<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.893195,1.87371,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.69.40.143" dst_port="63399" proto="tcp" src_ip="218.213.130.177" src_port="80"/>
      <filter dst_ip="148.189.52.232" dst_port="63399" proto="tcp" src_ip="218.213.130.177" src_port="80"/>
      <from sec="1107320420" usec="0"/>
      <to sec="1107320529" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="161.69.40.143" dst_port="63399" proto="tcp" src_ip="215.149.138.181" src_port="80"/>
      <filter dst_ip="148.189.52.232" dst_port="63399" proto="tcp" src_ip="215.149.138.181" src_port="80"/>
      <from sec="1107320420" usec="0"/>
      <to sec="1107320529" usec="0"/>
    </slice>
    <from sec="1107320420" usec="0"/>
    <to sec="1107320529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.63.211.125" dst_port="1024" proto="tcp" src_ip="219.110.38.242" src_port="80"/>
      <filter dst_ip="133.63.211.125" dst_port="1024" proto="udp" src_ip="219.110.38.242" src_port="80"/>
      <filter dst_ip="133.63.211.125" dst_port="1028" proto="tcp" src_ip="219.110.38.242" src_port="80"/>
      <filter dst_ip="133.63.211.125" dst_port="1028" proto="udp" src_ip="219.110.38.242" src_port="80"/>
      <filter dst_ip="133.63.211.125" dst_port="1024" proto="tcp" src_ip="219.110.38.242" src_port="53"/>
      <filter dst_ip="133.63.211.125" dst_port="1024" proto="udp" src_ip="219.110.38.242" src_port="53"/>
      <filter dst_ip="133.63.211.125" dst_port="1028" proto="tcp" src_ip="219.110.38.242" src_port="53"/>
      <filter dst_ip="133.63.211.125" dst_port="1028" proto="udp" src_ip="219.110.38.242" src_port="53"/>
      <from sec="1107320448" usec="0"/>
      <to sec="1107320454" usec="0"/>
    </slice>
    <from sec="1107320448" usec="0"/>
    <to sec="1107320454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <from sec="1107320588" usec="0"/>
      <to sec="1107320653" usec="0"/>
    </slice>
    <from sec="1107320588" usec="0"/>
    <to sec="1107320653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="215.131.67.32" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="215.131.67.32" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="215.131.67.32" src_port="1031"/>
      <filter dst_port="137" proto="udp" src_ip="215.131.67.32" src_port="1031"/>
      <from sec="1107321102" usec="0"/>
      <to sec="1107321117" usec="0"/>
    </slice>
    <from sec="1107321102" usec="0"/>
    <to sec="1107321117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="66.139.98.153" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="66.139.98.153" src_port="1029"/>
      <from sec="1107321003" usec="0"/>
      <to sec="1107321017" usec="0"/>
    </slice>
    <from sec="1107321003" usec="0"/>
    <to sec="1107321017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="42.185.112.255" src_port="1030"/>
      <from sec="1107320888" usec="0"/>
      <to sec="1107320893" usec="0"/>
    </slice>
    <from sec="1107320888" usec="0"/>
    <to sec="1107320893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="92.107.226.5"/>
      <filter dst_port="9898" proto="tcp" src_ip="92.107.226.5"/>
      <from sec="1107321300" usec="0"/>
      <to sec="1107321301" usec="0"/>
    </slice>
    <from sec="1107321297" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="216.70.26.201"/>
      <filter dst_port="9898" proto="tcp" src_ip="216.70.26.201"/>
      <from sec="1107321222" usec="0"/>
      <to sec="1107321224" usec="0"/>
    </slice>
    <from sec="1107321222" usec="0"/>
    <to sec="1107321224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.48.66.134" proto="tcp"/>
      <filter dst_ip="151.48.66.134" proto="icmp"/>
      <filter dst_ip="151.48.66.134" proto="tcp"/>
      <filter dst_ip="151.48.66.134" proto="icmp"/>
      <filter dst_ip="151.48.66.134" proto="tcp"/>
      <filter dst_ip="151.48.66.134" proto="icmp"/>
      <filter dst_ip="151.48.66.134" proto="tcp"/>
      <filter dst_ip="151.48.66.134" proto="icmp"/>
      <from sec="1107320759" usec="0"/>
      <to sec="1107320764" usec="0"/>
    </slice>
    <from sec="1107320759" usec="0"/>
    <to sec="1107320764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893195,1.87371,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="215.148.131.112" src_port="1074"/>
      <filter dst_port="137" proto="udp" src_ip="215.148.131.112" src_port="1074"/>
      <filter dst_port="5050" proto="tcp" src_ip="215.148.131.112" src_port="1074"/>
      <filter dst_port="5050" proto="udp" src_ip="215.148.131.112" src_port="1074"/>
      <filter dst_port="53" proto="tcp" src_ip="215.148.131.112" src_port="1074"/>
      <filter dst_port="53" proto="udp" src_ip="215.148.131.112" src_port="1074"/>
      <from sec="1107320983" usec="0"/>
      <to sec="1107320988" usec="0"/>
    </slice>
    <from sec="1107320983" usec="0"/>
    <to sec="1107320988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13715,1.92754,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.242.146.192" dst_port="137" proto="udp" src_ip="200.75.192.31" src_port="1029"/>
      <filter dst_ip="201.242.146.192" dst_port="137" src_ip="200.75.192.31" src_port="1029"/>
      <from sec="1107320841" usec="0"/>
      <to sec="1107320847" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.242.146.192" dst_port="137" proto="udp" src_ip="42.74.36.31" src_port="1029"/>
      <filter dst_ip="201.242.146.192" dst_port="137" src_ip="42.74.36.31" src_port="1029"/>
      <from sec="1107320841" usec="0"/>
      <to sec="1107320846" usec="0"/>
    </slice>
    <from sec="1107320841" usec="0"/>
    <to sec="1107320847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13715,1.92754,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <filter dst_ip="218.98.114.83" proto="icmp" src_ip="218.98.114.83"/>
      <from sec="1107320601" usec="0"/>
      <to sec="1107320648" usec="0"/>
    </slice>
    <from sec="1107320601" usec="0"/>
    <to sec="1107320648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30964,1.97183,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.162.64" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="tcp" src_ip="129.0.227.24" src_port="4000"/>
      <filter dst_ip="42.216.165.152" proto="icmp" src_ip="129.0.227.24" src_port="4000"/>
      <from sec="1107321055" usec="0"/>
      <to sec="1107321058" usec="0"/>
    </slice>
    <from sec="1107321055" usec="0"/>
    <to sec="1107321058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
362[label="148.189.133.22;d;8pkt 8fpkt", shape=diamond, color=yellow];
363[label="218.43.147.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
2580[label="218.43.147.156;s;2pkt 2fpkt", shape=hexagon, color=black];
2746[label="148.189.133.22;d;7pkt 7fpkt", shape=hexagon, color=black];
4730[label="218.43.147.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 148.189.133.22:4000}[25%]&lt;BR/&gt;{42.145.25.11:*, 148.189.133.22:*}[25%]&lt;BR/&gt;{42.187.209.104:*, 148.189.133.22:*}[25%]&lt;BR/&gt;{218.43.147.156:*, 148.189.133.22:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2883: (11.9048%)&lt;BR/&gt; 1907: (11.9048%)&lt;BR/&gt; 21: (11.9048%)&lt;BR/&gt; 20: (11.9048%)&lt;BR/&gt; 8000: (7.14286%)&gt;];
}
362--363[label="1;2pkt 2fpkt"];
362--2580[label="1;2pkt 2fpkt"];
362--2746[label="1;7pkt 7fpkt"];
362--4730[label="1;2pkt 2fpkt"];
363--2580[label="1;2pkt 2fpkt"];
363--2746[label="1;2pkt 2fpkt"];
363--4730[label="1;2pkt 2fpkt"];
2580--2746[label="1;2pkt 2fpkt"];
2580--4730[label="1;2pkt 2fpkt"];
2746--4730[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.133.22" src_ip="218.43.147.156"/>
      <filter dst_ip="148.189.133.22" src_ip="42.187.209.104"/>
      <filter dst_ip="148.189.133.22" src_ip="42.145.25.11"/>
      <filter dst_ip="148.189.133.22" dst_port="4000" src_port="8000"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
433[label="161.69.215.124;d;32pkt 32fpkt", shape=diamond, color=yellow];
435[label="193.2.179.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
2761[label="193.2.179.162;s;1pkt 1fpkt", shape=hexagon, color=black];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.69.215.124:24818}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24818: (30.8824%)&lt;BR/&gt; 0: (11.7647%)&lt;BR/&gt; 9371: (4.41176%)&lt;BR/&gt; 370: (4.41176%)&lt;BR/&gt; 80: (4.41176%)&gt;];
}
433--435[label="1;1pkt 1fpkt"];
433--2761[label="1;1pkt 1fpkt"];
433--4315[label="0.03125;1pkt 1fpkt"];
435--2761[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.215.124" dst_port="24818"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944897,1.76539,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
71[label="133.63.178.240s;1pkt 1fpkt", shape=rectangle, color=red];
515[label="65.100.12.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
516[label="133.63.178.240;s;3pkt 3fpkt", shape=diamond, color=yellow];
1493[label="94.115.3.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
5271[label="133.63.178.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.178.240:1024, 65.100.12.54:43188}[33.3333%]&lt;BR/&gt;{133.63.178.240:1024, 94.115.3.119:2324}[33.3333%]&lt;BR/&gt;{133.63.178.240:1250, 40.204.59.163:6667}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (35.7143%)&lt;BR/&gt; 2324: (21.4286%)&lt;BR/&gt; 43188: (14.2857%)&lt;BR/&gt; 6667: (14.2857%)&lt;BR/&gt; 1250: (14.2857%)&gt;];
}
71--516[label="1;1pkt 1fpkt"];
71--1493[label="1;1pkt 1fpkt"];
515--516[label="1;1pkt 1fpkt"];
516--1493[label="1;1pkt 1fpkt"];
516--5271[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.204.59.163" dst_port="6667" src_ip="133.63.178.240" src_port="1250"/>
      <filter dst_ip="94.115.3.119" dst_port="2324" src_ip="133.63.178.240" src_port="1024"/>
      <filter dst_ip="65.100.12.54" dst_port="43188" src_ip="133.63.178.240" src_port="1024"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
426[label="148.189.10.95;d;9pkt 9fpkt", shape=diamond, color=yellow];
521[label="211.5.121.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
1522[label="42.174.97.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
2784[label="211.5.121.87;s;1pkt 1fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.189.10.95:26976}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26976: (25%)&lt;BR/&gt; 4824: (12.5%)&lt;BR/&gt; 1406: (12.5%)&lt;BR/&gt; 1516: (8.33333%)&lt;BR/&gt; 1401: (8.33333%)&gt;];
}
426--521[label="1;1pkt 1fpkt"];
426--1522[label="1;1pkt 1fpkt"];
426--2784[label="1;1pkt 1fpkt"];
521--2784[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.10.95" dst_port="26976"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
527[label="133.219.10.192;s;19pkt 19fpkt", shape=diamond, color=yellow];
528[label="64.170.32.95;d;2pkt 2fpkt", shape=diamond, color=yellow];
1643[label="67.58.114.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
4949[label="133.219.10.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6149[label="133.219.10.192;2pkt 2fpkt", shape=invtriangle, color=brown];
6761[label="133.219.10.192;2pkt 2fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.219.10.192:80, *:*}[73.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 49579: (8.92857%)&lt;BR/&gt; 37337: (8.92857%)&lt;BR/&gt; 33501: (8.92857%)&lt;BR/&gt; 1769: (8.92857%)&gt;];
}
527--528[label="1;2pkt 2fpkt"];
527--1643[label="1;1pkt 1fpkt"];
527--4949[label="1;2pkt 2fpkt"];
527--6149[label="1;2pkt 2fpkt"];
527--6761[label="1;2pkt 2fpkt"];
528--4949[label="0.5;1pkt 1fpkt"];
528--6149[label="0.5;1pkt 1fpkt"];
528--6761[label="0.5;1pkt 1fpkt"];
1643--4949[label="1;1pkt 1fpkt"];
1643--6149[label="1;1pkt 1fpkt"];
1643--6761[label="1;1pkt 1fpkt"];
4949--6149[label="1;2pkt 2fpkt"];
4949--6761[label="1;2pkt 2fpkt"];
6149--6761[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="133.219.10.192" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16479,1.79901,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
61[label="219.131.9.197s;1pkt 1fpkt", shape=rectangle, color=red];
541[label="129.0.0.148;d;3pkt 3fpkt", shape=diamond, color=yellow];
803[label="219.131.9.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
3234[label="129.0.0.148;d;3pkt 3fpkt", shape=hexagon, color=black];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.36.47.41:26310, 129.0.0.148:64770}[33.3333%]&lt;BR/&gt;{200.36.47.196:26331, 129.0.0.148:64916}[33.3333%]&lt;BR/&gt;{219.131.9.197:15024, 129.0.0.148:64826}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64826: (25%)&lt;BR/&gt; 15024: (25%)&lt;BR/&gt; 64916: (12.5%)&lt;BR/&gt; 64770: (12.5%)&lt;BR/&gt; 26331: (12.5%)&gt;];
}
61--541[label="1;1pkt 1fpkt"];
61--803[label="1;1pkt 1fpkt"];
61--3234[label="1;1pkt 1fpkt"];
541--803[label="1;1pkt 1fpkt"];
541--3234[label="1;3pkt 3fpkt"];
803--3234[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.0.148" dst_port="64826" src_ip="219.131.9.197" src_port="15024"/>
      <filter dst_ip="129.0.0.148" dst_port="64916" src_ip="200.36.47.196" src_port="26331"/>
      <filter dst_ip="129.0.0.148" dst_port="64770" src_ip="200.36.47.41" src_port="26310"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989296,1.72143,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
86[label="129.0.2.123s;1pkt 1fpkt", shape=rectangle, color=red];
638[label="201.251.4.142;s;6pkt 6fpkt", shape=diamond, color=yellow];
639[label="201.78.12.180;d;2pkt 2fpkt", shape=diamond, color=yellow];
1285[label="215.16.77.177;d;2pkt 2fpkt", shape=diamond, color=yellow];
4620[label="201.251.4.142;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5951[label="201.251.4.142;5pkt 5fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.4.142:*, *:8000}[33.3333%]&lt;BR/&gt;{201.251.4.142:*, 215.16.77.177:*}[33.3333%]&lt;BR/&gt;{201.251.4.142:*, 201.78.12.180:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (13.6364%)&lt;BR/&gt; 1575: (11.3636%)&lt;BR/&gt; 1233: (11.3636%)&lt;BR/&gt; 1256: (9.09091%)&lt;BR/&gt; 1231: (9.09091%)&gt;];
}
86--638[label="1;1pkt 1fpkt"];
86--639[label="1;1pkt 1fpkt"];
86--4620[label="1;1pkt 1fpkt"];
86--5951[label="1;1pkt 1fpkt"];
638--639[label="1;2pkt 2fpkt"];
638--1285[label="1;2pkt 2fpkt"];
638--4620[label="1;6pkt 6fpkt"];
638--5951[label="1;5pkt 5fpkt"];
639--4620[label="1;2pkt 2fpkt"];
639--5951[label="1;2pkt 2fpkt"];
1285--4620[label="1;2pkt 2fpkt"];
1285--5951[label="0.5;1pkt 1fpkt"];
4620--5951[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.78.12.180" src_ip="201.251.4.142"/>
      <filter dst_ip="215.16.77.177" src_ip="201.251.4.142"/>
      <filter dst_port="8000" src_ip="201.251.4.142"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
646[label="162.112.136.97;d;5pkt 5fpkt", shape=diamond, color=yellow];
647[label="209.22.101.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.22.100.32:32932, 162.112.136.97:33443}[20%]&lt;BR/&gt;{209.22.101.49:20036, 162.112.136.97:1033}[20%]&lt;BR/&gt;{209.22.100.52:32931, 162.112.136.97:33444}[20%]&lt;BR/&gt;{209.22.100.53:32832, 162.112.136.97:33444}[20%]&lt;BR/&gt;{209.22.100.54:32831, 162.112.136.97:33444}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33444: (25%)&lt;BR/&gt; 20036: (16.6667%)&lt;BR/&gt; 1033: (16.6667%)&lt;BR/&gt; 33443: (8.33333%)&lt;BR/&gt; 32932: (8.33333%)&gt;];
}
646--647[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.112.136.97" dst_port="33444" src_ip="209.22.100.54" src_port="32831"/>
      <filter dst_ip="162.112.136.97" dst_port="33444" src_ip="209.22.100.53" src_port="32832"/>
      <filter dst_ip="162.112.136.97" dst_port="33444" src_ip="209.22.100.52" src_port="32931"/>
      <filter dst_ip="162.112.136.97" dst_port="1033" src_ip="209.22.101.49" src_port="20036"/>
      <filter dst_ip="162.112.136.97" dst_port="33443" src_ip="209.22.100.32" src_port="32932"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="94.221.184.127"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107320823" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
773[label="201.242.147.72;s;1081pkt 1081fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.147.72:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.7752%)&lt;BR/&gt; 32768: (1.52636%)&lt;BR/&gt; 32769: (0.832562%)&lt;BR/&gt; 9253: (0.647549%)&lt;BR/&gt; 1024: (0.508788%)&gt;];
}
773--3549[label="0.00370028;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="201.242.147.72" src_port="53"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
786[label="201.251.29.65;s;3pkt 3fpkt", shape=diamond, color=yellow];
787[label="214.85.40.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
2690[label="201.251.29.65;s;3pkt 3fpkt", shape=hexagon, color=black];
2986[label="214.85.40.50;d;1pkt 1fpkt", shape=hexagon, color=black];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.29.65:4288, 214.85.40.50:3321}[33.3333%]&lt;BR/&gt;{201.251.29.65:4304, 215.235.37.53:18434}[33.3333%]&lt;BR/&gt;{201.251.29.65:4352, 88.8.223.87:4661}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4288: (25%)&lt;BR/&gt; 3321: (25%)&lt;BR/&gt; 18434: (12.5%)&lt;BR/&gt; 4661: (12.5%)&lt;BR/&gt; 4352: (12.5%)&gt;];
}
786--787[label="1;1pkt 1fpkt"];
786--2690[label="1;3pkt 3fpkt"];
786--2986[label="1;1pkt 1fpkt"];
787--2690[label="1;1pkt 1fpkt"];
787--2986[label="1;1pkt 1fpkt"];
2690--2986[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="88.8.223.87" dst_port="4661" src_ip="201.251.29.65" src_port="4352"/>
      <filter dst_ip="215.235.37.53" dst_port="18434" src_ip="201.251.29.65" src_port="4304"/>
      <filter dst_ip="214.85.40.50" dst_port="3321" src_ip="201.251.29.65" src_port="4288"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
534[label="201.251.29.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
788[label="214.85.40.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
2616[label="214.85.40.50;s;1pkt 1fpkt", shape=hexagon, color=black];
3977[label="214.85.40.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.85.40.50:3321, 201.251.29.65:4288}[50%]&lt;BR/&gt;{215.235.37.53:18434, 201.251.29.65:4304}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4288: (40%)&lt;BR/&gt; 3321: (40%)&lt;BR/&gt; 18434: (10%)&lt;BR/&gt; 4304: (10%)&gt;];
}
534--788[label="1;1pkt 1fpkt"];
534--2616[label="1;1pkt 1fpkt"];
534--3977[label="1;1pkt 1fpkt"];
788--2616[label="1;1pkt 1fpkt"];
788--3977[label="1;1pkt 1fpkt"];
2616--3977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.251.29.65" dst_port="4304" src_ip="215.235.37.53" src_port="18434"/>
      <filter dst_ip="201.251.29.65" dst_port="4288" src_ip="214.85.40.50" src_port="3321"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
789[label="148.189.233.139;d;3pkt 3fpkt", shape=diamond, color=yellow];
790[label="162.155.220.244;s;3pkt 3fpkt", shape=diamond, color=yellow];
5298[label="162.155.220.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.155.220.244:554, 148.189.233.139:3330}[33.3333%]&lt;BR/&gt;{162.155.220.244:5004, 148.189.233.139:3332}[33.3333%]&lt;BR/&gt;{162.155.220.244:5004, 148.189.233.139:3334}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5004: (35.7143%)&lt;BR/&gt; 3334: (21.4286%)&lt;BR/&gt; 3332: (14.2857%)&lt;BR/&gt; 3330: (14.2857%)&lt;BR/&gt; 554: (14.2857%)&gt;];
}
789--790[label="1;3pkt 3fpkt"];
789--5298[label="1;1pkt 1fpkt"];
790--5298[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.233.139" dst_port="3334" src_ip="162.155.220.244" src_port="5004"/>
      <filter dst_ip="148.189.233.139" dst_port="3332" src_ip="162.155.220.244" src_port="5004"/>
      <filter dst_ip="148.189.233.139" dst_port="3330" src_ip="162.155.220.244" src_port="554"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
542[label="219.131.9.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
802[label="129.0.0.148;s;59pkt 59fpkt", shape=diamond, color=yellow];
2991[label="219.131.9.197;d;1pkt 1fpkt", shape=hexagon, color=black];
3356[label="129.0.0.148;s;59pkt 59fpkt", shape=hexagon, color=black];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.0.148:*, 95.152.25.61:80}[86.4407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5%)&lt;BR/&gt; 64826: (1.66667%)&lt;BR/&gt; 15024: (1.66667%)&lt;BR/&gt; 64755: (0.833333%)&lt;BR/&gt; 1863: (0.833333%)&gt;];
}
542--802[label="1;1pkt 1fpkt"];
542--2991[label="1;1pkt 1fpkt"];
542--3356[label="1;1pkt 1fpkt"];
802--2991[label="1;1pkt 1fpkt"];
802--3356[label="1;59pkt 59fpkt"];
2991--3356[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="95.152.25.61" dst_port="80" src_ip="129.0.0.148"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
810[label="95.186.181.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
811[label="133.63.211.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
2791[label="133.63.211.70;s;1pkt 1fpkt", shape=hexagon, color=black];
4119[label="133.63.211.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.211.70:49999, 95.186.181.172:8002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49999: (50%)&lt;BR/&gt; 8002: (50%)&gt;];
}
810--811[label="1;1pkt 1fpkt"];
810--2791[label="1;1pkt 1fpkt"];
810--4119[label="1;1pkt 1fpkt"];
811--2791[label="1;1pkt 1fpkt"];
811--4119[label="1;1pkt 1fpkt"];
2791--4119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="95.186.181.172" dst_port="8002" src_ip="133.63.211.70" src_port="49999"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
471[label="200.124.242.244;s;125pkt 125fpkt", shape=diamond, color=yellow];
852[label="193.10.184.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
863[label="194.107.118.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
1194[label="194.203.135.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
2402[label="220.181.227.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
2598[label="200.124.242.244;s;125pkt 125fpkt", shape=hexagon, color=black];
2705[label="193.10.184.55;d;1pkt 1fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.242.244:53, *:*}[34.4%]&lt;BR/&gt;{200.124.242.244:80, *:*}[28.8%]&lt;BR/&gt;{200.124.242.244:*, *:53}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (28.6275%)&lt;BR/&gt; 80: (14.1176%)&lt;BR/&gt; 0: (12.1569%)&lt;BR/&gt; 4753: (8.62745%)&lt;BR/&gt; 32768: (2.35294%)&gt;];
}
471--852[label="1;1pkt 1fpkt"];
471--863[label="1;1pkt 1fpkt"];
471--1194[label="1;1pkt 1fpkt"];
471--1514[label="0.00917431;1pkt 1fpkt"];
471--1730[label="0.008;1pkt 1fpkt"];
471--2125[label="0.00877193;1pkt 1fpkt"];
471--2402[label="1;1pkt 1fpkt"];
471--2598[label="1;125pkt 125fpkt"];
471--2705[label="1;1pkt 1fpkt"];
471--3222[label="0.00909091;1pkt 1fpkt"];
471--3549[label="0.016;2pkt 2fpkt"];
852--2598[label="1;1pkt 1fpkt"];
852--2705[label="1;1pkt 1fpkt"];
863--2598[label="1;1pkt 1fpkt"];
1194--2598[label="1;1pkt 1fpkt"];
2402--2598[label="1;1pkt 1fpkt"];
2598--2705[label="1;1pkt 1fpkt"];
2598--3222[label="0.00909091;1pkt 1fpkt"];
2598--3549[label="0.016;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.242.244" src_port="53"/>
      <filter src_ip="200.124.242.244" src_port="80"/>
      <filter dst_port="53" src_ip="200.124.242.244"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,501,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
905[label="201.251.2.198;d;11pkt 11fpkt", shape=diamond, color=yellow];
914[label="210.119.182.238;s;3pkt 3fpkt", shape=diamond, color=yellow];
5260[label="210.119.182.238;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6340[label="210.119.182.238;5pkt 5fpkt", shape=invtriangle, color=brown];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.119.182.238:21, 201.251.2.198:*}[26.6667%]&lt;BR/&gt;{201.78.128.55:80, 201.251.2.198:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.9167%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 2856: (8.33333%)&lt;BR/&gt; 1208: (8.33333%)&lt;BR/&gt; 1207: (8.33333%)&gt;];
}
905--914[label="0.666667;2pkt 2fpkt"];
905--5260[label="0.4;2pkt 2fpkt"];
905--6340[label="0.4;2pkt 2fpkt"];
914--5260[label="0.666667;2pkt 2fpkt"];
914--6340[label="0.666667;2pkt 2fpkt"];
5260--6340[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.251.2.198" src_ip="210.119.182.238" src_port="21"/>
      <filter dst_ip="201.251.2.198" src_ip="201.78.128.55" src_port="80"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
916[label="214.14.193.83;d;4pkt 4fpkt", shape=diamond, color=yellow];
917[label="200.124.241.170;s;15pkt 15fpkt", shape=diamond, color=yellow];
3402[label="200.124.241.170;s;15pkt 15fpkt", shape=hexagon, color=black];
4823[label="200.124.241.170;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6077[label="200.124.241.170;15pkt 15fpkt", shape=invtriangle, color=brown];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.241.170:*, 211.128.68.127:*}[53.3333%]&lt;BR/&gt;{200.124.241.170:21, *:*}[26.6667%]&lt;BR/&gt;{200.124.241.170:*, 214.14.193.83:*}[26.6667%]&lt;BR/&gt;{200.124.241.170:0, *:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (18.75%)&lt;BR/&gt; 21: (14.0625%)&lt;BR/&gt; 49357: (3.90625%)&lt;BR/&gt; 43001: (3.90625%)&lt;BR/&gt; 2121: (3.90625%)&gt;];
}
916--917[label="1;4pkt 4fpkt"];
916--3402[label="1;4pkt 4fpkt"];
916--4823[label="1;4pkt 4fpkt"];
916--6077[label="1;4pkt 4fpkt"];
917--3402[label="1;15pkt 15fpkt"];
917--4823[label="1;15pkt 15fpkt"];
917--6077[label="1;15pkt 15fpkt"];
3402--4823[label="1;15pkt 15fpkt"];
3402--6077[label="1;15pkt 15fpkt"];
4823--6077[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="211.128.68.127" src_ip="200.124.241.170"/>
      <filter dst_ip="214.14.193.83" src_ip="200.124.241.170"/>
      <filter src_ip="200.124.241.170" src_port="21"/>
      <filter src_ip="200.124.241.170"/>
    </slice>
    <from sec="1107320416" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
933[label="209.183.201.119;d;14pkt 14fpkt", shape=diamond, color=yellow];
934[label="201.251.28.72;s;16pkt 16fpkt", shape=diamond, color=yellow];
3064[label="201.251.28.72;s;16pkt 16fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.28.72:*, 209.183.201.119:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8261%)&lt;BR/&gt; 0: (4.34783%)&lt;BR/&gt; 2724: (3.26087%)&lt;BR/&gt; 2722: (3.26087%)&lt;BR/&gt; 2720: (3.26087%)&gt;];
}
933--934[label="1;14pkt 14fpkt"];
933--3064[label="1;14pkt 14fpkt"];
933--3550[label="0.142857;2pkt 2fpkt"];
933--3559[label="0.0714286;1pkt 1fpkt"];
933--3562[label="0.142857;2pkt 2fpkt"];
934--1834[label="0.0625;1pkt 1fpkt"];
934--3064[label="1;16pkt 16fpkt"];
934--3550[label="0.1875;3pkt 3fpkt"];
934--3559[label="0.125;2pkt 2fpkt"];
934--3562[label="0.1875;3pkt 3fpkt"];
3064--3550[label="0.1875;3pkt 3fpkt"];
3064--3559[label="0.125;2pkt 2fpkt"];
3064--3562[label="0.1875;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.183.201.119" dst_port="80" src_ip="201.251.28.72"/>
    </slice>
    <from sec="1107320456" usec="0"/>
    <to sec="1107320932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.17.64.2"/>
      <from sec="1107320878" usec="0"/>
      <to sec="1107321213" usec="0"/>
    </slice>
    <from sec="1107320878" usec="0"/>
    <to sec="1107321213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.18.128.41"/>
      <from sec="1107320879" usec="0"/>
      <to sec="1107321213" usec="0"/>
    </slice>
    <from sec="1107320879" usec="0"/>
    <to sec="1107321213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
637[label="129.1.164.34;s;528pkt 528fpkt", shape=diamond, color=yellow];
971[label="93.186.132.46;d;512pkt 512fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.164.34:*, 93.186.132.46:80}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7115%)&lt;BR/&gt; 7001: (0.0961538%)&lt;BR/&gt; 2924: (0.0961538%)&lt;BR/&gt; 2923: (0.0961538%)&lt;BR/&gt; 2921: (0.0961538%)&gt;];
}
637--850[label="0.0023753;1pkt 1fpkt"];
637--971[label="1;512pkt 512fpkt"];
637--1085[label="0.012987;1pkt 1fpkt"];
637--1766[label="0.00680272;1pkt 1fpkt"];
637--1785[label="0.00621118;2pkt 2fpkt"];
637--2625[label="0.0102041;1pkt 1fpkt"];
637--2982[label="0.00934579;1pkt 1fpkt"];
637--3371[label="0.00621118;2pkt 2fpkt"];
637--3540[label="0.0113636;6pkt 6fpkt"];
637--3550[label="0.0170455;9pkt 9fpkt"];
637--3559[label="0.0757576;40pkt 40fpkt"];
637--3562[label="0.0170455;9pkt 9fpkt"];
971--3540[label="0.00976562;5pkt 5fpkt"];
971--3550[label="0.00976562;5pkt 5fpkt"];
971--3559[label="0.078125;40pkt 40fpkt"];
971--3562[label="0.00976562;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="93.186.132.46" dst_port="80" src_ip="129.1.164.34"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
995[label="148.189.174.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
996[label="210.48.143.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
3330[label="210.48.143.218;s;1pkt 1fpkt", shape=hexagon, color=black];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.48.143.218:9987, 148.189.174.27:2533}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9987: (50%)&lt;BR/&gt; 2533: (50%)&gt;];
}
995--996[label="1;1pkt 1fpkt"];
995--3330[label="1;1pkt 1fpkt"];
996--3330[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.174.27" dst_port="2533" src_ip="210.48.143.218" src_port="9987"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
680[label="129.0.76.94;d;4pkt 4fpkt", shape=diamond, color=yellow];
1003[label="220.88.161.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.61.185.35:1027, 129.0.76.94:2961}[25%]&lt;BR/&gt;{146.50.221.96:1024, 129.0.76.94:3335}[25%]&lt;BR/&gt;{144.246.158.182:1024, 129.0.76.94:2756}[25%]&lt;BR/&gt;{220.88.161.217:1081, 129.0.76.94:4488}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4488: (20%)&lt;BR/&gt; 1081: (20%)&lt;BR/&gt; 1024: (20%)&lt;BR/&gt; 3335: (10%)&lt;BR/&gt; 2961: (10%)&gt;];
}
680--1003[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.76.94" dst_port="4488" src_ip="220.88.161.217" src_port="1081"/>
      <filter dst_ip="129.0.76.94" dst_port="2756" src_ip="144.246.158.182" src_port="1024"/>
      <filter dst_ip="129.0.76.94" dst_port="3335" src_ip="146.50.221.96" src_port="1024"/>
      <filter dst_ip="129.0.76.94" dst_port="2961" src_ip="141.61.185.35" src_port="1027"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
706[label="129.1.210.6;s;2pkt 2fpkt", shape=diamond, color=yellow];
1008[label="220.208.228.151;d;2pkt 2fpkt", shape=diamond, color=yellow];
2765[label="220.208.228.151;d;2pkt 2fpkt", shape=hexagon, color=black];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.210.6:3995, 220.208.228.151:7070}[50%]&lt;BR/&gt;{129.1.210.6:3996, 220.208.228.151:7070}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (50%)&lt;BR/&gt; 3996: (25%)&lt;BR/&gt; 3995: (25%)&gt;];
}
706--1008[label="1;2pkt 2fpkt"];
706--2765[label="1;2pkt 2fpkt"];
1008--2765[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.208.228.151" dst_port="7070" src_ip="129.1.210.6" src_port="3996"/>
      <filter dst_ip="220.208.228.151" dst_port="7070" src_ip="129.1.210.6" src_port="3995"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
751[label="161.69.109.113;d;6pkt 6fpkt", shape=diamond, color=yellow];
1043[label="212.8.38.52;s;6pkt 6fpkt", shape=diamond, color=yellow];
2781[label="212.8.38.52;s;3pkt 3fpkt", shape=hexagon, color=black];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.8.38.52:80, 161.69.109.113:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2375: (10%)&lt;BR/&gt; 2374: (10%)&lt;BR/&gt; 2356: (10%)&lt;BR/&gt; 2398: (6.66667%)&gt;];
}
751--1043[label="1;6pkt 6fpkt"];
751--2781[label="1;3pkt 3fpkt"];
1043--2781[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.109.113" src_ip="212.8.38.52" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
359[label="148.189.52.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1047[label="153.152.95.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
3102[label="148.189.52.232;s;1pkt 1fpkt", shape=hexagon, color=black];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.189.52.232:53804, 153.152.95.242:54635}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54635: (50%)&lt;BR/&gt; 53804: (50%)&gt;];
}
359--1047[label="1;1pkt 1fpkt"];
359--3102[label="1;1pkt 1fpkt"];
1047--3102[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.152.95.242" dst_port="54635" src_ip="148.189.52.232" src_port="53804"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
522[label="129.1.192.89;s;23pkt 23fpkt", shape=diamond, color=yellow];
1049[label="65.45.62.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.192.89:7287, *:*}[60.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7287: (26.9231%)&lt;BR/&gt; 61577: (3.84615%)&lt;BR/&gt; 53678: (3.84615%)&lt;BR/&gt; 38514: (3.84615%)&lt;BR/&gt; 2418: (3.84615%)&gt;];
}
522--1049[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="129.1.192.89" src_port="7287"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
1074[label="95.10.1.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
1075[label="129.0.133.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
2695[label="129.0.133.137;s;1pkt 1fpkt", shape=hexagon, color=black];
4584[label="129.0.133.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.133.137:49162, 95.10.1.70:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49162: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1074--1075[label="1;1pkt 1fpkt"];
1074--2695[label="1;1pkt 1fpkt"];
1074--4584[label="1;1pkt 1fpkt"];
1075--2695[label="1;1pkt 1fpkt"];
1075--4584[label="1;1pkt 1fpkt"];
2695--4584[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="95.10.1.70" dst_port="554" src_ip="129.0.133.137" src_port="49162"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.238.206.241"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1090[label="40.248.11.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1091[label="129.0.92.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
2897[label="40.248.11.5;d;1pkt 1fpkt", shape=hexagon, color=black];
2999[label="129.0.92.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.92.217:4773, 40.248.11.5:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4773: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1090--1091[label="1;1pkt 1fpkt"];
1090--2897[label="1;1pkt 1fpkt"];
1090--2999[label="1;1pkt 1fpkt"];
1091--2897[label="1;1pkt 1fpkt"];
1091--2999[label="1;1pkt 1fpkt"];
2897--2999[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.248.11.5" dst_port="554" src_ip="129.0.92.217" src_port="4773"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
1121[label="209.213.236.188;s;1540pkt 1540fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.213.236.188:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65369: (0.0649351%)&lt;BR/&gt; 59765: (0.0649351%)&lt;BR/&gt; 55892: (0.0649351%)&lt;BR/&gt; 53114: (0.0649351%)&gt;];
}
1121--2749[label="0.000649351;1pkt 1fpkt"];
1121--2858[label="0.00146306;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="209.213.236.188" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
1264[label="128.77.20.243;d;79pkt 79fpkt", shape=diamond, color=yellow];
1265[label="129.0.72.164;s;81pkt 81fpkt", shape=diamond, color=yellow];
2740[label="128.77.20.243;d;60pkt 60fpkt", shape=hexagon, color=black];
2848[label="129.0.72.164;s;81pkt 81fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.72.164:*, 128.77.20.243:80}[97.5309%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25800: (0.664452%)&lt;BR/&gt; 25799: (0.664452%)&lt;BR/&gt; 25798: (0.664452%)&lt;BR/&gt; 25797: (0.664452%)&gt;];
}
1264--1265[label="1;79pkt 79fpkt"];
1264--2740[label="1;60pkt 60fpkt"];
1264--2848[label="1;79pkt 79fpkt"];
1265--2740[label="1;60pkt 60fpkt"];
1265--2848[label="1;81pkt 81fpkt"];
1265--3559[label="0.0123457;1pkt 1fpkt"];
2740--2848[label="1;60pkt 60fpkt"];
2848--3559[label="0.0123457;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.77.20.243" dst_port="80" src_ip="129.0.72.164"/>
    </slice>
    <from sec="1107320605" usec="0"/>
    <to sec="1107320768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16479,1.79901,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
127[label="218.163.149.1s;402pkt 402fpkt", shape=rectangle, color=red];
1271[label="218.163.149.1;s;1014pkt 1014fpkt", shape=diamond, color=yellow];
2743[label="218.163.149.1;s;532pkt 532fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.163.149.1:*, *:42}[25.0493%]&lt;BR/&gt;{218.163.149.1:*, *:5900}[25.0493%]&lt;BR/&gt;{218.163.149.1:*, *:4899}[24.9507%]&lt;BR/&gt;{218.163.149.1:*, *:6101}[24.9507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (12.5257%)&lt;BR/&gt; 42: (12.5257%)&lt;BR/&gt; 6101: (12.5%)&lt;BR/&gt; 4899: (12.4487%)&lt;BR/&gt; 4555: (0.102669%)&gt;];
}
127--1271[label="1;402pkt 402fpkt"];
127--2743[label="0.159204;64pkt 64fpkt"];
1271--2743[label="1;532pkt 532fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="218.163.149.1"/>
      <filter dst_port="42" src_ip="218.163.149.1"/>
      <filter dst_port="6101" src_ip="218.163.149.1"/>
      <filter dst_port="4899" src_ip="218.163.149.1"/>
    </slice>
    <from sec="1107320655" usec="0"/>
    <to sec="1107320721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="42.129.117.174"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
839[label="209.22.101.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
1346[label="133.63.112.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
4261[label="133.63.112.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.112.87:49298, 209.22.101.36:20474}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49298: (50%)&lt;BR/&gt; 20474: (50%)&gt;];
}
839--1346[label="1;1pkt 1fpkt"];
839--4261[label="1;1pkt 1fpkt"];
1346--4261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.22.101.36" dst_port="20474" src_ip="133.63.112.87" src_port="49298"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
510[label="133.63.194.44;s;320pkt 320fpkt", shape=diamond, color=yellow];
1183[label="93.75.101.162;d;21pkt 21fpkt", shape=diamond, color=yellow];
1356[label="65.90.144.136;d;152pkt 152fpkt", shape=diamond, color=yellow];
2783[label="133.63.194.44;s;155pkt 155fpkt", shape=hexagon, color=black];
3093[label="93.75.101.162;d;21pkt 21fpkt", shape=hexagon, color=black];
3944[label="133.63.194.44;339pkt 339fpkt", shape=pentagon, color=darkviolet];
5565[label="133.63.194.44;340pkt 340fpkt", shape=invtriangle, color=brown];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.194.44:80, 65.90.144.136:*}[45.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4065%)&lt;BR/&gt; 0: (1.18694%)&lt;BR/&gt; 60344: (0.18546%)&lt;BR/&gt; 60336: (0.18546%)&lt;BR/&gt; 60245: (0.18546%)&gt;];
}
510--1183[label="1;21pkt 21fpkt"];
510--1356[label="1;152pkt 152fpkt"];
510--2783[label="1;155pkt 155fpkt"];
510--3093[label="1;21pkt 21fpkt"];
510--3944[label="0.996875;319pkt 319fpkt"];
510--5565[label="1;320pkt 320fpkt"];
1183--3093[label="1;21pkt 21fpkt"];
1183--3944[label="1;21pkt 21fpkt"];
1183--5565[label="1;21pkt 21fpkt"];
1356--2783[label="0.467105;71pkt 71fpkt"];
1356--3944[label="1;152pkt 152fpkt"];
1356--5565[label="1;152pkt 152fpkt"];
2783--3944[label="1;155pkt 155fpkt"];
2783--5565[label="1;155pkt 155fpkt"];
3093--3944[label="1;21pkt 21fpkt"];
3093--5565[label="1;21pkt 21fpkt"];
3944--5565[label="1;339pkt 339fpkt"];
</description>
    <slice>
      <filter dst_ip="65.90.144.136" src_ip="133.63.194.44" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1358[label="133.130.227.86;d;603pkt 603fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.130.227.86:4662}[98.6733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (49.3367%)&lt;BR/&gt; 9898: (0.165837%)&lt;BR/&gt; 5554: (0.165837%)&lt;BR/&gt; 4813: (0.165837%)&lt;BR/&gt; 4753: (0.165837%)&gt;];
}
1358--2744[label="0.00497512;3pkt 3fpkt"];
1358--3543[label="0.00165837;1pkt 1fpkt"];
1358--3544[label="0.00165837;1pkt 1fpkt"];
1358--3545[label="0.00165837;1pkt 1fpkt"];
1358--5174[label="0.00497512;3pkt 3fpkt"];
1358--6295[label="0.00497512;3pkt 3fpkt"];
1358--6822[label="0.00497512;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.130.227.86" dst_port="4662"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
994[label="201.242.146.85;s;378pkt 378fpkt", shape=diamond, color=yellow];
1303[label="26.193.227.6;d;2pkt 2fpkt", shape=diamond, color=yellow];
1378[label="92.69.55.56;d;4pkt 4fpkt", shape=diamond, color=yellow];
1554[label="69.80.143.223;d;4pkt 4fpkt", shape=diamond, color=yellow];
1594[label="89.13.13.106;d;4pkt 4fpkt", shape=diamond, color=yellow];
1743[label="88.12.146.148;d;4pkt 4fpkt", shape=diamond, color=yellow];
1793[label="5.85.36.121;d;7pkt 7fpkt", shape=diamond, color=yellow];
1804[label="154.71.249.121;d;2pkt 2fpkt", shape=diamond, color=yellow];
1805[label="208.192.42.108;d;3pkt 3fpkt", shape=diamond, color=yellow];
1948[label="93.1.212.66;d;4pkt 4fpkt", shape=diamond, color=yellow];
1963[label="93.244.61.74;d;4pkt 4fpkt", shape=diamond, color=yellow];
2184[label="205.174.244.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
2911[label="89.13.13.106;d;3pkt 3fpkt", shape=hexagon, color=black];
3225[label="26.193.227.6;d;1pkt 1fpkt", shape=hexagon, color=black];
3255[label="154.71.249.121;d;1pkt 1fpkt", shape=hexagon, color=black];
3329[label="88.12.146.148;d;4pkt 4fpkt", shape=hexagon, color=black];
4242[label="201.242.146.85;454pkt 454fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.146.85:16770, *:*}[40.3084%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16770: (21.5341%)&lt;BR/&gt; 6881: (7.32955%)&lt;BR/&gt; 6882: (3.06818%)&lt;BR/&gt; 6883: (2.21591%)&lt;BR/&gt; 80: (1.76136%)&gt;];
}
994--1303[label="0.5;1pkt 1fpkt"];
994--1378[label="1;4pkt 4fpkt"];
994--1429[label="0.0212766;1pkt 1fpkt"];
994--1554[label="1;4pkt 4fpkt"];
994--1594[label="0.75;3pkt 3fpkt"];
994--1743[label="1;4pkt 4fpkt"];
994--1793[label="1;7pkt 7fpkt"];
994--1804[label="0.5;1pkt 1fpkt"];
994--1805[label="1;3pkt 3fpkt"];
994--1833[label="0.00854701;1pkt 1fpkt"];
994--1948[label="1;4pkt 4fpkt"];
994--1963[label="1;4pkt 4fpkt"];
994--2184[label="1;1pkt 1fpkt"];
994--2425[label="0.0133333;1pkt 1fpkt"];
994--2911[label="1;3pkt 3fpkt"];
994--3225[label="1;1pkt 1fpkt"];
994--3255[label="1;1pkt 1fpkt"];
994--3329[label="1;4pkt 4fpkt"];
994--3559[label="0.00793651;3pkt 3fpkt"];
994--4242[label="1;378pkt 378fpkt"];
1303--3225[label="1;1pkt 1fpkt"];
1303--4242[label="1;2pkt 2fpkt"];
1378--4242[label="1;4pkt 4fpkt"];
1554--4242[label="1;4pkt 4fpkt"];
1594--2911[label="1;3pkt 3fpkt"];
1594--4242[label="1;4pkt 4fpkt"];
1743--3329[label="1;4pkt 4fpkt"];
1743--4242[label="1;4pkt 4fpkt"];
1793--4242[label="1;7pkt 7fpkt"];
1804--3255[label="1;1pkt 1fpkt"];
1804--4242[label="1;2pkt 2fpkt"];
1805--4242[label="1;3pkt 3fpkt"];
1948--4242[label="1;4pkt 4fpkt"];
1963--4242[label="1;4pkt 4fpkt"];
2184--4242[label="1;1pkt 1fpkt"];
2911--4242[label="1;3pkt 3fpkt"];
3225--4242[label="1;1pkt 1fpkt"];
3255--4242[label="1;1pkt 1fpkt"];
3329--4242[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="201.242.146.85" src_port="16770"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
656[label="129.0.52.21;s;5pkt 5fpkt", shape=diamond, color=yellow];
1284[label="217.106.33.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
1379[label="207.117.73.105;d;3pkt 3fpkt", shape=diamond, color=yellow];
2753[label="129.0.52.21;s;5pkt 5fpkt", shape=hexagon, color=black];
3217[label="217.106.33.201;d;1pkt 1fpkt", shape=hexagon, color=black];
3752[label="129.0.52.21;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5456[label="129.0.52.21;4pkt 4fpkt", shape=invtriangle, color=brown];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.52.21:8277, 217.106.33.201:8292}[20%]&lt;BR/&gt;{129.0.52.21:8200, 217.106.33.232:8195}[20%]&lt;BR/&gt;{129.0.52.21:8199, 207.117.73.105:8195}[20%]&lt;BR/&gt;{129.0.52.21:8201, 207.117.73.105:8196}[20%]&lt;BR/&gt;{129.0.52.21:8202, 207.117.73.105:8196}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8196: (21.7391%)&lt;BR/&gt; 8195: (15.2174%)&lt;BR/&gt; 8292: (13.0435%)&lt;BR/&gt; 8277: (13.0435%)&lt;BR/&gt; 8202: (10.8696%)&gt;];
}
656--1284[label="1;1pkt 1fpkt"];
656--1379[label="1;3pkt 3fpkt"];
656--2753[label="1;5pkt 5fpkt"];
656--3217[label="1;1pkt 1fpkt"];
656--3752[label="1;4pkt 4fpkt"];
656--5456[label="1;4pkt 4fpkt"];
1284--2753[label="1;1pkt 1fpkt"];
1284--3217[label="1;1pkt 1fpkt"];
1284--3752[label="1;1pkt 1fpkt"];
1284--5456[label="1;1pkt 1fpkt"];
1379--2753[label="1;3pkt 3fpkt"];
1379--3752[label="0.666667;2pkt 2fpkt"];
1379--5456[label="0.666667;2pkt 2fpkt"];
2753--3217[label="1;1pkt 1fpkt"];
2753--3752[label="1;4pkt 4fpkt"];
2753--5456[label="1;4pkt 4fpkt"];
3217--3752[label="1;1pkt 1fpkt"];
3217--5456[label="1;1pkt 1fpkt"];
3752--5456[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="207.117.73.105" dst_port="8196" src_ip="129.0.52.21" src_port="8202"/>
      <filter dst_ip="207.117.73.105" dst_port="8196" src_ip="129.0.52.21" src_port="8201"/>
      <filter dst_ip="207.117.73.105" dst_port="8195" src_ip="129.0.52.21" src_port="8199"/>
      <filter dst_ip="217.106.33.232" dst_port="8195" src_ip="129.0.52.21" src_port="8200"/>
      <filter dst_ip="217.106.33.201" dst_port="8292" src_ip="129.0.52.21" src_port="8277"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1221[label="193.6.184.187;d;20pkt 20fpkt", shape=diamond, color=yellow];
1447[label="129.0.201.165;s;53pkt 53fpkt", shape=diamond, color=yellow];
3062[label="193.6.184.187;d;20pkt 20fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.201.165:*, 193.6.184.187:80}[37.7358%]&lt;BR/&gt;{129.0.201.165:*, 65.72.177.22:80}[22.6415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34390: (1.6129%)&lt;BR/&gt; 34379: (1.6129%)&lt;BR/&gt; 34375: (1.6129%)&lt;BR/&gt; 34374: (1.6129%)&gt;];
}
1221--1447[label="1;20pkt 20fpkt"];
1221--3062[label="1;20pkt 20fpkt"];
1221--3550[label="0.1;2pkt 2fpkt"];
1221--3559[label="0.1;2pkt 2fpkt"];
1221--3562[label="0.1;2pkt 2fpkt"];
1447--3062[label="1;20pkt 20fpkt"];
1447--3550[label="0.0377358;2pkt 2fpkt"];
1447--3559[label="0.0377358;2pkt 2fpkt"];
1447--3562[label="0.0377358;2pkt 2fpkt"];
3062--3550[label="0.1;2pkt 2fpkt"];
3062--3559[label="0.1;2pkt 2fpkt"];
3062--3562[label="0.1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.6.184.187" dst_port="80" src_ip="129.0.201.165"/>
      <filter dst_ip="65.72.177.22" dst_port="80" src_ip="129.0.201.165"/>
    </slice>
    <from sec="1107320452" usec="0"/>
    <to sec="1107320818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
1473[label="129.0.50.97;s;2pkt 2fpkt", shape=diamond, color=yellow];
1475[label="40.150.211.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
4327[label="129.0.50.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.50.97:2062, 40.150.211.8:80}[50%]&lt;BR/&gt;{129.0.50.97:2063, 40.150.211.11:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2063: (25%)&lt;BR/&gt; 2062: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
1473--1475[label="1;1pkt 1fpkt"];
1473--4327[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.150.211.11" dst_port="443" src_ip="129.0.50.97" src_port="2063"/>
      <filter dst_ip="40.150.211.8" dst_port="80" src_ip="129.0.50.97" src_port="2062"/>
    </slice>
    <from sec="1107320617" usec="0"/>
    <to sec="1107320756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
595[label="129.0.47.112;s;166pkt 166fpkt", shape=diamond, color=yellow];
949[label="212.8.38.49;d;2pkt 2fpkt", shape=diamond, color=yellow];
1483[label="212.8.38.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
2633[label="129.0.47.112;s;166pkt 166fpkt", shape=hexagon, color=black];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.47.112:*, 218.64.207.155:80}[46.988%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4048%)&lt;BR/&gt; 3682: (0.595238%)&lt;BR/&gt; 3210: (0.446429%)&lt;BR/&gt; 3207: (0.446429%)&lt;BR/&gt; 3167: (0.446429%)&gt;];
}
595--949[label="1;2pkt 2fpkt"];
595--1483[label="1;2pkt 2fpkt"];
595--2633[label="1;166pkt 166fpkt"];
595--3540[label="0.0060241;1pkt 1fpkt"];
595--3550[label="0.0120482;2pkt 2fpkt"];
595--3559[label="0.0060241;1pkt 1fpkt"];
595--3562[label="0.0120482;2pkt 2fpkt"];
949--2633[label="1;2pkt 2fpkt"];
949--3550[label="0.5;1pkt 1fpkt"];
949--3562[label="0.5;1pkt 1fpkt"];
1483--2633[label="1;2pkt 2fpkt"];
1483--3559[label="0.5;1pkt 1fpkt"];
2633--3540[label="0.0060241;1pkt 1fpkt"];
2633--3550[label="0.0120482;2pkt 2fpkt"];
2633--3559[label="0.0060241;1pkt 1fpkt"];
2633--3562[label="0.0120482;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.64.207.155" dst_port="80" src_ip="129.0.47.112"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107320835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1243[label="129.0.3.132;d;6pkt 6fpkt", shape=diamond, color=yellow];
1487[label="212.8.40.103;s;2pkt 2fpkt", shape=diamond, color=yellow];
2841[label="129.0.3.132;d;6pkt 6fpkt", shape=hexagon, color=black];
4362[label="212.8.40.103;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5802[label="212.8.40.103;1pkt 1fpkt", shape=invtriangle, color=brown];
6601[label="212.8.40.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.8.40.103:80, 129.0.3.132:*}[33.3333%]&lt;BR/&gt;{212.8.16.139:80, 129.0.3.132:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2275: (16.6667%)&lt;BR/&gt; 2267: (11.1111%)&lt;BR/&gt; 2256: (5.55556%)&lt;BR/&gt; 2251: (5.55556%)&gt;];
}
1243--1487[label="1;2pkt 2fpkt"];
1243--2841[label="1;6pkt 6fpkt"];
1243--4362[label="1;2pkt 2fpkt"];
1243--5802[label="1;1pkt 1fpkt"];
1243--6601[label="1;1pkt 1fpkt"];
1487--2841[label="1;2pkt 2fpkt"];
1487--4362[label="1;2pkt 2fpkt"];
1487--5802[label="1;1pkt 1fpkt"];
1487--6601[label="1;1pkt 1fpkt"];
2841--4362[label="1;2pkt 2fpkt"];
2841--5802[label="1;1pkt 1fpkt"];
2841--6601[label="1;1pkt 1fpkt"];
4362--5802[label="1;1pkt 1fpkt"];
4362--6601[label="1;1pkt 1fpkt"];
5802--6601[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.3.132" src_ip="212.8.16.139" src_port="80"/>
      <filter dst_ip="129.0.3.132" src_ip="212.8.40.103" src_port="80"/>
    </slice>
    <from sec="1107320520" usec="0"/>
    <to sec="1107320662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1496[label="218.18.42.238;s;2pkt 2fpkt", shape=diamond, color=yellow];
1497[label="129.0.234.10;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.18.42.238:80, 129.0.234.10:1347}[50%]&lt;BR/&gt;{218.18.42.238:80, 129.0.234.10:1348}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1348: (25%)&lt;BR/&gt; 1347: (25%)&gt;];
}
1496--1497[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.234.10" dst_port="1348" src_ip="218.18.42.238" src_port="80"/>
      <filter dst_ip="129.0.234.10" dst_port="1347" src_ip="218.18.42.238" src_port="80"/>
    </slice>
    <from sec="1107320695" usec="0"/>
    <to sec="1107320743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
1495[label="218.18.42.238;d;2pkt 2fpkt", shape=diamond, color=yellow];
1498[label="129.0.234.10;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.234.10:1347, 218.18.42.238:80}[50%]&lt;BR/&gt;{129.0.234.10:1348, 218.18.42.238:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1348: (25%)&lt;BR/&gt; 1347: (25%)&gt;];
}
1495--1498[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.18.42.238" dst_port="80" src_ip="129.0.234.10" src_port="1348"/>
      <filter dst_ip="218.18.42.238" dst_port="80" src_ip="129.0.234.10" src_port="1347"/>
    </slice>
    <from sec="1107320695" usec="0"/>
    <to sec="1107320743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.63.74.168"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321226" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
1617[label="65.108.122.82;d;61pkt 61fpkt", shape=diamond, color=yellow];
1618[label="161.69.77.122;s;66pkt 66fpkt", shape=diamond, color=yellow];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.77.122:80, 65.108.122.82:*}[89.5522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4868: (0.787402%)&lt;BR/&gt; 4851: (0.787402%)&lt;BR/&gt; 4802: (0.787402%)&lt;BR/&gt; 4741: (0.787402%)&gt;];
}
1617--1618[label="0.983607;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="65.108.122.82" src_ip="161.69.77.122" src_port="80"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.124.243.30"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1768[label="192.100.166.189;s;511pkt 511fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.100.166.189:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1768--2342[label="0.00518135;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.100.166.189"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.48.131.240"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
1736[label="205.193.196.189;d;4pkt 4fpkt", shape=diamond, color=yellow];
1781[label="200.124.244.69;s;114pkt 114fpkt", shape=diamond, color=yellow];
3370[label="200.124.244.69;s;114pkt 114fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.244.69:80, 93.26.190.42:*}[24.5614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1983%)&lt;BR/&gt; 7070: (1.2931%)&lt;BR/&gt; 0: (0.862069%)&lt;BR/&gt; 6970: (0.646552%)&lt;BR/&gt; 2993: (0.646552%)&gt;];
}
1736--1781[label="1;4pkt 4fpkt"];
1736--3370[label="1;4pkt 4fpkt"];
1781--3370[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_ip="93.26.190.42" src_ip="200.124.244.69" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
1869[label="129.1.164.1;s;57pkt 57fpkt", shape=diamond, color=yellow];
1887[label="64.56.27.53;d;46pkt 46fpkt", shape=diamond, color=yellow];
3581[label="129.1.164.1;60pkt 60fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.164.1:*, 64.56.27.53:80}[81.9672%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1595%)&lt;BR/&gt; 33619: (1.22699%)&lt;BR/&gt; 1588: (0.920245%)&lt;BR/&gt; 1587: (0.920245%)&lt;BR/&gt; 1586: (0.920245%)&gt;];
}
1869--1887[label="1;46pkt 46fpkt"];
1869--3559[label="0.0350877;2pkt 2fpkt"];
1869--3581[label="0.982456;56pkt 56fpkt"];
1887--3559[label="0.0434783;2pkt 2fpkt"];
1887--3581[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="64.56.27.53" dst_port="80" src_ip="129.1.164.1"/>
    </slice>
    <from sec="1107320486" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
1686[label="129.0.164.87;s;93pkt 93fpkt", shape=diamond, color=yellow];
1891[label="206.1.76.144;d;84pkt 84fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.164.87:*, 206.1.76.144:80}[88.2979%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.435%)&lt;BR/&gt; 38082: (0.564972%)&lt;BR/&gt; 38081: (0.564972%)&lt;BR/&gt; 38080: (0.564972%)&lt;BR/&gt; 38079: (0.564972%)&gt;];
}
1686--1891[label="0.988095;83pkt 83fpkt"];
1686--2098[label="0.0107527;1pkt 1fpkt"];
1686--2873[label="0.0107527;1pkt 1fpkt"];
1686--3013[label="0.0107527;1pkt 1fpkt"];
1686--3212[label="0.0107527;1pkt 1fpkt"];
1686--3521[label="0.0107527;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.1.76.144" dst_port="80" src_ip="129.0.164.87"/>
    </slice>
    <from sec="1107320595" usec="0"/>
    <to sec="1107320931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16479,1.79901,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
42[label="200.124.241.163s;1pkt 1fpkt", shape=rectangle, color=red];
460[label="5.11.83.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
559[label="93.108.236.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
581[label="205.2.66.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
607[label="141.145.176.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
642[label="26.204.17.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
643[label="200.124.241.163;s;34pkt 34fpkt", shape=diamond, color=yellow];
737[label="211.4.45.92;d;16pkt 16fpkt", shape=diamond, color=yellow];
832[label="219.82.120.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
886[label="139.91.96.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
1340[label="201.178.221.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1383[label="216.144.28.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="90.15.208.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
1675[label="209.90.148.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
1726[label="93.14.20.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
1917[label="40.224.34.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
2096[label="26.207.96.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
2315[label="88.246.36.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
2714[label="205.2.66.101;d;1pkt 1fpkt", shape=hexagon, color=black];
2814[label="216.144.28.232;d;1pkt 1fpkt", shape=hexagon, color=black];
3432[label="40.224.34.29;d;1pkt 1fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.241.163:80, 211.4.45.92:*}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1147: (2.89855%)&lt;BR/&gt; 41927: (2.17391%)&lt;BR/&gt; 3046: (2.17391%)&lt;BR/&gt; 61218: (1.44928%)&gt;];
}
42--643[label="1;1pkt 1fpkt"];
42--1917[label="1;1pkt 1fpkt"];
42--3432[label="1;1pkt 1fpkt"];
460--643[label="1;1pkt 1fpkt"];
559--643[label="1;1pkt 1fpkt"];
581--643[label="1;1pkt 1fpkt"];
581--2714[label="1;1pkt 1fpkt"];
607--643[label="1;1pkt 1fpkt"];
642--643[label="1;1pkt 1fpkt"];
643--737[label="1;16pkt 16fpkt"];
643--832[label="1;1pkt 1fpkt"];
643--886[label="1;1pkt 1fpkt"];
643--1340[label="1;1pkt 1fpkt"];
643--1383[label="1;1pkt 1fpkt"];
643--1490[label="1;1pkt 1fpkt"];
643--1675[label="1;1pkt 1fpkt"];
643--1726[label="1;1pkt 1fpkt"];
643--1917[label="1;1pkt 1fpkt"];
643--2096[label="1;1pkt 1fpkt"];
643--2315[label="1;1pkt 1fpkt"];
643--2714[label="1;1pkt 1fpkt"];
643--2814[label="1;1pkt 1fpkt"];
643--3432[label="1;1pkt 1fpkt"];
1383--2814[label="1;1pkt 1fpkt"];
1917--3432[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.4.45.92" src_ip="200.124.241.163" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12276,1.73417,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
140[label="5.142.47.62s;64pkt 64fpkt", shape=rectangle, color=red];
1921[label="5.142.47.62;s;169pkt 169fpkt", shape=diamond, color=yellow];
3211[label="5.142.47.62;s;169pkt 169fpkt", shape=hexagon, color=black];
4052[label="5.142.47.62;168pkt 168fpkt", shape=pentagon, color=darkviolet];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.142.47.62:*, *:38293}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38293: (50%)&lt;BR/&gt; 64480: (0.350877%)&lt;BR/&gt; 64479: (0.350877%)&lt;BR/&gt; 64478: (0.350877%)&lt;BR/&gt; 64477: (0.350877%)&gt;];
}
140--1921[label="1;64pkt 64fpkt"];
140--3211[label="1;64pkt 64fpkt"];
140--4052[label="0.984375;63pkt 63fpkt"];
1921--3211[label="1;169pkt 169fpkt"];
1921--4052[label="1;168pkt 168fpkt"];
3211--4052[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="38293" src_ip="5.142.47.62"/>
    </slice>
    <from sec="1107320900" usec="0"/>
    <to sec="1107320939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1758[label="220.208.228.7;d;2pkt 2fpkt", shape=diamond, color=yellow];
1941[label="201.251.0.86;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.0.86:6970, 220.208.228.7:21422}[50%]&lt;BR/&gt;{201.251.0.86:52006, 220.208.228.7:554}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52006: (25%)&lt;BR/&gt; 21422: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1758--1941[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.208.228.7" dst_port="554" src_ip="201.251.0.86" src_port="52006"/>
      <filter dst_ip="220.208.228.7" dst_port="21422" src_ip="201.251.0.86" src_port="6970"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.1.211.117"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1958[label="204.99.36.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
1959[label="129.1.217.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.217.147:4820, 204.99.36.153:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4820: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1958--1959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.99.36.153" dst_port="554" src_ip="129.1.217.147" src_port="4820"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.238.168.195"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
507[label="201.242.146.86;s;364pkt 364fpkt", shape=diamond, color=yellow];
1964[label="144.179.66.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
2139[label="200.197.78.118;d;2pkt 2fpkt", shape=diamond, color=yellow];
2188[label="201.27.179.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
2383[label="42.44.70.32;d;2pkt 2fpkt", shape=diamond, color=yellow];
3133[label="201.242.146.86;s;336pkt 336fpkt", shape=hexagon, color=black];
4251[label="201.242.146.86;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5736[label="201.242.146.86;7pkt 7fpkt", shape=invtriangle, color=brown];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.146.86:8917, *:*}[40.7104%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8917: (20.4167%)&lt;BR/&gt; 6881: (6.73611%)&lt;BR/&gt; 80: (3.33333%)&lt;BR/&gt; 1214: (2.36111%)&lt;BR/&gt; 6969: (1.11111%)&gt;];
}
507--1964[label="1;1pkt 1fpkt"];
507--2139[label="1;2pkt 2fpkt"];
507--2188[label="1;1pkt 1fpkt"];
507--2383[label="1;2pkt 2fpkt"];
507--3133[label="1;336pkt 336fpkt"];
507--3540[label="0.010989;4pkt 4fpkt"];
507--3550[label="0.00824176;3pkt 3fpkt"];
507--3559[label="0.00549451;2pkt 2fpkt"];
507--3562[label="0.00824176;3pkt 3fpkt"];
507--4251[label="0.714286;5pkt 5fpkt"];
507--5736[label="0.714286;5pkt 5fpkt"];
1964--3133[label="1;1pkt 1fpkt"];
2139--3133[label="1;2pkt 2fpkt"];
2188--3133[label="1;1pkt 1fpkt"];
2383--3133[label="1;2pkt 2fpkt"];
3133--3540[label="0.0119048;4pkt 4fpkt"];
3133--3550[label="0.00892857;3pkt 3fpkt"];
3133--3559[label="0.00595238;2pkt 2fpkt"];
3133--3562[label="0.00892857;3pkt 3fpkt"];
3133--4251[label="0.714286;5pkt 5fpkt"];
3133--5736[label="0.714286;5pkt 5fpkt"];
4251--5736[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="201.242.146.86" src_port="8917"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.107.218.5"/>
      <from sec="1107320401" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1987[label="200.124.249.49;s;86pkt 86fpkt", shape=diamond, color=yellow];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.249.49:*, 93.240.216.6:80}[59.3023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.1163%)&lt;BR/&gt; 39234: (7.55814%)&lt;BR/&gt; 0: (2.32558%)&lt;BR/&gt; 55505: (1.16279%)&lt;BR/&gt; 1863: (1.16279%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="93.240.216.6" dst_port="80" src_ip="200.124.249.49"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.148.191.110"/>
      <from sec="1107320700" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320700" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1968[label="201.52.77.232;d;157pkt 157fpkt", shape=diamond, color=yellow];
2066[label="200.124.242.81;s;157pkt 157fpkt", shape=diamond, color=yellow];
3200[label="200.124.242.81;s;157pkt 157fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.242.81:139, 201.52.77.232:*}[51.5924%]&lt;BR/&gt;{200.124.242.81:445, 201.52.77.232:*}[48.4076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.7962%)&lt;BR/&gt; 445: (24.2038%)&lt;BR/&gt; 4794: (0.318471%)&lt;BR/&gt; 4793: (0.318471%)&lt;BR/&gt; 4759: (0.318471%)&gt;];
}
1968--2066[label="1;157pkt 157fpkt"];
1968--3200[label="1;157pkt 157fpkt"];
2066--3200[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_ip="201.52.77.232" src_ip="200.124.242.81" src_port="139"/>
      <filter dst_ip="201.52.77.232" src_ip="200.124.242.81" src_port="445"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.189.203.64"/>
      <from sec="1107320735" usec="0"/>
      <to sec="1107320977" usec="0"/>
    </slice>
    <from sec="1107320735" usec="0"/>
    <to sec="1107320977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.1.206.163"/>
      <from sec="1107320837" usec="0"/>
      <to sec="1107321224" usec="0"/>
    </slice>
    <from sec="1107320837" usec="0"/>
    <to sec="1107321224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
2075[label="129.0.17.130;s;30pkt 30fpkt", shape=diamond, color=yellow];
2091[label="131.12.44.8;d;26pkt 26fpkt", shape=diamond, color=yellow];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.17.130:*, 131.12.44.8:80}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3203: (1.78571%)&lt;BR/&gt; 3202: (1.78571%)&lt;BR/&gt; 3201: (1.78571%)&lt;BR/&gt; 3200: (1.78571%)&gt;];
}
2075--2091[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="131.12.44.8" dst_port="80" src_ip="129.0.17.130"/>
    </slice>
    <from sec="1107320820" usec="0"/>
    <to sec="1107321156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.1.99.15"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.112.137.41"/>
      <from sec="1107320400" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
1783[label="201.52.77.232;s;226pkt 226fpkt", shape=diamond, color=yellow];
2264[label="200.124.242.81;d;162pkt 162fpkt", shape=diamond, color=yellow];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.52.77.232:*, 200.124.242.81:445}[35.8407%]&lt;BR/&gt;{201.52.77.232:*, 200.124.242.81:139}[35.8407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (29.1237%)&lt;BR/&gt; 445: (20.8763%)&lt;BR/&gt; 4621: (0.386598%)&lt;BR/&gt; 3709: (0.386598%)&lt;BR/&gt; 2112: (0.386598%)&gt;];
}
1783--2264[label="1;162pkt 162fpkt"];
1783--3558[label="0.00884956;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.242.81" dst_port="139" src_ip="201.52.77.232"/>
      <filter dst_ip="200.124.242.81" dst_port="445" src_ip="201.52.77.232"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
2280[label="129.0.59.56;d;23pkt 23fpkt", shape=diamond, color=yellow];
2286[label="214.190.68.45;s;29pkt 29fpkt", shape=diamond, color=yellow];
3949[label="214.190.68.45;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.68.45:*, 129.0.59.56:80}[75.7576%]&lt;BR/&gt;{214.190.68.45:*, 129.0.59.51:80}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1873: (1.78571%)&lt;BR/&gt; 1872: (1.78571%)&lt;BR/&gt; 1871: (1.78571%)&lt;BR/&gt; 1868: (1.78571%)&gt;];
}
2280--2286[label="1;23pkt 23fpkt"];
2280--3949[label="0.956522;22pkt 22fpkt"];
2286--3949[label="0.965517;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.59.56" dst_port="80" src_ip="214.190.68.45"/>
      <filter dst_ip="129.0.59.51" dst_port="80" src_ip="214.190.68.45"/>
    </slice>
    <from sec="1107320869" usec="0"/>
    <to sec="1107321278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994475,1.82913,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
193[label="129.0.17.242s;17pkt 17fpkt", shape=rectangle, color=red];
2308[label="129.0.17.242;s;78pkt 78fpkt", shape=diamond, color=yellow];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.17.242:*, 42.132.107.97:80}[43.5897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1110: (1.05263%)&lt;BR/&gt; 1109: (1.05263%)&lt;BR/&gt; 1108: (1.05263%)&lt;BR/&gt; 1107: (1.05263%)&gt;];
}
193--2308[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="42.132.107.97" dst_port="80" src_ip="129.0.17.242"/>
    </slice>
    <from sec="1107321014" usec="0"/>
    <to sec="1107321184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
2318[label="133.63.211.125;d;8pkt 8fpkt", shape=diamond, color=yellow];
2327[label="218.99.188.195;s;6pkt 6fpkt", shape=diamond, color=yellow];
3438[label="133.63.211.125;d;8pkt 8fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.99.188.195:80, 133.63.211.125:*}[75%]&lt;BR/&gt;{218.99.188.231:80, 133.63.211.125:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1036: (6.81818%)&lt;BR/&gt; 1035: (6.81818%)&lt;BR/&gt; 1034: (6.81818%)&lt;BR/&gt; 1029: (6.81818%)&gt;];
}
2318--2327[label="1;6pkt 6fpkt"];
2318--3438[label="1;8pkt 8fpkt"];
2327--3438[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.63.211.125" src_ip="218.99.188.195" src_port="80"/>
      <filter dst_ip="133.63.211.125" src_ip="218.99.188.231" src_port="80"/>
    </slice>
    <from sec="1107321055" usec="0"/>
    <to sec="1107321221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1347[label="129.0.160.10;s;316pkt 316fpkt", shape=diamond, color=yellow];
2336[label="210.98.239.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
2800[label="129.0.160.10;s;245pkt 245fpkt", shape=hexagon, color=black];
3643[label="129.0.160.10;343pkt 343fpkt", shape=pentagon, color=darkviolet];
5397[label="129.0.160.10;343pkt 343fpkt", shape=invtriangle, color=brown];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.160.10:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1347--1762[label="0.00352113;1pkt 1fpkt"];
1347--2098[label="0.00316456;1pkt 1fpkt"];
1347--2336[label="1;1pkt 1fpkt"];
1347--2342[label="0.00518135;1pkt 1fpkt"];
1347--2800[label="1;245pkt 245fpkt"];
1347--3212[label="0.00316456;1pkt 1fpkt"];
1347--3521[label="0.00316456;1pkt 1fpkt"];
1347--3643[label="0.996835;315pkt 315fpkt"];
1347--5397[label="0.996835;315pkt 315fpkt"];
2336--2800[label="1;1pkt 1fpkt"];
2336--3643[label="1;1pkt 1fpkt"];
2336--5397[label="1;1pkt 1fpkt"];
2800--3212[label="0.00408163;1pkt 1fpkt"];
2800--3521[label="0.00408163;1pkt 1fpkt"];
2800--3643[label="1;245pkt 245fpkt"];
2800--5397[label="1;245pkt 245fpkt"];
3643--5397[label="1;343pkt 343fpkt"];
</description>
    <slice>
      <filter src_ip="129.0.160.10"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79665,1.7885,020,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
2371[label="148.189.24.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
2372[label="167.54.214.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
5272[label="167.54.214.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6851[label="167.54.214.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.54.214.240:0, 148.189.24.87:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2371--2372[label="1;1pkt 1fpkt"];
2371--5272[label="1;1pkt 1fpkt"];
2371--6851[label="1;1pkt 1fpkt"];
2372--5272[label="1;1pkt 1fpkt"];
2372--6851[label="1;1pkt 1fpkt"];
5272--6851[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.24.87" src_ip="167.54.214.240"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
2374[label="164.238.241.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
2375[label="130.6.228.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
3374[label="130.6.228.48;s;1pkt 1fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.6.228.48:6665, 164.238.241.76:1038}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (50%)&lt;BR/&gt; 1038: (50%)&gt;];
}
2374--2375[label="1;1pkt 1fpkt"];
2374--3374[label="1;1pkt 1fpkt"];
2375--3374[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.238.241.76" dst_port="1038" src_ip="130.6.228.48" src_port="6665"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.63.211.72"/>
      <from sec="1107320401" usec="0"/>
      <to sec="1107321223" usec="0"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.1.177.103"/>
      <from sec="1107320402" usec="0"/>
      <to sec="1107321227" usec="0"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.113.104.30"/>
      <from sec="1107320832" usec="0"/>
      <to sec="1107321227" usec="0"/>
    </slice>
    <from sec="1107320832" usec="0"/>
    <to sec="1107321227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
409[label="200.124.242.242;s;82pkt 82fpkt", shape=diamond, color=yellow];
2495[label="212.36.169.1;d;2pkt 2fpkt", shape=diamond, color=yellow];
5287[label="200.124.242.242;83pkt 83fpkt", shape=pentagon, color=darkviolet];
6358[label="200.124.242.242;83pkt 83fpkt", shape=invtriangle, color=brown];
6853[label="200.124.242.242;84pkt 84fpkt", shape=invhouse, color=bisque];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.242.242:25, *:*}[98.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.4012%)&lt;BR/&gt; 0: (1.1976%)&lt;BR/&gt; 50425: (0.748503%)&lt;BR/&gt; 50328: (0.748503%)&lt;BR/&gt; 65533: (0.598802%)&gt;];
}
409--1730[label="0.0121951;1pkt 1fpkt"];
409--2495[label="1;2pkt 2fpkt"];
409--5287[label="0.987805;81pkt 81fpkt"];
409--6358[label="0.987805;81pkt 81fpkt"];
409--6853[label="1;82pkt 82fpkt"];
2495--5287[label="1;2pkt 2fpkt"];
2495--6358[label="1;2pkt 2fpkt"];
2495--6853[label="1;2pkt 2fpkt"];
5287--6358[label="1;83pkt 83fpkt"];
5287--6853[label="1;83pkt 83fpkt"];
6358--6853[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.242.242" src_port="25"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
2303[label="129.0.17.159;s;11pkt 11fpkt", shape=diamond, color=yellow];
2499[label="94.26.4.214;d;11pkt 11fpkt", shape=diamond, color=yellow];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.17.159:*, 94.26.4.214:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3629: (4.54545%)&lt;BR/&gt; 3628: (4.54545%)&lt;BR/&gt; 3627: (4.54545%)&lt;BR/&gt; 3626: (4.54545%)&gt;];
}
2303--2499[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="94.26.4.214" dst_port="80" src_ip="129.0.17.159"/>
    </slice>
    <from sec="1107320963" usec="0"/>
    <to sec="1107321171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.1.104.11"/>
      <from sec="1107321085" usec="0"/>
      <to sec="1107321228" usec="0"/>
    </slice>
    <from sec="1107321085" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
2309[label="133.234.28.164;d;8pkt 8fpkt", shape=diamond, color=yellow];
2523[label="196.115.185.200;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.236.0.165:80, 133.234.28.164:*}[50%]&lt;BR/&gt;{196.115.185.200:80, 133.234.28.164:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53124: (8.33333%)&lt;BR/&gt; 53123: (8.33333%)&lt;BR/&gt; 53122: (8.33333%)&lt;BR/&gt; 53121: (8.33333%)&gt;];
}
2309--2523[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.234.28.164" src_ip="196.115.185.200" src_port="80"/>
      <filter dst_ip="133.234.28.164" src_ip="220.236.0.165" src_port="80"/>
    </slice>
    <from sec="1107321014" usec="0"/>
    <to sec="1107321148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.0.20.206"/>
      <from sec="1107321099" usec="0"/>
      <to sec="1107321152" usec="0"/>
    </slice>
    <from sec="1107321099" usec="0"/>
    <to sec="1107321152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.238.77.37"/>
      <from sec="1107321104" usec="0"/>
      <to sec="1107321227" usec="0"/>
    </slice>
    <from sec="1107321104" usec="0"/>
    <to sec="1107321227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674903,1.88481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
2545[label="129.0.68.20;s;120pkt 120fpkt", shape=diamond, color=yellow];
2546[label="218.88.172.65;d;97pkt 97fpkt", shape=diamond, color=yellow];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.68.20:*, 218.88.172.65:80}[80.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50125: (0.460829%)&lt;BR/&gt; 50124: (0.460829%)&lt;BR/&gt; 50123: (0.460829%)&lt;BR/&gt; 50122: (0.460829%)&gt;];
}
2545--2546[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="218.88.172.65" dst_port="80" src_ip="129.0.68.20"/>
    </slice>
    <from sec="1107321195" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
2544[label="129.0.68.20;d;117pkt 117fpkt", shape=diamond, color=yellow];
2547[label="218.88.172.65;s;94pkt 94fpkt", shape=diamond, color=yellow];
3443[label="218.88.172.65;s;94pkt 94fpkt", shape=hexagon, color=black];
4075[label="218.88.172.65;103pkt 103fpkt", shape=pentagon, color=darkviolet];
5643[label="218.88.172.65;104pkt 104fpkt", shape=invtriangle, color=brown];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.88.172.65:80, 129.0.68.20:*}[81.8898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50125: (0.488281%)&lt;BR/&gt; 50124: (0.488281%)&lt;BR/&gt; 50123: (0.488281%)&lt;BR/&gt; 50122: (0.488281%)&gt;];
}
2544--2547[label="1;94pkt 94fpkt"];
2544--3443[label="1;94pkt 94fpkt"];
2544--4075[label="0.902913;93pkt 93fpkt"];
2544--5643[label="0.903846;94pkt 94fpkt"];
2547--3443[label="1;94pkt 94fpkt"];
2547--4075[label="0.989362;93pkt 93fpkt"];
2547--5643[label="1;94pkt 94fpkt"];
3443--4075[label="0.989362;93pkt 93fpkt"];
3443--5643[label="1;94pkt 94fpkt"];
4075--5643[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.68.20" src_ip="218.88.172.65" src_port="80"/>
    </slice>
    <from sec="1107321195" usec="0"/>
    <to sec="1107321239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
589[label="161.69.178.60;s;218pkt 218fpkt", shape=diamond, color=yellow];
942[label="202.233.115.173;d;211pkt 211fpkt", shape=diamond, color=yellow];
2572[label="161.69.178.60;s;20pkt 20fpkt", shape=hexagon, color=black];
2938[label="202.233.115.173;d;176pkt 176fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.178.60:*, 202.233.115.173:80}[96.789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3310: (0.32%)&lt;BR/&gt; 3309: (0.32%)&lt;BR/&gt; 3308: (0.32%)&lt;BR/&gt; 3307: (0.32%)&gt;];
}
589--942[label="1;211pkt 211fpkt"];
589--2572[label="1;20pkt 20fpkt"];
589--2938[label="1;176pkt 176fpkt"];
589--3540[label="0.00458716;1pkt 1fpkt"];
589--3559[label="0.100917;22pkt 22fpkt"];
942--2572[label="0.95;19pkt 19fpkt"];
942--2938[label="1;176pkt 176fpkt"];
942--3559[label="0.0995261;21pkt 21fpkt"];
2572--2938[label="0.95;19pkt 19fpkt"];
2572--3540[label="0.05;1pkt 1fpkt"];
2938--3559[label="0.119318;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="202.233.115.173" dst_port="80" src_ip="161.69.178.60"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
417[label="201.104.96.236;d;1333pkt 1333fpkt", shape=diamond, color=yellow];
418[label="201.242.146.13;s;1333pkt 1333fpkt", shape=diamond, color=yellow];
2588[label="201.104.96.236;d;1185pkt 1185fpkt", shape=hexagon, color=black];
2589[label="201.242.146.13;s;288pkt 288fpkt", shape=hexagon, color=black];
3672[label="201.242.146.13;1465pkt 1465fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.146.13:1433, 201.104.96.236:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 31028: (0.044611%)&lt;BR/&gt; 31015: (0.044611%)&lt;BR/&gt; 31002: (0.044611%)&lt;BR/&gt; 30986: (0.044611%)&gt;];
}
417--418[label="1;1333pkt 1333fpkt"];
417--2588[label="1;1185pkt 1185fpkt"];
417--2589[label="1;288pkt 288fpkt"];
417--3672[label="0.99925;1332pkt 1332fpkt"];
418--2588[label="1;1185pkt 1185fpkt"];
418--2589[label="1;288pkt 288fpkt"];
418--3672[label="0.99925;1332pkt 1332fpkt"];
2588--2589[label="1;288pkt 288fpkt"];
2588--3672[label="0.999156;1184pkt 1184fpkt"];
2589--3672[label="0.996528;287pkt 287fpkt"];
</description>
    <slice>
      <filter dst_ip="201.104.96.236" src_ip="201.242.146.13" src_port="1433"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.795026,1.89955,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.18.128.41"/>
      <from sec="1107320879" usec="0"/>
      <to sec="1107321213" usec="0"/>
    </slice>
    <from sec="1107320879" usec="0"/>
    <to sec="1107321213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
985[label="162.112.137.41;s;296pkt 296fpkt", shape=diamond, color=yellow];
2659[label="162.112.137.41;s;271pkt 271fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.112.137.41:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
985--2659[label="1;271pkt 271fpkt"];
</description>
    <slice>
      <filter src_ip="162.112.137.41"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1040[label="215.22.107.97;s;2213pkt 2213fpkt", shape=diamond, color=yellow];
2675[label="215.22.107.97;s;796pkt 796fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.22.107.97:2025, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2025: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1040--2675[label="1;796pkt 796fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.22.107.97" src_port="2025"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
615[label="129.0.149.112;s;162pkt 162fpkt", shape=diamond, color=yellow];
2730[label="129.0.149.112;s;79pkt 79fpkt", shape=hexagon, color=black];
4409[label="129.0.149.112;163pkt 163fpkt", shape=pentagon, color=darkviolet];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.149.112:*, 167.41.184.216:80}[22.6994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7525%)&lt;BR/&gt; 0: (0.49505%)&lt;BR/&gt; 33764: (0.371287%)&lt;BR/&gt; 33760: (0.371287%)&lt;BR/&gt; 33737: (0.371287%)&gt;];
}
615--1846[label="0.0458015;6pkt 6fpkt"];
615--2574[label="0.0123457;2pkt 2fpkt"];
615--2730[label="1;79pkt 79fpkt"];
615--2873[label="0.0123457;2pkt 2fpkt"];
615--3013[label="0.0123457;2pkt 2fpkt"];
615--3468[label="0.00847458;1pkt 1fpkt"];
615--3540[label="0.0493827;8pkt 8fpkt"];
615--3550[label="0.00617284;1pkt 1fpkt"];
615--3559[label="0.00617284;1pkt 1fpkt"];
615--3562[label="0.00617284;1pkt 1fpkt"];
615--4409[label="1;162pkt 162fpkt"];
2730--2873[label="0.0253165;2pkt 2fpkt"];
2730--3013[label="0.0253165;2pkt 2fpkt"];
2730--3468[label="0.0126582;1pkt 1fpkt"];
2730--3540[label="0.101266;8pkt 8fpkt"];
2730--3550[label="0.0126582;1pkt 1fpkt"];
2730--3559[label="0.0126582;1pkt 1fpkt"];
2730--3562[label="0.0126582;1pkt 1fpkt"];
2730--4409[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="167.41.184.216" dst_port="80" src_ip="129.0.149.112"/>
    </slice>
    <from sec="1107320441" usec="0"/>
    <to sec="1107321274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
701[label="161.69.178.59;s;3pkt 3fpkt", shape=diamond, color=yellow];
1004[label="95.138.119.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
2762[label="95.138.119.148;d;1pkt 1fpkt", shape=hexagon, color=black];
3113[label="161.69.178.59;s;3pkt 3fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.178.59:1037, 129.16.144.40:123}[33.3333%]&lt;BR/&gt;{161.69.178.59:1524, 40.16.138.97:80}[33.3333%]&lt;BR/&gt;{161.69.178.59:1184, 95.138.119.148:2150}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2150: (25%)&lt;BR/&gt; 1184: (25%)&lt;BR/&gt; 1524: (12.5%)&lt;BR/&gt; 1037: (12.5%)&lt;BR/&gt; 123: (12.5%)&gt;];
}
701--1004[label="1;1pkt 1fpkt"];
701--2762[label="1;1pkt 1fpkt"];
701--3113[label="1;3pkt 3fpkt"];
701--3559[label="0.333333;1pkt 1fpkt"];
1004--2762[label="1;1pkt 1fpkt"];
1004--3113[label="1;1pkt 1fpkt"];
2762--3113[label="1;1pkt 1fpkt"];
3113--3559[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="95.138.119.148" dst_port="2150" src_ip="161.69.178.59" src_port="1184"/>
      <filter dst_ip="40.16.138.97" dst_port="80" src_ip="161.69.178.59" src_port="1524"/>
      <filter dst_ip="129.16.144.40" dst_port="123" src_ip="161.69.178.59" src_port="1037"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0012,1.75769,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
1030[label="200.124.247.33;s;57pkt 57fpkt", shape=diamond, color=yellow];
1300[label="206.185.42.137;d;4pkt 4fpkt", shape=diamond, color=yellow];
2775[label="200.124.247.33;s;40pkt 40fpkt", shape=hexagon, color=black];
3847[label="200.124.247.33;57pkt 57fpkt", shape=pentagon, color=darkviolet];
6470[label="200.124.247.33;57pkt 57fpkt", shape=invhouse, color=bisque];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.247.33:80, 200.111.32.208:*}[53.4483%]&lt;BR/&gt;{200.124.247.33:80, 202.109.50.217:*}[22.4138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64519: (1.16279%)&lt;BR/&gt; 58677: (1.16279%)&lt;BR/&gt; 35052: (1.16279%)&lt;BR/&gt; 12638: (1.16279%)&gt;];
}
1030--1300[label="1;4pkt 4fpkt"];
1030--2775[label="1;40pkt 40fpkt"];
1030--3847[label="0.982456;56pkt 56fpkt"];
1030--6470[label="1;57pkt 57fpkt"];
1300--2775[label="1;4pkt 4fpkt"];
1300--3847[label="1;4pkt 4fpkt"];
1300--6470[label="1;4pkt 4fpkt"];
2775--3847[label="0.975;39pkt 39fpkt"];
2775--6470[label="1;40pkt 40fpkt"];
3847--6470[label="0.982456;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="200.111.32.208" src_ip="200.124.247.33" src_port="80"/>
      <filter dst_ip="202.109.50.217" src_ip="200.124.247.33" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
761[label="95.163.177.241;d;2pkt 2fpkt", shape=diamond, color=yellow];
762[label="129.1.83.34;s;45pkt 45fpkt", shape=diamond, color=yellow];
1114[label="129.0.82.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
2607[label="129.1.83.34;s;34pkt 34fpkt", shape=hexagon, color=black];
2801[label="129.0.82.60;s;1pkt 1fpkt", shape=hexagon, color=black];
4038[label="129.0.82.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5622[label="129.0.82.60;1pkt 1fpkt", shape=invtriangle, color=brown];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.83.34:*, 206.185.182.200:80}[41.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.5882%)&lt;BR/&gt; 6080: (4.70588%)&lt;BR/&gt; 26170: (4.11765%)&lt;BR/&gt; 7001: (3.52941%)&lt;BR/&gt; 2498: (2.94118%)&gt;];
}
761--762[label="0.5;1pkt 1fpkt"];
761--1114[label="1;1pkt 1fpkt"];
761--2607[label="0.5;1pkt 1fpkt"];
761--2801[label="1;1pkt 1fpkt"];
761--4038[label="1;1pkt 1fpkt"];
761--5622[label="1;1pkt 1fpkt"];
762--885[label="0.2;9pkt 9fpkt"];
762--1785[label="0.0444444;2pkt 2fpkt"];
762--2607[label="1;34pkt 34fpkt"];
762--2969[label="0.0222222;1pkt 1fpkt"];
762--3371[label="0.0444444;2pkt 2fpkt"];
762--3550[label="0.133333;6pkt 6fpkt"];
762--3562[label="0.133333;6pkt 6fpkt"];
1114--2801[label="1;1pkt 1fpkt"];
1114--4038[label="1;1pkt 1fpkt"];
1114--5622[label="1;1pkt 1fpkt"];
2607--2969[label="0.0294118;1pkt 1fpkt"];
2607--3371[label="0.0588235;2pkt 2fpkt"];
2607--3550[label="0.176471;6pkt 6fpkt"];
2607--3562[label="0.176471;6pkt 6fpkt"];
2801--4038[label="1;1pkt 1fpkt"];
2801--5622[label="1;1pkt 1fpkt"];
4038--5622[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.182.200" dst_port="80" src_ip="129.1.83.34"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1126[label="212.13.63.198;d;11pkt 11fpkt", shape=diamond, color=yellow];
1127[label="129.1.213.28;s;11pkt 11fpkt", shape=diamond, color=yellow];
2808[label="212.13.63.198;d;1pkt 1fpkt", shape=hexagon, color=black];
3157[label="129.1.213.28;s;11pkt 11fpkt", shape=hexagon, color=black];
3809[label="129.1.213.28;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5487[label="129.1.213.28;12pkt 12fpkt", shape=invtriangle, color=brown];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.213.28:80, 212.13.63.198:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43948: (4.31034%)&lt;BR/&gt; 43932: (4.31034%)&lt;BR/&gt; 43920: (4.31034%)&lt;BR/&gt; 43906: (4.31034%)&gt;];
}
1126--1127[label="1;11pkt 11fpkt"];
1126--2808[label="1;1pkt 1fpkt"];
1126--3157[label="1;11pkt 11fpkt"];
1126--3809[label="0.909091;10pkt 10fpkt"];
1126--5487[label="0.909091;10pkt 10fpkt"];
1127--2808[label="1;1pkt 1fpkt"];
1127--3157[label="1;11pkt 11fpkt"];
1127--3809[label="0.909091;10pkt 10fpkt"];
1127--5487[label="0.909091;10pkt 10fpkt"];
2808--3157[label="1;1pkt 1fpkt"];
3157--3809[label="0.909091;10pkt 10fpkt"];
3157--5487[label="0.909091;10pkt 10fpkt"];
3809--5487[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="212.13.63.198" src_ip="129.1.213.28" src_port="80"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
1214[label="200.124.245.174;s;6pkt 6fpkt", shape=diamond, color=yellow];
1488[label="216.54.97.126;d;5pkt 5fpkt", shape=diamond, color=yellow];
2834[label="200.124.245.174;s;6pkt 6fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.245.174:*, 216.54.97.126:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 1292: (8.82353%)&lt;BR/&gt; 1291: (8.82353%)&lt;BR/&gt; 1290: (8.82353%)&lt;BR/&gt; 1289: (8.82353%)&gt;];
}
1214--1488[label="1;5pkt 5fpkt"];
1214--2834[label="1;6pkt 6fpkt"];
1214--3559[label="0.333333;2pkt 2fpkt"];
1488--2834[label="1;5pkt 5fpkt"];
1488--3559[label="0.4;2pkt 2fpkt"];
2834--3559[label="0.333333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.54.97.126" dst_port="80" src_ip="200.124.245.174"/>
    </slice>
    <from sec="1107320439" usec="0"/>
    <to sec="1107320971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16479,1.79901,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
187[label="68.239.43.209d;1pkt 1fpkt", shape=rectangle, color=red];
379[label="201.251.29.114;s;166pkt 166fpkt", shape=diamond, color=yellow];
469[label="210.142.136.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
941[label="43.68.38.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
1459[label="42.219.177.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
1516[label="88.104.28.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
1553[label="88.35.218.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1979[label="89.83.37.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
2155[label="211.133.119.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
2202[label="94.89.70.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
2838[label="42.219.177.213;d;1pkt 1fpkt", shape=hexagon, color=black];
3351[label="88.35.218.142;d;1pkt 1fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.29.114:6881, *:*}[60.241%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (32.4859%)&lt;BR/&gt; 16881: (3.38983%)&lt;BR/&gt; 7272: (2.25989%)&lt;BR/&gt; 17188: (1.12994%)&lt;BR/&gt; 32909: (0.847458%)&gt;];
}
187--379[label="1;1pkt 1fpkt"];
187--2155[label="1;1pkt 1fpkt"];
379--469[label="1;1pkt 1fpkt"];
379--941[label="1;1pkt 1fpkt"];
379--1459[label="1;1pkt 1fpkt"];
379--1516[label="1;1pkt 1fpkt"];
379--1553[label="1;1pkt 1fpkt"];
379--1979[label="1;1pkt 1fpkt"];
379--2155[label="1;1pkt 1fpkt"];
379--2202[label="1;1pkt 1fpkt"];
379--2838[label="1;1pkt 1fpkt"];
379--3351[label="1;1pkt 1fpkt"];
1459--2838[label="1;1pkt 1fpkt"];
1553--3351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="201.251.29.114" src_port="6881"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
380[label="68.209.225.245;d;12243pkt 12243fpkt", shape=diamond, color=yellow];
979[label="68.209.225.245;s;13058pkt 13058fpkt", shape=diamond, color=yellow];
2857[label="68.209.225.245;s;11962pkt 11962fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.209.225.245:*, 68.209.225.245:80}[52.2528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8399%)&lt;BR/&gt; 53: (2.51188%)&lt;BR/&gt; 25: (2.30389%)&lt;BR/&gt; 443: (1.41025%)&lt;BR/&gt; 2816: (0.908408%)&gt;];
}
380--979[label="0.977048;11962pkt 11962fpkt"];
380--2857[label="1;11962pkt 11962fpkt"];
380--3540[label="0.0764251;543pkt 543fpkt"];
380--3549[label="0.00884533;37pkt 37fpkt"];
380--3550[label="0.107411;887pkt 887fpkt"];
380--3551[label="0.000442576;2pkt 2fpkt"];
380--3552[label="0.00106496;2pkt 2fpkt"];
380--3554[label="0.000219491;1pkt 1fpkt"];
380--3555[label="0.000184638;1pkt 1fpkt"];
380--3559[label="0.131614;1097pkt 1097fpkt"];
380--3562[label="0.107411;887pkt 887fpkt"];
380--3563[label="0.000442576;2pkt 2fpkt"];
380--3565[label="0.000219491;1pkt 1fpkt"];
380--3566[label="0.000184638;1pkt 1fpkt"];
380--3568[label="0.000474834;1pkt 1fpkt"];
979--2857[label="1;11962pkt 11962fpkt"];
979--3540[label="0.0755806;537pkt 537fpkt"];
979--3549[label="0.0083672;35pkt 35fpkt"];
979--3550[label="0.106684;881pkt 881fpkt"];
979--3551[label="0.000221288;1pkt 1fpkt"];
979--3552[label="0.000532481;1pkt 1fpkt"];
979--3554[label="0.000219491;1pkt 1fpkt"];
979--3555[label="0.000184638;1pkt 1fpkt"];
979--3559[label="0.130294;1086pkt 1086fpkt"];
979--3562[label="0.106684;881pkt 881fpkt"];
979--3563[label="0.000221288;1pkt 1fpkt"];
979--3565[label="0.000219491;1pkt 1fpkt"];
979--3566[label="0.000184638;1pkt 1fpkt"];
979--3568[label="0.000474834;1pkt 1fpkt"];
2857--3540[label="0.0755806;537pkt 537fpkt"];
2857--3549[label="0.0083672;35pkt 35fpkt"];
2857--3550[label="0.106684;881pkt 881fpkt"];
2857--3551[label="0.000221288;1pkt 1fpkt"];
2857--3552[label="0.000532481;1pkt 1fpkt"];
2857--3554[label="0.000219491;1pkt 1fpkt"];
2857--3555[label="0.000184638;1pkt 1fpkt"];
2857--3559[label="0.130294;1086pkt 1086fpkt"];
2857--3562[label="0.106684;881pkt 881fpkt"];
2857--3563[label="0.000221288;1pkt 1fpkt"];
2857--3565[label="0.000219491;1pkt 1fpkt"];
2857--3566[label="0.000184638;1pkt 1fpkt"];
2857--3568[label="0.000474834;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="68.209.225.245" dst_port="80" src_ip="68.209.225.245"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
774[label="221.221.99.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1054[label="201.251.29.199;s;2pkt 2fpkt", shape=diamond, color=yellow];
2683[label="201.251.29.199;s;2pkt 2fpkt", shape=hexagon, color=black];
2888[label="221.221.99.30;d;1pkt 1fpkt", shape=hexagon, color=black];
5001[label="201.251.29.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6185[label="201.251.29.199;1pkt 1fpkt", shape=invtriangle, color=brown];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.29.199:1364, 221.221.99.30:9900}[50%]&lt;BR/&gt;{201.251.29.199:1029, 206.185.37.225:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9900: (27.7778%)&lt;BR/&gt; 1364: (27.7778%)&lt;BR/&gt; 1863: (22.2222%)&lt;BR/&gt; 1029: (22.2222%)&gt;];
}
774--1054[label="1;1pkt 1fpkt"];
774--2683[label="1;1pkt 1fpkt"];
774--2888[label="1;1pkt 1fpkt"];
774--5001[label="1;1pkt 1fpkt"];
1054--2683[label="1;2pkt 2fpkt"];
1054--2888[label="1;1pkt 1fpkt"];
1054--5001[label="1;2pkt 2fpkt"];
1054--6185[label="1;1pkt 1fpkt"];
2683--2888[label="1;1pkt 1fpkt"];
2683--5001[label="1;2pkt 2fpkt"];
2683--6185[label="1;1pkt 1fpkt"];
2888--5001[label="1;1pkt 1fpkt"];
5001--6185[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.37.225" dst_port="1863" src_ip="201.251.29.199" src_port="1029"/>
      <filter dst_ip="221.221.99.30" dst_port="9900" src_ip="201.251.29.199" src_port="1364"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
526[label="133.219.10.192;d;6pkt 6fpkt", shape=diamond, color=yellow];
529[label="64.170.32.95;s;2pkt 2fpkt", shape=diamond, color=yellow];
1837[label="67.58.114.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
2889[label="64.170.32.95;s;2pkt 2fpkt", shape=hexagon, color=black];
3354[label="133.219.10.192;d;6pkt 6fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.167.54.23:*, 133.219.10.192:80}[50%]&lt;BR/&gt;{64.170.32.95:*, 133.219.10.192:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.6471%)&lt;BR/&gt; 49579: (11.7647%)&lt;BR/&gt; 49577: (11.7647%)&lt;BR/&gt; 45443: (11.7647%)&lt;BR/&gt; 37337: (11.7647%)&gt;];
}
526--529[label="1;2pkt 2fpkt"];
526--1837[label="1;1pkt 1fpkt"];
526--2889[label="1;2pkt 2fpkt"];
526--3354[label="1;6pkt 6fpkt"];
526--3559[label="0.333333;2pkt 2fpkt"];
529--2889[label="1;2pkt 2fpkt"];
529--3354[label="1;2pkt 2fpkt"];
1837--3354[label="1;1pkt 1fpkt"];
2889--3354[label="1;2pkt 2fpkt"];
3354--3559[label="0.333333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.219.10.192" src_ip="64.170.32.95"/>
      <filter dst_ip="133.219.10.192" dst_port="80" src_ip="93.167.54.23"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1329[label="42.154.50.130;s;744pkt 744fpkt", shape=diamond, color=yellow];
2896[label="42.154.50.130;s;744pkt 744fpkt", shape=hexagon, color=black];
4520[label="42.154.50.130;805pkt 805fpkt", shape=pentagon, color=darkviolet];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.154.50.130:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64833: (0.130833%)&lt;BR/&gt; 60422: (0.130833%)&lt;BR/&gt; 53364: (0.130833%)&lt;BR/&gt; 51537: (0.130833%)&gt;];
}
1329--2896[label="1;744pkt 744fpkt"];
1329--4520[label="1;744pkt 744fpkt"];
2896--4520[label="1;744pkt 744fpkt"];
</description>
    <slice>
      <filter src_ip="42.154.50.130" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.953481,1.81381,020,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
1595[label="161.21.129.46;s;552pkt 552fpkt", shape=diamond, color=yellow];
2912[label="161.21.129.46;s;318pkt 318fpkt", shape=hexagon, color=black];
5574[label="161.21.129.46;603pkt 603fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.21.129.46:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1595--1762[label="0.00352113;1pkt 1fpkt"];
1595--2342[label="0.00518135;1pkt 1fpkt"];
1595--2912[label="1;318pkt 318fpkt"];
1595--5574[label="1;552pkt 552fpkt"];
2912--5574[label="1;318pkt 318fpkt"];
</description>
    <slice>
      <filter src_ip="161.21.129.46"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1646[label="200.124.247.163;s;263pkt 263fpkt", shape=diamond, color=yellow];
2926[label="200.124.247.163;s;208pkt 208fpkt", shape=hexagon, color=black];
4773[label="200.124.247.163;275pkt 275fpkt", shape=pentagon, color=darkviolet];
6046[label="200.124.247.163;275pkt 275fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.247.163:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1646--1730[label="0.00380228;1pkt 1fpkt"];
1646--1762[label="0.00380228;1pkt 1fpkt"];
1646--2342[label="0.00518135;1pkt 1fpkt"];
1646--2926[label="1;208pkt 208fpkt"];
1646--4773[label="1;263pkt 263fpkt"];
1646--6046[label="1;263pkt 263fpkt"];
2926--4773[label="1;208pkt 208fpkt"];
2926--6046[label="1;208pkt 208fpkt"];
4773--6046[label="1;275pkt 275fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.247.163"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
843[label="129.1.202.17;s;59pkt 59fpkt", shape=diamond, color=yellow];
1349[label="220.208.228.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1858[label="193.238.197.4;d;14pkt 14fpkt", shape=diamond, color=yellow];
2904[label="220.208.228.148;d;1pkt 1fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.202.17:*, 209.249.89.87:80}[55.9322%]&lt;BR/&gt;{129.1.202.17:*, 193.238.197.4:80}[23.7288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 3220: (2%)&lt;BR/&gt; 554: (2%)&lt;BR/&gt; 3882: (1.33333%)&lt;BR/&gt; 3881: (1.33333%)&gt;];
}
843--882[label="0.0169492;1pkt 1fpkt"];
843--1349[label="1;1pkt 1fpkt"];
843--1541[label="0.0508475;3pkt 3fpkt"];
843--1858[label="1;14pkt 14fpkt"];
843--2904[label="1;1pkt 1fpkt"];
843--3540[label="0.0338983;2pkt 2fpkt"];
843--3550[label="0.0338983;2pkt 2fpkt"];
843--3559[label="0.0677966;4pkt 4fpkt"];
843--3562[label="0.0338983;2pkt 2fpkt"];
1349--2904[label="1;1pkt 1fpkt"];
1858--3540[label="0.142857;2pkt 2fpkt"];
1858--3550[label="0.142857;2pkt 2fpkt"];
1858--3559[label="0.285714;4pkt 4fpkt"];
1858--3562[label="0.142857;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.249.89.87" dst_port="80" src_ip="129.1.202.17"/>
      <filter dst_ip="193.238.197.4" dst_port="80" src_ip="129.1.202.17"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1665[label="201.251.148.150;s;43pkt 43fpkt", shape=diamond, color=yellow];
2933[label="201.251.148.150;s;22pkt 22fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.148.150:80, 94.95.143.178:*}[51.1628%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62645: (1.53846%)&lt;BR/&gt; 55244: (1.53846%)&lt;BR/&gt; 52895: (1.53846%)&lt;BR/&gt; 51693: (1.53846%)&gt;];
}
1665--2933[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="94.95.143.178" src_ip="201.251.148.150" src_port="80"/>
    </slice>
    <from sec="1107320439" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
543[label="129.0.35.86;d;44pkt 44fpkt", shape=diamond, color=yellow];
1709[label="214.136.162.7;s;27pkt 27fpkt", shape=diamond, color=yellow];
2946[label="214.136.162.7;s;27pkt 27fpkt", shape=hexagon, color=black];
5284[label="215.208.145.242;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.136.162.7:*, 129.0.35.86:80}[61.3636%]&lt;BR/&gt;{215.228.20.198:*, 129.0.35.86:80}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5098%)&lt;BR/&gt; 3358: (1.47059%)&lt;BR/&gt; 3357: (1.47059%)&lt;BR/&gt; 3356: (1.47059%)&lt;BR/&gt; 3355: (1.47059%)&gt;];
}
543--1709[label="1;27pkt 27fpkt"];
543--2946[label="1;27pkt 27fpkt"];
543--3540[label="0.136364;6pkt 6fpkt"];
543--3550[label="0.0454545;2pkt 2fpkt"];
543--3559[label="0.272727;12pkt 12fpkt"];
543--3562[label="0.0454545;2pkt 2fpkt"];
543--5284[label="1;4pkt 4fpkt"];
1709--2946[label="1;27pkt 27fpkt"];
1709--3559[label="0.37037;10pkt 10fpkt"];
2946--3559[label="0.37037;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.35.86" dst_port="80" src_ip="214.136.162.7"/>
      <filter dst_ip="129.0.35.86" dst_port="80" src_ip="215.228.20.198"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
1286[label="129.1.196.159;s;258pkt 258fpkt", shape=diamond, color=yellow];
2959[label="129.1.196.159;s;245pkt 245fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.196.159:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1286--2959[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter src_ip="129.1.196.159"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
434[label="161.69.215.124;s;85pkt 85fpkt", shape=diamond, color=yellow];
1002[label="193.2.179.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
2961[label="161.69.215.124;s;43pkt 43fpkt", shape=hexagon, color=black];
4485[label="161.69.215.124;176pkt 176fpkt", shape=pentagon, color=darkviolet];
5877[label="161.69.215.124;176pkt 176fpkt", shape=invtriangle, color=brown];
6635[label="161.69.215.124;175pkt 175fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.215.124:24818, *:*}[40.3409%]&lt;BR/&gt;{161.69.215.124:*, 93.5.213.40:80}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24818: (24.3902%)&lt;BR/&gt; 80: (21.7988%)&lt;BR/&gt; 35604: (0.762195%)&lt;BR/&gt; 54045: (0.609756%)&lt;BR/&gt; 49523: (0.609756%)&gt;];
}
434--1002[label="1;1pkt 1fpkt"];
434--2961[label="1;43pkt 43fpkt"];
434--4485[label="1;85pkt 85fpkt"];
434--5877[label="1;85pkt 85fpkt"];
434--6635[label="0.988235;84pkt 84fpkt"];
1002--2961[label="1;1pkt 1fpkt"];
1002--4485[label="1;1pkt 1fpkt"];
1002--5877[label="1;1pkt 1fpkt"];
1002--6635[label="1;1pkt 1fpkt"];
2961--4485[label="1;43pkt 43fpkt"];
2961--5877[label="1;43pkt 43fpkt"];
2961--6635[label="0.976744;42pkt 42fpkt"];
4485--5877[label="1;176pkt 176fpkt"];
4485--6635[label="1;175pkt 175fpkt"];
5877--6635[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter src_ip="161.69.215.124" src_port="24818"/>
      <filter dst_ip="93.5.213.40" dst_port="80" src_ip="161.69.215.124"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1064[label="200.124.243.30;s;362pkt 362fpkt", shape=diamond, color=yellow];
2985[label="200.124.243.30;s;358pkt 358fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.243.30:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1064--1730[label="0.00276243;1pkt 1fpkt"];
1064--2985[label="1;358pkt 358fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.243.30"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1342[label="192.211.77.9;s;916pkt 916fpkt", shape=diamond, color=yellow];
3004[label="192.211.77.9;s;822pkt 822fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.211.77.9:53, *:*}[99.6725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.962%)&lt;BR/&gt; 32768: (2.3878%)&lt;BR/&gt; 32769: (1.29459%)&lt;BR/&gt; 1024: (1.20829%)&lt;BR/&gt; 1025: (0.402762%)&gt;];
}
1342--3004[label="1;822pkt 822fpkt"];
1342--3549[label="0.00327511;3pkt 3fpkt"];
3004--3549[label="0.00364964;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="192.211.77.9" src_port="53"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
582[label="210.165.99.237;d;376pkt 376fpkt", shape=diamond, color=yellow];
3030[label="210.165.99.237;d;263pkt 263fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 210.165.99.237:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
582--3030[label="1;263pkt 263fpkt"];
</description>
    <slice>
      <filter dst_ip="210.165.99.237"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1613[label="42.154.56.255;s;468pkt 468fpkt", shape=diamond, color=yellow];
3032[label="42.154.56.255;s;338pkt 338fpkt", shape=hexagon, color=black];
5357[label="42.154.56.255;519pkt 519fpkt", shape=pentagon, color=darkviolet];
6401[label="42.154.56.255;519pkt 519fpkt", shape=invtriangle, color=brown];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.154.56.255:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31596: (0.298265%)&lt;BR/&gt; 48914: (0.21692%)&lt;BR/&gt; 32788: (0.189805%)&lt;BR/&gt; 5644: (0.189805%)&gt;];
}
1613--3032[label="1;338pkt 338fpkt"];
1613--5357[label="1;468pkt 468fpkt"];
1613--6401[label="1;468pkt 468fpkt"];
3032--5357[label="1;338pkt 338fpkt"];
3032--6401[label="1;338pkt 338fpkt"];
5357--6401[label="1;519pkt 519fpkt"];
</description>
    <slice>
      <filter src_ip="42.154.56.255" src_port="80"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1907[label="216.138.45.111;d;5pkt 5fpkt", shape=diamond, color=yellow];
3090[label="216.138.45.111;d;5pkt 5fpkt", shape=hexagon, color=black];
5054[label="201.242.129.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.129.208:*, 216.138.45.111:443}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.6667%)&lt;BR/&gt; 1753: (10%)&lt;BR/&gt; 1752: (10%)&lt;BR/&gt; 1751: (10%)&lt;BR/&gt; 1750: (10%)&gt;];
}
1907--3090[label="1;5pkt 5fpkt"];
1907--5054[label="0.8;4pkt 4fpkt"];
3090--5054[label="0.8;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="216.138.45.111" dst_port="443" src_ip="201.242.129.208"/>
    </slice>
    <from sec="1107320825" usec="0"/>
    <to sec="1107320919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.795026,1.89955,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.17.64.2"/>
      <from sec="1107320878" usec="0"/>
      <to sec="1107321213" usec="0"/>
    </slice>
    <from sec="1107320878" usec="0"/>
    <to sec="1107321213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16479,1.79901,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
13[label="200.124.249.36s;1pkt 1fpkt", shape=rectangle, color=red];
412[label="200.124.249.37;s;979pkt 979fpkt", shape=diamond, color=yellow];
414[label="200.124.249.36;s;1411pkt 1411fpkt", shape=diamond, color=yellow];
604[label="3.91.192.28;d;9pkt 9fpkt", shape=diamond, color=yellow];
676[label="204.80.19.61;d;2pkt 2fpkt", shape=diamond, color=yellow];
678[label="65.10.202.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
838[label="26.73.143.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
1061[label="26.218.239.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
1258[label="214.142.21.237;d;195pkt 195fpkt", shape=diamond, color=yellow];
1491[label="88.138.13.213;d;1267pkt 1267fpkt", shape=diamond, color=yellow];
2104[label="173.155.20.170;d;4pkt 4fpkt", shape=diamond, color=yellow];
2294[label="92.77.185.157;d;9pkt 9fpkt", shape=diamond, color=yellow];
2525[label="42.218.173.47;d;834pkt 834fpkt", shape=diamond, color=yellow];
2623[label="26.73.143.22;d;1pkt 1fpkt", shape=hexagon, color=black];
2660[label="65.10.202.204;d;1pkt 1fpkt", shape=hexagon, color=black];
3109[label="200.124.249.37;s;143pkt 143fpkt", shape=hexagon, color=black];
3110[label="200.124.249.36;s;1411pkt 1411fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.249.36:*, 88.138.13.213:*}[54.1004%]&lt;BR/&gt;{200.124.249.37:*, 42.218.173.47:*}[34.8954%]&lt;BR/&gt;{*:*, *:80}[33.7657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.0909%)&lt;BR/&gt; 53: (2.98246%)&lt;BR/&gt; 25: (1.32376%)&lt;BR/&gt; 135: (1.29187%)&lt;BR/&gt; 2816: (1.13238%)&gt;];
}
13--414[label="1;1pkt 1fpkt"];
13--1491[label="1;1pkt 1fpkt"];
13--3110[label="1;1pkt 1fpkt"];
412--604[label="0.888889;8pkt 8fpkt"];
412--676[label="1;2pkt 2fpkt"];
412--1258[label="0.6;117pkt 117fpkt"];
412--2525[label="1;834pkt 834fpkt"];
412--3109[label="1;143pkt 143fpkt"];
412--3568[label="0.0040858;4pkt 4fpkt"];
414--604[label="0.111111;1pkt 1fpkt"];
414--678[label="1;1pkt 1fpkt"];
414--838[label="1;1pkt 1fpkt"];
414--1061[label="1;1pkt 1fpkt"];
414--1258[label="0.4;78pkt 78fpkt"];
414--1491[label="1;1267pkt 1267fpkt"];
414--2104[label="1;4pkt 4fpkt"];
414--2294[label="1;9pkt 9fpkt"];
414--2623[label="1;1pkt 1fpkt"];
414--2660[label="1;1pkt 1fpkt"];
414--3110[label="1;1411pkt 1411fpkt"];
414--3540[label="0.0042523;6pkt 6fpkt"];
414--3557[label="0.0026178;1pkt 1fpkt"];
414--3559[label="0.155209;219pkt 219fpkt"];
414--3560[label="0.00306748;2pkt 2fpkt"];
414--3561[label="0.00251889;2pkt 2fpkt"];
414--3568[label="0.00141743;2pkt 2fpkt"];
604--3109[label="0.888889;8pkt 8fpkt"];
604--3110[label="0.111111;1pkt 1fpkt"];
676--3109[label="1;2pkt 2fpkt"];
678--2660[label="1;1pkt 1fpkt"];
678--3110[label="1;1pkt 1fpkt"];
838--2623[label="1;1pkt 1fpkt"];
838--3110[label="1;1pkt 1fpkt"];
1061--3110[label="1;1pkt 1fpkt"];
1258--3109[label="0.818182;117pkt 117fpkt"];
1258--3110[label="0.4;78pkt 78fpkt"];
1258--3557[label="0.00512821;1pkt 1fpkt"];
1258--3568[label="0.0307692;6pkt 6fpkt"];
1491--3110[label="1;1267pkt 1267fpkt"];
1491--3559[label="0.172849;219pkt 219fpkt"];
1491--3560[label="0.00306748;2pkt 2fpkt"];
1491--3561[label="0.00251889;2pkt 2fpkt"];
2104--3110[label="1;4pkt 4fpkt"];
2294--3110[label="1;9pkt 9fpkt"];
2623--3110[label="1;1pkt 1fpkt"];
2660--3110[label="1;1pkt 1fpkt"];
3109--3568[label="0.027972;4pkt 4fpkt"];
3110--3540[label="0.0042523;6pkt 6fpkt"];
3110--3557[label="0.0026178;1pkt 1fpkt"];
3110--3559[label="0.155209;219pkt 219fpkt"];
3110--3560[label="0.00306748;2pkt 2fpkt"];
3110--3561[label="0.00251889;2pkt 2fpkt"];
3110--3568[label="0.00141743;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="88.138.13.213" src_ip="200.124.249.36"/>
      <filter dst_ip="42.218.173.47" src_ip="200.124.249.37"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
713[label="201.242.147.34;s;1001pkt 1001fpkt", shape=diamond, color=yellow];
3114[label="201.242.147.34;s;841pkt 841fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.147.34:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.9587%)&lt;BR/&gt; 32768: (1.19435%)&lt;BR/&gt; 9253: (0.760043%)&lt;BR/&gt; 32769: (0.570033%)&lt;BR/&gt; 33701: (0.542888%)&gt;];
}
713--3114[label="1;841pkt 841fpkt"];
713--3549[label="0.002997;3pkt 3fpkt"];
3114--3549[label="0.00356718;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="201.242.147.34" src_port="53"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1792[label="200.124.246.140;s;577pkt 577fpkt", shape=diamond, color=yellow];
3153[label="200.124.246.140;s;454pkt 454fpkt", shape=hexagon, color=black];
4610[label="200.124.246.140;619pkt 619fpkt", shape=pentagon, color=darkviolet];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.246.140:0, *:0}[99.6774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7576%)&lt;BR/&gt; 4320: (0.0606061%)&lt;BR/&gt; 3163: (0.0606061%)&lt;BR/&gt; 139: (0.0606061%)&lt;BR/&gt; 135: (0.0606061%)&gt;];
}
1792--3153[label="1;454pkt 454fpkt"];
1792--4610[label="0.998267;576pkt 576fpkt"];
3153--4610[label="0.997797;453pkt 453fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.246.140"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1354[label="42.151.48.181;s;666pkt 666fpkt", shape=diamond, color=yellow];
3154[label="42.151.48.181;s;607pkt 607fpkt", shape=hexagon, color=black];
4887[label="42.151.48.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6109[label="42.151.48.181;3pkt 3fpkt", shape=invtriangle, color=brown];
6743[label="42.151.48.181;2pkt 2fpkt", shape=invhouse, color=bisque];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.151.48.181:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43829: (0.195312%)&lt;BR/&gt; 625: (0.195312%)&lt;BR/&gt; 61239: (0.15625%)&lt;BR/&gt; 58147: (0.15625%)&gt;];
}
1354--3154[label="1;607pkt 607fpkt"];
1354--4887[label="1;2pkt 2fpkt"];
1354--6109[label="1;3pkt 3fpkt"];
1354--6743[label="1;2pkt 2fpkt"];
3154--4887[label="1;2pkt 2fpkt"];
3154--6109[label="1;3pkt 3fpkt"];
3154--6743[label="1;2pkt 2fpkt"];
4887--6109[label="1;2pkt 2fpkt"];
4887--6743[label="1;2pkt 2fpkt"];
6109--6743[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="42.151.48.181" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1602[label="133.63.74.90;s;65pkt 65fpkt", shape=diamond, color=yellow];
3164[label="133.63.74.90;s;52pkt 52fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.74.90:25, *:*}[90.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.2991%)&lt;BR/&gt; 443: (3.84615%)&lt;BR/&gt; 7424: (1.7094%)&lt;BR/&gt; 61602: (0.854701%)&lt;BR/&gt; 60144: (0.854701%)&gt;];
}
1602--3164[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="133.63.74.90" src_port="25"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1616[label="210.42.230.19;s;886pkt 886fpkt", shape=diamond, color=yellow];
3170[label="210.42.230.19;s;800pkt 800fpkt", shape=hexagon, color=black];
3734[label="210.42.230.19;884pkt 884fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.42.230.19:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24707: (0.116732%)&lt;BR/&gt; 22512: (0.116732%)&lt;BR/&gt; 18876: (0.116732%)&lt;BR/&gt; 7577: (0.116732%)&gt;];
}
1616--3170[label="1;800pkt 800fpkt"];
1616--3734[label="1;884pkt 884fpkt"];
3170--3734[label="0.9975;798pkt 798fpkt"];
</description>
    <slice>
      <filter src_ip="210.42.230.19" src_port="80"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
2021[label="200.124.247.40;s;124pkt 124fpkt", shape=diamond, color=yellow];
3181[label="200.124.247.40;s;103pkt 103fpkt", shape=hexagon, color=black];
3914[label="200.124.247.40;131pkt 131fpkt", shape=pentagon, color=darkviolet];
5549[label="200.124.247.40;132pkt 132fpkt", shape=invtriangle, color=brown];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.247.40:25, *:*}[48.4848%]&lt;BR/&gt;{200.124.247.40:*, *:113}[47.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.1837%)&lt;BR/&gt; 113: (23.8776%)&lt;BR/&gt; 0: (1.42857%)&lt;BR/&gt; 61019: (0.408163%)&lt;BR/&gt; 58088: (0.408163%)&gt;];
}
2021--3181[label="1;103pkt 103fpkt"];
2021--3914[label="0.991935;123pkt 123fpkt"];
2021--5549[label="1;124pkt 124fpkt"];
3181--3914[label="0.990291;102pkt 102fpkt"];
3181--5549[label="1;103pkt 103fpkt"];
3914--5549[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.247.40" src_port="25"/>
      <filter dst_port="113" src_ip="200.124.247.40"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
2038[label="129.0.135.11;s;40pkt 40fpkt", shape=diamond, color=yellow];
3187[label="129.0.135.11;s;40pkt 40fpkt", shape=hexagon, color=black];
3652[label="129.0.135.11;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5401[label="129.0.135.11;44pkt 44fpkt", shape=invtriangle, color=brown];
6429[label="129.0.135.11;43pkt 43fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.135.11:25, *:*}[75%]&lt;BR/&gt;{129.0.135.11:53, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.381%)&lt;BR/&gt; 53: (12.619%)&lt;BR/&gt; 64031: (1.19048%)&lt;BR/&gt; 62266: (1.19048%)&lt;BR/&gt; 57640: (1.19048%)&gt;];
}
2038--3187[label="1;40pkt 40fpkt"];
2038--3652[label="0.975;39pkt 39fpkt"];
2038--5401[label="1;40pkt 40fpkt"];
2038--6429[label="0.975;39pkt 39fpkt"];
3187--3652[label="0.975;39pkt 39fpkt"];
3187--5401[label="1;40pkt 40fpkt"];
3187--6429[label="0.975;39pkt 39fpkt"];
3652--5401[label="1;43pkt 43fpkt"];
3652--6429[label="1;43pkt 43fpkt"];
5401--6429[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="129.0.135.11" src_port="25"/>
      <filter src_ip="129.0.135.11" src_port="53"/>
    </slice>
    <from sec="1107320420" usec="0"/>
    <to sec="1107321291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1661[label="148.189.206.101;d;17pkt 17fpkt", shape=diamond, color=yellow];
1734[label="197.150.215.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
1906[label="194.228.123.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
3204[label="197.150.215.135;s;1pkt 1fpkt", shape=hexagon, color=black];
3407[label="148.189.206.101;d;17pkt 17fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.163.72.120:80, 148.189.206.101:*}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40400: (5.40541%)&lt;BR/&gt; 40402: (4.05405%)&lt;BR/&gt; 40420: (2.7027%)&lt;BR/&gt; 40416: (2.7027%)&gt;];
}
1661--1734[label="1;1pkt 1fpkt"];
1661--1906[label="1;1pkt 1fpkt"];
1661--3204[label="1;1pkt 1fpkt"];
1661--3407[label="1;17pkt 17fpkt"];
1734--3204[label="1;1pkt 1fpkt"];
1734--3407[label="1;1pkt 1fpkt"];
1906--3407[label="1;1pkt 1fpkt"];
3204--3407[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.206.101" src_ip="88.163.72.120" src_port="80"/>
    </slice>
    <from sec="1107320427" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1756[label="201.251.29.128;s;85pkt 85fpkt", shape=diamond, color=yellow];
3227[label="201.251.29.128;s;85pkt 85fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.29.128:30862, *:*}[41.1765%]&lt;BR/&gt;{201.251.29.128:*, 214.153.74.20:*}[24.7059%]&lt;BR/&gt;{201.251.29.128:*, 210.97.139.62:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30862: (20.5882%)&lt;BR/&gt; 53423: (6.47059%)&lt;BR/&gt; 2004: (6.47059%)&lt;BR/&gt; 31746: (4.11765%)&lt;BR/&gt; 59913: (2.94118%)&gt;];
}
1756--3227[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="214.153.74.20" src_ip="201.251.29.128"/>
      <filter dst_ip="210.97.139.62" src_ip="201.251.29.128"/>
      <filter src_ip="201.251.29.128" src_port="30862"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1998[label="200.124.243.47;s;286pkt 286fpkt", shape=diamond, color=yellow];
3261[label="200.124.243.47;s;260pkt 260fpkt", shape=hexagon, color=black];
3961[label="200.124.243.47;297pkt 297fpkt", shape=pentagon, color=darkviolet];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.243.47:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1998--2342[label="0.00518135;1pkt 1fpkt"];
1998--3261[label="1;260pkt 260fpkt"];
1998--3961[label="1;286pkt 286fpkt"];
3261--3961[label="1;260pkt 260fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.243.47"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
913[label="210.119.182.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
1184[label="201.251.2.198;s;16pkt 16fpkt", shape=diamond, color=yellow];
3276[label="201.251.2.198;s;16pkt 16fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.2.198:*, 210.237.149.50:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.2857%)&lt;BR/&gt; 1863: (5.71429%)&lt;BR/&gt; 21: (5.71429%)&lt;BR/&gt; 2856: (4.28571%)&lt;BR/&gt; 1208: (4.28571%)&gt;];
}
913--1184[label="0.666667;2pkt 2fpkt"];
913--3276[label="0.666667;2pkt 2fpkt"];
1184--3276[label="1;16pkt 16fpkt"];
1184--3540[label="0.4375;7pkt 7fpkt"];
1184--3550[label="0.0625;1pkt 1fpkt"];
1184--3562[label="0.0625;1pkt 1fpkt"];
3276--3540[label="0.4375;7pkt 7fpkt"];
3276--3550[label="0.0625;1pkt 1fpkt"];
3276--3562[label="0.0625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.237.149.50" dst_port="80" src_ip="201.251.2.198"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1855[label="129.1.196.55;s;45pkt 45fpkt", shape=diamond, color=yellow];
3282[label="129.1.196.55;s;44pkt 44fpkt", shape=hexagon, color=black];
4014[label="129.1.196.55;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.196.55:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63315: (1.1194%)&lt;BR/&gt; 60294: (1.1194%)&lt;BR/&gt; 60274: (1.1194%)&lt;BR/&gt; 60167: (1.1194%)&gt;];
}
1855--3282[label="1;44pkt 44fpkt"];
1855--4014[label="0.977778;44pkt 44fpkt"];
3282--4014[label="0.977273;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="129.1.196.55" src_port="25"/>
    </slice>
    <from sec="1107320429" usec="0"/>
    <to sec="1107321273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1635[label="200.124.230.98;s;46pkt 46fpkt", shape=diamond, color=yellow];
1690[label="202.134.23.5;d;14pkt 14fpkt", shape=diamond, color=yellow];
1722[label="202.223.147.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
3040[label="200.124.230.98;s;46pkt 46fpkt", shape=hexagon, color=black];
3295[label="202.134.23.5;d;14pkt 14fpkt", shape=hexagon, color=black];
3303[label="202.223.147.212;d;2pkt 2fpkt", shape=hexagon, color=black];
4343[label="200.124.230.98;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5786[label="200.124.230.98;50pkt 50fpkt", shape=invtriangle, color=brown];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.230.98:17151, 202.134.23.5:*}[27.451%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17151: (48.6547%)&lt;BR/&gt; 50672: (1.34529%)&lt;BR/&gt; 50665: (1.34529%)&lt;BR/&gt; 15965: (1.34529%)&lt;BR/&gt; 4374: (1.34529%)&gt;];
}
1635--1690[label="1;14pkt 14fpkt"];
1635--1722[label="1;2pkt 2fpkt"];
1635--3040[label="1;46pkt 46fpkt"];
1635--3295[label="1;14pkt 14fpkt"];
1635--3303[label="1;2pkt 2fpkt"];
1635--4343[label="0.956522;44pkt 44fpkt"];
1635--5786[label="0.978261;45pkt 45fpkt"];
1690--3040[label="1;14pkt 14fpkt"];
1690--3295[label="1;14pkt 14fpkt"];
1690--4343[label="1;14pkt 14fpkt"];
1690--5786[label="1;14pkt 14fpkt"];
1722--3040[label="1;2pkt 2fpkt"];
1722--3303[label="1;2pkt 2fpkt"];
1722--4343[label="1;2pkt 2fpkt"];
1722--5786[label="1;2pkt 2fpkt"];
3040--3295[label="1;14pkt 14fpkt"];
3040--3303[label="1;2pkt 2fpkt"];
3040--4343[label="0.956522;44pkt 44fpkt"];
3040--5786[label="0.978261;45pkt 45fpkt"];
3295--4343[label="1;14pkt 14fpkt"];
3295--5786[label="1;14pkt 14fpkt"];
3303--4343[label="1;2pkt 2fpkt"];
3303--5786[label="1;2pkt 2fpkt"];
4343--5786[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="202.134.23.5" src_ip="200.124.230.98" src_port="17151"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.795026,1.89955,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.148.191.110"/>
      <from sec="1107320700" usec="0"/>
      <to sec="1107321138" usec="0"/>
    </slice>
    <from sec="1107320700" usec="0"/>
    <to sec="1107321138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
438[label="129.0.59.59;s;268pkt 268fpkt", shape=diamond, color=yellow];
909[label="219.40.111.228;d;10pkt 10fpkt", shape=diamond, color=yellow];
1000[label="26.95.145.2;d;8pkt 8fpkt", shape=diamond, color=yellow];
1001[label="129.0.59.51;s;115pkt 115fpkt", shape=diamond, color=yellow];
1245[label="42.45.149.117;d;49pkt 49fpkt", shape=diamond, color=yellow];
1454[label="129.0.38.108;s;8pkt 8fpkt", shape=diamond, color=yellow];
1694[label="95.202.13.54;d;29pkt 29fpkt", shape=diamond, color=yellow];
1700[label="192.117.2.244;d;22pkt 22fpkt", shape=diamond, color=yellow];
1895[label="194.25.17.71;d;6pkt 6fpkt", shape=diamond, color=yellow];
2061[label="129.0.205.137;s;21pkt 21fpkt", shape=diamond, color=yellow];
2163[label="129.0.45.165;s;86pkt 86fpkt", shape=diamond, color=yellow];
2281[label="129.0.59.56;s;12pkt 12fpkt", shape=diamond, color=yellow];
2285[label="214.190.68.45;d;29pkt 29fpkt", shape=diamond, color=yellow];
2738[label="42.45.149.117;d;44pkt 44fpkt", shape=hexagon, color=black];
3112[label="129.0.59.59;s;231pkt 231fpkt", shape=hexagon, color=black];
3244[label="129.0.45.165;s;82pkt 82fpkt", shape=hexagon, color=black];
3300[label="194.25.17.71;d;6pkt 6fpkt", shape=hexagon, color=black];
3983[label="129.0.59.51;117pkt 117fpkt", shape=pentagon, color=darkviolet];
4390[label="129.0.38.108;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4586[label="129.0.205.137;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5589[label="129.0.59.51;116pkt 116fpkt", shape=invtriangle, color=brown];
5619[label="129.0.59.59;298pkt 298fpkt", shape=invtriangle, color=brown];
5823[label="129.0.38.108;8pkt 8fpkt", shape=invtriangle, color=brown];
5935[label="129.0.205.137;26pkt 26fpkt", shape=invtriangle, color=brown];
6665[label="129.0.205.137;27pkt 27fpkt", shape=invhouse, color=bisque];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.59.59:80, 42.45.149.117:*}[23.1173%]&lt;BR/&gt;{129.0.59.51:80, *:*}[20.3152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1586%)&lt;BR/&gt; 25: (2.84504%)&lt;BR/&gt; 113: (2.36077%)&lt;BR/&gt; 554: (0.453995%)&lt;BR/&gt; 1841: (0.211864%)&gt;];
}
438--691[label="0.00373134;1pkt 1fpkt"];
438--909[label="0.6;6pkt 6fpkt"];
438--1000[label="0.75;6pkt 6fpkt"];
438--1245[label="1;49pkt 49fpkt"];
438--1694[label="0.655172;19pkt 19fpkt"];
438--1700[label="0.227273;5pkt 5fpkt"];
438--1895[label="0.333333;2pkt 2fpkt"];
438--2663[label="0.00373134;1pkt 1fpkt"];
438--2738[label="1;44pkt 44fpkt"];
438--3112[label="1;231pkt 231fpkt"];
438--3300[label="0.333333;2pkt 2fpkt"];
438--5619[label="0.996269;267pkt 267fpkt"];
909--2163[label="0.4;4pkt 4fpkt"];
909--3112[label="0.6;6pkt 6fpkt"];
909--3244[label="0.4;4pkt 4fpkt"];
909--5619[label="0.6;6pkt 6fpkt"];
1000--1001[label="0.25;2pkt 2fpkt"];
1000--3112[label="0.75;6pkt 6fpkt"];
1000--3983[label="0.25;2pkt 2fpkt"];
1000--5589[label="0.25;2pkt 2fpkt"];
1000--5619[label="0.75;6pkt 6fpkt"];
1001--1694[label="0.0689655;2pkt 2fpkt"];
1001--1895[label="0.333333;2pkt 2fpkt"];
1001--2285[label="0.206897;6pkt 6fpkt"];
1001--2663[label="0.0608696;7pkt 7fpkt"];
1001--3300[label="0.333333;2pkt 2fpkt"];
1001--3983[label="1;115pkt 115fpkt"];
1001--5589[label="0.991304;114pkt 114fpkt"];
1245--3112[label="0.55102;27pkt 27fpkt"];
1245--5619[label="1;49pkt 49fpkt"];
1454--1694[label="0.25;2pkt 2fpkt"];
1454--4390[label="1;8pkt 8fpkt"];
1454--5823[label="1;8pkt 8fpkt"];
1694--2281[label="0.0833333;1pkt 1fpkt"];
1694--3112[label="0.655172;19pkt 19fpkt"];
1694--3983[label="0.0689655;2pkt 2fpkt"];
1694--4390[label="0.25;2pkt 2fpkt"];
1694--5589[label="0.0344828;1pkt 1fpkt"];
1694--5619[label="0.62069;18pkt 18fpkt"];
1694--5823[label="0.25;2pkt 2fpkt"];
1700--2061[label="0.666667;14pkt 14fpkt"];
1700--3112[label="0.227273;5pkt 5fpkt"];
1700--4586[label="0.636364;14pkt 14fpkt"];
1700--5619[label="0.227273;5pkt 5fpkt"];
1700--5935[label="0.636364;14pkt 14fpkt"];
1700--6665[label="0.636364;14pkt 14fpkt"];
1895--3112[label="0.333333;2pkt 2fpkt"];
1895--3300[label="1;6pkt 6fpkt"];
1895--3983[label="0.333333;2pkt 2fpkt"];
1895--3995[label="0.166667;1pkt 1fpkt"];
1895--5589[label="0.333333;2pkt 2fpkt"];
1895--5619[label="0.333333;2pkt 2fpkt"];
2061--2098[label="0.047619;1pkt 1fpkt"];
2061--3212[label="0.047619;1pkt 1fpkt"];
2061--3521[label="0.047619;1pkt 1fpkt"];
2061--4586[label="0.952381;20pkt 20fpkt"];
2061--5935[label="0.952381;20pkt 20fpkt"];
2061--6665[label="1;21pkt 21fpkt"];
2163--3244[label="1;82pkt 82fpkt"];
2281--2285[label="0.916667;11pkt 11fpkt"];
2285--3983[label="0.206897;6pkt 6fpkt"];
2285--5589[label="0.206897;6pkt 6fpkt"];
2738--3112[label="1;44pkt 44fpkt"];
2738--5619[label="1;44pkt 44fpkt"];
3112--3300[label="0.333333;2pkt 2fpkt"];
3112--5619[label="0.995671;230pkt 230fpkt"];
3300--3983[label="0.333333;2pkt 2fpkt"];
3300--3995[label="0.166667;1pkt 1fpkt"];
3300--5589[label="0.333333;2pkt 2fpkt"];
3300--5619[label="0.333333;2pkt 2fpkt"];
3983--5589[label="1;116pkt 116fpkt"];
4390--5823[label="1;8pkt 8fpkt"];
4586--5935[label="1;26pkt 26fpkt"];
4586--6665[label="1;26pkt 26fpkt"];
5935--6665[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="129.0.59.51" src_port="80"/>
      <filter dst_ip="42.45.149.117" src_ip="129.0.59.59" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
2288[label="133.219.73.250;s;35pkt 35fpkt", shape=diamond, color=yellow];
3308[label="133.219.73.250;s;33pkt 33fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.219.73.250:*, 130.60.64.246:80}[37.1429%]&lt;BR/&gt;{133.219.73.250:*, 130.60.72.128:80}[20%]&lt;BR/&gt;{133.219.73.250:*, 130.48.35.138:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5294%)&lt;BR/&gt; 1089: (1.47059%)&lt;BR/&gt; 1088: (1.47059%)&lt;BR/&gt; 1087: (1.47059%)&lt;BR/&gt; 1086: (1.47059%)&gt;];
}
2288--3308[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="130.60.64.246" dst_port="80" src_ip="133.219.73.250"/>
      <filter dst_ip="130.48.35.138" dst_port="80" src_ip="133.219.73.250"/>
      <filter dst_ip="130.60.72.128" dst_port="80" src_ip="133.219.73.250"/>
    </slice>
    <from sec="1107320898" usec="0"/>
    <to sec="1107321226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
2095[label="129.0.47.138;s;27pkt 27fpkt", shape=diamond, color=yellow];
3312[label="129.0.47.138;s;27pkt 27fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.47.138:*, 221.198.132.134:80}[48.1481%]&lt;BR/&gt;{129.0.47.138:*, 195.133.8.161:80}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4245: (1.85185%)&lt;BR/&gt; 4244: (1.85185%)&lt;BR/&gt; 4243: (1.85185%)&lt;BR/&gt; 4242: (1.85185%)&gt;];
}
2095--3312[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="221.198.132.134" dst_port="80" src_ip="129.0.47.138"/>
      <filter dst_ip="195.133.8.161" dst_port="80" src_ip="129.0.47.138"/>
    </slice>
    <from sec="1107320915" usec="0"/>
    <to sec="1107321192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
572[label="129.1.138.45;s;261pkt 261fpkt", shape=diamond, color=yellow];
699[label="219.207.32.5;d;68pkt 68fpkt", shape=diamond, color=yellow];
741[label="16.249.151.92;d;329pkt 329fpkt", shape=diamond, color=yellow];
890[label="161.69.104.74;s;31pkt 31fpkt", shape=diamond, color=yellow];
1039[label="129.1.171.15;s;199pkt 199fpkt", shape=diamond, color=yellow];
1099[label="16.249.151.10;d;70pkt 70fpkt", shape=diamond, color=yellow];
1120[label="129.0.251.130;s;58pkt 58fpkt", shape=diamond, color=yellow];
1165[label="16.249.151.109;d;51pkt 51fpkt", shape=diamond, color=yellow];
1411[label="129.0.192.226;s;34pkt 34fpkt", shape=diamond, color=yellow];
1678[label="129.1.193.27;s;15pkt 15fpkt", shape=diamond, color=yellow];
1706[label="16.249.151.8;d;106pkt 106fpkt", shape=diamond, color=yellow];
1817[label="133.219.48.57;s;91pkt 91fpkt", shape=diamond, color=yellow];
1870[label="161.69.99.188;s;42pkt 42fpkt", shape=diamond, color=yellow];
2086[label="195.249.22.137;d;36pkt 36fpkt", shape=diamond, color=yellow];
2176[label="200.124.230.126;s;49pkt 49fpkt", shape=diamond, color=yellow];
2699[label="16.249.151.10;d;26pkt 26fpkt", shape=hexagon, color=black];
2706[label="129.0.251.130;s;58pkt 58fpkt", shape=hexagon, color=black];
2881[label="16.249.151.92;d;329pkt 329fpkt", shape=hexagon, color=black];
3034[label="133.219.48.57;s;50pkt 50fpkt", shape=hexagon, color=black];
3273[label="129.0.192.226;s;27pkt 27fpkt", shape=hexagon, color=black];
3289[label="161.69.99.188;s;42pkt 42fpkt", shape=hexagon, color=black];
3690[label="129.1.171.15;214pkt 214fpkt", shape=pentagon, color=darkviolet];
3798[label="129.1.193.27;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4153[label="161.69.104.74;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4526[label="129.0.251.130;57pkt 57fpkt", shape=pentagon, color=darkviolet];
4717[label="129.0.81.154;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4723[label="161.69.109.155;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4731[label="133.63.162.156;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4941[label="129.1.162.188;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5022[label="129.0.78.203;88pkt 88fpkt", shape=pentagon, color=darkviolet];
5185[label="129.0.192.226;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5482[label="129.1.193.27;15pkt 15fpkt", shape=invtriangle, color=brown];
5684[label="161.69.104.74;33pkt 33fpkt", shape=invtriangle, color=brown];
6008[label="129.0.81.154;29pkt 29fpkt", shape=invtriangle, color=brown];
6014[label="161.69.109.155;13pkt 13fpkt", shape=invtriangle, color=brown];
6020[label="133.63.162.156;19pkt 19fpkt", shape=invtriangle, color=brown];
6142[label="161.69.99.188;48pkt 48fpkt", shape=invtriangle, color=brown];
6143[label="129.1.162.188;32pkt 32fpkt", shape=invtriangle, color=brown];
6200[label="129.0.78.203;88pkt 88fpkt", shape=invtriangle, color=brown];
6456[label="129.1.193.27;16pkt 16fpkt", shape=invhouse, color=bisque];
6695[label="129.0.81.154;30pkt 30fpkt", shape=invhouse, color=bisque];
6759[label="129.1.162.188;32pkt 32fpkt", shape=invhouse, color=bisque];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 16.249.151.92:80}[30.8979%]&lt;BR/&gt;{129.1.138.45:*, *:*}[22.9754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5603%)&lt;BR/&gt; 443: (4.95983%)&lt;BR/&gt; 1863: (0.628711%)&lt;BR/&gt; 46174: (0.523926%)&lt;BR/&gt; 5190: (0.366748%)&gt;];
}
572--596[label="0.0943396;5pkt 5fpkt"];
572--741[label="0.0114943;3pkt 3fpkt"];
572--1085[label="0.012987;1pkt 1fpkt"];
572--1165[label="0.509804;26pkt 26fpkt"];
572--1343[label="0.0555556;4pkt 4fpkt"];
572--1706[label="0.235849;25pkt 25fpkt"];
572--2017[label="0.0107527;1pkt 1fpkt"];
572--2365[label="0.0531915;5pkt 5fpkt"];
572--2881[label="0.0114943;3pkt 3fpkt"];
572--3006[label="0.0555556;4pkt 4fpkt"];
572--3271[label="0.0943396;5pkt 5fpkt"];
572--3540[label="0.0536398;14pkt 14fpkt"];
572--3550[label="0.0383142;10pkt 10fpkt"];
572--3559[label="0.122605;32pkt 32fpkt"];
572--3562[label="0.0383142;10pkt 10fpkt"];
699--846[label="0.0588235;4pkt 4fpkt"];
699--1120[label="0.0689655;4pkt 4fpkt"];
699--1411[label="0.705882;24pkt 24fpkt"];
699--2176[label="0.346939;17pkt 17fpkt"];
699--2706[label="0.0689655;4pkt 4fpkt"];
699--3273[label="0.888889;24pkt 24fpkt"];
699--3540[label="0.147059;10pkt 10fpkt"];
699--3550[label="0.0588235;4pkt 4fpkt"];
699--3562[label="0.0588235;4pkt 4fpkt"];
699--4526[label="0.0701754;4pkt 4fpkt"];
699--4717[label="0.275862;8pkt 8fpkt"];
699--5185[label="0.705882;24pkt 24fpkt"];
699--6008[label="0.275862;8pkt 8fpkt"];
699--6308[label="0.0588235;4pkt 4fpkt"];
699--6695[label="0.266667;8pkt 8fpkt"];
741--884[label="0.00377358;1pkt 1fpkt"];
741--890[label="1;31pkt 31fpkt"];
741--1039[label="0.98995;197pkt 197fpkt"];
741--1108[label="0.00598802;1pkt 1fpkt"];
741--1196[label="0.00406504;1pkt 1fpkt"];
741--1515[label="0.0454545;1pkt 1fpkt"];
741--1678[label="0.333333;5pkt 5fpkt"];
741--1806[label="0.00694444;1pkt 1fpkt"];
741--1817[label="0.043956;4pkt 4fpkt"];
741--1827[label="0.147059;15pkt 15fpkt"];
741--2702[label="0.00598802;1pkt 1fpkt"];
741--2881[label="1;329pkt 329fpkt"];
741--3034[label="0.08;4pkt 4fpkt"];
741--3161[label="0.00769231;1pkt 1fpkt"];
741--3270[label="0.147059;15pkt 15fpkt"];
741--3508[label="0.00735294;1pkt 1fpkt"];
741--3540[label="0.173252;57pkt 57fpkt"];
741--3550[label="0.0851064;28pkt 28fpkt"];
741--3559[label="0.0790274;26pkt 26fpkt"];
741--3562[label="0.0851064;28pkt 28fpkt"];
741--3690[label="0.920561;197pkt 197fpkt"];
741--3798[label="0.3125;5pkt 5fpkt"];
741--4011[label="0.166667;2pkt 2fpkt"];
741--4153[label="0.96875;31pkt 31fpkt"];
741--4556[label="0.141509;15pkt 15fpkt"];
741--4731[label="0.15;3pkt 3fpkt"];
741--4941[label="0.424242;14pkt 14fpkt"];
741--5022[label="0.0454545;4pkt 4fpkt"];
741--5482[label="0.333333;5pkt 5fpkt"];
741--5684[label="0.939394;31pkt 31fpkt"];
741--5917[label="0.142857;15pkt 15fpkt"];
741--6020[label="0.157895;3pkt 3fpkt"];
741--6143[label="0.4375;14pkt 14fpkt"];
741--6200[label="0.0454545;4pkt 4fpkt"];
741--6456[label="0.3125;5pkt 5fpkt"];
741--6759[label="0.4375;14pkt 14fpkt"];
890--2881[label="1;31pkt 31fpkt"];
890--3540[label="0.387097;12pkt 12fpkt"];
890--3550[label="0.0322581;1pkt 1fpkt"];
890--3562[label="0.0322581;1pkt 1fpkt"];
890--4153[label="1;31pkt 31fpkt"];
890--5684[label="1;31pkt 31fpkt"];
1039--2881[label="0.98995;197pkt 197fpkt"];
1039--3540[label="0.0502513;10pkt 10fpkt"];
1039--3550[label="0.0653266;13pkt 13fpkt"];
1039--3559[label="0.0703518;14pkt 14fpkt"];
1039--3562[label="0.0653266;13pkt 13fpkt"];
1039--3690[label="0.994975;198pkt 198fpkt"];
1099--1108[label="0.0428571;3pkt 3fpkt"];
1099--1120[label="0.137931;8pkt 8fpkt"];
1099--1128[label="0.0142857;1pkt 1fpkt"];
1099--1557[label="0.0142857;1pkt 1fpkt"];
1099--1668[label="0.025641;1pkt 1fpkt"];
1099--1870[label="0.785714;33pkt 33fpkt"];
1099--2699[label="1;26pkt 26fpkt"];
1099--2702[label="0.0428571;3pkt 3fpkt"];
1099--2706[label="0.137931;8pkt 8fpkt"];
1099--2906[label="0.0188679;1pkt 1fpkt"];
1099--2924[label="0.0142857;1pkt 1fpkt"];
1099--2962[label="0.0142857;1pkt 1fpkt"];
1099--3289[label="0.785714;33pkt 33fpkt"];
1099--3499[label="0.0142857;1pkt 1fpkt"];
1099--3508[label="0.0428571;3pkt 3fpkt"];
1099--3540[label="0.0285714;2pkt 2fpkt"];
1099--3550[label="0.157143;11pkt 11fpkt"];
1099--3559[label="0.0428571;3pkt 3fpkt"];
1099--3562[label="0.157143;11pkt 11fpkt"];
1099--3710[label="0.0263158;1pkt 1fpkt"];
1099--4120[label="0.0142857;1pkt 1fpkt"];
1099--4526[label="0.140351;8pkt 8fpkt"];
1099--4632[label="0.0588235;1pkt 1fpkt"];
1099--4723[label="0.384615;5pkt 5fpkt"];
1099--4731[label="0.1;2pkt 2fpkt"];
1099--5131[label="0.0625;1pkt 1fpkt"];
1099--5236[label="0.0208333;1pkt 1fpkt"];
1099--5958[label="0.0555556;1pkt 1fpkt"];
1099--6014[label="0.384615;5pkt 5fpkt"];
1099--6020[label="0.105263;2pkt 2fpkt"];
1099--6142[label="0.6875;33pkt 33fpkt"];
1099--6263[label="0.0588235;1pkt 1fpkt"];
1099--6328[label="0.0208333;1pkt 1fpkt"];
1099--6812[label="0.0625;1pkt 1fpkt"];
1099--6838[label="0.0212766;1pkt 1fpkt"];
1120--1785[label="0.0344828;2pkt 2fpkt"];
1120--2574[label="0.0172414;1pkt 1fpkt"];
1120--2625[label="0.0172414;1pkt 1fpkt"];
1120--2699[label="0.307692;8pkt 8fpkt"];
1120--2706[label="1;58pkt 58fpkt"];
1120--2969[label="0.0344828;2pkt 2fpkt"];
1120--2998[label="0.0172414;1pkt 1fpkt"];
1120--3371[label="0.0344828;2pkt 2fpkt"];
1120--3550[label="0.172414;10pkt 10fpkt"];
1120--3559[label="0.0172414;1pkt 1fpkt"];
1120--3562[label="0.172414;10pkt 10fpkt"];
1120--4526[label="1;57pkt 57fpkt"];
1165--2702[label="0.0784314;4pkt 4fpkt"];
1165--3508[label="0.0784314;4pkt 4fpkt"];
1165--4731[label="0.2;4pkt 4fpkt"];
1165--6020[label="0.210526;4pkt 4fpkt"];
1411--2121[label="0.0588235;2pkt 2fpkt"];
1411--3273[label="1;27pkt 27fpkt"];
1411--5185[label="1;34pkt 34fpkt"];
1678--2881[label="0.333333;5pkt 5fpkt"];
1678--3550[label="0.133333;2pkt 2fpkt"];
1678--3559[label="0.333333;5pkt 5fpkt"];
1678--3562[label="0.133333;2pkt 2fpkt"];
1678--3798[label="1;15pkt 15fpkt"];
1678--5482[label="0.933333;14pkt 14fpkt"];
1678--6456[label="1;15pkt 15fpkt"];
1706--3559[label="0.367925;39pkt 39fpkt"];
1706--5022[label="0.863636;76pkt 76fpkt"];
1706--5236[label="0.104167;5pkt 5fpkt"];
1706--6200[label="0.863636;76pkt 76fpkt"];
1706--6328[label="0.104167;5pkt 5fpkt"];
1706--6838[label="0.106383;5pkt 5fpkt"];
1817--2047[label="0.0263158;2pkt 2fpkt"];
1817--2086[label="0.555556;20pkt 20fpkt"];
1817--2873[label="0.010989;1pkt 1fpkt"];
1817--2881[label="0.043956;4pkt 4fpkt"];
1817--2998[label="0.010989;1pkt 1fpkt"];
1817--3034[label="1;50pkt 50fpkt"];
1817--3286[label="0.0263158;2pkt 2fpkt"];
1817--3540[label="0.0659341;6pkt 6fpkt"];
1817--3550[label="0.043956;4pkt 4fpkt"];
1817--3559[label="0.032967;3pkt 3fpkt"];
1817--3562[label="0.043956;4pkt 4fpkt"];
1870--2699[label="0.346154;9pkt 9fpkt"];
1870--3289[label="1;42pkt 42fpkt"];
1870--3550[label="0.190476;8pkt 8fpkt"];
1870--3559[label="0.0952381;4pkt 4fpkt"];
1870--3562[label="0.190476;8pkt 8fpkt"];
1870--6142[label="1;42pkt 42fpkt"];
2086--2602[label="0.0277778;1pkt 1fpkt"];
2086--3034[label="0.194444;7pkt 7fpkt"];
2086--3455[label="0.0277778;1pkt 1fpkt"];
2699--2702[label="0.0384615;1pkt 1fpkt"];
2699--2706[label="0.307692;8pkt 8fpkt"];
2699--2924[label="0.0384615;1pkt 1fpkt"];
2699--2962[label="0.0384615;1pkt 1fpkt"];
2699--3289[label="0.346154;9pkt 9fpkt"];
2699--3499[label="0.0384615;1pkt 1fpkt"];
2699--3508[label="0.0384615;1pkt 1fpkt"];
2699--3540[label="0.0769231;2pkt 2fpkt"];
2699--3550[label="0.423077;11pkt 11fpkt"];
2699--3562[label="0.423077;11pkt 11fpkt"];
2699--4526[label="0.307692;8pkt 8fpkt"];
2699--4632[label="0.0588235;1pkt 1fpkt"];
2699--4731[label="0.05;1pkt 1fpkt"];
2699--5958[label="0.0555556;1pkt 1fpkt"];
2699--6020[label="0.0526316;1pkt 1fpkt"];
2699--6142[label="0.346154;9pkt 9fpkt"];
2706--2969[label="0.0344828;2pkt 2fpkt"];
2706--2998[label="0.0172414;1pkt 1fpkt"];
2706--3371[label="0.0344828;2pkt 2fpkt"];
2706--3550[label="0.172414;10pkt 10fpkt"];
2706--3559[label="0.0172414;1pkt 1fpkt"];
2706--3562[label="0.172414;10pkt 10fpkt"];
2706--4526[label="1;57pkt 57fpkt"];
2881--3034[label="0.08;4pkt 4fpkt"];
2881--3161[label="0.00769231;1pkt 1fpkt"];
2881--3270[label="0.147059;15pkt 15fpkt"];
2881--3508[label="0.00735294;1pkt 1fpkt"];
2881--3540[label="0.173252;57pkt 57fpkt"];
2881--3550[label="0.0851064;28pkt 28fpkt"];
2881--3559[label="0.0790274;26pkt 26fpkt"];
2881--3562[label="0.0851064;28pkt 28fpkt"];
2881--3690[label="0.920561;197pkt 197fpkt"];
2881--3798[label="0.3125;5pkt 5fpkt"];
2881--4011[label="0.166667;2pkt 2fpkt"];
2881--4153[label="0.96875;31pkt 31fpkt"];
2881--4556[label="0.141509;15pkt 15fpkt"];
2881--4731[label="0.15;3pkt 3fpkt"];
2881--4941[label="0.424242;14pkt 14fpkt"];
2881--5022[label="0.0454545;4pkt 4fpkt"];
2881--5482[label="0.333333;5pkt 5fpkt"];
2881--5684[label="0.939394;31pkt 31fpkt"];
2881--5917[label="0.142857;15pkt 15fpkt"];
2881--6020[label="0.157895;3pkt 3fpkt"];
2881--6143[label="0.4375;14pkt 14fpkt"];
2881--6200[label="0.0454545;4pkt 4fpkt"];
2881--6456[label="0.3125;5pkt 5fpkt"];
2881--6759[label="0.4375;14pkt 14fpkt"];
3034--3286[label="0.04;2pkt 2fpkt"];
3034--3540[label="0.12;6pkt 6fpkt"];
3034--3550[label="0.08;4pkt 4fpkt"];
3034--3559[label="0.06;3pkt 3fpkt"];
3034--3562[label="0.08;4pkt 4fpkt"];
3273--5185[label="1;27pkt 27fpkt"];
3289--3550[label="0.190476;8pkt 8fpkt"];
3289--3559[label="0.0952381;4pkt 4fpkt"];
3289--3562[label="0.190476;8pkt 8fpkt"];
3289--6142[label="1;42pkt 42fpkt"];
3798--5482[label="1;15pkt 15fpkt"];
3798--6456[label="1;16pkt 16fpkt"];
4153--5684[label="1;32pkt 32fpkt"];
4717--6008[label="1;29pkt 29fpkt"];
4717--6695[label="1;29pkt 29fpkt"];
4723--6014[label="1;13pkt 13fpkt"];
4731--6020[label="1;19pkt 19fpkt"];
4941--6143[label="1;32pkt 32fpkt"];
4941--6759[label="1;32pkt 32fpkt"];
5022--6200[label="1;88pkt 88fpkt"];
5482--6456[label="1;15pkt 15fpkt"];
6008--6695[label="1;29pkt 29fpkt"];
6143--6759[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="129.1.138.45"/>
      <filter dst_ip="16.249.151.92" dst_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
2269[label="201.251.144.98;s;71pkt 71fpkt", shape=diamond, color=yellow];
3427[label="201.251.144.98;s;71pkt 71fpkt", shape=hexagon, color=black];
4340[label="201.251.144.98;70pkt 70fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.144.98:*, 221.73.180.116:80}[32.3944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3027: (0.707547%)&lt;BR/&gt; 1219: (0.707547%)&lt;BR/&gt; 1214: (0.707547%)&lt;BR/&gt; 1213: (0.707547%)&gt;];
}
2269--3427[label="1;71pkt 71fpkt"];
2269--3559[label="0.0704225;5pkt 5fpkt"];
2269--4340[label="1;70pkt 70fpkt"];
3427--3559[label="0.0704225;5pkt 5fpkt"];
3427--4340[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="221.73.180.116" dst_port="80" src_ip="201.251.144.98"/>
    </slice>
    <from sec="1107320783" usec="0"/>
    <to sec="1107321256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907331,1.85559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
2548[label="93.206.76.75;d;3pkt 3fpkt", shape=diamond, color=yellow];
3444[label="93.206.76.75;d;3pkt 3fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.137.167:1688, 93.206.76.75:80}[33.3333%]&lt;BR/&gt;{129.0.137.167:1689, 93.206.76.75:80}[33.3333%]&lt;BR/&gt;{129.0.137.167:1690, 93.206.76.75:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1690: (16.6667%)&lt;BR/&gt; 1689: (16.6667%)&lt;BR/&gt; 1688: (16.6667%)&gt;];
}
2548--3444[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="93.206.76.75" dst_port="80" src_ip="129.0.137.167" src_port="1690"/>
      <filter dst_ip="93.206.76.75" dst_port="80" src_ip="129.0.137.167" src_port="1689"/>
      <filter dst_ip="93.206.76.75" dst_port="80" src_ip="129.0.137.167" src_port="1688"/>
    </slice>
    <from sec="1107321197" usec="0"/>
    <to sec="1107321212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31282,2.03139,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.18.128.41"/>
      <from sec="1107320879" usec="0"/>
      <to sec="1107321213" usec="0"/>
    </slice>
    <from sec="1107320879" usec="0"/>
    <to sec="1107321213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31282,2.03139,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.148.191.110"/>
      <from sec="1107320700" usec="0"/>
      <to sec="1107321138" usec="0"/>
    </slice>
    <from sec="1107320700" usec="0"/>
    <to sec="1107321138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.159.64.1"/>
    </slice>
    <from sec="1107320435" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
795[label="133.63.194.45;d;837pkt 837fpkt", shape=diamond, color=yellow];
1745[label="133.63.67.136;d;25pkt 25fpkt", shape=diamond, color=yellow];
2266[label="201.61.101.200;s;2pkt 2fpkt", shape=diamond, color=yellow];
2892[label="133.63.194.45;d;837pkt 837fpkt", shape=hexagon, color=black];
3582[label="200.8.180.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5007[label="201.61.101.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5365[label="200.8.180.1;1pkt 1fpkt", shape=invtriangle, color=brown];
6189[label="201.61.101.200;1pkt 1fpkt", shape=invtriangle, color=brown];
6406[label="200.8.180.1;1pkt 1fpkt", shape=invhouse, color=bisque];
6783[label="201.61.101.200;1pkt 1fpkt", shape=invhouse, color=bisque];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.63.194.45:53}[96.7517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.9918%)&lt;BR/&gt; 32768: (2.40187%)&lt;BR/&gt; 32769: (1.87463%)&lt;BR/&gt; 6346: (0.995899%)&lt;BR/&gt; 1024: (0.527241%)&gt;];
}
795--2266[label="0.5;1pkt 1fpkt"];
795--2892[label="1;837pkt 837fpkt"];
795--3549[label="0.108722;91pkt 91fpkt"];
795--3582[label="1;1pkt 1fpkt"];
795--5007[label="1;1pkt 1fpkt"];
795--5365[label="1;1pkt 1fpkt"];
795--6189[label="1;1pkt 1fpkt"];
795--6406[label="1;1pkt 1fpkt"];
795--6783[label="1;1pkt 1fpkt"];
1745--2266[label="0.5;1pkt 1fpkt"];
2266--2892[label="0.5;1pkt 1fpkt"];
2266--5007[label="1;1pkt 1fpkt"];
2266--6189[label="1;1pkt 1fpkt"];
2266--6783[label="1;1pkt 1fpkt"];
2892--3549[label="0.108722;91pkt 91fpkt"];
2892--3582[label="1;1pkt 1fpkt"];
2892--5007[label="1;1pkt 1fpkt"];
2892--5365[label="1;1pkt 1fpkt"];
2892--6189[label="1;1pkt 1fpkt"];
2892--6406[label="1;1pkt 1fpkt"];
2892--6783[label="1;1pkt 1fpkt"];
3582--5365[label="1;1pkt 1fpkt"];
3582--6406[label="1;1pkt 1fpkt"];
5007--6189[label="1;1pkt 1fpkt"];
5007--6783[label="1;1pkt 1fpkt"];
5365--6406[label="1;1pkt 1fpkt"];
6189--6783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.63.194.45" dst_port="53"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
3607[label="129.0.80.5;50pkt 50fpkt", shape=pentagon, color=darkviolet];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.80.5:*, 209.249.186.248:80}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49688: (1%)&lt;BR/&gt; 49687: (1%)&lt;BR/&gt; 49686: (1%)&lt;BR/&gt; 49685: (1%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="209.249.186.248" dst_port="80" src_ip="129.0.80.5"/>
    </slice>
    <from sec="1107320501" usec="0"/>
    <to sec="1107320912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
346[label="212.161.147.5;s;3788pkt 3788fpkt", shape=diamond, color=yellow];
3609[label="212.161.147.5;4105pkt 4105fpkt", shape=pentagon, color=darkviolet];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.161.147.5:8888, *:*}[54.9086%]&lt;BR/&gt;{212.161.147.5:80, *:*}[45.0914%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (27.4167%)&lt;BR/&gt; 80: (22.615%)&lt;BR/&gt; 172: (0.114025%)&lt;BR/&gt; 132: (0.114025%)&lt;BR/&gt; 216: (0.10769%)&gt;];
}
346--3540[label="0.000263992;1pkt 1fpkt"];
346--3549[label="0.000263992;1pkt 1fpkt"];
346--3609[label="1;3788pkt 3788fpkt"];
</description>
    <slice>
      <filter src_ip="212.161.147.5" src_port="8888"/>
      <filter src_ip="212.161.147.5" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.166.5"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.210.6"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
129[label="42.166.1.7s;155pkt 155fpkt", shape=rectangle, color=red];
3616[label="42.166.1.7;155pkt 155fpkt", shape=pentagon, color=darkviolet];
5383[label="42.166.1.7;154pkt 154fpkt", shape=invtriangle, color=brown];
6421[label="42.166.1.7;155pkt 155fpkt", shape=invhouse, color=bisque];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.166.1.7:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3093: (0.646204%)&lt;BR/&gt; 3024: (0.646204%)&lt;BR/&gt; 4983: (0.323102%)&lt;BR/&gt; 4974: (0.323102%)&gt;];
}
129--3616[label="1;155pkt 155fpkt"];
129--5383[label="1;154pkt 154fpkt"];
129--6421[label="1;155pkt 155fpkt"];
3616--5383[label="1;154pkt 154fpkt"];
3616--6421[label="1;155pkt 155fpkt"];
5383--6421[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="42.166.1.7"/>
    </slice>
    <from sec="1107321058" usec="0"/>
    <to sec="1107321062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.46.7"/>
    </slice>
    <from sec="1107320437" usec="0"/>
    <to sec="1107320948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.171.8"/>
    </slice>
    <from sec="1107321231" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.252.9"/>
    </slice>
    <from sec="1107321104" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
3648[label="129.0.32.11;43pkt 43fpkt", shape=pentagon, color=darkviolet];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.32.11:*, 206.185.34.137:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1270: (1.16279%)&lt;BR/&gt; 1269: (1.16279%)&lt;BR/&gt; 1268: (1.16279%)&lt;BR/&gt; 1267: (1.16279%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="206.185.34.137" dst_port="80" src_ip="129.0.32.11"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.78.108.11"/>
    </slice>
    <from sec="1107320520" usec="0"/>
    <to sec="1107320859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
1240[label="148.189.64.51;d;64pkt 64fpkt", shape=diamond, color=yellow];
2736[label="148.189.64.51;d;62pkt 62fpkt", shape=hexagon, color=black];
3656[label="219.134.226.11;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3994[label="219.134.226.52;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5404[label="219.134.226.11;18pkt 18fpkt", shape=invtriangle, color=brown];
5595[label="219.134.226.52;6pkt 6fpkt", shape=invtriangle, color=brown];
6431[label="219.134.226.11;17pkt 17fpkt", shape=invhouse, color=bisque];
6505[label="219.134.226.52;6pkt 6fpkt", shape=invhouse, color=bisque];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.134.226.48:80, 148.189.64.51:*}[35.9375%]&lt;BR/&gt;{219.134.226.11:80, 148.189.64.51:*}[28.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4924%)&lt;BR/&gt; 1765: (1.26904%)&lt;BR/&gt; 1764: (1.26904%)&lt;BR/&gt; 1760: (1.26904%)&lt;BR/&gt; 1757: (1.26904%)&gt;];
}
1240--2736[label="1;62pkt 62fpkt"];
1240--3656[label="1;18pkt 18fpkt"];
1240--3994[label="1;6pkt 6fpkt"];
1240--5404[label="1;18pkt 18fpkt"];
1240--5595[label="1;6pkt 6fpkt"];
1240--6431[label="1;17pkt 17fpkt"];
1240--6505[label="1;6pkt 6fpkt"];
2736--3656[label="1;18pkt 18fpkt"];
2736--3994[label="1;6pkt 6fpkt"];
2736--5404[label="1;18pkt 18fpkt"];
2736--5595[label="1;6pkt 6fpkt"];
2736--6431[label="1;17pkt 17fpkt"];
2736--6505[label="1;6pkt 6fpkt"];
3656--5404[label="1;18pkt 18fpkt"];
3656--6431[label="1;17pkt 17fpkt"];
3994--5595[label="1;6pkt 6fpkt"];
3994--6505[label="1;6pkt 6fpkt"];
5404--6431[label="1;17pkt 17fpkt"];
5595--6505[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.64.51" src_ip="219.134.226.48" src_port="80"/>
      <filter dst_ip="148.189.64.51" src_ip="219.134.226.11" src_port="80"/>
    </slice>
    <from sec="1107320502" usec="0"/>
    <to sec="1107320738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.236.65.12"/>
    </slice>
    <from sec="1107320466" usec="0"/>
    <to sec="1107320889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.148.108.12"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.133.109.12"/>
    </slice>
    <from sec="1107320767" usec="0"/>
    <to sec="1107321278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.123.61.13"/>
    </slice>
    <from sec="1107320417" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.228.123.13"/>
    </slice>
    <from sec="1107320823" usec="0"/>
    <to sec="1107320865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837643,1.81153,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
97[label="40.152.183.13s;253pkt 253fpkt", shape=rectangle, color=red];
3674[label="40.152.183.13;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.152.183.13:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
97--3674[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="40.152.183.13" src_port="1045"/>
    </slice>
    <from sec="1107321092" usec="0"/>
    <to sec="1107321108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.65.14"/>
    </slice>
    <from sec="1107320594" usec="0"/>
    <to sec="1107321279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.208.223.14"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107320586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.81.45.17"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.139.45.17"/>
    </slice>
    <from sec="1107320478" usec="0"/>
    <to sec="1107320494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.213.173.17"/>
    </slice>
    <from sec="1107320641" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.8.206.17"/>
    </slice>
    <from sec="1107320409" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.14.178.18"/>
    </slice>
    <from sec="1107320907" usec="0"/>
    <to sec="1107320990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.20.235.18"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.208.1.19"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
131[label="88.107.128.19s;106pkt 106fpkt", shape=rectangle, color=red];
3728[label="88.107.128.19;136pkt 136fpkt", shape=pentagon, color=darkviolet];
5443[label="88.107.128.19;137pkt 137fpkt", shape=invtriangle, color=brown];
6444[label="88.107.128.19;137pkt 137fpkt", shape=invhouse, color=bisque];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.107.128.19:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61820: (0.387597%)&lt;BR/&gt; 61382: (0.387597%)&lt;BR/&gt; 61376: (0.387597%)&lt;BR/&gt; 61369: (0.387597%)&gt;];
}
131--3728[label="1;106pkt 106fpkt"];
131--5443[label="1;106pkt 106fpkt"];
131--6444[label="1;106pkt 106fpkt"];
3728--5443[label="1;136pkt 136fpkt"];
3728--6444[label="1;136pkt 136fpkt"];
5443--6444[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="88.107.128.19"/>
    </slice>
    <from sec="1107320755" usec="0"/>
    <to sec="1107320768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.110.132.19"/>
    </slice>
    <from sec="1107320432" usec="0"/>
    <to sec="1107321265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.23.20"/>
    </slice>
    <from sec="1107320505" usec="0"/>
    <to sec="1107320920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.220.80.20"/>
    </slice>
    <from sec="1107321193" usec="0"/>
    <to sec="1107321199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.209.20"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.220.20"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.138.240.20"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.129.27.23"/>
    </slice>
    <from sec="1107320793" usec="0"/>
    <to sec="1107321229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.112.128.23"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.137.130.23"/>
    </slice>
    <from sec="1107320426" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.63.74.24"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.37.93.24"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.176.243.24"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.161.81.28"/>
    </slice>
    <from sec="1107320629" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.63.209.28"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.221.31.29"/>
    </slice>
    <from sec="1107320420" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.63.114.30"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.209.254.30"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
99[label="42.74.36.31s;238pkt 238fpkt", shape=rectangle, color=red];
3825[label="42.74.36.31;254pkt 254fpkt", shape=pentagon, color=darkviolet];
5497[label="42.74.36.31;253pkt 253fpkt", shape=invtriangle, color=brown];
6464[label="42.74.36.31;254pkt 254fpkt", shape=invhouse, color=bisque];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.74.36.31:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
99--3825[label="1;238pkt 238fpkt"];
99--5497[label="0.995798;237pkt 237fpkt"];
99--6464[label="1;238pkt 238fpkt"];
3825--5497[label="1;253pkt 253fpkt"];
3825--6464[label="1;254pkt 254fpkt"];
5497--6464[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="42.74.36.31" src_port="1029"/>
    </slice>
    <from sec="1107320829" usec="0"/>
    <to sec="1107320848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.232.168.33"/>
    </slice>
    <from sec="1107320440" usec="0"/>
    <to sec="1107321224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.242.144.34"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887425,1.76871,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
101[label="212.14.179.35s;96pkt 96fpkt", shape=rectangle, color=red];
3857[label="212.14.179.35;255pkt 255fpkt", shape=pentagon, color=darkviolet];
5515[label="212.14.179.35;255pkt 255fpkt", shape=invtriangle, color=brown];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.14.179.35:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
101--3857[label="1;96pkt 96fpkt"];
101--5515[label="1;96pkt 96fpkt"];
3857--5515[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.14.179.35" src_port="1025"/>
    </slice>
    <from sec="1107320937" usec="0"/>
    <to sec="1107320951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.246.36.36"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.139.113.36"/>
    </slice>
    <from sec="1107320773" usec="0"/>
    <to sec="1107320807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.44.230.37"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
3887[label="95.204.71.38;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.204.71.38:*, 200.124.242.204:80}[50%]&lt;BR/&gt;{95.204.71.38:*, 133.234.31.213:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60619: (2.77778%)&lt;BR/&gt; 59066: (2.77778%)&lt;BR/&gt; 57435: (2.77778%)&lt;BR/&gt; 55841: (2.77778%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="133.234.31.213" dst_port="80" src_ip="95.204.71.38"/>
      <filter dst_ip="200.124.242.204" dst_port="80" src_ip="95.204.71.38"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.231.71.39"/>
    </slice>
    <from sec="1107320801" usec="0"/>
    <to sec="1107320945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.5.213.40"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.231.40"/>
    </slice>
    <from sec="1107320959" usec="0"/>
    <to sec="1107321083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.32.42"/>
    </slice>
    <from sec="1107321251" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.185.64.43"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.63.248.43"/>
    </slice>
    <from sec="1107320439" usec="0"/>
    <to sec="1107321290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.160.62.44"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.48.241.45"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.242.153.48"/>
    </slice>
    <from sec="1107320808" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.83.37.49"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
594[label="129.0.47.112;d;19pkt 19fpkt", shape=diamond, color=yellow];
623[label="212.8.38.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
944[label="212.8.40.91;s;2pkt 2fpkt", shape=diamond, color=yellow];
950[label="212.8.38.49;s;2pkt 2fpkt", shape=diamond, color=yellow];
1270[label="212.8.38.153;s;2pkt 2fpkt", shape=diamond, color=yellow];
3038[label="129.0.47.112;d;19pkt 19fpkt", shape=hexagon, color=black];
3885[label="212.8.38.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3974[label="212.8.38.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4297[label="212.8.40.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5584[label="212.8.38.49;1pkt 1fpkt", shape=invtriangle, color=brown];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.184.94.171:80, 129.0.47.112:*}[47.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3167: (5%)&lt;BR/&gt; 3161: (4%)&lt;BR/&gt; 3120: (4%)&lt;BR/&gt; 3210: (3%)&gt;];
}
594--623[label="1;2pkt 2fpkt"];
594--944[label="1;2pkt 2fpkt"];
594--950[label="1;2pkt 2fpkt"];
594--1270[label="1;2pkt 2fpkt"];
594--3038[label="1;19pkt 19fpkt"];
594--3885[label="1;1pkt 1fpkt"];
594--3974[label="1;1pkt 1fpkt"];
594--4297[label="1;1pkt 1fpkt"];
594--5584[label="1;1pkt 1fpkt"];
623--3038[label="1;2pkt 2fpkt"];
623--3885[label="1;1pkt 1fpkt"];
944--3038[label="1;2pkt 2fpkt"];
944--4297[label="1;1pkt 1fpkt"];
950--3038[label="1;2pkt 2fpkt"];
950--3974[label="1;1pkt 1fpkt"];
950--5584[label="1;1pkt 1fpkt"];
1270--3038[label="1;2pkt 2fpkt"];
3038--3885[label="1;1pkt 1fpkt"];
3038--3974[label="1;1pkt 1fpkt"];
3038--4297[label="1;1pkt 1fpkt"];
3038--5584[label="1;1pkt 1fpkt"];
3974--5584[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.47.112" src_ip="218.184.94.171" src_port="80"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107320835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.138.112.49"/>
    </slice>
    <from sec="1107320602" usec="0"/>
    <to sec="1107320673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.23.73.50"/>
    </slice>
    <from sec="1107320868" usec="0"/>
    <to sec="1107320954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.125.179.50"/>
    </slice>
    <from sec="1107321210" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.152.128.51"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.118.189.54"/>
    </slice>
    <from sec="1107321197" usec="0"/>
    <to sec="1107321229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.138.26.56"/>
    </slice>
    <from sec="1107321142" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.64.91.57"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.129.109.57"/>
    </slice>
    <from sec="1107320598" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.55.22.58"/>
    </slice>
    <from sec="1107320413" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.168.35.60"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.139.123.60"/>
    </slice>
    <from sec="1107320918" usec="0"/>
    <to sec="1107320945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.136.243.60"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837643,1.81153,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
141[label="211.4.252.62s;106pkt 106fpkt", shape=rectangle, color=red];
4056[label="211.4.252.62;241pkt 241fpkt", shape=pentagon, color=darkviolet];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.4.252.62:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 62171: (4.89914%)&lt;BR/&gt; 62311: (1.72911%)&lt;BR/&gt; 62084: (1.72911%)&lt;BR/&gt; 61789: (1.15274%)&gt;];
}
141--4056[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.4.252.62"/>
    </slice>
    <from sec="1107321174" usec="0"/>
    <to sec="1107321189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.104.240.64"/>
    </slice>
    <from sec="1107320814" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.73.66"/>
    </slice>
    <from sec="1107320609" usec="0"/>
    <to sec="1107320667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.209.41.67"/>
    </slice>
    <from sec="1107321039" usec="0"/>
    <to sec="1107321083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
143[label="214.11.48.67s;242pkt 242fpkt", shape=rectangle, color=red];
4085[label="214.11.48.67;242pkt 242fpkt", shape=pentagon, color=darkviolet];
5649[label="214.11.48.67;242pkt 242fpkt", shape=invtriangle, color=brown];
6531[label="214.11.48.67;242pkt 242fpkt", shape=invhouse, color=bisque];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.11.48.67:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4994: (0.206612%)&lt;BR/&gt; 4993: (0.206612%)&lt;BR/&gt; 4949: (0.206612%)&lt;BR/&gt; 4937: (0.206612%)&gt;];
}
143--4085[label="1;242pkt 242fpkt"];
143--5649[label="1;242pkt 242fpkt"];
143--6531[label="1;242pkt 242fpkt"];
4085--5649[label="1;242pkt 242fpkt"];
4085--6531[label="1;242pkt 242fpkt"];
5649--6531[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.11.48.67"/>
    </slice>
    <from sec="1107321225" usec="0"/>
    <to sec="1107321227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.251.5.69"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.96.37.69"/>
    </slice>
    <from sec="1107320455" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.251.5.70"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.110.50.70"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
1132[label="164.238.146.70;s;526pkt 526fpkt", shape=diamond, color=yellow];
4114[label="164.238.146.70;577pkt 577fpkt", shape=pentagon, color=darkviolet];
5669[label="164.238.146.70;578pkt 578fpkt", shape=invtriangle, color=brown];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.146.70:*, *:443}[96.5398%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.2153%)&lt;BR/&gt; 6667: (1.78465%)&lt;BR/&gt; 1671: (0.267698%)&lt;BR/&gt; 1433: (0.267698%)&lt;BR/&gt; 4820: (0.178465%)&gt;];
}
1132--1966[label="0.00684932;1pkt 1fpkt"];
1132--4114[label="0.998099;525pkt 525fpkt"];
1132--5669[label="1;526pkt 526fpkt"];
4114--5669[label="1;577pkt 577fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="164.238.146.70"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.92.176.70"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837643,1.81153,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
104[label="200.150.133.72s;144pkt 144fpkt", shape=rectangle, color=red];
4133[label="200.150.133.72;207pkt 207fpkt", shape=pentagon, color=darkviolet];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.150.133.72:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
104--4133[label="0.993056;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.150.133.72" src_port="1033"/>
    </slice>
    <from sec="1107320915" usec="0"/>
    <to sec="1107320930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.86.201.72"/>
    </slice>
    <from sec="1107321227" usec="0"/>
    <to sec="1107321253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.124.240.72"/>
    </slice>
    <from sec="1107320447" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.244.61.74"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
146[label="211.18.208.74s;173pkt 173fpkt", shape=rectangle, color=red];
4156[label="211.18.208.74;229pkt 229fpkt", shape=pentagon, color=darkviolet];
5687[label="211.18.208.74;230pkt 230fpkt", shape=invtriangle, color=brown];
6550[label="211.18.208.74;229pkt 229fpkt", shape=invhouse, color=bisque];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.18.208.74:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 2968: (0.232288%)&lt;BR/&gt; 2967: (0.232288%)&lt;BR/&gt; 2966: (0.232288%)&lt;BR/&gt; 2962: (0.232288%)&gt;];
}
146--4156[label="1;173pkt 173fpkt"];
146--5687[label="1;173pkt 173fpkt"];
146--6550[label="1;173pkt 173fpkt"];
4156--5687[label="1;229pkt 229fpkt"];
4156--6550[label="1;229pkt 229fpkt"];
5687--6550[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="211.18.208.74"/>
    </slice>
    <from sec="1107321150" usec="0"/>
    <to sec="1107321155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.242.147.75"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.200.75"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1701[label="129.1.252.75;s;94pkt 94fpkt", shape=diamond, color=yellow];
4166[label="129.1.252.75;94pkt 94fpkt", shape=pentagon, color=darkviolet];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.252.75:*, 42.186.120.161:80}[78.7234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33036: (0.531915%)&lt;BR/&gt; 33035: (0.531915%)&lt;BR/&gt; 33034: (0.531915%)&lt;BR/&gt; 33033: (0.531915%)&gt;];
}
1701--3559[label="0.0957447;9pkt 9fpkt"];
1701--4166[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="42.186.120.161" dst_port="80" src_ip="129.1.252.75"/>
    </slice>
    <from sec="1107320670" usec="0"/>
    <to sec="1107320932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.91.181.76"/>
    </slice>
    <from sec="1107320433" usec="0"/>
    <to sec="1107321232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.182.84.77"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.225.77"/>
    </slice>
    <from sec="1107321168" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.190.144.78"/>
    </slice>
    <from sec="1107320502" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.162.78"/>
    </slice>
    <from sec="1107320641" usec="0"/>
    <to sec="1107321089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.186.78"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.24.241.78"/>
    </slice>
    <from sec="1107320491" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.203.79"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.10.129.80"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.177.52.81"/>
    </slice>
    <from sec="1107321035" usec="0"/>
    <to sec="1107321102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.209.167.81"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
903[label="144.99.143.223;d;57pkt 57fpkt", shape=diamond, color=yellow];
904[label="133.219.4.73;s;69pkt 69fpkt", shape=diamond, color=yellow];
915[label="129.1.252.55;s;163pkt 163fpkt", shape=diamond, color=yellow];
989[label="137.112.46.241;d;150pkt 150fpkt", shape=diamond, color=yellow];
1212[label="129.1.114.20;s;89pkt 89fpkt", shape=diamond, color=yellow];
1431[label="133.219.177.36;s;69pkt 69fpkt", shape=diamond, color=yellow];
1492[label="88.174.51.81;d;2pkt 2fpkt", shape=diamond, color=yellow];
1519[label="129.0.209.188;s;63pkt 63fpkt", shape=diamond, color=yellow];
1574[label="129.1.224.154;s;89pkt 89fpkt", shape=diamond, color=yellow];
1667[label="161.69.23.82;s;57pkt 57fpkt", shape=diamond, color=yellow];
1831[label="129.0.205.145;s;163pkt 163fpkt", shape=diamond, color=yellow];
1845[label="16.253.206.222;d;161pkt 161fpkt", shape=diamond, color=yellow];
1874[label="95.7.162.166;d;26pkt 26fpkt", shape=diamond, color=yellow];
1905[label="209.202.108.121;d;21pkt 21fpkt", shape=diamond, color=yellow];
1983[label="133.63.91.69;s;171pkt 171fpkt", shape=diamond, color=yellow];
2087[label="94.136.36.242;d;9pkt 9fpkt", shape=diamond, color=yellow];
2108[label="217.83.96.230;d;10pkt 10fpkt", shape=diamond, color=yellow];
2322[label="55.98.135.193;d;3pkt 3fpkt", shape=diamond, color=yellow];
2449[label="209.183.222.117;d;87pkt 87fpkt", shape=diamond, color=yellow];
2456[label="129.1.83.87;s;63pkt 63fpkt", shape=diamond, color=yellow];
2492[label="16.4.219.4;d;73pkt 73fpkt", shape=diamond, color=yellow];
3044[label="129.0.205.145;s;163pkt 163fpkt", shape=hexagon, color=black];
3055[label="129.1.114.20;s;89pkt 89fpkt", shape=hexagon, color=black];
3149[label="129.1.224.154;s;86pkt 86fpkt", shape=hexagon, color=black];
3315[label="217.83.96.230;d;10pkt 10fpkt", shape=hexagon, color=black];
3318[label="55.98.135.193;d;3pkt 3fpkt", shape=hexagon, color=black];
3398[label="209.183.222.117;d;87pkt 87fpkt", shape=hexagon, color=black];
3399[label="129.1.252.55;s;163pkt 163fpkt", shape=hexagon, color=black];
3740[label="129.1.114.20;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3945[label="129.0.208.44;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4037[label="129.0.50.60;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4104[label="133.63.91.69;172pkt 172fpkt", shape=pentagon, color=darkviolet];
4218[label="161.69.23.82;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4259[label="129.1.83.87;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4656[label="129.0.205.145;169pkt 169fpkt", shape=pentagon, color=darkviolet];
4679[label="129.0.3.148;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4764[label="161.69.123.162;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5140[label="161.69.43.218;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5183[label="129.1.144.226;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5450[label="129.1.114.20;100pkt 100fpkt", shape=invtriangle, color=brown];
5621[label="129.0.50.60;46pkt 46fpkt", shape=invtriangle, color=brown];
5662[label="133.63.91.69;173pkt 173fpkt", shape=invtriangle, color=brown];
5721[label="161.69.23.82;56pkt 56fpkt", shape=invtriangle, color=brown];
5740[label="129.1.83.87;73pkt 73fpkt", shape=invtriangle, color=brown];
5982[label="129.0.3.148;20pkt 20fpkt", shape=invtriangle, color=brown];
6268[label="161.69.43.218;54pkt 54fpkt", shape=invtriangle, color=brown];
6449[label="129.1.114.20;101pkt 101fpkt", shape=invhouse, color=bisque];
6567[label="161.69.23.82;56pkt 56fpkt", shape=invhouse, color=bisque];
6573[label="129.1.83.87;72pkt 72fpkt", shape=invhouse, color=bisque];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[91.5094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9434%)&lt;BR/&gt; 53: (1.57682%)&lt;BR/&gt; 443: (0.808625%)&lt;BR/&gt; 56218: (0.768194%)&lt;BR/&gt; 1863: (0.74124%)&gt;];
}
903--904[label="0.912281;52pkt 52fpkt"];
903--2602[label="0.0175439;1pkt 1fpkt"];
903--3455[label="0.0175439;1pkt 1fpkt"];
903--3540[label="0.157895;9pkt 9fpkt"];
903--3550[label="0.175439;10pkt 10fpkt"];
903--3559[label="0.0526316;3pkt 3fpkt"];
903--3562[label="0.175439;10pkt 10fpkt"];
904--2449[label="0.246377;17pkt 17fpkt"];
904--3398[label="0.246377;17pkt 17fpkt"];
904--3540[label="0.15942;11pkt 11fpkt"];
904--3550[label="0.173913;12pkt 12fpkt"];
904--3559[label="0.0434783;3pkt 3fpkt"];
904--3562[label="0.173913;12pkt 12fpkt"];
915--989[label="0.253333;38pkt 38fpkt"];
915--1140[label="0.0613497;10pkt 10fpkt"];
915--1425[label="0.0268456;4pkt 4fpkt"];
915--1492[label="1;2pkt 2fpkt"];
915--2031[label="0.018018;2pkt 2fpkt"];
915--2121[label="0.047619;6pkt 6fpkt"];
915--2207[label="0.0263158;3pkt 3fpkt"];
915--2915[label="0.070922;10pkt 10fpkt"];
915--3399[label="1;163pkt 163fpkt"];
915--3540[label="0.0552147;9pkt 9fpkt"];
915--3550[label="0.0306748;5pkt 5fpkt"];
915--3559[label="0.0122699;2pkt 2fpkt"];
915--3562[label="0.0306748;5pkt 5fpkt"];
989--1181[label="0.0314961;4pkt 4fpkt"];
989--1212[label="0.494382;44pkt 44fpkt"];
989--1291[label="0.08;12pkt 12fpkt"];
989--1431[label="0.144928;10pkt 10fpkt"];
989--1519[label="0.126984;8pkt 8fpkt"];
989--1667[label="0.122807;7pkt 7fpkt"];
989--3055[label="0.494382;44pkt 44fpkt"];
989--3399[label="0.253333;38pkt 38fpkt"];
989--3540[label="0.0333333;5pkt 5fpkt"];
989--3550[label="0.02;3pkt 3fpkt"];
989--3559[label="0.02;3pkt 3fpkt"];
989--3562[label="0.02;3pkt 3fpkt"];
989--3740[label="0.47;47pkt 47fpkt"];
989--3772[label="0.08;12pkt 12fpkt"];
989--4218[label="0.125;7pkt 7fpkt"];
989--5183[label="1;12pkt 12fpkt"];
989--5450[label="0.47;47pkt 47fpkt"];
989--5469[label="0.08;12pkt 12fpkt"];
989--5721[label="0.125;7pkt 7fpkt"];
989--6449[label="0.465347;47pkt 47fpkt"];
989--6567[label="0.125;7pkt 7fpkt"];
1212--3055[label="1;89pkt 89fpkt"];
1212--3540[label="0.011236;1pkt 1fpkt"];
1212--3550[label="0.0898876;8pkt 8fpkt"];
1212--3559[label="0.0337079;3pkt 3fpkt"];
1212--3562[label="0.0898876;8pkt 8fpkt"];
1212--3740[label="0.988764;88pkt 88fpkt"];
1212--5450[label="0.988764;88pkt 88fpkt"];
1212--6449[label="1;89pkt 89fpkt"];
1431--1609[label="0.0869565;6pkt 6fpkt"];
1431--1905[label="0.952381;20pkt 20fpkt"];
1431--2233[label="0.0434783;1pkt 1fpkt"];
1431--2969[label="0.0144928;1pkt 1fpkt"];
1431--3559[label="0.0289855;2pkt 2fpkt"];
1492--3399[label="1;2pkt 2fpkt"];
1519--1564[label="0.0377358;2pkt 2fpkt"];
1519--1785[label="0.031746;2pkt 2fpkt"];
1519--1826[label="0.031746;2pkt 2fpkt"];
1519--1874[label="0.0769231;2pkt 2fpkt"];
1519--2031[label="0.015873;1pkt 1fpkt"];
1519--2168[label="0.031746;2pkt 2fpkt"];
1519--2722[label="0.0454545;1pkt 1fpkt"];
1519--2969[label="0.031746;2pkt 2fpkt"];
1519--2998[label="0.031746;2pkt 2fpkt"];
1519--3371[label="0.031746;2pkt 2fpkt"];
1519--3401[label="0.015873;1pkt 1fpkt"];
1519--3467[label="0.0454545;1pkt 1fpkt"];
1519--3540[label="0.047619;3pkt 3fpkt"];
1519--3550[label="0.0634921;4pkt 4fpkt"];
1519--3559[label="0.031746;2pkt 2fpkt"];
1519--3562[label="0.0634921;4pkt 4fpkt"];
1574--1845[label="0.157303;14pkt 14fpkt"];
1574--2121[label="0.011236;1pkt 1fpkt"];
1574--2449[label="0.0344828;3pkt 3fpkt"];
1574--3149[label="1;86pkt 86fpkt"];
1574--3398[label="0.0344828;3pkt 3fpkt"];
1574--3540[label="0.146067;13pkt 13fpkt"];
1574--3549[label="0.011236;1pkt 1fpkt"];
1574--3550[label="0.146067;13pkt 13fpkt"];
1574--3562[label="0.146067;13pkt 13fpkt"];
1667--1845[label="0.157895;9pkt 9fpkt"];
1667--2449[label="0.105263;6pkt 6fpkt"];
1667--3398[label="0.105263;6pkt 6fpkt"];
1667--3550[label="0.350877;20pkt 20fpkt"];
1667--3559[label="0.175439;10pkt 10fpkt"];
1667--3562[label="0.350877;20pkt 20fpkt"];
1667--4218[label="1;56pkt 56fpkt"];
1667--5721[label="1;56pkt 56fpkt"];
1667--6567[label="1;56pkt 56fpkt"];
1831--1874[label="0.0769231;2pkt 2fpkt"];
1831--2017[label="0.0107527;1pkt 1fpkt"];
1831--2998[label="0.00613497;1pkt 1fpkt"];
1831--3044[label="1;163pkt 163fpkt"];
1831--3540[label="0.0122699;2pkt 2fpkt"];
1831--3550[label="0.0122699;2pkt 2fpkt"];
1831--3559[label="0.0122699;2pkt 2fpkt"];
1831--3562[label="0.0122699;2pkt 2fpkt"];
1831--4656[label="0.993865;162pkt 162fpkt"];
1845--1983[label="0.0869565;14pkt 14fpkt"];
1845--2317[label="0.0823529;7pkt 7fpkt"];
1845--2962[label="0.0621118;10pkt 10fpkt"];
1845--3149[label="0.162791;14pkt 14fpkt"];
1845--3499[label="0.0621118;10pkt 10fpkt"];
1845--3540[label="0.0496894;8pkt 8fpkt"];
1845--3550[label="0.0869565;14pkt 14fpkt"];
1845--3559[label="0.0434783;7pkt 7fpkt"];
1845--3562[label="0.0869565;14pkt 14fpkt"];
1845--4104[label="0.0869565;14pkt 14fpkt"];
1845--4120[label="0.00621118;1pkt 1fpkt"];
1845--4218[label="0.160714;9pkt 9fpkt"];
1845--4764[label="0.189189;7pkt 7fpkt"];
1845--5140[label="0.109091;6pkt 6fpkt"];
1845--5220[label="0.5;9pkt 9fpkt"];
1845--5353[label="0.0559006;9pkt 9fpkt"];
1845--5662[label="0.0869565;14pkt 14fpkt"];
1845--5721[label="0.160714;9pkt 9fpkt"];
1845--6268[label="0.0925926;5pkt 5fpkt"];
1845--6398[label="0.0559006;9pkt 9fpkt"];
1845--6567[label="0.160714;9pkt 9fpkt"];
1845--6874[label="0.0559006;9pkt 9fpkt"];
1874--1983[label="0.0769231;2pkt 2fpkt"];
1874--2456[label="0.0769231;2pkt 2fpkt"];
1874--3044[label="0.0769231;2pkt 2fpkt"];
1874--3550[label="0.0769231;2pkt 2fpkt"];
1874--3559[label="0.0769231;2pkt 2fpkt"];
1874--3562[label="0.0769231;2pkt 2fpkt"];
1874--4104[label="0.0769231;2pkt 2fpkt"];
1874--4172[label="0.2;1pkt 1fpkt"];
1874--4259[label="0.0769231;2pkt 2fpkt"];
1874--4656[label="0.0769231;2pkt 2fpkt"];
1874--5353[label="0.0769231;2pkt 2fpkt"];
1874--5662[label="0.0769231;2pkt 2fpkt"];
1874--5740[label="0.0769231;2pkt 2fpkt"];
1874--6398[label="0.0769231;2pkt 2fpkt"];
1874--6573[label="0.0769231;2pkt 2fpkt"];
1874--6874[label="0.0769231;2pkt 2fpkt"];
1905--2602[label="0.047619;1pkt 1fpkt"];
1905--3559[label="0.047619;1pkt 1fpkt"];
1983--2108[label="1;10pkt 10fpkt"];
1983--2322[label="1;3pkt 3fpkt"];
1983--2449[label="0.0229885;2pkt 2fpkt"];
1983--2492[label="0.109589;8pkt 8fpkt"];
1983--3006[label="0.0138889;1pkt 1fpkt"];
1983--3122[label="0.011976;2pkt 2fpkt"];
1983--3315[label="1;10pkt 10fpkt"];
1983--3318[label="1;3pkt 3fpkt"];
1983--3398[label="0.0229885;2pkt 2fpkt"];
1983--3401[label="0.0135135;2pkt 2fpkt"];
1983--4104[label="0.994152;170pkt 170fpkt"];
1983--5662[label="1;171pkt 171fpkt"];
2087--2687[label="0.111111;1pkt 1fpkt"];
2087--2962[label="0.222222;2pkt 2fpkt"];
2087--3499[label="0.222222;2pkt 2fpkt"];
2087--4037[label="0.333333;3pkt 3fpkt"];
2087--5575[label="0.111111;1pkt 1fpkt"];
2087--5621[label="0.333333;3pkt 3fpkt"];
2108--3315[label="1;10pkt 10fpkt"];
2108--4104[label="1;10pkt 10fpkt"];
2108--5662[label="1;10pkt 10fpkt"];
2322--3318[label="1;3pkt 3fpkt"];
2322--4104[label="1;3pkt 3fpkt"];
2322--5662[label="1;3pkt 3fpkt"];
2449--2650[label="0.0114943;1pkt 1fpkt"];
2449--2916[label="0.0114943;1pkt 1fpkt"];
2449--2962[label="0.0114943;1pkt 1fpkt"];
2449--3149[label="0.0348837;3pkt 3fpkt"];
2449--3398[label="1;87pkt 87fpkt"];
2449--3462[label="0.0114943;1pkt 1fpkt"];
2449--3499[label="0.0114943;1pkt 1fpkt"];
2449--3540[label="0.045977;4pkt 4fpkt"];
2449--3550[label="0.0804598;7pkt 7fpkt"];
2449--3559[label="0.045977;4pkt 4fpkt"];
2449--3562[label="0.0804598;7pkt 7fpkt"];
2449--3873[label="0.117647;2pkt 2fpkt"];
2449--3945[label="0.0454545;1pkt 1fpkt"];
2449--4037[label="0.152174;7pkt 7fpkt"];
2449--4097[label="0.0229885;2pkt 2fpkt"];
2449--4104[label="0.0229885;2pkt 2fpkt"];
2449--4106[label="0.0229885;2pkt 2fpkt"];
2449--4218[label="0.107143;6pkt 6fpkt"];
2449--4622[label="0.0114943;1pkt 1fpkt"];
2449--4764[label="0.0540541;2pkt 2fpkt"];
2449--5022[label="0.0229885;2pkt 2fpkt"];
2449--5140[label="0.0181818;1pkt 1fpkt"];
2449--5527[label="0.117647;2pkt 2fpkt"];
2449--5575[label="0.0114943;1pkt 1fpkt"];
2449--5621[label="0.152174;7pkt 7fpkt"];
2449--5659[label="0.0229885;2pkt 2fpkt"];
2449--5662[label="0.0229885;2pkt 2fpkt"];
2449--5721[label="0.107143;6pkt 6fpkt"];
2449--6200[label="0.0229885;2pkt 2fpkt"];
2449--6268[label="0.0185185;1pkt 1fpkt"];
2449--6536[label="0.0229885;2pkt 2fpkt"];
2449--6567[label="0.107143;6pkt 6fpkt"];
2456--2574[label="0.015873;1pkt 1fpkt"];
2456--3468[label="0.015873;1pkt 1fpkt"];
2456--3559[label="0.015873;1pkt 1fpkt"];
2456--4259[label="1;63pkt 63fpkt"];
2456--5740[label="1;63pkt 63fpkt"];
2456--6573[label="0.984127;62pkt 62fpkt"];
2492--3339[label="0.0136986;1pkt 1fpkt"];
2492--3942[label="0.146341;6pkt 6fpkt"];
2492--3945[label="0.272727;6pkt 6fpkt"];
2492--4037[label="0.152174;7pkt 7fpkt"];
2492--4104[label="0.109589;8pkt 8fpkt"];
2492--4679[label="0.238095;5pkt 5fpkt"];
2492--5022[label="0.0547945;4pkt 4fpkt"];
2492--5034[label="0.0136986;1pkt 1fpkt"];
2492--5353[label="0.0821918;6pkt 6fpkt"];
2492--5563[label="0.146341;6pkt 6fpkt"];
2492--5621[label="0.152174;7pkt 7fpkt"];
2492--5662[label="0.109589;8pkt 8fpkt"];
2492--5982[label="0.25;5pkt 5fpkt"];
2492--6200[label="0.0547945;4pkt 4fpkt"];
2492--6398[label="0.0821918;6pkt 6fpkt"];
2492--6874[label="0.0821918;6pkt 6fpkt"];
3044--3540[label="0.0122699;2pkt 2fpkt"];
3044--3550[label="0.0122699;2pkt 2fpkt"];
3044--3559[label="0.0122699;2pkt 2fpkt"];
3044--3562[label="0.0122699;2pkt 2fpkt"];
3044--4656[label="0.993865;162pkt 162fpkt"];
3055--3540[label="0.011236;1pkt 1fpkt"];
3055--3550[label="0.0898876;8pkt 8fpkt"];
3055--3559[label="0.0337079;3pkt 3fpkt"];
3055--3562[label="0.0898876;8pkt 8fpkt"];
3055--3740[label="0.988764;88pkt 88fpkt"];
3055--5450[label="0.988764;88pkt 88fpkt"];
3055--6449[label="1;89pkt 89fpkt"];
3149--3398[label="0.0348837;3pkt 3fpkt"];
3149--3540[label="0.151163;13pkt 13fpkt"];
3149--3549[label="0.0116279;1pkt 1fpkt"];
3149--3550[label="0.151163;13pkt 13fpkt"];
3149--3562[label="0.151163;13pkt 13fpkt"];
3315--4104[label="1;10pkt 10fpkt"];
3315--5662[label="1;10pkt 10fpkt"];
3318--4104[label="1;3pkt 3fpkt"];
3318--5662[label="1;3pkt 3fpkt"];
3398--3462[label="0.0114943;1pkt 1fpkt"];
3398--3499[label="0.0114943;1pkt 1fpkt"];
3398--3540[label="0.045977;4pkt 4fpkt"];
3398--3550[label="0.0804598;7pkt 7fpkt"];
3398--3559[label="0.045977;4pkt 4fpkt"];
3398--3562[label="0.0804598;7pkt 7fpkt"];
3398--3873[label="0.117647;2pkt 2fpkt"];
3398--3945[label="0.0454545;1pkt 1fpkt"];
3398--4037[label="0.152174;7pkt 7fpkt"];
3398--4097[label="0.0229885;2pkt 2fpkt"];
3398--4104[label="0.0229885;2pkt 2fpkt"];
3398--4106[label="0.0229885;2pkt 2fpkt"];
3398--4218[label="0.107143;6pkt 6fpkt"];
3398--4622[label="0.0114943;1pkt 1fpkt"];
3398--4764[label="0.0540541;2pkt 2fpkt"];
3398--5022[label="0.0229885;2pkt 2fpkt"];
3398--5140[label="0.0181818;1pkt 1fpkt"];
3398--5527[label="0.117647;2pkt 2fpkt"];
3398--5575[label="0.0114943;1pkt 1fpkt"];
3398--5621[label="0.152174;7pkt 7fpkt"];
3398--5659[label="0.0229885;2pkt 2fpkt"];
3398--5662[label="0.0229885;2pkt 2fpkt"];
3398--5721[label="0.107143;6pkt 6fpkt"];
3398--6200[label="0.0229885;2pkt 2fpkt"];
3398--6268[label="0.0185185;1pkt 1fpkt"];
3398--6536[label="0.0229885;2pkt 2fpkt"];
3398--6567[label="0.107143;6pkt 6fpkt"];
3399--3540[label="0.0552147;9pkt 9fpkt"];
3399--3550[label="0.0306748;5pkt 5fpkt"];
3399--3559[label="0.0122699;2pkt 2fpkt"];
3399--3562[label="0.0306748;5pkt 5fpkt"];
3740--5450[label="1;100pkt 100fpkt"];
3740--6449[label="1;100pkt 100fpkt"];
4037--5621[label="1;46pkt 46fpkt"];
4104--5662[label="1;172pkt 172fpkt"];
4218--5721[label="1;56pkt 56fpkt"];
4218--6567[label="1;56pkt 56fpkt"];
4259--5740[label="1;73pkt 73fpkt"];
4259--6573[label="1;72pkt 72fpkt"];
4679--5982[label="1;20pkt 20fpkt"];
5140--6268[label="1;54pkt 54fpkt"];
5450--6449[label="1;100pkt 100fpkt"];
5721--6567[label="1;56pkt 56fpkt"];
5740--6573[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.97.181.82"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.250.124.83"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.150.83"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.203.83"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.145.29.86"/>
    </slice>
    <from sec="1107320445" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.124.240.86"/>
    </slice>
    <from sec="1107320415" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.223.13.87"/>
    </slice>
    <from sec="1107321038" usec="0"/>
    <to sec="1107321168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.48.87"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.5.121.87"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.83.224.87"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.231.88"/>
    </slice>
    <from sec="1107320470" usec="0"/>
    <to sec="1107321258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.181.249.89"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.10.96.90"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.229.90"/>
    </slice>
    <from sec="1107320464" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.192.193.91"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.132.92"/>
    </slice>
    <from sec="1107321007" usec="0"/>
    <to sec="1107321010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1531[label="129.0.10.131;d;111pkt 111fpkt", shape=diamond, color=yellow];
4311[label="211.9.37.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4832[label="66.213.40.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.0.10.131:25}[92.7928%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.115%)&lt;BR/&gt; 3773: (1.32743%)&lt;BR/&gt; 4588: (0.884956%)&lt;BR/&gt; 1174: (0.884956%)&lt;BR/&gt; 113: (0.884956%)&gt;];
}
1531--4311[label="1;1pkt 1fpkt"];
1531--4832[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.10.131" dst_port="25"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.174.132.94"/>
    </slice>
    <from sec="1107320444" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.105.140.94"/>
    </slice>
    <from sec="1107320719" usec="0"/>
    <to sec="1107320724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
109[label="211.13.2.97s;168pkt 168fpkt", shape=rectangle, color=red];
4326[label="211.13.2.97;239pkt 239fpkt", shape=pentagon, color=darkviolet];
5774[label="211.13.2.97;239pkt 239fpkt", shape=invtriangle, color=brown];
6589[label="211.13.2.97;239pkt 239fpkt", shape=invhouse, color=bisque];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.13.2.97:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
109--4326[label="1;168pkt 168fpkt"];
109--5774[label="1;168pkt 168fpkt"];
109--6589[label="1;168pkt 168fpkt"];
4326--5774[label="1;239pkt 239fpkt"];
4326--6589[label="1;239pkt 239fpkt"];
5774--6589[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.13.2.97" src_port="1032"/>
    </slice>
    <from sec="1107320863" usec="0"/>
    <to sec="1107320902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.22.107.97"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
4363[label="129.0.47.103;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.47.103:*, 206.185.34.131:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2698: (1.19048%)&lt;BR/&gt; 2697: (1.19048%)&lt;BR/&gt; 2696: (1.19048%)&lt;BR/&gt; 2694: (1.19048%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="206.185.34.131" dst_port="80" src_ip="129.0.47.103"/>
    </slice>
    <from sec="1107320417" usec="0"/>
    <to sec="1107321288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
908[label="93.152.137.158;d;336pkt 336fpkt", shape=diamond, color=yellow];
1145[label="133.63.176.91;s;34pkt 34fpkt", shape=diamond, color=yellow];
1168[label="133.63.86.68;s;651pkt 651fpkt", shape=diamond, color=yellow];
1222[label="133.63.86.104;s;819pkt 819fpkt", shape=diamond, color=yellow];
1386[label="209.107.210.3;d;1106pkt 1106fpkt", shape=diamond, color=yellow];
2815[label="209.107.210.3;d;573pkt 573fpkt", shape=hexagon, color=black];
2919[label="133.63.176.91;s;34pkt 34fpkt", shape=hexagon, color=black];
4299[label="133.63.176.91;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4370[label="133.63.86.104;894pkt 894fpkt", shape=pentagon, color=darkviolet];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.86.104:*, 209.107.210.3:80}[42.3707%]&lt;BR/&gt;{133.63.86.68:*, 209.107.210.3:80}[30.7062%]&lt;BR/&gt;{*:*, 93.152.137.158:80}[21.942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9665%)&lt;BR/&gt; 1234: (0.0557911%)&lt;BR/&gt; 1211: (0.0557911%)&lt;BR/&gt; 1194: (0.0557911%)&lt;BR/&gt; 2266: (0.0446329%)&gt;];
}
908--1168[label="0.446429;150pkt 150fpkt"];
908--1222[label="0.553571;186pkt 186fpkt"];
908--3540[label="0.0238095;8pkt 8fpkt"];
908--3550[label="0.113095;38pkt 38fpkt"];
908--3559[label="0.107143;36pkt 36fpkt"];
908--3562[label="0.113095;38pkt 38fpkt"];
908--4370[label="0.553571;186pkt 186fpkt"];
1145--1386[label="0.0882353;3pkt 3fpkt"];
1145--2815[label="0.0882353;3pkt 3fpkt"];
1145--2919[label="1;34pkt 34fpkt"];
1145--3540[label="0.117647;4pkt 4fpkt"];
1145--3550[label="0.117647;4pkt 4fpkt"];
1145--3562[label="0.117647;4pkt 4fpkt"];
1145--4299[label="1;34pkt 34fpkt"];
1168--1386[label="0.74808;487pkt 487fpkt"];
1168--1656[label="0.0540541;4pkt 4fpkt"];
1168--2815[label="0.551483;316pkt 316fpkt"];
1168--3540[label="0.0798771;52pkt 52fpkt"];
1168--3550[label="0.0875576;57pkt 57fpkt"];
1168--3559[label="0.0737327;48pkt 48fpkt"];
1168--3562[label="0.0875576;57pkt 57fpkt"];
1222--1386[label="0.74359;609pkt 609fpkt"];
1222--1656[label="0.0540541;4pkt 4fpkt"];
1222--2815[label="0.4363;250pkt 250fpkt"];
1222--3550[label="0.0659341;54pkt 54fpkt"];
1222--3559[label="0.0671551;55pkt 55fpkt"];
1222--3562[label="0.0659341;54pkt 54fpkt"];
1222--4370[label="1;819pkt 819fpkt"];
1386--2578[label="0.00632911;7pkt 7fpkt"];
1386--2815[label="1;573pkt 573fpkt"];
1386--2919[label="0.0882353;3pkt 3fpkt"];
1386--3453[label="0.00632911;7pkt 7fpkt"];
1386--3540[label="0.0388788;43pkt 43fpkt"];
1386--3550[label="0.0641953;71pkt 71fpkt"];
1386--3559[label="0.0596745;66pkt 66fpkt"];
1386--3562[label="0.0641953;71pkt 71fpkt"];
1386--3953[label="0.00632911;7pkt 7fpkt"];
1386--4299[label="0.0882353;3pkt 3fpkt"];
1386--4370[label="0.681208;609pkt 609fpkt"];
1386--5569[label="0.00632911;7pkt 7fpkt"];
2815--2919[label="0.0882353;3pkt 3fpkt"];
2815--3453[label="0.0069808;4pkt 4fpkt"];
2815--3540[label="0.0750436;43pkt 43fpkt"];
2815--3550[label="0.123909;71pkt 71fpkt"];
2815--3559[label="0.0453752;26pkt 26fpkt"];
2815--3562[label="0.123909;71pkt 71fpkt"];
2815--3953[label="0.0069808;4pkt 4fpkt"];
2815--4299[label="0.0882353;3pkt 3fpkt"];
2815--4370[label="0.4363;250pkt 250fpkt"];
2815--5569[label="0.0069808;4pkt 4fpkt"];
2919--3540[label="0.117647;4pkt 4fpkt"];
2919--3550[label="0.117647;4pkt 4fpkt"];
2919--3562[label="0.117647;4pkt 4fpkt"];
2919--4299[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="93.152.137.158" dst_port="80"/>
      <filter dst_ip="209.107.210.3" dst_port="80" src_ip="133.63.86.104"/>
      <filter dst_ip="209.107.210.3" dst_port="80" src_ip="133.63.86.68"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.145.244.105"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.231.189.108"/>
    </slice>
    <from sec="1107320693" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.146.112"/>
    </slice>
    <from sec="1107320484" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
1951[label="42.181.12.113;s;657pkt 657fpkt", shape=diamond, color=yellow];
4411[label="42.181.12.113;805pkt 805fpkt", shape=pentagon, color=darkviolet];
5832[label="42.181.12.113;805pkt 805fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.181.12.113:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19492: (0.132333%)&lt;BR/&gt; 15181: (0.132333%)&lt;BR/&gt; 14308: (0.132333%)&lt;BR/&gt; 3815: (0.132333%)&gt;];
}
1951--4411[label="1;657pkt 657fpkt"];
1951--5832[label="1;657pkt 657fpkt"];
4411--5832[label="1;805pkt 805fpkt"];
</description>
    <slice>
      <filter src_ip="42.181.12.113" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.42.146.113"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.188.67.115"/>
    </slice>
    <from sec="1107320817" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.219.45.116"/>
    </slice>
    <from sec="1107320748" usec="0"/>
    <to sec="1107321284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.215.120"/>
    </slice>
    <from sec="1107320456" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
428[label="161.69.137.249;d;5pkt 5fpkt", shape=diamond, color=yellow];
429[label="40.150.211.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
2351[label="209.17.61.121;s;84pkt 84fpkt", shape=diamond, color=yellow];
3655[label="40.150.211.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4459[label="209.17.61.121;92pkt 92fpkt", shape=pentagon, color=darkviolet];
5403[label="40.150.211.11;1pkt 1fpkt", shape=invtriangle, color=brown];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.17.61.121:80, 201.242.144.64:*}[23.1579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9239%)&lt;BR/&gt; 443: (4.07609%)&lt;BR/&gt; 1271: (1.08696%)&lt;BR/&gt; 2470: (0.815217%)&lt;BR/&gt; 1278: (0.815217%)&gt;];
}
428--429[label="1;1pkt 1fpkt"];
428--2351[label="0.8;4pkt 4fpkt"];
428--3655[label="1;1pkt 1fpkt"];
428--4459[label="0.8;4pkt 4fpkt"];
428--5403[label="1;1pkt 1fpkt"];
429--3655[label="1;1pkt 1fpkt"];
429--5403[label="1;1pkt 1fpkt"];
2351--2656[label="0.0357143;3pkt 3fpkt"];
2351--2749[label="0.0714286;6pkt 6fpkt"];
2351--2858[label="0.0595238;5pkt 5fpkt"];
2351--3320[label="0.0714286;6pkt 6fpkt"];
2351--4459[label="0.97619;82pkt 82fpkt"];
3655--5403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.144.64" src_ip="209.17.61.121" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.35.163.121"/>
    </slice>
    <from sec="1107320442" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
1311[label="129.0.20.27;d;37pkt 37fpkt", shape=diamond, color=yellow];
4465[label="211.14.70.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 129.0.20.27:*}[43.2432%]&lt;BR/&gt;{*:25, 129.0.20.27:*}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.359%)&lt;BR/&gt; 80: (23.0769%)&lt;BR/&gt; 58000: (2.5641%)&lt;BR/&gt; 57999: (2.5641%)&lt;BR/&gt; 58711: (1.28205%)&gt;];
}
1311--4465[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.20.27" src_port="80"/>
      <filter dst_ip="129.0.20.27" src_port="25"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.98.136.123"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.74.170.123"/>
    </slice>
    <from sec="1107321042" usec="0"/>
    <to sec="1107321067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.82.111.124"/>
    </slice>
    <from sec="1107320416" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.203.135.127"/>
    </slice>
    <from sec="1107320415" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.182.195.127"/>
    </slice>
    <from sec="1107320916" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.20.128"/>
    </slice>
    <from sec="1107320413" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.141.148.128"/>
    </slice>
    <from sec="1107320683" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.251.148.128"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.16.129"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
1611[label="161.69.96.130;s;35pkt 35fpkt", shape=diamond, color=yellow];
1812[label="5.40.121.161;d;33pkt 33fpkt", shape=diamond, color=yellow];
3028[label="161.69.96.130;s;28pkt 28fpkt", shape=hexagon, color=black];
4521[label="161.69.96.130;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5897[label="161.69.96.130;37pkt 37fpkt", shape=invtriangle, color=brown];
6645[label="161.69.96.130;37pkt 37fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.96.130:*, 5.40.121.161:80}[81.0811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.7767%)&lt;BR/&gt; 443: (4.12621%)&lt;BR/&gt; 3541: (1.45631%)&lt;BR/&gt; 3540: (1.45631%)&lt;BR/&gt; 3539: (1.45631%)&gt;];
}
1611--1812[label="1;33pkt 33fpkt"];
1611--3028[label="1;28pkt 28fpkt"];
1611--3540[label="0.0571429;2pkt 2fpkt"];
1611--3550[label="0.0571429;2pkt 2fpkt"];
1611--3559[label="0.0571429;2pkt 2fpkt"];
1611--3562[label="0.0571429;2pkt 2fpkt"];
1611--4521[label="0.971429;34pkt 34fpkt"];
1611--5897[label="1;35pkt 35fpkt"];
1611--6645[label="1;35pkt 35fpkt"];
1812--3028[label="0.928571;26pkt 26fpkt"];
1812--3540[label="0.0606061;2pkt 2fpkt"];
1812--3550[label="0.0606061;2pkt 2fpkt"];
1812--3559[label="0.0606061;2pkt 2fpkt"];
1812--3562[label="0.0606061;2pkt 2fpkt"];
1812--4521[label="1;33pkt 33fpkt"];
1812--5897[label="1;33pkt 33fpkt"];
1812--6645[label="1;33pkt 33fpkt"];
3028--3540[label="0.0714286;2pkt 2fpkt"];
3028--3550[label="0.0714286;2pkt 2fpkt"];
3028--3559[label="0.0714286;2pkt 2fpkt"];
3028--3562[label="0.0714286;2pkt 2fpkt"];
3028--4521[label="0.964286;27pkt 27fpkt"];
3028--5897[label="1;28pkt 28fpkt"];
3028--6645[label="1;28pkt 28fpkt"];
4521--5897[label="1;36pkt 36fpkt"];
4521--6645[label="1;36pkt 36fpkt"];
5897--6645[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="5.40.121.161" dst_port="80" src_ip="161.69.96.130"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
831[label="210.106.172.130;s;2598pkt 2598fpkt", shape=diamond, color=yellow];
4523[label="210.106.172.130;2717pkt 2717fpkt", shape=pentagon, color=darkviolet];
5899[label="210.106.172.130;2716pkt 2716fpkt", shape=invtriangle, color=brown];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.106.172.130:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 12896: (0.0560329%)&lt;BR/&gt; 35875: (0.049807%)&lt;BR/&gt; 65134: (0.0373552%)&lt;BR/&gt; 63762: (0.0373552%)&gt;];
}
831--4523[label="1;2598pkt 2598fpkt"];
831--5899[label="0.999615;2597pkt 2597fpkt"];
4523--5899[label="1;2716pkt 2716fpkt"];
</description>
    <slice>
      <filter src_ip="210.106.172.130" src_port="7000"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.94.234.130"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.43.99.132"/>
    </slice>
    <from sec="1107320570" usec="0"/>
    <to sec="1107320924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.74.120.132"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
4538[label="129.1.125.132;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.125.132:*, *:80}[37.5%]&lt;BR/&gt;{129.1.125.132:*, *:3544}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 3544: (12.5%)&lt;BR/&gt; 64138: (6.25%)&lt;BR/&gt; 64137: (6.25%)&lt;BR/&gt; 64130: (6.25%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="129.1.125.132"/>
      <filter dst_port="3544" src_ip="129.1.125.132"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.54.244.132"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.152.40.133"/>
    </slice>
    <from sec="1107320785" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.170.103.135"/>
    </slice>
    <from sec="1107320434" usec="0"/>
    <to sec="1107321289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.196.117.135"/>
    </slice>
    <from sec="1107320458" usec="0"/>
    <to sec="1107320775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
2000[label="209.104.24.183;d;4pkt 4fpkt", shape=diamond, color=yellow];
2001[label="133.63.176.104;s;3pkt 3fpkt", shape=diamond, color=yellow];
3169[label="133.63.176.104;s;3pkt 3fpkt", shape=hexagon, color=black];
4565[label="133.63.181.135;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.181.135:1650, *:53}[28%]&lt;BR/&gt;{133.63.181.135:*, *:7000}[24%]&lt;BR/&gt;{133.63.181.135:*, *:8000}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (14.0625%)&lt;BR/&gt; 8000: (12.5%)&lt;BR/&gt; 7000: (10.9375%)&lt;BR/&gt; 1650: (10.9375%)&lt;BR/&gt; 6667: (7.8125%)&gt;];
}
2000--2001[label="0.333333;1pkt 1fpkt"];
2000--3169[label="0.333333;1pkt 1fpkt"];
2000--4565[label="0.75;3pkt 3fpkt"];
2001--3169[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="8000" src_ip="133.63.181.135"/>
      <filter dst_port="7000" src_ip="133.63.181.135"/>
      <filter dst_port="53" src_ip="133.63.181.135" src_port="1650"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.130.116.136"/>
    </slice>
    <from sec="1107320950" usec="0"/>
    <to sec="1107320968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.148.136"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.244.160.136"/>
    </slice>
    <from sec="1107320990" usec="0"/>
    <to sec="1107321049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.155.195.136"/>
    </slice>
    <from sec="1107320786" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.26.177.137"/>
    </slice>
    <from sec="1107321058" usec="0"/>
    <to sec="1107321086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.40.160.138"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.119.130.139"/>
    </slice>
    <from sec="1107320671" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.71.11.141"/>
    </slice>
    <from sec="1107320848" usec="0"/>
    <to sec="1107320866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.80.45.142"/>
    </slice>
    <from sec="1107321014" usec="0"/>
    <to sec="1107321068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.187.79.142"/>
    </slice>
    <from sec="1107320479" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
4626[label="146.59.123.142;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.59.123.142:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4853: (0.649351%)&lt;BR/&gt; 4851: (0.649351%)&lt;BR/&gt; 4789: (0.649351%)&lt;BR/&gt; 4771: (0.649351%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="146.59.123.142"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.148.142"/>
    </slice>
    <from sec="1107320476" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.148.143"/>
    </slice>
    <from sec="1107320427" usec="0"/>
    <to sec="1107321131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.70.240.143"/>
    </slice>
    <from sec="1107320756" usec="0"/>
    <to sec="1107320851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.39.39.145"/>
    </slice>
    <from sec="1107320710" usec="0"/>
    <to sec="1107320723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.47.82.145"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
161[label="42.166.1.146s;234pkt 234fpkt", shape=rectangle, color=red];
4661[label="42.166.1.146;234pkt 234fpkt", shape=pentagon, color=darkviolet];
5975[label="42.166.1.146;233pkt 233fpkt", shape=invtriangle, color=brown];
6680[label="42.166.1.146;234pkt 234fpkt", shape=invhouse, color=bisque];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.166.1.146:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4827: (0.213904%)&lt;BR/&gt; 4826: (0.213904%)&lt;BR/&gt; 4825: (0.213904%)&lt;BR/&gt; 4823: (0.213904%)&gt;];
}
161--4661[label="1;234pkt 234fpkt"];
161--5975[label="1;233pkt 233fpkt"];
161--6680[label="1;234pkt 234fpkt"];
4661--5975[label="1;233pkt 233fpkt"];
4661--6680[label="1;234pkt 234fpkt"];
5975--6680[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="42.166.1.146"/>
    </slice>
    <from sec="1107320871" usec="0"/>
    <to sec="1107320874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
4666[label="133.219.78.146;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.219.78.146:*, 206.185.34.141:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2544: (1.31579%)&lt;BR/&gt; 2540: (1.31579%)&lt;BR/&gt; 2538: (1.31579%)&lt;BR/&gt; 2537: (1.31579%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="206.185.34.141" dst_port="80" src_ip="133.219.78.146"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.152.146"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.139.18.147"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.85.147"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.217.147"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852701,1.79279,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
601[label="129.0.17.148;s;96pkt 96fpkt", shape=diamond, color=yellow];
940[label="88.188.123.135;d;105pkt 105fpkt", shape=diamond, color=yellow];
2735[label="88.188.123.135;d;105pkt 105fpkt", shape=hexagon, color=black];
4681[label="129.0.17.148;113pkt 113fpkt", shape=pentagon, color=darkviolet];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.17.148:*, 88.188.123.135:80}[92.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2278: (0.477327%)&lt;BR/&gt; 2277: (0.477327%)&lt;BR/&gt; 2276: (0.477327%)&lt;BR/&gt; 2275: (0.477327%)&gt;];
}
601--940[label="0.90625;87pkt 87fpkt"];
601--2735[label="0.90625;87pkt 87fpkt"];
601--3540[label="0.0416667;4pkt 4fpkt"];
601--4681[label="0.989583;95pkt 95fpkt"];
940--2735[label="1;105pkt 105fpkt"];
940--4681[label="1;105pkt 105fpkt"];
2735--4681[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="88.188.123.135" dst_port="80" src_ip="129.0.17.148"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107320521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.231.172.148"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.219.23.149"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.45.8.151"/>
    </slice>
    <from sec="1107320858" usec="0"/>
    <to sec="1107320895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.119.172.153"/>
    </slice>
    <from sec="1107320700" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.182.190.153"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
1688[label="201.251.4.154;s;108pkt 108fpkt", shape=diamond, color=yellow];
4716[label="201.251.4.154;107pkt 107fpkt", shape=pentagon, color=darkviolet];
6007[label="201.251.4.154;108pkt 108fpkt", shape=invtriangle, color=brown];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.4.154:*, *:80}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1424%)&lt;BR/&gt; 8080: (1.85759%)&lt;BR/&gt; 1462: (0.464396%)&lt;BR/&gt; 1461: (0.464396%)&lt;BR/&gt; 1460: (0.464396%)&gt;];
}
1688--1884[label="0.0571429;2pkt 2fpkt"];
1688--2711[label="0.0192308;1pkt 1fpkt"];
1688--3559[label="0.185185;20pkt 20fpkt"];
1688--4716[label="1;107pkt 107fpkt"];
1688--6007[label="1;108pkt 108fpkt"];
4716--6007[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="201.251.4.154"/>
    </slice>
    <from sec="1107320598" usec="0"/>
    <to sec="1107320978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.210.154"/>
    </slice>
    <from sec="1107320414" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.16.155"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.24.156.159"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.49.160"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.82.10.161"/>
    </slice>
    <from sec="1107321292" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.219.73.162"/>
    </slice>
    <from sec="1107320584" usec="0"/>
    <to sec="1107320746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.9.200.163"/>
    </slice>
    <from sec="1107320778" usec="0"/>
    <to sec="1107320784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2504[label="133.234.28.164;s;15pkt 15fpkt", shape=diamond, color=yellow];
4775[label="133.234.28.164;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.234.28.164:*, 220.252.26.75:80}[30.4348%]&lt;BR/&gt;{133.234.28.164:*, 205.202.15.182:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53124: (2.7027%)&lt;BR/&gt; 53123: (2.7027%)&lt;BR/&gt; 53122: (2.7027%)&lt;BR/&gt; 53121: (2.7027%)&gt;];
}
2504--4775[label="0.933333;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="220.252.26.75" dst_port="80" src_ip="133.234.28.164"/>
      <filter dst_ip="205.202.15.182" dst_port="80" src_ip="133.234.28.164"/>
    </slice>
    <from sec="1107320591" usec="0"/>
    <to sec="1107321148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.158.210.164"/>
    </slice>
    <from sec="1107320424" usec="0"/>
    <to sec="1107321290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
2235[label="201.251.8.165;s;73pkt 73fpkt", shape=diamond, color=yellow];
4781[label="201.251.8.165;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.8.165:80, 206.185.42.176:*}[65.8228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64658: (0.657895%)&lt;BR/&gt; 64273: (0.657895%)&lt;BR/&gt; 63433: (0.657895%)&lt;BR/&gt; 62138: (0.657895%)&gt;];
}
2235--4781[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.42.176" src_ip="201.251.8.165" src_port="80"/>
    </slice>
    <from sec="1107320429" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.3.166"/>
    </slice>
    <from sec="1107320678" usec="0"/>
    <to sec="1107321258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2428[label="133.63.60.168;s;32pkt 32fpkt", shape=diamond, color=yellow];
4802[label="133.63.60.168;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.60.168:54045, *:*}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54045: (48.4615%)&lt;BR/&gt; 63845: (1.53846%)&lt;BR/&gt; 63842: (1.53846%)&lt;BR/&gt; 61920: (1.53846%)&lt;BR/&gt; 60691: (1.53846%)&gt;];
}
2428--4802[label="0.96875;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="133.63.60.168" src_port="54045"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
2059[label="129.0.41.0;s;42pkt 42fpkt", shape=diamond, color=yellow];
2244[label="129.1.158.168;s;47pkt 47fpkt", shape=diamond, color=yellow];
2255[label="218.26.177.137;d;33pkt 33fpkt", shape=diamond, color=yellow];
3293[label="218.26.177.137;d;30pkt 30fpkt", shape=hexagon, color=black];
3572[label="129.0.41.0;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4805[label="129.1.158.168;47pkt 47fpkt", shape=pentagon, color=darkviolet];
6065[label="129.1.158.168;47pkt 47fpkt", shape=invtriangle, color=brown];
6724[label="129.1.158.168;47pkt 47fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.41.0:*, *:80}[50%]&lt;BR/&gt;{129.1.158.168:*, 218.26.177.137:80}[32.9787%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8201%)&lt;BR/&gt; 8000: (1.17994%)&lt;BR/&gt; 2802: (0.884956%)&lt;BR/&gt; 2801: (0.884956%)&lt;BR/&gt; 2800: (0.884956%)&gt;];
}
2059--2199[label="0.047619;2pkt 2fpkt"];
2059--2255[label="0.0606061;2pkt 2fpkt"];
2059--3293[label="0.0666667;2pkt 2fpkt"];
2059--3383[label="0.047619;2pkt 2fpkt"];
2059--3550[label="0.0238095;1pkt 1fpkt"];
2059--3559[label="0.119048;5pkt 5fpkt"];
2059--3562[label="0.0238095;1pkt 1fpkt"];
2059--3572[label="0.97619;41pkt 41fpkt"];
2244--2255[label="0.939394;31pkt 31fpkt"];
2244--3293[label="0.933333;28pkt 28fpkt"];
2244--3559[label="0.0212766;1pkt 1fpkt"];
2244--4805[label="1;47pkt 47fpkt"];
2244--6065[label="1;47pkt 47fpkt"];
2244--6724[label="1;47pkt 47fpkt"];
2255--3293[label="1;30pkt 30fpkt"];
2255--3559[label="0.030303;1pkt 1fpkt"];
2255--3572[label="0.0606061;2pkt 2fpkt"];
2255--4805[label="0.939394;31pkt 31fpkt"];
2255--6065[label="0.939394;31pkt 31fpkt"];
2255--6724[label="0.939394;31pkt 31fpkt"];
3293--3559[label="0.0333333;1pkt 1fpkt"];
3293--3572[label="0.0666667;2pkt 2fpkt"];
3293--4805[label="0.933333;28pkt 28fpkt"];
3293--6065[label="0.933333;28pkt 28fpkt"];
3293--6724[label="0.933333;28pkt 28fpkt"];
4805--6065[label="1;47pkt 47fpkt"];
4805--6724[label="1;47pkt 47fpkt"];
6065--6724[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="129.0.41.0"/>
      <filter dst_ip="218.26.177.137" dst_port="80" src_ip="129.1.158.168"/>
    </slice>
    <from sec="1107320449" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.60.169"/>
    </slice>
    <from sec="1107320457" usec="0"/>
    <to sec="1107321284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.27.72.169"/>
    </slice>
    <from sec="1107321118" usec="0"/>
    <to sec="1107321271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
900[label="193.62.149.170;s;2pkt 2fpkt", shape=diamond, color=yellow];
1645[label="148.189.103.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
4819[label="193.62.149.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6073[label="193.62.149.170;1pkt 1fpkt", shape=invtriangle, color=brown];
6728[label="193.62.149.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.62.149.170:500, 148.189.103.108:3265}[50%]&lt;BR/&gt;{193.62.149.170:2746, 148.189.103.108:3266}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3265: (35.7143%)&lt;BR/&gt; 500: (35.7143%)&lt;BR/&gt; 3266: (14.2857%)&lt;BR/&gt; 2746: (14.2857%)&gt;];
}
900--1645[label="1;2pkt 2fpkt"];
900--4819[label="1;1pkt 1fpkt"];
900--6073[label="1;1pkt 1fpkt"];
900--6728[label="1;1pkt 1fpkt"];
1645--4819[label="1;1pkt 1fpkt"];
1645--6073[label="1;1pkt 1fpkt"];
1645--6728[label="1;1pkt 1fpkt"];
4819--6073[label="1;1pkt 1fpkt"];
4819--6728[label="1;1pkt 1fpkt"];
6073--6728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.103.108" dst_port="3266" src_ip="193.62.149.170" src_port="2746"/>
      <filter dst_ip="148.189.103.108" dst_port="3265" src_ip="193.62.149.170" src_port="500"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.36.169.170"/>
    </slice>
    <from sec="1107320805" usec="0"/>
    <to sec="1107320950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.146.194.171"/>
    </slice>
    <from sec="1107320470" usec="0"/>
    <to sec="1107321280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
361[label="192.114.198.171;s;6323pkt 6323fpkt", shape=diamond, color=yellow];
4828[label="192.114.198.171;6712pkt 6712fpkt", shape=pentagon, color=darkviolet];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.114.198.171:34132, *:*}[96.0369%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34132: (48.0207%)&lt;BR/&gt; 443: (1.1354%)&lt;BR/&gt; 80: (0.83621%)&lt;BR/&gt; 54045: (0.107403%)&lt;BR/&gt; 1025: (0.0920598%)&gt;];
}
361--4828[label="1;6323pkt 6323fpkt"];
</description>
    <slice>
      <filter src_ip="192.114.198.171" src_port="34132"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.63.115.173"/>
    </slice>
    <from sec="1107320424" usec="0"/>
    <to sec="1107321286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.229.174"/>
    </slice>
    <from sec="1107321168" usec="0"/>
    <to sec="1107321182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.244.42.175"/>
    </slice>
    <from sec="1107320696" usec="0"/>
    <to sec="1107320786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.196.175"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.120.176"/>
    </slice>
    <from sec="1107320957" usec="0"/>
    <to sec="1107321197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.46.83.177"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.150.99.179"/>
    </slice>
    <from sec="1107321007" usec="0"/>
    <to sec="1107321072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.105.161.179"/>
    </slice>
    <from sec="1107321084" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.91.96.180"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107320671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.15.128.180"/>
    </slice>
    <from sec="1107320783" usec="0"/>
    <to sec="1107321111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.34.152.182"/>
    </slice>
    <from sec="1107321259" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.8.97.183"/>
    </slice>
    <from sec="1107320436" usec="0"/>
    <to sec="1107321278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.205.183"/>
    </slice>
    <from sec="1107320439" usec="0"/>
    <to sec="1107321280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.157.184"/>
    </slice>
    <from sec="1107320818" usec="0"/>
    <to sec="1107321052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.219.88.185"/>
    </slice>
    <from sec="1107320414" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
1226[label="148.189.136.66;d;113pkt 113fpkt", shape=diamond, color=yellow];
2937[label="148.189.136.66;d;75pkt 75fpkt", shape=hexagon, color=black];
3919[label="42.72.148.41;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4898[label="42.29.77.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4919[label="212.10.148.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5103[label="218.66.110.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6128[label="212.10.148.185;1pkt 1fpkt", shape=invtriangle, color=brown];
6244[label="218.66.110.214;1pkt 1fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6868, 148.189.136.66:6899}[44.2478%]&lt;BR/&gt;{200.36.34.8:*, 148.189.136.66:*}[25.6637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6899: (30.9645%)&lt;BR/&gt; 6868: (23.3503%)&lt;BR/&gt; 0: (8.62944%)&lt;BR/&gt; 14343: (3.5533%)&lt;BR/&gt; 6869: (2.28426%)&gt;];
}
1226--2937[label="1;75pkt 75fpkt"];
1226--3919[label="1;3pkt 3fpkt"];
1226--4898[label="1;1pkt 1fpkt"];
1226--4919[label="1;2pkt 2fpkt"];
1226--5103[label="1;1pkt 1fpkt"];
1226--6128[label="1;1pkt 1fpkt"];
1226--6244[label="1;1pkt 1fpkt"];
2937--3919[label="0.333333;1pkt 1fpkt"];
2937--4919[label="0.5;1pkt 1fpkt"];
2937--5103[label="1;1pkt 1fpkt"];
2937--6244[label="1;1pkt 1fpkt"];
4919--6128[label="1;1pkt 1fpkt"];
5103--6244[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.136.66" src_ip="200.36.34.8"/>
      <filter dst_ip="148.189.136.66" dst_port="6899" src_port="6868"/>
    </slice>
    <from sec="1107320456" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.171.139.186"/>
    </slice>
    <from sec="1107320438" usec="0"/>
    <to sec="1107321277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.23.128.187"/>
    </slice>
    <from sec="1107320816" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.230.189"/>
    </slice>
    <from sec="1107320431" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.40.172.190"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.104.28.192"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
408[label="200.124.242.242;d;42pkt 42fpkt", shape=diamond, color=yellow];
4956[label="218.129.155.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6153[label="218.129.155.192;5pkt 5fpkt", shape=invtriangle, color=brown];
6763[label="218.129.155.192;4pkt 4fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.124.242.242:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4763: (3.57143%)&lt;BR/&gt; 4483: (3.57143%)&lt;BR/&gt; 3848: (3.57143%)&lt;BR/&gt; 3726: (3.57143%)&gt;];
}
408--4956[label="1;5pkt 5fpkt"];
408--6153[label="1;5pkt 5fpkt"];
408--6763[label="1;4pkt 4fpkt"];
4956--6153[label="1;5pkt 5fpkt"];
4956--6763[label="1;4pkt 4fpkt"];
6153--6763[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.242.242" dst_port="25"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.220.192"/>
    </slice>
    <from sec="1107320415" usec="0"/>
    <to sec="1107321057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.150.204.193"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.74.234.193"/>
    </slice>
    <from sec="1107320725" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.186.120.196"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107320481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.160.196"/>
    </slice>
    <from sec="1107320437" usec="0"/>
    <to sec="1107321280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.61.10.197"/>
    </slice>
    <from sec="1107320425" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.74.96.197"/>
    </slice>
    <from sec="1107320422" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.97.196.197"/>
    </slice>
    <from sec="1107320988" usec="0"/>
    <to sec="1107321030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.221.7.198"/>
    </slice>
    <from sec="1107321050" usec="0"/>
    <to sec="1107321082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.151.76.198"/>
    </slice>
    <from sec="1107320539" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.142.136.198"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.111.178.200"/>
    </slice>
    <from sec="1107320870" usec="0"/>
    <to sec="1107320921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.26.4.201"/>
    </slice>
    <from sec="1107320863" usec="0"/>
    <to sec="1107320885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.209.129.201"/>
    </slice>
    <from sec="1107320737" usec="0"/>
    <to sec="1107320773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
1973[label="133.219.12.223;s;23pkt 23fpkt", shape=diamond, color=yellow];
2067[label="94.95.143.136;d;81pkt 81fpkt", shape=diamond, color=yellow];
5018[label="133.219.12.202;43pkt 43fpkt", shape=pentagon, color=darkviolet];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.219.12.202:80, 94.95.143.136:*}[39.2157%]&lt;BR/&gt;{133.219.12.141:80, 94.95.143.136:*}[34.3137%]&lt;BR/&gt;{133.219.12.223:80, *:*}[22.549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6599%)&lt;BR/&gt; 64650: (0.680272%)&lt;BR/&gt; 63789: (0.680272%)&lt;BR/&gt; 62934: (0.680272%)&lt;BR/&gt; 62045: (0.680272%)&gt;];
}
1973--2067[label="0.26087;6pkt 6fpkt"];
2067--2602[label="0.0123457;1pkt 1fpkt"];
2067--5018[label="0.906977;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="133.219.12.223" src_port="80"/>
      <filter dst_ip="94.95.143.136" src_ip="133.219.12.202" src_port="80"/>
      <filter dst_ip="94.95.143.136" src_ip="133.219.12.141" src_port="80"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
5024[label="133.63.157.203;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.157.203:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49487: (4.54545%)&lt;BR/&gt; 49477: (4.54545%)&lt;BR/&gt; 49455: (4.54545%)&lt;BR/&gt; 49437: (4.54545%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="133.63.157.203"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.170.166.203"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.40.193.203"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.225.8.204"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.10.202.204"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.161.212.205"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
1100[label="200.124.244.205;s;359pkt 359fpkt", shape=diamond, color=yellow];
5040[label="200.124.244.205;360pkt 360fpkt", shape=pentagon, color=darkviolet];
6209[label="200.124.244.205;359pkt 359fpkt", shape=invtriangle, color=brown];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.244.205:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1100--1730[label="0.00278552;1pkt 1fpkt"];
1100--5040[label="1;359pkt 359fpkt"];
1100--6209[label="0.997214;358pkt 358fpkt"];
5040--6209[label="1;359pkt 359fpkt"];
</description>
    <slice>
      <filter src_ip="200.124.244.205"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837643,1.81153,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
121[label="65.31.3.206s;65pkt 65fpkt", shape=rectangle, color=red];
5041[label="65.31.3.206;326pkt 326fpkt", shape=pentagon, color=darkviolet];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.31.3.206:26187, *:137}[74.2331%]&lt;BR/&gt;{65.31.3.206:26204, *:137}[25.7669%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 26187: (30.9463%)&lt;BR/&gt; 26204: (19.0537%)&gt;];
}
121--5041[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="65.31.3.206" src_port="26187"/>
      <filter dst_port="137" src_ip="65.31.3.206" src_port="26204"/>
    </slice>
    <from sec="1107320472" usec="0"/>
    <to sec="1107321071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.5.8.206"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.194.142.206"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.8.27.207"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.197.90.208"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599453,1.82302,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
606[label="42.186.120.209;s;103pkt 103fpkt", shape=diamond, color=yellow];
5063[label="42.186.120.209;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.186.120.209:80, 148.189.84.62:*}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25642: (0.478469%)&lt;BR/&gt; 2987: (0.478469%)&lt;BR/&gt; 2986: (0.478469%)&lt;BR/&gt; 2985: (0.478469%)&gt;];
}
606--760[label="0.00970874;1pkt 1fpkt"];
606--3228[label="0.00970874;1pkt 1fpkt"];
606--5063[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.84.62" src_ip="42.186.120.209" src_port="80"/>
    </slice>
    <from sec="1107320421" usec="0"/>
    <to sec="1107320936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.205.210"/>
    </slice>
    <from sec="1107321043" usec="0"/>
    <to sec="1107321119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.6.216.211"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.172.70.212"/>
    </slice>
    <from sec="1107320604" usec="0"/>
    <to sec="1107321288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.162.212"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.202.212"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.58.205.212"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.98.239.212"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.124.241.213"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.219.88.214"/>
    </slice>
    <from sec="1107320653" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
5105[label="129.1.161.214;44pkt 44fpkt", shape=pentagon, color=darkviolet];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.161.214:*, 5.11.106.26:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1593: (1.13636%)&lt;BR/&gt; 1591: (1.13636%)&lt;BR/&gt; 1589: (1.13636%)&lt;BR/&gt; 1587: (1.13636%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="5.11.106.26" dst_port="80" src_ip="129.1.161.214"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887425,1.76871,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
171[label="151.2.232.215s;121pkt 121fpkt", shape=rectangle, color=red];
5118[label="151.2.232.215;121pkt 121fpkt", shape=pentagon, color=darkviolet];
6254[label="151.2.232.215;121pkt 121fpkt", shape=invtriangle, color=brown];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.2.232.215:*, *:9898}[74.3802%]&lt;BR/&gt;{151.2.232.215:*, *:5554}[25.6198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (37.1901%)&lt;BR/&gt; 5554: (12.8099%)&lt;BR/&gt; 2789: (0.413223%)&lt;BR/&gt; 2788: (0.413223%)&lt;BR/&gt; 2787: (0.413223%)&gt;];
}
171--5118[label="1;121pkt 121fpkt"];
171--6254[label="1;121pkt 121fpkt"];
5118--6254[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="151.2.232.215"/>
      <filter dst_port="5554" src_ip="151.2.232.215"/>
    </slice>
    <from sec="1107320626" usec="0"/>
    <to sec="1107320630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.241.215"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.69.42.216"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.148.216"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.88.161.217"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.53.90.218"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.48.143.218"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.234.218"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.20.219"/>
    </slice>
    <from sec="1107320860" usec="0"/>
    <to sec="1107321007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.114.91.220"/>
    </slice>
    <from sec="1107320451" usec="0"/>
    <to sec="1107320827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.148.221"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03094,1.73312,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
123[label="215.130.226.224s;255pkt 255fpkt", shape=rectangle, color=red];
5170[label="215.130.226.224;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6293[label="215.130.226.224;254pkt 254fpkt", shape=invtriangle, color=brown];
6821[label="215.130.226.224;254pkt 254fpkt", shape=invhouse, color=bisque];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.130.226.224:1041, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1041: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
123--5170[label="1;255pkt 255fpkt"];
123--6293[label="1;254pkt 254fpkt"];
123--6821[label="1;254pkt 254fpkt"];
5170--6293[label="1;254pkt 254fpkt"];
5170--6821[label="1;254pkt 254fpkt"];
6293--6821[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.130.226.224" src_port="1041"/>
    </slice>
    <from sec="1107320455" usec="0"/>
    <to sec="1107320472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.128.37.225"/>
    </slice>
    <from sec="1107320601" usec="0"/>
    <to sec="1107321156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.129.225"/>
    </slice>
    <from sec="1107320466" usec="0"/>
    <to sec="1107320667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.228.225"/>
    </slice>
    <from sec="1107320446" usec="0"/>
    <to sec="1107320729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.1.250.225"/>
    </slice>
    <from sec="1107320430" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.93.80.226"/>
    </slice>
    <from sec="1107320420" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.32.59.227"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.67.227"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.43.209.227"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887425,1.76871,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
174[label="210.39.42.229s;296pkt 296fpkt", shape=rectangle, color=red];
5201[label="210.39.42.229;393pkt 393fpkt", shape=pentagon, color=darkviolet];
6306[label="210.39.42.229;394pkt 394fpkt", shape=invtriangle, color=brown];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.39.42.229:*, *:9898}[52.5381%]&lt;BR/&gt;{210.39.42.229:*, *:5554}[47.4619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (28.6704%)&lt;BR/&gt; 5554: (21.3296%)&lt;BR/&gt; 3517: (0.138504%)&lt;BR/&gt; 3516: (0.138504%)&lt;BR/&gt; 3513: (0.138504%)&gt;];
}
174--5201[label="1;296pkt 296fpkt"];
174--6306[label="1;296pkt 296fpkt"];
5201--6306[label="1;393pkt 393fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="210.39.42.229"/>
      <filter dst_port="5554" src_ip="210.39.42.229"/>
    </slice>
    <from sec="1107321170" usec="0"/>
    <to sec="1107321173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
5203[label="161.69.149.229;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.149.229:*, 40.198.169.73:80}[61.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 5050: (2.77778%)&lt;BR/&gt; 1056: (2.77778%)&lt;BR/&gt; 1055: (2.77778%)&lt;BR/&gt; 1054: (2.77778%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="40.198.169.73" dst_port="80" src_ip="161.69.149.229"/>
    </slice>
    <from sec="1107320518" usec="0"/>
    <to sec="1107320649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.142.195.229"/>
    </slice>
    <from sec="1107320772" usec="0"/>
    <to sec="1107321224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.219.46.231"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.156.232"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.198.25.234"/>
    </slice>
    <from sec="1107320512" usec="0"/>
    <to sec="1107321116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.163.88.234"/>
    </slice>
    <from sec="1107321244" usec="0"/>
    <to sec="1107321276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.182.236.235"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.167.5.236"/>
    </slice>
    <from sec="1107320925" usec="0"/>
    <to sec="1107320936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.69.136.236"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.0.194.237"/>
    </slice>
    <from sec="1107321114" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.0.3.238"/>
    </slice>
    <from sec="1107321229" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.88.47.238"/>
    </slice>
    <from sec="1107320792" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.87.82.239"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.20.4.240"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.162.49.240"/>
    </slice>
    <from sec="1107320711" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.148.107.240"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.64.178.241"/>
    </slice>
    <from sec="1107320777" usec="0"/>
    <to sec="1107320827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.74.96.244"/>
    </slice>
    <from sec="1107320892" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.191.100.245"/>
    </slice>
    <from sec="1107320760" usec="0"/>
    <to sec="1107321174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.159.65.247"/>
    </slice>
    <from sec="1107320422" usec="0"/>
    <to sec="1107321240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.42.144.247"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.238.148.247"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.150.11.248"/>
    </slice>
    <from sec="1107320522" usec="0"/>
    <to sec="1107320541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.131.82.248"/>
    </slice>
    <from sec="1107321201" usec="0"/>
    <to sec="1107321217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.3.27.249"/>
    </slice>
    <from sec="1107321159" usec="0"/>
    <to sec="1107321183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.96.53.249"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.107.146.249"/>
    </slice>
    <from sec="1107321087" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.58.114.250"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.173.133.251"/>
    </slice>
    <from sec="1107320628" usec="0"/>
    <to sec="1107321289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.20.63.252"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.410074,1.86774,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.145.19.254"/>
    </slice>
    <from sec="1107320731" usec="0"/>
    <to sec="1107320762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837643,1.81153,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
125[label="210.46.74.254s;242pkt 242fpkt", shape=rectangle, color=red];
5350[label="210.46.74.254;241pkt 241fpkt", shape=pentagon, color=darkviolet];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.46.74.254:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
125--5350[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.46.74.254" src_port="1033"/>
    </slice>
    <from sec="1107320597" usec="0"/>
    <to sec="1107320614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
1925[label="216.187.129.254;s;87pkt 87fpkt", shape=diamond, color=yellow];
5351[label="216.187.129.254;86pkt 86fpkt", shape=pentagon, color=darkviolet];
6396[label="216.187.129.254;86pkt 86fpkt", shape=invtriangle, color=brown];
6872[label="216.187.129.254;86pkt 86fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.187.129.254:*, *:38293}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38293: (50%)&lt;BR/&gt; 64569: (0.57971%)&lt;BR/&gt; 64568: (0.57971%)&lt;BR/&gt; 64567: (0.57971%)&lt;BR/&gt; 64566: (0.57971%)&gt;];
}
1925--5351[label="1;86pkt 86fpkt"];
1925--6396[label="1;86pkt 86fpkt"];
1925--6872[label="1;86pkt 86fpkt"];
5351--6396[label="1;86pkt 86fpkt"];
5351--6872[label="1;86pkt 86fpkt"];
6396--6872[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_port="38293" src_ip="216.187.129.254"/>
    </slice>
    <from sec="1107320923" usec="0"/>
    <to sec="1107320941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.159.64.1"/>
    </slice>
    <from sec="1107320435" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.137.138.2"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.166.5"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.223.139.8"/>
    </slice>
    <from sec="1107320953" usec="0"/>
    <to sec="1107320983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
3634[label="161.69.110.9;78pkt 78fpkt", shape=pentagon, color=darkviolet];
5392[label="161.69.110.9;77pkt 77fpkt", shape=invtriangle, color=brown];
6426[label="161.69.110.9;78pkt 78fpkt", shape=invhouse, color=bisque];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.110.9:*, 221.198.209.26:80}[44.8718%]&lt;BR/&gt;{161.69.110.9:*, 65.242.203.156:80}[35.8974%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9871%)&lt;BR/&gt; 31595: (7.72532%)&lt;BR/&gt; 65257: (1.28755%)&lt;BR/&gt; 63678: (0.643777%)&lt;BR/&gt; 50359: (0.643777%)&gt;];
}
3634--5392[label="1;77pkt 77fpkt"];
3634--6426[label="1;78pkt 78fpkt"];
5392--6426[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="221.198.209.26" dst_port="80" src_ip="161.69.110.9"/>
      <filter dst_ip="65.242.203.156" dst_port="80" src_ip="161.69.110.9"/>
    </slice>
    <from sec="1107320427" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
3647[label="218.210.9.11;98pkt 98fpkt", shape=pentagon, color=darkviolet];
5399[label="218.210.9.11;97pkt 97fpkt", shape=invtriangle, color=brown];
6428[label="218.210.9.11;98pkt 98fpkt", shape=invhouse, color=bisque];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.210.9.11:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4874: (0.511945%)&lt;BR/&gt; 4784: (0.511945%)&lt;BR/&gt; 4739: (0.511945%)&lt;BR/&gt; 4731: (0.511945%)&gt;];
}
3647--5399[label="1;97pkt 97fpkt"];
3647--6428[label="1;98pkt 98fpkt"];
5399--6428[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="218.210.9.11"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
3650[label="129.1.104.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5400[label="129.1.104.11;2pkt 2fpkt", shape=invtriangle, color=brown];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.104.11:1342, 212.24.17.51:80}[50%]&lt;BR/&gt;{129.1.104.11:1343, 212.24.17.51:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1343: (25%)&lt;BR/&gt; 1342: (25%)&gt;];
}
3650--5400[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.17.51" dst_port="80" src_ip="129.1.104.11" src_port="1343"/>
      <filter dst_ip="212.24.17.51" dst_port="80" src_ip="129.1.104.11" src_port="1342"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735779,1.84369,020,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
1565[label="164.238.206.241;d;10pkt 10fpkt", shape=diamond, color=yellow];
5406[label="164.236.65.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:443, 164.238.206.241:*}[80%]&lt;BR/&gt;{*:0, 164.238.206.241:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (36.3636%)&lt;BR/&gt; 0: (27.2727%)&lt;BR/&gt; 4494: (4.54545%)&lt;BR/&gt; 4470: (4.54545%)&lt;BR/&gt; 3249: (4.54545%)&gt;];
}
1565--5406[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.238.206.241" src_port="443"/>
      <filter dst_ip="164.238.206.241"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
3663[label="218.221.178.12;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5408[label="218.221.178.12;10pkt 10fpkt", shape=invtriangle, color=brown];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.221.178.12:*, 200.124.242.245:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55850: (5.26316%)&lt;BR/&gt; 49409: (5.26316%)&lt;BR/&gt; 48966: (5.26316%)&lt;BR/&gt; 46536: (5.26316%)&gt;];
}
3663--5408[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.242.245" dst_port="80" src_ip="218.221.178.12"/>
    </slice>
    <from sec="1107320704" usec="0"/>
    <to sec="1107320733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
3665[label="42.97.201.12;206pkt 206fpkt", shape=pentagon, color=darkviolet];
5410[label="42.97.201.12;206pkt 206fpkt", shape=invtriangle, color=brown];
6432[label="42.97.201.12;205pkt 205fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.97.201.12:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3665--5410[label="1;206pkt 206fpkt"];
3665--6432[label="1;205pkt 205fpkt"];
5410--6432[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="42.97.201.12" src_port="1027"/>
    </slice>
    <from sec="1107321244" usec="0"/>
    <to sec="1107321279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
1452[label="148.189.246.134;d;40pkt 40fpkt", shape=diamond, color=yellow];
3067[label="148.189.246.134;d;40pkt 40fpkt", shape=hexagon, color=black];
3641[label="93.141.58.10;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3668[label="209.17.33.13;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3783[label="220.236.5.26;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4894[label="209.17.33.182;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5396[label="93.141.58.10;9pkt 9fpkt", shape=invtriangle, color=brown];
5411[label="209.17.33.13;24pkt 24fpkt", shape=invtriangle, color=brown];
5476[label="220.236.5.26;7pkt 7fpkt", shape=invtriangle, color=brown];
6114[label="209.17.33.182;25pkt 25fpkt", shape=invtriangle, color=brown];
6744[label="209.17.33.182;24pkt 24fpkt", shape=invhouse, color=bisque];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.189.246.134:*}[40.4762%]&lt;BR/&gt;{209.17.33.182:80, *:*}[29.7619%]&lt;BR/&gt;{209.17.33.13:80, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4138%)&lt;BR/&gt; 33333: (1.72414%)&lt;BR/&gt; 33039: (1.07759%)&lt;BR/&gt; 33121: (0.862069%)&lt;BR/&gt; 33120: (0.862069%)&gt;];
}
1452--2005[label="0.025;1pkt 1fpkt"];
1452--3067[label="1;40pkt 40fpkt"];
1452--3641[label="1;8pkt 8fpkt"];
1452--3668[label="0.173913;4pkt 4fpkt"];
1452--3783[label="1;7pkt 7fpkt"];
1452--4454[label="0.025;1pkt 1fpkt"];
1452--4825[label="0.0714286;1pkt 1fpkt"];
1452--4894[label="0.04;1pkt 1fpkt"];
1452--5396[label="1;9pkt 9fpkt"];
1452--5411[label="0.166667;4pkt 4fpkt"];
1452--5476[label="1;7pkt 7fpkt"];
1452--5856[label="0.025;1pkt 1fpkt"];
1452--6079[label="0.0769231;1pkt 1fpkt"];
1452--6114[label="0.04;1pkt 1fpkt"];
1452--6744[label="0.0416667;1pkt 1fpkt"];
3067--3641[label="1;8pkt 8fpkt"];
3067--3668[label="0.173913;4pkt 4fpkt"];
3067--3783[label="1;7pkt 7fpkt"];
3067--4454[label="0.025;1pkt 1fpkt"];
3067--4825[label="0.0714286;1pkt 1fpkt"];
3067--4894[label="0.04;1pkt 1fpkt"];
3067--5396[label="1;9pkt 9fpkt"];
3067--5411[label="0.166667;4pkt 4fpkt"];
3067--5476[label="1;7pkt 7fpkt"];
3067--5856[label="0.025;1pkt 1fpkt"];
3067--6079[label="0.0769231;1pkt 1fpkt"];
3067--6114[label="0.04;1pkt 1fpkt"];
3067--6744[label="0.0416667;1pkt 1fpkt"];
3641--5396[label="1;8pkt 8fpkt"];
3668--5411[label="1;23pkt 23fpkt"];
3783--5476[label="1;7pkt 7fpkt"];
4894--6114[label="1;25pkt 25fpkt"];
4894--6744[label="1;24pkt 24fpkt"];
6114--6744[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="209.17.33.182" src_port="80"/>
      <filter src_ip="209.17.33.13" src_port="80"/>
      <filter dst_ip="148.189.246.134" src_port="80"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
3669[label="129.0.45.13;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5412[label="129.0.45.13;26pkt 26fpkt", shape=invtriangle, color=brown];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.45.13:25, *:*}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0196%)&lt;BR/&gt; 51794: (1.96078%)&lt;BR/&gt; 48408: (1.96078%)&lt;BR/&gt; 45178: (1.96078%)&lt;BR/&gt; 42708: (1.96078%)&gt;];
}
3669--5412[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="129.0.45.13" src_port="25"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
506[label="201.242.146.86;d;143pkt 143fpkt", shape=diamond, color=yellow];
1590[label="42.44.70.32;s;2pkt 2fpkt", shape=diamond, color=yellow];
1971[label="211.152.119.114;s;2pkt 2fpkt", shape=diamond, color=yellow];
2484[label="219.74.234.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
3685[label="219.194.172.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3954[label="42.97.177.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4361[label="201.143.29.103;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5418[label="219.194.172.14;1pkt 1fpkt", shape=invtriangle, color=brown];
6435[label="219.194.172.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 201.242.146.86:8917}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8917: (20.7792%)&lt;BR/&gt; 6881: (6.16883%)&lt;BR/&gt; 1214: (4.87013%)&lt;BR/&gt; 6883: (1.62338%)&lt;BR/&gt; 1626: (1.62338%)&gt;];
}
506--1590[label="1;2pkt 2fpkt"];
506--1971[label="1;2pkt 2fpkt"];
506--2484[label="1;1pkt 1fpkt"];
506--3685[label="1;1pkt 1fpkt"];
506--3954[label="1;1pkt 1fpkt"];
506--4361[label="0.5;1pkt 1fpkt"];
506--5418[label="1;1pkt 1fpkt"];
506--6435[label="1;1pkt 1fpkt"];
3685--5418[label="1;1pkt 1fpkt"];
3685--6435[label="1;1pkt 1fpkt"];
5418--6435[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.146.86" dst_port="8917"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
3689[label="201.144.71.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5420[label="201.144.71.15;1pkt 1fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.144.71.15:2452, 133.63.74.90:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2452: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3689--5420[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.63.74.90" dst_port="25" src_ip="201.144.71.15" src_port="2452"/>
    </slice>
    <from sec="1107320723" usec="0"/>
    <to sec="1107320783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
397[label="148.189.214.119;d;178pkt 178fpkt", shape=diamond, color=yellow];
439[label="42.86.30.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
1122[label="43.129.61.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
2039[label="42.151.148.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
2063[label="210.119.172.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
2101[label="214.103.54.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
2219[label="215.158.187.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
2868[label="42.86.30.110;s;1pkt 1fpkt", shape=hexagon, color=black];
3107[label="148.189.214.119;d;147pkt 147fpkt", shape=hexagon, color=black];
3213[label="214.103.54.56;s;1pkt 1fpkt", shape=hexagon, color=black];
3298[label="210.119.172.153;s;1pkt 1fpkt", shape=hexagon, color=black];
3694[label="215.133.58.16;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4722[label="210.53.48.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5176[label="212.50.160.225;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5423[label="215.133.58.16;20pkt 20fpkt", shape=invtriangle, color=brown];
6013[label="210.53.48.155;1pkt 1fpkt", shape=invtriangle, color=brown];
6297[label="212.50.160.225;26pkt 26fpkt", shape=invtriangle, color=brown];
6436[label="215.133.58.16;20pkt 20fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.189.214.119:8080}[71.4286%]&lt;BR/&gt;{*:*, 148.189.214.119:10000}[25.2747%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (37.5278%)&lt;BR/&gt; 10000: (11.1359%)&lt;BR/&gt; 80: (0.890869%)&lt;BR/&gt; 16501: (0.556793%)&lt;BR/&gt; 16479: (0.556793%)&gt;];
}
397--439[label="1;1pkt 1fpkt"];
397--1122[label="1;1pkt 1fpkt"];
397--2039[label="1;1pkt 1fpkt"];
397--2063[label="1;1pkt 1fpkt"];
397--2101[label="1;1pkt 1fpkt"];
397--2219[label="1;2pkt 2fpkt"];
397--2390[label="0.5;1pkt 1fpkt"];
397--2868[label="1;1pkt 1fpkt"];
397--3107[label="1;147pkt 147fpkt"];
397--3213[label="1;1pkt 1fpkt"];
397--3298[label="1;1pkt 1fpkt"];
397--3694[label="0.9;18pkt 18fpkt"];
397--4722[label="1;1pkt 1fpkt"];
397--5176[label="0.923077;24pkt 24fpkt"];
397--5423[label="0.9;18pkt 18fpkt"];
397--6013[label="1;1pkt 1fpkt"];
397--6297[label="0.923077;24pkt 24fpkt"];
397--6436[label="0.9;18pkt 18fpkt"];
439--2868[label="1;1pkt 1fpkt"];
439--3107[label="1;1pkt 1fpkt"];
1122--3107[label="1;1pkt 1fpkt"];
2039--3107[label="1;1pkt 1fpkt"];
2063--3107[label="1;1pkt 1fpkt"];
2063--3298[label="1;1pkt 1fpkt"];
2101--3107[label="1;1pkt 1fpkt"];
2101--3213[label="1;1pkt 1fpkt"];
2219--3107[label="1;2pkt 2fpkt"];
2868--3107[label="1;1pkt 1fpkt"];
3107--3213[label="1;1pkt 1fpkt"];
3107--3298[label="1;1pkt 1fpkt"];
3107--3694[label="0.7;14pkt 14fpkt"];
3107--4722[label="1;1pkt 1fpkt"];
3107--5176[label="0.730769;19pkt 19fpkt"];
3107--5423[label="0.7;14pkt 14fpkt"];
3107--6013[label="1;1pkt 1fpkt"];
3107--6297[label="0.730769;19pkt 19fpkt"];
3107--6436[label="0.7;14pkt 14fpkt"];
3694--5423[label="1;20pkt 20fpkt"];
3694--6436[label="1;20pkt 20fpkt"];
4722--6013[label="1;1pkt 1fpkt"];
5176--6297[label="1;26pkt 26fpkt"];
5423--6436[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.214.119" dst_port="8080"/>
      <filter dst_ip="148.189.214.119" dst_port="10000"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
3699[label="164.238.203.16;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5425[label="164.238.203.16;9pkt 9fpkt", shape=invtriangle, color=brown];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.203.16:80, 201.172.91.94:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 52657: (5.55556%)&lt;BR/&gt; 52654: (5.55556%)&lt;BR/&gt; 52636: (5.55556%)&lt;BR/&gt; 52603: (5.55556%)&gt;];
}
3699--5425[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="201.172.91.94" src_ip="164.238.203.16" src_port="80"/>
    </slice>
    <from sec="1107320409" usec="0"/>
    <to sec="1107321029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.81.45.17"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.213.173.17"/>
    </slice>
    <from sec="1107320641" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
3715[label="214.16.0.18;124pkt 124fpkt", shape=pentagon, color=darkviolet];
5433[label="214.16.0.18;125pkt 125fpkt", shape=invtriangle, color=brown];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.16.0.18:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3715--5433[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.16.0.18" src_port="1025"/>
    </slice>
    <from sec="1107320425" usec="0"/>
    <to sec="1107320445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.20.235.18"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.208.1.19"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.110.132.19"/>
    </slice>
    <from sec="1107320432" usec="0"/>
    <to sec="1107321265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.138.240.20"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
3749[label="129.0.41.21;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5454[label="129.0.41.21;3pkt 3fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.41.21:1225, 207.19.201.40:80}[25%]&lt;BR/&gt;{129.0.41.21:1226, 207.19.201.40:80}[25%]&lt;BR/&gt;{129.0.41.21:1227, 207.19.201.40:80}[25%]&lt;BR/&gt;{129.0.41.21:1228, 207.19.201.40:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1228: (14.2857%)&lt;BR/&gt; 1227: (14.2857%)&lt;BR/&gt; 1226: (14.2857%)&lt;BR/&gt; 1225: (7.14286%)&gt;];
}
3749--5454[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="207.19.201.40" dst_port="80" src_ip="129.0.41.21" src_port="1228"/>
      <filter dst_ip="207.19.201.40" dst_port="80" src_ip="129.0.41.21" src_port="1227"/>
      <filter dst_ip="207.19.201.40" dst_port="80" src_ip="129.0.41.21" src_port="1226"/>
      <filter dst_ip="207.19.201.40" dst_port="80" src_ip="129.0.41.21" src_port="1225"/>
    </slice>
    <from sec="1107321176" usec="0"/>
    <to sec="1107321254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.85.236.21"/>
    </slice>
    <from sec="1107320747" usec="0"/>
    <to sec="1107321059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.112.128.23"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.137.130.23"/>
    </slice>
    <from sec="1107320426" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.104.146.23"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.176.243.24"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.194.9.26"/>
    </slice>
    <from sec="1107320414" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
3797[label="164.238.152.27;202pkt 202fpkt", shape=pentagon, color=darkviolet];
5481[label="164.238.152.27;202pkt 202fpkt", shape=invtriangle, color=brown];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.152.27:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.9505%)&lt;BR/&gt; 33701: (3.9604%)&lt;BR/&gt; 32768: (2.47525%)&lt;BR/&gt; 32769: (0.742574%)&lt;BR/&gt; 5353: (0.742574%)&gt;];
}
3797--5481[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter src_ip="164.238.152.27" src_port="53"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
1191[label="164.238.210.35;s;122pkt 122fpkt", shape=diamond, color=yellow];
1432[label="94.95.143.11;d;57pkt 57fpkt", shape=diamond, color=yellow];
2144[label="164.238.202.74;s;10pkt 10fpkt", shape=diamond, color=yellow];
2725[label="164.238.210.35;s;108pkt 108fpkt", shape=hexagon, color=black];
3235[label="164.238.202.74;s;10pkt 10fpkt", shape=hexagon, color=black];
3859[label="164.238.210.35;138pkt 138fpkt", shape=pentagon, color=darkviolet];
4155[label="164.238.202.74;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4732[label="164.238.168.156;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4739[label="164.238.232.157;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4740[label="164.238.234.157;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5517[label="164.238.210.35;138pkt 138fpkt", shape=invtriangle, color=brown];
5686[label="164.238.202.74;10pkt 10fpkt", shape=invtriangle, color=brown];
6024[label="164.238.232.157;15pkt 15fpkt", shape=invtriangle, color=brown];
6475[label="164.238.210.35;139pkt 139fpkt", shape=invhouse, color=bisque];
6549[label="164.238.202.74;9pkt 9fpkt", shape=invhouse, color=bisque];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.210.35:57424, *:53}[35.4962%]&lt;BR/&gt;{*:80, 94.95.143.11:*}[22.1374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.8365%)&lt;BR/&gt; 57424: (25.2962%)&lt;BR/&gt; 80: (19.4905%)&lt;BR/&gt; 0: (2.60664%)&lt;BR/&gt; 25: (2.36967%)&gt;];
}
1191--1216[label="0.025641;1pkt 1fpkt"];
1191--1432[label="0.175439;10pkt 10fpkt"];
1191--1514[label="0.00917431;1pkt 1fpkt"];
1191--1965[label="0.01;1pkt 1fpkt"];
1191--2125[label="0.00877193;1pkt 1fpkt"];
1191--2190[label="0.00892857;1pkt 1fpkt"];
1191--2215[label="0.0166667;1pkt 1fpkt"];
1191--2354[label="0.00826446;1pkt 1fpkt"];
1191--2725[label="1;108pkt 108fpkt"];
1191--2731[label="0.025641;1pkt 1fpkt"];
1191--3222[label="0.00909091;1pkt 1fpkt"];
1191--3549[label="0.057377;7pkt 7fpkt"];
1191--3859[label="0.991803;121pkt 121fpkt"];
1191--5517[label="0.991803;121pkt 121fpkt"];
1191--6475[label="1;122pkt 122fpkt"];
1432--1978[label="0.0350877;2pkt 2fpkt"];
1432--2144[label="0.6;6pkt 6fpkt"];
1432--2178[label="0.047619;1pkt 1fpkt"];
1432--2725[label="0.175439;10pkt 10fpkt"];
1432--3235[label="0.6;6pkt 6fpkt"];
1432--3253[label="0.0526316;1pkt 1fpkt"];
1432--3654[label="0.0666667;1pkt 1fpkt"];
1432--3799[label="0.0175439;1pkt 1fpkt"];
1432--3859[label="0.192982;11pkt 11fpkt"];
1432--4155[label="0.666667;6pkt 6fpkt"];
1432--4732[label="0.0952381;2pkt 2fpkt"];
1432--4739[label="0.125;2pkt 2fpkt"];
1432--4740[label="0.047619;2pkt 2fpkt"];
1432--4821[label="0.0454545;1pkt 1fpkt"];
1432--5483[label="0.0175439;1pkt 1fpkt"];
1432--5517[label="0.192982;11pkt 11fpkt"];
1432--5686[label="0.6;6pkt 6fpkt"];
1432--6024[label="0.133333;2pkt 2fpkt"];
1432--6075[label="0.0434783;1pkt 1fpkt"];
1432--6457[label="0.0175439;1pkt 1fpkt"];
1432--6475[label="0.192982;11pkt 11fpkt"];
1432--6549[label="0.666667;6pkt 6fpkt"];
1432--6730[label="0.0454545;1pkt 1fpkt"];
2144--3235[label="1;10pkt 10fpkt"];
2144--4155[label="1;9pkt 9fpkt"];
2144--5686[label="1;10pkt 10fpkt"];
2144--6549[label="1;9pkt 9fpkt"];
2725--2731[label="0.025641;1pkt 1fpkt"];
2725--3222[label="0.00925926;1pkt 1fpkt"];
2725--3549[label="0.0648148;7pkt 7fpkt"];
2725--3859[label="1;108pkt 108fpkt"];
2725--5517[label="1;108pkt 108fpkt"];
2725--6475[label="1;108pkt 108fpkt"];
3235--4155[label="1;9pkt 9fpkt"];
3235--5686[label="1;10pkt 10fpkt"];
3235--6549[label="1;9pkt 9fpkt"];
3859--5517[label="1;138pkt 138fpkt"];
3859--6475[label="1;138pkt 138fpkt"];
4155--5686[label="1;9pkt 9fpkt"];
4155--6549[label="1;9pkt 9fpkt"];
4739--6024[label="1;15pkt 15fpkt"];
5517--6475[label="1;138pkt 138fpkt"];
5686--6549[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="94.95.143.11" src_port="80"/>
      <filter dst_port="53" src_ip="164.238.210.35" src_port="57424"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
3800[label="200.124.240.27;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5484[label="200.124.240.27;1pkt 1fpkt", shape=invtriangle, color=brown];
6458[label="200.124.240.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.240.27:39881, 93.99.74.36:80}[50%]&lt;BR/&gt;{200.124.240.27:39882, 93.99.74.36:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39882: (37.5%)&lt;BR/&gt; 39881: (12.5%)&gt;];
}
3800--5484[label="1;1pkt 1fpkt"];
3800--6458[label="1;1pkt 1fpkt"];
5484--6458[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="93.99.74.36" dst_port="80" src_ip="200.124.240.27" src_port="39882"/>
      <filter dst_ip="93.99.74.36" dst_port="80" src_ip="200.124.240.27" src_port="39881"/>
    </slice>
    <from sec="1107320828" usec="0"/>
    <to sec="1107320832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
3814[label="129.1.206.29;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5491[label="129.1.206.29;27pkt 27fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.206.29:*, 209.3.27.250:80}[92.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4731: (1.85185%)&lt;BR/&gt; 4730: (1.85185%)&lt;BR/&gt; 4729: (1.85185%)&lt;BR/&gt; 4728: (1.85185%)&gt;];
}
3814--5491[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="209.3.27.250" dst_port="80" src_ip="129.1.206.29"/>
    </slice>
    <from sec="1107321278" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
3821[label="210.49.189.30;262pkt 262fpkt", shape=pentagon, color=darkviolet];
5494[label="210.49.189.30;261pkt 261fpkt", shape=invtriangle, color=brown];
6463[label="210.49.189.30;261pkt 261fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.49.189.30:*, *:1027}[50.3817%]&lt;BR/&gt;{210.49.189.30:*, *:1026}[49.6183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (25.2551%)&lt;BR/&gt; 1026: (24.7449%)&lt;BR/&gt; 3160: (0.57398%)&lt;BR/&gt; 4722: (0.382653%)&lt;BR/&gt; 4638: (0.382653%)&gt;];
}
3821--5494[label="1;261pkt 261fpkt"];
3821--6463[label="1;261pkt 261fpkt"];
5494--6463[label="1;261pkt 261fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="210.49.189.30"/>
      <filter dst_port="1026" src_ip="210.49.189.30"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
3822[label="164.238.203.30;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5495[label="164.238.203.30;7pkt 7fpkt", shape=invtriangle, color=brown];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.203.30:*, *:25}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 38806: (7.14286%)&lt;BR/&gt; 2954: (7.14286%)&lt;BR/&gt; 2949: (7.14286%)&lt;BR/&gt; 2948: (7.14286%)&gt;];
}
3822--5495[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="164.238.203.30"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
704[label="215.20.52.148;s;1493pkt 1493fpkt", shape=diamond, color=yellow];
1575[label="133.219.12.137;d;154pkt 154fpkt", shape=diamond, color=yellow];
2026[label="148.189.54.30;d;64pkt 64fpkt", shape=diamond, color=yellow];
2334[label="161.69.188.14;d;39pkt 39fpkt", shape=diamond, color=yellow];
2396[label="129.0.139.75;d;64pkt 64fpkt", shape=diamond, color=yellow];
2401[label="133.219.12.136;d;112pkt 112fpkt", shape=diamond, color=yellow];
2869[label="215.20.52.148;s;998pkt 998fpkt", shape=hexagon, color=black];
3184[label="148.189.54.30;d;51pkt 51fpkt", shape=hexagon, color=black];
3381[label="133.219.12.136;d;112pkt 112fpkt", shape=hexagon, color=black];
3704[label="212.10.26.17;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4434[label="95.185.90.116;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4445[label="93.7.2.119;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4682[label="215.20.52.148;1626pkt 1626fpkt", shape=pentagon, color=darkviolet];
5984[label="215.20.52.148;1625pkt 1625fpkt", shape=invtriangle, color=brown];
6683[label="215.20.52.148;1626pkt 1626fpkt", shape=invhouse, color=bisque];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.20.52.148:7000, *:*}[78.6267%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (46.074%)&lt;BR/&gt; 53: (2.17554%)&lt;BR/&gt; 25: (1.73168%)&lt;BR/&gt; 39807: (0.625156%)&lt;BR/&gt; 54818: (0.456364%)&gt;];
}
704--760[label="0.000823045;1pkt 1fpkt"];
704--2026[label="0.015625;1pkt 1fpkt"];
704--2869[label="1;998pkt 998fpkt"];
704--3184[label="0.0196078;1pkt 1fpkt"];
704--3228[label="0.000884173;1pkt 1fpkt"];
704--4682[label="1;1493pkt 1493fpkt"];
704--5984[label="0.99933;1492pkt 1492fpkt"];
704--6683[label="1;1493pkt 1493fpkt"];
1575--1930[label="0.0128205;1pkt 1fpkt"];
1575--3100[label="0.0142857;1pkt 1fpkt"];
1575--3549[label="0.00649351;1pkt 1fpkt"];
1575--4434[label="0.047619;1pkt 1fpkt"];
1575--4856[label="0.030303;1pkt 1fpkt"];
1575--4923[label="0.030303;1pkt 1fpkt"];
2026--2869[label="0.015625;1pkt 1fpkt"];
2026--3184[label="1;51pkt 51fpkt"];
2026--4434[label="0.142857;3pkt 3fpkt"];
2026--4682[label="0.015625;1pkt 1fpkt"];
2026--5984[label="0.015625;1pkt 1fpkt"];
2026--6683[label="0.015625;1pkt 1fpkt"];
2334--3704[label="0.25;1pkt 1fpkt"];
2334--4434[label="0.285714;6pkt 6fpkt"];
2334--4445[label="1;9pkt 9fpkt"];
2396--3097[label="0.015625;1pkt 1fpkt"];
2396--3495[label="0.015625;1pkt 1fpkt"];
2396--3549[label="0.015625;1pkt 1fpkt"];
2396--3704[label="0.5;2pkt 2fpkt"];
2396--4923[label="0.030303;1pkt 1fpkt"];
2396--5209[label="0.0192308;1pkt 1fpkt"];
2401--3100[label="0.0142857;1pkt 1fpkt"];
2401--3381[label="1;112pkt 112fpkt"];
2401--3549[label="0.00892857;1pkt 1fpkt"];
2401--4127[label="0.0666667;1pkt 1fpkt"];
2401--4434[label="0.0952381;2pkt 2fpkt"];
2401--4923[label="0.030303;1pkt 1fpkt"];
2869--3184[label="0.0196078;1pkt 1fpkt"];
2869--3228[label="0.001002;1pkt 1fpkt"];
2869--4682[label="1;998pkt 998fpkt"];
2869--5984[label="0.998998;997pkt 997fpkt"];
2869--6683[label="1;998pkt 998fpkt"];
3184--4434[label="0.0952381;2pkt 2fpkt"];
3184--4682[label="0.0196078;1pkt 1fpkt"];
3184--5984[label="0.0196078;1pkt 1fpkt"];
3184--6683[label="0.0196078;1pkt 1fpkt"];
3381--3549[label="0.00892857;1pkt 1fpkt"];
3381--4127[label="0.0666667;1pkt 1fpkt"];
3381--4434[label="0.0952381;2pkt 2fpkt"];
3381--4923[label="0.030303;1pkt 1fpkt"];
4682--5984[label="1;1625pkt 1625fpkt"];
4682--6683[label="1;1626pkt 1626fpkt"];
5984--6683[label="1;1625pkt 1625fpkt"];
</description>
    <slice>
      <filter src_ip="215.20.52.148" src_port="7000"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
3827[label="95.204.71.32;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5499[label="95.204.71.32;14pkt 14fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.204.71.32:*, 148.205.202.229:80}[57.1429%]&lt;BR/&gt;{95.204.71.32:*, 133.234.31.217:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60925: (3.57143%)&lt;BR/&gt; 59264: (3.57143%)&lt;BR/&gt; 54969: (3.57143%)&lt;BR/&gt; 53301: (3.57143%)&gt;];
}
3827--5499[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="148.205.202.229" dst_port="80" src_ip="95.204.71.32"/>
      <filter dst_ip="133.234.31.217" dst_port="80" src_ip="95.204.71.32"/>
    </slice>
    <from sec="1107320440" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
3836[label="164.238.224.32;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5505[label="164.238.224.32;42pkt 42fpkt", shape=invtriangle, color=brown];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.224.32:*, *:443}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.3855%)&lt;BR/&gt; 80: (2.40964%)&lt;BR/&gt; 5050: (1.20482%)&lt;BR/&gt; 1978: (1.20482%)&lt;BR/&gt; 1976: (1.20482%)&gt;];
}
3836--5505[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="164.238.224.32"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
1847[label="161.69.198.182;d;58pkt 58fpkt", shape=diamond, color=yellow];
3599[label="42.132.112.4;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3853[label="42.138.155.34;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5373[label="42.132.112.4;21pkt 21fpkt", shape=invtriangle, color=brown];
5512[label="42.138.155.34;15pkt 15fpkt", shape=invtriangle, color=brown];
6412[label="42.132.112.4;21pkt 21fpkt", shape=invhouse, color=bisque];
6472[label="42.138.155.34;14pkt 14fpkt", shape=invhouse, color=bisque];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.132.112.4:80, 161.69.198.182:*}[37.931%]&lt;BR/&gt;{42.138.155.34:80, 161.69.198.182:*}[25.8621%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1118: (1.21951%)&lt;BR/&gt; 1117: (1.21951%)&lt;BR/&gt; 1116: (1.21951%)&lt;BR/&gt; 1115: (1.21951%)&gt;];
}
1847--2768[label="0.0689655;4pkt 4fpkt"];
1847--3599[label="1;21pkt 21fpkt"];
1847--3853[label="1;14pkt 14fpkt"];
1847--5373[label="1;21pkt 21fpkt"];
1847--5512[label="1;15pkt 15fpkt"];
1847--6412[label="1;21pkt 21fpkt"];
1847--6472[label="1;14pkt 14fpkt"];
3599--5373[label="1;21pkt 21fpkt"];
3599--6412[label="1;21pkt 21fpkt"];
3853--5512[label="1;14pkt 14fpkt"];
3853--6472[label="1;14pkt 14fpkt"];
5373--6412[label="1;21pkt 21fpkt"];
5512--6472[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.198.182" src_ip="42.132.112.4" src_port="80"/>
      <filter dst_ip="161.69.198.182" src_ip="42.138.155.34" src_port="80"/>
    </slice>
    <from sec="1107320416" usec="0"/>
    <to sec="1107321201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
3860[label="161.69.235.35;61pkt 61fpkt", shape=pentagon, color=darkviolet];
5518[label="161.69.235.35;60pkt 60fpkt", shape=invtriangle, color=brown];
6476[label="161.69.235.35;61pkt 61fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.235.35:*, *:80}[93.4426%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7033%)&lt;BR/&gt; 1863: (3.2967%)&lt;BR/&gt; 65392: (0.824176%)&lt;BR/&gt; 65383: (0.824176%)&lt;BR/&gt; 65362: (0.824176%)&gt;];
}
3860--5518[label="1;60pkt 60fpkt"];
3860--6476[label="1;61pkt 61fpkt"];
5518--6476[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.69.235.35"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.58.154.37"/>
    </slice>
    <from sec="1107320907" usec="0"/>
    <to sec="1107320990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
3881[label="211.28.188.37;78pkt 78fpkt", shape=pentagon, color=darkviolet];
5532[label="211.28.188.37;79pkt 79fpkt", shape=invtriangle, color=brown];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.28.188.37:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4993: (0.636943%)&lt;BR/&gt; 4940: (0.636943%)&lt;BR/&gt; 4881: (0.636943%)&lt;BR/&gt; 4822: (0.636943%)&gt;];
}
3881--5532[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="211.28.188.37"/>
    </slice>
    <from sec="1107320409" usec="0"/>
    <to sec="1107321135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.44.230.37"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
3888[label="129.0.93.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5535[label="129.0.93.38;1pkt 1fpkt", shape=invtriangle, color=brown];
6483[label="129.0.93.38;1pkt 1fpkt", shape=invhouse, color=bisque];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.93.38:41886, 88.141.228.95:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41886: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3888--5535[label="1;1pkt 1fpkt"];
3888--6483[label="1;1pkt 1fpkt"];
5535--6483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="88.141.228.95" dst_port="80" src_ip="129.0.93.38" src_port="41886"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.231.71.39"/>
    </slice>
    <from sec="1107320801" usec="0"/>
    <to sec="1107320945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
3903[label="161.69.126.40;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5544[label="161.69.126.40;29pkt 29fpkt", shape=invtriangle, color=brown];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.126.40:*, *:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6102%)&lt;BR/&gt; 5190: (3.38983%)&lt;BR/&gt; 4269: (1.69492%)&lt;BR/&gt; 4268: (1.69492%)&lt;BR/&gt; 4266: (1.69492%)&gt;];
}
3903--5544[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.69.126.40"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
552[label="129.1.196.40;s;315pkt 315fpkt", shape=diamond, color=yellow];
3909[label="129.1.196.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5547[label="129.1.196.40;2pkt 2fpkt", shape=invtriangle, color=brown];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.196.40:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1082: (0.470219%)&lt;BR/&gt; 59268: (0.31348%)&lt;BR/&gt; 4093: (0.31348%)&lt;BR/&gt; 4092: (0.31348%)&gt;];
}
552--3909[label="0.5;1pkt 1fpkt"];
552--5547[label="0.5;1pkt 1fpkt"];
3909--5547[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="129.1.196.40" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
3918[label="26.32.132.41;255pkt 255fpkt", shape=pentagon, color=darkviolet];
5552[label="26.32.132.41;255pkt 255fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.32.132.41:60626, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60626: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3918--5552[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="26.32.132.41" src_port="60626"/>
    </slice>
    <from sec="1107320972" usec="0"/>
    <to sec="1107320998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
1962[label="88.2.149.179;d;8pkt 8fpkt", shape=diamond, color=yellow];
3921[label="129.0.205.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5553[label="129.0.205.41;3pkt 3fpkt", shape=invtriangle, color=brown];
6491[label="129.0.205.41;2pkt 2fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.205.154:110, 88.2.149.179:*}[70%]&lt;BR/&gt;{129.0.205.41:*, *:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (23.3333%)&lt;BR/&gt; 7777: (13.3333%)&lt;BR/&gt; 1863: (13.3333%)&lt;BR/&gt; 1051: (13.3333%)&lt;BR/&gt; 60083: (10%)&gt;];
}
1962--3921[label="0.5;1pkt 1fpkt"];
1962--5553[label="0.333333;1pkt 1fpkt"];
1962--6491[label="0.5;1pkt 1fpkt"];
3921--5553[label="1;2pkt 2fpkt"];
3921--6491[label="1;2pkt 2fpkt"];
5553--6491[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="129.0.205.41"/>
      <filter dst_ip="88.2.149.179" src_ip="129.0.205.154" src_port="110"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
3933[label="129.0.58.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5558[label="129.0.58.43;1pkt 1fpkt", shape=invtriangle, color=brown];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.58.43:41175, 94.138.90.124:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41175: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3933--5558[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="94.138.90.124" dst_port="80" src_ip="129.0.58.43" src_port="41175"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
3938[label="3.96.76.44;100pkt 100fpkt", shape=pentagon, color=darkviolet];
5560[label="3.96.76.44;100pkt 100fpkt", shape=invtriangle, color=brown];
6494[label="3.96.76.44;101pkt 101fpkt", shape=invhouse, color=bisque];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.96.76.44:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4178: (0.996678%)&lt;BR/&gt; 1686: (0.996678%)&lt;BR/&gt; 4993: (0.498339%)&lt;BR/&gt; 4975: (0.498339%)&gt;];
}
3938--5560[label="1;100pkt 100fpkt"];
3938--6494[label="1;100pkt 100fpkt"];
5560--6494[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="3.96.76.44"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
3940[label="161.69.97.44;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5561[label="161.69.97.44;7pkt 7fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.97.44:*, 220.98.183.85:443}[57.1429%]&lt;BR/&gt;{161.69.97.44:*, 220.98.183.85:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (34.6154%)&lt;BR/&gt; 80: (15.3846%)&lt;BR/&gt; 2372: (7.69231%)&lt;BR/&gt; 2370: (7.69231%)&lt;BR/&gt; 2369: (7.69231%)&gt;];
}
3940--5561[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="220.98.183.85" dst_port="443" src_ip="161.69.97.44"/>
      <filter dst_ip="220.98.183.85" dst_port="80" src_ip="161.69.97.44"/>
    </slice>
    <from sec="1107321169" usec="0"/>
    <to sec="1107321288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
1966[label="201.180.80.111;d;146pkt 146fpkt", shape=diamond, color=yellow];
3596[label="164.238.2.4;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3882[label="164.238.204.37;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3948[label="164.238.2.45;145pkt 145fpkt", shape=pentagon, color=darkviolet];
5566[label="164.238.2.45;145pkt 145fpkt", shape=invtriangle, color=brown];
6496[label="164.238.2.45;145pkt 145fpkt", shape=invhouse, color=bisque];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 3.83.170.12:6667}[36.4261%]&lt;BR/&gt;{164.238.2.45:*, 201.180.80.111:6667}[23.0241%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (44.2982%)&lt;BR/&gt; 1025: (5.26316%)&lt;BR/&gt; 53: (5.26316%)&lt;BR/&gt; 1548: (0.438596%)&lt;BR/&gt; 123: (0.438596%)&gt;];
}
1966--3596[label="0.520833;25pkt 25fpkt"];
1966--3882[label="0.327273;18pkt 18fpkt"];
1966--3948[label="0.413793;60pkt 60fpkt"];
1966--4114[label="0.00684932;1pkt 1fpkt"];
1966--5566[label="0.413793;60pkt 60fpkt"];
1966--5669[label="0.00684932;1pkt 1fpkt"];
1966--6496[label="0.413793;60pkt 60fpkt"];
3948--5566[label="1;145pkt 145fpkt"];
3948--6496[label="1;145pkt 145fpkt"];
5566--6496[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_ip="3.83.170.12" dst_port="6667"/>
      <filter dst_ip="201.180.80.111" dst_port="6667" src_ip="164.238.2.45"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
3952[label="129.1.138.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5568[label="129.1.138.45;2pkt 2fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.138.45:10311, 95.7.160.75:443}[50%]&lt;BR/&gt;{129.1.138.45:10310, 195.33.7.133:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10311: (25%)&lt;BR/&gt; 10310: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
3952--5568[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.33.7.133" dst_port="80" src_ip="129.1.138.45" src_port="10310"/>
      <filter dst_ip="95.7.160.75" dst_port="443" src_ip="129.1.138.45" src_port="10311"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.97.177.45"/>
    </slice>
    <from sec="1107320954" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.48.241.45"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
3956[label="219.78.47.46;156pkt 156fpkt", shape=pentagon, color=darkviolet];
5572[label="219.78.47.46;156pkt 156fpkt", shape=invtriangle, color=brown];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.78.47.46:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3956--5572[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.78.47.46" src_port="1027"/>
    </slice>
    <from sec="1107320970" usec="0"/>
    <to sec="1107320995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.6.193.47"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
3965[label="129.0.149.48;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5578[label="129.0.149.48;10pkt 10fpkt", shape=invtriangle, color=brown];
6499[label="129.0.149.48;10pkt 10fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.149.48:*, *:113}[50%]&lt;BR/&gt;{129.0.149.48:25, *:*}[50%]&lt;BR/&gt;{129.0.149.48:*, 94.95.251.97:*}[20%]&lt;BR/&gt;{129.0.149.48:*, 94.95.251.115:*}[20%]&lt;BR/&gt;{129.0.149.48:*, 94.95.251.120:*}[20%]&lt;BR/&gt;{129.0.149.48:*, 89.80.2.140:*}[20%]&lt;BR/&gt;{129.0.149.48:*, 42.223.171.153:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 62811: (5%)&lt;BR/&gt; 31503: (5%)&lt;BR/&gt; 24944: (5%)&gt;];
}
3965--5578[label="1;10pkt 10fpkt"];
3965--6499[label="1;10pkt 10fpkt"];
5578--6499[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="42.223.171.153" src_ip="129.0.149.48"/>
      <filter dst_ip="89.80.2.140" src_ip="129.0.149.48"/>
      <filter dst_ip="94.95.251.120" src_ip="129.0.149.48"/>
      <filter dst_ip="94.95.251.115" src_ip="129.0.149.48"/>
      <filter dst_ip="94.95.251.97" src_ip="129.0.149.48"/>
      <filter src_ip="129.0.149.48" src_port="25"/>
      <filter dst_port="113" src_ip="129.0.149.48"/>
    </slice>
    <from sec="1107320523" usec="0"/>
    <to sec="1107321261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.23.73.50"/>
    </slice>
    <from sec="1107320868" usec="0"/>
    <to sec="1107320954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3981[label="133.63.248.50;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5587[label="133.63.248.50;13pkt 13fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.248.50:25, 93.222.166.233:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.2963%)&lt;BR/&gt; 53246: (3.7037%)&lt;BR/&gt; 49984: (3.7037%)&lt;BR/&gt; 48108: (3.7037%)&lt;BR/&gt; 48094: (3.7037%)&gt;];
}
3981--5587[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="93.222.166.233" src_ip="133.63.248.50" src_port="25"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.155.77.52"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3993[label="205.52.183.52;198pkt 198fpkt", shape=pentagon, color=darkviolet];
5594[label="205.52.183.52;198pkt 198fpkt", shape=invtriangle, color=brown];
6504[label="205.52.183.52;198pkt 198fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.52.183.52:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3993--5594[label="1;198pkt 198fpkt"];
3993--6504[label="1;198pkt 198fpkt"];
5594--6504[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.52.183.52" src_port="1031"/>
    </slice>
    <from sec="1107320518" usec="0"/>
    <to sec="1107320557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.118.189.54"/>
    </slice>
    <from sec="1107321197" usec="0"/>
    <to sec="1107321229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
4008[label="42.220.235.54;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5605[label="42.220.235.54;5pkt 5fpkt", shape=invtriangle, color=brown];
6511[label="42.220.235.54;4pkt 4fpkt", shape=invhouse, color=bisque];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.220.235.54:80, 148.189.9.41:3907}[20%]&lt;BR/&gt;{42.220.235.54:80, 148.189.9.41:3908}[20%]&lt;BR/&gt;{42.220.235.54:80, 148.189.9.41:3909}[20%]&lt;BR/&gt;{42.220.235.54:80, 148.189.9.41:3910}[20%]&lt;BR/&gt;{42.220.235.54:80, 148.189.9.41:3943}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3943: (10.7143%)&lt;BR/&gt; 3910: (10.7143%)&lt;BR/&gt; 3909: (10.7143%)&lt;BR/&gt; 3908: (10.7143%)&gt;];
}
4008--5605[label="1;5pkt 5fpkt"];
4008--6511[label="1;4pkt 4fpkt"];
5605--6511[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.9.41" dst_port="3943" src_ip="42.220.235.54" src_port="80"/>
      <filter dst_ip="148.189.9.41" dst_port="3910" src_ip="42.220.235.54" src_port="80"/>
      <filter dst_ip="148.189.9.41" dst_port="3909" src_ip="42.220.235.54" src_port="80"/>
      <filter dst_ip="148.189.9.41" dst_port="3908" src_ip="42.220.235.54" src_port="80"/>
      <filter dst_ip="148.189.9.41" dst_port="3907" src_ip="42.220.235.54" src_port="80"/>
    </slice>
    <from sec="1107320455" usec="0"/>
    <to sec="1107320897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
4013[label="94.174.170.55;267pkt 267fpkt", shape=pentagon, color=darkviolet];
5607[label="94.174.170.55;267pkt 267fpkt", shape=invtriangle, color=brown];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.174.170.55:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4632: (0.374532%)&lt;BR/&gt; 3712: (0.374532%)&lt;BR/&gt; 2724: (0.374532%)&lt;BR/&gt; 2253: (0.374532%)&gt;];
}
4013--5607[label="1;267pkt 267fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="94.174.170.55"/>
    </slice>
    <from sec="1107320558" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
4018[label="129.0.155.56;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5610[label="129.0.155.56;13pkt 13fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.155.56:*, 219.163.74.78:80}[61.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3077%)&lt;BR/&gt; 1863: (7.69231%)&lt;BR/&gt; 20072: (3.84615%)&lt;BR/&gt; 1460: (3.84615%)&lt;BR/&gt; 1458: (3.84615%)&gt;];
}
4018--5610[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="219.163.74.78" dst_port="80" src_ip="129.0.155.56"/>
    </slice>
    <from sec="1107320434" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.129.109.57"/>
    </slice>
    <from sec="1107320598" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.55.22.58"/>
    </slice>
    <from sec="1107320413" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
4041[label="212.182.132.60;242pkt 242fpkt", shape=pentagon, color=darkviolet];
5624[label="212.182.132.60;243pkt 243fpkt", shape=invtriangle, color=brown];
6517[label="212.182.132.60;242pkt 242fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.182.132.60:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4041--5624[label="1;242pkt 242fpkt"];
4041--6517[label="1;242pkt 242fpkt"];
5624--6517[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.182.132.60" src_port="1031"/>
    </slice>
    <from sec="1107320903" usec="0"/>
    <to sec="1107320932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
4049[label="164.238.233.61;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5628[label="164.238.233.61;40pkt 40fpkt", shape=invtriangle, color=brown];
6521[label="164.238.233.61;40pkt 40fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.233.61:*, 93.152.136.52:53}[39.0244%]&lt;BR/&gt;{164.238.233.61:*, 209.192.112.191:443}[31.7073%]&lt;BR/&gt;{164.238.233.61:*, *:21}[29.2683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (19.8347%)&lt;BR/&gt; 443: (16.1157%)&lt;BR/&gt; 21: (14.0496%)&lt;BR/&gt; 2688: (1.23967%)&lt;BR/&gt; 2685: (1.23967%)&gt;];
}
4049--5628[label="1;40pkt 40fpkt"];
4049--6521[label="1;40pkt 40fpkt"];
5628--6521[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="164.238.233.61"/>
      <filter dst_ip="93.152.136.52" dst_port="53" src_ip="164.238.233.61"/>
      <filter dst_ip="209.192.112.191" dst_port="443" src_ip="164.238.233.61"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
4058[label="42.132.126.63;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5632[label="42.132.126.63;6pkt 6fpkt", shape=invtriangle, color=brown];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.132.126.63:80, 161.69.216.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1606: (7.69231%)&lt;BR/&gt; 1605: (7.69231%)&lt;BR/&gt; 1603: (7.69231%)&lt;BR/&gt; 1597: (7.69231%)&gt;];
}
4058--5632[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.216.210" src_ip="42.132.126.63" src_port="80"/>
    </slice>
    <from sec="1107321189" usec="0"/>
    <to sec="1107321225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
4059[label="221.100.167.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5633[label="221.100.167.63;1pkt 1fpkt", shape=invtriangle, color=brown];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.100.167.63:80, 201.242.144.45:35877}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35877: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4059--5633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.144.45" dst_port="35877" src_ip="221.100.167.63" src_port="80"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
4060[label="210.53.198.63;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5634[label="210.53.198.63;106pkt 106fpkt", shape=invtriangle, color=brown];
6524[label="210.53.198.63;105pkt 105fpkt", shape=invhouse, color=bisque];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.53.198.63:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35246: (0.473186%)&lt;BR/&gt; 35223: (0.473186%)&lt;BR/&gt; 35213: (0.473186%)&lt;BR/&gt; 35194: (0.473186%)&gt;];
}
4060--5634[label="1;106pkt 106fpkt"];
4060--6524[label="1;105pkt 105fpkt"];
5634--6524[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.53.198.63"/>
    </slice>
    <from sec="1107321202" usec="0"/>
    <to sec="1107321219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
4065[label="161.69.122.64;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5637[label="161.69.122.64;7pkt 7fpkt", shape=invtriangle, color=brown];
6526[label="161.69.122.64;8pkt 8fpkt", shape=invhouse, color=bisque];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.122.64:*, 40.249.208.58:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4513: (6.81818%)&lt;BR/&gt; 4415: (6.81818%)&lt;BR/&gt; 4183: (6.81818%)&lt;BR/&gt; 4110: (6.81818%)&lt;BR/&gt; 4050: (6.81818%)&gt;];
}
4065--5637[label="1;7pkt 7fpkt"];
4065--6526[label="1;7pkt 7fpkt"];
5637--6526[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="40.249.208.58" src_ip="161.69.122.64"/>
    </slice>
    <from sec="1107320574" usec="0"/>
    <to sec="1107320613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
2394[label="161.69.42.47;d;55pkt 55fpkt", shape=diamond, color=yellow];
2436[label="93.152.134.64;s;58pkt 58fpkt", shape=diamond, color=yellow];
4067[label="93.152.134.64;75pkt 75fpkt", shape=pentagon, color=darkviolet];
5639[label="93.152.134.64;75pkt 75fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.152.134.64:80, 161.69.42.47:*}[88.6076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4888: (0.760456%)&lt;BR/&gt; 4887: (0.760456%)&lt;BR/&gt; 4886: (0.760456%)&lt;BR/&gt; 4884: (0.760456%)&gt;];
}
2394--2436[label="0.945455;52pkt 52fpkt"];
2394--4067[label="0.945455;52pkt 52fpkt"];
2394--5639[label="0.945455;52pkt 52fpkt"];
2436--4067[label="0.982759;57pkt 57fpkt"];
2436--5639[label="0.982759;57pkt 57fpkt"];
4067--5639[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.42.47" src_ip="93.152.134.64" src_port="80"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
4073[label="201.242.144.65;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5642[label="201.242.144.65;28pkt 28fpkt", shape=invtriangle, color=brown];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.144.65:1080, 66.128.219.205:*}[39.2857%]&lt;BR/&gt;{201.242.144.65:1080, 66.128.219.206:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (42.8571%)&lt;BR/&gt; 0: (14.2857%)&lt;BR/&gt; 4973: (1.78571%)&lt;BR/&gt; 4958: (1.78571%)&lt;BR/&gt; 4864: (1.78571%)&gt;];
}
4073--5642[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="66.128.219.205" src_ip="201.242.144.65" src_port="1080"/>
      <filter dst_ip="66.128.219.206" src_ip="201.242.144.65" src_port="1080"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.80.17.66"/>
    </slice>
    <from sec="1107321071" usec="0"/>
    <to sec="1107321109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
1160[label="134.201.41.116;d;229pkt 229fpkt", shape=diamond, color=yellow];
1670[label="129.1.221.40;s;182pkt 182fpkt", shape=diamond, color=yellow];
2472[label="206.185.184.70;d;14pkt 14fpkt", shape=diamond, color=yellow];
3287[label="129.1.221.40;s;153pkt 153fpkt", shape=hexagon, color=black];
3911[label="129.1.221.40;189pkt 189fpkt", shape=pentagon, color=darkviolet];
4080[label="129.1.160.66;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4387[label="129.1.117.107;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5200[label="129.0.251.228;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5647[label="129.1.160.66;5pkt 5fpkt", shape=invtriangle, color=brown];
6305[label="129.0.251.228;29pkt 29fpkt", shape=invtriangle, color=brown];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.221.40:*, 134.201.41.116:210}[67.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (45.5275%)&lt;BR/&gt; 80: (1.77752%)&lt;BR/&gt; 1863: (1.08945%)&lt;BR/&gt; 0: (0.917431%)&lt;BR/&gt; 443: (0.573394%)&gt;];
}
1160--1392[label="0.0227273;1pkt 1fpkt"];
1160--1670[label="1;182pkt 182fpkt"];
1160--1679[label="0.0108696;2pkt 2fpkt"];
1160--1739[label="0.00436681;1pkt 1fpkt"];
1160--2970[label="0.027027;1pkt 1fpkt"];
1160--3267[label="0.025641;1pkt 1fpkt"];
1160--3287[label="1;153pkt 153fpkt"];
1160--3911[label="0.957672;181pkt 181fpkt"];
1160--4080[label="0.25;1pkt 1fpkt"];
1160--4387[label="1;39pkt 39fpkt"];
1160--4592[label="0.0227273;1pkt 1fpkt"];
1160--5353[label="0.00436681;1pkt 1fpkt"];
1160--5647[label="0.2;1pkt 1fpkt"];
1160--6398[label="0.00436681;1pkt 1fpkt"];
1160--6874[label="0.00436681;1pkt 1fpkt"];
1670--3287[label="1;153pkt 153fpkt"];
1670--3911[label="0.994505;181pkt 181fpkt"];
2472--2650[label="0.142857;2pkt 2fpkt"];
2472--3462[label="0.142857;2pkt 2fpkt"];
2472--3559[label="0.0714286;1pkt 1fpkt"];
2472--4080[label="0.5;2pkt 2fpkt"];
2472--5200[label="0.142857;2pkt 2fpkt"];
2472--5647[label="0.4;2pkt 2fpkt"];
2472--6305[label="0.142857;2pkt 2fpkt"];
3287--3911[label="0.993464;152pkt 152fpkt"];
4080--5647[label="1;4pkt 4fpkt"];
5200--6305[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="134.201.41.116" dst_port="210" src_ip="129.1.221.40"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
4105[label="161.69.99.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5663[label="161.69.99.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.99.69:1033, 93.99.74.36:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4105--5663[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="93.99.74.36" dst_port="80" src_ip="161.69.99.69" src_port="1033"/>
    </slice>
    <from sec="1107321158" usec="0"/>
    <to sec="1107321169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
4112[label="208.146.79.70;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5667[label="208.146.79.70;4pkt 4fpkt", shape=invtriangle, color=brown];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.146.79.70:80, 201.251.144.98:1070}[25%]&lt;BR/&gt;{208.146.79.70:80, 201.251.144.98:1071}[25%]&lt;BR/&gt;{208.146.79.70:80, 201.251.144.98:1072}[25%]&lt;BR/&gt;{208.146.79.70:80, 201.251.144.98:1073}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1073: (12.5%)&lt;BR/&gt; 1072: (12.5%)&lt;BR/&gt; 1071: (12.5%)&lt;BR/&gt; 1070: (12.5%)&gt;];
}
4112--5667[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.251.144.98" dst_port="1073" src_ip="208.146.79.70" src_port="80"/>
      <filter dst_ip="201.251.144.98" dst_port="1072" src_ip="208.146.79.70" src_port="80"/>
      <filter dst_ip="201.251.144.98" dst_port="1071" src_ip="208.146.79.70" src_port="80"/>
      <filter dst_ip="201.251.144.98" dst_port="1070" src_ip="208.146.79.70" src_port="80"/>
    </slice>
    <from sec="1107320785" usec="0"/>
    <to sec="1107320799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
4129[label="201.251.21.72;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5673[label="201.251.21.72;7pkt 7fpkt", shape=invtriangle, color=brown];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.21.72:*, *:6699}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 0: (14.2857%)&lt;BR/&gt; 1513: (7.14286%)&lt;BR/&gt; 1503: (7.14286%)&lt;BR/&gt; 1501: (7.14286%)&gt;];
}
4129--5673[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="201.251.21.72"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
4134[label="153.24.154.72;69pkt 69fpkt", shape=pentagon, color=darkviolet];
5676[label="153.24.154.72;69pkt 69fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.24.154.72:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45074: (1.44928%)&lt;BR/&gt; 39519: (1.44928%)&lt;BR/&gt; 35403: (1.44928%)&lt;BR/&gt; 34239: (1.44928%)&lt;BR/&gt; 27384: (1.44928%)&gt;];
}
4134--5676[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="153.24.154.72"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
4151[label="40.199.98.74;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5682[label="40.199.98.74;7pkt 7fpkt", shape=invtriangle, color=brown];
6547[label="40.199.98.74;6pkt 6fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.199.98.74:80, 201.251.20.222:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49370: (7.89474%)&lt;BR/&gt; 49369: (7.89474%)&lt;BR/&gt; 49368: (7.89474%)&lt;BR/&gt; 49367: (7.89474%)&gt;];
}
4151--5682[label="1;6pkt 6fpkt"];
4151--6547[label="1;6pkt 6fpkt"];
5682--6547[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="201.251.20.222" src_ip="40.199.98.74" src_port="80"/>
    </slice>
    <from sec="1107320787" usec="0"/>
    <to sec="1107320797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
4160[label="133.219.78.75;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5688[label="133.219.78.75;31pkt 31fpkt", shape=invtriangle, color=brown];
6551[label="133.219.78.75;31pkt 31fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.219.78.75:*, 93.75.83.187:80}[87.0968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48960: (1.6129%)&lt;BR/&gt; 48959: (1.6129%)&lt;BR/&gt; 48958: (1.6129%)&lt;BR/&gt; 48957: (1.6129%)&gt;];
}
4160--5688[label="1;31pkt 31fpkt"];
4160--6551[label="1;31pkt 31fpkt"];
5688--6551[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="93.75.83.187" dst_port="80" src_ip="133.219.78.75"/>
    </slice>
    <from sec="1107321195" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.91.181.76"/>
    </slice>
    <from sec="1107320433" usec="0"/>
    <to sec="1107321232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
4175[label="129.1.83.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5697[label="129.1.83.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.83.77:80, 88.146.85.225:3004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3004: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4175--5697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="88.146.85.225" dst_port="3004" src_ip="129.1.83.77" src_port="80"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.182.84.77"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
4185[label="210.101.189.78;230pkt 230fpkt", shape=pentagon, color=darkviolet];
5702[label="210.101.189.78;230pkt 230fpkt", shape=invtriangle, color=brown];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.101.189.78:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4185--5702[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.101.189.78" src_port="1030"/>
    </slice>
    <from sec="1107321167" usec="0"/>
    <to sec="1107321207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.24.241.78"/>
    </slice>
    <from sec="1107320491" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.1.203.79"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.10.129.80"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.1.203.83"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
4254[label="129.0.2.87;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5737[label="129.0.2.87;14pkt 14fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.2.87:*, 95.10.17.177:80}[42.8571%]&lt;BR/&gt;{129.0.2.87:*, 131.12.97.237:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2864: (3.57143%)&lt;BR/&gt; 2863: (3.57143%)&lt;BR/&gt; 2862: (3.57143%)&lt;BR/&gt; 2861: (3.57143%)&gt;];
}
4254--5737[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="131.12.97.237" dst_port="80" src_ip="129.0.2.87"/>
      <filter dst_ip="95.10.17.177" dst_port="80" src_ip="129.0.2.87"/>
    </slice>
    <from sec="1107320716" usec="0"/>
    <to sec="1107321244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.0.48.87"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.5.121.87"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.1.153.88"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.231.88"/>
    </slice>
    <from sec="1107320470" usec="0"/>
    <to sec="1107321258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.10.96.90"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
4301[label="201.251.29.92;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5764[label="201.251.29.92;7pkt 7fpkt", shape=invtriangle, color=brown];
6583[label="201.251.29.92;7pkt 7fpkt", shape=invhouse, color=bisque];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.29.92:*, 206.185.33.44:1863}[28.5714%]&lt;BR/&gt;{201.251.29.92:*, 206.201.173.158:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (28.5714%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 0: (14.2857%)&lt;BR/&gt; 33469: (7.14286%)&lt;BR/&gt; 33165: (7.14286%)&gt;];
}
4301--5764[label="1;7pkt 7fpkt"];
4301--6583[label="1;7pkt 7fpkt"];
5764--6583[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="206.201.173.158" dst_port="80" src_ip="201.251.29.92"/>
      <filter dst_ip="206.185.33.44" dst_port="1863" src_ip="201.251.29.92"/>
    </slice>
    <from sec="1107320433" usec="0"/>
    <to sec="1107321280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.9.37.94"/>
    </slice>
    <from sec="1107321032" usec="0"/>
    <to sec="1107321082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.105.140.94"/>
    </slice>
    <from sec="1107320719" usec="0"/>
    <to sec="1107320724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
4330[label="200.204.197.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5777[label="200.204.197.97;1pkt 1fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.204.197.97:80, 129.0.41.84:1319}[50%]&lt;BR/&gt;{200.204.197.97:80, 129.0.41.84:1320}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1320: (33.3333%)&lt;BR/&gt; 1319: (16.6667%)&gt;];
}
4330--5777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.41.84" dst_port="1320" src_ip="200.204.197.97" src_port="80"/>
      <filter dst_ip="129.0.41.84" dst_port="1319" src_ip="200.204.197.97" src_port="80"/>
    </slice>
    <from sec="1107321031" usec="0"/>
    <to sec="1107321045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
4335[label="130.50.43.98;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5781[label="130.50.43.98;5pkt 5fpkt", shape=invtriangle, color=brown];
6592[label="130.50.43.98;5pkt 5fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.50.43.98:80, 161.69.110.234:3910}[20%]&lt;BR/&gt;{130.50.43.98:80, 161.69.110.234:3911}[20%]&lt;BR/&gt;{130.50.43.98:80, 161.69.110.234:3913}[20%]&lt;BR/&gt;{130.50.43.98:80, 161.69.110.234:3915}[20%]&lt;BR/&gt;{130.50.43.98:80, 161.69.110.234:3917}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3917: (10%)&lt;BR/&gt; 3915: (10%)&lt;BR/&gt; 3913: (10%)&lt;BR/&gt; 3911: (10%)&gt;];
}
4335--5781[label="1;5pkt 5fpkt"];
4335--6592[label="1;5pkt 5fpkt"];
5781--6592[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.110.234" dst_port="3917" src_ip="130.50.43.98" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3915" src_ip="130.50.43.98" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3913" src_ip="130.50.43.98" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3911" src_ip="130.50.43.98" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3910" src_ip="130.50.43.98" src_port="80"/>
    </slice>
    <from sec="1107321249" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
4338[label="95.185.72.98;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5784[label="95.185.72.98;13pkt 13fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.185.72.98:80, 148.189.89.52:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 1479: (3.84615%)&lt;BR/&gt; 1478: (3.84615%)&lt;BR/&gt; 1477: (3.84615%)&lt;BR/&gt; 1476: (3.84615%)&gt;];
}
4338--5784[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.89.52" src_ip="95.185.72.98" src_port="80"/>
    </slice>
    <from sec="1107320688" usec="0"/>
    <to sec="1107320944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
4345[label="130.50.43.99;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5787[label="130.50.43.99;3pkt 3fpkt", shape=invtriangle, color=brown];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.50.43.99:80, 161.69.110.234:3876}[25%]&lt;BR/&gt;{130.50.43.99:80, 161.69.110.234:3877}[25%]&lt;BR/&gt;{130.50.43.99:80, 161.69.110.234:3878}[25%]&lt;BR/&gt;{130.50.43.99:80, 161.69.110.234:3884}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3884: (14.2857%)&lt;BR/&gt; 3878: (14.2857%)&lt;BR/&gt; 3877: (14.2857%)&lt;BR/&gt; 3876: (7.14286%)&gt;];
}
4345--5787[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.69.110.234" dst_port="3884" src_ip="130.50.43.99" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3878" src_ip="130.50.43.99" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3877" src_ip="130.50.43.99" src_port="80"/>
      <filter dst_ip="161.69.110.234" dst_port="3876" src_ip="130.50.43.99" src_port="80"/>
    </slice>
    <from sec="1107321149" usec="0"/>
    <to sec="1107321170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
4349[label="42.165.163.99;117pkt 117fpkt", shape=pentagon, color=darkviolet];
5792[label="42.165.163.99;118pkt 118fpkt", shape=invtriangle, color=brown];
6595[label="42.165.163.99;118pkt 118fpkt", shape=invhouse, color=bisque];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.165.163.99:80, *:42}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42: (50%)&gt;];
}
4349--5792[label="1;117pkt 117fpkt"];
4349--6595[label="1;117pkt 117fpkt"];
5792--6595[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="42" src_ip="42.165.163.99" src_port="80"/>
    </slice>
    <from sec="1107320903" usec="0"/>
    <to sec="1107320904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
4353[label="42.228.172.100;160pkt 160fpkt", shape=pentagon, color=darkviolet];
5797[label="42.228.172.100;161pkt 161fpkt", shape=invtriangle, color=brown];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.228.172.100:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4353--5797[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="42.228.172.100" src_port="1029"/>
    </slice>
    <from sec="1107320596" usec="0"/>
    <to sec="1107320642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
566[label="210.164.81.122;s;307pkt 307fpkt", shape=diamond, color=yellow];
754[label="133.63.74.47;d;280pkt 280fpkt", shape=diamond, color=yellow];
1254[label="161.69.117.85;d;278pkt 278fpkt", shape=diamond, color=yellow];
2002[label="161.69.198.135;d;79pkt 79fpkt", shape=diamond, color=yellow];
2379[label="129.0.5.30;d;99pkt 99fpkt", shape=diamond, color=yellow];
2522[label="200.167.69.139;s;100pkt 100fpkt", shape=diamond, color=yellow];
2807[label="210.164.81.122;s;301pkt 301fpkt", shape=hexagon, color=black];
2845[label="161.69.117.85;d;227pkt 227fpkt", shape=hexagon, color=black];
3440[label="200.167.69.139;s;100pkt 100fpkt", shape=hexagon, color=black];
3777[label="210.172.176.24;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4088[label="200.35.176.67;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4356[label="219.47.16.101;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4413[label="210.164.81.113;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4466[label="210.164.81.122;387pkt 387fpkt", shape=pentagon, color=darkviolet];
4598[label="200.167.69.139;128pkt 128fpkt", shape=pentagon, color=darkviolet];
4874[label="210.164.29.179;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5472[label="210.172.176.24;7pkt 7fpkt", shape=invtriangle, color=brown];
5652[label="200.35.176.67;12pkt 12fpkt", shape=invtriangle, color=brown];
5798[label="219.47.16.101;16pkt 16fpkt", shape=invtriangle, color=brown];
5834[label="210.164.81.113;12pkt 12fpkt", shape=invtriangle, color=brown];
6454[label="210.172.176.24;7pkt 7fpkt", shape=invhouse, color=bisque];
6532[label="200.35.176.67;12pkt 12fpkt", shape=invhouse, color=bisque];
6598[label="219.47.16.101;16pkt 16fpkt", shape=invhouse, color=bisque];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.63.74.47:*}[38.9034%]&lt;BR/&gt;{210.164.81.122:80, 161.69.117.85:*}[26.2402%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6103%)&lt;BR/&gt; 9548: (0.184578%)&lt;BR/&gt; 53: (0.123052%)&lt;BR/&gt; 50451: (0.102543%)&lt;BR/&gt; 50450: (0.102543%)&gt;];
}
566--754[label="0.275;77pkt 77fpkt"];
566--1254[label="0.723022;201pkt 201fpkt"];
566--2002[label="0.21519;17pkt 17fpkt"];
566--2379[label="0.121212;12pkt 12fpkt"];
566--2807[label="1;301pkt 301fpkt"];
566--2845[label="0.876652;199pkt 199fpkt"];
566--4466[label="1;307pkt 307fpkt"];
754--2522[label="0.98;98pkt 98fpkt"];
754--2807[label="0.275;77pkt 77fpkt"];
754--3440[label="0.98;98pkt 98fpkt"];
754--3777[label="1;6pkt 6fpkt"];
754--4466[label="0.275;77pkt 77fpkt"];
754--4598[label="0.765625;98pkt 98fpkt"];
754--5472[label="1;7pkt 7fpkt"];
754--6454[label="1;7pkt 7fpkt"];
1254--2807[label="0.715827;199pkt 199fpkt"];
1254--2845[label="1;227pkt 227fpkt"];
1254--4413[label="1;12pkt 12fpkt"];
1254--4466[label="0.723022;201pkt 201fpkt"];
1254--4874[label="0.88;22pkt 22fpkt"];
1254--5834[label="1;12pkt 12fpkt"];
2002--2807[label="0.189873;15pkt 15fpkt"];
2002--3130[label="0.0294118;2pkt 2fpkt"];
2002--4088[label="1;11pkt 11fpkt"];
2002--4356[label="1;16pkt 16fpkt"];
2002--4466[label="0.21519;17pkt 17fpkt"];
2002--4487[label="0.0253165;2pkt 2fpkt"];
2002--4874[label="0.12;3pkt 3fpkt"];
2002--5652[label="1;12pkt 12fpkt"];
2002--5798[label="1;16pkt 16fpkt"];
2002--5878[label="0.0253165;2pkt 2fpkt"];
2002--6532[label="1;12pkt 12fpkt"];
2002--6598[label="1;16pkt 16fpkt"];
2379--2807[label="0.10101;10pkt 10fpkt"];
2379--3555[label="0.010101;1pkt 1fpkt"];
2379--3566[label="0.010101;1pkt 1fpkt"];
2379--4466[label="0.929293;92pkt 92fpkt"];
2379--5332[label="0.010101;1pkt 1fpkt"];
2379--6386[label="0.010101;1pkt 1fpkt"];
2379--6867[label="0.010101;1pkt 1fpkt"];
2522--3440[label="1;100pkt 100fpkt"];
2522--4598[label="1;100pkt 100fpkt"];
2807--2845[label="0.876652;199pkt 199fpkt"];
2807--4466[label="1;301pkt 301fpkt"];
2845--4413[label="0.833333;10pkt 10fpkt"];
2845--4466[label="0.876652;199pkt 199fpkt"];
2845--5834[label="0.833333;10pkt 10fpkt"];
3440--4598[label="1;100pkt 100fpkt"];
3777--5472[label="1;6pkt 6fpkt"];
3777--6454[label="1;6pkt 6fpkt"];
4088--5652[label="1;11pkt 11fpkt"];
4088--6532[label="1;11pkt 11fpkt"];
4356--5798[label="1;16pkt 16fpkt"];
4356--6598[label="1;16pkt 16fpkt"];
4413--5834[label="1;12pkt 12fpkt"];
5472--6454[label="1;7pkt 7fpkt"];
5652--6532[label="1;12pkt 12fpkt"];
5798--6598[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="133.63.74.47" src_port="80"/>
      <filter dst_ip="161.69.117.85" src_ip="210.164.81.122" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
4367[label="129.0.13.104;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5804[label="129.0.13.104;12pkt 12fpkt", shape=invtriangle, color=brown];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.13.104:25, *:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.3043%)&lt;BR/&gt; 0: (8.69565%)&lt;BR/&gt; 50265: (4.34783%)&lt;BR/&gt; 38601: (4.34783%)&lt;BR/&gt; 4558: (4.34783%)&gt;];
}
4367--5804[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="129.0.13.104" src_port="25"/>
    </slice>
    <from sec="1107320474" usec="0"/>
    <to sec="1107321286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.145.244.105"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
4386[label="133.63.90.107;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5819[label="133.63.90.107;15pkt 15fpkt", shape=invtriangle, color=brown];
6609[label="133.63.90.107;14pkt 14fpkt", shape=invhouse, color=bisque];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.90.107:80, 220.60.129.250:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57571: (3.48837%)&lt;BR/&gt; 57559: (3.48837%)&lt;BR/&gt; 56223: (3.48837%)&lt;BR/&gt; 53742: (3.48837%)&gt;];
}
4386--5819[label="1;14pkt 14fpkt"];
4386--6609[label="1;14pkt 14fpkt"];
5819--6609[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="220.60.129.250" src_ip="133.63.90.107" src_port="80"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.69.125.107"/>
    </slice>
    <from sec="1107321159" usec="0"/>
    <to sec="1107321180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
4422[label="93.72.170.114;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5837[label="93.72.170.114;62pkt 62fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.72.170.114:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 1597: (1.6129%)&lt;BR/&gt; 4990: (0.806452%)&lt;BR/&gt; 4808: (0.806452%)&lt;BR/&gt; 4787: (0.806452%)&gt;];
}
4422--5837[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="93.72.170.114"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
2455[label="192.89.6.173;d;171pkt 171fpkt", shape=diamond, color=yellow];
4010[label="161.69.60.55;151pkt 151fpkt", shape=pentagon, color=darkviolet];
4835[label="133.63.88.172;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5421[label="129.0.158.15;49pkt 49fpkt", shape=invtriangle, color=brown];
5606[label="161.69.60.55;150pkt 150fpkt", shape=invtriangle, color=brown];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.60.55:*, 192.89.6.173:53}[55.5147%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.2973%)&lt;BR/&gt; 32774: (1.26126%)&lt;BR/&gt; 25: (1.26126%)&lt;BR/&gt; 80: (0.810811%)&lt;BR/&gt; 1863: (0.720721%)&gt;];
}
2455--2601[label="0.00584795;1pkt 1fpkt"];
2455--2609[label="0.00584795;1pkt 1fpkt"];
2455--2698[label="0.00584795;1pkt 1fpkt"];
2455--2700[label="0.0060241;1pkt 1fpkt"];
2455--2771[label="0.00584795;1pkt 1fpkt"];
2455--3118[label="0.00584795;1pkt 1fpkt"];
2455--3124[label="0.00584795;1pkt 1fpkt"];
2455--3143[label="0.00584795;1pkt 1fpkt"];
2455--3239[label="0.00584795;1pkt 1fpkt"];
2455--3242[label="0.00584795;1pkt 1fpkt"];
2455--3337[label="0.00584795;1pkt 1fpkt"];
2455--3353[label="0.00584795;1pkt 1fpkt"];
2455--3355[label="0.00970874;1pkt 1fpkt"];
2455--3479[label="0.00584795;1pkt 1fpkt"];
2455--3500[label="0.00584795;1pkt 1fpkt"];
2455--3549[label="0.0409357;7pkt 7fpkt"];
2455--3658[label="0.00584795;1pkt 1fpkt"];
2455--3677[label="0.00584795;1pkt 1fpkt"];
2455--3721[label="0.0102041;1pkt 1fpkt"];
2455--3778[label="0.00584795;1pkt 1fpkt"];
2455--3833[label="0.00584795;1pkt 1fpkt"];
2455--3894[label="0.00584795;1pkt 1fpkt"];
2455--4010[label="0.86755;131pkt 131fpkt"];
2455--4243[label="0.00584795;1pkt 1fpkt"];
2455--4255[label="0.00584795;1pkt 1fpkt"];
2455--4813[label="0.00584795;1pkt 1fpkt"];
2455--4835[label="0.0294118;1pkt 1fpkt"];
2455--4838[label="0.00584795;1pkt 1fpkt"];
2455--4862[label="0.00584795;1pkt 1fpkt"];
2455--4952[label="0.00584795;1pkt 1fpkt"];
2455--5405[label="0.00584795;1pkt 1fpkt"];
2455--5421[label="0.0204082;1pkt 1fpkt"];
2455--5436[label="0.010101;1pkt 1fpkt"];
2455--5473[label="0.00584795;1pkt 1fpkt"];
2455--5539[label="0.00584795;1pkt 1fpkt"];
2455--5606[label="0.866667;130pkt 130fpkt"];
2455--5733[label="0.00584795;1pkt 1fpkt"];
2455--5828[label="0.00584795;1pkt 1fpkt"];
2455--5925[label="0.00584795;1pkt 1fpkt"];
2455--6082[label="0.00584795;1pkt 1fpkt"];
2455--6094[label="0.00584795;1pkt 1fpkt"];
2455--6441[label="0.0102041;1pkt 1fpkt"];
2455--6659[label="0.00584795;1pkt 1fpkt"];
2455--6736[label="0.00584795;1pkt 1fpkt"];
4010--5606[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_ip="192.89.6.173" dst_port="53" src_ip="161.69.60.55"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
1112[label="129.1.250.254;s;199pkt 199fpkt", shape=diamond, color=yellow];
2337[label="209.107.218.43;d;12pkt 12fpkt", shape=diamond, color=yellow];
2489[label="219.177.80.30;d;68pkt 68fpkt", shape=diamond, color=yellow];
3336[label="209.107.218.43;d;12pkt 12fpkt", shape=hexagon, color=black];
3429[label="219.177.80.30;d;68pkt 68fpkt", shape=hexagon, color=black];
5355[label="129.1.250.254;203pkt 203fpkt", shape=pentagon, color=darkviolet];
6400[label="129.1.250.254;203pkt 203fpkt", shape=invtriangle, color=brown];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.250.254:*, 219.177.80.30:80}[31.1628%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.0654%)&lt;BR/&gt; 62679: (3.72549%)&lt;BR/&gt; 5050: (2.35294%)&lt;BR/&gt; 7001: (1.17647%)&lt;BR/&gt; 63514: (0.588235%)&gt;];
}
1112--1188[label="0.0854271;17pkt 17fpkt"];
1112--1425[label="0.0201342;3pkt 3fpkt"];
1112--1785[label="0.0201005;4pkt 4fpkt"];
1112--1823[label="0.0434783;1pkt 1fpkt"];
1112--2207[label="0.00877193;1pkt 1fpkt"];
1112--2337[label="0.0833333;1pkt 1fpkt"];
1112--2388[label="0.05;1pkt 1fpkt"];
1112--2489[label="0.985294;67pkt 67fpkt"];
1112--2579[label="0.0201005;4pkt 4fpkt"];
1112--2969[label="0.00502513;1pkt 1fpkt"];
1112--3336[label="0.0833333;1pkt 1fpkt"];
1112--3371[label="0.0201005;4pkt 4fpkt"];
1112--3429[label="0.985294;67pkt 67fpkt"];
1112--3540[label="0.0251256;5pkt 5fpkt"];
1112--3550[label="0.0753769;15pkt 15fpkt"];
1112--3559[label="0.0301508;6pkt 6fpkt"];
1112--3562[label="0.0753769;15pkt 15fpkt"];
1112--5355[label="1;199pkt 199fpkt"];
1112--6400[label="1;199pkt 199fpkt"];
2337--3336[label="1;12pkt 12fpkt"];
2337--5355[label="0.0833333;1pkt 1fpkt"];
2337--6400[label="0.0833333;1pkt 1fpkt"];
2489--3124[label="0.0147059;1pkt 1fpkt"];
2489--3429[label="1;68pkt 68fpkt"];
2489--5355[label="0.985294;67pkt 67fpkt"];
2489--6400[label="0.985294;67pkt 67fpkt"];
3336--5355[label="0.0833333;1pkt 1fpkt"];
3336--6400[label="0.0833333;1pkt 1fpkt"];
3429--5355[label="0.985294;67pkt 67fpkt"];
3429--6400[label="0.985294;67pkt 67fpkt"];
5355--6400[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_ip="219.177.80.30" dst_port="80" src_ip="129.1.250.254"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
4443[label="201.251.14.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5849[label="201.251.14.118;1pkt 1fpkt", shape=invtriangle, color=brown];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.14.118:1634, 206.185.37.180:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1634: (50%)&gt;];
}
4443--5849[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.37.180" dst_port="1863" src_ip="201.251.14.118" src_port="1634"/>
    </slice>
    <from sec="1107320445" usec="0"/>
    <to sec="1107321268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
4451[label="92.0.113.119;90pkt 90fpkt", shape=pentagon, color=darkviolet];
5852[label="92.0.113.119;90pkt 90fpkt", shape=invtriangle, color=brown];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.0.113.119:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4921: (0.555556%)&lt;BR/&gt; 4689: (0.555556%)&lt;BR/&gt; 4678: (0.555556%)&lt;BR/&gt; 4614: (0.555556%)&gt;];
}
4451--5852[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="92.0.113.119"/>
    </slice>
    <from sec="1107320764" usec="0"/>
    <to sec="1107321085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
4456[label="93.26.178.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5859[label="93.26.178.120;1pkt 1fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.26.178.120:80, 201.242.144.45:35855}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35855: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4456--5859[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.144.45" dst_port="35855" src_ip="93.26.178.120" src_port="80"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.35.163.121"/>
    </slice>
    <from sec="1107320442" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
4467[label="133.63.112.122;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5864[label="133.63.112.122;3pkt 3fpkt", shape=invtriangle, color=brown];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.112.122:0, 219.163.203.69:0}[25%]&lt;BR/&gt;{133.63.112.122:4359, 209.175.82.225:80}[25%]&lt;BR/&gt;{133.63.112.122:4420, 219.163.73.93:80}[25%]&lt;BR/&gt;{133.63.112.122:4422, 219.163.73.93:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 4422: (14.2857%)&lt;BR/&gt; 4420: (14.2857%)&lt;BR/&gt; 4359: (7.14286%)&gt;];
}
4467--5864[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.163.73.93" dst_port="80" src_ip="133.63.112.122" src_port="4422"/>
      <filter dst_ip="219.163.73.93" dst_port="80" src_ip="133.63.112.122" src_port="4420"/>
      <filter dst_ip="209.175.82.225" dst_port="80" src_ip="133.63.112.122" src_port="4359"/>
      <filter dst_ip="219.163.203.69" src_ip="133.63.112.122"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
4468[label="133.63.122.122;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5865[label="133.63.122.122;16pkt 16fpkt", shape=invtriangle, color=brown];
6629[label="133.63.122.122;17pkt 17fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.122.122:*, 94.95.144.156:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41%)&lt;BR/&gt; 443: (6%)&lt;BR/&gt; 5050: (3%)&lt;BR/&gt; 2916: (3%)&lt;BR/&gt; 2915: (3%)&gt;];
}
4468--5865[label="1;16pkt 16fpkt"];
4468--6629[label="1;17pkt 17fpkt"];
5865--6629[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="94.95.144.156" dst_port="80" src_ip="133.63.122.122"/>
    </slice>
    <from sec="1107320934" usec="0"/>
    <to sec="1107321280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
4474[label="129.0.2.123;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5871[label="129.0.2.123;33pkt 33fpkt", shape=invtriangle, color=brown];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.2.123:*, 88.208.15.253:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1311: (1.51515%)&lt;BR/&gt; 1310: (1.51515%)&lt;BR/&gt; 1309: (1.51515%)&lt;BR/&gt; 1308: (1.51515%)&gt;];
}
4474--5871[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="88.208.15.253" dst_port="80" src_ip="129.0.2.123"/>
    </slice>
    <from sec="1107321249" usec="0"/>
    <to sec="1107321264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
4475[label="129.0.47.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5872[label="129.0.47.123;1pkt 1fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.47.123:2356, 206.185.34.132:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2356: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4475--5872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.34.132" dst_port="80" src_ip="129.0.47.123" src_port="2356"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
4477[label="129.0.129.123;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5874[label="129.0.129.123;2pkt 2fpkt", shape=invtriangle, color=brown];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.129.123:4580, 206.185.33.4:1863}[50%]&lt;BR/&gt;{129.0.129.123:4386, 206.185.37.235:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4580: (25%)&lt;BR/&gt; 4386: (25%)&gt;];
}
4477--5874[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.37.235" dst_port="1863" src_ip="129.0.129.123" src_port="4386"/>
      <filter dst_ip="206.185.33.4" dst_port="1863" src_ip="129.0.129.123" src_port="4580"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.98.136.123"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
4493[label="201.52.122.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5883[label="201.52.122.126;1pkt 1fpkt", shape=invtriangle, color=brown];
6637[label="201.52.122.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.52.122.126:40122, 148.189.33.14:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40122: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4493--5883[label="1;1pkt 1fpkt"];
4493--6637[label="1;1pkt 1fpkt"];
5883--6637[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.33.14" dst_port="443" src_ip="201.52.122.126" src_port="40122"/>
    </slice>
    <from sec="1107320430" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
1199[label="214.14.193.83;s;4pkt 4fpkt", shape=diamond, color=yellow];
1422[label="200.124.241.170;d;13pkt 13fpkt", shape=diamond, color=yellow];
2727[label="214.14.193.83;s;4pkt 4fpkt", shape=hexagon, color=black];
4495[label="211.128.68.127;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5885[label="211.128.68.127;7pkt 7fpkt", shape=invtriangle, color=brown];
6639[label="211.128.68.127;7pkt 7fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.128.68.127:*, 200.124.241.170:*}[61.5385%]&lt;BR/&gt;{*:*, 200.124.241.170:21}[30.7692%]&lt;BR/&gt;{214.14.193.83:*, 200.124.241.170:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (13.0952%)&lt;BR/&gt; 48887: (4.7619%)&lt;BR/&gt; 45800: (4.7619%)&lt;BR/&gt; 45535: (4.7619%)&lt;BR/&gt; 34673: (4.7619%)&gt;];
}
1199--1422[label="1;4pkt 4fpkt"];
1199--2727[label="1;4pkt 4fpkt"];
1422--2727[label="1;4pkt 4fpkt"];
1422--4495[label="1;7pkt 7fpkt"];
1422--5885[label="1;7pkt 7fpkt"];
1422--6639[label="1;7pkt 7fpkt"];
4495--5885[label="1;7pkt 7fpkt"];
4495--6639[label="1;7pkt 7fpkt"];
5885--6639[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.241.170" src_ip="211.128.68.127"/>
      <filter dst_ip="200.124.241.170" src_ip="214.14.193.83"/>
      <filter dst_ip="200.124.241.170" dst_port="21"/>
    </slice>
    <from sec="1107320416" usec="0"/>
    <to sec="1107321172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
4502[label="42.161.16.128;100pkt 100fpkt", shape=pentagon, color=darkviolet];
5888[label="42.161.16.128;100pkt 100fpkt", shape=invtriangle, color=brown];
6640[label="42.161.16.128;100pkt 100fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.161.16.128:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2252: (1%)&lt;BR/&gt; 2995: (0.5%)&lt;BR/&gt; 2975: (0.5%)&lt;BR/&gt; 2973: (0.5%)&gt;];
}
4502--5888[label="1;100pkt 100fpkt"];
4502--6640[label="1;100pkt 100fpkt"];
5888--6640[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="42.161.16.128"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
4507[label="201.53.112.128;231pkt 231fpkt", shape=pentagon, color=darkviolet];
5891[label="201.53.112.128;231pkt 231fpkt", shape=invtriangle, color=brown];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.53.112.128:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4507--5891[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.53.112.128" src_port="1025"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
4522[label="210.103.110.130;212pkt 212fpkt", shape=pentagon, color=darkviolet];
5898[label="210.103.110.130;212pkt 212fpkt", shape=invtriangle, color=brown];
6646[label="210.103.110.130;212pkt 212fpkt", shape=invhouse, color=bisque];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.103.110.130:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62522: (0.235849%)&lt;BR/&gt; 61267: (0.235849%)&lt;BR/&gt; 60256: (0.235849%)&lt;BR/&gt; 59895: (0.235849%)&gt;];
}
4522--5898[label="1;212pkt 212fpkt"];
4522--6646[label="1;212pkt 212fpkt"];
5898--6646[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter src_ip="210.103.110.130" src_port="80"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
5900[label="211.13.211.130;199pkt 199fpkt", shape=invtriangle, color=brown];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.13.211.130:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="211.13.211.130" src_port="1031"/>
    </slice>
    <from sec="1107320683" usec="0"/>
    <to sec="1107320721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.94.234.130"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
4529[label="133.234.21.131;167pkt 167fpkt", shape=pentagon, color=darkviolet];
5904[label="133.234.21.131;167pkt 167fpkt", shape=invtriangle, color=brown];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.234.21.131:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.0838%)&lt;BR/&gt; 32768: (3.29341%)&lt;BR/&gt; 32769: (1.49701%)&lt;BR/&gt; 9255: (1.49701%)&lt;BR/&gt; 9253: (0.898204%)&gt;];
}
4529--5904[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter src_ip="133.234.21.131" src_port="53"/>
    </slice>
    <from sec="1107320415" usec="0"/>
    <to sec="1107321291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.43.99.132"/>
    </slice>
    <from sec="1107320570" usec="0"/>
    <to sec="1107320924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
4540[label="129.1.158.132;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5909[label="129.1.158.132;16pkt 16fpkt", shape=invtriangle, color=brown];
6650[label="129.1.158.132;16pkt 16fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.158.132:1056, *:53}[31.25%]&lt;BR/&gt;{129.1.158.132:80, 200.0.218.25:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 0: (18.75%)&lt;BR/&gt; 1056: (15.625%)&lt;BR/&gt; 53: (15.625%)&lt;BR/&gt; 50915: (3.125%)&gt;];
}
4540--5909[label="1;16pkt 16fpkt"];
4540--6650[label="1;16pkt 16fpkt"];
5909--6650[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="200.0.218.25" src_ip="129.1.158.132" src_port="80"/>
      <filter dst_port="53" src_ip="129.1.158.132" src_port="1056"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
4547[label="161.69.85.133;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5910[label="161.69.85.133;29pkt 29fpkt", shape=invtriangle, color=brown];
6651[label="161.69.85.133;29pkt 29fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.85.133:*, 55.98.120.0:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2172: (1.74419%)&lt;BR/&gt; 2171: (1.74419%)&lt;BR/&gt; 2170: (1.74419%)&lt;BR/&gt; 2169: (1.74419%)&gt;];
}
4547--5910[label="1;28pkt 28fpkt"];
4547--6651[label="1;28pkt 28fpkt"];
5910--6651[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="55.98.120.0" dst_port="80" src_ip="161.69.85.133"/>
    </slice>
    <from sec="1107321057" usec="0"/>
    <to sec="1107321078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
4561[label="129.0.49.135;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5920[label="129.0.49.135;4pkt 4fpkt", shape=invtriangle, color=brown];
6656[label="129.0.49.135;5pkt 5fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.49.135:1058, 206.185.209.218:80}[20%]&lt;BR/&gt;{129.0.49.135:1060, 95.7.163.47:80}[20%]&lt;BR/&gt;{129.0.49.135:1065, 95.7.163.47:443}[20%]&lt;BR/&gt;{129.0.49.135:1062, 206.185.176.173:80}[20%]&lt;BR/&gt;{129.0.49.135:1063, 206.185.176.173:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2857%)&lt;BR/&gt; 1065: (10.7143%)&lt;BR/&gt; 1063: (10.7143%)&lt;BR/&gt; 1060: (10.7143%)&lt;BR/&gt; 1058: (10.7143%)&gt;];
}
4561--5920[label="1;4pkt 4fpkt"];
4561--6656[label="1;5pkt 5fpkt"];
5920--6656[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.176.173" dst_port="80" src_ip="129.0.49.135" src_port="1063"/>
      <filter dst_ip="206.185.176.173" dst_port="80" src_ip="129.0.49.135" src_port="1062"/>
      <filter dst_ip="95.7.163.47" dst_port="443" src_ip="129.0.49.135" src_port="1065"/>
      <filter dst_ip="95.7.163.47" dst_port="80" src_ip="129.0.49.135" src_port="1060"/>
      <filter dst_ip="206.185.209.218" dst_port="80" src_ip="129.0.49.135" src_port="1058"/>
    </slice>
    <from sec="1107320465" usec="0"/>
    <to sec="1107320489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.170.103.135"/>
    </slice>
    <from sec="1107320434" usec="0"/>
    <to sec="1107321289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
1778[label="200.124.244.205;d;138pkt 138fpkt", shape=diamond, color=yellow];
4574[label="205.139.76.136;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5929[label="205.139.76.136;13pkt 13fpkt", shape=invtriangle, color=brown];
6662[label="205.139.76.136;13pkt 13fpkt", shape=invhouse, color=bisque];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 200.124.244.205:0}[92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1778--4574[label="0.0769231;1pkt 1fpkt"];
1778--5929[label="0.0769231;1pkt 1fpkt"];
1778--6662[label="0.0769231;1pkt 1fpkt"];
4574--5929[label="1;13pkt 13fpkt"];
4574--6662[label="1;13pkt 13fpkt"];
5929--6662[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.244.205"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.148.136"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.75.98.138"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
4612[label="129.0.47.141;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5944[label="129.0.47.141;17pkt 17fpkt", shape=invtriangle, color=brown];
6668[label="129.0.47.141;17pkt 17fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.47.141:*, 163.42.208.140:80}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 3547: (2.94118%)&lt;BR/&gt; 3546: (2.94118%)&lt;BR/&gt; 3545: (2.94118%)&lt;BR/&gt; 3544: (2.94118%)&gt;];
}
4612--5944[label="1;17pkt 17fpkt"];
4612--6668[label="1;17pkt 17fpkt"];
5944--6668[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="163.42.208.140" dst_port="80" src_ip="129.0.47.141"/>
    </slice>
    <from sec="1107320414" usec="0"/>
    <to sec="1107320643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
1151[label="133.63.114.220;s;44pkt 44fpkt", shape=diamond, color=yellow];
1305[label="95.7.132.203;d;156pkt 156fpkt", shape=diamond, color=yellow];
1579[label="206.185.33.74;d;9pkt 9fpkt", shape=diamond, color=yellow];
1580[label="129.0.252.129;s;77pkt 77fpkt", shape=diamond, color=yellow];
1639[label="207.19.195.85;d;68pkt 68fpkt", shape=diamond, color=yellow];
1703[label="95.34.10.255;d;14pkt 14fpkt", shape=diamond, color=yellow];
1974[label="129.0.144.241;s;32pkt 32fpkt", shape=diamond, color=yellow];
2225[label="129.1.132.64;s;39pkt 39fpkt", shape=diamond, color=yellow];
2228[label="129.1.99.40;s;44pkt 44fpkt", shape=diamond, color=yellow];
2260[label="129.0.48.243;s;40pkt 40fpkt", shape=diamond, color=yellow];
2300[label="206.185.185.20;d;9pkt 9fpkt", shape=diamond, color=yellow];
2479[label="206.185.33.70;d;6pkt 6fpkt", shape=diamond, color=yellow];
3158[label="129.0.144.241;s;32pkt 32fpkt", shape=hexagon, color=black];
3245[label="206.185.33.74;d;8pkt 8fpkt", shape=hexagon, color=black];
3246[label="129.0.252.129;s;69pkt 69fpkt", shape=hexagon, color=black];
3900[label="129.1.99.40;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4066[label="129.1.132.64;43pkt 43fpkt", shape=pentagon, color=darkviolet];
4244[label="129.1.161.85;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4558[label="200.124.240.134;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4570[label="129.0.49.136;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4631[label="133.63.211.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4676[label="201.251.149.147;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4796[label="129.1.221.167;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4839[label="161.69.75.173;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4864[label="133.234.28.177;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5124[label="129.0.141.216;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5153[label="133.63.114.220;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5279[label="129.0.144.241;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5638[label="129.1.132.64;42pkt 42fpkt", shape=invtriangle, color=brown];
5926[label="129.0.49.136;23pkt 23fpkt", shape=invtriangle, color=brown];
5957[label="133.63.211.142;2pkt 2fpkt", shape=invtriangle, color=brown];
6083[label="161.69.75.173;22pkt 22fpkt", shape=invtriangle, color=brown];
6278[label="133.63.114.220;44pkt 44fpkt", shape=invtriangle, color=brown];
6353[label="129.0.144.241;32pkt 32fpkt", shape=invtriangle, color=brown];
6527[label="129.1.132.64;43pkt 43fpkt", shape=invhouse, color=bisque];
6660[label="129.0.49.136;23pkt 23fpkt", shape=invhouse, color=bisque];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 95.7.132.203:80}[28.4992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.6364%)&lt;BR/&gt; 1863: (4.66942%)&lt;BR/&gt; 443: (1.4876%)&lt;BR/&gt; 54045: (1.36364%)&lt;BR/&gt; 53: (1.28099%)&gt;];
}
1151--1579[label="0.111111;1pkt 1fpkt"];
1151--1703[label="1;14pkt 14fpkt"];
1151--2233[label="0.0869565;2pkt 2fpkt"];
1151--2457[label="0.0454545;2pkt 2fpkt"];
1151--2998[label="0.0227273;1pkt 1fpkt"];
1151--3245[label="0.125;1pkt 1fpkt"];
1151--3540[label="0.0681818;3pkt 3fpkt"];
1151--3550[label="0.0454545;2pkt 2fpkt"];
1151--3559[label="0.113636;5pkt 5fpkt"];
1151--3562[label="0.0454545;2pkt 2fpkt"];
1151--5153[label="1;44pkt 44fpkt"];
1151--6278[label="1;44pkt 44fpkt"];
1305--1367[label="0.0641026;10pkt 10fpkt"];
1305--1406[label="0.0183486;2pkt 2fpkt"];
1305--1739[label="0.0448718;7pkt 7fpkt"];
1305--1974[label="0.09375;3pkt 3fpkt"];
1305--2225[label="0.333333;13pkt 13fpkt"];
1305--2228[label="0.340909;15pkt 15fpkt"];
1305--2689[label="0.00641026;1pkt 1fpkt"];
1305--2962[label="0.121795;19pkt 19fpkt"];
1305--3158[label="0.09375;3pkt 3fpkt"];
1305--3182[label="0.0183486;2pkt 2fpkt"];
1305--3499[label="0.121795;19pkt 19fpkt"];
1305--3540[label="0.0769231;12pkt 12fpkt"];
1305--3550[label="0.0833333;13pkt 13fpkt"];
1305--3559[label="0.0576923;9pkt 9fpkt"];
1305--3562[label="0.0833333;13pkt 13fpkt"];
1305--3900[label="0.333333;15pkt 15fpkt"];
1305--4066[label="0.348837;15pkt 15fpkt"];
1305--4244[label="0.410256;16pkt 16fpkt"];
1305--4864[label="0.424242;14pkt 14fpkt"];
1305--5126[label="0.018018;2pkt 2fpkt"];
1305--5279[label="0.09375;3pkt 3fpkt"];
1305--5353[label="0.0448718;7pkt 7fpkt"];
1305--5638[label="0.357143;15pkt 15fpkt"];
1305--6259[label="0.0181818;2pkt 2fpkt"];
1305--6353[label="0.09375;3pkt 3fpkt"];
1305--6398[label="0.0448718;7pkt 7fpkt"];
1305--6527[label="0.348837;15pkt 15fpkt"];
1305--6874[label="0.0448718;7pkt 7fpkt"];
1579--1580[label="0.111111;1pkt 1fpkt"];
1579--1974[label="0.111111;1pkt 1fpkt"];
1579--3158[label="0.111111;1pkt 1fpkt"];
1579--3245[label="1;8pkt 8fpkt"];
1579--3246[label="0.111111;1pkt 1fpkt"];
1579--4558[label="0.166667;1pkt 1fpkt"];
1579--4631[label="0.5;1pkt 1fpkt"];
1579--4676[label="0.25;1pkt 1fpkt"];
1579--4839[label="0.111111;1pkt 1fpkt"];
1579--4997[label="0.111111;1pkt 1fpkt"];
1579--5153[label="0.111111;1pkt 1fpkt"];
1579--5279[label="0.111111;1pkt 1fpkt"];
1579--5957[label="0.5;1pkt 1fpkt"];
1579--6083[label="0.111111;1pkt 1fpkt"];
1579--6278[label="0.111111;1pkt 1fpkt"];
1579--6353[label="0.111111;1pkt 1fpkt"];
1580--1609[label="0.012987;1pkt 1fpkt"];
1580--1639[label="0.161765;11pkt 11fpkt"];
1580--1785[label="0.025974;2pkt 2fpkt"];
1580--1894[label="0.0909091;2pkt 2fpkt"];
1580--2017[label="0.012987;1pkt 1fpkt"];
1580--2098[label="0.012987;1pkt 1fpkt"];
1580--2479[label="0.166667;1pkt 1fpkt"];
1580--2574[label="0.0649351;5pkt 5fpkt"];
1580--2998[label="0.025974;2pkt 2fpkt"];
1580--3212[label="0.012987;1pkt 1fpkt"];
1580--3245[label="0.125;1pkt 1fpkt"];
1580--3246[label="1;69pkt 69fpkt"];
1580--3371[label="0.025974;2pkt 2fpkt"];
1580--3401[label="0.012987;1pkt 1fpkt"];
1580--3468[label="0.0649351;5pkt 5fpkt"];
1580--3521[label="0.012987;1pkt 1fpkt"];
1580--3540[label="0.0779221;6pkt 6fpkt"];
1580--3550[label="0.025974;2pkt 2fpkt"];
1580--3559[label="0.0649351;5pkt 5fpkt"];
1580--3562[label="0.025974;2pkt 2fpkt"];
1639--2192[label="0.0294118;2pkt 2fpkt"];
1639--2510[label="0.016129;1pkt 1fpkt"];
1639--3246[label="0.161765;11pkt 11fpkt"];
1639--3540[label="0.102941;7pkt 7fpkt"];
1639--3550[label="0.0882353;6pkt 6fpkt"];
1639--3559[label="0.0294118;2pkt 2fpkt"];
1639--3562[label="0.0882353;6pkt 6fpkt"];
1639--3573[label="0.0645161;2pkt 2fpkt"];
1639--3703[label="0.0344828;1pkt 1fpkt"];
1639--4241[label="0.0441176;3pkt 3fpkt"];
1639--4295[label="0.0735294;5pkt 5fpkt"];
1639--4550[label="0.171429;6pkt 6fpkt"];
1639--4630[label="0.0588235;2pkt 2fpkt"];
1639--4754[label="0.0714286;1pkt 1fpkt"];
1639--4839[label="0.363636;8pkt 8fpkt"];
1639--5124[label="0.411765;7pkt 7fpkt"];
1639--5353[label="0.0147059;1pkt 1fpkt"];
1639--5763[label="0.0588235;4pkt 4fpkt"];
1639--5913[label="0.171429;6pkt 6fpkt"];
1639--5956[label="0.030303;1pkt 1fpkt"];
1639--6035[label="0.0714286;1pkt 1fpkt"];
1639--6083[label="0.363636;8pkt 8fpkt"];
1639--6398[label="0.0147059;1pkt 1fpkt"];
1639--6497[label="0.0147059;1pkt 1fpkt"];
1639--6874[label="0.0147059;1pkt 1fpkt"];
1703--3559[label="0.214286;3pkt 3fpkt"];
1703--5153[label="1;14pkt 14fpkt"];
1703--6278[label="1;14pkt 14fpkt"];
1974--2098[label="0.03125;1pkt 1fpkt"];
1974--2430[label="0.09375;3pkt 3fpkt"];
1974--3158[label="1;32pkt 32fpkt"];
1974--3212[label="0.03125;1pkt 1fpkt"];
1974--3245[label="0.125;1pkt 1fpkt"];
1974--3521[label="0.03125;1pkt 1fpkt"];
1974--3540[label="0.03125;1pkt 1fpkt"];
1974--5279[label="1;32pkt 32fpkt"];
1974--6353[label="1;32pkt 32fpkt"];
2225--2300[label="0.222222;2pkt 2fpkt"];
2225--3006[label="0.025641;1pkt 1fpkt"];
2225--3540[label="0.025641;1pkt 1fpkt"];
2225--3550[label="0.025641;1pkt 1fpkt"];
2225--3559[label="0.0769231;3pkt 3fpkt"];
2225--3562[label="0.025641;1pkt 1fpkt"];
2225--4066[label="1;39pkt 39fpkt"];
2225--5638[label="0.974359;38pkt 38fpkt"];
2225--6527[label="1;39pkt 39fpkt"];
2228--3540[label="0.0227273;1pkt 1fpkt"];
2228--3559[label="0.0227273;1pkt 1fpkt"];
2228--3900[label="1;44pkt 44fpkt"];
2260--2300[label="0.222222;2pkt 2fpkt"];
2260--3559[label="0.025;1pkt 1fpkt"];
2300--2578[label="0.111111;1pkt 1fpkt"];
2300--3453[label="0.111111;1pkt 1fpkt"];
2300--3953[label="0.111111;1pkt 1fpkt"];
2300--4066[label="0.222222;2pkt 2fpkt"];
2300--4570[label="0.111111;1pkt 1fpkt"];
2300--4796[label="0.333333;3pkt 3fpkt"];
2300--5569[label="0.111111;1pkt 1fpkt"];
2300--5638[label="0.222222;2pkt 2fpkt"];
2300--5926[label="0.111111;1pkt 1fpkt"];
2300--6527[label="0.222222;2pkt 2fpkt"];
2300--6660[label="0.111111;1pkt 1fpkt"];
2479--3246[label="0.166667;1pkt 1fpkt"];
2479--6093[label="0.166667;1pkt 1fpkt"];
3158--3212[label="0.03125;1pkt 1fpkt"];
3158--3245[label="0.125;1pkt 1fpkt"];
3158--3521[label="0.03125;1pkt 1fpkt"];
3158--3540[label="0.03125;1pkt 1fpkt"];
3158--5279[label="1;32pkt 32fpkt"];
3158--6353[label="1;32pkt 32fpkt"];
3245--3246[label="0.125;1pkt 1fpkt"];
3245--4558[label="0.166667;1pkt 1fpkt"];
3245--4631[label="0.5;1pkt 1fpkt"];
3245--4676[label="0.25;1pkt 1fpkt"];
3245--4997[label="0.125;1pkt 1fpkt"];
3245--5153[label="0.125;1pkt 1fpkt"];
3245--5279[label="0.125;1pkt 1fpkt"];
3245--5957[label="0.5;1pkt 1fpkt"];
3245--6278[label="0.125;1pkt 1fpkt"];
3245--6353[label="0.125;1pkt 1fpkt"];
3246--3371[label="0.0289855;2pkt 2fpkt"];
3246--3401[label="0.0144928;1pkt 1fpkt"];
3246--3468[label="0.0724638;5pkt 5fpkt"];
3246--3521[label="0.0144928;1pkt 1fpkt"];
3246--3540[label="0.0869565;6pkt 6fpkt"];
3246--3550[label="0.0289855;2pkt 2fpkt"];
3246--3559[label="0.0724638;5pkt 5fpkt"];
3246--3562[label="0.0289855;2pkt 2fpkt"];
4066--5638[label="1;42pkt 42fpkt"];
4066--6527[label="1;43pkt 43fpkt"];
4570--5926[label="1;22pkt 22fpkt"];
4570--6660[label="1;22pkt 22fpkt"];
4631--5957[label="1;2pkt 2fpkt"];
4839--6083[label="1;22pkt 22fpkt"];
5153--6278[label="1;44pkt 44fpkt"];
5279--6353[label="1;32pkt 32fpkt"];
5638--6527[label="1;42pkt 42fpkt"];
5926--6660[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="95.7.132.203" dst_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
4672[label="211.139.45.147;240pkt 240fpkt", shape=pentagon, color=darkviolet];
5980[label="211.139.45.147;240pkt 240fpkt", shape=invtriangle, color=brown];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.139.45.147:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4672--5980[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.139.45.147" src_port="1031"/>
    </slice>
    <from sec="1107320776" usec="0"/>
    <to sec="1107320790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.128.85.147"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.231.172.148"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
4685[label="129.0.213.148;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5987[label="129.0.213.148;8pkt 8fpkt", shape=invtriangle, color=brown];
6685[label="129.0.213.148;8pkt 8fpkt", shape=invhouse, color=bisque];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.213.148:*, 40.251.106.16:80}[50%]&lt;BR/&gt;{129.0.213.148:*, 206.185.138.59:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 123: (12.5%)&lt;BR/&gt; 1149: (6.25%)&lt;BR/&gt; 1060: (6.25%)&lt;BR/&gt; 1059: (6.25%)&gt;];
}
4685--5987[label="1;8pkt 8fpkt"];
4685--6685[label="1;8pkt 8fpkt"];
5987--6685[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="40.251.106.16" dst_port="80" src_ip="129.0.213.148"/>
      <filter dst_ip="206.185.138.59" dst_port="80" src_ip="129.0.213.148"/>
    </slice>
    <from sec="1107320520" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.219.23.149"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
4697[label="133.219.79.151;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5997[label="133.219.79.151;21pkt 21fpkt", shape=invtriangle, color=brown];
6690[label="133.219.79.151;21pkt 21fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.219.79.151:*, 94.95.136.77:80}[47.619%]&lt;BR/&gt;{133.219.79.151:*, 95.7.165.160:80}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5484%)&lt;BR/&gt; 1863: (6.45161%)&lt;BR/&gt; 2471: (2.41935%)&lt;BR/&gt; 2470: (2.41935%)&lt;BR/&gt; 2465: (2.41935%)&gt;];
}
4697--5997[label="1;20pkt 20fpkt"];
4697--6690[label="1;20pkt 20fpkt"];
5997--6690[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="94.95.136.77" dst_port="80" src_ip="133.219.79.151"/>
      <filter dst_ip="95.7.165.160" dst_port="80" src_ip="133.219.79.151"/>
    </slice>
    <from sec="1107320417" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
4705[label="216.84.192.152;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6001[label="216.84.192.152;4pkt 4fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.84.192.152:80, 201.242.144.45:34931}[25%]&lt;BR/&gt;{216.84.192.152:80, 201.242.144.45:35234}[25%]&lt;BR/&gt;{216.84.192.152:443, 201.242.144.45:35112}[25%]&lt;BR/&gt;{216.84.192.152:443, 201.242.144.45:35295}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 35295: (12.5%)&lt;BR/&gt; 35234: (12.5%)&lt;BR/&gt; 35112: (12.5%)&gt;];
}
4705--6001[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.144.45" dst_port="35295" src_ip="216.84.192.152" src_port="443"/>
      <filter dst_ip="201.242.144.45" dst_port="35112" src_ip="216.84.192.152" src_port="443"/>
      <filter dst_ip="201.242.144.45" dst_port="35234" src_ip="216.84.192.152" src_port="80"/>
      <filter dst_ip="201.242.144.45" dst_port="34931" src_ip="216.84.192.152" src_port="80"/>
    </slice>
    <from sec="1107321197" usec="0"/>
    <to sec="1107321286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.119.172.153"/>
    </slice>
    <from sec="1107320700" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
4734[label="94.166.233.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6022[label="94.166.233.156;1pkt 1fpkt", shape=invtriangle, color=brown];
6704[label="94.166.233.156;1pkt 1fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.166.233.156:2780, 133.130.242.119:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2780: (50%)&lt;BR/&gt; 135: (50%)&gt;];
}
4734--6022[label="1;1pkt 1fpkt"];
4734--6704[label="1;1pkt 1fpkt"];
6022--6704[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.130.242.119" dst_port="135" src_ip="94.166.233.156" src_port="2780"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.0.49.160"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
4770[label="161.69.56.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6043[label="161.69.56.163;3pkt 3fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.56.163:1584, 206.185.33.94:1863}[33.3333%]&lt;BR/&gt;{161.69.56.163:1577, 216.152.45.8:80}[33.3333%]&lt;BR/&gt;{161.69.56.163:1578, 216.152.45.8:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1584: (16.6667%)&lt;BR/&gt; 1578: (16.6667%)&lt;BR/&gt; 1577: (16.6667%)&gt;];
}
4770--6043[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.152.45.8" dst_port="80" src_ip="161.69.56.163" src_port="1578"/>
      <filter dst_ip="216.152.45.8" dst_port="80" src_ip="161.69.56.163" src_port="1577"/>
      <filter dst_ip="206.185.33.94" dst_port="1863" src_ip="161.69.56.163" src_port="1584"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
4776[label="42.165.44.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6047[label="42.165.44.164;2pkt 2fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.165.44.164:80, 148.189.32.83:2341}[50%]&lt;BR/&gt;{42.165.44.164:80, 148.189.32.83:2362}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2362: (33.3333%)&lt;BR/&gt; 2341: (16.6667%)&gt;];
}
4776--6047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.32.83" dst_port="2362" src_ip="42.165.44.164" src_port="80"/>
      <filter dst_ip="148.189.32.83" dst_port="2341" src_ip="42.165.44.164" src_port="80"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.158.210.164"/>
    </slice>
    <from sec="1107320424" usec="0"/>
    <to sec="1107321290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
4788[label="161.69.198.166;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6056[label="161.69.198.166;59pkt 59fpkt", shape=invtriangle, color=brown];
6720[label="161.69.198.166;58pkt 58fpkt", shape=invhouse, color=bisque];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.198.166:49323, *:*}[96.6102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49323: (48.2857%)&lt;BR/&gt; 64474: (0.857143%)&lt;BR/&gt; 63844: (0.857143%)&lt;BR/&gt; 62238: (0.857143%)&lt;BR/&gt; 58777: (0.857143%)&gt;];
}
4788--6056[label="1;58pkt 58fpkt"];
4788--6720[label="1;58pkt 58fpkt"];
6056--6720[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="161.69.198.166" src_port="49323"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
4790[label="64.223.28.167;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6057[label="64.223.28.167;4pkt 4fpkt", shape=invtriangle, color=brown];
6721[label="64.223.28.167;4pkt 4fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.223.28.167:80, 133.219.73.162:1348}[25%]&lt;BR/&gt;{64.223.28.167:80, 133.219.73.162:1383}[25%]&lt;BR/&gt;{64.223.28.167:80, 133.219.73.162:1389}[25%]&lt;BR/&gt;{64.223.28.167:80, 133.219.73.162:1409}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1409: (12.5%)&lt;BR/&gt; 1389: (12.5%)&lt;BR/&gt; 1383: (12.5%)&lt;BR/&gt; 1348: (12.5%)&gt;];
}
4790--6057[label="1;4pkt 4fpkt"];
4790--6721[label="1;4pkt 4fpkt"];
6057--6721[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.219.73.162" dst_port="1409" src_ip="64.223.28.167" src_port="80"/>
      <filter dst_ip="133.219.73.162" dst_port="1389" src_ip="64.223.28.167" src_port="80"/>
      <filter dst_ip="133.219.73.162" dst_port="1383" src_ip="64.223.28.167" src_port="80"/>
      <filter dst_ip="133.219.73.162" dst_port="1348" src_ip="64.223.28.167" src_port="80"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.91.104.168"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
4806[label="65.49.178.168;131pkt 131fpkt", shape=pentagon, color=darkviolet];
6066[label="65.49.178.168;131pkt 131fpkt", shape=invtriangle, color=brown];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.49.178.168:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4806--6066[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="65.49.178.168" src_port="1026"/>
    </slice>
    <from sec="1107321152" usec="0"/>
    <to sec="1107321173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
4818[label="161.21.129.170;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6072[label="161.21.129.170;36pkt 36fpkt", shape=invtriangle, color=brown];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.21.129.170:54045, *:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54045: (47.2222%)&lt;BR/&gt; 62161: (1.38889%)&lt;BR/&gt; 61836: (1.38889%)&lt;BR/&gt; 60719: (1.38889%)&lt;BR/&gt; 59123: (1.38889%)&gt;];
}
4818--6072[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="161.21.129.170" src_port="54045"/>
    </slice>
    <from sec="1107320413" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.36.169.170"/>
    </slice>
    <from sec="1107320805" usec="0"/>
    <to sec="1107320950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
4822[label="129.1.226.170;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6076[label="129.1.226.170;35pkt 35fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.226.170:*, 88.163.79.118:1717}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1717: (50%)&lt;BR/&gt; 41534: (1.40845%)&lt;BR/&gt; 41533: (1.40845%)&lt;BR/&gt; 41532: (1.40845%)&lt;BR/&gt; 41531: (1.40845%)&gt;];
}
4822--6076[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="88.163.79.118" dst_port="1717" src_ip="129.1.226.170"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.213.40.172"/>
    </slice>
    <from sec="1107320735" usec="0"/>
    <to sec="1107320777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
4849[label="210.192.106.175;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6089[label="210.192.106.175;237pkt 237fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.192.106.175:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4849--6089[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.192.106.175" src_port="1027"/>
    </slice>
    <from sec="1107321112" usec="0"/>
    <to sec="1107321156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
4857[label="88.107.39.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6092[label="88.107.39.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.107.39.176:4402, 133.219.165.240:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4402: (50%)&lt;BR/&gt; 135: (50%)&gt;];
}
4857--6092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.219.165.240" dst_port="135" src_ip="88.107.39.176" src_port="4402"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.46.83.177"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
4867[label="161.21.129.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6099[label="161.21.129.177;3pkt 3fpkt", shape=invtriangle, color=brown];
6739[label="161.21.129.177;2pkt 2fpkt", shape=invhouse, color=bisque];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.21.129.177:1622, 206.185.33.51:1863}[33.3333%]&lt;BR/&gt;{161.21.129.177:1609, 206.185.33.111:1863}[33.3333%]&lt;BR/&gt;{161.21.129.177:1275, 206.185.36.242:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1622: (21.4286%)&lt;BR/&gt; 1275: (21.4286%)&lt;BR/&gt; 1609: (7.14286%)&gt;];
}
4867--6099[label="1;2pkt 2fpkt"];
4867--6739[label="1;2pkt 2fpkt"];
6099--6739[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.36.242" dst_port="1863" src_ip="161.21.129.177" src_port="1275"/>
      <filter dst_ip="206.185.33.111" dst_port="1863" src_ip="161.21.129.177" src_port="1609"/>
      <filter dst_ip="206.185.33.51" dst_port="1863" src_ip="161.21.129.177" src_port="1622"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.91.96.180"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107320671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.15.128.180"/>
    </slice>
    <from sec="1107320783" usec="0"/>
    <to sec="1107321111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.34.152.182"/>
    </slice>
    <from sec="1107321259" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
2452[label="161.69.198.182;s;55pkt 55fpkt", shape=diamond, color=yellow];
4900[label="161.69.198.182;54pkt 54fpkt", shape=pentagon, color=darkviolet];
6117[label="161.69.198.182;54pkt 54fpkt", shape=invtriangle, color=brown];
6747[label="161.69.198.182;55pkt 55fpkt", shape=invhouse, color=bisque];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.198.182:*, 42.132.112.4:80}[40%]&lt;BR/&gt;{161.69.198.182:*, 42.138.155.34:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1129: (0.917431%)&lt;BR/&gt; 1128: (0.917431%)&lt;BR/&gt; 1127: (0.917431%)&lt;BR/&gt; 1126: (0.917431%)&gt;];
}
2452--3540[label="0.0545455;3pkt 3fpkt"];
2452--3550[label="0.0363636;2pkt 2fpkt"];
2452--3559[label="0.0181818;1pkt 1fpkt"];
2452--3562[label="0.0363636;2pkt 2fpkt"];
2452--4900[label="1;54pkt 54fpkt"];
2452--6117[label="1;54pkt 54fpkt"];
2452--6747[label="1;55pkt 55fpkt"];
4900--6117[label="1;54pkt 54fpkt"];
4900--6747[label="1;54pkt 54fpkt"];
6117--6747[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="42.132.112.4" dst_port="80" src_ip="161.69.198.182"/>
      <filter dst_ip="42.138.155.34" dst_port="80" src_ip="161.69.198.182"/>
    </slice>
    <from sec="1107320416" usec="0"/>
    <to sec="1107321202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
1815[label="192.168.0.1;d;135pkt 135fpkt", shape=diamond, color=yellow];
4030[label="129.0.193.58;49pkt 49fpkt", shape=pentagon, color=darkviolet];
4901[label="161.74.24.183;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5617[label="129.0.193.58;49pkt 49fpkt", shape=invtriangle, color=brown];
6118[label="161.74.24.183;34pkt 34fpkt", shape=invtriangle, color=brown];
6748[label="161.74.24.183;34pkt 34fpkt", shape=invhouse, color=bisque];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.72.117:*, 192.168.0.1:75}[38.2979%]&lt;BR/&gt;{129.0.193.58:*, 192.168.0.1:23}[35.461%]&lt;BR/&gt;{161.74.24.183:*, 192.168.0.1:23}[24.8227%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (41.6418%)&lt;BR/&gt; 75: (8.0597%)&lt;BR/&gt; 3782: (0.597015%)&lt;BR/&gt; 3774: (0.597015%)&lt;BR/&gt; 3772: (0.597015%)&gt;];
}
1815--2556[label="0.0148148;2pkt 2fpkt"];
1815--3447[label="0.0148148;2pkt 2fpkt"];
1815--4030[label="0.938776;46pkt 46fpkt"];
1815--4901[label="0.911765;31pkt 31fpkt"];
1815--4954[label="0.0148148;2pkt 2fpkt"];
1815--5617[label="0.938776;46pkt 46fpkt"];
1815--6118[label="0.911765;31pkt 31fpkt"];
1815--6150[label="0.0148148;2pkt 2fpkt"];
1815--6748[label="0.911765;31pkt 31fpkt"];
1815--6762[label="0.0148148;2pkt 2fpkt"];
4030--5617[label="1;49pkt 49fpkt"];
4901--6118[label="1;34pkt 34fpkt"];
4901--6748[label="1;34pkt 34fpkt"];
6118--6748[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.1" dst_port="75" src_ip="129.0.72.117"/>
      <filter dst_ip="192.168.0.1" dst_port="23" src_ip="129.0.193.58"/>
      <filter dst_ip="192.168.0.1" dst_port="23" src_ip="161.74.24.183"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.231.58.184"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
4924[label="164.238.218.185;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6131[label="164.238.218.185;3pkt 3fpkt", shape=invtriangle, color=brown];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.218.185:113, 195.38.239.103:2069}[33.3333%]&lt;BR/&gt;{164.238.218.185:1080, 195.38.239.103:4768}[33.3333%]&lt;BR/&gt;{164.238.218.185:3300, 195.38.239.103:6666}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (16.6667%)&lt;BR/&gt; 4768: (16.6667%)&lt;BR/&gt; 3300: (16.6667%)&lt;BR/&gt; 2069: (16.6667%)&lt;BR/&gt; 1080: (16.6667%)&gt;];
}
4924--6131[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="195.38.239.103" dst_port="6666" src_ip="164.238.218.185" src_port="3300"/>
      <filter dst_ip="195.38.239.103" dst_port="4768" src_ip="164.238.218.185" src_port="1080"/>
      <filter dst_ip="195.38.239.103" dst_port="2069" src_ip="164.238.218.185" src_port="113"/>
    </slice>
    <from sec="1107321104" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.171.139.186"/>
    </slice>
    <from sec="1107320438" usec="0"/>
    <to sec="1107321277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
4937[label="200.124.241.187;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6138[label="200.124.241.187;22pkt 22fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.241.187:25, 202.210.180.138:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.3043%)&lt;BR/&gt; 443: (6.52174%)&lt;BR/&gt; 60115: (2.17391%)&lt;BR/&gt; 46542: (2.17391%)&lt;BR/&gt; 44759: (2.17391%)&gt;];
}
4937--6138[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="202.210.180.138" src_ip="200.124.241.187" src_port="25"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
4938[label="219.192.243.187;157pkt 157fpkt", shape=pentagon, color=darkviolet];
6139[label="219.192.243.187;157pkt 157fpkt", shape=invtriangle, color=brown];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.192.243.187:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62833: (0.318471%)&lt;BR/&gt; 60731: (0.318471%)&lt;BR/&gt; 58301: (0.318471%)&lt;BR/&gt; 57874: (0.318471%)&gt;];
}
4938--6139[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter src_ip="219.192.243.187" src_port="80"/>
    </slice>
    <from sec="1107320409" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
4948[label="42.155.184.191;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6148[label="42.155.184.191;25pkt 25fpkt", shape=invtriangle, color=brown];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.155.184.191:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6443: (4.08163%)&lt;BR/&gt; 33706: (2.04082%)&lt;BR/&gt; 32723: (2.04082%)&lt;BR/&gt; 29268: (2.04082%)&gt;];
}
4948--6148[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="42.155.184.191" src_port="80"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735779,1.84369,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
2210[label="209.107.218.19;d;19pkt 19fpkt", shape=diamond, color=yellow];
6152[label="164.238.152.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.107.218.19:5050}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45%)&lt;BR/&gt; 1077: (5%)&lt;BR/&gt; 3027: (2.5%)&lt;BR/&gt; 2598: (2.5%)&lt;BR/&gt; 1782: (2.5%)&gt;];
}
2210--6152[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.107.218.19" dst_port="5050"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.220.192"/>
    </slice>
    <from sec="1107320415" usec="0"/>
    <to sec="1107321057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.74.234.193"/>
    </slice>
    <from sec="1107320725" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
4963[label="200.150.145.194;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6159[label="200.150.145.194;110pkt 110fpkt", shape=invtriangle, color=brown];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.150.145.194:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4963--6159[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.150.145.194" src_port="1031"/>
    </slice>
    <from sec="1107320447" usec="0"/>
    <to sec="1107320465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
4964[label="129.1.188.194;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6160[label="129.1.188.194;5pkt 5fpkt", shape=invtriangle, color=brown];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.188.194:*, 16.249.151.10:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48271: (9.09091%)&lt;BR/&gt; 48270: (9.09091%)&lt;BR/&gt; 48269: (9.09091%)&lt;BR/&gt; 47947: (9.09091%)&gt;];
}
4964--6160[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="16.249.151.10" dst_port="80" src_ip="129.1.188.194"/>
    </slice>
    <from sec="1107320753" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901651,1.74952,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
1023[label="200.124.242.244;d;77pkt 77fpkt", shape=diamond, color=yellow];
1195[label="194.203.135.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
2670[label="200.124.242.244;d;77pkt 77fpkt", shape=hexagon, color=black];
4332[label="42.109.0.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5886[label="194.203.135.127;1pkt 1fpkt", shape=invtriangle, color=brown];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.124.242.244:80}[44.8718%]&lt;BR/&gt;{*:*, 200.124.242.244:53}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.4568%)&lt;BR/&gt; 53: (20.3704%)&lt;BR/&gt; 4753: (3.7037%)&lt;BR/&gt; 32768: (3.08642%)&lt;BR/&gt; 3544: (2.46914%)&gt;];
}
1023--1195[label="1;1pkt 1fpkt"];
1023--1886[label="0.0769231;1pkt 1fpkt"];
1023--1930[label="0.012987;1pkt 1fpkt"];
1023--2670[label="1;77pkt 77fpkt"];
1023--3078[label="0.0714286;1pkt 1fpkt"];
1023--3100[label="0.0142857;1pkt 1fpkt"];
1023--3540[label="0.012987;1pkt 1fpkt"];
1023--3549[label="0.012987;1pkt 1fpkt"];
1023--3550[label="0.0519481;4pkt 4fpkt"];
1023--3562[label="0.0519481;4pkt 4fpkt"];
1023--4332[label="0.833333;5pkt 5fpkt"];
1023--4403[label="0.266667;4pkt 4fpkt"];
1023--4691[label="0.1;2pkt 2fpkt"];
1023--4735[label="0.133333;2pkt 2fpkt"];
1023--4903[label="0.0625;1pkt 1fpkt"];
1023--4951[label="0.0666667;1pkt 1fpkt"];
1023--4968[label="0.2;3pkt 3fpkt"];
1023--4982[label="0.222222;4pkt 4fpkt"];
1023--5886[label="1;1pkt 1fpkt"];
1023--5992[label="0.1;2pkt 2fpkt"];
1023--6163[label="0.1875;3pkt 3fpkt"];
1023--6769[label="0.1875;3pkt 3fpkt"];
1195--2670[label="1;1pkt 1fpkt"];
1195--5886[label="1;1pkt 1fpkt"];
2670--3078[label="0.0714286;1pkt 1fpkt"];
2670--3100[label="0.0142857;1pkt 1fpkt"];
2670--3540[label="0.012987;1pkt 1fpkt"];
2670--3549[label="0.012987;1pkt 1fpkt"];
2670--3550[label="0.0519481;4pkt 4fpkt"];
2670--3562[label="0.0519481;4pkt 4fpkt"];
2670--4332[label="0.833333;5pkt 5fpkt"];
2670--4403[label="0.266667;4pkt 4fpkt"];
2670--4691[label="0.1;2pkt 2fpkt"];
2670--4735[label="0.133333;2pkt 2fpkt"];
2670--4903[label="0.0625;1pkt 1fpkt"];
2670--4951[label="0.0666667;1pkt 1fpkt"];
2670--4968[label="0.2;3pkt 3fpkt"];
2670--4982[label="0.222222;4pkt 4fpkt"];
2670--5886[label="1;1pkt 1fpkt"];
2670--5992[label="0.1;2pkt 2fpkt"];
2670--6163[label="0.1875;3pkt 3fpkt"];
2670--6769[label="0.1875;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.242.244" dst_port="80"/>
      <filter dst_ip="200.124.242.244" dst_port="53"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
4969[label="95.74.131.195;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6164[label="95.74.131.195;6pkt 6fpkt", shape=invtriangle, color=brown];
6770[label="95.74.131.195;6pkt 6fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.74.131.195:80, 148.189.169.97:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49169: (8.33333%)&lt;BR/&gt; 49168: (8.33333%)&lt;BR/&gt; 49167: (8.33333%)&lt;BR/&gt; 49166: (8.33333%)&gt;];
}
4969--6164[label="1;6pkt 6fpkt"];
4969--6770[label="1;6pkt 6fpkt"];
6164--6770[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.169.97" src_ip="95.74.131.195" src_port="80"/>
    </slice>
    <from sec="1107320690" usec="0"/>
    <to sec="1107320692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
4977[label="43.149.232.196;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6169[label="43.149.232.196;4pkt 4fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.149.232.196:2212, 161.69.133.29:1434}[25%]&lt;BR/&gt;{43.149.232.196:2212, 162.112.255.44:1434}[25%]&lt;BR/&gt;{43.149.232.196:2212, 161.21.117.83:1434}[25%]&lt;BR/&gt;{43.149.232.196:2212, 133.219.243.177:1434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2212: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4977--6169[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.219.243.177" dst_port="1434" src_ip="43.149.232.196" src_port="2212"/>
      <filter dst_ip="161.21.117.83" dst_port="1434" src_ip="43.149.232.196" src_port="2212"/>
      <filter dst_ip="162.112.255.44" dst_port="1434" src_ip="43.149.232.196" src_port="2212"/>
      <filter dst_ip="161.69.133.29" dst_port="1434" src_ip="43.149.232.196" src_port="2212"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.61.10.197"/>
    </slice>
    <from sec="1107320425" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
4981[label="220.203.44.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6173[label="220.203.44.197;1pkt 1fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.203.44.197:80, 148.189.11.22:2637}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2637: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4981--6173[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.11.22" dst_port="2637" src_ip="220.203.44.197" src_port="80"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
4990[label="129.0.251.197;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6177[label="129.0.251.197;21pkt 21fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.251.197:25, 41.183.50.231:*}[42.8571%]&lt;BR/&gt;{129.0.251.197:*, 194.80.122.205:25}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54937: (2.43902%)&lt;BR/&gt; 6131: (2.43902%)&lt;BR/&gt; 4192: (2.43902%)&lt;BR/&gt; 4107: (2.43902%)&gt;];
}
4990--6177[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="41.183.50.231" src_ip="129.0.251.197" src_port="25"/>
      <filter dst_ip="194.80.122.205" dst_port="25" src_ip="129.0.251.197"/>
    </slice>
    <from sec="1107320511" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
4994[label="133.63.98.198;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6179[label="133.63.98.198;24pkt 24fpkt", shape=invtriangle, color=brown];
6776[label="133.63.98.198;23pkt 23fpkt", shape=invhouse, color=bisque];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.98.198:80, 40.237.26.159:*}[37.5%]&lt;BR/&gt;{133.63.98.198:80, 92.166.22.127:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63669: (2.11268%)&lt;BR/&gt; 60954: (2.11268%)&lt;BR/&gt; 56131: (2.11268%)&lt;BR/&gt; 55567: (2.11268%)&gt;];
}
4994--6179[label="1;24pkt 24fpkt"];
4994--6776[label="1;23pkt 23fpkt"];
6179--6776[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="40.237.26.159" src_ip="133.63.98.198" src_port="80"/>
      <filter dst_ip="92.166.22.127" src_ip="133.63.98.198" src_port="80"/>
    </slice>
    <from sec="1107320429" usec="0"/>
    <to sec="1107321296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.142.136.198"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
5008[label="129.0.144.200;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6190[label="129.0.144.200;13pkt 13fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.144.200:*, 16.253.206.222:80}[30.7692%]&lt;BR/&gt;{129.0.144.200:*, 167.41.145.103:443}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 443: (11.5385%)&lt;BR/&gt; 36181: (3.84615%)&lt;BR/&gt; 36178: (3.84615%)&lt;BR/&gt; 36163: (3.84615%)&gt;];
}
5008--6190[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.41.145.103" dst_port="443" src_ip="129.0.144.200"/>
      <filter dst_ip="16.253.206.222" dst_port="80" src_ip="129.0.144.200"/>
    </slice>
    <from sec="1107320537" usec="0"/>
    <to sec="1107321243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
5009[label="201.251.147.200;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6191[label="201.251.147.200;58pkt 58fpkt", shape=invtriangle, color=brown];
6784[label="201.251.147.200;58pkt 58fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.251.147.200:80, 210.94.19.77:*}[88.1356%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2886: (1.71429%)&lt;BR/&gt; 58441: (0.857143%)&lt;BR/&gt; 58308: (0.857143%)&lt;BR/&gt; 40018: (0.857143%)&gt;];
}
5009--6191[label="1;58pkt 58fpkt"];
5009--6784[label="1;58pkt 58fpkt"];
6191--6784[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="210.94.19.77" src_ip="201.251.147.200" src_port="80"/>
    </slice>
    <from sec="1107320511" usec="0"/>
    <to sec="1107321284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.111.178.200"/>
    </slice>
    <from sec="1107320870" usec="0"/>
    <to sec="1107320921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903702,1.80957,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
1624[label="200.124.241.200;s;501pkt 501fpkt", shape=diamond, color=yellow];
6193[label="200.124.241.200;651pkt 651fpkt", shape=invtriangle, color=brown];
6786[label="200.124.241.200;650pkt 650fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.241.200:4100, *:53}[94.6237%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.0022%)&lt;BR/&gt; 4100: (47.1698%)&lt;BR/&gt; 80: (1.24861%)&lt;BR/&gt; 0: (0.499445%)&lt;BR/&gt; 113: (0.249723%)&gt;];
}
1624--1730[label="0.00199601;1pkt 1fpkt"];
1624--1965[label="0.01;1pkt 1fpkt"];
1624--2125[label="0.00877193;1pkt 1fpkt"];
1624--2190[label="0.00892857;1pkt 1fpkt"];
1624--2354[label="0.00826446;1pkt 1fpkt"];
1624--3222[label="0.00909091;1pkt 1fpkt"];
1624--3549[label="0.0578842;29pkt 29fpkt"];
1624--6193[label="1;501pkt 501fpkt"];
1624--6786[label="0.998004;500pkt 500fpkt"];
6193--6786[label="1;650pkt 650fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="200.124.241.200" src_port="4100"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
5021[label="129.1.128.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6198[label="129.1.128.202;2pkt 2fpkt", shape=invtriangle, color=brown];
6788[label="129.1.128.202;2pkt 2fpkt", shape=invhouse, color=bisque];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.128.202:1775, 210.34.204.51:3287}[50%]&lt;BR/&gt;{129.1.128.202:1779, 210.34.204.51:3390}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3390: (25%)&lt;BR/&gt; 3287: (25%)&lt;BR/&gt; 1779: (25%)&lt;BR/&gt; 1775: (25%)&gt;];
}
5021--6198[label="1;2pkt 2fpkt"];
5021--6788[label="1;2pkt 2fpkt"];
6198--6788[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.34.204.51" dst_port="3390" src_ip="129.1.128.202" src_port="1779"/>
      <filter dst_ip="210.34.204.51" dst_port="3287" src_ip="129.1.128.202" src_port="1775"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.34.52.203"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="94.40.193.203"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.10.202.204"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.194.142.206"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
389[label="201.242.146.50;s;1667pkt 1667fpkt", shape=diamond, color=yellow];
486[label="129.0.61.20;s;234pkt 234fpkt", shape=diamond, color=yellow];
870[label="129.0.52.142;s;805pkt 805fpkt", shape=diamond, color=yellow];
884[label="129.0.93.38;s;265pkt 265fpkt", shape=diamond, color=yellow];
893[label="129.0.177.74;s;162pkt 162fpkt", shape=diamond, color=yellow];
1029[label="210.116.154.226;d;62pkt 62fpkt", shape=diamond, color=yellow];
1268[label="95.59.73.189;d;74pkt 74fpkt", shape=diamond, color=yellow];
1404[label="94.195.126.107;d;166pkt 166fpkt", shape=diamond, color=yellow];
1550[label="129.0.177.72;s;110pkt 110fpkt", shape=diamond, color=yellow];
1578[label="129.0.192.221;s;214pkt 214fpkt", shape=diamond, color=yellow];
1599[label="204.82.159.242;d;26pkt 26fpkt", shape=diamond, color=yellow];
1601[label="206.185.34.228;d;109pkt 109fpkt", shape=diamond, color=yellow];
1636[label="129.0.141.133;s;125pkt 125fpkt", shape=diamond, color=yellow];
1652[label="129.0.47.180;s;149pkt 149fpkt", shape=diamond, color=yellow];
1813[label="206.185.34.209;d;109pkt 109fpkt", shape=diamond, color=yellow];
1829[label="218.164.105.81;d;37pkt 37fpkt", shape=diamond, color=yellow];
1843[label="206.185.34.213;d;96pkt 96fpkt", shape=diamond, color=yellow];
1904[label="206.79.35.43;d;18pkt 18fpkt", shape=diamond, color=yellow];
1908[label="93.230.174.135;d;90pkt 90fpkt", shape=diamond, color=yellow];
1939[label="206.185.34.255;d;92pkt 92fpkt", shape=diamond, color=yellow];
1990[label="206.185.34.230;d;89pkt 89fpkt", shape=diamond, color=yellow];
2003[label="206.185.34.218;d;87pkt 87fpkt", shape=diamond, color=yellow];
2150[label="218.164.105.93;d;23pkt 23fpkt", shape=diamond, color=yellow];
2197[label="129.0.177.66;s;111pkt 111fpkt", shape=diamond, color=yellow];
2217[label="206.185.34.249;d;97pkt 97fpkt", shape=diamond, color=yellow];
2409[label="206.185.34.241;d;66pkt 66fpkt", shape=diamond, color=yellow];
2424[label="206.185.34.210;d;79pkt 79fpkt", shape=diamond, color=yellow];
2657[label="201.242.146.50;s;639pkt 639fpkt", shape=hexagon, color=black];
2773[label="129.0.61.20;s;147pkt 147fpkt", shape=hexagon, color=black];
2774[label="210.116.154.226;d;62pkt 62fpkt", shape=hexagon, color=black];
2850[label="95.59.73.189;d;74pkt 74fpkt", shape=hexagon, color=black];
2885[label="129.0.177.72;s;102pkt 102fpkt", shape=hexagon, color=black];
2902[label="129.0.192.221;s;214pkt 214fpkt", shape=hexagon, color=black];
2916[label="129.0.52.142;s;566pkt 566fpkt", shape=hexagon, color=black];
2923[label="129.0.177.74;s;143pkt 143fpkt", shape=hexagon, color=black];
3041[label="129.0.141.133;s;65pkt 65fpkt", shape=hexagon, color=black];
3359[label="218.164.105.93;d;23pkt 23fpkt", shape=hexagon, color=black];
4137[label="129.0.177.72;126pkt 126fpkt", shape=pentagon, color=darkviolet];
4239[label="129.0.225.83;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4622[label="129.0.52.142;857pkt 857fpkt", shape=pentagon, color=darkviolet];
4753[label="129.0.47.161;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4882[label="129.0.47.180;162pkt 162fpkt", shape=pentagon, color=darkviolet];
5050[label="129.0.10.208;67pkt 67fpkt", shape=pentagon, color=darkviolet];
5292[label="201.251.4.244;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5679[label="129.0.177.72;126pkt 126fpkt", shape=invtriangle, color=brown];
5731[label="129.0.225.83;61pkt 61fpkt", shape=invtriangle, color=brown];
6034[label="129.0.47.161;37pkt 37fpkt", shape=invtriangle, color=brown];
6215[label="129.0.10.208;67pkt 67fpkt", shape=invtriangle, color=brown];
6545[label="129.0.177.72;125pkt 125fpkt", shape=invhouse, color=bisque];
6570[label="129.0.225.83;60pkt 60fpkt", shape=invhouse, color=bisque];
6793[label="129.0.10.208;66pkt 66fpkt", shape=invhouse, color=bisque];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.146.50:*, *:80}[38.2312%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.0631%)&lt;BR/&gt; 25: (5.95408%)&lt;BR/&gt; 443: (0.906295%)&lt;BR/&gt; 53: (0.615182%)&lt;BR/&gt; 113: (0.104361%)&gt;];
}
389--390[label="0.283743;473pkt 473fpkt"];
389--464[label="0.040192;67pkt 67fpkt"];
389--466[label="0.00621118;2pkt 2fpkt"];
389--584[label="0.888889;8pkt 8fpkt"];
389--785[label="0.0234375;6pkt 6fpkt"];
389--850[label="0.00475059;2pkt 2fpkt"];
389--872[label="0.00993377;3pkt 3fpkt"];
389--1083[label="0.056338;12pkt 12fpkt"];
389--1205[label="0.111111;2pkt 2fpkt"];
389--1404[label="0.0240964;4pkt 4fpkt"];
389--1429[label="0.0638298;3pkt 3fpkt"];
389--1541[label="0.00653595;1pkt 1fpkt"];
389--1601[label="0.59633;65pkt 65fpkt"];
389--1629[label="0.00628931;1pkt 1fpkt"];
389--1775[label="0.0967742;9pkt 9fpkt"];
389--1813[label="1;109pkt 109fpkt"];
389--1826[label="0.0102041;1pkt 1fpkt"];
389--1833[label="0.102564;12pkt 12fpkt"];
389--1843[label="0.4375;42pkt 42fpkt"];
389--1939[label="0.543478;50pkt 50fpkt"];
389--1990[label="0.303371;27pkt 27fpkt"];
389--2003[label="0.494253;43pkt 43fpkt"];
389--2168[label="0.0298507;2pkt 2fpkt"];
389--2217[label="1;97pkt 97fpkt"];
389--2236[label="0.0733945;8pkt 8fpkt"];
389--2409[label="0.893939;59pkt 59fpkt"];
389--2424[label="0.860759;68pkt 68fpkt"];
389--2425[label="0.0266667;2pkt 2fpkt"];
389--2657[label="1;639pkt 639fpkt"];
389--2969[label="0.00775194;2pkt 2fpkt"];
389--2998[label="0.056338;12pkt 12fpkt"];
389--3284[label="0.0808081;8pkt 8fpkt"];
389--3382[label="0.00993377;3pkt 3fpkt"];
389--3540[label="0.0875825;146pkt 146fpkt"];
389--3550[label="0.0743851;124pkt 124fpkt"];
389--3559[label="0.0611878;102pkt 102fpkt"];
389--3562[label="0.0743851;124pkt 124fpkt"];
486--1029[label="1;62pkt 62fpkt"];
486--1829[label="0.0540541;2pkt 2fpkt"];
486--2150[label="0.0434783;1pkt 1fpkt"];
486--2237[label="0.00917431;1pkt 1fpkt"];
486--2773[label="1;147pkt 147fpkt"];
486--2774[label="1;62pkt 62fpkt"];
486--3359[label="0.0434783;1pkt 1fpkt"];
486--3540[label="0.0683761;16pkt 16fpkt"];
486--3550[label="0.290598;68pkt 68fpkt"];
486--3559[label="0.106838;25pkt 25fpkt"];
486--3562[label="0.290598;68pkt 68fpkt"];
870--901[label="0.0552147;18pkt 18fpkt"];
870--976[label="0.0416667;6pkt 6fpkt"];
870--992[label="0.0043956;2pkt 2fpkt"];
870--1116[label="0.025974;4pkt 4fpkt"];
870--1144[label="0.0232558;6pkt 6fpkt"];
870--1176[label="0.0201342;3pkt 3fpkt"];
870--1188[label="0.0285714;6pkt 6fpkt"];
870--1234[label="0.0117994;4pkt 4fpkt"];
870--1268[label="1;74pkt 74fpkt"];
870--1297[label="0.0145631;3pkt 3fpkt"];
870--1348[label="0.0107527;1pkt 1fpkt"];
870--1599[label="0.923077;24pkt 24fpkt"];
870--1990[label="0.123596;11pkt 11fpkt"];
870--2129[label="0.0114943;1pkt 1fpkt"];
870--2150[label="0.0869565;2pkt 2fpkt"];
870--2201[label="0.00571429;1pkt 1fpkt"];
870--2222[label="0.0535714;6pkt 6fpkt"];
870--2247[label="0.0857143;6pkt 6fpkt"];
870--2399[label="0.0133333;1pkt 1fpkt"];
870--2449[label="0.0114943;1pkt 1fpkt"];
870--2457[label="0.02;1pkt 1fpkt"];
870--2569[label="0.0882353;6pkt 6fpkt"];
870--2574[label="0.0112994;2pkt 2fpkt"];
870--2579[label="0.00775194;3pkt 3fpkt"];
870--2625[label="0.0102041;1pkt 1fpkt"];
870--2850[label="1;74pkt 74fpkt"];
870--2873[label="0.0110497;2pkt 2fpkt"];
870--2916[label="1;566pkt 566fpkt"];
870--3013[label="0.0326087;12pkt 12fpkt"];
870--3020[label="0.0422535;12pkt 12fpkt"];
870--3122[label="0.0179641;3pkt 3fpkt"];
870--3259[label="0.00571429;1pkt 1fpkt"];
870--3359[label="0.0869565;2pkt 2fpkt"];
870--3398[label="0.0114943;1pkt 1fpkt"];
870--3414[label="0.0117994;4pkt 4fpkt"];
870--3468[label="0.0169492;2pkt 2fpkt"];
870--3534[label="0.00571429;1pkt 1fpkt"];
870--3540[label="0.0335404;27pkt 27fpkt"];
870--3550[label="0.0347826;28pkt 28fpkt"];
870--3559[label="0.0198758;16pkt 16fpkt"];
870--3562[label="0.0347826;28pkt 28fpkt"];
870--4622[label="0.998758;804pkt 804fpkt"];
884--1178[label="0.0212766;1pkt 1fpkt"];
884--1189[label="0.0666667;2pkt 2fpkt"];
884--1198[label="0.00675676;1pkt 1fpkt"];
884--1404[label="0.0180723;3pkt 3fpkt"];
884--1904[label="1;18pkt 18fpkt"];
884--2017[label="0.0107527;1pkt 1fpkt"];
884--2150[label="0.304348;7pkt 7fpkt"];
884--2222[label="0.0357143;4pkt 4fpkt"];
884--2722[label="0.0454545;1pkt 1fpkt"];
884--2873[label="0.00552486;1pkt 1fpkt"];
884--2881[label="0.00377358;1pkt 1fpkt"];
884--3020[label="0.00754717;2pkt 2fpkt"];
884--3048[label="0.0689655;2pkt 2fpkt"];
884--3236[label="0.0869565;2pkt 2fpkt"];
884--3359[label="0.304348;7pkt 7fpkt"];
884--3401[label="0.00675676;1pkt 1fpkt"];
884--3467[label="0.0454545;1pkt 1fpkt"];
884--3540[label="0.0301887;8pkt 8fpkt"];
884--3550[label="0.154717;41pkt 41fpkt"];
884--3559[label="0.0867925;23pkt 23fpkt"];
884--3562[label="0.154717;41pkt 41fpkt"];
893--1083[label="0.0123457;2pkt 2fpkt"];
893--1785[label="0.0123457;2pkt 2fpkt"];
893--1939[label="0.434783;40pkt 40fpkt"];
893--2631[label="0.0277778;1pkt 1fpkt"];
893--2923[label="1;143pkt 143fpkt"];
893--2969[label="0.00617284;1pkt 1fpkt"];
893--2998[label="0.0123457;2pkt 2fpkt"];
893--3013[label="0.0123457;2pkt 2fpkt"];
893--3020[label="0.00617284;1pkt 1fpkt"];
893--3371[label="0.0123457;2pkt 2fpkt"];
893--3540[label="0.0432099;7pkt 7fpkt"];
893--3550[label="0.135802;22pkt 22fpkt"];
893--3559[label="0.0925926;15pkt 15fpkt"];
893--3562[label="0.135802;22pkt 22fpkt"];
1029--2773[label="0.5;31pkt 31fpkt"];
1029--2774[label="1;62pkt 62fpkt"];
1029--3540[label="0.0483871;3pkt 3fpkt"];
1029--3550[label="0.0645161;4pkt 4fpkt"];
1029--3559[label="0.193548;12pkt 12fpkt"];
1029--3562[label="0.0645161;4pkt 4fpkt"];
1268--2850[label="1;74pkt 74fpkt"];
1268--2916[label="1;74pkt 74fpkt"];
1268--4622[label="1;74pkt 74fpkt"];
1404--1406[label="0.0275229;3pkt 3fpkt"];
1404--1652[label="0.268456;40pkt 40fpkt"];
1404--1747[label="0.0241935;3pkt 3fpkt"];
1404--1820[label="0.0133333;1pkt 1fpkt"];
1404--2627[label="0.0120482;2pkt 2fpkt"];
1404--2657[label="0.0120482;2pkt 2fpkt"];
1404--2697[label="0.05;8pkt 8fpkt"];
1404--2962[label="0.13253;22pkt 22fpkt"];
1404--3182[label="0.0275229;3pkt 3fpkt"];
1404--3482[label="0.05;8pkt 8fpkt"];
1404--3499[label="0.13253;22pkt 22fpkt"];
1404--3540[label="0.0481928;8pkt 8fpkt"];
1404--3550[label="0.186747;31pkt 31fpkt"];
1404--3559[label="0.0542169;9pkt 9fpkt"];
1404--3562[label="0.186747;31pkt 31fpkt"];
1404--4074[label="0.0481928;8pkt 8fpkt"];
1404--4122[label="0.174699;29pkt 29fpkt"];
1404--4564[label="0.0169492;1pkt 1fpkt"];
1404--4882[label="0.246914;40pkt 40fpkt"];
1404--5030[label="0.163265;8pkt 8fpkt"];
1404--5126[label="0.027027;3pkt 3fpkt"];
1404--5182[label="0.011236;1pkt 1fpkt"];
1404--5292[label="0.0925926;5pkt 5fpkt"];
1404--5922[label="0.0169492;1pkt 1fpkt"];
1404--6203[label="0.163265;8pkt 8fpkt"];
1404--6259[label="0.0272727;3pkt 3fpkt"];
1404--6298[label="0.011236;1pkt 1fpkt"];
1404--6824[label="0.0111111;1pkt 1fpkt"];
1550--1843[label="0.385417;37pkt 37fpkt"];
1550--2631[label="0.0277778;1pkt 1fpkt"];
1550--2885[label="1;102pkt 102fpkt"];
1550--3013[label="0.0181818;2pkt 2fpkt"];
1550--3020[label="0.0181818;2pkt 2fpkt"];
1550--3048[label="0.0689655;2pkt 2fpkt"];
1550--3540[label="0.0818182;9pkt 9fpkt"];
1550--3550[label="0.0818182;9pkt 9fpkt"];
1550--3559[label="0.118182;13pkt 13fpkt"];
1550--3562[label="0.0818182;9pkt 9fpkt"];
1550--4137[label="1;110pkt 110fpkt"];
1550--5679[label="1;110pkt 110fpkt"];
1550--6545[label="0.990909;109pkt 109fpkt"];
1578--1829[label="0.513514;19pkt 19fpkt"];
1578--2098[label="0.0046729;1pkt 1fpkt"];
1578--2150[label="0.26087;6pkt 6fpkt"];
1578--2166[label="0.0322581;2pkt 2fpkt"];
1578--2365[label="0.0851064;8pkt 8fpkt"];
1578--2902[label="1;214pkt 214fpkt"];
1578--3212[label="0.0046729;1pkt 1fpkt"];
1578--3247[label="0.0416667;2pkt 2fpkt"];
1578--3359[label="0.26087;6pkt 6fpkt"];
1578--3521[label="0.0046729;1pkt 1fpkt"];
1578--3540[label="0.0186916;4pkt 4fpkt"];
1578--3550[label="0.0186916;4pkt 4fpkt"];
1578--3559[label="0.182243;39pkt 39fpkt"];
1578--3562[label="0.0186916;4pkt 4fpkt"];
1599--2916[label="0.576923;15pkt 15fpkt"];
1599--3540[label="0.0769231;2pkt 2fpkt"];
1599--3550[label="0.115385;3pkt 3fpkt"];
1599--3559[label="0.0769231;2pkt 2fpkt"];
1599--3562[label="0.115385;3pkt 3fpkt"];
1599--4239[label="0.0769231;2pkt 2fpkt"];
1599--4622[label="0.884615;23pkt 23fpkt"];
1599--5731[label="0.0769231;2pkt 2fpkt"];
1599--6570[label="0.0769231;2pkt 2fpkt"];
1601--1872[label="0.0526316;2pkt 2fpkt"];
1601--2558[label="0.00917431;1pkt 1fpkt"];
1601--2657[label="0.247706;27pkt 27fpkt"];
1601--3449[label="0.0416667;1pkt 1fpkt"];
1601--3540[label="0.0917431;10pkt 10fpkt"];
1601--3550[label="0.0917431;10pkt 10fpkt"];
1601--3559[label="0.110092;12pkt 12fpkt"];
1601--3562[label="0.0917431;10pkt 10fpkt"];
1601--5050[label="0.61194;41pkt 41fpkt"];
1601--6215[label="0.61194;41pkt 41fpkt"];
1601--6793[label="0.606061;40pkt 40fpkt"];
1636--1829[label="0.027027;1pkt 1fpkt"];
1636--1908[label="1;90pkt 90fpkt"];
1636--2098[label="0.008;1pkt 1fpkt"];
1636--2569[label="0.0147059;1pkt 1fpkt"];
1636--3041[label="1;65pkt 65fpkt"];
1636--3212[label="0.008;1pkt 1fpkt"];
1636--3521[label="0.008;1pkt 1fpkt"];
1636--3540[label="0.032;4pkt 4fpkt"];
1636--3550[label="0.024;3pkt 3fpkt"];
1636--3559[label="0.008;1pkt 1fpkt"];
1636--3562[label="0.024;3pkt 3fpkt"];
1652--1766[label="0.0136054;2pkt 2fpkt"];
1652--1829[label="0.108108;4pkt 4fpkt"];
1652--2121[label="0.00793651;1pkt 1fpkt"];
1652--2150[label="0.130435;3pkt 3fpkt"];
1652--3035[label="0.00671141;1pkt 1fpkt"];
1652--3359[label="0.130435;3pkt 3fpkt"];
1652--3540[label="0.0738255;11pkt 11fpkt"];
1652--3550[label="0.0738255;11pkt 11fpkt"];
1652--3559[label="0.0671141;10pkt 10fpkt"];
1652--3562[label="0.0738255;11pkt 11fpkt"];
1652--4882[label="0.993289;148pkt 148fpkt"];
1813--2657[label="0.192661;21pkt 21fpkt"];
1813--3540[label="0.0275229;3pkt 3fpkt"];
1813--3550[label="0.0183486;2pkt 2fpkt"];
1813--3559[label="0.0825688;9pkt 9fpkt"];
1813--3562[label="0.0183486;2pkt 2fpkt"];
1829--2570[label="0.027027;1pkt 1fpkt"];
1829--2773[label="0.0540541;2pkt 2fpkt"];
1829--2902[label="0.513514;19pkt 19fpkt"];
1829--3041[label="0.027027;1pkt 1fpkt"];
1829--3507[label="0.027027;1pkt 1fpkt"];
1829--3540[label="0.135135;5pkt 5fpkt"];
1829--3550[label="0.216216;8pkt 8fpkt"];
1829--3559[label="0.351351;13pkt 13fpkt"];
1829--3562[label="0.216216;8pkt 8fpkt"];
1829--3843[label="0.0357143;1pkt 1fpkt"];
1829--4122[label="0.027027;1pkt 1fpkt"];
1829--4753[label="0.027027;1pkt 1fpkt"];
1829--4882[label="0.108108;4pkt 4fpkt"];
1829--5509[label="0.0357143;1pkt 1fpkt"];
1829--6034[label="0.027027;1pkt 1fpkt"];
1843--2440[label="0.125;12pkt 12fpkt"];
1843--2657[label="0.260417;25pkt 25fpkt"];
1843--2885[label="0.34375;33pkt 33fpkt"];
1843--3540[label="0.03125;3pkt 3fpkt"];
1843--3550[label="0.166667;16pkt 16fpkt"];
1843--3559[label="0.0833333;8pkt 8fpkt"];
1843--3562[label="0.166667;16pkt 16fpkt"];
1843--4089[label="0.125;12pkt 12fpkt"];
1843--4137[label="0.4375;42pkt 42fpkt"];
1843--5653[label="0.125;12pkt 12fpkt"];
1843--5679[label="0.4375;42pkt 42fpkt"];
1843--6545[label="0.4375;42pkt 42fpkt"];
1904--3559[label="0.388889;7pkt 7fpkt"];
1908--3041[label="0.507692;33pkt 33fpkt"];
1939--2558[label="0.0108696;1pkt 1fpkt"];
1939--2657[label="0.195652;18pkt 18fpkt"];
1939--2923[label="0.336957;31pkt 31fpkt"];
1939--3540[label="0.0543478;5pkt 5fpkt"];
1939--3550[label="0.0869565;8pkt 8fpkt"];
1939--3559[label="0.0978261;9pkt 9fpkt"];
1939--3562[label="0.0869565;8pkt 8fpkt"];
1990--2197[label="0.539326;48pkt 48fpkt"];
1990--2657[label="0.123596;11pkt 11fpkt"];
1990--2916[label="0.123596;11pkt 11fpkt"];
1990--3540[label="0.168539;15pkt 15fpkt"];
1990--3550[label="0.123596;11pkt 11fpkt"];
1990--3559[label="0.101124;9pkt 9fpkt"];
1990--3562[label="0.123596;11pkt 11fpkt"];
1990--4622[label="0.123596;11pkt 11fpkt"];
1990--4787[label="0.166667;1pkt 1fpkt"];
1990--6055[label="0.166667;1pkt 1fpkt"];
2003--2197[label="0.482759;42pkt 42fpkt"];
2003--2657[label="0.126437;11pkt 11fpkt"];
2003--3540[label="0.091954;8pkt 8fpkt"];
2003--3550[label="0.0804598;7pkt 7fpkt"];
2003--3559[label="0.103448;9pkt 9fpkt"];
2003--3562[label="0.0804598;7pkt 7fpkt"];
2003--3871[label="0.25;1pkt 1fpkt"];
2003--5525[label="0.25;1pkt 1fpkt"];
2150--2760[label="0.0434783;1pkt 1fpkt"];
2150--2773[label="0.0434783;1pkt 1fpkt"];
2150--2902[label="0.26087;6pkt 6fpkt"];
2150--3359[label="1;23pkt 23fpkt"];
2150--3540[label="0.130435;3pkt 3fpkt"];
2150--3550[label="0.304348;7pkt 7fpkt"];
2150--3559[label="0.173913;4pkt 4fpkt"];
2150--3562[label="0.304348;7pkt 7fpkt"];
2150--4122[label="0.0434783;1pkt 1fpkt"];
2150--4463[label="0.0434783;1pkt 1fpkt"];
2150--4622[label="0.0869565;2pkt 2fpkt"];
2150--4882[label="0.0869565;2pkt 2fpkt"];
2150--5862[label="0.0434783;1pkt 1fpkt"];
2197--2409[label="0.0757576;5pkt 5fpkt"];
2197--2998[label="0.00900901;1pkt 1fpkt"];
2197--3045[label="0.00900901;1pkt 1fpkt"];
2197--3540[label="0.198198;22pkt 22fpkt"];
2197--3550[label="0.0540541;6pkt 6fpkt"];
2197--3559[label="0.0540541;6pkt 6fpkt"];
2197--3562[label="0.0540541;6pkt 6fpkt"];
2217--2657[label="0.371134;36pkt 36fpkt"];
2217--3540[label="0.0618557;6pkt 6fpkt"];
2217--3550[label="0.0824742;8pkt 8fpkt"];
2217--3559[label="0.0618557;6pkt 6fpkt"];
2217--3562[label="0.0824742;8pkt 8fpkt"];
2409--2657[label="0.454545;30pkt 30fpkt"];
2409--3540[label="0.212121;14pkt 14fpkt"];
2409--3550[label="0.106061;7pkt 7fpkt"];
2409--3559[label="0.0909091;6pkt 6fpkt"];
2409--3562[label="0.106061;7pkt 7fpkt"];
2424--2578[label="0.126582;10pkt 10fpkt"];
2424--2657[label="0.43038;34pkt 34fpkt"];
2424--3453[label="0.101266;8pkt 8fpkt"];
2424--3540[label="0.126582;10pkt 10fpkt"];
2424--3550[label="0.0632911;5pkt 5fpkt"];
2424--3559[label="0.0632911;5pkt 5fpkt"];
2424--3562[label="0.0632911;5pkt 5fpkt"];
2424--3953[label="0.126582;10pkt 10fpkt"];
2424--5569[label="0.126582;10pkt 10fpkt"];
2657--2969[label="0.00387597;1pkt 1fpkt"];
2657--2998[label="0.028169;6pkt 6fpkt"];
2657--3284[label="0.020202;2pkt 2fpkt"];
2657--3540[label="0.228482;146pkt 146fpkt"];
2657--3550[label="0.194053;124pkt 124fpkt"];
2657--3559[label="0.00938967;6pkt 6fpkt"];
2657--3562[label="0.194053;124pkt 124fpkt"];
2773--2774[label="0.5;31pkt 31fpkt"];
2773--3359[label="0.0434783;1pkt 1fpkt"];
2773--3540[label="0.108844;16pkt 16fpkt"];
2773--3550[label="0.462585;68pkt 68fpkt"];
2773--3559[label="0.102041;15pkt 15fpkt"];
2773--3562[label="0.462585;68pkt 68fpkt"];
2774--3540[label="0.0483871;3pkt 3fpkt"];
2774--3550[label="0.0645161;4pkt 4fpkt"];
2774--3559[label="0.193548;12pkt 12fpkt"];
2774--3562[label="0.0645161;4pkt 4fpkt"];
2850--2916[label="1;74pkt 74fpkt"];
2850--4622[label="1;74pkt 74fpkt"];
2885--3013[label="0.0196078;2pkt 2fpkt"];
2885--3020[label="0.0196078;2pkt 2fpkt"];
2885--3048[label="0.0689655;2pkt 2fpkt"];
2885--3540[label="0.0882353;9pkt 9fpkt"];
2885--3550[label="0.0882353;9pkt 9fpkt"];
2885--3559[label="0.127451;13pkt 13fpkt"];
2885--3562[label="0.0882353;9pkt 9fpkt"];
2885--4137[label="1;102pkt 102fpkt"];
2885--5679[label="1;102pkt 102fpkt"];
2885--6545[label="0.990196;101pkt 101fpkt"];
2902--3212[label="0.0046729;1pkt 1fpkt"];
2902--3247[label="0.0416667;2pkt 2fpkt"];
2902--3359[label="0.26087;6pkt 6fpkt"];
2902--3521[label="0.0046729;1pkt 1fpkt"];
2902--3540[label="0.0186916;4pkt 4fpkt"];
2902--3550[label="0.0186916;4pkt 4fpkt"];
2902--3559[label="0.182243;39pkt 39fpkt"];
2902--3562[label="0.0186916;4pkt 4fpkt"];
2916--3013[label="0.0244565;9pkt 9fpkt"];
2916--3020[label="0.0387324;11pkt 11fpkt"];
2916--3259[label="0.00571429;1pkt 1fpkt"];
2916--3398[label="0.0114943;1pkt 1fpkt"];
2916--3414[label="0.00294985;1pkt 1fpkt"];
2916--3468[label="0.0169492;2pkt 2fpkt"];
2916--3534[label="0.00571429;1pkt 1fpkt"];
2916--3540[label="0.0477032;27pkt 27fpkt"];
2916--3550[label="0.04947;28pkt 28fpkt"];
2916--3559[label="0.0282686;16pkt 16fpkt"];
2916--3562[label="0.04947;28pkt 28fpkt"];
2916--4622[label="0.998233;565pkt 565fpkt"];
2923--2969[label="0.00699301;1pkt 1fpkt"];
2923--2998[label="0.013986;2pkt 2fpkt"];
2923--3013[label="0.013986;2pkt 2fpkt"];
2923--3020[label="0.00699301;1pkt 1fpkt"];
2923--3371[label="0.013986;2pkt 2fpkt"];
2923--3540[label="0.048951;7pkt 7fpkt"];
2923--3550[label="0.153846;22pkt 22fpkt"];
2923--3559[label="0.104895;15pkt 15fpkt"];
2923--3562[label="0.153846;22pkt 22fpkt"];
3041--3540[label="0.0615385;4pkt 4fpkt"];
3041--3550[label="0.0461538;3pkt 3fpkt"];
3041--3559[label="0.0153846;1pkt 1fpkt"];
3041--3562[label="0.0461538;3pkt 3fpkt"];
3359--3540[label="0.130435;3pkt 3fpkt"];
3359--3550[label="0.304348;7pkt 7fpkt"];
3359--3559[label="0.173913;4pkt 4fpkt"];
3359--3562[label="0.304348;7pkt 7fpkt"];
3359--4122[label="0.0434783;1pkt 1fpkt"];
3359--4463[label="0.0434783;1pkt 1fpkt"];
3359--4622[label="0.0869565;2pkt 2fpkt"];
3359--4882[label="0.0869565;2pkt 2fpkt"];
3359--5862[label="0.0434783;1pkt 1fpkt"];
4137--5679[label="1;126pkt 126fpkt"];
4137--6545[label="1;125pkt 125fpkt"];
4239--5731[label="1;60pkt 60fpkt"];
4239--6570[label="1;60pkt 60fpkt"];
4753--6034[label="1;37pkt 37fpkt"];
5050--6215[label="1;67pkt 67fpkt"];
5050--6793[label="1;66pkt 66fpkt"];
5679--6545[label="1;125pkt 125fpkt"];
5731--6570[label="1;60pkt 60fpkt"];
6215--6793[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="201.242.146.50"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
5053[label="201.52.100.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6216[label="201.52.100.208;2pkt 2fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.52.100.208:80, 148.189.169.1:2743}[50%]&lt;BR/&gt;{201.52.100.208:80, 148.189.169.1:2744}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2744: (33.3333%)&lt;BR/&gt; 2743: (16.6667%)&gt;];
}
5053--6216[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.169.1" dst_port="2744" src_ip="201.52.100.208" src_port="80"/>
      <filter dst_ip="148.189.169.1" dst_port="2743" src_ip="201.52.100.208" src_port="80"/>
    </slice>
    <from sec="1107321037" usec="0"/>
    <to sec="1107321045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
5055[label="129.0.149.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6217[label="129.0.149.208;1pkt 1fpkt", shape=invtriangle, color=brown];
6794[label="129.0.149.208;1pkt 1fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.149.208:2204, 192.176.180.191:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2204: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5055--6217[label="1;1pkt 1fpkt"];
5055--6794[label="1;1pkt 1fpkt"];
6217--6794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.176.180.191" dst_port="80" src_ip="129.0.149.208" src_port="2204"/>
    </slice>
    <from sec="1107320862" usec="0"/>
    <to sec="1107320867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
5062[label="133.63.114.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6222[label="133.63.114.209;3pkt 3fpkt", shape=invtriangle, color=brown];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.114.209:1126, 206.185.33.49:1863}[25%]&lt;BR/&gt;{133.63.114.209:1073, 206.185.37.182:1863}[25%]&lt;BR/&gt;{133.63.114.209:1139, 206.185.33.51:1863}[25%]&lt;BR/&gt;{133.63.114.209:1140, 206.185.33.51:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1140: (14.2857%)&lt;BR/&gt; 1126: (14.2857%)&lt;BR/&gt; 1073: (14.2857%)&lt;BR/&gt; 1139: (7.14286%)&gt;];
}
5062--6222[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.33.51" dst_port="1863" src_ip="133.63.114.209" src_port="1140"/>
      <filter dst_ip="206.185.33.51" dst_port="1863" src_ip="133.63.114.209" src_port="1139"/>
      <filter dst_ip="206.185.37.182" dst_port="1863" src_ip="133.63.114.209" src_port="1073"/>
      <filter dst_ip="206.185.33.49" dst_port="1863" src_ip="133.63.114.209" src_port="1126"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.6.216.211"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.202.212"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
1946[label="133.63.74.192;d;35pkt 35fpkt", shape=diamond, color=yellow];
5090[label="218.97.7.213;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6235[label="218.97.7.213;9pkt 9fpkt", shape=invtriangle, color=brown];
6802[label="218.97.7.213;8pkt 8fpkt", shape=invhouse, color=bisque];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.97.7.213:*, 133.63.74.192:80}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1803%)&lt;BR/&gt; 39704: (3.27869%)&lt;BR/&gt; 39491: (3.27869%)&lt;BR/&gt; 39462: (3.27869%)&lt;BR/&gt; 39461: (3.27869%)&gt;];
}
1946--3540[label="0.142857;5pkt 5fpkt"];
1946--3550[label="0.0571429;2pkt 2fpkt"];
1946--3562[label="0.0571429;2pkt 2fpkt"];
1946--4004[label="0.25;2pkt 2fpkt"];
1946--4377[label="0.25;2pkt 2fpkt"];
1946--5090[label="1;9pkt 9fpkt"];
1946--5813[label="0.25;2pkt 2fpkt"];
1946--6235[label="1;9pkt 9fpkt"];
1946--6802[label="1;8pkt 8fpkt"];
5090--6235[label="1;9pkt 9fpkt"];
5090--6802[label="1;8pkt 8fpkt"];
6235--6802[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="133.63.74.192" dst_port="80" src_ip="218.97.7.213"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
5097[label="40.157.176.213;74pkt 74fpkt", shape=pentagon, color=darkviolet];
6240[label="40.157.176.213;74pkt 74fpkt", shape=invtriangle, color=brown];
6806[label="40.157.176.213;73pkt 73fpkt", shape=invhouse, color=bisque];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.157.176.213:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4904: (1.35747%)&lt;BR/&gt; 4920: (0.678733%)&lt;BR/&gt; 4871: (0.678733%)&lt;BR/&gt; 4707: (0.678733%)&gt;];
}
5097--6240[label="1;74pkt 74fpkt"];
5097--6806[label="1;73pkt 73fpkt"];
6240--6806[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="40.157.176.213"/>
    </slice>
    <from sec="1107321062" usec="0"/>
    <to sec="1107321301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.172.42.214"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.241.215"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.88.161.217"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
5136[label="161.69.215.217;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6266[label="161.69.215.217;15pkt 15fpkt", shape=invtriangle, color=brown];
6814[label="161.69.215.217;14pkt 14fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.215.217:58773, *:*}[73.3333%]&lt;BR/&gt;{161.69.215.217:*, 193.204.108.205:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58773: (37.5%)&lt;BR/&gt; 1863: (6.81818%)&lt;BR/&gt; 28607: (5.68182%)&lt;BR/&gt; 62907: (3.40909%)&lt;BR/&gt; 62586: (3.40909%)&gt;];
}
5136--6266[label="1;15pkt 15fpkt"];
5136--6814[label="1;14pkt 14fpkt"];
6266--6814[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="193.204.108.205" src_ip="161.69.215.217"/>
      <filter src_ip="161.69.215.217" src_port="58773"/>
    </slice>
    <from sec="1107320431" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
5138[label="201.55.19.218;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6267[label="201.55.19.218;26pkt 26fpkt", shape=invtriangle, color=brown];
6815[label="201.55.19.218;26pkt 26fpkt", shape=invhouse, color=bisque];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.55.19.218:80, 129.0.82.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51307: (1.89873%)&lt;BR/&gt; 51306: (1.89873%)&lt;BR/&gt; 51305: (1.89873%)&lt;BR/&gt; 51304: (1.89873%)&gt;];
}
5138--6267[label="1;26pkt 26fpkt"];
5138--6815[label="1;26pkt 26fpkt"];
6267--6815[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.82.48" src_ip="201.55.19.218" src_port="80"/>
    </slice>
    <from sec="1107321203" usec="0"/>
    <to sec="1107321217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.53.90.218"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.148.218"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.234.218"/>
    </slice>
    <from sec="1107320411" usec="0"/>
    <to sec="1107321287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.114.91.220"/>
    </slice>
    <from sec="1107320451" usec="0"/>
    <to sec="1107320827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
5154[label="210.111.121.220;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6279[label="210.111.121.220;2pkt 2fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.111.121.220:80, 201.251.20.134:3539}[50%]&lt;BR/&gt;{210.111.121.220:80, 201.251.20.134:3540}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3540: (25%)&lt;BR/&gt; 3539: (25%)&gt;];
}
5154--6279[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.251.20.134" dst_port="3540" src_ip="210.111.121.220" src_port="80"/>
      <filter dst_ip="201.251.20.134" dst_port="3539" src_ip="210.111.121.220" src_port="80"/>
    </slice>
    <from sec="1107321253" usec="0"/>
    <to sec="1107321280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
5158[label="40.166.82.221;100pkt 100fpkt", shape=pentagon, color=darkviolet];
6283[label="40.166.82.221;99pkt 99fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.166.82.221:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4817: (1.00503%)&lt;BR/&gt; 3388: (1.00503%)&lt;BR/&gt; 2653: (1.00503%)&lt;BR/&gt; 1168: (1.00503%)&gt;];
}
5158--6283[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="40.166.82.221"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
3789[label="164.238.203.26;74pkt 74fpkt", shape=pentagon, color=darkviolet];
5480[label="164.238.203.26;74pkt 74fpkt", shape=invtriangle, color=brown];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.203.26:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3789--5480[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter src_ip="164.238.203.26"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.80.143.223"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.667249,1.78047,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
1289[label="42.129.117.174;d;348pkt 348fpkt", shape=diamond, color=yellow];
3700[label="164.238.209.16;88pkt 88fpkt", shape=pentagon, color=darkviolet];
4430[label="164.238.146.115;89pkt 89fpkt", shape=pentagon, color=darkviolet];
5169[label="164.238.217.224;90pkt 90fpkt", shape=pentagon, color=darkviolet];
5816[label="164.238.210.106;64pkt 64fpkt", shape=invtriangle, color=brown];
6292[label="164.238.217.224;90pkt 90fpkt", shape=invtriangle, color=brown];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.238.217.224:*, 42.129.117.174:6667}[20.4494%]&lt;BR/&gt;{164.238.146.115:*, 42.129.117.174:6667}[20.2247%]&lt;BR/&gt;{164.238.209.16:*, 42.129.117.174:6667}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2439: (0.455137%)&lt;BR/&gt; 2420: (0.390117%)&lt;BR/&gt; 2454: (0.260078%)&lt;BR/&gt; 2447: (0.260078%)&gt;];
}
1289--3700[label="0.727273;64pkt 64fpkt"];
1289--4430[label="0.719101;64pkt 64fpkt"];
1289--5169[label="0.722222;65pkt 65fpkt"];
1289--5816[label="0.640625;41pkt 41fpkt"];
1289--6292[label="0.722222;65pkt 65fpkt"];
5169--6292[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="42.129.117.174" dst_port="6667" src_ip="164.238.217.224"/>
      <filter dst_ip="42.129.117.174" dst_port="6667" src_ip="164.238.146.115"/>
      <filter dst_ip="42.129.117.174" dst_port="6667" src_ip="164.238.209.16"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.129.225"/>
    </slice>
    <from sec="1107320466" usec="0"/>
    <to sec="1107320667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
5189[label="209.17.56.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6301[label="209.17.56.227;1pkt 1fpkt", shape=invtriangle, color=brown];
6827[label="209.17.56.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.17.56.227:80, 201.242.144.64:51920}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51920: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5189--6301[label="1;1pkt 1fpkt"];
5189--6827[label="1;1pkt 1fpkt"];
6301--6827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.144.64" dst_port="51920" src_ip="209.17.56.227" src_port="80"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
1018[label="164.238.203.19;d;154pkt 154fpkt", shape=diamond, color=yellow];
1868[label="216.70.254.213;s;4pkt 4fpkt", shape=diamond, color=yellow];
2064[label="214.128.17.136;s;13pkt 13fpkt", shape=diamond, color=yellow];
2262[label="205.10.126.100;s;9pkt 9fpkt", shape=diamond, color=yellow];
2296[label="40.212.45.194;s;30pkt 30fpkt", shape=diamond, color=yellow];
2966[label="164.238.203.19;d;79pkt 79fpkt", shape=hexagon, color=black];
3297[label="205.10.126.100;s;9pkt 9fpkt", shape=hexagon, color=black];
4352[label="205.10.126.100;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4569[label="214.128.17.136;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5196[label="94.48.219.227;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5796[label="205.10.126.100;8pkt 8fpkt", shape=invtriangle, color=brown];
6303[label="94.48.219.227;12pkt 12fpkt", shape=invtriangle, color=brown];
6597[label="205.10.126.100;8pkt 8fpkt", shape=invhouse, color=bisque];
6829[label="94.48.219.227;12pkt 12fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.212.45.194:80, 164.238.203.19:*}[23.3766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7089%)&lt;BR/&gt; 33436: (2.29111%)&lt;BR/&gt; 63646: (0.943396%)&lt;BR/&gt; 63606: (0.943396%)&lt;BR/&gt; 62191: (0.943396%)&gt;];
}
1018--1868[label="1;4pkt 4fpkt"];
1018--2064[label="1;13pkt 13fpkt"];
1018--2261[label="0.514286;18pkt 18fpkt"];
1018--2262[label="1;9pkt 9fpkt"];
1018--2296[label="1;30pkt 30fpkt"];
1018--2966[label="1;79pkt 79fpkt"];
1018--3297[label="1;9pkt 9fpkt"];
1018--4352[label="1;9pkt 9fpkt"];
1018--4569[label="1;12pkt 12fpkt"];
1018--4825[label="0.0714286;1pkt 1fpkt"];
1018--5101[label="0.375;6pkt 6fpkt"];
1018--5196[label="1;12pkt 12fpkt"];
1018--5796[label="1;8pkt 8fpkt"];
1018--6079[label="0.0769231;1pkt 1fpkt"];
1018--6242[label="0.352941;6pkt 6fpkt"];
1018--6303[label="1;12pkt 12fpkt"];
1018--6356[label="0.326923;17pkt 17fpkt"];
1018--6597[label="1;8pkt 8fpkt"];
1018--6669[label="0.25;7pkt 7fpkt"];
1018--6829[label="1;12pkt 12fpkt"];
1868--2966[label="1;4pkt 4fpkt"];
2064--2966[label="0.923077;12pkt 12fpkt"];
2064--4569[label="1;12pkt 12fpkt"];
2262--2966[label="0.666667;6pkt 6fpkt"];
2262--3297[label="1;9pkt 9fpkt"];
2262--4352[label="1;9pkt 9fpkt"];
2262--5796[label="1;8pkt 8fpkt"];
2262--6597[label="1;8pkt 8fpkt"];
2296--2966[label="0.333333;10pkt 10fpkt"];
2966--3297[label="0.666667;6pkt 6fpkt"];
2966--4352[label="0.666667;6pkt 6fpkt"];
2966--4569[label="0.916667;11pkt 11fpkt"];
2966--5101[label="0.375;6pkt 6fpkt"];
2966--5196[label="0.416667;5pkt 5fpkt"];
2966--5796[label="0.625;5pkt 5fpkt"];
2966--6242[label="0.352941;6pkt 6fpkt"];
2966--6303[label="0.416667;5pkt 5fpkt"];
2966--6597[label="0.625;5pkt 5fpkt"];
2966--6829[label="0.416667;5pkt 5fpkt"];
3297--4352[label="1;9pkt 9fpkt"];
3297--5796[label="1;8pkt 8fpkt"];
3297--6597[label="1;8pkt 8fpkt"];
4352--5796[label="1;8pkt 8fpkt"];
4352--6597[label="1;8pkt 8fpkt"];
5196--6303[label="1;12pkt 12fpkt"];
5196--6829[label="1;12pkt 12fpkt"];
5796--6597[label="1;8pkt 8fpkt"];
6303--6829[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="164.238.203.19" src_ip="40.212.45.194" src_port="80"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
5202[label="161.69.81.229;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6307[label="161.69.81.229;21pkt 21fpkt", shape=invtriangle, color=brown];
6831[label="161.69.81.229;21pkt 21fpkt", shape=invhouse, color=bisque];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.69.81.229:*, 220.35.85.50:80}[80.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.4762%)&lt;BR/&gt; 1863: (9.52381%)&lt;BR/&gt; 2611: (2.38095%)&lt;BR/&gt; 2610: (2.38095%)&lt;BR/&gt; 2534: (2.38095%)&gt;];
}
5202--6307[label="1;21pkt 21fpkt"];
5202--6831[label="1;21pkt 21fpkt"];
6307--6831[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="220.35.85.50" dst_port="80" src_ip="161.69.81.229"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
5205[label="148.205.202.229;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6309[label="148.205.202.229;10pkt 10fpkt", shape=invtriangle, color=brown];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.205.202.229:80, 95.204.71.32:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59264: (5%)&lt;BR/&gt; 53301: (5%)&lt;BR/&gt; 49364: (5%)&lt;BR/&gt; 47293: (5%)&gt;];
}
5205--6309[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="95.204.71.32" src_ip="148.205.202.229" src_port="80"/>
    </slice>
    <from sec="1107320440" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504021,1.82623,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
5206[label="201.8.9.230;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6310[label="201.8.9.230;17pkt 17fpkt", shape=invtriangle, color=brown];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.8.9.230:80, 129.0.47.120:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1474: (2.94118%)&lt;BR/&gt; 1472: (2.94118%)&lt;BR/&gt; 1468: (2.94118%)&lt;BR/&gt; 1467: (2.94118%)&gt;];
}
5206--6310[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.47.120" src_ip="201.8.9.230" src_port="80"/>
    </slice>
    <from sec="1107320634" usec="0"/>
    <to sec="1107320719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.148.233"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.167.5.236"/>
    </slice>
    <from sec="1107320925" usec="0"/>
    <to sec="1107320936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.88.47.238"/>
    </slice>
    <from sec="1107320792" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.148.238"/>
    </slice>
    <from sec="1107320405" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.153.159.238"/>
    </slice>
    <from sec="1107320832" usec="0"/>
    <to sec="1107320843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.148.239"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.20.4.240"/>
    </slice>
    <from sec="1107320408" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
5267[label="202.30.79.240;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6345[label="202.30.79.240;6pkt 6fpkt", shape=invtriangle, color=brown];
6848[label="202.30.79.240;6pkt 6fpkt", shape=invhouse, color=bisque];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.30.79.240:80, 133.219.45.13:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1404: (8.33333%)&lt;BR/&gt; 1403: (8.33333%)&lt;BR/&gt; 1402: (8.33333%)&lt;BR/&gt; 1401: (8.33333%)&gt;];
}
5267--6345[label="1;6pkt 6fpkt"];
5267--6848[label="1;6pkt 6fpkt"];
6345--6848[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.219.45.13" src_ip="202.30.79.240" src_port="80"/>
    </slice>
    <from sec="1107320627" usec="0"/>
    <to sec="1107320674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
5270[label="133.63.114.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6347[label="133.63.114.240;2pkt 2fpkt", shape=invtriangle, color=brown];
6850[label="133.63.114.240;3pkt 3fpkt", shape=invhouse, color=bisque];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.114.240:1558, 206.185.33.6:1863}[33.3333%]&lt;BR/&gt;{133.63.114.240:1559, 206.185.33.16:1863}[33.3333%]&lt;BR/&gt;{133.63.114.240:1053, 206.185.36.196:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1559: (21.4286%)&lt;BR/&gt; 1053: (21.4286%)&lt;BR/&gt; 1558: (7.14286%)&gt;];
}
5270--6347[label="1;2pkt 2fpkt"];
5270--6850[label="1;2pkt 2fpkt"];
6347--6850[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.36.196" dst_port="1863" src_ip="133.63.114.240" src_port="1053"/>
      <filter dst_ip="206.185.33.16" dst_port="1863" src_ip="133.63.114.240" src_port="1559"/>
      <filter dst_ip="206.185.33.6" dst_port="1863" src_ip="133.63.114.240" src_port="1558"/>
    </slice>
    <from sec="1107320442" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.54.214.240"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
396[label="94.95.143.0;d;6pkt 6fpkt", shape=diamond, color=yellow];
984[label="200.124.242.250;s;18pkt 18fpkt", shape=diamond, color=yellow];
1094[label="94.95.143.194;d;83pkt 83fpkt", shape=diamond, color=yellow];
1206[label="161.69.215.189;s;22pkt 22fpkt", shape=diamond, color=yellow];
1466[label="94.95.143.179;d;98pkt 98fpkt", shape=diamond, color=yellow];
1730[label="1.156.239.247;d;607pkt 607fpkt", shape=diamond, color=yellow];
1762[label="43.149.232.196;d;284pkt 284fpkt", shape=diamond, color=yellow];
2164[label="161.69.227.237;s;426pkt 426fpkt", shape=diamond, color=yellow];
2342[label="215.22.107.97;d;193pkt 193fpkt", shape=diamond, color=yellow];
2443[label="161.69.56.215;s;32pkt 32fpkt", shape=diamond, color=yellow];
2562[label="94.95.143.0;d;6pkt 6fpkt", shape=hexagon, color=black];
3000[label="94.95.143.194;d;56pkt 56fpkt", shape=hexagon, color=black];
3188[label="161.69.215.189;s;22pkt 22fpkt", shape=hexagon, color=black];
3595[label="161.69.188.3;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3776[label="161.69.97.24;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4138[label="161.69.186.72;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4286[label="201.242.149.89;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4384[label="200.124.240.106;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4517[label="161.69.198.129;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4559[label="200.124.241.134;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5033[label="200.124.242.204;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5056[label="200.124.226.208;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5257[label="201.242.128.238;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5273[label="200.124.242.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5304[label="200.124.242.245;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5326[label="161.69.137.250;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5327[label="200.124.242.250;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5371[label="161.69.188.3;11pkt 11fpkt", shape=invtriangle, color=brown];
5471[label="161.69.97.24;15pkt 15fpkt", shape=invtriangle, color=brown];
6218[label="200.124.226.208;33pkt 33fpkt", shape=invtriangle, color=brown];
6349[label="200.124.242.240;4pkt 4fpkt", shape=invtriangle, color=brown];
6368[label="200.124.242.245;32pkt 32fpkt", shape=invtriangle, color=brown];
6382[label="200.124.242.250;18pkt 18fpkt", shape=invtriangle, color=brown];
6857[label="200.124.242.245;32pkt 32fpkt", shape=invhouse, color=bisque];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 1.156.239.247:0}[30.154%]&lt;BR/&gt;{161.69.227.237:0, *:0}[21.1624%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (71.9848%)&lt;BR/&gt; 80: (11.807%)&lt;BR/&gt; 53: (1.14262%)&lt;BR/&gt; 2931: (0.44435%)&lt;BR/&gt; 65534: (0.380872%)&gt;];
}
396--984[label="0.833333;5pkt 5fpkt"];
396--2562[label="1;6pkt 6fpkt"];
396--5327[label="0.833333;5pkt 5fpkt"];
396--6382[label="0.833333;5pkt 5fpkt"];
984--1730[label="0.0555556;1pkt 1fpkt"];
984--2562[label="0.833333;5pkt 5fpkt"];
984--5327[label="1;18pkt 18fpkt"];
984--6382[label="1;18pkt 18fpkt"];
1094--1206[label="0.409091;9pkt 9fpkt"];
1094--1998[label="0.0120482;1pkt 1fpkt"];
1094--2164[label="0.0120482;1pkt 1fpkt"];
1094--2443[label="0.6875;22pkt 22fpkt"];
1094--3000[label="1;56pkt 56fpkt"];
1094--3188[label="0.409091;9pkt 9fpkt"];
1094--3261[label="0.0120482;1pkt 1fpkt"];
1094--3595[label="0.545455;6pkt 6fpkt"];
1094--3961[label="0.0120482;1pkt 1fpkt"];
1094--4138[label="0.142857;1pkt 1fpkt"];
1094--5304[label="0.0606061;2pkt 2fpkt"];
1094--5371[label="0.545455;6pkt 6fpkt"];
1094--6125[label="0.153846;4pkt 4fpkt"];
1094--6368[label="0.0625;2pkt 2fpkt"];
1094--6857[label="0.0625;2pkt 2fpkt"];
1206--1466[label="0.454545;10pkt 10fpkt"];
1206--3000[label="0.272727;6pkt 6fpkt"];
1206--3188[label="1;22pkt 22fpkt"];
1466--3188[label="0.454545;10pkt 10fpkt"];
1466--3776[label="0.133333;2pkt 2fpkt"];
1466--4138[label="0.714286;5pkt 5fpkt"];
1466--4517[label="0.75;12pkt 12fpkt"];
1466--5326[label="0.736842;14pkt 14fpkt"];
1466--5471[label="0.133333;2pkt 2fpkt"];
1730--1781[label="0.00877193;1pkt 1fpkt"];
1730--1792[label="0.0017331;1pkt 1fpkt"];
1730--1949[label="0.00301205;1pkt 1fpkt"];
1730--1987[label="0.0116279;1pkt 1fpkt"];
1730--1998[label="0.0034965;1pkt 1fpkt"];
1730--2021[label="0.00806452;1pkt 1fpkt"];
1730--2598[label="0.008;1pkt 1fpkt"];
1730--2693[label="0.00164745;1pkt 1fpkt"];
1730--2926[label="0.00480769;1pkt 1fpkt"];
1730--2985[label="0.0027933;1pkt 1fpkt"];
1730--3153[label="0.00220264;1pkt 1fpkt"];
1730--3181[label="0.00970874;1pkt 1fpkt"];
1730--3261[label="0.00384615;1pkt 1fpkt"];
1730--3370[label="0.00877193;1pkt 1fpkt"];
1730--3724[label="0.00840336;1pkt 1fpkt"];
1730--3914[label="0.00763359;1pkt 1fpkt"];
1730--3961[label="0.003367;1pkt 1fpkt"];
1730--4384[label="0.0625;1pkt 1fpkt"];
1730--4559[label="0.0196078;1pkt 1fpkt"];
1730--4610[label="0.00164745;1pkt 1fpkt"];
1730--4773[label="0.00363636;1pkt 1fpkt"];
1730--5033[label="0.047619;1pkt 1fpkt"];
1730--5040[label="0.00277778;1pkt 1fpkt"];
1730--5056[label="0.030303;1pkt 1fpkt"];
1730--5129[label="0.0102041;1pkt 1fpkt"];
1730--5217[label="0.00278552;1pkt 1fpkt"];
1730--5273[label="0.25;1pkt 1fpkt"];
1730--5287[label="0.0120482;1pkt 1fpkt"];
1730--5304[label="0.030303;1pkt 1fpkt"];
1730--5327[label="0.0555556;1pkt 1fpkt"];
1730--5439[label="0.00833333;1pkt 1fpkt"];
1730--5549[label="0.00757576;1pkt 1fpkt"];
1730--6046[label="0.00363636;1pkt 1fpkt"];
1730--6193[label="0.00164745;1pkt 1fpkt"];
1730--6209[label="0.00278552;1pkt 1fpkt"];
1730--6218[label="0.030303;1pkt 1fpkt"];
1730--6262[label="0.0102041;1pkt 1fpkt"];
1730--6349[label="0.25;1pkt 1fpkt"];
1730--6358[label="0.0120482;1pkt 1fpkt"];
1730--6368[label="0.03125;1pkt 1fpkt"];
1730--6382[label="0.0555556;1pkt 1fpkt"];
1730--6786[label="0.00164745;1pkt 1fpkt"];
1730--6853[label="0.0119048;1pkt 1fpkt"];
1730--6857[label="0.03125;1pkt 1fpkt"];
1762--1768[label="0.00352113;1pkt 1fpkt"];
1762--1792[label="0.00352113;1pkt 1fpkt"];
1762--1998[label="0.00352113;1pkt 1fpkt"];
1762--2164[label="0.00352113;1pkt 1fpkt"];
1762--2602[label="0.00352113;1pkt 1fpkt"];
1762--2800[label="0.00408163;1pkt 1fpkt"];
1762--2912[label="0.00352113;1pkt 1fpkt"];
1762--2926[label="0.00480769;1pkt 1fpkt"];
1762--3153[label="0.00352113;1pkt 1fpkt"];
1762--3226[label="0.00352113;1pkt 1fpkt"];
1762--3261[label="0.00384615;1pkt 1fpkt"];
1762--3640[label="0.00854701;1pkt 1fpkt"];
1762--3643[label="0.00352113;1pkt 1fpkt"];
1762--3724[label="0.00840336;1pkt 1fpkt"];
1762--3961[label="0.00352113;1pkt 1fpkt"];
1762--4286[label="0.0142857;1pkt 1fpkt"];
1762--4610[label="0.00352113;1pkt 1fpkt"];
1762--4773[label="0.00363636;1pkt 1fpkt"];
1762--5230[label="0.00352113;1pkt 1fpkt"];
1762--5304[label="0.030303;1pkt 1fpkt"];
1762--5397[label="0.00352113;1pkt 1fpkt"];
1762--5439[label="0.00833333;1pkt 1fpkt"];
1762--5574[label="0.00352113;1pkt 1fpkt"];
1762--6046[label="0.00363636;1pkt 1fpkt"];
1762--6322[label="0.00352113;1pkt 1fpkt"];
1762--6368[label="0.03125;1pkt 1fpkt"];
1762--6857[label="0.03125;1pkt 1fpkt"];
2164--2342[label="0.00518135;1pkt 1fpkt"];
2164--3000[label="0.0178571;1pkt 1fpkt"];
2342--2800[label="0.00518135;1pkt 1fpkt"];
2342--2912[label="0.00518135;1pkt 1fpkt"];
2342--2926[label="0.00518135;1pkt 1fpkt"];
2342--3226[label="0.00518135;1pkt 1fpkt"];
2342--3261[label="0.00518135;1pkt 1fpkt"];
2342--3643[label="0.00518135;1pkt 1fpkt"];
2342--3961[label="0.00518135;1pkt 1fpkt"];
2342--4286[label="0.0142857;1pkt 1fpkt"];
2342--4559[label="0.0196078;1pkt 1fpkt"];
2342--4773[label="0.00518135;1pkt 1fpkt"];
2342--5230[label="0.00518135;1pkt 1fpkt"];
2342--5257[label="0.0196078;1pkt 1fpkt"];
2342--5397[label="0.00518135;1pkt 1fpkt"];
2342--5574[label="0.00518135;1pkt 1fpkt"];
2342--6046[label="0.00518135;1pkt 1fpkt"];
2342--6322[label="0.00518135;1pkt 1fpkt"];
2443--3000[label="0.5625;18pkt 18fpkt"];
2562--5327[label="0.833333;5pkt 5fpkt"];
2562--6382[label="0.833333;5pkt 5fpkt"];
3000--3188[label="0.272727;6pkt 6fpkt"];
3000--3595[label="0.181818;2pkt 2fpkt"];
3000--5304[label="0.030303;1pkt 1fpkt"];
3000--5371[label="0.181818;2pkt 2fpkt"];
3000--6125[label="0.0769231;2pkt 2fpkt"];
3000--6368[label="0.03125;1pkt 1fpkt"];
3000--6857[label="0.03125;1pkt 1fpkt"];
3595--5371[label="1;11pkt 11fpkt"];
3776--5471[label="1;15pkt 15fpkt"];
5056--6218[label="1;33pkt 33fpkt"];
5273--6349[label="1;4pkt 4fpkt"];
5304--6368[label="1;32pkt 32fpkt"];
5304--6857[label="1;32pkt 32fpkt"];
5327--6382[label="1;18pkt 18fpkt"];
6368--6857[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="161.69.227.237"/>
      <filter dst_ip="1.156.239.247"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.155.220.244"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.42.144.247"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.238.148.247"/>
    </slice>
    <from sec="1107320407" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
5311[label="221.193.193.247;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6372[label="221.193.193.247;237pkt 237fpkt", shape=invtriangle, color=brown];
6859[label="221.193.193.247;238pkt 238fpkt", shape=invhouse, color=bisque];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.193.193.247:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4752: (0.420757%)&lt;BR/&gt; 4644: (0.420757%)&lt;BR/&gt; 4033: (0.420757%)&lt;BR/&gt; 3798: (0.420757%)&gt;];
}
5311--6372[label="1;237pkt 237fpkt"];
5311--6859[label="1;238pkt 238fpkt"];
6372--6859[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="221.193.193.247"/>
    </slice>
    <from sec="1107320677" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
5314[label="220.187.87.248;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6373[label="220.187.87.248;17pkt 17fpkt", shape=invtriangle, color=brown];
6860[label="220.187.87.248;17pkt 17fpkt", shape=invhouse, color=bisque];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.187.87.248:80, 201.242.144.45:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35620: (2.94118%)&lt;BR/&gt; 35612: (2.94118%)&lt;BR/&gt; 35581: (2.94118%)&lt;BR/&gt; 35578: (2.94118%)&gt;];
}
5314--6373[label="1;17pkt 17fpkt"];
5314--6860[label="1;17pkt 17fpkt"];
6373--6860[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="201.242.144.45" src_ip="220.187.87.248" src_port="80"/>
    </slice>
    <from sec="1107321269" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.3.27.249"/>
    </slice>
    <from sec="1107321159" usec="0"/>
    <to sec="1107321183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.591767,1.88792,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.58.114.250"/>
    </slice>
    <from sec="1107320412" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
712[label="201.242.147.34;d;770pkt 770fpkt", shape=diamond, color=yellow];
1041[label="148.189.48.103;d;604pkt 604fpkt", shape=diamond, color=yellow];
1069[label="200.124.247.37;d;828pkt 828fpkt", shape=diamond, color=yellow];
1115[label="200.124.244.69;d;249pkt 249fpkt", shape=diamond, color=yellow];
1123[label="148.189.0.94;d;75pkt 75fpkt", shape=diamond, color=yellow];
1156[label="148.189.54.228;d;272pkt 272fpkt", shape=diamond, color=yellow];
1239[label="42.220.7.146;s;3pkt 3fpkt", shape=diamond, color=yellow];
1480[label="210.53.252.120;s;12pkt 12fpkt", shape=diamond, color=yellow];
2194[label="192.115.52.132;d;334pkt 334fpkt", shape=diamond, color=yellow];
2453[label="200.124.241.180;d;59pkt 59fpkt", shape=diamond, color=yellow];
2840[label="42.220.7.146;s;3pkt 3fpkt", shape=hexagon, color=black];
4062[label="93.167.52.64;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4091[label="93.167.52.68;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4277[label="93.167.52.89;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4288[label="93.167.52.90;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4325[label="93.167.52.96;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4337[label="93.167.52.98;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4369[label="93.167.52.104;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4378[label="93.167.52.106;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4513[label="93.167.48.129;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4588[label="93.167.48.138;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4662[label="42.220.7.146;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4777[label="93.167.48.164;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4785[label="93.167.48.166;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4801[label="93.167.48.168;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4815[label="200.11.80.170;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4837[label="93.167.48.173;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5329[label="214.23.4.251;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5655[label="93.167.52.68;24pkt 24fpkt", shape=invtriangle, color=brown];
5749[label="93.167.52.89;30pkt 30fpkt", shape=invtriangle, color=brown];
5783[label="93.167.52.98;29pkt 29fpkt", shape=invtriangle, color=brown];
5806[label="93.167.52.104;28pkt 28fpkt", shape=invtriangle, color=brown];
5814[label="93.167.52.106;22pkt 22fpkt", shape=invtriangle, color=brown];
5977[label="42.220.7.146;2pkt 2fpkt", shape=invtriangle, color=brown];
6048[label="93.167.48.164;24pkt 24fpkt", shape=invtriangle, color=brown];
6070[label="200.11.80.170;16pkt 16fpkt", shape=invtriangle, color=brown];
6384[label="214.23.4.251;2pkt 2fpkt", shape=invtriangle, color=brown];
6577[label="93.167.52.89;29pkt 29fpkt", shape=invhouse, color=bisque];
6602[label="93.167.52.104;28pkt 28fpkt", shape=invhouse, color=bisque];
6606[label="93.167.52.106;22pkt 22fpkt", shape=invhouse, color=bisque];
6726[label="200.11.80.170;16pkt 16fpkt", shape=invhouse, color=bisque];
6865[label="214.23.4.251;2pkt 2fpkt", shape=invhouse, color=bisque];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.124.247.37:53}[24.4076%]&lt;BR/&gt;{*:*, 201.242.147.34:53}[22.3637%]&lt;BR/&gt;{*:*, *:80}[21.3863%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (34.7865%)&lt;BR/&gt; 80: (14.6219%)&lt;BR/&gt; 36229: (5.19547%)&lt;BR/&gt; 25: (1.46605%)&lt;BR/&gt; 0: (1.02881%)&gt;];
}
712--3549[label="0.0987013;76pkt 76fpkt"];
712--4082[label="0.142857;1pkt 1fpkt"];
712--4091[label="0.0416667;1pkt 1fpkt"];
712--4277[label="0.0333333;1pkt 1fpkt"];
712--4337[label="0.275862;8pkt 8fpkt"];
712--4398[label="0.0384615;1pkt 1fpkt"];
712--4786[label="0.201493;27pkt 27fpkt"];
712--5017[label="0.5;1pkt 1fpkt"];
712--5655[label="0.0416667;1pkt 1fpkt"];
712--5749[label="0.0333333;1pkt 1fpkt"];
712--5783[label="0.275862;8pkt 8fpkt"];
712--6054[label="0.207407;28pkt 28fpkt"];
712--6577[label="0.0344828;1pkt 1fpkt"];
1041--1239[label="0.333333;1pkt 1fpkt"];
1041--1930[label="0.0128205;1pkt 1fpkt"];
1041--2497[label="0.333333;1pkt 1fpkt"];
1041--2840[label="0.333333;1pkt 1fpkt"];
1041--3100[label="0.0142857;1pkt 1fpkt"];
1041--3549[label="0.00993377;6pkt 6fpkt"];
1041--4091[label="0.0833333;2pkt 2fpkt"];
1041--4277[label="0.0333333;1pkt 1fpkt"];
1041--4325[label="0.037037;1pkt 1fpkt"];
1041--4369[label="0.037037;1pkt 1fpkt"];
1041--4492[label="0.025;1pkt 1fpkt"];
1041--4658[label="0.0416667;1pkt 1fpkt"];
1041--4662[label="0.333333;1pkt 1fpkt"];
1041--4856[label="0.030303;1pkt 1fpkt"];
1041--4923[label="0.030303;1pkt 1fpkt"];
1041--4951[label="0.0666667;1pkt 1fpkt"];
1041--5209[label="0.0192308;1pkt 1fpkt"];
1041--5655[label="0.0833333;2pkt 2fpkt"];
1041--5749[label="0.0333333;1pkt 1fpkt"];
1041--5806[label="0.0357143;1pkt 1fpkt"];
1041--5882[label="0.025;1pkt 1fpkt"];
1041--5972[label="0.0416667;1pkt 1fpkt"];
1041--6577[label="0.0344828;1pkt 1fpkt"];
1041--6602[label="0.0357143;1pkt 1fpkt"];
1041--6636[label="0.025;1pkt 1fpkt"];
1069--3549[label="0.102657;85pkt 85fpkt"];
1069--4127[label="0.0666667;1pkt 1fpkt"];
1069--4325[label="0.037037;1pkt 1fpkt"];
1069--4369[label="0.037037;1pkt 1fpkt"];
1069--4378[label="0.0454545;1pkt 1fpkt"];
1069--4513[label="0.1;4pkt 4fpkt"];
1069--4588[label="0.09375;3pkt 3fpkt"];
1069--4777[label="0.04;1pkt 1fpkt"];
1069--4785[label="0.027027;1pkt 1fpkt"];
1069--4801[label="0.0555556;1pkt 1fpkt"];
1069--5209[label="0.0192308;1pkt 1fpkt"];
1069--5806[label="0.0357143;1pkt 1fpkt"];
1069--5814[label="0.0454545;1pkt 1fpkt"];
1069--6048[label="0.0416667;1pkt 1fpkt"];
1069--6163[label="0.0625;1pkt 1fpkt"];
1069--6602[label="0.0357143;1pkt 1fpkt"];
1069--6606[label="0.0454545;1pkt 1fpkt"];
1069--6769[label="0.0625;1pkt 1fpkt"];
1115--3540[label="0.0963855;24pkt 24fpkt"];
1115--3550[label="0.064257;16pkt 16fpkt"];
1115--3559[label="0.0160643;4pkt 4fpkt"];
1115--3562[label="0.064257;16pkt 16fpkt"];
1115--4062[label="0.285714;8pkt 8fpkt"];
1115--4091[label="0.25;6pkt 6fpkt"];
1115--4207[label="0.0625;1pkt 1fpkt"];
1115--4277[label="0.166667;5pkt 5fpkt"];
1115--4288[label="0.333333;8pkt 8fpkt"];
1115--4325[label="0.185185;5pkt 5fpkt"];
1115--4337[label="0.241379;7pkt 7fpkt"];
1115--4369[label="0.185185;5pkt 5fpkt"];
1115--4378[label="0.318182;7pkt 7fpkt"];
1115--4403[label="0.0666667;1pkt 1fpkt"];
1115--4513[label="0.175;7pkt 7fpkt"];
1115--4588[label="0.125;4pkt 4fpkt"];
1115--4777[label="0.2;5pkt 5fpkt"];
1115--4785[label="0.27027;10pkt 10fpkt"];
1115--4801[label="0.277778;5pkt 5fpkt"];
1115--4837[label="0.142857;3pkt 3fpkt"];
1115--4903[label="0.0625;1pkt 1fpkt"];
1115--4951[label="0.0666667;1pkt 1fpkt"];
1115--4968[label="0.0666667;1pkt 1fpkt"];
1115--5655[label="0.25;6pkt 6fpkt"];
1115--5715[label="0.0625;1pkt 1fpkt"];
1115--5749[label="0.166667;5pkt 5fpkt"];
1115--5783[label="0.241379;7pkt 7fpkt"];
1115--5806[label="0.178571;5pkt 5fpkt"];
1115--5814[label="0.318182;7pkt 7fpkt"];
1115--6048[label="0.208333;5pkt 5fpkt"];
1115--6163[label="0.0625;1pkt 1fpkt"];
1115--6577[label="0.172414;5pkt 5fpkt"];
1115--6602[label="0.178571;5pkt 5fpkt"];
1115--6606[label="0.318182;7pkt 7fpkt"];
1115--6769[label="0.0625;1pkt 1fpkt"];
1123--1239[label="0.666667;2pkt 2fpkt"];
1123--2840[label="0.666667;2pkt 2fpkt"];
1123--4127[label="0.2;3pkt 3fpkt"];
1123--4662[label="0.666667;2pkt 2fpkt"];
1123--5329[label="0.5;1pkt 1fpkt"];
1123--5977[label="1;2pkt 2fpkt"];
1123--6384[label="0.5;1pkt 1fpkt"];
1123--6865[label="0.5;1pkt 1fpkt"];
1156--1480[label="0.833333;10pkt 10fpkt"];
1156--1511[label="0.5;1pkt 1fpkt"];
1156--3540[label="0.0477941;13pkt 13fpkt"];
1156--3550[label="0.00735294;2pkt 2fpkt"];
1156--3559[label="0.0257353;7pkt 7fpkt"];
1156--3562[label="0.00735294;2pkt 2fpkt"];
1156--4062[label="0.178571;5pkt 5fpkt"];
1156--4091[label="0.0833333;2pkt 2fpkt"];
1156--4277[label="0.266667;8pkt 8fpkt"];
1156--4288[label="0.25;6pkt 6fpkt"];
1156--4325[label="0.185185;5pkt 5fpkt"];
1156--4337[label="0.206897;6pkt 6fpkt"];
1156--4369[label="0.259259;7pkt 7fpkt"];
1156--4378[label="0.227273;5pkt 5fpkt"];
1156--4513[label="0.175;7pkt 7fpkt"];
1156--4588[label="0.15625;5pkt 5fpkt"];
1156--4777[label="0.2;5pkt 5fpkt"];
1156--4785[label="0.135135;5pkt 5fpkt"];
1156--4801[label="0.222222;4pkt 4fpkt"];
1156--4815[label="0.9375;15pkt 15fpkt"];
1156--4837[label="0.238095;5pkt 5fpkt"];
1156--4903[label="0.0625;1pkt 1fpkt"];
1156--4982[label="0.0555556;1pkt 1fpkt"];
1156--5655[label="0.0833333;2pkt 2fpkt"];
1156--5741[label="0.5;1pkt 1fpkt"];
1156--5749[label="0.266667;8pkt 8fpkt"];
1156--5783[label="0.206897;6pkt 6fpkt"];
1156--5806[label="0.25;7pkt 7fpkt"];
1156--5814[label="0.227273;5pkt 5fpkt"];
1156--6048[label="0.208333;5pkt 5fpkt"];
1156--6070[label="0.9375;15pkt 15fpkt"];
1156--6577[label="0.275862;8pkt 8fpkt"];
1156--6602[label="0.25;7pkt 7fpkt"];
1156--6606[label="0.227273;5pkt 5fpkt"];
1156--6726[label="0.9375;15pkt 15fpkt"];
1239--2840[label="1;3pkt 3fpkt"];
1239--4662[label="1;3pkt 3fpkt"];
1239--5977[label="1;2pkt 2fpkt"];
1480--2559[label="0.166667;2pkt 2fpkt"];
1480--3450[label="0.166667;2pkt 2fpkt"];
1480--3559[label="0.0833333;1pkt 1fpkt"];
2194--3549[label="0.0628743;21pkt 21fpkt"];
2194--3559[label="0.00299401;1pkt 1fpkt"];
2194--4127[label="0.0666667;1pkt 1fpkt"];
2194--4337[label="0.0689655;2pkt 2fpkt"];
2194--4777[label="0.04;1pkt 1fpkt"];
2194--5783[label="0.0689655;2pkt 2fpkt"];
2194--6048[label="0.0416667;1pkt 1fpkt"];
2453--3540[label="0.135593;8pkt 8fpkt"];
2453--3559[label="0.169492;10pkt 10fpkt"];
2453--4062[label="0.0357143;1pkt 1fpkt"];
2453--4091[label="0.125;3pkt 3fpkt"];
2453--4369[label="0.037037;1pkt 1fpkt"];
2453--4378[label="0.136364;3pkt 3fpkt"];
2453--4513[label="0.025;1pkt 1fpkt"];
2453--4777[label="0.08;2pkt 2fpkt"];
2453--4785[label="0.027027;1pkt 1fpkt"];
2453--5655[label="0.125;3pkt 3fpkt"];
2453--5806[label="0.0714286;2pkt 2fpkt"];
2453--5814[label="0.136364;3pkt 3fpkt"];
2453--6048[label="0.0416667;1pkt 1fpkt"];
2453--6602[label="0.0714286;2pkt 2fpkt"];
2453--6606[label="0.136364;3pkt 3fpkt"];
2840--4662[label="1;3pkt 3fpkt"];
2840--5977[label="1;2pkt 2fpkt"];
4091--5655[label="1;24pkt 24fpkt"];
4277--5749[label="1;30pkt 30fpkt"];
4277--6577[label="1;29pkt 29fpkt"];
4337--5783[label="1;29pkt 29fpkt"];
4369--5806[label="1;27pkt 27fpkt"];
4369--6602[label="1;27pkt 27fpkt"];
4378--5814[label="1;22pkt 22fpkt"];
4378--6606[label="1;22pkt 22fpkt"];
4662--5977[label="1;2pkt 2fpkt"];
4777--6048[label="1;24pkt 24fpkt"];
4815--6070[label="1;16pkt 16fpkt"];
4815--6726[label="1;16pkt 16fpkt"];
5329--6384[label="1;2pkt 2fpkt"];
5329--6865[label="1;2pkt 2fpkt"];
5749--6577[label="1;29pkt 29fpkt"];
5806--6602[label="1;28pkt 28fpkt"];
5814--6606[label="1;22pkt 22fpkt"];
6070--6726[label="1;16pkt 16fpkt"];
6384--6865[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="200.124.247.37" dst_port="53"/>
      <filter dst_ip="201.242.147.34" dst_port="53"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
5344[label="129.0.67.253;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6392[label="129.0.67.253;13pkt 13fpkt", shape=invtriangle, color=brown];
6870[label="129.0.67.253;13pkt 13fpkt", shape=invhouse, color=bisque];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.67.253:*, 94.16.40.137:80}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49276: (3.94737%)&lt;BR/&gt; 49275: (3.94737%)&lt;BR/&gt; 49274: (3.94737%)&lt;BR/&gt; 49273: (3.94737%)&gt;];
}
5344--6392[label="1;12pkt 12fpkt"];
5344--6870[label="1;12pkt 12fpkt"];
6392--6870[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="94.16.40.137" dst_port="80" src_ip="129.0.67.253"/>
    </slice>
    <from sec="1107321048" usec="0"/>
    <to sec="1107321051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.159.64.1"/>
    </slice>
    <from sec="1107320435" usec="0"/>
    <to sec="1107321292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.137.138.2"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.166.5"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.150.211.11"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.208.1.19"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.137.130.23"/>
    </slice>
    <from sec="1107320426" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.104.146.23"/>
    </slice>
    <from sec="1107320419" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.176.243.24"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.166.216.28"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.246.36.36"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790882,1.85461,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
5551[label="218.41.111.41;105pkt 105fpkt", shape=invtriangle, color=brown];
6490[label="218.41.111.41;106pkt 106fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.41.111.41:*, *:3306}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3306: (50%)&lt;BR/&gt; 4014: (0.947867%)&lt;BR/&gt; 2105: (0.947867%)&lt;BR/&gt; 4974: (0.473934%)&lt;BR/&gt; 4956: (0.473934%)&gt;];
}
5551--6490[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="3306" src_ip="218.41.111.41"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107321295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04321,1.71352,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
711[label="129.1.121.139;s;193pkt 193fpkt", shape=diamond, color=yellow];
895[label="129.1.162.212;s;110pkt 110fpkt", shape=diamond, color=yellow];
918[label="129.1.162.28;s;600pkt 600fpkt", shape=diamond, color=yellow];
928[label="88.209.108.15;d;62pkt 62fpkt", shape=diamond, color=yellow];
1016[label="207.19.205.66;d;143pkt 143fpkt", shape=diamond, color=yellow];
1201[label="195.169.215.78;d;292pkt 292fpkt", shape=diamond, color=yellow];
1428[label="220.208.228.235;d;54pkt 54fpkt", shape=diamond, color=yellow];
1986[label="207.19.205.169;d;111pkt 111fpkt", shape=diamond, color=yellow];
2192[label="161.69.42.47;s;123pkt 123fpkt", shape=diamond, color=yellow];
2222[label="93.152.134.64;d;112pkt 112fpkt", shape=diamond, color=yellow];
2240[label="204.99.13.63;d;21pkt 21fpkt", shape=diamond, color=yellow];
2596[label="129.1.121.139;s;116pkt 116fpkt", shape=hexagon, color=black];
2831[label="195.169.215.78;d;94pkt 94fpkt", shape=hexagon, color=black];
2874[label="207.19.205.66;d;103pkt 103fpkt", shape=hexagon, color=black];
3279[label="129.1.162.28;s;533pkt 533fpkt", shape=hexagon, color=black];
3410[label="204.99.13.63;d;21pkt 21fpkt", shape=hexagon, color=black];
3573[label="129.0.95.0;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3587[label="129.1.171.2;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3804[label="129.1.162.28;636pkt 636fpkt", shape=pentagon, color=darkviolet];
3935[label="129.1.156.43;74pkt 74fpkt", shape=pentagon, color=darkviolet];
4599[label="129.1.121.139;199pkt 199fpkt", shape=pentagon, color=darkviolet];
4754[label="129.1.83.161;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5559[label="129.1.156.43;74pkt 74fpkt", shape=invtriangle, color=brown];
6035[label="129.1.83.161;14pkt 14fpkt", shape=invtriangle, color=brown];
6497[label="161.69.42.47;143pkt 143fpkt", shape=invhouse, color=bisque];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.1.162.28:*, 195.169.215.78:80}[23.908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.411%)&lt;BR/&gt; 25: (0.294494%)&lt;BR/&gt; 443: (0.153649%)&lt;BR/&gt; 42633: (0.115237%)&lt;BR/&gt; 42328: (0.115237%)&gt;];
}
711--1016[label="0.888112;127pkt 127fpkt"];
711--1333[label="0.0357143;2pkt 2fpkt"];
711--1587[label="0.0384615;2pkt 2fpkt"];
711--2596[label="1;116pkt 116fpkt"];
711--2874[label="0.854369;88pkt 88fpkt"];
711--3540[label="0.0777202;15pkt 15fpkt"];
711--3550[label="0.0518135;10pkt 10fpkt"];
711--3559[label="0.0984456;19pkt 19fpkt"];
711--3562[label="0.0518135;10pkt 10fpkt"];
711--4599[label="1;193pkt 193fpkt"];
895--1428[label="0.222222;12pkt 12fpkt"];
895--1785[label="0.0181818;2pkt 2fpkt"];
895--2199[label="0.00909091;1pkt 1fpkt"];
895--2222[label="0.136364;15pkt 15fpkt"];
895--2240[label="0.809524;17pkt 17fpkt"];
895--3371[label="0.0181818;2pkt 2fpkt"];
895--3383[label="0.00909091;1pkt 1fpkt"];
895--3410[label="0.809524;17pkt 17fpkt"];
895--3540[label="0.0727273;8pkt 8fpkt"];
895--3550[label="0.0545455;6pkt 6fpkt"];
895--3559[label="0.0636364;7pkt 7fpkt"];
895--3562[label="0.0545455;6pkt 6fpkt"];
918--928[label="1;62pkt 62fpkt"];
918--1201[label="1;292pkt 292fpkt"];
918--1428[label="0.777778;42pkt 42fpkt"];
918--2130[label="0.0135135;1pkt 1fpkt"];
918--2831[label="1;94pkt 94fpkt"];
918--3279[label="1;533pkt 533fpkt"];
918--3540[label="0.0716667;43pkt 43fpkt"];
918--3550[label="0.0833333;50pkt 50fpkt"];
918--3559[label="0.07;42pkt 42fpkt"];
918--3562[label="0.0833333;50pkt 50fpkt"];
918--3804[label="1;600pkt 600fpkt"];
928--3279[label="1;62pkt 62fpkt"];
928--3540[label="0.193548;12pkt 12fpkt"];
928--3550[label="0.274194;17pkt 17fpkt"];
928--3562[label="0.274194;17pkt 17fpkt"];
928--3804[label="1;62pkt 62fpkt"];
1016--1128[label="0.0116279;1pkt 1fpkt"];
1016--2596[label="0.982759;114pkt 114fpkt"];
1016--2874[label="1;103pkt 103fpkt"];
1016--2906[label="0.0188679;1pkt 1fpkt"];
1016--2924[label="0.0172414;2pkt 2fpkt"];
1016--3540[label="0.118881;17pkt 17fpkt"];
1016--3550[label="0.0979021;14pkt 14fpkt"];
1016--3559[label="0.125874;18pkt 18fpkt"];
1016--3562[label="0.0979021;14pkt 14fpkt"];
1016--3573[label="0.258065;8pkt 8fpkt"];
1016--3587[label="0.09375;3pkt 3fpkt"];
1016--4599[label="0.888112;127pkt 127fpkt"];
1201--2831[label="1;94pkt 94fpkt"];
1201--3279[label="0.863014;252pkt 252fpkt"];
1201--3540[label="0.0684932;20pkt 20fpkt"];
1201--3550[label="0.0684932;20pkt 20fpkt"];
1201--3559[label="0.0719178;21pkt 21fpkt"];
1201--3562[label="0.0684932;20pkt 20fpkt"];
1201--3804[label="1;292pkt 292fpkt"];
1428--3279[label="0.777778;42pkt 42fpkt"];
1428--3540[label="0.0555556;3pkt 3fpkt"];
1428--3550[label="0.037037;2pkt 2fpkt"];
1428--3559[label="0.111111;6pkt 6fpkt"];
1428--3562[label="0.037037;2pkt 2fpkt"];
1428--3804[label="0.777778;42pkt 42fpkt"];
1986--2192[label="0.207207;23pkt 23fpkt"];
1986--2510[label="0.016129;1pkt 1fpkt"];
1986--2962[label="0.00900901;1pkt 1fpkt"];
1986--3499[label="0.00900901;1pkt 1fpkt"];
1986--3540[label="0.045045;5pkt 5fpkt"];
1986--3550[label="0.0720721;8pkt 8fpkt"];
1986--3562[label="0.0720721;8pkt 8fpkt"];
1986--3587[label="0.03125;1pkt 1fpkt"];
1986--3682[label="0.0833333;1pkt 1fpkt"];
1986--3935[label="0.905405;67pkt 67fpkt"];
1986--5415[label="0.0769231;1pkt 1fpkt"];
1986--5559[label="0.905405;67pkt 67fpkt"];
1986--6497[label="0.198198;22pkt 22fpkt"];
2192--2222[label="0.464286;52pkt 52fpkt"];
2192--2431[label="0.0425532;2pkt 2fpkt"];
2192--3540[label="0.0243902;3pkt 3fpkt"];
2192--3550[label="0.0325203;4pkt 4fpkt"];
2192--3559[label="0.0243902;3pkt 3fpkt"];
2192--3562[label="0.0325203;4pkt 4fpkt"];
2192--6497[label="0.98374;121pkt 121fpkt"];
2222--2962[label="0.0625;7pkt 7fpkt"];
2222--3499[label="0.0625;7pkt 7fpkt"];
2222--3540[label="0.0267857;3pkt 3fpkt"];
2222--3559[label="0.0178571;2pkt 2fpkt"];
2222--4097[label="0.00892857;1pkt 1fpkt"];
2222--4122[label="0.00892857;1pkt 1fpkt"];
2222--4622[label="0.0535714;6pkt 6fpkt"];
2222--4754[label="0.714286;10pkt 10fpkt"];
2222--5659[label="0.00892857;1pkt 1fpkt"];
2222--6035[label="0.714286;10pkt 10fpkt"];
2222--6497[label="0.464286;52pkt 52fpkt"];
2222--6536[label="0.00892857;1pkt 1fpkt"];
2240--3221[label="0.047619;1pkt 1fpkt"];
2240--3410[label="1;21pkt 21fpkt"];
2240--3540[label="0.047619;1pkt 1fpkt"];
2240--3550[label="0.0952381;2pkt 2fpkt"];
2240--3562[label="0.0952381;2pkt 2fpkt"];
2240--3732[label="0.047619;1pkt 1fpkt"];
2240--5446[label="0.047619;1pkt 1fpkt"];
2596--2874[label="0.854369;88pkt 88fpkt"];
2596--3540[label="0.12931;15pkt 15fpkt"];
2596--3550[label="0.0862069;10pkt 10fpkt"];
2596--3559[label="0.163793;19pkt 19fpkt"];
2596--3562[label="0.0862069;10pkt 10fpkt"];
2596--4599[label="1;116pkt 116fpkt"];
2831--3279[label="1;94pkt 94fpkt"];
2831--3540[label="0.212766;20pkt 20fpkt"];
2831--3550[label="0.212766;20pkt 20fpkt"];
2831--3559[label="0.0425532;4pkt 4fpkt"];
2831--3562[label="0.212766;20pkt 20fpkt"];
2831--3804[label="1;94pkt 94fpkt"];
2874--2906[label="0.0188679;1pkt 1fpkt"];
2874--2924[label="0.00970874;1pkt 1fpkt"];
2874--3540[label="0.165049;17pkt 17fpkt"];
2874--3550[label="0.135922;14pkt 14fpkt"];
2874--3559[label="0.174757;18pkt 18fpkt"];
2874--3562[label="0.135922;14pkt 14fpkt"];
2874--3573[label="0.258065;8pkt 8fpkt"];
2874--3587[label="0.09375;3pkt 3fpkt"];
2874--4599[label="0.854369;88pkt 88fpkt"];
3279--3540[label="0.0806754;43pkt 43fpkt"];
3279--3550[label="0.0938086;50pkt 50fpkt"];
3279--3559[label="0.0787992;42pkt 42fpkt"];
3279--3562[label="0.0938086;50pkt 50fpkt"];
3279--3804[label="1;533pkt 533fpkt"];
3410--3540[label="0.047619;1pkt 1fpkt"];
3410--3550[label="0.0952381;2pkt 2fpkt"];
3410--3562[label="0.0952381;2pkt 2fpkt"];
3410--3732[label="0.047619;1pkt 1fpkt"];
3410--5446[label="0.047619;1pkt 1fpkt"];
3935--5559[label="1;74pkt 74fpkt"];
4754--6035[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="195.169.215.78" dst_port="80" src_ip="129.1.162.28"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790882,1.85461,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
5601[label="26.129.84.54;4pkt 4fpkt", shape=invtriangle, color=brown];
6509[label="26.129.84.54;4pkt 4fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.129.84.54:3868, 200.124.249.36:554}[25%]&lt;BR/&gt;{26.129.84.54:3869, 200.124.249.36:554}[25%]&lt;BR/&gt;{26.129.84.54:3870, 200.124.249.36:1755}[25%]&lt;BR/&gt;{26.129.84.54:3871, 200.124.249.36:1755}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (25%)&lt;BR/&gt; 554: (25%)&lt;BR/&gt; 3871: (12.5%)&lt;BR/&gt; 3870: (12.5%)&lt;BR/&gt; 3869: (12.5%)&gt;];
}
5601--6509[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="200.124.249.36" dst_port="1755" src_ip="26.129.84.54" src_port="3871"/>
      <filter dst_ip="200.124.249.36" dst_port="1755" src_ip="26.129.84.54" src_port="3870"/>
      <filter dst_ip="200.124.249.36" dst_port="554" src_ip="26.129.84.54" src_port="3869"/>
      <filter dst_ip="200.124.249.36" dst_port="554" src_ip="26.129.84.54" src_port="3868"/>
    </slice>
    <from sec="1107321248" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.665933,1.83406,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
4076[label="201.80.17.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6529[label="201.80.17.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.80.17.66:80, 129.0.37.235:1220}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1220: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4076--6529[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.0.37.235" dst_port="1220" src_ip="201.80.17.66" src_port="80"/>
    </slice>
    <from sec="1107321071" usec="0"/>
    <to sec="1107321109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.72756,1.79178,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
4096[label="129.0.137.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5658[label="129.0.137.68;1pkt 1fpkt", shape=invtriangle, color=brown];
6535[label="129.0.137.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.137.68:63959, 95.211.206.0:80}[50%]&lt;BR/&gt;{129.0.137.68:62468, 192.168.126.1:2250}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62468: (37.5%)&lt;BR/&gt; 2250: (37.5%)&lt;BR/&gt; 63959: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
4096--5658[label="1;1pkt 1fpkt"];
4096--6535[label="1;1pkt 1fpkt"];
5658--6535[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.126.1" dst_port="2250" src_ip="129.0.137.68" src_port="62468"/>
      <filter dst_ip="95.211.206.0" dst_port="80" src_ip="129.0.137.68" src_port="63959"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.191.208.75"/>
    </slice>
    <from sec="1107320735" usec="0"/>
    <to sec="1107320861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.91.181.76"/>
    </slice>
    <from sec="1107320433" usec="0"/>
    <to sec="1107321232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.182.84.77"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.222.234.82"/>
    </slice>
    <from sec="1107320504" usec="0"/>
    <to sec="1107320524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.1.203.83"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.5.121.87"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.231.88"/>
    </slice>
    <from sec="1107320470" usec="0"/>
    <to sec="1107321258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.9.37.94"/>
    </slice>
    <from sec="1107321032" usec="0"/>
    <to sec="1107321082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790882,1.85461,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
5791[label="133.63.115.99;4pkt 4fpkt", shape=invtriangle, color=brown];
6594[label="133.63.115.99;4pkt 4fpkt", shape=invhouse, color=bisque];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.63.115.99:1509, 93.156.112.27:80}[25%]&lt;BR/&gt;{133.63.115.99:1519, 93.156.112.36:80}[25%]&lt;BR/&gt;{133.63.115.99:1481, 206.185.33.45:1863}[25%]&lt;BR/&gt;{133.63.115.99:1442, 206.185.36.200:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1519: (12.5%)&lt;BR/&gt; 1509: (12.5%)&lt;BR/&gt; 1481: (12.5%)&gt;];
}
5791--6594[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="206.185.36.200" dst_port="1863" src_ip="133.63.115.99" src_port="1442"/>
      <filter dst_ip="206.185.33.45" dst_port="1863" src_ip="133.63.115.99" src_port="1481"/>
      <filter dst_ip="93.156.112.36" dst_port="80" src_ip="133.63.115.99" src_port="1519"/>
      <filter dst_ip="93.156.112.27" dst_port="80" src_ip="133.63.115.99" src_port="1509"/>
    </slice>
    <from sec="1107320404" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.145.244.105"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107320655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.35.163.121"/>
    </slice>
    <from sec="1107320442" usec="0"/>
    <to sec="1107321293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.98.136.123"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790882,1.85461,504,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
5896[label="129.0.52.130;30pkt 30fpkt", shape=invtriangle, color=brown];
6644[label="129.0.52.130;30pkt 30fpkt", shape=invhouse, color=bisque];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.52.130:443, 42.199.88.174:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1412: (1.66667%)&lt;BR/&gt; 1411: (1.66667%)&lt;BR/&gt; 1410: (1.66667%)&lt;BR/&gt; 1409: (1.66667%)&gt;];
}
5896--6644[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="42.199.88.174" src_ip="129.0.52.130" src_port="443"/>
    </slice>
    <from sec="1107321179" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.94.234.130"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.170.103.135"/>
    </slice>
    <from sec="1107320434" usec="0"/>
    <to sec="1107321289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.148.142"/>
    </slice>
    <from sec="1107320476" usec="0"/>
    <to sec="1107321297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.210.154"/>
    </slice>
    <from sec="1107320414" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.53.48.155"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107321294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.219.89.157"/>
    </slice>
    <from sec="1107320817" usec="0"/>
    <to sec="1107320823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.0.49.160"/>
    </slice>
    <from sec="1107320403" usec="0"/>
    <to sec="1107321298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="94.9.200.163"/>
    </slice>
    <from sec="1107320778" usec="0"/>
    <to sec="1107320784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.36.169.170"/>
    </slice>
    <from sec="1107320805" usec="0"/>
    <to sec="1107320950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="139.91.96.180"/>
    </slice>
    <from sec="1107320406" usec="0"/>
    <to sec="1107320671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.34.152.182"/>
    </slice>
    <from sec="1107321259" usec="0"/>
    <to sec="1107321285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.231.58.184"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.220.192"/>
    </slice>
    <from sec="1107320415" usec="0"/>
    <to sec="1107321057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.848839,1.74512,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
2507[label="148.189.11.22;d;232pkt 232fpkt", shape=diamond, color=yellow];
2539[label="220.203.44.197;s;200pkt 200fpkt", shape=diamond, color=yellow];
5198[label="193.205.72.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6304[label="193.205.72.228;4pkt 4fpkt", shape=invtriangle, color=brown];
6773[label="220.203.44.197;429pkt 429fpkt", shape=invhouse, color=bisque];
6830[label="193.205.72.228;4pkt 4fpkt", shape=invhouse, color=bisque];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.203.44.197:*, 148.189.11.22:80}[29.2842%]&lt;BR/&gt;{*:80, 148.189.11.22:*}[20.3905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.7159%)&lt;BR/&gt; 53: (3.60825%)&lt;BR/&gt; 4000: (1.94731%)&lt;BR/&gt; 135: (1.89003%)&lt;BR/&gt; 6881: (1.14548%)&gt;];
}
2507--2539[label="1;200pkt 200fpkt"];
2507--5198[label="1;4pkt 4fpkt"];
2507--6304[label="1;4pkt 4fpkt"];
2507--6773[label="0.862069;200pkt 200fpkt"];
2507--6830[label="1;4pkt 4fpkt"];
2539--6773[label="1;200pkt 200fpkt"];
5198--6304[label="1;4pkt 4fpkt"];
5198--6830[label="1;4pkt 4fpkt"];
6304--6830[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.189.11.22" src_port="80"/>
      <filter dst_ip="148.189.11.22" dst_port="80" src_ip="220.203.44.197"/>
    </slice>
    <from sec="1107321052" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.142.136.198"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.155.30.199"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.111.178.200"/>
    </slice>
    <from sec="1107320870" usec="0"/>
    <to sec="1107320921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.8.27.207"/>
    </slice>
    <from sec="1107320418" usec="0"/>
    <to sec="1107321270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.6.216.211"/>
    </slice>
    <from sec="1107320400" usec="0"/>
    <to sec="1107320563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.172.42.214"/>
    </slice>
    <from sec="1107320410" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.148.216"/>
    </slice>
    <from sec="1107321301" usec="0"/>
    <to sec="1107321302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.148.218"/>
    </slice>
    <from sec="1107320402" usec="0"/>
    <to sec="1107321300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.80.143.223"/>
    </slice>
    <from sec="1107320401" usec="0"/>
    <to sec="1107321299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.238.129.225"/>
    </slice>
    <from sec="1107320466" usec="0"/>
    <to sec="1107320667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734587,1.8955,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.167.5.236"/>
    </slice>
    <from sec="1107320925" usec="0"/>
    <to sec="1107320936" usec="0"/>
  </anomaly>

</admd:annotation>
