      <filter dst_ip="18.81.244.2" src_ip="141.169.80.53"/>
      <filter src_ip="141.169.80.53" src_port="25"/>
      <filter dst_port="113" src_ip="141.169.80.53"/>
    </slice>
    <from sec="1089176500" usec="0"/>
    <to sec="1089177214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
5321[label="18.140.124.53;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7677[label="18.140.124.53;2pkt 2fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.140.124.53:2174, 136.213.248.176:135}[50%]&lt;BR/&gt;{18.140.124.53:2162, 136.36.102.252:135}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2174: (25%)&lt;BR/&gt; 2162: (25%)&gt;];
}
5321--7677[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.36.102.252" dst_port="135" src_ip="18.140.124.53" src_port="2162"/>
      <filter dst_ip="136.213.248.176" dst_port="135" src_ip="18.140.124.53" src_port="2174"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
5327[label="16.106.213.53;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7681[label="16.106.213.53;16pkt 16fpkt", shape=invtriangle, color=brown];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.106.213.53:80, 194.60.153.66:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1628: (3.125%)&lt;BR/&gt; 1627: (3.125%)&lt;BR/&gt; 1626: (3.125%)&lt;BR/&gt; 1625: (3.125%)&gt;];
}
5327--7681[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.153.66" src_ip="16.106.213.53" src_port="80"/>
    </slice>
    <from sec="1089176482" usec="0"/>
    <to sec="1089176492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
5329[label="21.104.28.54;223pkt 223fpkt", shape=pentagon, color=darkviolet];
7683[label="21.104.28.54;223pkt 223fpkt", shape=invtriangle, color=brown];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.104.28.54:*, *:3127}[33.6323%]&lt;BR/&gt;{21.104.28.54:*, *:1080}[33.1839%]&lt;BR/&gt;{21.104.28.54:*, *:3128}[33.1839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.8161%)&lt;BR/&gt; 3128: (16.5919%)&lt;BR/&gt; 1080: (16.5919%)&lt;BR/&gt; 4824: (0.44843%)&lt;BR/&gt; 4356: (0.44843%)&gt;];
}
5329--7683[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="21.104.28.54"/>
      <filter dst_port="3128" src_ip="21.104.28.54"/>
      <filter dst_port="1080" src_ip="21.104.28.54"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.142.155.54"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
5344[label="220.117.225.55;104pkt 104fpkt", shape=pentagon, color=darkviolet];
7692[label="220.117.225.55;105pkt 105fpkt", shape=invtriangle, color=brown];
9058[label="220.117.225.55;105pkt 105fpkt", shape=invhouse, color=bisque];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.117.225.55:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61144: (0.477707%)&lt;BR/&gt; 55171: (0.477707%)&lt;BR/&gt; 54010: (0.477707%)&lt;BR/&gt; 52965: (0.477707%)&gt;];
}
5344--7692[label="1;104pkt 104fpkt"];
5344--9058[label="1;104pkt 104fpkt"];
7692--9058[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="220.117.225.55" src_port="80"/>
    </slice>
    <from sec="1089176610" usec="0"/>
    <to sec="1089177262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
1348[label="194.54.10.56;s;459pkt 459fpkt", shape=diamond, color=yellow];
1631[label="212.236.26.141;d;312pkt 312fpkt", shape=diamond, color=yellow];
2667[label="17.88.16.130;d;80pkt 80fpkt", shape=diamond, color=yellow];
3691[label="194.54.10.56;s;215pkt 215fpkt", shape=hexagon, color=black];
5345[label="194.54.10.56;460pkt 460fpkt", shape=pentagon, color=darkviolet];
7693[label="194.54.10.56;459pkt 459fpkt", shape=invtriangle, color=brown];
9059[label="194.54.10.56;459pkt 459fpkt", shape=invhouse, color=bisque];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.54.10.56:*, 212.236.26.141:80}[58.5216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2241: (0.12275%)&lt;BR/&gt; 2240: (0.12275%)&lt;BR/&gt; 2235: (0.12275%)&lt;BR/&gt; 2233: (0.12275%)&gt;];
}
1348--1631[label="0.913462;285pkt 285fpkt"];
1348--1664[label="0.00352113;1pkt 1fpkt"];
1348--2667[label="1;80pkt 80fpkt"];
1348--2926[label="0.117647;2pkt 2fpkt"];
1348--3691[label="1;215pkt 215fpkt"];
1348--4619[label="0.104575;48pkt 48fpkt"];
1348--4623[label="0.0893246;41pkt 41fpkt"];
1348--4631[label="0.104575;48pkt 48fpkt"];
1348--5345[label="1;459pkt 459fpkt"];
1348--7693[label="0.997821;458pkt 458fpkt"];
1348--9059[label="0.997821;458pkt 458fpkt"];
1631--3516[label="0.0865385;27pkt 27fpkt"];
1631--3691[label="0.581395;125pkt 125fpkt"];
1631--4512[label="0.0865385;27pkt 27fpkt"];
1631--4619[label="0.0961538;30pkt 30fpkt"];
1631--4623[label="0.0769231;24pkt 24fpkt"];
1631--4628[label="0.0192308;6pkt 6fpkt"];
1631--4631[label="0.0961538;30pkt 30fpkt"];
1631--4635[label="0.0192308;6pkt 6fpkt"];
1631--5345[label="0.913462;285pkt 285fpkt"];
1631--6709[label="0.0865385;27pkt 27fpkt"];
1631--7693[label="0.913462;285pkt 285fpkt"];
1631--9059[label="0.913462;285pkt 285fpkt"];
2667--3691[label="0.55;44pkt 44fpkt"];
2667--4619[label="0.1;8pkt 8fpkt"];
2667--4623[label="0.1;8pkt 8fpkt"];
2667--4631[label="0.1;8pkt 8fpkt"];
2667--5345[label="1;80pkt 80fpkt"];
2667--7693[label="1;80pkt 80fpkt"];
2667--9059[label="1;80pkt 80fpkt"];
3691--4619[label="0.223256;48pkt 48fpkt"];
3691--4623[label="0.0930233;20pkt 20fpkt"];
3691--4631[label="0.223256;48pkt 48fpkt"];
3691--5345[label="1;215pkt 215fpkt"];
3691--7693[label="0.995349;214pkt 214fpkt"];
3691--9059[label="0.995349;214pkt 214fpkt"];
5345--7693[label="1;459pkt 459fpkt"];
5345--9059[label="1;459pkt 459fpkt"];
7693--9059[label="1;459pkt 459fpkt"];
</description>
    <slice>
      <filter dst_ip="212.236.26.141" dst_port="80" src_ip="194.54.10.56"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.178.83.57"/>
    </slice>
    <from sec="1089176416" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
5371[label="73.6.3.59;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7714[label="73.6.3.59;19pkt 19fpkt", shape=invtriangle, color=brown];
9067[label="73.6.3.59;19pkt 19fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.6.3.59:80, 149.99.85.138:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1196: (2.63158%)&lt;BR/&gt; 1195: (2.63158%)&lt;BR/&gt; 1193: (2.63158%)&lt;BR/&gt; 1192: (2.63158%)&gt;];
}
5371--7714[label="1;19pkt 19fpkt"];
5371--9067[label="1;19pkt 19fpkt"];
7714--9067[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="149.99.85.138" src_ip="73.6.3.59" src_port="80"/>
    </slice>
    <from sec="1089176869" usec="0"/>
    <to sec="1089177245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
5380[label="141.169.136.59;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7718[label="141.169.136.59;4pkt 4fpkt", shape=invtriangle, color=brown];
9069[label="141.169.136.59;3pkt 3fpkt", shape=invhouse, color=bisque];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.136.59:3024, 208.110.76.184:80}[25%]&lt;BR/&gt;{141.169.136.59:3025, 208.110.76.184:80}[25%]&lt;BR/&gt;{141.169.136.59:3026, 208.110.76.184:80}[25%]&lt;BR/&gt;{141.169.136.59:3027, 208.110.76.184:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3027: (13.6364%)&lt;BR/&gt; 3026: (13.6364%)&lt;BR/&gt; 3025: (13.6364%)&lt;BR/&gt; 3024: (9.09091%)&gt;];
}
5380--7718[label="1;4pkt 4fpkt"];
5380--9069[label="1;3pkt 3fpkt"];
7718--9069[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.110.76.184" dst_port="80" src_ip="141.169.136.59" src_port="3027"/>
      <filter dst_ip="208.110.76.184" dst_port="80" src_ip="141.169.136.59" src_port="3026"/>
      <filter dst_ip="208.110.76.184" dst_port="80" src_ip="141.169.136.59" src_port="3025"/>
      <filter dst_ip="208.110.76.184" dst_port="80" src_ip="141.169.136.59" src_port="3024"/>
    </slice>
    <from sec="1089177139" usec="0"/>
    <to sec="1089177157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
5383[label="214.161.205.59;89pkt 89fpkt", shape=pentagon, color=darkviolet];
7720[label="214.161.205.59;88pkt 88fpkt", shape=invtriangle, color=brown];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.205.59:*, *:9898}[60.6742%]&lt;BR/&gt;{214.161.205.59:*, *:5554}[39.3258%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (30.226%)&lt;BR/&gt; 5554: (19.774%)&lt;BR/&gt; 4011: (0.564972%)&lt;BR/&gt; 4009: (0.564972%)&lt;BR/&gt; 4007: (0.564972%)&gt;];
}
5383--7720[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.161.205.59"/>
      <filter dst_port="5554" src_ip="214.161.205.59"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
5408[label="201.78.97.62;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7735[label="201.78.97.62;3pkt 3fpkt", shape=invtriangle, color=brown];
9078[label="201.78.97.62;3pkt 3fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.78.97.62:80, 169.91.132.160:3616}[33.3333%]&lt;BR/&gt;{201.78.97.62:80, 169.91.132.160:3617}[33.3333%]&lt;BR/&gt;{201.78.97.62:80, 169.91.132.160:3621}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3621: (16.6667%)&lt;BR/&gt; 3617: (16.6667%)&lt;BR/&gt; 3616: (16.6667%)&gt;];
}
5408--7735[label="1;3pkt 3fpkt"];
5408--9078[label="1;3pkt 3fpkt"];
7735--9078[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.91.132.160" dst_port="3621" src_ip="201.78.97.62" src_port="80"/>
      <filter dst_ip="169.91.132.160" dst_port="3617" src_ip="201.78.97.62" src_port="80"/>
      <filter dst_ip="169.91.132.160" dst_port="3616" src_ip="201.78.97.62" src_port="80"/>
    </slice>
    <from sec="1089177009" usec="0"/>
    <to sec="1089177205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
5410[label="215.98.176.62;104pkt 104fpkt", shape=pentagon, color=darkviolet];
7736[label="215.98.176.62;104pkt 104fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.98.176.62:*, *:9898}[60.5769%]&lt;BR/&gt;{215.98.176.62:*, *:5554}[39.4231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (30.2885%)&lt;BR/&gt; 5554: (19.7115%)&lt;BR/&gt; 3647: (0.480769%)&lt;BR/&gt; 3624: (0.480769%)&lt;BR/&gt; 3600: (0.480769%)&gt;];
}
5410--7736[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.98.176.62"/>
      <filter dst_port="5554" src_ip="215.98.176.62"/>
    </slice>
    <from sec="1089177262" usec="0"/>
    <to sec="1089177265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.169.197.62"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
5418[label="73.196.244.63;74pkt 74fpkt", shape=pentagon, color=darkviolet];
7743[label="73.196.244.63;73pkt 73fpkt", shape=invtriangle, color=brown];
9083[label="73.196.244.63;74pkt 74fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.196.244.63:*, *:1080}[50%]&lt;BR/&gt;{73.196.244.63:*, *:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.1131%)&lt;BR/&gt; 3128: (24.8869%)&lt;BR/&gt; 4695: (1.35747%)&lt;BR/&gt; 3746: (1.35747%)&lt;BR/&gt; 4895: (0.678733%)&gt;];
}
5418--7743[label="1;73pkt 73fpkt"];
5418--9083[label="1;74pkt 74fpkt"];
7743--9083[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="73.196.244.63"/>
      <filter dst_port="1080" src_ip="73.196.244.63"/>
    </slice>
    <from sec="1089176414" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
5426[label="197.171.80.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7747[label="197.171.80.64;4pkt 4fpkt", shape=invtriangle, color=brown];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.171.80.64:80, 136.213.43.190:2140}[25%]&lt;BR/&gt;{197.171.80.64:80, 136.213.43.190:2141}[25%]&lt;BR/&gt;{197.171.80.64:80, 136.213.43.190:2142}[25%]&lt;BR/&gt;{197.171.80.64:80, 136.213.43.190:2143}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2143: (14.2857%)&lt;BR/&gt; 2142: (14.2857%)&lt;BR/&gt; 2141: (14.2857%)&lt;BR/&gt; 2140: (7.14286%)&gt;];
}
5426--7747[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.43.190" dst_port="2143" src_ip="197.171.80.64" src_port="80"/>
      <filter dst_ip="136.213.43.190" dst_port="2142" src_ip="197.171.80.64" src_port="80"/>
      <filter dst_ip="136.213.43.190" dst_port="2141" src_ip="197.171.80.64" src_port="80"/>
      <filter dst_ip="136.213.43.190" dst_port="2140" src_ip="197.171.80.64" src_port="80"/>
    </slice>
    <from sec="1089177078" usec="0"/>
    <to sec="1089177105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
5428[label="195.36.110.64;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7749[label="195.36.110.64;53pkt 53fpkt", shape=invtriangle, color=brown];
9085[label="195.36.110.64;52pkt 52fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.36.110.64:*, *:2745}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (10.1266%)&lt;BR/&gt; 1025: (8.5443%)&lt;BR/&gt; 135: (8.5443%)&lt;BR/&gt; 6129: (7.59494%)&lt;BR/&gt; 3127: (7.59494%)&gt;];
}
5428--7749[label="1;53pkt 53fpkt"];
5428--9085[label="1;52pkt 52fpkt"];
7749--9085[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="195.36.110.64"/>
    </slice>
    <from sec="1089176409" usec="0"/>
    <to sec="1089177034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
5442[label="141.169.45.65;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7756[label="141.169.45.65;49pkt 49fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.45.65:80, 215.230.120.255:*}[46%]&lt;BR/&gt;{141.169.45.65:80, 215.187.17.45:*}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37381: (1.0101%)&lt;BR/&gt; 30368: (1.0101%)&lt;BR/&gt; 17238: (1.0101%)&lt;BR/&gt; 16859: (1.0101%)&gt;];
}
5442--7756[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="215.230.120.255" src_ip="141.169.45.65" src_port="80"/>
      <filter dst_ip="215.187.17.45" src_ip="141.169.45.65" src_port="80"/>
    </slice>
    <from sec="1089176439" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
5452[label="75.20.131.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7759[label="75.20.131.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.20.131.65:80, 194.54.51.137:3738}[50%]&lt;BR/&gt;{75.20.131.65:80, 194.54.51.142:60746}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60746: (25%)&lt;BR/&gt; 3738: (25%)&gt;];
}
5452--7759[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.51.142" dst_port="60746" src_ip="75.20.131.65" src_port="80"/>
      <filter dst_ip="194.54.51.137" dst_port="3738" src_ip="75.20.131.65" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
3227[label="204.26.222.67;s;380pkt 380fpkt", shape=diamond, color=yellow];
5482[label="204.26.222.67;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7777[label="204.26.222.67;4pkt 4fpkt", shape=invtriangle, color=brown];
9096[label="204.26.222.67;4pkt 4fpkt", shape=invhouse, color=bisque];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.26.222.67:*, *:139}[50%]&lt;BR/&gt;{204.26.222.67:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0636%)&lt;BR/&gt; 139: (24.9364%)&lt;BR/&gt; 1953: (0.381679%)&lt;BR/&gt; 1952: (0.381679%)&lt;BR/&gt; 1950: (0.381679%)&gt;];
}
3227--5482[label="0.2;1pkt 1fpkt"];
5482--7777[label="1;4pkt 4fpkt"];
5482--9096[label="1;4pkt 4fpkt"];
7777--9096[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="204.26.222.67"/>
      <filter dst_port="139" src_ip="204.26.222.67"/>
    </slice>
    <from sec="1089176817" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
2404[label="149.99.18.82;d;134pkt 134fpkt", shape=diamond, color=yellow];
3204[label="220.85.77.38;s;61pkt 61fpkt", shape=diamond, color=yellow];
4323[label="220.85.77.38;s;50pkt 50fpkt", shape=hexagon, color=black];
4419[label="149.99.18.82;d;134pkt 134fpkt", shape=hexagon, color=black];
5134[label="220.85.77.38;65pkt 65fpkt", shape=pentagon, color=darkviolet];
5218[label="73.10.144.44;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5951[label="73.37.90.112;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7608[label="73.10.144.44;29pkt 29fpkt", shape=invtriangle, color=brown];
8062[label="73.37.90.112;3pkt 3fpkt", shape=invtriangle, color=brown];
9243[label="73.37.90.112;4pkt 4fpkt", shape=invhouse, color=bisque];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.85.77.38:80, 149.99.18.82:*}[41.8919%]&lt;BR/&gt;{73.10.144.44:80, *:*}[20.2703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1180: (0.487329%)&lt;BR/&gt; 1179: (0.487329%)&lt;BR/&gt; 1178: (0.487329%)&lt;BR/&gt; 1177: (0.487329%)&gt;];
}
2404--3124[label="0.00884956;1pkt 1fpkt"];
2404--3204[label="0.934426;57pkt 57fpkt"];
2404--4007[label="0.00746269;1pkt 1fpkt"];
2404--4323[label="0.92;46pkt 46fpkt"];
2404--4419[label="1;134pkt 134fpkt"];
2404--4618[label="0.0149254;2pkt 2fpkt"];
2404--5134[label="0.876923;57pkt 57fpkt"];
2404--5218[label="0.866667;26pkt 26fpkt"];
2404--5951[label="0.666667;2pkt 2fpkt"];
2404--7048[label="0.00833333;1pkt 1fpkt"];
2404--7144[label="0.0212766;1pkt 1fpkt"];
2404--7608[label="0.896552;26pkt 26fpkt"];
2404--8062[label="0.666667;2pkt 2fpkt"];
2404--8712[label="0.00840336;1pkt 1fpkt"];
2404--8766[label="0.0212766;1pkt 1fpkt"];
2404--9243[label="0.75;3pkt 3fpkt"];
3204--4323[label="1;50pkt 50fpkt"];
3204--4419[label="0.934426;57pkt 57fpkt"];
3204--5134[label="0.983607;60pkt 60fpkt"];
4323--4419[label="0.92;46pkt 46fpkt"];
4323--5134[label="0.98;49pkt 49fpkt"];
4419--4618[label="0.0149254;2pkt 2fpkt"];
4419--5134[label="0.876923;57pkt 57fpkt"];
4419--5218[label="0.866667;26pkt 26fpkt"];
4419--5951[label="0.666667;2pkt 2fpkt"];
4419--7048[label="0.00833333;1pkt 1fpkt"];
4419--7144[label="0.0212766;1pkt 1fpkt"];
4419--7608[label="0.896552;26pkt 26fpkt"];
4419--8062[label="0.666667;2pkt 2fpkt"];
4419--8712[label="0.00840336;1pkt 1fpkt"];
4419--8766[label="0.0212766;1pkt 1fpkt"];
4419--9243[label="0.75;3pkt 3fpkt"];
5218--7608[label="1;29pkt 29fpkt"];
5951--8062[label="1;3pkt 3fpkt"];
5951--9243[label="1;3pkt 3fpkt"];
8062--9243[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="73.10.144.44" src_port="80"/>
      <filter dst_ip="149.99.18.82" src_ip="220.85.77.38" src_port="80"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
5499[label="197.30.34.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7786[label="197.30.34.69;4pkt 4fpkt", shape=invtriangle, color=brown];
9099[label="197.30.34.69;4pkt 4fpkt", shape=invhouse, color=bisque];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.69:1863, 136.213.36.84:3535}[25%]&lt;BR/&gt;{197.30.34.69:1863, 136.213.39.140:3071}[25%]&lt;BR/&gt;{197.30.34.69:1863, 136.213.38.189:1146}[25%]&lt;BR/&gt;{197.30.34.69:1863, 136.213.23.229:2044}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3535: (12.5%)&lt;BR/&gt; 3071: (12.5%)&lt;BR/&gt; 2044: (12.5%)&lt;BR/&gt; 1146: (12.5%)&gt;];
}
5499--7786[label="1;4pkt 4fpkt"];
5499--9099[label="1;4pkt 4fpkt"];
7786--9099[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.23.229" dst_port="2044" src_ip="197.30.34.69" src_port="1863"/>
      <filter dst_ip="136.213.38.189" dst_port="1146" src_ip="197.30.34.69" src_port="1863"/>
      <filter dst_ip="136.213.39.140" dst_port="3071" src_ip="197.30.34.69" src_port="1863"/>
      <filter dst_ip="136.213.36.84" dst_port="3535" src_ip="197.30.34.69" src_port="1863"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
5508[label="194.60.151.69;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7791[label="194.60.151.69;29pkt 29fpkt", shape=invtriangle, color=brown];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.151.69:80, 18.210.70.98:*}[44.8276%]&lt;BR/&gt;{194.60.151.69:80, 16.177.52.217:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1228%)&lt;BR/&gt; 56683: (3.50877%)&lt;BR/&gt; 65062: (1.75439%)&lt;BR/&gt; 63502: (1.75439%)&lt;BR/&gt; 61688: (1.75439%)&gt;];
}
5508--7791[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="18.210.70.98" src_ip="194.60.151.69" src_port="80"/>
      <filter dst_ip="16.177.52.217" src_ip="194.60.151.69" src_port="80"/>
    </slice>
    <from sec="1089176481" usec="0"/>
    <to sec="1089177270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
5512[label="223.75.200.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7792[label="223.75.200.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.75.200.69:6667, 173.19.6.143:1260}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1260: (50%)&gt;];
}
5512--7792[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.6.143" dst_port="1260" src_ip="223.75.200.69" src_port="6667"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
5513[label="16.243.216.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7793[label="16.243.216.69;2pkt 2fpkt", shape=invtriangle, color=brown];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.243.216.69:80, 194.54.51.137:3747}[50%]&lt;BR/&gt;{16.243.216.69:80, 194.54.51.142:53136}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53136: (25%)&lt;BR/&gt; 3747: (25%)&gt;];
}
5513--7793[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.51.142" dst_port="53136" src_ip="16.243.216.69" src_port="80"/>
      <filter dst_ip="194.54.51.137" dst_port="3747" src_ip="16.243.216.69" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
5523[label="210.232.144.70;93pkt 93fpkt", shape=pentagon, color=darkviolet];
7799[label="210.232.144.70;92pkt 92fpkt", shape=invtriangle, color=brown];
9105[label="210.232.144.70;92pkt 92fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.232.144.70:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4961: (0.541516%)&lt;BR/&gt; 4913: (0.541516%)&lt;BR/&gt; 4896: (0.541516%)&lt;BR/&gt; 4834: (0.541516%)&gt;];
}
5523--7799[label="1;92pkt 92fpkt"];
5523--9105[label="1;92pkt 92fpkt"];
7799--9105[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.232.144.70"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
5537[label="73.10.36.72;165pkt 165fpkt", shape=pentagon, color=darkviolet];
7805[label="73.10.36.72;164pkt 164fpkt", shape=invtriangle, color=brown];
9108[label="73.10.36.72;164pkt 164fpkt", shape=invhouse, color=bisque];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.10.36.72:*, *:1026}[52.7273%]&lt;BR/&gt;{73.10.36.72:*, *:1027}[47.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (26.4706%)&lt;BR/&gt; 1027: (23.5294%)&lt;BR/&gt; 4298: (0.608519%)&lt;BR/&gt; 4219: (0.608519%)&lt;BR/&gt; 3078: (0.608519%)&gt;];
}
5537--7805[label="1;164pkt 164fpkt"];
5537--9108[label="1;164pkt 164fpkt"];
7805--9108[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="73.10.36.72"/>
      <filter dst_port="1027" src_ip="73.10.36.72"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089176503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
2619[label="212.32.38.198;d;17pkt 17fpkt", shape=diamond, color=yellow];
4002[label="212.32.38.198;d;17pkt 17fpkt", shape=hexagon, color=black];
4945[label="173.19.15.23;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5540[label="173.19.66.72;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7808[label="173.19.66.72;3pkt 3fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.32.38.198:5050}[77.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.3333%)&lt;BR/&gt; 5190: (5.55556%)&lt;BR/&gt; 1307: (4.44444%)&lt;BR/&gt; 4797: (3.33333%)&lt;BR/&gt; 4794: (3.33333%)&gt;];
}
2619--4002[label="1;17pkt 17fpkt"];
2619--4945[label="0.5;2pkt 2fpkt"];
2619--5540[label="0.25;1pkt 1fpkt"];
2619--7808[label="0.333333;1pkt 1fpkt"];
4002--4945[label="0.5;2pkt 2fpkt"];
4002--5540[label="0.25;1pkt 1fpkt"];
4002--7808[label="0.333333;1pkt 1fpkt"];
5540--7808[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.32.38.198" dst_port="5050"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
5562[label="16.177.52.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7823[label="16.177.52.74;2pkt 2fpkt", shape=invtriangle, color=brown];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.177.52.74:59532, 195.46.99.40:80}[50%]&lt;BR/&gt;{16.177.52.74:60165, 136.213.77.233:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60165: (25%)&lt;BR/&gt; 59532: (25%)&gt;];
}
5562--7823[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.77.233" dst_port="80" src_ip="16.177.52.74" src_port="60165"/>
      <filter dst_ip="195.46.99.40" dst_port="80" src_ip="16.177.52.74" src_port="59532"/>
    </slice>
    <from sec="1089176860" usec="0"/>
    <to sec="1089176949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.64.74"/>
    </slice>
    <from sec="1089176499" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
5569[label="19.68.225.74;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7828[label="19.68.225.74;5pkt 5fpkt", shape=invtriangle, color=brown];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.68.225.74:80, 141.169.165.197:3292}[20%]&lt;BR/&gt;{19.68.225.74:80, 141.169.165.197:3312}[20%]&lt;BR/&gt;{19.68.225.74:80, 141.169.165.197:3319}[20%]&lt;BR/&gt;{19.68.225.74:80, 141.169.165.197:3333}[20%]&lt;BR/&gt;{19.68.225.74:80, 141.169.165.197:3350}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3350: (10%)&lt;BR/&gt; 3333: (10%)&lt;BR/&gt; 3319: (10%)&lt;BR/&gt; 3312: (10%)&gt;];
}
5569--7828[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.165.197" dst_port="3350" src_ip="19.68.225.74" src_port="80"/>
      <filter dst_ip="141.169.165.197" dst_port="3333" src_ip="19.68.225.74" src_port="80"/>
      <filter dst_ip="141.169.165.197" dst_port="3319" src_ip="19.68.225.74" src_port="80"/>
      <filter dst_ip="141.169.165.197" dst_port="3312" src_ip="19.68.225.74" src_port="80"/>
      <filter dst_ip="141.169.165.197" dst_port="3292" src_ip="19.68.225.74" src_port="80"/>
    </slice>
    <from sec="1089177003" usec="0"/>
    <to sec="1089177188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10164,1.95001,503,1 1 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
255[label="220.250.217.34s;235pkt 235fpkt", shape=rectangle, color=red];
308[label="208.71.176.76s;145pkt 145fpkt", shape=rectangle, color=red];
615[label="220.250.217.34s;358pkt 358fpkt", shape=ellipse, color=green];
2770[label="149.99.160.76;s;177pkt 177fpkt", shape=diamond, color=yellow];
3214[label="16.170.19.17;d;111pkt 111fpkt", shape=diamond, color=yellow];
5087[label="220.250.217.34;235pkt 235fpkt", shape=pentagon, color=darkviolet];
5595[label="149.99.160.76;192pkt 192fpkt", shape=pentagon, color=darkviolet];
5596[label="208.71.176.76;235pkt 235fpkt", shape=pentagon, color=darkviolet];
7529[label="220.250.217.34;234pkt 234fpkt", shape=invtriangle, color=brown];
7842[label="149.99.160.76;191pkt 191fpkt", shape=invtriangle, color=brown];
7843[label="208.71.176.76;235pkt 235fpkt", shape=invtriangle, color=brown];
8971[label="220.250.217.34;235pkt 235fpkt", shape=invhouse, color=bisque];
9128[label="149.99.160.76;192pkt 192fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.250.217.34:*, *:9898}[35.3383%]&lt;BR/&gt;{208.71.176.76:*, *:9898}[35.3383%]&lt;BR/&gt;{149.99.160.76:*, *:80}[26.6165%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (34.2523%)&lt;BR/&gt; 80: (14.6667%)&lt;BR/&gt; 443: (0.792793%)&lt;BR/&gt; 7001: (0.144144%)&lt;BR/&gt; 1863: (0.144144%)&gt;];
}
255--615[label="1;235pkt 235fpkt"];
255--5087[label="1;235pkt 235fpkt"];
255--7529[label="1;234pkt 234fpkt"];
255--8971[label="1;235pkt 235fpkt"];
308--615[label="0.82069;119pkt 119fpkt"];
308--2091[label="0.00689655;1pkt 1fpkt"];
308--2770[label="0.0758621;11pkt 11fpkt"];
308--3214[label="0.0630631;7pkt 7fpkt"];
308--4628[label="0.0758621;11pkt 11fpkt"];
308--4635[label="0.0758621;11pkt 11fpkt"];
308--5595[label="0.0758621;11pkt 11fpkt"];
308--5596[label="0.924138;134pkt 134fpkt"];
308--7842[label="0.0758621;11pkt 11fpkt"];
308--7843[label="0.924138;134pkt 134fpkt"];
308--9128[label="0.0758621;11pkt 11fpkt"];
615--5087[label="1;235pkt 235fpkt"];
615--5596[label="0.523404;123pkt 123fpkt"];
615--7529[label="1;234pkt 234fpkt"];
615--7843[label="0.523404;123pkt 123fpkt"];
615--8971[label="1;235pkt 235fpkt"];
2770--2911[label="0.00666667;1pkt 1fpkt"];
2770--2956[label="0.0163934;1pkt 1fpkt"];
2770--3162[label="0.0294118;2pkt 2fpkt"];
2770--3214[label="0.972973;108pkt 108fpkt"];
2770--3867[label="0.00564972;1pkt 1fpkt"];
2770--3920[label="0.0394737;3pkt 3fpkt"];
2770--4628[label="0.107345;19pkt 19fpkt"];
2770--4635[label="0.107345;19pkt 19fpkt"];
2770--5595[label="1;177pkt 177fpkt"];
2770--7842[label="0.99435;176pkt 176fpkt"];
2770--9128[label="1;177pkt 177fpkt"];
3214--3514[label="0.018018;2pkt 2fpkt"];
3214--4584[label="0.018018;2pkt 2fpkt"];
3214--4628[label="0.135135;15pkt 15fpkt"];
3214--4635[label="0.135135;15pkt 15fpkt"];
3214--5103[label="0.018018;2pkt 2fpkt"];
3214--5595[label="0.972973;108pkt 108fpkt"];
3214--5862[label="0.00900901;1pkt 1fpkt"];
3214--7538[label="0.018018;2pkt 2fpkt"];
3214--7842[label="0.972973;108pkt 108fpkt"];
3214--8009[label="0.00900901;1pkt 1fpkt"];
3214--8974[label="0.018018;2pkt 2fpkt"];
3214--9128[label="0.972973;108pkt 108fpkt"];
3214--9215[label="0.00900901;1pkt 1fpkt"];
5087--7529[label="1;234pkt 234fpkt"];
5087--8971[label="1;235pkt 235fpkt"];
5595--7842[label="1;191pkt 191fpkt"];
5595--9128[label="1;192pkt 192fpkt"];
5596--7843[label="1;235pkt 235fpkt"];
7529--8971[label="1;234pkt 234fpkt"];
7842--9128[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.71.176.76"/>
      <filter dst_port="9898" src_ip="220.250.217.34"/>
      <filter dst_port="80" src_ip="149.99.160.76"/>
    </slice>
    <from sec="1089176730" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
5601[label="195.75.15.77;36pkt 36fpkt", shape=pentagon, color=darkviolet];
7846[label="195.75.15.77;37pkt 37fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.75.15.77:*, *:80}[72.973%]&lt;BR/&gt;{195.75.15.77:*, *:2745}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3014%)&lt;BR/&gt; 2745: (13.6986%)&lt;BR/&gt; 4682: (1.36986%)&lt;BR/&gt; 4637: (1.36986%)&lt;BR/&gt; 4563: (1.36986%)&gt;];
}
5601--7846[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="195.75.15.77"/>
      <filter dst_port="2745" src_ip="195.75.15.77"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
5603[label="73.148.34.77;197pkt 197fpkt", shape=pentagon, color=darkviolet];
7847[label="73.148.34.77;197pkt 197fpkt", shape=invtriangle, color=brown];
9130[label="73.148.34.77;196pkt 196fpkt", shape=invhouse, color=bisque];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.148.34.77:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2198: (0.254237%)&lt;BR/&gt; 2192: (0.254237%)&lt;BR/&gt; 2191: (0.254237%)&lt;BR/&gt; 2190: (0.254237%)&gt;];
}
5603--7847[label="1;197pkt 197fpkt"];
5603--9130[label="1;196pkt 196fpkt"];
7847--9130[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.148.34.77"/>
    </slice>
    <from sec="1089176998" usec="0"/>
    <to sec="1089176999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
5608[label="16.160.155.77;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7851[label="16.160.155.77;3pkt 3fpkt", shape=invtriangle, color=brown];
9132[label="16.160.155.77;3pkt 3fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.160.155.77:80, 136.213.34.55:51199}[33.3333%]&lt;BR/&gt;{16.160.155.77:80, 136.213.34.55:51200}[33.3333%]&lt;BR/&gt;{16.160.155.77:80, 136.213.34.55:51201}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51201: (16.6667%)&lt;BR/&gt; 51200: (16.6667%)&lt;BR/&gt; 51199: (16.6667%)&gt;];
}
5608--7851[label="1;3pkt 3fpkt"];
5608--9132[label="1;3pkt 3fpkt"];
7851--9132[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.34.55" dst_port="51201" src_ip="16.160.155.77" src_port="80"/>
      <filter dst_ip="136.213.34.55" dst_port="51200" src_ip="16.160.155.77" src_port="80"/>
      <filter dst_ip="136.213.34.55" dst_port="51199" src_ip="16.160.155.77" src_port="80"/>
    </slice>
    <from sec="1089176702" usec="0"/>
    <to sec="1089176751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.106.79"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
5641[label="171.48.49.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7869[label="171.48.49.81;1pkt 1fpkt", shape=invtriangle, color=brown];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.48.49.81:0, 222.229.182.28:0}[50%]&lt;BR/&gt;{171.48.49.81:0, 144.202.227.220:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5641--7869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.202.227.220" src_ip="171.48.49.81"/>
      <filter dst_ip="222.229.182.28" src_ip="171.48.49.81"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
2068[label="141.169.164.18;d;259pkt 259fpkt", shape=diamond, color=yellow];
2802[label="210.205.244.229;s;2pkt 2fpkt", shape=diamond, color=yellow];
3755[label="141.169.164.18;d;259pkt 259fpkt", shape=hexagon, color=black];
4741[label="220.182.250.6;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5458[label="220.182.250.65;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5648[label="220.182.251.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7052[label="210.205.244.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7335[label="220.182.250.6;51pkt 51fpkt", shape=invtriangle, color=brown];
7763[label="220.182.250.65;24pkt 24fpkt", shape=invtriangle, color=brown];
7874[label="220.182.251.81;2pkt 2fpkt", shape=invtriangle, color=brown];
8715[label="210.205.244.229;1pkt 1fpkt", shape=invtriangle, color=brown];
9143[label="220.182.251.81;1pkt 1fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.182.250.153:80, 141.169.164.18:*}[34.3629%]&lt;BR/&gt;{220.182.250.6:80, 141.169.164.18:*}[20.0772%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7041%)&lt;BR/&gt; 3134: (0.369822%)&lt;BR/&gt; 2957: (0.369822%)&lt;BR/&gt; 3264: (0.295858%)&lt;BR/&gt; 3262: (0.295858%)&gt;];
}
2068--2802[label="1;2pkt 2fpkt"];
2068--3056[label="0.00772201;2pkt 2fpkt"];
2068--3755[label="1;259pkt 259fpkt"];
2068--4741[label="1;51pkt 51fpkt"];
2068--5458[label="1;24pkt 24fpkt"];
2068--5648[label="1;1pkt 1fpkt"];
2068--6994[label="0.00772201;2pkt 2fpkt"];
2068--7052[label="1;1pkt 1fpkt"];
2068--7335[label="1;51pkt 51fpkt"];
2068--7763[label="1;24pkt 24fpkt"];
2068--7874[label="1;2pkt 2fpkt"];
2068--8675[label="0.00772201;2pkt 2fpkt"];
2068--8715[label="1;1pkt 1fpkt"];
2068--9143[label="1;1pkt 1fpkt"];
2802--3755[label="1;2pkt 2fpkt"];
2802--7052[label="1;1pkt 1fpkt"];
2802--8715[label="1;1pkt 1fpkt"];
3755--4741[label="1;51pkt 51fpkt"];
3755--5458[label="1;24pkt 24fpkt"];
3755--5648[label="1;1pkt 1fpkt"];
3755--6994[label="0.00772201;2pkt 2fpkt"];
3755--7052[label="1;1pkt 1fpkt"];
3755--7335[label="1;51pkt 51fpkt"];
3755--7763[label="1;24pkt 24fpkt"];
3755--7874[label="1;2pkt 2fpkt"];
3755--8675[label="0.00772201;2pkt 2fpkt"];
3755--8715[label="1;1pkt 1fpkt"];
3755--9143[label="1;1pkt 1fpkt"];
4741--7335[label="1;51pkt 51fpkt"];
5458--7763[label="1;24pkt 24fpkt"];
5648--7874[label="1;1pkt 1fpkt"];
5648--9143[label="1;1pkt 1fpkt"];
7052--8715[label="1;1pkt 1fpkt"];
7874--9143[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.164.18" src_ip="220.182.250.153" src_port="80"/>
      <filter dst_ip="141.169.164.18" src_ip="220.182.250.6" src_port="80"/>
    </slice>
    <from sec="1089176824" usec="0"/>
    <to sec="1089177171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
5661[label="18.210.83.82;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7882[label="18.210.83.82;7pkt 7fpkt", shape=invtriangle, color=brown];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.210.83.82:443, 136.213.11.100:*}[57.1429%]&lt;BR/&gt;{18.210.83.82:443, 141.169.131.9:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 37801: (7.14286%)&lt;BR/&gt; 37793: (7.14286%)&lt;BR/&gt; 37747: (7.14286%)&lt;BR/&gt; 37717: (7.14286%)&gt;];
}
5661--7882[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.11.100" src_ip="18.210.83.82" src_port="443"/>
      <filter dst_ip="141.169.131.9" src_ip="18.210.83.82" src_port="443"/>
    </slice>
    <from sec="1089177266" usec="0"/>
    <to sec="1089177281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
5665[label="141.169.205.82;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7884[label="141.169.205.82;4pkt 4fpkt", shape=invtriangle, color=brown];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.205.82:1410, 198.44.148.225:80}[20%]&lt;BR/&gt;{141.169.205.82:1407, 75.75.94.82:80}[20%]&lt;BR/&gt;{141.169.205.82:1408, 75.75.94.82:80}[20%]&lt;BR/&gt;{141.169.205.82:1411, 75.75.94.82:80}[20%]&lt;BR/&gt;{141.169.205.82:1412, 75.75.94.82:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1412: (11.1111%)&lt;BR/&gt; 1411: (11.1111%)&lt;BR/&gt; 1408: (11.1111%)&lt;BR/&gt; 1407: (11.1111%)&gt;];
}
5665--7884[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="75.75.94.82" dst_port="80" src_ip="141.169.205.82" src_port="1412"/>
      <filter dst_ip="75.75.94.82" dst_port="80" src_ip="141.169.205.82" src_port="1411"/>
      <filter dst_ip="75.75.94.82" dst_port="80" src_ip="141.169.205.82" src_port="1408"/>
      <filter dst_ip="75.75.94.82" dst_port="80" src_ip="141.169.205.82" src_port="1407"/>
      <filter dst_ip="198.44.148.225" dst_port="80" src_ip="141.169.205.82" src_port="1410"/>
    </slice>
    <from sec="1089176577" usec="0"/>
    <to sec="1089176605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
5678[label="2.100.236.83;155pkt 155fpkt", shape=pentagon, color=darkviolet];
7894[label="2.100.236.83;156pkt 156fpkt", shape=invtriangle, color=brown];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.100.236.83:10000, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5678--7894[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="2.100.236.83" src_port="10000"/>
    </slice>
    <from sec="1089176842" usec="0"/>
    <to sec="1089176869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.213.36.84"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
5688[label="169.51.193.84;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7900[label="169.51.193.84;23pkt 23fpkt", shape=invtriangle, color=brown];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.193.84:58773, *:*}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58773: (43.3333%)&lt;BR/&gt; 62108: (2.22222%)&lt;BR/&gt; 61863: (2.22222%)&lt;BR/&gt; 60812: (2.22222%)&lt;BR/&gt; 54210: (2.22222%)&gt;];
}
5688--7900[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="169.51.193.84" src_port="58773"/>
    </slice>
    <from sec="1089176443" usec="0"/>
    <to sec="1089177274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
5689[label="87.157.11.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7901[label="87.157.11.85;1pkt 1fpkt", shape=invtriangle, color=brown];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.157.11.85:80, 169.51.4.192:3185}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3185: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5689--7901[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.4.192" dst_port="3185" src_ip="87.157.11.85" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
5701[label="209.91.220.85;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7907[label="209.91.220.85;3pkt 3fpkt", shape=invtriangle, color=brown];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.91.220.85:2668, 195.46.98.199:25}[25%]&lt;BR/&gt;{209.91.220.85:2669, 195.46.98.199:25}[25%]&lt;BR/&gt;{209.91.220.85:2784, 195.46.98.199:25}[25%]&lt;BR/&gt;{209.91.220.85:2786, 195.46.98.199:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2786: (14.2857%)&lt;BR/&gt; 2784: (14.2857%)&lt;BR/&gt; 2669: (14.2857%)&lt;BR/&gt; 2668: (7.14286%)&gt;];
}
5701--7907[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="195.46.98.199" dst_port="25" src_ip="209.91.220.85" src_port="2786"/>
      <filter dst_ip="195.46.98.199" dst_port="25" src_ip="209.91.220.85" src_port="2784"/>
      <filter dst_ip="195.46.98.199" dst_port="25" src_ip="209.91.220.85" src_port="2669"/>
      <filter dst_ip="195.46.98.199" dst_port="25" src_ip="209.91.220.85" src_port="2668"/>
    </slice>
    <from sec="1089176724" usec="0"/>
    <to sec="1089177007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
5703[label="212.54.44.86;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7909[label="212.54.44.86;12pkt 12fpkt", shape=invtriangle, color=brown];
9159[label="212.54.44.86;12pkt 12fpkt", shape=invhouse, color=bisque];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.54.44.86:110, 169.51.203.11:*}[25%]&lt;BR/&gt;{212.54.44.86:110, 173.19.106.228:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 4314: (4.16667%)&lt;BR/&gt; 4308: (4.16667%)&lt;BR/&gt; 4303: (4.16667%)&lt;BR/&gt; 3646: (4.16667%)&gt;];
}
5703--7909[label="1;12pkt 12fpkt"];
5703--9159[label="1;12pkt 12fpkt"];
7909--9159[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.106.228" src_ip="212.54.44.86" src_port="110"/>
      <filter dst_ip="169.51.203.11" src_ip="212.54.44.86" src_port="110"/>
    </slice>
    <from sec="1089176452" usec="0"/>
    <to sec="1089177211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
5725[label="214.183.205.87;122pkt 122fpkt", shape=pentagon, color=darkviolet];
7924[label="214.183.205.87;123pkt 123fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.183.205.87:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62844: (0.408163%)&lt;BR/&gt; 61244: (0.408163%)&lt;BR/&gt; 59026: (0.408163%)&lt;BR/&gt; 57905: (0.408163%)&gt;];
}
5725--7924[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter src_ip="214.183.205.87" src_port="80"/>
    </slice>
    <from sec="1089176638" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
5728[label="169.51.70.88;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7926[label="169.51.70.88;5pkt 5fpkt", shape=invtriangle, color=brown];
9168[label="169.51.70.88;5pkt 5fpkt", shape=invhouse, color=bisque];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.70.88:80, 195.19.173.117:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1376: (9.375%)&lt;BR/&gt; 1375: (9.375%)&lt;BR/&gt; 1374: (9.375%)&lt;BR/&gt; 1370: (9.375%)&gt;];
}
5728--7926[label="1;5pkt 5fpkt"];
5728--9168[label="1;5pkt 5fpkt"];
7926--9168[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="195.19.173.117" src_ip="169.51.70.88" src_port="80"/>
    </slice>
    <from sec="1089176950" usec="0"/>
    <to sec="1089177142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
5739[label="197.30.34.89;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7931[label="197.30.34.89;6pkt 6fpkt", shape=invtriangle, color=brown];
9172[label="197.30.34.89;6pkt 6fpkt", shape=invhouse, color=bisque];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.89:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4246: (8.33333%)&lt;BR/&gt; 3980: (8.33333%)&lt;BR/&gt; 1213: (8.33333%)&lt;BR/&gt; 1069: (8.33333%)&gt;];
}
5739--7931[label="1;6pkt 6fpkt"];
5739--9172[label="1;6pkt 6fpkt"];
7931--9172[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="197.30.34.89" src_port="1863"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
5752[label="149.99.44.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7938[label="149.99.44.90;4pkt 4fpkt", shape=invtriangle, color=brown];
9176[label="149.99.44.90;4pkt 4fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.44.90:6001, 214.161.32.138:8000}[25%]&lt;BR/&gt;{149.99.44.90:4002, 194.143.74.228:8000}[25%]&lt;BR/&gt;{149.99.44.90:1126, 197.30.34.107:1863}[25%]&lt;BR/&gt;{149.99.44.90:1165, 197.30.34.107:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (25%)&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 6001: (12.5%)&lt;BR/&gt; 4002: (12.5%)&lt;BR/&gt; 1165: (12.5%)&gt;];
}
5752--7938[label="1;4pkt 4fpkt"];
5752--9176[label="1;4pkt 4fpkt"];
7938--9176[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.107" dst_port="1863" src_ip="149.99.44.90" src_port="1165"/>
      <filter dst_ip="197.30.34.107" dst_port="1863" src_ip="149.99.44.90" src_port="1126"/>
      <filter dst_ip="194.143.74.228" dst_port="8000" src_ip="149.99.44.90" src_port="4002"/>
      <filter dst_ip="214.161.32.138" dst_port="8000" src_ip="149.99.44.90" src_port="6001"/>
    </slice>
    <from sec="1089176419" usec="0"/>
    <to sec="1089177260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
5760[label="143.88.52.91;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7945[label="143.88.52.91;3pkt 3fpkt", shape=invtriangle, color=brown];
9182[label="143.88.52.91;3pkt 3fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.88.52.91:22, 136.213.210.161:42517}[25%]&lt;BR/&gt;{143.88.52.91:50135, 136.213.210.161:25}[25%]&lt;BR/&gt;{143.88.52.91:2401, 136.213.210.198:38562}[25%]&lt;BR/&gt;{143.88.52.91:2401, 136.213.210.198:38563}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2401: (30%)&lt;BR/&gt; 42517: (15%)&lt;BR/&gt; 38563: (15%)&lt;BR/&gt; 38562: (15%)&lt;BR/&gt; 22: (15%)&gt;];
}
5760--7945[label="1;3pkt 3fpkt"];
5760--9182[label="1;3pkt 3fpkt"];
7945--9182[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.210.198" dst_port="38563" src_ip="143.88.52.91" src_port="2401"/>
      <filter dst_ip="136.213.210.198" dst_port="38562" src_ip="143.88.52.91" src_port="2401"/>
      <filter dst_ip="136.213.210.161" dst_port="25" src_ip="143.88.52.91" src_port="50135"/>
      <filter dst_ip="136.213.210.161" dst_port="42517" src_ip="143.88.52.91" src_port="22"/>
    </slice>
    <from sec="1089176519" usec="0"/>
    <to sec="1089176792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="153.105.25.96"/>
    </slice>
    <from sec="1089176789" usec="0"/>
    <to sec="1089176865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
5813[label="220.87.35.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7979[label="220.87.35.97;2pkt 2fpkt", shape=invtriangle, color=brown];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.87.35.97:1036, 136.153.89.68:1434}[50%]&lt;BR/&gt;{220.87.35.97:1036, 149.5.196.162:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
5813--7979[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.5.196.162" dst_port="1434" src_ip="220.87.35.97" src_port="1036"/>
      <filter dst_ip="136.153.89.68" dst_port="1434" src_ip="220.87.35.97" src_port="1036"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
5819[label="215.185.131.97;153pkt 153fpkt", shape=pentagon, color=darkviolet];
7982[label="215.185.131.97;153pkt 153fpkt", shape=invtriangle, color=brown];
9201[label="215.185.131.97;152pkt 152fpkt", shape=invhouse, color=bisque];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.185.131.97:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1644: (0.327511%)&lt;BR/&gt; 1643: (0.327511%)&lt;BR/&gt; 1642: (0.327511%)&lt;BR/&gt; 1641: (0.327511%)&gt;];
}
5819--7982[label="1;153pkt 153fpkt"];
5819--9201[label="1;152pkt 152fpkt"];
7982--9201[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.185.131.97"/>
    </slice>
    <from sec="1089176540" usec="0"/>
    <to sec="1089176541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.169.36.98"/>
    </slice>
    <from sec="1089176817" usec="0"/>
    <to sec="1089176823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
5835[label="19.25.74.99;32pkt 32fpkt", shape=pentagon, color=darkviolet];
7990[label="19.25.74.99;31pkt 31fpkt", shape=invtriangle, color=brown];
9205[label="19.25.74.99;32pkt 32fpkt", shape=invhouse, color=bisque];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.25.74.99:80, 169.51.146.76:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3427: (1.57895%)&lt;BR/&gt; 3426: (1.57895%)&lt;BR/&gt; 3425: (1.57895%)&lt;BR/&gt; 3424: (1.57895%)&gt;];
}
5835--7990[label="1;31pkt 31fpkt"];
5835--9205[label="1;32pkt 32fpkt"];
7990--9205[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.146.76" src_ip="19.25.74.99" src_port="80"/>
    </slice>
    <from sec="1089176798" usec="0"/>
    <to sec="1089176804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
5854[label="220.113.215.100;409pkt 409fpkt", shape=pentagon, color=darkviolet];
8003[label="220.113.215.100;410pkt 410fpkt", shape=invtriangle, color=brown];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.113.215.100:1960, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1960: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5854--8003[label="1;409pkt 409fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.113.215.100" src_port="1960"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
1576[label="173.19.100.76;d;48pkt 48fpkt", shape=diamond, color=yellow];
1634[label="16.170.9.107;s;3pkt 3fpkt", shape=diamond, color=yellow];
2550[label="173.19.75.203;d;32pkt 32fpkt", shape=diamond, color=yellow];
2554[label="173.19.76.151;d;60pkt 60fpkt", shape=diamond, color=yellow];
3083[label="141.169.91.147;d;132pkt 132fpkt", shape=diamond, color=yellow];
3104[label="173.19.72.1;d;87pkt 87fpkt", shape=diamond, color=yellow];
3185[label="173.19.86.111;d;38pkt 38fpkt", shape=diamond, color=yellow];
3316[label="173.19.15.44;d;24pkt 24fpkt", shape=diamond, color=yellow];
3600[label="173.19.100.76;d;37pkt 37fpkt", shape=hexagon, color=black];
3693[label="16.170.9.107;s;3pkt 3fpkt", shape=hexagon, color=black];
4645[label="195.158.167.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4678[label="16.170.8.3;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5313[label="16.170.8.53;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5529[label="16.170.9.71;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5536[label="16.170.9.72;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5583[label="16.170.9.76;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5796[label="214.5.166.95;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5812[label="16.170.9.97;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5842[label="16.170.9.100;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5867[label="16.170.9.102;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5890[label="16.170.9.105;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5946[label="16.170.9.112;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5964[label="16.170.9.114;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6008[label="16.170.9.118;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6038[label="16.170.9.123;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6060[label="16.170.9.126;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6065[label="16.170.9.127;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7297[label="16.170.8.3;4pkt 4fpkt", shape=invtriangle, color=brown];
7670[label="16.170.8.53;11pkt 11fpkt", shape=invtriangle, color=brown];
7801[label="16.170.9.71;9pkt 9fpkt", shape=invtriangle, color=brown];
7834[label="16.170.9.76;8pkt 8fpkt", shape=invtriangle, color=brown];
7978[label="16.170.9.97;6pkt 6fpkt", shape=invtriangle, color=brown];
7996[label="16.170.9.100;14pkt 14fpkt", shape=invtriangle, color=brown];
8013[label="16.170.9.102;7pkt 7fpkt", shape=invtriangle, color=brown];
8126[label="16.170.9.126;11pkt 11fpkt", shape=invtriangle, color=brown];
9047[label="16.170.8.53;11pkt 11fpkt", shape=invhouse, color=bisque];
9125[label="16.170.9.76;8pkt 8fpkt", shape=invhouse, color=bisque];
9274[label="16.170.9.126;10pkt 10fpkt", shape=invhouse, color=bisque];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[59.4961%]&lt;BR/&gt;{*:53, *:*}[28.876%]&lt;BR/&gt;{*:*, 141.169.91.147:*}[25.5814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.5887%)&lt;BR/&gt; 53: (12.1045%)&lt;BR/&gt; 59961: (5.77717%)&lt;BR/&gt; 3843: (4.2641%)&lt;BR/&gt; 113: (0.962861%)&gt;];
}
1576--1634[label="0.333333;1pkt 1fpkt"];
1576--3600[label="1;37pkt 37fpkt"];
1576--3693[label="0.333333;1pkt 1fpkt"];
1576--4645[label="0.875;7pkt 7fpkt"];
1576--4678[label="0.2;1pkt 1fpkt"];
1576--5313[label="0.0833333;1pkt 1fpkt"];
1576--5529[label="0.125;1pkt 1fpkt"];
1576--5536[label="0.125;1pkt 1fpkt"];
1576--5842[label="0.0769231;1pkt 1fpkt"];
1576--5867[label="0.125;1pkt 1fpkt"];
1576--5890[label="0.1;1pkt 1fpkt"];
1576--5946[label="0.142857;2pkt 2fpkt"];
1576--5964[label="0.0666667;1pkt 1fpkt"];
1576--6008[label="0.125;2pkt 2fpkt"];
1576--6060[label="0.0909091;1pkt 1fpkt"];
1576--6065[label="0.111111;1pkt 1fpkt"];
1576--7297[label="0.25;1pkt 1fpkt"];
1576--7670[label="0.0909091;1pkt 1fpkt"];
1576--7801[label="0.111111;1pkt 1fpkt"];
1576--7996[label="0.0714286;1pkt 1fpkt"];
1576--8013[label="0.142857;1pkt 1fpkt"];
1576--8126[label="0.0909091;1pkt 1fpkt"];
1576--9047[label="0.0909091;1pkt 1fpkt"];
1576--9274[label="0.1;1pkt 1fpkt"];
1634--3600[label="0.333333;1pkt 1fpkt"];
1634--3693[label="1;3pkt 3fpkt"];
2550--4678[label="0.2;1pkt 1fpkt"];
2550--5313[label="0.166667;2pkt 2fpkt"];
2550--5583[label="0.25;2pkt 2fpkt"];
2550--5812[label="0.2;1pkt 1fpkt"];
2550--5867[label="0.25;2pkt 2fpkt"];
2550--5890[label="0.2;2pkt 2fpkt"];
2550--5946[label="0.142857;2pkt 2fpkt"];
2550--5964[label="0.2;3pkt 3fpkt"];
2550--6008[label="0.1875;3pkt 3fpkt"];
2550--6038[label="0.111111;1pkt 1fpkt"];
2550--6060[label="0.0909091;1pkt 1fpkt"];
2550--6065[label="0.222222;2pkt 2fpkt"];
2550--7297[label="0.25;1pkt 1fpkt"];
2550--7670[label="0.181818;2pkt 2fpkt"];
2550--7834[label="0.25;2pkt 2fpkt"];
2550--7978[label="0.166667;1pkt 1fpkt"];
2550--8013[label="0.285714;2pkt 2fpkt"];
2550--8126[label="0.0909091;1pkt 1fpkt"];
2550--9047[label="0.181818;2pkt 2fpkt"];
2550--9125[label="0.25;2pkt 2fpkt"];
2550--9274[label="0.1;1pkt 1fpkt"];
2554--4133[label="0.0333333;1pkt 1fpkt"];
2554--5313[label="0.0833333;1pkt 1fpkt"];
2554--5529[label="0.125;1pkt 1fpkt"];
2554--5536[label="0.125;1pkt 1fpkt"];
2554--5796[label="1;5pkt 5fpkt"];
2554--5890[label="0.1;1pkt 1fpkt"];
2554--5964[label="0.0666667;1pkt 1fpkt"];
2554--6008[label="0.0625;1pkt 1fpkt"];
2554--6065[label="0.111111;1pkt 1fpkt"];
2554--7221[label="0.0277778;1pkt 1fpkt"];
2554--7670[label="0.0909091;1pkt 1fpkt"];
2554--7801[label="0.111111;1pkt 1fpkt"];
2554--8813[label="0.0285714;1pkt 1fpkt"];
2554--9047[label="0.0909091;1pkt 1fpkt"];
3083--3098[label="0.030303;1pkt 1fpkt"];
3083--3102[label="0.04;1pkt 1fpkt"];
3083--4396[label="0.04;1pkt 1fpkt"];
3083--4617[label="0.0227273;3pkt 3fpkt"];
3083--4627[label="0.0151515;2pkt 2fpkt"];
3083--4634[label="0.0151515;2pkt 2fpkt"];
3083--4790[label="0.025;1pkt 1fpkt"];
3083--4858[label="0.0263158;1pkt 1fpkt"];
3083--4951[label="0.0895522;6pkt 6fpkt"];
3083--5098[label="0.0185185;1pkt 1fpkt"];
3083--5106[label="0.0238095;1pkt 1fpkt"];
3083--5658[label="0.0217391;1pkt 1fpkt"];
3083--5697[label="0.0188679;1pkt 1fpkt"];
3083--5798[label="0.0149254;1pkt 1fpkt"];
3083--5867[label="0.125;1pkt 1fpkt"];
3083--6190[label="0.05;1pkt 1fpkt"];
3083--6705[label="0.0294118;1pkt 1fpkt"];
3083--7363[label="0.0243902;1pkt 1fpkt"];
3083--7404[label="0.027027;1pkt 1fpkt"];
3083--7447[label="0.0895522;6pkt 6fpkt"];
3083--7534[label="0.0181818;1pkt 1fpkt"];
3083--7541[label="0.0243902;1pkt 1fpkt"];
3083--8013[label="0.142857;1pkt 1fpkt"];
3083--8210[label="0.0526316;1pkt 1fpkt"];
3083--8505[label="0.0294118;1pkt 1fpkt"];
3083--8977[label="0.0243902;1pkt 1fpkt"];
3083--9319[label="0.05;1pkt 1fpkt"];
3104--3115[label="0.0133333;1pkt 1fpkt"];
3104--4393[label="0.0172414;1pkt 1fpkt"];
3104--4617[label="0.0229885;2pkt 2fpkt"];
3104--5098[label="0.0185185;1pkt 1fpkt"];
3104--5511[label="0.0714286;1pkt 1fpkt"];
3104--5566[label="0.015873;1pkt 1fpkt"];
3104--5583[label="0.125;1pkt 1fpkt"];
3104--5697[label="0.0188679;1pkt 1fpkt"];
3104--5762[label="0.0833333;1pkt 1fpkt"];
3104--5798[label="0.0149254;1pkt 1fpkt"];
3104--6190[label="0.05;1pkt 1fpkt"];
3104--7100[label="0.012987;1pkt 1fpkt"];
3104--7534[label="0.0181818;1pkt 1fpkt"];
3104--7834[label="0.125;1pkt 1fpkt"];
3104--7947[label="0.0833333;1pkt 1fpkt"];
3104--8210[label="0.0526316;1pkt 1fpkt"];
3104--8742[label="0.012987;1pkt 1fpkt"];
3104--9125[label="0.125;1pkt 1fpkt"];
3104--9319[label="0.05;1pkt 1fpkt"];
3104--9587[label="0.0131579;1pkt 1fpkt"];
3185--5946[label="0.142857;2pkt 2fpkt"];
3185--5964[label="0.0666667;1pkt 1fpkt"];
3185--6038[label="0.111111;1pkt 1fpkt"];
3185--7996[label="0.0714286;1pkt 1fpkt"];
3316--4678[label="0.2;1pkt 1fpkt"];
3316--5313[label="0.0833333;1pkt 1fpkt"];
3316--5529[label="0.125;1pkt 1fpkt"];
3316--5536[label="0.125;1pkt 1fpkt"];
3316--5867[label="0.125;1pkt 1fpkt"];
3316--5890[label="0.1;1pkt 1fpkt"];
3316--5946[label="0.0714286;1pkt 1fpkt"];
3316--5964[label="0.0666667;1pkt 1fpkt"];
3316--6008[label="0.125;2pkt 2fpkt"];
3316--6060[label="0.0909091;1pkt 1fpkt"];
3316--6065[label="0.111111;1pkt 1fpkt"];
3316--7297[label="0.25;1pkt 1fpkt"];
3316--7670[label="0.0909091;1pkt 1fpkt"];
3316--7801[label="0.111111;1pkt 1fpkt"];
3316--8013[label="0.142857;1pkt 1fpkt"];
3316--8126[label="0.0909091;1pkt 1fpkt"];
3316--9047[label="0.0909091;1pkt 1fpkt"];
3316--9274[label="0.1;1pkt 1fpkt"];
3600--3693[label="0.333333;1pkt 1fpkt"];
3600--4645[label="0.625;5pkt 5fpkt"];
3600--5313[label="0.0833333;1pkt 1fpkt"];
3600--5536[label="0.125;1pkt 1fpkt"];
3600--5842[label="0.0769231;1pkt 1fpkt"];
3600--5867[label="0.125;1pkt 1fpkt"];
3600--5890[label="0.1;1pkt 1fpkt"];
3600--5946[label="0.142857;2pkt 2fpkt"];
3600--5964[label="0.0666667;1pkt 1fpkt"];
3600--6008[label="0.0625;1pkt 1fpkt"];
3600--6060[label="0.0909091;1pkt 1fpkt"];
3600--6065[label="0.111111;1pkt 1fpkt"];
3600--7670[label="0.0909091;1pkt 1fpkt"];
3600--7996[label="0.0714286;1pkt 1fpkt"];
3600--8013[label="0.142857;1pkt 1fpkt"];
3600--8126[label="0.0909091;1pkt 1fpkt"];
3600--9047[label="0.0909091;1pkt 1fpkt"];
3600--9274[label="0.1;1pkt 1fpkt"];
4678--7297[label="1;4pkt 4fpkt"];
5313--7670[label="1;11pkt 11fpkt"];
5313--9047[label="1;11pkt 11fpkt"];
5529--7801[label="1;8pkt 8fpkt"];
5583--7834[label="1;8pkt 8fpkt"];
5583--9125[label="1;8pkt 8fpkt"];
5812--7978[label="1;5pkt 5fpkt"];
5842--7996[label="1;13pkt 13fpkt"];
5867--8013[label="1;7pkt 7fpkt"];
6060--8126[label="1;11pkt 11fpkt"];
6060--9274[label="1;10pkt 10fpkt"];
7670--9047[label="1;11pkt 11fpkt"];
7834--9125[label="1;8pkt 8fpkt"];
8126--9274[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.91.147"/>
      <filter src_port="53"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
5878[label="136.213.38.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8018[label="136.213.38.103;1pkt 1fpkt", shape=invtriangle, color=brown];
9220[label="136.213.38.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.38.103:3014, 197.30.38.213:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3014: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
5878--8018[label="1;1pkt 1fpkt"];
5878--9220[label="1;1pkt 1fpkt"];
8018--9220[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.38.213" dst_port="1863" src_ip="136.213.38.103" src_port="3014"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
5879[label="18.210.83.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8019[label="18.210.83.103;1pkt 1fpkt", shape=invtriangle, color=brown];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.210.83.103:443, 136.213.154.177:35621}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35621: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
5879--8019[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.154.177" dst_port="35621" src_ip="18.210.83.103" src_port="443"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
1397[label="141.169.131.9;s;332pkt 332fpkt", shape=diamond, color=yellow];
1440[label="141.169.28.132;s;152pkt 152fpkt", shape=diamond, color=yellow];
1798[label="195.46.101.21;s;2262pkt 2262fpkt", shape=diamond, color=yellow];
1900[label="141.169.84.54;s;167pkt 167fpkt", shape=diamond, color=yellow];
1971[label="130.163.164.217;d;46pkt 46fpkt", shape=diamond, color=yellow];
2130[label="141.169.8.129;s;83pkt 83fpkt", shape=diamond, color=yellow];
2188[label="194.60.134.3;s;99pkt 99fpkt", shape=diamond, color=yellow];
2208[label="87.154.34.146;d;78pkt 78fpkt", shape=diamond, color=yellow];
2446[label="87.154.34.42;d;117pkt 117fpkt", shape=diamond, color=yellow];
2461[label="87.154.34.139;d;85pkt 85fpkt", shape=diamond, color=yellow];
2706[label="130.163.164.226;d;48pkt 48fpkt", shape=diamond, color=yellow];
2944[label="196.128.36.144;d;50pkt 50fpkt", shape=diamond, color=yellow];
3028[label="194.233.38.43;d;4pkt 4fpkt", shape=diamond, color=yellow];
3029[label="169.51.8.21;s;3pkt 3fpkt", shape=diamond, color=yellow];
3339[label="212.12.198.122;d;65pkt 65fpkt", shape=diamond, color=yellow];
3354[label="87.154.34.5;d;64pkt 64fpkt", shape=diamond, color=yellow];
3412[label="18.210.29.112;d;33pkt 33fpkt", shape=diamond, color=yellow];
3558[label="141.169.131.9;s;125pkt 125fpkt", shape=hexagon, color=black];
3566[label="141.169.28.132;s;88pkt 88fpkt", shape=hexagon, color=black];
3801[label="141.169.8.129;s;36pkt 36fpkt", shape=hexagon, color=black];
4022[label="194.60.134.3;s;55pkt 55fpkt", shape=hexagon, color=black];
4080[label="195.46.101.21;s;1818pkt 1818fpkt", shape=hexagon, color=black];
4111[label="141.169.84.54;s;159pkt 159fpkt", shape=hexagon, color=black];
4136[label="87.154.34.146;d;69pkt 69fpkt", shape=hexagon, color=black];
4202[label="194.233.38.43;d;4pkt 4fpkt", shape=hexagon, color=black];
4308[label="196.128.36.144;d;50pkt 50fpkt", shape=hexagon, color=black];
4692[label="136.213.28.4;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4786[label="141.169.131.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4920[label="169.51.8.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4925[label="195.46.101.21;2439pkt 2439fpkt", shape=pentagon, color=darkviolet];
5303[label="149.99.86.52;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5895[label="141.169.168.105;37pkt 37fpkt", shape=pentagon, color=darkviolet];
6081[label="141.169.8.129;84pkt 84fpkt", shape=pentagon, color=darkviolet];
6108[label="136.213.39.131;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6114[label="141.169.28.132;245pkt 245fpkt", shape=pentagon, color=darkviolet];
6136[label="149.99.139.133;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6187[label="141.169.116.138;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6874[label="149.99.117.208;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7068[label="136.213.34.232;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7306[label="136.213.28.4;30pkt 30fpkt", shape=invtriangle, color=brown];
7360[label="141.169.131.9;2pkt 2fpkt", shape=invtriangle, color=brown];
7431[label="169.51.8.21;2pkt 2fpkt", shape=invtriangle, color=brown];
7435[label="195.46.101.21;2439pkt 2439fpkt", shape=invtriangle, color=brown];
8029[label="141.169.168.105;36pkt 36fpkt", shape=invtriangle, color=brown];
8158[label="141.169.28.132;244pkt 244fpkt", shape=invtriangle, color=brown];
8172[label="149.99.139.133;12pkt 12fpkt", shape=invtriangle, color=brown];
8207[label="141.169.116.138;17pkt 17fpkt", shape=invtriangle, color=brown];
8724[label="136.213.34.232;27pkt 27fpkt", shape=invtriangle, color=brown];
8880[label="141.169.131.9;1pkt 1fpkt", shape=invhouse, color=bisque];
9226[label="141.169.168.105;36pkt 36fpkt", shape=invhouse, color=bisque];
9316[label="141.169.116.138;17pkt 17fpkt", shape=invhouse, color=bisque];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.101.21:53, *:*}[63.8969%]&lt;BR/&gt;{*:*, *:80}[33.4473%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.2642%)&lt;BR/&gt; 80: (11.7105%)&lt;BR/&gt; 32768: (1.08896%)&lt;BR/&gt; 32769: (0.875356%)&lt;BR/&gt; 1024: (0.804155%)&gt;];
}
1397--1626[label="0.00617284;2pkt 2fpkt"];
1397--1671[label="0.0060241;2pkt 2fpkt"];
1397--1971[label="1;46pkt 46fpkt"];
1397--2248[label="0.0163934;1pkt 1fpkt"];
1397--2416[label="0.00990099;1pkt 1fpkt"];
1397--2442[label="0.0192308;3pkt 3fpkt"];
1397--2456[label="0.0144928;1pkt 1fpkt"];
1397--2654[label="0.0192308;1pkt 1fpkt"];
1397--2706[label="0.916667;44pkt 44fpkt"];
1397--3120[label="0.0652174;3pkt 3fpkt"];
1397--3162[label="0.0147059;1pkt 1fpkt"];
1397--3178[label="0.012987;1pkt 1fpkt"];
1397--3192[label="0.0102041;1pkt 1fpkt"];
1397--3359[label="0.0243902;2pkt 2fpkt"];
1397--3364[label="1;2pkt 2fpkt"];
1397--3558[label="1;125pkt 125fpkt"];
1397--3615[label="0.0176991;2pkt 2fpkt"];
1397--3647[label="0.00990099;3pkt 3fpkt"];
1397--3762[label="0.0210843;7pkt 7fpkt"];
1397--4257[label="0.00660066;2pkt 2fpkt"];
1397--4455[label="0.0163934;1pkt 1fpkt"];
1397--4456[label="0.012987;1pkt 1fpkt"];
1397--4619[label="0.063253;21pkt 21fpkt"];
1397--4623[label="0.0662651;22pkt 22fpkt"];
1397--4628[label="0.207831;69pkt 69fpkt"];
1397--4631[label="0.063253;21pkt 21fpkt"];
1397--4635[label="0.207831;69pkt 69fpkt"];
1397--4786[label="1;1pkt 1fpkt"];
1397--7360[label="1;2pkt 2fpkt"];
1397--8880[label="1;1pkt 1fpkt"];
1440--2208[label="0.141026;11pkt 11fpkt"];
1440--2446[label="0.42735;50pkt 50fpkt"];
1440--2461[label="0.141176;12pkt 12fpkt"];
1440--2944[label="0.16;8pkt 8fpkt"];
1440--3189[label="0.047619;2pkt 2fpkt"];
1440--3354[label="0.03125;2pkt 2fpkt"];
1440--4136[label="0.15942;11pkt 11fpkt"];
1440--4308[label="0.16;8pkt 8fpkt"];
1440--6114[label="1;152pkt 152fpkt"];
1440--8158[label="1;152pkt 152fpkt"];
1798--2706[label="0.0208333;1pkt 1fpkt"];
1798--3028[label="0.25;1pkt 1fpkt"];
1798--3354[label="0.015625;1pkt 1fpkt"];
1798--4080[label="1;1818pkt 1818fpkt"];
1798--4202[label="0.25;1pkt 1fpkt"];
1798--4617[label="0.0618921;140pkt 140fpkt"];
1798--4627[label="0.0145889;33pkt 33fpkt"];
1798--4634[label="0.0145889;33pkt 33fpkt"];
1798--4925[label="0.999558;2261pkt 2261fpkt"];
1798--7435[label="0.999558;2261pkt 2261fpkt"];
1900--1923[label="0.0163934;2pkt 2fpkt"];
1900--1926[label="0.010101;1pkt 1fpkt"];
1900--2437[label="0.0131579;1pkt 1fpkt"];
1900--2461[label="0.0823529;7pkt 7fpkt"];
1900--2629[label="0.010989;1pkt 1fpkt"];
1900--2668[label="0.0181818;2pkt 2fpkt"];
1900--2671[label="0.0964912;11pkt 11fpkt"];
1900--2908[label="0.0175439;2pkt 2fpkt"];
1900--3075[label="0.0188679;1pkt 1fpkt"];
1900--3139[label="0.00869565;1pkt 1fpkt"];
1900--3352[label="0.0454545;3pkt 3fpkt"];
1900--3599[label="0.00735294;1pkt 1fpkt"];
1900--4111[label="1;159pkt 159fpkt"];
1900--4293[label="0.107843;11pkt 11fpkt"];
1900--4421[label="0.0163934;2pkt 2fpkt"];
1900--4619[label="0.00598802;1pkt 1fpkt"];
1900--4623[label="0.0778443;13pkt 13fpkt"];
1900--4631[label="0.00598802;1pkt 1fpkt"];
1971--3558[label="0.652174;30pkt 30fpkt"];
1971--4619[label="0.0869565;4pkt 4fpkt"];
1971--4623[label="0.26087;12pkt 12fpkt"];
1971--4628[label="0.0869565;4pkt 4fpkt"];
1971--4631[label="0.0869565;4pkt 4fpkt"];
1971--4635[label="0.0869565;4pkt 4fpkt"];
2130--2208[label="0.166667;13pkt 13fpkt"];
2130--3141[label="0.0240964;2pkt 2fpkt"];
2130--3162[label="0.0147059;1pkt 1fpkt"];
2130--3339[label="0.123077;8pkt 8fpkt"];
2130--3359[label="0.0121951;1pkt 1fpkt"];
2130--3412[label="0.212121;7pkt 7fpkt"];
2130--3647[label="0.0240964;2pkt 2fpkt"];
2130--3762[label="0.0240964;2pkt 2fpkt"];
2130--3801[label="1;36pkt 36fpkt"];
2130--3867[label="0.0120482;1pkt 1fpkt"];
2130--4136[label="0.173913;12pkt 12fpkt"];
2130--4257[label="0.0120482;1pkt 1fpkt"];
2130--4388[label="0.0120482;1pkt 1fpkt"];
2130--4619[label="0.0361446;3pkt 3fpkt"];
2130--4623[label="0.0963855;8pkt 8fpkt"];
2130--4628[label="0.060241;5pkt 5fpkt"];
2130--4631[label="0.0361446;3pkt 3fpkt"];
2130--4635[label="0.060241;5pkt 5fpkt"];
2130--6081[label="1;83pkt 83fpkt"];
2188--2702[label="0.0217391;1pkt 1fpkt"];
2188--3412[label="0.666667;22pkt 22fpkt"];
2188--4022[label="1;55pkt 55fpkt"];
2188--4257[label="0.010101;1pkt 1fpkt"];
2188--4623[label="0.0505051;5pkt 5fpkt"];
2188--4628[label="0.222222;22pkt 22fpkt"];
2188--4635[label="0.222222;22pkt 22fpkt"];
2208--3566[label="0.0641026;5pkt 5fpkt"];
2208--3782[label="0.0128205;1pkt 1fpkt"];
2208--3801[label="0.194444;7pkt 7fpkt"];
2208--4136[label="1;69pkt 69fpkt"];
2208--4557[label="0.0128205;1pkt 1fpkt"];
2208--4619[label="0.0128205;1pkt 1fpkt"];
2208--4623[label="0.115385;9pkt 9fpkt"];
2208--4628[label="0.0128205;1pkt 1fpkt"];
2208--4631[label="0.0128205;1pkt 1fpkt"];
2208--4635[label="0.0128205;1pkt 1fpkt"];
2208--4897[label="0.047619;1pkt 1fpkt"];
2208--5509[label="0.128205;10pkt 10fpkt"];
2208--5800[label="0.0128205;1pkt 1fpkt"];
2208--5843[label="0.0641026;5pkt 5fpkt"];
2208--6081[label="0.166667;13pkt 13fpkt"];
2208--6114[label="0.205128;16pkt 16fpkt"];
2208--6136[label="0.0833333;1pkt 1fpkt"];
2208--7068[label="0.185185;5pkt 5fpkt"];
2208--7969[label="0.0128205;1pkt 1fpkt"];
2208--7997[label="0.0641026;5pkt 5fpkt"];
2208--8158[label="0.205128;16pkt 16fpkt"];
2208--8172[label="0.0833333;1pkt 1fpkt"];
2208--8724[label="0.185185;5pkt 5fpkt"];
2208--9195[label="0.0128205;1pkt 1fpkt"];
2208--9209[label="0.0641026;5pkt 5fpkt"];
2446--3566[label="0.25;22pkt 22fpkt"];
2446--4619[label="0.00854701;1pkt 1fpkt"];
2446--4623[label="0.00854701;1pkt 1fpkt"];
2446--4628[label="0.00854701;1pkt 1fpkt"];
2446--4631[label="0.00854701;1pkt 1fpkt"];
2446--4635[label="0.00854701;1pkt 1fpkt"];
2446--5303[label="0.547619;23pkt 23fpkt"];
2446--5382[label="0.25;2pkt 2fpkt"];
2446--5590[label="0.0454545;3pkt 3fpkt"];
2446--6114[label="0.615385;72pkt 72fpkt"];
2446--7719[label="0.285714;2pkt 2fpkt"];
2446--7839[label="0.0454545;3pkt 3fpkt"];
2446--8158[label="0.615385;72pkt 72fpkt"];
2461--3163[label="0.128205;5pkt 5fpkt"];
2461--3566[label="0.0941176;8pkt 8fpkt"];
2461--3895[label="0.0352941;3pkt 3fpkt"];
2461--3928[label="0.0588235;5pkt 5fpkt"];
2461--4111[label="0.0823529;7pkt 7fpkt"];
2461--4368[label="0.0117647;1pkt 1fpkt"];
2461--4445[label="0.128205;5pkt 5fpkt"];
2461--4619[label="0.0117647;1pkt 1fpkt"];
2461--4623[label="0.0117647;1pkt 1fpkt"];
2461--4628[label="0.0352941;3pkt 3fpkt"];
2461--4631[label="0.0117647;1pkt 1fpkt"];
2461--4635[label="0.0352941;3pkt 3fpkt"];
2461--4692[label="0.4;12pkt 12fpkt"];
2461--4978[label="0.0508475;3pkt 3fpkt"];
2461--5080[label="0.135135;5pkt 5fpkt"];
2461--5895[label="0.351351;13pkt 13fpkt"];
2461--6090[label="0.0117647;1pkt 1fpkt"];
2461--6114[label="0.235294;20pkt 20fpkt"];
2461--7306[label="0.4;12pkt 12fpkt"];
2461--7525[label="0.131579;5pkt 5fpkt"];
2461--8029[label="0.361111;13pkt 13fpkt"];
2461--8158[label="0.235294;20pkt 20fpkt"];
2461--9226[label="0.361111;13pkt 13fpkt"];
2706--3335[label="0.0208333;1pkt 1fpkt"];
2706--3558[label="0.395833;19pkt 19fpkt"];
2706--4080[label="0.0208333;1pkt 1fpkt"];
2706--4619[label="0.0625;3pkt 3fpkt"];
2706--4628[label="0.0625;3pkt 3fpkt"];
2706--4631[label="0.0625;3pkt 3fpkt"];
2706--4635[label="0.0625;3pkt 3fpkt"];
2706--4726[label="0.0208333;1pkt 1fpkt"];
2706--4767[label="0.0208333;1pkt 1fpkt"];
2706--4925[label="0.0208333;1pkt 1fpkt"];
2706--5862[label="0.0208333;1pkt 1fpkt"];
2706--7325[label="0.0208333;1pkt 1fpkt"];
2706--7435[label="0.0208333;1pkt 1fpkt"];
2706--8009[label="0.0208333;1pkt 1fpkt"];
2706--9215[label="0.0208333;1pkt 1fpkt"];
2944--3566[label="0.08;4pkt 4fpkt"];
2944--4308[label="1;50pkt 50fpkt"];
2944--4619[label="0.06;3pkt 3fpkt"];
2944--4623[label="0.06;3pkt 3fpkt"];
2944--4631[label="0.06;3pkt 3fpkt"];
2944--4897[label="0.047619;1pkt 1fpkt"];
2944--5590[label="0.02;1pkt 1fpkt"];
2944--6114[label="0.24;12pkt 12fpkt"];
2944--6181[label="0.0967742;3pkt 3fpkt"];
2944--6792[label="0.0222222;1pkt 1fpkt"];
2944--7839[label="0.02;1pkt 1fpkt"];
2944--8158[label="0.24;12pkt 12fpkt"];
3028--3029[label="1;3pkt 3fpkt"];
3028--4080[label="0.25;1pkt 1fpkt"];
3028--4202[label="1;4pkt 4fpkt"];
3028--4920[label="1;2pkt 2fpkt"];
3028--4925[label="0.25;1pkt 1fpkt"];
3028--7431[label="1;2pkt 2fpkt"];
3028--7435[label="0.25;1pkt 1fpkt"];
3029--4202[label="1;3pkt 3fpkt"];
3029--4920[label="1;2pkt 2fpkt"];
3029--7431[label="1;2pkt 2fpkt"];
3339--3429[label="0.0169492;1pkt 1fpkt"];
3339--3466[label="0.0153846;1pkt 1fpkt"];
3339--3522[label="0.0153846;1pkt 1fpkt"];
3339--3536[label="0.0153846;1pkt 1fpkt"];
3339--3697[label="0.0196078;1pkt 1fpkt"];
3339--3801[label="0.0555556;2pkt 2fpkt"];
3339--4065[label="0.0153846;1pkt 1fpkt"];
3339--4268[label="0.0434783;1pkt 1fpkt"];
3339--4317[label="0.0555556;1pkt 1fpkt"];
3339--4398[label="0.0153846;1pkt 1fpkt"];
3339--4619[label="0.0615385;4pkt 4fpkt"];
3339--4623[label="0.0153846;1pkt 1fpkt"];
3339--4628[label="0.0307692;2pkt 2fpkt"];
3339--4631[label="0.0615385;4pkt 4fpkt"];
3339--4635[label="0.0307692;2pkt 2fpkt"];
3339--4693[label="0.111111;1pkt 1fpkt"];
3339--4894[label="0.0153846;1pkt 1fpkt"];
3339--5034[label="0.0357143;1pkt 1fpkt"];
3339--5059[label="0.03125;1pkt 1fpkt"];
3339--5145[label="0.0588235;1pkt 1fpkt"];
3339--5273[label="0.0909091;1pkt 1fpkt"];
3339--5291[label="0.0461538;3pkt 3fpkt"];
3339--5473[label="0.0307692;2pkt 2fpkt"];
3339--5587[label="0.0153846;1pkt 1fpkt"];
3339--5696[label="0.0153846;1pkt 1fpkt"];
3339--5709[label="0.0169492;1pkt 1fpkt"];
3339--5843[label="0.0153846;1pkt 1fpkt"];
3339--6081[label="0.123077;8pkt 8fpkt"];
3339--6108[label="0.15;3pkt 3fpkt"];
3339--6111[label="0.0153846;1pkt 1fpkt"];
3339--6167[label="0.0434783;1pkt 1fpkt"];
3339--6187[label="0.0588235;1pkt 1fpkt"];
3339--6443[label="0.0714286;1pkt 1fpkt"];
3339--6461[label="0.0714286;1pkt 1fpkt"];
3339--6524[label="0.05;1pkt 1fpkt"];
3339--6574[label="0.0666667;1pkt 1fpkt"];
3339--6856[label="0.111111;1pkt 1fpkt"];
3339--7223[label="0.0909091;1pkt 1fpkt"];
3339--7419[label="0.0153846;1pkt 1fpkt"];
3339--7501[label="0.0344828;1pkt 1fpkt"];
3339--7512[label="0.030303;1pkt 1fpkt"];
3339--7658[label="0.0461538;3pkt 3fpkt"];
3339--7997[label="0.0153846;1pkt 1fpkt"];
3339--8155[label="0.0153846;1pkt 1fpkt"];
3339--8192[label="0.0434783;1pkt 1fpkt"];
3339--8207[label="0.0588235;1pkt 1fpkt"];
3339--8360[label="0.0714286;1pkt 1fpkt"];
3339--8590[label="0.111111;1pkt 1fpkt"];
3339--8961[label="0.03125;1pkt 1fpkt"];
3339--9209[label="0.0153846;1pkt 1fpkt"];
3339--9247[label="0.1;1pkt 1fpkt"];
3339--9290[label="0.0153846;1pkt 1fpkt"];
3339--9316[label="0.0588235;1pkt 1fpkt"];
3354--3566[label="0.015625;1pkt 1fpkt"];
3354--4080[label="0.015625;1pkt 1fpkt"];
3354--4617[label="0.03125;2pkt 2fpkt"];
3354--4619[label="0.09375;6pkt 6fpkt"];
3354--4628[label="0.03125;2pkt 2fpkt"];
3354--4631[label="0.09375;6pkt 6fpkt"];
3354--4635[label="0.03125;2pkt 2fpkt"];
3354--4925[label="0.015625;1pkt 1fpkt"];
3354--5610[label="0.015625;1pkt 1fpkt"];
3354--5843[label="0.03125;2pkt 2fpkt"];
3354--5895[label="0.243243;9pkt 9fpkt"];
3354--6114[label="0.046875;3pkt 3fpkt"];
3354--6181[label="0.0967742;3pkt 3fpkt"];
3354--6874[label="0.814815;22pkt 22fpkt"];
3354--7435[label="0.015625;1pkt 1fpkt"];
3354--7997[label="0.03125;2pkt 2fpkt"];
3354--8029[label="0.25;9pkt 9fpkt"];
3354--8158[label="0.046875;3pkt 3fpkt"];
3354--9209[label="0.03125;2pkt 2fpkt"];
3354--9226[label="0.25;9pkt 9fpkt"];
3412--4022[label="0.393939;13pkt 13fpkt"];
3412--4623[label="0.0606061;2pkt 2fpkt"];
3412--4628[label="0.0606061;2pkt 2fpkt"];
3412--4635[label="0.0606061;2pkt 2fpkt"];
3412--6081[label="0.212121;7pkt 7fpkt"];
3412--6108[label="0.2;4pkt 4fpkt"];
3558--3615[label="0.00884956;1pkt 1fpkt"];
3558--3647[label="0.024;3pkt 3fpkt"];
3558--3762[label="0.04;5pkt 5fpkt"];
3558--4456[label="0.012987;1pkt 1fpkt"];
3558--4619[label="0.168;21pkt 21fpkt"];
3558--4623[label="0.176;22pkt 22fpkt"];
3558--4628[label="0.04;5pkt 5fpkt"];
3558--4631[label="0.168;21pkt 21fpkt"];
3558--4635[label="0.04;5pkt 5fpkt"];
3558--4786[label="1;1pkt 1fpkt"];
3558--7360[label="0.5;1pkt 1fpkt"];
3558--8880[label="1;1pkt 1fpkt"];
3566--4136[label="0.0724638;5pkt 5fpkt"];
3566--4308[label="0.08;4pkt 4fpkt"];
3566--4619[label="0.0909091;8pkt 8fpkt"];
3566--4631[label="0.0909091;8pkt 8fpkt"];
3566--6114[label="1;88pkt 88fpkt"];
3566--8158[label="0.988636;87pkt 87fpkt"];
3801--3867[label="0.0277778;1pkt 1fpkt"];
3801--4136[label="0.194444;7pkt 7fpkt"];
3801--4257[label="0.0277778;1pkt 1fpkt"];
3801--4388[label="0.0277778;1pkt 1fpkt"];
3801--4619[label="0.0833333;3pkt 3fpkt"];
3801--4623[label="0.222222;8pkt 8fpkt"];
3801--4628[label="0.0277778;1pkt 1fpkt"];
3801--4631[label="0.0833333;3pkt 3fpkt"];
3801--4635[label="0.0277778;1pkt 1fpkt"];
3801--6081[label="1;36pkt 36fpkt"];
4022--4623[label="0.0909091;5pkt 5fpkt"];
4022--4628[label="0.0181818;1pkt 1fpkt"];
4022--4635[label="0.0181818;1pkt 1fpkt"];
4080--4202[label="0.25;1pkt 1fpkt"];
4080--4617[label="0.0770077;140pkt 140fpkt"];
4080--4627[label="0.0143014;26pkt 26fpkt"];
4080--4634[label="0.0143014;26pkt 26fpkt"];
4080--4925[label="0.99945;1817pkt 1817fpkt"];
4080--7435[label="0.99945;1817pkt 1817fpkt"];
4111--4293[label="0.107843;11pkt 11fpkt"];
4111--4421[label="0.0163934;2pkt 2fpkt"];
4111--4619[label="0.00628931;1pkt 1fpkt"];
4111--4623[label="0.081761;13pkt 13fpkt"];
4111--4631[label="0.00628931;1pkt 1fpkt"];
4136--4557[label="0.0144928;1pkt 1fpkt"];
4136--4619[label="0.0144928;1pkt 1fpkt"];
4136--4623[label="0.130435;9pkt 9fpkt"];
4136--4631[label="0.0144928;1pkt 1fpkt"];
4136--5509[label="0.130435;9pkt 9fpkt"];
4136--5800[label="0.0144928;1pkt 1fpkt"];
4136--5843[label="0.0724638;5pkt 5fpkt"];
4136--6081[label="0.173913;12pkt 12fpkt"];
4136--6114[label="0.231884;16pkt 16fpkt"];
4136--7969[label="0.0144928;1pkt 1fpkt"];
4136--7997[label="0.0724638;5pkt 5fpkt"];
4136--8158[label="0.231884;16pkt 16fpkt"];
4136--9195[label="0.0144928;1pkt 1fpkt"];
4136--9209[label="0.0724638;5pkt 5fpkt"];
4202--4920[label="1;2pkt 2fpkt"];
4202--4925[label="0.25;1pkt 1fpkt"];
4202--7431[label="1;2pkt 2fpkt"];
4202--7435[label="0.25;1pkt 1fpkt"];
4308--4619[label="0.06;3pkt 3fpkt"];
4308--4623[label="0.06;3pkt 3fpkt"];
4308--4631[label="0.06;3pkt 3fpkt"];
4308--4897[label="0.047619;1pkt 1fpkt"];
4308--5590[label="0.02;1pkt 1fpkt"];
4308--6114[label="0.24;12pkt 12fpkt"];
4308--6181[label="0.0967742;3pkt 3fpkt"];
4308--6792[label="0.0222222;1pkt 1fpkt"];
4308--7839[label="0.02;1pkt 1fpkt"];
4308--8158[label="0.24;12pkt 12fpkt"];
4692--7306[label="1;30pkt 30fpkt"];
4786--7360[label="1;1pkt 1fpkt"];
4786--8880[label="1;1pkt 1fpkt"];
4920--7431[label="1;2pkt 2fpkt"];
4925--7435[label="1;2439pkt 2439fpkt"];
5895--8029[label="1;36pkt 36fpkt"];
5895--9226[label="1;36pkt 36fpkt"];
6114--8158[label="1;244pkt 244fpkt"];
6136--8172[label="1;12pkt 12fpkt"];
6187--8207[label="1;17pkt 17fpkt"];
6187--9316[label="1;17pkt 17fpkt"];
7068--8724[label="1;27pkt 27fpkt"];
7360--8880[label="1;1pkt 1fpkt"];
8029--9226[label="1;36pkt 36fpkt"];
8207--9316[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter src_ip="195.46.101.21" src_port="53"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
5904[label="169.51.85.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8034[label="169.51.85.106;4pkt 4fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.85.106:2827, 197.30.230.12:80}[25%]&lt;BR/&gt;{169.51.85.106:2831, 197.30.152.114:80}[25%]&lt;BR/&gt;{169.51.85.106:2829, 197.30.152.35:80}[25%]&lt;BR/&gt;{169.51.85.106:2833, 197.30.152.35:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 2833: (14.2857%)&lt;BR/&gt; 2831: (14.2857%)&lt;BR/&gt; 2827: (14.2857%)&lt;BR/&gt; 443: (14.2857%)&gt;];
}
5904--8034[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.152.35" dst_port="443" src_ip="169.51.85.106" src_port="2833"/>
      <filter dst_ip="197.30.152.35" dst_port="80" src_ip="169.51.85.106" src_port="2829"/>
      <filter dst_ip="197.30.152.114" dst_port="80" src_ip="169.51.85.106" src_port="2831"/>
      <filter dst_ip="197.30.230.12" dst_port="80" src_ip="169.51.85.106" src_port="2827"/>
    </slice>
    <from sec="1089177241" usec="0"/>
    <to sec="1089177253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.30.34.108"/>
    </slice>
    <from sec="1089176897" usec="0"/>
    <to sec="1089177250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.144.95.108"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
5935[label="197.30.34.110;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8052[label="197.30.34.110;1pkt 1fpkt", shape=invtriangle, color=brown];
9235[label="197.30.34.110;1pkt 1fpkt", shape=invhouse, color=bisque];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.110:1863, 136.213.38.131:3054}[50%]&lt;BR/&gt;{197.30.34.110:1863, 136.213.157.184:1660}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1660: (37.5%)&lt;BR/&gt; 3054: (12.5%)&gt;];
}
5935--8052[label="1;1pkt 1fpkt"];
5935--9235[label="1;1pkt 1fpkt"];
8052--9235[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.157.184" dst_port="1660" src_ip="197.30.34.110" src_port="1863"/>
      <filter dst_ip="136.213.38.131" dst_port="3054" src_ip="197.30.34.110" src_port="1863"/>
    </slice>
    <from sec="1089176459" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
3172[label="197.30.34.60;d;5pkt 5fpkt", shape=diamond, color=yellow];
5947[label="136.213.20.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8060[label="136.213.20.112;2pkt 2fpkt", shape=invtriangle, color=brown];
9241[label="136.213.20.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.30.34.60:1863}[83.3333%]&lt;BR/&gt;{136.213.20.112:*, *:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1297: (15%)&lt;BR/&gt; 1284: (15%)&lt;BR/&gt; 41789: (5%)&lt;BR/&gt; 3254: (5%)&gt;];
}
3172--5947[label="0.5;1pkt 1fpkt"];
3172--8060[label="0.5;1pkt 1fpkt"];
5947--8060[label="1;2pkt 2fpkt"];
5947--9241[label="1;1pkt 1fpkt"];
8060--9241[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="136.213.20.112"/>
      <filter dst_ip="197.30.34.60" dst_port="1863"/>
    </slice>
    <from sec="1089176420" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.133.227.112"/>
    </slice>
    <from sec="1089176734" usec="0"/>
    <to sec="1089176773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07776,1.99758,001,1 1 1 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
355[label="214.214.19.114s;421pkt 421fpkt", shape=rectangle, color=red];
703[label="214.214.19.114s;11pkt 11fpkt", shape=ellipse, color=green];
995[label="214.214.19.114s;11pkt 11fpkt", shape=triangle, color=blue];
5965[label="214.214.19.114;634pkt 634fpkt", shape=pentagon, color=darkviolet];
5970[label="169.51.87.114;73pkt 73fpkt", shape=pentagon, color=darkviolet];
8068[label="214.214.19.114;634pkt 634fpkt", shape=invtriangle, color=brown];
8071[label="169.51.87.114;73pkt 73fpkt", shape=invtriangle, color=brown];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.214.19.114:*, *:9898}[46.959%]&lt;BR/&gt;{214.214.19.114:*, *:5554}[42.7157%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (24.098%)&lt;BR/&gt; 5554: (21.0555%)&lt;BR/&gt; 80: (4.68498%)&lt;BR/&gt; 443: (0.161551%)&lt;BR/&gt; 3165: (0.134626%)&gt;];
}
355--703[label="1;11pkt 11fpkt"];
355--995[label="1;11pkt 11fpkt"];
355--5965[label="0.971496;409pkt 409fpkt"];
355--5970[label="0.164384;12pkt 12fpkt"];
355--8068[label="0.971496;409pkt 409fpkt"];
355--8071[label="0.164384;12pkt 12fpkt"];
703--995[label="1;11pkt 11fpkt"];
703--5970[label="1;11pkt 11fpkt"];
703--8071[label="1;11pkt 11fpkt"];
995--5970[label="1;11pkt 11fpkt"];
995--8071[label="1;11pkt 11fpkt"];
5965--8068[label="1;634pkt 634fpkt"];
5970--8071[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.214.19.114"/>
      <filter dst_port="5554" src_ip="214.214.19.114"/>
    </slice>
    <from sec="1089177117" usec="0"/>
    <to sec="1089177288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
5966[label="215.25.22.114;100pkt 100fpkt", shape=pentagon, color=darkviolet];
8069[label="215.25.22.114;100pkt 100fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.25.22.114:*, *:1027}[62%]&lt;BR/&gt;{215.25.22.114:*, *:1026}[37%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (31%)&lt;BR/&gt; 1026: (18.5%)&lt;BR/&gt; 0: (1%)&lt;BR/&gt; 4941: (0.5%)&lt;BR/&gt; 4938: (0.5%)&gt;];
}
5966--8069[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="215.25.22.114"/>
      <filter dst_port="1026" src_ip="215.25.22.114"/>
    </slice>
    <from sec="1089176413" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
5972[label="222.10.168.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8073[label="222.10.168.114;3pkt 3fpkt", shape=invtriangle, color=brown];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.10.168.114:80, 141.169.15.67:2141}[33.3333%]&lt;BR/&gt;{222.10.168.114:80, 141.169.15.67:2142}[33.3333%]&lt;BR/&gt;{222.10.168.114:80, 141.169.15.67:2143}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2143: (16.6667%)&lt;BR/&gt; 2142: (16.6667%)&lt;BR/&gt; 2141: (16.6667%)&gt;];
}
5972--8073[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.15.67" dst_port="2143" src_ip="222.10.168.114" src_port="80"/>
      <filter dst_ip="141.169.15.67" dst_port="2142" src_ip="222.10.168.114" src_port="80"/>
      <filter dst_ip="141.169.15.67" dst_port="2141" src_ip="222.10.168.114" src_port="80"/>
    </slice>
    <from sec="1089176764" usec="0"/>
    <to sec="1089176770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
5979[label="197.30.34.115;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8077[label="197.30.34.115;6pkt 6fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.34.115:1863, 194.60.158.151:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3489: (7.69231%)&lt;BR/&gt; 3434: (7.69231%)&lt;BR/&gt; 3424: (7.69231%)&lt;BR/&gt; 3386: (7.69231%)&gt;];
}
5979--8077[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.158.151" src_ip="197.30.34.115" src_port="1863"/>
    </slice>
    <from sec="1089176457" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
5981[label="173.19.65.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8078[label="173.19.65.115;1pkt 1fpkt", shape=invtriangle, color=brown];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.65.115:3135, 212.32.38.214:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 3135: (50%)&gt;];
}
5981--8078[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.32.38.214" dst_port="5050" src_ip="173.19.65.115" src_port="3135"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
5983[label="220.80.90.115;191pkt 191fpkt", shape=pentagon, color=darkviolet];
8079[label="220.80.90.115;191pkt 191fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.80.90.115:1035, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1035: (50%)&gt;];
}
5983--8079[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.80.90.115" src_port="1035"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
5994[label="141.169.78.116;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8088[label="141.169.78.116;48pkt 48fpkt", shape=invtriangle, color=brown];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.78.116:*, 75.146.112.9:6667}[77.0833%]&lt;BR/&gt;{141.169.78.116:*, 19.118.168.88:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (38.5417%)&lt;BR/&gt; 80: (11.4583%)&lt;BR/&gt; 65427: (1.04167%)&lt;BR/&gt; 65377: (1.04167%)&lt;BR/&gt; 65313: (1.04167%)&gt;];
}
5994--8088[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="75.146.112.9" dst_port="6667" src_ip="141.169.78.116"/>
      <filter dst_ip="19.118.168.88" dst_port="80" src_ip="141.169.78.116"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
6012[label="214.29.161.118;104pkt 104fpkt", shape=pentagon, color=darkviolet];
8096[label="214.29.161.118;104pkt 104fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.29.161.118:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6012--8096[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.29.161.118" src_port="1029"/>
    </slice>
    <from sec="1089177259" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
6017[label="169.51.69.119;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8100[label="169.51.69.119;35pkt 35fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.69.119:*, 137.110.118.89:9100}[97.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9100: (48.5714%)&lt;BR/&gt; 1804: (1.42857%)&lt;BR/&gt; 1803: (1.42857%)&lt;BR/&gt; 1802: (1.42857%)&lt;BR/&gt; 1801: (1.42857%)&gt;];
}
6017--8100[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="137.110.118.89" dst_port="9100" src_ip="169.51.69.119"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
6669[label="17.59.26.187;33pkt 33fpkt", shape=pentagon, color=darkviolet];
8484[label="17.59.26.187;32pkt 32fpkt", shape=invtriangle, color=brown];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.59.26.187:80, 136.213.26.198:*}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2308%)&lt;BR/&gt; 1079: (1.53846%)&lt;BR/&gt; 1078: (1.53846%)&lt;BR/&gt; 1077: (1.53846%)&lt;BR/&gt; 1076: (1.53846%)&gt;];
}
6669--8484[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.26.198" src_ip="17.59.26.187" src_port="80"/>
    </slice>
    <from sec="1089177203" usec="0"/>
    <to sec="1089177226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
6026[label="16.170.9.121;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8107[label="16.170.9.121;7pkt 7fpkt", shape=invtriangle, color=brown];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.170.9.121:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 10336: (7.69231%)&lt;BR/&gt; 6688: (7.69231%)&lt;BR/&gt; 4562: (7.69231%)&lt;BR/&gt; 4561: (7.69231%)&gt;];
}
6026--8107[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="16.170.9.121"/>
    </slice>
    <from sec="1089176478" usec="0"/>
    <to sec="1089177130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.153.170.121"/>
    </slice>
    <from sec="1089177196" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
6044[label="17.29.6.124;59pkt 59fpkt", shape=pentagon, color=darkviolet];
8118[label="17.29.6.124;60pkt 60fpkt", shape=invtriangle, color=brown];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.29.6.124:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4966: (0.840336%)&lt;BR/&gt; 4859: (0.840336%)&lt;BR/&gt; 4654: (0.840336%)&lt;BR/&gt; 4631: (0.840336%)&gt;];
}
6044--8118[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="17.29.6.124"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089176950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
6048[label="141.169.68.124;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8120[label="141.169.68.124;6pkt 6fpkt", shape=invtriangle, color=brown];
9269[label="141.169.68.124;5pkt 5fpkt", shape=invhouse, color=bisque];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.68.124:*, *:1863}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (41.1765%)&lt;BR/&gt; 4813: (8.82353%)&lt;BR/&gt; 4805: (8.82353%)&lt;BR/&gt; 3817: (8.82353%)&lt;BR/&gt; 3227: (8.82353%)&gt;];
}
6048--8120[label="1;6pkt 6fpkt"];
6048--9269[label="1;5pkt 5fpkt"];
8120--9269[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="141.169.68.124"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.226.28.125"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
6055[label="195.46.99.125;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8122[label="195.46.99.125;3pkt 3fpkt", shape=invtriangle, color=brown];
9270[label="195.46.99.125;3pkt 3fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.99.125:9898, 215.200.33.112:3757}[33.3333%]&lt;BR/&gt;{195.46.99.125:35390, 16.106.35.40:80}[33.3333%]&lt;BR/&gt;{195.46.99.125:35391, 16.106.35.40:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 35391: (16.6667%)&lt;BR/&gt; 35390: (16.6667%)&lt;BR/&gt; 9898: (16.6667%)&lt;BR/&gt; 3757: (16.6667%)&gt;];
}
6055--8122[label="1;3pkt 3fpkt"];
6055--9270[label="1;3pkt 3fpkt"];
8122--9270[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="16.106.35.40" dst_port="80" src_ip="195.46.99.125" src_port="35391"/>
      <filter dst_ip="16.106.35.40" dst_port="80" src_ip="195.46.99.125" src_port="35390"/>
      <filter dst_ip="215.200.33.112" dst_port="3757" src_ip="195.46.99.125" src_port="9898"/>
    </slice>
    <from sec="1089176627" usec="0"/>
    <to sec="1089177221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
398[label="215.166.82.154s;707pkt 707fpkt", shape=rectangle, color=red];
743[label="215.166.82.154s;504pkt 504fpkt", shape=ellipse, color=green];
1029[label="215.166.82.154s;504pkt 504fpkt", shape=triangle, color=blue];
6057[label="220.250.148.125;202pkt 202fpkt", shape=pentagon, color=darkviolet];
6355[label="215.166.82.154;504pkt 504fpkt", shape=pentagon, color=darkviolet];
8123[label="220.250.148.125;202pkt 202fpkt", shape=invtriangle, color=brown];
8295[label="215.166.82.154;503pkt 503fpkt", shape=invtriangle, color=brown];
9271[label="220.250.148.125;202pkt 202fpkt", shape=invhouse, color=bisque];
9375[label="215.166.82.154;503pkt 503fpkt", shape=invhouse, color=bisque];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.166.82.154:*, *:9898}[71.2871%]&lt;BR/&gt;{220.250.148.125:*, *:9898}[28.7129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1582: (0.156617%)&lt;BR/&gt; 1573: (0.156617%)&lt;BR/&gt; 1572: (0.156617%)&lt;BR/&gt; 1563: (0.156617%)&gt;];
}
398--743[label="1;504pkt 504fpkt"];
398--1029[label="1;504pkt 504fpkt"];
398--1148[label="0.004329;1pkt 1fpkt"];
398--2827[label="0.016129;1pkt 1fpkt"];
398--2845[label="0.00943396;1pkt 1fpkt"];
398--2860[label="0.0142857;1pkt 1fpkt"];
398--2867[label="0.00735294;1pkt 1fpkt"];
398--2972[label="0.015873;1pkt 1fpkt"];
398--4095[label="0.00980392;1pkt 1fpkt"];
398--4109[label="0.0185185;1pkt 1fpkt"];
398--4266[label="0.00735294;1pkt 1fpkt"];
398--4358[label="0.016129;1pkt 1fpkt"];
398--6057[label="1;202pkt 202fpkt"];
398--6355[label="1;504pkt 504fpkt"];
398--8123[label="1;202pkt 202fpkt"];
398--8295[label="1;503pkt 503fpkt"];
398--9271[label="1;202pkt 202fpkt"];
398--9375[label="1;503pkt 503fpkt"];
743--1029[label="1;504pkt 504fpkt"];
743--1148[label="0.004329;1pkt 1fpkt"];
743--2827[label="0.016129;1pkt 1fpkt"];
743--2845[label="0.00943396;1pkt 1fpkt"];
743--2860[label="0.0142857;1pkt 1fpkt"];
743--2867[label="0.00735294;1pkt 1fpkt"];
743--2972[label="0.015873;1pkt 1fpkt"];
743--4095[label="0.00980392;1pkt 1fpkt"];
743--4109[label="0.0185185;1pkt 1fpkt"];
743--4266[label="0.00735294;1pkt 1fpkt"];
743--4358[label="0.016129;1pkt 1fpkt"];
743--6355[label="1;504pkt 504fpkt"];
743--8295[label="1;503pkt 503fpkt"];
743--9375[label="1;503pkt 503fpkt"];
1029--1148[label="0.004329;1pkt 1fpkt"];
1029--2827[label="0.016129;1pkt 1fpkt"];
1029--2845[label="0.00943396;1pkt 1fpkt"];
1029--2860[label="0.0142857;1pkt 1fpkt"];
1029--2867[label="0.00735294;1pkt 1fpkt"];
1029--2972[label="0.015873;1pkt 1fpkt"];
1029--4095[label="0.00980392;1pkt 1fpkt"];
1029--4109[label="0.0185185;1pkt 1fpkt"];
1029--4266[label="0.00735294;1pkt 1fpkt"];
1029--4358[label="0.016129;1pkt 1fpkt"];
1029--6355[label="1;504pkt 504fpkt"];
1029--8295[label="1;503pkt 503fpkt"];
1029--9375[label="1;503pkt 503fpkt"];
6057--8123[label="1;202pkt 202fpkt"];
6057--9271[label="1;202pkt 202fpkt"];
6355--8295[label="1;503pkt 503fpkt"];
6355--9375[label="1;503pkt 503fpkt"];
8123--9271[label="1;202pkt 202fpkt"];
8295--9375[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.166.82.154"/>
      <filter dst_port="9898" src_ip="220.250.148.125"/>
    </slice>
    <from sec="1089176790" usec="0"/>
    <to sec="1089177015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
1365[label="19.185.195.125;s;12pkt 12fpkt", shape=diamond, color=yellow];
1643[label="136.213.34.210;d;85pkt 85fpkt", shape=diamond, color=yellow];
2664[label="19.185.195.107;s;30pkt 30fpkt", shape=diamond, color=yellow];
3616[label="19.185.195.125;s;15pkt 15fpkt", shape=hexagon, color=black];
3805[label="136.213.34.210;d;85pkt 85fpkt", shape=hexagon, color=black];
5915[label="19.185.195.107;46pkt 46fpkt", shape=pentagon, color=darkviolet];
6058[label="19.185.195.125;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8041[label="19.185.195.107;47pkt 47fpkt", shape=invtriangle, color=brown];
8124[label="19.185.195.125;28pkt 28fpkt", shape=invtriangle, color=brown];
9272[label="19.185.195.125;28pkt 28fpkt", shape=invhouse, color=bisque];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.185.195.107:80, 136.213.34.210:*}[54.6512%]&lt;BR/&gt;{19.185.195.125:80, 136.213.34.210:*}[33.7209%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7531%)&lt;BR/&gt; 2221: (0.740741%)&lt;BR/&gt; 2220: (0.740741%)&lt;BR/&gt; 2203: (0.740741%)&lt;BR/&gt; 2202: (0.740741%)&gt;];
}
1365--1643[label="1;12pkt 12fpkt"];
1365--3805[label="1;12pkt 12fpkt"];
1365--6058[label="1;12pkt 12fpkt"];
1365--8124[label="1;12pkt 12fpkt"];
1365--9272[label="1;12pkt 12fpkt"];
1643--2664[label="1;30pkt 30fpkt"];
1643--3616[label="1;15pkt 15fpkt"];
1643--3805[label="1;85pkt 85fpkt"];
1643--4618[label="0.0588235;5pkt 5fpkt"];
1643--5915[label="0.978261;45pkt 45fpkt"];
1643--6058[label="1;29pkt 29fpkt"];
1643--8041[label="0.978723;46pkt 46fpkt"];
1643--8124[label="1;28pkt 28fpkt"];
1643--9272[label="1;28pkt 28fpkt"];
2664--3805[label="1;30pkt 30fpkt"];
2664--4618[label="0.0666667;2pkt 2fpkt"];
2664--5915[label="0.966667;29pkt 29fpkt"];
2664--8041[label="1;30pkt 30fpkt"];
3616--3805[label="1;15pkt 15fpkt"];
3616--4618[label="0.133333;2pkt 2fpkt"];
3616--6058[label="1;15pkt 15fpkt"];
3616--8124[label="0.933333;14pkt 14fpkt"];
3616--9272[label="0.933333;14pkt 14fpkt"];
3805--4618[label="0.0588235;5pkt 5fpkt"];
3805--5915[label="0.978261;45pkt 45fpkt"];
3805--6058[label="1;29pkt 29fpkt"];
3805--8041[label="0.978723;46pkt 46fpkt"];
3805--8124[label="1;28pkt 28fpkt"];
3805--9272[label="1;28pkt 28fpkt"];
5915--8041[label="1;46pkt 46fpkt"];
6058--8124[label="1;28pkt 28fpkt"];
6058--9272[label="1;28pkt 28fpkt"];
8124--9272[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.34.210" src_ip="19.185.195.107" src_port="80"/>
      <filter dst_ip="136.213.34.210" src_ip="19.185.195.125" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.218.168.126"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.103.169.127"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.155.224.127"/>
    </slice>
    <from sec="1089176433" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.101.128"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
1283[label="197.30.41.252;d;362pkt 362fpkt", shape=diamond, color=yellow];
1555[label="136.213.0.115;s;352pkt 352fpkt", shape=diamond, color=yellow];
2180[label="18.210.70.76;d;140pkt 140fpkt", shape=diamond, color=yellow];
2361[label="18.1.226.177;d;148pkt 148fpkt", shape=diamond, color=yellow];
2467[label="141.169.99.80;s;25pkt 25fpkt", shape=diamond, color=yellow];
2502[label="195.2.72.25;d;18pkt 18fpkt", shape=diamond, color=yellow];
2655[label="136.213.11.177;s;201pkt 201fpkt", shape=diamond, color=yellow];
2904[label="136.213.0.100;s;62pkt 62fpkt", shape=diamond, color=yellow];
2925[label="16.36.188.240;d;55pkt 55fpkt", shape=diamond, color=yellow];
2932[label="141.169.174.140;s;61pkt 61fpkt", shape=diamond, color=yellow];
3160[label="136.213.85.130;s;73pkt 73fpkt", shape=diamond, color=yellow];
3256[label="192.188.23.128;d;14pkt 14fpkt", shape=diamond, color=yellow];
3664[label="197.30.41.252;d;362pkt 362fpkt", shape=hexagon, color=black];
3786[label="136.213.0.115;s;131pkt 131fpkt", shape=hexagon, color=black];
4146[label="141.169.174.140;s;55pkt 55fpkt", shape=hexagon, color=black];
4285[label="136.213.0.100;s;62pkt 62fpkt", shape=hexagon, color=black];
4298[label="136.213.85.130;s;65pkt 65fpkt", shape=hexagon, color=black];
4716[label="141.169.141.5;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5033[label="141.169.32.30;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5067[label="141.169.150.33;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5111[label="141.169.131.36;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5342[label="136.213.156.55;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5443[label="141.169.57.65;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5498[label="141.169.11.69;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5633[label="141.169.99.80;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5694[label="141.169.80.85;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5976[label="136.213.0.115;385pkt 385fpkt", shape=pentagon, color=darkviolet];
5998[label="136.213.0.117;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6094[label="136.213.85.130;78pkt 78fpkt", shape=pentagon, color=darkviolet];
6125[label="141.169.168.132;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6162[label="141.169.137.135;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6201[label="141.169.33.140;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6206[label="141.169.174.140;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6356[label="195.46.96.154;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6573[label="136.213.11.177;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6710[label="141.169.73.192;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6783[label="141.169.138.199;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6881[label="136.213.153.209;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7500[label="141.169.32.30;13pkt 13fpkt", shape=invtriangle, color=brown];
7516[label="141.169.150.33;34pkt 34fpkt", shape=invtriangle, color=brown];
7545[label="141.169.131.36;15pkt 15fpkt", shape=invtriangle, color=brown];
7864[label="141.169.99.80;28pkt 28fpkt", shape=invtriangle, color=brown];
8074[label="136.213.0.115;385pkt 385fpkt", shape=invtriangle, color=brown];
8090[label="136.213.0.117;11pkt 11fpkt", shape=invtriangle, color=brown];
8145[label="136.213.85.130;79pkt 79fpkt", shape=invtriangle, color=brown];
8191[label="141.169.137.135;22pkt 22fpkt", shape=invtriangle, color=brown];
8427[label="136.213.11.177;254pkt 254fpkt", shape=invtriangle, color=brown];
8546[label="141.169.138.199;11pkt 11fpkt", shape=invtriangle, color=brown];
8963[label="141.169.150.33;33pkt 33fpkt", shape=invhouse, color=bisque];
9249[label="136.213.0.115;385pkt 385fpkt", shape=invhouse, color=bisque];
9253[label="136.213.0.117;11pkt 11fpkt", shape=invhouse, color=bisque];
9286[label="136.213.85.130;78pkt 78fpkt", shape=invhouse, color=bisque];
9308[label="141.169.137.135;22pkt 22fpkt", shape=invhouse, color=bisque];
9437[label="136.213.11.177;255pkt 255fpkt", shape=invhouse, color=bisque];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 197.30.41.252:*}[26.0899%]&lt;BR/&gt;{136.213.0.115:80, *:*}[25.8856%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0112%)&lt;BR/&gt; 53: (1.03455%)&lt;BR/&gt; 0: (0.683005%)&lt;BR/&gt; 25: (0.672961%)&lt;BR/&gt; 32793: (0.231016%)&gt;];
}
1283--1555[label="0.173295;61pkt 61fpkt"];
1283--2655[label="0.199005;40pkt 40fpkt"];
1283--2904[label="0.516129;32pkt 32fpkt"];
1283--2932[label="0.721311;44pkt 44fpkt"];
1283--3664[label="1;362pkt 362fpkt"];
1283--3786[label="0.160305;21pkt 21fpkt"];
1283--4146[label="0.709091;39pkt 39fpkt"];
1283--4285[label="0.516129;32pkt 32fpkt"];
1283--4618[label="0.10221;37pkt 37fpkt"];
1283--5342[label="0.195652;9pkt 9fpkt"];
1283--5443[label="0.4375;7pkt 7fpkt"];
1283--5498[label="1;23pkt 23fpkt"];
1283--5976[label="0.168508;61pkt 61fpkt"];
1283--5998[label="0.272727;3pkt 3fpkt"];
1283--6125[label="0.166667;4pkt 4fpkt"];
1283--6177[label="0.03125;1pkt 1fpkt"];
1283--6206[label="0.637681;44pkt 44fpkt"];
1283--6573[label="0.156863;40pkt 40fpkt"];
1283--8074[label="0.168508;61pkt 61fpkt"];
1283--8090[label="0.272727;3pkt 3fpkt"];
1283--8200[label="0.03125;1pkt 1fpkt"];
1283--8427[label="0.15748;40pkt 40fpkt"];
1283--9249[label="0.168508;61pkt 61fpkt"];
1283--9253[label="0.272727;3pkt 3fpkt"];
1283--9313[label="0.03125;1pkt 1fpkt"];
1283--9437[label="0.156863;40pkt 40fpkt"];
1555--2180[label="0.0142857;2pkt 2fpkt"];
1555--2361[label="0.486486;72pkt 72fpkt"];
1555--3256[label="0.928571;13pkt 13fpkt"];
1555--3664[label="0.173295;61pkt 61fpkt"];
1555--3786[label="1;131pkt 131fpkt"];
1555--4618[label="0.0539773;19pkt 19fpkt"];
1555--5976[label="1;352pkt 352fpkt"];
1555--8074[label="1;352pkt 352fpkt"];
1555--9249[label="1;352pkt 352fpkt"];
2180--2192[label="0.017094;2pkt 2fpkt"];
2180--2441[label="0.0294118;2pkt 2fpkt"];
2180--2467[label="0.08;2pkt 2fpkt"];
2180--2655[label="0.0142857;2pkt 2fpkt"];
2180--2828[label="0.0294118;2pkt 2fpkt"];
2180--2904[label="0.0322581;2pkt 2fpkt"];
2180--2932[label="0.0491803;3pkt 3fpkt"];
2180--3382[label="0.0155039;2pkt 2fpkt"];
2180--4146[label="0.0363636;2pkt 2fpkt"];
2180--4285[label="0.0322581;2pkt 2fpkt"];
2180--4618[label="0.0785714;11pkt 11fpkt"];
2180--4716[label="0.0740741;2pkt 2fpkt"];
2180--5033[label="0.166667;2pkt 2fpkt"];
2180--5067[label="0.0606061;2pkt 2fpkt"];
2180--5111[label="0.214286;3pkt 3fpkt"];
2180--5160[label="0.0294118;2pkt 2fpkt"];
2180--5443[label="0.1875;3pkt 3fpkt"];
2180--5588[label="0.0238095;1pkt 1fpkt"];
2180--5633[label="0.0714286;2pkt 2fpkt"];
2180--5694[label="0.333333;2pkt 2fpkt"];
2180--5976[label="0.0142857;2pkt 2fpkt"];
2180--5998[label="0.181818;2pkt 2fpkt"];
2180--6162[label="0.0909091;2pkt 2fpkt"];
2180--6177[label="0.03125;1pkt 1fpkt"];
2180--6201[label="0.0588235;2pkt 2fpkt"];
2180--6206[label="0.0434783;3pkt 3fpkt"];
2180--6414[label="0.0909091;3pkt 3fpkt"];
2180--6573[label="0.0142857;2pkt 2fpkt"];
2180--6710[label="0.1;2pkt 2fpkt"];
2180--6783[label="0.166667;2pkt 2fpkt"];
2180--6792[label="0.0222222;1pkt 1fpkt"];
2180--6881[label="0.285714;2pkt 2fpkt"];
2180--6914[label="0.0232558;1pkt 1fpkt"];
2180--7500[label="0.153846;2pkt 2fpkt"];
2180--7516[label="0.0588235;2pkt 2fpkt"];
2180--7545[label="0.2;3pkt 3fpkt"];
2180--7837[label="0.0238095;1pkt 1fpkt"];
2180--7864[label="0.0714286;2pkt 2fpkt"];
2180--8074[label="0.0142857;2pkt 2fpkt"];
2180--8090[label="0.181818;2pkt 2fpkt"];
2180--8191[label="0.0909091;2pkt 2fpkt"];
2180--8200[label="0.03125;1pkt 1fpkt"];
2180--8332[label="0.0909091;3pkt 3fpkt"];
2180--8427[label="0.0142857;2pkt 2fpkt"];
2180--8546[label="0.181818;2pkt 2fpkt"];
2180--8963[label="0.0606061;2pkt 2fpkt"];
2180--9249[label="0.0142857;2pkt 2fpkt"];
2180--9253[label="0.181818;2pkt 2fpkt"];
2180--9308[label="0.0909091;2pkt 2fpkt"];
2180--9313[label="0.03125;1pkt 1fpkt"];
2180--9394[label="0.0909091;3pkt 3fpkt"];
2180--9437[label="0.0142857;2pkt 2fpkt"];
2361--3160[label="1;73pkt 73fpkt"];
2361--3786[label="0.251908;33pkt 33fpkt"];
2361--4298[label="1;65pkt 65fpkt"];
2361--4617[label="0.0135135;2pkt 2fpkt"];
2361--4618[label="0.0540541;8pkt 8fpkt"];
2361--5976[label="0.486486;72pkt 72fpkt"];
2361--6094[label="0.923077;72pkt 72fpkt"];
2361--6162[label="0.0454545;1pkt 1fpkt"];
2361--6345[label="0.00675676;1pkt 1fpkt"];
2361--6619[label="0.00675676;1pkt 1fpkt"];
2361--8074[label="0.486486;72pkt 72fpkt"];
2361--8145[label="0.924051;73pkt 73fpkt"];
2361--8191[label="0.0454545;1pkt 1fpkt"];
2361--8291[label="0.00675676;1pkt 1fpkt"];
2361--8455[label="0.00675676;1pkt 1fpkt"];
2361--9249[label="0.486486;72pkt 72fpkt"];
2361--9286[label="0.923077;72pkt 72fpkt"];
2361--9308[label="0.0454545;1pkt 1fpkt"];
2361--9372[label="0.00675676;1pkt 1fpkt"];
2467--2502[label="0.777778;14pkt 14fpkt"];
2467--3995[label="0.04;1pkt 1fpkt"];
2467--4618[label="0.04;1pkt 1fpkt"];
2467--5633[label="0.96;24pkt 24fpkt"];
2467--7864[label="0.96;24pkt 24fpkt"];
2502--5033[label="0.333333;4pkt 4fpkt"];
2502--5633[label="0.777778;14pkt 14fpkt"];
2502--7500[label="0.307692;4pkt 4fpkt"];
2502--7864[label="0.777778;14pkt 14fpkt"];
2655--3664[label="0.199005;40pkt 40fpkt"];
2655--3995[label="0.0222222;1pkt 1fpkt"];
2655--4618[label="0.0248756;5pkt 5fpkt"];
2655--6573[label="1;201pkt 201fpkt"];
2655--8427[label="0.995025;200pkt 200fpkt"];
2655--9437[label="1;201pkt 201fpkt"];
2904--3664[label="0.516129;32pkt 32fpkt"];
2904--4285[label="1;62pkt 62fpkt"];
2904--4618[label="0.0806452;5pkt 5fpkt"];
2925--4618[label="0.0545455;3pkt 3fpkt"];
2925--6201[label="0.823529;28pkt 28fpkt"];
2925--6356[label="0.794118;27pkt 27fpkt"];
2932--3664[label="0.721311;44pkt 44fpkt"];
2932--4146[label="1;55pkt 55fpkt"];
2932--4618[label="0.0819672;5pkt 5fpkt"];
2932--6206[label="1;61pkt 61fpkt"];
3160--4298[label="1;65pkt 65fpkt"];
3160--4618[label="0.0410959;3pkt 3fpkt"];
3160--6094[label="0.986301;72pkt 72fpkt"];
3160--8145[label="1;73pkt 73fpkt"];
3160--9286[label="0.986301;72pkt 72fpkt"];
3256--5976[label="0.928571;13pkt 13fpkt"];
3256--8074[label="0.928571;13pkt 13fpkt"];
3256--9249[label="0.928571;13pkt 13fpkt"];
3664--3786[label="0.160305;21pkt 21fpkt"];
3664--4146[label="0.709091;39pkt 39fpkt"];
3664--4285[label="0.516129;32pkt 32fpkt"];
3664--4618[label="0.10221;37pkt 37fpkt"];
3664--5342[label="0.195652;9pkt 9fpkt"];
3664--5443[label="0.4375;7pkt 7fpkt"];
3664--5498[label="1;23pkt 23fpkt"];
3664--5976[label="0.168508;61pkt 61fpkt"];
3664--5998[label="0.272727;3pkt 3fpkt"];
3664--6125[label="0.166667;4pkt 4fpkt"];
3664--6177[label="0.03125;1pkt 1fpkt"];
3664--6206[label="0.637681;44pkt 44fpkt"];
3664--6573[label="0.156863;40pkt 40fpkt"];
3664--8074[label="0.168508;61pkt 61fpkt"];
3664--8090[label="0.272727;3pkt 3fpkt"];
3664--8200[label="0.03125;1pkt 1fpkt"];
3664--8427[label="0.15748;40pkt 40fpkt"];
3664--9249[label="0.168508;61pkt 61fpkt"];
3664--9253[label="0.272727;3pkt 3fpkt"];
3664--9313[label="0.03125;1pkt 1fpkt"];
3664--9437[label="0.156863;40pkt 40fpkt"];
3786--4618[label="0.145038;19pkt 19fpkt"];
3786--5976[label="1;131pkt 131fpkt"];
3786--8074[label="1;131pkt 131fpkt"];
3786--9249[label="1;131pkt 131fpkt"];
4146--4618[label="0.0909091;5pkt 5fpkt"];
4146--6206[label="1;55pkt 55fpkt"];
4285--4618[label="0.0806452;5pkt 5fpkt"];
4298--4618[label="0.0461538;3pkt 3fpkt"];
4298--6094[label="0.984615;64pkt 64fpkt"];
4298--8145[label="1;65pkt 65fpkt"];
4298--9286[label="0.984615;64pkt 64fpkt"];
5033--7500[label="1;12pkt 12fpkt"];
5067--7516[label="1;33pkt 33fpkt"];
5067--8963[label="1;33pkt 33fpkt"];
5111--7545[label="1;14pkt 14fpkt"];
5633--7864[label="1;28pkt 28fpkt"];
5976--8074[label="1;385pkt 385fpkt"];
5976--9249[label="1;385pkt 385fpkt"];
5998--8090[label="1;11pkt 11fpkt"];
5998--9253[label="1;11pkt 11fpkt"];
6094--8145[label="1;78pkt 78fpkt"];
6094--9286[label="1;78pkt 78fpkt"];
6162--8191[label="1;22pkt 22fpkt"];
6162--9308[label="1;22pkt 22fpkt"];
6573--8427[label="1;254pkt 254fpkt"];
6573--9437[label="1;255pkt 255fpkt"];
6783--8546[label="1;11pkt 11fpkt"];
7516--8963[label="1;33pkt 33fpkt"];
8074--9249[label="1;385pkt 385fpkt"];
8090--9253[label="1;11pkt 11fpkt"];
8145--9286[label="1;78pkt 78fpkt"];
8191--9308[label="1;22pkt 22fpkt"];
8427--9437[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter src_ip="136.213.0.115" src_port="80"/>
      <filter dst_ip="197.30.41.252" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
6101[label="214.189.209.130;100pkt 100fpkt", shape=pentagon, color=darkviolet];
8149[label="214.189.209.130;101pkt 101fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.189.209.130:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 46700: (0.497512%)&lt;BR/&gt; 46693: (0.497512%)&lt;BR/&gt; 46482: (0.497512%)&lt;BR/&gt; 46401: (0.497512%)&gt;];
}
6101--8149[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="214.189.209.130"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
6107[label="136.213.38.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8153[label="136.213.38.131;1pkt 1fpkt", shape=invtriangle, color=brown];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.38.131:3054, 197.30.34.110:1863}[50%]&lt;BR/&gt;{136.213.38.131:3023, 197.30.39.129:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3023: (33.3333%)&lt;BR/&gt; 3054: (16.6667%)&gt;];
}
6107--8153[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.39.129" dst_port="1863" src_ip="136.213.38.131" src_port="3023"/>
      <filter dst_ip="197.30.34.110" dst_port="1863" src_ip="136.213.38.131" src_port="3054"/>
    </slice>
    <from sec="1089176449" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
2301[label="141.169.52.136;s;20pkt 20fpkt", shape=diamond, color=yellow];
2569[label="143.88.52.85;d;79pkt 79fpkt", shape=diamond, color=yellow];
4171[label="141.169.52.136;s;20pkt 20fpkt", shape=hexagon, color=black];
4943[label="136.213.156.22;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6112[label="136.213.210.131;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6169[label="141.169.52.136;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6666[label="136.213.154.186;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7441[label="136.213.156.22;27pkt 27fpkt", shape=invtriangle, color=brown];
8156[label="136.213.210.131;41pkt 41fpkt", shape=invtriangle, color=brown];
8193[label="141.169.52.136;21pkt 21fpkt", shape=invtriangle, color=brown];
8481[label="136.213.154.186;20pkt 20fpkt", shape=invtriangle, color=brown];
8923[label="136.213.156.22;27pkt 27fpkt", shape=invhouse, color=bisque];
9291[label="136.213.210.131;41pkt 41fpkt", shape=invhouse, color=bisque];
9309[label="141.169.52.136;21pkt 21fpkt", shape=invhouse, color=bisque];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.210.131:*, 143.88.52.85:80}[29.927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 9898: (0.943396%)&lt;BR/&gt; 1527: (0.707547%)&lt;BR/&gt; 4088: (0.589623%)&lt;BR/&gt; 1521: (0.589623%)&gt;];
}
2301--2569[label="0.05;1pkt 1fpkt"];
2301--4171[label="1;20pkt 20fpkt"];
2301--4623[label="0.25;5pkt 5fpkt"];
2301--6169[label="0.95;19pkt 19fpkt"];
2301--8193[label="1;20pkt 20fpkt"];
2301--9309[label="1;20pkt 20fpkt"];
2569--3875[label="0.0126582;1pkt 1fpkt"];
2569--4171[label="0.05;1pkt 1fpkt"];
2569--4369[label="0.0909091;1pkt 1fpkt"];
2569--4619[label="0.0759494;6pkt 6fpkt"];
2569--4623[label="0.101266;8pkt 8fpkt"];
2569--4628[label="0.0506329;4pkt 4fpkt"];
2569--4631[label="0.0759494;6pkt 6fpkt"];
2569--4635[label="0.0506329;4pkt 4fpkt"];
2569--4943[label="0.115385;3pkt 3fpkt"];
2569--5011[label="0.0909091;1pkt 1fpkt"];
2569--5500[label="0.0126582;1pkt 1fpkt"];
2569--5505[label="0.235294;4pkt 4fpkt"];
2569--5843[label="0.0126582;1pkt 1fpkt"];
2569--6112[label="1;41pkt 41fpkt"];
2569--6169[label="0.05;1pkt 1fpkt"];
2569--6666[label="0.25;5pkt 5fpkt"];
2569--7441[label="0.148148;4pkt 4fpkt"];
2569--7787[label="0.0126582;1pkt 1fpkt"];
2569--7997[label="0.0126582;1pkt 1fpkt"];
2569--8156[label="1;41pkt 41fpkt"];
2569--8193[label="0.047619;1pkt 1fpkt"];
2569--8481[label="0.25;5pkt 5fpkt"];
2569--8923[label="0.148148;4pkt 4fpkt"];
2569--9100[label="0.0126582;1pkt 1fpkt"];
2569--9209[label="0.0126582;1pkt 1fpkt"];
2569--9291[label="1;41pkt 41fpkt"];
2569--9309[label="0.047619;1pkt 1fpkt"];
4171--4623[label="0.25;5pkt 5fpkt"];
4171--6169[label="0.95;19pkt 19fpkt"];
4171--8193[label="1;20pkt 20fpkt"];
4171--9309[label="1;20pkt 20fpkt"];
4943--7441[label="1;26pkt 26fpkt"];
4943--8923[label="1;26pkt 26fpkt"];
6112--8156[label="1;41pkt 41fpkt"];
6112--9291[label="1;41pkt 41fpkt"];
6169--8193[label="1;20pkt 20fpkt"];
6169--9309[label="1;20pkt 20fpkt"];
6666--8481[label="1;20pkt 20fpkt"];
7441--8923[label="1;27pkt 27fpkt"];
8156--9291[label="1;41pkt 41fpkt"];
8193--9309[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="143.88.52.85" dst_port="80" src_ip="136.213.210.131"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.214.13.132"/>
    </slice>
    <from sec="1089176818" usec="0"/>
    <to sec="1089177023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
6123[label="194.59.130.132;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8163[label="194.59.130.132;8pkt 8fpkt", shape=invtriangle, color=brown];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.59.130.132:*, 2.69.143.193:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61639: (6.25%)&lt;BR/&gt; 61638: (6.25%)&lt;BR/&gt; 61637: (6.25%)&lt;BR/&gt; 61636: (6.25%)&gt;];
}
6123--8163[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="2.69.143.193" dst_port="80" src_ip="194.59.130.132"/>
    </slice>
    <from sec="1089176832" usec="0"/>
    <to sec="1089177089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
6129[label="20.125.35.133;96pkt 96fpkt", shape=pentagon, color=darkviolet];
8168[label="20.125.35.133;96pkt 96fpkt", shape=invtriangle, color=brown];
9295[label="20.125.35.133;96pkt 96fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.125.35.133:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3626: (1.04167%)&lt;BR/&gt; 4948: (0.520833%)&lt;BR/&gt; 4915: (0.520833%)&lt;BR/&gt; 4860: (0.520833%)&gt;];
}
6129--8168[label="1;96pkt 96fpkt"];
6129--9295[label="1;96pkt 96fpkt"];
8168--9295[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="20.125.35.133"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
2097[label="153.191.197.139;d;390pkt 390fpkt", shape=diamond, color=yellow];
6134[label="173.19.69.133;50pkt 50fpkt", shape=pentagon, color=darkviolet];
8171[label="173.19.69.133;50pkt 50fpkt", shape=invtriangle, color=brown];
9296[label="173.19.69.133;50pkt 50fpkt", shape=invhouse, color=bisque];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 153.191.197.139:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 3983: (0.462963%)&lt;BR/&gt; 3034: (0.462963%)&lt;BR/&gt; 1476: (0.462963%)&lt;BR/&gt; 1464: (0.462963%)&gt;];
}
2097--6134[label="0.94;47pkt 47fpkt"];
2097--8171[label="0.94;47pkt 47fpkt"];
2097--9296[label="0.94;47pkt 47fpkt"];
6134--8171[label="1;50pkt 50fpkt"];
6134--9296[label="1;50pkt 50fpkt"];
8171--9296[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="153.191.197.139" dst_port="6667"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
6144[label="136.213.34.134;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8178[label="136.213.34.134;14pkt 14fpkt", shape=invtriangle, color=brown];
9300[label="136.213.34.134;15pkt 15fpkt", shape=invhouse, color=bisque];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.34.134:*, 196.128.35.6:80}[66.6667%]&lt;BR/&gt;{136.213.34.134:*, *:1863}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.0465%)&lt;BR/&gt; 1863: (13.9535%)&lt;BR/&gt; 1125: (3.48837%)&lt;BR/&gt; 1108: (3.48837%)&lt;BR/&gt; 1107: (3.48837%)&gt;];
}
6144--8178[label="1;14pkt 14fpkt"];
6144--9300[label="1;14pkt 14fpkt"];
8178--9300[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="136.213.34.134"/>
      <filter dst_ip="196.128.35.6" dst_port="80" src_ip="136.213.34.134"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
6146[label="208.170.64.134;108pkt 108fpkt", shape=pentagon, color=darkviolet];
8180[label="208.170.64.134;107pkt 107fpkt", shape=invtriangle, color=brown];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.170.64.134:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25703: (0.465116%)&lt;BR/&gt; 25702: (0.465116%)&lt;BR/&gt; 25697: (0.465116%)&lt;BR/&gt; 25696: (0.465116%)&gt;];
}
6146--8180[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.170.64.134"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
6149[label="197.67.96.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8182[label="197.67.96.134;1pkt 1fpkt", shape=invtriangle, color=brown];
9301[label="197.67.96.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.67.96.134:80, 141.169.132.200:2253}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2253: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6149--8182[label="1;1pkt 1fpkt"];
6149--9301[label="1;1pkt 1fpkt"];
8182--9301[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.132.200" dst_port="2253" src_ip="197.67.96.134" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
503[label="215.188.146.49d;358pkt 358fpkt", shape=rectangle, color=red];
506[label="73.150.146.162d;94pkt 94fpkt", shape=rectangle, color=red];
1385[label="194.54.51.146;s;59pkt 59fpkt", shape=diamond, color=yellow];
1389[label="21.20.146.34;d;50pkt 50fpkt", shape=diamond, color=yellow];
1727[label="141.169.164.167;s;104pkt 104fpkt", shape=diamond, color=yellow];
1918[label="19.217.7.164;d;162pkt 162fpkt", shape=diamond, color=yellow];
2229[label="141.169.142.51;s;20pkt 20fpkt", shape=diamond, color=yellow];
2275[label="200.163.44.33;d;16pkt 16fpkt", shape=diamond, color=yellow];
2333[label="212.91.35.58;d;53pkt 53fpkt", shape=diamond, color=yellow];
2737[label="141.169.132.249;s;60pkt 60fpkt", shape=diamond, color=yellow];
2763[label="141.169.132.233;s;53pkt 53fpkt", shape=diamond, color=yellow];
3002[label="141.169.130.15;s;11pkt 11fpkt", shape=diamond, color=yellow];
3384[label="195.78.176.75;d;87pkt 87fpkt", shape=diamond, color=yellow];
3620[label="194.54.51.146;s;59pkt 59fpkt", shape=hexagon, color=black];
4051[label="200.163.44.33;d;16pkt 16fpkt", shape=hexagon, color=black];
4194[label="141.169.130.15;s;11pkt 11fpkt", shape=hexagon, color=black];
4860[label="141.169.130.15;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4897[label="169.51.108.19;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5294[label="141.169.132.51;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5296[label="141.169.142.51;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5312[label="169.51.2.53;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5592[label="141.169.132.76;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5708[label="141.169.130.86;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6245[label="141.169.132.144;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6260[label="194.54.51.146;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6402[label="141.169.132.159;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7080[label="141.169.132.233;62pkt 62fpkt", shape=pentagon, color=darkviolet];
7230[label="141.169.132.249;59pkt 59fpkt", shape=pentagon, color=darkviolet];
7406[label="141.169.130.15;15pkt 15fpkt", shape=invtriangle, color=brown];
7659[label="141.169.132.51;15pkt 15fpkt", shape=invtriangle, color=brown];
7660[label="141.169.142.51;20pkt 20fpkt", shape=invtriangle, color=brown];
7669[label="169.51.2.53;11pkt 11fpkt", shape=invtriangle, color=brown];
7840[label="141.169.132.76;36pkt 36fpkt", shape=invtriangle, color=brown];
8249[label="194.54.51.146;59pkt 59fpkt", shape=invtriangle, color=brown];
8731[label="141.169.132.233;62pkt 62fpkt", shape=invtriangle, color=brown];
8817[label="141.169.132.249;59pkt 59fpkt", shape=invtriangle, color=brown];
8909[label="141.169.130.15;15pkt 15fpkt", shape=invhouse, color=bisque];
9039[label="141.169.132.51;15pkt 15fpkt", shape=invhouse, color=bisque];
9046[label="169.51.2.53;11pkt 11fpkt", shape=invhouse, color=bisque];
9345[label="194.54.51.146;58pkt 58fpkt", shape=invhouse, color=bisque];
9579[label="141.169.132.233;61pkt 61fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[54.8419%]&lt;BR/&gt;{*:*, 215.188.146.49:*}[35.3755%]&lt;BR/&gt;{*:5554, *:*}[23.6166%]&lt;BR/&gt;{*:9898, *:*}[21.4427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.8818%)&lt;BR/&gt; 5554: (6.23435%)&lt;BR/&gt; 9898: (5.85879%)&lt;BR/&gt; 2101: (0.2003%)&lt;BR/&gt; 2099: (0.2003%)&gt;];
}
503--1275[label="0.0206186;2pkt 2fpkt"];
503--1438[label="0.0266667;2pkt 2fpkt"];
503--1755[label="0.0102564;2pkt 2fpkt"];
503--2016[label="0.0285714;2pkt 2fpkt"];
503--2663[label="0.0133333;2pkt 2fpkt"];
503--2737[label="0.0333333;2pkt 2fpkt"];
503--3146[label="0.0555556;2pkt 2fpkt"];
503--3739[label="0.0285714;2pkt 2fpkt"];
503--4164[label="0.0102564;2pkt 2fpkt"];
503--4698[label="0.020202;2pkt 2fpkt"];
503--4913[label="0.04;2pkt 2fpkt"];
503--5179[label="0.0208333;2pkt 2fpkt"];
503--5294[label="0.0666667;1pkt 1fpkt"];
503--5592[label="0.0540541;2pkt 2fpkt"];
503--6245[label="0.0909091;2pkt 2fpkt"];
503--6402[label="0.0625;1pkt 1fpkt"];
503--6557[label="0.012987;2pkt 2fpkt"];
503--6748[label="0.0263158;2pkt 2fpkt"];
503--6782[label="0.0333333;1pkt 1fpkt"];
503--6890[label="0.0185185;2pkt 2fpkt"];
503--6937[label="0.0344828;2pkt 2fpkt"];
503--6975[label="0.01;2pkt 2fpkt"];
503--6990[label="0.1;2pkt 2fpkt"];
503--7080[label="0.016129;1pkt 1fpkt"];
503--7125[label="0.0142857;1pkt 1fpkt"];
503--7152[label="0.0153846;1pkt 1fpkt"];
503--7164[label="0.0117647;1pkt 1fpkt"];
503--7230[label="0.0169492;1pkt 1fpkt"];
503--7260[label="0.0526316;1pkt 1fpkt"];
503--7582[label="0.0208333;2pkt 2fpkt"];
503--7659[label="0.0666667;1pkt 1fpkt"];
503--7840[label="0.0277778;1pkt 1fpkt"];
503--8417[label="0.012987;2pkt 2fpkt"];
503--8613[label="0.0186916;2pkt 2fpkt"];
503--8664[label="0.01;2pkt 2fpkt"];
503--8731[label="0.016129;1pkt 1fpkt"];
503--8757[label="0.0142857;1pkt 1fpkt"];
503--8770[label="0.015625;1pkt 1fpkt"];
503--8777[label="0.0117647;1pkt 1fpkt"];
503--8817[label="0.0169492;1pkt 1fpkt"];
503--8998[label="0.0210526;2pkt 2fpkt"];
503--9039[label="0.0666667;1pkt 1fpkt"];
503--9522[label="0.0186916;2pkt 2fpkt"];
503--9548[label="0.01;2pkt 2fpkt"];
503--9579[label="0.0163934;1pkt 1fpkt"];
503--9591[label="0.0144928;1pkt 1fpkt"];
506--1755[label="0.0106383;1pkt 1fpkt"];
506--2663[label="0.0106383;1pkt 1fpkt"];
506--3031[label="0.0106383;1pkt 1fpkt"];
506--3146[label="0.0277778;1pkt 1fpkt"];
506--3259[label="0.0163934;1pkt 1fpkt"];
506--4164[label="0.0106383;1pkt 1fpkt"];
506--5592[label="0.027027;1pkt 1fpkt"];
506--6245[label="0.0454545;1pkt 1fpkt"];
506--6402[label="0.0625;1pkt 1fpkt"];
506--6557[label="0.0106383;1pkt 1fpkt"];
506--6748[label="0.0131579;1pkt 1fpkt"];
506--6890[label="0.0106383;1pkt 1fpkt"];
506--6937[label="0.0172414;1pkt 1fpkt"];
506--6975[label="0.0106383;1pkt 1fpkt"];
506--6990[label="0.05;1pkt 1fpkt"];
506--7080[label="0.016129;1pkt 1fpkt"];
506--7125[label="0.0142857;1pkt 1fpkt"];
506--7152[label="0.0153846;1pkt 1fpkt"];
506--7260[label="0.0526316;1pkt 1fpkt"];
506--7840[label="0.0277778;1pkt 1fpkt"];
506--8417[label="0.0106383;1pkt 1fpkt"];
506--8613[label="0.0106383;1pkt 1fpkt"];
506--8664[label="0.0106383;1pkt 1fpkt"];
506--8731[label="0.016129;1pkt 1fpkt"];
506--8757[label="0.0142857;1pkt 1fpkt"];
506--8770[label="0.015625;1pkt 1fpkt"];
506--9522[label="0.0106383;1pkt 1fpkt"];
506--9548[label="0.0106383;1pkt 1fpkt"];
506--9579[label="0.0163934;1pkt 1fpkt"];
506--9591[label="0.0144928;1pkt 1fpkt"];
1385--1389[label="1;50pkt 50fpkt"];
1385--1526[label="0.0508475;3pkt 3fpkt"];
1385--2275[label="0.1875;3pkt 3fpkt"];
1385--3151[label="0.0169492;1pkt 1fpkt"];
1385--3620[label="1;59pkt 59fpkt"];
1385--4051[label="0.1875;3pkt 3fpkt"];
1385--4619[label="0.457627;27pkt 27fpkt"];
1385--4623[label="0.0338983;2pkt 2fpkt"];
1385--4631[label="0.457627;27pkt 27fpkt"];
1385--6260[label="1;59pkt 59fpkt"];
1385--8249[label="1;59pkt 59fpkt"];
1385--9345[label="1;58pkt 58fpkt"];
1389--3620[label="1;50pkt 50fpkt"];
1389--4619[label="0.46;23pkt 23fpkt"];
1389--4631[label="0.46;23pkt 23fpkt"];
1389--6260[label="1;50pkt 50fpkt"];
1389--8249[label="1;50pkt 50fpkt"];
1389--9345[label="1;50pkt 50fpkt"];
1727--1918[label="0.923077;96pkt 96fpkt"];
1727--3141[label="0.0288462;3pkt 3fpkt"];
1727--3970[label="0.0384615;4pkt 4fpkt"];
1727--4619[label="0.0192308;2pkt 2fpkt"];
1727--4631[label="0.0192308;2pkt 2fpkt"];
1918--1949[label="0.148148;24pkt 24fpkt"];
1918--3875[label="0.0555556;9pkt 9fpkt"];
1918--4028[label="0.148148;24pkt 24fpkt"];
1918--4368[label="0.0123457;2pkt 2fpkt"];
1918--4619[label="0.0123457;2pkt 2fpkt"];
1918--4623[label="0.0123457;2pkt 2fpkt"];
1918--4628[label="0.0555556;9pkt 9fpkt"];
1918--4631[label="0.0123457;2pkt 2fpkt"];
1918--4635[label="0.0555556;9pkt 9fpkt"];
1918--5294[label="0.4;6pkt 6fpkt"];
1918--5843[label="0.0246914;4pkt 4fpkt"];
1918--6090[label="0.0123457;2pkt 2fpkt"];
1918--6402[label="0.75;12pkt 12fpkt"];
1918--7659[label="0.4;6pkt 6fpkt"];
1918--7997[label="0.0246914;4pkt 4fpkt"];
1918--9039[label="0.4;6pkt 6fpkt"];
1918--9209[label="0.0246914;4pkt 4fpkt"];
2229--2275[label="0.1875;3pkt 3fpkt"];
2229--2548[label="0.1;2pkt 2fpkt"];
2229--3384[label="0.1;2pkt 2fpkt"];
2229--4051[label="0.1875;3pkt 3fpkt"];
2229--4619[label="0.3;6pkt 6fpkt"];
2229--4623[label="0.05;1pkt 1fpkt"];
2229--4631[label="0.3;6pkt 6fpkt"];
2229--5296[label="1;20pkt 20fpkt"];
2229--7660[label="1;20pkt 20fpkt"];
2275--2737[label="0.1875;3pkt 3fpkt"];
2275--3002[label="0.272727;3pkt 3fpkt"];
2275--3620[label="0.1875;3pkt 3fpkt"];
2275--4051[label="1;16pkt 16fpkt"];
2275--4194[label="0.272727;3pkt 3fpkt"];
2275--4623[label="0.0625;1pkt 1fpkt"];
2275--4628[label="0.0625;1pkt 1fpkt"];
2275--4635[label="0.0625;1pkt 1fpkt"];
2275--4860[label="0.2;3pkt 3fpkt"];
2275--5296[label="0.1875;3pkt 3fpkt"];
2275--6260[label="0.1875;3pkt 3fpkt"];
2275--7230[label="0.1875;3pkt 3fpkt"];
2275--7406[label="0.2;3pkt 3fpkt"];
2275--7660[label="0.1875;3pkt 3fpkt"];
2275--8249[label="0.1875;3pkt 3fpkt"];
2275--8817[label="0.1875;3pkt 3fpkt"];
2275--8909[label="0.2;3pkt 3fpkt"];
2275--9345[label="0.1875;3pkt 3fpkt"];
2333--2763[label="1;53pkt 53fpkt"];
2333--7080[label="1;53pkt 53fpkt"];
2333--8731[label="1;53pkt 53fpkt"];
2333--9579[label="1;53pkt 53fpkt"];
2737--3011[label="0.166667;4pkt 4fpkt"];
2737--4051[label="0.1875;3pkt 3fpkt"];
2737--4623[label="0.0333333;2pkt 2fpkt"];
2737--4628[label="0.05;3pkt 3fpkt"];
2737--4635[label="0.05;3pkt 3fpkt"];
2737--7230[label="1;59pkt 59fpkt"];
2737--8817[label="1;59pkt 59fpkt"];
2763--7080[label="1;53pkt 53fpkt"];
2763--8731[label="1;53pkt 53fpkt"];
2763--9579[label="1;53pkt 53fpkt"];
3002--4051[label="0.272727;3pkt 3fpkt"];
3002--4194[label="1;11pkt 11fpkt"];
3002--4326[label="0.181818;2pkt 2fpkt"];
3002--4860[label="1;11pkt 11fpkt"];
3002--7406[label="1;11pkt 11fpkt"];
3002--8909[label="1;11pkt 11fpkt"];
3384--3895[label="0.0344828;3pkt 3fpkt"];
3384--4028[label="0.0344828;3pkt 3fpkt"];
3384--4368[label="0.0229885;2pkt 2fpkt"];
3384--4619[label="0.045977;4pkt 4fpkt"];
3384--4623[label="0.0689655;6pkt 6fpkt"];
3384--4628[label="0.0689655;6pkt 6fpkt"];
3384--4631[label="0.045977;4pkt 4fpkt"];
3384--4635[label="0.0689655;6pkt 6fpkt"];
3384--4897[label="0.333333;7pkt 7fpkt"];
3384--5296[label="0.1;2pkt 2fpkt"];
3384--5303[label="0.0714286;3pkt 3fpkt"];
3384--5312[label="0.4;4pkt 4fpkt"];
3384--5708[label="0.181818;2pkt 2fpkt"];
3384--5821[label="0.0114943;1pkt 1fpkt"];
3384--5843[label="0.0114943;1pkt 1fpkt"];
3384--5910[label="0.045977;4pkt 4fpkt"];
3384--6090[label="0.0229885;2pkt 2fpkt"];
3384--6181[label="0.129032;4pkt 4fpkt"];
3384--6245[label="0.181818;4pkt 4fpkt"];
3384--6999[label="0.045977;4pkt 4fpkt"];
3384--7660[label="0.1;2pkt 2fpkt"];
3384--7669[label="0.363636;4pkt 4fpkt"];
3384--7997[label="0.0114943;1pkt 1fpkt"];
3384--8679[label="0.045977;4pkt 4fpkt"];
3384--9046[label="0.363636;4pkt 4fpkt"];
3384--9209[label="0.0114943;1pkt 1fpkt"];
3384--9555[label="0.045977;4pkt 4fpkt"];
3620--4051[label="0.1875;3pkt 3fpkt"];
3620--4619[label="0.457627;27pkt 27fpkt"];
3620--4623[label="0.0338983;2pkt 2fpkt"];
3620--4631[label="0.457627;27pkt 27fpkt"];
3620--6260[label="1;59pkt 59fpkt"];
3620--8249[label="1;59pkt 59fpkt"];
3620--9345[label="1;58pkt 58fpkt"];
4051--4194[label="0.272727;3pkt 3fpkt"];
4051--4623[label="0.0625;1pkt 1fpkt"];
4051--4628[label="0.0625;1pkt 1fpkt"];
4051--4635[label="0.0625;1pkt 1fpkt"];
4051--4860[label="0.2;3pkt 3fpkt"];
4051--5296[label="0.1875;3pkt 3fpkt"];
4051--6260[label="0.1875;3pkt 3fpkt"];
4051--7230[label="0.1875;3pkt 3fpkt"];
4051--7406[label="0.2;3pkt 3fpkt"];
4051--7660[label="0.1875;3pkt 3fpkt"];
4051--8249[label="0.1875;3pkt 3fpkt"];
4051--8817[label="0.1875;3pkt 3fpkt"];
4051--8909[label="0.2;3pkt 3fpkt"];
4051--9345[label="0.1875;3pkt 3fpkt"];
4194--4326[label="0.181818;2pkt 2fpkt"];
4194--4860[label="1;11pkt 11fpkt"];
4194--7406[label="1;11pkt 11fpkt"];
4194--8909[label="1;11pkt 11fpkt"];
4860--7406[label="1;15pkt 15fpkt"];
4860--8909[label="1;15pkt 15fpkt"];
5294--7659[label="1;15pkt 15fpkt"];
5294--9039[label="1;15pkt 15fpkt"];
5296--7660[label="1;20pkt 20fpkt"];
5312--7669[label="1;10pkt 10fpkt"];
5312--9046[label="1;10pkt 10fpkt"];
5592--7840[label="1;36pkt 36fpkt"];
6260--8249[label="1;59pkt 59fpkt"];
6260--9345[label="1;58pkt 58fpkt"];
7080--8731[label="1;62pkt 62fpkt"];
7080--9579[label="1;61pkt 61fpkt"];
7230--8817[label="1;59pkt 59fpkt"];
7406--8909[label="1;15pkt 15fpkt"];
7659--9039[label="1;15pkt 15fpkt"];
7669--9046[label="1;11pkt 11fpkt"];
8249--9345[label="1;58pkt 58fpkt"];
8731--9579[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="215.188.146.49"/>
      <filter src_port="5554"/>
      <filter src_port="9898"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
6175[label="141.169.10.137;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8198[label="141.169.10.137;7pkt 7fpkt", shape=invtriangle, color=brown];
9311[label="141.169.10.137;7pkt 7fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.10.137:0, *:0}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (85.7143%)&lt;BR/&gt; 5554: (7.14286%)&lt;BR/&gt; 1363: (7.14286%)&gt;];
}
6175--8198[label="1;7pkt 7fpkt"];
6175--9311[label="1;7pkt 7fpkt"];
8198--9311[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="141.169.10.137"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.184.133.137"/>
    </slice>
    <from sec="1089176580" usec="0"/>
    <to sec="1089176769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.154.108.138"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
6189[label="141.169.165.138;41pkt 41fpkt", shape=pentagon, color=darkviolet];
8209[label="141.169.165.138;42pkt 42fpkt", shape=invtriangle, color=brown];
9318[label="141.169.165.138;42pkt 42fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.165.138:*, 202.242.209.212:16080}[57.1429%]&lt;BR/&gt;{141.169.165.138:*, 16.179.18.124:80}[40.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16080: (28.4%)&lt;BR/&gt; 80: (21.6%)&lt;BR/&gt; 2140: (1.2%)&lt;BR/&gt; 2139: (1.2%)&lt;BR/&gt; 2138: (1.2%)&gt;];
}
6189--8209[label="1;41pkt 41fpkt"];
6189--9318[label="1;41pkt 41fpkt"];
8209--9318[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="202.242.209.212" dst_port="16080" src_ip="141.169.165.138"/>
      <filter dst_ip="16.179.18.124" dst_port="80" src_ip="141.169.165.138"/>
    </slice>
    <from sec="1089176571" usec="0"/>
    <to sec="1089176978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
6221[label="141.169.74.142;20pkt 20fpkt", shape=pentagon, color=darkviolet];
8227[label="141.169.74.142;19pkt 19fpkt", shape=invtriangle, color=brown];
9330[label="141.169.74.142;19pkt 19fpkt", shape=invhouse, color=bisque];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.74.142:*, 195.78.176.75:80}[20%]&lt;BR/&gt;{141.169.74.142:*, 197.30.34.85:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (24.1379%)&lt;BR/&gt; 80: (23.2759%)&lt;BR/&gt; 63724: (2.58621%)&lt;BR/&gt; 63517: (2.58621%)&lt;BR/&gt; 63501: (2.58621%)&gt;];
}
6221--8227[label="1;19pkt 19fpkt"];
6221--9330[label="1;19pkt 19fpkt"];
8227--9330[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.85" dst_port="1863" src_ip="141.169.74.142"/>
      <filter dst_ip="195.78.176.75" dst_port="80" src_ip="141.169.74.142"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
6233[label="16.170.0.144;50pkt 50fpkt", shape=pentagon, color=darkviolet];
8235[label="16.170.0.144;51pkt 51fpkt", shape=invtriangle, color=brown];
9337[label="16.170.0.144;50pkt 50fpkt", shape=invhouse, color=bisque];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.170.0.144:80, 194.60.3.222:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3166: (0.993377%)&lt;BR/&gt; 3165: (0.993377%)&lt;BR/&gt; 3164: (0.993377%)&lt;BR/&gt; 3163: (0.993377%)&gt;];
}
6233--8235[label="1;50pkt 50fpkt"];
6233--9337[label="1;50pkt 50fpkt"];
8235--9337[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="194.60.3.222" src_ip="16.170.0.144" src_port="80"/>
    </slice>
    <from sec="1089176854" usec="0"/>
    <to sec="1089176946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
3282[label="136.213.169.162;d;93pkt 93fpkt", shape=diamond, color=yellow];
3393[label="149.99.242.65;d;78pkt 78fpkt", shape=diamond, color=yellow];
3495[label="194.60.138.202;d;34pkt 34fpkt", shape=diamond, color=yellow];
5438[label="222.255.6.65;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5778[label="3.111.190.93;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6069[label="212.133.152.127;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6238[label="18.70.53.144;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6664[label="194.132.130.186;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7220[label="197.30.39.248;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7753[label="222.255.6.65;3pkt 3fpkt", shape=invtriangle, color=brown];
8130[label="212.133.152.127;43pkt 43fpkt", shape=invtriangle, color=brown];
8238[label="18.70.53.144;27pkt 27fpkt", shape=invtriangle, color=brown];
9087[label="222.255.6.65;2pkt 2fpkt", shape=invhouse, color=bisque];
9278[label="212.133.152.127;43pkt 43fpkt", shape=invhouse, color=bisque];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.99.242.65:*}[26.8116%]&lt;BR/&gt;{*:80, 136.213.169.162:*}[22.4638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 32816: (2.28261%)&lt;BR/&gt; 53: (2.28261%)&lt;BR/&gt; 0: (2.17391%)&lt;BR/&gt; 1863: (0.652174%)&gt;];
}
3282--5004[label="0.027027;1pkt 1fpkt"];
3282--5492[label="0.0540541;2pkt 2fpkt"];
3282--6011[label="0.0909091;4pkt 4fpkt"];
3282--6238[label="0.357143;10pkt 10fpkt"];
3282--6664[label="1;28pkt 28fpkt"];
3282--6784[label="0.0107527;1pkt 1fpkt"];
3282--7782[label="0.0789474;3pkt 3fpkt"];
3282--8238[label="0.37037;10pkt 10fpkt"];
3282--8547[label="0.0107527;1pkt 1fpkt"];
3282--9496[label="0.0107527;1pkt 1fpkt"];
3393--3549[label="0.0128205;1pkt 1fpkt"];
3393--3677[label="0.0128205;1pkt 1fpkt"];
3393--3852[label="0.025641;2pkt 2fpkt"];
3393--3877[label="0.075;3pkt 3fpkt"];
3393--4625[label="0.0128205;1pkt 1fpkt"];
3393--4669[label="0.0163934;1pkt 1fpkt"];
3393--4839[label="0.0128205;1pkt 1fpkt"];
3393--4848[label="0.0714286;3pkt 3fpkt"];
3393--5417[label="0.111111;3pkt 3fpkt"];
3393--5770[label="0.047619;1pkt 1fpkt"];
3393--5778[label="0.172414;5pkt 5fpkt"];
3393--6069[label="0.204545;9pkt 9fpkt"];
3393--6238[label="0.321429;9pkt 9fpkt"];
3393--6505[label="0.025641;2pkt 2fpkt"];
3393--6954[label="0.0512821;4pkt 4fpkt"];
3393--7187[label="0.25;2pkt 2fpkt"];
3393--7220[label="0.2;1pkt 1fpkt"];
3393--7393[label="0.0128205;1pkt 1fpkt"];
3393--7399[label="0.0714286;3pkt 3fpkt"];
3393--7742[label="0.0769231;2pkt 2fpkt"];
3393--7955[label="0.05;1pkt 1fpkt"];
3393--8130[label="0.209302;9pkt 9fpkt"];
3393--8238[label="0.333333;9pkt 9fpkt"];
3393--8385[label="0.025641;2pkt 2fpkt"];
3393--8794[label="0.142857;1pkt 1fpkt"];
3393--8902[label="0.0128205;1pkt 1fpkt"];
3393--9278[label="0.209302;9pkt 9fpkt"];
3393--9416[label="0.025641;2pkt 2fpkt"];
3495--5438[label="1;3pkt 3fpkt"];
3495--6238[label="0.0357143;1pkt 1fpkt"];
3495--7753[label="1;3pkt 3fpkt"];
3495--8238[label="0.037037;1pkt 1fpkt"];
3495--9087[label="1;2pkt 2fpkt"];
5438--7753[label="1;3pkt 3fpkt"];
5438--9087[label="1;2pkt 2fpkt"];
6069--8130[label="1;43pkt 43fpkt"];
6069--9278[label="1;43pkt 43fpkt"];
6238--8238[label="1;27pkt 27fpkt"];
7753--9087[label="1;2pkt 2fpkt"];
8130--9278[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.169.162" src_port="80"/>
      <filter dst_ip="149.99.242.65" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
6246[label="215.188.140.144;212pkt 212fpkt", shape=pentagon, color=darkviolet];
8243[label="215.188.140.144;211pkt 211fpkt", shape=invtriangle, color=brown];
9340[label="215.188.140.144;212pkt 212fpkt", shape=invhouse, color=bisque];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.140.144:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2849: (0.23622%)&lt;BR/&gt; 2848: (0.23622%)&lt;BR/&gt; 2847: (0.23622%)&lt;BR/&gt; 2846: (0.23622%)&gt;];
}
6246--8243[label="1;211pkt 211fpkt"];
6246--9340[label="1;212pkt 212fpkt"];
8243--9340[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.188.140.144"/>
    </slice>
    <from sec="1089176889" usec="0"/>
    <to sec="1089176891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
6275[label="19.18.153.147;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8256[label="19.18.153.147;16pkt 16fpkt", shape=invtriangle, color=brown];
9350[label="19.18.153.147;15pkt 15fpkt", shape=invhouse, color=bisque];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.18.153.147:80, 141.169.34.236:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2890: (3.19149%)&lt;BR/&gt; 2856: (3.19149%)&lt;BR/&gt; 2666: (3.19149%)&lt;BR/&gt; 2657: (3.19149%)&gt;];
}
6275--8256[label="1;16pkt 16fpkt"];
6275--9350[label="1;15pkt 15fpkt"];
8256--9350[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.34.236" src_ip="19.18.153.147" src_port="80"/>
    </slice>
    <from sec="1089176454" usec="0"/>
    <to sec="1089177191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
6290[label="136.213.33.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8263[label="136.213.33.149;1pkt 1fpkt", shape=invtriangle, color=brown];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.33.149:1835, 197.30.34.42:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1835: (50%)&gt;];
}
6290--8263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.34.42" dst_port="1863" src_ip="136.213.33.149" src_port="1835"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
6292[label="209.29.48.149;220pkt 220fpkt", shape=pentagon, color=darkviolet];
8265[label="209.29.48.149;220pkt 220fpkt", shape=invtriangle, color=brown];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.48.149:10005, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10005: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6292--8265[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.29.48.149" src_port="10005"/>
    </slice>
    <from sec="1089177055" usec="0"/>
    <to sec="1089177089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
6298[label="136.213.32.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8268[label="136.213.32.150;4pkt 4fpkt", shape=invtriangle, color=brown];
9355[label="136.213.32.150;4pkt 4fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.32.150:1547, 197.30.39.55:1863}[25%]&lt;BR/&gt;{136.213.32.150:1546, 197.30.39.226:1863}[25%]&lt;BR/&gt;{136.213.32.150:1638, 87.154.34.236:80}[25%]&lt;BR/&gt;{136.213.32.150:1679, 87.154.34.236:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1679: (12.5%)&lt;BR/&gt; 1638: (12.5%)&lt;BR/&gt; 1547: (12.5%)&gt;];
}
6298--8268[label="1;4pkt 4fpkt"];
6298--9355[label="1;4pkt 4fpkt"];
8268--9355[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="87.154.34.236" dst_port="80" src_ip="136.213.32.150" src_port="1679"/>
      <filter dst_ip="87.154.34.236" dst_port="80" src_ip="136.213.32.150" src_port="1638"/>
      <filter dst_ip="197.30.39.226" dst_port="1863" src_ip="136.213.32.150" src_port="1546"/>
      <filter dst_ip="197.30.39.55" dst_port="1863" src_ip="136.213.32.150" src_port="1547"/>
    </slice>
    <from sec="1089176417" usec="0"/>
    <to sec="1089177261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
6304[label="141.169.165.150;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8271[label="141.169.165.150;5pkt 5fpkt", shape=invtriangle, color=brown];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.165.150:*, 208.110.76.201:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2682: (9.09091%)&lt;BR/&gt; 2677: (9.09091%)&lt;BR/&gt; 2676: (9.09091%)&lt;BR/&gt; 2675: (9.09091%)&gt;];
}
6304--8271[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.110.76.201" dst_port="80" src_ip="141.169.165.150"/>
    </slice>
    <from sec="1089176490" usec="0"/>
    <to sec="1089176656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
6312[label="173.19.66.151;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8276[label="173.19.66.151;6pkt 6fpkt", shape=invtriangle, color=brown];
9358[label="173.19.66.151;6pkt 6fpkt", shape=invhouse, color=bisque];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.66.151:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 53875: (7.89474%)&lt;BR/&gt; 49687: (7.89474%)&lt;BR/&gt; 39367: (7.89474%)&lt;BR/&gt; 23037: (7.89474%)&gt;];
}
6312--8276[label="1;6pkt 6fpkt"];
6312--9358[label="1;6pkt 6fpkt"];
8276--9358[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="173.19.66.151" src_port="25"/>
    </slice>
    <from sec="1089176464" usec="0"/>
    <to sec="1089177243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
6321[label="195.36.173.151;82pkt 82fpkt", shape=pentagon, color=darkviolet];
8281[label="195.36.173.151;81pkt 81fpkt", shape=invtriangle, color=brown];
9362[label="195.36.173.151;81pkt 81fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.36.173.151:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (9.22131%)&lt;BR/&gt; 2745: (8.81148%)&lt;BR/&gt; 1025: (8.60656%)&lt;BR/&gt; 6129: (7.9918%)&lt;BR/&gt; 3127: (7.9918%)&gt;];
}
6321--8281[label="1;81pkt 81fpkt"];
6321--9362[label="1;81pkt 81fpkt"];
8281--9362[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter src_ip="195.36.173.151"/>
    </slice>
    <from sec="1089176492" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.21.163.152"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.899635,2.08565,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
1810[label="16.176.151.214;d;54pkt 54fpkt", shape=diamond, color=yellow];
1948[label="141.169.76.195;s;52pkt 52fpkt", shape=diamond, color=yellow];
3658[label="16.176.151.214;d;54pkt 54fpkt", shape=hexagon, color=black];
3820[label="141.169.76.195;s;52pkt 52fpkt", shape=hexagon, color=black];
6075[label="141.169.76.128;198pkt 198fpkt", shape=pentagon, color=darkviolet];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.76.128:53, *:*}[76.494%]&lt;BR/&gt;{141.169.76.195:*, 16.176.151.214:80}[20.7171%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.4634%)&lt;BR/&gt; 80: (25.3659%)&lt;BR/&gt; 32816: (0.853659%)&lt;BR/&gt; 32768: (0.731707%)&lt;BR/&gt; 9253: (0.731707%)&gt;];
}
1810--1948[label="1;52pkt 52fpkt"];
1810--3658[label="1;54pkt 54fpkt"];
1810--3820[label="1;52pkt 52fpkt"];
1810--4619[label="0.166667;9pkt 9fpkt"];
1810--4623[label="0.12963;7pkt 7fpkt"];
1810--4631[label="0.166667;9pkt 9fpkt"];
1810--6075[label="0.0185185;1pkt 1fpkt"];
1810--6345[label="0.0185185;1pkt 1fpkt"];
1810--8291[label="0.0185185;1pkt 1fpkt"];
1810--9372[label="0.0185185;1pkt 1fpkt"];
1948--3658[label="1;52pkt 52fpkt"];
1948--3820[label="1;52pkt 52fpkt"];
1948--4619[label="0.173077;9pkt 9fpkt"];
1948--4623[label="0.134615;7pkt 7fpkt"];
1948--4631[label="0.173077;9pkt 9fpkt"];
3658--3820[label="1;52pkt 52fpkt"];
3658--4619[label="0.166667;9pkt 9fpkt"];
3658--4623[label="0.12963;7pkt 7fpkt"];
3658--4631[label="0.166667;9pkt 9fpkt"];
3658--6075[label="0.0185185;1pkt 1fpkt"];
3658--6345[label="0.0185185;1pkt 1fpkt"];
3658--8291[label="0.0185185;1pkt 1fpkt"];
3658--9372[label="0.0185185;1pkt 1fpkt"];
3820--4619[label="0.173077;9pkt 9fpkt"];
3820--4623[label="0.134615;7pkt 7fpkt"];
3820--4631[label="0.173077;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="141.169.76.128" src_port="53"/>
      <filter dst_ip="16.176.151.214" dst_port="80" src_ip="141.169.76.195"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
6354[label="173.19.76.154;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8294[label="173.19.76.154;11pkt 11fpkt", shape=invtriangle, color=brown];
9374[label="173.19.76.154;10pkt 10fpkt", shape=invhouse, color=bisque];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.76.154:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 56644: (4.6875%)&lt;BR/&gt; 54855: (4.6875%)&lt;BR/&gt; 39157: (4.6875%)&lt;BR/&gt; 4554: (4.6875%)&gt;];
}
6354--8294[label="1;11pkt 11fpkt"];
6354--9374[label="1;10pkt 10fpkt"];
8294--9374[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="173.19.76.154" src_port="25"/>
    </slice>
    <from sec="1089176455" usec="0"/>
    <to sec="1089177177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.14.155"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
6361[label="197.30.39.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8300[label="197.30.39.155;1pkt 1fpkt", shape=invtriangle, color=brown];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.39.155:1863, 169.51.5.35:3018}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3018: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
6361--8300[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.51.5.35" dst_port="3018" src_ip="197.30.39.155" src_port="1863"/>
    </slice>
    <from sec="1089176479" usec="0"/>
    <to sec="1089177271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
1630[label="194.134.112.157;s;1917pkt 1917fpkt", shape=diamond, color=yellow];
3690[label="194.134.112.157;s;765pkt 765fpkt", shape=hexagon, color=black];
6389[label="194.134.112.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8317[label="194.134.112.157;2pkt 2fpkt", shape=invtriangle, color=brown];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.134.112.157:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34928: (0.0931099%)&lt;BR/&gt; 31639: (0.0931099%)&lt;BR/&gt; 44129: (0.0744879%)&lt;BR/&gt; 36659: (0.0744879%)&gt;];
}
1630--1686[label="0.0078125;1pkt 1fpkt"];
1630--2490[label="0.016129;1pkt 1fpkt"];
1630--2889[label="0.0769231;1pkt 1fpkt"];
1630--3437[label="0.0106383;1pkt 1fpkt"];
1630--3670[label="0.00454545;1pkt 1fpkt"];
1630--3690[label="1;765pkt 765fpkt"];
1630--3712[label="0.0078125;1pkt 1fpkt"];
1630--4422[label="0.0769231;1pkt 1fpkt"];
1630--4618[label="0.057903;111pkt 111fpkt"];
1630--8317[label="0.5;1pkt 1fpkt"];
3690--3712[label="0.0078125;1pkt 1fpkt"];
3690--4618[label="0.145098;111pkt 111fpkt"];
3690--8317[label="0.5;1pkt 1fpkt"];
6389--8317[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.134.112.157" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
6397[label="208.166.170.158;49pkt 49fpkt", shape=pentagon, color=darkviolet];
8320[label="208.166.170.158;49pkt 49fpkt", shape=invtriangle, color=brown];
9388[label="208.166.170.158;49pkt 49fpkt", shape=invhouse, color=bisque];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.170.158:*, *:445}[63.2653%]&lt;BR/&gt;{208.166.170.158:0, *:0}[36.7347%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (36.7347%)&lt;BR/&gt; 445: (31.6327%)&lt;BR/&gt; 62433: (2.04082%)&lt;BR/&gt; 65313: (1.02041%)&lt;BR/&gt; 65191: (1.02041%)&gt;];
}
6397--8320[label="1;49pkt 49fpkt"];
6397--9388[label="1;49pkt 49fpkt"];
8320--9388[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.166.170.158"/>
      <filter src_ip="208.166.170.158"/>
    </slice>
    <from sec="1089176425" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
6411[label="213.28.133.160;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8329[label="213.28.133.160;5pkt 5fpkt", shape=invtriangle, color=brown];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.28.133.160:80, 136.213.24.74:33444}[20%]&lt;BR/&gt;{213.28.133.160:80, 136.213.24.74:33445}[20%]&lt;BR/&gt;{213.28.133.160:80, 136.213.24.74:33446}[20%]&lt;BR/&gt;{213.28.133.160:80, 136.213.24.74:33448}[20%]&lt;BR/&gt;{213.28.133.160:80, 136.213.24.74:33449}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33449: (10%)&lt;BR/&gt; 33448: (10%)&lt;BR/&gt; 33446: (10%)&lt;BR/&gt; 33445: (10%)&gt;];
}
6411--8329[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.24.74" dst_port="33449" src_ip="213.28.133.160" src_port="80"/>
      <filter dst_ip="136.213.24.74" dst_port="33448" src_ip="213.28.133.160" src_port="80"/>
      <filter dst_ip="136.213.24.74" dst_port="33446" src_ip="213.28.133.160" src_port="80"/>
      <filter dst_ip="136.213.24.74" dst_port="33445" src_ip="213.28.133.160" src_port="80"/>
      <filter dst_ip="136.213.24.74" dst_port="33444" src_ip="213.28.133.160" src_port="80"/>
    </slice>
    <from sec="1089177004" usec="0"/>
    <to sec="1089177028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
6427[label="136.70.135.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8339[label="136.70.135.162;1pkt 1fpkt", shape=invtriangle, color=brown];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.70.135.162:1080, 17.26.43.107:38242}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38242: (50%)&lt;BR/&gt; 1080: (50%)&gt;];
}
6427--8339[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.26.43.107" dst_port="38242" src_ip="136.70.135.162" src_port="1080"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
6439[label="173.19.108.163;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8347[label="173.19.108.163;13pkt 13fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.108.163:80, 194.82.58.159:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61739: (3.84615%)&lt;BR/&gt; 61482: (3.84615%)&lt;BR/&gt; 19854: (3.84615%)&lt;BR/&gt; 19852: (3.84615%)&gt;];
}
6439--8347[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="194.82.58.159" src_ip="173.19.108.163" src_port="80"/>
    </slice>
    <from sec="1089177031" usec="0"/>
    <to sec="1089177152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
6440[label="17.26.173.163;155pkt 155fpkt", shape=pentagon, color=darkviolet];
8348[label="17.26.173.163;154pkt 154fpkt", shape=invtriangle, color=brown];
9401[label="17.26.173.163;154pkt 154fpkt", shape=invhouse, color=bisque];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.26.173.163:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2781: (0.647948%)&lt;BR/&gt; 1114: (0.647948%)&lt;BR/&gt; 4990: (0.323974%)&lt;BR/&gt; 4941: (0.323974%)&gt;];
}
6440--8348[label="1;154pkt 154fpkt"];
6440--9401[label="1;154pkt 154fpkt"];
8348--9401[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="17.26.173.163"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_972{
style=filled;
color=gray75;
126[label="141.169.52.252s;2pkt 2fpkt", shape=rectangle, color=red];
141[label="194.60.149.45s;20pkt 20fpkt", shape=rectangle, color=red];
1169[label="16.0.106.12;d;753pkt 753fpkt", shape=diamond, color=yellow];
1463[label="220.35.123.87;d;9pkt 9fpkt", shape=diamond, color=yellow];
1466[label="136.213.34.233;s;20pkt 20fpkt", shape=diamond, color=yellow];
1760[label="136.213.34.124;s;9pkt 9fpkt", shape=diamond, color=yellow];
1772[label="222.254.157.56;d;8pkt 8fpkt", shape=diamond, color=yellow];
2030[label="169.51.2.6;s;22pkt 22fpkt", shape=diamond, color=yellow];
2250[label="96.194.198.227;d;113pkt 113fpkt", shape=diamond, color=yellow];
2470[label="194.60.149.45;s;157pkt 157fpkt", shape=diamond, color=yellow];
2473[label="169.51.79.110;s;35pkt 35fpkt", shape=diamond, color=yellow];
2849[label="197.30.34.34;d;3pkt 3fpkt", shape=diamond, color=yellow];
2877[label="197.30.34.106;d;5pkt 5fpkt", shape=diamond, color=yellow];
2915[label="197.30.231.242;d;93pkt 93fpkt", shape=diamond, color=yellow];
3010[label="141.169.52.252;s;26pkt 26fpkt", shape=diamond, color=yellow];
3045[label="16.106.214.214;d;19pkt 19fpkt", shape=diamond, color=yellow];
3222[label="136.213.43.190;s;34pkt 34fpkt", shape=diamond, color=yellow];
3638[label="222.254.157.56;d;8pkt 8fpkt", shape=hexagon, color=black];
3647[label="16.0.106.12;d;303pkt 303fpkt", shape=hexagon, color=black];
3730[label="136.213.34.233;s;20pkt 20fpkt", shape=hexagon, color=black];
3843[label="169.51.2.6;s;22pkt 22fpkt", shape=hexagon, color=black];
4159[label="194.60.149.45;s;125pkt 125fpkt", shape=hexagon, color=black];
4212[label="16.106.214.214;d;19pkt 19fpkt", shape=hexagon, color=black];
4471[label="136.213.43.190;s;34pkt 34fpkt", shape=hexagon, color=black];
4639[label="149.99.19.0;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4721[label="169.51.2.6;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5085[label="136.213.169.34;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5206[label="141.169.142.43;56pkt 56fpkt", shape=pentagon, color=darkviolet];
5219[label="141.169.164.44;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5489[label="141.169.143.68;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5576[label="136.213.91.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5637[label="194.60.149.80;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5702[label="136.213.33.86;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5734[label="136.213.157.88;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5938[label="169.51.79.110;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6047[label="136.213.34.124;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6289[label="136.213.32.149;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6444[label="141.169.36.164;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6520[label="194.60.158.171;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7075[label="136.213.34.233;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7131[label="141.169.85.238;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7251[label="141.169.52.252;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7598[label="141.169.142.43;56pkt 56fpkt", shape=invtriangle, color=brown];
7780[label="141.169.143.68;19pkt 19fpkt", shape=invtriangle, color=brown];
7829[label="136.213.91.75;4pkt 4fpkt", shape=invtriangle, color=brown];
7908[label="136.213.33.86;7pkt 7fpkt", shape=invtriangle, color=brown];
7929[label="136.213.157.88;13pkt 13fpkt", shape=invtriangle, color=brown];
8119[label="136.213.34.124;9pkt 9fpkt", shape=invtriangle, color=brown];
8262[label="136.213.32.149;16pkt 16fpkt", shape=invtriangle, color=brown];
8350[label="141.169.36.164;9pkt 9fpkt", shape=invtriangle, color=brown];
8398[label="194.60.158.171;14pkt 14fpkt", shape=invtriangle, color=brown];
9007[label="141.169.142.43;55pkt 55fpkt", shape=invhouse, color=bisque];
9122[label="136.213.91.75;5pkt 5fpkt", shape=invhouse, color=bisque];
9158[label="136.213.33.86;6pkt 6fpkt", shape=invhouse, color=bisque];
9268[label="136.213.34.124;8pkt 8fpkt", shape=invhouse, color=bisque];
9352[label="136.213.32.149;17pkt 17fpkt", shape=invhouse, color=bisque];
9402[label="141.169.36.164;9pkt 9fpkt", shape=invhouse, color=bisque];
9423[label="194.60.158.171;14pkt 14fpkt", shape=invhouse, color=bisque];
stat972[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 16.0.106.12:80}[56.0651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2688%)&lt;BR/&gt; 1863: (1.12016%)&lt;BR/&gt; 443: (0.325866%)&lt;BR/&gt; 9898: (0.142566%)&lt;BR/&gt; 1716: (0.142566%)&gt;];
}
126--3010[label="1;2pkt 2fpkt"];
126--3045[label="1;2pkt 2fpkt"];
126--4212[label="1;2pkt 2fpkt"];
126--7251[label="1;2pkt 2fpkt"];
141--2470[label="1;20pkt 20fpkt"];
141--4159[label="1;20pkt 20fpkt"];
1169--1172[label="0.0199203;15pkt 15fpkt"];
1169--1214[label="0.00854701;1pkt 1fpkt"];
1169--1226[label="0.00531208;4pkt 4fpkt"];
1169--1241[label="0.00138122;1pkt 1fpkt"];
1169--1250[label="0.0451527;34pkt 34fpkt"];
1169--1274[label="0.0868486;35pkt 35fpkt"];
1169--1277[label="0.00132802;1pkt 1fpkt"];
1169--1326[label="0.00956938;2pkt 2fpkt"];
1169--1332[label="0.0408163;20pkt 20fpkt"];
1169--1338[label="0.0498753;20pkt 20fpkt"];
1169--1346[label="0.0454545;2pkt 2fpkt"];
1169--1371[label="0.039312;16pkt 16fpkt"];
1169--1374[label="0.0102041;1pkt 1fpkt"];
1169--1397[label="0.0180723;6pkt 6fpkt"];
1169--1459[label="0.05;1pkt 1fpkt"];
1169--1466[label="0.05;1pkt 1fpkt"];
1169--1544[label="0.0119522;9pkt 9fpkt"];
1169--1616[label="0.027027;6pkt 6fpkt"];
1169--1651[label="0.0137363;5pkt 5fpkt"];
1169--1668[label="0.0180995;4pkt 4fpkt"];
1169--1678[label="0.00881057;4pkt 4fpkt"];
1169--1711[label="0.0652174;3pkt 3fpkt"];
1169--1750[label="0.0116279;3pkt 3fpkt"];
1169--1760[label="0.111111;1pkt 1fpkt"];
1169--1906[label="0.0144928;2pkt 2fpkt"];
1169--1924[label="0.0111111;1pkt 1fpkt"];
1169--1945[label="0.040404;4pkt 4fpkt"];
1169--2025[label="0.028169;2pkt 2fpkt"];
1169--2079[label="0.0277778;4pkt 4fpkt"];
1169--2130[label="0.0361446;3pkt 3fpkt"];
1169--2140[label="0.0666667;14pkt 14fpkt"];
1169--2235[label="0.0487805;2pkt 2fpkt"];
1169--2351[label="0.0211268;3pkt 3fpkt"];
1169--2410[label="0.00438596;2pkt 2fpkt"];
1169--2421[label="0.0888889;8pkt 8fpkt"];
1169--2449[label="0.0294118;1pkt 1fpkt"];
1169--2453[label="0.0232558;1pkt 1fpkt"];
1169--2470[label="0.0382166;6pkt 6fpkt"];
1169--2473[label="0.685714;24pkt 24fpkt"];
1169--2559[label="0.08;4pkt 4fpkt"];
1169--2625[label="0.075;3pkt 3fpkt"];
1169--2690[label="0.0107527;1pkt 1fpkt"];
1169--2741[label="0.0612245;3pkt 3fpkt"];
1169--2758[label="0.0588235;2pkt 2fpkt"];
1169--2828[label="0.0294118;2pkt 2fpkt"];
1169--3010[label="0.115385;3pkt 3fpkt"];
1169--3048[label="0.0288462;3pkt 3fpkt"];
1169--3146[label="0.0277778;1pkt 1fpkt"];
1169--3167[label="0.0194175;2pkt 2fpkt"];
1169--3222[label="0.147059;5pkt 5fpkt"];
1169--3313[label="0.0309278;3pkt 3fpkt"];
1169--3438[label="0.0108696;1pkt 1fpkt"];
1169--3514[label="0.00929615;7pkt 7fpkt"];
1169--3516[label="0.0185923;14pkt 14fpkt"];
1169--3558[label="0.024;3pkt 3fpkt"];
1169--3585[label="0.00796813;6pkt 6fpkt"];
1169--3589[label="0.0111111;1pkt 1fpkt"];
1169--3619[label="0.039312;16pkt 16fpkt"];
1169--3622[label="0.00738916;3pkt 3fpkt"];
1169--3644[label="0.00265604;2pkt 2fpkt"];
1169--3647[label="1;303pkt 303fpkt"];
1169--3701[label="0.0113636;1pkt 1fpkt"];
1169--3704[label="0.0155039;2pkt 2fpkt"];
1169--3725[label="0.0652174;3pkt 3fpkt"];
1169--3730[label="0.05;1pkt 1fpkt"];
1169--3737[label="0.0143885;2pkt 2fpkt"];
1169--3782[label="0.0868486;35pkt 35fpkt"];
1169--3801[label="0.0833333;3pkt 3fpkt"];
1169--3824[label="0.0487805;2pkt 2fpkt"];
1169--3895[label="0.100719;14pkt 14fpkt"];
1169--3923[label="0.0294118;1pkt 1fpkt"];
1169--3965[label="0.0277778;4pkt 4fpkt"];
1169--4017[label="0.00655738;2pkt 2fpkt"];
1169--4034[label="0.0107527;1pkt 1fpkt"];
1169--4081[label="0.0851064;4pkt 4fpkt"];
1169--4125[label="0.0102041;1pkt 1fpkt"];
1169--4141[label="0.0294118;1pkt 1fpkt"];
1169--4159[label="0.048;6pkt 6fpkt"];
1169--4270[label="0.0152905;5pkt 5fpkt"];
1169--4368[label="0.0451527;34pkt 34fpkt"];
1169--4471[label="0.147059;5pkt 5fpkt"];
1169--4512[label="0.0185923;14pkt 14fpkt"];
1169--4557[label="0.0987261;31pkt 31fpkt"];
1169--4572[label="0.0392157;16pkt 16fpkt"];
1169--4584[label="0.00796813;6pkt 6fpkt"];
1169--4604[label="0.0107527;1pkt 1fpkt"];
1169--4619[label="0.104914;79pkt 79fpkt"];
1169--4623[label="0.13413;101pkt 101fpkt"];
1169--4628[label="0.116866;88pkt 88fpkt"];
1169--4631[label="0.104914;79pkt 79fpkt"];
1169--4635[label="0.116866;88pkt 88fpkt"];
1169--4714[label="0.0192308;1pkt 1fpkt"];
1169--4747[label="0.075;3pkt 3fpkt"];
1169--4851[label="0.0285714;1pkt 1fpkt"];
1169--4892[label="0.15;3pkt 3fpkt"];
1169--4913[label="0.06;3pkt 3fpkt"];
1169--4982[label="0.05;1pkt 1fpkt"];
1169--5085[label="0.333333;1pkt 1fpkt"];
1169--5103[label="0.00929615;7pkt 7fpkt"];
1169--5160[label="0.0294118;2pkt 2fpkt"];
1169--5206[label="0.0535714;3pkt 3fpkt"];
1169--5219[label="0.307692;8pkt 8fpkt"];
1169--5298[label="0.0879121;8pkt 8fpkt"];
1169--5312[label="0.1;1pkt 1fpkt"];
1169--5361[label="0.0102041;1pkt 1fpkt"];
1169--5448[label="0.0175439;2pkt 2fpkt"];
1169--5473[label="0.0141844;2pkt 2fpkt"];
1169--5489[label="0.111111;2pkt 2fpkt"];
1169--5509[label="0.0146082;11pkt 11fpkt"];
1169--5535[label="0.0208333;1pkt 1fpkt"];
1169--5570[label="0.0199203;15pkt 15fpkt"];
1169--5594[label="0.0392157;2pkt 2fpkt"];
1169--5616[label="0.0833333;1pkt 1fpkt"];
1169--5636[label="0.0108696;1pkt 1fpkt"];
1169--5637[label="0.285714;4pkt 4fpkt"];
1169--5687[label="0.117647;2pkt 2fpkt"];
1169--5702[label="0.5;3pkt 3fpkt"];
1169--5704[label="0.0384615;2pkt 2fpkt"];
1169--5720[label="0.0136986;1pkt 1fpkt"];
1169--5744[label="0.105263;2pkt 2fpkt"];
1169--5751[label="0.021978;2pkt 2fpkt"];
1169--5800[label="0.0738397;35pkt 35fpkt"];
1169--5821[label="0.0390492;23pkt 23fpkt"];
1169--5843[label="0.102258;77pkt 77fpkt"];
1169--5897[label="0.0373832;16pkt 16fpkt"];
1169--5910[label="0.038835;4pkt 4fpkt"];
1169--5938[label="0.666667;24pkt 24fpkt"];
1169--6035[label="0.0285714;3pkt 3fpkt"];
1169--6081[label="0.0357143;3pkt 3fpkt"];
1169--6090[label="0.0451527;34pkt 34fpkt"];
1169--6102[label="0.00833333;2pkt 2fpkt"];
1169--6141[label="0.00854701;1pkt 1fpkt"];
1169--6157[label="0.111111;2pkt 2fpkt"];
1169--6163[label="0.0588235;1pkt 1fpkt"];
1169--6181[label="0.0967742;3pkt 3fpkt"];
1169--6230[label="0.0243902;1pkt 1fpkt"];
1169--6261[label="0.037037;1pkt 1fpkt"];
1169--6289[label="0.352941;6pkt 6fpkt"];
1169--6416[label="0.0243902;1pkt 1fpkt"];
1169--6444[label="0.6;6pkt 6fpkt"];
1169--6456[label="0.0107914;3pkt 3fpkt"];
1169--6520[label="0.266667;4pkt 4fpkt"];
1169--6522[label="0.3;9pkt 9fpkt"];
1169--6569[label="0.102564;4pkt 4fpkt"];
1169--6663[label="0.0111111;1pkt 1fpkt"];
1169--6709[label="0.0185923;14pkt 14fpkt"];
1169--6741[label="0.0131579;1pkt 1fpkt"];
1169--6768[label="0.0877193;5pkt 5fpkt"];
1169--6797[label="0.0769231;1pkt 1fpkt"];
1169--6803[label="0.05;1pkt 1fpkt"];
1169--6857[label="0.0952381;2pkt 2fpkt"];
1169--6937[label="0.0344828;2pkt 2fpkt"];
1169--6999[label="0.00398406;3pkt 3fpkt"];
1169--7045[label="0.0769231;1pkt 1fpkt"];
1169--7068[label="0.0740741;2pkt 2fpkt"];
1169--7075[label="0.05;1pkt 1fpkt"];
1169--7107[label="0.0309278;3pkt 3fpkt"];
1169--7131[label="0.842105;16pkt 16fpkt"];
1169--7248[label="0.142857;2pkt 2fpkt"];
1169--7251[label="0.142857;4pkt 4fpkt"];
1169--7320[label="0.0196078;1pkt 1fpkt"];
1169--7400[label="0.0285714;1pkt 1fpkt"];
1169--7538[label="0.00929615;7pkt 7fpkt"];
1169--7598[label="0.0535714;3pkt 3fpkt"];
1169--7669[label="0.0909091;1pkt 1fpkt"];
1169--7706[label="0.0102041;1pkt 1fpkt"];
1169--7780[label="0.105263;2pkt 2fpkt"];
1169--7841[label="0.0392157;2pkt 2fpkt"];
1169--7867[label="0.010989;1pkt 1fpkt"];
1169--7899[label="0.117647;2pkt 2fpkt"];
1169--7908[label="0.571429;4pkt 4fpkt"];
1169--7910[label="0.0392157;2pkt 2fpkt"];
1169--7937[label="0.0222222;2pkt 2fpkt"];
1169--7969[label="0.0738397;35pkt 35fpkt"];
1169--7997[label="0.102258;77pkt 77fpkt"];
1169--8112[label="0.0285714;3pkt 3fpkt"];
1169--8119[label="0.111111;1pkt 1fpkt"];
1169--8176[label="0.00862069;1pkt 1fpkt"];
1169--8188[label="0.111111;2pkt 2fpkt"];
1169--8234[label="0.0243902;1pkt 1fpkt"];
1169--8262[label="0.375;6pkt 6fpkt"];
1169--8350[label="0.666667;6pkt 6fpkt"];
1169--8356[label="0.0108303;3pkt 3fpkt"];
1169--8398[label="0.285714;4pkt 4fpkt"];
1169--8522[label="0.0131579;1pkt 1fpkt"];
1169--8558[label="0.0526316;1pkt 1fpkt"];
1169--8679[label="0.00398406;3pkt 3fpkt"];
1169--8710[label="0.0769231;1pkt 1fpkt"];
1169--8724[label="0.0740741;2pkt 2fpkt"];
1169--8747[label="0.03125;3pkt 3fpkt"];
1169--8857[label="0.0196078;1pkt 1fpkt"];
1169--8974[label="0.00929615;7pkt 7fpkt"];
1169--9007[label="0.0363636;2pkt 2fpkt"];
1169--9046[label="0.0909091;1pkt 1fpkt"];
1169--9062[label="0.0102041;1pkt 1fpkt"];
1169--9127[label="0.0384615;2pkt 2fpkt"];
1169--9154[label="0.125;2pkt 2fpkt"];
1169--9158[label="0.5;3pkt 3fpkt"];
1169--9175[label="0.021978;2pkt 2fpkt"];
1169--9195[label="0.0736842;35pkt 35fpkt"];
1169--9209[label="0.102258;77pkt 77fpkt"];
1169--9265[label="0.0285714;3pkt 3fpkt"];
1169--9307[label="0.111111;2pkt 2fpkt"];
1169--9336[label="0.0243902;1pkt 1fpkt"];
1169--9352[label="0.352941;6pkt 6fpkt"];
1169--9402[label="0.666667;6pkt 6fpkt"];
1169--9423[label="0.285714;4pkt 4fpkt"];
1169--9555[label="0.00398406;3pkt 3fpkt"];
1463--1466[label="0.888889;8pkt 8fpkt"];
1463--1640[label="0.111111;1pkt 1fpkt"];
1463--3730[label="0.888889;8pkt 8fpkt"];
1463--4619[label="0.222222;2pkt 2fpkt"];
1463--4631[label="0.222222;2pkt 2fpkt"];
1463--6826[label="0.111111;1pkt 1fpkt"];
1463--7075[label="0.888889;8pkt 8fpkt"];
1466--2250[label="0.1;2pkt 2fpkt"];
1466--2877[label="0.2;1pkt 1fpkt"];
1466--3647[label="0.05;1pkt 1fpkt"];
1466--3730[label="1;20pkt 20fpkt"];
1466--4619[label="0.15;3pkt 3fpkt"];
1466--4631[label="0.15;3pkt 3fpkt"];
1466--7075[label="1;20pkt 20fpkt"];
1760--1772[label="1;8pkt 8fpkt"];
1760--3638[label="1;8pkt 8fpkt"];
1760--3647[label="0.111111;1pkt 1fpkt"];
1760--6047[label="1;8pkt 8fpkt"];
1760--8119[label="1;9pkt 9fpkt"];
1760--9268[label="1;8pkt 8fpkt"];
1772--3638[label="1;8pkt 8fpkt"];
1772--6047[label="1;8pkt 8fpkt"];
1772--8119[label="1;8pkt 8fpkt"];
1772--9268[label="1;8pkt 8fpkt"];
2030--2250[label="0.818182;18pkt 18fpkt"];
2030--3843[label="1;22pkt 22fpkt"];
2030--4623[label="0.0454545;1pkt 1fpkt"];
2030--4628[label="0.0454545;1pkt 1fpkt"];
2030--4635[label="0.0454545;1pkt 1fpkt"];
2030--4721[label="1;22pkt 22fpkt"];
2250--3730[label="0.1;2pkt 2fpkt"];
2250--3843[label="0.818182;18pkt 18fpkt"];
2250--4619[label="0.0265487;3pkt 3fpkt"];
2250--4623[label="0.0442478;5pkt 5fpkt"];
2250--4628[label="0.0973451;11pkt 11fpkt"];
2250--4631[label="0.0265487;3pkt 3fpkt"];
2250--4635[label="0.0973451;11pkt 11fpkt"];
2250--4639[label="0.777778;14pkt 14fpkt"];
2250--4721[label="0.826087;19pkt 19fpkt"];
2250--5570[label="0.0176991;2pkt 2fpkt"];
2250--5734[label="0.307692;4pkt 4fpkt"];
2250--7075[label="0.1;2pkt 2fpkt"];
2250--7929[label="0.307692;4pkt 4fpkt"];
2470--4159[label="1;125pkt 125fpkt"];
2470--4623[label="0.382166;60pkt 60fpkt"];
2470--4628[label="0.0700637;11pkt 11fpkt"];
2470--4635[label="0.0700637;11pkt 11fpkt"];
2473--3647[label="0.0857143;3pkt 3fpkt"];
2473--4619[label="0.0285714;1pkt 1fpkt"];
2473--4623[label="0.114286;4pkt 4fpkt"];
2473--4628[label="0.2;7pkt 7fpkt"];
2473--4631[label="0.0285714;1pkt 1fpkt"];
2473--4635[label="0.2;7pkt 7fpkt"];
2473--5938[label="0.971429;34pkt 34fpkt"];
2849--5085[label="0.333333;1pkt 1fpkt"];
2849--5576[label="0.333333;1pkt 1fpkt"];
2849--9122[label="0.333333;1pkt 1fpkt"];
2877--3730[label="0.2;1pkt 1fpkt"];
2877--7075[label="0.2;1pkt 1fpkt"];
2915--3965[label="0.139785;13pkt 13fpkt"];
2915--4081[label="0.0638298;3pkt 3fpkt"];
2915--4619[label="0.107527;10pkt 10fpkt"];
2915--4623[label="0.0537634;5pkt 5fpkt"];
2915--4628[label="0.0215054;2pkt 2fpkt"];
2915--4631[label="0.107527;10pkt 10fpkt"];
2915--4635[label="0.0215054;2pkt 2fpkt"];
2915--5422[label="0.0526316;1pkt 1fpkt"];
2915--5570[label="0.0430108;4pkt 4fpkt"];
2915--5814[label="0.357143;5pkt 5fpkt"];
2915--5843[label="0.236559;22pkt 22fpkt"];
2915--5848[label="0.166667;4pkt 4fpkt"];
2915--6424[label="0.0215054;2pkt 2fpkt"];
2915--6520[label="0.6;9pkt 9fpkt"];
2915--6637[label="0.04;1pkt 1fpkt"];
2915--7745[label="0.0526316;1pkt 1fpkt"];
2915--7997[label="0.236559;22pkt 22fpkt"];
2915--8338[label="0.0215054;2pkt 2fpkt"];
2915--8398[label="0.642857;9pkt 9fpkt"];
2915--8466[label="0.0416667;1pkt 1fpkt"];
2915--9209[label="0.236559;22pkt 22fpkt"];
2915--9423[label="0.642857;9pkt 9fpkt"];
2915--9460[label="0.04;1pkt 1fpkt"];
3010--3045[label="1;19pkt 19fpkt"];
3010--4212[label="1;19pkt 19fpkt"];
3010--4628[label="0.0769231;2pkt 2fpkt"];
3010--4635[label="0.0769231;2pkt 2fpkt"];
3010--7251[label="1;26pkt 26fpkt"];
3045--4212[label="1;19pkt 19fpkt"];
3045--7251[label="1;19pkt 19fpkt"];
3222--4471[label="1;34pkt 34fpkt"];
3222--4628[label="0.147059;5pkt 5fpkt"];
3222--4635[label="0.147059;5pkt 5fpkt"];
3638--6047[label="1;8pkt 8fpkt"];
3638--8119[label="1;8pkt 8fpkt"];
3638--9268[label="1;8pkt 8fpkt"];
3647--3701[label="0.0113636;1pkt 1fpkt"];
3647--3704[label="0.0155039;2pkt 2fpkt"];
3647--3725[label="0.0217391;1pkt 1fpkt"];
3647--3730[label="0.05;1pkt 1fpkt"];
3647--3737[label="0.0143885;2pkt 2fpkt"];
3647--3782[label="0.0528053;16pkt 16fpkt"];
3647--3801[label="0.0555556;2pkt 2fpkt"];
3647--3895[label="0.0719424;10pkt 10fpkt"];
3647--3923[label="0.0294118;1pkt 1fpkt"];
3647--3965[label="0.0138889;2pkt 2fpkt"];
3647--4017[label="0.00660066;2pkt 2fpkt"];
3647--4034[label="0.0107527;1pkt 1fpkt"];
3647--4081[label="0.0425532;2pkt 2fpkt"];
3647--4125[label="0.0102041;1pkt 1fpkt"];
3647--4270[label="0.0132013;4pkt 4fpkt"];
3647--4368[label="0.0561056;17pkt 17fpkt"];
3647--4512[label="0.019802;6pkt 6fpkt"];
3647--4557[label="0.0528053;16pkt 16fpkt"];
3647--4572[label="0.0132013;4pkt 4fpkt"];
3647--4584[label="0.0132013;4pkt 4fpkt"];
3647--4604[label="0.0107527;1pkt 1fpkt"];
3647--4619[label="0.260726;79pkt 79fpkt"];
3647--4623[label="0.221122;67pkt 67fpkt"];
3647--4628[label="0.00660066;2pkt 2fpkt"];
3647--4631[label="0.260726;79pkt 79fpkt"];
3647--4635[label="0.00660066;2pkt 2fpkt"];
3647--4747[label="0.05;2pkt 2fpkt"];
3647--4892[label="0.15;3pkt 3fpkt"];
3647--4913[label="0.02;1pkt 1fpkt"];
3647--4982[label="0.05;1pkt 1fpkt"];
3647--5085[label="0.333333;1pkt 1fpkt"];
3647--5103[label="0.0132013;4pkt 4fpkt"];
3647--5160[label="0.0294118;2pkt 2fpkt"];
3647--5206[label="0.0357143;2pkt 2fpkt"];
3647--5219[label="0.0769231;2pkt 2fpkt"];
3647--5298[label="0.010989;1pkt 1fpkt"];
3647--5361[label="0.0102041;1pkt 1fpkt"];
3647--5448[label="0.00877193;1pkt 1fpkt"];
3647--5489[label="0.111111;2pkt 2fpkt"];
3647--5509[label="0.00990099;3pkt 3fpkt"];
3647--5570[label="0.019802;6pkt 6fpkt"];
3647--5594[label="0.0196078;1pkt 1fpkt"];
3647--5616[label="0.0833333;1pkt 1fpkt"];
3647--5702[label="0.166667;1pkt 1fpkt"];
3647--5720[label="0.0136986;1pkt 1fpkt"];
3647--5751[label="0.010989;1pkt 1fpkt"];
3647--5800[label="0.0528053;16pkt 16fpkt"];
3647--5821[label="0.0231023;7pkt 7fpkt"];
3647--5843[label="0.0891089;27pkt 27fpkt"];
3647--5897[label="0.0132013;4pkt 4fpkt"];
3647--5910[label="0.00970874;1pkt 1fpkt"];
3647--5938[label="0.0833333;3pkt 3fpkt"];
3647--6081[label="0.0238095;2pkt 2fpkt"];
3647--6090[label="0.0561056;17pkt 17fpkt"];
3647--6102[label="0.00833333;2pkt 2fpkt"];
3647--6157[label="0.0555556;1pkt 1fpkt"];
3647--6289[label="0.235294;4pkt 4fpkt"];
3647--6416[label="0.0243902;1pkt 1fpkt"];
3647--6444[label="0.3;3pkt 3fpkt"];
3647--6456[label="0.00719424;2pkt 2fpkt"];
3647--6520[label="0.266667;4pkt 4fpkt"];
3647--6522[label="0.2;6pkt 6fpkt"];
3647--6663[label="0.0111111;1pkt 1fpkt"];
3647--6709[label="0.019802;6pkt 6fpkt"];
3647--6768[label="0.0350877;2pkt 2fpkt"];
3647--6857[label="0.0952381;2pkt 2fpkt"];
3647--6937[label="0.0344828;2pkt 2fpkt"];
3647--7075[label="0.05;1pkt 1fpkt"];
3647--7131[label="0.473684;9pkt 9fpkt"];
3647--7251[label="0.0357143;1pkt 1fpkt"];
3647--7538[label="0.0132013;4pkt 4fpkt"];
3647--7598[label="0.0357143;2pkt 2fpkt"];
3647--7706[label="0.0102041;1pkt 1fpkt"];
3647--7780[label="0.105263;2pkt 2fpkt"];
3647--7841[label="0.0196078;1pkt 1fpkt"];
3647--7908[label="0.285714;2pkt 2fpkt"];
3647--7937[label="0.0111111;1pkt 1fpkt"];
3647--7969[label="0.0528053;16pkt 16fpkt"];
3647--7997[label="0.0891089;27pkt 27fpkt"];
3647--8119[label="0.111111;1pkt 1fpkt"];
3647--8188[label="0.0555556;1pkt 1fpkt"];
3647--8262[label="0.25;4pkt 4fpkt"];
3647--8350[label="0.333333;3pkt 3fpkt"];
3647--8356[label="0.00722022;2pkt 2fpkt"];
3647--8398[label="0.285714;4pkt 4fpkt"];
3647--8974[label="0.0132013;4pkt 4fpkt"];
3647--9007[label="0.0181818;1pkt 1fpkt"];
3647--9062[label="0.0102041;1pkt 1fpkt"];
3647--9127[label="0.0192308;1pkt 1fpkt"];
3647--9158[label="0.166667;1pkt 1fpkt"];
3647--9175[label="0.010989;1pkt 1fpkt"];
3647--9195[label="0.0528053;16pkt 16fpkt"];
3647--9209[label="0.0891089;27pkt 27fpkt"];
3647--9307[label="0.0555556;1pkt 1fpkt"];
3647--9352[label="0.235294;4pkt 4fpkt"];
3647--9402[label="0.333333;3pkt 3fpkt"];
3647--9423[label="0.285714;4pkt 4fpkt"];
3730--4619[label="0.15;3pkt 3fpkt"];
3730--4631[label="0.15;3pkt 3fpkt"];
3730--7075[label="1;20pkt 20fpkt"];
3843--4623[label="0.0454545;1pkt 1fpkt"];
3843--4628[label="0.0454545;1pkt 1fpkt"];
3843--4635[label="0.0454545;1pkt 1fpkt"];
3843--4721[label="1;22pkt 22fpkt"];
4159--4623[label="0.48;60pkt 60fpkt"];
4212--7251[label="1;19pkt 19fpkt"];
4471--4628[label="0.147059;5pkt 5fpkt"];
4471--4635[label="0.147059;5pkt 5fpkt"];
5206--7598[label="1;56pkt 56fpkt"];
5206--9007[label="1;55pkt 55fpkt"];
5489--7780[label="1;18pkt 18fpkt"];
5576--7829[label="1;4pkt 4fpkt"];
5576--9122[label="1;5pkt 5fpkt"];
5702--7908[label="1;6pkt 6fpkt"];
5702--9158[label="1;6pkt 6fpkt"];
5734--7929[label="1;13pkt 13fpkt"];
6047--8119[label="1;8pkt 8fpkt"];
6047--9268[label="1;8pkt 8fpkt"];
6289--8262[label="1;16pkt 16fpkt"];
6289--9352[label="1;17pkt 17fpkt"];
6444--8350[label="1;9pkt 9fpkt"];
6444--9402[label="1;9pkt 9fpkt"];
6520--8398[label="1;14pkt 14fpkt"];
6520--9423[label="1;14pkt 14fpkt"];
7598--9007[label="1;55pkt 55fpkt"];
7829--9122[label="1;4pkt 4fpkt"];
7908--9158[label="1;6pkt 6fpkt"];
8119--9268[label="1;8pkt 8fpkt"];
8262--9352[label="1;16pkt 16fpkt"];
8350--9402[label="1;9pkt 9fpkt"];
8398--9423[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="16.0.106.12" dst_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
6455[label="197.30.39.165;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8355[label="197.30.39.165;5pkt 5fpkt", shape=invtriangle, color=brown];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.39.165:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 37083: (9.09091%)&lt;BR/&gt; 36173: (9.09091%)&lt;BR/&gt; 2327: (9.09091%)&lt;BR/&gt; 1199: (9.09091%)&gt;];
}
6455--8355[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="197.30.39.165" src_port="1863"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31749,1.98517,001,1 1 1 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
389[label="215.208.120.145s;485pkt 485fpkt", shape=rectangle, color=red];
736[label="215.208.120.145s;485pkt 485fpkt", shape=ellipse, color=green];
1022[label="215.208.120.145s;485pkt 485fpkt", shape=triangle, color=blue];
1580[label="141.169.130.196;d;20pkt 20fpkt", shape=diamond, color=yellow];
1581[label="192.197.17.19;s;2pkt 2fpkt", shape=diamond, color=yellow];
2050[label="215.208.120.145;s;485pkt 485fpkt", shape=diamond, color=yellow];
3604[label="141.169.130.196;d;7pkt 7fpkt", shape=hexagon, color=black];
3605[label="192.197.17.19;s;2pkt 2fpkt", shape=hexagon, color=black];
3751[label="215.208.120.145;s;485pkt 485fpkt", shape=hexagon, color=black];
4893[label="192.197.17.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.120.145:*, *:5554}[49.8016%]&lt;BR/&gt;{215.208.120.145:*, *:9898}[46.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.58%)&lt;BR/&gt; 9898: (23.8095%)&lt;BR/&gt; 80: (0.42735%)&lt;BR/&gt; 4848: (0.14245%)&lt;BR/&gt; 4990: (0.10175%)&gt;];
}
389--736[label="1;485pkt 485fpkt"];
389--1022[label="1;485pkt 485fpkt"];
389--1333[label="0.0153846;2pkt 2fpkt"];
389--1404[label="0.0120482;2pkt 2fpkt"];
389--1424[label="0.0307692;2pkt 2fpkt"];
389--1580[label="0.05;1pkt 1fpkt"];
389--1724[label="0.125;2pkt 2fpkt"];
389--2022[label="0.0118343;2pkt 2fpkt"];
389--2028[label="0.00803213;2pkt 2fpkt"];
389--2050[label="1;485pkt 485fpkt"];
389--2051[label="0.0289855;2pkt 2fpkt"];
389--2223[label="0.0571429;2pkt 2fpkt"];
389--2270[label="0.0344828;2pkt 2fpkt"];
389--2632[label="0.00851064;2pkt 2fpkt"];
389--2680[label="0.0444444;2pkt 2fpkt"];
389--3604[label="0.142857;1pkt 1fpkt"];
389--3751[label="1;485pkt 485fpkt"];
389--3823[label="0.0571429;2pkt 2fpkt"];
389--3939[label="0.011976;2pkt 2fpkt"];
389--4273[label="0.00851064;2pkt 2fpkt"];
736--1022[label="1;485pkt 485fpkt"];
736--1333[label="0.0153846;2pkt 2fpkt"];
736--1404[label="0.0120482;2pkt 2fpkt"];
736--1424[label="0.0307692;2pkt 2fpkt"];
736--1580[label="0.05;1pkt 1fpkt"];
736--1724[label="0.125;2pkt 2fpkt"];
736--2022[label="0.0118343;2pkt 2fpkt"];
736--2028[label="0.00803213;2pkt 2fpkt"];
736--2050[label="1;485pkt 485fpkt"];
736--2051[label="0.0289855;2pkt 2fpkt"];
736--2223[label="0.0571429;2pkt 2fpkt"];
736--2270[label="0.0344828;2pkt 2fpkt"];
736--2632[label="0.00851064;2pkt 2fpkt"];
736--2680[label="0.0444444;2pkt 2fpkt"];
736--3604[label="0.142857;1pkt 1fpkt"];
736--3751[label="1;485pkt 485fpkt"];
736--3823[label="0.0571429;2pkt 2fpkt"];
736--3939[label="0.011976;2pkt 2fpkt"];
736--4273[label="0.00851064;2pkt 2fpkt"];
1022--1333[label="0.0153846;2pkt 2fpkt"];
1022--1404[label="0.0120482;2pkt 2fpkt"];
1022--1424[label="0.0307692;2pkt 2fpkt"];
1022--1580[label="0.05;1pkt 1fpkt"];
1022--1724[label="0.125;2pkt 2fpkt"];
1022--2022[label="0.0118343;2pkt 2fpkt"];
1022--2028[label="0.00803213;2pkt 2fpkt"];
1022--2050[label="1;485pkt 485fpkt"];
1022--2051[label="0.0289855;2pkt 2fpkt"];
1022--2223[label="0.0571429;2pkt 2fpkt"];
1022--2270[label="0.0344828;2pkt 2fpkt"];
1022--2632[label="0.00851064;2pkt 2fpkt"];
1022--2680[label="0.0444444;2pkt 2fpkt"];
1022--3604[label="0.142857;1pkt 1fpkt"];
1022--3751[label="1;485pkt 485fpkt"];
1022--3823[label="0.0571429;2pkt 2fpkt"];
1022--3939[label="0.011976;2pkt 2fpkt"];
1022--4273[label="0.00851064;2pkt 2fpkt"];
1580--1581[label="1;2pkt 2fpkt"];
1580--2050[label="0.05;1pkt 1fpkt"];
1580--2466[label="0.05;1pkt 1fpkt"];
1580--3604[label="1;7pkt 7fpkt"];
1580--3605[label="1;2pkt 2fpkt"];
1580--3751[label="0.05;1pkt 1fpkt"];
1580--4893[label="1;1pkt 1fpkt"];
1580--5824[label="0.15;3pkt 3fpkt"];
1580--7983[label="0.15;3pkt 3fpkt"];
1580--9202[label="0.15;3pkt 3fpkt"];
1581--3604[label="1;2pkt 2fpkt"];
1581--3605[label="1;2pkt 2fpkt"];
1581--4893[label="1;1pkt 1fpkt"];
2050--2051[label="0.0289855;2pkt 2fpkt"];
2050--2223[label="0.0571429;2pkt 2fpkt"];
2050--2270[label="0.0344828;2pkt 2fpkt"];
2050--2632[label="0.00851064;2pkt 2fpkt"];
2050--2680[label="0.0444444;2pkt 2fpkt"];
2050--3604[label="0.142857;1pkt 1fpkt"];
2050--3751[label="1;485pkt 485fpkt"];
2050--3823[label="0.0571429;2pkt 2fpkt"];
2050--3939[label="0.011976;2pkt 2fpkt"];
2050--4273[label="0.00851064;2pkt 2fpkt"];
3604--3605[label="1;2pkt 2fpkt"];
3604--3751[label="0.142857;1pkt 1fpkt"];
3604--4893[label="1;1pkt 1fpkt"];
3604--5824[label="0.142857;1pkt 1fpkt"];
3604--7983[label="0.142857;1pkt 1fpkt"];
3604--9202[label="0.142857;1pkt 1fpkt"];
3605--4893[label="1;1pkt 1fpkt"];
3751--3823[label="0.0571429;2pkt 2fpkt"];
3751--3939[label="0.011976;2pkt 2fpkt"];
3751--4273[label="0.00851064;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.208.120.145"/>
      <filter dst_port="9898" src_ip="215.208.120.145"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
6465[label="195.46.102.166;68pkt 68fpkt", shape=pentagon, color=darkviolet];
8363[label="195.46.102.166;68pkt 68fpkt", shape=invtriangle, color=brown];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.102.166:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6465--8363[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter src_ip="195.46.102.166"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
6468[label="17.30.160.166;491pkt 491fpkt", shape=pentagon, color=darkviolet];
8365[label="17.30.160.166;491pkt 491fpkt", shape=invtriangle, color=brown];
9407[label="17.30.160.166;490pkt 490fpkt", shape=invhouse, color=bisque];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.30.160.166:*, *:9898}[51.7312%]&lt;BR/&gt;{17.30.160.166:*, *:5554}[48.2688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.8832%)&lt;BR/&gt; 5554: (24.1168%)&lt;BR/&gt; 3755: (0.101902%)&lt;BR/&gt; 3752: (0.101902%)&lt;BR/&gt; 3751: (0.101902%)&gt;];
}
6468--8365[label="1;491pkt 491fpkt"];
6468--9407[label="1;490pkt 490fpkt"];
8365--9407[label="1;490pkt 490fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="17.30.160.166"/>
      <filter dst_port="5554" src_ip="17.30.160.166"/>
    </slice>
    <from sec="1089176875" usec="0"/>
    <to sec="1089176877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
6476[label="215.186.43.167;100pkt 100fpkt", shape=pentagon, color=darkviolet];
8370[label="215.186.43.167;99pkt 99fpkt", shape=invtriangle, color=brown];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.186.43.167:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3863: (1.00503%)&lt;BR/&gt; 3526: (1.00503%)&lt;BR/&gt; 3047: (1.00503%)&lt;BR/&gt; 4882: (0.502513%)&gt;];
}
6476--8370[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="215.186.43.167"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.20.168"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
6490[label="209.33.76.169;348pkt 348fpkt", shape=pentagon, color=darkviolet];
8376[label="209.33.76.169;348pkt 348fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.33.76.169:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33476: (0.287356%)&lt;BR/&gt; 62406: (0.143678%)&lt;BR/&gt; 62402: (0.143678%)&lt;BR/&gt; 61409: (0.143678%)&gt;];
}
6490--8376[label="1;348pkt 348fpkt"];
</description>
    <slice>
      <filter src_ip="209.33.76.169" src_port="80"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
1233[label="194.54.48.162;d;984pkt 984fpkt", shape=diamond, color=yellow];
1932[label="197.30.34.90;s;7pkt 7fpkt", shape=diamond, color=yellow];
2353[label="220.32.19.170;s;449pkt 449fpkt", shape=diamond, color=yellow];
2396[label="197.30.34.0;s;3pkt 3fpkt", shape=diamond, color=yellow];
2562[label="19.211.114.86;s;164pkt 164fpkt", shape=diamond, color=yellow];
2599[label="19.211.114.9;s;146pkt 146fpkt", shape=diamond, color=yellow];
2895[label="136.213.34.64;d;6pkt 6fpkt", shape=diamond, color=yellow];
3001[label="16.29.141.116;s;90pkt 90fpkt", shape=diamond, color=yellow];
3107[label="19.211.112.21;s;148pkt 148fpkt", shape=diamond, color=yellow];
3973[label="19.211.114.86;s;157pkt 157fpkt", shape=hexagon, color=black];
4118[label="197.30.34.0;s;3pkt 3fpkt", shape=hexagon, color=black];
4256[label="19.211.114.9;s;146pkt 146fpkt", shape=hexagon, color=black];
4333[label="16.29.141.116;s;79pkt 79fpkt", shape=hexagon, color=black];
4926[label="19.211.112.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4972[label="197.30.231.24;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5042[label="197.30.34.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5120[label="197.30.34.37;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5165[label="18.147.196.40;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5619[label="18.147.229.78;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5653[label="197.30.34.82;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5707[label="19.211.114.86;168pkt 168fpkt", shape=pentagon, color=darkviolet];
5750[label="197.30.34.90;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6264[label="16.130.69.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6498[label="220.32.19.170;564pkt 564fpkt", shape=pentagon, color=darkviolet];
6595[label="196.252.112.179;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7463[label="197.30.231.24;17pkt 17fpkt", shape=invtriangle, color=brown];
7504[label="197.30.34.32;8pkt 8fpkt", shape=invtriangle, color=brown];
7552[label="197.30.34.37;3pkt 3fpkt", shape=invtriangle, color=brown];
7575[label="18.147.196.40;6pkt 6fpkt", shape=invtriangle, color=brown];
7857[label="18.147.229.78;4pkt 4fpkt", shape=invtriangle, color=brown];
7878[label="197.30.34.82;4pkt 4fpkt", shape=invtriangle, color=brown];
7913[label="19.211.114.86;169pkt 169fpkt", shape=invtriangle, color=brown];
7936[label="197.30.34.90;4pkt 4fpkt", shape=invtriangle, color=brown];
8381[label="220.32.19.170;563pkt 563fpkt", shape=invtriangle, color=brown];
8440[label="196.252.112.179;7pkt 7fpkt", shape=invtriangle, color=brown];
8935[label="197.30.231.24;18pkt 18fpkt", shape=invhouse, color=bisque];
8983[label="197.30.34.37;2pkt 2fpkt", shape=invhouse, color=bisque];
9174[label="197.30.34.90;3pkt 3fpkt", shape=invhouse, color=bisque];
9413[label="220.32.19.170;564pkt 564fpkt", shape=invhouse, color=bisque];
9444[label="196.252.112.179;7pkt 7fpkt", shape=invhouse, color=bisque];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 194.54.48.162:*}[58.1381%]&lt;BR/&gt;{220.32.19.170:*, *:135}[34.8335%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.956%)&lt;BR/&gt; 135: (23.5275%)&lt;BR/&gt; 1863: (0.956044%)&lt;BR/&gt; 6346: (0.252747%)&lt;BR/&gt; 1220: (0.197802%)&gt;];
}
1233--1343[label="0.0321543;10pkt 10fpkt"];
1233--1345[label="0.0518293;51pkt 51fpkt"];
1233--1399[label="0.173913;4pkt 4fpkt"];
1233--1405[label="0.0181818;2pkt 2fpkt"];
1233--1636[label="0.121212;4pkt 4fpkt"];
1233--1642[label="0.015625;4pkt 4fpkt"];
1233--1665[label="0.00364964;1pkt 1fpkt"];
1233--1670[label="0.189944;34pkt 34fpkt"];
1233--1673[label="0.010989;3pkt 3fpkt"];
1233--1714[label="0.0310078;4pkt 4fpkt"];
1233--1822[label="0.0074813;3pkt 3fpkt"];
1233--1861[label="0.0365854;3pkt 3fpkt"];
1233--1922[label="0.0118343;4pkt 4fpkt"];
1233--2156[label="0.00817439;3pkt 3fpkt"];
1233--2233[label="0.0208333;2pkt 2fpkt"];
1233--2367[label="0.640523;98pkt 98fpkt"];
1233--2417[label="0.0328467;9pkt 9fpkt"];
1233--2497[label="0.0078125;1pkt 1fpkt"];
1233--2553[label="0.0267857;3pkt 3fpkt"];
1233--2562[label="0.957317;157pkt 157fpkt"];
1233--2599[label="0.931507;136pkt 136fpkt"];
1233--3001[label="0.877778;79pkt 79fpkt"];
1233--3107[label="0.918919;136pkt 136fpkt"];
1233--3112[label="0.0192308;2pkt 2fpkt"];
1233--3150[label="0.0222222;2pkt 2fpkt"];
1233--3191[label="0.0487805;4pkt 4fpkt"];
1233--3357[label="0.0347826;4pkt 4fpkt"];
1233--3549[label="0.0280374;6pkt 6fpkt"];
1233--3550[label="0.0497967;49pkt 49fpkt"];
1233--3649[label="0.0105105;7pkt 7fpkt"];
1233--3696[label="0.0194805;3pkt 3fpkt"];
1233--3969[label="0.0291262;3pkt 3fpkt"];
1233--3973[label="1;157pkt 157fpkt"];
1233--4037[label="0.0310078;4pkt 4fpkt"];
1233--4099[label="0.0410959;3pkt 3fpkt"];
1233--4132[label="0.00421941;1pkt 1fpkt"];
1233--4256[label="0.931507;136pkt 136fpkt"];
1233--4333[label="1;79pkt 79fpkt"];
1233--4525[label="0.009375;3pkt 3fpkt"];
1233--4534[label="0.0299401;5pkt 5fpkt"];
1233--4535[label="0.0212766;2pkt 2fpkt"];
1233--4618[label="0.0599593;59pkt 59fpkt"];
1233--4926[label="0.5;1pkt 1fpkt"];
1233--4930[label="0.235294;4pkt 4fpkt"];
1233--4950[label="0.016129;1pkt 1fpkt"];
1233--4972[label="0.823529;14pkt 14fpkt"];
1233--5015[label="0.181818;2pkt 2fpkt"];
1233--5042[label="0.25;2pkt 2fpkt"];
1233--5120[label="0.333333;1pkt 1fpkt"];
1233--5124[label="0.0518293;51pkt 51fpkt"];
1233--5165[label="1;6pkt 6fpkt"];
1233--5284[label="0.0851064;4pkt 4fpkt"];
1233--5340[label="0.166667;1pkt 1fpkt"];
1233--5432[label="0.0204082;1pkt 1fpkt"];
1233--5589[label="0.018018;2pkt 2fpkt"];
1233--5619[label="1;4pkt 4fpkt"];
1233--5624[label="0.00898876;8pkt 8fpkt"];
1233--5642[label="0.0444444;4pkt 4fpkt"];
1233--5653[label="0.25;1pkt 1fpkt"];
1233--5664[label="0.0123457;1pkt 1fpkt"];
1233--5707[label="0.928571;156pkt 156fpkt"];
1233--5797[label="0.0238095;2pkt 2fpkt"];
1233--5808[label="0.00759494;3pkt 3fpkt"];
1233--5816[label="0.0248619;9pkt 9fpkt"];
1233--6037[label="0.0338983;4pkt 4fpkt"];
1233--6069[label="0.0227273;1pkt 1fpkt"];
1233--6238[label="0.0714286;2pkt 2fpkt"];
1233--6264[label="1;4pkt 4fpkt"];
1233--6504[label="0.015748;2pkt 2fpkt"];
1233--6595[label="0.666667;4pkt 4fpkt"];
1233--6853[label="0.0588235;1pkt 1fpkt"];
1233--6917[label="0.047619;2pkt 2fpkt"];
1233--7050[label="0.0434783;4pkt 4fpkt"];
1233--7114[label="0.0526316;2pkt 2fpkt"];
1233--7168[label="0.0245902;3pkt 3fpkt"];
1233--7209[label="0.142857;1pkt 1fpkt"];
1233--7446[label="0.016129;1pkt 1fpkt"];
1233--7463[label="0.823529;14pkt 14fpkt"];
1233--7486[label="0.1;1pkt 1fpkt"];
1233--7504[label="0.25;2pkt 2fpkt"];
1233--7552[label="0.333333;1pkt 1fpkt"];
1233--7575[label="1;6pkt 6fpkt"];
1233--7652[label="0.0652174;3pkt 3fpkt"];
1233--7838[label="0.018018;2pkt 2fpkt"];
1233--7857[label="1;4pkt 4fpkt"];
1233--7878[label="0.25;1pkt 1fpkt"];
1233--7913[label="0.928994;157pkt 157fpkt"];
1233--7968[label="0.0238095;2pkt 2fpkt"];
1233--7976[label="0.00761421;3pkt 3fpkt"];
1233--8008[label="0.2;1pkt 1fpkt"];
1233--8114[label="0.034188;4pkt 4fpkt"];
1233--8130[label="0.0232558;1pkt 1fpkt"];
1233--8238[label="0.037037;1pkt 1fpkt"];
1233--8440[label="0.714286;5pkt 5fpkt"];
1233--8587[label="0.0625;1pkt 1fpkt"];
1233--8629[label="0.0487805;2pkt 2fpkt"];
1233--8713[label="0.043956;4pkt 4fpkt"];
1233--8749[label="0.0526316;2pkt 2fpkt"];
1233--8779[label="0.0165289;2pkt 2fpkt"];
1233--8806[label="0.142857;1pkt 1fpkt"];
1233--8935[label="0.833333;15pkt 15fpkt"];
1233--8948[label="0.1;1pkt 1fpkt"];
1233--8983[label="0.5;1pkt 1fpkt"];
1233--9060[label="0.166667;1pkt 1fpkt"];
1233--9126[label="0.018018;2pkt 2fpkt"];
1233--9266[label="0.0338983;4pkt 4fpkt"];
1233--9278[label="0.0232558;1pkt 1fpkt"];
1233--9444[label="0.714286;5pkt 5fpkt"];
1233--9617[label="0.142857;1pkt 1fpkt"];
1932--2895[label="0.166667;1pkt 1fpkt"];
1932--5750[label="1;3pkt 3fpkt"];
1932--7936[label="1;4pkt 4fpkt"];
1932--9174[label="1;3pkt 3fpkt"];
2353--2895[label="0.166667;1pkt 1fpkt"];
2353--4620[label="0.0623608;28pkt 28fpkt"];
2353--4629[label="0.0556793;25pkt 25fpkt"];
2353--4636[label="0.0556793;25pkt 25fpkt"];
2353--6498[label="0.997773;448pkt 448fpkt"];
2353--8381[label="0.995546;447pkt 447fpkt"];
2353--9413[label="0.997773;448pkt 448fpkt"];
2396--2895[label="0.333333;1pkt 1fpkt"];
2396--4118[label="1;3pkt 3fpkt"];
2562--3973[label="1;157pkt 157fpkt"];
2562--4618[label="0.0914634;15pkt 15fpkt"];
2562--5707[label="0.993902;163pkt 163fpkt"];
2562--7913[label="1;164pkt 164fpkt"];
2599--4256[label="1;146pkt 146fpkt"];
2599--4618[label="0.116438;17pkt 17fpkt"];
2895--4118[label="0.333333;1pkt 1fpkt"];
2895--5653[label="0.25;1pkt 1fpkt"];
2895--6498[label="0.166667;1pkt 1fpkt"];
2895--7878[label="0.25;1pkt 1fpkt"];
2895--8381[label="0.166667;1pkt 1fpkt"];
2895--9413[label="0.166667;1pkt 1fpkt"];
3001--4333[label="1;79pkt 79fpkt"];
3107--4618[label="0.0675676;10pkt 10fpkt"];
3107--4926[label="1;2pkt 2fpkt"];
3973--4618[label="0.0955414;15pkt 15fpkt"];
3973--5707[label="0.993631;156pkt 156fpkt"];
3973--7913[label="1;157pkt 157fpkt"];
4256--4618[label="0.116438;17pkt 17fpkt"];
4972--7463[label="1;17pkt 17fpkt"];
4972--8935[label="1;17pkt 17fpkt"];
5042--7504[label="1;8pkt 8fpkt"];
5120--7552[label="1;3pkt 3fpkt"];
5120--8983[label="1;2pkt 2fpkt"];
5165--7575[label="1;6pkt 6fpkt"];
5619--7857[label="1;4pkt 4fpkt"];
5653--7878[label="1;4pkt 4fpkt"];
5707--7913[label="1;168pkt 168fpkt"];
5750--7936[label="1;3pkt 3fpkt"];
5750--9174[label="1;3pkt 3fpkt"];
6498--8381[label="1;563pkt 563fpkt"];
6498--9413[label="1;564pkt 564fpkt"];
6595--8440[label="1;6pkt 6fpkt"];
6595--9444[label="1;6pkt 6fpkt"];
7463--8935[label="1;17pkt 17fpkt"];
7552--8983[label="1;2pkt 2fpkt"];
7936--9174[label="1;3pkt 3fpkt"];
8381--9413[label="1;563pkt 563fpkt"];
8440--9444[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="220.32.19.170"/>
      <filter dst_ip="194.54.48.162" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
6501[label="197.30.38.170;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8383[label="197.30.38.170;6pkt 6fpkt", shape=invtriangle, color=brown];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.38.170:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3694: (8.33333%)&lt;BR/&gt; 3025: (8.33333%)&lt;BR/&gt; 3021: (8.33333%)&lt;BR/&gt; 1068: (8.33333%)&gt;];
}
6501--8383[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="197.30.38.170" src_port="1863"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_982{
style=filled;
color=gray75;
3280[label="202.253.106.60;s;60pkt 60fpkt", shape=diamond, color=yellow];
3281[label="141.169.3.129;d;79pkt 79fpkt", shape=diamond, color=yellow];
4485[label="202.253.106.60;s;60pkt 60fpkt", shape=hexagon, color=black];
5388[label="202.253.106.60;60pkt 60fpkt", shape=pentagon, color=darkviolet];
7723[label="202.253.106.60;60pkt 60fpkt", shape=invtriangle, color=brown];
9072[label="202.253.106.60;60pkt 60fpkt", shape=invhouse, color=bisque];
stat982[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.253.106.60:80, 141.169.3.129:*}[75.9494%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33051: (0.791557%)&lt;BR/&gt; 33050: (0.791557%)&lt;BR/&gt; 33048: (0.791557%)&lt;BR/&gt; 33047: (0.791557%)&gt;];
}
3280--3281[label="1;60pkt 60fpkt"];
3280--4485[label="1;60pkt 60fpkt"];
3280--5388[label="1;60pkt 60fpkt"];
3280--7723[label="1;60pkt 60fpkt"];
3280--9072[label="1;60pkt 60fpkt"];
3281--4485[label="1;60pkt 60fpkt"];
3281--5050[label="0.375;3pkt 3fpkt"];
3281--5388[label="1;60pkt 60fpkt"];
3281--6517[label="0.123077;8pkt 8fpkt"];
3281--7723[label="1;60pkt 60fpkt"];
3281--8395[label="0.125;8pkt 8fpkt"];
3281--9072[label="1;60pkt 60fpkt"];
4485--5388[label="1;60pkt 60fpkt"];
4485--7723[label="1;60pkt 60fpkt"];
4485--9072[label="1;60pkt 60fpkt"];
5388--7723[label="1;60pkt 60fpkt"];
5388--9072[label="1;60pkt 60fpkt"];
7723--9072[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.3.129" src_ip="202.253.106.60" src_port="80"/>
    </slice>
    <from sec="1089177033" usec="0"/>
    <to sec="1089177228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,004,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
2399[label="208.138.230.167;d;38pkt 38fpkt", shape=diamond, color=yellow];
3113[label="194.33.134.148;s;18pkt 18fpkt", shape=diamond, color=yellow];
3173[label="194.33.134.156;s;18pkt 18fpkt", shape=diamond, color=yellow];
4453[label="194.33.134.156;s;18pkt 18fpkt", shape=hexagon, color=black];
6284[label="194.33.134.148;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6377[label="194.33.134.156;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6421[label="194.33.134.161;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6426[label="194.33.134.162;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6488[label="194.33.134.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6494[label="194.33.134.169;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6518[label="194.33.134.171;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6552[label="194.33.134.174;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8308[label="194.33.134.156;19pkt 19fpkt", shape=invtriangle, color=brown];
8336[label="194.33.134.161;13pkt 13fpkt", shape=invtriangle, color=brown];
8375[label="194.33.134.168;10pkt 10fpkt", shape=invtriangle, color=brown];
8396[label="194.33.134.171;5pkt 5fpkt", shape=invtriangle, color=brown];
8414[label="194.33.134.174;7pkt 7fpkt", shape=invtriangle, color=brown];
9421[label="194.33.134.171;5pkt 5fpkt", shape=invhouse, color=bisque];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 208.138.230.167:*}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (48.9669%)&lt;BR/&gt; 2721: (1.03306%)&lt;BR/&gt; 2718: (1.03306%)&lt;BR/&gt; 50631: (0.826446%)&lt;BR/&gt; 4789: (0.826446%)&gt;];
}
2399--2432[label="0.0263158;1pkt 1fpkt"];
2399--2902[label="0.0263158;1pkt 1fpkt"];
2399--3113[label="0.111111;2pkt 2fpkt"];
2399--3173[label="0.111111;2pkt 2fpkt"];
2399--3875[label="0.0263158;1pkt 1fpkt"];
2399--4134[label="0.0263158;1pkt 1fpkt"];
2399--4262[label="0.0263158;1pkt 1fpkt"];
2399--4453[label="0.111111;2pkt 2fpkt"];
2399--6284[label="0.105263;2pkt 2fpkt"];
2399--6331[label="0.0263158;1pkt 1fpkt"];
2399--6377[label="0.105263;2pkt 2fpkt"];
2399--6421[label="0.153846;2pkt 2fpkt"];
2399--6426[label="0.2;2pkt 2fpkt"];
2399--6488[label="0.2;2pkt 2fpkt"];
2399--6494[label="0.333333;2pkt 2fpkt"];
2399--6518[label="0.333333;2pkt 2fpkt"];
2399--6552[label="0.25;2pkt 2fpkt"];
2399--8308[label="0.105263;2pkt 2fpkt"];
2399--8336[label="0.153846;2pkt 2fpkt"];
2399--8375[label="0.2;2pkt 2fpkt"];
2399--8396[label="0.2;1pkt 1fpkt"];
2399--8414[label="0.285714;2pkt 2fpkt"];
2399--9421[label="0.2;1pkt 1fpkt"];
3113--6284[label="1;18pkt 18fpkt"];
3173--4453[label="1;18pkt 18fpkt"];
3173--6377[label="1;18pkt 18fpkt"];
3173--8308[label="1;18pkt 18fpkt"];
4453--6377[label="1;18pkt 18fpkt"];
4453--8308[label="1;18pkt 18fpkt"];
6377--8308[label="1;19pkt 19fpkt"];
6421--8336[label="1;13pkt 13fpkt"];
6488--8375[label="1;10pkt 10fpkt"];
6518--8396[label="1;5pkt 5fpkt"];
6518--9421[label="1;5pkt 5fpkt"];
6552--8414[label="1;7pkt 7fpkt"];
8396--9421[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.138.230.167" src_port="445"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
6527[label="194.54.48.172;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8401[label="194.54.48.172;36pkt 36fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.54.48.172:1214, 18.252.2.13:*}[41.6667%]&lt;BR/&gt;{194.54.48.172:*, *:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (31.9444%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 50876: (1.38889%)&lt;BR/&gt; 50872: (1.38889%)&lt;BR/&gt; 50869: (1.38889%)&gt;];
}
6527--8401[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="194.54.48.172"/>
      <filter dst_ip="18.252.2.13" src_ip="194.54.48.172" src_port="1214"/>
    </slice>
    <from sec="1089176438" usec="0"/>
    <to sec="1089177287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16504,1.95908,001,1 1 1 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
335[label="215.218.0.97s;251pkt 251fpkt", shape=rectangle, color=red];
420[label="73.14.114.173s;218pkt 218fpkt", shape=rectangle, color=red];
477[label="214.178.133.223s;222pkt 222fpkt", shape=rectangle, color=red];
684[label="215.218.0.97s;353pkt 353fpkt", shape=ellipse, color=green];
810[label="214.178.133.223s;289pkt 289fpkt", shape=ellipse, color=green];
977[label="215.218.0.97s;353pkt 353fpkt", shape=triangle, color=blue];
1089[label="214.178.133.223s;222pkt 222fpkt", shape=triangle, color=blue];
6535[label="73.14.114.173;251pkt 251fpkt", shape=pentagon, color=darkviolet];
7004[label="214.178.133.223;222pkt 222fpkt", shape=pentagon, color=darkviolet];
8404[label="73.14.114.173;250pkt 250fpkt", shape=invtriangle, color=brown];
8684[label="214.178.133.223;221pkt 221fpkt", shape=invtriangle, color=brown];
9427[label="73.14.114.173;250pkt 250fpkt", shape=invhouse, color=bisque];
9558[label="214.178.133.223;222pkt 222fpkt", shape=invhouse, color=bisque];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.218.0.97:*, *:9898}[34.6685%]&lt;BR/&gt;{73.14.114.173:*, *:9898}[34.6685%]&lt;BR/&gt;{214.178.133.223:*, *:9898}[30.663%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1393: (0.105295%)&lt;BR/&gt; 1392: (0.105295%)&lt;BR/&gt; 1385: (0.105295%)&lt;BR/&gt; 1382: (0.105295%)&gt;];
}
335--684[label="1;251pkt 251fpkt"];
335--977[label="1;251pkt 251fpkt"];
335--1752[label="0.0075188;1pkt 1fpkt"];
420--684[label="0.46789;102pkt 102fpkt"];
420--810[label="0.307339;67pkt 67fpkt"];
420--977[label="0.46789;102pkt 102fpkt"];
420--6535[label="1;218pkt 218fpkt"];
420--8404[label="0.995413;217pkt 217fpkt"];
420--9427[label="0.995413;217pkt 217fpkt"];
477--810[label="1;222pkt 222fpkt"];
477--1089[label="1;222pkt 222fpkt"];
477--7004[label="1;222pkt 222fpkt"];
477--8684[label="1;221pkt 221fpkt"];
477--9558[label="1;222pkt 222fpkt"];
684--810[label="0.0380623;11pkt 11fpkt"];
684--977[label="1;353pkt 353fpkt"];
684--1752[label="0.0075188;1pkt 1fpkt"];
684--6535[label="0.406375;102pkt 102fpkt"];
684--8404[label="0.404;101pkt 101fpkt"];
684--9427[label="0.404;101pkt 101fpkt"];
810--977[label="0.0380623;11pkt 11fpkt"];
810--1089[label="1;222pkt 222fpkt"];
810--6535[label="0.266932;67pkt 67fpkt"];
810--7004[label="1;222pkt 222fpkt"];
810--8404[label="0.268;67pkt 67fpkt"];
810--8684[label="1;221pkt 221fpkt"];
810--9427[label="0.268;67pkt 67fpkt"];
810--9558[label="1;222pkt 222fpkt"];
977--1752[label="0.0075188;1pkt 1fpkt"];
977--6535[label="0.406375;102pkt 102fpkt"];
977--8404[label="0.404;101pkt 101fpkt"];
977--9427[label="0.404;101pkt 101fpkt"];
1089--7004[label="1;222pkt 222fpkt"];
1089--8684[label="1;221pkt 221fpkt"];
1089--9558[label="1;222pkt 222fpkt"];
6535--8404[label="1;250pkt 250fpkt"];
6535--9427[label="1;250pkt 250fpkt"];
7004--8684[label="1;221pkt 221fpkt"];
7004--9558[label="1;222pkt 222fpkt"];
8404--9427[label="1;250pkt 250fpkt"];
8684--9558[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="73.14.114.173"/>
      <filter dst_port="9898" src_ip="215.218.0.97"/>
      <filter dst_port="9898" src_ip="214.178.133.223"/>
    </slice>
    <from sec="1089176766" usec="0"/>
    <to sec="1089176787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
6543[label="3.239.11.174;135pkt 135fpkt", shape=pentagon, color=darkviolet];
8407[label="3.239.11.174;135pkt 135fpkt", shape=invtriangle, color=brown];
9428[label="3.239.11.174;134pkt 134fpkt", shape=invhouse, color=bisque];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.239.11.174:*, *:5554}[54.0741%]&lt;BR/&gt;{3.239.11.174:*, *:9898}[45.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (26.9802%)&lt;BR/&gt; 9898: (23.0198%)&lt;BR/&gt; 4256: (0.371287%)&lt;BR/&gt; 4233: (0.371287%)&lt;BR/&gt; 4213: (0.371287%)&gt;];
}
6543--8407[label="1;135pkt 135fpkt"];
6543--9428[label="1;134pkt 134fpkt"];
8407--9428[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="3.239.11.174"/>
      <filter dst_port="9898" src_ip="3.239.11.174"/>
    </slice>
    <from sec="1089177144" usec="0"/>
    <to sec="1089177147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
6548[label="20.114.46.174;149pkt 149fpkt", shape=pentagon, color=darkviolet];
8411[label="20.114.46.174;149pkt 149fpkt", shape=invtriangle, color=brown];
9432[label="20.114.46.174;149pkt 149fpkt", shape=invhouse, color=bisque];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.114.46.174:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3399: (0.671141%)&lt;BR/&gt; 1508: (0.671141%)&lt;BR/&gt; 4996: (0.33557%)&lt;BR/&gt; 4889: (0.33557%)&gt;];
}
6548--8411[label="1;149pkt 149fpkt"];
6548--9432[label="1;149pkt 149fpkt"];
8411--9432[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="20.114.46.174"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
6559[label="136.213.11.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8418[label="136.213.11.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.11.176:25, 73.212.151.253:2374}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2374: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
6559--8418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="73.212.151.253" dst_port="2374" src_ip="136.213.11.176" src_port="25"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
6566[label="136.213.129.176;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8423[label="136.213.129.176;9pkt 9fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.129.176:*, 194.138.61.39:110}[44.4444%]&lt;BR/&gt;{136.213.129.176:*, 18.210.91.43:80}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (22.2222%)&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 1863: (5.55556%)&lt;BR/&gt; 1618: (5.55556%)&lt;BR/&gt; 1610: (5.55556%)&gt;];
}
6566--8423[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="18.210.91.43" dst_port="80" src_ip="136.213.129.176"/>
      <filter dst_ip="194.138.61.39" dst_port="110" src_ip="136.213.129.176"/>
    </slice>
    <from sec="1089176427" usec="0"/>
    <to sec="1089177277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
6567[label="212.109.134.176;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8424[label="212.109.134.176;4pkt 4fpkt", shape=invtriangle, color=brown];
9436[label="212.109.134.176;4pkt 4fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.109.134.176:80, 141.169.99.165:49319}[20%]&lt;BR/&gt;{212.109.134.176:80, 141.169.99.165:49320}[20%]&lt;BR/&gt;{212.109.134.176:80, 141.169.99.165:49321}[20%]&lt;BR/&gt;{212.109.134.176:80, 141.169.99.165:49322}[20%]&lt;BR/&gt;{212.109.134.176:80, 141.169.99.165:49323}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49323: (11.5385%)&lt;BR/&gt; 49322: (11.5385%)&lt;BR/&gt; 49321: (11.5385%)&lt;BR/&gt; 49320: (11.5385%)&gt;];
}
6567--8424[label="1;4pkt 4fpkt"];
6567--9436[label="1;4pkt 4fpkt"];
8424--9436[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.99.165" dst_port="49323" src_ip="212.109.134.176" src_port="80"/>
      <filter dst_ip="141.169.99.165" dst_port="49322" src_ip="212.109.134.176" src_port="80"/>
      <filter dst_ip="141.169.99.165" dst_port="49321" src_ip="212.109.134.176" src_port="80"/>
      <filter dst_ip="141.169.99.165" dst_port="49320" src_ip="212.109.134.176" src_port="80"/>
      <filter dst_ip="141.169.99.165" dst_port="49319" src_ip="212.109.134.176" src_port="80"/>
    </slice>
    <from sec="1089177229" usec="0"/>
    <to sec="1089177252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.21.168.177"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
1687[label="169.51.6.100;s;126pkt 126fpkt", shape=diamond, color=yellow];
1703[label="73.48.193.151;d;34pkt 34fpkt", shape=diamond, color=yellow];
2908[label="197.30.194.96;d;114pkt 114fpkt", shape=diamond, color=yellow];
3713[label="169.51.6.100;s;126pkt 126fpkt", shape=hexagon, color=black];
5841[label="169.51.6.100;126pkt 126fpkt", shape=pentagon, color=darkviolet];
6580[label="149.99.202.177;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7995[label="169.51.6.100;125pkt 125fpkt", shape=invtriangle, color=brown];
8432[label="149.99.202.177;37pkt 37fpkt", shape=invtriangle, color=brown];
9438[label="149.99.202.177;37pkt 37fpkt", shape=invhouse, color=bisque];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.6.100:*, *:80}[44.086%]&lt;BR/&gt;{*:*, 197.30.194.96:80}[40.8602%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4252%)&lt;BR/&gt; 0: (1.04987%)&lt;BR/&gt; 8000: (0.656168%)&lt;BR/&gt; 4000: (0.656168%)&lt;BR/&gt; 8001: (0.393701%)&gt;];
}
1687--1703[label="0.441176;15pkt 15fpkt"];
1687--2668[label="0.1;11pkt 11fpkt"];
1687--2908[label="0.0964912;11pkt 11fpkt"];
1687--3713[label="1;126pkt 126fpkt"];
1687--4619[label="0.142857;18pkt 18fpkt"];
1687--4623[label="0.00793651;1pkt 1fpkt"];
1687--4631[label="0.142857;18pkt 18fpkt"];
1687--5841[label="1;126pkt 126fpkt"];
1687--7995[label="1;125pkt 125fpkt"];
1703--2220[label="0.352941;12pkt 12fpkt"];
1703--3713[label="0.441176;15pkt 15fpkt"];
1703--4619[label="0.235294;8pkt 8fpkt"];
1703--4623[label="0.147059;5pkt 5fpkt"];
1703--4631[label="0.235294;8pkt 8fpkt"];
1703--5841[label="0.441176;15pkt 15fpkt"];
1703--7995[label="0.441176;15pkt 15fpkt"];
2908--3374[label="0.04;1pkt 1fpkt"];
2908--3514[label="0.0438596;5pkt 5fpkt"];
2908--3516[label="0.0614035;7pkt 7fpkt"];
2908--3585[label="0.00877193;1pkt 1fpkt"];
2908--3606[label="0.0769231;1pkt 1fpkt"];
2908--3619[label="0.00877193;1pkt 1fpkt"];
2908--3644[label="0.00877193;1pkt 1fpkt"];
2908--3713[label="0.0964912;11pkt 11fpkt"];
2908--3782[label="0.00877193;1pkt 1fpkt"];
2908--3908[label="0.027027;1pkt 1fpkt"];
2908--4111[label="0.0175439;2pkt 2fpkt"];
2908--4368[label="0.131579;15pkt 15fpkt"];
2908--4369[label="0.0909091;1pkt 1fpkt"];
2908--4512[label="0.0614035;7pkt 7fpkt"];
2908--4557[label="0.00877193;1pkt 1fpkt"];
2908--4572[label="0.00877193;1pkt 1fpkt"];
2908--4573[label="0.027027;1pkt 1fpkt"];
2908--4584[label="0.0438596;5pkt 5fpkt"];
2908--4619[label="0.0526316;6pkt 6fpkt"];
2908--4623[label="0.0701754;8pkt 8fpkt"];
2908--4628[label="0.0263158;3pkt 3fpkt"];
2908--4631[label="0.0526316;6pkt 6fpkt"];
2908--4635[label="0.0263158;3pkt 3fpkt"];
2908--4664[label="0.00877193;1pkt 1fpkt"];
2908--4679[label="0.00877193;1pkt 1fpkt"];
2908--4978[label="0.0169492;1pkt 1fpkt"];
2908--5011[label="0.0909091;1pkt 1fpkt"];
2908--5103[label="0.0438596;5pkt 5fpkt"];
2908--5509[label="0.00877193;1pkt 1fpkt"];
2908--5570[label="0.0350877;4pkt 4fpkt"];
2908--5682[label="0.0192308;2pkt 2fpkt"];
2908--5800[label="0.00877193;1pkt 1fpkt"];
2908--5821[label="0.00877193;1pkt 1fpkt"];
2908--5841[label="0.0964912;11pkt 11fpkt"];
2908--5843[label="0.0526316;6pkt 6fpkt"];
2908--5862[label="0.0263158;3pkt 3fpkt"];
2908--5897[label="0.00877193;1pkt 1fpkt"];
2908--6090[label="0.131579;15pkt 15fpkt"];
2908--6176[label="0.00877193;1pkt 1fpkt"];
2908--6257[label="0.0384615;1pkt 1fpkt"];
2908--6289[label="0.0588235;1pkt 1fpkt"];
2908--6580[label="0.162162;6pkt 6fpkt"];
2908--6709[label="0.0614035;7pkt 7fpkt"];
2908--6814[label="0.0185185;1pkt 1fpkt"];
2908--6999[label="0.00877193;1pkt 1fpkt"];
2908--7136[label="0.0357143;1pkt 1fpkt"];
2908--7538[label="0.0438596;5pkt 5fpkt"];
2908--7969[label="0.00877193;1pkt 1fpkt"];
2908--7995[label="0.0964912;11pkt 11fpkt"];
2908--7997[label="0.0526316;6pkt 6fpkt"];
2908--8009[label="0.0263158;3pkt 3fpkt"];
2908--8199[label="0.00877193;1pkt 1fpkt"];
2908--8248[label="0.0384615;1pkt 1fpkt"];
2908--8262[label="0.0625;1pkt 1fpkt"];
2908--8432[label="0.162162;6pkt 6fpkt"];
2908--8566[label="0.0185185;1pkt 1fpkt"];
2908--8679[label="0.00877193;1pkt 1fpkt"];
2908--8974[label="0.0438596;5pkt 5fpkt"];
2908--9195[label="0.00877193;1pkt 1fpkt"];
2908--9209[label="0.0526316;6pkt 6fpkt"];
2908--9215[label="0.0263158;3pkt 3fpkt"];
2908--9312[label="0.00877193;1pkt 1fpkt"];
2908--9344[label="0.04;1pkt 1fpkt"];
2908--9352[label="0.0588235;1pkt 1fpkt"];
2908--9438[label="0.162162;6pkt 6fpkt"];
2908--9504[label="0.0185185;1pkt 1fpkt"];
2908--9555[label="0.00877193;1pkt 1fpkt"];
3713--4619[label="0.142857;18pkt 18fpkt"];
3713--4623[label="0.00793651;1pkt 1fpkt"];
3713--4631[label="0.142857;18pkt 18fpkt"];
3713--5841[label="1;126pkt 126fpkt"];
3713--7995[label="1;125pkt 125fpkt"];
5841--7995[label="1;125pkt 125fpkt"];
6580--8432[label="1;37pkt 37fpkt"];
6580--9438[label="1;37pkt 37fpkt"];
8432--9438[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="169.51.6.100"/>
      <filter dst_ip="197.30.194.96" dst_port="80"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_996{
style=filled;
color=gray75;
6588[label="19.119.164.178;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8437[label="19.119.164.178;3pkt 3fpkt", shape=invtriangle, color=brown];
stat996[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.119.164.178:80, 141.169.112.53:49616}[25%]&lt;BR/&gt;{19.119.164.178:80, 141.169.112.53:49620}[25%]&lt;BR/&gt;{19.119.164.178:80, 141.169.112.53:49621}[25%]&lt;BR/&gt;{19.119.164.178:80, 141.169.112.53:49622}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49622: (14.2857%)&lt;BR/&gt; 49621: (14.2857%)&lt;BR/&gt; 49620: (14.2857%)&lt;BR/&gt; 49616: (7.14286%)&gt;];
}
6588--8437[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.112.53" dst_port="49622" src_ip="19.119.164.178" src_port="80"/>
      <filter dst_ip="141.169.112.53" dst_port="49621" src_ip="19.119.164.178" src_port="80"/>
      <filter dst_ip="141.169.112.53" dst_port="49620" src_ip="19.119.164.178" src_port="80"/>
      <filter dst_ip="141.169.112.53" dst_port="49616" src_ip="19.119.164.178" src_port="80"/>
    </slice>
    <from sec="1089177285" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.37.68.179"/>
    </slice>
    <from sec="1089176809" usec="0"/>
    <to sec="1089176814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
6594[label="195.46.102.179;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8439[label="195.46.102.179;16pkt 16fpkt", shape=invtriangle, color=brown];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.46.102.179:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6594--8439[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="195.46.102.179"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089177289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
6600[label="20.87.15.180;113pkt 113fpkt", shape=pentagon, color=darkviolet];
8441[label="20.87.15.180;113pkt 113fpkt", shape=invtriangle, color=brown];
9445[label="20.87.15.180;112pkt 112fpkt", shape=invhouse, color=bisque];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.87.15.180:*, *:1080}[33.6283%]&lt;BR/&gt;{20.87.15.180:*, *:3127}[33.6283%]&lt;BR/&gt;{20.87.15.180:*, *:3128}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.8639%)&lt;BR/&gt; 3127: (16.716%)&lt;BR/&gt; 3128: (16.4201%)&lt;BR/&gt; 2606: (0.887574%)&lt;BR/&gt; 2472: (0.887574%)&gt;];
}
6600--8441[label="1;113pkt 113fpkt"];
6600--9445[label="1;112pkt 112fpkt"];
8441--9445[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="20.87.15.180"/>
      <filter dst_port="1080" src_ip="20.87.15.180"/>
      <filter dst_port="3128" src_ip="20.87.15.180"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
6604[label="194.136.69.180;149pkt 149fpkt", shape=pentagon, color=darkviolet];
8442[label="194.136.69.180;149pkt 149fpkt", shape=invtriangle, color=brown];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.136.69.180:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6604--8442[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.136.69.180" src_port="1028"/>
    </slice>
    <from sec="1089177027" usec="0"/>
    <to sec="1089177042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.104.180"/>
    </slice>
    <from sec="1089176420" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
6611[label="19.28.37.181;207pkt 207fpkt", shape=pentagon, color=darkviolet];
8447[label="19.28.37.181;206pkt 206fpkt", shape=invtriangle, color=brown];
9448[label="19.28.37.181;207pkt 207fpkt", shape=invhouse, color=bisque];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.28.37.181:*, *:5554}[51.6908%]&lt;BR/&gt;{19.28.37.181:*, *:9898}[48.3092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.8065%)&lt;BR/&gt; 9898: (24.1935%)&lt;BR/&gt; 4997: (0.241935%)&lt;BR/&gt; 4967: (0.241935%)&lt;BR/&gt; 4906: (0.241935%)&gt;];
}
6611--8447[label="1;206pkt 206fpkt"];
6611--9448[label="1;207pkt 207fpkt"];
8447--9448[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="19.28.37.181"/>
      <filter dst_port="9898" src_ip="19.28.37.181"/>
    </slice>
    <from sec="1089177045" usec="0"/>
    <to sec="1089177158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
6618[label="75.9.212.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8454[label="75.9.212.181;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.9.212.181:80, 136.213.23.5:2959}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2959: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6618--8454[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.23.5" dst_port="2959" src_ip="75.9.212.181" src_port="80"/>
    </slice>
    <from sec="1089177255" usec="0"/>
    <to sec="1089177277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
6628[label="136.70.187.182;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8461[label="136.70.187.182;5pkt 5fpkt", shape=invtriangle, color=brown];
9455[label="136.70.187.182;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.70.187.182:1024, 21.19.115.4:53}[20%]&lt;BR/&gt;{136.70.187.182:1024, 222.161.80.44:53}[20%]&lt;BR/&gt;{136.70.187.182:1024, 214.189.91.61:53}[20%]&lt;BR/&gt;{136.70.187.182:1024, 19.220.152.61:53}[20%]&lt;BR/&gt;{136.70.187.182:1024, 143.145.27.154:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
6628--8461[label="1;5pkt 5fpkt"];
6628--9455[label="1;5pkt 5fpkt"];
8461--9455[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="143.145.27.154" dst_port="53" src_ip="136.70.187.182" src_port="1024"/>
      <filter dst_ip="19.220.152.61" dst_port="53" src_ip="136.70.187.182" src_port="1024"/>
      <filter dst_ip="214.189.91.61" dst_port="53" src_ip="136.70.187.182" src_port="1024"/>
      <filter dst_ip="222.161.80.44" dst_port="53" src_ip="136.70.187.182" src_port="1024"/>
      <filter dst_ip="21.19.115.4" dst_port="53" src_ip="136.70.187.182" src_port="1024"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
6647[label="194.140.27.185;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8474[label="194.140.27.185;30pkt 30fpkt", shape=invtriangle, color=brown];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.140.27.185:110, 141.169.36.59:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 63986: (1.66667%)&lt;BR/&gt; 63966: (1.66667%)&lt;BR/&gt; 63935: (1.66667%)&lt;BR/&gt; 63899: (1.66667%)&gt;];
}
6647--8474[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.36.59" src_ip="194.140.27.185" src_port="110"/>
    </slice>
    <from sec="1089176452" usec="0"/>
    <to sec="1089177255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
6670[label="208.137.29.187;126pkt 126fpkt", shape=pentagon, color=darkviolet];
8485[label="208.137.29.187;125pkt 125fpkt", shape=invtriangle, color=brown];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.137.29.187:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6670--8485[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.137.29.187" src_port="1028"/>
    </slice>
    <from sec="1089176602" usec="0"/>
    <to sec="1089176623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.87.23.188"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
6682[label="2.121.52.188;112pkt 112fpkt", shape=pentagon, color=darkviolet];
8491[label="2.121.52.188;111pkt 111fpkt", shape=invtriangle, color=brown];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.121.52.188:*, *:3128}[33.9286%]&lt;BR/&gt;{2.121.52.188:*, *:1080}[33.0357%]&lt;BR/&gt;{2.121.52.188:*, *:3127}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.0404%)&lt;BR/&gt; 1080: (16.5919%)&lt;BR/&gt; 3127: (16.3677%)&lt;BR/&gt; 4645: (0.896861%)&lt;BR/&gt; 4549: (0.896861%)&gt;];
}
6682--8491[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="2.121.52.188"/>
      <filter dst_port="3127" src_ip="2.121.52.188"/>
      <filter dst_port="1080" src_ip="2.121.52.188"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.812495,2.01672,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
445[label="215.170.6.189s;168pkt 168fpkt", shape=rectangle, color=red];
6688[label="215.170.6.189;47pkt 47fpkt", shape=pentagon, color=darkviolet];
8495[label="215.170.6.189;47pkt 47fpkt", shape=invtriangle, color=brown];
9470[label="215.170.6.189;47pkt 47fpkt", shape=invhouse, color=bisque];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.170.6.189:*, *:5554}[81.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (32.0388%)&lt;BR/&gt; 1023: (17.9612%)&lt;BR/&gt; 1923: (0.647249%)&lt;BR/&gt; 1916: (0.647249%)&lt;BR/&gt; 1911: (0.647249%)&gt;];
}
445--6688[label="0.212766;10pkt 10fpkt"];
445--8495[label="0.212766;10pkt 10fpkt"];
445--9470[label="0.212766;10pkt 10fpkt"];
6688--8495[label="1;47pkt 47fpkt"];
6688--9470[label="1;47pkt 47fpkt"];
8495--9470[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.170.6.189"/>
    </slice>
    <from sec="1089177296" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
6694[label="215.43.229.189;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8498[label="215.43.229.189;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.43.229.189:80, 141.169.142.36:*}[66.6667%]&lt;BR/&gt;{215.43.229.189:80, 141.169.197.106:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2888: (9.09091%)&lt;BR/&gt; 2887: (9.09091%)&lt;BR/&gt; 2844: (9.09091%)&lt;BR/&gt; 2843: (9.09091%)&gt;];
}
6694--8498[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.142.36" src_ip="215.43.229.189" src_port="80"/>
      <filter dst_ip="141.169.197.106" src_ip="215.43.229.189" src_port="80"/>
    </slice>
    <from sec="1089176536" usec="0"/>
    <to sec="1089177053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.130.200.190"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
6704[label="215.213.44.191;112pkt 112fpkt", shape=pentagon, color=darkviolet];
8504[label="215.213.44.191;111pkt 111fpkt", shape=invtriangle, color=brown];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.213.44.191:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 64408: (0.44843%)&lt;BR/&gt; 64404: (0.44843%)&lt;BR/&gt; 64394: (0.44843%)&lt;BR/&gt; 64090: (0.44843%)&gt;];
}
6704--8504[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="215.213.44.191"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
6719[label="149.99.14.193;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8511[label="149.99.14.193;10pkt 10fpkt", shape=invtriangle, color=brown];
9475[label="149.99.14.193;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.14.193:*, 212.182.68.19:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1503: (5.17241%)&lt;BR/&gt; 1502: (5.17241%)&lt;BR/&gt; 1501: (5.17241%)&lt;BR/&gt; 1500: (5.17241%)&gt;];
}
6719--8511[label="1;10pkt 10fpkt"];
6719--9475[label="1;9pkt 9fpkt"];
8511--9475[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="212.182.68.19" dst_port="443" src_ip="149.99.14.193"/>
    </slice>
    <from sec="1089177063" usec="0"/>
    <to sec="1089177072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
6730[label="212.32.38.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8517[label="212.32.38.194;2pkt 2fpkt", shape=invtriangle, color=brown];
9478[label="212.32.38.194;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.194:5050, 173.19.104.155:4985}[50%]&lt;BR/&gt;{212.32.38.194:5050, 173.19.104.156:1029}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 4985: (25%)&lt;BR/&gt; 1029: (25%)&gt;];
}
6730--8517[label="1;2pkt 2fpkt"];
6730--9478[label="1;2pkt 2fpkt"];
8517--9478[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.104.156" dst_port="1029" src_ip="212.32.38.194" src_port="5050"/>
      <filter dst_ip="173.19.104.155" dst_port="4985" src_ip="212.32.38.194" src_port="5050"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
6732[label="18.210.85.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8518[label="18.210.85.194;1pkt 1fpkt", shape=invtriangle, color=brown];
9479[label="18.210.85.194;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.210.85.194:443, 136.213.38.221:3006}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3006: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
6732--8518[label="1;1pkt 1fpkt"];
6732--9479[label="1;1pkt 1fpkt"];
8518--9479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.38.221" dst_port="3006" src_ip="18.210.85.194" src_port="443"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
6745[label="212.32.38.196;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8524[label="212.32.38.196;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.196:5050, *:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (46.9697%)&lt;BR/&gt; 4952: (3.0303%)&lt;BR/&gt; 4279: (3.0303%)&lt;BR/&gt; 3684: (3.0303%)&lt;BR/&gt; 3508: (3.0303%)&gt;];
}
6745--8524[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="212.32.38.196" src_port="5050"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
6751[label="219.108.239.196;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8526[label="219.108.239.196;5pkt 5fpkt", shape=invtriangle, color=brown];
9484[label="219.108.239.196;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.108.239.196:21, 173.19.75.193:32913}[20%]&lt;BR/&gt;{219.108.239.196:52325, 173.19.75.193:113}[20%]&lt;BR/&gt;{219.108.239.196:20, 173.19.75.193:32932}[20%]&lt;BR/&gt;{219.108.239.196:20, 173.19.75.193:32933}[20%]&lt;BR/&gt;{219.108.239.196:20, 173.19.75.193:32943}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (30%)&lt;BR/&gt; 52325: (10%)&lt;BR/&gt; 32943: (10%)&lt;BR/&gt; 32933: (10%)&lt;BR/&gt; 32932: (10%)&gt;];
}
6751--8526[label="1;5pkt 5fpkt"];
6751--9484[label="1;5pkt 5fpkt"];
8526--9484[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.75.193" dst_port="32943" src_ip="219.108.239.196" src_port="20"/>
      <filter dst_ip="173.19.75.193" dst_port="32933" src_ip="219.108.239.196" src_port="20"/>
      <filter dst_ip="173.19.75.193" dst_port="32932" src_ip="219.108.239.196" src_port="20"/>
      <filter dst_ip="173.19.75.193" dst_port="113" src_ip="219.108.239.196" src_port="52325"/>
      <filter dst_ip="173.19.75.193" dst_port="32913" src_ip="219.108.239.196" src_port="21"/>
    </slice>
    <from sec="1089176482" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.168.249.196"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.176.14.197"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
6755[label="212.32.38.197;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8530[label="212.32.38.197;12pkt 12fpkt", shape=invtriangle, color=brown];
9486[label="212.32.38.197;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.197:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 4697: (4.16667%)&lt;BR/&gt; 3972: (4.16667%)&lt;BR/&gt; 3400: (4.16667%)&lt;BR/&gt; 3383: (4.16667%)&gt;];
}
6755--8530[label="1;12pkt 12fpkt"];
6755--9486[label="1;12pkt 12fpkt"];
8530--9486[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="212.32.38.197" src_port="5050"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.59.137.197"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
6759[label="3.36.165.197;134pkt 134fpkt", shape=pentagon, color=darkviolet];
8534[label="3.36.165.197;133pkt 133fpkt", shape=invtriangle, color=brown];
9489[label="3.36.165.197;133pkt 133fpkt", shape=invhouse, color=bisque];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.36.165.197:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6759--8534[label="1;133pkt 133fpkt"];
6759--9489[label="1;133pkt 133fpkt"];
8534--9489[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="3.36.165.197" src_port="1026"/>
    </slice>
    <from sec="1089177029" usec="0"/>
    <to sec="1089177051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
6776[label="197.30.38.199;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8541[label="197.30.38.199;3pkt 3fpkt", shape=invtriangle, color=brown];
9495[label="197.30.38.199;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.38.199:1863, 136.213.34.4:3358}[33.3333%]&lt;BR/&gt;{197.30.38.199:1863, 149.99.213.108:1835}[33.3333%]&lt;BR/&gt;{197.30.38.199:1863, 136.213.37.133:49321}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49321: (16.6667%)&lt;BR/&gt; 3358: (16.6667%)&lt;BR/&gt; 1835: (16.6667%)&gt;];
}
6776--8541[label="1;3pkt 3fpkt"];
6776--9495[label="1;3pkt 3fpkt"];
8541--9495[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.37.133" dst_port="49321" src_ip="197.30.38.199" src_port="1863"/>
      <filter dst_ip="149.99.213.108" dst_port="1835" src_ip="197.30.38.199" src_port="1863"/>
      <filter dst_ip="136.213.34.4" dst_port="3358" src_ip="197.30.38.199" src_port="1863"/>
    </slice>
    <from sec="1089176432" usec="0"/>
    <to sec="1089177282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
6778[label="21.54.68.199;143pkt 143fpkt", shape=pentagon, color=darkviolet];
8542[label="21.54.68.199;143pkt 143fpkt", shape=invtriangle, color=brown];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.54.68.199:*, 173.19.87.38:53}[30.0699%]&lt;BR/&gt;{21.54.68.199:*, 194.54.49.77:53}[26.5734%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.1538%)&lt;BR/&gt; 80: (2.7972%)&lt;BR/&gt; 0: (2.0979%)&lt;BR/&gt; 65457: (0.34965%)&lt;BR/&gt; 64600: (0.34965%)&gt;];
}
6778--8542[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.87.38" dst_port="53" src_ip="21.54.68.199"/>
      <filter dst_ip="194.54.49.77" dst_port="53" src_ip="21.54.68.199"/>
    </slice>
    <from sec="1089177259" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
6781[label="141.169.129.199;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8545[label="141.169.129.199;33pkt 33fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.129.199:25, *:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.7612%)&lt;BR/&gt; 22147: (1.49254%)&lt;BR/&gt; 11124: (1.49254%)&lt;BR/&gt; 9898: (1.49254%)&lt;BR/&gt; 8538: (1.49254%)&gt;];
}
6781--8545[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="141.169.129.199" src_port="25"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
6824[label="149.99.244.202;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8570[label="149.99.244.202;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.244.202:59171, *:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59171: (47.0588%)&lt;BR/&gt; 64831: (2.94118%)&lt;BR/&gt; 64428: (2.94118%)&lt;BR/&gt; 60201: (2.94118%)&lt;BR/&gt; 51383: (2.94118%)&gt;];
}
6824--8570[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="149.99.244.202" src_port="59171"/>
    </slice>
    <from sec="1089176431" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
6825[label="169.51.0.203;28pkt 28fpkt", shape=pentagon, color=darkviolet];
8571[label="169.51.0.203;28pkt 28fpkt", shape=invtriangle, color=brown];
9506[label="169.51.0.203;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.0.203:*, 219.235.92.132:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1544: (1.78571%)&lt;BR/&gt; 1543: (1.78571%)&lt;BR/&gt; 1541: (1.78571%)&lt;BR/&gt; 1540: (1.78571%)&gt;];
}
6825--8571[label="1;28pkt 28fpkt"];
6825--9506[label="1;28pkt 28fpkt"];
8571--9506[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="219.235.92.132" dst_port="80" src_ip="169.51.0.203"/>
    </slice>
    <from sec="1089176679" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
6827[label="141.169.33.203;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8572[label="141.169.33.203;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.33.203:0, 207.0.63.13:0}[50%]&lt;BR/&gt;{141.169.33.203:9898, 214.190.137.32:2817}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 9898: (25%)&lt;BR/&gt; 2817: (25%)&gt;];
}
6827--8572[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.190.137.32" dst_port="2817" src_ip="141.169.33.203" src_port="9898"/>
      <filter dst_ip="207.0.63.13" src_ip="141.169.33.203"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
6845[label="141.169.38.204;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8582[label="141.169.38.204;15pkt 15fpkt", shape=invtriangle, color=brown];
9508[label="141.169.38.204;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.38.204:*, 222.138.75.252:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1582: (3.26087%)&lt;BR/&gt; 1570: (3.26087%)&lt;BR/&gt; 1569: (3.26087%)&lt;BR/&gt; 1568: (3.26087%)&gt;];
}
6845--8582[label="1;15pkt 15fpkt"];
6845--9508[label="1;15pkt 15fpkt"];
8582--9508[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="222.138.75.252" dst_port="80" src_ip="141.169.38.204"/>
    </slice>
    <from sec="1089176457" usec="0"/>
    <to sec="1089176757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.19.6.205"/>
    </slice>
    <from sec="1089176458" usec="0"/>
    <to sec="1089177293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
6863[label="212.54.113.207;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8594[label="212.54.113.207;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.54.113.207:80, 194.54.51.142:50296}[33.3333%]&lt;BR/&gt;{212.54.113.207:80, 194.54.51.142:58028}[33.3333%]&lt;BR/&gt;{212.54.113.207:80, 194.54.51.142:58242}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58242: (16.6667%)&lt;BR/&gt; 58028: (16.6667%)&lt;BR/&gt; 50296: (16.6667%)&gt;];
}
6863--8594[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.51.142" dst_port="58242" src_ip="212.54.113.207" src_port="80"/>
      <filter dst_ip="194.54.51.142" dst_port="58028" src_ip="212.54.113.207" src_port="80"/>
      <filter dst_ip="194.54.51.142" dst_port="50296" src_ip="212.54.113.207" src_port="80"/>
    </slice>
    <from sec="1089177216" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
6865[label="194.135.5.208;369pkt 369fpkt", shape=pentagon, color=darkviolet];
8595[label="194.135.5.208;368pkt 368fpkt", shape=invtriangle, color=brown];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.135.5.208:*, *:1026}[50.1355%]&lt;BR/&gt;{194.135.5.208:*, *:1027}[49.8645%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.1018%)&lt;BR/&gt; 1027: (24.8982%)&lt;BR/&gt; 1127: (0.542741%)&lt;BR/&gt; 1555: (0.407056%)&lt;BR/&gt; 1321: (0.407056%)&gt;];
}
6865--8595[label="1;368pkt 368fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="194.135.5.208"/>
      <filter dst_port="1027" src_ip="194.135.5.208"/>
    </slice>
    <from sec="1089176473" usec="0"/>
    <to sec="1089177260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.69.110.208"/>
    </slice>
    <from sec="1089176532" usec="0"/>
    <to sec="1089176554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
6877[label="136.213.34.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8603[label="136.213.34.209;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.34.209:3070, 197.30.34.17:1863}[25%]&lt;BR/&gt;{136.213.34.209:3073, 197.30.34.39:1863}[25%]&lt;BR/&gt;{136.213.34.209:3069, 197.30.34.120:1863}[25%]&lt;BR/&gt;{136.213.34.209:3041, 197.30.39.166:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3073: (12.5%)&lt;BR/&gt; 3070: (12.5%)&lt;BR/&gt; 3069: (12.5%)&lt;BR/&gt; 3041: (12.5%)&gt;];
}
6877--8603[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.39.166" dst_port="1863" src_ip="136.213.34.209" src_port="3041"/>
      <filter dst_ip="197.30.34.120" dst_port="1863" src_ip="136.213.34.209" src_port="3069"/>
      <filter dst_ip="197.30.34.39" dst_port="1863" src_ip="136.213.34.209" src_port="3073"/>
      <filter dst_ip="197.30.34.17" dst_port="1863" src_ip="136.213.34.209" src_port="3070"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.213.38.210"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
6889[label="192.69.110.210;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8612[label="192.69.110.210;6pkt 6fpkt", shape=invtriangle, color=brown];
9521[label="192.69.110.210;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.69.110.210:80, 141.169.206.144:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1452: (8.82353%)&lt;BR/&gt; 1448: (8.82353%)&lt;BR/&gt; 1446: (8.82353%)&lt;BR/&gt; 1444: (8.82353%)&gt;];
}
6889--8612[label="1;6pkt 6fpkt"];
6889--9521[label="1;5pkt 5fpkt"];
8612--9521[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.206.144" src_ip="192.69.110.210" src_port="80"/>
    </slice>
    <from sec="1089176493" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1039{
style=filled;
color=gray75;
6899[label="17.15.94.211;228pkt 228fpkt", shape=pentagon, color=darkviolet];
8617[label="17.15.94.211;228pkt 228fpkt", shape=invtriangle, color=brown];
stat1039[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.15.94.211:1048, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1048: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6899--8617[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.15.94.211" src_port="1048"/>
    </slice>
    <from sec="1089176620" usec="0"/>
    <to sec="1089176656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
6903[label="215.221.164.211;44pkt 44fpkt", shape=pentagon, color=darkviolet];
8619[label="215.221.164.211;43pkt 43fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.221.164.211:*, *:1025}[27.2727%]&lt;BR/&gt;{215.221.164.211:*, *:2745}[27.2727%]&lt;BR/&gt;{215.221.164.211:*, *:3127}[25%]&lt;BR/&gt;{215.221.164.211:*, *:6129}[20.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (13.7931%)&lt;BR/&gt; 2745: (13.2184%)&lt;BR/&gt; 3127: (12.6437%)&lt;BR/&gt; 6129: (10.3448%)&lt;BR/&gt; 29698: (1.14943%)&gt;];
}
6903--8619[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="215.221.164.211"/>
      <filter dst_port="1025" src_ip="215.221.164.211"/>
      <filter dst_port="3127" src_ip="215.221.164.211"/>
      <filter dst_port="6129" src_ip="215.221.164.211"/>
    </slice>
    <from sec="1089176452" usec="0"/>
    <to sec="1089177206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
6906[label="19.165.45.212;120pkt 120fpkt", shape=pentagon, color=darkviolet];
8621[label="19.165.45.212;120pkt 120fpkt", shape=invtriangle, color=brown];
9526[label="19.165.45.212;119pkt 119fpkt", shape=invhouse, color=bisque];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.165.45.212:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 10200: (0.417827%)&lt;BR/&gt; 10140: (0.417827%)&lt;BR/&gt; 10070: (0.417827%)&lt;BR/&gt; 10052: (0.417827%)&gt;];
}
6906--8621[label="1;120pkt 120fpkt"];
6906--9526[label="1;119pkt 119fpkt"];
8621--9526[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="19.165.45.212"/>
    </slice>
    <from sec="1089176870" usec="0"/>
    <to sec="1089176889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
6908[label="173.19.75.212;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8623[label="173.19.75.212;14pkt 14fpkt", shape=invtriangle, color=brown];
9527[label="173.19.75.212;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.75.212:80, 197.30.41.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59839: (3.48837%)&lt;BR/&gt; 56500: (3.48837%)&lt;BR/&gt; 53266: (3.48837%)&lt;BR/&gt; 49598: (3.48837%)&gt;];
}
6908--8623[label="1;14pkt 14fpkt"];
6908--9527[label="1;14pkt 14fpkt"];
8623--9527[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.41.195" src_ip="173.19.75.212" src_port="80"/>
    </slice>
    <from sec="1089176457" usec="0"/>
    <to sec="1089177263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
6911[label="202.167.158.212;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8625[label="202.167.158.212;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.167.158.212:80, 141.169.132.76:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2115: (9.09091%)&lt;BR/&gt; 2114: (9.09091%)&lt;BR/&gt; 2070: (9.09091%)&lt;BR/&gt; 2069: (9.09091%)&gt;];
}
6911--8625[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.132.76" src_ip="202.167.158.212" src_port="80"/>
    </slice>
    <from sec="1089176787" usec="0"/>
    <to sec="1089177267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
6926[label="214.190.128.214;251pkt 251fpkt", shape=pentagon, color=darkviolet];
8632[label="214.190.128.214;251pkt 251fpkt", shape=invtriangle, color=brown];
9531[label="214.190.128.214;251pkt 251fpkt", shape=invhouse, color=bisque];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.128.214:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2338: (0.199203%)&lt;BR/&gt; 2314: (0.199203%)&lt;BR/&gt; 2310: (0.199203%)&lt;BR/&gt; 2309: (0.199203%)&gt;];
}
6926--8632[label="1;251pkt 251fpkt"];
6926--9531[label="1;251pkt 251fpkt"];
8632--9531[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.128.214"/>
    </slice>
    <from sec="1089177208" usec="0"/>
    <to sec="1089177209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.11.105.217"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
6952[label="210.221.121.217;110pkt 110fpkt", shape=pentagon, color=darkviolet];
8647[label="210.221.121.217;109pkt 109fpkt", shape=invtriangle, color=brown];
9538[label="210.221.121.217;109pkt 109fpkt", shape=invhouse, color=bisque];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.221.121.217:*, *:3128}[50.9091%]&lt;BR/&gt;{210.221.121.217:*, *:1080}[49.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.3049%)&lt;BR/&gt; 1080: (24.6951%)&lt;BR/&gt; 4901: (0.457317%)&lt;BR/&gt; 4900: (0.457317%)&lt;BR/&gt; 4883: (0.457317%)&gt;];
}
6952--8647[label="1;109pkt 109fpkt"];
6952--9538[label="1;109pkt 109fpkt"];
8647--9538[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="210.221.121.217"/>
      <filter dst_port="1080" src_ip="210.221.121.217"/>
    </slice>
    <from sec="1089176658" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
6959[label="141.169.36.218;47pkt 47fpkt", shape=pentagon, color=darkviolet];
8651[label="141.169.36.218;47pkt 47fpkt", shape=invtriangle, color=brown];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.36.218:53, *:*}[78.7234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.8085%)&lt;BR/&gt; 3557: (5.31915%)&lt;BR/&gt; 25: (5.31915%)&lt;BR/&gt; 32774: (2.12766%)&lt;BR/&gt; 32771: (2.12766%)&gt;];
}
6959--8651[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="141.169.36.218" src_port="53"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
6960[label="197.30.38.218;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8652[label="197.30.38.218;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.38.218:1863, 141.169.74.40:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3208: (9.09091%)&lt;BR/&gt; 3078: (9.09091%)&lt;BR/&gt; 2199: (9.09091%)&lt;BR/&gt; 1243: (9.09091%)&gt;];
}
6960--8652[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.74.40" src_ip="197.30.38.218" src_port="1863"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
6972[label="212.97.35.219;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8661[label="212.97.35.219;2pkt 2fpkt", shape=invtriangle, color=brown];
9546[label="212.97.35.219;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.97.35.219:80, 194.54.51.142:50688}[50%]&lt;BR/&gt;{212.97.35.219:80, 194.54.51.142:56837}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56837: (25%)&lt;BR/&gt; 50688: (25%)&gt;];
}
6972--8661[label="1;2pkt 2fpkt"];
6972--9546[label="1;2pkt 2fpkt"];
8661--9546[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.51.142" dst_port="56837" src_ip="212.97.35.219" src_port="80"/>
      <filter dst_ip="194.54.51.142" dst_port="50688" src_ip="212.97.35.219" src_port="80"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
6973[label="173.19.75.219;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8662[label="173.19.75.219;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.75.219:1631, 212.32.38.202:23}[33.3333%]&lt;BR/&gt;{173.19.75.219:1824, 200.20.180.132:110}[33.3333%]&lt;BR/&gt;{173.19.75.219:1825, 200.20.180.132:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (33.3333%)&lt;BR/&gt; 1825: (16.6667%)&lt;BR/&gt; 1824: (16.6667%)&lt;BR/&gt; 1631: (16.6667%)&lt;BR/&gt; 23: (16.6667%)&gt;];
}
6973--8662[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.20.180.132" dst_port="110" src_ip="173.19.75.219" src_port="1825"/>
      <filter dst_ip="200.20.180.132" dst_port="110" src_ip="173.19.75.219" src_port="1824"/>
      <filter dst_ip="212.32.38.202" dst_port="23" src_ip="173.19.75.219" src_port="1631"/>
    </slice>
    <from sec="1089176471" usec="0"/>
    <to sec="1089177262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
6981[label="214.190.164.220;115pkt 115fpkt", shape=pentagon, color=darkviolet];
8669[label="214.190.164.220;115pkt 115fpkt", shape=invtriangle, color=brown];
9551[label="214.190.164.220;115pkt 115fpkt", shape=invhouse, color=bisque];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.164.220:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4610: (0.434783%)&lt;BR/&gt; 4596: (0.434783%)&lt;BR/&gt; 4581: (0.434783%)&lt;BR/&gt; 4564: (0.434783%)&gt;];
}
6981--8669[label="1;115pkt 115fpkt"];
6981--9551[label="1;115pkt 115fpkt"];
8669--9551[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.190.164.220"/>
    </slice>
    <from sec="1089176531" usec="0"/>
    <to sec="1089176535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.50.53.222"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920748,2.03346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1054{
style=filled;
color=gray75;
1291[label="203.76.232.36;s;251pkt 251fpkt", shape=diamond, color=yellow];
1620[label="173.19.102.63;d;338pkt 338fpkt", shape=diamond, color=yellow];
1871[label="173.19.179.147;d;88pkt 88fpkt", shape=diamond, color=yellow];
2190[label="17.12.20.104;s;180pkt 180fpkt", shape=diamond, color=yellow];
2574[label="173.19.179.5;d;9pkt 9fpkt", shape=diamond, color=yellow];
2606[label="194.176.143.89;s;19pkt 19fpkt", shape=diamond, color=yellow];
2858[label="173.19.80.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
2863[label="173.19.72.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
2883[label="173.19.75.164;d;145pkt 145fpkt", shape=diamond, color=yellow];
3117[label="173.19.40.49;d;2pkt 2fpkt", shape=diamond, color=yellow];
3310[label="149.99.108.221;d;3pkt 3fpkt", shape=diamond, color=yellow];
3315[label="16.176.14.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
3324[label="173.19.102.149;d;2pkt 2fpkt", shape=diamond, color=yellow];
3326[label="173.19.65.115;d;2pkt 2fpkt", shape=diamond, color=yellow];
3668[label="203.76.232.36;s;122pkt 122fpkt", shape=hexagon, color=black];
4123[label="173.19.75.164;d;133pkt 133fpkt", shape=hexagon, color=black];
4781[label="212.35.12.9;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4942[label="212.155.133.22;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5745[label="194.176.143.89;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5973[label="204.21.179.114;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6070[label="193.103.169.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6920[label="212.32.38.214;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7011[label="212.32.38.224;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7213[label="212.32.38.247;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8686[label="212.32.38.224;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1054[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.12.20.104:*, 173.19.102.63:*}[27.6923%]&lt;BR/&gt;{*:6667, 173.19.102.63:*}[27.2308%]&lt;BR/&gt;{*:*, 173.19.102.63:113}[23.6923%]&lt;BR/&gt;{203.76.232.36:6667, 173.19.75.164:*}[22.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (31.2723%)&lt;BR/&gt; 113: (12.0443%)&lt;BR/&gt; 1024: (1.67977%)&lt;BR/&gt; 53: (1.67977%)&lt;BR/&gt; 5050: (1.25089%)&gt;];
}
1291--1620[label="0.239044;60pkt 60fpkt"];
1291--1871[label="0.113636;10pkt 10fpkt"];
1291--2574[label="0.222222;2pkt 2fpkt"];
1291--2858[label="1;1pkt 1fpkt"];
1291--2883[label="0.993103;144pkt 144fpkt"];
1291--3117[label="0.5;1pkt 1fpkt"];
1291--3324[label="0.5;1pkt 1fpkt"];
1291--3326[label="0.5;1pkt 1fpkt"];
1291--3668[label="1;122pkt 122fpkt"];
1291--4123[label="0.992481;132pkt 132fpkt"];
1620--2190[label="1;180pkt 180fpkt"];
1620--2606[label="0.842105;16pkt 16fpkt"];
1620--3668[label="0.245902;30pkt 30fpkt"];
1620--4628[label="0.00591716;2pkt 2fpkt"];
1620--4635[label="0.00591716;2pkt 2fpkt"];
1620--4781[label="1;8pkt 8fpkt"];
1620--4942[label="0.913043;21pkt 21fpkt"];
1620--5745[label="0.8;16pkt 16fpkt"];
1620--5973[label="0.842105;16pkt 16fpkt"];
1871--2438[label="0.0131579;1pkt 1fpkt"];
1871--3098[label="0.030303;1pkt 1fpkt"];
1871--3102[label="0.04;1pkt 1fpkt"];
1871--3110[label="0.0196078;1pkt 1fpkt"];
1871--3668[label="0.113636;10pkt 10fpkt"];
1871--4396[label="0.04;1pkt 1fpkt"];
1871--4408[label="0.0196078;1pkt 1fpkt"];
1871--4597[label="0.0196078;1pkt 1fpkt"];
1871--4617[label="0.0795455;7pkt 7fpkt"];
1871--4951[label="0.0298507;2pkt 2fpkt"];
1871--5098[label="0.0185185;1pkt 1fpkt"];
1871--5697[label="0.0188679;1pkt 1fpkt"];
1871--5798[label="0.0149254;1pkt 1fpkt"];
1871--5973[label="0.105263;2pkt 2fpkt"];
1871--6705[label="0.0294118;1pkt 1fpkt"];
1871--6853[label="0.0588235;1pkt 1fpkt"];
1871--6916[label="0.0625;1pkt 1fpkt"];
1871--7447[label="0.0298507;2pkt 2fpkt"];
1871--7534[label="0.0181818;1pkt 1fpkt"];
1871--8505[label="0.0294118;1pkt 1fpkt"];
1871--8587[label="0.0625;1pkt 1fpkt"];
1871--8628[label="0.0625;1pkt 1fpkt"];
2574--3668[label="0.222222;2pkt 2fpkt"];
2574--5973[label="0.111111;1pkt 1fpkt"];
2574--6070[label="1;1pkt 1fpkt"];
2606--2863[label="0.5;1pkt 1fpkt"];
2606--5745[label="0.947368;18pkt 18fpkt"];
2858--3668[label="1;1pkt 1fpkt"];
2883--3668[label="0.5;61pkt 61fpkt"];
2883--4123[label="1;133pkt 133fpkt"];
2883--7011[label="0.166667;1pkt 1fpkt"];
2883--8686[label="0.2;1pkt 1fpkt"];
3117--3668[label="0.5;1pkt 1fpkt"];
3117--7213[label="0.5;1pkt 1fpkt"];
3310--3315[label="1;1pkt 1fpkt"];
3310--7213[label="0.333333;1pkt 1fpkt"];
3324--3668[label="0.5;1pkt 1fpkt"];
3326--3668[label="0.5;1pkt 1fpkt"];
3326--6920[label="0.5;1pkt 1fpkt"];
3668--4123[label="0.5;61pkt 61fpkt"];
4123--7011[label="0.166667;1pkt 1fpkt"];
4123--8686[label="0.2;1pkt 1fpkt"];
7011--8686[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.19.102.63" src_ip="17.12.20.104"/>
      <filter dst_ip="173.19.102.63" src_port="6667"/>
      <filter dst_ip="173.19.102.63" dst_port="113"/>
      <filter dst_ip="173.19.75.164" src_ip="203.76.232.36" src_port="6667"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
7013[label="198.14.225.224;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8687[label="198.14.225.224;33pkt 33fpkt", shape=invtriangle, color=brown];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.14.225.224:80, 194.54.51.192:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33334: (1.49254%)&lt;BR/&gt; 33318: (1.49254%)&lt;BR/&gt; 33312: (1.49254%)&lt;BR/&gt; 33288: (1.49254%)&gt;];
}
7013--8687[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="194.54.51.192" src_ip="198.14.225.224" src_port="80"/>
    </slice>
    <from sec="1089177250" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
7017[label="169.51.78.225;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8690[label="169.51.78.225;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.78.225:6346, *:6346}[27.2727%]&lt;BR/&gt;{169.51.78.225:*, *:6348}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 6348: (13.6364%)&lt;BR/&gt; 6349: (6.81818%)&lt;BR/&gt; 123: (4.54545%)&lt;BR/&gt; 51172: (2.27273%)&gt;];
}
7017--8690[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="6348" src_ip="169.51.78.225"/>
      <filter dst_port="6346" src_ip="169.51.78.225" src_port="6346"/>
    </slice>
    <from sec="1089176411" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02153,1.99565,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
1204[label="141.169.136.58;d;310pkt 310fpkt", shape=diamond, color=yellow];
1449[label="220.56.106.75;s;13pkt 13fpkt", shape=diamond, color=yellow];
1759[label="220.182.252.100;s;156pkt 156fpkt", shape=diamond, color=yellow];
1776[label="220.150.116.53;s;2pkt 2fpkt", shape=diamond, color=yellow];
1968[label="169.51.76.18;d;95pkt 95fpkt", shape=diamond, color=yellow];
2028[label="141.169.130.150;d;249pkt 249fpkt", shape=diamond, color=yellow];
2042[label="221.61.88.96;s;49pkt 49fpkt", shape=diamond, color=yellow];
2211[label="208.96.152.115;s;30pkt 30fpkt", shape=diamond, color=yellow];
2300[label="221.61.88.101;s;10pkt 10fpkt", shape=diamond, color=yellow];
2420[label="208.115.2.67;s;10pkt 10fpkt", shape=diamond, color=yellow];
3637[label="220.182.252.100;s;156pkt 156fpkt", shape=hexagon, color=black];
3850[label="141.169.147.232;d;33pkt 33fpkt", shape=hexagon, color=black];
4292[label="208.96.152.115;s;30pkt 30fpkt", shape=hexagon, color=black];
5097[label="208.106.181.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5171[label="197.30.38.41;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5356[label="208.106.181.56;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5577[label="220.56.106.75;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5807[label="221.61.88.96;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5858[label="220.182.252.100;161pkt 161fpkt", shape=pentagon, color=darkviolet];
5863[label="221.61.88.101;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5989[label="208.96.152.115;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6462[label="220.182.252.165;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6829[label="73.226.40.203;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7024[label="208.115.0.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7579[label="197.30.38.41;8pkt 8fpkt", shape=invtriangle, color=brown];
7676[label="220.150.116.53;2pkt 2fpkt", shape=invtriangle, color=brown];
7703[label="208.106.181.56;9pkt 9fpkt", shape=invtriangle, color=brown];
7830[label="220.56.106.75;13pkt 13fpkt", shape=invtriangle, color=brown];
7975[label="221.61.88.96;51pkt 51fpkt", shape=invtriangle, color=brown];
8006[label="220.182.252.100;162pkt 162fpkt", shape=invtriangle, color=brown];
8010[label="221.61.88.101;12pkt 12fpkt", shape=invtriangle, color=brown];
8084[label="208.96.152.115;29pkt 29fpkt", shape=invtriangle, color=brown];
8694[label="208.115.0.226;2pkt 2fpkt", shape=invtriangle, color=brown];
8892[label="220.42.83.11;1pkt 1fpkt", shape=invhouse, color=bisque];
9197[label="221.61.88.96;51pkt 51fpkt", shape=invhouse, color=bisque];
9214[label="220.182.252.100;161pkt 161fpkt", shape=invhouse, color=bisque];
9563[label="208.115.0.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.169.130.150:*}[32.6475%]&lt;BR/&gt;{220.182.252.100:80, 141.169.136.58:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5887%)&lt;BR/&gt; 1863: (0.453629%)&lt;BR/&gt; 8080: (0.226815%)&lt;BR/&gt; 5050: (0.226815%)&lt;BR/&gt; 2629: (0.201613%)&gt;];
}
1204--1449[label="1;13pkt 13fpkt"];
1204--1759[label="1;156pkt 156fpkt"];
1204--1776[label="1;2pkt 2fpkt"];
1204--2211[label="0.333333;10pkt 10fpkt"];
1204--3637[label="1;156pkt 156fpkt"];
1204--4292[label="0.333333;10pkt 10fpkt"];
1204--4618[label="0.0354839;11pkt 11fpkt"];
1204--5171[label="0.125;1pkt 1fpkt"];
1204--5577[label="1;13pkt 13fpkt"];
1204--5858[label="1;161pkt 161fpkt"];
1204--5989[label="0.344828;10pkt 10fpkt"];
1204--6462[label="1;38pkt 38fpkt"];
1204--6829[label="0.5;6pkt 6fpkt"];
1204--7579[label="0.125;1pkt 1fpkt"];
1204--7676[label="1;2pkt 2fpkt"];
1204--7830[label="1;13pkt 13fpkt"];
1204--8006[label="1;162pkt 162fpkt"];
1204--8084[label="0.344828;10pkt 10fpkt"];
1204--8892[label="1;1pkt 1fpkt"];
1204--9214[label="1;161pkt 161fpkt"];
1449--4618[label="0.230769;3pkt 3fpkt"];
1449--5577[label="1;13pkt 13fpkt"];
1449--7830[label="1;13pkt 13fpkt"];
1759--3637[label="1;156pkt 156fpkt"];
1759--5858[label="0.99359;155pkt 155fpkt"];
1759--8006[label="1;156pkt 156fpkt"];
1759--9214[label="0.99359;155pkt 155fpkt"];
1776--7676[label="1;2pkt 2fpkt"];
1968--2211[label="0.133333;4pkt 4fpkt"];
1968--2420[label="0.8;8pkt 8fpkt"];
1968--4292[label="0.133333;4pkt 4fpkt"];
1968--5097[label="0.4;2pkt 2fpkt"];
1968--5356[label="0.444444;4pkt 4fpkt"];
1968--5989[label="0.137931;4pkt 4fpkt"];
1968--6829[label="0.166667;2pkt 2fpkt"];
1968--6978[label="0.0606061;2pkt 2fpkt"];
1968--7103[label="0.2;8pkt 8fpkt"];
1968--7703[label="0.444444;4pkt 4fpkt"];
1968--8084[label="0.137931;4pkt 4fpkt"];
1968--8666[label="0.0606061;2pkt 2fpkt"];
1968--9550[label="0.0606061;2pkt 2fpkt"];
2028--2042[label="0.653061;32pkt 32fpkt"];
2028--2050[label="0.00803213;2pkt 2fpkt"];
2028--2201[label="0.00409836;1pkt 1fpkt"];
2028--2211[label="0.266667;8pkt 8fpkt"];
2028--2233[label="0.0208333;2pkt 2fpkt"];
2028--2300[label="0.6;6pkt 6fpkt"];
2028--2417[label="0.00803213;2pkt 2fpkt"];
2028--3112[label="0.00961538;1pkt 1fpkt"];
2028--3132[label="0.0119048;1pkt 1fpkt"];
2028--3560[label="0.0682731;17pkt 17fpkt"];
2028--3696[label="0.012987;2pkt 2fpkt"];
2028--3751[label="0.00803213;2pkt 2fpkt"];
2028--3817[label="0.00452489;1pkt 1fpkt"];
2028--3974[label="0.00401606;1pkt 1fpkt"];
2028--4007[label="0.00803213;2pkt 2fpkt"];
2028--4292[label="0.266667;8pkt 8fpkt"];
2028--4535[label="0.0212766;2pkt 2fpkt"];
2028--4559[label="0.00740741;1pkt 1fpkt"];
2028--4921[label="0.00401606;1pkt 1fpkt"];
2028--4950[label="0.016129;1pkt 1fpkt"];
2028--5589[label="0.018018;2pkt 2fpkt"];
2028--5807[label="0.607843;31pkt 31fpkt"];
2028--5816[label="0.00803213;2pkt 2fpkt"];
2028--5831[label="0.012987;1pkt 1fpkt"];
2028--5863[label="0.454545;5pkt 5fpkt"];
2028--5989[label="0.275862;8pkt 8fpkt"];
2028--6829[label="0.166667;2pkt 2fpkt"];
2028--6852[label="0.00401606;1pkt 1fpkt"];
2028--6917[label="0.0238095;1pkt 1fpkt"];
2028--7024[label="1;2pkt 2fpkt"];
2028--7253[label="0.0409836;5pkt 5fpkt"];
2028--7432[label="0.00401606;1pkt 1fpkt"];
2028--7446[label="0.016129;1pkt 1fpkt"];
2028--7838[label="0.018018;2pkt 2fpkt"];
2028--7975[label="0.607843;31pkt 31fpkt"];
2028--8010[label="0.5;6pkt 6fpkt"];
2028--8084[label="0.275862;8pkt 8fpkt"];
2028--8586[label="0.00401606;1pkt 1fpkt"];
2028--8629[label="0.0243902;1pkt 1fpkt"];
2028--8694[label="1;2pkt 2fpkt"];
2028--8831[label="0.0409836;5pkt 5fpkt"];
2028--8920[label="0.00401606;1pkt 1fpkt"];
2028--9126[label="0.018018;2pkt 2fpkt"];
2028--9197[label="0.607843;31pkt 31fpkt"];
2028--9563[label="1;1pkt 1fpkt"];
2042--3850[label="0.181818;6pkt 6fpkt"];
2042--5807[label="0.979592;48pkt 48fpkt"];
2042--7975[label="0.979592;48pkt 48fpkt"];
2042--9197[label="0.979592;48pkt 48fpkt"];
2211--3850[label="0.1;3pkt 3fpkt"];
2211--4292[label="1;30pkt 30fpkt"];
2211--4618[label="0.1;3pkt 3fpkt"];
2211--5989[label="1;29pkt 29fpkt"];
2211--8084[label="1;29pkt 29fpkt"];
2300--3850[label="0.2;2pkt 2fpkt"];
2300--5863[label="0.9;9pkt 9fpkt"];
2300--8010[label="1;10pkt 10fpkt"];
2420--3609[label="0.2;2pkt 2fpkt"];
2420--4618[label="0.1;1pkt 1fpkt"];
3637--5858[label="0.99359;155pkt 155fpkt"];
3637--8006[label="1;156pkt 156fpkt"];
3637--9214[label="0.99359;155pkt 155fpkt"];
3850--4292[label="0.1;3pkt 3fpkt"];
3850--5807[label="0.181818;6pkt 6fpkt"];
3850--5863[label="0.181818;2pkt 2fpkt"];
3850--5989[label="0.103448;3pkt 3fpkt"];
3850--7975[label="0.181818;6pkt 6fpkt"];
3850--8010[label="0.166667;2pkt 2fpkt"];
3850--8084[label="0.103448;3pkt 3fpkt"];
3850--9197[label="0.181818;6pkt 6fpkt"];
4292--4618[label="0.1;3pkt 3fpkt"];
4292--5989[label="1;29pkt 29fpkt"];
4292--8084[label="1;29pkt 29fpkt"];
5171--7579[label="1;8pkt 8fpkt"];
5356--7703[label="1;9pkt 9fpkt"];
5577--7830[label="1;13pkt 13fpkt"];
5807--7975[label="1;51pkt 51fpkt"];
5807--9197[label="1;51pkt 51fpkt"];
5858--8006[label="1;161pkt 161fpkt"];
5858--9214[label="1;161pkt 161fpkt"];
5863--8010[label="1;11pkt 11fpkt"];
5989--8084[label="1;29pkt 29fpkt"];
7024--8694[label="1;2pkt 2fpkt"];
7024--9563[label="1;1pkt 1fpkt"];
7975--9197[label="1;51pkt 51fpkt"];
8006--9214[label="1;161pkt 161fpkt"];
8694--9563[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.130.150" src_port="80"/>
      <filter dst_ip="141.169.136.58" src_ip="220.182.252.100" src_port="80"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.836938,2.16304,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
2970[label="73.162.59.84;d;5pkt 5fpkt", shape=diamond, color=yellow];
3416[label="194.60.3.226;s;7pkt 7fpkt", shape=diamond, color=yellow];
8695[label="194.60.3.226;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.60.3.224:*, 73.162.59.84:10153}[22.2222%]&lt;BR/&gt;{194.60.3.226:0, *:0}[22.2222%]&lt;BR/&gt;{194.60.3.226:*, 73.162.59.84:10153}[22.2222%]&lt;BR/&gt;{194.60.3.226:*, 74.21.7.99:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10153: (23.5294%)&lt;BR/&gt; 0: (17.6471%)&lt;BR/&gt; 10154: (8.82353%)&lt;BR/&gt; 2420: (8.82353%)&lt;BR/&gt; 2419: (8.82353%)&gt;];
}
2970--3416[label="0.6;3pkt 3fpkt"];
2970--8695[label="0.6;3pkt 3fpkt"];
3416--8695[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="74.21.7.99" src_ip="194.60.3.226"/>
      <filter dst_ip="73.162.59.84" dst_port="10153" src_ip="194.60.3.226"/>
      <filter src_ip="194.60.3.226"/>
      <filter dst_ip="73.162.59.84" dst_port="10153" src_ip="194.60.3.224"/>
    </slice>
    <from sec="1089176576" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
7028[label="136.213.38.226;40pkt 40fpkt", shape=pentagon, color=darkviolet];
8698[label="136.213.38.226;40pkt 40fpkt", shape=invtriangle, color=brown];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.38.226:*, 112.75.148.176:6667}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (48.75%)&lt;BR/&gt; 4143: (1.25%)&lt;BR/&gt; 4142: (1.25%)&lt;BR/&gt; 4141: (1.25%)&lt;BR/&gt; 4140: (1.25%)&gt;];
}
7028--8698[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="112.75.148.176" dst_port="6667" src_ip="136.213.38.226"/>
    </slice>
    <from sec="1089176404" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
7037[label="197.30.38.227;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8704[label="197.30.38.227;4pkt 4fpkt", shape=invtriangle, color=brown];
9567[label="197.30.38.227;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.38.227:1863, 149.99.85.134:1031}[25%]&lt;BR/&gt;{197.30.38.227:1863, 141.169.187.150:1200}[25%]&lt;BR/&gt;{197.30.38.227:1863, 141.169.74.205:1198}[25%]&lt;BR/&gt;{197.30.38.227:1863, 136.213.33.236:1027}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1200: (13.6364%)&lt;BR/&gt; 1198: (13.6364%)&lt;BR/&gt; 1031: (13.6364%)&lt;BR/&gt; 1027: (9.09091%)&gt;];
}
7037--8704[label="1;4pkt 4fpkt"];
7037--9567[label="1;3pkt 3fpkt"];
8704--9567[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.33.236" dst_port="1027" src_ip="197.30.38.227" src_port="1863"/>
      <filter dst_ip="141.169.74.205" dst_port="1198" src_ip="197.30.38.227" src_port="1863"/>
      <filter dst_ip="141.169.187.150" dst_port="1200" src_ip="197.30.38.227" src_port="1863"/>
      <filter dst_ip="149.99.85.134" dst_port="1031" src_ip="197.30.38.227" src_port="1863"/>
    </slice>
    <from sec="1089176423" usec="0"/>
    <to sec="1089177296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
7041[label="149.99.149.227;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8707[label="149.99.149.227;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.99.149.227:*, 220.213.24.116:80}[28.5714%]&lt;BR/&gt;{149.99.149.227:*, *:8601}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.0769%)&lt;BR/&gt; 8601: (15.3846%)&lt;BR/&gt; 7709: (7.69231%)&lt;BR/&gt; 1045: (7.69231%)&lt;BR/&gt; 1043: (7.69231%)&gt;];
}
7041--8707[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="8601" src_ip="149.99.149.227"/>
      <filter dst_ip="220.213.24.116" dst_port="80" src_ip="149.99.149.227"/>
    </slice>
    <from sec="1089177211" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
7043[label="173.19.88.228;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8709[label="173.19.88.228;7pkt 7fpkt", shape=invtriangle, color=brown];
9570[label="173.19.88.228;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.19.88.228:25, 16.170.9.96:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 47933: (6.52174%)&lt;BR/&gt; 45548: (6.52174%)&lt;BR/&gt; 13538: (6.52174%)&lt;BR/&gt; 5642: (6.52174%)&gt;];
}
7043--8709[label="1;7pkt 7fpkt"];
7043--9570[label="1;8pkt 8fpkt"];
8709--9570[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="16.170.9.96" src_ip="173.19.88.228" src_port="25"/>
    </slice>
    <from sec="1089176498" usec="0"/>
    <to sec="1089177292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12818,1.95007,004,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
54[label="136.213.36.93s;2pkt 2fpkt", shape=rectangle, color=red];
1652[label="194.33.134.80;s;40pkt 40fpkt", shape=diamond, color=yellow];
1697[label="18.210.26.232;d;128pkt 128fpkt", shape=diamond, color=yellow];
1884[label="194.33.134.84;s;115pkt 115fpkt", shape=diamond, color=yellow];
2227[label="73.149.171.152;d;2pkt 2fpkt", shape=diamond, color=yellow];
2432[label="194.33.134.144;s;103pkt 103fpkt", shape=diamond, color=yellow];
2501[label="17.61.210.50;d;57pkt 57fpkt", shape=diamond, color=yellow];
2589[label="194.33.133.120;s;12pkt 12fpkt", shape=diamond, color=yellow];
2603[label="172.16.3.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
2786[label="141.169.162.131;s;35pkt 35fpkt", shape=diamond, color=yellow];
2907[label="215.30.204.138;d;83pkt 83fpkt", shape=diamond, color=yellow];
3091[label="208.160.197.34;d;6pkt 6fpkt", shape=diamond, color=yellow];
3119[label="110.144.20.43;d;43pkt 43fpkt", shape=diamond, color=yellow];
3197[label="117.35.134.154;d;65pkt 65fpkt", shape=diamond, color=yellow];
3385[label="192.102.52.159;d;118pkt 118fpkt", shape=diamond, color=yellow];
3386[label="194.33.133.2;s;130pkt 130fpkt", shape=diamond, color=yellow];
3402[label="208.140.28.147;d;63pkt 63fpkt", shape=diamond, color=yellow];
3440[label="221.65.132.144;d;50pkt 50fpkt", shape=diamond, color=yellow];
4176[label="17.61.210.50;d;57pkt 57fpkt", shape=hexagon, color=black];
4182[label="141.169.162.131;s;35pkt 35fpkt", shape=hexagon, color=black];
4261[label="172.16.3.72;d;1pkt 1fpkt", shape=hexagon, color=black];
4262[label="194.33.134.84;s;107pkt 107fpkt", shape=hexagon, color=black];
4269[label="110.144.20.43;d;43pkt 43fpkt", shape=hexagon, color=black];
4272[label="194.33.134.80;s;35pkt 35fpkt", shape=hexagon, color=black];
4461[label="117.35.134.154;d;65pkt 65fpkt", shape=hexagon, color=black];
4804[label="194.33.133.10;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4830[label="141.169.188.12;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5021[label="136.213.34.29;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5180[label="194.33.133.41;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5217[label="194.33.133.44;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5230[label="194.33.133.45;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5247[label="169.51.157.47;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5270[label="194.33.133.49;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5286[label="194.33.133.50;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5295[label="194.33.133.51;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5306[label="194.33.133.52;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5307[label="194.33.134.52;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5322[label="194.33.133.53;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5352[label="194.33.133.56;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5379[label="194.33.133.59;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5389[label="194.33.133.60;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5394[label="194.33.133.61;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5635[label="194.33.134.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5773[label="136.213.36.93;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5818[label="194.33.130.97;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5851[label="194.33.130.100;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5873[label="194.33.130.102;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5931[label="194.33.130.109;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5986[label="194.33.133.115;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6024[label="194.33.133.120;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7056[label="194.33.134.230;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7386[label="141.169.188.12;6pkt 6fpkt", shape=invtriangle, color=brown];
7492[label="136.213.34.29;24pkt 24fpkt", shape=invtriangle, color=brown];
7615[label="194.33.133.45;15pkt 15fpkt", shape=invtriangle, color=brown];
7644[label="194.33.133.49;14pkt 14fpkt", shape=invtriangle, color=brown];
7654[label="194.33.133.50;12pkt 12fpkt", shape=invtriangle, color=brown];
7665[label="194.33.133.52;12pkt 12fpkt", shape=invtriangle, color=brown];
7678[label="194.33.133.53;11pkt 11fpkt", shape=invtriangle, color=brown];
7866[label="194.33.134.80;1pkt 1fpkt", shape=invtriangle, color=brown];
8001[label="194.33.130.100;7pkt 7fpkt", shape=invtriangle, color=brown];
8015[label="194.33.130.102;10pkt 10fpkt", shape=invtriangle, color=brown];
8082[label="194.33.133.115;10pkt 10fpkt", shape=invtriangle, color=brown];
8105[label="194.33.133.120;15pkt 15fpkt", shape=invtriangle, color=brown];
8717[label="194.33.134.230;9pkt 9fpkt", shape=invtriangle, color=brown];
9017[label="194.33.133.45;15pkt 15fpkt", shape=invhouse, color=bisque];
9037[label="194.33.133.50;12pkt 12fpkt", shape=invhouse, color=bisque];
9043[label="194.33.133.52;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, *:*}[50.1779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.6822%)&lt;BR/&gt; 0: (16.6399%)&lt;BR/&gt; 80: (9.14928%)&lt;BR/&gt; 1433: (6.34029%)&lt;BR/&gt; 25: (0.267523%)&gt;];
}
54--1697[label="1;2pkt 2fpkt"];
54--5773[label="1;2pkt 2fpkt"];
1652--2227[label="0.5;1pkt 1fpkt"];
1652--2833[label="0.025;1pkt 1fpkt"];
1652--2907[label="0.025;1pkt 1fpkt"];
1652--4086[label="0.0263158;1pkt 1fpkt"];
1652--4272[label="1;35pkt 35fpkt"];
1652--5635[label="1;1pkt 1fpkt"];
1652--7866[label="1;1pkt 1fpkt"];
1697--1808[label="0.181818;2pkt 2fpkt"];
1697--1938[label="0.243478;28pkt 28fpkt"];
1697--1949[label="0.0234375;3pkt 3fpkt"];
1697--2510[label="0.3;3pkt 3fpkt"];
1697--2646[label="0.008;1pkt 1fpkt"];
1697--2786[label="0.0285714;1pkt 1fpkt"];
1697--3709[label="0.243478;28pkt 28fpkt"];
1697--3782[label="0.0078125;1pkt 1fpkt"];
1697--4028[label="0.0234375;3pkt 3fpkt"];
1697--4177[label="0.3;3pkt 3fpkt"];
1697--4182[label="0.0285714;1pkt 1fpkt"];
1697--4369[label="0.181818;2pkt 2fpkt"];
1697--4557[label="0.0078125;1pkt 1fpkt"];
1697--4619[label="0.0625;8pkt 8fpkt"];
1697--4623[label="0.15625;20pkt 20fpkt"];
1697--4628[label="0.078125;10pkt 10fpkt"];
1697--4631[label="0.0625;8pkt 8fpkt"];
1697--4635[label="0.078125;10pkt 10fpkt"];
1697--4830[label="0.666667;4pkt 4fpkt"];
1697--5011[label="0.181818;2pkt 2fpkt"];
1697--5021[label="0.24;6pkt 6fpkt"];
1697--5247[label="0.5;2pkt 2fpkt"];
1697--5773[label="0.4;2pkt 2fpkt"];
1697--5800[label="0.0078125;1pkt 1fpkt"];
1697--5818[label="0.285714;2pkt 2fpkt"];
1697--5851[label="0.25;2pkt 2fpkt"];
1697--5873[label="0.2;2pkt 2fpkt"];
1697--5874[label="0.0434783;1pkt 1fpkt"];
1697--5931[label="0.375;3pkt 3fpkt"];
1697--6327[label="0.3;3pkt 3fpkt"];
1697--7386[label="0.666667;4pkt 4fpkt"];
1697--7492[label="0.25;6pkt 6fpkt"];
1697--7969[label="0.0078125;1pkt 1fpkt"];
1697--8001[label="0.285714;2pkt 2fpkt"];
1697--8015[label="0.2;2pkt 2fpkt"];
1697--9195[label="0.0078125;1pkt 1fpkt"];
1884--2227[label="0.5;1pkt 1fpkt"];
1884--2399[label="0.0263158;1pkt 1fpkt"];
1884--2603[label="1;1pkt 1fpkt"];
1884--3091[label="0.166667;1pkt 1fpkt"];
1884--3197[label="0.0153846;1pkt 1fpkt"];
1884--4261[label="1;1pkt 1fpkt"];
1884--4262[label="1;107pkt 107fpkt"];
1884--4461[label="0.0153846;1pkt 1fpkt"];
2227--4262[label="0.5;1pkt 1fpkt"];
2227--4272[label="0.5;1pkt 1fpkt"];
2227--5635[label="1;1pkt 1fpkt"];
2227--7866[label="1;1pkt 1fpkt"];
2432--2501[label="0.0175439;1pkt 1fpkt"];
2432--4176[label="0.0175439;1pkt 1fpkt"];
2432--4618[label="0.00970874;1pkt 1fpkt"];
2501--4176[label="1;57pkt 57fpkt"];
2501--5307[label="0.1;1pkt 1fpkt"];
2501--7056[label="0.111111;1pkt 1fpkt"];
2501--8717[label="0.111111;1pkt 1fpkt"];
2589--3091[label="0.833333;5pkt 5fpkt"];
2589--3119[label="0.0833333;1pkt 1fpkt"];
2589--4269[label="0.0833333;1pkt 1fpkt"];
2589--6024[label="1;12pkt 12fpkt"];
2589--8105[label="1;12pkt 12fpkt"];
2603--4261[label="1;1pkt 1fpkt"];
2603--4262[label="1;1pkt 1fpkt"];
2786--3340[label="0.0645161;2pkt 2fpkt"];
2786--3353[label="0.0571429;2pkt 2fpkt"];
2786--4182[label="1;35pkt 35fpkt"];
2786--4425[label="0.0571429;2pkt 2fpkt"];
2907--4272[label="0.0285714;1pkt 1fpkt"];
2907--5307[label="0.1;1pkt 1fpkt"];
2907--5818[label="0.142857;1pkt 1fpkt"];
2907--5851[label="0.125;1pkt 1fpkt"];
2907--5873[label="0.1;1pkt 1fpkt"];
2907--5931[label="0.125;1pkt 1fpkt"];
2907--7056[label="0.111111;1pkt 1fpkt"];
2907--8001[label="0.142857;1pkt 1fpkt"];
2907--8015[label="0.1;1pkt 1fpkt"];
2907--8717[label="0.111111;1pkt 1fpkt"];
3091--4262[label="0.166667;1pkt 1fpkt"];
3091--6024[label="0.833333;5pkt 5fpkt"];
3091--8105[label="0.833333;5pkt 5fpkt"];
3119--4269[label="1;43pkt 43fpkt"];
3119--5986[label="0.111111;1pkt 1fpkt"];
3119--6024[label="0.0666667;1pkt 1fpkt"];
3119--8082[label="0.1;1pkt 1fpkt"];
3119--8105[label="0.0666667;1pkt 1fpkt"];
3197--3386[label="0.0153846;1pkt 1fpkt"];
3197--4262[label="0.0153846;1pkt 1fpkt"];
3197--4461[label="1;65pkt 65fpkt"];
3197--4804[label="0.0555556;1pkt 1fpkt"];
3197--5180[label="0.0588235;1pkt 1fpkt"];
3197--5217[label="0.05;1pkt 1fpkt"];
3197--5230[label="0.0625;1pkt 1fpkt"];
3197--5270[label="0.0714286;1pkt 1fpkt"];
3197--5286[label="0.0833333;1pkt 1fpkt"];
3197--5295[label="0.0833333;1pkt 1fpkt"];
3197--5306[label="0.0769231;1pkt 1fpkt"];
3197--5322[label="0.0833333;1pkt 1fpkt"];
3197--5352[label="0.1;1pkt 1fpkt"];
3197--5379[label="0.1;1pkt 1fpkt"];
3197--5389[label="0.142857;1pkt 1fpkt"];
3197--5394[label="0.1;1pkt 1fpkt"];
3197--5986[label="0.111111;1pkt 1fpkt"];
3197--7615[label="0.0666667;1pkt 1fpkt"];
3197--7644[label="0.0714286;1pkt 1fpkt"];
3197--7654[label="0.0833333;1pkt 1fpkt"];
3197--7665[label="0.0833333;1pkt 1fpkt"];
3197--7678[label="0.0909091;1pkt 1fpkt"];
3197--8082[label="0.1;1pkt 1fpkt"];
3197--9017[label="0.0666667;1pkt 1fpkt"];
3197--9037[label="0.0833333;1pkt 1fpkt"];
3197--9043[label="0.0833333;1pkt 1fpkt"];
3385--3386[label="1;118pkt 118fpkt"];
3386--3402[label="0.031746;2pkt 2fpkt"];
3386--4461[label="0.0153846;1pkt 1fpkt"];
3402--4804[label="0.111111;2pkt 2fpkt"];
3402--5180[label="0.0588235;1pkt 1fpkt"];
3402--5217[label="0.05;1pkt 1fpkt"];
3402--5230[label="0.0625;1pkt 1fpkt"];
3402--5270[label="0.0714286;1pkt 1fpkt"];
3402--5286[label="0.0833333;1pkt 1fpkt"];
3402--5306[label="0.0769231;1pkt 1fpkt"];
3402--5322[label="0.0833333;1pkt 1fpkt"];
3402--5352[label="0.1;1pkt 1fpkt"];
3402--5379[label="0.1;1pkt 1fpkt"];
3402--5389[label="0.142857;1pkt 1fpkt"];
3402--5394[label="0.1;1pkt 1fpkt"];
3402--7615[label="0.0666667;1pkt 1fpkt"];
3402--7644[label="0.0714286;1pkt 1fpkt"];
3402--7654[label="0.0833333;1pkt 1fpkt"];
3402--7665[label="0.0833333;1pkt 1fpkt"];
3402--7678[label="0.0909091;1pkt 1fpkt"];
3402--9017[label="0.0666667;1pkt 1fpkt"];
3402--9037[label="0.0833333;1pkt 1fpkt"];
3402--9043[label="0.0833333;1pkt 1fpkt"];
3440--5180[label="0.0588235;1pkt 1fpkt"];
3440--5217[label="0.05;1pkt 1fpkt"];
3440--5230[label="0.0625;1pkt 1fpkt"];
3440--5270[label="0.0714286;1pkt 1fpkt"];
3440--5286[label="0.0833333;1pkt 1fpkt"];
3440--5295[label="0.0833333;1pkt 1fpkt"];
3440--5307[label="0.1;1pkt 1fpkt"];
3440--5322[label="0.0833333;1pkt 1fpkt"];
3440--7056[label="0.111111;1pkt 1fpkt"];
3440--7615[label="0.0666667;1pkt 1fpkt"];
3440--7644[label="0.0714286;1pkt 1fpkt"];
3440--7654[label="0.0833333;1pkt 1fpkt"];
3440--7678[label="0.0909091;1pkt 1fpkt"];
3440--8717[label="0.111111;1pkt 1fpkt"];
3440--9017[label="0.0666667;1pkt 1fpkt"];
3440--9037[label="0.0833333;1pkt 1fpkt"];
4176--5307[label="0.1;1pkt 1fpkt"];
4176--7056[label="0.111111;1pkt 1fpkt"];
4176--8717[label="0.111111;1pkt 1fpkt"];
4182--4425[label="0.0571429;2pkt 2fpkt"];
4261--4262[label="1;1pkt 1fpkt"];
4262--4461[label="0.0153846;1pkt 1fpkt"];
4269--5986[label="0.111111;1pkt 1fpkt"];
4269--6024[label="0.0666667;1pkt 1fpkt"];
4269--8082[label="0.1;1pkt 1fpkt"];
4269--8105[label="0.0666667;1pkt 1fpkt"];
4272--5635[label="1;1pkt 1fpkt"];
4272--7866[label="1;1pkt 1fpkt"];
4461--4804[label="0.0555556;1pkt 1fpkt"];
4461--5180[label="0.0588235;1pkt 1fpkt"];
4461--5217[label="0.05;1pkt 1fpkt"];
4461--5230[label="0.0625;1pkt 1fpkt"];
4461--5270[label="0.0714286;1pkt 1fpkt"];
4461--5286[label="0.0833333;1pkt 1fpkt"];
4461--5295[label="0.0833333;1pkt 1fpkt"];
4461--5306[label="0.0769231;1pkt 1fpkt"];
4461--5322[label="0.0833333;1pkt 1fpkt"];
4461--5352[label="0.1;1pkt 1fpkt"];
4461--5379[label="0.1;1pkt 1fpkt"];
4461--5389[label="0.142857;1pkt 1fpkt"];
4461--5394[label="0.1;1pkt 1fpkt"];
4461--5986[label="0.111111;1pkt 1fpkt"];
4461--7615[label="0.0666667;1pkt 1fpkt"];
4461--7644[label="0.0714286;1pkt 1fpkt"];
4461--7654[label="0.0833333;1pkt 1fpkt"];
4461--7665[label="0.0833333;1pkt 1fpkt"];
4461--7678[label="0.0909091;1pkt 1fpkt"];
4461--8082[label="0.1;1pkt 1fpkt"];
4461--9017[label="0.0666667;1pkt 1fpkt"];
4461--9037[label="0.0833333;1pkt 1fpkt"];
4461--9043[label="0.0833333;1pkt 1fpkt"];
4830--7386[label="1;6pkt 6fpkt"];
5021--7492[label="1;24pkt 24fpkt"];
5230--7615[label="1;15pkt 15fpkt"];
5230--9017[label="1;15pkt 15fpkt"];
5270--7644[label="1;14pkt 14fpkt"];
5286--7654[label="1;12pkt 12fpkt"];
5286--9037[label="1;12pkt 12fpkt"];
5306--7665[label="1;12pkt 12fpkt"];
5306--9043[label="1;12pkt 12fpkt"];
5322--7678[label="1;11pkt 11fpkt"];
5635--7866[label="1;1pkt 1fpkt"];
5851--8001[label="1;7pkt 7fpkt"];
5873--8015[label="1;10pkt 10fpkt"];
5986--8082[label="1;9pkt 9fpkt"];
6024--8105[label="1;15pkt 15fpkt"];
7056--8717[label="1;9pkt 9fpkt"];
7615--9017[label="1;15pkt 15fpkt"];
7654--9037[label="1;12pkt 12fpkt"];
7665--9043[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_port="445"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
7084[label="220.151.68.234;75pkt 75fpkt", shape=pentagon, color=darkviolet];
8732[label="220.151.68.234;74pkt 74fpkt", shape=invtriangle, color=brown];
9580[label="220.151.68.234;74pkt 74fpkt", shape=invhouse, color=bisque];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.151.68.234:*, *:1080}[50.6667%]&lt;BR/&gt;{220.151.68.234:*, *:3128}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.5605%)&lt;BR/&gt; 3128: (24.4395%)&lt;BR/&gt; 4983: (0.672646%)&lt;BR/&gt; 4903: (0.672646%)&lt;BR/&gt; 4736: (0.672646%)&gt;];
}
7084--8732[label="1;74pkt 74fpkt"];
7084--9580[label="1;74pkt 74fpkt"];
8732--9580[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="220.151.68.234"/>
      <filter dst_port="3128" src_ip="220.151.68.234"/>
    </slice>
    <from sec="1089176405" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
7086[label="169.51.88.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8734[label="169.51.88.234;1pkt 1fpkt", shape=invtriangle, color=brown];
9581[label="169.51.88.234;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.51.88.234:1341, 75.57.15.122:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1341: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7086--8734[label="1;1pkt 1fpkt"];
7086--9581[label="1;1pkt 1fpkt"];
8734--9581[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.57.15.122" dst_port="80" src_ip="169.51.88.234" src_port="1341"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
7104[label="136.213.25.236;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8745[label="136.213.25.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.25.236:4066, 197.30.34.126:1863}[50%]&lt;BR/&gt;{136.213.25.236:3694, 197.30.38.170:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3694: (33.3333%)&lt;BR/&gt; 4066: (16.6667%)&gt;];
}
7104--8745[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.30.38.170" dst_port="1863" src_ip="136.213.25.236" src_port="3694"/>
      <filter dst_ip="197.30.34.126" dst_port="1863" src_ip="136.213.25.236" src_port="4066"/>
    </slice>
    <from sec="1089176407" usec="0"/>
    <to sec="1089177279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="140.165.21.237"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
7118[label="212.32.38.237;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8752[label="212.32.38.237;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.237:5050, *:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.1034%)&lt;BR/&gt; 1043: (6.89655%)&lt;BR/&gt; 4329: (3.44828%)&lt;BR/&gt; 3882: (3.44828%)&lt;BR/&gt; 3201: (3.44828%)&gt;];
}
7118--8752[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="212.32.38.237" src_port="5050"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
7119[label="197.30.39.237;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8753[label="197.30.39.237;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.39.237:1863, 136.213.36.32:2439}[25%]&lt;BR/&gt;{197.30.39.237:1863, 169.51.221.169:1035}[25%]&lt;BR/&gt;{197.30.39.237:1863, 194.60.148.223:1420}[25%]&lt;BR/&gt;{197.30.39.237:1863, 136.213.33.241:2024}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2024: (14.2857%)&lt;BR/&gt; 1420: (14.2857%)&lt;BR/&gt; 1035: (14.2857%)&lt;BR/&gt; 2439: (7.14286%)&gt;];
}
7119--8753[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.33.241" dst_port="2024" src_ip="197.30.39.237" src_port="1863"/>
      <filter dst_ip="194.60.148.223" dst_port="1420" src_ip="197.30.39.237" src_port="1863"/>
      <filter dst_ip="169.51.221.169" dst_port="1035" src_ip="197.30.39.237" src_port="1863"/>
      <filter dst_ip="136.213.36.32" dst_port="2439" src_ip="197.30.39.237" src_port="1863"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
7121[label="110.148.73.237;221pkt 221fpkt", shape=pentagon, color=darkviolet];
8754[label="110.148.73.237;220pkt 220fpkt", shape=invtriangle, color=brown];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.148.73.237:*, *:1027}[53.8462%]&lt;BR/&gt;{110.148.73.237:*, *:1026}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (26.8707%)&lt;BR/&gt; 1026: (23.1293%)&lt;BR/&gt; 3678: (0.680272%)&lt;BR/&gt; 4862: (0.453515%)&lt;BR/&gt; 4828: (0.453515%)&gt;];
}
7121--8754[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="110.148.73.237"/>
      <filter dst_port="1026" src_ip="110.148.73.237"/>
    </slice>
    <from sec="1089176420" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
3413[label="141.169.36.90;d;62pkt 62fpkt", shape=diamond, color=yellow];
5174[label="222.80.43.41;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5539[label="222.80.43.72;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7580[label="222.80.43.41;15pkt 15fpkt", shape=invtriangle, color=brown];
7807[label="222.80.43.72;35pkt 35fpkt", shape=invtriangle, color=brown];
8995[label="222.80.43.41;15pkt 15fpkt", shape=invhouse, color=bisque];
9109[label="222.80.43.72;34pkt 34fpkt", shape=invhouse, color=bisque];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.80.43.72:80, 141.169.36.90:*}[42.6471%]&lt;BR/&gt;{222.80.43.41:443, 141.169.36.90:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.0711%)&lt;BR/&gt; 443: (14.9289%)&lt;BR/&gt; 38208: (0.947867%)&lt;BR/&gt; 38207: (0.947867%)&lt;BR/&gt; 38206: (0.947867%)&gt;];
}
3413--3964[label="0.016129;1pkt 1fpkt"];
3413--4132[label="0.016129;1pkt 1fpkt"];
3413--4826[label="0.0322581;2pkt 2fpkt"];
3413--5174[label="1;16pkt 16fpkt"];
3413--5539[label="0.852941;29pkt 29fpkt"];
3413--6222[label="0.016129;1pkt 1fpkt"];
3413--6239[label="0.08;2pkt 2fpkt"];
3413--7382[label="0.0322581;2pkt 2fpkt"];
3413--7580[label="1;15pkt 15fpkt"];
3413--7807[label="0.828571;29pkt 29fpkt"];
3413--8228[label="0.016129;1pkt 1fpkt"];
3413--8239[label="0.0833333;2pkt 2fpkt"];
3413--8895[label="0.0322581;2pkt 2fpkt"];
3413--8995[label="1;15pkt 15fpkt"];
3413--9109[label="0.852941;29pkt 29fpkt"];
3413--9331[label="0.016129;1pkt 1fpkt"];
5174--7580[label="1;15pkt 15fpkt"];
5174--8995[label="1;15pkt 15fpkt"];
5539--7807[label="1;34pkt 34fpkt"];
5539--9109[label="1;34pkt 34fpkt"];
7580--8995[label="1;15pkt 15fpkt"];
7807--9109[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.36.90" src_ip="222.80.43.72" src_port="80"/>
      <filter dst_ip="141.169.36.90" src_ip="222.80.43.41" src_port="443"/>
    </slice>
    <from sec="1089176542" usec="0"/>
    <to sec="1089177289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
7143[label="214.187.146.239;64pkt 64fpkt", shape=pentagon, color=darkviolet];
8765[label="214.187.146.239;64pkt 64fpkt", shape=invtriangle, color=brown];
9595[label="214.187.146.239;63pkt 63fpkt", shape=invhouse, color=bisque];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.187.146.239:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4976: (0.78534%)&lt;BR/&gt; 4932: (0.78534%)&lt;BR/&gt; 4875: (0.78534%)&lt;BR/&gt; 4869: (0.78534%)&gt;];
}
7143--8765[label="1;64pkt 64fpkt"];
7143--9595[label="1;63pkt 63fpkt"];
8765--9595[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="214.187.146.239"/>
    </slice>
    <from sec="1089176732" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
7149[label="141.169.61.240;38pkt 38fpkt", shape=pentagon, color=darkviolet];
8768[label="141.169.61.240;37pkt 37fpkt", shape=invtriangle, color=brown];
9596[label="141.169.61.240;37pkt 37fpkt", shape=invhouse, color=bisque];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.61.240:80, 0.33.110.147:*}[36.8421%]&lt;BR/&gt;{141.169.61.240:80, 18.210.70.87:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3036%)&lt;BR/&gt; 53: (6.69643%)&lt;BR/&gt; 65002: (1.33929%)&lt;BR/&gt; 62211: (1.33929%)&lt;BR/&gt; 59204: (1.33929%)&gt;];
}
7149--8768[label="1;37pkt 37fpkt"];
7149--9596[label="1;37pkt 37fpkt"];
8768--9596[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="0.33.110.147" src_ip="141.169.61.240" src_port="80"/>
      <filter dst_ip="18.210.70.87" src_ip="141.169.61.240" src_port="80"/>
    </slice>
    <from sec="1089176416" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
7150[label="141.169.76.240;52pkt 52fpkt", shape=pentagon, color=darkviolet];
8769[label="141.169.76.240;51pkt 51fpkt", shape=invtriangle, color=brown];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.76.240:25, 219.115.3.113:*}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0291%)&lt;BR/&gt; 62511: (0.970874%)&lt;BR/&gt; 59574: (0.970874%)&lt;BR/&gt; 59565: (0.970874%)&lt;BR/&gt; 59019: (0.970874%)&gt;];
}
7150--8769[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="219.115.3.113" src_ip="141.169.76.240" src_port="25"/>
    </slice>
    <from sec="1089176435" usec="0"/>
    <to sec="1089177294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808865,2.02292,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
2942[label="197.30.34.56;d;10pkt 10fpkt", shape=diamond, color=yellow];
6317[label="194.60.158.151;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6610[label="136.213.34.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7155[label="136.213.195.240;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8278[label="194.60.158.151;5pkt 5fpkt", shape=invtriangle, color=brown];
8773[label="136.213.195.240;11pkt 11fpkt", shape=invtriangle, color=brown];
9359[label="194.60.158.151;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.213.195.240:*, *:*}[46.1538%]&lt;BR/&gt;{*:*, 197.30.34.56:1863}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (33%)&lt;BR/&gt; 110: (8%)&lt;BR/&gt; 7001: (4%)&lt;BR/&gt; 3428: (4%)&lt;BR/&gt; 3581: (3%)&gt;];
}
2942--6317[label="0.2;1pkt 1fpkt"];
2942--6610[label="0.333333;1pkt 1fpkt"];
2942--7155[label="0.2;2pkt 2fpkt"];
2942--8278[label="0.2;1pkt 1fpkt"];
2942--8773[label="0.2;2pkt 2fpkt"];
2942--9359[label="0.25;1pkt 1fpkt"];
6317--8278[label="1;5pkt 5fpkt"];
6317--9359[label="1;4pkt 4fpkt"];
7155--8773[label="1;11pkt 11fpkt"];
8278--9359[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="136.213.195.240"/>
      <filter dst_ip="197.30.34.56" dst_port="1863"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82932,2.0161,004,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
425[label="17.44.138.176s;92pkt 92fpkt", shape=rectangle, color=red];
1793[label="195.46.103.19;d;198pkt 198fpkt", shape=diamond, color=yellow];
1795[label="215.189.249.241;s;227pkt 227fpkt", shape=diamond, color=yellow];
3500[label="17.44.138.176;s;369pkt 369fpkt", shape=diamond, color=yellow];
6568[label="17.44.138.176;511pkt 511fpkt", shape=pentagon, color=darkviolet];
7169[label="215.189.249.241;243pkt 243fpkt", shape=pentagon, color=darkviolet];
8425[label="17.44.138.176;511pkt 511fpkt", shape=invtriangle, color=brown];
8780[label="215.189.249.241;243pkt 243fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.44.138.176:*, *:135}[31.9797%]&lt;BR/&gt;{17.44.138.176:*, *:445}[31.7259%]&lt;BR/&gt;{215.189.249.241:*, 195.46.103.19:*}[21.9543%]&lt;BR/&gt;{215.189.249.241:*, *:139}[20.4315%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (21.1153%)&lt;BR/&gt; 135: (15.5597%)&lt;BR/&gt; 139: (12.0718%)&lt;BR/&gt; 1810: (0.668338%)&lt;BR/&gt; 38937: (0.334169%)&gt;];
}
425--1793[label="0.0217391;2pkt 2fpkt"];
425--3500[label="1;92pkt 92fpkt"];
425--6568[label="1;92pkt 92fpkt"];
425--8425[label="1;92pkt 92fpkt"];
1793--1795[label="0.813131;161pkt 161fpkt"];
1793--3500[label="0.020202;4pkt 4fpkt"];
1793--4619[label="0.00505051;1pkt 1fpkt"];
1793--4631[label="0.00505051;1pkt 1fpkt"];
1793--6568[label="0.020202;4pkt 4fpkt"];
1793--7169[label="0.808081;160pkt 160fpkt"];
1793--8425[label="0.020202;4pkt 4fpkt"];
1793--8780[label="0.808081;160pkt 160fpkt"];
1795--7169[label="0.995595;226pkt 226fpkt"];
1795--8780[label="0.995595;226pkt 226fpkt"];
3500--6568[label="1;369pkt 369fpkt"];
3500--8425[label="1;369pkt 369fpkt"];
6568--8425[label="1;511pkt 511fpkt"];
7169--8780[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="17.44.138.176"/>
      <filter dst_port="135" src_ip="17.44.138.176"/>
      <filter dst_ip="195.46.103.19" src_ip="215.189.249.241"/>
      <filter dst_port="139" src_ip="215.189.249.241"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.34.46.242"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
7174[label="141.169.198.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8783[label="141.169.198.242;1pkt 1fpkt", shape=invtriangle, color=brown];
9600[label="141.169.198.242;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.198.242:2324, 110.4.30.7:6699}[50%]&lt;BR/&gt;{141.169.198.242:9898, 208.69.151.90:3718}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (30%)&lt;BR/&gt; 3718: (30%)&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 2324: (20%)&gt;];
}
7174--8783[label="1;1pkt 1fpkt"];
7174--9600[label="1;2pkt 2fpkt"];
8783--9600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.69.151.90" dst_port="3718" src_ip="141.169.198.242" src_port="9898"/>
      <filter dst_ip="110.4.30.7" dst_port="6699" src_ip="141.169.198.242" src_port="2324"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
7179[label="219.41.126.243;40pkt 40fpkt", shape=pentagon, color=darkviolet];
8787[label="219.41.126.243;39pkt 39fpkt", shape=invtriangle, color=brown];
9604[label="219.41.126.243;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.41.126.243:80, 141.169.3.129:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32898: (1.27119%)&lt;BR/&gt; 32897: (1.27119%)&lt;BR/&gt; 32894: (1.27119%)&lt;BR/&gt; 32892: (1.27119%)&gt;];
}
7179--8787[label="1;39pkt 39fpkt"];
7179--9604[label="1;39pkt 39fpkt"];
8787--9604[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.3.129" src_ip="219.41.126.243" src_port="80"/>
    </slice>
    <from sec="1089176556" usec="0"/>
    <to sec="1089176593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
7182[label="212.32.38.244;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8790[label="212.32.38.244;7pkt 7fpkt", shape=invtriangle, color=brown];
9607[label="212.32.38.244;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.244:5050, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.8571%)&lt;BR/&gt; 61550: (7.14286%)&lt;BR/&gt; 1960: (7.14286%)&lt;BR/&gt; 1742: (7.14286%)&lt;BR/&gt; 1299: (7.14286%)&gt;];
}
7182--8790[label="1;7pkt 7fpkt"];
7182--9607[label="1;7pkt 7fpkt"];
8790--9607[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="212.32.38.244" src_port="5050"/>
    </slice>
    <from sec="1089176419" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
7188[label="194.59.202.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8795[label="194.59.202.244;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.59.202.244:53, 220.241.59.171:53}[33.3333%]&lt;BR/&gt;{194.59.202.244:65209, 75.133.29.119:80}[33.3333%]&lt;BR/&gt;{194.59.202.244:65210, 75.133.29.119:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 65210: (20%)&lt;BR/&gt; 65209: (20%)&lt;BR/&gt; 53: (20%)&gt;];
}
7188--8795[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="75.133.29.119" dst_port="80" src_ip="194.59.202.244" src_port="65210"/>
      <filter dst_ip="75.133.29.119" dst_port="80" src_ip="194.59.202.244" src_port="65209"/>
      <filter dst_ip="220.241.59.171" dst_port="53" src_ip="194.59.202.244" src_port="53"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
7194[label="212.32.38.245;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8800[label="212.32.38.245;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.32.38.245:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 4685: (7.14286%)&lt;BR/&gt; 4640: (7.14286%)&lt;BR/&gt; 2007: (7.14286%)&lt;BR/&gt; 1215: (7.14286%)&gt;];
}
7194--8800[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="212.32.38.245" src_port="5050"/>
    </slice>
    <from sec="1089176406" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.155.65.246"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
7215[label="141.169.133.247;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8810[label="141.169.133.247;35pkt 35fpkt", shape=invtriangle, color=brown];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.169.133.247:*, 80.120.34.20:443}[80.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (40.8451%)&lt;BR/&gt; 80: (9.15493%)&lt;BR/&gt; 1552: (1.40845%)&lt;BR/&gt; 1551: (1.40845%)&lt;BR/&gt; 1550: (1.40845%)&gt;];
}
7215--8810[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="80.120.34.20" dst_port="443" src_ip="141.169.133.247"/>
    </slice>
    <from sec="1089177219" usec="0"/>
    <to sec="1089177279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
7226[label="210.192.161.248;75pkt 75fpkt", shape=pentagon, color=darkviolet];
8815[label="210.192.161.248;74pkt 74fpkt", shape=invtriangle, color=brown];
9623[label="210.192.161.248;74pkt 74fpkt", shape=invhouse, color=bisque];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.192.161.248:*, *:3128}[50.6667%]&lt;BR/&gt;{210.192.161.248:*, *:1080}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.1121%)&lt;BR/&gt; 1080: (24.8879%)&lt;BR/&gt; 2400: (1.34529%)&lt;BR/&gt; 4935: (0.672646%)&lt;BR/&gt; 4903: (0.672646%)&gt;];
}
7226--8815[label="1;74pkt 74fpkt"];
7226--9623[label="1;74pkt 74fpkt"];
8815--9623[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="210.192.161.248"/>
      <filter dst_port="1080" src_ip="210.192.161.248"/>
    </slice>
    <from sec="1089176409" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.76.95.250"/>
    </slice>
    <from sec="1089176569" usec="0"/>
    <to sec="1089176588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.169.67.251"/>
    </slice>
    <from sec="1089177265" usec="0"/>
    <to sec="1089177266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.226.86.251"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089176700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.656421,2.06083,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
7250[label="201.154.48.252;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8830[label="201.154.48.252;2pkt 2fpkt", shape=invtriangle, color=brown];
9631[label="201.154.48.252;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.154.48.252:80, 141.169.187.242:1331}[50%]&lt;BR/&gt;{201.154.48.252:80, 141.169.187.242:1332}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1332: (25%)&lt;BR/&gt; 1331: (25%)&gt;];
}
7250--8830[label="1;2pkt 2fpkt"];
7250--9631[label="1;2pkt 2fpkt"];
8830--9631[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.187.242" dst_port="1332" src_ip="201.154.48.252" src_port="80"/>
      <filter dst_ip="141.169.187.242" dst_port="1331" src_ip="201.154.48.252" src_port="80"/>
    </slice>
    <from sec="1089176459" usec="0"/>
    <to sec="1089176483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484909,2.09747,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
7267[label="16.36.188.254;53pkt 53fpkt", shape=pentagon, color=darkviolet];
8835[label="16.36.188.254;53pkt 53fpkt", shape=invtriangle, color=brown];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.36.188.254:*, 136.70.187.47:80}[56.6038%]&lt;BR/&gt;{16.36.188.254:*, 136.213.77.82:80}[41.5094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 48809: (0.943396%)&lt;BR/&gt; 48105: (0.943396%)&lt;BR/&gt; 47427: (0.943396%)&lt;BR/&gt; 46838: (0.943396%)&gt;];
}
7267--8835[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="136.70.187.47" dst_port="80" src_ip="16.36.188.254"/>
      <filter dst_ip="136.213.77.82" dst_port="80" src_ip="16.36.188.254"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690717,2.19854,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.148.193.255"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.219.93.2"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.74.41.5"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.2.8"/>
    </slice>
    <from sec="1089176408" usec="0"/>
    <to sec="1089177297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.53.205.9"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089176730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.70.11"/>
    </slice>
    <from sec="1089176412" usec="0"/>
    <to sec="1089177290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.81.135.35"/>
    </slice>
    <from sec="1089176403" usec="0"/>
    <to sec="1089176700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.30.34.42"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.152.26.44"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.153.117.48"/>
    </slice>
    <from sec="1089176571" usec="0"/>
    <to sec="1089176783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.198.138.52"/>
    </slice>
    <from sec="1089176810" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.142.155.54"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.80.57"/>
    </slice>
    <from sec="1089176401" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.147.251.63"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.155.65.73"/>
    </slice>
    <from sec="1089176894" usec="0"/>
    <to sec="1089176996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.64.74"/>
    </slice>
    <from sec="1089176499" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.213.24.80"/>
    </slice>
    <from sec="1089176942" usec="0"/>
    <to sec="1089176981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="153.105.25.96"/>
    </slice>
    <from sec="1089176789" usec="0"/>
    <to sec="1089176865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.218.168.126"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089176878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.155.224.127"/>
    </slice>
    <from sec="1089176433" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.21.163.152"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.14.155"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.20.168"/>
    </slice>
    <from sec="1089176402" usec="0"/>
    <to sec="1089177299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626462,2.11235,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1116{
style=filled;
color=gray75;
6593[label="73.37.68.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9443[label="73.37.68.179;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1116[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.37.68.179:80, 141.169.162.183:2748}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2748: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6593--9443[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.169.162.183" dst_port="2748" src_ip="73.37.68.179" src_port="80"/>
    </slice>
    <from sec="1089176809" usec="0"/>
    <to sec="1089176814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.19.104.180"/>
    </slice>
    <from sec="1089176420" usec="0"/>
    <to sec="1089177300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.59.137.197"/>
    </slice>
    <from sec="1089177300" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="141.169.212.228"/>
    </slice>
    <from sec="1089176400" usec="0"/>
    <to sec="1089177301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25726,1.91915,001,1 1 1 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
263[label="208.170.216.43s;499pkt 499fpkt", shape=rectangle, color=red];
623[label="208.170.216.43s;499pkt 499fpkt", shape=ellipse, color=green];
921[label="208.170.216.43s;499pkt 499fpkt", shape=triangle, color=blue];
3072[label="208.170.216.43;s;499pkt 499fpkt", shape=diamond, color=yellow];
5209[label="208.170.216.43;498pkt 498fpkt", shape=pentagon, color=darkviolet];
7601[label="208.170.216.43;499pkt 499fpkt", shape=invtriangle, color=brown];
9009[label="208.170.216.43;498pkt 498fpkt", shape=invhouse, color=bisque];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.170.216.43:*, *:5554}[50.501%]&lt;BR/&gt;{208.170.216.43:*, *:9898}[49.499%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.2363%)&lt;BR/&gt; 9898: (24.7637%)&lt;BR/&gt; 3628: (0.100258%)&lt;BR/&gt; 3627: (0.100258%)&lt;BR/&gt; 3626: (0.100258%)&gt;];
}
263--623[label="1;499pkt 499fpkt"];
263--921[label="1;499pkt 499fpkt"];
263--2452[label="0.0363636;2pkt 2fpkt"];
263--3072[label="1;499pkt 499fpkt"];
263--5209[label="1;498pkt 498fpkt"];
263--7601[label="1;499pkt 499fpkt"];
263--9009[label="1;498pkt 498fpkt"];
623--921[label="1;499pkt 499fpkt"];
623--2452[label="0.0363636;2pkt 2fpkt"];
623--3072[label="1;499pkt 499fpkt"];
623--5209[label="1;498pkt 498fpkt"];
623--7601[label="1;499pkt 499fpkt"];
623--9009[label="1;498pkt 498fpkt"];
921--2452[label="0.0363636;2pkt 2fpkt"];
921--3072[label="1;499pkt 499fpkt"];
921--5209[label="1;498pkt 498fpkt"];
921--7601[label="1;499pkt 499fpkt"];
921--9009[label="1;498pkt 498fpkt"];
3072--5209[label="1;498pkt 498fpkt"];
3072--7601[label="1;499pkt 499fpkt"];
3072--9009[label="1;498pkt 498fpkt"];
5209--7601[label="1;498pkt 498fpkt"];
5209--9009[label="1;498pkt 498fpkt"];
7601--9009[label="1;498pkt 498fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.170.216.43"/>
      <filter dst_port="9898" src_ip="208.170.216.43"/>
    </slice>
    <from sec="1089177039" usec="0"/>
    <to sec="1089177046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="140.165.21.237"/>
    </slice>
    <from sec="1089176428" usec="0"/>
    <to sec="1089177186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796497,2.21275,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.68.4.247"/>
    </slice>
    <from sec="1089176409" usec="0"/>
    <to sec="1089177298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626462,2.11235,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1123{
style=filled;
color=gray75;
7237[label="18.76.95.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9626[label="18.76.95.250;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1123[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.76.95.250:1881, 136.213.0.117:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1881: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7237--9626[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.213.0.117" dst_port="80" src_ip="18.76.95.250" src_port="1881"/>
    </slice>
    <from sec="1089176569" usec="0"/>
    <to sec="1089176588" usec="0"/>
  </anomaly>

</admd:annotation>
