<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.86091,1.7829,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.109.19.93" dst_port="80" proto="tcp" src_ip="148.177.112.73" src_port="3199"/>
      <filter dst_ip="76.109.19.93" dst_port="80" proto="tcp" src_ip="148.177.112.73" src_port="3198"/>
      <filter dst_ip="76.109.19.93" dst_port="80" proto="tcp" src_ip="148.177.112.73" src_port="3197"/>
      <filter dst_ip="76.109.19.93" dst_port="80" proto="tcp" src_ip="148.177.112.73" src_port="3196"/>
      <filter dst_ip="76.109.19.93" dst_port="80" proto="tcp" src_ip="148.177.112.73" src_port="3195"/>
      <from sec="1109826885" usec="0"/>
      <to sec="1109826891" usec="0"/>
    </slice>
    <from sec="1109826885" usec="0"/>
    <to sec="1109826892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="23.24.200.84" dst_port="80" proto="tcp" src_ip="169.28.49.177" src_port="1086"/>
      <filter dst_ip="23.24.200.84" dst_port="80" proto="tcp" src_ip="169.28.49.177" src_port="1086"/>
      <filter dst_ip="23.24.200.84" dst_port="80" proto="tcp" src_ip="169.28.49.177" src_port="1086"/>
      <filter dst_ip="23.24.200.84" dst_port="80" proto="tcp" src_ip="169.28.49.177" src_port="1086"/>
      <from sec="1109826874" usec="0"/>
      <to sec="1109826889" usec="0"/>
    </slice>
    <from sec="1109826874" usec="0"/>
    <to sec="1109826889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826901" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="tcp" src_ip="213.187.116.16" src_port="62362"/>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="udp" src_ip="213.187.116.16" src_port="62362"/>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="tcp" src_ip="213.187.116.16" src_port="80"/>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="udp" src_ip="213.187.116.16" src_port="80"/>
      <from sec="1109826503" usec="0"/>
      <to sec="1109826520" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="tcp" src_ip="213.12.44.16" src_port="62362"/>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="udp" src_ip="213.12.44.16" src_port="62362"/>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="tcp" src_ip="213.12.44.16" src_port="80"/>
      <filter dst_ip="130.54.81.16" dst_port="137" proto="udp" src_ip="213.12.44.16" src_port="80"/>
      <from sec="1109826505" usec="0"/>
      <to sec="1109826509" usec="0"/>
    </slice>
    <from sec="1109826503" usec="0"/>
    <to sec="1109826520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.87.129.63" src_port="1432"/>
      <from sec="1109826477" usec="0"/>
      <to sec="1109826480" usec="0"/>
    </slice>
    <from sec="1109826477" usec="0"/>
    <to sec="1109826480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="73.245.139.133" src_port="1060"/>
      <filter dst_port="137" proto="udp" src_ip="73.245.139.133" src_port="1060"/>
      <filter dst_port="80" proto="tcp" src_ip="73.245.139.133" src_port="1060"/>
      <filter dst_port="80" proto="udp" src_ip="73.245.139.133" src_port="1060"/>
      <from sec="1109826893" usec="0"/>
      <to sec="1109826900" usec="0"/>
    </slice>
    <from sec="1109826893" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="221.27.178.136" src_port="62469"/>
      <from sec="1109826353" usec="0"/>
      <to sec="1109826361" usec="0"/>
    </slice>
    <from sec="1109826353" usec="0"/>
    <to sec="1109826361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="20.211.173.140" src_port="61630"/>
      <filter dst_port="137" proto="udp" src_ip="20.211.173.140" src_port="61630"/>
      <filter dst_port="80" proto="tcp" src_ip="20.211.173.140" src_port="61630"/>
      <filter dst_port="80" proto="udp" src_ip="20.211.173.140" src_port="61630"/>
      <from sec="1109826100" usec="0"/>
      <to sec="1109826107" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="148.177.201.140" src_port="61630"/>
      <filter dst_port="137" proto="udp" src_ip="148.177.201.140" src_port="61630"/>
      <filter dst_port="80" proto="tcp" src_ip="148.177.201.140" src_port="61630"/>
      <filter dst_port="80" proto="udp" src_ip="148.177.201.140" src_port="61630"/>
      <from sec="1109826100" usec="0"/>
      <to sec="1109826103" usec="0"/>
    </slice>
    <from sec="1109826100" usec="0"/>
    <to sec="1109826107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="220.205.186.226" src_port="1086"/>
      <from sec="1109826835" usec="0"/>
      <to sec="1109826850" usec="0"/>
    </slice>
    <from sec="1109826835" usec="0"/>
    <to sec="1109826850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1433" proto="tcp" src_ip="209.33.73.163"/>
      <from sec="1109826890" usec="0"/>
      <to sec="1109826900" usec="0"/>
    </slice>
    <from sec="1109826890" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="20.0.201.175"/>
      <from sec="1109826649" usec="0"/>
      <to sec="1109826653" usec="0"/>
    </slice>
    <from sec="1109826649" usec="0"/>
    <to sec="1109826654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.154.54.54" proto="icmp"/>
      <filter dst_ip="193.154.54.54" proto="icmp"/>
      <filter dst_ip="193.154.54.54" proto="icmp"/>
      <filter dst_ip="193.154.54.54" proto="icmp"/>
      <from sec="1109826071" usec="0"/>
      <to sec="1109826084" usec="0"/>
    </slice>
    <from sec="1109826071" usec="0"/>
    <to sec="1109826084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="tcp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="udp" src_ip="144.224.85.74" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="tcp" src_ip="144.224.85.74" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="udp" src_ip="144.224.85.74" src_port="1027"/>
      <from sec="1109826835" usec="0"/>
      <to sec="1109826843" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="tcp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="udp" src_ip="148.177.197.123" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="tcp" src_ip="148.177.197.123" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="udp" src_ip="148.177.197.123" src_port="1027"/>
      <from sec="1109826836" usec="0"/>
      <to sec="1109826843" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="80" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="443" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="137" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.207.166" dst_port="1434" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="tcp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="udp" src_ip="74.40.163.121" src_port="1036"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="80" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="443" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="137" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="tcp" src_ip="74.40.163.121" src_port="1027"/>
      <filter dst_ip="197.84.146.21" dst_port="1434" proto="udp" src_ip="74.40.163.121" src_port="1027"/>
      <from sec="1109826836" usec="0"/>
      <to sec="1109826842" usec="0"/>
    </slice>
    <from sec="1109826835" usec="0"/>
    <to sec="1109826843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.977601,1.81541,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826901" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18063,1.7801,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
167[label="41.213.109.88d;174pkt 174fpkt", shape=rectangle, color=red];
290[label="41.213.109.88d;174pkt 174fpkt", shape=ellipse, color=green];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 41.213.109.88:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
167--290[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.109.88"/>
    </slice>
    <from sec="1109826067" usec="0"/>
    <to sec="1109826072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05986,1.84452,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <filter dst_ip="20.171.83.139" proto="icmp" src_ip="20.171.83.139"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826901" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
74[label="195.179.58.133s;256pkt 256fpkt", shape=rectangle, color=red];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.179.58.133:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
74--205[label="1;256pkt 256fpkt"];
74--304[label="1;212pkt 212fpkt"];
74--3681[label="1;256pkt 256fpkt"];
74--4626[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.179.58.133" src_port="1025"/>
    </slice>
    <from sec="1109826757" usec="0"/>
    <to sec="1109826772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05986,1.84452,503,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="135" proto="tcp" src_ip="220.238.117.169" src_port="80"/>
      <filter dst_ip="130.54.26.24" dst_port="80" proto="tcp" src_ip="220.238.117.169" src_port="80"/>
      <filter dst_ip="130.54.26.24" dst_port="4984" proto="tcp" src_ip="220.238.117.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="135" proto="tcp" src_ip="220.238.117.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="80" proto="tcp" src_ip="220.238.117.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="4984" proto="tcp" src_ip="220.238.117.169" src_port="80"/>
      <from sec="1109826059" usec="0"/>
      <to sec="1109826066" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="135" proto="tcp" src_ip="20.224.169.169" src_port="80"/>
      <filter dst_ip="130.54.26.24" dst_port="80" proto="tcp" src_ip="20.224.169.169" src_port="80"/>
      <filter dst_ip="130.54.26.24" dst_port="4984" proto="tcp" src_ip="20.224.169.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="135" proto="tcp" src_ip="20.224.169.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="80" proto="tcp" src_ip="20.224.169.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="4984" proto="tcp" src_ip="20.224.169.169" src_port="80"/>
      <from sec="1109826059" usec="0"/>
      <to sec="1109826065" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="135" proto="tcp" src_ip="214.182.133.169" src_port="80"/>
      <filter dst_ip="130.54.26.24" dst_port="80" proto="tcp" src_ip="214.182.133.169" src_port="80"/>
      <filter dst_ip="130.54.26.24" dst_port="4984" proto="tcp" src_ip="214.182.133.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="135" proto="tcp" src_ip="214.182.133.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="80" proto="tcp" src_ip="214.182.133.169" src_port="80"/>
      <filter dst_ip="144.224.70.117" dst_port="4984" proto="tcp" src_ip="214.182.133.169" src_port="80"/>
      <from sec="1109826064" usec="0"/>
      <to sec="1109826066" usec="0"/>
    </slice>
    <from sec="1109826059" usec="0"/>
    <to sec="1109826066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
387[label="194.76.179.98;s;3253pkt 3253fpkt", shape=diamond, color=yellow];
1294[label="196.70.38.183;d;47pkt 47fpkt", shape=diamond, color=yellow];
1542[label="148.176.176.206;s;61pkt 61fpkt", shape=diamond, color=yellow];
1595[label="197.84.146.76;d;32pkt 32fpkt", shape=diamond, color=yellow];
3835[label="169.28.80.164;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3929[label="169.28.153.185;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4028[label="148.176.176.206;129pkt 129fpkt", shape=pentagon, color=darkviolet];
4231[label="148.176.159.2;45pkt 45fpkt", shape=invtriangle, color=brown];
4714[label="169.28.80.164;39pkt 39fpkt", shape=invtriangle, color=brown];
4764[label="169.28.153.185;6pkt 6fpkt", shape=invtriangle, color=brown];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.76.179.98:*, *:80}[90.7246%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3867%)&lt;BR/&gt; 33873: (0.574241%)&lt;BR/&gt; 443: (0.533224%)&lt;BR/&gt; 0: (0.191414%)&lt;BR/&gt; 2082: (0.136724%)&gt;];
}
387--474[label="0.111369;48pkt 48fpkt"];
387--537[label="0.482821;267pkt 267fpkt"];
387--572[label="0.00103734;1pkt 1fpkt"];
387--639[label="0.00333333;1pkt 1fpkt"];
387--735[label="0.0489691;152pkt 152fpkt"];
387--737[label="0.00348432;1pkt 1fpkt"];
387--793[label="0.332454;126pkt 126fpkt"];
387--802[label="0.00966184;2pkt 2fpkt"];
387--967[label="0.346835;137pkt 137fpkt"];
387--1009[label="0.0132159;3pkt 3fpkt"];
387--1106[label="0.0160428;3pkt 3fpkt"];
387--1179[label="0.3;24pkt 24fpkt"];
387--1206[label="0.308219;45pkt 45fpkt"];
387--1213[label="0.322581;30pkt 30fpkt"];
387--1277[label="0.00446429;1pkt 1fpkt"];
387--1279[label="0.368664;80pkt 80fpkt"];
387--1289[label="0.468085;22pkt 22fpkt"];
387--1294[label="0.0212766;1pkt 1fpkt"];
387--1323[label="0.37931;44pkt 44fpkt"];
387--1341[label="0.292398;50pkt 50fpkt"];
387--1431[label="0.0162162;3pkt 3fpkt"];
387--1436[label="0.341176;29pkt 29fpkt"];
387--1476[label="0.722222;26pkt 26fpkt"];
387--1478[label="0.0212766;1pkt 1fpkt"];
387--1492[label="0.00763359;1pkt 1fpkt"];
387--1582[label="0.197644;453pkt 453fpkt"];
387--1595[label="0.03125;1pkt 1fpkt"];
387--1667[label="0.0178571;2pkt 2fpkt"];
387--1745[label="0.0428571;9pkt 9fpkt"];
387--1753[label="0.13986;20pkt 20fpkt"];
387--1764[label="0.145161;9pkt 9fpkt"];
387--1779[label="0.0212766;2pkt 2fpkt"];
387--1787[label="0.354167;34pkt 34fpkt"];
387--1788[label="0.184211;7pkt 7fpkt"];
387--1792[label="0.262626;26pkt 26fpkt"];
387--1838[label="0.308824;21pkt 21fpkt"];
387--1940[label="0.0222222;2pkt 2fpkt"];
387--1961[label="0.16;12pkt 12fpkt"];
387--1979[label="0.0166667;1pkt 1fpkt"];
387--1982[label="0.0126582;1pkt 1fpkt"];
387--1991[label="0.0819672;5pkt 5fpkt"];
387--2110[label="0.0188679;2pkt 2fpkt"];
387--2126[label="0.0123457;1pkt 1fpkt"];
387--2140[label="0.297872;14pkt 14fpkt"];
387--2165[label="0.0232558;2pkt 2fpkt"];
387--2261[label="1;1634pkt 1634fpkt"];
387--2334[label="0.00869565;1pkt 1fpkt"];
387--2769[label="0.482213;244pkt 244fpkt"];
387--2780[label="0.0222222;2pkt 2fpkt"];
387--2826[label="0.00348432;1pkt 1fpkt"];
387--2890[label="0.113741;370pkt 370fpkt"];
387--3504[label="1;3253pkt 3253fpkt"];
1294--2261[label="0.0212766;1pkt 1fpkt"];
1294--2307[label="0.489362;23pkt 23fpkt"];
1294--2864[label="0.234043;11pkt 11fpkt"];
1294--2890[label="0.0851064;4pkt 4fpkt"];
1294--3504[label="0.0212766;1pkt 1fpkt"];
1542--1792[label="0.0327869;2pkt 2fpkt"];
1542--4028[label="0.983607;60pkt 60fpkt"];
1595--1818[label="0.454545;10pkt 10fpkt"];
1595--2261[label="0.03125;1pkt 1fpkt"];
1595--2508[label="0.03125;1pkt 1fpkt"];
1595--2574[label="0.133333;2pkt 2fpkt"];
1595--2890[label="0.0625;2pkt 2fpkt"];
1595--2959[label="0.03125;1pkt 1fpkt"];
1595--3109[label="0.0625;2pkt 2fpkt"];
1595--3194[label="0.25;1pkt 1fpkt"];
1595--3470[label="0.105263;2pkt 2fpkt"];
1595--3504[label="0.03125;1pkt 1fpkt"];
1595--3835[label="0.0625;2pkt 2fpkt"];
1595--3929[label="0.166667;1pkt 1fpkt"];
1595--4002[label="0.03125;1pkt 1fpkt"];
1595--4088[label="0.0625;2pkt 2fpkt"];
1595--4361[label="0.25;1pkt 1fpkt"];
1595--4714[label="0.0625;2pkt 2fpkt"];
1595--4764[label="0.166667;1pkt 1fpkt"];
1595--4793[label="0.03125;1pkt 1fpkt"];
3835--4714[label="1;39pkt 39fpkt"];
3929--4764[label="1;6pkt 6fpkt"];
4231--4903[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="194.76.179.98"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
395[label="198.114.84.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
396[label="148.177.70.143;s;36pkt 36fpkt", shape=diamond, color=yellow];
2490[label="148.177.70.143;s;36pkt 36fpkt", shape=hexagon, color=black];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.70.143:*, 58.185.117.72:443}[33.3333%]&lt;BR/&gt;{148.177.70.143:*, 85.175.56.131:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.6575%)&lt;BR/&gt; 443: (16.4384%)&lt;BR/&gt; 1863: (6.84932%)&lt;BR/&gt; 21334: (2.05479%)&lt;BR/&gt; 8038: (2.05479%)&gt;];
}
395--396[label="1;1pkt 1fpkt"];
395--2490[label="1;1pkt 1fpkt"];
396--629[label="0.0277778;1pkt 1fpkt"];
396--1822[label="0.0277778;1pkt 1fpkt"];
396--2162[label="0.0555556;2pkt 2fpkt"];
396--2490[label="1;36pkt 36fpkt"];
396--2739[label="0.0277778;1pkt 1fpkt"];
2490--2739[label="0.0277778;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="58.185.117.72" dst_port="443" src_ip="148.177.70.143"/>
      <filter dst_ip="85.175.56.131" dst_port="80" src_ip="148.177.70.143"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
1045[label="74.4.236.233;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.4.236.233:60751, 144.192.16.111:43966}[33.3333%]&lt;BR/&gt;{74.4.236.233:60826, 144.192.16.111:59945}[33.3333%]&lt;BR/&gt;{74.4.236.233:60837, 144.192.16.111:38224}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60837: (16.6667%)&lt;BR/&gt; 60826: (16.6667%)&lt;BR/&gt; 60751: (16.6667%)&lt;BR/&gt; 59945: (16.6667%)&lt;BR/&gt; 43966: (16.6667%)&gt;];
}
1045--2271[label="1;3pkt 3fpkt"];
1045--2857[label="1;3pkt 3fpkt"];
1045--4148[label="1;1pkt 1fpkt"];
1045--4859[label="1;1pkt 1fpkt"];
1045--5176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.192.16.111" dst_port="38224" src_ip="74.4.236.233" src_port="60837"/>
      <filter dst_ip="144.192.16.111" dst_port="59945" src_ip="74.4.236.233" src_port="60826"/>
      <filter dst_ip="144.192.16.111" dst_port="43966" src_ip="74.4.236.233" src_port="60751"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
416[label="73.131.43.242;d;1074pkt 1074fpkt", shape=diamond, color=yellow];
418[label="195.81.112.57;s;1118pkt 1118fpkt", shape=diamond, color=yellow];
507[label="195.115.70.248;d;42pkt 42fpkt", shape=diamond, color=yellow];
612[label="203.65.52.238;s;117pkt 117fpkt", shape=diamond, color=yellow];
659[label="20.47.204.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
801[label="75.28.150.125;d;3pkt 3fpkt", shape=diamond, color=yellow];
1030[label="195.81.113.166;s;553pkt 553fpkt", shape=diamond, color=yellow];
1241[label="194.76.177.24;s;737pkt 737fpkt", shape=diamond, color=yellow];
1259[label="194.76.170.193;s;232pkt 232fpkt", shape=diamond, color=yellow];
1266[label="144.39.234.12;s;119pkt 119fpkt", shape=diamond, color=yellow];
1510[label="144.224.53.35;s;18pkt 18fpkt", shape=diamond, color=yellow];
1636[label="194.76.134.107;s;195pkt 195fpkt", shape=diamond, color=yellow];
2293[label="203.65.52.238;s;92pkt 92fpkt", shape=hexagon, color=black];
2792[label="144.224.53.35;s;18pkt 18fpkt", shape=hexagon, color=black];
3114[label="144.192.16.27;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3164[label="144.224.53.35;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3302[label="195.81.112.57;1216pkt 1216fpkt", shape=pentagon, color=darkviolet];
3366[label="195.81.119.68;64pkt 64fpkt", shape=pentagon, color=darkviolet];
3559[label="194.76.134.107;198pkt 198fpkt", shape=pentagon, color=darkviolet];
4150[label="148.177.30.234;95pkt 95fpkt", shape=pentagon, color=darkviolet];
4171[label="203.65.52.238;122pkt 122fpkt", shape=pentagon, color=darkviolet];
4316[label="144.192.16.27;27pkt 27fpkt", shape=invtriangle, color=brown];
4344[label="144.224.53.35;20pkt 20fpkt", shape=invtriangle, color=brown];
4423[label="195.81.112.57;1216pkt 1216fpkt", shape=invtriangle, color=brown];
4872[label="203.65.52.238;122pkt 122fpkt", shape=invtriangle, color=brown];
4956[label="144.224.53.35;19pkt 19fpkt", shape=invhouse, color=bisque];
5181[label="203.65.52.238;123pkt 123fpkt", shape=invhouse, color=bisque];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.112.57:*, 73.131.43.242:*}[34.2614%]&lt;BR/&gt;{194.76.177.24:53, *:*}[21.483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (14.5446%)&lt;BR/&gt; 24521: (3.03809%)&lt;BR/&gt; 80: (2.70858%)&lt;BR/&gt; 65534: (1.99025%)&lt;BR/&gt; 32891: (1.82549%)&gt;];
}
416--418[label="1;1074pkt 1074fpkt"];
416--3302[label="1;1074pkt 1074fpkt"];
416--4423[label="1;1074pkt 1074fpkt"];
418--507[label="0.0238095;1pkt 1fpkt"];
418--786[label="1;1pkt 1fpkt"];
418--801[label="0.666667;2pkt 2fpkt"];
418--2912[label="0.00536673;6pkt 6fpkt"];
418--2919[label="0.00268336;3pkt 3fpkt"];
418--2925[label="0.00536673;6pkt 6fpkt"];
418--2931[label="0.00268336;3pkt 3fpkt"];
418--2933[label="0.00536673;6pkt 6fpkt"];
418--2935[label="0.00268336;3pkt 3fpkt"];
418--3302[label="1;1118pkt 1118fpkt"];
418--4423[label="1;1118pkt 1118fpkt"];
507--552[label="0.047619;2pkt 2fpkt"];
507--612[label="0.0238095;1pkt 1fpkt"];
507--641[label="0.0857143;3pkt 3fpkt"];
507--741[label="0.047619;2pkt 2fpkt"];
507--806[label="0.0238095;1pkt 1fpkt"];
507--1030[label="0.0238095;1pkt 1fpkt"];
507--1211[label="0.047619;2pkt 2fpkt"];
507--1241[label="0.0238095;1pkt 1fpkt"];
507--1252[label="0.047619;2pkt 2fpkt"];
507--1259[label="0.047619;2pkt 2fpkt"];
507--1266[label="0.047619;2pkt 2fpkt"];
507--1474[label="0.0238095;1pkt 1fpkt"];
507--1636[label="0.0238095;1pkt 1fpkt"];
507--2293[label="0.0238095;1pkt 1fpkt"];
507--2317[label="0.0238095;1pkt 1fpkt"];
507--2518[label="0.047619;2pkt 2fpkt"];
507--2546[label="0.0238095;1pkt 1fpkt"];
507--2674[label="0.0238095;1pkt 1fpkt"];
507--2730[label="0.047619;2pkt 2fpkt"];
507--2911[label="0.0238095;1pkt 1fpkt"];
507--2912[label="0.0238095;1pkt 1fpkt"];
507--2918[label="0.357143;15pkt 15fpkt"];
507--2919[label="0.0238095;1pkt 1fpkt"];
507--2924[label="0.0238095;1pkt 1fpkt"];
507--2925[label="0.0238095;1pkt 1fpkt"];
507--2930[label="0.357143;15pkt 15fpkt"];
507--2931[label="0.0238095;1pkt 1fpkt"];
507--2932[label="0.0238095;1pkt 1fpkt"];
507--2933[label="0.0238095;1pkt 1fpkt"];
507--2934[label="0.357143;15pkt 15fpkt"];
507--2935[label="0.0238095;1pkt 1fpkt"];
507--3114[label="0.148148;4pkt 4fpkt"];
507--3162[label="0.047619;2pkt 2fpkt"];
507--3302[label="0.0238095;1pkt 1fpkt"];
507--3366[label="0.0238095;1pkt 1fpkt"];
507--3559[label="0.0238095;1pkt 1fpkt"];
507--4150[label="0.0238095;1pkt 1fpkt"];
507--4171[label="0.0238095;1pkt 1fpkt"];
507--4316[label="0.148148;4pkt 4fpkt"];
507--4342[label="0.047619;2pkt 2fpkt"];
507--4423[label="0.0238095;1pkt 1fpkt"];
507--4872[label="0.0238095;1pkt 1fpkt"];
507--4955[label="0.047619;2pkt 2fpkt"];
507--5181[label="0.0238095;1pkt 1fpkt"];
612--659[label="1;1pkt 1fpkt"];
612--2293[label="1;92pkt 92fpkt"];
612--2912[label="0.017094;2pkt 2fpkt"];
612--2919[label="0.00854701;1pkt 1fpkt"];
612--2925[label="0.017094;2pkt 2fpkt"];
612--2931[label="0.00854701;1pkt 1fpkt"];
612--2933[label="0.017094;2pkt 2fpkt"];
612--2935[label="0.00854701;1pkt 1fpkt"];
612--4171[label="0.991453;116pkt 116fpkt"];
612--4872[label="0.991453;116pkt 116fpkt"];
612--5181[label="1;117pkt 117fpkt"];
659--2293[label="1;1pkt 1fpkt"];
659--4171[label="1;1pkt 1fpkt"];
659--4872[label="1;1pkt 1fpkt"];
659--5181[label="1;1pkt 1fpkt"];
801--1510[label="0.333333;1pkt 1fpkt"];
801--2792[label="0.333333;1pkt 1fpkt"];
801--3164[label="0.333333;1pkt 1fpkt"];
801--3302[label="0.666667;2pkt 2fpkt"];
801--4344[label="0.333333;1pkt 1fpkt"];
801--4423[label="0.666667;2pkt 2fpkt"];
801--4956[label="0.333333;1pkt 1fpkt"];
1030--1767[label="0.0117647;1pkt 1fpkt"];
1030--1776[label="0.00970874;1pkt 1fpkt"];
1030--1956[label="0.0117647;1pkt 1fpkt"];
1030--2081[label="0.012987;1pkt 1fpkt"];
1030--2906[label="0.0650995;36pkt 36fpkt"];
1030--2911[label="0.0813743;45pkt 45fpkt"];
1030--2918[label="0.0958409;53pkt 53fpkt"];
1030--2924[label="0.0813743;45pkt 45fpkt"];
1030--2930[label="0.0958409;53pkt 53fpkt"];
1030--2932[label="0.0813743;45pkt 45fpkt"];
1030--2934[label="0.0958409;53pkt 53fpkt"];
1241--2906[label="0.0027137;2pkt 2fpkt"];
1241--2911[label="0.0868385;64pkt 64fpkt"];
1241--2918[label="0.113976;84pkt 84fpkt"];
1241--2924[label="0.0868385;64pkt 64fpkt"];
1241--2930[label="0.113976;84pkt 84fpkt"];
1241--2932[label="0.0868385;64pkt 64fpkt"];
1241--2934[label="0.113976;84pkt 84fpkt"];
1259--1479[label="0.0178571;1pkt 1fpkt"];
1259--1767[label="0.0117647;1pkt 1fpkt"];
1259--1776[label="0.00970874;1pkt 1fpkt"];
1259--1916[label="0.0104167;1pkt 1fpkt"];
1259--1956[label="0.0117647;1pkt 1fpkt"];
1259--2081[label="0.012987;1pkt 1fpkt"];
1259--2090[label="0.0113636;1pkt 1fpkt"];
1259--2095[label="0.0322581;1pkt 1fpkt"];
1259--2105[label="0.0117647;1pkt 1fpkt"];
1259--2108[label="0.0138889;1pkt 1fpkt"];
1259--2139[label="0.0128205;1pkt 1fpkt"];
1259--2906[label="0.0732759;17pkt 17fpkt"];
1259--2911[label="0.0172414;4pkt 4fpkt"];
1259--2918[label="0.00862069;2pkt 2fpkt"];
1259--2924[label="0.0172414;4pkt 4fpkt"];
1259--2930[label="0.00862069;2pkt 2fpkt"];
1259--2932[label="0.0172414;4pkt 4fpkt"];
1259--2934[label="0.00862069;2pkt 2fpkt"];
1266--1425[label="0.0169492;1pkt 1fpkt"];
1266--2906[label="0.00840336;1pkt 1fpkt"];
1266--2912[label="0.0756303;9pkt 9fpkt"];
1266--2919[label="0.0672269;8pkt 8fpkt"];
1266--2925[label="0.0756303;9pkt 9fpkt"];
1266--2931[label="0.0672269;8pkt 8fpkt"];
1266--2933[label="0.0756303;9pkt 9fpkt"];
1266--2935[label="0.0672269;8pkt 8fpkt"];
1510--2792[label="1;18pkt 18fpkt"];
1510--2919[label="0.111111;2pkt 2fpkt"];
1510--2931[label="0.111111;2pkt 2fpkt"];
1510--2935[label="0.111111;2pkt 2fpkt"];
1510--3164[label="0.944444;17pkt 17fpkt"];
1510--4344[label="1;18pkt 18fpkt"];
1510--4956[label="0.944444;17pkt 17fpkt"];
1636--1916[label="0.0104167;1pkt 1fpkt"];
1636--2081[label="0.012987;1pkt 1fpkt"];
1636--2095[label="0.0322581;1pkt 1fpkt"];
1636--2105[label="0.0117647;1pkt 1fpkt"];
1636--2108[label="0.0138889;1pkt 1fpkt"];
1636--2139[label="0.0128205;1pkt 1fpkt"];
1636--2418[label="0.0222222;1pkt 1fpkt"];
1636--2436[label="0.02;1pkt 1fpkt"];
1636--2906[label="0.00512821;1pkt 1fpkt"];
1636--2911[label="0.0205128;4pkt 4fpkt"];
1636--2918[label="0.0153846;3pkt 3fpkt"];
1636--2924[label="0.0205128;4pkt 4fpkt"];
1636--2930[label="0.0153846;3pkt 3fpkt"];
1636--2932[label="0.0205128;4pkt 4fpkt"];
1636--2934[label="0.0153846;3pkt 3fpkt"];
1636--3559[label="0.994872;194pkt 194fpkt"];
2293--2912[label="0.0217391;2pkt 2fpkt"];
2293--2919[label="0.0108696;1pkt 1fpkt"];
2293--2925[label="0.0217391;2pkt 2fpkt"];
2293--2931[label="0.0108696;1pkt 1fpkt"];
2293--2933[label="0.0217391;2pkt 2fpkt"];
2293--2935[label="0.0108696;1pkt 1fpkt"];
2293--4171[label="1;92pkt 92fpkt"];
2293--4872[label="1;92pkt 92fpkt"];
2293--5181[label="1;92pkt 92fpkt"];
2792--2919[label="0.111111;2pkt 2fpkt"];
2792--2931[label="0.111111;2pkt 2fpkt"];
2792--2935[label="0.111111;2pkt 2fpkt"];
2792--3164[label="0.944444;17pkt 17fpkt"];
2792--4344[label="1;18pkt 18fpkt"];
2792--4956[label="0.944444;17pkt 17fpkt"];
3114--4316[label="1;27pkt 27fpkt"];
3164--4344[label="1;19pkt 19fpkt"];
3164--4956[label="1;19pkt 19fpkt"];
3302--4423[label="1;1216pkt 1216fpkt"];
4171--4872[label="1;122pkt 122fpkt"];
4171--5181[label="1;122pkt 122fpkt"];
4344--4956[label="1;19pkt 19fpkt"];
4872--5181[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="73.131.43.242" src_ip="195.81.112.57"/>
      <filter src_ip="194.76.177.24" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
446[label="218.119.201.1;d;6pkt 6fpkt", shape=diamond, color=yellow];
447[label="148.176.232.99;s;144pkt 144fpkt", shape=diamond, color=yellow];
2496[label="148.176.232.99;s;75pkt 75fpkt", shape=hexagon, color=black];
3513[label="148.176.232.99;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4538[label="148.176.232.99;171pkt 171fpkt", shape=invtriangle, color=brown];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.232.99:*, *:80}[64.3275%]&lt;BR/&gt;{148.176.232.99:*, *:443}[32.1637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.6578%)&lt;BR/&gt; 443: (15.6966%)&lt;BR/&gt; 554: (2.6455%)&lt;BR/&gt; 1617: (0.617284%)&lt;BR/&gt; 4765: (0.440917%)&gt;];
}
446--447[label="1;6pkt 6fpkt"];
446--2496[label="1;6pkt 6fpkt"];
446--3513[label="1;6pkt 6fpkt"];
446--4538[label="1;6pkt 6fpkt"];
447--2496[label="1;75pkt 75fpkt"];
447--2890[label="0.0694444;10pkt 10fpkt"];
447--3513[label="1;144pkt 144fpkt"];
447--4538[label="1;144pkt 144fpkt"];
2496--2890[label="0.133333;10pkt 10fpkt"];
2496--3513[label="1;75pkt 75fpkt"];
2496--4538[label="1;75pkt 75fpkt"];
3513--4538[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.232.99"/>
      <filter dst_port="443" src_ip="148.176.232.99"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
42[label="20.218.236.230s;1pkt 1fpkt", shape=rectangle, color=red];
460[label="20.218.236.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.218.236.230:3133, 130.54.26.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3133: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
42--388[label="1;1pkt 1fpkt"];
42--460[label="1;1pkt 1fpkt"];
42--2262[label="1;1pkt 1fpkt"];
42--2647[label="1;1pkt 1fpkt"];
42--2852[label="1;1pkt 1fpkt"];
42--2890[label="1;1pkt 1fpkt"];
460--2262[label="1;1pkt 1fpkt"];
460--2647[label="1;1pkt 1fpkt"];
460--2852[label="1;1pkt 1fpkt"];
460--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="20.218.236.230" src_port="3133"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
26[label="213.220.27.140s;1pkt 1fpkt", shape=rectangle, color=red];
48[label="144.192.16.111d;1pkt 1fpkt", shape=rectangle, color=red];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.220.27.140:3480, 144.192.16.111:11255}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11255: (50%)&lt;BR/&gt; 3480: (50%)&gt;];
}
26--48[label="1;1pkt 1fpkt"];
26--423[label="1;1pkt 1fpkt"];
26--522[label="1;1pkt 1fpkt"];
26--2271[label="1;1pkt 1fpkt"];
26--2857[label="1;1pkt 1fpkt"];
48--423[label="1;1pkt 1fpkt"];
48--522[label="1;1pkt 1fpkt"];
48--2271[label="1;1pkt 1fpkt"];
48--2857[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.192.16.111" dst_port="11255" src_ip="213.220.27.140" src_port="3480"/>
    </slice>
    <from sec="1109826282" usec="0"/>
    <to sec="1109826861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
4[label="212.170.134.19s;2pkt 2fpkt", shape=rectangle, color=red];
536[label="212.170.134.19;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.170.134.19:1868, 130.54.26.24:80}[50%]&lt;BR/&gt;{212.170.134.19:2008, 130.54.26.24:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2008: (25%)&lt;BR/&gt; 1868: (25%)&gt;];
}
4--388[label="1;2pkt 2fpkt"];
4--536[label="1;2pkt 2fpkt"];
4--2262[label="1;2pkt 2fpkt"];
4--2719[label="1;2pkt 2fpkt"];
4--2852[label="1;2pkt 2fpkt"];
4--2890[label="0.5;1pkt 1fpkt"];
536--2262[label="1;2pkt 2fpkt"];
536--2719[label="1;2pkt 2fpkt"];
536--2852[label="1;2pkt 2fpkt"];
536--2890[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="212.170.134.19" src_port="2008"/>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="212.170.134.19" src_port="1868"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
563[label="130.54.77.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
564[label="213.14.167.194;s;94pkt 94fpkt", shape=diamond, color=yellow];
602[label="130.54.50.191;d;97pkt 97fpkt", shape=diamond, color=yellow];
2656[label="130.54.77.31;d;1pkt 1fpkt", shape=hexagon, color=black];
3970[label="213.14.167.194;102pkt 102fpkt", shape=pentagon, color=darkviolet];
4780[label="213.14.167.194;102pkt 102fpkt", shape=invtriangle, color=brown];
5143[label="213.14.167.194;102pkt 102fpkt", shape=invhouse, color=bisque];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.14.167.194:39394, 130.54.50.191:*}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39394: (48.497%)&lt;BR/&gt; 4855: (0.601202%)&lt;BR/&gt; 4709: (0.601202%)&lt;BR/&gt; 4920: (0.501002%)&lt;BR/&gt; 3232: (0.501002%)&gt;];
}
563--564[label="1;1pkt 1fpkt"];
563--2656[label="1;1pkt 1fpkt"];
563--3970[label="1;1pkt 1fpkt"];
563--4780[label="1;1pkt 1fpkt"];
563--5143[label="1;1pkt 1fpkt"];
564--602[label="0.989362;93pkt 93fpkt"];
564--2656[label="1;1pkt 1fpkt"];
564--3970[label="1;94pkt 94fpkt"];
564--4780[label="1;94pkt 94fpkt"];
564--5143[label="1;94pkt 94fpkt"];
602--798[label="1;1pkt 1fpkt"];
602--2611[label="1;1pkt 1fpkt"];
602--2912[label="0.0103093;1pkt 1fpkt"];
602--2919[label="0.0103093;1pkt 1fpkt"];
602--2925[label="0.0103093;1pkt 1fpkt"];
602--2931[label="0.0103093;1pkt 1fpkt"];
602--2933[label="0.0103093;1pkt 1fpkt"];
602--2935[label="0.0103093;1pkt 1fpkt"];
602--3970[label="0.958763;93pkt 93fpkt"];
602--4780[label="0.958763;93pkt 93fpkt"];
602--5143[label="0.958763;93pkt 93fpkt"];
2656--3970[label="1;1pkt 1fpkt"];
2656--4780[label="1;1pkt 1fpkt"];
2656--5143[label="1;1pkt 1fpkt"];
3970--4780[label="1;102pkt 102fpkt"];
3970--5143[label="1;102pkt 102fpkt"];
4780--5143[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.50.191" src_ip="213.14.167.194" src_port="39394"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
1194[label="77.166.229.210;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.166.229.210:4515, 195.81.123.67:1755}[50%]&lt;BR/&gt;{77.166.229.210:4516, 195.81.123.67:1755}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 4516: (25%)&lt;BR/&gt; 4515: (25%)&gt;];
}
1194--4051[label="1;1pkt 1fpkt"];
1194--4815[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.123.67" dst_port="1755" src_ip="77.166.229.210" src_port="4516"/>
      <filter dst_ip="195.81.123.67" dst_port="1755" src_ip="77.166.229.210" src_port="4515"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02249,1.68347,002,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
80[label="209.19.2.156s;676pkt 676fpkt", shape=rectangle, color=red];
585[label="195.81.116.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
588[label="215.75.253.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
2531[label="215.75.253.142;s;1pkt 1fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.19.2.156:1029, *:137}[99.8523%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (49.7794%)&lt;BR/&gt; 137: (49.7794%)&lt;BR/&gt; 32850: (0.220588%)&lt;BR/&gt; 2401: (0.220588%)&gt;];
}
80--405[label="0.0078125;1pkt 1fpkt"];
80--554[label="0.00338983;1pkt 1fpkt"];
80--585[label="0.5;1pkt 1fpkt"];
80--1212[label="0.0263158;1pkt 1fpkt"];
80--1604[label="0.0123457;1pkt 1fpkt"];
80--2141[label="0.00406504;1pkt 1fpkt"];
80--2304[label="0.00862069;1pkt 1fpkt"];
585--588[label="1;1pkt 1fpkt"];
585--2531[label="1;1pkt 1fpkt"];
588--2531[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.19.2.156" src_port="1029"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
586[label="195.81.116.132;s;11pkt 11fpkt", shape=diamond, color=yellow];
587[label="215.75.253.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
2530[label="195.81.116.132;s;9pkt 9fpkt", shape=hexagon, color=black];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.116.132:80, 74.27.10.84:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0952%)&lt;BR/&gt; 0: (9.52381%)&lt;BR/&gt; 32850: (7.14286%)&lt;BR/&gt; 2401: (7.14286%)&lt;BR/&gt; 57938: (4.7619%)&gt;];
}
586--587[label="1;1pkt 1fpkt"];
586--2530[label="1;9pkt 9fpkt"];
587--2530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.27.10.84" src_ip="195.81.116.132" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
78[label="78.178.25.147s;250pkt 250fpkt", shape=rectangle, color=red];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.178.25.147:61365, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61365: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
78--206[label="1;250pkt 250fpkt"];
78--305[label="1;250pkt 250fpkt"];
78--611[label="0.0133333;1pkt 1fpkt"];
78--3749[label="1;250pkt 250fpkt"];
78--4664[label="1;250pkt 250fpkt"];
78--5091[label="0.996;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.178.25.147" src_port="61365"/>
    </slice>
    <from sec="1109826371" usec="0"/>
    <to sec="1109826384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
590[label="148.177.224.65;s;338pkt 338fpkt", shape=diamond, color=yellow];
622[label="214.122.2.199;d;2pkt 2fpkt", shape=diamond, color=yellow];
625[label="195.81.112.154;s;21pkt 21fpkt", shape=diamond, color=yellow];
3353[label="148.177.224.65;380pkt 380fpkt", shape=pentagon, color=darkviolet];
3781[label="195.81.112.154;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4453[label="148.177.224.65;381pkt 381fpkt", shape=invtriangle, color=brown];
4684[label="195.81.112.154;24pkt 24fpkt", shape=invtriangle, color=brown];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.224.65:25, *:*}[54.8148%]&lt;BR/&gt;{148.177.224.65:*, *:25}[37.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9744%)&lt;BR/&gt; 0: (1.28205%)&lt;BR/&gt; 113: (0.384615%)&lt;BR/&gt; 3660: (0.25641%)&lt;BR/&gt; 2004: (0.25641%)&gt;];
}
590--622[label="0.5;1pkt 1fpkt"];
590--1239[label="0.0263158;1pkt 1fpkt"];
590--1831[label="0.0243902;1pkt 1fpkt"];
590--1862[label="0.0625;1pkt 1fpkt"];
590--1985[label="0.0625;3pkt 3fpkt"];
590--3353[label="0.997041;337pkt 337fpkt"];
590--4453[label="1;338pkt 338fpkt"];
622--625[label="0.5;1pkt 1fpkt"];
622--3353[label="0.5;1pkt 1fpkt"];
622--3781[label="0.5;1pkt 1fpkt"];
622--4453[label="0.5;1pkt 1fpkt"];
622--4684[label="0.5;1pkt 1fpkt"];
625--3781[label="1;21pkt 21fpkt"];
625--4684[label="1;21pkt 21fpkt"];
3353--4453[label="1;380pkt 380fpkt"];
3781--4684[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.224.65" src_port="25"/>
      <filter dst_port="25" src_ip="148.177.224.65"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
70[label="195.137.188.88s;1pkt 1fpkt", shape=rectangle, color=red];
626[label="201.116.63.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
627[label="148.176.144.88;s;104pkt 104fpkt", shape=diamond, color=yellow];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.144.88:*, *:80}[50.9615%]&lt;BR/&gt;{148.176.144.88:*, *:443}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 443: (10.3774%)&lt;BR/&gt; 49152: (7.07547%)&lt;BR/&gt; 53: (7.07547%)&lt;BR/&gt; 123: (3.77358%)&gt;];
}
70--626[label="1;1pkt 1fpkt"];
70--627[label="1;1pkt 1fpkt"];
626--627[label="1;1pkt 1fpkt"];
627--1427[label="0.153846;16pkt 16fpkt"];
627--1923[label="0.0246914;2pkt 2fpkt"];
627--2090[label="0.0113636;1pkt 1fpkt"];
627--2890[label="0.0192308;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.144.88"/>
      <filter dst_port="443" src_ip="148.176.144.88"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
643[label="194.64.145.210;s;131pkt 131fpkt", shape=diamond, color=yellow];
646[label="23.121.210.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
1520[label="223.58.181.206;d;197pkt 197fpkt", shape=diamond, color=yellow];
1864[label="148.177.197.24;s;136pkt 136fpkt", shape=diamond, color=yellow];
2014[label="197.84.158.42;d;19pkt 19fpkt", shape=diamond, color=yellow];
2296[label="194.64.145.210;s;131pkt 131fpkt", shape=hexagon, color=black];
4189[label="144.39.53.245;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4813[label="194.64.145.210;131pkt 131fpkt", shape=invtriangle, color=brown];
5155[label="194.64.145.210;131pkt 131fpkt", shape=invhouse, color=bisque];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 223.58.181.206:80}[41.4737%]&lt;BR/&gt;{194.64.145.210:*, *:80}[26.7368%]&lt;BR/&gt;{148.177.197.24:*, 76.1.86.38:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4632%)&lt;BR/&gt; 443: (0.933041%)&lt;BR/&gt; 59921: (0.274424%)&lt;BR/&gt; 59808: (0.274424%)&lt;BR/&gt; 59570: (0.274424%)&gt;];
}
643--646[label="1;1pkt 1fpkt"];
643--657[label="0.0763359;10pkt 10fpkt"];
643--695[label="0.0152672;2pkt 2fpkt"];
643--721[label="0.0152672;2pkt 2fpkt"];
643--1520[label="0.0381679;5pkt 5fpkt"];
643--1524[label="0.174603;11pkt 11fpkt"];
643--1526[label="0.0425532;2pkt 2fpkt"];
643--1679[label="0.00763359;1pkt 1fpkt"];
643--1822[label="0.0229008;3pkt 3fpkt"];
643--2014[label="0.0526316;1pkt 1fpkt"];
643--2120[label="0.0181818;1pkt 1fpkt"];
643--2179[label="0.161765;11pkt 11fpkt"];
643--2189[label="0.0142857;1pkt 1fpkt"];
643--2296[label="1;131pkt 131fpkt"];
643--2690[label="0.0555556;2pkt 2fpkt"];
643--2890[label="0.244275;32pkt 32fpkt"];
643--4813[label="1;131pkt 131fpkt"];
643--5155[label="1;131pkt 131fpkt"];
646--2296[label="1;1pkt 1fpkt"];
646--2890[label="1;1pkt 1fpkt"];
646--4813[label="1;1pkt 1fpkt"];
646--5155[label="1;1pkt 1fpkt"];
1520--1550[label="0.0545455;3pkt 3fpkt"];
1520--1864[label="0.242647;33pkt 33fpkt"];
1520--2277[label="0.0304569;6pkt 6fpkt"];
1520--2296[label="0.0381679;5pkt 5fpkt"];
1520--2504[label="0.00507614;1pkt 1fpkt"];
1520--2508[label="0.00507614;1pkt 1fpkt"];
1520--2720[label="0.370558;73pkt 73fpkt"];
1520--2890[label="0.0203046;4pkt 4fpkt"];
1520--3204[label="0.25;7pkt 7fpkt"];
1520--3450[label="0.011236;1pkt 1fpkt"];
1520--3639[label="0.0555556;3pkt 3fpkt"];
1520--4002[label="0.00507614;1pkt 1fpkt"];
1520--4189[label="0.0882353;3pkt 3fpkt"];
1520--4366[label="0.25;7pkt 7fpkt"];
1520--4505[label="0.0113636;1pkt 1fpkt"];
1520--4604[label="0.0555556;3pkt 3fpkt"];
1520--4793[label="0.00507614;1pkt 1fpkt"];
1520--4813[label="0.0381679;5pkt 5fpkt"];
1520--5019[label="0.011236;1pkt 1fpkt"];
1520--5155[label="0.0381679;5pkt 5fpkt"];
2014--2296[label="0.0526316;1pkt 1fpkt"];
2014--2603[label="0.263158;5pkt 5fpkt"];
2014--3460[label="0.210526;4pkt 4fpkt"];
2014--3497[label="0.0526316;1pkt 1fpkt"];
2014--4413[label="0.368421;7pkt 7fpkt"];
2014--4813[label="0.0526316;1pkt 1fpkt"];
2014--5155[label="0.0526316;1pkt 1fpkt"];
2296--2690[label="0.0555556;2pkt 2fpkt"];
2296--2890[label="0.244275;32pkt 32fpkt"];
2296--4813[label="1;131pkt 131fpkt"];
2296--5155[label="1;131pkt 131fpkt"];
4813--5155[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="194.64.145.210"/>
      <filter dst_ip="223.58.181.206" dst_port="80"/>
      <filter dst_ip="76.1.86.38" dst_port="80" src_ip="148.177.197.24"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891556,1.6058,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
147[label="20.145.45.187s;297pkt 297fpkt", shape=rectangle, color=red];
670[label="20.145.45.187;s;1015pkt 1015fpkt", shape=diamond, color=yellow];
3932[label="20.145.45.187;1014pkt 1014fpkt", shape=pentagon, color=darkviolet];
4766[label="20.145.45.187;1015pkt 1015fpkt", shape=invtriangle, color=brown];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.145.45.187:*, *:42}[25.0246%]&lt;BR/&gt;{20.145.45.187:*, *:5900}[25.0246%]&lt;BR/&gt;{20.145.45.187:*, *:6101}[25.0246%]&lt;BR/&gt;{20.145.45.187:*, *:4899}[24.9261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (12.5262%)&lt;BR/&gt; 6101: (12.5112%)&lt;BR/&gt; 42: (12.4963%)&lt;BR/&gt; 4899: (12.4663%)&lt;BR/&gt; 1773: (0.149656%)&gt;];
}
147--670[label="1;297pkt 297fpkt"];
147--3932[label="1;297pkt 297fpkt"];
147--4766[label="1;297pkt 297fpkt"];
670--3932[label="1;1014pkt 1014fpkt"];
670--4766[label="1;1015pkt 1015fpkt"];
3932--4766[label="1;1014pkt 1014fpkt"];
</description>
    <slice>
      <filter dst_port="6101" src_ip="20.145.45.187"/>
      <filter dst_port="5900" src_ip="20.145.45.187"/>
      <filter dst_port="42" src_ip="20.145.45.187"/>
      <filter dst_port="4899" src_ip="20.145.45.187"/>
    </slice>
    <from sec="1109826062" usec="0"/>
    <to sec="1109826135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
672[label="169.28.36.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
673[label="73.241.186.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
2343[label="73.241.186.64;s;1pkt 1fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.186.64:48976, 169.28.36.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48976: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
672--673[label="1;1pkt 1fpkt"];
672--2343[label="1;1pkt 1fpkt"];
673--2343[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.36.148" dst_port="80" src_ip="73.241.186.64" src_port="48976"/>
    </slice>
    <from sec="1109826084" usec="0"/>
    <to sec="1109826105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
437[label="198.114.84.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
690[label="148.176.218.30;s;6pkt 6fpkt", shape=diamond, color=yellow];
2375[label="148.176.218.30;s;6pkt 6fpkt", shape=hexagon, color=black];
3135[label="148.176.218.30;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4329[label="148.176.218.30;5pkt 5fpkt", shape=invtriangle, color=brown];
4952[label="148.176.218.30;5pkt 5fpkt", shape=invhouse, color=bisque];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.218.30:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15786: (10.3448%)&lt;BR/&gt; 8000: (10.3448%)&lt;BR/&gt; 63367: (8.62069%)&lt;BR/&gt; 41527: (8.62069%)&lt;BR/&gt; 19726: (8.62069%)&gt;];
}
437--690[label="1;1pkt 1fpkt"];
437--2375[label="1;1pkt 1fpkt"];
437--3135[label="1;1pkt 1fpkt"];
437--4329[label="1;1pkt 1fpkt"];
437--4952[label="1;1pkt 1fpkt"];
690--2375[label="1;6pkt 6fpkt"];
690--3135[label="1;6pkt 6fpkt"];
690--4329[label="1;5pkt 5fpkt"];
690--4952[label="1;5pkt 5fpkt"];
2375--3135[label="1;6pkt 6fpkt"];
2375--4329[label="1;5pkt 5fpkt"];
2375--4952[label="1;5pkt 5fpkt"];
3135--4329[label="1;5pkt 5fpkt"];
3135--4952[label="1;5pkt 5fpkt"];
4329--4952[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.218.30"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
440[label="148.177.201.140;s;986pkt 986fpkt", shape=diamond, color=yellow];
497[label="197.84.147.193;d;114pkt 114fpkt", shape=diamond, color=yellow];
691[label="84.175.16.196;d;421pkt 421fpkt", shape=diamond, color=yellow];
706[label="148.177.193.229;s;27pkt 27fpkt", shape=diamond, color=yellow];
1782[label="84.175.16.197;d;68pkt 68fpkt", shape=diamond, color=yellow];
2062[label="169.28.112.244;s;143pkt 143fpkt", shape=diamond, color=yellow];
2179[label="223.58.181.213;d;68pkt 68fpkt", shape=diamond, color=yellow];
2376[label="84.175.16.196;d;290pkt 290fpkt", shape=hexagon, color=black];
2649[label="148.177.193.229;s;27pkt 27fpkt", shape=hexagon, color=black];
3037[label="148.176.63.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3631[label="148.177.203.122;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4202[label="144.39.130.248;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4273[label="148.176.63.16;4pkt 4fpkt", shape=invtriangle, color=brown];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.201.140:*, 84.175.16.196:80}[32.5329%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.819%)&lt;BR/&gt; 1104: (0.158371%)&lt;BR/&gt; 4718: (0.135747%)&lt;BR/&gt; 2828: (0.135747%)&lt;BR/&gt; 4747: (0.113122%)&gt;];
}
440--497[label="0.807018;92pkt 92fpkt"];
440--629[label="0.0107143;3pkt 3fpkt"];
440--633[label="0.0566038;9pkt 9fpkt"];
440--639[label="0.00666667;2pkt 2fpkt"];
440--657[label="0.0127389;2pkt 2fpkt"];
440--691[label="0.997625;420pkt 420fpkt"];
440--695[label="0.0428571;9pkt 9fpkt"];
440--719[label="0.5;1pkt 1fpkt"];
440--721[label="0.0681818;9pkt 9fpkt"];
440--737[label="0.0696864;20pkt 20fpkt"];
440--802[label="0.0144928;3pkt 3fpkt"];
440--1075[label="0.0058651;2pkt 2fpkt"];
440--1083[label="0.0695652;8pkt 8fpkt"];
440--1431[label="0.00540541;1pkt 1fpkt"];
440--1491[label="0.00704225;1pkt 1fpkt"];
440--1520[label="0.0812183;16pkt 16fpkt"];
440--1620[label="0.0649351;10pkt 10fpkt"];
440--1667[label="0.0178571;2pkt 2fpkt"];
440--1779[label="0.0106383;1pkt 1fpkt"];
440--1782[label="0.985294;67pkt 67fpkt"];
440--1940[label="0.0111111;1pkt 1fpkt"];
440--2110[label="0.00943396;1pkt 1fpkt"];
440--2120[label="0.0363636;2pkt 2fpkt"];
440--2179[label="0.0294118;2pkt 2fpkt"];
440--2189[label="0.0571429;4pkt 4fpkt"];
440--2295[label="0.037037;3pkt 3fpkt"];
440--2376[label="0.996552;289pkt 289fpkt"];
440--2717[label="0.5;1pkt 1fpkt"];
440--2738[label="0.00833333;1pkt 1fpkt"];
440--2739[label="0.0049505;1pkt 1fpkt"];
440--2780[label="0.0111111;1pkt 1fpkt"];
440--2826[label="0.0696864;20pkt 20fpkt"];
440--2890[label="0.0425963;42pkt 42fpkt"];
497--706[label="0.444444;12pkt 12fpkt"];
497--713[label="0.00877193;1pkt 1fpkt"];
497--1381[label="0.00884956;1pkt 1fpkt"];
497--2312[label="0.00877193;1pkt 1fpkt"];
497--2499[label="0.00877193;1pkt 1fpkt"];
497--2649[label="0.444444;12pkt 12fpkt"];
497--2890[label="0.0263158;3pkt 3fpkt"];
497--3227[label="0.00877193;1pkt 1fpkt"];
497--3631[label="0.0208333;1pkt 1fpkt"];
497--3867[label="0.00877193;1pkt 1fpkt"];
497--4202[label="0.111111;1pkt 1fpkt"];
497--4730[label="0.00877193;1pkt 1fpkt"];
691--2376[label="1;290pkt 290fpkt"];
691--2890[label="0.0593824;25pkt 25fpkt"];
691--3037[label="0.2;1pkt 1fpkt"];
691--4273[label="0.25;1pkt 1fpkt"];
706--2649[label="1;27pkt 27fpkt"];
706--2890[label="0.185185;5pkt 5fpkt"];
1782--2890[label="0.0735294;5pkt 5fpkt"];
1782--3037[label="0.2;1pkt 1fpkt"];
2062--2179[label="0.0147059;1pkt 1fpkt"];
2179--2296[label="0.161765;11pkt 11fpkt"];
2179--2720[label="0.367647;25pkt 25fpkt"];
2179--2727[label="0.0147059;1pkt 1fpkt"];
2179--3200[label="0.0689655;2pkt 2fpkt"];
2179--3234[label="0.0735294;5pkt 5fpkt"];
2179--3378[label="0.0147059;1pkt 1fpkt"];
2179--3874[label="0.0147059;1pkt 1fpkt"];
2179--4383[label="0.0735294;5pkt 5fpkt"];
2179--4464[label="0.0147059;1pkt 1fpkt"];
2179--4813[label="0.161765;11pkt 11fpkt"];
2179--4966[label="0.0735294;5pkt 5fpkt"];
2179--4999[label="0.0147059;1pkt 1fpkt"];
2179--5155[label="0.161765;11pkt 11fpkt"];
2376--2890[label="0.0862069;25pkt 25fpkt"];
2376--3037[label="0.2;1pkt 1fpkt"];
2376--4273[label="0.25;1pkt 1fpkt"];
2649--2890[label="0.185185;5pkt 5fpkt"];
3037--4273[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="84.175.16.196" dst_port="80" src_ip="148.177.201.140"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
511[label="195.69.36.49;d;4pkt 4fpkt", shape=diamond, color=yellow];
712[label="144.224.49.208;s;11pkt 11fpkt", shape=diamond, color=yellow];
1468[label="222.148.230.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.49.208:*, 195.69.36.49:*}[36.3636%]&lt;BR/&gt;{144.224.49.208:*, 20.47.245.82:*}[36.3636%]&lt;BR/&gt;{144.224.49.208:21, *:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (9.375%)&lt;BR/&gt; 63221: (6.25%)&lt;BR/&gt; 59363: (6.25%)&lt;BR/&gt; 42736: (6.25%)&lt;BR/&gt; 22635: (6.25%)&gt;];
}
511--712[label="1;4pkt 4fpkt"];
712--1468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.47.245.82" src_ip="144.224.49.208"/>
      <filter dst_ip="195.69.36.49" src_ip="144.224.49.208"/>
      <filter src_ip="144.224.49.208" src_port="21"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
457[label="130.54.198.163;d;53pkt 53fpkt", shape=diamond, color=yellow];
1102[label="148.177.194.9;d;24pkt 24fpkt", shape=diamond, color=yellow];
1105[label="213.122.87.99;s;15pkt 15fpkt", shape=diamond, color=yellow];
2205[label="78.28.136.207;s;2pkt 2fpkt", shape=diamond, color=yellow];
3507[label="213.122.87.99;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.54.198.163:45033}[42.8571%]&lt;BR/&gt;{*:*, 148.177.194.9:*}[31.1688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.7248%)&lt;BR/&gt; 45033: (16.9725%)&lt;BR/&gt; 25: (3.21101%)&lt;BR/&gt; 10844: (2.75229%)&lt;BR/&gt; 15283: (1.37615%)&gt;];
}
457--458[label="1;1pkt 1fpkt"];
457--731[label="1;1pkt 1fpkt"];
457--982[label="1;1pkt 1fpkt"];
457--1105[label="0.0666667;1pkt 1fpkt"];
457--1853[label="1;1pkt 1fpkt"];
457--2205[label="1;2pkt 2fpkt"];
457--2379[label="1;21pkt 21fpkt"];
457--2380[label="1;1pkt 1fpkt"];
457--2770[label="1;1pkt 1fpkt"];
457--3507[label="0.0666667;1pkt 1fpkt"];
1102--1105[label="0.933333;14pkt 14fpkt"];
1102--3507[label="0.933333;14pkt 14fpkt"];
1105--2379[label="0.0666667;1pkt 1fpkt"];
1105--3507[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.194.9"/>
      <filter dst_ip="130.54.198.163" dst_port="45033"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
546[label="202.111.73.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
743[label="194.64.106.29;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.111.73.128:7665, 194.64.106.29:4883}[20%]&lt;BR/&gt;{202.154.185.33:80, 194.64.106.29:4820}[20%]&lt;BR/&gt;{202.154.185.33:80, 194.64.106.29:4821}[20%]&lt;BR/&gt;{202.154.185.33:80, 194.64.106.29:4825}[20%]&lt;BR/&gt;{202.154.185.33:80, 194.64.106.29:4833}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 7665: (16.6667%)&lt;BR/&gt; 4883: (16.6667%)&lt;BR/&gt; 4833: (8.33333%)&lt;BR/&gt; 4825: (8.33333%)&gt;];
}
546--743[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.106.29" dst_port="4833" src_ip="202.154.185.33" src_port="80"/>
      <filter dst_ip="194.64.106.29" dst_port="4825" src_ip="202.154.185.33" src_port="80"/>
      <filter dst_ip="194.64.106.29" dst_port="4821" src_ip="202.154.185.33" src_port="80"/>
      <filter dst_ip="194.64.106.29" dst_port="4820" src_ip="202.154.185.33" src_port="80"/>
      <filter dst_ip="194.64.106.29" dst_port="4883" src_ip="202.111.73.128" src_port="7665"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
565[label="72.218.141.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.123.67:1755, 72.218.141.140:44753}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44753: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
565--3361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.218.141.140" dst_port="44753" src_ip="195.81.123.67" src_port="1755"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
444[label="130.54.189.130;d;2pkt 2fpkt", shape=diamond, color=yellow];
445[label="20.103.92.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
766[label="130.54.189.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
2494[label="20.103.92.232;s;2pkt 2fpkt", shape=hexagon, color=black];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.123.160.90:4900, 130.54.189.130:1308}[25%]&lt;BR/&gt;{214.182.130.237:5050, 130.54.189.150:1219}[25%]&lt;BR/&gt;{20.103.92.232:11698, 130.54.189.130:1288}[25%]&lt;BR/&gt;{20.103.92.232:11916, 130.54.189.150:1308}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1308: (25%)&lt;BR/&gt; 11916: (18.75%)&lt;BR/&gt; 11698: (18.75%)&lt;BR/&gt; 1288: (18.75%)&lt;BR/&gt; 5050: (6.25%)&gt;];
}
444--445[label="0.5;1pkt 1fpkt"];
444--991[label="1;1pkt 1fpkt"];
444--2404[label="1;1pkt 1fpkt"];
444--2494[label="0.5;1pkt 1fpkt"];
445--766[label="0.5;1pkt 1fpkt"];
445--2494[label="1;2pkt 2fpkt"];
766--2494[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.189.150" dst_port="1308" src_ip="20.103.92.232" src_port="11916"/>
      <filter dst_ip="130.54.189.130" dst_port="1288" src_ip="20.103.92.232" src_port="11698"/>
      <filter dst_ip="130.54.189.150" dst_port="1219" src_ip="214.182.130.237" src_port="5050"/>
      <filter dst_ip="130.54.189.130" dst_port="1308" src_ip="20.123.160.90" src_port="4900"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
756[label="23.24.193.17;s;29pkt 29fpkt", shape=diamond, color=yellow];
3049[label="23.24.193.17;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4282[label="23.24.193.17;29pkt 29fpkt", shape=invtriangle, color=brown];
4926[label="23.24.193.17;29pkt 29fpkt", shape=invhouse, color=bisque];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.24.193.17:80, 194.76.179.5:*}[73.3333%]&lt;BR/&gt;{23.24.193.17:80, 194.76.176.69:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60131: (1.72414%)&lt;BR/&gt; 59994: (1.72414%)&lt;BR/&gt; 59411: (1.72414%)&lt;BR/&gt; 58880: (1.72414%)&gt;];
}
756--767[label="0.241379;7pkt 7fpkt"];
756--961[label="0.413793;12pkt 12fpkt"];
756--2912[label="0.103448;3pkt 3fpkt"];
756--2919[label="0.0689655;2pkt 2fpkt"];
756--2925[label="0.103448;3pkt 3fpkt"];
756--2931[label="0.0689655;2pkt 2fpkt"];
756--2933[label="0.103448;3pkt 3fpkt"];
756--2935[label="0.0689655;2pkt 2fpkt"];
756--3049[label="0.965517;28pkt 28fpkt"];
756--4282[label="0.965517;28pkt 28fpkt"];
756--4926[label="0.965517;28pkt 28fpkt"];
3049--4282[label="1;29pkt 29fpkt"];
3049--4926[label="1;29pkt 29fpkt"];
4282--4926[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="194.76.179.5" src_ip="23.24.193.17" src_port="80"/>
      <filter dst_ip="194.76.176.69" src_ip="23.24.193.17" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
569[label="148.177.217.33;s;636pkt 636fpkt", shape=diamond, color=yellow];
776[label="169.28.163.182;s;281pkt 281fpkt", shape=diamond, color=yellow];
781[label="205.72.216.137;d;409pkt 409fpkt", shape=diamond, color=yellow];
1077[label="175.150.185.61;s;121pkt 121fpkt", shape=diamond, color=yellow];
1815[label="148.177.86.204;s;83pkt 83fpkt", shape=diamond, color=yellow];
1834[label="75.188.151.154;d;40pkt 40fpkt", shape=diamond, color=yellow];
1862[label="75.188.232.1;d;16pkt 16fpkt", shape=diamond, color=yellow];
3422[label="148.177.48.81;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4488[label="148.177.48.81;10pkt 10fpkt", shape=invtriangle, color=brown];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.217.33:25, 205.72.216.137:*}[22.3084%]&lt;BR/&gt;{148.177.217.33:*, 205.72.216.137:113}[22.1361%]&lt;BR/&gt;{169.28.163.182:*, *:25}[20.4134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.2154%)&lt;BR/&gt; 113: (15.2553%)&lt;BR/&gt; 53: (0.373599%)&lt;BR/&gt; 110: (0.1868%)&lt;BR/&gt; 4043: (0.124533%)&gt;];
}
569--781[label="1;409pkt 409fpkt"];
569--1239[label="0.0263158;1pkt 1fpkt"];
569--1831[label="0.0731707;3pkt 3fpkt"];
569--1834[label="0.1;4pkt 4fpkt"];
569--1862[label="0.125;2pkt 2fpkt"];
569--1985[label="0.166667;8pkt 8fpkt"];
569--2005[label="0.111111;4pkt 4fpkt"];
776--1239[label="0.263158;10pkt 10fpkt"];
776--1346[label="0.108108;4pkt 4fpkt"];
776--1831[label="0.365854;15pkt 15fpkt"];
776--1834[label="0.3;12pkt 12fpkt"];
776--1862[label="0.3125;5pkt 5fpkt"];
776--2005[label="0.333333;12pkt 12fpkt"];
1077--1346[label="0.189189;7pkt 7fpkt"];
1077--1834[label="0.025;1pkt 1fpkt"];
1077--2017[label="0.333333;3pkt 3fpkt"];
1815--1834[label="0.025;1pkt 1fpkt"];
1815--1985[label="0.0833333;4pkt 4fpkt"];
1834--2443[label="0.025;1pkt 1fpkt"];
1834--2512[label="0.2;8pkt 8fpkt"];
1834--2547[label="0.1;4pkt 4fpkt"];
1834--2940[label="0.025;1pkt 1fpkt"];
1834--3311[label="0.025;1pkt 1fpkt"];
1834--3672[label="0.0625;1pkt 1fpkt"];
1834--3887[label="0.025;1pkt 1fpkt"];
1834--4225[label="0.025;1pkt 1fpkt"];
1834--4429[label="0.025;1pkt 1fpkt"];
1834--4741[label="0.025;1pkt 1fpkt"];
1862--2443[label="0.125;2pkt 2fpkt"];
1862--2547[label="0.0625;1pkt 1fpkt"];
1862--3311[label="0.125;2pkt 2fpkt"];
1862--3353[label="0.0625;1pkt 1fpkt"];
1862--3422[label="0.1;1pkt 1fpkt"];
1862--3905[label="0.0625;1pkt 1fpkt"];
1862--4429[label="0.125;2pkt 2fpkt"];
1862--4453[label="0.0625;1pkt 1fpkt"];
1862--4488[label="0.1;1pkt 1fpkt"];
3422--4488[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="169.28.163.182"/>
      <filter dst_ip="205.72.216.137" src_ip="148.177.217.33" src_port="25"/>
      <filter dst_ip="205.72.216.137" dst_port="113" src_ip="148.177.217.33"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
814[label="73.61.133.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
815[label="144.224.65.140;s;21pkt 21fpkt", shape=diamond, color=yellow];
1698[label="204.50.57.24;d;9pkt 9fpkt", shape=diamond, color=yellow];
2327[label="144.224.65.140;s;3pkt 3fpkt", shape=hexagon, color=black];
3715[label="144.224.65.140;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.65.140:*, 204.50.57.24:80}[45.4545%]&lt;BR/&gt;{144.224.65.140:*, 204.28.113.197:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3704%)&lt;BR/&gt; 8008: (3.7037%)&lt;BR/&gt; 3712: (3.7037%)&lt;BR/&gt; 4151: (2.77778%)&lt;BR/&gt; 4150: (2.77778%)&gt;];
}
814--815[label="1;1pkt 1fpkt"];
814--2327[label="1;1pkt 1fpkt"];
814--3715[label="1;1pkt 1fpkt"];
815--1698[label="0.888889;8pkt 8fpkt"];
815--2327[label="1;3pkt 3fpkt"];
815--2890[label="0.0952381;2pkt 2fpkt"];
815--3715[label="1;20pkt 20fpkt"];
1698--3715[label="0.888889;8pkt 8fpkt"];
2327--2890[label="0.666667;2pkt 2fpkt"];
2327--3715[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.50.57.24" dst_port="80" src_ip="144.224.65.140"/>
      <filter dst_ip="204.28.113.197" dst_port="80" src_ip="144.224.65.140"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
782[label="209.172.252.109;s;1264pkt 1264fpkt", shape=diamond, color=yellow];
819[label="214.216.234.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
1040[label="195.81.123.84;d;8pkt 8fpkt", shape=diamond, color=yellow];
2421[label="214.216.234.21;s;1pkt 1fpkt", shape=hexagon, color=black];
3567[label="209.172.252.109;2011pkt 2011fpkt", shape=pentagon, color=darkviolet];
4566[label="209.172.252.109;2011pkt 2011fpkt", shape=invtriangle, color=brown];
5048[label="209.172.252.109;2011pkt 2011fpkt", shape=invhouse, color=bisque];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.172.252.109:80, *:*}[99.6531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9384%)&lt;BR/&gt; 48966: (0.0752703%)&lt;BR/&gt; 64773: (0.054742%)&lt;BR/&gt; 60520: (0.054742%)&lt;BR/&gt; 57688: (0.054742%)&gt;];
}
782--1040[label="0.125;1pkt 1fpkt"];
782--1759[label="0.00268817;1pkt 1fpkt"];
782--2304[label="0.00862069;1pkt 1fpkt"];
782--2322[label="1;432pkt 432fpkt"];
782--2912[label="0.0893987;113pkt 113fpkt"];
782--2919[label="0.085443;108pkt 108fpkt"];
782--2925[label="0.0893987;113pkt 113fpkt"];
782--2931[label="0.085443;108pkt 108fpkt"];
782--2933[label="0.0893987;113pkt 113fpkt"];
782--2935[label="0.085443;108pkt 108fpkt"];
782--3567[label="1;1264pkt 1264fpkt"];
782--4566[label="1;1264pkt 1264fpkt"];
782--5048[label="1;1264pkt 1264fpkt"];
819--1040[label="1;1pkt 1fpkt"];
819--2421[label="1;1pkt 1fpkt"];
1040--2322[label="0.125;1pkt 1fpkt"];
1040--2421[label="1;1pkt 1fpkt"];
1040--2912[label="0.125;1pkt 1fpkt"];
1040--2925[label="0.125;1pkt 1fpkt"];
1040--2933[label="0.125;1pkt 1fpkt"];
1040--3567[label="0.125;1pkt 1fpkt"];
1040--4566[label="0.125;1pkt 1fpkt"];
1040--5048[label="0.125;1pkt 1fpkt"];
3567--4566[label="1;2011pkt 2011fpkt"];
3567--5048[label="1;2011pkt 2011fpkt"];
4566--5048[label="1;2011pkt 2011fpkt"];
</description>
    <slice>
      <filter src_ip="209.172.252.109" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
827[label="130.54.77.28;d;3pkt 3fpkt", shape=diamond, color=yellow];
828[label="213.128.30.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.152.175.42:7000, 130.54.77.28:26234}[33.3333%]&lt;BR/&gt;{213.128.30.81:1698, 130.54.77.28:7461}[33.3333%]&lt;BR/&gt;{208.186.87.89:10015, 130.54.77.28:3182}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7461: (25%)&lt;BR/&gt; 1698: (25%)&lt;BR/&gt; 26234: (12.5%)&lt;BR/&gt; 10015: (12.5%)&lt;BR/&gt; 7000: (12.5%)&gt;];
}
827--828[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.77.28" dst_port="3182" src_ip="208.186.87.89" src_port="10015"/>
      <filter dst_ip="130.54.77.28" dst_port="7461" src_ip="213.128.30.81" src_port="1698"/>
      <filter dst_ip="130.54.77.28" dst_port="26234" src_ip="221.152.175.42" src_port="7000"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
647[label="209.64.179.112;s;194pkt 194fpkt", shape=diamond, color=yellow];
829[label="148.177.217.50;d;184pkt 184fpkt", shape=diamond, color=yellow];
1096[label="221.237.28.206;s;23pkt 23fpkt", shape=diamond, color=yellow];
1192[label="148.177.217.59;d;208pkt 208fpkt", shape=diamond, color=yellow];
2032[label="195.53.100.30;s;134pkt 134fpkt", shape=diamond, color=yellow];
2047[label="213.98.66.136;s;24pkt 24fpkt", shape=diamond, color=yellow];
2817[label="213.98.66.136;s;24pkt 24fpkt", shape=hexagon, color=black];
3698[label="213.98.66.136;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4197[label="213.64.11.247;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4637[label="213.98.66.136;28pkt 28fpkt", shape=invtriangle, color=brown];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.64.179.112:*, *:80}[33.7591%]&lt;BR/&gt;{*:*, 148.177.217.50:80}[33.5766%]&lt;BR/&gt;{195.53.100.30:*, 148.177.217.59:80}[20.9854%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9571%)&lt;BR/&gt; 0: (1.04287%)&lt;BR/&gt; 55972: (0.289687%)&lt;BR/&gt; 55956: (0.289687%)&lt;BR/&gt; 55927: (0.289687%)&gt;];
}
647--829[label="0.255435;47pkt 47fpkt"];
647--839[label="0.00515464;1pkt 1fpkt"];
647--849[label="0.916667;11pkt 11fpkt"];
647--1192[label="0.0360825;7pkt 7fpkt"];
647--2890[label="0.0618557;12pkt 12fpkt"];
829--1096[label="0.347826;8pkt 8fpkt"];
829--2032[label="0.410448;55pkt 55fpkt"];
829--2047[label="0.208333;5pkt 5fpkt"];
829--2817[label="0.208333;5pkt 5fpkt"];
829--2890[label="0.11413;21pkt 21fpkt"];
829--3698[label="0.172414;5pkt 5fpkt"];
829--4637[label="0.178571;5pkt 5fpkt"];
1096--1192[label="0.521739;12pkt 12fpkt"];
1096--2890[label="0.0869565;2pkt 2fpkt"];
1192--2032[label="0.589552;79pkt 79fpkt"];
1192--2047[label="0.458333;11pkt 11fpkt"];
1192--2817[label="0.458333;11pkt 11fpkt"];
1192--2890[label="0.240385;50pkt 50fpkt"];
1192--3698[label="0.37931;11pkt 11fpkt"];
1192--4197[label="1;15pkt 15fpkt"];
1192--4637[label="0.392857;11pkt 11fpkt"];
2047--2817[label="1;24pkt 24fpkt"];
2047--3698[label="1;24pkt 24fpkt"];
2047--4637[label="0.958333;23pkt 23fpkt"];
2817--3698[label="1;24pkt 24fpkt"];
2817--4637[label="0.958333;23pkt 23fpkt"];
3698--4637[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.64.179.112"/>
      <filter dst_ip="148.177.217.50" dst_port="80"/>
      <filter dst_ip="148.177.217.59" dst_port="80" src_ip="195.53.100.30"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
784[label="130.54.26.141;d;1178pkt 1178fpkt", shape=diamond, color=yellow];
845[label="195.32.236.234;s;130pkt 130fpkt", shape=diamond, color=yellow];
1276[label="196.70.37.212;s;35pkt 35fpkt", shape=diamond, color=yellow];
1655[label="213.12.44.120;s;51pkt 51fpkt", shape=diamond, color=yellow];
1852[label="130.54.81.16;d;74pkt 74fpkt", shape=diamond, color=yellow];
2156[label="223.58.181.212;s;28pkt 28fpkt", shape=diamond, color=yellow];
2416[label="130.54.26.141;d;1115pkt 1115fpkt", shape=hexagon, color=black];
2559[label="195.32.236.234;s;93pkt 93fpkt", shape=hexagon, color=black];
3035[label="213.12.44.16;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3159[label="195.32.236.33;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3306[label="212.183.239.57;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3455[label="214.4.61.90;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3502[label="210.5.165.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3599[label="210.5.165.116;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3616[label="210.5.165.119;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3754[label="221.42.230.147;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3808[label="20.105.37.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3813[label="76.103.131.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4087[label="73.209.208.218;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4123[label="76.103.177.227;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4162[label="195.32.236.236;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4173[label="220.87.97.238;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4204[label="221.42.230.248;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4425[label="212.183.239.57;14pkt 14fpkt", shape=invtriangle, color=brown];
4509[label="214.4.61.90;21pkt 21fpkt", shape=invtriangle, color=brown];
4585[label="210.5.165.116;86pkt 86fpkt", shape=invtriangle, color=brown];
4702[label="20.105.37.160;3pkt 3fpkt", shape=invtriangle, color=brown];
4704[label="76.103.131.160;1pkt 1fpkt", shape=invtriangle, color=brown];
4867[label="195.32.236.236;12pkt 12fpkt", shape=invtriangle, color=brown];
4873[label="220.87.97.238;3pkt 3fpkt", shape=invtriangle, color=brown];
4888[label="221.42.230.248;16pkt 16fpkt", shape=invtriangle, color=brown];
4988[label="76.112.165.60;15pkt 15fpkt", shape=invhouse, color=bisque];
5022[label="214.4.61.90;22pkt 22fpkt", shape=invhouse, color=bisque];
5112[label="76.103.131.160;1pkt 1fpkt", shape=invhouse, color=bisque];
5182[label="220.87.97.238;2pkt 2fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.54.26.141:*}[70.5489%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.5839%)&lt;BR/&gt; 8030: (4.2236%)&lt;BR/&gt; 8018: (0.885093%)&lt;BR/&gt; 8080: (0.869565%)&lt;BR/&gt; 8037: (0.791925%)&gt;];
}
784--785[label="1;22pkt 22fpkt"];
784--845[label="0.0461538;6pkt 6fpkt"];
784--986[label="0.00735294;1pkt 1fpkt"];
784--998[label="0.0384615;3pkt 3fpkt"];
784--1079[label="0.555556;10pkt 10fpkt"];
784--1204[label="0.0111111;1pkt 1fpkt"];
784--1276[label="0.114286;4pkt 4fpkt"];
784--1280[label="0.0187793;4pkt 4fpkt"];
784--1324[label="0.042735;5pkt 5fpkt"];
784--1342[label="0.0188679;3pkt 3fpkt"];
784--1527[label="0.0888889;4pkt 4fpkt"];
784--1551[label="1;6pkt 6fpkt"];
784--1581[label="0.024;3pkt 3fpkt"];
784--1621[label="0.0153846;1pkt 1fpkt"];
784--1655[label="0.372549;19pkt 19fpkt"];
784--1730[label="1;31pkt 31fpkt"];
784--1859[label="1;55pkt 55fpkt"];
784--1898[label="1;15pkt 15fpkt"];
784--1983[label="0.0655738;4pkt 4fpkt"];
784--2076[label="0.00645161;1pkt 1fpkt"];
784--2138[label="0.235294;8pkt 8fpkt"];
784--2156[label="0.0357143;1pkt 1fpkt"];
784--2416[label="1;1115pkt 1115fpkt"];
784--2441[label="0.555556;10pkt 10fpkt"];
784--2524[label="0.0238095;1pkt 1fpkt"];
784--2559[label="0.516129;48pkt 48fpkt"];
784--2606[label="0.0104167;3pkt 3fpkt"];
784--2625[label="0.0888889;4pkt 4fpkt"];
784--2706[label="1;6pkt 6fpkt"];
784--2880[label="0.121212;4pkt 4fpkt"];
784--2912[label="0.065365;77pkt 77fpkt"];
784--2919[label="0.0670628;79pkt 79fpkt"];
784--2925[label="0.065365;77pkt 77fpkt"];
784--2931[label="0.0670628;79pkt 79fpkt"];
784--2933[label="0.065365;77pkt 77fpkt"];
784--2935[label="0.0670628;79pkt 79fpkt"];
784--2944[label="0.00516796;2pkt 2fpkt"];
784--3035[label="0.538462;21pkt 21fpkt"];
784--3102[label="0.125;1pkt 1fpkt"];
784--3159[label="1;17pkt 17fpkt"];
784--3225[label="0.375;12pkt 12fpkt"];
784--3306[label="1;13pkt 13fpkt"];
784--3323[label="1;14pkt 14fpkt"];
784--3350[label="0.0666667;1pkt 1fpkt"];
784--3358[label="0.2;6pkt 6fpkt"];
784--3416[label="0.666667;4pkt 4fpkt"];
784--3433[label="0.0606061;4pkt 4fpkt"];
784--3455[label="0.047619;1pkt 1fpkt"];
784--3502[label="1;6pkt 6fpkt"];
784--3519[label="0.00507614;1pkt 1fpkt"];
784--3542[label="0.0697674;3pkt 3fpkt"];
784--3599[label="1;86pkt 86fpkt"];
784--3609[label="1;1pkt 1fpkt"];
784--3616[label="1;42pkt 42fpkt"];
784--3754[label="1;19pkt 19fpkt"];
784--3808[label="1;2pkt 2fpkt"];
784--3813[label="1;1pkt 1fpkt"];
784--4087[label="0.714286;5pkt 5fpkt"];
784--4123[label="0.971429;34pkt 34fpkt"];
784--4157[label="0.253521;54pkt 54fpkt"];
784--4162[label="1;13pkt 13fpkt"];
784--4166[label="0.0714286;1pkt 1fpkt"];
784--4173[label="1;3pkt 3fpkt"];
784--4204[label="1;16pkt 16fpkt"];
784--4226[label="0.00516796;2pkt 2fpkt"];
784--4425[label="1;14pkt 14fpkt"];
784--4435[label="1;15pkt 15fpkt"];
784--4458[label="0.2;6pkt 6fpkt"];
784--4484[label="0.571429;4pkt 4fpkt"];
784--4495[label="0.0597015;4pkt 4fpkt"];
784--4509[label="0.047619;1pkt 1fpkt"];
784--4555[label="0.0697674;3pkt 3fpkt"];
784--4585[label="1;86pkt 86fpkt"];
784--4590[label="1;1pkt 1fpkt"];
784--4702[label="1;3pkt 3fpkt"];
784--4704[label="1;1pkt 1fpkt"];
784--4867[label="1;12pkt 12fpkt"];
784--4869[label="0.0714286;1pkt 1fpkt"];
784--4873[label="1;3pkt 3fpkt"];
784--4888[label="1;16pkt 16fpkt"];
784--4917[label="0.0185185;4pkt 4fpkt"];
784--4988[label="1;15pkt 15fpkt"];
784--5014[label="0.0597015;4pkt 4fpkt"];
784--5022[label="0.0454545;1pkt 1fpkt"];
784--5045[label="0.0697674;3pkt 3fpkt"];
784--5060[label="1;1pkt 1fpkt"];
784--5112[label="1;1pkt 1fpkt"];
784--5182[label="1;2pkt 2fpkt"];
845--2416[label="0.0461538;6pkt 6fpkt"];
845--2559[label="0.129032;12pkt 12fpkt"];
845--4157[label="1;130pkt 130fpkt"];
1276--2383[label="0.0571429;2pkt 2fpkt"];
1276--2384[label="0.714286;25pkt 25fpkt"];
1276--2416[label="0.0857143;3pkt 3fpkt"];
1276--2912[label="0.0285714;1pkt 1fpkt"];
1276--2919[label="0.514286;18pkt 18fpkt"];
1276--2925[label="0.0285714;1pkt 1fpkt"];
1276--2931[label="0.514286;18pkt 18fpkt"];
1276--2933[label="0.0285714;1pkt 1fpkt"];
1276--2935[label="0.514286;18pkt 18fpkt"];
1655--1852[label="0.607843;31pkt 31fpkt"];
1655--2416[label="0.215686;11pkt 11fpkt"];
1655--2912[label="0.0196078;1pkt 1fpkt"];
1655--2919[label="0.196078;10pkt 10fpkt"];
1655--2925[label="0.0196078;1pkt 1fpkt"];
1655--2931[label="0.196078;10pkt 10fpkt"];
1655--2933[label="0.0196078;1pkt 1fpkt"];
1655--2935[label="0.196078;10pkt 10fpkt"];
1852--3035[label="0.410256;16pkt 16fpkt"];
2156--2378[label="0.142857;4pkt 4fpkt"];
2156--2416[label="0.0357143;1pkt 1fpkt"];
2156--2623[label="0.178571;5pkt 5fpkt"];
2156--2879[label="0.178571;5pkt 5fpkt"];
2156--2912[label="0.0714286;2pkt 2fpkt"];
2156--2925[label="0.0714286;2pkt 2fpkt"];
2156--2933[label="0.0714286;2pkt 2fpkt"];
2416--2441[label="0.555556;10pkt 10fpkt"];
2416--2524[label="0.0238095;1pkt 1fpkt"];
2416--2559[label="0.516129;48pkt 48fpkt"];
2416--2606[label="0.0104167;3pkt 3fpkt"];
2416--2625[label="0.0888889;4pkt 4fpkt"];
2416--2706[label="1;6pkt 6fpkt"];
2416--2880[label="0.121212;4pkt 4fpkt"];
2416--2912[label="0.0690583;77pkt 77fpkt"];
2416--2919[label="0.070852;79pkt 79fpkt"];
2416--2925[label="0.0690583;77pkt 77fpkt"];
2416--2931[label="0.070852;79pkt 79fpkt"];
2416--2933[label="0.0690583;77pkt 77fpkt"];
2416--2935[label="0.070852;79pkt 79fpkt"];
2416--2944[label="0.00516796;2pkt 2fpkt"];
2416--3035[label="0.153846;6pkt 6fpkt"];
2416--3102[label="0.125;1pkt 1fpkt"];
2416--3159[label="1;17pkt 17fpkt"];
2416--3225[label="0.375;12pkt 12fpkt"];
2416--3306[label="1;13pkt 13fpkt"];
2416--3323[label="0.785714;11pkt 11fpkt"];
2416--3350[label="0.0666667;1pkt 1fpkt"];
2416--3358[label="0.2;6pkt 6fpkt"];
2416--3416[label="0.666667;4pkt 4fpkt"];
2416--3433[label="0.0606061;4pkt 4fpkt"];
2416--3455[label="0.047619;1pkt 1fpkt"];
2416--3502[label="1;6pkt 6fpkt"];
2416--3519[label="0.00507614;1pkt 1fpkt"];
2416--3542[label="0.0697674;3pkt 3fpkt"];
2416--3599[label="1;86pkt 86fpkt"];
2416--3609[label="1;1pkt 1fpkt"];
2416--3616[label="1;42pkt 42fpkt"];
2416--3754[label="1;19pkt 19fpkt"];
2416--3813[label="1;1pkt 1fpkt"];
2416--4087[label="0.714286;5pkt 5fpkt"];
2416--4123[label="0.942857;33pkt 33fpkt"];
2416--4157[label="0.253521;54pkt 54fpkt"];
2416--4162[label="1;13pkt 13fpkt"];
2416--4173[label="1;3pkt 3fpkt"];
2416--4204[label="1;16pkt 16fpkt"];
2416--4226[label="0.00516796;2pkt 2fpkt"];
2416--4425[label="1;14pkt 14fpkt"];
2416--4435[label="0.8;12pkt 12fpkt"];
2416--4458[label="0.2;6pkt 6fpkt"];
2416--4484[label="0.571429;4pkt 4fpkt"];
2416--4495[label="0.0597015;4pkt 4fpkt"];
2416--4509[label="0.047619;1pkt 1fpkt"];
2416--4555[label="0.0697674;3pkt 3fpkt"];
2416--4585[label="1;86pkt 86fpkt"];
2416--4590[label="1;1pkt 1fpkt"];
2416--4702[label="0.333333;1pkt 1fpkt"];
2416--4704[label="1;1pkt 1fpkt"];
2416--4867[label="1;12pkt 12fpkt"];
2416--4873[label="1;3pkt 3fpkt"];
2416--4888[label="1;16pkt 16fpkt"];
2416--4917[label="0.0138889;3pkt 3fpkt"];
2416--4988[label="0.8;12pkt 12fpkt"];
2416--5014[label="0.0597015;4pkt 4fpkt"];
2416--5022[label="0.0454545;1pkt 1fpkt"];
2416--5045[label="0.0697674;3pkt 3fpkt"];
2416--5060[label="1;1pkt 1fpkt"];
2416--5112[label="1;1pkt 1fpkt"];
2416--5182[label="1;2pkt 2fpkt"];
2559--4157[label="1;93pkt 93fpkt"];
3306--4425[label="1;13pkt 13fpkt"];
3455--4509[label="1;21pkt 21fpkt"];
3455--5022[label="1;21pkt 21fpkt"];
3599--4585[label="1;86pkt 86fpkt"];
3808--4702[label="1;2pkt 2fpkt"];
3813--4704[label="1;1pkt 1fpkt"];
3813--5112[label="1;1pkt 1fpkt"];
4162--4867[label="1;12pkt 12fpkt"];
4173--4873[label="1;3pkt 3fpkt"];
4173--5182[label="1;2pkt 2fpkt"];
4204--4888[label="1;16pkt 16fpkt"];
4509--5022[label="1;21pkt 21fpkt"];
4704--5112[label="1;1pkt 1fpkt"];
4873--5182[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.141" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
820[label="148.177.203.114;d;271pkt 271fpkt", shape=diamond, color=yellow];
891[label="194.183.11.65;s;253pkt 253fpkt", shape=diamond, color=yellow];
1937[label="148.177.119.47;d;134pkt 134fpkt", shape=diamond, color=yellow];
3331[label="20.92.32.62;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3430[label="194.183.11.84;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4018[label="213.2.1.204;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4442[label="20.92.32.62;13pkt 13fpkt", shape=invtriangle, color=brown];
4493[label="194.183.11.84;15pkt 15fpkt", shape=invtriangle, color=brown];
4800[label="213.2.1.204;7pkt 7fpkt", shape=invtriangle, color=brown];
4992[label="20.92.32.62;13pkt 13fpkt", shape=invhouse, color=bisque];
5149[label="213.2.1.204;8pkt 8fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.183.11.65:80, 148.177.203.114:*}[31.4655%]&lt;BR/&gt;{*:80, 148.177.119.47:*}[27.1552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1345%)&lt;BR/&gt; 53: (0.399467%)&lt;BR/&gt; 1068: (0.332889%)&lt;BR/&gt; 1573: (0.266312%)&lt;BR/&gt; 1571: (0.266312%)&gt;];
}
820--891[label="0.577075;146pkt 146fpkt"];
820--1365[label="0.590909;13pkt 13fpkt"];
820--2912[label="0.0811808;22pkt 22fpkt"];
820--2925[label="0.0811808;22pkt 22fpkt"];
820--2933[label="0.0811808;22pkt 22fpkt"];
820--3331[label="0.857143;12pkt 12fpkt"];
820--4018[label="1;8pkt 8fpkt"];
820--4442[label="0.846154;11pkt 11fpkt"];
820--4800[label="1;7pkt 7fpkt"];
820--4992[label="0.846154;11pkt 11fpkt"];
820--5149[label="1;8pkt 8fpkt"];
891--1937[label="0.447761;60pkt 60fpkt"];
891--2912[label="0.225296;57pkt 57fpkt"];
891--2925[label="0.225296;57pkt 57fpkt"];
891--2933[label="0.225296;57pkt 57fpkt"];
1937--1983[label="0.721311;44pkt 44fpkt"];
1937--2075[label="0.0128205;1pkt 1fpkt"];
1937--2911[label="0.00746269;1pkt 1fpkt"];
1937--2912[label="0.0149254;2pkt 2fpkt"];
1937--2918[label="0.00746269;1pkt 1fpkt"];
1937--2919[label="0.0223881;3pkt 3fpkt"];
1937--2924[label="0.00746269;1pkt 1fpkt"];
1937--2925[label="0.0149254;2pkt 2fpkt"];
1937--2930[label="0.00746269;1pkt 1fpkt"];
1937--2931[label="0.0223881;3pkt 3fpkt"];
1937--2932[label="0.00746269;1pkt 1fpkt"];
1937--2933[label="0.0149254;2pkt 2fpkt"];
1937--2934[label="0.00746269;1pkt 1fpkt"];
1937--2935[label="0.0223881;3pkt 3fpkt"];
1937--3430[label="0.333333;5pkt 5fpkt"];
1937--3485[label="0.0126582;1pkt 1fpkt"];
1937--3495[label="0.0434783;1pkt 1fpkt"];
1937--4493[label="0.333333;5pkt 5fpkt"];
3331--4442[label="1;13pkt 13fpkt"];
3331--4992[label="1;13pkt 13fpkt"];
3430--4493[label="1;15pkt 15fpkt"];
4018--4800[label="1;7pkt 7fpkt"];
4018--5149[label="1;8pkt 8fpkt"];
4442--4992[label="1;13pkt 13fpkt"];
4800--5149[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.119.47" src_port="80"/>
      <filter dst_ip="148.177.203.114" src_ip="194.183.11.65" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
953[label="169.28.112.42;d;280pkt 280fpkt", shape=diamond, color=yellow];
955[label="196.81.199.51;s;280pkt 280fpkt", shape=diamond, color=yellow];
2597[label="196.81.199.51;s;197pkt 197fpkt", shape=hexagon, color=black];
3262[label="196.81.199.51;279pkt 279fpkt", shape=pentagon, color=darkviolet];
4400[label="196.81.199.51;280pkt 280fpkt", shape=invtriangle, color=brown];
4974[label="196.81.199.51;280pkt 280fpkt", shape=invhouse, color=bisque];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.81.199.51:80, 169.28.112.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1770: (0.18797%)&lt;BR/&gt; 1769: (0.18797%)&lt;BR/&gt; 1768: (0.18797%)&lt;BR/&gt; 1767: (0.18797%)&gt;];
}
953--955[label="1;280pkt 280fpkt"];
953--2597[label="1;197pkt 197fpkt"];
953--2912[label="0.0821429;23pkt 23fpkt"];
953--2919[label="0.103571;29pkt 29fpkt"];
953--2925[label="0.0821429;23pkt 23fpkt"];
953--2931[label="0.103571;29pkt 29fpkt"];
953--2933[label="0.0821429;23pkt 23fpkt"];
953--2935[label="0.103571;29pkt 29fpkt"];
953--3262[label="1;279pkt 279fpkt"];
953--4400[label="1;280pkt 280fpkt"];
953--4974[label="1;280pkt 280fpkt"];
955--2597[label="1;197pkt 197fpkt"];
955--2912[label="0.0821429;23pkt 23fpkt"];
955--2919[label="0.103571;29pkt 29fpkt"];
955--2925[label="0.0821429;23pkt 23fpkt"];
955--2931[label="0.103571;29pkt 29fpkt"];
955--2933[label="0.0821429;23pkt 23fpkt"];
955--2935[label="0.103571;29pkt 29fpkt"];
955--3262[label="1;279pkt 279fpkt"];
955--4400[label="1;280pkt 280fpkt"];
955--4974[label="1;280pkt 280fpkt"];
2597--2912[label="0.116751;23pkt 23fpkt"];
2597--2919[label="0.147208;29pkt 29fpkt"];
2597--2925[label="0.116751;23pkt 23fpkt"];
2597--2931[label="0.147208;29pkt 29fpkt"];
2597--2933[label="0.116751;23pkt 23fpkt"];
2597--2935[label="0.147208;29pkt 29fpkt"];
2597--3262[label="0.994924;196pkt 196fpkt"];
2597--4400[label="1;197pkt 197fpkt"];
2597--4974[label="1;197pkt 197fpkt"];
3262--4400[label="1;279pkt 279fpkt"];
3262--4974[label="1;279pkt 279fpkt"];
4400--4974[label="1;280pkt 280fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.112.42" src_ip="196.81.199.51" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
428[label="148.176.210.75;s;51pkt 51fpkt", shape=diamond, color=yellow];
957[label="20.139.63.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
1190[label="197.84.152.191;d;43pkt 43fpkt", shape=diamond, color=yellow];
1382[label="144.39.47.89;s;63pkt 63fpkt", shape=diamond, color=yellow];
1387[label="148.177.48.136;s;50pkt 50fpkt", shape=diamond, color=yellow];
1938[label="197.146.146.64;d;2pkt 2fpkt", shape=diamond, color=yellow];
1992[label="129.153.224.83;d;76pkt 76fpkt", shape=diamond, color=yellow];
2273[label="148.176.210.75;s;14pkt 14fpkt", shape=hexagon, color=black];
2582[label="144.39.47.89;s;63pkt 63fpkt", shape=hexagon, color=black];
2634[label="148.177.48.136;s;50pkt 50fpkt", shape=hexagon, color=black];
3156[label="148.176.182.33;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3405[label="148.176.210.75;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3450[label="144.39.47.89;89pkt 89fpkt", shape=pentagon, color=darkviolet];
3666[label="148.177.4.130;84pkt 84fpkt", shape=pentagon, color=darkviolet];
3697[label="148.177.48.136;49pkt 49fpkt", shape=pentagon, color=darkviolet];
4338[label="148.176.182.33;22pkt 22fpkt", shape=invtriangle, color=brown];
4478[label="148.176.210.75;52pkt 52fpkt", shape=invtriangle, color=brown];
4505[label="144.39.47.89;88pkt 88fpkt", shape=invtriangle, color=brown];
4636[label="148.177.48.136;50pkt 50fpkt", shape=invtriangle, color=brown];
4954[label="148.176.182.33;21pkt 21fpkt", shape=invhouse, color=bisque];
5008[label="148.176.210.75;51pkt 51fpkt", shape=invhouse, color=bisque];
5019[label="144.39.47.89;89pkt 89fpkt", shape=invhouse, color=bisque];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.47.89:*, *:80}[21.1587%]&lt;BR/&gt;{148.177.4.130:*, *:80}[20.403%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4033%)&lt;BR/&gt; 443: (2.91397%)&lt;BR/&gt; 64587: (1.34135%)&lt;BR/&gt; 0: (1.01758%)&lt;BR/&gt; 64588: (0.740056%)&gt;];
}
428--957[label="1;1pkt 1fpkt"];
428--1009[label="0.0196078;1pkt 1fpkt"];
428--1190[label="0.0465116;2pkt 2fpkt"];
428--1938[label="0.5;1pkt 1fpkt"];
428--1992[label="0.196078;10pkt 10fpkt"];
428--2273[label="1;14pkt 14fpkt"];
428--2890[label="0.0784314;4pkt 4fpkt"];
428--3405[label="1;51pkt 51fpkt"];
428--4478[label="1;51pkt 51fpkt"];
428--5008[label="0.980392;50pkt 50fpkt"];
957--2273[label="1;1pkt 1fpkt"];
957--3405[label="1;1pkt 1fpkt"];
957--4478[label="1;1pkt 1fpkt"];
957--5008[label="1;1pkt 1fpkt"];
1190--1387[label="0.0465116;2pkt 2fpkt"];
1190--1578[label="0.0344828;1pkt 1fpkt"];
1190--1663[label="0.0930233;4pkt 4fpkt"];
1190--1833[label="0.0465116;2pkt 2fpkt"];
1190--2273[label="0.142857;2pkt 2fpkt"];
1190--2499[label="0.0232558;1pkt 1fpkt"];
1190--2634[label="0.0465116;2pkt 2fpkt"];
1190--2687[label="0.0930233;4pkt 4fpkt"];
1190--2716[label="0.0344828;1pkt 1fpkt"];
1190--2890[label="0.0697674;3pkt 3fpkt"];
1190--3156[label="0.047619;1pkt 1fpkt"];
1190--3405[label="0.0465116;2pkt 2fpkt"];
1190--3450[label="0.0232558;1pkt 1fpkt"];
1190--3666[label="0.0930233;4pkt 4fpkt"];
1190--3672[label="0.125;2pkt 2fpkt"];
1190--3680[label="0.0869565;2pkt 2fpkt"];
1190--3697[label="0.0465116;2pkt 2fpkt"];
1190--3699[label="0.111111;2pkt 2fpkt"];
1190--4002[label="0.0465116;2pkt 2fpkt"];
1190--4017[label="0.0930233;4pkt 4fpkt"];
1190--4036[label="0.0465116;2pkt 2fpkt"];
1190--4338[label="0.0454545;1pkt 1fpkt"];
1190--4478[label="0.0465116;2pkt 2fpkt"];
1190--4505[label="0.0232558;1pkt 1fpkt"];
1190--4618[label="0.0930233;4pkt 4fpkt"];
1190--4636[label="0.0465116;2pkt 2fpkt"];
1190--4793[label="0.0465116;2pkt 2fpkt"];
1190--4799[label="0.0930233;4pkt 4fpkt"];
1190--4809[label="0.0465116;2pkt 2fpkt"];
1190--4954[label="0.047619;1pkt 1fpkt"];
1190--5008[label="0.0465116;2pkt 2fpkt"];
1190--5019[label="0.0232558;1pkt 1fpkt"];
1382--1431[label="0.015873;1pkt 1fpkt"];
1382--1669[label="0.04;1pkt 1fpkt"];
1382--1819[label="0.037037;1pkt 1fpkt"];
1382--1826[label="0.016129;1pkt 1fpkt"];
1382--2082[label="0.015873;1pkt 1fpkt"];
1382--2110[label="0.015873;1pkt 1fpkt"];
1382--2118[label="0.015873;1pkt 1fpkt"];
1382--2582[label="1;63pkt 63fpkt"];
1382--2692[label="0.0666667;1pkt 1fpkt"];
1382--3450[label="1;63pkt 63fpkt"];
1382--4505[label="1;63pkt 63fpkt"];
1382--5019[label="1;63pkt 63fpkt"];
1387--1684[label="0.0227273;1pkt 1fpkt"];
1387--1826[label="0.42;21pkt 21fpkt"];
1387--2634[label="1;50pkt 50fpkt"];
1387--3697[label="1;49pkt 49fpkt"];
1387--4636[label="1;50pkt 50fpkt"];
1938--2273[label="0.5;1pkt 1fpkt"];
1938--2523[label="0.5;1pkt 1fpkt"];
1938--3405[label="0.5;1pkt 1fpkt"];
1938--4478[label="0.5;1pkt 1fpkt"];
1938--5008[label="0.5;1pkt 1fpkt"];
1992--2019[label="0.956522;66pkt 66fpkt"];
1992--2273[label="0.142857;2pkt 2fpkt"];
1992--2890[label="0.0263158;2pkt 2fpkt"];
1992--3405[label="0.192308;10pkt 10fpkt"];
1992--4093[label="0.956522;66pkt 66fpkt"];
1992--4478[label="0.192308;10pkt 10fpkt"];
1992--5008[label="0.196078;10pkt 10fpkt"];
2273--2890[label="0.285714;4pkt 4fpkt"];
2273--3405[label="1;14pkt 14fpkt"];
2273--4478[label="1;14pkt 14fpkt"];
2273--5008[label="0.928571;13pkt 13fpkt"];
2582--2692[label="0.0666667;1pkt 1fpkt"];
2582--3450[label="1;63pkt 63fpkt"];
2582--4505[label="1;63pkt 63fpkt"];
2582--5019[label="1;63pkt 63fpkt"];
2634--3697[label="1;49pkt 49fpkt"];
2634--4636[label="1;50pkt 50fpkt"];
3156--4338[label="1;21pkt 21fpkt"];
3156--4954[label="1;21pkt 21fpkt"];
3405--4478[label="1;52pkt 52fpkt"];
3405--5008[label="1;51pkt 51fpkt"];
3450--4505[label="1;88pkt 88fpkt"];
3450--5019[label="1;89pkt 89fpkt"];
3666--4618[label="1;84pkt 84fpkt"];
3697--4636[label="1;49pkt 49fpkt"];
4338--4954[label="1;21pkt 21fpkt"];
4478--5008[label="1;51pkt 51fpkt"];
4505--5019[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="144.39.47.89"/>
      <filter dst_port="80" src_ip="148.177.4.130"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
692[label="148.176.144.219;s;160pkt 160fpkt", shape=diamond, color=yellow];
771[label="86.213.238.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
964[label="87.191.148.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
2010[label="87.226.144.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
2020[label="219.24.184.158;d;76pkt 76fpkt", shape=diamond, color=yellow];
2802[label="87.226.144.50;d;1pkt 1fpkt", shape=hexagon, color=black];
4092[label="148.176.144.219;172pkt 172fpkt", shape=pentagon, color=darkviolet];
4834[label="148.176.144.219;172pkt 172fpkt", shape=invtriangle, color=brown];
5164[label="148.176.144.219;172pkt 172fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.144.219:*, *:80}[26.7782%]&lt;BR/&gt;{169.28.3.214:*, 219.24.184.158:443}[23.8494%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.5926%)&lt;BR/&gt; 443: (3.96825%)&lt;BR/&gt; 5662: (3.43915%)&lt;BR/&gt; 6662: (3.1746%)&lt;BR/&gt; 38256: (2.6455%)&gt;];
}
692--771[label="1;1pkt 1fpkt"];
692--964[label="1;1pkt 1fpkt"];
692--2010[label="1;1pkt 1fpkt"];
692--2020[label="0.118421;9pkt 9fpkt"];
692--2802[label="1;1pkt 1fpkt"];
692--2890[label="0.125;20pkt 20fpkt"];
692--4092[label="1;160pkt 160fpkt"];
692--4834[label="1;160pkt 160fpkt"];
692--5164[label="1;160pkt 160fpkt"];
771--4092[label="1;1pkt 1fpkt"];
771--4834[label="1;1pkt 1fpkt"];
771--5164[label="1;1pkt 1fpkt"];
964--4092[label="1;1pkt 1fpkt"];
964--4834[label="1;1pkt 1fpkt"];
964--5164[label="1;1pkt 1fpkt"];
2010--2802[label="1;1pkt 1fpkt"];
2010--4092[label="1;1pkt 1fpkt"];
2010--4834[label="1;1pkt 1fpkt"];
2010--5164[label="1;1pkt 1fpkt"];
2020--3678[label="0.0789474;6pkt 6fpkt"];
2020--4062[label="0.75;57pkt 57fpkt"];
2020--4092[label="0.118421;9pkt 9fpkt"];
2020--4625[label="0.0789474;6pkt 6fpkt"];
2020--4821[label="0.75;57pkt 57fpkt"];
2020--4834[label="0.118421;9pkt 9fpkt"];
2020--5160[label="0.697368;53pkt 53fpkt"];
2020--5164[label="0.118421;9pkt 9fpkt"];
2802--4092[label="1;1pkt 1fpkt"];
2802--4834[label="1;1pkt 1fpkt"];
2802--5164[label="1;1pkt 1fpkt"];
4092--4834[label="1;172pkt 172fpkt"];
4092--5164[label="1;172pkt 172fpkt"];
4834--5164[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.144.219"/>
      <filter dst_ip="219.24.184.158" dst_port="443" src_ip="169.28.3.214"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
502[label="144.224.65.3;s;139pkt 139fpkt", shape=diamond, color=yellow];
965[label="5.122.165.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.65.3:*, 73.176.95.203:80}[99.2806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2857%)&lt;BR/&gt; 1755: (1.07143%)&lt;BR/&gt; 3566: (0.714286%)&lt;BR/&gt; 1898: (0.357143%)&lt;BR/&gt; 1897: (0.357143%)&gt;];
}
502--965[label="1;1pkt 1fpkt"];
502--2890[label="0.0791367;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="73.176.95.203" dst_port="80" src_ip="144.224.65.3"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
757[label="148.177.189.110;s;7pkt 7fpkt", shape=diamond, color=yellow];
999[label="194.47.210.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.189.110:*, 58.26.189.199:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1128: (12.5%)&lt;BR/&gt; 1000: (12.5%)&lt;BR/&gt; 443: (12.5%)&lt;BR/&gt; 5190: (6.25%)&lt;BR/&gt; 3020: (6.25%)&gt;];
}
757--999[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="58.26.189.199" dst_port="443" src_ip="148.177.189.110"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
523[label="148.177.185.54;s;3pkt 3fpkt", shape=diamond, color=yellow];
1006[label="85.40.122.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
3282[label="148.177.185.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4410[label="148.177.185.54;2pkt 2fpkt", shape=invtriangle, color=brown];
4979[label="148.177.185.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.185.54:20, 85.40.122.146:5016}[33.3333%]&lt;BR/&gt;{148.177.185.54:21, 161.249.0.154:3024}[33.3333%]&lt;BR/&gt;{148.177.185.54:20, 161.249.0.154:3876}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (31.8182%)&lt;BR/&gt; 3876: (18.1818%)&lt;BR/&gt; 3024: (18.1818%)&lt;BR/&gt; 21: (18.1818%)&lt;BR/&gt; 5016: (13.6364%)&gt;];
}
523--1006[label="1;1pkt 1fpkt"];
523--3282[label="1;2pkt 2fpkt"];
523--4410[label="1;2pkt 2fpkt"];
523--4979[label="1;3pkt 3fpkt"];
1006--4979[label="1;1pkt 1fpkt"];
3282--4410[label="1;2pkt 2fpkt"];
3282--4979[label="1;2pkt 2fpkt"];
4410--4979[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.249.0.154" dst_port="3876" src_ip="148.177.185.54" src_port="20"/>
      <filter dst_ip="161.249.0.154" dst_port="3024" src_ip="148.177.185.54" src_port="21"/>
      <filter dst_ip="85.40.122.146" dst_port="5016" src_ip="148.177.185.54" src_port="20"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
795[label="73.241.186.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
1017[label="170.227.65.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.186.202:64830, 170.227.65.134:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64830: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
795--1017[label="1;1pkt 1fpkt"];
795--2890[label="1;1pkt 1fpkt"];
1017--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.227.65.134" dst_port="80" src_ip="73.241.186.202" src_port="64830"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1028[label="74.56.97.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
1029[label="148.176.42.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
2831[label="148.176.42.212;s;1pkt 1fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.42.212:1854, 74.56.97.233:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1854: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1028--1029[label="1;1pkt 1fpkt"];
1028--2831[label="1;1pkt 1fpkt"];
1029--2831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.56.97.233" dst_port="554" src_ip="148.176.42.212" src_port="1854"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="144.39.46.235"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826827" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747487,1.7815,010,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
2322[label="209.172.252.109;s;432pkt 432fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.172.252.109:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57688: (0.231481%)&lt;BR/&gt; 46623: (0.231481%)&lt;BR/&gt; 65383: (0.115741%)&lt;BR/&gt; 65361: (0.115741%)&gt;];
}
2322--2912[label="0.261574;113pkt 113fpkt"];
2322--2925[label="0.261574;113pkt 113fpkt"];
2322--2933[label="0.261574;113pkt 113fpkt"];
2322--3567[label="1;432pkt 432fpkt"];
2322--4566[label="1;432pkt 432fpkt"];
2322--5048[label="1;432pkt 432fpkt"];
</description>
    <slice>
      <filter src_ip="209.172.252.109" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
809[label="148.177.215.145;s;5pkt 5fpkt", shape=diamond, color=yellow];
1047[label="223.24.161.227;d;2pkt 2fpkt", shape=diamond, color=yellow];
1264[label="223.24.161.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
2325[label="148.177.215.145;s;5pkt 5fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.215.145:8277, 223.24.161.207:8292}[20%]&lt;BR/&gt;{148.177.215.145:8197, 196.109.120.37:8195}[20%]&lt;BR/&gt;{148.177.215.145:8199, 196.109.120.37:8196}[20%]&lt;BR/&gt;{148.177.215.145:8200, 223.24.161.227:8196}[20%]&lt;BR/&gt;{148.177.215.145:8202, 223.24.161.227:8195}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8196: (19.2308%)&lt;BR/&gt; 8195: (19.2308%)&lt;BR/&gt; 8292: (11.5385%)&lt;BR/&gt; 8277: (11.5385%)&lt;BR/&gt; 8202: (11.5385%)&gt;];
}
809--1047[label="1;2pkt 2fpkt"];
809--1264[label="1;1pkt 1fpkt"];
809--2325[label="1;5pkt 5fpkt"];
1047--2325[label="1;2pkt 2fpkt"];
1264--2325[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.24.161.227" dst_port="8195" src_ip="148.177.215.145" src_port="8202"/>
      <filter dst_ip="223.24.161.227" dst_port="8196" src_ip="148.177.215.145" src_port="8200"/>
      <filter dst_ip="196.109.120.37" dst_port="8196" src_ip="148.177.215.145" src_port="8199"/>
      <filter dst_ip="196.109.120.37" dst_port="8195" src_ip="148.177.215.145" src_port="8197"/>
      <filter dst_ip="223.24.161.207" dst_port="8292" src_ip="148.177.215.145" src_port="8277"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.175.240.30"/>
      <from sec="1109826002" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
508[label="148.177.112.11;d;555pkt 555fpkt", shape=diamond, color=yellow];
3102[label="195.32.236.24;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3175[label="195.32.236.36;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3180[label="195.32.236.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3416[label="195.32.236.78;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3542[label="195.32.236.103;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3966[label="208.186.84.194;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4157[label="195.32.236.234;213pkt 213fpkt", shape=pentagon, color=darkviolet];
4351[label="195.32.236.36;17pkt 17fpkt", shape=invtriangle, color=brown];
4353[label="195.32.236.37;1pkt 1fpkt", shape=invtriangle, color=brown];
4484[label="195.32.236.78;7pkt 7fpkt", shape=invtriangle, color=brown];
4555[label="195.32.236.103;43pkt 43fpkt", shape=invtriangle, color=brown];
4779[label="208.186.84.194;2pkt 2fpkt", shape=invtriangle, color=brown];
5045[label="195.32.236.103;43pkt 43fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.32.236.234:8030, 148.177.112.11:*}[22.524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8030: (16.7708%)&lt;BR/&gt; 8047: (8.75%)&lt;BR/&gt; 80: (6.19792%)&lt;BR/&gt; 8009: (5.05208%)&lt;BR/&gt; 8018: (3.85417%)&gt;];
}
508--845[label="0.953846;124pkt 124fpkt"];
508--1079[label="0.444444;8pkt 8fpkt"];
508--1983[label="0.180328;11pkt 11fpkt"];
508--2441[label="0.444444;8pkt 8fpkt"];
508--2559[label="0.483871;45pkt 45fpkt"];
508--2912[label="0.00720721;4pkt 4fpkt"];
508--2925[label="0.00720721;4pkt 4fpkt"];
508--2933[label="0.00720721;4pkt 4fpkt"];
508--3102[label="0.75;6pkt 6fpkt"];
508--3175[label="0.941176;16pkt 16fpkt"];
508--3180[label="0.5;1pkt 1fpkt"];
508--3416[label="0.333333;2pkt 2fpkt"];
508--3542[label="0.883721;38pkt 38fpkt"];
508--3966[label="0.333333;1pkt 1fpkt"];
508--4157[label="0.737089;157pkt 157fpkt"];
508--4351[label="0.941176;16pkt 16fpkt"];
508--4484[label="0.428571;3pkt 3fpkt"];
508--4555[label="0.883721;38pkt 38fpkt"];
508--5045[label="0.883721;38pkt 38fpkt"];
3175--4351[label="1;17pkt 17fpkt"];
3180--4353[label="1;1pkt 1fpkt"];
3416--4484[label="1;6pkt 6fpkt"];
3542--4555[label="1;43pkt 43fpkt"];
3542--5045[label="1;43pkt 43fpkt"];
3966--4779[label="1;2pkt 2fpkt"];
4555--5045[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.112.11" src_ip="195.32.236.234" src_port="8030"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
772[label="169.28.121.64;s;108pkt 108fpkt", shape=diamond, color=yellow];
1110[label="73.184.64.247;d;20pkt 20fpkt", shape=diamond, color=yellow];
1136[label="193.209.25.12;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.121.64:*, 205.11.66.236:80}[31.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1598: (0.75188%)&lt;BR/&gt; 1595: (0.75188%)&lt;BR/&gt; 1594: (0.75188%)&lt;BR/&gt; 1593: (0.75188%)&gt;];
}
772--1110[label="1;20pkt 20fpkt"];
772--1136[label="1;5pkt 5fpkt"];
772--2890[label="0.231481;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="205.11.66.236" dst_port="80" src_ip="169.28.121.64"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.247.89.60"/>
      <from sec="1109826190" usec="0"/>
      <to sec="1109826260" usec="0"/>
    </slice>
    <from sec="1109826190" usec="0"/>
    <to sec="1109826260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
411[label="144.224.53.50;s;819pkt 819fpkt", shape=diamond, color=yellow];
1150[label="221.246.133.147;d;24pkt 24fpkt", shape=diamond, color=yellow];
1163[label="208.188.26.57;d;5pkt 5fpkt", shape=diamond, color=yellow];
1643[label="74.161.200.237;d;37pkt 37fpkt", shape=diamond, color=yellow];
2053[label="208.165.136.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
2484[label="221.246.133.147;d;24pkt 24fpkt", shape=hexagon, color=black];
4019[label="148.176.40.204;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.53.50:0, *:0}[87.2647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (85.3789%)&lt;BR/&gt; 80: (2.29456%)&lt;BR/&gt; 53: (1.54749%)&lt;BR/&gt; 1023: (1.01387%)&lt;BR/&gt; 443: (0.960512%)&gt;];
}
411--616[label="1;1pkt 1fpkt"];
411--629[label="0.00357143;1pkt 1fpkt"];
411--639[label="0.00333333;1pkt 1fpkt"];
411--832[label="0.00142653;1pkt 1fpkt"];
411--1009[label="0.00440529;1pkt 1fpkt"];
411--1053[label="0.00613497;1pkt 1fpkt"];
411--1087[label="0.0113636;1pkt 1fpkt"];
411--1127[label="1;1pkt 1fpkt"];
411--1130[label="0.190476;4pkt 4fpkt"];
411--1131[label="1;1pkt 1fpkt"];
411--1150[label="0.166667;4pkt 4fpkt"];
411--1163[label="0.2;1pkt 1fpkt"];
411--1171[label="0.0384615;1pkt 1fpkt"];
411--1195[label="0.05;1pkt 1fpkt"];
411--1298[label="0.00364964;1pkt 1fpkt"];
411--1339[label="0.0128205;1pkt 1fpkt"];
411--1399[label="0.5;1pkt 1fpkt"];
411--1431[label="0.00540541;1pkt 1fpkt"];
411--1439[label="0.00294118;1pkt 1fpkt"];
411--1456[label="0.0625;1pkt 1fpkt"];
411--1457[label="0.00274725;1pkt 1fpkt"];
411--1495[label="0.025;1pkt 1fpkt"];
411--1620[label="0.00649351;1pkt 1fpkt"];
411--1643[label="0.027027;1pkt 1fpkt"];
411--1698[label="0.111111;1pkt 1fpkt"];
411--1779[label="0.0106383;1pkt 1fpkt"];
411--1819[label="0.037037;1pkt 1fpkt"];
411--1822[label="0.00724638;1pkt 1fpkt"];
411--1900[label="0.0114943;1pkt 1fpkt"];
411--1918[label="0.0041841;1pkt 1fpkt"];
411--2053[label="1;1pkt 1fpkt"];
411--2080[label="0.0243902;1pkt 1fpkt"];
411--2110[label="0.00943396;1pkt 1fpkt"];
411--2153[label="0.011236;1pkt 1fpkt"];
411--2176[label="0.0153846;1pkt 1fpkt"];
411--2334[label="0.00869565;1pkt 1fpkt"];
411--2470[label="1;1pkt 1fpkt"];
411--2475[label="0.190476;4pkt 4fpkt"];
411--2476[label="1;1pkt 1fpkt"];
411--2484[label="0.166667;4pkt 4fpkt"];
411--2511[label="0.0666667;1pkt 1fpkt"];
411--2605[label="0.0625;1pkt 1fpkt"];
411--2726[label="0.00343643;1pkt 1fpkt"];
411--2734[label="1;1pkt 1fpkt"];
411--2739[label="0.0049505;1pkt 1fpkt"];
411--2906[label="0.001221;1pkt 1fpkt"];
411--2918[label="0.003663;3pkt 3fpkt"];
411--2930[label="0.003663;3pkt 3fpkt"];
411--2934[label="0.003663;3pkt 3fpkt"];
1150--2484[label="1;24pkt 24fpkt"];
1163--3115[label="0.2;1pkt 1fpkt"];
1163--4317[label="0.2;1pkt 1fpkt"];
1163--4947[label="0.2;1pkt 1fpkt"];
1643--2890[label="0.027027;1pkt 1fpkt"];
1643--3330[label="0.03125;1pkt 1fpkt"];
1643--4017[label="0.27027;10pkt 10fpkt"];
1643--4019[label="0.111111;3pkt 3fpkt"];
1643--4441[label="0.030303;1pkt 1fpkt"];
1643--4799[label="0.27027;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="144.224.53.50"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
433[label="41.113.21.226;d;9pkt 9fpkt", shape=diamond, color=yellow];
434[label="195.81.123.66;s;38pkt 38fpkt", shape=diamond, color=yellow];
570[label="77.209.83.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
1159[label="77.146.113.176;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.123.66:1755, *:*}[42.1053%]&lt;BR/&gt;{195.81.123.66:80, 41.113.21.226:*}[23.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 1755: (18%)&lt;BR/&gt; 554: (5%)&lt;BR/&gt; 26742: (2%)&lt;BR/&gt; 4329: (2%)&gt;];
}
433--434[label="1;9pkt 9fpkt"];
433--2912[label="0.222222;2pkt 2fpkt"];
433--2919[label="0.222222;2pkt 2fpkt"];
433--2925[label="0.222222;2pkt 2fpkt"];
433--2931[label="0.222222;2pkt 2fpkt"];
433--2933[label="0.222222;2pkt 2fpkt"];
433--2935[label="0.222222;2pkt 2fpkt"];
434--507[label="0.0263158;1pkt 1fpkt"];
434--570[label="1;1pkt 1fpkt"];
434--1159[label="1;2pkt 2fpkt"];
434--2912[label="0.0789474;3pkt 3fpkt"];
434--2919[label="0.0526316;2pkt 2fpkt"];
434--2925[label="0.0789474;3pkt 3fpkt"];
434--2931[label="0.0526316;2pkt 2fpkt"];
434--2933[label="0.0789474;3pkt 3fpkt"];
434--2935[label="0.0526316;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.123.66" src_port="1755"/>
      <filter dst_ip="41.113.21.226" src_ip="195.81.123.66" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
716[label="175.150.164.0;s;442pkt 442fpkt", shape=diamond, color=yellow];
747[label="195.81.116.184;s;63pkt 63fpkt", shape=diamond, color=yellow];
1001[label="175.150.185.57;s;139pkt 139fpkt", shape=diamond, color=yellow];
1170[label="73.58.112.158;d;32pkt 32fpkt", shape=diamond, color=yellow];
1334[label="175.150.185.50;s;74pkt 74fpkt", shape=diamond, color=yellow];
1547[label="175.150.133.144;s;8pkt 8fpkt", shape=diamond, color=yellow];
1573[label="175.150.160.110;s;25pkt 25fpkt", shape=diamond, color=yellow];
1586[label="175.150.128.193;s;37pkt 37fpkt", shape=diamond, color=yellow];
1588[label="175.150.128.201;s;28pkt 28fpkt", shape=diamond, color=yellow];
1823[label="195.81.119.72;s;37pkt 37fpkt", shape=diamond, color=yellow];
1993[label="214.166.228.71;d;80pkt 80fpkt", shape=diamond, color=yellow];
2017[label="138.228.147.246;d;9pkt 9fpkt", shape=diamond, color=yellow];
2180[label="73.58.112.154;d;16pkt 16fpkt", shape=diamond, color=yellow];
2318[label="195.81.116.184;s;42pkt 42fpkt", shape=hexagon, color=black];
2655[label="175.150.128.201;s;23pkt 23fpkt", shape=hexagon, color=black];
2752[label="175.150.133.144;s;6pkt 6fpkt", shape=hexagon, color=black];
2940[label="175.150.164.0;709pkt 709fpkt", shape=pentagon, color=darkviolet];
3064[label="175.150.137.19;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3191[label="148.177.4.40;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3420[label="175.150.165.80;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3570[label="175.150.160.110;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3743[label="175.150.181.145;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3899[label="175.150.188.177;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3961[label="175.150.128.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4000[label="175.150.176.200;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4225[label="175.150.164.0;709pkt 709fpkt", shape=invtriangle, color=brown];
4487[label="175.150.165.80;14pkt 14fpkt", shape=invtriangle, color=brown];
4569[label="175.150.160.110;28pkt 28fpkt", shape=invtriangle, color=brown];
4662[label="175.150.181.145;18pkt 18fpkt", shape=invtriangle, color=brown];
5142[label="175.150.128.193;47pkt 47fpkt", shape=invhouse, color=bisque];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[47.2222%]&lt;BR/&gt;{175.150.164.0:*, *:25}[44.8198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.521%)&lt;BR/&gt; 53: (0.929639%)&lt;BR/&gt; 113: (0.856726%)&lt;BR/&gt; 80: (0.601531%)&lt;BR/&gt; 0: (0.291651%)&gt;];
}
716--1170[label="0.03125;1pkt 1fpkt"];
716--1239[label="0.0526316;2pkt 2fpkt"];
716--1346[label="0.0810811;3pkt 3fpkt"];
716--1831[label="0.0487805;2pkt 2fpkt"];
716--1834[label="0.025;1pkt 1fpkt"];
716--1993[label="0.0125;1pkt 1fpkt"];
716--2005[label="0.0277778;1pkt 1fpkt"];
716--2017[label="0.111111;1pkt 1fpkt"];
716--2912[label="0.00226244;1pkt 1fpkt"];
716--2919[label="0.00452489;2pkt 2fpkt"];
716--2925[label="0.00226244;1pkt 1fpkt"];
716--2931[label="0.00452489;2pkt 2fpkt"];
716--2933[label="0.00226244;1pkt 1fpkt"];
716--2935[label="0.00452489;2pkt 2fpkt"];
716--2940[label="0.997738;441pkt 441fpkt"];
716--4225[label="0.997738;441pkt 441fpkt"];
747--1993[label="0.238095;15pkt 15fpkt"];
747--2318[label="1;42pkt 42fpkt"];
1001--1170[label="0.0625;2pkt 2fpkt"];
1001--1673[label="0.0149254;1pkt 1fpkt"];
1001--1993[label="0.025;2pkt 2fpkt"];
1170--1282[label="0.03125;1pkt 1fpkt"];
1170--1334[label="0.0625;2pkt 2fpkt"];
1170--1573[label="0.08;2pkt 2fpkt"];
1170--1586[label="0.0625;2pkt 2fpkt"];
1170--1588[label="0.0714286;2pkt 2fpkt"];
1170--2655[label="0.0869565;2pkt 2fpkt"];
1170--2940[label="0.03125;1pkt 1fpkt"];
1170--3064[label="0.0555556;1pkt 1fpkt"];
1170--3420[label="0.0714286;1pkt 1fpkt"];
1170--3570[label="0.0714286;2pkt 2fpkt"];
1170--3899[label="0.04;1pkt 1fpkt"];
1170--4225[label="0.03125;1pkt 1fpkt"];
1170--4487[label="0.0714286;1pkt 1fpkt"];
1170--4569[label="0.0714286;2pkt 2fpkt"];
1170--5142[label="0.0625;2pkt 2fpkt"];
1334--1346[label="0.027027;1pkt 1fpkt"];
1334--2629[label="1;56pkt 56fpkt"];
1547--1993[label="0.5;4pkt 4fpkt"];
1547--2752[label="1;6pkt 6fpkt"];
1573--2017[label="0.555556;5pkt 5fpkt"];
1573--3570[label="1;25pkt 25fpkt"];
1573--4569[label="1;25pkt 25fpkt"];
1586--1993[label="0.0810811;3pkt 3fpkt"];
1586--2180[label="0.0625;1pkt 1fpkt"];
1586--5142[label="0.972973;36pkt 36fpkt"];
1588--2180[label="0.1875;3pkt 3fpkt"];
1588--2655[label="1;23pkt 23fpkt"];
1823--1993[label="0.0810811;3pkt 3fpkt"];
1823--2842[label="1;37pkt 37fpkt"];
1993--2318[label="0.309524;13pkt 13fpkt"];
1993--2367[label="0.075;6pkt 6fpkt"];
1993--2394[label="0.0125;1pkt 1fpkt"];
1993--2525[label="0.0625;5pkt 5fpkt"];
1993--2532[label="0.0125;1pkt 1fpkt"];
1993--2547[label="0.025;2pkt 2fpkt"];
1993--2558[label="0.0153846;1pkt 1fpkt"];
1993--2730[label="0.0125;1pkt 1fpkt"];
1993--2752[label="0.5;3pkt 3fpkt"];
1993--2842[label="0.0810811;3pkt 3fpkt"];
1993--2873[label="0.0125;1pkt 1fpkt"];
1993--2906[label="0.025;2pkt 2fpkt"];
1993--2911[label="0.0125;1pkt 1fpkt"];
1993--2918[label="0.0375;3pkt 3fpkt"];
1993--2924[label="0.0125;1pkt 1fpkt"];
1993--2930[label="0.0375;3pkt 3fpkt"];
1993--2932[label="0.0125;1pkt 1fpkt"];
1993--2934[label="0.0375;3pkt 3fpkt"];
1993--2940[label="0.0125;1pkt 1fpkt"];
1993--3162[label="0.0125;1pkt 1fpkt"];
1993--3191[label="0.137255;7pkt 7fpkt"];
1993--3300[label="0.025;2pkt 2fpkt"];
1993--3393[label="0.0125;1pkt 1fpkt"];
1993--3475[label="0.0208333;1pkt 1fpkt"];
1993--3899[label="0.2;5pkt 5fpkt"];
1993--3908[label="0.025;2pkt 2fpkt"];
1993--4150[label="0.0125;1pkt 1fpkt"];
1993--4225[label="0.0125;1pkt 1fpkt"];
1993--4342[label="0.0125;1pkt 1fpkt"];
1993--4472[label="0.0125;1pkt 1fpkt"];
1993--4518[label="0.0204082;1pkt 1fpkt"];
1993--4914[label="0.0125;1pkt 1fpkt"];
1993--4955[label="0.0125;1pkt 1fpkt"];
1993--5004[label="0.0125;1pkt 1fpkt"];
1993--5026[label="0.0204082;1pkt 1fpkt"];
1993--5142[label="0.0638298;3pkt 3fpkt"];
2017--2940[label="0.111111;1pkt 1fpkt"];
2017--3570[label="0.555556;5pkt 5fpkt"];
2017--4225[label="0.111111;1pkt 1fpkt"];
2017--4569[label="0.555556;5pkt 5fpkt"];
2180--2547[label="0.0625;1pkt 1fpkt"];
2180--2655[label="0.1875;3pkt 3fpkt"];
2180--2940[label="0.0625;1pkt 1fpkt"];
2180--3743[label="0.125;2pkt 2fpkt"];
2180--4000[label="0.333333;1pkt 1fpkt"];
2180--4225[label="0.0625;1pkt 1fpkt"];
2180--4662[label="0.125;2pkt 2fpkt"];
2180--5142[label="0.125;2pkt 2fpkt"];
2940--4225[label="1;709pkt 709fpkt"];
3420--4487[label="1;14pkt 14fpkt"];
3570--4569[label="1;28pkt 28fpkt"];
3743--4662[label="1;17pkt 17fpkt"];
3961--5142[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25" src_ip="175.150.164.0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
400[label="144.192.17.170;s;1579pkt 1579fpkt", shape=diamond, color=yellow];
890[label="210.21.175.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
893[label="208.165.70.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
895[label="208.172.22.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
898[label="208.128.117.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
915[label="209.74.21.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
917[label="209.72.198.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
920[label="213.128.146.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
935[label="208.175.118.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
1058[label="195.81.114.128;s;367pkt 367fpkt", shape=diamond, color=yellow];
1171[label="20.90.35.254;d;26pkt 26fpkt", shape=diamond, color=yellow];
1195[label="209.52.230.176;d;20pkt 20fpkt", shape=diamond, color=yellow];
1198[label="148.177.100.26;s;524pkt 524fpkt", shape=diamond, color=yellow];
1398[label="197.206.160.181;d;2pkt 2fpkt", shape=diamond, color=yellow];
1458[label="195.81.112.82;s;594pkt 594fpkt", shape=diamond, color=yellow];
1657[label="152.118.143.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
1658[label="169.28.225.255;s;276pkt 276fpkt", shape=diamond, color=yellow];
1659[label="195.81.117.99;s;176pkt 176fpkt", shape=diamond, color=yellow];
2080[label="194.236.15.97;d;41pkt 41fpkt", shape=diamond, color=yellow];
2354[label="213.128.146.66;d;1pkt 1fpkt", shape=hexagon, color=black];
2429[label="195.81.114.128;s;312pkt 312fpkt", shape=hexagon, color=black];
2459[label="208.128.117.172;d;1pkt 1fpkt", shape=hexagon, color=black];
2463[label="209.72.198.204;d;1pkt 1fpkt", shape=hexagon, color=black];
2511[label="209.52.230.176;d;15pkt 15fpkt", shape=hexagon, color=black];
2577[label="209.74.21.53;d;1pkt 1fpkt", shape=hexagon, color=black];
2600[label="148.177.100.26;s;317pkt 317fpkt", shape=hexagon, color=black];
2607[label="169.68.184.14;s;342pkt 342fpkt", shape=hexagon, color=black];
2765[label="144.192.17.170;s;1425pkt 1425fpkt", shape=hexagon, color=black];
2793[label="169.28.225.255;s;249pkt 249fpkt", shape=hexagon, color=black];
3026[label="169.68.184.14;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3344[label="144.192.16.64;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3508[label="195.81.117.99;182pkt 182fpkt", shape=pentagon, color=darkviolet];
3679[label="148.177.206.132;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3869[label="144.192.17.170;1712pkt 1712fpkt", shape=pentagon, color=darkviolet];
4006[label="194.76.170.201;97pkt 97fpkt", shape=pentagon, color=darkviolet];
4223[label="169.28.225.255;304pkt 304fpkt", shape=pentagon, color=darkviolet];
4270[label="169.68.184.14;3pkt 3fpkt", shape=invtriangle, color=brown];
4731[label="144.192.17.170;1713pkt 1713fpkt", shape=invtriangle, color=brown];
4795[label="194.76.170.201;97pkt 97fpkt", shape=invtriangle, color=brown];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.192.17.170:0, *:0}[39.7607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2923%)&lt;BR/&gt; 65534: (0.186496%)&lt;BR/&gt; 53: (0.186496%)&lt;BR/&gt; 9898: (0.0430375%)&lt;BR/&gt; 5554: (0.0430375%)&gt;];
}
400--890[label="1;1pkt 1fpkt"];
400--893[label="1;1pkt 1fpkt"];
400--895[label="1;1pkt 1fpkt"];
400--898[label="1;1pkt 1fpkt"];
400--915[label="1;1pkt 1fpkt"];
400--917[label="1;1pkt 1fpkt"];
400--920[label="1;1pkt 1fpkt"];
400--935[label="1;1pkt 1fpkt"];
400--1171[label="0.0384615;1pkt 1fpkt"];
400--1195[label="0.05;1pkt 1fpkt"];
400--1398[label="0.5;1pkt 1fpkt"];
400--1439[label="0.00294118;1pkt 1fpkt"];
400--1457[label="0.00274725;1pkt 1fpkt"];
400--1714[label="0.00380952;2pkt 2fpkt"];
400--1918[label="0.0041841;1pkt 1fpkt"];
400--2080[label="0.0243902;1pkt 1fpkt"];
400--2081[label="0.012987;1pkt 1fpkt"];
400--2354[label="1;1pkt 1fpkt"];
400--2459[label="1;1pkt 1fpkt"];
400--2463[label="1;1pkt 1fpkt"];
400--2511[label="0.0666667;1pkt 1fpkt"];
400--2577[label="1;1pkt 1fpkt"];
400--2726[label="0.00343643;1pkt 1fpkt"];
400--2765[label="1;1425pkt 1425fpkt"];
400--3869[label="0.999367;1578pkt 1578fpkt"];
400--4731[label="1;1579pkt 1579fpkt"];
890--2765[label="1;1pkt 1fpkt"];
890--3869[label="1;1pkt 1fpkt"];
890--4731[label="1;1pkt 1fpkt"];
893--2765[label="1;1pkt 1fpkt"];
893--3869[label="1;1pkt 1fpkt"];
893--4731[label="1;1pkt 1fpkt"];
895--2765[label="1;1pkt 1fpkt"];
895--3869[label="1;1pkt 1fpkt"];
895--4731[label="1;1pkt 1fpkt"];
898--2459[label="1;1pkt 1fpkt"];
898--2765[label="1;1pkt 1fpkt"];
898--3869[label="1;1pkt 1fpkt"];
898--4731[label="1;1pkt 1fpkt"];
915--2577[label="1;1pkt 1fpkt"];
915--2765[label="1;1pkt 1fpkt"];
915--3869[label="1;1pkt 1fpkt"];
915--4731[label="1;1pkt 1fpkt"];
917--2463[label="1;1pkt 1fpkt"];
917--2765[label="1;1pkt 1fpkt"];
917--3869[label="1;1pkt 1fpkt"];
917--4731[label="1;1pkt 1fpkt"];
920--2354[label="1;1pkt 1fpkt"];
920--2765[label="1;1pkt 1fpkt"];
920--3869[label="1;1pkt 1fpkt"];
920--4731[label="1;1pkt 1fpkt"];
935--2765[label="1;1pkt 1fpkt"];
935--3869[label="1;1pkt 1fpkt"];
935--4731[label="1;1pkt 1fpkt"];
1058--1195[label="0.05;1pkt 1fpkt"];
1058--1845[label="0.142857;1pkt 1fpkt"];
1058--2429[label="1;312pkt 312fpkt"];
1058--2511[label="0.0666667;1pkt 1fpkt"];
1058--2800[label="0.142857;1pkt 1fpkt"];
1171--1465[label="0.0384615;1pkt 1fpkt"];
1171--1646[label="0.0384615;1pkt 1fpkt"];
1171--1659[label="0.0384615;1pkt 1fpkt"];
1171--2607[label="0.0384615;1pkt 1fpkt"];
1171--2765[label="0.0384615;1pkt 1fpkt"];
1171--3508[label="0.0384615;1pkt 1fpkt"];
1171--3679[label="0.0384615;1pkt 1fpkt"];
1171--3869[label="0.0384615;1pkt 1fpkt"];
1171--4731[label="0.0384615;1pkt 1fpkt"];
1195--1198[label="0.05;1pkt 1fpkt"];
1195--1465[label="0.05;1pkt 1fpkt"];
1195--1658[label="0.05;1pkt 1fpkt"];
1195--1659[label="0.05;1pkt 1fpkt"];
1195--2429[label="0.05;1pkt 1fpkt"];
1195--2511[label="1;15pkt 15fpkt"];
1195--2600[label="0.05;1pkt 1fpkt"];
1195--2607[label="0.05;1pkt 1fpkt"];
1195--2765[label="0.05;1pkt 1fpkt"];
1195--2793[label="0.05;1pkt 1fpkt"];
1195--3026[label="0.5;1pkt 1fpkt"];
1195--3115[label="0.05;1pkt 1fpkt"];
1195--3344[label="0.05;1pkt 1fpkt"];
1195--3508[label="0.05;1pkt 1fpkt"];
1195--3869[label="0.05;1pkt 1fpkt"];
1195--4223[label="0.05;1pkt 1fpkt"];
1195--4270[label="0.333333;1pkt 1fpkt"];
1195--4317[label="0.05;1pkt 1fpkt"];
1195--4731[label="0.05;1pkt 1fpkt"];
1195--4947[label="0.05;1pkt 1fpkt"];
1198--1439[label="0.00294118;1pkt 1fpkt"];
1198--1457[label="0.00274725;1pkt 1fpkt"];
1198--1918[label="0.0041841;1pkt 1fpkt"];
1198--2511[label="0.0666667;1pkt 1fpkt"];
1198--2600[label="1;317pkt 317fpkt"];
1198--2726[label="0.00343643;1pkt 1fpkt"];
1398--2267[label="0.5;1pkt 1fpkt"];
1398--2587[label="1;1pkt 1fpkt"];
1398--2765[label="0.5;1pkt 1fpkt"];
1398--2854[label="0.5;1pkt 1fpkt"];
1398--2919[label="0.5;1pkt 1fpkt"];
1398--2931[label="0.5;1pkt 1fpkt"];
1398--2935[label="0.5;1pkt 1fpkt"];
1398--3869[label="0.5;1pkt 1fpkt"];
1398--4731[label="0.5;1pkt 1fpkt"];
1458--2080[label="0.0243902;1pkt 1fpkt"];
1458--2726[label="0.00343643;1pkt 1fpkt"];
1657--1658[label="0.5;1pkt 1fpkt"];
1657--1659[label="0.5;1pkt 1fpkt"];
1657--2793[label="0.5;1pkt 1fpkt"];
1657--3508[label="0.5;1pkt 1fpkt"];
1657--4223[label="0.5;1pkt 1fpkt"];
1658--1918[label="0.0041841;1pkt 1fpkt"];
1658--2511[label="0.0666667;1pkt 1fpkt"];
1658--2726[label="0.00362319;1pkt 1fpkt"];
1658--2793[label="1;249pkt 249fpkt"];
1658--4223[label="0.996377;275pkt 275fpkt"];
1659--1918[label="0.00568182;1pkt 1fpkt"];
1659--2080[label="0.0243902;1pkt 1fpkt"];
1659--2511[label="0.0666667;1pkt 1fpkt"];
1659--2726[label="0.00568182;1pkt 1fpkt"];
1659--3508[label="1;176pkt 176fpkt"];
2080--2434[label="0.0243902;1pkt 1fpkt"];
2080--2495[label="0.0243902;1pkt 1fpkt"];
2080--2607[label="0.0243902;1pkt 1fpkt"];
2080--2765[label="0.0243902;1pkt 1fpkt"];
2080--3508[label="0.0243902;1pkt 1fpkt"];
2080--3534[label="0.0454545;1pkt 1fpkt"];
2080--3869[label="0.0243902;1pkt 1fpkt"];
2080--4006[label="0.0243902;1pkt 1fpkt"];
2080--4550[label="0.047619;1pkt 1fpkt"];
2080--4731[label="0.0243902;1pkt 1fpkt"];
2080--4795[label="0.0243902;1pkt 1fpkt"];
2080--5044[label="0.0454545;1pkt 1fpkt"];
2354--2765[label="1;1pkt 1fpkt"];
2354--3869[label="1;1pkt 1fpkt"];
2354--4731[label="1;1pkt 1fpkt"];
2429--2511[label="0.0666667;1pkt 1fpkt"];
2459--2765[label="1;1pkt 1fpkt"];
2459--3869[label="1;1pkt 1fpkt"];
2459--4731[label="1;1pkt 1fpkt"];
2463--2765[label="1;1pkt 1fpkt"];
2463--3869[label="1;1pkt 1fpkt"];
2463--4731[label="1;1pkt 1fpkt"];
2511--2600[label="0.0666667;1pkt 1fpkt"];
2511--2607[label="0.0666667;1pkt 1fpkt"];
2511--2765[label="0.0666667;1pkt 1fpkt"];
2511--2793[label="0.0666667;1pkt 1fpkt"];
2511--3026[label="0.5;1pkt 1fpkt"];
2511--3115[label="0.0666667;1pkt 1fpkt"];
2511--3344[label="0.0666667;1pkt 1fpkt"];
2511--3508[label="0.0666667;1pkt 1fpkt"];
2511--3869[label="0.0666667;1pkt 1fpkt"];
2511--4223[label="0.0666667;1pkt 1fpkt"];
2511--4270[label="0.333333;1pkt 1fpkt"];
2511--4317[label="0.0666667;1pkt 1fpkt"];
2511--4731[label="0.0666667;1pkt 1fpkt"];
2511--4947[label="0.0666667;1pkt 1fpkt"];
2577--2765[label="1;1pkt 1fpkt"];
2577--3869[label="1;1pkt 1fpkt"];
2577--4731[label="1;1pkt 1fpkt"];
2600--2726[label="0.00343643;1pkt 1fpkt"];
2607--2726[label="0.00343643;1pkt 1fpkt"];
2607--3026[label="1;2pkt 2fpkt"];
2607--4270[label="1;3pkt 3fpkt"];
2765--3869[label="0.999298;1424pkt 1424fpkt"];
2765--4731[label="1;1425pkt 1425fpkt"];
2793--4223[label="0.995984;248pkt 248fpkt"];
3026--4270[label="1;2pkt 2fpkt"];
3869--4731[label="1;1712pkt 1712fpkt"];
4006--4795[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="144.192.17.170"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1172[label="196.81.199.51;d;282pkt 282fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.112.42:*, 196.81.199.51:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1853: (0.177305%)&lt;BR/&gt; 1852: (0.177305%)&lt;BR/&gt; 1851: (0.177305%)&lt;BR/&gt; 1850: (0.177305%)&gt;];
}
1172--2763[label="1;282pkt 282fpkt"];
1172--2890[label="0.0496454;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="196.81.199.51" dst_port="80" src_ip="169.28.112.42"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
40[label="148.176.144.208s;1pkt 1fpkt", shape=rectangle, color=red];
956[label="148.176.144.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
1174[label="196.71.49.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.144.208:1195, 196.71.49.14:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1195: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
40--956[label="1;1pkt 1fpkt"];
40--1174[label="1;1pkt 1fpkt"];
40--2890[label="1;1pkt 1fpkt"];
956--1174[label="1;1pkt 1fpkt"];
956--2890[label="1;1pkt 1fpkt"];
1174--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.71.49.14" dst_port="80" src_ip="148.176.144.208" src_port="1195"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
683[label="169.28.169.54;s;15pkt 15fpkt", shape=diamond, color=yellow];
1176[label="74.55.7.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
2370[label="169.28.169.54;s;12pkt 12fpkt", shape=hexagon, color=black];
2645[label="74.55.7.5;d;1pkt 1fpkt", shape=hexagon, color=black];
3280[label="169.28.169.54;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.169.54:63643, *:*}[70.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63643: (34.7826%)&lt;BR/&gt; 38282: (6.52174%)&lt;BR/&gt; 2930: (5.43478%)&lt;BR/&gt; 2150: (5.43478%)&lt;BR/&gt; 52879: (3.26087%)&gt;];
}
683--1176[label="1;1pkt 1fpkt"];
683--2370[label="1;12pkt 12fpkt"];
683--2645[label="1;1pkt 1fpkt"];
683--3280[label="1;15pkt 15fpkt"];
1176--2370[label="1;1pkt 1fpkt"];
1176--2645[label="1;1pkt 1fpkt"];
1176--3280[label="1;1pkt 1fpkt"];
2370--2645[label="1;1pkt 1fpkt"];
2370--3280[label="1;12pkt 12fpkt"];
2645--3280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="169.28.169.54" src_port="63643"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1345[label="199.48.216.55;d;19pkt 19fpkt", shape=diamond, color=yellow];
1457[label="20.77.111.38;d;364pkt 364fpkt", shape=diamond, color=yellow];
1505[label="195.81.117.90;s;67pkt 67fpkt", shape=diamond, color=yellow];
2434[label="195.81.117.84;s;212pkt 212fpkt", shape=hexagon, color=black];
2605[label="199.48.186.94;d;16pkt 16fpkt", shape=hexagon, color=black];
2726[label="20.77.111.38;d;291pkt 291fpkt", shape=hexagon, color=black];
2969[label="195.81.113.4;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3279[label="195.81.114.54;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3534[label="194.76.173.102;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3704[label="195.81.116.137;69pkt 69fpkt", shape=pentagon, color=darkviolet];
3725[label="195.81.112.142;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3759[label="195.81.114.148;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3793[label="195.81.112.156;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4408[label="195.81.114.54;5pkt 5fpkt", shape=invtriangle, color=brown];
4550[label="194.76.173.102;21pkt 21fpkt", shape=invtriangle, color=brown];
4650[label="195.81.112.142;17pkt 17fpkt", shape=invtriangle, color=brown];
4668[label="195.81.114.148;6pkt 6fpkt", shape=invtriangle, color=brown];
5044[label="194.76.173.102;22pkt 22fpkt", shape=invhouse, color=bisque];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 20.77.111.38:0}[44.7174%]&lt;BR/&gt;{195.81.117.84:0, *:0}[26.0442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.916%)&lt;BR/&gt; 2618: (0.0420168%)&lt;BR/&gt; 445: (0.0420168%)&gt;];
}
1345--1505[label="0.0526316;1pkt 1fpkt"];
1345--2434[label="0.0526316;1pkt 1fpkt"];
1345--2969[label="0.0526316;1pkt 1fpkt"];
1345--3078[label="0.0526316;1pkt 1fpkt"];
1345--3279[label="0.2;1pkt 1fpkt"];
1345--3704[label="0.0526316;1pkt 1fpkt"];
1345--3725[label="0.0588235;1pkt 1fpkt"];
1345--3759[label="0.166667;1pkt 1fpkt"];
1345--3793[label="0.25;1pkt 1fpkt"];
1345--4297[label="0.0526316;1pkt 1fpkt"];
1345--4408[label="0.2;1pkt 1fpkt"];
1345--4650[label="0.0588235;1pkt 1fpkt"];
1345--4668[label="0.166667;1pkt 1fpkt"];
1457--1458[label="0.00274725;1pkt 1fpkt"];
1457--1465[label="0.00274725;1pkt 1fpkt"];
1457--1658[label="0.00362319;1pkt 1fpkt"];
1457--1659[label="0.00568182;1pkt 1fpkt"];
1457--2495[label="0.00274725;1pkt 1fpkt"];
1457--2600[label="0.00315457;1pkt 1fpkt"];
1457--2607[label="0.00292398;1pkt 1fpkt"];
1457--2615[label="0.00310559;1pkt 1fpkt"];
1457--2726[label="1;291pkt 291fpkt"];
1457--2765[label="0.00274725;1pkt 1fpkt"];
1457--2793[label="0.00401606;1pkt 1fpkt"];
1457--3115[label="0.00274725;1pkt 1fpkt"];
1457--3279[label="0.2;1pkt 1fpkt"];
1457--3344[label="0.047619;1pkt 1fpkt"];
1457--3508[label="0.00549451;1pkt 1fpkt"];
1457--3534[label="0.0454545;1pkt 1fpkt"];
1457--3869[label="0.00274725;1pkt 1fpkt"];
1457--4006[label="0.0103093;1pkt 1fpkt"];
1457--4223[label="0.00328947;1pkt 1fpkt"];
1457--4317[label="0.00274725;1pkt 1fpkt"];
1457--4408[label="0.2;1pkt 1fpkt"];
1457--4550[label="0.047619;1pkt 1fpkt"];
1457--4731[label="0.00274725;1pkt 1fpkt"];
1457--4795[label="0.0103093;1pkt 1fpkt"];
1457--4947[label="0.00274725;1pkt 1fpkt"];
1457--5044[label="0.0454545;1pkt 1fpkt"];
1505--1598[label="0.0588235;1pkt 1fpkt"];
1505--1845[label="0.142857;1pkt 1fpkt"];
1505--2605[label="0.0625;1pkt 1fpkt"];
1505--2800[label="0.142857;1pkt 1fpkt"];
2605--3078[label="0.0625;1pkt 1fpkt"];
2605--3279[label="0.2;1pkt 1fpkt"];
2605--3725[label="0.0625;1pkt 1fpkt"];
2605--3759[label="0.166667;1pkt 1fpkt"];
2605--4297[label="0.0625;1pkt 1fpkt"];
2605--4408[label="0.2;1pkt 1fpkt"];
2605--4650[label="0.0625;1pkt 1fpkt"];
2605--4668[label="0.166667;1pkt 1fpkt"];
2726--2765[label="0.00343643;1pkt 1fpkt"];
2726--2793[label="0.00401606;1pkt 1fpkt"];
2726--3115[label="0.00343643;1pkt 1fpkt"];
2726--3279[label="0.2;1pkt 1fpkt"];
2726--3344[label="0.047619;1pkt 1fpkt"];
2726--3508[label="0.00549451;1pkt 1fpkt"];
2726--3534[label="0.0454545;1pkt 1fpkt"];
2726--3869[label="0.00343643;1pkt 1fpkt"];
2726--4006[label="0.0103093;1pkt 1fpkt"];
2726--4223[label="0.00343643;1pkt 1fpkt"];
2726--4317[label="0.00343643;1pkt 1fpkt"];
2726--4408[label="0.2;1pkt 1fpkt"];
2726--4550[label="0.047619;1pkt 1fpkt"];
2726--4731[label="0.00343643;1pkt 1fpkt"];
2726--4795[label="0.0103093;1pkt 1fpkt"];
2726--4947[label="0.00343643;1pkt 1fpkt"];
2726--5044[label="0.0454545;1pkt 1fpkt"];
3279--4408[label="1;5pkt 5fpkt"];
3534--4550[label="1;21pkt 21fpkt"];
3534--5044[label="1;22pkt 22fpkt"];
3725--4650[label="1;17pkt 17fpkt"];
3759--4668[label="1;6pkt 6fpkt"];
4550--5044[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.117.84"/>
      <filter dst_ip="20.77.111.38"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
526[label="148.176.17.112;s;325pkt 325fpkt", shape=diamond, color=yellow];
760[label="148.176.224.173;s;473pkt 473fpkt", shape=diamond, color=yellow];
808[label="148.176.224.168;s;352pkt 352fpkt", shape=diamond, color=yellow];
979[label="175.150.173.115;s;119pkt 119fpkt", shape=diamond, color=yellow];
1239[label="75.188.150.38;d;38pkt 38fpkt", shape=diamond, color=yellow];
1750[label="194.76.134.11;s;113pkt 113fpkt", shape=diamond, color=yellow];
1831[label="74.161.244.33;d;41pkt 41fpkt", shape=diamond, color=yellow];
1949[label="148.177.170.56;s;82pkt 82fpkt", shape=diamond, color=yellow];
2123[label="148.177.8.168;s;64pkt 64fpkt", shape=diamond, color=yellow];
2204[label="74.169.172.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
2391[label="148.176.17.112;s;109pkt 109fpkt", shape=hexagon, color=black];
2395[label="175.150.173.115;s;98pkt 98fpkt", shape=hexagon, color=black];
2512[label="144.39.46.60;s;52pkt 52fpkt", shape=hexagon, color=black];
2525[label="148.176.224.173;s;473pkt 473fpkt", shape=hexagon, color=black];
2547[label="148.176.224.168;s;221pkt 221fpkt", shape=hexagon, color=black];
2823[label="194.76.134.11;s;113pkt 113fpkt", shape=hexagon, color=black];
3293[label="148.177.170.56;89pkt 89fpkt", shape=pentagon, color=darkviolet];
3449[label="148.177.4.89;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3856[label="148.177.8.168;66pkt 66fpkt", shape=pentagon, color=darkviolet];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[51.2387%]&lt;BR/&gt;{*:25, *:*}[46.1631%]&lt;BR/&gt;{148.176.224.173:*, *:*}[28.5801%]&lt;BR/&gt;{148.176.224.168:*, *:*}[21.2689%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.5906%)&lt;BR/&gt; 113: (1.14517%)&lt;BR/&gt; 995: (0.246653%)&lt;BR/&gt; 3876: (0.158562%)&lt;BR/&gt; 3790: (0.105708%)&gt;];
}
526--1239[label="0.0263158;1pkt 1fpkt"];
526--1831[label="0.0243902;1pkt 1fpkt"];
526--1985[label="0.0208333;1pkt 1fpkt"];
526--2391[label="1;109pkt 109fpkt"];
760--1831[label="0.0243902;1pkt 1fpkt"];
760--1985[label="0.0208333;1pkt 1fpkt"];
760--1993[label="0.0625;5pkt 5fpkt"];
760--2204[label="0.5;1pkt 1fpkt"];
760--2525[label="1;473pkt 473fpkt"];
808--1239[label="0.0263158;1pkt 1fpkt"];
808--1831[label="0.0243902;1pkt 1fpkt"];
808--1834[label="0.125;5pkt 5fpkt"];
808--1862[label="0.0625;1pkt 1fpkt"];
808--1985[label="0.0208333;1pkt 1fpkt"];
808--1993[label="0.05;4pkt 4fpkt"];
808--2180[label="0.0625;1pkt 1fpkt"];
808--2547[label="1;221pkt 221fpkt"];
979--1239[label="0.0526316;2pkt 2fpkt"];
979--1346[label="0.216216;8pkt 8fpkt"];
979--1831[label="0.0243902;1pkt 1fpkt"];
979--2395[label="1;98pkt 98fpkt"];
1239--1325[label="0.0263158;1pkt 1fpkt"];
1239--1750[label="0.0263158;1pkt 1fpkt"];
1239--1949[label="0.0263158;1pkt 1fpkt"];
1239--2123[label="0.0263158;1pkt 1fpkt"];
1239--2391[label="0.0263158;1pkt 1fpkt"];
1239--2395[label="0.0526316;2pkt 2fpkt"];
1239--2512[label="0.157895;6pkt 6fpkt"];
1239--2823[label="0.0263158;1pkt 1fpkt"];
1239--2940[label="0.0526316;2pkt 2fpkt"];
1239--2996[label="0.0263158;1pkt 1fpkt"];
1239--3293[label="0.0263158;1pkt 1fpkt"];
1239--3353[label="0.0263158;1pkt 1fpkt"];
1239--3449[label="0.125;1pkt 1fpkt"];
1239--3856[label="0.0263158;1pkt 1fpkt"];
1239--3905[label="0.0263158;1pkt 1fpkt"];
1239--4225[label="0.0526316;2pkt 2fpkt"];
1239--4453[label="0.0263158;1pkt 1fpkt"];
1750--2111[label="0.0102041;1pkt 1fpkt"];
1750--2823[label="1;113pkt 113fpkt"];
1831--2391[label="0.0243902;1pkt 1fpkt"];
1831--2395[label="0.0243902;1pkt 1fpkt"];
1831--2512[label="0.146341;6pkt 6fpkt"];
1831--2525[label="0.0243902;1pkt 1fpkt"];
1831--2547[label="0.0243902;1pkt 1fpkt"];
1831--2940[label="0.0731707;3pkt 3fpkt"];
1831--2959[label="0.030303;1pkt 1fpkt"];
1831--3353[label="0.0243902;1pkt 1fpkt"];
1831--3691[label="0.1;1pkt 1fpkt"];
1831--3905[label="0.0243902;1pkt 1fpkt"];
1831--4225[label="0.0731707;3pkt 3fpkt"];
1831--4453[label="0.0243902;1pkt 1fpkt"];
1949--3293[label="0.987805;81pkt 81fpkt"];
2123--3856[label="0.984375;63pkt 63fpkt"];
2204--2525[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.224.173"/>
      <filter src_ip="148.176.224.168"/>
      <filter src_port="25"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,053,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1016[label="130.54.4.124;d;36pkt 36fpkt", shape=diamond, color=yellow];
1244[label="21.25.32.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
3944[label="212.162.80.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.54.4.124:80}[55.5556%]&lt;BR/&gt;{*:80, 130.54.4.124:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.7436%)&lt;BR/&gt; 14428: (3.84615%)&lt;BR/&gt; 10000: (3.84615%)&lt;BR/&gt; 4592: (2.5641%)&lt;BR/&gt; 1400: (2.5641%)&gt;];
}
1016--1244[label="1;1pkt 1fpkt"];
1016--2890[label="0.0277778;1pkt 1fpkt"];
1016--2919[label="0.0277778;1pkt 1fpkt"];
1016--2931[label="0.0277778;1pkt 1fpkt"];
1016--2935[label="0.0277778;1pkt 1fpkt"];
1016--3944[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.4.124" src_port="80"/>
      <filter dst_ip="130.54.4.124" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02249,1.68347,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
169[label="23.39.13.182s;1pkt 1fpkt", shape=rectangle, color=red];
810[label="144.39.46.62;s;31pkt 31fpkt", shape=diamond, color=yellow];
1265[label="74.201.144.20;d;6pkt 6fpkt", shape=diamond, color=yellow];
2326[label="144.39.46.62;s;10pkt 10fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.46.62:110, *:*}[54.8387%]&lt;BR/&gt;{144.39.46.62:25, 192.119.102.128:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (28.125%)&lt;BR/&gt; 25: (12.5%)&lt;BR/&gt; 995: (9.375%)&lt;BR/&gt; 54807: (4.16667%)&lt;BR/&gt; 55807: (3.125%)&gt;];
}
169--810[label="1;1pkt 1fpkt"];
169--1265[label="1;1pkt 1fpkt"];
169--2326[label="1;1pkt 1fpkt"];
810--1265[label="1;6pkt 6fpkt"];
810--1391[label="0.5;1pkt 1fpkt"];
810--2326[label="1;10pkt 10fpkt"];
1265--2326[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="144.39.46.62" src_port="110"/>
      <filter dst_ip="192.119.102.128" src_ip="144.39.46.62" src_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
826[label="130.54.51.10;d;321pkt 321fpkt", shape=diamond, color=yellow];
1281[label="220.129.122.51;s;307pkt 307fpkt", shape=diamond, color=yellow];
2426[label="130.54.51.10;d;217pkt 217fpkt", shape=hexagon, color=black];
2616[label="220.129.122.51;s;277pkt 277fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.129.122.51:80, 130.54.51.10:*}[77.9037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8663%)&lt;BR/&gt; 2375: (0.178253%)&lt;BR/&gt; 2374: (0.178253%)&lt;BR/&gt; 2370: (0.178253%)&lt;BR/&gt; 2369: (0.178253%)&gt;];
}
826--1281[label="0.895765;275pkt 275fpkt"];
826--1480[label="0.895833;43pkt 43fpkt"];
826--2426[label="1;217pkt 217fpkt"];
826--2616[label="0.884477;245pkt 245fpkt"];
826--2912[label="0.0560748;18pkt 18fpkt"];
826--2919[label="0.0560748;18pkt 18fpkt"];
826--2925[label="0.0560748;18pkt 18fpkt"];
826--2931[label="0.0560748;18pkt 18fpkt"];
826--2933[label="0.0560748;18pkt 18fpkt"];
826--2935[label="0.0560748;18pkt 18fpkt"];
1281--1796[label="0.135593;32pkt 32fpkt"];
1281--2426[label="0.857143;186pkt 186fpkt"];
1281--2616[label="1;277pkt 277fpkt"];
1281--2912[label="0.0488599;15pkt 15fpkt"];
1281--2919[label="0.0521173;16pkt 16fpkt"];
1281--2925[label="0.0488599;15pkt 15fpkt"];
1281--2931[label="0.0521173;16pkt 16fpkt"];
1281--2933[label="0.0488599;15pkt 15fpkt"];
1281--2935[label="0.0521173;16pkt 16fpkt"];
2426--2616[label="0.857143;186pkt 186fpkt"];
2426--2912[label="0.0829493;18pkt 18fpkt"];
2426--2919[label="0.0829493;18pkt 18fpkt"];
2426--2925[label="0.0829493;18pkt 18fpkt"];
2426--2931[label="0.0829493;18pkt 18fpkt"];
2426--2933[label="0.0829493;18pkt 18fpkt"];
2426--2935[label="0.0829493;18pkt 18fpkt"];
2616--2912[label="0.0541516;15pkt 15fpkt"];
2616--2919[label="0.0577617;16pkt 16fpkt"];
2616--2925[label="0.0541516;15pkt 15fpkt"];
2616--2931[label="0.0577617;16pkt 16fpkt"];
2616--2933[label="0.0541516;15pkt 15fpkt"];
2616--2935[label="0.0577617;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.51.10" src_ip="220.129.122.51" src_port="80"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
595[label="148.177.27.47;s;247pkt 247fpkt", shape=diamond, color=yellow];
1260[label="194.211.57.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
1686[label="148.176.18.198;s;207pkt 207fpkt", shape=diamond, color=yellow];
1776[label="203.68.41.189;d;103pkt 103fpkt", shape=diamond, color=yellow];
2540[label="148.177.27.47;s;106pkt 106fpkt", shape=hexagon, color=black];
2670[label="194.211.57.16;d;1pkt 1fpkt", shape=hexagon, color=black];
3235[label="148.177.27.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4138[label="148.177.58.232;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4384[label="148.177.27.47;1pkt 1fpkt", shape=invtriangle, color=brown];
4854[label="148.177.58.232;16pkt 16fpkt", shape=invtriangle, color=brown];
4967[label="148.177.27.47;1pkt 1fpkt", shape=invhouse, color=bisque];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.27.47:*, *:*}[44.0285%]&lt;BR/&gt;{*:*, *:80}[33.8681%]&lt;BR/&gt;{148.176.18.198:*, *:53}[22.6381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (25.8916%)&lt;BR/&gt; 80: (17.2611%)&lt;BR/&gt; 110: (2.78174%)&lt;BR/&gt; 1863: (1.71184%)&lt;BR/&gt; 49157: (0.927247%)&gt;];
}
595--1020[label="0.0285714;2pkt 2fpkt"];
595--1092[label="0.00917431;1pkt 1fpkt"];
595--1115[label="0.0344828;1pkt 1fpkt"];
595--1260[label="1;1pkt 1fpkt"];
595--1293[label="0.0151515;1pkt 1fpkt"];
595--1430[label="0.0103093;1pkt 1fpkt"];
595--1626[label="0.00869565;1pkt 1fpkt"];
595--1641[label="0.425532;20pkt 20fpkt"];
595--1776[label="0.0970874;10pkt 10fpkt"];
595--1956[label="0.0117647;1pkt 1fpkt"];
595--2082[label="0.0147059;1pkt 1fpkt"];
595--2418[label="0.0222222;1pkt 1fpkt"];
595--2540[label="1;106pkt 106fpkt"];
595--2670[label="1;1pkt 1fpkt"];
595--2890[label="0.00809717;2pkt 2fpkt"];
595--3235[label="1;1pkt 1fpkt"];
595--4384[label="1;1pkt 1fpkt"];
595--4967[label="1;1pkt 1fpkt"];
1260--2540[label="1;1pkt 1fpkt"];
1260--2670[label="1;1pkt 1fpkt"];
1686--1776[label="0.0194175;2pkt 2fpkt"];
1686--1956[label="0.0117647;1pkt 1fpkt"];
1686--2090[label="0.0454545;4pkt 4fpkt"];
1686--2105[label="0.0117647;1pkt 1fpkt"];
1686--2108[label="0.0138889;1pkt 1fpkt"];
1776--1794[label="0.00970874;1pkt 1fpkt"];
1776--1945[label="0.00970874;1pkt 1fpkt"];
1776--1952[label="0.00970874;1pkt 1fpkt"];
1776--1957[label="0.00970874;1pkt 1fpkt"];
1776--1986[label="0.025;2pkt 2fpkt"];
1776--2045[label="0.0212766;1pkt 1fpkt"];
1776--2119[label="0.00970874;1pkt 1fpkt"];
1776--2275[label="0.00970874;1pkt 1fpkt"];
1776--2330[label="0.00970874;1pkt 1fpkt"];
1776--2333[label="0.038835;4pkt 4fpkt"];
1776--2382[label="0.0588235;1pkt 1fpkt"];
1776--2394[label="0.00970874;1pkt 1fpkt"];
1776--2492[label="0.0120482;1pkt 1fpkt"];
1776--2503[label="0.00970874;1pkt 1fpkt"];
1776--2528[label="0.0175439;1pkt 1fpkt"];
1776--2534[label="0.00970874;1pkt 1fpkt"];
1776--2540[label="0.038835;4pkt 4fpkt"];
1776--2551[label="0.00970874;1pkt 1fpkt"];
1776--2608[label="0.00970874;1pkt 1fpkt"];
1776--2660[label="0.00970874;1pkt 1fpkt"];
1776--2661[label="0.00970874;1pkt 1fpkt"];
1776--2662[label="0.00970874;1pkt 1fpkt"];
1776--2696[label="0.0909091;1pkt 1fpkt"];
1776--2714[label="0.00970874;1pkt 1fpkt"];
1776--2724[label="0.00970874;1pkt 1fpkt"];
1776--2795[label="0.0294118;1pkt 1fpkt"];
1776--2816[label="0.125;1pkt 1fpkt"];
1776--2839[label="0.00970874;1pkt 1fpkt"];
1776--2869[label="0.0588235;1pkt 1fpkt"];
1776--2906[label="0.23301;24pkt 24fpkt"];
1776--2911[label="0.038835;4pkt 4fpkt"];
1776--2918[label="0.038835;4pkt 4fpkt"];
1776--2924[label="0.038835;4pkt 4fpkt"];
1776--2930[label="0.038835;4pkt 4fpkt"];
1776--2932[label="0.038835;4pkt 4fpkt"];
1776--2934[label="0.038835;4pkt 4fpkt"];
1776--3048[label="0.00970874;1pkt 1fpkt"];
1776--3162[label="0.00970874;1pkt 1fpkt"];
1776--3196[label="0.00970874;1pkt 1fpkt"];
1776--3204[label="0.0357143;1pkt 1fpkt"];
1776--3215[label="0.00970874;1pkt 1fpkt"];
1776--3231[label="0.00970874;1pkt 1fpkt"];
1776--3381[label="0.00970874;1pkt 1fpkt"];
1776--3393[label="0.00970874;1pkt 1fpkt"];
1776--3441[label="0.00970874;1pkt 1fpkt"];
1776--3482[label="0.00970874;1pkt 1fpkt"];
1776--3525[label="0.00970874;1pkt 1fpkt"];
1776--3547[label="0.00970874;1pkt 1fpkt"];
1776--3566[label="0.0108696;1pkt 1fpkt"];
1776--3619[label="0.038835;4pkt 4fpkt"];
1776--3672[label="0.0625;1pkt 1fpkt"];
1776--3720[label="0.0243902;1pkt 1fpkt"];
1776--3721[label="0.00970874;1pkt 1fpkt"];
1776--3852[label="0.00970874;1pkt 1fpkt"];
1776--3866[label="0.0769231;1pkt 1fpkt"];
1776--3905[label="0.00970874;1pkt 1fpkt"];
1776--3997[label="0.00970874;1pkt 1fpkt"];
1776--4138[label="0.0588235;1pkt 1fpkt"];
1776--4216[label="0.03;3pkt 3fpkt"];
1776--4281[label="0.00970874;1pkt 1fpkt"];
1776--4342[label="0.00970874;1pkt 1fpkt"];
1776--4366[label="0.0357143;1pkt 1fpkt"];
1776--4373[label="0.00970874;1pkt 1fpkt"];
1776--4465[label="0.00970874;1pkt 1fpkt"];
1776--4472[label="0.00970874;1pkt 1fpkt"];
1776--4524[label="0.00970874;1pkt 1fpkt"];
1776--4546[label="0.00970874;1pkt 1fpkt"];
1776--4558[label="0.00970874;1pkt 1fpkt"];
1776--4595[label="0.038835;4pkt 4fpkt"];
1776--4722[label="0.00970874;1pkt 1fpkt"];
1776--4854[label="0.0625;1pkt 1fpkt"];
1776--4894[label="0.030303;3pkt 3fpkt"];
1776--4925[label="0.00970874;1pkt 1fpkt"];
1776--4955[label="0.00970874;1pkt 1fpkt"];
1776--4962[label="0.00970874;1pkt 1fpkt"];
1776--5000[label="0.00970874;1pkt 1fpkt"];
1776--5004[label="0.00970874;1pkt 1fpkt"];
1776--5032[label="0.00970874;1pkt 1fpkt"];
1776--5042[label="0.00970874;1pkt 1fpkt"];
1776--5146[label="0.00970874;1pkt 1fpkt"];
2540--2670[label="1;1pkt 1fpkt"];
2540--2890[label="0.0188679;2pkt 2fpkt"];
3235--4384[label="1;1pkt 1fpkt"];
3235--4967[label="1;1pkt 1fpkt"];
4138--4854[label="1;16pkt 16fpkt"];
4384--4967[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.27.47"/>
      <filter dst_port="80"/>
      <filter dst_port="53" src_ip="148.176.18.198"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
442[label="175.150.165.207;s;10pkt 10fpkt", shape=diamond, color=yellow];
1248[label="214.182.130.224;d;65pkt 65fpkt", shape=diamond, color=yellow];
1267[label="20.117.64.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
1308[label="213.26.113.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
1430[label="214.182.130.222;d;97pkt 97fpkt", shape=diamond, color=yellow];
1447[label="213.108.201.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
1786[label="21.26.212.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
2133[label="213.183.29.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
2276[label="175.150.165.207;s;10pkt 10fpkt", shape=hexagon, color=black];
2722[label="213.108.201.57;d;1pkt 1fpkt", shape=hexagon, color=black];
2791[label="213.26.113.132;d;1pkt 1fpkt", shape=hexagon, color=black];
3527[label="175.150.138.101;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3653[label="175.150.179.128;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4031[label="175.150.165.207;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4805[label="175.150.165.207;3pkt 3fpkt", shape=invtriangle, color=brown];
5153[label="175.150.165.207;3pkt 3fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.182.130.222:5050}[35.5372%]&lt;BR/&gt;{175.150.179.128:*, *:*}[28.9256%]&lt;BR/&gt;{*:*, 214.182.130.224:5050}[25.2066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (28.4672%)&lt;BR/&gt; 443: (8.75912%)&lt;BR/&gt; 16881: (2.73723%)&lt;BR/&gt; 80: (2.0073%)&lt;BR/&gt; 20: (2.0073%)&gt;];
}
442--1248[label="0.1;1pkt 1fpkt"];
442--1267[label="1;1pkt 1fpkt"];
442--1308[label="1;1pkt 1fpkt"];
442--1447[label="1;1pkt 1fpkt"];
442--1626[label="0.1;1pkt 1fpkt"];
442--1786[label="1;1pkt 1fpkt"];
442--2133[label="1;1pkt 1fpkt"];
442--2276[label="1;10pkt 10fpkt"];
442--2722[label="1;1pkt 1fpkt"];
442--2791[label="1;1pkt 1fpkt"];
442--4031[label="1;3pkt 3fpkt"];
442--4805[label="1;3pkt 3fpkt"];
442--5153[label="1;3pkt 3fpkt"];
1248--1282[label="0.0153846;1pkt 1fpkt"];
1248--1506[label="0.0377358;2pkt 2fpkt"];
1248--2276[label="0.1;1pkt 1fpkt"];
1248--2963[label="0.0461538;3pkt 3fpkt"];
1248--3527[label="0.166667;1pkt 1fpkt"];
1248--3653[label="0.0153846;1pkt 1fpkt"];
1267--2276[label="1;1pkt 1fpkt"];
1267--4031[label="1;1pkt 1fpkt"];
1267--4805[label="1;1pkt 1fpkt"];
1267--5153[label="1;1pkt 1fpkt"];
1308--2276[label="1;1pkt 1fpkt"];
1308--2791[label="1;1pkt 1fpkt"];
1430--2540[label="0.0103093;1pkt 1fpkt"];
1430--2610[label="0.0769231;2pkt 2fpkt"];
1430--3440[label="0.0769231;2pkt 2fpkt"];
1430--3493[label="0.666667;6pkt 6fpkt"];
1430--3527[label="0.5;3pkt 3fpkt"];
1430--4499[label="0.08;2pkt 2fpkt"];
1447--2276[label="1;1pkt 1fpkt"];
1447--2722[label="1;1pkt 1fpkt"];
1447--4031[label="1;1pkt 1fpkt"];
1447--4805[label="1;1pkt 1fpkt"];
1447--5153[label="1;1pkt 1fpkt"];
1786--2276[label="1;1pkt 1fpkt"];
1786--4031[label="1;1pkt 1fpkt"];
1786--4805[label="1;1pkt 1fpkt"];
1786--5153[label="1;1pkt 1fpkt"];
2133--2276[label="1;1pkt 1fpkt"];
2276--2722[label="1;1pkt 1fpkt"];
2276--2791[label="1;1pkt 1fpkt"];
2276--4031[label="1;3pkt 3fpkt"];
2276--4805[label="1;3pkt 3fpkt"];
2276--5153[label="1;3pkt 3fpkt"];
2722--4031[label="1;1pkt 1fpkt"];
2722--4805[label="1;1pkt 1fpkt"];
2722--5153[label="1;1pkt 1fpkt"];
4031--4805[label="1;3pkt 3fpkt"];
4031--5153[label="1;3pkt 3fpkt"];
4805--5153[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="175.150.179.128"/>
      <filter dst_ip="214.182.130.222" dst_port="5050"/>
      <filter dst_ip="214.182.130.224" dst_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
1081[label="175.150.185.58;s;181pkt 181fpkt", shape=diamond, color=yellow];
1346[label="72.163.236.5;d;37pkt 37fpkt", shape=diamond, color=yellow];
1603[label="148.177.200.2;s;88pkt 88fpkt", shape=diamond, color=yellow];
2443[label="175.150.185.58;s;167pkt 167fpkt", shape=hexagon, color=black];
2629[label="175.150.185.50;s;56pkt 56fpkt", shape=hexagon, color=black];
2956[label="148.177.200.2;96pkt 96fpkt", shape=pentagon, color=darkviolet];
3311[label="175.150.185.58;192pkt 192fpkt", shape=pentagon, color=darkviolet];
4429[label="175.150.185.58;192pkt 192fpkt", shape=invtriangle, color=brown];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.185.58:*, *:25}[47.4801%]&lt;BR/&gt;{148.177.200.2:*, *:25}[20.1592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.5719%)&lt;BR/&gt; 113: (2.32904%)&lt;BR/&gt; 3154: (0.396432%)&lt;BR/&gt; 2613: (0.396432%)&lt;BR/&gt; 2557: (0.396432%)&gt;];
}
1081--1346[label="0.0810811;3pkt 3fpkt"];
1081--1834[label="0.025;1pkt 1fpkt"];
1081--1862[label="0.125;2pkt 2fpkt"];
1081--2005[label="0.0277778;1pkt 1fpkt"];
1081--2443[label="1;167pkt 167fpkt"];
1081--3311[label="0.994475;180pkt 180fpkt"];
1081--4429[label="0.994475;180pkt 180fpkt"];
1346--1603[label="0.027027;1pkt 1fpkt"];
1346--2123[label="0.0540541;2pkt 2fpkt"];
1346--2395[label="0.108108;4pkt 4fpkt"];
1346--2443[label="0.0810811;3pkt 3fpkt"];
1346--2629[label="0.027027;1pkt 1fpkt"];
1346--2835[label="0.027027;1pkt 1fpkt"];
1346--2940[label="0.162162;6pkt 6fpkt"];
1346--2956[label="0.027027;1pkt 1fpkt"];
1346--3311[label="0.0810811;3pkt 3fpkt"];
1346--3856[label="0.0540541;2pkt 2fpkt"];
1346--4225[label="0.162162;6pkt 6fpkt"];
1346--4429[label="0.0810811;3pkt 3fpkt"];
1603--2956[label="1;88pkt 88fpkt"];
2443--3311[label="0.994012;166pkt 166fpkt"];
2443--4429[label="0.994012;166pkt 166fpkt"];
3311--4429[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="175.150.185.58"/>
      <filter dst_port="25" src_ip="148.177.200.2"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
881[label="148.177.244.233;s;64pkt 64fpkt", shape=diamond, color=yellow];
1356[label="74.169.128.16;d;36pkt 36fpkt", shape=diamond, color=yellow];
2451[label="148.177.194.81;s;93pkt 93fpkt", shape=hexagon, color=black];
2517[label="148.177.169.17;s;101pkt 101fpkt", shape=hexagon, color=black];
3047[label="148.177.169.17;164pkt 164fpkt", shape=pentagon, color=darkviolet];
4149[label="148.177.244.233;63pkt 63fpkt", shape=pentagon, color=darkviolet];
4860[label="148.177.244.233;63pkt 63fpkt", shape=invtriangle, color=brown];
5177[label="148.177.244.233;63pkt 63fpkt", shape=invhouse, color=bisque];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.169.17:*, *:80}[30.1242%]&lt;BR/&gt;{148.177.194.81:*, *:80}[23.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.153%)&lt;BR/&gt; 443: (10.51%)&lt;BR/&gt; 25: (5.02318%)&lt;BR/&gt; 53: (0.927357%)&lt;BR/&gt; 1170: (0.540958%)&gt;];
}
881--1356[label="0.388889;14pkt 14fpkt"];
881--4149[label="1;63pkt 63fpkt"];
881--4860[label="1;63pkt 63fpkt"];
881--5177[label="1;63pkt 63fpkt"];
1356--2451[label="0.472222;17pkt 17fpkt"];
1356--2517[label="0.138889;5pkt 5fpkt"];
1356--3047[label="0.138889;5pkt 5fpkt"];
1356--4149[label="0.388889;14pkt 14fpkt"];
1356--4860[label="0.388889;14pkt 14fpkt"];
1356--5177[label="0.388889;14pkt 14fpkt"];
2451--2738[label="0.0107527;1pkt 1fpkt"];
2517--2739[label="0.00990099;1pkt 1fpkt"];
2517--2890[label="0.039604;4pkt 4fpkt"];
2517--3047[label="0.990099;100pkt 100fpkt"];
4149--4860[label="1;63pkt 63fpkt"];
4149--5177[label="1;63pkt 63fpkt"];
4860--5177[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.169.17"/>
      <filter dst_port="80" src_ip="148.177.194.81"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
859[label="148.177.244.216;d;41pkt 41fpkt", shape=diamond, color=yellow];
1365[label="213.2.1.207;s;22pkt 22fpkt", shape=diamond, color=yellow];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.177.244.216:*}[72.7273%]&lt;BR/&gt;{213.2.1.207:80, 148.177.203.114:*}[25.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2063%)&lt;BR/&gt; 2953: (1.5873%)&lt;BR/&gt; 2952: (1.5873%)&lt;BR/&gt; 2951: (1.5873%)&lt;BR/&gt; 2950: (1.5873%)&gt;];
}
859--1365[label="0.363636;8pkt 8fpkt"];
859--2912[label="0.121951;5pkt 5fpkt"];
859--2925[label="0.121951;5pkt 5fpkt"];
859--2933[label="0.121951;5pkt 5fpkt"];
859--3331[label="0.142857;2pkt 2fpkt"];
859--4442[label="0.153846;2pkt 2fpkt"];
859--4992[label="0.153846;2pkt 2fpkt"];
1365--2912[label="0.0454545;1pkt 1fpkt"];
1365--2925[label="0.0454545;1pkt 1fpkt"];
1365--2933[label="0.0454545;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.244.216" src_port="80"/>
      <filter dst_ip="148.177.203.114" src_ip="213.2.1.207" src_port="80"/>
    </slice>
    <from sec="1109826019" usec="0"/>
    <to sec="1109826776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1393[label="215.210.224.58;d;148pkt 148fpkt", shape=diamond, color=yellow];
1394[label="148.176.147.119;s;148pkt 148fpkt", shape=diamond, color=yellow];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.147.119:*, 215.210.224.58:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1273: (0.337838%)&lt;BR/&gt; 1272: (0.337838%)&lt;BR/&gt; 1271: (0.337838%)&lt;BR/&gt; 1270: (0.337838%)&gt;];
}
1393--1394[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_ip="215.210.224.58" dst_port="80" src_ip="148.176.147.119"/>
    </slice>
    <from sec="1109826235" usec="0"/>
    <to sec="1109826463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1358[label="144.224.75.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
1399[label="198.114.84.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.53.50:0, 198.114.84.163:0}[50%]&lt;BR/&gt;{144.224.75.113:1176, 198.114.84.163:8004}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8004: (33.3333%)&lt;BR/&gt; 1176: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
1358--1399[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.114.84.163" dst_port="8004" src_ip="144.224.75.113" src_port="1176"/>
      <filter dst_ip="198.114.84.163" src_ip="144.224.53.50"/>
    </slice>
    <from sec="1109826094" usec="0"/>
    <to sec="1109826738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
1401[label="175.150.133.144;d;6pkt 6fpkt", shape=diamond, color=yellow];
1412[label="196.70.37.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.166.228.71:*, 175.150.133.144:25}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 25931: (14.2857%)&lt;BR/&gt; 30467: (7.14286%)&lt;BR/&gt; 28207: (7.14286%)&lt;BR/&gt; 26536: (7.14286%)&gt;];
}
1401--1412[label="1;1pkt 1fpkt"];
1401--1681[label="0.666667;4pkt 4fpkt"];
1401--3765[label="0.166667;1pkt 1fpkt"];
1401--4673[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.133.144" dst_port="25" src_ip="214.166.228.71"/>
    </slice>
    <from sec="1109826260" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1217[label="175.150.185.57;d;116pkt 116fpkt", shape=diamond, color=yellow];
1424[label="73.58.112.158;s;28pkt 28fpkt", shape=diamond, color=yellow];
1744[label="175.150.160.110;d;16pkt 16fpkt", shape=diamond, color=yellow];
1824[label="198.1.30.71;s;67pkt 67fpkt", shape=diamond, color=yellow];
1857[label="73.58.112.153;s;27pkt 27fpkt", shape=diamond, color=yellow];
2078[label="175.150.202.49;d;40pkt 40fpkt", shape=diamond, color=yellow];
3765[label="73.58.112.149;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3776[label="73.58.112.153;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3804[label="73.58.112.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4673[label="73.58.112.149;14pkt 14fpkt", shape=invtriangle, color=brown];
4680[label="73.58.112.153;31pkt 31fpkt", shape=invtriangle, color=brown];
4699[label="73.58.112.158;1pkt 1fpkt", shape=invtriangle, color=brown];
5101[label="73.58.112.153;31pkt 31fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 175.150.185.57:25}[37.8738%]&lt;BR/&gt;{198.1.30.71:*, *:*}[22.2591%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.9233%)&lt;BR/&gt; 113: (1.67866%)&lt;BR/&gt; 12814: (0.719424%)&lt;BR/&gt; 12531: (0.719424%)&lt;BR/&gt; 80: (0.719424%)&gt;];
}
1217--1424[label="0.0714286;2pkt 2fpkt"];
1217--1681[label="0.0243902;2pkt 2fpkt"];
1217--1824[label="0.0149254;1pkt 1fpkt"];
1217--1857[label="0.037037;1pkt 1fpkt"];
1217--2762[label="0.0769231;2pkt 2fpkt"];
1217--3765[label="0.0714286;1pkt 1fpkt"];
1217--3776[label="0.0322581;1pkt 1fpkt"];
1217--3791[label="0.214286;3pkt 3fpkt"];
1217--3826[label="0.0769231;1pkt 1fpkt"];
1217--4673[label="0.0714286;1pkt 1fpkt"];
1217--4680[label="0.0322581;1pkt 1fpkt"];
1217--4691[label="0.214286;3pkt 3fpkt"];
1217--5101[label="0.0322581;1pkt 1fpkt"];
1424--1433[label="0.0357143;1pkt 1fpkt"];
1424--1441[label="0.0384615;1pkt 1fpkt"];
1424--1530[label="0.0714286;2pkt 2fpkt"];
1424--1744[label="0.125;2pkt 2fpkt"];
1424--1925[label="0.0714286;2pkt 2fpkt"];
1424--2078[label="0.0714286;2pkt 2fpkt"];
1424--2762[label="1;26pkt 26fpkt"];
1424--3804[label="1;1pkt 1fpkt"];
1424--4699[label="1;1pkt 1fpkt"];
1744--1857[label="0.0625;1pkt 1fpkt"];
1744--2034[label="0.153846;2pkt 2fpkt"];
1744--2762[label="0.0625;1pkt 1fpkt"];
1744--2971[label="0.125;2pkt 2fpkt"];
1744--3735[label="0.0625;1pkt 1fpkt"];
1744--3776[label="0.0625;1pkt 1fpkt"];
1744--3804[label="1;1pkt 1fpkt"];
1744--3826[label="0.153846;2pkt 2fpkt"];
1744--4657[label="0.0625;1pkt 1fpkt"];
1744--4680[label="0.0625;1pkt 1fpkt"];
1744--4699[label="1;1pkt 1fpkt"];
1744--5101[label="0.0625;1pkt 1fpkt"];
1857--1925[label="0.0740741;2pkt 2fpkt"];
1857--3776[label="1;27pkt 27fpkt"];
1857--4680[label="1;27pkt 27fpkt"];
1857--5101[label="1;27pkt 27fpkt"];
2078--2762[label="0.0769231;2pkt 2fpkt"];
2078--3650[label="0.05;1pkt 1fpkt"];
2078--3673[label="0.133333;2pkt 2fpkt"];
2078--3735[label="0.0588235;1pkt 1fpkt"];
2078--3740[label="0.111111;2pkt 2fpkt"];
2078--3765[label="0.0714286;1pkt 1fpkt"];
2078--3791[label="0.0714286;1pkt 1fpkt"];
2078--3826[label="0.0769231;1pkt 1fpkt"];
2078--4610[label="0.0526316;1pkt 1fpkt"];
2078--4623[label="0.133333;2pkt 2fpkt"];
2078--4657[label="0.0588235;1pkt 1fpkt"];
2078--4673[label="0.0714286;1pkt 1fpkt"];
2078--4691[label="0.0714286;1pkt 1fpkt"];
3765--4673[label="1;14pkt 14fpkt"];
3776--4680[label="1;31pkt 31fpkt"];
3776--5101[label="1;31pkt 31fpkt"];
3804--4699[label="1;1pkt 1fpkt"];
4680--5101[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="198.1.30.71"/>
      <filter dst_ip="175.150.185.57" dst_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1335[label="20.90.92.92;d;8pkt 8fpkt", shape=diamond, color=yellow];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.164.198:*, 20.90.92.92:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59739: (6.25%)&lt;BR/&gt; 59726: (6.25%)&lt;BR/&gt; 59442: (6.25%)&lt;BR/&gt; 59438: (6.25%)&gt;];
}
1335--2277[label="1;8pkt 8fpkt"];
1335--2890[label="0.25;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.90.92.92" dst_port="80" src_ip="148.177.164.198"/>
    </slice>
    <from sec="1109826021" usec="0"/>
    <to sec="1109826223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
970[label="20.90.82.112;s;410pkt 410fpkt", shape=diamond, color=yellow];
1435[label="144.134.71.97;d;292pkt 292fpkt", shape=diamond, color=yellow];
1579[label="169.68.137.241;d;354pkt 354fpkt", shape=diamond, color=yellow];
2390[label="20.90.82.112;s;202pkt 202fpkt", shape=hexagon, color=black];
3577[label="20.90.82.112;443pkt 443fpkt", shape=pentagon, color=darkviolet];
4573[label="20.90.82.112;442pkt 442fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.90.82.112:80, *:*}[49.9436%]&lt;BR/&gt;{*:80, 169.68.137.241:*}[25.2537%]&lt;BR/&gt;{213.117.112.234:7000, *:*}[23.788%]&lt;BR/&gt;{*:80, 144.134.71.97:*}[21.4205%]&lt;BR/&gt;{20.72.5.115:80, *:*}[21.195%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0271%)&lt;BR/&gt; 7000: (5.83294%)&lt;BR/&gt; 47188: (0.209986%)&lt;BR/&gt; 1049: (0.186654%)&lt;BR/&gt; 8391: (0.163322%)&gt;];
}
970--1435[label="0.284247;83pkt 83fpkt"];
970--1444[label="0.273529;93pkt 93fpkt"];
970--1446[label="0.296089;106pkt 106fpkt"];
970--1579[label="0.333333;118pkt 118fpkt"];
970--2390[label="1;202pkt 202fpkt"];
970--2912[label="0.207317;85pkt 85fpkt"];
970--2919[label="0.253659;104pkt 104fpkt"];
970--2925[label="0.207317;85pkt 85fpkt"];
970--2931[label="0.253659;104pkt 104fpkt"];
970--2933[label="0.207317;85pkt 85fpkt"];
970--2935[label="0.253659;104pkt 104fpkt"];
970--3577[label="1;410pkt 410fpkt"];
970--4573[label="0.997561;409pkt 409fpkt"];
1435--2390[label="0.232673;47pkt 47fpkt"];
1435--2585[label="0.010274;3pkt 3fpkt"];
1435--2912[label="0.171233;50pkt 50fpkt"];
1435--2919[label="0.178082;52pkt 52fpkt"];
1435--2925[label="0.171233;50pkt 50fpkt"];
1435--2931[label="0.178082;52pkt 52fpkt"];
1435--2933[label="0.171233;50pkt 50fpkt"];
1435--2935[label="0.178082;52pkt 52fpkt"];
1435--3577[label="0.284247;83pkt 83fpkt"];
1435--3922[label="0.010274;3pkt 3fpkt"];
1435--4573[label="0.284247;83pkt 83fpkt"];
1435--4759[label="0.010274;3pkt 3fpkt"];
1435--5137[label="0.010274;3pkt 3fpkt"];
1579--2390[label="0.277228;56pkt 56fpkt"];
1579--2912[label="0.124294;44pkt 44fpkt"];
1579--2919[label="0.158192;56pkt 56fpkt"];
1579--2925[label="0.124294;44pkt 44fpkt"];
1579--2931[label="0.158192;56pkt 56fpkt"];
1579--2933[label="0.124294;44pkt 44fpkt"];
1579--2935[label="0.158192;56pkt 56fpkt"];
1579--3577[label="0.336158;119pkt 119fpkt"];
1579--4573[label="0.333333;118pkt 118fpkt"];
2390--2912[label="0.420792;85pkt 85fpkt"];
2390--2919[label="0.366337;74pkt 74fpkt"];
2390--2925[label="0.420792;85pkt 85fpkt"];
2390--2931[label="0.366337;74pkt 74fpkt"];
2390--2933[label="0.420792;85pkt 85fpkt"];
2390--2935[label="0.366337;74pkt 74fpkt"];
2390--3577[label="1;202pkt 202fpkt"];
2390--4573[label="0.99505;201pkt 201fpkt"];
3577--4573[label="1;442pkt 442fpkt"];
</description>
    <slice>
      <filter src_ip="20.90.82.112" src_port="80"/>
      <filter src_ip="213.117.112.234" src_port="7000"/>
      <filter src_ip="20.72.5.115" src_port="80"/>
      <filter dst_ip="169.68.137.241" src_port="80"/>
      <filter dst_ip="144.134.71.97" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1461[label="74.165.69.66;s;354pkt 354fpkt", shape=diamond, color=yellow];
1462[label="169.28.97.233;d;316pkt 316fpkt", shape=diamond, color=yellow];
3355[label="74.165.69.66;390pkt 390fpkt", shape=pentagon, color=darkviolet];
4455[label="74.165.69.66;389pkt 389fpkt", shape=invtriangle, color=brown];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.165.69.66:4103, 169.28.97.233:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4103: (50%)&lt;BR/&gt; 2009: (0.138026%)&lt;BR/&gt; 2008: (0.138026%)&lt;BR/&gt; 2007: (0.138026%)&lt;BR/&gt; 2006: (0.138026%)&gt;];
}
1461--1462[label="1;316pkt 316fpkt"];
1461--3355[label="1;354pkt 354fpkt"];
1461--4455[label="0.997175;353pkt 353fpkt"];
1462--3355[label="1;316pkt 316fpkt"];
1462--4455[label="0.996835;315pkt 315fpkt"];
3355--4455[label="1;389pkt 389fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.97.233" src_ip="74.165.69.66" src_port="4103"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
524[label="148.177.197.12;s;96pkt 96fpkt", shape=diamond, color=yellow];
1524[label="76.1.86.38;d;63pkt 63fpkt", shape=diamond, color=yellow];
2219[label="76.2.195.17;d;14pkt 14fpkt", shape=diamond, color=yellow];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.197.12:*, *:80}[66.6667%]&lt;BR/&gt;{*:*, 76.1.86.38:80}[43.9716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1329%)&lt;BR/&gt; 3311: (0.578035%)&lt;BR/&gt; 3310: (0.578035%)&lt;BR/&gt; 3309: (0.578035%)&lt;BR/&gt; 3308: (0.578035%)&gt;];
}
524--633[label="0.0104167;1pkt 1fpkt"];
524--695[label="0.0104167;1pkt 1fpkt"];
524--1524[label="0.285714;18pkt 18fpkt"];
524--2219[label="1;14pkt 14fpkt"];
1524--2296[label="0.174603;11pkt 11fpkt"];
1524--2720[label="0.0952381;6pkt 6fpkt"];
1524--3234[label="0.0793651;5pkt 5fpkt"];
1524--3450[label="0.015873;1pkt 1fpkt"];
1524--4383[label="0.0793651;5pkt 5fpkt"];
1524--4505[label="0.015873;1pkt 1fpkt"];
1524--4813[label="0.174603;11pkt 11fpkt"];
1524--4966[label="0.0793651;5pkt 5fpkt"];
1524--5019[label="0.015873;1pkt 1fpkt"];
1524--5155[label="0.174603;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.197.12"/>
      <filter dst_ip="76.1.86.38" dst_port="80"/>
    </slice>
    <from sec="1109826499" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1313[label="195.81.113.230;d;76pkt 76fpkt", shape=diamond, color=yellow];
1528[label="73.227.5.251;s;63pkt 63fpkt", shape=diamond, color=yellow];
2628[label="73.227.5.251;s;46pkt 46fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.227.5.251:80, 195.81.113.230:*}[47.3684%]&lt;BR/&gt;{73.227.5.251:55555, 195.81.113.230:*}[35.5263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.027%)&lt;BR/&gt; 55555: (20.2703%)&lt;BR/&gt; 17037: (1.08108%)&lt;BR/&gt; 6146: (1.08108%)&lt;BR/&gt; 12265: (0.810811%)&gt;];
}
1313--1528[label="1;63pkt 63fpkt"];
1313--2628[label="1;46pkt 46fpkt"];
1313--2912[label="0.0263158;2pkt 2fpkt"];
1313--2925[label="0.0263158;2pkt 2fpkt"];
1313--2933[label="0.0263158;2pkt 2fpkt"];
1528--2628[label="1;46pkt 46fpkt"];
1528--2912[label="0.031746;2pkt 2fpkt"];
1528--2925[label="0.031746;2pkt 2fpkt"];
1528--2933[label="0.031746;2pkt 2fpkt"];
2628--2912[label="0.0434783;2pkt 2fpkt"];
2628--2925[label="0.0434783;2pkt 2fpkt"];
2628--2933[label="0.0434783;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.113.230" src_ip="73.227.5.251" src_port="80"/>
      <filter dst_ip="195.81.113.230" src_ip="73.227.5.251" src_port="55555"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
1536[label="73.100.102.74;d;4pkt 4fpkt", shape=diamond, color=yellow];
1540[label="195.81.118.43;s;2pkt 2fpkt", shape=diamond, color=yellow];
3217[label="195.81.118.43;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4374[label="195.81.118.43;7pkt 7fpkt", shape=invtriangle, color=brown];
4963[label="195.81.118.43;7pkt 7fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.118.43:53, *:*}[44.4444%]&lt;BR/&gt;{195.81.118.43:*, 73.100.102.74:16108}[22.2222%]&lt;BR/&gt;{195.81.118.43:143, 73.100.102.74:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (17.8571%)&lt;BR/&gt; 143: (16.0714%)&lt;BR/&gt; 16108: (14.2857%)&lt;BR/&gt; 16137: (8.92857%)&lt;BR/&gt; 53476: (7.14286%)&gt;];
}
1536--1540[label="0.5;1pkt 1fpkt"];
1536--3217[label="0.75;3pkt 3fpkt"];
1536--3734[label="0.25;1pkt 1fpkt"];
1536--4374[label="0.75;3pkt 3fpkt"];
1536--4963[label="0.75;3pkt 3fpkt"];
1540--3217[label="1;2pkt 2fpkt"];
1540--4374[label="1;2pkt 2fpkt"];
1540--4963[label="1;2pkt 2fpkt"];
3217--4374[label="1;7pkt 7fpkt"];
3217--4963[label="1;7pkt 7fpkt"];
4374--4963[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.118.43" src_port="53"/>
      <filter dst_ip="73.100.102.74" src_ip="195.81.118.43" src_port="143"/>
      <filter dst_ip="73.100.102.74" dst_port="16108" src_ip="195.81.118.43"/>
    </slice>
    <from sec="1109826114" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
963[label="175.150.164.15;d;1966pkt 1966fpkt", shape=diamond, color=yellow];
2188[label="195.130.211.112;s;17pkt 17fpkt", shape=diamond, color=yellow];
2193[label="214.166.197.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
2977[label="196.70.37.5;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3021[label="214.166.198.13;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3031[label="153.234.120.15;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3070[label="152.236.161.20;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3131[label="73.209.193.29;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3276[label="73.209.220.53;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3313[label="196.70.39.59;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3387[label="73.209.192.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3391[label="202.81.82.72;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3423[label="214.4.61.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3499[label="84.240.72.98;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3545[label="202.81.82.104;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3585[label="195.130.211.112;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3784[label="77.90.149.154;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3988[label="196.70.36.198;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4120[label="73.237.10.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4174[label="214.67.160.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4245[label="196.70.37.5;14pkt 14fpkt", shape=invtriangle, color=brown];
4269[label="214.166.198.13;7pkt 7fpkt", shape=invtriangle, color=brown];
4326[label="73.209.193.29;5pkt 5fpkt", shape=invtriangle, color=brown];
4426[label="196.70.36.58;11pkt 11fpkt", shape=invtriangle, color=brown];
4468[label="73.209.192.71;2pkt 2fpkt", shape=invtriangle, color=brown];
4470[label="202.81.82.72;12pkt 12fpkt", shape=invtriangle, color=brown];
4576[label="195.130.211.112;16pkt 16fpkt", shape=invtriangle, color=brown];
4686[label="77.90.149.154;7pkt 7fpkt", shape=invtriangle, color=brown];
4874[label="214.67.160.238;1pkt 1fpkt", shape=invtriangle, color=brown];
4923[label="214.166.198.13;6pkt 6fpkt", shape=invhouse, color=bisque];
4949[label="73.209.193.29;5pkt 5fpkt", shape=invhouse, color=bisque];
5003[label="73.209.192.71;2pkt 2fpkt", shape=invhouse, color=bisque];
5052[label="195.130.211.112;17pkt 17fpkt", shape=invhouse, color=bisque];
5183[label="214.67.160.238;2pkt 2fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.129.19:80, 175.150.164.15:*}[31.0066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5939%)&lt;BR/&gt; 443: (0.293321%)&lt;BR/&gt; 63817: (0.112816%)&lt;BR/&gt; 63816: (0.112816%)&lt;BR/&gt; 63788: (0.112816%)&gt;];
}
963--986[label="0.139706;19pkt 19fpkt"];
963--998[label="0.166667;13pkt 13fpkt"];
963--1180[label="0.0963855;8pkt 8fpkt"];
963--1204[label="0.0222222;2pkt 2fpkt"];
963--1276[label="0.8;28pkt 28fpkt"];
963--1280[label="0.197183;42pkt 42fpkt"];
963--1324[label="0.119658;14pkt 14fpkt"];
963--1342[label="0.226415;36pkt 36fpkt"];
963--1354[label="1;3pkt 3fpkt"];
963--1581[label="0.336;42pkt 42fpkt"];
963--1685[label="0.953125;61pkt 61fpkt"];
963--1761[label="0.175;7pkt 7fpkt"];
963--1795[label="0.32;8pkt 8fpkt"];
963--1808[label="0.0410959;3pkt 3fpkt"];
963--1977[label="0.0212766;2pkt 2fpkt"];
963--1989[label="0.0666667;1pkt 1fpkt"];
963--2076[label="0.541935;84pkt 84fpkt"];
963--2188[label="1;17pkt 17fpkt"];
963--2193[label="1;1pkt 1fpkt"];
963--2384[label="1;605pkt 605fpkt"];
963--2493[label="0.0958904;7pkt 7fpkt"];
963--2505[label="0.118919;22pkt 22fpkt"];
963--2519[label="0.125;13pkt 13fpkt"];
963--2524[label="0.0714286;3pkt 3fpkt"];
963--2606[label="0.166667;48pkt 48fpkt"];
963--2827[label="0.175;7pkt 7fpkt"];
963--2840[label="0.0410959;3pkt 3fpkt"];
963--2912[label="0.00406918;8pkt 8fpkt"];
963--2919[label="0.118006;232pkt 232fpkt"];
963--2925[label="0.00406918;8pkt 8fpkt"];
963--2931[label="0.118006;232pkt 232fpkt"];
963--2933[label="0.00406918;8pkt 8fpkt"];
963--2935[label="0.118006;232pkt 232fpkt"];
963--2944[label="0.155039;60pkt 60fpkt"];
963--2977[label="1;14pkt 14fpkt"];
963--3021[label="1;7pkt 7fpkt"];
963--3031[label="1;11pkt 11fpkt"];
963--3053[label="0.285714;4pkt 4fpkt"];
963--3070[label="0.846154;11pkt 11fpkt"];
963--3117[label="0.727273;8pkt 8fpkt"];
963--3131[label="0.8;4pkt 4fpkt"];
963--3178[label="0.5;3pkt 3fpkt"];
963--3224[label="0.75;3pkt 3fpkt"];
963--3276[label="1;2pkt 2fpkt"];
963--3304[label="0.0769231;2pkt 2fpkt"];
963--3307[label="0.583333;7pkt 7fpkt"];
963--3313[label="0.666667;2pkt 2fpkt"];
963--3350[label="0.2;3pkt 3fpkt"];
963--3387[label="1;2pkt 2fpkt"];
963--3391[label="1;12pkt 12fpkt"];
963--3423[label="1;1pkt 1fpkt"];
963--3455[label="0.380952;8pkt 8fpkt"];
963--3473[label="0.307692;4pkt 4fpkt"];
963--3499[label="1;12pkt 12fpkt"];
963--3519[label="0.426396;84pkt 84fpkt"];
963--3545[label="1;12pkt 12fpkt"];
963--3585[label="1;17pkt 17fpkt"];
963--3632[label="0.0963855;8pkt 8fpkt"];
963--3713[label="0.228571;8pkt 8fpkt"];
963--3784[label="0.714286;5pkt 5fpkt"];
963--3889[label="0.222222;8pkt 8fpkt"];
963--3890[label="0.228571;8pkt 8fpkt"];
963--3947[label="0.166667;2pkt 2fpkt"];
963--3978[label="0.5;2pkt 2fpkt"];
963--3988[label="1;4pkt 4fpkt"];
963--4120[label="0.5;1pkt 1fpkt"];
963--4166[label="0.214286;3pkt 3fpkt"];
963--4174[label="1;1pkt 1fpkt"];
963--4226[label="0.155039;60pkt 60fpkt"];
963--4245[label="1;14pkt 14fpkt"];
963--4269[label="1;7pkt 7fpkt"];
963--4326[label="0.8;4pkt 4fpkt"];
963--4426[label="0.636364;7pkt 7fpkt"];
963--4468[label="1;2pkt 2fpkt"];
963--4470[label="1;12pkt 12fpkt"];
963--4485[label="0.25;1pkt 1fpkt"];
963--4509[label="0.380952;8pkt 8fpkt"];
963--4576[label="1;16pkt 16fpkt"];
963--4644[label="0.228571;8pkt 8fpkt"];
963--4686[label="0.714286;5pkt 5fpkt"];
963--4743[label="0.222222;8pkt 8fpkt"];
963--4869[label="0.214286;3pkt 3fpkt"];
963--4874[label="1;1pkt 1fpkt"];
963--4917[label="0.194444;42pkt 42fpkt"];
963--4923[label="1;6pkt 6fpkt"];
963--4949[label="0.8;4pkt 4fpkt"];
963--5003[label="1;2pkt 2fpkt"];
963--5022[label="0.363636;8pkt 8fpkt"];
963--5052[label="1;17pkt 17fpkt"];
963--5064[label="0.0952381;8pkt 8fpkt"];
963--5183[label="1;2pkt 2fpkt"];
2188--3585[label="1;17pkt 17fpkt"];
2188--4576[label="1;16pkt 16fpkt"];
2188--5052[label="1;17pkt 17fpkt"];
2977--4245[label="1;14pkt 14fpkt"];
3021--4269[label="1;7pkt 7fpkt"];
3021--4923[label="1;6pkt 6fpkt"];
3131--4326[label="1;5pkt 5fpkt"];
3131--4949[label="1;5pkt 5fpkt"];
3387--4468[label="1;2pkt 2fpkt"];
3387--5003[label="1;2pkt 2fpkt"];
3391--4470[label="1;12pkt 12fpkt"];
3585--4576[label="1;16pkt 16fpkt"];
3585--5052[label="1;17pkt 17fpkt"];
3784--4686[label="1;7pkt 7fpkt"];
4174--4874[label="1;1pkt 1fpkt"];
4174--5183[label="1;1pkt 1fpkt"];
4269--4923[label="1;6pkt 6fpkt"];
4326--4949[label="1;5pkt 5fpkt"];
4468--5003[label="1;2pkt 2fpkt"];
4576--5052[label="1;16pkt 16fpkt"];
4874--5183[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.164.15" src_ip="214.182.129.19" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
758[label="148.177.173.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
1589[label="214.53.19.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
2410[label="148.177.173.60;s;1pkt 1fpkt", shape=hexagon, color=black];
3324[label="148.177.173.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4436[label="148.177.173.60;1pkt 1fpkt", shape=invtriangle, color=brown];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.173.60:3905, 214.53.19.88:6080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 3905: (50%)&gt;];
}
758--1589[label="1;1pkt 1fpkt"];
758--2410[label="1;1pkt 1fpkt"];
758--3324[label="1;1pkt 1fpkt"];
758--4436[label="1;1pkt 1fpkt"];
1589--2410[label="1;1pkt 1fpkt"];
1589--3324[label="1;1pkt 1fpkt"];
1589--4436[label="1;1pkt 1fpkt"];
2410--3324[label="1;1pkt 1fpkt"];
2410--4436[label="1;1pkt 1fpkt"];
3324--4436[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.53.19.88" dst_port="6080" src_ip="148.177.173.60" src_port="3905"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1577[label="194.64.113.207;s;2pkt 2fpkt", shape=diamond, color=yellow];
1596[label="41.139.179.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.113.207:3229, 41.139.179.190:6699}[50%]&lt;BR/&gt;{194.64.113.207:3998, 213.77.168.199:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3229: (33.3333%)&lt;BR/&gt; 3998: (16.6667%)&gt;];
}
1577--1596[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.77.168.199" dst_port="6699" src_ip="194.64.113.207" src_port="3998"/>
      <filter dst_ip="41.139.179.190" dst_port="6699" src_ip="194.64.113.207" src_port="3229"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.182.130.229"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
1463[label="169.28.97.233;s;354pkt 354fpkt", shape=diamond, color=yellow];
1605[label="74.165.69.66;d;354pkt 354fpkt", shape=diamond, color=yellow];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.97.233:*, 74.165.69.66:4103}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4103: (50%)&lt;BR/&gt; 2053: (0.141243%)&lt;BR/&gt; 2052: (0.141243%)&lt;BR/&gt; 2051: (0.141243%)&lt;BR/&gt; 2050: (0.141243%)&gt;];
}
1463--1605[label="1;354pkt 354fpkt"];
</description>
    <slice>
      <filter dst_ip="74.165.69.66" dst_port="4103" src_ip="169.28.97.233"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.150.197.218"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826822" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
513[label="145.16.36.254;d;109pkt 109fpkt", shape=diamond, color=yellow];
1638[label="148.177.197.19;s;141pkt 141fpkt", shape=diamond, color=yellow];
3067[label="148.177.197.19;139pkt 139fpkt", shape=pentagon, color=darkviolet];
4293[label="148.177.197.19;140pkt 140fpkt", shape=invtriangle, color=brown];
4931[label="148.177.197.19;139pkt 139fpkt", shape=invhouse, color=bisque];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.197.19:*, 145.16.36.254:80}[76.0563%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33766: (0.374251%)&lt;BR/&gt; 33763: (0.374251%)&lt;BR/&gt; 33760: (0.374251%)&lt;BR/&gt; 33758: (0.374251%)&gt;];
}
513--1638[label="0.990826;108pkt 108fpkt"];
513--3067[label="0.990826;108pkt 108fpkt"];
513--4293[label="0.990826;108pkt 108fpkt"];
513--4931[label="0.990826;108pkt 108fpkt"];
1638--2890[label="0.0070922;1pkt 1fpkt"];
1638--3067[label="1;139pkt 139fpkt"];
1638--4293[label="1;140pkt 140fpkt"];
1638--4931[label="1;139pkt 139fpkt"];
3067--4293[label="1;139pkt 139fpkt"];
3067--4931[label="1;139pkt 139fpkt"];
4293--4931[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_ip="145.16.36.254" dst_port="80" src_ip="148.177.197.19"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
456[label="194.76.134.97;d;1789pkt 1789fpkt", shape=diamond, color=yellow];
596[label="219.214.247.117;s;1548pkt 1548fpkt", shape=diamond, color=yellow];
1640[label="35.175.156.251;s;33pkt 33fpkt", shape=diamond, color=yellow];
1996[label="35.175.156.129;s;14pkt 14fpkt", shape=diamond, color=yellow];
2026[label="23.24.200.66;s;16pkt 16fpkt", shape=diamond, color=yellow];
2116[label="75.80.27.203;s;22pkt 22fpkt", shape=diamond, color=yellow];
2378[label="194.76.134.97;d;916pkt 916fpkt", shape=hexagon, color=black];
2604[label="219.214.247.117;s;1259pkt 1259fpkt", shape=hexagon, color=black];
3358[label="23.24.200.66;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3661[label="35.175.156.129;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4013[label="75.80.27.203;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4107[label="221.116.22.224;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4209[label="35.175.156.251;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4458[label="23.24.200.66;30pkt 30fpkt", shape=invtriangle, color=brown];
4615[label="35.175.156.129;13pkt 13fpkt", shape=invtriangle, color=brown];
4839[label="221.116.22.224;15pkt 15fpkt", shape=invtriangle, color=brown];
4995[label="23.24.200.64;144pkt 144fpkt", shape=invhouse, color=bisque];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[23.4555%]&lt;BR/&gt;{219.214.247.117:*, 194.76.134.97:80}[20.3918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5057%)&lt;BR/&gt; 53: (3.67834%)&lt;BR/&gt; 9898: (2.93421%)&lt;BR/&gt; 5554: (2.54524%)&lt;BR/&gt; 1023: (1.97869%)&gt;];
}
456--542[label="0.00111794;2pkt 2fpkt"];
456--596[label="1;1548pkt 1548fpkt"];
456--1342[label="0.00628931;1pkt 1fpkt"];
456--1640[label="0.242424;8pkt 8fpkt"];
456--1934[label="0.0714286;3pkt 3fpkt"];
456--1996[label="0.571429;8pkt 8fpkt"];
456--2026[label="0.25;4pkt 4fpkt"];
456--2075[label="0.0512821;4pkt 4fpkt"];
456--2116[label="0.181818;4pkt 4fpkt"];
456--2156[label="0.142857;4pkt 4fpkt"];
456--2378[label="1;916pkt 916fpkt"];
456--2604[label="1;1259pkt 1259fpkt"];
456--2778[label="0.0714286;3pkt 3fpkt"];
456--2890[label="0.0178871;32pkt 32fpkt"];
456--2891[label="0.00131752;1pkt 1fpkt"];
456--2906[label="0.00223589;4pkt 4fpkt"];
456--2911[label="0.0134153;24pkt 24fpkt"];
456--2912[label="0.00838457;15pkt 15fpkt"];
456--2918[label="0.0100615;18pkt 18fpkt"];
456--2919[label="0.0178871;32pkt 32fpkt"];
456--2921[label="0.00111794;2pkt 2fpkt"];
456--2922[label="0.000558971;1pkt 1fpkt"];
456--2924[label="0.0134153;24pkt 24fpkt"];
456--2925[label="0.00838457;15pkt 15fpkt"];
456--2930[label="0.0100615;18pkt 18fpkt"];
456--2931[label="0.0178871;32pkt 32fpkt"];
456--2932[label="0.0134153;24pkt 24fpkt"];
456--2933[label="0.00838457;15pkt 15fpkt"];
456--2934[label="0.0100615;18pkt 18fpkt"];
456--2935[label="0.0178871;32pkt 32fpkt"];
456--3289[label="0.117647;4pkt 4fpkt"];
456--3358[label="0.2;6pkt 6fpkt"];
456--3433[label="0.0151515;1pkt 1fpkt"];
456--3485[label="0.0506329;4pkt 4fpkt"];
456--3661[label="0.615385;8pkt 8fpkt"];
456--3801[label="0.0645161;2pkt 2fpkt"];
456--4013[label="0.181818;4pkt 4fpkt"];
456--4107[label="1;15pkt 15fpkt"];
456--4209[label="0.235294;8pkt 8fpkt"];
456--4458[label="0.2;6pkt 6fpkt"];
456--4495[label="0.0149254;1pkt 1fpkt"];
456--4615[label="0.615385;8pkt 8fpkt"];
456--4697[label="0.0625;2pkt 2fpkt"];
456--4839[label="1;15pkt 15fpkt"];
456--4995[label="0.118056;17pkt 17fpkt"];
456--5014[label="0.0149254;1pkt 1fpkt"];
596--2378[label="0.874454;801pkt 801fpkt"];
596--2604[label="1;1259pkt 1259fpkt"];
596--2890[label="0.0206718;32pkt 32fpkt"];
596--2891[label="0.00131752;1pkt 1fpkt"];
596--2906[label="0.00258398;4pkt 4fpkt"];
596--2911[label="0.00968992;15pkt 15fpkt"];
596--2912[label="0.00839793;13pkt 13fpkt"];
596--2918[label="0.00904393;14pkt 14fpkt"];
596--2919[label="0.0167959;26pkt 26fpkt"];
596--2921[label="0.00129199;2pkt 2fpkt"];
596--2922[label="0.000645995;1pkt 1fpkt"];
596--2924[label="0.00968992;15pkt 15fpkt"];
596--2925[label="0.00839793;13pkt 13fpkt"];
596--2930[label="0.00904393;14pkt 14fpkt"];
596--2931[label="0.0167959;26pkt 26fpkt"];
596--2932[label="0.00968992;15pkt 15fpkt"];
596--2933[label="0.00839793;13pkt 13fpkt"];
596--2934[label="0.00904393;14pkt 14fpkt"];
596--2935[label="0.0167959;26pkt 26fpkt"];
1640--2378[label="0.212121;7pkt 7fpkt"];
1640--4209[label="1;33pkt 33fpkt"];
1996--2378[label="0.285714;4pkt 4fpkt"];
1996--2912[label="0.0714286;1pkt 1fpkt"];
1996--2919[label="0.285714;4pkt 4fpkt"];
1996--2925[label="0.0714286;1pkt 1fpkt"];
1996--2931[label="0.285714;4pkt 4fpkt"];
1996--2933[label="0.0714286;1pkt 1fpkt"];
1996--2935[label="0.285714;4pkt 4fpkt"];
1996--3661[label="1;13pkt 13fpkt"];
1996--4615[label="1;13pkt 13fpkt"];
2026--2623[label="0.0625;1pkt 1fpkt"];
2026--2919[label="0.0625;1pkt 1fpkt"];
2026--2931[label="0.0625;1pkt 1fpkt"];
2026--2935[label="0.0625;1pkt 1fpkt"];
2026--3358[label="0.9375;15pkt 15fpkt"];
2026--4458[label="0.9375;15pkt 15fpkt"];
2116--2623[label="0.0454545;1pkt 1fpkt"];
2116--2879[label="0.0454545;1pkt 1fpkt"];
2116--4013[label="1;22pkt 22fpkt"];
2378--2604[label="0.874454;801pkt 801fpkt"];
2378--2778[label="0.047619;2pkt 2fpkt"];
2378--2890[label="0.0349345;32pkt 32fpkt"];
2378--2891[label="0.00131752;1pkt 1fpkt"];
2378--2906[label="0.00436681;4pkt 4fpkt"];
2378--2911[label="0.0262009;24pkt 24fpkt"];
2378--2912[label="0.0163755;15pkt 15fpkt"];
2378--2918[label="0.0196507;18pkt 18fpkt"];
2378--2919[label="0.0349345;32pkt 32fpkt"];
2378--2921[label="0.00218341;2pkt 2fpkt"];
2378--2922[label="0.0010917;1pkt 1fpkt"];
2378--2924[label="0.0262009;24pkt 24fpkt"];
2378--2925[label="0.0163755;15pkt 15fpkt"];
2378--2930[label="0.0196507;18pkt 18fpkt"];
2378--2931[label="0.0349345;32pkt 32fpkt"];
2378--2932[label="0.0262009;24pkt 24fpkt"];
2378--2933[label="0.0163755;15pkt 15fpkt"];
2378--2934[label="0.0196507;18pkt 18fpkt"];
2378--2935[label="0.0349345;32pkt 32fpkt"];
2378--3289[label="0.0882353;3pkt 3fpkt"];
2378--3358[label="0.0666667;2pkt 2fpkt"];
2378--3485[label="0.0126582;1pkt 1fpkt"];
2378--3661[label="0.307692;4pkt 4fpkt"];
2378--3801[label="0.0645161;2pkt 2fpkt"];
2378--4209[label="0.205882;7pkt 7fpkt"];
2378--4458[label="0.0666667;2pkt 2fpkt"];
2378--4615[label="0.307692;4pkt 4fpkt"];
2378--4697[label="0.0625;2pkt 2fpkt"];
2378--4995[label="0.118056;17pkt 17fpkt"];
2604--2890[label="0.025417;32pkt 32fpkt"];
2604--2891[label="0.00131752;1pkt 1fpkt"];
2604--2906[label="0.00317712;4pkt 4fpkt"];
2604--2911[label="0.0119142;15pkt 15fpkt"];
2604--2912[label="0.0103257;13pkt 13fpkt"];
2604--2918[label="0.0111199;14pkt 14fpkt"];
2604--2919[label="0.0206513;26pkt 26fpkt"];
2604--2921[label="0.00158856;2pkt 2fpkt"];
2604--2922[label="0.000794281;1pkt 1fpkt"];
2604--2924[label="0.0119142;15pkt 15fpkt"];
2604--2925[label="0.0103257;13pkt 13fpkt"];
2604--2930[label="0.0111199;14pkt 14fpkt"];
2604--2931[label="0.0206513;26pkt 26fpkt"];
2604--2932[label="0.0119142;15pkt 15fpkt"];
2604--2933[label="0.0103257;13pkt 13fpkt"];
2604--2934[label="0.0111199;14pkt 14fpkt"];
2604--2935[label="0.0206513;26pkt 26fpkt"];
3358--4458[label="1;30pkt 30fpkt"];
3661--4615[label="1;13pkt 13fpkt"];
4107--4839[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="194.76.134.97" dst_port="80" src_ip="219.214.247.117"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1273[label="214.182.130.218;d;117pkt 117fpkt", shape=diamond, color=yellow];
1662[label="148.176.50.3;s;38pkt 38fpkt", shape=diamond, color=yellow];
1724[label="85.98.220.211;d;2pkt 2fpkt", shape=diamond, color=yellow];
2795[label="148.176.50.3;s;34pkt 34fpkt", shape=hexagon, color=black];
2809[label="85.98.220.211;d;2pkt 2fpkt", shape=hexagon, color=black];
2988[label="175.150.176.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3083[label="175.150.200.21;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3581[label="175.150.138.112;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4255[label="175.150.176.8;6pkt 6fpkt", shape=invtriangle, color=brown];
4916[label="175.150.176.8;6pkt 6fpkt", shape=invhouse, color=bisque];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.182.130.218:5050}[60.452%]&lt;BR/&gt;{148.176.50.3:*, *:*}[21.4689%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.0492%)&lt;BR/&gt; 25: (6.14754%)&lt;BR/&gt; 0: (3.68852%)&lt;BR/&gt; 110: (3.07377%)&lt;BR/&gt; 2226: (2.45902%)&gt;];
}
1273--1282[label="0.00854701;1pkt 1fpkt"];
1273--1662[label="0.0263158;1pkt 1fpkt"];
1273--2795[label="0.0294118;1pkt 1fpkt"];
1273--2988[label="0.166667;1pkt 1fpkt"];
1273--3083[label="0.157895;3pkt 3fpkt"];
1273--3581[label="0.857143;12pkt 12fpkt"];
1273--4255[label="0.166667;1pkt 1fpkt"];
1273--4916[label="0.166667;1pkt 1fpkt"];
1662--1724[label="1;2pkt 2fpkt"];
1662--1776[label="0.0263158;1pkt 1fpkt"];
1662--2795[label="1;34pkt 34fpkt"];
1662--2809[label="1;2pkt 2fpkt"];
1662--2890[label="0.0263158;1pkt 1fpkt"];
1724--2795[label="1;2pkt 2fpkt"];
1724--2809[label="1;2pkt 2fpkt"];
2795--2809[label="1;2pkt 2fpkt"];
2795--2890[label="0.0294118;1pkt 1fpkt"];
2988--4255[label="1;6pkt 6fpkt"];
2988--4916[label="1;6pkt 6fpkt"];
4255--4916[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.50.3"/>
      <filter dst_ip="214.182.130.218" dst_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
993[label="198.114.84.216;d;2pkt 2fpkt", shape=diamond, color=yellow];
1675[label="148.176.182.54;s;34pkt 34fpkt", shape=diamond, color=yellow];
3281[label="148.176.182.54;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.182.54:*, 222.1.134.19:80}[42.8571%]&lt;BR/&gt;{148.176.182.54:55569, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.8824%)&lt;BR/&gt; 55569: (13.2353%)&lt;BR/&gt; 8020: (2.94118%)&lt;BR/&gt; 57253: (2.20588%)&lt;BR/&gt; 65178: (1.47059%)&gt;];
}
993--1675[label="0.5;1pkt 1fpkt"];
993--3281[label="0.5;1pkt 1fpkt"];
1675--1689[label="0.8;16pkt 16fpkt"];
1675--2120[label="0.0294118;1pkt 1fpkt"];
1675--3281[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.182.54" src_port="55569"/>
      <filter dst_ip="222.1.134.19" dst_port="80" src_ip="148.176.182.54"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
1684[label="0.8.24.99;d;44pkt 44fpkt", shape=diamond, color=yellow];
3920[label="144.39.3.183;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.3.183:*, 0.8.24.99:80}[46.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2308%)&lt;BR/&gt; 4284: (1.53846%)&lt;BR/&gt; 4282: (1.53846%)&lt;BR/&gt; 4280: (1.53846%)&lt;BR/&gt; 4278: (1.53846%)&gt;];
}
1684--2634[label="0.0227273;1pkt 1fpkt"];
1684--3920[label="0.952381;20pkt 20fpkt"];
1684--4081[label="0.5;1pkt 1fpkt"];
1684--4189[label="0.0294118;1pkt 1fpkt"];
1684--4636[label="0.0227273;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.8.24.99" dst_port="80" src_ip="144.39.3.183"/>
    </slice>
    <from sec="1109826034" usec="0"/>
    <to sec="1109826880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1428[label="175.150.137.28;s;14pkt 14fpkt", shape=diamond, color=yellow];
3123[label="175.150.137.28;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4320[label="175.150.137.28;15pkt 15fpkt", shape=invtriangle, color=brown];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.137.28:25, *:*}[40%]&lt;BR/&gt;{175.150.137.28:80, 218.181.69.55:*}[26.6667%]&lt;BR/&gt;{175.150.137.28:80, 75.188.240.153:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 25: (20.4545%)&lt;BR/&gt; 0: (6.81818%)&lt;BR/&gt; 45690: (3.40909%)&lt;BR/&gt; 41188: (3.40909%)&gt;];
}
1428--1440[label="1;5pkt 5fpkt"];
1428--1691[label="0.142857;2pkt 2fpkt"];
1428--2912[label="0.142857;2pkt 2fpkt"];
1428--2919[label="0.142857;2pkt 2fpkt"];
1428--2925[label="0.142857;2pkt 2fpkt"];
1428--2931[label="0.142857;2pkt 2fpkt"];
1428--2933[label="0.142857;2pkt 2fpkt"];
1428--2935[label="0.142857;2pkt 2fpkt"];
1428--3123[label="1;14pkt 14fpkt"];
1428--4320[label="1;14pkt 14fpkt"];
3123--4320[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="175.150.137.28" src_port="25"/>
      <filter dst_ip="218.181.69.55" src_ip="175.150.137.28" src_port="80"/>
      <filter dst_ip="75.188.240.153" src_ip="175.150.137.28" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1338[label="169.28.114.10;s;20pkt 20fpkt", shape=diamond, color=yellow];
1409[label="197.196.119.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
1699[label="150.230.20.54;d;2pkt 2fpkt", shape=diamond, color=yellow];
2571[label="169.28.114.10;s;20pkt 20fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.114.10:*, *:80}[65%]&lt;BR/&gt;{169.28.114.10:*, 203.105.28.18:*}[25%]&lt;BR/&gt;{169.28.114.10:*, *:443}[20%]&lt;BR/&gt;{169.28.114.10:*, 203.105.28.132:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.0909%)&lt;BR/&gt; 443: (9.09091%)&lt;BR/&gt; 5190: (4.54545%)&lt;BR/&gt; 36916: (3.40909%)&lt;BR/&gt; 36915: (3.40909%)&gt;];
}
1338--1409[label="1;2pkt 2fpkt"];
1338--1699[label="1;2pkt 2fpkt"];
1338--2571[label="1;20pkt 20fpkt"];
1409--2571[label="1;2pkt 2fpkt"];
1699--2571[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.105.28.18" src_ip="169.28.114.10"/>
      <filter dst_ip="203.105.28.132" src_ip="169.28.114.10"/>
      <filter dst_port="80" src_ip="169.28.114.10"/>
      <filter dst_port="443" src_ip="169.28.114.10"/>
    </slice>
    <from sec="1109826024" usec="0"/>
    <to sec="1109826805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1359[label="148.177.88.121;s;105pkt 105fpkt", shape=diamond, color=yellow];
1722[label="223.58.181.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
3624[label="148.177.88.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4599[label="148.177.88.121;1pkt 1fpkt", shape=invtriangle, color=brown];
5063[label="148.177.88.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.88.121:*, 223.58.181.139:80}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.8182%)&lt;BR/&gt; 1935: (8.18182%)&lt;BR/&gt; 2312: (1.81818%)&lt;BR/&gt; 2246: (0.909091%)&lt;BR/&gt; 64779: (0.454545%)&gt;];
}
1359--1722[label="0.5;1pkt 1fpkt"];
1359--3624[label="1;1pkt 1fpkt"];
1359--4599[label="1;1pkt 1fpkt"];
1359--5063[label="1;1pkt 1fpkt"];
3624--4599[label="1;1pkt 1fpkt"];
3624--5063[label="1;1pkt 1fpkt"];
4599--5063[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.58.181.139" dst_port="80" src_ip="148.177.88.121"/>
    </slice>
    <from sec="1109826097" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.81.114.128"/>
      <from sec="1109826001" usec="0"/>
      <to sec="1109826648" usec="0"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
173[label="222.144.196.138s;1pkt 1fpkt", shape=rectangle, color=red];
455[label="0.154.34.177;d;7pkt 7fpkt", shape=diamond, color=yellow];
632[label="148.177.29.12;s;199pkt 199fpkt", shape=diamond, color=yellow];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.29.12:*, *:80}[65.7005%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.5411%)&lt;BR/&gt; 53: (9.42029%)&lt;BR/&gt; 25: (4.34783%)&lt;BR/&gt; 11711: (0.483092%)&lt;BR/&gt; 11644: (0.483092%)&gt;];
}
173--1826[label="1;1pkt 1fpkt"];
455--696[label="1;7pkt 7fpkt"];
455--2890[label="0.428571;3pkt 3fpkt"];
632--639[label="0.0201005;4pkt 4fpkt"];
632--802[label="0.0251256;5pkt 5fpkt"];
632--832[label="0.115578;23pkt 23fpkt"];
632--874[label="0.0652174;9pkt 9fpkt"];
632--1075[label="0.0603015;12pkt 12fpkt"];
632--1083[label="0.00869565;1pkt 1fpkt"];
632--1269[label="0.0100503;2pkt 2fpkt"];
632--1298[label="0.0201005;4pkt 4fpkt"];
632--1431[label="0.0108108;2pkt 2fpkt"];
632--1776[label="0.038835;4pkt 4fpkt"];
632--1779[label="0.0106383;1pkt 1fpkt"];
632--1923[label="0.0246914;2pkt 2fpkt"];
632--1979[label="0.05;3pkt 3fpkt"];
632--2082[label="0.0147059;1pkt 1fpkt"];
632--2110[label="0.0283019;3pkt 3fpkt"];
632--2333[label="1;199pkt 199fpkt"];
632--2334[label="0.0173913;2pkt 2fpkt"];
632--2739[label="0.0100503;2pkt 2fpkt"];
632--2890[label="0.0100503;2pkt 2fpkt"];
632--2906[label="0.0301508;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.29.12"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
429[label="169.28.129.2;d;173pkt 173fpkt", shape=diamond, color=yellow];
432[label="213.191.94.179;s;2pkt 2fpkt", shape=diamond, color=yellow];
3531[label="220.224.197.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4548[label="220.224.197.101;1pkt 1fpkt", shape=invtriangle, color=brown];
5043[label="220.224.197.101;2pkt 2fpkt", shape=invhouse, color=bisque];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.183.31.92:80, 169.28.129.2:*}[52.6012%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 110: (1.66667%)&lt;BR/&gt; 1510: (1.11111%)&lt;BR/&gt; 1509: (0.833333%)&lt;BR/&gt; 33221: (0.555556%)&gt;];
}
429--432[label="1;2pkt 2fpkt"];
429--1808[label="0.0958904;7pkt 7fpkt"];
429--2840[label="0.0958904;7pkt 7fpkt"];
429--2912[label="0.196532;34pkt 34fpkt"];
429--2925[label="0.196532;34pkt 34fpkt"];
429--2933[label="0.196532;34pkt 34fpkt"];
429--3531[label="1;2pkt 2fpkt"];
429--4548[label="1;1pkt 1fpkt"];
429--5043[label="1;2pkt 2fpkt"];
3531--4548[label="1;1pkt 1fpkt"];
3531--5043[label="1;2pkt 2fpkt"];
4548--5043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.129.2" src_ip="194.183.31.92" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
837[label="76.0.135.161;d;90pkt 90fpkt", shape=diamond, color=yellow];
838[label="148.176.144.135;s;270pkt 270fpkt", shape=diamond, color=yellow];
1813[label="73.173.32.3;d;84pkt 84fpkt", shape=diamond, color=yellow];
2553[label="148.176.144.135;s;108pkt 108fpkt", shape=hexagon, color=black];
3203[label="148.176.168.41;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3926[label="169.28.163.184;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4762[label="169.28.163.184;19pkt 19fpkt", shape=invtriangle, color=brown];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.144.135:*, 76.0.135.161:80}[22.7273%]&lt;BR/&gt;{*:80, 73.173.32.3:*}[21.7172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7706%)&lt;BR/&gt; 46801: (0.30581%)&lt;BR/&gt; 65303: (0.229358%)&lt;BR/&gt; 65097: (0.229358%)&lt;BR/&gt; 64556: (0.229358%)&gt;];
}
837--838[label="1;90pkt 90fpkt"];
837--2553[label="1;90pkt 90fpkt"];
837--2890[label="0.677778;61pkt 61fpkt"];
838--1813[label="0.166667;14pkt 14fpkt"];
838--2108[label="0.0138889;1pkt 1fpkt"];
838--2553[label="1;108pkt 108fpkt"];
838--2890[label="0.233333;63pkt 63fpkt"];
838--2919[label="0.0037037;1pkt 1fpkt"];
838--2931[label="0.0037037;1pkt 1fpkt"];
838--2935[label="0.0037037;1pkt 1fpkt"];
1813--2553[label="0.0714286;6pkt 6fpkt"];
1813--2912[label="0.0952381;8pkt 8fpkt"];
1813--2919[label="0.107143;9pkt 9fpkt"];
1813--2925[label="0.0952381;8pkt 8fpkt"];
1813--2931[label="0.107143;9pkt 9fpkt"];
1813--2933[label="0.0952381;8pkt 8fpkt"];
1813--2935[label="0.107143;9pkt 9fpkt"];
1813--3203[label="0.222222;14pkt 14fpkt"];
1813--3538[label="0.178571;5pkt 5fpkt"];
1813--3926[label="0.65;13pkt 13fpkt"];
1813--4552[label="0.178571;5pkt 5fpkt"];
1813--4762[label="0.631579;12pkt 12fpkt"];
2553--2890[label="0.583333;63pkt 63fpkt"];
2553--2919[label="0.00925926;1pkt 1fpkt"];
2553--2931[label="0.00925926;1pkt 1fpkt"];
2553--2935[label="0.00925926;1pkt 1fpkt"];
3926--4762[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="73.173.32.3" src_port="80"/>
      <filter dst_ip="76.0.135.161" dst_port="80" src_ip="148.176.144.135"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
978[label="200.232.2.65;s;99pkt 99fpkt", shape=diamond, color=yellow];
1755[label="175.150.160.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
1784[label="214.182.130.221;s;43pkt 43fpkt", shape=diamond, color=yellow];
1842[label="175.150.230.160;d;4pkt 4fpkt", shape=diamond, color=yellow];
2006[label="175.150.192.99;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.232.2.65:*, 175.150.138.152:*}[31.6901%]&lt;BR/&gt;{214.182.130.221:5050, *:*}[23.9437%]&lt;BR/&gt;{200.232.2.65:*, *:113}[23.9437%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (12%)&lt;BR/&gt; 5050: (11.6667%)&lt;BR/&gt; 6667: (5.33333%)&lt;BR/&gt; 1080: (5.33333%)&lt;BR/&gt; 6666: (4.66667%)&gt;];
}
978--1755[label="1;1pkt 1fpkt"];
978--1842[label="0.75;3pkt 3fpkt"];
978--2006[label="1;3pkt 3fpkt"];
1784--1842[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.138.152" src_ip="200.232.2.65"/>
      <filter dst_port="113" src_ip="200.232.2.65"/>
      <filter src_ip="214.182.130.221" src_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1232[label="144.39.238.64;s;9pkt 9fpkt", shape=diamond, color=yellow];
1851[label="75.70.246.172;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.238.64:53, *:*}[55.5556%]&lt;BR/&gt;{144.39.238.64:110, 75.70.246.172:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (29.1667%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 46413: (8.33333%)&lt;BR/&gt; 25854: (8.33333%)&lt;BR/&gt; 7497: (8.33333%)&gt;];
}
1232--1851[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="144.39.238.64" src_port="53"/>
      <filter dst_ip="75.70.246.172" src_ip="144.39.238.64" src_port="110"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891556,1.6058,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
31[label="148.176.168.164s;2pkt 2fpkt", shape=rectangle, color=red];
1879[label="148.176.168.164;s;82pkt 82fpkt", shape=diamond, color=yellow];
3838[label="148.176.168.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4717[label="148.176.168.164;2pkt 2fpkt", shape=invtriangle, color=brown];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.168.164:*, 203.128.116.193:80}[60.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1136: (1.70455%)&lt;BR/&gt; 1141: (1.13636%)&lt;BR/&gt; 1083: (1.13636%)&lt;BR/&gt; 1133: (0.568182%)&gt;];
}
31--498[label="0.5;1pkt 1fpkt"];
31--1879[label="0.5;1pkt 1fpkt"];
31--3838[label="0.5;1pkt 1fpkt"];
31--4717[label="0.5;1pkt 1fpkt"];
3838--4717[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.128.116.193" dst_port="80" src_ip="148.176.168.164"/>
    </slice>
    <from sec="1109826439" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1868[label="175.150.229.69;d;3pkt 3fpkt", shape=diamond, color=yellow];
1888[label="77.90.149.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
2755[label="175.150.229.69;d;2pkt 2fpkt", shape=hexagon, color=black];
2812[label="77.90.149.76;s;1pkt 1fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.90.149.76:45480, 175.150.229.69:25}[33.3333%]&lt;BR/&gt;{22.32.57.124:42558, 175.150.229.69:25}[33.3333%]&lt;BR/&gt;{220.130.194.248:4866, 175.150.229.69:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 45480: (28.5714%)&lt;BR/&gt; 4866: (14.2857%)&lt;BR/&gt; 42558: (7.14286%)&gt;];
}
1868--1888[label="1;1pkt 1fpkt"];
1868--2755[label="1;2pkt 2fpkt"];
1868--2812[label="1;1pkt 1fpkt"];
1888--2755[label="1;1pkt 1fpkt"];
1888--2812[label="1;1pkt 1fpkt"];
2755--2812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.229.69" dst_port="25" src_ip="220.130.194.248" src_port="4866"/>
      <filter dst_ip="175.150.229.69" dst_port="25" src_ip="22.32.57.124" src_port="42558"/>
      <filter dst_ip="175.150.229.69" dst_port="25" src_ip="77.90.149.76" src_port="45480"/>
    </slice>
    <from sec="1109826350" usec="0"/>
    <to sec="1109826712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1837[label="144.224.65.19;s;91pkt 91fpkt", shape=diamond, color=yellow];
1900[label="195.125.194.73;d;87pkt 87fpkt", shape=diamond, color=yellow];
3061[label="144.224.65.19;92pkt 92fpkt", shape=pentagon, color=darkviolet];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.65.19:*, 195.125.194.73:80}[92.4731%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8148%)&lt;BR/&gt; 4155: (0.555556%)&lt;BR/&gt; 4154: (0.555556%)&lt;BR/&gt; 4153: (0.555556%)&lt;BR/&gt; 4152: (0.555556%)&gt;];
}
1837--1900[label="0.988506;86pkt 86fpkt"];
1837--3061[label="1;91pkt 91fpkt"];
1900--3061[label="0.988506;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="195.125.194.73" dst_port="80" src_ip="144.224.65.19"/>
    </slice>
    <from sec="1109826072" usec="0"/>
    <to sec="1109826881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1899[label="148.176.144.160;s;158pkt 158fpkt", shape=diamond, color=yellow];
1908[label="199.42.170.171;d;157pkt 157fpkt", shape=diamond, color=yellow];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.144.160:*, 199.42.170.171:80}[99.3671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43279: (0.31746%)&lt;BR/&gt; 43271: (0.31746%)&lt;BR/&gt; 43270: (0.31746%)&lt;BR/&gt; 43269: (0.31746%)&gt;];
}
1899--1908[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_ip="199.42.170.171" dst_port="80" src_ip="148.176.144.160"/>
    </slice>
    <from sec="1109826555" usec="0"/>
    <to sec="1109826822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
403[label="194.76.176.31;d;311pkt 311fpkt", shape=diamond, color=yellow];
1914[label="73.209.128.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
3092[label="214.1.0.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3225[label="23.120.49.45;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3515[label="23.120.33.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3958[label="196.70.40.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4060[label="195.77.176.213;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4072[label="196.70.40.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4303[label="214.1.0.23;3pkt 3fpkt", shape=invtriangle, color=brown];
4819[label="195.77.176.213;2pkt 2fpkt", shape=invtriangle, color=brown];
4825[label="196.70.40.216;1pkt 1fpkt", shape=invtriangle, color=brown];
4940[label="214.1.0.23;2pkt 2fpkt", shape=invhouse, color=bisque];
5159[label="195.77.176.213;3pkt 3fpkt", shape=invhouse, color=bisque];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 194.76.176.31:*}[92.7052%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6339%)&lt;BR/&gt; 33436: (0.546448%)&lt;BR/&gt; 2665: (0.546448%)&lt;BR/&gt; 2661: (0.546448%)&lt;BR/&gt; 2293: (0.546448%)&gt;];
}
403--427[label="0.666667;2pkt 2fpkt"];
403--542[label="0.0128617;4pkt 4fpkt"];
403--599[label="0.0385852;12pkt 12fpkt"];
403--600[label="0.00643087;2pkt 2fpkt"];
403--888[label="1;2pkt 2fpkt"];
403--1280[label="0.0140845;3pkt 3fpkt"];
403--1369[label="1;3pkt 3fpkt"];
403--1415[label="1;1pkt 1fpkt"];
403--1761[label="0.05;2pkt 2fpkt"];
403--1839[label="0.177778;8pkt 8fpkt"];
403--1869[label="1;3pkt 3fpkt"];
403--1914[label="1;2pkt 2fpkt"];
403--2456[label="1;2pkt 2fpkt"];
403--2593[label="1;1pkt 1fpkt"];
403--2606[label="0.00347222;1pkt 1fpkt"];
403--2776[label="0.0385852;12pkt 12fpkt"];
403--2827[label="0.05;2pkt 2fpkt"];
403--2912[label="0.154341;48pkt 48fpkt"];
403--2919[label="0.11254;35pkt 35fpkt"];
403--2925[label="0.154341;48pkt 48fpkt"];
403--2931[label="0.11254;35pkt 35fpkt"];
403--2933[label="0.154341;48pkt 48fpkt"];
403--2935[label="0.11254;35pkt 35fpkt"];
403--2936[label="1;1pkt 1fpkt"];
403--3092[label="1;2pkt 2fpkt"];
403--3108[label="0.170213;8pkt 8fpkt"];
403--3225[label="0.4375;14pkt 14fpkt"];
403--3409[label="0.55;11pkt 11fpkt"];
403--3496[label="0.878788;29pkt 29fpkt"];
403--3515[label="1;2pkt 2fpkt"];
403--3958[label="1;2pkt 2fpkt"];
403--4034[label="1;1pkt 1fpkt"];
403--4060[label="1;3pkt 3fpkt"];
403--4072[label="1;1pkt 1fpkt"];
403--4115[label="1;2pkt 2fpkt"];
403--4143[label="0.666667;8pkt 8fpkt"];
403--4169[label="0.1;1pkt 1fpkt"];
403--4206[label="0.666667;2pkt 2fpkt"];
403--4303[label="1;3pkt 3fpkt"];
403--4312[label="0.166667;8pkt 8fpkt"];
403--4532[label="0.878788;29pkt 29fpkt"];
403--4807[label="1;1pkt 1fpkt"];
403--4819[label="1;2pkt 2fpkt"];
403--4825[label="1;1pkt 1fpkt"];
403--4890[label="0.666667;2pkt 2fpkt"];
403--4917[label="0.0138889;3pkt 3fpkt"];
403--4940[label="1;2pkt 2fpkt"];
403--5159[label="1;3pkt 3fpkt"];
3092--4303[label="1;2pkt 2fpkt"];
3092--4940[label="1;2pkt 2fpkt"];
4060--4819[label="1;2pkt 2fpkt"];
4060--5159[label="1;3pkt 3fpkt"];
4072--4825[label="1;1pkt 1fpkt"];
4303--4940[label="1;2pkt 2fpkt"];
4819--5159[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.76.176.31" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
821[label="203.80.197.231;s;543pkt 543fpkt", shape=diamond, color=yellow];
960[label="195.81.113.33;s;374pkt 374fpkt", shape=diamond, color=yellow];
1922[label="199.48.187.108;d;17pkt 17fpkt", shape=diamond, color=yellow];
2495[label="195.81.113.33;s;374pkt 374fpkt", shape=hexagon, color=black];
2615[label="203.80.197.231;s;322pkt 322fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.80.197.231:0, *:0}[58.2618%]&lt;BR/&gt;{195.81.113.33:0, *:0}[40.1288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
821--1439[label="0.00294118;1pkt 1fpkt"];
821--1457[label="0.00274725;1pkt 1fpkt"];
821--1918[label="0.0041841;1pkt 1fpkt"];
821--1922[label="0.0588235;1pkt 1fpkt"];
821--2615[label="1;322pkt 322fpkt"];
821--2726[label="0.00343643;1pkt 1fpkt"];
960--1439[label="0.00294118;1pkt 1fpkt"];
960--1457[label="0.00274725;1pkt 1fpkt"];
960--1918[label="0.0041841;1pkt 1fpkt"];
960--1922[label="0.0588235;1pkt 1fpkt"];
960--2080[label="0.0243902;1pkt 1fpkt"];
960--2495[label="1;374pkt 374fpkt"];
960--2726[label="0.00343643;1pkt 1fpkt"];
1922--2434[label="0.0588235;1pkt 1fpkt"];
1922--2495[label="0.0588235;1pkt 1fpkt"];
1922--2615[label="0.0588235;1pkt 1fpkt"];
1922--2969[label="0.0588235;1pkt 1fpkt"];
1922--3279[label="0.2;1pkt 1fpkt"];
1922--3725[label="0.0588235;1pkt 1fpkt"];
1922--3759[label="0.166667;1pkt 1fpkt"];
1922--3793[label="0.25;1pkt 1fpkt"];
1922--4408[label="0.2;1pkt 1fpkt"];
1922--4650[label="0.0588235;1pkt 1fpkt"];
1922--4668[label="0.166667;1pkt 1fpkt"];
2495--2726[label="0.00343643;1pkt 1fpkt"];
2615--2726[label="0.00343643;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="203.80.197.231"/>
      <filter src_ip="195.81.113.33"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1674[label="73.241.187.33;s;29pkt 29fpkt", shape=diamond, color=yellow];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.187.33:*, 130.54.26.24:80}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3793%)&lt;BR/&gt; 53: (6.89655%)&lt;BR/&gt; 0: (3.44828%)&lt;BR/&gt; 64686: (1.72414%)&lt;BR/&gt; 64404: (1.72414%)&gt;];
}
1674--2159[label="0.0689655;2pkt 2fpkt"];
1674--2262[label="0.206897;6pkt 6fpkt"];
1674--2304[label="0.0689655;2pkt 2fpkt"];
1674--2852[label="0.206897;6pkt 6fpkt"];
1674--2890[label="0.0344828;1pkt 1fpkt"];
1674--3157[label="1;28pkt 28fpkt"];
1674--4339[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="73.241.187.33"/>
    </slice>
    <from sec="1109826022" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1282[label="194.76.176.137;s;221pkt 221fpkt", shape=diamond, color=yellow];
1466[label="214.182.130.225;d;73pkt 73fpkt", shape=diamond, color=yellow];
1860[label="196.70.37.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1932[label="214.182.130.228;d;56pkt 56fpkt", shape=diamond, color=yellow];
2103[label="214.182.130.196;d;24pkt 24fpkt", shape=diamond, color=yellow];
3008[label="175.150.192.11;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3158[label="175.150.195.33;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4340[label="175.150.195.33;8pkt 8fpkt", shape=invtriangle, color=brown];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.76.176.137:0, *:0}[56.6667%]&lt;BR/&gt;{*:*, *:5050}[37.9487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (55.6931%)&lt;BR/&gt; 5050: (19.0594%)&lt;BR/&gt; 20: (1.85644%)&lt;BR/&gt; 23: (0.49505%)&lt;BR/&gt; 21: (0.49505%)&gt;];
}
1282--1309[label="0.00746269;1pkt 1fpkt"];
1282--1355[label="0.0227273;1pkt 1fpkt"];
1282--1430[label="0.0103093;1pkt 1fpkt"];
1282--1443[label="0.00826446;1pkt 1fpkt"];
1282--1464[label="0.0105263;1pkt 1fpkt"];
1282--1466[label="0.0136986;1pkt 1fpkt"];
1282--1583[label="0.0125;1pkt 1fpkt"];
1282--1595[label="0.03125;1pkt 1fpkt"];
1282--1626[label="0.00869565;1pkt 1fpkt"];
1282--1632[label="0.0196078;1pkt 1fpkt"];
1282--1634[label="0.00943396;1pkt 1fpkt"];
1282--1641[label="0.0212766;1pkt 1fpkt"];
1282--1643[label="0.027027;1pkt 1fpkt"];
1282--1673[label="0.0149254;1pkt 1fpkt"];
1282--1826[label="0.016129;1pkt 1fpkt"];
1282--1860[label="1;1pkt 1fpkt"];
1282--1931[label="0.0103093;1pkt 1fpkt"];
1282--1932[label="0.0178571;1pkt 1fpkt"];
1282--1944[label="0.0108696;1pkt 1fpkt"];
1282--1993[label="0.0125;1pkt 1fpkt"];
1282--2103[label="0.0416667;1pkt 1fpkt"];
1282--2180[label="0.0625;1pkt 1fpkt"];
1282--2609[label="0.25;1pkt 1fpkt"];
1282--2736[label="0.00943396;1pkt 1fpkt"];
1466--2963[label="0.0136986;1pkt 1fpkt"];
1466--3008[label="0.0769231;1pkt 1fpkt"];
2103--3158[label="0.125;1pkt 1fpkt"];
2103--4340[label="0.125;1pkt 1fpkt"];
3158--4340[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="5050"/>
      <filter src_ip="194.76.176.137"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1003[label="194.76.177.98;d;471pkt 471fpkt", shape=diamond, color=yellow];
3354[label="194.14.243.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3716[label="194.198.78.140;123pkt 123fpkt", shape=pentagon, color=darkviolet];
4454[label="194.14.243.65;1pkt 1fpkt", shape=invtriangle, color=brown];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.198.78.140:*, 194.76.177.98:53}[26.327%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.5101%)&lt;BR/&gt; 0: (1.00671%)&lt;BR/&gt; 32768: (0.922819%)&lt;BR/&gt; 33701: (0.671141%)&lt;BR/&gt; 32769: (0.671141%)&gt;];
}
1003--1973[label="0.0153846;1pkt 1fpkt"];
1003--2152[label="0.0294118;2pkt 2fpkt"];
1003--2906[label="0.118896;56pkt 56fpkt"];
1003--2911[label="0.00212314;1pkt 1fpkt"];
1003--2918[label="0.00849257;4pkt 4fpkt"];
1003--2924[label="0.00212314;1pkt 1fpkt"];
1003--2930[label="0.00849257;4pkt 4fpkt"];
1003--2932[label="0.00212314;1pkt 1fpkt"];
1003--2934[label="0.00849257;4pkt 4fpkt"];
1003--2971[label="0.010989;1pkt 1fpkt"];
1003--3002[label="0.028169;2pkt 2fpkt"];
1003--3354[label="1;1pkt 1fpkt"];
1003--3535[label="0.0120482;1pkt 1fpkt"];
1003--3716[label="1;123pkt 123fpkt"];
1003--3934[label="0.166667;1pkt 1fpkt"];
1003--4454[label="1;1pkt 1fpkt"];
1003--4551[label="0.0120482;1pkt 1fpkt"];
3354--4454[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.76.177.98" dst_port="53" src_ip="194.198.78.140"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1509[label="214.182.130.217;s;64pkt 64fpkt", shape=diamond, color=yellow];
1642[label="214.166.184.170;s;3pkt 3fpkt", shape=diamond, color=yellow];
1974[label="175.150.181.28;d;4pkt 4fpkt", shape=diamond, color=yellow];
4082[label="214.182.130.217;64pkt 64fpkt", shape=pentagon, color=darkviolet];
4831[label="214.182.130.217;64pkt 64fpkt", shape=invtriangle, color=brown];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.217:5050, 175.150.197.192:*}[23.8806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (47.2362%)&lt;BR/&gt; 110: (1.25628%)&lt;BR/&gt; 4616: (1.00503%)&lt;BR/&gt; 3629: (1.00503%)&lt;BR/&gt; 4646: (0.753769%)&gt;];
}
1509--1974[label="0.5;2pkt 2fpkt"];
1509--4082[label="1;64pkt 64fpkt"];
1509--4831[label="1;64pkt 64fpkt"];
1642--1974[label="0.666667;2pkt 2fpkt"];
1974--4082[label="0.5;2pkt 2fpkt"];
1974--4831[label="0.5;2pkt 2fpkt"];
4082--4831[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.197.192" src_ip="214.182.130.217" src_port="5050"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
1910[label="148.177.203.17;s;169pkt 169fpkt", shape=diamond, color=yellow];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.203.17:*, *:80}[99.4083%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7041%)&lt;BR/&gt; 1294: (0.591716%)&lt;BR/&gt; 1285: (0.591716%)&lt;BR/&gt; 1341: (0.295858%)&lt;BR/&gt; 1340: (0.295858%)&gt;];
}
1910--1940[label="0.0222222;2pkt 2fpkt"];
1910--2780[label="0.0222222;2pkt 2fpkt"];
1910--3051[label="0.994083;168pkt 168fpkt"];
1910--4283[label="1;169pkt 169fpkt"];
1910--4927[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.203.17"/>
    </slice>
    <from sec="1109826591" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
1050[label="148.176.221.194;s;154pkt 154fpkt", shape=diamond, color=yellow];
1498[label="195.125.207.9;d;38pkt 38fpkt", shape=diamond, color=yellow];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.221.194:*, 195.125.207.9:80}[24.6753%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4896%)&lt;BR/&gt; 53: (5.20833%)&lt;BR/&gt; 32775: (4.16667%)&lt;BR/&gt; 0: (3.125%)&lt;BR/&gt; 43202: (0.520833%)&gt;];
}
1050--1083[label="0.0173913;2pkt 2fpkt"];
1050--1498[label="1;38pkt 38fpkt"];
1050--1923[label="0.0123457;1pkt 1fpkt"];
1050--1982[label="0.0253165;2pkt 2fpkt"];
1050--1995[label="0.0136986;1pkt 1fpkt"];
1050--2095[label="0.0322581;1pkt 1fpkt"];
1050--2117[label="0.0430108;4pkt 4fpkt"];
1050--2168[label="0.0961538;10pkt 10fpkt"];
1050--2334[label="0.00869565;1pkt 1fpkt"];
1050--2890[label="0.0194805;3pkt 3fpkt"];
1050--2906[label="0.0194805;3pkt 3fpkt"];
1050--3971[label="1;154pkt 154fpkt"];
1050--4781[label="1;154pkt 154fpkt"];
1498--2890[label="0.0789474;3pkt 3fpkt"];
1498--3971[label="1;38pkt 38fpkt"];
1498--4781[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="195.125.207.9" dst_port="80" src_ip="148.176.221.194"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1480[label="208.162.64.37;s;48pkt 48fpkt", shape=diamond, color=yellow];
1796[label="148.177.206.202;d;236pkt 236fpkt", shape=diamond, color=yellow];
1847[label="169.28.28.50;d;59pkt 59fpkt", shape=diamond, color=yellow];
3860[label="208.173.168.168;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3911[label="208.186.74.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.129.122.49:80, 148.177.206.202:*}[29.9419%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4600: (0.273973%)&lt;BR/&gt; 4598: (0.273973%)&lt;BR/&gt; 4590: (0.273973%)&lt;BR/&gt; 4322: (0.273973%)&gt;];
}
1480--1796[label="0.0416667;2pkt 2fpkt"];
1480--1847[label="0.0416667;2pkt 2fpkt"];
1480--2426[label="0.604167;29pkt 29fpkt"];
1480--2912[label="0.0625;3pkt 3fpkt"];
1480--2919[label="0.0416667;2pkt 2fpkt"];
1480--2925[label="0.0625;3pkt 3fpkt"];
1480--2931[label="0.0416667;2pkt 2fpkt"];
1480--2933[label="0.0625;3pkt 3fpkt"];
1480--2935[label="0.0416667;2pkt 2fpkt"];
1796--1912[label="1;103pkt 103fpkt"];
1796--1983[label="0.0163934;1pkt 1fpkt"];
1796--2616[label="0.135593;32pkt 32fpkt"];
1796--2815[label="1;103pkt 103fpkt"];
1796--3911[label="1;3pkt 3fpkt"];
1847--3687[label="0.6;3pkt 3fpkt"];
1847--3860[label="0.736842;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.206.202" src_ip="220.129.122.49" src_port="80"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.81.97.20"/>
      <from sec="1109826014" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826014" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
397[label="144.39.46.59;s;417pkt 417fpkt", shape=diamond, color=yellow];
1429[label="203.64.164.107;s;590pkt 590fpkt", shape=diamond, color=yellow];
1985[label="197.181.254.95;d;48pkt 48fpkt", shape=diamond, color=yellow];
2367[label="144.39.46.59;s;156pkt 156fpkt", shape=hexagon, color=black];
3382[label="144.192.25.71;137pkt 137fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.64.164.107:53, *:*}[47.6793%]&lt;BR/&gt;{144.39.46.59:*, *:*}[35.1899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.7478%)&lt;BR/&gt; 25: (21.1795%)&lt;BR/&gt; 32768: (1.26113%)&lt;BR/&gt; 1024: (0.890208%)&lt;BR/&gt; 0: (0.74184%)&gt;];
}
397--1346[label="0.0540541;2pkt 2fpkt"];
397--1673[label="0.104478;7pkt 7fpkt"];
397--1985[label="0.0833333;4pkt 4fpkt"];
397--1993[label="0.0875;7pkt 7fpkt"];
397--2367[label="1;156pkt 156fpkt"];
1429--1985[label="0.0416667;2pkt 2fpkt"];
1429--2906[label="0.00847458;5pkt 5fpkt"];
1429--2911[label="0.0830508;49pkt 49fpkt"];
1429--2918[label="0.0864407;51pkt 51fpkt"];
1429--2924[label="0.0830508;49pkt 49fpkt"];
1429--2930[label="0.0864407;51pkt 51fpkt"];
1429--2932[label="0.0830508;49pkt 49fpkt"];
1429--2934[label="0.0864407;51pkt 51fpkt"];
1985--2330[label="0.0208333;1pkt 1fpkt"];
1985--2367[label="0.0416667;2pkt 2fpkt"];
1985--2503[label="0.0208333;1pkt 1fpkt"];
1985--2525[label="0.0208333;1pkt 1fpkt"];
1985--2532[label="0.0416667;2pkt 2fpkt"];
1985--2547[label="0.0208333;1pkt 1fpkt"];
1985--2662[label="0.0208333;1pkt 1fpkt"];
1985--2873[label="0.0416667;2pkt 2fpkt"];
1985--2911[label="0.0208333;1pkt 1fpkt"];
1985--2918[label="0.0625;3pkt 3fpkt"];
1985--2924[label="0.0208333;1pkt 1fpkt"];
1985--2930[label="0.0625;3pkt 3fpkt"];
1985--2932[label="0.0208333;1pkt 1fpkt"];
1985--2934[label="0.0625;3pkt 3fpkt"];
1985--3162[label="0.0208333;1pkt 1fpkt"];
1985--3215[label="0.0208333;1pkt 1fpkt"];
1985--3231[label="0.0208333;1pkt 1fpkt"];
1985--3300[label="0.0208333;1pkt 1fpkt"];
1985--3353[label="0.0625;3pkt 3fpkt"];
1985--3382[label="0.0208333;1pkt 1fpkt"];
1985--3809[label="0.0869565;2pkt 2fpkt"];
1985--3852[label="0.0208333;1pkt 1fpkt"];
1985--3908[label="0.0833333;4pkt 4fpkt"];
1985--4342[label="0.0208333;1pkt 1fpkt"];
1985--4373[label="0.0208333;1pkt 1fpkt"];
1985--4453[label="0.0625;3pkt 3fpkt"];
1985--4722[label="0.0208333;1pkt 1fpkt"];
1985--4955[label="0.0208333;1pkt 1fpkt"];
1985--4962[label="0.0208333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="144.39.46.59"/>
      <filter src_ip="203.64.164.107" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
408[label="148.176.63.244;s;159pkt 159fpkt", shape=diamond, color=yellow];
727[label="21.46.98.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
1059[label="86.115.215.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
1591[label="86.208.249.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
1639[label="41.164.26.42;d;5pkt 5fpkt", shape=diamond, color=yellow];
1865[label="193.20.13.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
2167[label="73.74.177.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
2305[label="148.176.63.244;s;108pkt 108fpkt", shape=hexagon, color=black];
2513[label="21.46.98.212;d;1pkt 1fpkt", shape=hexagon, color=black];
2754[label="193.20.13.253;d;1pkt 1fpkt", shape=hexagon, color=black];
4187[label="148.176.63.244;167pkt 167fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.63.244:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6810: (3.57942%)&lt;BR/&gt; 38904: (2.46085%)&lt;BR/&gt; 49152: (2.23714%)&lt;BR/&gt; 11739: (2.12528%)&lt;BR/&gt; 80: (2.12528%)&gt;];
}
408--727[label="1;1pkt 1fpkt"];
408--1059[label="1;2pkt 2fpkt"];
408--1274[label="1;7pkt 7fpkt"];
408--1591[label="1;1pkt 1fpkt"];
408--1639[label="1;5pkt 5fpkt"];
408--1865[label="1;1pkt 1fpkt"];
408--2000[label="1;2pkt 2fpkt"];
408--2167[label="1;1pkt 1fpkt"];
408--2305[label="1;108pkt 108fpkt"];
408--2513[label="1;1pkt 1fpkt"];
408--2754[label="1;1pkt 1fpkt"];
408--4187[label="1;159pkt 159fpkt"];
727--2305[label="1;1pkt 1fpkt"];
727--2513[label="1;1pkt 1fpkt"];
727--4187[label="1;1pkt 1fpkt"];
1059--2305[label="1;2pkt 2fpkt"];
1059--4187[label="1;2pkt 2fpkt"];
1591--2305[label="1;1pkt 1fpkt"];
1591--4187[label="1;1pkt 1fpkt"];
1639--2305[label="0.8;4pkt 4fpkt"];
1639--4187[label="1;5pkt 5fpkt"];
1865--2305[label="1;1pkt 1fpkt"];
1865--2754[label="1;1pkt 1fpkt"];
1865--4187[label="1;1pkt 1fpkt"];
2167--2305[label="1;1pkt 1fpkt"];
2167--4187[label="1;1pkt 1fpkt"];
2305--2513[label="1;1pkt 1fpkt"];
2305--2754[label="1;1pkt 1fpkt"];
2305--4187[label="1;108pkt 108fpkt"];
2513--4187[label="1;1pkt 1fpkt"];
2754--4187[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.63.244"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
794[label="148.177.112.70;s;366pkt 366fpkt", shape=diamond, color=yellow];
1121[label="169.28.28.50;s;218pkt 218fpkt", shape=diamond, color=yellow];
1355[label="197.84.207.131;d;44pkt 44fpkt", shape=diamond, color=yellow];
1911[label="220.129.122.49;d;103pkt 103fpkt", shape=diamond, color=yellow];
2049[label="210.5.187.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
2727[label="148.177.112.70;s;286pkt 286fpkt", shape=hexagon, color=black];
2992[label="148.176.233.8;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3378[label="148.177.112.70;405pkt 405fpkt", shape=pentagon, color=darkviolet];
4464[label="148.177.112.70;405pkt 405fpkt", shape=invtriangle, color=brown];
4999[label="148.177.112.70;406pkt 406fpkt", shape=invhouse, color=bisque];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.112.70:*, *:80}[51.2658%]&lt;BR/&gt;{169.28.28.50:*, *:80}[26.962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4723%)&lt;BR/&gt; 443: (0.417766%)&lt;BR/&gt; 4054: (0.131926%)&lt;BR/&gt; 4019: (0.131926%)&lt;BR/&gt; 4018: (0.131926%)&gt;];
}
794--802[label="0.00966184;2pkt 2fpkt"];
794--832[label="0.0218579;8pkt 8fpkt"];
794--874[label="0.0144928;2pkt 2fpkt"];
794--1009[label="0.00440529;1pkt 1fpkt"];
794--1075[label="0.0058651;2pkt 2fpkt"];
794--1133[label="0.333333;2pkt 2fpkt"];
794--1269[label="0.00298507;1pkt 1fpkt"];
794--1431[label="0.0108108;2pkt 2fpkt"];
794--1504[label="0.131868;12pkt 12fpkt"];
794--1615[label="0.0650407;8pkt 8fpkt"];
794--1633[label="0.047619;4pkt 4fpkt"];
794--1660[label="0.635514;68pkt 68fpkt"];
794--1667[label="0.00892857;1pkt 1fpkt"];
794--1779[label="0.0106383;1pkt 1fpkt"];
794--1793[label="0.986301;72pkt 72fpkt"];
794--1940[label="0.0111111;1pkt 1fpkt"];
794--2049[label="1;2pkt 2fpkt"];
794--2110[label="0.00943396;1pkt 1fpkt"];
794--2151[label="0.0175439;1pkt 1fpkt"];
794--2179[label="0.0147059;1pkt 1fpkt"];
794--2334[label="0.00869565;1pkt 1fpkt"];
794--2727[label="1;286pkt 286fpkt"];
794--2739[label="0.0049505;1pkt 1fpkt"];
794--2780[label="0.0111111;1pkt 1fpkt"];
794--2890[label="0.0409836;15pkt 15fpkt"];
794--3378[label="0.997268;365pkt 365fpkt"];
794--4464[label="0.997268;365pkt 365fpkt"];
794--4999[label="1;366pkt 366fpkt"];
1121--1848[label="0.977273;43pkt 43fpkt"];
1121--1940[label="0.0111111;1pkt 1fpkt"];
1121--2110[label="0.0188679;2pkt 2fpkt"];
1121--2334[label="0.00869565;1pkt 1fpkt"];
1121--2780[label="0.0111111;1pkt 1fpkt"];
1355--1384[label="0.512821;20pkt 20fpkt"];
1355--1501[label="0.0227273;1pkt 1fpkt"];
1355--2620[label="0.0227273;1pkt 1fpkt"];
1355--2959[label="0.030303;1pkt 1fpkt"];
1355--2992[label="0.512821;20pkt 20fpkt"];
1355--4097[label="0.142857;2pkt 2fpkt"];
1911--2620[label="1;103pkt 103fpkt"];
2049--2727[label="0.5;1pkt 1fpkt"];
2049--3378[label="1;2pkt 2fpkt"];
2049--4464[label="1;2pkt 2fpkt"];
2049--4999[label="1;2pkt 2fpkt"];
2727--2739[label="0.0049505;1pkt 1fpkt"];
2727--2780[label="0.0111111;1pkt 1fpkt"];
2727--2890[label="0.0524476;15pkt 15fpkt"];
2727--3378[label="1;286pkt 286fpkt"];
2727--4464[label="1;286pkt 286fpkt"];
2727--4999[label="1;286pkt 286fpkt"];
3378--4464[label="1;405pkt 405fpkt"];
3378--4999[label="1;405pkt 405fpkt"];
4464--4999[label="1;405pkt 405fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.112.70"/>
      <filter dst_port="80" src_ip="169.28.28.50"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
1735[label="169.28.3.214;s;111pkt 111fpkt", shape=diamond, color=yellow];
4062[label="169.28.3.214;110pkt 110fpkt", shape=pentagon, color=darkviolet];
4821[label="169.28.3.214;110pkt 110fpkt", shape=invtriangle, color=brown];
5160[label="169.28.3.214;105pkt 105fpkt", shape=invhouse, color=bisque];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.3.214:*, 219.24.184.158:443}[51.3514%]&lt;BR/&gt;{169.28.3.214:*, 151.144.136.102:80}[36.9369%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (25.6881%)&lt;BR/&gt; 80: (24.3119%)&lt;BR/&gt; 1587: (0.458716%)&lt;BR/&gt; 1586: (0.458716%)&lt;BR/&gt; 1585: (0.458716%)&gt;];
}
1735--2020[label="0.75;57pkt 57fpkt"];
1735--4062[label="1;110pkt 110fpkt"];
1735--4821[label="1;110pkt 110fpkt"];
1735--5160[label="1;105pkt 105fpkt"];
4062--4821[label="1;110pkt 110fpkt"];
4062--5160[label="0.990476;104pkt 104fpkt"];
4821--5160[label="0.990476;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_ip="219.24.184.158" dst_port="443" src_ip="169.28.3.214"/>
      <filter dst_ip="151.144.136.102" dst_port="80" src_ip="169.28.3.214"/>
    </slice>
    <from sec="1109826479" usec="0"/>
    <to sec="1109826779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891556,1.6058,504,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
19[label="148.176.2.108s;1pkt 1fpkt", shape=rectangle, color=red];
2022[label="74.161.200.133;d;17pkt 17fpkt", shape=diamond, color=yellow];
2993[label="169.28.121.9;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3221[label="148.176.146.44;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4256[label="169.28.121.9;4pkt 4fpkt", shape=invtriangle, color=brown];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 74.161.200.133:80}[47.8261%]&lt;BR/&gt;{*:*, 74.161.200.133:443}[26.087%]&lt;BR/&gt;{148.176.146.44:*, *:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.375%)&lt;BR/&gt; 443: (15.625%)&lt;BR/&gt; 3372: (4.6875%)&lt;BR/&gt; 3368: (4.6875%)&lt;BR/&gt; 29681: (3.125%)&gt;];
}
19--2022[label="1;1pkt 1fpkt"];
2022--2993[label="0.5;2pkt 2fpkt"];
2022--3221[label="0.333333;2pkt 2fpkt"];
2022--4002[label="0.176471;3pkt 3fpkt"];
2022--4017[label="0.117647;2pkt 2fpkt"];
2022--4096[label="0.176471;3pkt 3fpkt"];
2022--4256[label="0.5;2pkt 2fpkt"];
2022--4793[label="0.176471;3pkt 3fpkt"];
2022--4799[label="0.117647;2pkt 2fpkt"];
2022--4835[label="0.176471;3pkt 3fpkt"];
2993--4256[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.146.44"/>
      <filter dst_ip="74.161.200.133" dst_port="80"/>
      <filter dst_ip="74.161.200.133" dst_port="443"/>
    </slice>
    <from sec="1109826426" usec="0"/>
    <to sec="1109826820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
1975[label="75.28.153.226;d;66pkt 66fpkt", shape=diamond, color=yellow];
2023[label="195.81.116.180;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.116.188:80, 75.28.153.226:*}[90.2778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9452%)&lt;BR/&gt; 65534: (2.05479%)&lt;BR/&gt; 53: (2.05479%)&lt;BR/&gt; 39237: (1.36986%)&lt;BR/&gt; 60895: (0.684932%)&gt;];
}
1975--2023[label="0.142857;1pkt 1fpkt"];
1975--2912[label="0.0757576;5pkt 5fpkt"];
1975--2919[label="0.0757576;5pkt 5fpkt"];
1975--2925[label="0.0757576;5pkt 5fpkt"];
1975--2931[label="0.0757576;5pkt 5fpkt"];
1975--2933[label="0.0757576;5pkt 5fpkt"];
1975--2935[label="0.0757576;5pkt 5fpkt"];
2023--2090[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.28.153.226" src_ip="195.81.116.188" src_port="80"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
2057[label="148.177.58.251;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.58.251:1613, 223.246.120.4:21}[25%]&lt;BR/&gt;{148.177.58.251:1614, 223.246.120.4:20}[25%]&lt;BR/&gt;{148.177.58.251:1615, 223.246.120.4:20}[25%]&lt;BR/&gt;{148.177.58.251:1616, 223.246.120.4:20}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 1616: (12.5%)&lt;BR/&gt; 1615: (12.5%)&lt;BR/&gt; 1614: (12.5%)&lt;BR/&gt; 1613: (12.5%)&gt;];
}
2057--4207[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="223.246.120.4" dst_port="20" src_ip="148.177.58.251" src_port="1616"/>
      <filter dst_ip="223.246.120.4" dst_port="20" src_ip="148.177.58.251" src_port="1615"/>
      <filter dst_ip="223.246.120.4" dst_port="20" src_ip="148.177.58.251" src_port="1614"/>
      <filter dst_ip="223.246.120.4" dst_port="21" src_ip="148.177.58.251" src_port="1613"/>
    </slice>
    <from sec="1109826650" usec="0"/>
    <to sec="1109826663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
1677[label="169.28.202.179;s;45pkt 45fpkt", shape=diamond, color=yellow];
1885[label="75.164.140.182;d;2pkt 2fpkt", shape=diamond, color=yellow];
2058[label="201.113.31.27;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.202.179:16408, *:*}[62.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16408: (30.6122%)&lt;BR/&gt; 80: (8.16327%)&lt;BR/&gt; 1863: (5.10204%)&lt;BR/&gt; 53603: (4.08163%)&lt;BR/&gt; 4952: (4.08163%)&gt;];
}
1677--1679[label="0.0444444;2pkt 2fpkt"];
1677--1885[label="1;2pkt 2fpkt"];
1677--2058[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="169.28.202.179" src_port="16408"/>
    </slice>
    <from sec="1109826030" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831678,1.64375,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
9[label="21.32.26.55s;1pkt 1fpkt", shape=rectangle, color=red];
681[label="195.81.112.57;d;1085pkt 1085fpkt", shape=diamond, color=yellow];
2071[label="21.32.26.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
3782[label="208.69.127.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.131.43.242:*, 195.81.112.57:*}[98.9862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (0.275229%)&lt;BR/&gt; 0: (0.275229%)&lt;BR/&gt; 28583: (0.137615%)&lt;BR/&gt; 14875: (0.137615%)&lt;BR/&gt; 14488: (0.137615%)&gt;];
}
9--681[label="1;1pkt 1fpkt"];
9--2071[label="1;1pkt 1fpkt"];
681--2071[label="1;1pkt 1fpkt"];
681--2644[label="1;726pkt 726fpkt"];
681--3782[label="1;3pkt 3fpkt"];
681--4185[label="0.98894;1073pkt 1073fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.112.57" src_ip="73.131.43.242"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,020,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
165[label="165.197.22.218d;246pkt 246fpkt", shape=rectangle, color=red];
2072[label="165.197.22.218;d;84pkt 84fpkt", shape=diamond, color=yellow];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 165.197.22.218:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
165--2072[label="0.904762;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="165.197.22.218"/>
    </slice>
    <from sec="1109826717" usec="0"/>
    <to sec="1109826783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.182.130.228"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.182.130.216"/>
      <from sec="1109826000" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
886[label="75.188.240.83;d;16pkt 16fpkt", shape=diamond, color=yellow];
1955[label="197.84.2.29;d;31pkt 31fpkt", shape=diamond, color=yellow];
2107[label="169.28.202.123;s;53pkt 53fpkt", shape=diamond, color=yellow];
3538[label="169.28.100.103;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3634[label="169.28.202.123;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3876[label="169.28.129.171;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4134[label="169.28.249.230;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4552[label="169.28.100.103;28pkt 28fpkt", shape=invtriangle, color=brown];
4852[label="169.28.249.230;25pkt 25fpkt", shape=invtriangle, color=brown];
5172[label="169.28.249.230;26pkt 26fpkt", shape=invhouse, color=bisque];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.202.123:80, *:*}[38.8158%]&lt;BR/&gt;{*:80, 75.188.240.83:*}[29.6053%]&lt;BR/&gt;{*:80, 197.84.2.29:*}[21.7105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46002: (0.643087%)&lt;BR/&gt; 44892: (0.643087%)&lt;BR/&gt; 42561: (0.643087%)&lt;BR/&gt; 64868: (0.482315%)&gt;];
}
886--2107[label="0.25;4pkt 4fpkt"];
886--2912[label="0.3125;5pkt 5fpkt"];
886--2925[label="0.3125;5pkt 5fpkt"];
886--2933[label="0.3125;5pkt 5fpkt"];
886--3538[label="0.1875;3pkt 3fpkt"];
886--3634[label="0.25;4pkt 4fpkt"];
886--3876[label="0.0625;1pkt 1fpkt"];
886--4134[label="0.1875;3pkt 3fpkt"];
886--4552[label="0.1875;3pkt 3fpkt"];
886--4852[label="0.1875;3pkt 3fpkt"];
886--5172[label="0.1875;3pkt 3fpkt"];
1955--2107[label="0.580645;18pkt 18fpkt"];
1955--2912[label="0.0967742;3pkt 3fpkt"];
1955--2925[label="0.0967742;3pkt 3fpkt"];
1955--2933[label="0.0967742;3pkt 3fpkt"];
1955--3634[label="0.580645;18pkt 18fpkt"];
2107--2912[label="0.113208;6pkt 6fpkt"];
2107--2919[label="0.0943396;5pkt 5fpkt"];
2107--2925[label="0.113208;6pkt 6fpkt"];
2107--2931[label="0.0943396;5pkt 5fpkt"];
2107--2933[label="0.113208;6pkt 6fpkt"];
2107--2935[label="0.0943396;5pkt 5fpkt"];
2107--3634[label="0.981132;52pkt 52fpkt"];
3538--4552[label="1;28pkt 28fpkt"];
4134--4852[label="1;25pkt 25fpkt"];
4134--5172[label="1;25pkt 25fpkt"];
4852--5172[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="169.28.202.123" src_port="80"/>
      <filter dst_ip="75.188.240.83" src_port="80"/>
      <filter dst_ip="197.84.2.29" src_port="80"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
441[label="175.150.165.207;d;10pkt 10fpkt", shape=diamond, color=yellow];
1472[label="20.117.64.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
1607[label="214.182.130.224;s;57pkt 57fpkt", shape=diamond, color=yellow];
1652[label="213.26.113.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
1762[label="213.108.201.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
1778[label="214.182.130.223;s;54pkt 54fpkt", shape=diamond, color=yellow];
1954[label="213.220.29.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
2109[label="21.26.212.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
2828[label="213.108.201.57;s;1pkt 1fpkt", shape=hexagon, color=black];
2830[label="214.182.130.224;s;57pkt 57fpkt", shape=hexagon, color=black];
3305[label="213.108.201.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4029[label="213.220.29.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4111[label="214.182.130.224;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4804[label="213.220.29.207;1pkt 1fpkt", shape=invtriangle, color=brown];
4842[label="214.182.130.224;57pkt 57fpkt", shape=invtriangle, color=brown];
5167[label="214.182.130.224;57pkt 57fpkt", shape=invhouse, color=bisque];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.224:5050, *:*}[45.8333%]&lt;BR/&gt;{214.182.130.223:5050, *:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.9861%)&lt;BR/&gt; 20: (1.53203%)&lt;BR/&gt; 16881: (0.835655%)&lt;BR/&gt; 11968: (0.835655%)&lt;BR/&gt; 49167: (0.696379%)&gt;];
}
441--1472[label="1;1pkt 1fpkt"];
441--1607[label="0.1;1pkt 1fpkt"];
441--1652[label="1;1pkt 1fpkt"];
441--1746[label="1;1pkt 1fpkt"];
441--1762[label="1;1pkt 1fpkt"];
441--1778[label="0.1;1pkt 1fpkt"];
441--1954[label="1;1pkt 1fpkt"];
441--2109[label="1;1pkt 1fpkt"];
441--2828[label="1;1pkt 1fpkt"];
441--2830[label="0.1;1pkt 1fpkt"];
441--3305[label="1;1pkt 1fpkt"];
441--4029[label="1;1pkt 1fpkt"];
441--4111[label="0.1;1pkt 1fpkt"];
441--4804[label="1;1pkt 1fpkt"];
441--4842[label="0.1;1pkt 1fpkt"];
441--4883[label="1;1pkt 1fpkt"];
441--5167[label="0.1;1pkt 1fpkt"];
1607--2830[label="1;57pkt 57fpkt"];
1607--4111[label="1;57pkt 57fpkt"];
1607--4842[label="0.982456;56pkt 56fpkt"];
1607--5167[label="0.982456;56pkt 56fpkt"];
1762--2828[label="1;1pkt 1fpkt"];
1762--3305[label="1;1pkt 1fpkt"];
1954--4029[label="1;1pkt 1fpkt"];
1954--4804[label="1;1pkt 1fpkt"];
2828--3305[label="1;1pkt 1fpkt"];
2830--4111[label="1;57pkt 57fpkt"];
2830--4842[label="0.982456;56pkt 56fpkt"];
2830--5167[label="0.982456;56pkt 56fpkt"];
4029--4804[label="1;1pkt 1fpkt"];
4111--4842[label="1;57pkt 57fpkt"];
4111--5167[label="1;57pkt 57fpkt"];
4842--5167[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.130.224" src_port="5050"/>
      <filter src_ip="214.182.130.223" src_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
1410[label="148.177.228.227;s;14pkt 14fpkt", shape=diamond, color=yellow];
2844[label="148.177.228.227;s;14pkt 14fpkt", shape=hexagon, color=black];
4124[label="148.177.228.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.228.227:*, 194.230.165.89:*}[28.5714%]&lt;BR/&gt;{148.177.228.227:*, 194.230.165.88:80}[21.4286%]&lt;BR/&gt;{148.177.228.227:*, 20.124.195.164:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1034%)&lt;BR/&gt; 1906: (5.17241%)&lt;BR/&gt; 1914: (3.44828%)&lt;BR/&gt; 1912: (3.44828%)&lt;BR/&gt; 1910: (3.44828%)&gt;];
}
1410--2118[label="0.0714286;1pkt 1fpkt"];
1410--2844[label="1;14pkt 14fpkt"];
1410--4124[label="1;1pkt 1fpkt"];
2844--4124[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.230.165.89" src_ip="148.177.228.227"/>
      <filter dst_ip="20.124.195.164" dst_port="80" src_ip="148.177.228.227"/>
      <filter dst_ip="194.230.165.88" dst_port="80" src_ip="148.177.228.227"/>
    </slice>
    <from sec="1109826294" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1820[label="196.36.37.119;d;67pkt 67fpkt", shape=diamond, color=yellow];
3834[label="148.177.48.164;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4122[label="169.28.164.227;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4713[label="148.177.48.164;15pkt 15fpkt", shape=invtriangle, color=brown];
4848[label="169.28.164.227;47pkt 47fpkt", shape=invtriangle, color=brown];
5171[label="169.28.164.227;48pkt 48fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.36.37.119:80}[57.265%]&lt;BR/&gt;{169.28.164.227:*, *:80}[41.0256%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5833%)&lt;BR/&gt; 1593: (0.833333%)&lt;BR/&gt; 1587: (0.833333%)&lt;BR/&gt; 1585: (0.833333%)&lt;BR/&gt; 1584: (0.833333%)&gt;];
}
1820--2025[label="0.489362;23pkt 23fpkt"];
1820--2124[label="0.027027;1pkt 1fpkt"];
1820--2277[label="0.0895522;6pkt 6fpkt"];
1820--2890[label="0.0298507;2pkt 2fpkt"];
1820--3200[label="0.0689655;2pkt 2fpkt"];
1820--3460[label="0.0298507;2pkt 2fpkt"];
1820--3821[label="0.027027;1pkt 1fpkt"];
1820--3834[label="0.133333;2pkt 2fpkt"];
1820--4112[label="0.296296;8pkt 8fpkt"];
1820--4122[label="0.229167;11pkt 11fpkt"];
1820--4706[label="0.0277778;1pkt 1fpkt"];
1820--4713[label="0.133333;2pkt 2fpkt"];
1820--4843[label="0.296296;8pkt 8fpkt"];
1820--4848[label="0.234043;11pkt 11fpkt"];
1820--5168[label="0.307692;8pkt 8fpkt"];
1820--5171[label="0.229167;11pkt 11fpkt"];
3834--4713[label="1;15pkt 15fpkt"];
4122--4848[label="1;47pkt 47fpkt"];
4122--5171[label="1;48pkt 48fpkt"];
4848--5171[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="169.28.164.227"/>
      <filter dst_ip="196.36.37.119" dst_port="80"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.64.98.87"/>
      <from sec="1109826006" usec="0"/>
      <to sec="1109826827" usec="0"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
2111[label="10.0.1.128;d;98pkt 98fpkt", shape=diamond, color=yellow];
2144[label="195.81.119.0;s;102pkt 102fpkt", shape=diamond, color=yellow];
2939[label="195.81.119.0;122pkt 122fpkt", shape=pentagon, color=darkviolet];
3989[label="148.177.55.198;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4132[label="169.16.173.230;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.119.0:*, *:*}[47.8599%]&lt;BR/&gt;{*:*, 10.0.1.128:*}[39.2996%]&lt;BR/&gt;{*:*, *:25}[35.7977%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (17.8934%)&lt;BR/&gt; 53: (12.1827%)&lt;BR/&gt; 44556: (10.0254%)&lt;BR/&gt; 65289: (8.88325%)&lt;BR/&gt; 80: (6.21827%)&gt;];
}
2111--2144[label="0.0204082;2pkt 2fpkt"];
2111--2823[label="0.0102041;1pkt 1fpkt"];
2111--2939[label="0.0204082;2pkt 2fpkt"];
2111--3989[label="0.0277778;1pkt 1fpkt"];
2111--4132[label="0.916667;33pkt 33fpkt"];
2144--2912[label="0.0196078;2pkt 2fpkt"];
2144--2919[label="0.0196078;2pkt 2fpkt"];
2144--2925[label="0.0196078;2pkt 2fpkt"];
2144--2931[label="0.0196078;2pkt 2fpkt"];
2144--2933[label="0.0196078;2pkt 2fpkt"];
2144--2935[label="0.0196078;2pkt 2fpkt"];
2144--2939[label="0.990196;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.119.0"/>
      <filter dst_ip="10.0.1.128"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
2147[label="76.112.163.43;d;55pkt 55fpkt", shape=diamond, color=yellow];
2148[label="148.176.222.112;s;55pkt 55fpkt", shape=diamond, color=yellow];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.222.112:*, 76.112.163.43:1717}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1717: (50%)&lt;BR/&gt; 57878: (0.909091%)&lt;BR/&gt; 57877: (0.909091%)&lt;BR/&gt; 57876: (0.909091%)&lt;BR/&gt; 57875: (0.909091%)&gt;];
}
2147--2148[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="76.112.163.43" dst_port="1717" src_ip="148.176.222.112"/>
    </slice>
    <from sec="1109826011" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1793[label="197.84.12.154;d;73pkt 73fpkt", shape=diamond, color=yellow];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.112.70:*, 197.84.12.154:80}[98.6301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4052: (0.684932%)&lt;BR/&gt; 4045: (0.684932%)&lt;BR/&gt; 4040: (0.684932%)&lt;BR/&gt; 4032: (0.684932%)&gt;];
}
1793--2727[label="0.986301;72pkt 72fpkt"];
1793--2890[label="0.0136986;1pkt 1fpkt"];
1793--3378[label="0.986301;72pkt 72fpkt"];
1793--3790[label="0.0625;1pkt 1fpkt"];
1793--4464[label="0.986301;72pkt 72fpkt"];
1793--4999[label="0.986301;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.12.154" dst_port="80" src_ip="148.177.112.70"/>
    </slice>
    <from sec="1109826003" usec="0"/>
    <to sec="1109826644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.177.91.33"/>
      <from sec="1109826029" usec="0"/>
      <to sec="1109826801" usec="0"/>
    </slice>
    <from sec="1109826029" usec="0"/>
    <to sec="1109826801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1063[label="148.177.60.94;s;84pkt 84fpkt", shape=diamond, color=yellow];
2172[label="173.25.197.94;d;6pkt 6fpkt", shape=diamond, color=yellow];
3474[label="148.177.60.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.60.94:*, 73.136.63.130:80}[76.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6044%)&lt;BR/&gt; 443: (4.3956%)&lt;BR/&gt; 1234: (1.0989%)&lt;BR/&gt; 1227: (1.0989%)&lt;BR/&gt; 1214: (1.0989%)&gt;];
}
1063--1504[label="0.0119048;1pkt 1fpkt"];
1063--2155[label="0.0131579;1pkt 1fpkt"];
1063--2172[label="1;6pkt 6fpkt"];
1063--2890[label="0.0595238;5pkt 5fpkt"];
1063--3474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="73.136.63.130" dst_port="80" src_ip="148.177.60.94"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
1928[label="214.182.130.220;s;45pkt 45fpkt", shape=diamond, color=yellow];
2181[label="175.150.151.33;d;86pkt 86fpkt", shape=diamond, color=yellow];
4094[label="214.182.130.220;46pkt 46fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.80.137.12:*, 175.150.151.33:*}[61.3636%]&lt;BR/&gt;{214.182.130.220:5050, *:*}[30.303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (22.3164%)&lt;BR/&gt; 20: (2.54237%)&lt;BR/&gt; 23: (1.69492%)&lt;BR/&gt; 3801: (1.12994%)&lt;BR/&gt; 1217: (1.12994%)&gt;];
}
1928--2181[label="0.0222222;1pkt 1fpkt"];
1928--4094[label="0.977778;44pkt 44fpkt"];
2181--4094[label="0.0217391;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.151.33" src_ip="138.80.137.12"/>
      <filter src_ip="214.182.130.220" src_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
13[label="148.177.208.78s;1pkt 1fpkt", shape=rectangle, color=red];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.208.78:1081, 23.24.200.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1081: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13--2189[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.24.200.66" dst_port="80" src_ip="148.177.208.78" src_port="1081"/>
    </slice>
    <from sec="1109826519" usec="0"/>
    <to sec="1109826526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="175.150.44.53"/>
      <from sec="1109826495" usec="0"/>
      <to sec="1109826808" usec="0"/>
    </slice>
    <from sec="1109826495" usec="0"/>
    <to sec="1109826808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
2211[label="195.81.98.136;s;4pkt 4fpkt", shape=diamond, color=yellow];
2212[label="73.22.137.49;d;4pkt 4fpkt", shape=diamond, color=yellow];
3700[label="195.81.98.136;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4638[label="195.81.98.136;4pkt 4fpkt", shape=invtriangle, color=brown];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.98.136:80, 73.22.137.49:3933}[20%]&lt;BR/&gt;{195.81.98.136:80, 73.22.137.49:3935}[20%]&lt;BR/&gt;{195.81.98.136:80, 73.22.137.49:3942}[20%]&lt;BR/&gt;{195.81.98.136:80, 73.22.137.49:3944}[20%]&lt;BR/&gt;{195.81.98.136:80, 73.22.137.49:3947}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3944: (12.5%)&lt;BR/&gt; 3942: (12.5%)&lt;BR/&gt; 3935: (12.5%)&lt;BR/&gt; 3947: (6.25%)&gt;];
}
2211--2212[label="1;4pkt 4fpkt"];
2211--3700[label="0.75;3pkt 3fpkt"];
2211--4638[label="0.75;3pkt 3fpkt"];
2212--3700[label="0.75;3pkt 3fpkt"];
2212--4638[label="0.75;3pkt 3fpkt"];
3700--4638[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="73.22.137.49" dst_port="3947" src_ip="195.81.98.136" src_port="80"/>
      <filter dst_ip="73.22.137.49" dst_port="3944" src_ip="195.81.98.136" src_port="80"/>
      <filter dst_ip="73.22.137.49" dst_port="3942" src_ip="195.81.98.136" src_port="80"/>
      <filter dst_ip="73.22.137.49" dst_port="3935" src_ip="195.81.98.136" src_port="80"/>
      <filter dst_ip="73.22.137.49" dst_port="3933" src_ip="195.81.98.136" src_port="80"/>
    </slice>
    <from sec="1109826596" usec="0"/>
    <to sec="1109826831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
2210[label="195.81.98.136;d;4pkt 4fpkt", shape=diamond, color=yellow];
2213[label="73.22.137.49;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.22.137.49:3933, 195.81.98.136:80}[25%]&lt;BR/&gt;{73.22.137.49:3935, 195.81.98.136:80}[25%]&lt;BR/&gt;{73.22.137.49:3942, 195.81.98.136:80}[25%]&lt;BR/&gt;{73.22.137.49:3944, 195.81.98.136:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3944: (12.5%)&lt;BR/&gt; 3942: (12.5%)&lt;BR/&gt; 3935: (12.5%)&lt;BR/&gt; 3933: (12.5%)&gt;];
}
2210--2213[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.98.136" dst_port="80" src_ip="73.22.137.49" src_port="3944"/>
      <filter dst_ip="195.81.98.136" dst_port="80" src_ip="73.22.137.49" src_port="3942"/>
      <filter dst_ip="195.81.98.136" dst_port="80" src_ip="73.22.137.49" src_port="3935"/>
      <filter dst_ip="195.81.98.136" dst_port="80" src_ip="73.22.137.49" src_port="3933"/>
    </slice>
    <from sec="1109826596" usec="0"/>
    <to sec="1109826824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.148.152.101"/>
      <from sec="1109826649" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826649" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="175.148.152.101"/>
      <from sec="1109826649" usec="0"/>
      <to sec="1109826828" usec="0"/>
    </slice>
    <from sec="1109826649" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1093[label="23.24.200.64;s;118pkt 118fpkt", shape=diamond, color=yellow];
1871[label="169.28.3.49;d;37pkt 37fpkt", shape=diamond, color=yellow];
2229[label="169.28.8.221;d;86pkt 86fpkt", shape=diamond, color=yellow];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.24.200.64:80, 169.28.8.221:*}[63.2%]&lt;BR/&gt;{23.24.200.64:80, 169.28.3.49:*}[29.6%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7925%)&lt;BR/&gt; 50122: (0.414938%)&lt;BR/&gt; 50121: (0.414938%)&lt;BR/&gt; 50120: (0.414938%)&lt;BR/&gt; 50119: (0.414938%)&gt;];
}
1093--1871[label="1;37pkt 37fpkt"];
1093--2229[label="0.918605;79pkt 79fpkt"];
1093--4995[label="0.991525;117pkt 117fpkt"];
1871--4995[label="1;37pkt 37fpkt"];
2229--4995[label="0.918605;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.8.221" src_ip="23.24.200.64" src_port="80"/>
      <filter dst_ip="169.28.3.49" src_ip="23.24.200.64" src_port="80"/>
    </slice>
    <from sec="1109826389" usec="0"/>
    <to sec="1109826818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.28.8.221"/>
      <from sec="1109826684" usec="0"/>
      <to sec="1109826818" usec="0"/>
    </slice>
    <from sec="1109826684" usec="0"/>
    <to sec="1109826818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
2232[label="165.240.35.60;d;14pkt 14fpkt", shape=diamond, color=yellow];
2233[label="148.177.208.56;s;39pkt 39fpkt", shape=diamond, color=yellow];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.208.56:*, 222.68.60.214:80}[58.9744%]&lt;BR/&gt;{148.177.208.56:*, 165.240.35.60:80}[35.8974%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 12485: (1.88679%)&lt;BR/&gt; 12484: (1.88679%)&lt;BR/&gt; 12481: (1.88679%)&lt;BR/&gt; 12472: (1.88679%)&gt;];
}
2232--2233[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="222.68.60.214" dst_port="80" src_ip="148.177.208.56"/>
      <filter dst_ip="165.240.35.60" dst_port="80" src_ip="148.177.208.56"/>
    </slice>
    <from sec="1109826686" usec="0"/>
    <to sec="1109826826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1101[label="148.176.8.26;s;86pkt 86fpkt", shape=diamond, color=yellow];
2238[label="73.209.221.68;d;68pkt 68fpkt", shape=diamond, color=yellow];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.8.26:*, 73.209.221.68:80}[79.0698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2798: (0.649351%)&lt;BR/&gt; 2793: (0.649351%)&lt;BR/&gt; 2791: (0.649351%)&lt;BR/&gt; 2790: (0.649351%)&gt;];
}
1101--2238[label="1;68pkt 68fpkt"];
1101--3109[label="1;86pkt 86fpkt"];
2238--3109[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="73.209.221.68" dst_port="80" src_ip="148.176.8.26"/>
    </slice>
    <from sec="1109826704" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
1284[label="148.176.224.156;s;355pkt 355fpkt", shape=diamond, color=yellow];
2242[label="194.230.163.53;d;61pkt 61fpkt", shape=diamond, color=yellow];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.224.156:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50.2404%)&lt;BR/&gt; 50926: (0.240385%)&lt;BR/&gt; 50920: (0.240385%)&lt;BR/&gt; 50915: (0.240385%)&lt;BR/&gt; 50912: (0.240385%)&gt;];
}
1284--1813[label="0.130952;11pkt 11fpkt"];
1284--2182[label="1;61pkt 61fpkt"];
1284--2242[label="1;61pkt 61fpkt"];
1284--2912[label="0.0338028;12pkt 12fpkt"];
1284--2919[label="0.0676056;24pkt 24fpkt"];
1284--2925[label="0.0338028;12pkt 12fpkt"];
1284--2931[label="0.0676056;24pkt 24fpkt"];
1284--2933[label="0.0338028;12pkt 12fpkt"];
1284--2935[label="0.0676056;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.224.156" src_port="80"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
2207[label="144.39.6.229;s;144pkt 144fpkt", shape=diamond, color=yellow];
2247[label="76.123.80.67;d;78pkt 78fpkt", shape=diamond, color=yellow];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.6.229:*, 76.123.80.67:80}[54.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0721%)&lt;BR/&gt; 1863: (1.8018%)&lt;BR/&gt; 7001: (0.45045%)&lt;BR/&gt; 1510: (0.45045%)&lt;BR/&gt; 1509: (0.45045%)&gt;];
}
2207--2247[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="76.123.80.67" dst_port="80" src_ip="144.39.6.229"/>
    </slice>
    <from sec="1109826579" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888664,1.72223,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
33[label="220.61.129.169s;2pkt 2fpkt", shape=rectangle, color=red];
51[label="175.150.164.15s;2pkt 2fpkt", shape=rectangle, color=red];
870[label="20.218.135.212;s;4pkt 4fpkt", shape=diamond, color=yellow];
1734[label="220.56.196.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
1863[label="73.241.186.132;s;7pkt 7fpkt", shape=diamond, color=yellow];
2067[label="220.61.129.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.186.132:*, 130.54.26.24:80}[46.6667%]&lt;BR/&gt;{20.218.135.212:*, 130.54.26.24:80}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62371: (5.88235%)&lt;BR/&gt; 2529: (5.88235%)&lt;BR/&gt; 62336: (2.94118%)&lt;BR/&gt; 60698: (2.94118%)&gt;];
}
33--388[label="0.5;1pkt 1fpkt"];
33--2067[label="1;1pkt 1fpkt"];
33--2262[label="0.5;1pkt 1fpkt"];
33--2852[label="0.5;1pkt 1fpkt"];
51--388[label="0.5;1pkt 1fpkt"];
51--699[label="0.5;1pkt 1fpkt"];
51--1734[label="1;1pkt 1fpkt"];
51--2262[label="0.5;1pkt 1fpkt"];
51--2852[label="0.5;1pkt 1fpkt"];
870--2262[label="1;4pkt 4fpkt"];
870--2852[label="1;4pkt 4fpkt"];
870--2890[label="0.5;2pkt 2fpkt"];
1734--2262[label="1;1pkt 1fpkt"];
1734--2852[label="1;1pkt 1fpkt"];
1863--2262[label="1;7pkt 7fpkt"];
1863--2852[label="1;7pkt 7fpkt"];
2067--2262[label="1;1pkt 1fpkt"];
2067--2852[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="73.241.186.132"/>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="20.218.135.212"/>
    </slice>
    <from sec="1109826033" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
430[label="169.28.129.2;s;171pkt 171fpkt", shape=diamond, color=yellow];
431[label="213.191.94.179;d;2pkt 2fpkt", shape=diamond, color=yellow];
2274[label="169.28.129.2;s;128pkt 128fpkt", shape=hexagon, color=black];
2950[label="169.28.129.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.129.2:*, 194.183.31.92:80}[53.2164%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3696%)&lt;BR/&gt; 110: (1.65017%)&lt;BR/&gt; 33221: (0.660066%)&lt;BR/&gt; 25107: (0.660066%)&lt;BR/&gt; 23252: (0.660066%)&gt;];
}
430--431[label="1;2pkt 2fpkt"];
430--629[label="0.00584795;1pkt 1fpkt"];
430--2274[label="1;128pkt 128fpkt"];
430--2950[label="1;2pkt 2fpkt"];
431--2274[label="1;2pkt 2fpkt"];
431--2950[label="1;2pkt 2fpkt"];
2274--2950[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.183.31.92" dst_port="80" src_ip="169.28.129.2"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
512[label="195.69.36.49;s;4pkt 4fpkt", shape=diamond, color=yellow];
2283[label="195.69.36.49;s;4pkt 4fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.69.36.49:1501, 144.224.49.208:22635}[25%]&lt;BR/&gt;{195.69.36.49:1503, 144.224.49.208:59363}[25%]&lt;BR/&gt;{195.69.36.49:1550, 144.224.49.208:2388}[25%]&lt;BR/&gt;{195.69.36.49:1551, 144.224.49.208:4177}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59363: (12.5%)&lt;BR/&gt; 22635: (12.5%)&lt;BR/&gt; 4177: (12.5%)&lt;BR/&gt; 2388: (12.5%)&lt;BR/&gt; 1551: (12.5%)&gt;];
}
512--2283[label="1;4pkt 4fpkt"];
512--3244[label="1;3pkt 3fpkt"];
2283--3244[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.49.208" dst_port="4177" src_ip="195.69.36.49" src_port="1551"/>
      <filter dst_ip="144.224.49.208" dst_port="2388" src_ip="195.69.36.49" src_port="1550"/>
      <filter dst_ip="144.224.49.208" dst_port="59363" src_ip="195.69.36.49" src_port="1503"/>
      <filter dst_ip="144.224.49.208" dst_port="22635" src_ip="195.69.36.49" src_port="1501"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
607[label="150.84.140.95;d;82pkt 82fpkt", shape=diamond, color=yellow];
608[label="194.64.124.6;s;85pkt 85fpkt", shape=diamond, color=yellow];
2292[label="194.64.124.6;s;85pkt 85fpkt", shape=hexagon, color=black];
2981[label="194.64.124.6;85pkt 85fpkt", shape=pentagon, color=darkviolet];
4249[label="194.64.124.6;85pkt 85fpkt", shape=invtriangle, color=brown];
4913[label="194.64.124.6;85pkt 85fpkt", shape=invhouse, color=bisque];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.124.6:*, 150.84.140.95:80}[96.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5207%)&lt;BR/&gt; 443: (0.986193%)&lt;BR/&gt; 1623: (0.591716%)&lt;BR/&gt; 1615: (0.591716%)&lt;BR/&gt; 1614: (0.591716%)&gt;];
}
607--608[label="1;82pkt 82fpkt"];
607--2292[label="1;82pkt 82fpkt"];
607--2890[label="0.609756;50pkt 50fpkt"];
607--2981[label="1;82pkt 82fpkt"];
607--4249[label="1;82pkt 82fpkt"];
607--4913[label="1;82pkt 82fpkt"];
608--2292[label="1;85pkt 85fpkt"];
608--2890[label="0.588235;50pkt 50fpkt"];
608--2981[label="1;85pkt 85fpkt"];
608--4249[label="1;85pkt 85fpkt"];
608--4913[label="1;85pkt 85fpkt"];
2292--2890[label="0.588235;50pkt 50fpkt"];
2292--2981[label="1;85pkt 85fpkt"];
2292--4249[label="1;85pkt 85fpkt"];
2292--4913[label="1;85pkt 85fpkt"];
2981--4249[label="1;85pkt 85fpkt"];
2981--4913[label="1;85pkt 85fpkt"];
4249--4913[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="150.84.140.95" dst_port="80" src_ip="194.64.124.6"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
654[label="213.137.83.48;d;160pkt 160fpkt", shape=diamond, color=yellow];
655[label="148.176.246.21;s;174pkt 174fpkt", shape=diamond, color=yellow];
1427[label="35.175.156.240;d;116pkt 116fpkt", shape=diamond, color=yellow];
1995[label="35.175.156.129;d;73pkt 73fpkt", shape=diamond, color=yellow];
2300[label="213.137.83.48;d;160pkt 160fpkt", shape=hexagon, color=black];
3086[label="148.176.246.21;173pkt 173fpkt", shape=pentagon, color=darkviolet];
4033[label="169.28.31.208;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4152[label="144.39.130.234;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4299[label="148.176.246.21;174pkt 174fpkt", shape=invtriangle, color=brown];
4806[label="169.28.31.208;9pkt 9fpkt", shape=invtriangle, color=brown];
4937[label="148.176.246.21;174pkt 174fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.246.21:*, 213.137.83.48:80}[43.1267%]&lt;BR/&gt;{*:*, 35.175.156.240:80}[31.5364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0354%)&lt;BR/&gt; 443: (0.482315%)&lt;BR/&gt; 1851: (0.241158%)&lt;BR/&gt; 1850: (0.241158%)&lt;BR/&gt; 1849: (0.241158%)&gt;];
}
654--655[label="1;160pkt 160fpkt"];
654--2300[label="1;160pkt 160fpkt"];
654--2890[label="0.4875;78pkt 78fpkt"];
654--3086[label="1;160pkt 160fpkt"];
654--4299[label="1;160pkt 160fpkt"];
654--4937[label="1;160pkt 160fpkt"];
655--1293[label="0.0151515;1pkt 1fpkt"];
655--1427[label="0.0172414;2pkt 2fpkt"];
655--1995[label="0.0136986;1pkt 1fpkt"];
655--2300[label="1;160pkt 160fpkt"];
655--2890[label="0.482759;84pkt 84fpkt"];
655--3086[label="1;173pkt 173fpkt"];
655--4299[label="1;174pkt 174fpkt"];
655--4937[label="1;174pkt 174fpkt"];
1427--1706[label="0.8;8pkt 8fpkt"];
1427--2100[label="0.12;3pkt 3fpkt"];
1427--2277[label="0.00862069;1pkt 1fpkt"];
1427--2806[label="0.8;8pkt 8fpkt"];
1427--2890[label="0.0603448;7pkt 7fpkt"];
1427--3086[label="0.0172414;2pkt 2fpkt"];
1427--3689[label="0.357143;5pkt 5fpkt"];
1427--4033[label="0.125;1pkt 1fpkt"];
1427--4152[label="0.782609;18pkt 18fpkt"];
1427--4299[label="0.0172414;2pkt 2fpkt"];
1427--4631[label="0.357143;5pkt 5fpkt"];
1427--4806[label="0.111111;1pkt 1fpkt"];
1427--4937[label="0.0172414;2pkt 2fpkt"];
1995--2064[label="0.52381;11pkt 11fpkt"];
1995--2100[label="0.04;1pkt 1fpkt"];
1995--2603[label="0.0547945;4pkt 4fpkt"];
1995--3086[label="0.0136986;1pkt 1fpkt"];
1995--3462[label="0.506849;37pkt 37fpkt"];
1995--3522[label="0.275;11pkt 11fpkt"];
1995--3971[label="0.0136986;1pkt 1fpkt"];
1995--4033[label="0.125;1pkt 1fpkt"];
1995--4299[label="0.0136986;1pkt 1fpkt"];
1995--4413[label="0.0547945;4pkt 4fpkt"];
1995--4544[label="0.275;11pkt 11fpkt"];
1995--4781[label="0.0136986;1pkt 1fpkt"];
1995--4806[label="0.222222;2pkt 2fpkt"];
1995--4937[label="0.0136986;1pkt 1fpkt"];
1995--5041[label="0.275;11pkt 11fpkt"];
2300--2890[label="0.4875;78pkt 78fpkt"];
2300--3086[label="1;160pkt 160fpkt"];
2300--4299[label="1;160pkt 160fpkt"];
2300--4937[label="1;160pkt 160fpkt"];
3086--4299[label="1;173pkt 173fpkt"];
3086--4937[label="1;173pkt 173fpkt"];
4033--4806[label="1;8pkt 8fpkt"];
4299--4937[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_ip="35.175.156.240" dst_port="80"/>
      <filter dst_ip="213.137.83.48" dst_port="80" src_ip="148.176.246.21"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1274[label="78.30.242.248;d;7pkt 7fpkt", shape=diamond, color=yellow];
2000[label="86.188.52.140;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.63.244:*, 78.30.242.248:54318}[55.5556%]&lt;BR/&gt;{148.176.63.244:*, 86.188.52.140:10052}[22.2222%]&lt;BR/&gt;{148.176.63.244:*, 78.30.242.248:47945}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54318: (27.7778%)&lt;BR/&gt; 47945: (11.1111%)&lt;BR/&gt; 10052: (11.1111%)&lt;BR/&gt; 42103: (5.55556%)&lt;BR/&gt; 42057: (5.55556%)&gt;];
}
1274--2305[label="0.714286;5pkt 5fpkt"];
1274--4187[label="1;7pkt 7fpkt"];
2000--2305[label="0.5;1pkt 1fpkt"];
2000--4187[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="78.30.242.248" dst_port="54318" src_ip="148.176.63.244"/>
      <filter dst_ip="78.30.242.248" dst_port="47945" src_ip="148.176.63.244"/>
      <filter dst_ip="86.188.52.140" dst_port="10052" src_ip="148.176.63.244"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
562[label="213.1.225.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
2321[label="213.1.225.234;s;1pkt 1fpkt", shape=hexagon, color=black];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.1.225.234:65196, 130.54.26.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65196: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
562--2262[label="1;1pkt 1fpkt"];
562--2321[label="1;1pkt 1fpkt"];
562--2852[label="1;1pkt 1fpkt"];
562--2890[label="1;1pkt 1fpkt"];
562--4155[label="1;1pkt 1fpkt"];
2321--2852[label="1;1pkt 1fpkt"];
2321--2890[label="1;1pkt 1fpkt"];
2321--4155[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="213.1.225.234" src_port="65196"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
816[label="148.176.244.85;s;22pkt 22fpkt", shape=diamond, color=yellow];
1619[label="203.33.30.49;d;14pkt 14fpkt", shape=diamond, color=yellow];
2329[label="148.176.244.85;s;22pkt 22fpkt", shape=hexagon, color=black];
2782[label="203.33.30.49;d;11pkt 11fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.244.85:*, 203.33.30.49:80}[63.6364%]&lt;BR/&gt;{148.176.244.85:*, 203.33.30.144:80}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2066: (2.89855%)&lt;BR/&gt; 2064: (2.89855%)&lt;BR/&gt; 2062: (2.89855%)&lt;BR/&gt; 2060: (2.89855%)&gt;];
}
816--1619[label="1;14pkt 14fpkt"];
816--2120[label="0.0454545;1pkt 1fpkt"];
816--2329[label="1;22pkt 22fpkt"];
816--2782[label="1;11pkt 11fpkt"];
816--2890[label="0.272727;6pkt 6fpkt"];
1619--2329[label="1;14pkt 14fpkt"];
1619--2782[label="1;11pkt 11fpkt"];
1619--2890[label="0.285714;4pkt 4fpkt"];
2329--2782[label="1;11pkt 11fpkt"];
2329--2890[label="0.272727;6pkt 6fpkt"];
2782--2890[label="0.363636;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="203.33.30.49" dst_port="80" src_ip="148.176.244.85"/>
      <filter dst_ip="203.33.30.144" dst_port="80" src_ip="148.176.244.85"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
840[label="195.81.114.93;s;285pkt 285fpkt", shape=diamond, color=yellow];
1717[label="73.58.119.38;d;5pkt 5fpkt", shape=diamond, color=yellow];
2112[label="75.28.150.122;d;93pkt 93fpkt", shape=diamond, color=yellow];
2134[label="196.70.44.68;d;45pkt 45fpkt", shape=diamond, color=yellow];
2332[label="195.81.114.93;s;91pkt 91fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.114.93:80, 75.28.150.122:*}[32.6316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.3565%)&lt;BR/&gt; 554: (10.0193%)&lt;BR/&gt; 6970: (3.46821%)&lt;BR/&gt; 6972: (0.674374%)&lt;BR/&gt; 3404: (0.385356%)&gt;];
}
840--1319[label="0.00574713;1pkt 1fpkt"];
840--1717[label="1;5pkt 5fpkt"];
840--2112[label="1;93pkt 93fpkt"];
840--2134[label="1;45pkt 45fpkt"];
840--2332[label="1;91pkt 91fpkt"];
840--2912[label="0.0736842;21pkt 21fpkt"];
840--2919[label="0.0561404;16pkt 16fpkt"];
840--2925[label="0.0736842;21pkt 21fpkt"];
840--2931[label="0.0561404;16pkt 16fpkt"];
840--2933[label="0.0736842;21pkt 21fpkt"];
840--2935[label="0.0561404;16pkt 16fpkt"];
2112--2332[label="0.285714;26pkt 26fpkt"];
2112--2912[label="0.0967742;9pkt 9fpkt"];
2112--2919[label="0.0752688;7pkt 7fpkt"];
2112--2925[label="0.0967742;9pkt 9fpkt"];
2112--2931[label="0.0752688;7pkt 7fpkt"];
2112--2933[label="0.0967742;9pkt 9fpkt"];
2112--2935[label="0.0752688;7pkt 7fpkt"];
2134--2332[label="0.266667;12pkt 12fpkt"];
2332--2912[label="0.230769;21pkt 21fpkt"];
2332--2919[label="0.010989;1pkt 1fpkt"];
2332--2925[label="0.230769;21pkt 21fpkt"];
2332--2931[label="0.010989;1pkt 1fpkt"];
2332--2933[label="0.230769;21pkt 21fpkt"];
2332--2935[label="0.010989;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.28.150.122" src_ip="195.81.114.93" src_port="80"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
603[label="148.176.229.46;s;637pkt 637fpkt", shape=diamond, color=yellow];
1087[label="74.161.208.173;d;88pkt 88fpkt", shape=diamond, color=yellow];
1113[label="148.176.160.148;s;71pkt 71fpkt", shape=diamond, color=yellow];
1347[label="74.161.203.206;d;31pkt 31fpkt", shape=diamond, color=yellow];
1361[label="213.137.83.131;d;77pkt 77fpkt", shape=diamond, color=yellow];
1368[label="20.139.155.218;d;14pkt 14fpkt", shape=diamond, color=yellow];
1491[label="197.84.175.2;d;142pkt 142fpkt", shape=diamond, color=yellow];
1537[label="213.2.1.207;d;51pkt 51fpkt", shape=diamond, color=yellow];
2009[label="73.172.72.97;d;52pkt 52fpkt", shape=diamond, color=yellow];
2019[label="148.176.147.219;s;69pkt 69fpkt", shape=diamond, color=yellow];
2082[label="197.84.206.210;d;68pkt 68fpkt", shape=diamond, color=yellow];
2089[label="23.120.32.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2114[label="144.224.74.114;s;74pkt 74fpkt", shape=diamond, color=yellow];
2191[label="148.176.200.16;s;32pkt 32fpkt", shape=diamond, color=yellow];
2323[label="148.176.229.46;s;384pkt 384fpkt", shape=hexagon, color=black];
2698[label="148.176.160.148;s;71pkt 71fpkt", shape=hexagon, color=black];
2747[label="148.176.200.2;s;55pkt 55fpkt", shape=hexagon, color=black];
2838[label="144.224.74.114;s;74pkt 74fpkt", shape=hexagon, color=black];
2846[label="148.176.200.16;s;32pkt 32fpkt", shape=hexagon, color=black];
3076[label="148.177.36.21;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3084[label="148.176.200.21;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3234[label="148.176.229.46;658pkt 658fpkt", shape=pentagon, color=darkviolet];
3459[label="148.177.48.91;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3591[label="144.224.74.114;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4093[label="148.176.147.219;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4104[label="195.81.118.222;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4383[label="148.176.229.46;658pkt 658fpkt", shape=invtriangle, color=brown];
4578[label="144.224.74.114;75pkt 75fpkt", shape=invtriangle, color=brown];
4966[label="148.176.229.46;659pkt 659fpkt", shape=invhouse, color=bisque];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.229.46:*, *:80}[43.0565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6336%)&lt;BR/&gt; 443: (0.567392%)&lt;BR/&gt; 515: (0.40528%)&lt;BR/&gt; 0: (0.162112%)&lt;BR/&gt; 1024: (0.138953%)&gt;];
}
603--629[label="0.00357143;1pkt 1fpkt"];
603--639[label="0.00666667;2pkt 2fpkt"];
603--657[label="0.0318471;5pkt 5fpkt"];
603--735[label="0.00941915;6pkt 6fpkt"];
603--802[label="0.00483092;1pkt 1fpkt"];
603--832[label="0.00313972;2pkt 2fpkt"];
603--967[label="0.00253165;1pkt 1fpkt"];
603--1009[label="0.00440529;1pkt 1fpkt"];
603--1075[label="0.00293255;1pkt 1fpkt"];
603--1083[label="0.0173913;2pkt 2fpkt"];
603--1087[label="0.0227273;2pkt 2fpkt"];
603--1269[label="0.00298507;1pkt 1fpkt"];
603--1277[label="0.00892857;2pkt 2fpkt"];
603--1361[label="0.454545;35pkt 35fpkt"];
603--1368[label="0.142857;2pkt 2fpkt"];
603--1431[label="0.00540541;1pkt 1fpkt"];
603--1524[label="0.0793651;5pkt 5fpkt"];
603--1620[label="0.0974026;15pkt 15fpkt"];
603--1679[label="0.0263158;4pkt 4fpkt"];
603--1816[label="0.0833333;1pkt 1fpkt"];
603--2009[label="0.134615;7pkt 7fpkt"];
603--2082[label="0.0147059;1pkt 1fpkt"];
603--2089[label="1;1pkt 1fpkt"];
603--2162[label="0.111111;4pkt 4fpkt"];
603--2179[label="0.0735294;5pkt 5fpkt"];
603--2323[label="1;384pkt 384fpkt"];
603--2334[label="0.0173913;2pkt 2fpkt"];
603--2739[label="0.0049505;1pkt 1fpkt"];
603--2890[label="0.0549451;35pkt 35fpkt"];
603--3234[label="0.99843;636pkt 636fpkt"];
603--4383[label="0.99843;636pkt 636fpkt"];
603--4966[label="1;637pkt 637fpkt"];
1087--1677[label="0.0222222;1pkt 1fpkt"];
1087--1690[label="0.0113636;1pkt 1fpkt"];
1087--1999[label="0.0113636;1pkt 1fpkt"];
1087--2114[label="0.027027;2pkt 2fpkt"];
1087--2191[label="0.0625;2pkt 2fpkt"];
1087--2202[label="0.037037;1pkt 1fpkt"];
1087--2307[label="0.0227273;2pkt 2fpkt"];
1087--2323[label="0.0227273;2pkt 2fpkt"];
1087--2388[label="0.0681818;6pkt 6fpkt"];
1087--2406[label="0.02;1pkt 1fpkt"];
1087--2504[label="0.0113636;1pkt 1fpkt"];
1087--2508[label="0.25;22pkt 22fpkt"];
1087--2720[label="0.0113636;1pkt 1fpkt"];
1087--2751[label="0.0113636;1pkt 1fpkt"];
1087--2838[label="0.027027;2pkt 2fpkt"];
1087--2846[label="0.0625;2pkt 2fpkt"];
1087--2847[label="0.037037;1pkt 1fpkt"];
1087--2890[label="0.204545;18pkt 18fpkt"];
1087--3084[label="0.0666667;1pkt 1fpkt"];
1087--3116[label="0.037037;1pkt 1fpkt"];
1087--3204[label="0.0357143;1pkt 1fpkt"];
1087--3234[label="0.0227273;2pkt 2fpkt"];
1087--3363[label="0.0113636;1pkt 1fpkt"];
1087--3459[label="0.0526316;2pkt 2fpkt"];
1087--3591[label="0.0266667;2pkt 2fpkt"];
1087--4002[label="0.284091;25pkt 25fpkt"];
1087--4017[label="0.102273;9pkt 9fpkt"];
1087--4318[label="0.0357143;1pkt 1fpkt"];
1087--4366[label="0.0357143;1pkt 1fpkt"];
1087--4383[label="0.0227273;2pkt 2fpkt"];
1087--4459[label="0.0113636;1pkt 1fpkt"];
1087--4578[label="0.0266667;2pkt 2fpkt"];
1087--4793[label="0.284091;25pkt 25fpkt"];
1087--4799[label="0.102273;9pkt 9fpkt"];
1087--4966[label="0.0227273;2pkt 2fpkt"];
1113--1368[label="0.428571;6pkt 6fpkt"];
1113--1438[label="0.0422535;3pkt 3fpkt"];
1113--1543[label="0.466667;7pkt 7fpkt"];
1113--2162[label="0.0277778;1pkt 1fpkt"];
1113--2698[label="1;71pkt 71fpkt"];
1347--1818[label="0.136364;3pkt 3fpkt"];
1347--2019[label="0.0645161;2pkt 2fpkt"];
1347--2191[label="0.0645161;2pkt 2fpkt"];
1347--2197[label="0.0322581;1pkt 1fpkt"];
1347--2504[label="0.0645161;2pkt 2fpkt"];
1347--2572[label="1;29pkt 29fpkt"];
1347--2846[label="0.0645161;2pkt 2fpkt"];
1347--2890[label="0.0322581;1pkt 1fpkt"];
1347--4002[label="0.322581;10pkt 10fpkt"];
1347--4093[label="0.0645161;2pkt 2fpkt"];
1347--4793[label="0.322581;10pkt 10fpkt"];
1361--2323[label="0.454545;35pkt 35fpkt"];
1361--2693[label="0.545455;42pkt 42fpkt"];
1361--3234[label="0.454545;35pkt 35fpkt"];
1361--4383[label="0.454545;35pkt 35fpkt"];
1361--4966[label="0.454545;35pkt 35fpkt"];
1368--2323[label="0.142857;2pkt 2fpkt"];
1368--2698[label="0.428571;6pkt 6fpkt"];
1368--2747[label="0.428571;6pkt 6fpkt"];
1368--3234[label="0.142857;2pkt 2fpkt"];
1368--4383[label="0.142857;2pkt 2fpkt"];
1368--4966[label="0.142857;2pkt 2fpkt"];
1491--1501[label="0.0352113;5pkt 5fpkt"];
1491--1833[label="0.0144928;1pkt 1fpkt"];
1491--2191[label="0.03125;1pkt 1fpkt"];
1491--2280[label="0.0633803;9pkt 9fpkt"];
1491--2385[label="0.0422535;6pkt 6fpkt"];
1491--2388[label="0.0985915;14pkt 14fpkt"];
1491--2396[label="0.0289855;2pkt 2fpkt"];
1491--2451[label="0.0107527;1pkt 1fpkt"];
1491--2499[label="0.00704225;1pkt 1fpkt"];
1491--2508[label="0.140845;20pkt 20fpkt"];
1491--2557[label="0.0126582;1pkt 1fpkt"];
1491--2620[label="0.028169;4pkt 4fpkt"];
1491--2738[label="1;120pkt 120fpkt"];
1491--2846[label="0.03125;1pkt 1fpkt"];
1491--2878[label="0.0633803;9pkt 9fpkt"];
1491--2890[label="0.0774648;11pkt 11fpkt"];
1491--2979[label="0.084507;12pkt 12fpkt"];
1491--3204[label="0.0357143;1pkt 1fpkt"];
1491--3214[label="0.019802;2pkt 2fpkt"];
1491--4002[label="0.211268;30pkt 30fpkt"];
1491--4017[label="0.147887;21pkt 21fpkt"];
1491--4036[label="0.0144928;1pkt 1fpkt"];
1491--4247[label="0.084507;12pkt 12fpkt"];
1491--4366[label="0.0357143;1pkt 1fpkt"];
1491--4372[label="0.019802;2pkt 2fpkt"];
1491--4793[label="0.211268;30pkt 30fpkt"];
1491--4799[label="0.147887;21pkt 21fpkt"];
1491--4809[label="0.0144928;1pkt 1fpkt"];
1537--2191[label="0.25;8pkt 8fpkt"];
1537--2626[label="0.156863;8pkt 8fpkt"];
1537--2783[label="0.254902;13pkt 13fpkt"];
1537--2801[label="1;42pkt 42fpkt"];
1537--2846[label="0.25;8pkt 8fpkt"];
1537--4076[label="0.156863;8pkt 8fpkt"];
2009--3090[label="0.846154;44pkt 44fpkt"];
2009--3234[label="0.134615;7pkt 7fpkt"];
2009--4301[label="0.846154;44pkt 44fpkt"];
2009--4383[label="0.134615;7pkt 7fpkt"];
2009--4966[label="0.134615;7pkt 7fpkt"];
2019--2118[label="0.0147059;1pkt 1fpkt"];
2019--2572[label="0.0689655;2pkt 2fpkt"];
2019--4093[label="1;69pkt 69fpkt"];
2082--2277[label="0.0147059;1pkt 1fpkt"];
2082--2323[label="0.0147059;1pkt 1fpkt"];
2082--2333[label="0.0147059;1pkt 1fpkt"];
2082--2388[label="0.0588235;4pkt 4fpkt"];
2082--2522[label="0.0147059;1pkt 1fpkt"];
2082--2540[label="0.0147059;1pkt 1fpkt"];
2082--2557[label="0.0147059;1pkt 1fpkt"];
2082--2582[label="0.015873;1pkt 1fpkt"];
2082--2693[label="0.0147059;1pkt 1fpkt"];
2082--2735[label="0.0147059;1pkt 1fpkt"];
2082--2890[label="0.117647;8pkt 8fpkt"];
2082--3038[label="0.2;1pkt 1fpkt"];
2082--3076[label="0.1;1pkt 1fpkt"];
2082--3234[label="0.0147059;1pkt 1fpkt"];
2082--3444[label="0.0188679;1pkt 1fpkt"];
2082--3450[label="0.0441176;3pkt 3fpkt"];
2082--3678[label="0.0147059;1pkt 1fpkt"];
2082--3874[label="0.0147059;1pkt 1fpkt"];
2082--4017[label="0.0588235;4pkt 4fpkt"];
2082--4104[label="0.0263158;1pkt 1fpkt"];
2082--4274[label="0.2;1pkt 1fpkt"];
2082--4383[label="0.0147059;1pkt 1fpkt"];
2082--4502[label="0.0188679;1pkt 1fpkt"];
2082--4505[label="0.0441176;3pkt 3fpkt"];
2082--4625[label="0.0147059;1pkt 1fpkt"];
2082--4799[label="0.0588235;4pkt 4fpkt"];
2082--4966[label="0.0147059;1pkt 1fpkt"];
2082--5016[label="0.0185185;1pkt 1fpkt"];
2082--5019[label="0.0441176;3pkt 3fpkt"];
2089--2323[label="1;1pkt 1fpkt"];
2089--2890[label="1;1pkt 1fpkt"];
2089--3234[label="1;1pkt 1fpkt"];
2089--4383[label="1;1pkt 1fpkt"];
2089--4966[label="1;1pkt 1fpkt"];
2114--2838[label="1;74pkt 74fpkt"];
2114--2890[label="0.0405405;3pkt 3fpkt"];
2114--3591[label="0.986486;73pkt 73fpkt"];
2114--4578[label="0.986486;73pkt 73fpkt"];
2191--2572[label="0.0689655;2pkt 2fpkt"];
2191--2846[label="1;32pkt 32fpkt"];
2323--2334[label="0.0173913;2pkt 2fpkt"];
2323--2739[label="0.0049505;1pkt 1fpkt"];
2323--2890[label="0.0911458;35pkt 35fpkt"];
2323--3234[label="0.997396;383pkt 383fpkt"];
2323--4383[label="0.997396;383pkt 383fpkt"];
2323--4966[label="1;384pkt 384fpkt"];
2747--2780[label="0.0181818;1pkt 1fpkt"];
2838--2890[label="0.0405405;3pkt 3fpkt"];
2838--3591[label="0.986486;73pkt 73fpkt"];
2838--4578[label="0.986486;73pkt 73fpkt"];
3234--4383[label="1;658pkt 658fpkt"];
3234--4966[label="1;658pkt 658fpkt"];
3591--4578[label="1;75pkt 75fpkt"];
4383--4966[label="1;658pkt 658fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.229.46"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
858[label="148.176.232.106;s;53pkt 53fpkt", shape=diamond, color=yellow];
1094[label="74.100.129.161;d;30pkt 30fpkt", shape=diamond, color=yellow];
2339[label="148.176.232.106;s;53pkt 53fpkt", shape=hexagon, color=black];
2446[label="74.100.129.161;d;30pkt 30fpkt", shape=hexagon, color=black];
3556[label="148.176.232.106;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.232.106:*, 73.242.201.69:80}[51.5789%]&lt;BR/&gt;{148.176.232.106:*, 74.100.129.161:80}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64792: (0.957854%)&lt;BR/&gt; 64791: (0.957854%)&lt;BR/&gt; 64790: (0.957854%)&lt;BR/&gt; 64789: (0.957854%)&gt;];
}
858--1094[label="1;30pkt 30fpkt"];
858--2339[label="1;53pkt 53fpkt"];
858--2446[label="1;30pkt 30fpkt"];
858--2890[label="0.188679;10pkt 10fpkt"];
858--3556[label="1;53pkt 53fpkt"];
1094--2339[label="1;30pkt 30fpkt"];
1094--2446[label="1;30pkt 30fpkt"];
1094--2890[label="0.3;9pkt 9fpkt"];
1094--3556[label="1;30pkt 30fpkt"];
2339--2446[label="1;30pkt 30fpkt"];
2339--2890[label="0.188679;10pkt 10fpkt"];
2339--3556[label="1;53pkt 53fpkt"];
2446--2890[label="0.3;9pkt 9fpkt"];
2446--3556[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="73.242.201.69" dst_port="80" src_ip="148.176.232.106"/>
      <filter dst_ip="74.100.129.161" dst_port="80" src_ip="148.176.232.106"/>
    </slice>
    <from sec="1109826018" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
685[label="193.34.43.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
2568[label="148.176.133.4;s;93pkt 93fpkt", shape=hexagon, color=black];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.133.4:*, *:80}[91.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8947%)&lt;BR/&gt; 1755: (1.05263%)&lt;BR/&gt; 39837: (0.526316%)&lt;BR/&gt; 33600: (0.526316%)&lt;BR/&gt; 33085: (0.526316%)&gt;];
}
685--686[label="1;2pkt 2fpkt"];
2568--2743[label="0.0208333;1pkt 1fpkt"];
2568--2890[label="0.0537634;5pkt 5fpkt"];
2568--2912[label="0.0107527;1pkt 1fpkt"];
2568--2919[label="0.0215054;2pkt 2fpkt"];
2568--2925[label="0.0107527;1pkt 1fpkt"];
2568--2931[label="0.0215054;2pkt 2fpkt"];
2568--2933[label="0.0107527;1pkt 1fpkt"];
2568--2935[label="0.0215054;2pkt 2fpkt"];
2568--2970[label="1;93pkt 93fpkt"];
2568--4242[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.133.4"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
420[label="209.29.100.133;s;2pkt 2fpkt", shape=diamond, color=yellow];
421[label="144.39.234.79;d;192pkt 192fpkt", shape=diamond, color=yellow];
2371[label="209.29.100.133;s;2pkt 2fpkt", shape=hexagon, color=black];
2372[label="144.39.234.79;d;96pkt 96fpkt", shape=hexagon, color=black];
3684[label="209.29.100.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4629[label="209.29.100.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.39.234.79:47089}[88.0208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47089: (43.3673%)&lt;BR/&gt; 443: (3.23129%)&lt;BR/&gt; 80: (3.23129%)&lt;BR/&gt; 60112: (1.02041%)&lt;BR/&gt; 18115: (0.680272%)&gt;];
}
420--421[label="1;2pkt 2fpkt"];
420--2371[label="1;2pkt 2fpkt"];
420--2372[label="1;2pkt 2fpkt"];
420--2890[label="0.5;1pkt 1fpkt"];
420--3684[label="1;1pkt 1fpkt"];
420--4629[label="1;1pkt 1fpkt"];
421--2371[label="1;2pkt 2fpkt"];
421--2372[label="1;96pkt 96fpkt"];
421--2890[label="0.015625;3pkt 3fpkt"];
421--3684[label="1;1pkt 1fpkt"];
421--4629[label="1;1pkt 1fpkt"];
2371--2372[label="1;2pkt 2fpkt"];
2371--2890[label="0.5;1pkt 1fpkt"];
2371--3684[label="1;1pkt 1fpkt"];
2371--4629[label="1;1pkt 1fpkt"];
2372--2890[label="0.03125;3pkt 3fpkt"];
2372--3684[label="1;1pkt 1fpkt"];
2372--4629[label="1;1pkt 1fpkt"];
3684--4629[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.39.234.79" dst_port="47089"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02249,1.68347,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
38[label="169.28.209.194s;1pkt 1fpkt", shape=rectangle, color=red];
452[label="0.8.76.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
453[label="169.28.209.194;s;53pkt 53fpkt", shape=diamond, color=yellow];
2377[label="0.8.76.106;d;1pkt 1fpkt", shape=hexagon, color=black];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.209.194:*, 194.223.35.163:80}[49.0566%]&lt;BR/&gt;{169.28.209.194:*, 23.129.214.137:80}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1071%)&lt;BR/&gt; 1264: (3.57143%)&lt;BR/&gt; 5050: (0.892857%)&lt;BR/&gt; 1672: (0.892857%)&lt;BR/&gt; 1671: (0.892857%)&gt;];
}
38--452[label="1;1pkt 1fpkt"];
38--453[label="1;1pkt 1fpkt"];
38--2377[label="1;1pkt 1fpkt"];
38--2890[label="1;1pkt 1fpkt"];
452--453[label="1;1pkt 1fpkt"];
452--2377[label="1;1pkt 1fpkt"];
452--2890[label="1;1pkt 1fpkt"];
453--2377[label="1;1pkt 1fpkt"];
453--2890[label="0.0188679;1pkt 1fpkt"];
2377--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.223.35.163" dst_port="80" src_ip="169.28.209.194"/>
      <filter dst_ip="23.129.214.137" dst_port="80" src_ip="169.28.209.194"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
458[label="213.11.37.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
2380[label="213.11.37.249;s;1pkt 1fpkt", shape=hexagon, color=black];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.11.37.249:3822, 130.54.198.163:45033}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45033: (50%)&lt;BR/&gt; 3822: (50%)&gt;];
}
458--2379[label="1;1pkt 1fpkt"];
458--2380[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.198.163" dst_port="45033" src_ip="213.11.37.249" src_port="3822"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
652[label="23.73.98.197;d;4pkt 4fpkt", shape=diamond, color=yellow];
665[label="194.177.39.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.4.54:25662, 23.73.98.197:80}[20%]&lt;BR/&gt;{175.150.164.15:59331, 194.177.39.177:80}[20%]&lt;BR/&gt;{175.150.164.15:60008, 23.73.98.197:80}[20%]&lt;BR/&gt;{175.150.164.15:60544, 23.73.98.197:80}[20%]&lt;BR/&gt;{175.150.164.15:61753, 23.73.98.197:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61753: (10%)&lt;BR/&gt; 60544: (10%)&lt;BR/&gt; 60008: (10%)&lt;BR/&gt; 59331: (10%)&gt;];
}
652--699[label="0.75;3pkt 3fpkt"];
652--2385[label="0.5;2pkt 2fpkt"];
665--699[label="1;1pkt 1fpkt"];
665--2385[label="1;1pkt 1fpkt"];
665--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.73.98.197" dst_port="80" src_ip="175.150.164.15" src_port="61753"/>
      <filter dst_ip="23.73.98.197" dst_port="80" src_ip="175.150.164.15" src_port="60544"/>
      <filter dst_ip="23.73.98.197" dst_port="80" src_ip="175.150.164.15" src_port="60008"/>
      <filter dst_ip="194.177.39.177" dst_port="80" src_ip="175.150.164.15" src_port="59331"/>
      <filter dst_ip="23.73.98.197" dst_port="80" src_ip="148.177.4.54" src_port="25662"/>
    </slice>
    <from sec="1109826042" usec="0"/>
    <to sec="1109826477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
702[label="169.28.29.176;s;149pkt 149fpkt", shape=diamond, color=yellow];
981[label="215.195.228.198;d;84pkt 84fpkt", shape=diamond, color=yellow];
2387[label="169.28.29.176;s;143pkt 143fpkt", shape=hexagon, color=black];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.29.176:*, 215.195.228.198:80}[56.3758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4681%)&lt;BR/&gt; 110: (0.531915%)&lt;BR/&gt; 1450: (0.398936%)&lt;BR/&gt; 1449: (0.398936%)&lt;BR/&gt; 1448: (0.398936%)&gt;];
}
702--981[label="1;84pkt 84fpkt"];
702--2387[label="1;143pkt 143fpkt"];
702--2890[label="0.0536913;8pkt 8fpkt"];
981--2387[label="1;84pkt 84fpkt"];
981--2890[label="0.0714286;6pkt 6fpkt"];
2387--2890[label="0.0559441;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="215.195.228.198" dst_port="80" src_ip="169.28.29.176"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
4154[label="148.177.222.234;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.222.234:*, 75.188.228.106:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2942: (6.25%)&lt;BR/&gt; 2941: (6.25%)&lt;BR/&gt; 2939: (6.25%)&lt;BR/&gt; 2933: (6.25%)&gt;];
}
4154--4863[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="75.188.228.106" dst_port="80" src_ip="148.177.222.234"/>
    </slice>
    <from sec="1109826443" usec="0"/>
    <to sec="1109826853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
715[label="73.193.23.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
968[label="130.54.210.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
2389[label="73.193.23.103;s;1pkt 1fpkt", shape=hexagon, color=black];
3536[label="73.193.23.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.193.23.103:8737, 130.54.210.178:33037}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33037: (50%)&lt;BR/&gt; 8737: (50%)&gt;];
}
715--968[label="1;1pkt 1fpkt"];
715--2389[label="1;1pkt 1fpkt"];
715--3536[label="1;1pkt 1fpkt"];
968--2389[label="1;1pkt 1fpkt"];
968--3536[label="1;1pkt 1fpkt"];
2389--3536[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.210.178" dst_port="33037" src_ip="73.193.23.103" src_port="8737"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
529[label="130.54.210.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
530[label="20.90.85.129;s;6pkt 6fpkt", shape=diamond, color=yellow];
2392[label="20.90.85.129;s;5pkt 5fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.90.85.129:1025, *:161}[50%]&lt;BR/&gt;{20.90.85.129:*, 130.54.210.187:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (23.0769%)&lt;BR/&gt; 161: (23.0769%)&lt;BR/&gt; 0: (23.0769%)&lt;BR/&gt; 4354: (11.5385%)&lt;BR/&gt; 1723: (11.5385%)&gt;];
}
529--530[label="1;2pkt 2fpkt"];
529--2392[label="1;2pkt 2fpkt"];
530--2392[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.210.187" src_ip="20.90.85.129"/>
      <filter dst_port="161" src_ip="20.90.85.129" src_port="1025"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
742[label="20.105.21.4;s;1447pkt 1447fpkt", shape=diamond, color=yellow];
2397[label="20.105.21.4;s;445pkt 445fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.105.21.4:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58802: (9.43446%)&lt;BR/&gt; 44407: (9.03805%)&lt;BR/&gt; 33305: (8.50951%)&lt;BR/&gt; 80: (6.4482%)&lt;BR/&gt; 12055: (5.62896%)&gt;];
}
742--2397[label="1;445pkt 445fpkt"];
742--2912[label="0.00552868;8pkt 8fpkt"];
742--2919[label="0.00621977;9pkt 9fpkt"];
742--2925[label="0.00552868;8pkt 8fpkt"];
742--2931[label="0.00621977;9pkt 9fpkt"];
742--2933[label="0.00552868;8pkt 8fpkt"];
742--2935[label="0.00621977;9pkt 9fpkt"];
2397--2912[label="0.0179775;8pkt 8fpkt"];
2397--2925[label="0.0179775;8pkt 8fpkt"];
2397--2933[label="0.0179775;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="20.105.21.4"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
547[label="194.64.106.29;s;5pkt 5fpkt", shape=diamond, color=yellow];
1207[label="202.111.73.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
2400[label="194.64.106.29;s;1pkt 1fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.106.29:4883, 202.111.73.128:7665}[20%]&lt;BR/&gt;{194.64.106.29:4820, 202.154.185.33:80}[20%]&lt;BR/&gt;{194.64.106.29:4821, 202.154.185.33:80}[20%]&lt;BR/&gt;{194.64.106.29:4825, 202.154.185.33:80}[20%]&lt;BR/&gt;{194.64.106.29:4833, 202.154.185.33:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 7665: (21.4286%)&lt;BR/&gt; 4883: (21.4286%)&lt;BR/&gt; 4833: (7.14286%)&lt;BR/&gt; 4825: (7.14286%)&gt;];
}
547--1207[label="1;1pkt 1fpkt"];
547--2400[label="1;1pkt 1fpkt"];
1207--2400[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.154.185.33" dst_port="80" src_ip="194.64.106.29" src_port="4833"/>
      <filter dst_ip="202.154.185.33" dst_port="80" src_ip="194.64.106.29" src_port="4825"/>
      <filter dst_ip="202.154.185.33" dst_port="80" src_ip="194.64.106.29" src_port="4821"/>
      <filter dst_ip="202.154.185.33" dst_port="80" src_ip="194.64.106.29" src_port="4820"/>
      <filter dst_ip="202.111.73.128" dst_port="7665" src_ip="194.64.106.29" src_port="4883"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
991[label="20.123.160.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
2404[label="20.123.160.90;s;1pkt 1fpkt", shape=hexagon, color=black];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.123.160.90:4900, 130.54.189.130:1308}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4900: (50%)&lt;BR/&gt; 1308: (50%)&gt;];
}
991--2404[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.189.130" dst_port="1308" src_ip="20.123.160.90" src_port="4900"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
527[label="195.81.123.67;d;3pkt 3fpkt", shape=diamond, color=yellow];
566[label="72.218.141.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
2409[label="72.218.141.140;s;1pkt 1fpkt", shape=hexagon, color=black];
4051[label="77.166.229.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4815[label="77.166.229.210;1pkt 1fpkt", shape=invtriangle, color=brown];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.218.141.140:44753, 195.81.123.67:1755}[33.3333%]&lt;BR/&gt;{77.166.229.210:4515, 195.81.123.67:1755}[33.3333%]&lt;BR/&gt;{77.166.229.210:4516, 195.81.123.67:1755}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 44753: (21.4286%)&lt;BR/&gt; 4515: (21.4286%)&lt;BR/&gt; 4516: (7.14286%)&gt;];
}
527--566[label="1;1pkt 1fpkt"];
527--1194[label="1;2pkt 2fpkt"];
527--2409[label="1;1pkt 1fpkt"];
527--4051[label="1;1pkt 1fpkt"];
527--4815[label="1;1pkt 1fpkt"];
566--2409[label="1;1pkt 1fpkt"];
4051--4815[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.123.67" dst_port="1755" src_ip="77.166.229.210" src_port="4516"/>
      <filter dst_ip="195.81.123.67" dst_port="1755" src_ip="77.166.229.210" src_port="4515"/>
      <filter dst_ip="195.81.123.67" dst_port="1755" src_ip="72.218.141.140" src_port="44753"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02249,1.68347,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
10[label="195.81.123.67s;3pkt 3fpkt", shape=rectangle, color=red];
759[label="169.28.112.152;s;2pkt 2fpkt", shape=diamond, color=yellow];
1214[label="195.90.74.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
2411[label="169.28.112.152;s;2pkt 2fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.166.6:1755, 75.0.156.13:80}[25%]&lt;BR/&gt;{195.81.123.67:1755, 72.218.141.140:44753}[25%]&lt;BR/&gt;{169.28.112.152:1805, 195.90.74.70:80}[25%]&lt;BR/&gt;{169.28.112.152:1859, 197.84.9.248:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 1805: (25%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1859: (12.5%)&lt;BR/&gt; 1755: (12.5%)&gt;];
}
10--528[label="0.333333;1pkt 1fpkt"];
10--565[label="1;1pkt 1fpkt"];
10--759[label="0.5;1pkt 1fpkt"];
10--1214[label="1;1pkt 1fpkt"];
10--2411[label="0.5;1pkt 1fpkt"];
10--2890[label="0.333333;1pkt 1fpkt"];
10--3361[label="0.333333;1pkt 1fpkt"];
759--1214[label="1;1pkt 1fpkt"];
759--2411[label="1;2pkt 2fpkt"];
759--2890[label="0.5;1pkt 1fpkt"];
1214--2411[label="1;1pkt 1fpkt"];
1214--2890[label="1;1pkt 1fpkt"];
2411--2890[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.9.248" dst_port="1863" src_ip="169.28.112.152" src_port="1859"/>
      <filter dst_ip="195.90.74.70" dst_port="80" src_ip="169.28.112.152" src_port="1805"/>
      <filter dst_ip="72.218.141.140" dst_port="44753" src_ip="195.81.123.67" src_port="1755"/>
      <filter dst_ip="75.0.156.13" dst_port="80" src_ip="148.177.166.6" src_port="1755"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
1730[label="76.103.131.210;s;31pkt 31fpkt", shape=diamond, color=yellow];
1859[label="220.87.97.5;s;55pkt 55fpkt", shape=diamond, color=yellow];
1983[label="210.5.168.21;s;61pkt 61fpkt", shape=diamond, color=yellow];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.87.97.5:80, 130.54.26.141:*}[37.415%]&lt;BR/&gt;{210.5.168.21:80, 148.177.119.47:*}[29.932%]&lt;BR/&gt;{76.103.131.210:80, 130.54.26.141:*}[21.0884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64971: (0.340136%)&lt;BR/&gt; 64970: (0.340136%)&lt;BR/&gt; 64915: (0.340136%)&lt;BR/&gt; 64892: (0.340136%)&gt;];
}
1730--2416[label="1;31pkt 31fpkt"];
1859--2416[label="0.945455;52pkt 52fpkt"];
1983--2416[label="0.0655738;4pkt 4fpkt"];
1983--2912[label="0.114754;7pkt 7fpkt"];
1983--2919[label="0.0491803;3pkt 3fpkt"];
1983--2925[label="0.114754;7pkt 7fpkt"];
1983--2931[label="0.0491803;3pkt 3fpkt"];
1983--2933[label="0.114754;7pkt 7fpkt"];
1983--2935[label="0.0491803;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.119.47" src_ip="210.5.168.21" src_port="80"/>
      <filter dst_ip="130.54.26.141" src_ip="220.87.97.5" src_port="80"/>
      <filter dst_ip="130.54.26.141" src_ip="76.103.131.210" src_port="80"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
787[label="148.176.224.52;s;256pkt 256fpkt", shape=diamond, color=yellow];
2417[label="148.176.224.52;s;162pkt 162fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.224.52:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
787--2417[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.224.52"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
790[label="195.81.116.188;s;245pkt 245fpkt", shape=diamond, color=yellow];
1909[label="75.188.240.146;d;3pkt 3fpkt", shape=diamond, color=yellow];
2132[label="218.129.17.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
3936[label="195.81.116.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.116.188:80, 75.28.153.226:*}[26.1044%]&lt;BR/&gt;{195.81.116.188:53, *:*}[24.0964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.9762%)&lt;BR/&gt; 53: (19.6429%)&lt;BR/&gt; 4753: (6.94444%)&lt;BR/&gt; 0: (5.95238%)&lt;BR/&gt; 33701: (0.396825%)&gt;];
}
790--1020[label="0.0142857;1pkt 1fpkt"];
790--1479[label="0.0178571;1pkt 1fpkt"];
790--1767[label="0.0117647;1pkt 1fpkt"];
790--1909[label="0.333333;1pkt 1fpkt"];
790--1916[label="0.0104167;1pkt 1fpkt"];
790--1956[label="0.0117647;1pkt 1fpkt"];
790--1975[label="0.984848;65pkt 65fpkt"];
790--2132[label="1;1pkt 1fpkt"];
790--2418[label="0.0222222;1pkt 1fpkt"];
790--2906[label="0.0489796;12pkt 12fpkt"];
790--2911[label="0.0122449;3pkt 3fpkt"];
790--2912[label="0.0408163;10pkt 10fpkt"];
790--2918[label="0.00408163;1pkt 1fpkt"];
790--2919[label="0.0734694;18pkt 18fpkt"];
790--2924[label="0.0122449;3pkt 3fpkt"];
790--2925[label="0.0408163;10pkt 10fpkt"];
790--2930[label="0.00408163;1pkt 1fpkt"];
790--2931[label="0.0734694;18pkt 18fpkt"];
790--2932[label="0.0122449;3pkt 3fpkt"];
790--2933[label="0.0408163;10pkt 10fpkt"];
790--2934[label="0.00408163;1pkt 1fpkt"];
790--2935[label="0.0734694;18pkt 18fpkt"];
790--3936[label="0.333333;1pkt 1fpkt"];
1909--2023[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.116.188" src_port="53"/>
      <filter dst_ip="75.28.153.226" src_ip="195.81.116.188" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86091,1.7829,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
61[label="194.50.190.21s;1pkt 1fpkt", shape=rectangle, color=red];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.234.21:20986, 195.81.123.84:39286}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39286: (50%)&lt;BR/&gt; 20986: (50%)&gt;];
}
61--819[label="1;1pkt 1fpkt"];
61--1040[label="1;1pkt 1fpkt"];
61--2421[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.123.84" dst_port="39286" src_ip="214.216.234.21" src_port="20986"/>
    </slice>
    <from sec="1109826777" usec="0"/>
    <to sec="1109826788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1049[label="212.173.81.146;s;988pkt 988fpkt", shape=diamond, color=yellow];
2424[label="212.173.81.146;s;581pkt 581fpkt", shape=hexagon, color=black];
3746[label="212.173.81.146;1354pkt 1354fpkt", shape=pentagon, color=darkviolet];
4663[label="212.173.81.146;1355pkt 1355fpkt", shape=invtriangle, color=brown];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.173.81.146:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24246: (0.0935016%)&lt;BR/&gt; 21860: (0.0935016%)&lt;BR/&gt; 50359: (0.0818139%)&lt;BR/&gt; 43657: (0.0818139%)&gt;];
}
1049--2424[label="1;581pkt 581fpkt"];
1049--2912[label="0.0678138;67pkt 67fpkt"];
1049--2919[label="0.0678138;67pkt 67fpkt"];
1049--2925[label="0.0678138;67pkt 67fpkt"];
1049--2931[label="0.0678138;67pkt 67fpkt"];
1049--2933[label="0.0678138;67pkt 67fpkt"];
1049--2935[label="0.0678138;67pkt 67fpkt"];
1049--3746[label="0.998988;987pkt 987fpkt"];
1049--4663[label="1;988pkt 988fpkt"];
2424--2912[label="0.115318;67pkt 67fpkt"];
2424--2919[label="0.115318;67pkt 67fpkt"];
2424--2925[label="0.115318;67pkt 67fpkt"];
2424--2931[label="0.115318;67pkt 67fpkt"];
2424--2933[label="0.115318;67pkt 67fpkt"];
2424--2935[label="0.115318;67pkt 67fpkt"];
2424--3746[label="0.998279;580pkt 580fpkt"];
2424--4663[label="1;581pkt 581fpkt"];
3746--4663[label="1;1354pkt 1354fpkt"];
</description>
    <slice>
      <filter src_ip="212.173.81.146" src_port="80"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1056[label="169.28.243.43;s;121pkt 121fpkt", shape=diamond, color=yellow];
2428[label="169.28.243.43;s;67pkt 67fpkt", shape=hexagon, color=black];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.243.43:*, 64.4.147.62:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3032: (0.531915%)&lt;BR/&gt; 3030: (0.531915%)&lt;BR/&gt; 3029: (0.531915%)&lt;BR/&gt; 3028: (0.531915%)&gt;];
}
1056--2428[label="1;67pkt 67fpkt"];
1056--2890[label="0.0247934;3pkt 3fpkt"];
2428--2890[label="0.0447761;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="64.4.147.62" dst_port="80" src_ip="169.28.243.43"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1065[label="20.90.90.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.90.90.90:9678, 130.54.26.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9678: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1065--2262[label="1;1pkt 1fpkt"];
1065--2432[label="1;1pkt 1fpkt"];
1065--2852[label="1;1pkt 1fpkt"];
1065--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="20.90.90.90" src_port="9678"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
623[label="214.122.2.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
624[label="195.81.112.154;d;16pkt 16fpkt", shape=diamond, color=yellow];
2435[label="214.122.2.199;s;1pkt 1fpkt", shape=hexagon, color=black];
3992[label="214.122.2.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 195.81.112.154:*}[41.1765%]&lt;BR/&gt;{151.146.193.164:*, 195.81.112.154:33450}[29.4118%]&lt;BR/&gt;{151.146.193.179:*, 195.81.112.154:33446}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 33450: (12.5%)&lt;BR/&gt; 33446: (12.5%)&lt;BR/&gt; 59153: (7.5%)&lt;BR/&gt; 58772: (5%)&gt;];
}
623--624[label="1;1pkt 1fpkt"];
623--2435[label="1;1pkt 1fpkt"];
624--1068[label="0.0625;1pkt 1fpkt"];
624--2435[label="1;1pkt 1fpkt"];
624--3992[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.112.154" src_port="25"/>
      <filter dst_ip="195.81.112.154" dst_port="33446" src_ip="151.146.193.179"/>
      <filter dst_ip="195.81.112.154" dst_port="33450" src_ip="151.146.193.164"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01447,1.67721,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
736[label="175.150.165.72;s;747pkt 747fpkt", shape=diamond, color=yellow];
2394[label="175.150.165.72;s;476pkt 476fpkt", shape=hexagon, color=black];
4472[label="175.150.165.72;1121pkt 1121fpkt", shape=invtriangle, color=brown];
5004[label="175.150.165.72;1120pkt 1120fpkt", shape=invhouse, color=bisque];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.165.72:53, *:*}[53.5236%]&lt;BR/&gt;{175.150.165.72:1032, *:53}[46.3872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.858%)&lt;BR/&gt; 1032: (24.668%)&lt;BR/&gt; 33701: (0.851617%)&lt;BR/&gt; 32768: (0.750577%)&lt;BR/&gt; 32769: (0.44746%)&gt;];
}
736--1020[label="0.0142857;1pkt 1fpkt"];
736--1054[label="0.025641;1pkt 1fpkt"];
736--1067[label="0.0185185;1pkt 1fpkt"];
736--1425[label="0.0169492;1pkt 1fpkt"];
736--1479[label="0.0178571;1pkt 1fpkt"];
736--1767[label="0.0117647;1pkt 1fpkt"];
736--1776[label="0.00970874;1pkt 1fpkt"];
736--1916[label="0.0104167;1pkt 1fpkt"];
736--1956[label="0.0117647;1pkt 1fpkt"];
736--1993[label="0.0125;1pkt 1fpkt"];
736--2081[label="0.012987;1pkt 1fpkt"];
736--2090[label="0.0113636;1pkt 1fpkt"];
736--2095[label="0.0322581;1pkt 1fpkt"];
736--2105[label="0.0117647;1pkt 1fpkt"];
736--2108[label="0.0138889;1pkt 1fpkt"];
736--2139[label="0.0128205;1pkt 1fpkt"];
736--2394[label="1;476pkt 476fpkt"];
736--2436[label="0.02;1pkt 1fpkt"];
736--2906[label="0.103079;77pkt 77fpkt"];
736--2911[label="0.0535475;40pkt 40fpkt"];
736--2918[label="0.115127;86pkt 86fpkt"];
736--2924[label="0.0535475;40pkt 40fpkt"];
736--2930[label="0.115127;86pkt 86fpkt"];
736--2932[label="0.0535475;40pkt 40fpkt"];
736--2934[label="0.115127;86pkt 86fpkt"];
736--3393[label="0.998661;746pkt 746fpkt"];
736--4472[label="1;747pkt 747fpkt"];
736--5004[label="0.998661;746pkt 746fpkt"];
2394--2436[label="0.02;1pkt 1fpkt"];
2394--2906[label="0.161765;77pkt 77fpkt"];
2394--2911[label="0.0840336;40pkt 40fpkt"];
2394--2918[label="0.0756303;36pkt 36fpkt"];
2394--2924[label="0.0840336;40pkt 40fpkt"];
2394--2930[label="0.0756303;36pkt 36fpkt"];
2394--2932[label="0.0840336;40pkt 40fpkt"];
2394--2934[label="0.0756303;36pkt 36fpkt"];
2394--3393[label="1;476pkt 476fpkt"];
2394--4472[label="1;476pkt 476fpkt"];
2394--5004[label="1;476pkt 476fpkt"];
4472--5004[label="1;1120pkt 1120fpkt"];
</description>
    <slice>
      <filter src_ip="175.150.165.72" src_port="53"/>
      <filter dst_port="53" src_ip="175.150.165.72" src_port="1032"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
807[label="148.176.26.61;s;8pkt 8fpkt", shape=diamond, color=yellow];
1074[label="76.210.69.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1941[label="20.108.150.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
2324[label="148.176.26.61;s;5pkt 5fpkt", shape=hexagon, color=black];
2439[label="76.210.69.136;d;1pkt 1fpkt", shape=hexagon, color=black];
3326[label="148.176.26.61;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4438[label="148.176.26.61;7pkt 7fpkt", shape=invtriangle, color=brown];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.26.61:*, 194.236.17.3:5188}[50%]&lt;BR/&gt;{148.176.26.61:*, 197.84.207.166:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5188: (25%)&lt;BR/&gt; 17095: (10%)&lt;BR/&gt; 2144: (10%)&lt;BR/&gt; 2383: (6.66667%)&lt;BR/&gt; 2380: (6.66667%)&gt;];
}
807--1074[label="1;1pkt 1fpkt"];
807--1826[label="0.25;2pkt 2fpkt"];
807--1941[label="1;1pkt 1fpkt"];
807--2324[label="1;5pkt 5fpkt"];
807--2439[label="1;1pkt 1fpkt"];
807--3326[label="1;7pkt 7fpkt"];
807--4438[label="1;7pkt 7fpkt"];
1074--2324[label="1;1pkt 1fpkt"];
1074--2439[label="1;1pkt 1fpkt"];
1074--3326[label="1;1pkt 1fpkt"];
1074--4438[label="1;1pkt 1fpkt"];
1941--2324[label="1;1pkt 1fpkt"];
2324--2439[label="1;1pkt 1fpkt"];
2324--3326[label="0.8;4pkt 4fpkt"];
2324--4438[label="0.8;4pkt 4fpkt"];
2439--3326[label="1;1pkt 1fpkt"];
2439--4438[label="1;1pkt 1fpkt"];
3326--4438[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.207.166" src_ip="148.176.26.61"/>
      <filter dst_ip="194.236.17.3" dst_port="5188" src_ip="148.176.26.61"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
882[label="194.64.145.23;s;6pkt 6fpkt", shape=diamond, color=yellow];
897[label="203.128.101.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
2458[label="203.128.101.169;d;1pkt 1fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.145.23:*, 76.103.142.7:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54513: (18.75%)&lt;BR/&gt; 54525: (6.25%)&lt;BR/&gt; 54507: (6.25%)&lt;BR/&gt; 54506: (6.25%)&gt;];
}
882--897[label="1;1pkt 1fpkt"];
882--2282[label="0.666667;4pkt 4fpkt"];
882--2458[label="1;1pkt 1fpkt"];
882--2865[label="0.666667;4pkt 4fpkt"];
882--3097[label="0.833333;5pkt 5fpkt"];
882--4307[label="1;6pkt 6fpkt"];
897--2458[label="1;1pkt 1fpkt"];
897--4307[label="1;1pkt 1fpkt"];
2458--4307[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="76.103.142.7" dst_port="80" src_ip="194.64.145.23"/>
    </slice>
    <from sec="1109826074" usec="0"/>
    <to sec="1109826220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,001,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
900[label="208.139.126.226;s;2131pkt 2131fpkt", shape=diamond, color=yellow];
2460[label="208.139.126.226;s;2131pkt 2131fpkt", shape=hexagon, color=black];
4119[label="208.139.126.226;2131pkt 2131fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.139.126.226:*, *:1023}[40.3097%]&lt;BR/&gt;{208.139.126.226:*, *:5554}[39.1835%]&lt;BR/&gt;{208.139.126.226:*, *:9898}[20.5068%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (20.1549%)&lt;BR/&gt; 5554: (19.5917%)&lt;BR/&gt; 9898: (10.2534%)&lt;BR/&gt; 2263: (1.17316%)&lt;BR/&gt; 4714: (1.10277%)&gt;];
}
900--2460[label="1;2131pkt 2131fpkt"];
900--4119[label="1;2131pkt 2131fpkt"];
2460--4119[label="1;2131pkt 2131fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="208.139.126.226"/>
      <filter dst_port="5554" src_ip="208.139.126.226"/>
      <filter dst_port="9898" src_ip="208.139.126.226"/>
    </slice>
    <from sec="1109826113" usec="0"/>
    <to sec="1109826174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1127[label="208.128.103.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
2470[label="208.128.103.30;d;1pkt 1fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.53.50:0, 208.128.103.30:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1127--2470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.128.103.30" src_ip="144.224.53.50"/>
    </slice>
    <from sec="1109826170" usec="0"/>
    <to sec="1109826257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,001,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
947[label="213.132.73.245;s;15717pkt 15717fpkt", shape=diamond, color=yellow];
2472[label="213.132.73.245;s;15717pkt 15717fpkt", shape=hexagon, color=black];
4190[label="213.132.73.245;15717pkt 15717fpkt", shape=pentagon, color=darkviolet];
4881[label="213.132.73.245;15716pkt 15716fpkt", shape=invtriangle, color=brown];
5185[label="213.132.73.245;15716pkt 15716fpkt", shape=invhouse, color=bisque];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.132.73.245:*, *:1023}[33.3461%]&lt;BR/&gt;{213.132.73.245:*, *:5554}[33.3333%]&lt;BR/&gt;{213.132.73.245:*, *:9898}[33.3206%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (16.6735%)&lt;BR/&gt; 5554: (16.6658%)&lt;BR/&gt; 9898: (16.6607%)&lt;BR/&gt; 2032: (0.0349948%)&lt;BR/&gt; 3139: (0.0318135%)&gt;];
}
947--2472[label="1;15717pkt 15717fpkt"];
947--4190[label="1;15717pkt 15717fpkt"];
947--4881[label="1;15716pkt 15716fpkt"];
947--5185[label="1;15716pkt 15716fpkt"];
2472--4190[label="1;15717pkt 15717fpkt"];
2472--4881[label="1;15716pkt 15716fpkt"];
2472--5185[label="1;15716pkt 15716fpkt"];
4190--4881[label="1;15716pkt 15716fpkt"];
4190--5185[label="1;15716pkt 15716fpkt"];
4881--5185[label="1;15716pkt 15716fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="213.132.73.245"/>
      <filter dst_port="5554" src_ip="213.132.73.245"/>
      <filter dst_port="9898" src_ip="213.132.73.245"/>
    </slice>
    <from sec="1109826170" usec="0"/>
    <to sec="1109826221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1131[label="209.67.80.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
2476[label="209.67.80.106;d;1pkt 1fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.53.50:0, 209.67.80.106:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1131--2476[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.67.80.106" src_ip="144.224.53.50"/>
    </slice>
    <from sec="1109826182" usec="0"/>
    <to sec="1109826227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
678[label="20.90.35.254;s;5617pkt 5617fpkt", shape=diamond, color=yellow];
2489[label="20.90.35.254;s;2600pkt 2600fpkt", shape=hexagon, color=black];
4217[label="20.90.35.254;6120pkt 6120fpkt", shape=pentagon, color=darkviolet];
4895[label="20.90.35.254;6119pkt 6119fpkt", shape=invtriangle, color=brown];
5191[label="20.90.35.254;6119pkt 6119fpkt", shape=invhouse, color=bisque];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.90.35.254:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14603: (0.0338664%)&lt;BR/&gt; 20546: (0.028222%)&lt;BR/&gt; 27131: (0.0263405%)&lt;BR/&gt; 24456: (0.0263405%)&gt;];
}
678--2489[label="1;2600pkt 2600fpkt"];
678--2912[label="0.0847838;302pkt 302fpkt"];
678--2919[label="0.0814571;322pkt 322fpkt"];
678--2925[label="0.0847838;302pkt 302fpkt"];
678--2931[label="0.0814571;322pkt 322fpkt"];
678--2933[label="0.08476;302pkt 302fpkt"];
678--2935[label="0.0814571;322pkt 322fpkt"];
678--4217[label="1;5617pkt 5617fpkt"];
678--4895[label="1;5617pkt 5617fpkt"];
678--5191[label="1;5617pkt 5617fpkt"];
2489--2912[label="0.116154;302pkt 302fpkt"];
2489--2919[label="0.123846;322pkt 322fpkt"];
2489--2925[label="0.116154;302pkt 302fpkt"];
2489--2931[label="0.123846;322pkt 322fpkt"];
2489--2933[label="0.116154;302pkt 302fpkt"];
2489--2935[label="0.123846;322pkt 322fpkt"];
2489--4217[label="1;2600pkt 2600fpkt"];
2489--4895[label="1;2600pkt 2600fpkt"];
2489--5191[label="1;2600pkt 2600fpkt"];
4217--4895[label="1;6119pkt 6119fpkt"];
4217--5191[label="1;6119pkt 6119fpkt"];
4895--5191[label="1;6119pkt 6119fpkt"];
</description>
    <slice>
      <filter src_ip="20.90.35.254" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01447,1.67721,503,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
682[label="169.28.169.54;d;9pkt 9fpkt", shape=diamond, color=yellow];
684[label="74.55.7.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
2491[label="74.55.7.5;s;1pkt 1fpkt", shape=hexagon, color=black];
2598[label="169.28.169.54;d;9pkt 9fpkt", shape=hexagon, color=black];
4244[label="74.55.7.5;1pkt 1fpkt", shape=invtriangle, color=brown];
4911[label="74.55.7.5;1pkt 1fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.28.169.54:63643}[44.4444%]&lt;BR/&gt;{74.9.130.225:80, 169.28.169.54:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63643: (18.1818%)&lt;BR/&gt; 2930: (13.6364%)&lt;BR/&gt; 2150: (13.6364%)&lt;BR/&gt; 80: (13.6364%)&lt;BR/&gt; 52879: (4.54545%)&gt;];
}
682--684[label="1;1pkt 1fpkt"];
682--1090[label="0.333333;3pkt 3fpkt"];
682--2491[label="1;1pkt 1fpkt"];
682--2598[label="1;9pkt 9fpkt"];
682--2684[label="0.333333;3pkt 3fpkt"];
682--2912[label="0.111111;1pkt 1fpkt"];
682--2919[label="0.222222;2pkt 2fpkt"];
682--2925[label="0.111111;1pkt 1fpkt"];
682--2931[label="0.222222;2pkt 2fpkt"];
682--2933[label="0.111111;1pkt 1fpkt"];
682--2935[label="0.222222;2pkt 2fpkt"];
682--4244[label="1;1pkt 1fpkt"];
682--4911[label="1;1pkt 1fpkt"];
684--2491[label="1;1pkt 1fpkt"];
684--2598[label="1;1pkt 1fpkt"];
684--4244[label="1;1pkt 1fpkt"];
684--4911[label="1;1pkt 1fpkt"];
2491--2598[label="1;1pkt 1fpkt"];
2491--4244[label="1;1pkt 1fpkt"];
2491--4911[label="1;1pkt 1fpkt"];
2598--2684[label="0.333333;3pkt 3fpkt"];
2598--2912[label="0.111111;1pkt 1fpkt"];
2598--2919[label="0.222222;2pkt 2fpkt"];
2598--2925[label="0.111111;1pkt 1fpkt"];
2598--2931[label="0.222222;2pkt 2fpkt"];
2598--2933[label="0.111111;1pkt 1fpkt"];
2598--2935[label="0.222222;2pkt 2fpkt"];
2598--4244[label="1;1pkt 1fpkt"];
2598--4911[label="1;1pkt 1fpkt"];
4244--4911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.169.54" dst_port="63643"/>
      <filter dst_ip="169.28.169.54" src_ip="74.9.130.225" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
462[label="195.7.150.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.7.150.69:20646, 130.54.26.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20646: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
462--2262[label="1;1pkt 1fpkt"];
462--2497[label="1;1pkt 1fpkt"];
462--2852[label="1;1pkt 1fpkt"];
462--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="195.7.150.69" src_port="20646"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
1140[label="76.1.86.134;d;6pkt 6fpkt", shape=diamond, color=yellow];
1411[label="0.13.150.19;d;119pkt 119fpkt", shape=diamond, color=yellow];
2510[label="148.177.197.12;s;220pkt 220fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.197.12:*, 0.13.150.19:80}[53.3937%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8551%)&lt;BR/&gt; 3125: (0.289855%)&lt;BR/&gt; 3123: (0.289855%)&lt;BR/&gt; 3122: (0.289855%)&lt;BR/&gt; 3121: (0.289855%)&gt;];
}
1140--2510[label="1;6pkt 6fpkt"];
1411--2510[label="0.991597;118pkt 118fpkt"];
2510--2890[label="0.00909091;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="0.13.150.19" dst_port="80" src_ip="148.177.197.12"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1222[label="194.76.177.27;s;296pkt 296fpkt", shape=diamond, color=yellow];
2527[label="194.76.177.27;s;181pkt 181fpkt", shape=hexagon, color=black];
3118[label="194.76.177.27;429pkt 429fpkt", shape=pentagon, color=darkviolet];
4319[label="194.76.177.27;428pkt 428fpkt", shape=invtriangle, color=brown];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.76.177.27:53, *:*}[99.7669%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.9595%)&lt;BR/&gt; 32768: (1.64918%)&lt;BR/&gt; 9253: (1.34933%)&lt;BR/&gt; 32769: (1.27436%)&lt;BR/&gt; 33701: (0.637181%)&gt;];
}
1222--2527[label="1;181pkt 181fpkt"];
1222--2906[label="0.0168919;5pkt 5fpkt"];
1222--2911[label="0.135135;40pkt 40fpkt"];
1222--2918[label="0.273649;81pkt 81fpkt"];
1222--2924[label="0.135135;40pkt 40fpkt"];
1222--2930[label="0.273649;81pkt 81fpkt"];
1222--2932[label="0.135135;40pkt 40fpkt"];
1222--2934[label="0.273649;81pkt 81fpkt"];
1222--3118[label="1;296pkt 296fpkt"];
1222--4319[label="0.996622;295pkt 295fpkt"];
2527--2906[label="0.0276243;5pkt 5fpkt"];
2527--2911[label="0.220994;40pkt 40fpkt"];
2527--2918[label="0.447514;81pkt 81fpkt"];
2527--2924[label="0.220994;40pkt 40fpkt"];
2527--2930[label="0.447514;81pkt 81fpkt"];
2527--2932[label="0.220994;40pkt 40fpkt"];
2527--2934[label="0.447514;81pkt 81fpkt"];
2527--3118[label="1;181pkt 181fpkt"];
2527--4319[label="1;181pkt 181fpkt"];
3118--4319[label="1;428pkt 428fpkt"];
</description>
    <slice>
      <filter src_ip="194.76.177.27" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1233[label="148.177.48.179;s;1302pkt 1302fpkt", shape=diamond, color=yellow];
1453[label="74.161.195.164;d;1299pkt 1299fpkt", shape=diamond, color=yellow];
2538[label="148.177.48.179;s;742pkt 742fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.48.179:*, 74.161.195.164:3544}[99.6163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3544: (49.9252%)&lt;BR/&gt; 80: (0.0747831%)&lt;BR/&gt; 63486: (0.0448699%)&lt;BR/&gt; 63484: (0.0448699%)&lt;BR/&gt; 63483: (0.0448699%)&gt;];
}
1233--1453[label="0.99923;1298pkt 1298fpkt"];
1233--2538[label="1;742pkt 742fpkt"];
1453--2538[label="0.998652;741pkt 741fpkt"];
</description>
    <slice>
      <filter dst_ip="74.161.195.164" dst_port="3544" src_ip="148.177.48.179"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
1084[label="148.177.0.96;s;73pkt 73fpkt", shape=diamond, color=yellow];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.0.96:*, *:80}[73.9726%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.9863%)&lt;BR/&gt; 443: (5.47945%)&lt;BR/&gt; 1863: (4.79452%)&lt;BR/&gt; 7001: (2.73973%)&lt;BR/&gt; 2600: (0.684932%)&gt;];
}
1084--1087[label="0.0958904;7pkt 7fpkt"];
1084--1115[label="0.0344828;1pkt 1fpkt"];
1084--1298[label="0.0410959;3pkt 3fpkt"];
1084--1431[label="0.0958904;7pkt 7fpkt"];
1084--2457[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.0.96"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1041[label="195.81.123.84;s;20pkt 20fpkt", shape=diamond, color=yellow];
1042[label="214.216.234.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
2548[label="214.216.234.21;d;1pkt 1fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.123.84:39234, *:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39234: (34.0909%)&lt;BR/&gt; 39286: (6.81818%)&lt;BR/&gt; 20986: (6.81818%)&lt;BR/&gt; 0: (4.54545%)&lt;BR/&gt; 61922: (2.27273%)&gt;];
}
1041--1042[label="1;1pkt 1fpkt"];
1041--2548[label="1;1pkt 1fpkt"];
1042--2548[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.123.84" src_port="39234"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
636[label="210.5.183.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
637[label="148.177.203.123;d;29pkt 29fpkt", shape=diamond, color=yellow];
645[label="210.5.183.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
675[label="210.5.183.168;s;2pkt 2fpkt", shape=diamond, color=yellow];
1014[label="148.177.112.70;d;7pkt 7fpkt", shape=diamond, color=yellow];
1134[label="210.5.187.210;s;6pkt 6fpkt", shape=diamond, color=yellow];
1143[label="210.5.183.72;s;2pkt 2fpkt", shape=diamond, color=yellow];
1169[label="210.5.183.111;s;2pkt 2fpkt", shape=diamond, color=yellow];
1422[label="210.5.183.141;s;2pkt 2fpkt", shape=diamond, color=yellow];
1555[label="210.5.183.36;s;2pkt 2fpkt", shape=diamond, color=yellow];
1565[label="210.5.183.149;s;2pkt 2fpkt", shape=diamond, color=yellow];
1739[label="210.5.183.154;s;2pkt 2fpkt", shape=diamond, color=yellow];
2297[label="210.5.183.172;s;2pkt 2fpkt", shape=hexagon, color=black];
2561[label="148.177.203.123;d;25pkt 25fpkt", shape=hexagon, color=black];
2583[label="210.5.183.72;s;2pkt 2fpkt", shape=hexagon, color=black];
2592[label="210.5.183.111;s;2pkt 2fpkt", shape=hexagon, color=black];
2595[label="210.5.183.141;s;2pkt 2fpkt", shape=hexagon, color=black];
2638[label="210.5.183.36;s;2pkt 2fpkt", shape=hexagon, color=black];
2641[label="210.5.183.149;s;2pkt 2fpkt", shape=hexagon, color=black];
3173[label="210.5.183.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3394[label="210.5.183.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3576[label="210.5.183.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3723[label="210.5.183.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3787[label="210.5.183.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3861[label="210.5.183.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3883[label="210.5.183.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4049[label="210.5.187.210;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4349[label="210.5.183.36;2pkt 2fpkt", shape=invtriangle, color=brown];
4572[label="210.5.183.111;1pkt 1fpkt", shape=invtriangle, color=brown];
4648[label="210.5.183.141;2pkt 2fpkt", shape=invtriangle, color=brown];
4688[label="210.5.183.154;2pkt 2fpkt", shape=invtriangle, color=brown];
4726[label="210.5.183.168;1pkt 1fpkt", shape=invtriangle, color=brown];
4814[label="210.5.187.210;5pkt 5fpkt", shape=invtriangle, color=brown];
5051[label="210.5.183.111;2pkt 2fpkt", shape=invhouse, color=bisque];
5084[label="210.5.183.141;2pkt 2fpkt", shape=invhouse, color=bisque];
5105[label="210.5.183.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.177.203.123:*}[80.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2443: (2.67176%)&lt;BR/&gt; 2378: (2.67176%)&lt;BR/&gt; 2442: (2.29008%)&lt;BR/&gt; 2426: (2.29008%)&gt;];
}
636--637[label="1;2pkt 2fpkt"];
636--2561[label="1;2pkt 2fpkt"];
637--645[label="1;2pkt 2fpkt"];
637--675[label="1;2pkt 2fpkt"];
637--1134[label="0.666667;4pkt 4fpkt"];
637--1143[label="1;2pkt 2fpkt"];
637--1169[label="1;2pkt 2fpkt"];
637--1419[label="1;2pkt 2fpkt"];
637--1422[label="1;2pkt 2fpkt"];
637--1555[label="1;2pkt 2fpkt"];
637--1565[label="1;2pkt 2fpkt"];
637--1739[label="1;2pkt 2fpkt"];
637--1891[label="1;2pkt 2fpkt"];
637--2297[label="1;2pkt 2fpkt"];
637--2561[label="1;25pkt 25fpkt"];
637--2583[label="1;2pkt 2fpkt"];
637--2592[label="1;2pkt 2fpkt"];
637--2595[label="1;2pkt 2fpkt"];
637--2638[label="1;2pkt 2fpkt"];
637--2641[label="1;2pkt 2fpkt"];
637--2912[label="0.0689655;2pkt 2fpkt"];
637--2919[label="0.241379;7pkt 7fpkt"];
637--2925[label="0.0689655;2pkt 2fpkt"];
637--2931[label="0.241379;7pkt 7fpkt"];
637--2933[label="0.0689655;2pkt 2fpkt"];
637--2935[label="0.241379;7pkt 7fpkt"];
637--3173[label="1;2pkt 2fpkt"];
637--3394[label="1;2pkt 2fpkt"];
637--3576[label="1;1pkt 1fpkt"];
637--3723[label="1;1pkt 1fpkt"];
637--3787[label="1;1pkt 1fpkt"];
637--3798[label="1;2pkt 2fpkt"];
637--3861[label="1;1pkt 1fpkt"];
637--3883[label="1;2pkt 2fpkt"];
637--4049[label="0.6;3pkt 3fpkt"];
637--4349[label="1;2pkt 2fpkt"];
637--4572[label="1;1pkt 1fpkt"];
637--4648[label="1;2pkt 2fpkt"];
637--4688[label="1;2pkt 2fpkt"];
637--4694[label="1;1pkt 1fpkt"];
637--4726[label="1;1pkt 1fpkt"];
637--4814[label="0.6;3pkt 3fpkt"];
637--5051[label="1;2pkt 2fpkt"];
637--5084[label="1;2pkt 2fpkt"];
637--5105[label="1;2pkt 2fpkt"];
637--5109[label="1;2pkt 2fpkt"];
645--2297[label="1;2pkt 2fpkt"];
645--2561[label="1;2pkt 2fpkt"];
645--3883[label="1;2pkt 2fpkt"];
675--2561[label="1;2pkt 2fpkt"];
675--2912[label="1;2pkt 2fpkt"];
675--2925[label="1;2pkt 2fpkt"];
675--2933[label="1;2pkt 2fpkt"];
675--3861[label="1;1pkt 1fpkt"];
675--4726[label="1;1pkt 1fpkt"];
1014--1134[label="0.333333;2pkt 2fpkt"];
1014--1983[label="0.142857;1pkt 1fpkt"];
1014--2050[label="1;2pkt 2fpkt"];
1014--4041[label="1;1pkt 1fpkt"];
1014--4049[label="0.4;2pkt 2fpkt"];
1014--4814[label="0.4;2pkt 2fpkt"];
1134--2561[label="0.666667;4pkt 4fpkt"];
1134--4049[label="1;5pkt 5fpkt"];
1134--4814[label="1;5pkt 5fpkt"];
1143--2561[label="1;2pkt 2fpkt"];
1143--2583[label="1;2pkt 2fpkt"];
1143--3394[label="1;2pkt 2fpkt"];
1169--2561[label="1;2pkt 2fpkt"];
1169--2592[label="1;2pkt 2fpkt"];
1169--3576[label="1;1pkt 1fpkt"];
1169--4572[label="1;1pkt 1fpkt"];
1169--5051[label="1;2pkt 2fpkt"];
1422--2561[label="1;2pkt 2fpkt"];
1422--2595[label="1;2pkt 2fpkt"];
1422--2919[label="1;2pkt 2fpkt"];
1422--2931[label="1;2pkt 2fpkt"];
1422--2935[label="1;2pkt 2fpkt"];
1422--3723[label="1;1pkt 1fpkt"];
1422--4648[label="1;2pkt 2fpkt"];
1422--5084[label="1;2pkt 2fpkt"];
1555--2561[label="1;2pkt 2fpkt"];
1555--2638[label="1;2pkt 2fpkt"];
1555--2919[label="1;2pkt 2fpkt"];
1555--2931[label="1;2pkt 2fpkt"];
1555--2935[label="1;2pkt 2fpkt"];
1555--3173[label="1;2pkt 2fpkt"];
1555--4349[label="1;2pkt 2fpkt"];
1565--2561[label="1;2pkt 2fpkt"];
1565--2641[label="1;2pkt 2fpkt"];
1739--3787[label="1;1pkt 1fpkt"];
1739--4688[label="1;2pkt 2fpkt"];
1739--5105[label="1;2pkt 2fpkt"];
2297--2561[label="1;2pkt 2fpkt"];
2297--3883[label="1;2pkt 2fpkt"];
2561--2583[label="1;2pkt 2fpkt"];
2561--2592[label="1;2pkt 2fpkt"];
2561--2595[label="1;2pkt 2fpkt"];
2561--2638[label="1;2pkt 2fpkt"];
2561--2641[label="1;2pkt 2fpkt"];
2561--2912[label="0.08;2pkt 2fpkt"];
2561--2919[label="0.28;7pkt 7fpkt"];
2561--2925[label="0.08;2pkt 2fpkt"];
2561--2931[label="0.28;7pkt 7fpkt"];
2561--2933[label="0.08;2pkt 2fpkt"];
2561--2935[label="0.28;7pkt 7fpkt"];
2561--3173[label="1;2pkt 2fpkt"];
2561--3394[label="1;2pkt 2fpkt"];
2561--3576[label="1;1pkt 1fpkt"];
2561--3723[label="1;1pkt 1fpkt"];
2561--3861[label="1;1pkt 1fpkt"];
2561--3883[label="1;2pkt 2fpkt"];
2561--4049[label="0.6;3pkt 3fpkt"];
2561--4349[label="1;2pkt 2fpkt"];
2561--4572[label="1;1pkt 1fpkt"];
2561--4648[label="1;2pkt 2fpkt"];
2561--4726[label="1;1pkt 1fpkt"];
2561--4814[label="0.6;3pkt 3fpkt"];
2561--5051[label="1;2pkt 2fpkt"];
2561--5084[label="1;2pkt 2fpkt"];
2583--3394[label="1;2pkt 2fpkt"];
2592--3576[label="1;1pkt 1fpkt"];
2592--4572[label="1;1pkt 1fpkt"];
2592--5051[label="1;2pkt 2fpkt"];
2595--2919[label="1;2pkt 2fpkt"];
2595--2931[label="1;2pkt 2fpkt"];
2595--2935[label="1;2pkt 2fpkt"];
2595--3723[label="1;1pkt 1fpkt"];
2595--4648[label="1;2pkt 2fpkt"];
2595--5084[label="1;2pkt 2fpkt"];
2638--2919[label="1;2pkt 2fpkt"];
2638--2931[label="1;2pkt 2fpkt"];
2638--2935[label="1;2pkt 2fpkt"];
2638--3173[label="1;2pkt 2fpkt"];
2638--4349[label="1;2pkt 2fpkt"];
3173--4349[label="1;2pkt 2fpkt"];
3576--4572[label="1;1pkt 1fpkt"];
3576--5051[label="1;1pkt 1fpkt"];
3723--4648[label="1;1pkt 1fpkt"];
3723--5084[label="1;1pkt 1fpkt"];
3787--4688[label="1;1pkt 1fpkt"];
3787--5105[label="1;1pkt 1fpkt"];
3861--4726[label="1;1pkt 1fpkt"];
4049--4814[label="1;5pkt 5fpkt"];
4572--5051[label="1;1pkt 1fpkt"];
4648--5084[label="1;2pkt 2fpkt"];
4688--5105[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.203.123" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
846[label="169.28.1.40;s;17pkt 17fpkt", shape=diamond, color=yellow];
1371[label="150.84.65.11;d;10pkt 10fpkt", shape=diamond, color=yellow];
2562[label="169.28.1.40;s;17pkt 17fpkt", shape=hexagon, color=black];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.1.40:*, 150.84.65.11:443}[58.8235%]&lt;BR/&gt;{169.28.1.40:*, 199.56.67.191:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (34.0909%)&lt;BR/&gt; 80: (15.9091%)&lt;BR/&gt; 3142: (3.40909%)&lt;BR/&gt; 3141: (3.40909%)&lt;BR/&gt; 3138: (3.40909%)&gt;];
}
846--1083[label="0.0588235;1pkt 1fpkt"];
846--1371[label="1;10pkt 10fpkt"];
846--2562[label="1;17pkt 17fpkt"];
846--2890[label="0.0588235;1pkt 1fpkt"];
1371--2562[label="1;10pkt 10fpkt"];
2562--2890[label="0.0588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.84.65.11" dst_port="443" src_ip="169.28.1.40"/>
      <filter dst_ip="199.56.67.191" dst_port="80" src_ip="169.28.1.40"/>
    </slice>
    <from sec="1109826004" usec="0"/>
    <to sec="1109826408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1304[label="148.177.86.38;s;7pkt 7fpkt", shape=diamond, color=yellow];
2563[label="148.177.86.38;s;7pkt 7fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.86.38:*, 220.160.44.115:443}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (42.8571%)&lt;BR/&gt; 4403: (7.14286%)&lt;BR/&gt; 4400: (7.14286%)&lt;BR/&gt; 4399: (7.14286%)&lt;BR/&gt; 4398: (7.14286%)&gt;];
}
1304--2563[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="220.160.44.115" dst_port="443" src_ip="148.177.86.38"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1539[label="197.84.152.42;d;41pkt 41fpkt", shape=diamond, color=yellow];
2700[label="197.84.152.42;d;41pkt 41fpkt", shape=hexagon, color=black];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.149.200:*, 197.84.152.42:80}[68.2927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.2439%)&lt;BR/&gt; 443: (9.7561%)&lt;BR/&gt; 1035: (2.43902%)&lt;BR/&gt; 57079: (1.21951%)&lt;BR/&gt; 33395: (1.21951%)&gt;];
}
1539--1546[label="0.731707;30pkt 30fpkt"];
1539--2700[label="1;41pkt 41fpkt"];
1539--3999[label="0.707317;29pkt 29fpkt"];
1539--4792[label="0.707317;29pkt 29fpkt"];
2700--3999[label="0.707317;29pkt 29fpkt"];
2700--4792[label="0.707317;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.152.42" dst_port="80" src_ip="169.28.149.200"/>
    </slice>
    <from sec="1109826153" usec="0"/>
    <to sec="1109826558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
1357[label="205.121.214.249;d;3pkt 3fpkt", shape=diamond, color=yellow];
2045[label="148.176.226.212;s;47pkt 47fpkt", shape=diamond, color=yellow];
2065[label="22.212.81.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
2570[label="148.177.119.153;s;14pkt 14fpkt", shape=hexagon, color=black];
2816[label="148.176.226.212;s;8pkt 8fpkt", shape=hexagon, color=black];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.226.212:*, 202.154.206.171:80}[39.3443%]&lt;BR/&gt;{148.177.119.153:*, *:*}[22.9508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.6712%)&lt;BR/&gt; 3144: (9.58904%)&lt;BR/&gt; 53: (9.58904%)&lt;BR/&gt; 4505: (2.05479%)&lt;BR/&gt; 4449: (2.05479%)&gt;];
}
1357--2045[label="0.666667;2pkt 2fpkt"];
1357--2570[label="0.333333;1pkt 1fpkt"];
1357--2816[label="0.666667;2pkt 2fpkt"];
2045--2065[label="1;1pkt 1fpkt"];
2045--2081[label="0.0212766;1pkt 1fpkt"];
2045--2139[label="0.0212766;1pkt 1fpkt"];
2045--2816[label="1;8pkt 8fpkt"];
2065--2816[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.119.153"/>
      <filter dst_ip="202.154.206.171" dst_port="80" src_ip="148.176.226.212"/>
    </slice>
    <from sec="1109826022" usec="0"/>
    <to sec="1109826815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
1375[label="213.20.32.201;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.20.32.201:34053, 130.54.26.24:80}[50%]&lt;BR/&gt;{213.20.32.201:34057, 130.54.26.24:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34057: (25%)&lt;BR/&gt; 34053: (25%)&gt;];
}
1375--2262[label="1;2pkt 2fpkt"];
1375--2579[label="1;2pkt 2fpkt"];
1375--2852[label="1;2pkt 2fpkt"];
1375--4004[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="213.20.32.201" src_port="34057"/>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="213.20.32.201" src_port="34053"/>
    </slice>
    <from sec="1109826174" usec="0"/>
    <to sec="1109826815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
581[label="170.227.66.95;d;3pkt 3fpkt", shape=diamond, color=yellow];
582[label="214.216.234.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="214.216.234.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
2584[label="214.216.234.2;s;1pkt 1fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.234.2:20654, 170.227.66.95:1036}[33.3333%]&lt;BR/&gt;{214.216.234.12:20114, 170.227.66.95:1030}[33.3333%]&lt;BR/&gt;{214.216.235.173:80, 170.227.66.95:1035}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20654: (25%)&lt;BR/&gt; 1036: (25%)&lt;BR/&gt; 20114: (16.6667%)&lt;BR/&gt; 1030: (16.6667%)&lt;BR/&gt; 1035: (8.33333%)&gt;];
}
581--582[label="1;1pkt 1fpkt"];
581--1388[label="1;1pkt 1fpkt"];
581--2584[label="1;1pkt 1fpkt"];
1388--2584[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.227.66.95" dst_port="1035" src_ip="214.216.235.173" src_port="80"/>
      <filter dst_ip="170.227.66.95" dst_port="1030" src_ip="214.216.234.12" src_port="20114"/>
      <filter dst_ip="170.227.66.95" dst_port="1036" src_ip="214.216.234.2" src_port="20654"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1406[label="78.169.205.124;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.4.131:80, 78.169.205.124:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1346: (5%)&lt;BR/&gt; 1345: (5%)&lt;BR/&gt; 1344: (5%)&lt;BR/&gt; 1343: (5%)&gt;];
}
1406--1407[label="1;10pkt 10fpkt"];
1406--2591[label="1;10pkt 10fpkt"];
1406--2919[label="0.6;6pkt 6fpkt"];
1406--2931[label="0.6;6pkt 6fpkt"];
1406--2935[label="0.6;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="78.169.205.124" src_ip="148.177.4.131" src_port="80"/>
    </slice>
    <from sec="1109826281" usec="0"/>
    <to sec="1109826377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
834[label="195.81.117.84;s;276pkt 276fpkt", shape=diamond, color=yellow];
1439[label="194.232.154.149;d;340pkt 340fpkt", shape=diamond, color=yellow];
1465[label="169.68.184.14;s;438pkt 438fpkt", shape=diamond, color=yellow];
1598[label="199.48.217.30;d;17pkt 17fpkt", shape=diamond, color=yellow];
1918[label="209.54.24.250;d;239pkt 239fpkt", shape=diamond, color=yellow];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.68.184.14:0, *:0}[33.5375%]&lt;BR/&gt;{*:0, 194.232.154.149:0}[26.0337%]&lt;BR/&gt;{195.81.117.84:0, *:0}[21.1332%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
834--1195[label="0.05;1pkt 1fpkt"];
834--1345[label="0.0526316;1pkt 1fpkt"];
834--1598[label="0.0588235;1pkt 1fpkt"];
834--1714[label="0.00362319;1pkt 1fpkt"];
834--1918[label="0.0041841;1pkt 1fpkt"];
834--1922[label="0.0588235;1pkt 1fpkt"];
834--2080[label="0.0243902;1pkt 1fpkt"];
834--2434[label="1;212pkt 212fpkt"];
1439--1465[label="0.00294118;1pkt 1fpkt"];
1439--1658[label="0.00362319;1pkt 1fpkt"];
1439--1659[label="0.00568182;1pkt 1fpkt"];
1439--2495[label="0.00294118;1pkt 1fpkt"];
1439--2600[label="0.00315457;1pkt 1fpkt"];
1439--2607[label="0.00294118;1pkt 1fpkt"];
1439--2765[label="0.00294118;1pkt 1fpkt"];
1439--2793[label="0.00401606;1pkt 1fpkt"];
1439--3115[label="0.00294118;1pkt 1fpkt"];
1439--3344[label="0.047619;1pkt 1fpkt"];
1439--3508[label="0.00549451;1pkt 1fpkt"];
1439--3869[label="0.00294118;1pkt 1fpkt"];
1439--4006[label="0.0103093;1pkt 1fpkt"];
1439--4223[label="0.00328947;1pkt 1fpkt"];
1439--4317[label="0.00294118;1pkt 1fpkt"];
1439--4731[label="0.00294118;1pkt 1fpkt"];
1439--4795[label="0.0103093;1pkt 1fpkt"];
1439--4947[label="0.00294118;1pkt 1fpkt"];
1465--1918[label="0.0041841;1pkt 1fpkt"];
1465--2080[label="0.0243902;1pkt 1fpkt"];
1465--2511[label="0.0666667;1pkt 1fpkt"];
1465--2607[label="1;342pkt 342fpkt"];
1465--2726[label="0.00343643;1pkt 1fpkt"];
1465--3026[label="1;2pkt 2fpkt"];
1465--4270[label="1;3pkt 3fpkt"];
1598--2434[label="0.0588235;1pkt 1fpkt"];
1598--2969[label="0.0588235;1pkt 1fpkt"];
1598--3078[label="0.0588235;1pkt 1fpkt"];
1598--3279[label="0.2;1pkt 1fpkt"];
1598--3704[label="0.0588235;1pkt 1fpkt"];
1598--3725[label="0.0588235;1pkt 1fpkt"];
1598--3759[label="0.166667;1pkt 1fpkt"];
1598--3793[label="0.25;1pkt 1fpkt"];
1598--4297[label="0.0588235;1pkt 1fpkt"];
1598--4408[label="0.2;1pkt 1fpkt"];
1598--4650[label="0.0588235;1pkt 1fpkt"];
1598--4668[label="0.166667;1pkt 1fpkt"];
1918--2495[label="0.0041841;1pkt 1fpkt"];
1918--2600[label="0.0041841;1pkt 1fpkt"];
1918--2607[label="0.0041841;1pkt 1fpkt"];
1918--2765[label="0.0041841;1pkt 1fpkt"];
1918--2793[label="0.0041841;1pkt 1fpkt"];
1918--3026[label="0.5;1pkt 1fpkt"];
1918--3115[label="0.0041841;1pkt 1fpkt"];
1918--3344[label="0.047619;1pkt 1fpkt"];
1918--3508[label="0.00549451;1pkt 1fpkt"];
1918--3869[label="0.0041841;1pkt 1fpkt"];
1918--4006[label="0.0103093;1pkt 1fpkt"];
1918--4223[label="0.0041841;1pkt 1fpkt"];
1918--4270[label="0.333333;1pkt 1fpkt"];
1918--4317[label="0.0041841;1pkt 1fpkt"];
1918--4731[label="0.0041841;1pkt 1fpkt"];
1918--4795[label="0.0103093;1pkt 1fpkt"];
1918--4947[label="0.0041841;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="169.68.184.14"/>
      <filter src_ip="195.81.117.84"/>
      <filter dst_ip="194.232.154.149"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
539[label="74.9.128.196;s;20pkt 20fpkt", shape=diamond, color=yellow];
728[label="130.54.48.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
2602[label="74.9.128.196;s;16pkt 16fpkt", shape=hexagon, color=black];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.9.128.196:995, 130.54.47.39:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 1075: (4.05405%)&lt;BR/&gt; 47221: (2.7027%)&lt;BR/&gt; 47218: (2.7027%)&lt;BR/&gt; 40417: (2.7027%)&gt;];
}
539--728[label="1;1pkt 1fpkt"];
539--2602[label="1;16pkt 16fpkt"];
728--2602[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.47.39" src_ip="74.9.128.196" src_port="995"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
798[label="208.70.103.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
2611[label="208.70.103.184;s;1pkt 1fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.70.103.184:1444, 130.54.50.191:2557}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2557: (50%)&lt;BR/&gt; 1444: (50%)&gt;];
}
798--2611[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.50.191" dst_port="2557" src_ip="208.70.103.184" src_port="1444"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
3094[label="169.28.32.23;124pkt 124fpkt", shape=pentagon, color=darkviolet];
4305[label="169.28.32.23;125pkt 125fpkt", shape=invtriangle, color=brown];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.32.23:*, 73.173.29.130:8200}[47.2%]&lt;BR/&gt;{169.28.32.23:*, 201.70.237.45:80}[26.4%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (32.7309%)&lt;BR/&gt; 80: (16.8675%)&lt;BR/&gt; 3932: (0.401606%)&lt;BR/&gt; 3931: (0.401606%)&lt;BR/&gt; 3930: (0.401606%)&gt;];
}
3094--4305[label="1;124pkt 124fpkt"];
3094--4942[label="1;124pkt 124fpkt"];
4305--4942[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_ip="73.173.29.130" dst_port="8200" src_ip="169.28.32.23"/>
      <filter dst_ip="201.70.237.45" dst_port="80" src_ip="169.28.32.23"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1499[label="148.177.112.73;s;291pkt 291fpkt", shape=diamond, color=yellow];
1571[label="76.109.19.93;d;243pkt 243fpkt", shape=diamond, color=yellow];
2619[label="148.177.112.73;s;45pkt 45fpkt", shape=hexagon, color=black];
2642[label="76.109.19.93;d;243pkt 243fpkt", shape=hexagon, color=black];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.112.73:*, 76.109.19.93:80}[83.5052%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2701%)&lt;BR/&gt; 7001: (0.486618%)&lt;BR/&gt; 2859: (0.243309%)&lt;BR/&gt; 2858: (0.243309%)&lt;BR/&gt; 2857: (0.243309%)&gt;];
}
1499--1571[label="1;243pkt 243fpkt"];
1499--1615[label="0.0894309;11pkt 11fpkt"];
1499--2155[label="0.328947;25pkt 25fpkt"];
1499--2619[label="1;45pkt 45fpkt"];
1499--2642[label="1;243pkt 243fpkt"];
1499--2890[label="0.0343643;10pkt 10fpkt"];
1571--2619[label="0.333333;15pkt 15fpkt"];
1571--2642[label="1;243pkt 243fpkt"];
2619--2642[label="0.333333;15pkt 15fpkt"];
2619--2890[label="0.222222;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="76.109.19.93" dst_port="80" src_ip="148.177.112.73"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
1085[label="214.172.208.63;d;102pkt 102fpkt", shape=diamond, color=yellow];
1086[label="169.28.4.92;s;110pkt 110fpkt", shape=diamond, color=yellow];
2444[label="214.172.208.63;d;42pkt 42fpkt", shape=hexagon, color=black];
2622[label="169.28.4.92;s;69pkt 69fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.4.92:*, 214.172.208.63:80}[92.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1138: (0.619195%)&lt;BR/&gt; 1137: (0.619195%)&lt;BR/&gt; 1136: (0.619195%)&lt;BR/&gt; 1135: (0.619195%)&gt;];
}
1085--1086[label="1;102pkt 102fpkt"];
1085--2444[label="1;42pkt 42fpkt"];
1085--2622[label="1;69pkt 69fpkt"];
1085--2890[label="0.0882353;9pkt 9fpkt"];
1086--2444[label="1;42pkt 42fpkt"];
1086--2622[label="1;69pkt 69fpkt"];
1086--2890[label="0.0818182;9pkt 9fpkt"];
2444--2622[label="1;42pkt 42fpkt"];
2444--2890[label="0.214286;9pkt 9fpkt"];
2622--2890[label="0.130435;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="214.172.208.63" dst_port="80" src_ip="169.28.4.92"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
611[label="203.65.52.238;d;75pkt 75fpkt", shape=diamond, color=yellow];
660[label="20.47.204.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
2627[label="20.47.204.15;s;1pkt 1fpkt", shape=hexagon, color=black];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 203.65.52.238:24521}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24521: (38.961%)&lt;BR/&gt; 443: (4.54545%)&lt;BR/&gt; 80: (2.5974%)&lt;BR/&gt; 2051: (1.94805%)&lt;BR/&gt; 135: (1.94805%)&gt;];
}
611--660[label="1;1pkt 1fpkt"];
611--2627[label="1;1pkt 1fpkt"];
611--2891[label="0.0133333;1pkt 1fpkt"];
611--3749[label="0.0133333;1pkt 1fpkt"];
611--4664[label="0.0133333;1pkt 1fpkt"];
611--5091[label="0.0133333;1pkt 1fpkt"];
660--2627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.65.52.238" dst_port="24521"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1104[label="213.122.87.99;d;14pkt 14fpkt", shape=diamond, color=yellow];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.194.9:80, 213.122.87.99:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15283: (3.57143%)&lt;BR/&gt; 15207: (3.57143%)&lt;BR/&gt; 15105: (3.57143%)&lt;BR/&gt; 14899: (3.57143%)&gt;];
}
1104--2632[label="1;14pkt 14fpkt"];
1104--2996[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="213.122.87.99" src_ip="148.177.194.9" src_port="80"/>
    </slice>
    <from sec="1109826049" usec="0"/>
    <to sec="1109826310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1553[label="169.28.27.44;s;16pkt 16fpkt", shape=diamond, color=yellow];
2637[label="169.28.27.44;s;16pkt 16fpkt", shape=hexagon, color=black];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.27.44:*, 214.4.61.90:80}[43.75%]&lt;BR/&gt;{169.28.27.44:*, 73.20.18.170:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1863: (3.125%)&lt;BR/&gt; 1862: (3.125%)&lt;BR/&gt; 1858: (3.125%)&lt;BR/&gt; 1857: (3.125%)&gt;];
}
1553--2637[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="214.4.61.90" dst_port="80" src_ip="169.28.27.44"/>
      <filter dst_ip="73.20.18.170" dst_port="80" src_ip="169.28.27.44"/>
    </slice>
    <from sec="1109826297" usec="0"/>
    <to sec="1109826467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
417[label="73.131.43.242;s;1074pkt 1074fpkt", shape=diamond, color=yellow];
2644[label="73.131.43.242;s;726pkt 726fpkt", shape=hexagon, color=black];
4185[label="73.131.43.242;1167pkt 1167fpkt", shape=pentagon, color=darkviolet];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.131.43.242:*, 195.81.112.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14488: (0.151668%)&lt;BR/&gt; 13014: (0.151668%)&lt;BR/&gt; 12316: (0.151668%)&lt;BR/&gt; 11938: (0.151668%)&lt;BR/&gt; 10721: (0.151668%)&gt;];
}
417--681[label="1;1074pkt 1074fpkt"];
417--2644[label="1;726pkt 726fpkt"];
417--4185[label="0.999069;1073pkt 1073fpkt"];
2644--4185[label="0.998623;725pkt 725fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.112.57" src_ip="73.131.43.242"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
454[label="220.56.52.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
694[label="144.39.6.57;d;2pkt 2fpkt", shape=diamond, color=yellow];
2646[label="220.56.52.195;s;2pkt 2fpkt", shape=hexagon, color=black];
3975[label="220.56.52.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4784[label="220.56.52.195;1pkt 1fpkt", shape=invtriangle, color=brown];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.56.52.195:50265, 144.39.6.57:18843}[50%]&lt;BR/&gt;{220.56.52.195:50267, 144.39.6.57:18843}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18843: (50%)&lt;BR/&gt; 50265: (27.7778%)&lt;BR/&gt; 50267: (22.2222%)&gt;];
}
454--694[label="1;2pkt 2fpkt"];
454--2646[label="1;2pkt 2fpkt"];
454--3975[label="1;2pkt 2fpkt"];
454--4784[label="1;1pkt 1fpkt"];
694--2646[label="1;2pkt 2fpkt"];
694--3975[label="1;2pkt 2fpkt"];
694--4784[label="1;1pkt 1fpkt"];
2646--3975[label="1;2pkt 2fpkt"];
2646--4784[label="1;1pkt 1fpkt"];
3975--4784[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.39.6.57" dst_port="18843" src_ip="220.56.52.195" src_port="50267"/>
      <filter dst_ip="144.39.6.57" dst_port="18843" src_ip="220.56.52.195" src_port="50265"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
487[label="195.179.5.57;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.179.5.57:*, 130.54.26.24:20}[50%]&lt;BR/&gt;{195.179.5.57:*, 130.54.26.24:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 20: (25%)&lt;BR/&gt; 1332: (6.25%)&lt;BR/&gt; 1331: (6.25%)&lt;BR/&gt; 1330: (6.25%)&gt;];
}
487--2262[label="1;8pkt 8fpkt"];
487--2648[label="1;8pkt 8fpkt"];
487--2852[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="21" src_ip="195.179.5.57"/>
      <filter dst_ip="130.54.26.24" dst_port="20" src_ip="195.179.5.57"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1237[label="218.236.204.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
1238[label="148.176.197.154;s;25pkt 25fpkt", shape=diamond, color=yellow];
1632[label="214.182.130.230;d;51pkt 51fpkt", shape=diamond, color=yellow];
2541[label="148.176.197.154;s;19pkt 19fpkt", shape=hexagon, color=black];
2663[label="218.236.204.212;d;1pkt 1fpkt", shape=hexagon, color=black];
3788[label="148.176.197.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4689[label="148.176.197.154;1pkt 1fpkt", shape=invtriangle, color=brown];
5106[label="148.176.197.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.182.130.230:5050}[60.5263%]&lt;BR/&gt;{148.176.197.154:*, *:*}[34.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (23.7624%)&lt;BR/&gt; 80: (10.396%)&lt;BR/&gt; 1457: (3.46535%)&lt;BR/&gt; 554: (3.46535%)&lt;BR/&gt; 123: (1.9802%)&gt;];
}
1237--1238[label="1;1pkt 1fpkt"];
1237--2541[label="1;1pkt 1fpkt"];
1237--2663[label="1;1pkt 1fpkt"];
1237--3788[label="1;1pkt 1fpkt"];
1237--4689[label="1;1pkt 1fpkt"];
1237--5106[label="1;1pkt 1fpkt"];
1238--1632[label="0.04;1pkt 1fpkt"];
1238--2541[label="1;19pkt 19fpkt"];
1238--2663[label="1;1pkt 1fpkt"];
1238--2890[label="0.2;5pkt 5fpkt"];
1238--3788[label="1;1pkt 1fpkt"];
1238--4689[label="1;1pkt 1fpkt"];
1238--5106[label="0.5;1pkt 1fpkt"];
1632--2541[label="0.0526316;1pkt 1fpkt"];
1632--3083[label="0.0526316;1pkt 1fpkt"];
2541--2663[label="1;1pkt 1fpkt"];
2541--2890[label="0.263158;5pkt 5fpkt"];
2541--3788[label="1;1pkt 1fpkt"];
2541--4689[label="1;1pkt 1fpkt"];
2541--5106[label="0.5;1pkt 1fpkt"];
2663--3788[label="1;1pkt 1fpkt"];
2663--4689[label="1;1pkt 1fpkt"];
2663--5106[label="1;1pkt 1fpkt"];
3788--4689[label="1;1pkt 1fpkt"];
3788--5106[label="1;1pkt 1fpkt"];
4689--5106[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.197.154"/>
      <filter dst_ip="214.182.130.230" dst_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
1255[label="175.150.197.218;s;495pkt 495fpkt", shape=diamond, color=yellow];
2668[label="175.150.197.218;s;344pkt 344fpkt", shape=hexagon, color=black];
4086[label="175.150.197.218;545pkt 545fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.197.218:*, *:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2251: (0.144509%)&lt;BR/&gt; 2250: (0.144509%)&lt;BR/&gt; 2249: (0.144509%)&lt;BR/&gt; 1970: (0.144509%)&gt;];
}
1255--2668[label="1;344pkt 344fpkt"];
1255--4086[label="1;495pkt 495fpkt"];
2668--4086[label="1;344pkt 344fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="175.150.197.218"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
1032[label="148.177.89.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
1613[label="198.40.64.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
2669[label="148.177.89.249;s;1pkt 1fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.89.249:49160, 198.40.64.130:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49160: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1032--1613[label="1;1pkt 1fpkt"];
1032--2669[label="1;1pkt 1fpkt"];
1613--2669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.40.64.130" dst_port="554" src_ip="148.177.89.249" src_port="49160"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
1034[label="194.211.57.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
1236[label="148.177.27.47;d;147pkt 147fpkt", shape=diamond, color=yellow];
2043[label="221.145.119.229;s;76pkt 76fpkt", shape=diamond, color=yellow];
2671[label="194.211.57.16;s;1pkt 1fpkt", shape=hexagon, color=black];
3935[label="213.12.2.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4130[label="221.145.119.229;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4850[label="221.145.119.229;108pkt 108fpkt", shape=invtriangle, color=brown];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.145.119.229:16080, 148.177.27.47:*}[42.6136%]&lt;BR/&gt;{*:80, 148.177.27.47:*}[35.7955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16080: (33.6735%)&lt;BR/&gt; 80: (11.7914%)&lt;BR/&gt; 53: (3.1746%)&lt;BR/&gt; 110: (0.793651%)&lt;BR/&gt; 27800: (0.453515%)&gt;];
}
1034--1236[label="1;1pkt 1fpkt"];
1034--2671[label="1;1pkt 1fpkt"];
1236--2043[label="1;76pkt 76fpkt"];
1236--2671[label="1;1pkt 1fpkt"];
1236--2911[label="0.0204082;3pkt 3fpkt"];
1236--2924[label="0.0204082;3pkt 3fpkt"];
1236--2932[label="0.0204082;3pkt 3fpkt"];
1236--3935[label="1;1pkt 1fpkt"];
1236--4130[label="0.728972;78pkt 78fpkt"];
1236--4850[label="0.731481;79pkt 79fpkt"];
2043--4130[label="0.986842;75pkt 75fpkt"];
2043--4850[label="1;76pkt 76fpkt"];
4130--4850[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.27.47" src_port="80"/>
      <filter dst_ip="148.177.27.47" src_ip="221.145.119.229" src_port="16080"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
751[label="198.114.84.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
752[label="148.177.65.225;s;22pkt 22fpkt", shape=diamond, color=yellow];
1625[label="76.25.15.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
2102[label="72.106.35.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
2523[label="148.177.65.225;s;20pkt 20fpkt", shape=hexagon, color=black];
2675[label="76.25.15.187;d;1pkt 1fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.65.225:*, *:80}[45.4545%]&lt;BR/&gt;{148.177.65.225:*, *:1863}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.6522%)&lt;BR/&gt; 6667: (11.9565%)&lt;BR/&gt; 1863: (11.9565%)&lt;BR/&gt; 1265: (4.34783%)&lt;BR/&gt; 49578: (3.26087%)&gt;];
}
751--752[label="1;1pkt 1fpkt"];
751--2523[label="1;1pkt 1fpkt"];
752--1625[label="1;1pkt 1fpkt"];
752--1938[label="0.5;1pkt 1fpkt"];
752--1979[label="0.0454545;1pkt 1fpkt"];
752--2102[label="1;1pkt 1fpkt"];
752--2282[label="0.181818;4pkt 4fpkt"];
752--2334[label="0.136364;3pkt 3fpkt"];
752--2523[label="1;20pkt 20fpkt"];
752--2675[label="1;1pkt 1fpkt"];
752--2865[label="0.181818;4pkt 4fpkt"];
1625--2523[label="1;1pkt 1fpkt"];
1625--2675[label="1;1pkt 1fpkt"];
2102--2523[label="1;1pkt 1fpkt"];
2523--2675[label="1;1pkt 1fpkt"];
2523--2865[label="0.2;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.65.225"/>
      <filter dst_port="1863" src_ip="148.177.65.225"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
1500[label="84.211.230.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.211.230.56:50095, 130.54.26.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50095: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1500--2262[label="1;1pkt 1fpkt"];
1500--2678[label="1;1pkt 1fpkt"];
1500--2852[label="1;1pkt 1fpkt"];
1500--2890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="84.211.230.56" src_port="50095"/>
    </slice>
    <from sec="1109826003" usec="0"/>
    <to sec="1109826826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
1503[label="148.177.221.119;s;27pkt 27fpkt", shape=diamond, color=yellow];
1840[label="161.163.39.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
2680[label="148.177.221.119;s;26pkt 26fpkt", shape=hexagon, color=black];
3617[label="148.177.221.119;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4594[label="148.177.221.119;29pkt 29fpkt", shape=invtriangle, color=brown];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.221.119:25, 74.184.183.146:*}[34.4828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.7679%)&lt;BR/&gt; 1077: (2.23214%)&lt;BR/&gt; 110: (2.23214%)&lt;BR/&gt; 55457: (1.78571%)&lt;BR/&gt; 52752: (1.78571%)&gt;];
}
1503--1840[label="1;1pkt 1fpkt"];
1503--2680[label="1;26pkt 26fpkt"];
1503--3617[label="1;27pkt 27fpkt"];
1503--4594[label="1;27pkt 27fpkt"];
1840--2680[label="1;1pkt 1fpkt"];
1840--3617[label="1;1pkt 1fpkt"];
1840--4594[label="1;1pkt 1fpkt"];
2680--3617[label="1;26pkt 26fpkt"];
2680--4594[label="1;26pkt 26fpkt"];
3617--4594[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="74.184.183.146" src_ip="148.177.221.119" src_port="25"/>
    </slice>
    <from sec="1109826003" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
1306[label="214.172.208.63;s;102pkt 102fpkt", shape=diamond, color=yellow];
1508[label="169.28.4.92;d;110pkt 110fpkt", shape=diamond, color=yellow];
2681[label="214.172.208.63;s;79pkt 79fpkt", shape=hexagon, color=black];
2682[label="169.28.4.92;d;79pkt 79fpkt", shape=hexagon, color=black];
3340[label="214.172.208.63;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.172.208.63:80, 169.28.4.92:*}[92.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1180: (0.530786%)&lt;BR/&gt; 1179: (0.530786%)&lt;BR/&gt; 1178: (0.530786%)&lt;BR/&gt; 1177: (0.530786%)&gt;];
}
1306--1508[label="1;102pkt 102fpkt"];
1306--2681[label="1;79pkt 79fpkt"];
1306--2682[label="1;79pkt 79fpkt"];
1306--2912[label="0.0784314;8pkt 8fpkt"];
1306--2919[label="0.0882353;9pkt 9fpkt"];
1306--2925[label="0.0784314;8pkt 8fpkt"];
1306--2931[label="0.0882353;9pkt 9fpkt"];
1306--2933[label="0.0784314;8pkt 8fpkt"];
1306--2935[label="0.0882353;9pkt 9fpkt"];
1306--3340[label="1;101pkt 101fpkt"];
1508--2681[label="1;79pkt 79fpkt"];
1508--2682[label="1;79pkt 79fpkt"];
1508--2912[label="0.0727273;8pkt 8fpkt"];
1508--2919[label="0.0818182;9pkt 9fpkt"];
1508--2925[label="0.0727273;8pkt 8fpkt"];
1508--2931[label="0.0818182;9pkt 9fpkt"];
1508--2933[label="0.0727273;8pkt 8fpkt"];
1508--2935[label="0.0818182;9pkt 9fpkt"];
1508--3340[label="1;101pkt 101fpkt"];
2681--2682[label="1;79pkt 79fpkt"];
2681--2912[label="0.101266;8pkt 8fpkt"];
2681--2919[label="0.113924;9pkt 9fpkt"];
2681--2925[label="0.101266;8pkt 8fpkt"];
2681--2931[label="0.113924;9pkt 9fpkt"];
2681--2933[label="0.101266;8pkt 8fpkt"];
2681--2935[label="0.113924;9pkt 9fpkt"];
2681--3340[label="0.987342;78pkt 78fpkt"];
2682--2912[label="0.101266;8pkt 8fpkt"];
2682--2919[label="0.113924;9pkt 9fpkt"];
2682--2925[label="0.101266;8pkt 8fpkt"];
2682--2931[label="0.113924;9pkt 9fpkt"];
2682--2933[label="0.101266;8pkt 8fpkt"];
2682--2935[label="0.113924;9pkt 9fpkt"];
2682--3340[label="0.987342;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.4.92" src_ip="214.172.208.63" src_port="80"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842899,1.68456,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
1663[label="148.177.4.130;s;85pkt 85fpkt", shape=diamond, color=yellow];
1895[label="221.87.224.204;d;22pkt 22fpkt", shape=diamond, color=yellow];
2687[label="148.177.4.130;s;73pkt 73fpkt", shape=hexagon, color=black];
4618[label="148.177.4.130;84pkt 84fpkt", shape=invtriangle, color=brown];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.4.130:*, 221.87.224.204:80}[38.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2955%)&lt;BR/&gt; 1863: (1.13636%)&lt;BR/&gt; 63974: (0.757576%)&lt;BR/&gt; 63257: (0.757576%)&lt;BR/&gt; 62445: (0.757576%)&gt;];
}
1663--1895[label="1;22pkt 22fpkt"];
1663--2334[label="0.0117647;1pkt 1fpkt"];
1663--2687[label="1;73pkt 73fpkt"];
1663--2890[label="0.0235294;2pkt 2fpkt"];
1663--3666[label="1;84pkt 84fpkt"];
1663--4618[label="1;84pkt 84fpkt"];
1895--2687[label="0.5;11pkt 11fpkt"];
1895--3666[label="1;22pkt 22fpkt"];
1895--4618[label="1;22pkt 22fpkt"];
2687--2890[label="0.0273973;2pkt 2fpkt"];
2687--3666[label="0.986301;72pkt 72fpkt"];
2687--4618[label="0.986301;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="221.87.224.204" dst_port="80" src_ip="148.177.4.130"/>
    </slice>
    <from sec="1109826011" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
628[label="220.160.44.115;d;54pkt 54fpkt", shape=diamond, color=yellow];
1329[label="144.39.52.81;s;56pkt 56fpkt", shape=diamond, color=yellow];
2691[label="144.39.52.81;s;56pkt 56fpkt", shape=hexagon, color=black];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.52.81:*, 220.160.44.115:443}[96.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.7952%)&lt;BR/&gt; 44465: (0.903614%)&lt;BR/&gt; 44464: (0.903614%)&lt;BR/&gt; 44463: (0.903614%)&lt;BR/&gt; 44462: (0.903614%)&gt;];
}
628--1329[label="1;54pkt 54fpkt"];
628--2691[label="1;54pkt 54fpkt"];
1329--2691[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="220.160.44.115" dst_port="443" src_ip="144.39.52.81"/>
    </slice>
    <from sec="1109826017" usec="0"/>
    <to sec="1109826713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
616[label="75.193.13.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
2734[label="75.193.13.58;d;1pkt 1fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.53.50:0, 75.193.13.58:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
616--2734[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.193.13.58" src_ip="144.224.53.50"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
1804[label="175.150.237.128;s;199pkt 199fpkt", shape=diamond, color=yellow];
2740[label="175.150.237.128;s;178pkt 178fpkt", shape=hexagon, color=black];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.237.128:*, *:443}[83.9196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (42.0424%)&lt;BR/&gt; 6663: (7.95756%)&lt;BR/&gt; 2288: (0.530504%)&lt;BR/&gt; 1765: (0.530504%)&lt;BR/&gt; 1287: (0.530504%)&gt;];
}
1804--2740[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="175.150.237.128"/>
    </slice>
    <from sec="1109826004" usec="0"/>
    <to sec="1109826738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
1511[label="195.81.113.230;s;107pkt 107fpkt", shape=diamond, color=yellow];
1672[label="73.227.5.251;d;63pkt 63fpkt", shape=diamond, color=yellow];
2741[label="195.81.113.230;s;92pkt 92fpkt", shape=hexagon, color=black];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.113.230:*, 73.227.5.251:80}[33.6449%]&lt;BR/&gt;{195.81.113.230:*, 73.227.5.251:55555}[25.2336%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.9924%)&lt;BR/&gt; 55555: (14.6947%)&lt;BR/&gt; 61295: (2.09924%)&lt;BR/&gt; 61922: (1.71756%)&lt;BR/&gt; 37710: (1.33588%)&gt;];
}
1511--1672[label="1;63pkt 63fpkt"];
1511--2741[label="1;92pkt 92fpkt"];
1511--2890[label="0.00934579;1pkt 1fpkt"];
1672--2741[label="0.936508;59pkt 59fpkt"];
1672--2890[label="0.015873;1pkt 1fpkt"];
2741--2890[label="0.0108696;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="73.227.5.251" dst_port="80" src_ip="195.81.113.230"/>
      <filter dst_ip="73.227.5.251" dst_port="55555" src_ip="195.81.113.230"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
629[label="197.11.213.62;d;280pkt 280fpkt", shape=diamond, color=yellow];
631[label="148.176.250.255;s;165pkt 165fpkt", shape=diamond, color=yellow];
669[label="214.169.218.71;d;72pkt 72fpkt", shape=diamond, color=yellow];
832[label="74.161.252.106;d;701pkt 701fpkt", shape=diamond, color=yellow];
864[label="148.176.202.4;s;152pkt 152fpkt", shape=diamond, color=yellow];
1119[label="148.177.197.137;s;50pkt 50fpkt", shape=diamond, color=yellow];
1486[label="197.84.12.242;d;184pkt 184fpkt", shape=diamond, color=yellow];
1514[label="144.39.47.88;s;52pkt 52fpkt", shape=diamond, color=yellow];
1665[label="148.177.203.176;s;130pkt 130fpkt", shape=diamond, color=yellow];
1947[label="194.64.98.48;s;59pkt 59fpkt", shape=diamond, color=yellow];
1964[label="148.177.244.194;s;95pkt 95fpkt", shape=diamond, color=yellow];
2008[label="74.171.52.174;d;90pkt 90fpkt", shape=diamond, color=yellow];
2100[label="148.176.2.88;s;25pkt 25fpkt", shape=diamond, color=yellow];
2194[label="148.176.247.97;s;74pkt 74fpkt", shape=diamond, color=yellow];
2685[label="144.39.47.88;s;51pkt 51fpkt", shape=hexagon, color=black];
2739[label="197.11.213.62;d;202pkt 202fpkt", shape=hexagon, color=black];
2742[label="148.177.203.176;s;130pkt 130fpkt", shape=hexagon, color=black];
2957[label="148.176.48.3;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2973[label="148.176.233.4;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2983[label="148.176.204.6;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3168[label="148.177.205.35;71pkt 71fpkt", shape=pentagon, color=darkviolet];
3238[label="194.64.98.48;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3288[label="144.39.130.55;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3320[label="148.176.26.60;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3371[label="169.28.86.69;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3403[label="148.177.205.74;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3444[label="144.39.47.88;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3454[label="144.39.1.90;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3492[label="148.177.17.97;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3494[label="148.176.247.97;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3505[label="148.177.203.98;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3511[label="148.177.183.99;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3572[label="144.39.251.110;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3604[label="148.177.203.116;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3618[label="169.28.3.120;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3620[label="148.176.189.120;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3646[label="144.39.1.128;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3669[label="169.28.112.130;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3680[label="148.177.4.133;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3708[label="148.176.144.138;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3750[label="169.28.29.147;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3792[label="144.39.130.155;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3867[label="148.177.203.169;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3893[label="148.177.203.176;145pkt 145fpkt", shape=pentagon, color=darkviolet];
3985[label="148.177.203.197;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4035[label="144.224.66.208;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4067[label="148.177.244.214;65pkt 65fpkt", shape=pentagon, color=darkviolet];
4097[label="195.81.115.221;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4136[label="144.39.194.231;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4224[label="148.176.250.255;166pkt 166fpkt", shape=pentagon, color=darkviolet];
4234[label="148.176.48.3;40pkt 40fpkt", shape=invtriangle, color=brown];
4251[label="148.176.204.6;46pkt 46fpkt", shape=invtriangle, color=brown];
4386[label="194.64.98.48;59pkt 59fpkt", shape=invtriangle, color=brown];
4412[label="144.39.130.55;26pkt 26fpkt", shape=invtriangle, color=brown];
4461[label="169.28.86.69;18pkt 18fpkt", shape=invtriangle, color=brown];
4502[label="144.39.47.88;53pkt 53fpkt", shape=invtriangle, color=brown];
4508[label="144.39.1.90;45pkt 45fpkt", shape=invtriangle, color=brown];
4530[label="148.177.17.97;64pkt 64fpkt", shape=invtriangle, color=brown];
4531[label="148.176.247.97;79pkt 79fpkt", shape=invtriangle, color=brown];
4537[label="148.177.183.99;24pkt 24fpkt", shape=invtriangle, color=brown];
4588[label="148.177.203.116;44pkt 44fpkt", shape=invtriangle, color=brown];
4596[label="148.176.189.120;37pkt 37fpkt", shape=invtriangle, color=brown];
4665[label="169.28.29.147;24pkt 24fpkt", shape=invtriangle, color=brown];
4692[label="144.39.130.155;25pkt 25fpkt", shape=invtriangle, color=brown];
4745[label="148.177.203.176;146pkt 146fpkt", shape=invtriangle, color=brown];
4808[label="144.224.66.208;28pkt 28fpkt", shape=invtriangle, color=brown];
4823[label="148.177.244.214;65pkt 65fpkt", shape=invtriangle, color=brown];
4899[label="148.176.250.255;165pkt 165fpkt", shape=invtriangle, color=brown];
5016[label="144.39.47.88;54pkt 54fpkt", shape=invhouse, color=bisque];
5021[label="144.39.1.90;45pkt 45fpkt", shape=invhouse, color=bisque];
5036[label="148.177.17.97;64pkt 64fpkt", shape=invhouse, color=bisque];
5039[label="148.177.183.99;25pkt 25fpkt", shape=invhouse, color=bisque];
5107[label="144.39.130.155;26pkt 26fpkt", shape=invhouse, color=bisque];
5154[label="144.224.66.208;28pkt 28fpkt", shape=invhouse, color=bisque];
5162[label="148.177.244.214;65pkt 65fpkt", shape=invhouse, color=bisque];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 74.161.252.106:80}[25.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.833%)&lt;BR/&gt; 443: (0.865402%)&lt;BR/&gt; 14104: (0.644449%)&lt;BR/&gt; 1863: (0.368256%)&lt;BR/&gt; 48740: (0.331431%)&gt;];
}
629--631[label="0.0242424;4pkt 4fpkt"];
629--632[label="0.0150754;3pkt 3fpkt"];
629--696[label="0.0464286;13pkt 13fpkt"];
629--699[label="0.00714286;2pkt 2fpkt"];
629--713[label="0.00714286;2pkt 2fpkt"];
629--789[label="0.00357143;1pkt 1fpkt"];
629--794[label="0.00357143;1pkt 1fpkt"];
629--848[label="0.00714286;2pkt 2fpkt"];
629--861[label="0.042735;5pkt 5fpkt"];
629--864[label="0.0394737;6pkt 6fpkt"];
629--1064[label="0.00591716;1pkt 1fpkt"];
629--1119[label="0.04;2pkt 2fpkt"];
629--1202[label="0.00636943;1pkt 1fpkt"];
629--1271[label="0.00617284;1pkt 1fpkt"];
629--1292[label="0.0194175;2pkt 2fpkt"];
629--1381[label="0.0265487;3pkt 3fpkt"];
629--1501[label="0.00714286;2pkt 2fpkt"];
629--1514[label="0.0384615;2pkt 2fpkt"];
629--1665[label="0.0846154;11pkt 11fpkt"];
629--1947[label="0.0338983;2pkt 2fpkt"];
629--1964[label="0.105263;10pkt 10fpkt"];
629--1999[label="0.0185185;2pkt 2fpkt"];
629--2100[label="0.04;1pkt 1fpkt"];
629--2194[label="0.0810811;6pkt 6fpkt"];
629--2307[label="0.00714286;2pkt 2fpkt"];
629--2312[label="0.00714286;2pkt 2fpkt"];
629--2323[label="0.00357143;1pkt 1fpkt"];
629--2333[label="0.0150754;3pkt 3fpkt"];
629--2406[label="0.02;1pkt 1fpkt"];
629--2431[label="0.0105263;1pkt 1fpkt"];
629--2465[label="0.04;2pkt 2fpkt"];
629--2490[label="0.0277778;1pkt 1fpkt"];
629--2504[label="0.00714286;2pkt 2fpkt"];
629--2517[label="0.00990099;1pkt 1fpkt"];
629--2569[label="0.042735;5pkt 5fpkt"];
629--2620[label="0.00714286;2pkt 2fpkt"];
629--2685[label="0.0392157;2pkt 2fpkt"];
629--2693[label="0.0205479;3pkt 3fpkt"];
629--2720[label="0.107143;30pkt 30fpkt"];
629--2727[label="0.00357143;1pkt 1fpkt"];
629--2735[label="0.00357143;1pkt 1fpkt"];
629--2739[label="1;202pkt 202fpkt"];
629--2742[label="0.0846154;11pkt 11fpkt"];
629--2783[label="0.00680272;1pkt 1fpkt"];
629--2864[label="0.00409836;1pkt 1fpkt"];
629--2890[label="0.114286;32pkt 32fpkt"];
629--2957[label="0.102564;4pkt 4fpkt"];
629--2973[label="0.0714286;2pkt 2fpkt"];
629--2983[label="0.0444444;2pkt 2fpkt"];
629--3042[label="0.0126582;1pkt 1fpkt"];
629--3047[label="0.00609756;1pkt 1fpkt"];
629--3168[label="0.028169;2pkt 2fpkt"];
629--3227[label="0.00714286;2pkt 2fpkt"];
629--3234[label="0.00357143;1pkt 1fpkt"];
629--3238[label="0.0344828;2pkt 2fpkt"];
629--3288[label="0.0384615;1pkt 1fpkt"];
629--3320[label="0.133333;2pkt 2fpkt"];
629--3371[label="0.315789;6pkt 6fpkt"];
629--3378[label="0.00357143;1pkt 1fpkt"];
629--3444[label="0.0377358;2pkt 2fpkt"];
629--3454[label="0.0217391;1pkt 1fpkt"];
629--3492[label="0.047619;3pkt 3fpkt"];
629--3494[label="0.0759494;6pkt 6fpkt"];
629--3505[label="0.0886076;7pkt 7fpkt"];
629--3511[label="0.0833333;2pkt 2fpkt"];
629--3572[label="0.0425532;2pkt 2fpkt"];
629--3618[label="0.0909091;2pkt 2fpkt"];
629--3620[label="0.0263158;1pkt 1fpkt"];
629--3646[label="0.0909091;2pkt 2fpkt"];
629--3669[label="0.0465116;2pkt 2fpkt"];
629--3680[label="0.0434783;1pkt 1fpkt"];
629--3708[label="0.0285714;1pkt 1fpkt"];
629--3750[label="0.08;2pkt 2fpkt"];
629--3792[label="0.0769231;2pkt 2fpkt"];
629--3867[label="0.025;3pkt 3fpkt"];
629--3893[label="0.0758621;11pkt 11fpkt"];
629--3985[label="0.0851064;4pkt 4fpkt"];
629--4002[label="0.0214286;6pkt 6fpkt"];
629--4017[label="0.0142857;4pkt 4fpkt"];
629--4035[label="0.0740741;2pkt 2fpkt"];
629--4067[label="0.0923077;6pkt 6fpkt"];
629--4097[label="0.0714286;1pkt 1fpkt"];
629--4136[label="0.269231;7pkt 7fpkt"];
629--4224[label="0.0240964;4pkt 4fpkt"];
629--4234[label="0.1;4pkt 4fpkt"];
629--4251[label="0.0434783;2pkt 2fpkt"];
629--4277[label="0.0126582;1pkt 1fpkt"];
629--4383[label="0.00357143;1pkt 1fpkt"];
629--4386[label="0.0338983;2pkt 2fpkt"];
629--4412[label="0.0384615;1pkt 1fpkt"];
629--4461[label="0.333333;6pkt 6fpkt"];
629--4464[label="0.00357143;1pkt 1fpkt"];
629--4502[label="0.0377358;2pkt 2fpkt"];
629--4508[label="0.0222222;1pkt 1fpkt"];
629--4530[label="0.046875;3pkt 3fpkt"];
629--4531[label="0.0759494;6pkt 6fpkt"];
629--4537[label="0.0833333;2pkt 2fpkt"];
629--4596[label="0.027027;1pkt 1fpkt"];
629--4665[label="0.0833333;2pkt 2fpkt"];
629--4692[label="0.08;2pkt 2fpkt"];
629--4730[label="0.025;3pkt 3fpkt"];
629--4745[label="0.0753425;11pkt 11fpkt"];
629--4793[label="0.0214286;6pkt 6fpkt"];
629--4799[label="0.0142857;4pkt 4fpkt"];
629--4808[label="0.0714286;2pkt 2fpkt"];
629--4823[label="0.0923077;6pkt 6fpkt"];
629--4899[label="0.0242424;4pkt 4fpkt"];
629--4966[label="0.00357143;1pkt 1fpkt"];
629--4999[label="0.00357143;1pkt 1fpkt"];
629--5016[label="0.037037;2pkt 2fpkt"];
629--5021[label="0.0222222;1pkt 1fpkt"];
629--5036[label="0.046875;3pkt 3fpkt"];
629--5039[label="0.08;2pkt 2fpkt"];
629--5107[label="0.0769231;2pkt 2fpkt"];
629--5154[label="0.0714286;2pkt 2fpkt"];
629--5162[label="0.0923077;6pkt 6fpkt"];
631--669[label="1;72pkt 72fpkt"];
631--1269[label="0.0121212;2pkt 2fpkt"];
631--2739[label="0.0242424;4pkt 4fpkt"];
631--2890[label="0.121212;20pkt 20fpkt"];
631--4224[label="1;165pkt 165fpkt"];
631--4899[label="0.993939;164pkt 164fpkt"];
669--4224[label="1;72pkt 72fpkt"];
669--4899[label="1;72pkt 72fpkt"];
832--864[label="0.0197368;3pkt 3fpkt"];
832--1025[label="0.0190114;5pkt 5fpkt"];
832--1119[label="0.38;19pkt 19fpkt"];
832--1325[label="0.0719424;20pkt 20fpkt"];
832--1362[label="0.394231;41pkt 41fpkt"];
832--1381[label="0.646018;73pkt 73fpkt"];
832--1514[label="0.134615;7pkt 7fpkt"];
832--1665[label="0.161538;21pkt 21fpkt"];
832--1690[label="0.265306;26pkt 26fpkt"];
832--1821[label="0.201923;21pkt 21fpkt"];
832--1883[label="0.444444;24pkt 24fpkt"];
832--2035[label="0.256757;19pkt 19fpkt"];
832--2194[label="0.283784;21pkt 21fpkt"];
832--2215[label="0.233333;7pkt 7fpkt"];
832--2312[label="0.00242718;1pkt 1fpkt"];
832--2323[label="0.00520833;2pkt 2fpkt"];
832--2333[label="0.115578;23pkt 23fpkt"];
832--2388[label="0.00285307;2pkt 2fpkt"];
832--2465[label="0.38;19pkt 19fpkt"];
832--2508[label="0.0171184;12pkt 12fpkt"];
832--2685[label="0.137255;7pkt 7fpkt"];
832--2693[label="0.0205479;3pkt 3fpkt"];
832--2720[label="0.0271041;19pkt 19fpkt"];
832--2727[label="0.027972;8pkt 8fpkt"];
832--2742[label="0.161538;21pkt 21fpkt"];
832--2751[label="0.265306;26pkt 26fpkt"];
832--2890[label="0.0199715;14pkt 14fpkt"];
832--2973[label="0.321429;9pkt 9fpkt"];
832--3014[label="0.201923;21pkt 21fpkt"];
832--3168[label="0.183099;13pkt 13fpkt"];
832--3206[label="0.35;7pkt 7fpkt"];
832--3227[label="0.00218818;1pkt 1fpkt"];
832--3234[label="0.00303951;2pkt 2fpkt"];
832--3363[label="0.245283;26pkt 26fpkt"];
832--3371[label="0.368421;7pkt 7fpkt"];
832--3378[label="0.0197531;8pkt 8fpkt"];
832--3424[label="0.642857;9pkt 9fpkt"];
832--3444[label="0.132075;7pkt 7fpkt"];
832--3489[label="0.7;28pkt 28fpkt"];
832--3494[label="0.265823;21pkt 21fpkt"];
832--3511[label="0.416667;10pkt 10fpkt"];
832--3618[label="0.363636;8pkt 8fpkt"];
832--3631[label="0.145833;7pkt 7fpkt"];
832--3737[label="0.175;7pkt 7fpkt"];
832--3750[label="0.4;10pkt 10fpkt"];
832--3773[label="0.181818;4pkt 4fpkt"];
832--3867[label="0.608333;73pkt 73fpkt"];
832--3893[label="0.144828;21pkt 21fpkt"];
832--3985[label="0.234043;11pkt 11fpkt"];
832--4002[label="0.064194;45pkt 45fpkt"];
832--4017[label="0.0399429;28pkt 28fpkt"];
832--4071[label="0.260274;19pkt 19fpkt"];
832--4136[label="0.5;13pkt 13fpkt"];
832--4368[label="0.333333;7pkt 7fpkt"];
832--4383[label="0.00303951;2pkt 2fpkt"];
832--4459[label="0.242991;26pkt 26fpkt"];
832--4461[label="0.388889;7pkt 7fpkt"];
832--4464[label="0.0197531;8pkt 8fpkt"];
832--4502[label="0.132075;7pkt 7fpkt"];
832--4531[label="0.265823;21pkt 21fpkt"];
832--4537[label="0.416667;10pkt 10fpkt"];
832--4665[label="0.416667;10pkt 10fpkt"];
832--4678[label="0.181818;4pkt 4fpkt"];
832--4730[label="0.608333;73pkt 73fpkt"];
832--4745[label="0.143836;21pkt 21fpkt"];
832--4793[label="0.064194;45pkt 45fpkt"];
832--4799[label="0.0399429;28pkt 28fpkt"];
832--4966[label="0.0030349;2pkt 2fpkt"];
832--4999[label="0.0197044;8pkt 8fpkt"];
832--5016[label="0.12963;7pkt 7fpkt"];
832--5039[label="0.4;10pkt 10fpkt"];
864--1009[label="0.0197368;3pkt 3fpkt"];
864--1075[label="0.0131579;2pkt 2fpkt"];
864--1361[label="0.545455;42pkt 42fpkt"];
864--1940[label="0.0333333;3pkt 3fpkt"];
864--1979[label="0.0166667;1pkt 1fpkt"];
864--2082[label="0.0147059;1pkt 1fpkt"];
864--2693[label="1;146pkt 146fpkt"];
864--2739[label="0.0394737;6pkt 6fpkt"];
864--2780[label="0.0333333;3pkt 3fpkt"];
864--2890[label="0.00657895;1pkt 1fpkt"];
1119--1269[label="0.06;3pkt 3fpkt"];
1119--1298[label="0.12;6pkt 6fpkt"];
1119--1667[label="0.04;2pkt 2fpkt"];
1119--1940[label="0.02;1pkt 1fpkt"];
1119--2465[label="1;50pkt 50fpkt"];
1119--2739[label="0.04;2pkt 2fpkt"];
1119--2780[label="0.02;1pkt 1fpkt"];
1486--2890[label="0.0597826;11pkt 11fpkt"];
1486--3403[label="0.909091;40pkt 40fpkt"];
1486--4067[label="0.615385;40pkt 40fpkt"];
1486--4823[label="0.615385;40pkt 40fpkt"];
1486--5162[label="0.615385;40pkt 40fpkt"];
1514--1669[label="0.04;1pkt 1fpkt"];
1514--1819[label="0.0740741;2pkt 2fpkt"];
1514--1826[label="0.0192308;1pkt 1fpkt"];
1514--1832[label="0.0192308;1pkt 1fpkt"];
1514--1961[label="0.0961538;5pkt 5fpkt"];
1514--1979[label="0.0192308;1pkt 1fpkt"];
1514--2082[label="0.0192308;1pkt 1fpkt"];
1514--2110[label="0.0192308;1pkt 1fpkt"];
1514--2118[label="0.0192308;1pkt 1fpkt"];
1514--2334[label="0.0192308;1pkt 1fpkt"];
1514--2685[label="1;51pkt 51fpkt"];
1514--2692[label="0.0666667;1pkt 1fpkt"];
1514--2739[label="0.0384615;2pkt 2fpkt"];
1514--2890[label="0.0769231;4pkt 4fpkt"];
1514--3444[label="0.980769;51pkt 51fpkt"];
1514--4502[label="0.980769;51pkt 51fpkt"];
1514--5016[label="1;52pkt 52fpkt"];
1665--1667[label="0.0803571;9pkt 9fpkt"];
1665--2110[label="0.0377358;4pkt 4fpkt"];
1665--2185[label="0.222222;10pkt 10fpkt"];
1665--2739[label="0.0538462;7pkt 7fpkt"];
1665--2742[label="1;130pkt 130fpkt"];
1665--2890[label="0.0153846;2pkt 2fpkt"];
1665--3893[label="0.992308;129pkt 129fpkt"];
1665--4745[label="1;130pkt 130fpkt"];
1947--2110[label="0.0169492;1pkt 1fpkt"];
1947--2739[label="0.0169492;1pkt 1fpkt"];
1947--2826[label="0.101695;6pkt 6fpkt"];
1947--2890[label="0.0508475;3pkt 3fpkt"];
1947--3238[label="1;58pkt 58fpkt"];
1947--4386[label="1;59pkt 59fpkt"];
1964--2110[label="0.0421053;4pkt 4fpkt"];
1964--2739[label="0.105263;10pkt 10fpkt"];
1964--2780[label="0.0222222;2pkt 2fpkt"];
1964--2826[label="0.0631579;6pkt 6fpkt"];
1964--2890[label="0.178947;17pkt 17fpkt"];
2008--2557[label="0.0126582;1pkt 1fpkt"];
2008--2835[label="0.0111111;1pkt 1fpkt"];
2008--3154[label="0.5;15pkt 15fpkt"];
2008--3604[label="0.136364;6pkt 6fpkt"];
2008--3981[label="0.835616;61pkt 61fpkt"];
2008--4067[label="0.0769231;5pkt 5fpkt"];
2008--4588[label="0.136364;6pkt 6fpkt"];
2008--4785[label="0.835616;61pkt 61fpkt"];
2008--4823[label="0.0769231;5pkt 5fpkt"];
2008--5162[label="0.0769231;5pkt 5fpkt"];
2100--2334[label="0.08;2pkt 2fpkt"];
2100--2739[label="0.04;1pkt 1fpkt"];
2100--2890[label="0.12;3pkt 3fpkt"];
2194--2739[label="0.0135135;1pkt 1fpkt"];
2194--3494[label="1;74pkt 74fpkt"];
2194--4531[label="1;74pkt 74fpkt"];
2685--2692[label="0.0666667;1pkt 1fpkt"];
2685--2739[label="0.0392157;2pkt 2fpkt"];
2685--2890[label="0.0784314;4pkt 4fpkt"];
2685--3444[label="0.980392;50pkt 50fpkt"];
2685--4502[label="0.980392;50pkt 50fpkt"];
2685--5016[label="1;51pkt 51fpkt"];
2739--2742[label="0.0538462;7pkt 7fpkt"];
2739--2783[label="0.00680272;1pkt 1fpkt"];
2739--2864[label="0.0049505;1pkt 1fpkt"];
2739--2890[label="0.158416;32pkt 32fpkt"];
2739--2973[label="0.0714286;2pkt 2fpkt"];
2739--2983[label="0.0444444;2pkt 2fpkt"];
2739--3047[label="0.00609756;1pkt 1fpkt"];
2739--3168[label="0.028169;2pkt 2fpkt"];
2739--3227[label="0.00990099;2pkt 2fpkt"];
2739--3234[label="0.0049505;1pkt 1fpkt"];
2739--3238[label="0.0172414;1pkt 1fpkt"];
2739--3288[label="0.0384615;1pkt 1fpkt"];
2739--3320[label="0.133333;2pkt 2fpkt"];
2739--3371[label="0.315789;6pkt 6fpkt"];
2739--3378[label="0.0049505;1pkt 1fpkt"];
2739--3444[label="0.0377358;2pkt 2fpkt"];
2739--3454[label="0.0217391;1pkt 1fpkt"];
2739--3492[label="0.015873;1pkt 1fpkt"];
2739--3494[label="0.0126582;1pkt 1fpkt"];
2739--3505[label="0.0632911;5pkt 5fpkt"];
2739--3618[label="0.0909091;2pkt 2fpkt"];
2739--3646[label="0.0909091;2pkt 2fpkt"];
2739--3669[label="0.0465116;2pkt 2fpkt"];
2739--3680[label="0.0434783;1pkt 1fpkt"];
2739--3708[label="0.0285714;1pkt 1fpkt"];
2739--3750[label="0.08;2pkt 2fpkt"];
2739--3792[label="0.0769231;2pkt 2fpkt"];
2739--3867[label="0.025;3pkt 3fpkt"];
2739--3893[label="0.0482759;7pkt 7fpkt"];
2739--4035[label="0.0740741;2pkt 2fpkt"];
2739--4067[label="0.0615385;4pkt 4fpkt"];
2739--4136[label="0.269231;7pkt 7fpkt"];
2739--4224[label="0.0240964;4pkt 4fpkt"];
2739--4251[label="0.0434783;2pkt 2fpkt"];
2739--4383[label="0.0049505;1pkt 1fpkt"];
2739--4386[label="0.0169492;1pkt 1fpkt"];
2739--4412[label="0.0384615;1pkt 1fpkt"];
2739--4461[label="0.333333;6pkt 6fpkt"];
2739--4464[label="0.0049505;1pkt 1fpkt"];
2739--4502[label="0.0377358;2pkt 2fpkt"];
2739--4508[label="0.0222222;1pkt 1fpkt"];
2739--4530[label="0.015625;1pkt 1fpkt"];
2739--4531[label="0.0126582;1pkt 1fpkt"];
2739--4665[label="0.0833333;2pkt 2fpkt"];
2739--4692[label="0.08;2pkt 2fpkt"];
2739--4730[label="0.025;3pkt 3fpkt"];
2739--4745[label="0.0479452;7pkt 7fpkt"];
2739--4808[label="0.0714286;2pkt 2fpkt"];
2739--4823[label="0.0615385;4pkt 4fpkt"];
2739--4899[label="0.0242424;4pkt 4fpkt"];
2739--4966[label="0.0049505;1pkt 1fpkt"];
2739--4999[label="0.0049505;1pkt 1fpkt"];
2739--5016[label="0.037037;2pkt 2fpkt"];
2739--5021[label="0.0222222;1pkt 1fpkt"];
2739--5036[label="0.015625;1pkt 1fpkt"];
2739--5107[label="0.0769231;2pkt 2fpkt"];
2739--5154[label="0.0714286;2pkt 2fpkt"];
2739--5162[label="0.0615385;4pkt 4fpkt"];
2742--2890[label="0.0153846;2pkt 2fpkt"];
2742--3893[label="0.992308;129pkt 129fpkt"];
2742--4745[label="1;130pkt 130fpkt"];
2957--4234[label="1;39pkt 39fpkt"];
2983--4251[label="1;45pkt 45fpkt"];
3238--4386[label="1;58pkt 58fpkt"];
3288--4412[label="1;26pkt 26fpkt"];
3371--4461[label="1;18pkt 18fpkt"];
3444--4502[label="1;53pkt 53fpkt"];
3444--5016[label="1;53pkt 53fpkt"];
3454--4508[label="1;45pkt 45fpkt"];
3454--5021[label="1;45pkt 45fpkt"];
3492--4530[label="1;63pkt 63fpkt"];
3492--5036[label="1;63pkt 63fpkt"];
3494--4531[label="1;79pkt 79fpkt"];
3511--4537[label="1;24pkt 24fpkt"];
3511--5039[label="1;24pkt 24fpkt"];
3604--4588[label="1;44pkt 44fpkt"];
3620--4596[label="1;37pkt 37fpkt"];
3750--4665[label="1;24pkt 24fpkt"];
3792--4692[label="1;25pkt 25fpkt"];
3792--5107[label="1;26pkt 26fpkt"];
3867--4730[label="1;120pkt 120fpkt"];
3893--4745[label="1;145pkt 145fpkt"];
4035--4808[label="1;27pkt 27fpkt"];
4035--5154[label="1;27pkt 27fpkt"];
4067--4823[label="1;65pkt 65fpkt"];
4067--5162[label="1;65pkt 65fpkt"];
4224--4899[label="1;165pkt 165fpkt"];
4502--5016[label="1;53pkt 53fpkt"];
4508--5021[label="1;45pkt 45fpkt"];
4530--5036[label="1;64pkt 64fpkt"];
4537--5039[label="1;24pkt 24fpkt"];
4692--5107[label="1;25pkt 25fpkt"];
4808--5154[label="1;28pkt 28fpkt"];
4823--5162[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="74.161.252.106" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818655,1.75166,503,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
1271[label="148.177.203.114;s;162pkt 162fpkt", shape=diamond, color=yellow];
5055[label="148.177.203.114;3pkt 3fpkt", shape=invhouse, color=bisque];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.203.114:*, *:80}[89.0244%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2424%)&lt;BR/&gt; 443: (4.24242%)&lt;BR/&gt; 90: (0.909091%)&lt;BR/&gt; 8080: (0.606061%)&lt;BR/&gt; 1255: (0.606061%)&gt;];
}
1271--1431[label="0.0185185;3pkt 3fpkt"];
1271--1537[label="0.27451;14pkt 14fpkt"];
1271--1779[label="0.0106383;1pkt 1fpkt"];
1271--2739[label="0.00617284;1pkt 1fpkt"];
1271--2783[label="1;147pkt 147fpkt"];
1271--2801[label="0.309524;13pkt 13fpkt"];
1271--2890[label="0.117284;19pkt 19fpkt"];
1271--5055[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.203.114"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973371,1.6031,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
1[label="148.176.200.2s;3pkt 3fpkt", shape=rectangle, color=red];
1543[label="20.139.154.169;d;15pkt 15fpkt", shape=diamond, color=yellow];
1572[label="20.70.237.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
2643[label="20.70.237.227;s;1pkt 1fpkt", shape=hexagon, color=black];
4125[label="20.70.237.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.160.148:*, 20.139.154.169:80}[43.75%]&lt;BR/&gt;{148.176.200.2:*, 20.139.154.169:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.619%)&lt;BR/&gt; 1143: (14.2857%)&lt;BR/&gt; 1144: (4.7619%)&lt;BR/&gt; 0: (4.7619%)&lt;BR/&gt; 26609: (2.38095%)&gt;];
}
1--388[label="0.333333;1pkt 1fpkt"];
1--1364[label="0.666667;2pkt 2fpkt"];
1--1543[label="0.666667;2pkt 2fpkt"];
1--1572[label="1;1pkt 1fpkt"];
1--2262[label="0.333333;1pkt 1fpkt"];
1--2643[label="1;1pkt 1fpkt"];
1--2747[label="0.666667;2pkt 2fpkt"];
1--2852[label="0.333333;1pkt 1fpkt"];
1--4125[label="1;1pkt 1fpkt"];
1543--1578[label="0.2;3pkt 3fpkt"];
1543--2698[label="0.466667;7pkt 7fpkt"];
1543--2716[label="0.2;3pkt 3fpkt"];
1543--2747[label="0.333333;5pkt 5fpkt"];
1572--2262[label="1;1pkt 1fpkt"];
1572--2643[label="1;1pkt 1fpkt"];
1572--2852[label="1;1pkt 1fpkt"];
1572--4125[label="1;1pkt 1fpkt"];
2643--2852[label="1;1pkt 1fpkt"];
2643--4125[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.139.154.169" dst_port="80" src_ip="148.176.160.148"/>
      <filter dst_ip="20.139.154.169" dst_port="80" src_ip="148.176.200.2"/>
    </slice>
    <from sec="1109826238" usec="0"/>
    <to sec="1109826621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801955,1.70721,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
170[label="148.176.42.86s;3pkt 3fpkt", shape=rectangle, color=red];
3584[label="148.177.208.112;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.208.112:*, 74.161.201.119:80}[28.5714%]&lt;BR/&gt;{148.177.208.112:*, 197.84.208.78:80}[21.4286%]&lt;BR/&gt;{148.177.208.112:*, 197.84.152.128:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.625%)&lt;BR/&gt; 1055: (9.375%)&lt;BR/&gt; 443: (9.375%)&lt;BR/&gt; 1056: (6.25%)&lt;BR/&gt; 1062: (3.125%)&gt;];
}
170--1669[label="0.333333;1pkt 1fpkt"];
170--3584[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="74.161.201.119" dst_port="80" src_ip="148.177.208.112"/>
      <filter dst_ip="197.84.152.128" dst_port="80" src_ip="148.177.208.112"/>
      <filter dst_ip="197.84.208.78" dst_port="80" src_ip="148.177.208.112"/>
    </slice>
    <from sec="1109826254" usec="0"/>
    <to sec="1109826831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
1743[label="194.64.146.241;s;11pkt 11fpkt", shape=diamond, color=yellow];
2758[label="194.64.146.241;s;9pkt 9fpkt", shape=hexagon, color=black];
4183[label="194.64.146.241;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.146.241:*, 75.80.27.195:80}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1058: (4.6875%)&lt;BR/&gt; 1057: (4.6875%)&lt;BR/&gt; 1056: (4.6875%)&lt;BR/&gt; 1055: (4.6875%)&gt;];
}
1743--2758[label="1;9pkt 9fpkt"];
1743--4183[label="1;11pkt 11fpkt"];
2758--4183[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="75.80.27.195" dst_port="80" src_ip="194.64.146.241"/>
    </slice>
    <from sec="1109826320" usec="0"/>
    <to sec="1109826685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
954[label="169.28.112.42;s;282pkt 282fpkt", shape=diamond, color=yellow];
2763[label="196.81.199.51;d;282pkt 282fpkt", shape=hexagon, color=black];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.112.42:*, 196.81.199.51:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1853: (0.177305%)&lt;BR/&gt; 1852: (0.177305%)&lt;BR/&gt; 1851: (0.177305%)&lt;BR/&gt; 1850: (0.177305%)&gt;];
}
954--1172[label="1;282pkt 282fpkt"];
954--2763[label="1;282pkt 282fpkt"];
954--2890[label="0.0496454;14pkt 14fpkt"];
2763--2890[label="0.0496454;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="196.81.199.51" dst_port="80" src_ip="169.28.112.42"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
1183[label="80.130.36.53;d;213pkt 213fpkt", shape=diamond, color=yellow];
1184[label="144.224.81.154;s;229pkt 229fpkt", shape=diamond, color=yellow];
2767[label="144.224.81.154;s;214pkt 214fpkt", shape=hexagon, color=black];
3779[label="144.224.81.154;241pkt 241fpkt", shape=pentagon, color=darkviolet];
4682[label="144.224.81.154;241pkt 241fpkt", shape=invtriangle, color=brown];
5103[label="144.224.81.154;241pkt 241fpkt", shape=invhouse, color=bisque];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.81.154:*, 80.130.36.53:80}[93.3884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44606: (0.217549%)&lt;BR/&gt; 44602: (0.217549%)&lt;BR/&gt; 44601: (0.217549%)&lt;BR/&gt; 44597: (0.217549%)&gt;];
}
1183--1184[label="1;213pkt 213fpkt"];
1183--2767[label="0.929577;198pkt 198fpkt"];
1183--2890[label="0.107981;23pkt 23fpkt"];
1183--3779[label="0.995305;212pkt 212fpkt"];
1183--4682[label="0.995305;212pkt 212fpkt"];
1183--5103[label="0.995305;212pkt 212fpkt"];
1184--2767[label="1;214pkt 214fpkt"];
1184--2890[label="0.104803;24pkt 24fpkt"];
1184--3779[label="0.995633;228pkt 228fpkt"];
1184--4682[label="0.995633;228pkt 228fpkt"];
1184--5103[label="0.995633;228pkt 228fpkt"];
2767--2890[label="0.11215;24pkt 24fpkt"];
2767--3779[label="0.995327;213pkt 213fpkt"];
2767--4682[label="0.995327;213pkt 213fpkt"];
2767--5103[label="0.995327;213pkt 213fpkt"];
3779--4682[label="1;241pkt 241fpkt"];
3779--5103[label="1;241pkt 241fpkt"];
4682--5103[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_ip="80.130.36.53" dst_port="80" src_ip="144.224.81.154"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
731[label="210.59.108.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
982[label="194.246.17.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
1853[label="213.106.40.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
2379[label="130.54.198.163;d;21pkt 21fpkt", shape=hexagon, color=black];
2770[label="194.246.17.210;s;1pkt 1fpkt", shape=hexagon, color=black];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.54.198.163:45033}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45033: (44%)&lt;BR/&gt; 3077: (6%)&lt;BR/&gt; 50319: (4%)&lt;BR/&gt; 35731: (4%)&lt;BR/&gt; 10844: (4%)&gt;];
}
731--2379[label="1;1pkt 1fpkt"];
982--2379[label="1;1pkt 1fpkt"];
982--2770[label="1;1pkt 1fpkt"];
1853--2379[label="1;1pkt 1fpkt"];
2379--2380[label="1;1pkt 1fpkt"];
2379--2770[label="1;1pkt 1fpkt"];
2379--3507[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.198.163" dst_port="45033"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
1763[label="195.81.113.21;d;139pkt 139fpkt", shape=diamond, color=yellow];
2775[label="195.81.113.21;d;138pkt 138fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 195.81.113.21:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1763--2775[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.113.21"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
1692[label="75.188.240.153;s;82pkt 82fpkt", shape=diamond, color=yellow];
1929[label="175.150.189.103;d;166pkt 166fpkt", shape=diamond, color=yellow];
4043[label="73.241.186.209;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 175.150.189.103:59044}[48.3607%]&lt;BR/&gt;{75.188.240.153:*, *:80}[33.6066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.7463%)&lt;BR/&gt; 53: (23.694%)&lt;BR/&gt; 59044: (22.0149%)&lt;BR/&gt; 33701: (1.1194%)&lt;BR/&gt; 65384: (0.373134%)&gt;];
}
1692--1929[label="0.0731707;6pkt 6fpkt"];
1692--2078[label="0.025;1pkt 1fpkt"];
1692--2773[label="0.0704225;5pkt 5fpkt"];
1929--1934[label="0.0238095;1pkt 1fpkt"];
1929--2075[label="0.0128205;1pkt 1fpkt"];
1929--2688[label="0.0131579;1pkt 1fpkt"];
1929--2773[label="1;71pkt 71fpkt"];
1929--2778[label="0.0238095;1pkt 1fpkt"];
1929--2911[label="0.0240964;4pkt 4fpkt"];
1929--2918[label="0.0361446;6pkt 6fpkt"];
1929--2924[label="0.0240964;4pkt 4fpkt"];
1929--2930[label="0.0361446;6pkt 6fpkt"];
1929--2932[label="0.0240964;4pkt 4fpkt"];
1929--2934[label="0.0361446;6pkt 6fpkt"];
1929--2965[label="0.0172414;1pkt 1fpkt"];
1929--3289[label="0.0294118;1pkt 1fpkt"];
1929--3312[label="0.025641;1pkt 1fpkt"];
1929--3485[label="0.0126582;1pkt 1fpkt"];
1929--3521[label="0.0125;1pkt 1fpkt"];
1929--3735[label="0.0588235;1pkt 1fpkt"];
1929--3801[label="0.0322581;1pkt 1fpkt"];
1929--3963[label="0.166667;1pkt 1fpkt"];
1929--4043[label="0.9;18pkt 18fpkt"];
1929--4239[label="0.0175439;1pkt 1fpkt"];
1929--4430[label="0.0263158;1pkt 1fpkt"];
1929--4543[label="0.0125;1pkt 1fpkt"];
1929--4657[label="0.0588235;1pkt 1fpkt"];
1929--4697[label="0.03125;1pkt 1fpkt"];
1929--4909[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="75.188.240.153"/>
      <filter dst_ip="175.150.189.103" dst_port="59044" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1791[label="194.64.148.102;s;138pkt 138fpkt", shape=diamond, color=yellow];
2787[label="194.64.148.102;s;127pkt 127fpkt", shape=hexagon, color=black];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.148.102:*, *:25}[98.5507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50087: (0.377358%)&lt;BR/&gt; 50086: (0.377358%)&lt;BR/&gt; 50084: (0.377358%)&lt;BR/&gt; 50083: (0.377358%)&gt;];
}
1791--2787[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="194.64.148.102"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
386[label="194.76.179.98;d;1978pkt 1978fpkt", shape=diamond, color=yellow];
398[label="194.76.179.12;d;307pkt 307fpkt", shape=diamond, color=yellow];
438[label="194.76.176.80;d;404pkt 404fpkt", shape=diamond, color=yellow];
514[label="73.209.219.0;s;363pkt 363fpkt", shape=diamond, color=yellow];
542[label="214.182.129.19;s;2306pkt 2306fpkt", shape=diamond, color=yellow];
600[label="23.120.49.4;s;366pkt 366fpkt", shape=diamond, color=yellow];
767[label="194.76.176.69;d;356pkt 356fpkt", shape=diamond, color=yellow];
825[label="77.90.149.144;s;36pkt 36fpkt", shape=diamond, color=yellow];
961[label="194.76.179.5;d;2873pkt 2873fpkt", shape=diamond, color=yellow];
962[label="194.76.179.99;d;2024pkt 2024fpkt", shape=diamond, color=yellow];
986[label="77.90.167.31;s;136pkt 136fpkt", shape=diamond, color=yellow];
992[label="194.8.93.6;s;110pkt 110fpkt", shape=diamond, color=yellow];
998[label="73.209.208.176;s;78pkt 78fpkt", shape=diamond, color=yellow];
1043[label="194.16.154.234;s;152pkt 152fpkt", shape=diamond, color=yellow];
1070[label="196.70.38.183;s;47pkt 47fpkt", shape=diamond, color=yellow];
1071[label="74.9.130.232;s;86pkt 86fpkt", shape=diamond, color=yellow];
1090[label="74.9.130.225;s;111pkt 111fpkt", shape=diamond, color=yellow];
1180[label="73.58.120.123;s;83pkt 83fpkt", shape=diamond, color=yellow];
1230[label="132.2.110.30;s;46pkt 46fpkt", shape=diamond, color=yellow];
1283[label="20.78.17.29;s;33pkt 33fpkt", shape=diamond, color=yellow];
1290[label="73.209.193.30;s;39pkt 39fpkt", shape=diamond, color=yellow];
1549[label="23.120.37.79;s;3pkt 3fpkt", shape=diamond, color=yellow];
1581[label="222.85.33.70;s;125pkt 125fpkt", shape=diamond, color=yellow];
1614[label="84.220.237.16;s;51pkt 51fpkt", shape=diamond, color=yellow];
1631[label="194.8.93.157;s;59pkt 59fpkt", shape=diamond, color=yellow];
1651[label="73.58.122.100;s;395pkt 395fpkt", shape=diamond, color=yellow];
1685[label="214.166.198.221;s;64pkt 64fpkt", shape=diamond, color=yellow];
1795[label="214.4.61.81;s;25pkt 25fpkt", shape=diamond, color=yellow];
1797[label="77.90.162.5;s;9pkt 9fpkt", shape=diamond, color=yellow];
1839[label="73.209.222.28;s;45pkt 45fpkt", shape=diamond, color=yellow];
1866[label="218.208.35.83;s;26pkt 26fpkt", shape=diamond, color=yellow];
1958[label="194.12.33.21;s;25pkt 25fpkt", shape=diamond, color=yellow];
1977[label="74.9.153.184;s;94pkt 94fpkt", shape=diamond, color=yellow];
1989[label="77.90.149.149;s;15pkt 15fpkt", shape=diamond, color=yellow];
2039[label="196.70.40.229;s;2pkt 2fpkt", shape=diamond, color=yellow];
2076[label="214.182.129.100;s;155pkt 155fpkt", shape=diamond, color=yellow];
2127[label="74.9.153.99;s;80pkt 80fpkt", shape=diamond, color=yellow];
2138[label="214.223.194.74;s;34pkt 34fpkt", shape=diamond, color=yellow];
2175[label="195.122.114.91;s;40pkt 40fpkt", shape=diamond, color=yellow];
2183[label="73.237.7.149;s;34pkt 34fpkt", shape=diamond, color=yellow];
2184[label="73.42.176.73;s;85pkt 85fpkt", shape=diamond, color=yellow];
2186[label="218.208.42.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
2251[label="169.28.129.107;d;108pkt 108fpkt", shape=diamond, color=yellow];
2383[label="194.76.179.99;d;872pkt 872fpkt", shape=hexagon, color=black];
2384[label="175.150.164.15;d;605pkt 605fpkt", shape=hexagon, color=black];
2422[label="194.16.154.234;s;36pkt 36fpkt", shape=hexagon, color=black];
2423[label="77.90.149.144;s;16pkt 16fpkt", shape=hexagon, color=black];
2493[label="73.58.120.123;s;73pkt 73fpkt", shape=hexagon, color=black];
2519[label="77.90.167.31;s;104pkt 104fpkt", shape=hexagon, color=black];
2524[label="73.209.208.176;s;42pkt 42fpkt", shape=hexagon, color=black];
2606[label="23.120.49.4;s;288pkt 288fpkt", shape=hexagon, color=black];
2618[label="20.78.17.29;s;33pkt 33fpkt", shape=hexagon, color=black];
2683[label="73.58.122.100;s;209pkt 209fpkt", shape=hexagon, color=black];
2713[label="194.76.179.98;d;1783pkt 1783fpkt", shape=hexagon, color=black];
2776[label="214.223.200.201;s;525pkt 525fpkt", shape=hexagon, color=black];
2796[label="214.223.205.227;s;47pkt 47fpkt", shape=hexagon, color=black];
2827[label="73.209.208.207;s;40pkt 40fpkt", shape=hexagon, color=black];
2833[label="84.220.237.16;s;51pkt 51fpkt", shape=hexagon, color=black];
2840[label="74.9.153.178;s;73pkt 73fpkt", shape=hexagon, color=black];
2944[label="73.209.219.0;387pkt 387fpkt", shape=pentagon, color=darkviolet];
2952[label="194.204.152.2;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2966[label="194.12.25.4;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2967[label="23.120.49.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2972[label="23.24.193.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3028[label="198.24.227.14;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3044[label="84.220.237.16;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3053[label="214.1.9.18;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3075[label="194.12.33.21;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3108[label="73.209.213.25;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3117[label="214.166.132.27;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3122[label="196.70.37.28;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3125[label="73.209.193.28;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3127[label="20.78.17.29;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3178[label="77.90.161.37;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3198[label="73.213.138.40;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3219[label="214.223.210.43;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3223[label="194.8.33.45;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3224[label="196.70.38.45;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3255[label="74.186.64.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3285[label="196.70.39.55;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3287[label="194.183.118.55;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3303[label="22.9.113.57;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3304[label="214.182.133.57;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3307[label="196.70.36.58;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3333[label="73.58.118.62;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3350[label="73.149.190.65;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3377[label="195.122.101.70;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3409[label="195.122.97.77;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3427[label="218.208.35.83;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3473[label="73.149.190.93;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3476[label="77.90.154.94;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3496[label="194.168.28.98;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3510[label="74.9.153.99;83pkt 83fpkt", shape=pentagon, color=darkviolet];
3518[label="73.58.122.100;400pkt 400fpkt", shape=pentagon, color=darkviolet];
3519[label="214.182.129.100;197pkt 197fpkt", shape=pentagon, color=darkviolet];
3524[label="196.70.37.101;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3539[label="215.39.193.103;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3543[label="214.1.11.104;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3571[label="223.46.167.110;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3615[label="22.132.87.119;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3632[label="73.58.120.123;83pkt 83fpkt", shape=pentagon, color=darkviolet];
3703[label="194.192.55.137;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3707[label="214.182.129.138;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3713[label="194.146.162.139;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3736[label="77.90.149.144;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3752[label="77.90.149.147;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3763[label="73.237.7.149;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3772[label="22.218.29.152;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3824[label="172.192.140.161;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3831[label="194.223.35.163;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3832[label="196.70.36.163;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3842[label="172.192.140.165;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3889[label="194.146.162.174;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3890[label="194.146.162.175;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3918[label="214.223.208.182;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3938[label="195.122.71.189;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3947[label="74.9.128.192;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3978[label="223.33.8.196;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4005[label="194.18.112.201;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4047[label="74.229.74.210;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4057[label="172.192.140.212;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4070[label="214.166.184.215;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4098[label="172.192.140.221;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4118[label="214.223.205.225;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4139[label="74.9.130.232;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4153[label="194.16.154.234;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4166[label="73.9.164.237;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4168[label="214.223.205.237;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4169[label="73.209.208.237;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4210[label="214.166.187.251;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4226[label="73.209.219.0;387pkt 387fpkt", shape=invtriangle, color=brown];
4240[label="194.12.25.4;10pkt 10fpkt", shape=invtriangle, color=brown];
4241[label="23.120.49.4;3pkt 3fpkt", shape=invtriangle, color=brown];
4278[label="84.220.237.16;54pkt 54fpkt", shape=invtriangle, color=brown];
4296[label="194.12.33.21;24pkt 24fpkt", shape=invtriangle, color=brown];
4312[label="73.209.213.25;48pkt 48fpkt", shape=invtriangle, color=brown];
4314[label="23.24.193.26;16pkt 16fpkt", shape=invtriangle, color=brown];
4323[label="20.78.17.29;32pkt 32fpkt", shape=invtriangle, color=brown];
4363[label="73.213.138.40;19pkt 19fpkt", shape=invtriangle, color=brown];
4376[label="214.223.210.43;14pkt 14fpkt", shape=invtriangle, color=brown];
4394[label="74.186.64.51;1pkt 1fpkt", shape=invtriangle, color=brown];
4421[label="23.79.32.57;26pkt 26fpkt", shape=invtriangle, color=brown];
4443[label="73.58.118.62;18pkt 18fpkt", shape=invtriangle, color=brown];
4485[label="214.1.2.79;4pkt 4fpkt", shape=invtriangle, color=brown];
4491[label="218.208.35.83;25pkt 25fpkt", shape=invtriangle, color=brown];
4519[label="77.90.154.94;4pkt 4fpkt", shape=invtriangle, color=brown];
4532[label="194.168.28.98;33pkt 33fpkt", shape=invtriangle, color=brown];
4536[label="74.9.153.99;84pkt 84fpkt", shape=invtriangle, color=brown];
4541[label="73.58.122.100;400pkt 400fpkt", shape=invtriangle, color=brown];
4545[label="196.70.37.101;4pkt 4fpkt", shape=invtriangle, color=brown];
4553[label="215.39.193.103;53pkt 53fpkt", shape=invtriangle, color=brown];
4640[label="194.192.55.137;10pkt 10fpkt", shape=invtriangle, color=brown];
4644[label="194.146.162.139;35pkt 35fpkt", shape=invtriangle, color=brown];
4672[label="73.237.7.149;34pkt 34fpkt", shape=invtriangle, color=brown];
4697[label="73.149.188.157;32pkt 32fpkt", shape=invtriangle, color=brown];
4707[label="172.192.140.161;7pkt 7fpkt", shape=invtriangle, color=brown];
4743[label="194.146.162.174;36pkt 36fpkt", shape=invtriangle, color=brown];
4757[label="214.223.208.182;12pkt 12fpkt", shape=invtriangle, color=brown];
4812[label="74.229.74.210;2pkt 2fpkt", shape=invtriangle, color=brown];
4824[label="214.166.184.215;4pkt 4fpkt", shape=invtriangle, color=brown];
4855[label="74.9.130.232;94pkt 94fpkt", shape=invtriangle, color=brown];
4862[label="194.16.154.234;3pkt 3fpkt", shape=invtriangle, color=brown];
4869[label="73.9.164.237;14pkt 14fpkt", shape=invtriangle, color=brown];
4910[label="23.120.49.4;3pkt 3fpkt", shape=invhouse, color=bisque];
4917[label="214.166.199.9;216pkt 216fpkt", shape=invhouse, color=bisque];
4934[label="194.12.33.21;24pkt 24fpkt", shape=invhouse, color=bisque];
4972[label="74.186.64.51;1pkt 1fpkt", shape=invhouse, color=bisque];
4993[label="73.58.118.62;17pkt 17fpkt", shape=invhouse, color=bisque];
5027[label="77.90.154.94;4pkt 4fpkt", shape=invhouse, color=bisque];
5038[label="74.9.153.99;83pkt 83fpkt", shape=invhouse, color=bisque];
5064[label="73.58.120.123;84pkt 84fpkt", shape=invhouse, color=bisque];
5113[label="172.192.140.161;7pkt 7fpkt", shape=invhouse, color=bisque];
5115[label="194.223.35.163;27pkt 27fpkt", shape=invhouse, color=bisque];
5136[label="214.223.208.182;12pkt 12fpkt", shape=invhouse, color=bisque];
5174[label="74.9.130.232;93pkt 93fpkt", shape=invhouse, color=bisque];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 194.76.179.5:*}[28.3206%]&lt;BR/&gt;{214.182.129.19:80, *:*}[20.5562%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7473%)&lt;BR/&gt; 21: (0.326971%)&lt;BR/&gt; 443: (0.26953%)&lt;BR/&gt; 53: (0.167904%)&lt;BR/&gt; 32768: (0.101626%)&gt;];
}
386--514[label="0.330579;120pkt 120fpkt"];
386--542[label="0.0677452;134pkt 134fpkt"];
386--599[label="0.00190476;1pkt 1fpkt"];
386--600[label="0.333333;122pkt 122fpkt"];
386--824[label="0.691176;47pkt 47fpkt"];
386--825[label="0.666667;24pkt 24fpkt"];
386--986[label="0.308824;42pkt 42fpkt"];
386--992[label="0.463636;51pkt 51fpkt"];
386--998[label="0.346154;27pkt 27fpkt"];
386--1043[label="0.401316;61pkt 61fpkt"];
386--1070[label="0.0212766;1pkt 1fpkt"];
386--1071[label="0.0930233;8pkt 8fpkt"];
386--1090[label="0.036036;4pkt 4fpkt"];
386--1180[label="0.325301;27pkt 27fpkt"];
386--1204[label="0.322222;29pkt 29fpkt"];
386--1230[label="0.0434783;2pkt 2fpkt"];
386--1280[label="0.389671;83pkt 83fpkt"];
386--1283[label="0.545455;18pkt 18fpkt"];
386--1324[label="0.34188;40pkt 40fpkt"];
386--1342[label="0.308176;49pkt 49fpkt"];
386--1531[label="0.0188679;1pkt 1fpkt"];
386--1581[label="0.152;19pkt 19fpkt"];
386--1631[label="0.508475;30pkt 30fpkt"];
386--1761[label="0.325;13pkt 13fpkt"];
386--1797[label="0.555556;5pkt 5fpkt"];
386--1808[label="0.0821918;6pkt 6fpkt"];
386--1839[label="0.422222;19pkt 19fpkt"];
386--1958[label="0.44;11pkt 11fpkt"];
386--1977[label="0.0638298;6pkt 6fpkt"];
386--1989[label="0.0666667;1pkt 1fpkt"];
386--2076[label="0.0645161;10pkt 10fpkt"];
386--2127[label="0.2125;17pkt 17fpkt"];
386--2138[label="0.117647;4pkt 4fpkt"];
386--2175[label="0.525;21pkt 21fpkt"];
386--2183[label="0.588235;20pkt 20fpkt"];
386--2422[label="0.361111;13pkt 13fpkt"];
386--2423[label="0.6875;11pkt 11fpkt"];
386--2493[label="0.369863;27pkt 27fpkt"];
386--2505[label="0.4;74pkt 74fpkt"];
386--2519[label="0.307692;32pkt 32fpkt"];
386--2524[label="0.404762;17pkt 17fpkt"];
386--2606[label="0.361111;104pkt 104fpkt"];
386--2618[label="0.545455;18pkt 18fpkt"];
386--2684[label="0.038835;4pkt 4fpkt"];
386--2713[label="1;1783pkt 1783fpkt"];
386--2776[label="0.00190476;1pkt 1fpkt"];
386--2796[label="0.0212766;1pkt 1fpkt"];
386--2827[label="0.325;13pkt 13fpkt"];
386--2840[label="0.0821918;6pkt 6fpkt"];
386--2907[label="0.000669792;1pkt 1fpkt"];
386--2912[label="0.156724;310pkt 310fpkt"];
386--2919[label="0.211325;418pkt 418fpkt"];
386--2925[label="0.156724;310pkt 310fpkt"];
386--2931[label="0.211325;418pkt 418fpkt"];
386--2933[label="0.156724;310pkt 310fpkt"];
386--2935[label="0.211325;418pkt 418fpkt"];
386--2944[label="0.310078;120pkt 120fpkt"];
386--2966[label="0.4;4pkt 4fpkt"];
386--2967[label="0.333333;1pkt 1fpkt"];
386--3053[label="0.0714286;1pkt 1fpkt"];
386--3075[label="0.458333;11pkt 11fpkt"];
386--3108[label="0.276596;13pkt 13fpkt"];
386--3122[label="0.384615;5pkt 5fpkt"];
386--3127[label="0.5625;18pkt 18fpkt"];
386--3178[label="0.333333;2pkt 2fpkt"];
386--3198[label="0.526316;10pkt 10fpkt"];
386--3219[label="0.714286;10pkt 10fpkt"];
386--3223[label="0.4;6pkt 6fpkt"];
386--3285[label="0.5;3pkt 3fpkt"];
386--3287[label="0.5;14pkt 14fpkt"];
386--3303[label="0.133333;2pkt 2fpkt"];
386--3307[label="0.0833333;1pkt 1fpkt"];
386--3350[label="0.4;6pkt 6fpkt"];
386--3377[label="0.5;2pkt 2fpkt"];
386--3409[label="0.2;4pkt 4fpkt"];
386--3473[label="0.384615;5pkt 5fpkt"];
386--3476[label="0.333333;1pkt 1fpkt"];
386--3501[label="1;1pkt 1fpkt"];
386--3510[label="0.204819;17pkt 17fpkt"];
386--3519[label="0.0456853;9pkt 9fpkt"];
386--3524[label="0.5;2pkt 2fpkt"];
386--3543[label="0.0869565;2pkt 2fpkt"];
386--3571[label="0.272727;3pkt 3fpkt"];
386--3622[label="0.571429;4pkt 4fpkt"];
386--3632[label="0.325301;27pkt 27fpkt"];
386--3703[label="0.3;3pkt 3fpkt"];
386--3707[label="0.225806;7pkt 7fpkt"];
386--3713[label="0.285714;10pkt 10fpkt"];
386--3736[label="0.666667;24pkt 24fpkt"];
386--3752[label="0.5;2pkt 2fpkt"];
386--3763[label="0.588235;20pkt 20fpkt"];
386--3772[label="0.6;3pkt 3fpkt"];
386--3774[label="0.833333;5pkt 5fpkt"];
386--3832[label="0.4;2pkt 2fpkt"];
386--3886[label="1;4pkt 4fpkt"];
386--3889[label="0.305556;11pkt 11fpkt"];
386--3890[label="0.285714;10pkt 10fpkt"];
386--3918[label="0.25;3pkt 3fpkt"];
386--3938[label="0.727273;8pkt 8fpkt"];
386--3947[label="0.833333;10pkt 10fpkt"];
386--4005[label="0.341463;14pkt 14fpkt"];
386--4070[label="1;4pkt 4fpkt"];
386--4118[label="0.0555556;1pkt 1fpkt"];
386--4139[label="0.0851064;8pkt 8fpkt"];
386--4153[label="0.333333;1pkt 1fpkt"];
386--4166[label="0.0714286;1pkt 1fpkt"];
386--4169[label="0.7;7pkt 7fpkt"];
386--4210[label="0.636364;7pkt 7fpkt"];
386--4226[label="0.310078;120pkt 120fpkt"];
386--4240[label="0.4;4pkt 4fpkt"];
386--4241[label="0.333333;1pkt 1fpkt"];
386--4296[label="0.458333;11pkt 11fpkt"];
386--4312[label="0.270833;13pkt 13fpkt"];
386--4323[label="0.5625;18pkt 18fpkt"];
386--4363[label="0.526316;10pkt 10fpkt"];
386--4376[label="0.714286;10pkt 10fpkt"];
386--4485[label="0.5;2pkt 2fpkt"];
386--4519[label="0.25;1pkt 1fpkt"];
386--4536[label="0.202381;17pkt 17fpkt"];
386--4545[label="0.5;2pkt 2fpkt"];
386--4598[label="0.571429;4pkt 4fpkt"];
386--4640[label="0.3;3pkt 3fpkt"];
386--4644[label="0.285714;10pkt 10fpkt"];
386--4672[label="0.588235;20pkt 20fpkt"];
386--4743[label="0.305556;11pkt 11fpkt"];
386--4757[label="0.25;3pkt 3fpkt"];
386--4824[label="1;4pkt 4fpkt"];
386--4855[label="0.0851064;8pkt 8fpkt"];
386--4862[label="0.333333;1pkt 1fpkt"];
386--4869[label="0.0714286;1pkt 1fpkt"];
386--4910[label="0.333333;1pkt 1fpkt"];
386--4917[label="0.384259;83pkt 83fpkt"];
386--4934[label="0.458333;11pkt 11fpkt"];
386--5027[label="0.25;1pkt 1fpkt"];
386--5038[label="0.204819;17pkt 17fpkt"];
386--5064[label="0.321429;27pkt 27fpkt"];
386--5136[label="0.25;3pkt 3fpkt"];
386--5174[label="0.0860215;8pkt 8fpkt"];
398--427[label="0.333333;1pkt 1fpkt"];
398--542[label="0.198697;61pkt 61fpkt"];
398--599[label="0.107492;33pkt 33fpkt"];
398--825[label="0.0277778;1pkt 1fpkt"];
398--986[label="0.00735294;1pkt 1fpkt"];
398--1280[label="0.00469484;1pkt 1fpkt"];
398--1324[label="0.00854701;1pkt 1fpkt"];
398--1342[label="0.00628931;1pkt 1fpkt"];
398--1581[label="0.12;15pkt 15fpkt"];
398--1808[label="0.0136986;1pkt 1fpkt"];
398--1839[label="0.0222222;1pkt 1fpkt"];
398--1934[label="0.0238095;1pkt 1fpkt"];
398--1977[label="0.0106383;1pkt 1fpkt"];
398--1989[label="0.4;6pkt 6fpkt"];
398--2076[label="0.0451613;7pkt 7fpkt"];
398--2519[label="0.00961538;1pkt 1fpkt"];
398--2776[label="0.107492;33pkt 33fpkt"];
398--2778[label="0.0238095;1pkt 1fpkt"];
398--2840[label="0.0136986;1pkt 1fpkt"];
398--2911[label="0.00977199;3pkt 3fpkt"];
398--2912[label="0.0618893;19pkt 19fpkt"];
398--2918[label="0.0260586;8pkt 8fpkt"];
398--2919[label="0.0651466;20pkt 20fpkt"];
398--2924[label="0.00977199;3pkt 3fpkt"];
398--2925[label="0.0618893;19pkt 19fpkt"];
398--2930[label="0.0260586;8pkt 8fpkt"];
398--2931[label="0.0651466;20pkt 20fpkt"];
398--2932[label="0.00977199;3pkt 3fpkt"];
398--2933[label="0.0618893;19pkt 19fpkt"];
398--2934[label="0.0260586;8pkt 8fpkt"];
398--2935[label="0.0651466;20pkt 20fpkt"];
398--3053[label="0.0714286;1pkt 1fpkt"];
398--3117[label="0.272727;3pkt 3fpkt"];
398--3125[label="0.818182;9pkt 9fpkt"];
398--3289[label="0.0294118;1pkt 1fpkt"];
398--3304[label="0.769231;20pkt 20fpkt"];
398--3409[label="0.05;1pkt 1fpkt"];
398--3495[label="0.0434783;1pkt 1fpkt"];
398--3496[label="0.121212;4pkt 4fpkt"];
398--3519[label="0.035533;7pkt 7fpkt"];
398--3543[label="0.652174;15pkt 15fpkt"];
398--3713[label="0.228571;8pkt 8fpkt"];
398--3736[label="0.0277778;1pkt 1fpkt"];
398--3801[label="0.0322581;1pkt 1fpkt"];
398--3889[label="0.194444;7pkt 7fpkt"];
398--3890[label="0.2;7pkt 7fpkt"];
398--4143[label="0.0833333;1pkt 1fpkt"];
398--4206[label="0.333333;1pkt 1fpkt"];
398--4532[label="0.121212;4pkt 4fpkt"];
398--4644[label="0.228571;8pkt 8fpkt"];
398--4697[label="0.03125;1pkt 1fpkt"];
398--4743[label="0.194444;7pkt 7fpkt"];
398--4890[label="0.333333;1pkt 1fpkt"];
398--4917[label="0.00462963;1pkt 1fpkt"];
438--514[label="0.00550964;2pkt 2fpkt"];
438--542[label="0.497525;201pkt 201fpkt"];
438--599[label="0.0371287;15pkt 15fpkt"];
438--986[label="0.00735294;1pkt 1fpkt"];
438--998[label="0.0128205;1pkt 1fpkt"];
438--1070[label="0.978723;46pkt 46fpkt"];
438--1109[label="1;3pkt 3fpkt"];
438--1180[label="0.0120482;1pkt 1fpkt"];
438--1280[label="0.00938967;2pkt 2fpkt"];
438--1290[label="0.974359;38pkt 38fpkt"];
438--1324[label="0.017094;2pkt 2fpkt"];
438--1342[label="0.00628931;1pkt 1fpkt"];
438--1531[label="0.0377358;2pkt 2fpkt"];
438--1549[label="1;3pkt 3fpkt"];
438--1621[label="0.0307692;2pkt 2fpkt"];
438--1761[label="0.05;2pkt 2fpkt"];
438--2039[label="1;2pkt 2fpkt"];
438--2076[label="0.0129032;2pkt 2fpkt"];
438--2138[label="0.0294118;1pkt 1fpkt"];
438--2493[label="0.0136986;1pkt 1fpkt"];
438--2505[label="0.0108108;2pkt 2fpkt"];
438--2524[label="0.0238095;1pkt 1fpkt"];
438--2776[label="0.0371287;15pkt 15fpkt"];
438--2796[label="0.0425532;2pkt 2fpkt"];
438--2827[label="0.05;2pkt 2fpkt"];
438--2912[label="0.0618812;25pkt 25fpkt"];
438--2919[label="0.0866337;35pkt 35fpkt"];
438--2925[label="0.0618812;25pkt 25fpkt"];
438--2931[label="0.0866337;35pkt 35fpkt"];
438--2933[label="0.0618812;25pkt 25fpkt"];
438--2935[label="0.0866337;35pkt 35fpkt"];
438--2944[label="0.00516796;2pkt 2fpkt"];
438--3519[label="0.0101523;2pkt 2fpkt"];
438--3523[label="1;2pkt 2fpkt"];
438--3543[label="0.0434783;1pkt 1fpkt"];
438--3632[label="0.0120482;1pkt 1fpkt"];
438--4118[label="0.0555556;1pkt 1fpkt"];
438--4168[label="0.5;2pkt 2fpkt"];
438--4226[label="0.00516796;2pkt 2fpkt"];
438--4917[label="0.00925926;2pkt 2fpkt"];
438--5064[label="0.0119048;1pkt 1fpkt"];
514--733[label="0.1;2pkt 2fpkt"];
514--767[label="0.0308989;11pkt 11fpkt"];
514--784[label="0.00550964;2pkt 2fpkt"];
514--962[label="0.336088;122pkt 122fpkt"];
514--963[label="0.165289;60pkt 60fpkt"];
514--2383[label="0.168044;61pkt 61fpkt"];
514--2384[label="0.0606061;22pkt 22fpkt"];
514--2416[label="0.00550964;2pkt 2fpkt"];
514--2505[label="1;185pkt 185fpkt"];
514--2516[label="0.1;2pkt 2fpkt"];
514--2713[label="0.311295;113pkt 113fpkt"];
514--2912[label="0.179063;65pkt 65fpkt"];
514--2919[label="0.187328;68pkt 68fpkt"];
514--2925[label="0.179063;65pkt 65fpkt"];
514--2931[label="0.187328;68pkt 68fpkt"];
514--2933[label="0.179063;65pkt 65fpkt"];
514--2935[label="0.187328;68pkt 68fpkt"];
514--2944[label="0.997245;362pkt 362fpkt"];
514--4226[label="0.997245;362pkt 362fpkt"];
542--767[label="0.0898876;32pkt 32fpkt"];
542--784[label="0.0314092;37pkt 37fpkt"];
542--961[label="0.372507;859pkt 859fpkt"];
542--962[label="0.0681818;138pkt 138fpkt"];
542--963[label="0.311801;613pkt 613fpkt"];
542--2378[label="0.0010917;1pkt 1fpkt"];
542--2383[label="0.0665138;58pkt 58fpkt"];
542--2384[label="0.234711;142pkt 142fpkt"];
542--2416[label="0.0304933;34pkt 34fpkt"];
542--2713[label="0.0678632;121pkt 121fpkt"];
542--2912[label="0.0680833;157pkt 157fpkt"];
542--2919[label="0.0941023;217pkt 217fpkt"];
542--2925[label="0.0680833;157pkt 157fpkt"];
542--2931[label="0.0941023;217pkt 217fpkt"];
542--2933[label="0.0680833;157pkt 157fpkt"];
542--2935[label="0.0941023;217pkt 217fpkt"];
600--767[label="0.0505618;18pkt 18fpkt"];
600--784[label="0.0163934;6pkt 6fpkt"];
600--961[label="0.0983607;36pkt 36fpkt"];
600--962[label="0.295082;108pkt 108fpkt"];
600--963[label="0.155738;57pkt 57fpkt"];
600--2383[label="0.161202;59pkt 59fpkt"];
600--2384[label="0.0983607;36pkt 36fpkt"];
600--2416[label="0.0163934;6pkt 6fpkt"];
600--2606[label="1;288pkt 288fpkt"];
600--2713[label="0.327869;120pkt 120fpkt"];
600--2912[label="0.0765027;28pkt 28fpkt"];
600--2919[label="0.295082;108pkt 108fpkt"];
600--2925[label="0.0765027;28pkt 28fpkt"];
600--2931[label="0.295082;108pkt 108fpkt"];
600--2933[label="0.0765027;28pkt 28fpkt"];
600--2935[label="0.295082;108pkt 108fpkt"];
600--2967[label="0.333333;1pkt 1fpkt"];
600--4241[label="0.333333;1pkt 1fpkt"];
600--4910[label="0.333333;1pkt 1fpkt"];
767--986[label="0.0514706;7pkt 7fpkt"];
767--1076[label="0.0227273;1pkt 1fpkt"];
767--1180[label="0.0240964;2pkt 2fpkt"];
767--1280[label="0.0516432;11pkt 11fpkt"];
767--1296[label="0.0285714;1pkt 1fpkt"];
767--1324[label="0.0598291;7pkt 7fpkt"];
767--1342[label="0.0440252;7pkt 7fpkt"];
767--1581[label="0.056;7pkt 7fpkt"];
767--1685[label="0.046875;3pkt 3fpkt"];
767--1766[label="0.047619;1pkt 1fpkt"];
767--1795[label="0.08;2pkt 2fpkt"];
767--1839[label="0.0444444;2pkt 2fpkt"];
767--2076[label="0.0258065;4pkt 4fpkt"];
767--2393[label="0.0555556;1pkt 1fpkt"];
767--2493[label="0.0136986;1pkt 1fpkt"];
767--2505[label="0.0378378;7pkt 7fpkt"];
767--2519[label="0.0480769;5pkt 5fpkt"];
767--2555[label="0.04;1pkt 1fpkt"];
767--2606[label="0.0347222;10pkt 10fpkt"];
767--2679[label="0.0263158;1pkt 1fpkt"];
767--2728[label="0.0588235;1pkt 1fpkt"];
767--2912[label="0.120787;43pkt 43fpkt"];
767--2919[label="0.0730337;26pkt 26fpkt"];
767--2925[label="0.120787;43pkt 43fpkt"];
767--2931[label="0.0730337;26pkt 26fpkt"];
767--2933[label="0.120787;43pkt 43fpkt"];
767--2935[label="0.0730337;26pkt 26fpkt"];
767--2944[label="0.0308989;11pkt 11fpkt"];
767--3049[label="0.241379;7pkt 7fpkt"];
767--3106[label="0.0454545;1pkt 1fpkt"];
767--3219[label="0.142857;2pkt 2fpkt"];
767--3255[label="1;1pkt 1fpkt"];
767--3519[label="0.0203046;4pkt 4fpkt"];
767--3529[label="1;1pkt 1fpkt"];
767--3539[label="0.45283;24pkt 24fpkt"];
767--3567[label="0.00280899;1pkt 1fpkt"];
767--3632[label="0.0240964;2pkt 2fpkt"];
767--3707[label="0.0967742;3pkt 3fpkt"];
767--3831[label="0.0740741;2pkt 2fpkt"];
767--3978[label="0.25;1pkt 1fpkt"];
767--4047[label="1;2pkt 2fpkt"];
767--4226[label="0.0308989;11pkt 11fpkt"];
767--4282[label="0.241379;7pkt 7fpkt"];
767--4311[label="0.0454545;1pkt 1fpkt"];
767--4376[label="0.142857;2pkt 2fpkt"];
767--4394[label="1;1pkt 1fpkt"];
767--4553[label="0.45283;24pkt 24fpkt"];
767--4566[label="0.00280899;1pkt 1fpkt"];
767--4710[label="0.0740741;2pkt 2fpkt"];
767--4812[label="1;2pkt 2fpkt"];
767--4917[label="0.0509259;11pkt 11fpkt"];
767--4926[label="0.241379;7pkt 7fpkt"];
767--4972[label="1;1pkt 1fpkt"];
767--5048[label="0.00280899;1pkt 1fpkt"];
767--5064[label="0.0238095;2pkt 2fpkt"];
767--5115[label="0.0740741;2pkt 2fpkt"];
825--961[label="0.194444;7pkt 7fpkt"];
825--962[label="0.0555556;2pkt 2fpkt"];
825--2383[label="0.0277778;1pkt 1fpkt"];
825--2423[label="1;16pkt 16fpkt"];
825--2713[label="0.555556;20pkt 20fpkt"];
825--2912[label="0.166667;6pkt 6fpkt"];
825--2919[label="0.138889;5pkt 5fpkt"];
825--2925[label="0.166667;6pkt 6fpkt"];
825--2931[label="0.138889;5pkt 5fpkt"];
825--2933[label="0.166667;6pkt 6fpkt"];
825--2935[label="0.138889;5pkt 5fpkt"];
825--3736[label="1;36pkt 36fpkt"];
961--986[label="0.132353;18pkt 18fpkt"];
961--1035[label="1;1pkt 1fpkt"];
961--1076[label="0.772727;34pkt 34fpkt"];
961--1180[label="0.060241;5pkt 5fpkt"];
961--1204[label="0.111111;10pkt 10fpkt"];
961--1210[label="1;92pkt 92fpkt"];
961--1296[label="0.828571;29pkt 29fpkt"];
961--1307[label="1;2pkt 2fpkt"];
961--1481[label="0.933333;28pkt 28fpkt"];
961--1531[label="0.0188679;1pkt 1fpkt"];
961--1581[label="0.096;12pkt 12fpkt"];
961--1614[label="0.764706;39pkt 39fpkt"];
961--1621[label="0.0461538;3pkt 3fpkt"];
961--1651[label="0.711392;281pkt 281fpkt"];
961--1766[label="0.761905;16pkt 16fpkt"];
961--1795[label="0.36;9pkt 9fpkt"];
961--1808[label="0.0136986;1pkt 1fpkt"];
961--1866[label="1;26pkt 26fpkt"];
961--1989[label="0.133333;2pkt 2fpkt"];
961--2076[label="0.225806;35pkt 35fpkt"];
961--2184[label="0.529412;45pkt 45fpkt"];
961--2186[label="1;1pkt 1fpkt"];
961--2423[label="0.25;4pkt 4fpkt"];
961--2493[label="0.0684932;5pkt 5fpkt"];
961--2514[label="1;281pkt 281fpkt"];
961--2519[label="0.153846;16pkt 16fpkt"];
961--2555[label="0.96;24pkt 24fpkt"];
961--2564[label="1;2pkt 2fpkt"];
961--2606[label="0.107639;31pkt 31fpkt"];
961--2679[label="0.894737;34pkt 34fpkt"];
961--2683[label="1;209pkt 209fpkt"];
961--2728[label="0.941176;16pkt 16fpkt"];
961--2796[label="0.0212766;1pkt 1fpkt"];
961--2832[label="1;1pkt 1fpkt"];
961--2833[label="0.764706;39pkt 39fpkt"];
961--2840[label="0.0136986;1pkt 1fpkt"];
961--2912[label="0.100592;289pkt 289fpkt"];
961--2919[label="0.0925861;266pkt 266fpkt"];
961--2925[label="0.100592;289pkt 289fpkt"];
961--2931[label="0.0925861;266pkt 266fpkt"];
961--2933[label="0.100592;289pkt 289fpkt"];
961--2935[label="0.0925861;266pkt 266fpkt"];
961--2952[label="0.526316;10pkt 10fpkt"];
961--2960[label="1;3pkt 3fpkt"];
961--2972[label="1;2pkt 2fpkt"];
961--3028[label="1;7pkt 7fpkt"];
961--3044[label="0.716981;38pkt 38fpkt"];
961--3049[label="0.37931;11pkt 11fpkt"];
961--3106[label="0.681818;15pkt 15fpkt"];
961--3112[label="0.875;14pkt 14fpkt"];
961--3225[label="0.03125;1pkt 1fpkt"];
961--3298[label="1;25pkt 25fpkt"];
961--3333[label="1;17pkt 17fpkt"];
961--3427[label="1;26pkt 26fpkt"];
961--3476[label="0.333333;1pkt 1fpkt"];
961--3518[label="0.7;280pkt 280fpkt"];
961--3519[label="0.177665;35pkt 35fpkt"];
961--3615[label="1;12pkt 12fpkt"];
961--3632[label="0.0481928;4pkt 4fpkt"];
961--3707[label="0.322581;10pkt 10fpkt"];
961--3736[label="0.194444;7pkt 7fpkt"];
961--3918[label="0.0833333;1pkt 1fpkt"];
961--3978[label="0.25;1pkt 1fpkt"];
961--4118[label="0.0555556;1pkt 1fpkt"];
961--4166[label="0.0714286;1pkt 1fpkt"];
961--4278[label="0.722222;39pkt 39fpkt"];
961--4282[label="0.37931;11pkt 11fpkt"];
961--4311[label="0.681818;15pkt 15fpkt"];
961--4314[label="0.875;14pkt 14fpkt"];
961--4421[label="1;26pkt 26fpkt"];
961--4443[label="1;18pkt 18fpkt"];
961--4491[label="1;25pkt 25fpkt"];
961--4519[label="0.5;2pkt 2fpkt"];
961--4541[label="0.7;280pkt 280fpkt"];
961--4593[label="1;12pkt 12fpkt"];
961--4757[label="0.0833333;1pkt 1fpkt"];
961--4869[label="0.0714286;1pkt 1fpkt"];
961--4926[label="0.37931;11pkt 11fpkt"];
961--4993[label="1;17pkt 17fpkt"];
961--5027[label="0.5;2pkt 2fpkt"];
961--5064[label="0.0595238;5pkt 5fpkt"];
961--5136[label="0.0833333;1pkt 1fpkt"];
962--986[label="0.294118;40pkt 40fpkt"];
962--992[label="0.5;55pkt 55fpkt"];
962--998[label="0.397436;31pkt 31fpkt"];
962--1043[label="0.5;76pkt 76fpkt"];
962--1071[label="0.116279;10pkt 10fpkt"];
962--1090[label="0.0900901;10pkt 10fpkt"];
962--1093[label="0.0169492;2pkt 2fpkt"];
962--1180[label="0.337349;28pkt 28fpkt"];
962--1204[label="0.488889;44pkt 44fpkt"];
962--1230[label="0.934783;43pkt 43fpkt"];
962--1276[label="0.0571429;2pkt 2fpkt"];
962--1280[label="0.267606;57pkt 57fpkt"];
962--1283[label="0.424242;14pkt 14fpkt"];
962--1290[label="0.025641;1pkt 1fpkt"];
962--1324[label="0.34188;40pkt 40fpkt"];
962--1342[label="0.352201;56pkt 56fpkt"];
962--1531[label="0.132075;7pkt 7fpkt"];
962--1581[label="0.168;21pkt 21fpkt"];
962--1621[label="0.0769231;5pkt 5fpkt"];
962--1631[label="0.491525;29pkt 29fpkt"];
962--1761[label="0.325;13pkt 13fpkt"];
962--1795[label="0.04;1pkt 1fpkt"];
962--1797[label="0.444444;4pkt 4fpkt"];
962--1839[label="0.288889;13pkt 13fpkt"];
962--1958[label="0.44;11pkt 11fpkt"];
962--1989[label="0.333333;5pkt 5fpkt"];
962--2076[label="0.0580645;9pkt 9fpkt"];
962--2175[label="0.475;19pkt 19fpkt"];
962--2183[label="0.382353;13pkt 13fpkt"];
962--2383[label="1;872pkt 872fpkt"];
962--2422[label="0.638889;23pkt 23fpkt"];
962--2423[label="0.0625;1pkt 1fpkt"];
962--2493[label="0.342466;25pkt 25fpkt"];
962--2505[label="0.383784;71pkt 71fpkt"];
962--2519[label="0.326923;34pkt 34fpkt"];
962--2524[label="0.47619;20pkt 20fpkt"];
962--2606[label="0.305556;88pkt 88fpkt"];
962--2618[label="0.424242;14pkt 14fpkt"];
962--2684[label="0.0970874;10pkt 10fpkt"];
962--2796[label="0.148936;7pkt 7fpkt"];
962--2827[label="0.325;13pkt 13fpkt"];
962--2912[label="0.147727;299pkt 299fpkt"];
962--2919[label="0.230731;467pkt 467fpkt"];
962--2925[label="0.147727;299pkt 299fpkt"];
962--2931[label="0.230731;467pkt 467fpkt"];
962--2933[label="0.147727;299pkt 299fpkt"];
962--2935[label="0.230731;467pkt 467fpkt"];
962--2944[label="0.315245;122pkt 122fpkt"];
962--2966[label="0.6;6pkt 6fpkt"];
962--3053[label="0.5;7pkt 7fpkt"];
962--3075[label="0.416667;10pkt 10fpkt"];
962--3108[label="0.212766;10pkt 10fpkt"];
962--3122[label="0.538462;7pkt 7fpkt"];
962--3125[label="0.0909091;1pkt 1fpkt"];
962--3127[label="0.40625;13pkt 13fpkt"];
962--3198[label="0.421053;8pkt 8fpkt"];
962--3223[label="0.4;6pkt 6fpkt"];
962--3224[label="0.25;1pkt 1fpkt"];
962--3272[label="1;1pkt 1fpkt"];
962--3287[label="0.392857;11pkt 11fpkt"];
962--3303[label="0.666667;10pkt 10fpkt"];
962--3304[label="0.0769231;2pkt 2fpkt"];
962--3350[label="0.133333;2pkt 2fpkt"];
962--3377[label="0.5;2pkt 2fpkt"];
962--3409[label="0.05;1pkt 1fpkt"];
962--3473[label="0.307692;4pkt 4fpkt"];
962--3519[label="0.0456853;9pkt 9fpkt"];
962--3524[label="0.5;2pkt 2fpkt"];
962--3571[label="0.272727;3pkt 3fpkt"];
962--3622[label="0.428571;3pkt 3fpkt"];
962--3632[label="0.337349;28pkt 28fpkt"];
962--3703[label="0.5;5pkt 5fpkt"];
962--3707[label="0.16129;5pkt 5fpkt"];
962--3713[label="0.142857;5pkt 5fpkt"];
962--3736[label="0.0555556;2pkt 2fpkt"];
962--3763[label="0.352941;12pkt 12fpkt"];
962--3772[label="0.4;2pkt 2fpkt"];
962--3774[label="0.166667;1pkt 1fpkt"];
962--3824[label="1;7pkt 7fpkt"];
962--3832[label="0.6;3pkt 3fpkt"];
962--3842[label="1;7pkt 7fpkt"];
962--3889[label="0.222222;8pkt 8fpkt"];
962--3890[label="0.171429;6pkt 6fpkt"];
962--3918[label="0.0833333;1pkt 1fpkt"];
962--3938[label="0.272727;3pkt 3fpkt"];
962--4005[label="0.634146;26pkt 26fpkt"];
962--4057[label="0.928571;13pkt 13fpkt"];
962--4098[label="0.909091;10pkt 10fpkt"];
962--4118[label="0.166667;3pkt 3fpkt"];
962--4139[label="0.106383;10pkt 10fpkt"];
962--4166[label="0.0714286;1pkt 1fpkt"];
962--4169[label="0.1;1pkt 1fpkt"];
962--4210[label="0.363636;4pkt 4fpkt"];
962--4226[label="0.315245;122pkt 122fpkt"];
962--4240[label="0.6;6pkt 6fpkt"];
962--4296[label="0.416667;10pkt 10fpkt"];
962--4312[label="0.229167;11pkt 11fpkt"];
962--4323[label="0.40625;13pkt 13fpkt"];
962--4363[label="0.421053;8pkt 8fpkt"];
962--4405[label="1;1pkt 1fpkt"];
962--4545[label="0.5;2pkt 2fpkt"];
962--4598[label="0.428571;3pkt 3fpkt"];
962--4640[label="0.5;5pkt 5fpkt"];
962--4644[label="0.142857;5pkt 5fpkt"];
962--4672[label="0.352941;12pkt 12fpkt"];
962--4707[label="1;7pkt 7fpkt"];
962--4743[label="0.222222;8pkt 8fpkt"];
962--4757[label="0.0833333;1pkt 1fpkt"];
962--4855[label="0.106383;10pkt 10fpkt"];
962--4869[label="0.0714286;1pkt 1fpkt"];
962--4917[label="0.259259;56pkt 56fpkt"];
962--4934[label="0.416667;10pkt 10fpkt"];
962--4978[label="1;1pkt 1fpkt"];
962--4995[label="0.00694444;1pkt 1fpkt"];
962--5022[label="0.0454545;1pkt 1fpkt"];
962--5064[label="0.333333;28pkt 28fpkt"];
962--5113[label="1;7pkt 7fpkt"];
962--5136[label="0.0833333;1pkt 1fpkt"];
962--5174[label="0.107527;10pkt 10fpkt"];
986--2383[label="0.183824;25pkt 25fpkt"];
986--2384[label="0.0955882;13pkt 13fpkt"];
986--2416[label="0.00735294;1pkt 1fpkt"];
986--2519[label="1;104pkt 104fpkt"];
986--2713[label="0.294118;40pkt 40fpkt"];
986--2912[label="0.0588235;8pkt 8fpkt"];
986--2919[label="0.323529;44pkt 44fpkt"];
986--2925[label="0.0588235;8pkt 8fpkt"];
986--2931[label="0.323529;44pkt 44fpkt"];
986--2933[label="0.0588235;8pkt 8fpkt"];
986--2935[label="0.323529;44pkt 44fpkt"];
992--2383[label="0.227273;25pkt 25fpkt"];
992--2713[label="0.409091;45pkt 45fpkt"];
992--2912[label="0.218182;24pkt 24fpkt"];
992--2919[label="0.190909;21pkt 21fpkt"];
992--2925[label="0.218182;24pkt 24fpkt"];
992--2931[label="0.190909;21pkt 21fpkt"];
992--2933[label="0.218182;24pkt 24fpkt"];
992--2935[label="0.190909;21pkt 21fpkt"];
998--2383[label="0.24359;19pkt 19fpkt"];
998--2384[label="0.0384615;3pkt 3fpkt"];
998--2416[label="0.025641;2pkt 2fpkt"];
998--2524[label="1;42pkt 42fpkt"];
998--2713[label="0.307692;24pkt 24fpkt"];
998--2912[label="0.128205;10pkt 10fpkt"];
998--2919[label="0.166667;13pkt 13fpkt"];
998--2925[label="0.128205;10pkt 10fpkt"];
998--2931[label="0.166667;13pkt 13fpkt"];
998--2933[label="0.128205;10pkt 10fpkt"];
998--2935[label="0.166667;13pkt 13fpkt"];
1043--2383[label="0.151316;23pkt 23fpkt"];
1043--2422[label="1;36pkt 36fpkt"];
1043--2713[label="0.276316;42pkt 42fpkt"];
1043--2912[label="0.0986842;15pkt 15fpkt"];
1043--2919[label="0.131579;20pkt 20fpkt"];
1043--2925[label="0.0986842;15pkt 15fpkt"];
1043--2931[label="0.131579;20pkt 20fpkt"];
1043--2933[label="0.0986842;15pkt 15fpkt"];
1043--2935[label="0.131579;20pkt 20fpkt"];
1043--4153[label="0.333333;1pkt 1fpkt"];
1043--4862[label="0.333333;1pkt 1fpkt"];
1070--2713[label="0.0212766;1pkt 1fpkt"];
1070--2912[label="0.0851064;4pkt 4fpkt"];
1070--2919[label="0.0851064;4pkt 4fpkt"];
1070--2925[label="0.0851064;4pkt 4fpkt"];
1070--2931[label="0.0851064;4pkt 4fpkt"];
1070--2933[label="0.0851064;4pkt 4fpkt"];
1070--2935[label="0.0851064;4pkt 4fpkt"];
1071--2383[label="0.0581395;5pkt 5fpkt"];
1071--2550[label="0.0909091;7pkt 7fpkt"];
1071--2713[label="0.0697674;6pkt 6fpkt"];
1071--2912[label="0.116279;10pkt 10fpkt"];
1071--2919[label="0.127907;11pkt 11fpkt"];
1071--2925[label="0.116279;10pkt 10fpkt"];
1071--2931[label="0.127907;11pkt 11fpkt"];
1071--2933[label="0.116279;10pkt 10fpkt"];
1071--2935[label="0.127907;11pkt 11fpkt"];
1071--4139[label="1;86pkt 86fpkt"];
1071--4855[label="1;86pkt 86fpkt"];
1071--5174[label="0.988372;85pkt 85fpkt"];
1090--2142[label="0.181818;2pkt 2fpkt"];
1090--2383[label="0.0630631;7pkt 7fpkt"];
1090--2550[label="0.038961;3pkt 3fpkt"];
1090--2598[label="0.333333;3pkt 3fpkt"];
1090--2684[label="1;103pkt 103fpkt"];
1090--2713[label="0.036036;4pkt 4fpkt"];
1090--2912[label="0.162162;18pkt 18fpkt"];
1090--2919[label="0.18018;20pkt 20fpkt"];
1090--2925[label="0.162162;18pkt 18fpkt"];
1090--2931[label="0.18018;20pkt 20fpkt"];
1090--2933[label="0.162162;18pkt 18fpkt"];
1090--2935[label="0.18018;20pkt 20fpkt"];
1180--2383[label="0.168675;14pkt 14fpkt"];
1180--2384[label="0.0240964;2pkt 2fpkt"];
1180--2493[label="1;73pkt 73fpkt"];
1180--2713[label="0.289157;24pkt 24fpkt"];
1180--2912[label="0.144578;12pkt 12fpkt"];
1180--2919[label="0.144578;12pkt 12fpkt"];
1180--2925[label="0.144578;12pkt 12fpkt"];
1180--2931[label="0.144578;12pkt 12fpkt"];
1180--2933[label="0.144578;12pkt 12fpkt"];
1180--2935[label="0.144578;12pkt 12fpkt"];
1180--3632[label="0.987952;82pkt 82fpkt"];
1180--5064[label="1;83pkt 83fpkt"];
1230--2383[label="0.804348;37pkt 37fpkt"];
1230--2713[label="0.0434783;2pkt 2fpkt"];
1230--2912[label="0.173913;8pkt 8fpkt"];
1230--2919[label="0.347826;16pkt 16fpkt"];
1230--2925[label="0.173913;8pkt 8fpkt"];
1230--2931[label="0.347826;16pkt 16fpkt"];
1230--2933[label="0.173913;8pkt 8fpkt"];
1230--2935[label="0.347826;16pkt 16fpkt"];
1283--2383[label="0.181818;6pkt 6fpkt"];
1283--2618[label="1;33pkt 33fpkt"];
1283--2713[label="0.545455;18pkt 18fpkt"];
1283--2912[label="0.242424;8pkt 8fpkt"];
1283--2919[label="0.272727;9pkt 9fpkt"];
1283--2925[label="0.242424;8pkt 8fpkt"];
1283--2931[label="0.272727;9pkt 9fpkt"];
1283--2933[label="0.242424;8pkt 8fpkt"];
1283--2935[label="0.272727;9pkt 9fpkt"];
1283--3127[label="1;32pkt 32fpkt"];
1283--4323[label="1;32pkt 32fpkt"];
1290--2383[label="0.025641;1pkt 1fpkt"];
1290--2912[label="0.0769231;3pkt 3fpkt"];
1290--2919[label="0.153846;6pkt 6fpkt"];
1290--2925[label="0.0769231;3pkt 3fpkt"];
1290--2931[label="0.153846;6pkt 6fpkt"];
1290--2933[label="0.0769231;3pkt 3fpkt"];
1290--2935[label="0.153846;6pkt 6fpkt"];
1549--2919[label="0.333333;1pkt 1fpkt"];
1549--2931[label="0.333333;1pkt 1fpkt"];
1549--2935[label="0.333333;1pkt 1fpkt"];
1581--2383[label="0.032;4pkt 4fpkt"];
1581--2384[label="0.152;19pkt 19fpkt"];
1581--2416[label="0.024;3pkt 3fpkt"];
1581--2713[label="0.152;19pkt 19fpkt"];
1581--2912[label="0.04;5pkt 5fpkt"];
1581--2919[label="0.176;22pkt 22fpkt"];
1581--2925[label="0.04;5pkt 5fpkt"];
1581--2931[label="0.176;22pkt 22fpkt"];
1581--2933[label="0.04;5pkt 5fpkt"];
1581--2935[label="0.176;22pkt 22fpkt"];
1614--2833[label="1;51pkt 51fpkt"];
1614--3044[label="0.980392;50pkt 50fpkt"];
1614--4278[label="1;51pkt 51fpkt"];
1631--2383[label="0.254237;15pkt 15fpkt"];
1631--2713[label="0.508475;30pkt 30fpkt"];
1631--2912[label="0.186441;11pkt 11fpkt"];
1631--2919[label="0.169492;10pkt 10fpkt"];
1631--2925[label="0.186441;11pkt 11fpkt"];
1631--2931[label="0.169492;10pkt 10fpkt"];
1631--2933[label="0.186441;11pkt 11fpkt"];
1631--2935[label="0.169492;10pkt 10fpkt"];
1651--2683[label="1;209pkt 209fpkt"];
1651--2912[label="0.0253165;10pkt 10fpkt"];
1651--2919[label="0.00506329;2pkt 2fpkt"];
1651--2925[label="0.0253165;10pkt 10fpkt"];
1651--2931[label="0.00506329;2pkt 2fpkt"];
1651--2933[label="0.0253165;10pkt 10fpkt"];
1651--2935[label="0.00506329;2pkt 2fpkt"];
1651--3518[label="0.997468;394pkt 394fpkt"];
1651--4541[label="0.997468;394pkt 394fpkt"];
1685--2384[label="0.109375;7pkt 7fpkt"];
1685--2912[label="0.015625;1pkt 1fpkt"];
1685--2919[label="0.109375;7pkt 7fpkt"];
1685--2925[label="0.015625;1pkt 1fpkt"];
1685--2931[label="0.109375;7pkt 7fpkt"];
1685--2933[label="0.015625;1pkt 1fpkt"];
1685--2935[label="0.109375;7pkt 7fpkt"];
1795--2384[label="0.08;2pkt 2fpkt"];
1795--2919[label="0.12;3pkt 3fpkt"];
1795--2931[label="0.12;3pkt 3fpkt"];
1795--2935[label="0.12;3pkt 3fpkt"];
1795--3423[label="1;1pkt 1fpkt"];
1797--2383[label="0.222222;2pkt 2fpkt"];
1797--2713[label="0.555556;5pkt 5fpkt"];
1797--2912[label="0.222222;2pkt 2fpkt"];
1797--2919[label="0.444444;4pkt 4fpkt"];
1797--2925[label="0.222222;2pkt 2fpkt"];
1797--2931[label="0.444444;4pkt 4fpkt"];
1797--2933[label="0.222222;2pkt 2fpkt"];
1797--2935[label="0.444444;4pkt 4fpkt"];
1839--2713[label="0.266667;12pkt 12fpkt"];
1839--2912[label="0.0222222;1pkt 1fpkt"];
1839--2919[label="0.155556;7pkt 7fpkt"];
1839--2925[label="0.0222222;1pkt 1fpkt"];
1839--2931[label="0.155556;7pkt 7fpkt"];
1839--2933[label="0.0222222;1pkt 1fpkt"];
1839--2935[label="0.155556;7pkt 7fpkt"];
1866--2919[label="0.346154;9pkt 9fpkt"];
1866--2931[label="0.346154;9pkt 9fpkt"];
1866--2935[label="0.346154;9pkt 9fpkt"];
1866--3427[label="1;26pkt 26fpkt"];
1866--4491[label="1;25pkt 25fpkt"];
1958--2383[label="0.2;5pkt 5fpkt"];
1958--2713[label="0.44;11pkt 11fpkt"];
1958--2912[label="0.2;5pkt 5fpkt"];
1958--2919[label="0.24;6pkt 6fpkt"];
1958--2925[label="0.2;5pkt 5fpkt"];
1958--2931[label="0.24;6pkt 6fpkt"];
1958--2933[label="0.2;5pkt 5fpkt"];
1958--2935[label="0.24;6pkt 6fpkt"];
1958--3075[label="1;24pkt 24fpkt"];
1958--4296[label="1;24pkt 24fpkt"];
1958--4934[label="1;24pkt 24fpkt"];
1977--2142[label="0.181818;2pkt 2fpkt"];
1977--2251[label="0.43617;41pkt 41fpkt"];
1977--2713[label="0.0638298;6pkt 6fpkt"];
1977--2912[label="0.0212766;2pkt 2fpkt"];
1977--2919[label="0.0531915;5pkt 5fpkt"];
1977--2925[label="0.0212766;2pkt 2fpkt"];
1977--2931[label="0.0531915;5pkt 5fpkt"];
1977--2933[label="0.0212766;2pkt 2fpkt"];
1977--2935[label="0.0531915;5pkt 5fpkt"];
1989--2383[label="0.333333;5pkt 5fpkt"];
1989--2713[label="0.0666667;1pkt 1fpkt"];
1989--2912[label="0.133333;2pkt 2fpkt"];
1989--2919[label="0.133333;2pkt 2fpkt"];
1989--2925[label="0.133333;2pkt 2fpkt"];
1989--2931[label="0.133333;2pkt 2fpkt"];
1989--2933[label="0.133333;2pkt 2fpkt"];
1989--2935[label="0.133333;2pkt 2fpkt"];
2076--2383[label="0.0129032;2pkt 2fpkt"];
2076--2384[label="0.0645161;10pkt 10fpkt"];
2076--2416[label="0.00645161;1pkt 1fpkt"];
2076--2713[label="0.0580645;9pkt 9fpkt"];
2076--2912[label="0.0645161;10pkt 10fpkt"];
2076--2919[label="0.0774194;12pkt 12fpkt"];
2076--2925[label="0.0645161;10pkt 10fpkt"];
2076--2931[label="0.0774194;12pkt 12fpkt"];
2076--2933[label="0.0645161;10pkt 10fpkt"];
2076--2935[label="0.0774194;12pkt 12fpkt"];
2076--3519[label="0.993548;154pkt 154fpkt"];
2127--2251[label="0.5;40pkt 40fpkt"];
2127--2713[label="0.2125;17pkt 17fpkt"];
2127--2912[label="0.05;4pkt 4fpkt"];
2127--2919[label="0.1;8pkt 8fpkt"];
2127--2925[label="0.05;4pkt 4fpkt"];
2127--2931[label="0.1;8pkt 8fpkt"];
2127--2933[label="0.05;4pkt 4fpkt"];
2127--2935[label="0.1;8pkt 8fpkt"];
2127--3510[label="0.9875;79pkt 79fpkt"];
2127--4536[label="1;80pkt 80fpkt"];
2127--5038[label="0.9875;79pkt 79fpkt"];
2138--2416[label="0.205882;7pkt 7fpkt"];
2138--2713[label="0.0882353;3pkt 3fpkt"];
2138--2912[label="0.117647;4pkt 4fpkt"];
2138--2919[label="0.147059;5pkt 5fpkt"];
2138--2925[label="0.117647;4pkt 4fpkt"];
2138--2931[label="0.147059;5pkt 5fpkt"];
2138--2933[label="0.117647;4pkt 4fpkt"];
2138--2935[label="0.147059;5pkt 5fpkt"];
2175--2383[label="0.025;1pkt 1fpkt"];
2175--2713[label="0.4;16pkt 16fpkt"];
2175--2919[label="0.475;19pkt 19fpkt"];
2175--2931[label="0.475;19pkt 19fpkt"];
2175--2935[label="0.475;19pkt 19fpkt"];
2183--2713[label="0.529412;18pkt 18fpkt"];
2183--3763[label="0.970588;33pkt 33fpkt"];
2183--4672[label="0.970588;33pkt 33fpkt"];
2251--2840[label="0.369863;27pkt 27fpkt"];
2251--3510[label="0.481928;40pkt 40fpkt"];
2251--4536[label="0.47619;40pkt 40fpkt"];
2251--5038[label="0.481928;40pkt 40fpkt"];
2383--2422[label="0.638889;23pkt 23fpkt"];
2383--2423[label="0.0625;1pkt 1fpkt"];
2383--2493[label="0.191781;14pkt 14fpkt"];
2383--2505[label="0.32973;61pkt 61fpkt"];
2383--2519[label="0.240385;25pkt 25fpkt"];
2383--2524[label="0.452381;19pkt 19fpkt"];
2383--2606[label="0.204861;59pkt 59fpkt"];
2383--2618[label="0.181818;6pkt 6fpkt"];
2383--2684[label="0.0679612;7pkt 7fpkt"];
2383--2796[label="0.0638298;3pkt 3fpkt"];
2383--2827[label="0.175;7pkt 7fpkt"];
2383--2912[label="0.34289;299pkt 299fpkt"];
2383--2919[label="0.352064;307pkt 307fpkt"];
2383--2925[label="0.34289;299pkt 299fpkt"];
2383--2931[label="0.352064;307pkt 307fpkt"];
2383--2933[label="0.34289;299pkt 299fpkt"];
2383--2935[label="0.352064;307pkt 307fpkt"];
2383--2944[label="0.157623;61pkt 61fpkt"];
2383--2966[label="0.4;4pkt 4fpkt"];
2383--3053[label="0.357143;5pkt 5fpkt"];
2383--3075[label="0.166667;4pkt 4fpkt"];
2383--3108[label="0.0638298;3pkt 3fpkt"];
2383--3122[label="0.153846;2pkt 2fpkt"];
2383--3125[label="0.0909091;1pkt 1fpkt"];
2383--3127[label="0.15625;5pkt 5fpkt"];
2383--3224[label="0.25;1pkt 1fpkt"];
2383--3272[label="1;1pkt 1fpkt"];
2383--3287[label="0.214286;6pkt 6fpkt"];
2383--3350[label="0.0666667;1pkt 1fpkt"];
2383--3377[label="0.5;2pkt 2fpkt"];
2383--3409[label="0.05;1pkt 1fpkt"];
2383--3473[label="0.307692;4pkt 4fpkt"];
2383--3519[label="0.0101523;2pkt 2fpkt"];
2383--3524[label="0.25;1pkt 1fpkt"];
2383--3622[label="0.428571;3pkt 3fpkt"];
2383--3632[label="0.168675;14pkt 14fpkt"];
2383--3703[label="0.2;2pkt 2fpkt"];
2383--3736[label="0.0277778;1pkt 1fpkt"];
2383--3772[label="0.4;2pkt 2fpkt"];
2383--3774[label="0.166667;1pkt 1fpkt"];
2383--3824[label="0.285714;2pkt 2fpkt"];
2383--3832[label="0.2;1pkt 1fpkt"];
2383--3889[label="0.0555556;2pkt 2fpkt"];
2383--3890[label="0.0571429;2pkt 2fpkt"];
2383--3938[label="0.272727;3pkt 3fpkt"];
2383--4005[label="0.0487805;2pkt 2fpkt"];
2383--4057[label="0.428571;6pkt 6fpkt"];
2383--4118[label="0.0555556;1pkt 1fpkt"];
2383--4139[label="0.0531915;5pkt 5fpkt"];
2383--4166[label="0.0714286;1pkt 1fpkt"];
2383--4169[label="0.1;1pkt 1fpkt"];
2383--4210[label="0.181818;2pkt 2fpkt"];
2383--4226[label="0.157623;61pkt 61fpkt"];
2383--4240[label="0.4;4pkt 4fpkt"];
2383--4296[label="0.166667;4pkt 4fpkt"];
2383--4312[label="0.0833333;4pkt 4fpkt"];
2383--4323[label="0.15625;5pkt 5fpkt"];
2383--4405[label="1;1pkt 1fpkt"];
2383--4545[label="0.25;1pkt 1fpkt"];
2383--4598[label="0.428571;3pkt 3fpkt"];
2383--4640[label="0.2;2pkt 2fpkt"];
2383--4707[label="0.285714;2pkt 2fpkt"];
2383--4743[label="0.0555556;2pkt 2fpkt"];
2383--4855[label="0.0531915;5pkt 5fpkt"];
2383--4869[label="0.0714286;1pkt 1fpkt"];
2383--4917[label="0.171296;37pkt 37fpkt"];
2383--4934[label="0.166667;4pkt 4fpkt"];
2383--4978[label="1;1pkt 1fpkt"];
2383--5064[label="0.166667;14pkt 14fpkt"];
2383--5113[label="0.285714;2pkt 2fpkt"];
2383--5174[label="0.0537634;5pkt 5fpkt"];
2384--2493[label="0.0273973;2pkt 2fpkt"];
2384--2505[label="0.118919;22pkt 22fpkt"];
2384--2519[label="0.125;13pkt 13fpkt"];
2384--2524[label="0.0714286;3pkt 3fpkt"];
2384--2606[label="0.125;36pkt 36fpkt"];
2384--2827[label="0.05;2pkt 2fpkt"];
2384--2912[label="0.0132231;8pkt 8fpkt"];
2384--2919[label="0.383471;232pkt 232fpkt"];
2384--2925[label="0.0132231;8pkt 8fpkt"];
2384--2931[label="0.383471;232pkt 232fpkt"];
2384--2933[label="0.0132231;8pkt 8fpkt"];
2384--2935[label="0.383471;232pkt 232fpkt"];
2384--2944[label="0.0568475;22pkt 22fpkt"];
2384--3021[label="0.571429;4pkt 4fpkt"];
2384--3031[label="0.363636;4pkt 4fpkt"];
2384--3053[label="0.142857;2pkt 2fpkt"];
2384--3117[label="0.0909091;1pkt 1fpkt"];
2384--3178[label="0.166667;1pkt 1fpkt"];
2384--3224[label="0.75;3pkt 3fpkt"];
2384--3304[label="0.0384615;1pkt 1fpkt"];
2384--3350[label="0.133333;2pkt 2fpkt"];
2384--3473[label="0.230769;3pkt 3fpkt"];
2384--3519[label="0.0507614;10pkt 10fpkt"];
2384--3632[label="0.0240964;2pkt 2fpkt"];
2384--3713[label="0.0285714;1pkt 1fpkt"];
2384--3889[label="0.0277778;1pkt 1fpkt"];
2384--3890[label="0.0285714;1pkt 1fpkt"];
2384--3947[label="0.0833333;1pkt 1fpkt"];
2384--3988[label="0.75;3pkt 3fpkt"];
2384--4120[label="0.5;1pkt 1fpkt"];
2384--4174[label="1;1pkt 1fpkt"];
2384--4226[label="0.0568475;22pkt 22fpkt"];
2384--4269[label="0.571429;4pkt 4fpkt"];
2384--4485[label="0.25;1pkt 1fpkt"];
2384--4644[label="0.0285714;1pkt 1fpkt"];
2384--4743[label="0.0277778;1pkt 1fpkt"];
2384--4874[label="1;1pkt 1fpkt"];
2384--4917[label="0.101852;22pkt 22fpkt"];
2384--4923[label="0.5;3pkt 3fpkt"];
2384--5064[label="0.0238095;2pkt 2fpkt"];
2384--5183[label="1;2pkt 2fpkt"];
2422--2713[label="0.361111;13pkt 13fpkt"];
2422--2912[label="0.416667;15pkt 15fpkt"];
2422--2919[label="0.527778;19pkt 19fpkt"];
2422--2925[label="0.416667;15pkt 15fpkt"];
2422--2931[label="0.527778;19pkt 19fpkt"];
2422--2933[label="0.416667;15pkt 15fpkt"];
2422--2935[label="0.527778;19pkt 19fpkt"];
2423--2713[label="0.6875;11pkt 11fpkt"];
2423--2912[label="0.375;6pkt 6fpkt"];
2423--2919[label="0.125;2pkt 2fpkt"];
2423--2925[label="0.375;6pkt 6fpkt"];
2423--2931[label="0.125;2pkt 2fpkt"];
2423--2933[label="0.375;6pkt 6fpkt"];
2423--2935[label="0.125;2pkt 2fpkt"];
2423--3736[label="1;16pkt 16fpkt"];
2493--2713[label="0.328767;24pkt 24fpkt"];
2493--2912[label="0.164384;12pkt 12fpkt"];
2493--2919[label="0.164384;12pkt 12fpkt"];
2493--2925[label="0.164384;12pkt 12fpkt"];
2493--2931[label="0.164384;12pkt 12fpkt"];
2493--2933[label="0.164384;12pkt 12fpkt"];
2493--2935[label="0.164384;12pkt 12fpkt"];
2493--3632[label="0.986301;72pkt 72fpkt"];
2493--5064[label="1;73pkt 73fpkt"];
2519--2713[label="0.307692;32pkt 32fpkt"];
2519--2912[label="0.0769231;8pkt 8fpkt"];
2519--2919[label="0.423077;44pkt 44fpkt"];
2519--2925[label="0.0769231;8pkt 8fpkt"];
2519--2931[label="0.423077;44pkt 44fpkt"];
2519--2933[label="0.0769231;8pkt 8fpkt"];
2519--2935[label="0.423077;44pkt 44fpkt"];
2524--2713[label="0.404762;17pkt 17fpkt"];
2524--2912[label="0.238095;10pkt 10fpkt"];
2524--2919[label="0.309524;13pkt 13fpkt"];
2524--2925[label="0.238095;10pkt 10fpkt"];
2524--2931[label="0.309524;13pkt 13fpkt"];
2524--2933[label="0.238095;10pkt 10fpkt"];
2524--2935[label="0.309524;13pkt 13fpkt"];
2606--2713[label="0.361111;104pkt 104fpkt"];
2606--2912[label="0.0972222;28pkt 28fpkt"];
2606--2919[label="0.375;108pkt 108fpkt"];
2606--2925[label="0.0972222;28pkt 28fpkt"];
2606--2931[label="0.375;108pkt 108fpkt"];
2606--2933[label="0.0972222;28pkt 28fpkt"];
2606--2935[label="0.375;108pkt 108fpkt"];
2606--2967[label="0.333333;1pkt 1fpkt"];
2606--4241[label="0.333333;1pkt 1fpkt"];
2606--4910[label="0.333333;1pkt 1fpkt"];
2618--2713[label="0.545455;18pkt 18fpkt"];
2618--2912[label="0.242424;8pkt 8fpkt"];
2618--2919[label="0.272727;9pkt 9fpkt"];
2618--2925[label="0.242424;8pkt 8fpkt"];
2618--2931[label="0.272727;9pkt 9fpkt"];
2618--2933[label="0.242424;8pkt 8fpkt"];
2618--2935[label="0.272727;9pkt 9fpkt"];
2618--3127[label="1;32pkt 32fpkt"];
2618--4323[label="1;32pkt 32fpkt"];
2683--2912[label="0.0478469;10pkt 10fpkt"];
2683--2919[label="0.00956938;2pkt 2fpkt"];
2683--2925[label="0.0478469;10pkt 10fpkt"];
2683--2931[label="0.00956938;2pkt 2fpkt"];
2683--2933[label="0.0478469;10pkt 10fpkt"];
2683--2935[label="0.00956938;2pkt 2fpkt"];
2683--3518[label="0.995215;208pkt 208fpkt"];
2683--4541[label="0.995215;208pkt 208fpkt"];
2713--2776[label="0.00190476;1pkt 1fpkt"];
2713--2796[label="0.0212766;1pkt 1fpkt"];
2713--2827[label="0.325;13pkt 13fpkt"];
2713--2840[label="0.0821918;6pkt 6fpkt"];
2713--2907[label="0.000669792;1pkt 1fpkt"];
2713--2912[label="0.173864;310pkt 310fpkt"];
2713--2919[label="0.234436;418pkt 418fpkt"];
2713--2925[label="0.173864;310pkt 310fpkt"];
2713--2931[label="0.234436;418pkt 418fpkt"];
2713--2933[label="0.173864;310pkt 310fpkt"];
2713--2935[label="0.234436;418pkt 418fpkt"];
2713--2944[label="0.29199;113pkt 113fpkt"];
2713--2966[label="0.3;3pkt 3fpkt"];
2713--2967[label="0.333333;1pkt 1fpkt"];
2713--3053[label="0.0714286;1pkt 1fpkt"];
2713--3075[label="0.458333;11pkt 11fpkt"];
2713--3108[label="0.234043;11pkt 11fpkt"];
2713--3122[label="0.384615;5pkt 5fpkt"];
2713--3127[label="0.5625;18pkt 18fpkt"];
2713--3178[label="0.333333;2pkt 2fpkt"];
2713--3198[label="0.0526316;1pkt 1fpkt"];
2713--3219[label="0.714286;10pkt 10fpkt"];
2713--3223[label="0.266667;4pkt 4fpkt"];
2713--3285[label="0.5;3pkt 3fpkt"];
2713--3287[label="0.321429;9pkt 9fpkt"];
2713--3303[label="0.133333;2pkt 2fpkt"];
2713--3307[label="0.0833333;1pkt 1fpkt"];
2713--3350[label="0.4;6pkt 6fpkt"];
2713--3377[label="0.5;2pkt 2fpkt"];
2713--3409[label="0.15;3pkt 3fpkt"];
2713--3473[label="0.307692;4pkt 4fpkt"];
2713--3476[label="0.333333;1pkt 1fpkt"];
2713--3501[label="1;1pkt 1fpkt"];
2713--3510[label="0.204819;17pkt 17fpkt"];
2713--3519[label="0.0406091;8pkt 8fpkt"];
2713--3524[label="0.5;2pkt 2fpkt"];
2713--3543[label="0.0869565;2pkt 2fpkt"];
2713--3571[label="0.272727;3pkt 3fpkt"];
2713--3622[label="0.571429;4pkt 4fpkt"];
2713--3632[label="0.289157;24pkt 24fpkt"];
2713--3703[label="0.3;3pkt 3fpkt"];
2713--3707[label="0.193548;6pkt 6fpkt"];
2713--3713[label="0.257143;9pkt 9fpkt"];
2713--3736[label="0.555556;20pkt 20fpkt"];
2713--3752[label="0.25;1pkt 1fpkt"];
2713--3763[label="0.529412;18pkt 18fpkt"];
2713--3772[label="0.6;3pkt 3fpkt"];
2713--3774[label="0.833333;5pkt 5fpkt"];
2713--3832[label="0.4;2pkt 2fpkt"];
2713--3886[label="1;4pkt 4fpkt"];
2713--3889[label="0.25;9pkt 9fpkt"];
2713--3890[label="0.257143;9pkt 9fpkt"];
2713--3918[label="0.25;3pkt 3fpkt"];
2713--3938[label="0.727273;8pkt 8fpkt"];
2713--3947[label="0.75;9pkt 9fpkt"];
2713--4005[label="0.292683;12pkt 12fpkt"];
2713--4070[label="1;4pkt 4fpkt"];
2713--4139[label="0.0638298;6pkt 6fpkt"];
2713--4166[label="0.0714286;1pkt 1fpkt"];
2713--4169[label="0.7;7pkt 7fpkt"];
2713--4210[label="0.636364;7pkt 7fpkt"];
2713--4226[label="0.29199;113pkt 113fpkt"];
2713--4240[label="0.3;3pkt 3fpkt"];
2713--4241[label="0.333333;1pkt 1fpkt"];
2713--4296[label="0.458333;11pkt 11fpkt"];
2713--4312[label="0.229167;11pkt 11fpkt"];
2713--4323[label="0.5625;18pkt 18fpkt"];
2713--4363[label="0.0526316;1pkt 1fpkt"];
2713--4376[label="0.714286;10pkt 10fpkt"];
2713--4485[label="0.5;2pkt 2fpkt"];
2713--4519[label="0.25;1pkt 1fpkt"];
2713--4536[label="0.202381;17pkt 17fpkt"];
2713--4545[label="0.5;2pkt 2fpkt"];
2713--4598[label="0.571429;4pkt 4fpkt"];
2713--4640[label="0.3;3pkt 3fpkt"];
2713--4644[label="0.257143;9pkt 9fpkt"];
2713--4672[label="0.529412;18pkt 18fpkt"];
2713--4743[label="0.25;9pkt 9fpkt"];
2713--4757[label="0.25;3pkt 3fpkt"];
2713--4824[label="1;4pkt 4fpkt"];
2713--4855[label="0.0638298;6pkt 6fpkt"];
2713--4869[label="0.0714286;1pkt 1fpkt"];
2713--4910[label="0.333333;1pkt 1fpkt"];
2713--4917[label="0.375;81pkt 81fpkt"];
2713--4934[label="0.458333;11pkt 11fpkt"];
2713--5027[label="0.25;1pkt 1fpkt"];
2713--5038[label="0.204819;17pkt 17fpkt"];
2713--5064[label="0.285714;24pkt 24fpkt"];
2713--5136[label="0.25;3pkt 3fpkt"];
2713--5174[label="0.0645161;6pkt 6fpkt"];
2776--2912[label="0.100952;53pkt 53fpkt"];
2776--2919[label="0.112381;59pkt 59fpkt"];
2776--2925[label="0.100952;53pkt 53fpkt"];
2776--2931[label="0.112381;59pkt 59fpkt"];
2776--2933[label="0.100952;53pkt 53fpkt"];
2776--2935[label="0.112381;59pkt 59fpkt"];
2796--2912[label="0.106383;5pkt 5fpkt"];
2796--2919[label="0.0851064;4pkt 4fpkt"];
2796--2925[label="0.106383;5pkt 5fpkt"];
2796--2931[label="0.0851064;4pkt 4fpkt"];
2796--2933[label="0.106383;5pkt 5fpkt"];
2796--2935[label="0.0851064;4pkt 4fpkt"];
2827--2912[label="0.05;2pkt 2fpkt"];
2827--2919[label="0.15;6pkt 6fpkt"];
2827--2925[label="0.05;2pkt 2fpkt"];
2827--2931[label="0.15;6pkt 6fpkt"];
2827--2933[label="0.05;2pkt 2fpkt"];
2827--2935[label="0.15;6pkt 6fpkt"];
2833--3044[label="0.980392;50pkt 50fpkt"];
2833--4278[label="1;51pkt 51fpkt"];
2840--2912[label="0.0821918;6pkt 6fpkt"];
2840--2919[label="0.0684932;5pkt 5fpkt"];
2840--2925[label="0.0821918;6pkt 6fpkt"];
2840--2931[label="0.0684932;5pkt 5fpkt"];
2840--2933[label="0.0821918;6pkt 6fpkt"];
2840--2935[label="0.0684932;5pkt 5fpkt"];
2944--4226[label="1;387pkt 387fpkt"];
2966--4240[label="1;10pkt 10fpkt"];
2967--4241[label="1;3pkt 3fpkt"];
2967--4910[label="1;3pkt 3fpkt"];
3044--4278[label="1;53pkt 53fpkt"];
3075--4296[label="1;24pkt 24fpkt"];
3075--4934[label="1;24pkt 24fpkt"];
3108--4312[label="1;47pkt 47fpkt"];
3127--4323[label="1;32pkt 32fpkt"];
3198--4363[label="1;19pkt 19fpkt"];
3219--4376[label="1;14pkt 14fpkt"];
3255--4394[label="1;1pkt 1fpkt"];
3255--4972[label="1;1pkt 1fpkt"];
3307--4426[label="1;11pkt 11fpkt"];
3333--4443[label="1;17pkt 17fpkt"];
3333--4993[label="1;17pkt 17fpkt"];
3427--4491[label="1;25pkt 25fpkt"];
3476--4519[label="1;3pkt 3fpkt"];
3476--5027[label="1;3pkt 3fpkt"];
3496--4532[label="1;33pkt 33fpkt"];
3510--4536[label="1;83pkt 83fpkt"];
3510--5038[label="1;83pkt 83fpkt"];
3518--4541[label="1;400pkt 400fpkt"];
3524--4545[label="1;4pkt 4fpkt"];
3539--4553[label="1;53pkt 53fpkt"];
3615--4593[label="1;12pkt 12fpkt"];
3632--5064[label="1;83pkt 83fpkt"];
3703--4640[label="1;10pkt 10fpkt"];
3713--4644[label="1;35pkt 35fpkt"];
3763--4672[label="1;34pkt 34fpkt"];
3824--4707[label="1;7pkt 7fpkt"];
3824--5113[label="1;7pkt 7fpkt"];
3831--4710[label="1;27pkt 27fpkt"];
3831--5115[label="1;27pkt 27fpkt"];
3889--4743[label="1;36pkt 36fpkt"];
3918--4757[label="1;12pkt 12fpkt"];
3918--5136[label="1;12pkt 12fpkt"];
4047--4812[label="1;2pkt 2fpkt"];
4070--4824[label="1;4pkt 4fpkt"];
4139--4855[label="1;94pkt 94fpkt"];
4139--5174[label="1;93pkt 93fpkt"];
4153--4862[label="1;3pkt 3fpkt"];
4166--4869[label="1;14pkt 14fpkt"];
4241--4910[label="1;3pkt 3fpkt"];
4296--4934[label="1;24pkt 24fpkt"];
4394--4972[label="1;1pkt 1fpkt"];
4443--4993[label="1;17pkt 17fpkt"];
4519--5027[label="1;4pkt 4fpkt"];
4536--5038[label="1;83pkt 83fpkt"];
4707--5113[label="1;7pkt 7fpkt"];
4757--5136[label="1;12pkt 12fpkt"];
4855--5174[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.129.19" src_port="80"/>
      <filter dst_ip="194.76.179.5" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,502,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
1845[label="74.173.70.133;d;7pkt 7fpkt", shape=diamond, color=yellow];
1846[label="175.150.166.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
2800[label="74.173.70.133;d;7pkt 7fpkt", shape=hexagon, color=black];
3767[label="175.150.166.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 74.173.70.133:0}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 1049: (12.5%)&lt;BR/&gt; 22: (12.5%)&gt;];
}
1845--1846[label="1;1pkt 1fpkt"];
1845--2800[label="1;7pkt 7fpkt"];
1845--3767[label="1;1pkt 1fpkt"];
1846--2800[label="1;1pkt 1fpkt"];
1846--3767[label="1;1pkt 1fpkt"];
2800--3767[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.173.70.133"/>
    </slice>
    <from sec="1109826120" usec="0"/>
    <to sec="1109826771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
2013[label="144.224.22.12;s;30pkt 30fpkt", shape=diamond, color=yellow];
2804[label="144.224.22.12;s;30pkt 30fpkt", shape=hexagon, color=black];
3013[label="144.224.22.12;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.22.12:*, 23.24.200.85:80}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1113: (1.63043%)&lt;BR/&gt; 1112: (1.63043%)&lt;BR/&gt; 1111: (1.63043%)&lt;BR/&gt; 1110: (1.63043%)&gt;];
}
2013--2804[label="1;30pkt 30fpkt"];
2013--3013[label="1;30pkt 30fpkt"];
2804--3013[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="23.24.200.85" dst_port="80" src_ip="144.224.22.12"/>
    </slice>
    <from sec="1109826284" usec="0"/>
    <to sec="1109826787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
1715[label="169.28.3.49;s;75pkt 75fpkt", shape=diamond, color=yellow];
2808[label="169.28.3.49;s;75pkt 75fpkt", shape=hexagon, color=black];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.3.49:*, 23.24.200.64:80}[49.3333%]&lt;BR/&gt;{169.28.3.49:*, 196.218.146.246:80}[25.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1650: (0.666667%)&lt;BR/&gt; 1649: (0.666667%)&lt;BR/&gt; 1648: (0.666667%)&lt;BR/&gt; 1647: (0.666667%)&gt;];
}
1715--2808[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="23.24.200.64" dst_port="80" src_ip="169.28.3.49"/>
      <filter dst_ip="196.218.146.246" dst_port="80" src_ip="169.28.3.49"/>
    </slice>
    <from sec="1109826389" usec="0"/>
    <to sec="1109826579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
1912[label="220.129.122.49;s;103pkt 103fpkt", shape=diamond, color=yellow];
2815[label="220.129.122.49;s;103pkt 103fpkt", shape=hexagon, color=black];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.129.122.49:80, 148.177.206.202:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4363: (0.485437%)&lt;BR/&gt; 4360: (0.485437%)&lt;BR/&gt; 4358: (0.485437%)&lt;BR/&gt; 4357: (0.485437%)&gt;];
}
1912--2815[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.206.202" src_ip="220.129.122.49" src_port="80"/>
    </slice>
    <from sec="1109826609" usec="0"/>
    <to sec="1109826625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
2063[label="220.186.11.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.186.11.63:60391, 130.54.26.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60391: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2063--2262[label="1;1pkt 1fpkt"];
2063--2820[label="1;1pkt 1fpkt"];
2063--2852[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.24" dst_port="80" src_ip="220.186.11.63" src_port="60391"/>
    </slice>
    <from sec="1109826667" usec="0"/>
    <to sec="1109826826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
1580[label="214.182.130.227;s;75pkt 75fpkt", shape=diamond, color=yellow];
2825[label="214.182.130.227;s;75pkt 75fpkt", shape=hexagon, color=black];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.227:5050, *:*}[90.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45.3333%)&lt;BR/&gt; 20: (2.66667%)&lt;BR/&gt; 23: (2%)&lt;BR/&gt; 32847: (0.666667%)&lt;BR/&gt; 9624: (0.666667%)&gt;];
}
1580--2825[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.130.227" src_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
1635[label="148.177.201.56;s;143pkt 143fpkt", shape=diamond, color=yellow];
2837[label="148.177.201.56;s;143pkt 143fpkt", shape=hexagon, color=black];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.201.56:25, *:*}[44.0559%]&lt;BR/&gt;{148.177.201.56:*, *:113}[42.6573%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.6713%)&lt;BR/&gt; 113: (21.3287%)&lt;BR/&gt; 2912: (0.699301%)&lt;BR/&gt; 63133: (0.34965%)&lt;BR/&gt; 62396: (0.34965%)&gt;];
}
1635--2837[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.201.56" src_port="25"/>
      <filter dst_port="113" src_ip="148.177.201.56"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
1901[label="212.82.74.2;s;3pkt 3fpkt", shape=diamond, color=yellow];
2848[label="212.82.74.2;s;3pkt 3fpkt", shape=hexagon, color=black];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.74.2:11256, 130.54.24.141:80}[33.3333%]&lt;BR/&gt;{212.82.74.2:14203, 130.54.24.141:80}[33.3333%]&lt;BR/&gt;{212.82.74.2:16833, 130.54.24.141:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16833: (16.6667%)&lt;BR/&gt; 14203: (16.6667%)&lt;BR/&gt; 11256: (16.6667%)&gt;];
}
1901--2848[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.24.141" dst_port="80" src_ip="212.82.74.2" src_port="16833"/>
      <filter dst_ip="130.54.24.141" dst_port="80" src_ip="212.82.74.2" src_port="14203"/>
      <filter dst_ip="130.54.24.141" dst_port="80" src_ip="212.82.74.2" src_port="11256"/>
    </slice>
    <from sec="1109826574" usec="0"/>
    <to sec="1109826691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
2029[label="144.224.85.22;d;8pkt 8fpkt", shape=diamond, color=yellow];
2236[label="20.90.53.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
2850[label="20.90.53.76;s;1pkt 1fpkt", shape=hexagon, color=black];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.224.85.22:*}[62.5%]&lt;BR/&gt;{213.4.162.224:110, 144.224.85.22:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35%)&lt;BR/&gt; 1275: (15%)&lt;BR/&gt; 110: (15%)&lt;BR/&gt; 1293: (5%)&lt;BR/&gt; 1289: (5%)&gt;];
}
2029--2236[label="1;1pkt 1fpkt"];
2029--2850[label="1;1pkt 1fpkt"];
2236--2850[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.85.22" src_port="80"/>
      <filter dst_ip="144.224.85.22" src_ip="213.4.162.224" src_port="110"/>
    </slice>
    <from sec="1109826488" usec="0"/>
    <to sec="1109826813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
451[label="194.155.237.177;s;2884pkt 2884fpkt", shape=diamond, color=yellow];
651[label="172.17.64.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
1197[label="10.251.254.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
1297[label="192.168.1.254;d;1466pkt 1466fpkt", shape=diamond, color=yellow];
1606[label="192.168.1.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
2098[label="172.20.1.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
2174[label="10.156.105.181;d;203pkt 203fpkt", shape=diamond, color=yellow];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.155.237.177:53, 192.168.1.254:*}[50.8146%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.0748%)&lt;BR/&gt; 1024: (0.307085%)&lt;BR/&gt; 1025: (0.219346%)&lt;BR/&gt; 32768: (0.186444%)&lt;BR/&gt; 1028: (0.186444%)&gt;];
}
451--477[label="1;1pkt 1fpkt"];
451--500[label="1;1pkt 1fpkt"];
451--576[label="1;1pkt 1fpkt"];
451--589[label="1;1pkt 1fpkt"];
451--604[label="1;1pkt 1fpkt"];
451--621[label="1;1pkt 1fpkt"];
451--650[label="1;1pkt 1fpkt"];
451--651[label="1;1pkt 1fpkt"];
451--663[label="1;1pkt 1fpkt"];
451--805[label="1;1pkt 1fpkt"];
451--980[label="0.714286;5pkt 5fpkt"];
451--1060[label="1;1pkt 1fpkt"];
451--1069[label="1;1pkt 1fpkt"];
451--1188[label="1;1pkt 1fpkt"];
451--1197[label="1;2pkt 2fpkt"];
451--1240[label="1;1pkt 1fpkt"];
451--1272[label="1;1pkt 1fpkt"];
451--1278[label="1;1pkt 1fpkt"];
451--1297[label="1;1466pkt 1466fpkt"];
451--1460[label="1;1pkt 1fpkt"];
451--1485[label="1;1pkt 1fpkt"];
451--1587[label="1;1pkt 1fpkt"];
451--1590[label="1;1pkt 1fpkt"];
451--1594[label="1;1pkt 1fpkt"];
451--1602[label="1;1pkt 1fpkt"];
451--1606[label="0.5;1pkt 1fpkt"];
451--1611[label="1;1pkt 1fpkt"];
451--1616[label="1;1pkt 1fpkt"];
451--1622[label="1;1pkt 1fpkt"];
451--1623[label="1;1pkt 1fpkt"];
451--1629[label="1;1pkt 1fpkt"];
451--1752[label="1;1pkt 1fpkt"];
451--1774[label="1;1pkt 1fpkt"];
451--1780[label="1;1pkt 1fpkt"];
451--1841[label="1;1pkt 1fpkt"];
451--1930[label="1;1pkt 1fpkt"];
451--1936[label="1;1pkt 1fpkt"];
451--1943[label="1;1pkt 1fpkt"];
451--1946[label="1;1pkt 1fpkt"];
451--2088[label="1;2pkt 2fpkt"];
451--2098[label="1;1pkt 1fpkt"];
451--2099[label="1;1pkt 1fpkt"];
451--2115[label="1;1pkt 1fpkt"];
451--2121[label="1;1pkt 1fpkt"];
451--2174[label="1;203pkt 203fpkt"];
451--2278[label="1;2884pkt 2884fpkt"];
451--2291[label="1;1pkt 1fpkt"];
451--2294[label="1;1pkt 1fpkt"];
451--2298[label="1;1pkt 1fpkt"];
451--2299[label="1;1pkt 1fpkt"];
451--2447[label="1;1pkt 1fpkt"];
451--2501[label="1;1pkt 1fpkt"];
451--2556[label="1;600pkt 600fpkt"];
451--2721[label="1;1pkt 1fpkt"];
451--2731[label="1;1pkt 1fpkt"];
451--2766[label="1;1pkt 1fpkt"];
451--2774[label="1;1pkt 1fpkt"];
451--2785[label="1;1pkt 1fpkt"];
451--2859[label="1;2884pkt 2884fpkt"];
451--2862[label="1;1pkt 1fpkt"];
451--2863[label="1;1pkt 1fpkt"];
451--2906[label="0.0131761;38pkt 38fpkt"];
451--2911[label="0.205617;593pkt 593fpkt"];
451--2918[label="0.283981;819pkt 819fpkt"];
451--2924[label="0.205617;593pkt 593fpkt"];
451--2930[label="0.283981;819pkt 819fpkt"];
451--2932[label="0.205617;593pkt 593fpkt"];
451--2934[label="0.283981;819pkt 819fpkt"];
451--5133[label="0.993759;2866pkt 2866fpkt"];
651--2278[label="1;1pkt 1fpkt"];
651--2299[label="1;1pkt 1fpkt"];
651--2859[label="1;1pkt 1fpkt"];
651--2863[label="1;1pkt 1fpkt"];
651--2911[label="1;1pkt 1fpkt"];
651--2918[label="1;1pkt 1fpkt"];
651--2924[label="1;1pkt 1fpkt"];
651--2930[label="1;1pkt 1fpkt"];
651--2932[label="1;1pkt 1fpkt"];
651--2934[label="1;1pkt 1fpkt"];
651--5133[label="1;1pkt 1fpkt"];
1197--2278[label="1;2pkt 2fpkt"];
1197--2859[label="1;2pkt 2fpkt"];
1197--2911[label="0.5;1pkt 1fpkt"];
1197--2918[label="0.5;1pkt 1fpkt"];
1197--2924[label="0.5;1pkt 1fpkt"];
1197--2930[label="0.5;1pkt 1fpkt"];
1197--2932[label="0.5;1pkt 1fpkt"];
1197--2934[label="0.5;1pkt 1fpkt"];
1197--5133[label="1;2pkt 2fpkt"];
1297--2278[label="1;1466pkt 1466fpkt"];
1297--2556[label="1;600pkt 600fpkt"];
1297--2859[label="1;1466pkt 1466fpkt"];
1297--2911[label="0.026603;39pkt 39fpkt"];
1297--2918[label="0.103001;151pkt 151fpkt"];
1297--2924[label="0.026603;39pkt 39fpkt"];
1297--2930[label="0.103001;151pkt 151fpkt"];
1297--2932[label="0.026603;39pkt 39fpkt"];
1297--2934[label="0.103001;151pkt 151fpkt"];
1297--5133[label="0.995907;1460pkt 1460fpkt"];
1606--2278[label="0.5;1pkt 1fpkt"];
1606--2859[label="0.5;1pkt 1fpkt"];
1606--2911[label="0.5;1pkt 1fpkt"];
1606--2918[label="0.5;1pkt 1fpkt"];
1606--2924[label="0.5;1pkt 1fpkt"];
1606--2930[label="0.5;1pkt 1fpkt"];
1606--2932[label="0.5;1pkt 1fpkt"];
1606--2934[label="0.5;1pkt 1fpkt"];
1606--5133[label="0.5;1pkt 1fpkt"];
2098--2278[label="1;1pkt 1fpkt"];
2098--2859[label="1;1pkt 1fpkt"];
2098--2911[label="1;1pkt 1fpkt"];
2098--2918[label="1;1pkt 1fpkt"];
2098--2924[label="1;1pkt 1fpkt"];
2098--2930[label="1;1pkt 1fpkt"];
2098--2932[label="1;1pkt 1fpkt"];
2098--2934[label="1;1pkt 1fpkt"];
2098--5133[label="1;1pkt 1fpkt"];
2174--2278[label="1;203pkt 203fpkt"];
2174--2859[label="1;203pkt 203fpkt"];
2174--2918[label="0.0788177;16pkt 16fpkt"];
2174--2930[label="0.0788177;16pkt 16fpkt"];
2174--2934[label="0.0788177;16pkt 16fpkt"];
2174--5133[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.1.254" src_ip="194.155.237.177" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.025,1.56417,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
50[label="148.177.166.5s;3pkt 3fpkt", shape=rectangle, color=red];
606[label="144.224.0.163;s;379pkt 379fpkt", shape=diamond, color=yellow];
635[label="148.177.237.67;s;88pkt 88fpkt", shape=diamond, color=yellow];
704[label="148.176.210.87;s;56pkt 56fpkt", shape=diamond, color=yellow];
778[label="148.177.167.206;s;112pkt 112fpkt", shape=diamond, color=yellow];
818[label="148.177.240.250;s;181pkt 181fpkt", shape=diamond, color=yellow];
833[label="169.28.164.215;s;39pkt 39fpkt", shape=diamond, color=yellow];
849[label="148.177.217.52;d;12pkt 12fpkt", shape=diamond, color=yellow];
850[label="148.177.194.72;s;8pkt 8fpkt", shape=diamond, color=yellow];
865[label="148.177.169.43;s;14pkt 14fpkt", shape=diamond, color=yellow];
875[label="148.177.174.160;s;36pkt 36fpkt", shape=diamond, color=yellow];
887[label="74.77.193.174;d;3pkt 3fpkt", shape=diamond, color=yellow];
925[label="74.33.218.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1202[label="148.177.169.17;s;157pkt 157fpkt", shape=diamond, color=yellow];
1218[label="148.176.212.140;s;148pkt 148fpkt", shape=diamond, color=yellow];
1257[label="22.8.161.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
1258[label="148.177.161.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
1262[label="194.76.160.96;s;115pkt 115fpkt", shape=diamond, color=yellow];
1275[label="194.64.99.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
1327[label="148.176.4.64;s;35pkt 35fpkt", shape=diamond, color=yellow];
1339[label="74.161.202.65;d;78pkt 78fpkt", shape=diamond, color=yellow];
1477[label="60.102.195.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
1487[label="144.224.68.71;s;83pkt 83fpkt", shape=diamond, color=yellow];
1506[label="148.176.204.124;s;53pkt 53fpkt", shape=diamond, color=yellow];
1525[label="196.36.36.75;d;56pkt 56fpkt", shape=diamond, color=yellow];
1562[label="214.186.194.221;d;5pkt 5fpkt", shape=diamond, color=yellow];
1654[label="73.241.186.224;s;11pkt 11fpkt", shape=diamond, color=yellow];
1671[label="148.177.31.45;s;183pkt 183fpkt", shape=diamond, color=yellow];
1809[label="194.76.134.118;d;15pkt 15fpkt", shape=diamond, color=yellow];
1939[label="144.39.1.18;s;53pkt 53fpkt", shape=diamond, color=yellow];
2079[label="73.241.186.187;s;75pkt 75fpkt", shape=diamond, color=yellow];
2091[label="144.224.85.13;s;20pkt 20fpkt", shape=diamond, color=yellow];
2146[label="196.36.36.65;d;32pkt 32fpkt", shape=diamond, color=yellow];
2231[label="221.87.62.198;d;10pkt 10fpkt", shape=diamond, color=yellow];
2433[label="169.28.164.215;s;34pkt 34fpkt", shape=hexagon, color=black];
2453[label="148.177.174.160;s;36pkt 36fpkt", shape=hexagon, color=black];
2536[label="148.177.167.206;s;62pkt 62fpkt", shape=hexagon, color=black];
2557[label="148.177.237.67;s;79pkt 79fpkt", shape=hexagon, color=black];
2565[label="148.177.194.72;s;8pkt 8fpkt", shape=hexagon, color=black];
2566[label="203.72.249.73;d;16pkt 16fpkt", shape=hexagon, color=black];
2613[label="194.76.160.96;s;83pkt 83fpkt", shape=hexagon, color=black];
2771[label="148.176.212.140;s;137pkt 137fpkt", shape=hexagon, color=black];
2786[label="144.224.68.71;s;83pkt 83fpkt", shape=hexagon, color=black];
3052[label="144.39.1.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3600[label="169.28.178.116;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4113[label="73.241.186.224;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4156[label="148.176.232.234;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4284[label="144.39.1.18;4pkt 4fpkt", shape=invtriangle, color=brown];
4844[label="73.241.186.224;15pkt 15fpkt", shape=invtriangle, color=brown];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[83.5122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.7852%)&lt;BR/&gt; 25: (3.82177%)&lt;BR/&gt; 443: (0.801641%)&lt;BR/&gt; 9657: (0.521999%)&lt;BR/&gt; 53: (0.46607%)&gt;];
}
50--2890[label="1;3pkt 3fpkt"];
606--1620[label="0.012987;2pkt 2fpkt"];
606--1643[label="0.0810811;3pkt 3fpkt"];
606--1819[label="0.037037;1pkt 1fpkt"];
606--1822[label="0.00724638;1pkt 1fpkt"];
606--2104[label="0.53125;34pkt 34fpkt"];
606--2146[label="0.09375;3pkt 3fpkt"];
606--2328[label="1;174pkt 174fpkt"];
606--2890[label="0.0422164;16pkt 16fpkt"];
635--1491[label="0.0113636;1pkt 1fpkt"];
635--1492[label="0.0113636;1pkt 1fpkt"];
635--1982[label="0.0253165;2pkt 2fpkt"];
635--2008[label="0.0227273;2pkt 2fpkt"];
635--2082[label="0.0147059;1pkt 1fpkt"];
635--2117[label="0.170455;15pkt 15fpkt"];
635--2146[label="0.34375;11pkt 11fpkt"];
635--2557[label="1;79pkt 79fpkt"];
635--2738[label="0.0113636;1pkt 1fpkt"];
635--2890[label="0.125;11pkt 11fpkt"];
704--2890[label="0.982143;55pkt 55fpkt"];
778--1684[label="0.113636;5pkt 5fpkt"];
778--2536[label="1;62pkt 62fpkt"];
778--2890[label="0.0625;7pkt 7fpkt"];
818--1083[label="0.0173913;2pkt 2fpkt"];
818--1346[label="0.027027;1pkt 1fpkt"];
818--1438[label="0.00884956;1pkt 1fpkt"];
818--1822[label="0.00724638;1pkt 1fpkt"];
818--1965[label="0.552632;42pkt 42fpkt"];
818--2008[label="0.0111111;1pkt 1fpkt"];
818--2835[label="1;181pkt 181fpkt"];
818--2890[label="0.0331492;6pkt 6fpkt"];
833--2433[label="1;34pkt 34fpkt"];
833--2890[label="0.230769;9pkt 9fpkt"];
849--2890[label="0.0833333;1pkt 1fpkt"];
850--887[label="0.666667;2pkt 2fpkt"];
850--2565[label="1;8pkt 8fpkt"];
850--2890[label="0.125;1pkt 1fpkt"];
865--925[label="1;1pkt 1fpkt"];
865--2890[label="0.0714286;1pkt 1fpkt"];
875--2453[label="1;36pkt 36fpkt"];
875--2890[label="0.0555556;2pkt 2fpkt"];
887--2565[label="0.666667;2pkt 2fpkt"];
1202--1356[label="0.138889;5pkt 5fpkt"];
1202--1829[label="0.05;3pkt 3fpkt"];
1202--1923[label="0.0123457;1pkt 1fpkt"];
1202--1988[label="0.0138889;1pkt 1fpkt"];
1202--2295[label="0.0123457;1pkt 1fpkt"];
1202--2334[label="0.00869565;1pkt 1fpkt"];
1202--2517[label="1;101pkt 101fpkt"];
1202--2739[label="0.00636943;1pkt 1fpkt"];
1202--2890[label="0.0254777;4pkt 4fpkt"];
1202--3047[label="0.993631;156pkt 156fpkt"];
1218--1811[label="0.833333;40pkt 40fpkt"];
1218--2771[label="1;137pkt 137fpkt"];
1218--2890[label="0.0472973;7pkt 7fpkt"];
1257--1258[label="1;1pkt 1fpkt"];
1257--2890[label="1;1pkt 1fpkt"];
1258--2890[label="1;1pkt 1fpkt"];
1262--1829[label="0.0166667;1pkt 1fpkt"];
1262--2613[label="1;83pkt 83fpkt"];
1262--2890[label="0.0608696;7pkt 7fpkt"];
1275--1477[label="1;1pkt 1fpkt"];
1275--2890[label="1;1pkt 1fpkt"];
1327--1679[label="0.0285714;1pkt 1fpkt"];
1327--1916[label="0.0285714;1pkt 1fpkt"];
1327--2120[label="0.0285714;1pkt 1fpkt"];
1327--2146[label="0.03125;1pkt 1fpkt"];
1327--2566[label="0.1875;3pkt 3fpkt"];
1327--2567[label="1;35pkt 35fpkt"];
1327--2890[label="0.0571429;2pkt 2fpkt"];
1339--1487[label="0.269231;21pkt 21fpkt"];
1339--2508[label="0.025641;2pkt 2fpkt"];
1339--2569[label="0.628205;49pkt 49fpkt"];
1339--2786[label="0.269231;21pkt 21fpkt"];
1339--2890[label="0.025641;2pkt 2fpkt"];
1339--4002[label="0.025641;2pkt 2fpkt"];
1339--4793[label="0.025641;2pkt 2fpkt"];
1477--2890[label="1;1pkt 1fpkt"];
1487--1667[label="0.0120482;1pkt 1fpkt"];
1487--2334[label="0.0120482;1pkt 1fpkt"];
1487--2786[label="1;83pkt 83fpkt"];
1487--2890[label="0.0361446;3pkt 3fpkt"];
1506--1562[label="1;5pkt 5fpkt"];
1506--2890[label="0.0377358;2pkt 2fpkt"];
1525--1939[label="0.113208;6pkt 6fpkt"];
1525--2388[label="0.0535714;3pkt 3fpkt"];
1525--2504[label="0.0178571;1pkt 1fpkt"];
1525--2568[label="0.0535714;3pkt 3fpkt"];
1525--2743[label="1;48pkt 48fpkt"];
1525--2890[label="0.107143;6pkt 6fpkt"];
1525--2970[label="0.0535714;3pkt 3fpkt"];
1525--3090[label="0.0535714;3pkt 3fpkt"];
1525--3104[label="0.142857;3pkt 3fpkt"];
1525--3600[label="0.0625;1pkt 1fpkt"];
1525--3949[label="0.190476;4pkt 4fpkt"];
1525--4002[label="0.0357143;2pkt 2fpkt"];
1525--4017[label="0.142857;8pkt 8fpkt"];
1525--4156[label="0.0384615;1pkt 1fpkt"];
1525--4242[label="0.0535714;3pkt 3fpkt"];
1525--4301[label="0.0535714;3pkt 3fpkt"];
1525--4310[label="0.142857;3pkt 3fpkt"];
1525--4771[label="0.190476;4pkt 4fpkt"];
1525--4793[label="0.0357143;2pkt 2fpkt"];
1525--4799[label="0.142857;8pkt 8fpkt"];
1525--4945[label="0.136364;3pkt 3fpkt"];
1654--1809[label="1;11pkt 11fpkt"];
1654--2890[label="0.0909091;1pkt 1fpkt"];
1654--4113[label="0.909091;10pkt 10fpkt"];
1654--4844[label="0.909091;10pkt 10fpkt"];
1671--1829[label="0.1;6pkt 6fpkt"];
1671--2890[label="0.0218579;4pkt 4fpkt"];
1809--2890[label="0.0666667;1pkt 1fpkt"];
1809--3059[label="0.0666667;1pkt 1fpkt"];
1809--4113[label="0.8;12pkt 12fpkt"];
1809--4289[label="0.0666667;1pkt 1fpkt"];
1809--4844[label="0.8;12pkt 12fpkt"];
1939--2179[label="0.0566038;3pkt 3fpkt"];
1939--2743[label="0.125;6pkt 6fpkt"];
1939--3052[label="0.333333;1pkt 1fpkt"];
1939--4284[label="0.5;2pkt 2fpkt"];
2079--2890[label="0.0666667;5pkt 5fpkt"];
2079--3933[label="0.986667;74pkt 74fpkt"];
2091--2231[label="1;10pkt 10fpkt"];
2091--2890[label="0.15;3pkt 3fpkt"];
2146--2388[label="0.03125;1pkt 1fpkt"];
2146--2508[label="0.03125;1pkt 1fpkt"];
2146--2557[label="0.25;8pkt 8fpkt"];
2146--2567[label="0.03125;1pkt 1fpkt"];
2146--2890[label="0.0625;2pkt 2fpkt"];
2146--3620[label="0.03125;1pkt 1fpkt"];
2146--4002[label="0.03125;1pkt 1fpkt"];
2146--4017[label="0.03125;1pkt 1fpkt"];
2146--4596[label="0.03125;1pkt 1fpkt"];
2146--4793[label="0.03125;1pkt 1fpkt"];
2146--4799[label="0.03125;1pkt 1fpkt"];
2433--2890[label="0.264706;9pkt 9fpkt"];
2453--2890[label="0.0555556;2pkt 2fpkt"];
2536--2890[label="0.112903;7pkt 7fpkt"];
2557--2738[label="0.0126582;1pkt 1fpkt"];
2557--2890[label="0.139241;11pkt 11fpkt"];
2565--2890[label="0.125;1pkt 1fpkt"];
2566--2567[label="0.1875;3pkt 3fpkt"];
2566--2890[label="0.125;2pkt 2fpkt"];
2566--4017[label="0.0625;1pkt 1fpkt"];
2566--4799[label="0.0625;1pkt 1fpkt"];
2613--2890[label="0.0843373;7pkt 7fpkt"];
2771--2890[label="0.0510949;7pkt 7fpkt"];
2786--2890[label="0.0361446;3pkt 3fpkt"];
3052--4284[label="1;3pkt 3fpkt"];
4113--4844[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
1452[label="169.28.163.162;d;306pkt 306fpkt", shape=diamond, color=yellow];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.28.163.162:53}[52.6144%]&lt;BR/&gt;{*:53, 169.28.163.162:4408}[45.098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.817%)&lt;BR/&gt; 4408: (22.549%)&lt;BR/&gt; 0: (2.28758%)&lt;BR/&gt; 32768: (0.980392%)&lt;BR/&gt; 33701: (0.490196%)&gt;];
}
1452--1934[label="0.0238095;1pkt 1fpkt"];
1452--2075[label="0.0128205;1pkt 1fpkt"];
1452--2149[label="0.0140845;1pkt 1fpkt"];
1452--2778[label="0.0238095;1pkt 1fpkt"];
1452--2906[label="0.0522876;16pkt 16fpkt"];
1452--2911[label="0.0457516;14pkt 14fpkt"];
1452--2918[label="0.107843;33pkt 33fpkt"];
1452--2924[label="0.0457516;14pkt 14fpkt"];
1452--2930[label="0.107843;33pkt 33fpkt"];
1452--2932[label="0.0457516;14pkt 14fpkt"];
1452--2934[label="0.107843;33pkt 33fpkt"];
1452--3119[label="0.0185185;1pkt 1fpkt"];
1452--3232[label="0.0238095;1pkt 1fpkt"];
1452--3289[label="0.0294118;1pkt 1fpkt"];
1452--3485[label="0.0126582;1pkt 1fpkt"];
1452--3495[label="0.0434783;1pkt 1fpkt"];
1452--3555[label="0.0142857;1pkt 1fpkt"];
1452--3651[label="0.0212766;1pkt 1fpkt"];
1452--3801[label="0.0322581;1pkt 1fpkt"];
1452--4562[label="0.0142857;1pkt 1fpkt"];
1452--4697[label="0.03125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.163.162" dst_port="53"/>
      <filter dst_ip="169.28.163.162" dst_port="4408" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
490[label="197.102.179.87;d;6398pkt 6398fpkt", shape=diamond, color=yellow];
1115[label="0.8.24.101;d;29pkt 29fpkt", shape=diamond, color=yellow];
1211[label="195.81.113.183;s;831pkt 831fpkt", shape=diamond, color=yellow];
1850[label="148.177.206.204;s;37pkt 37fpkt", shape=diamond, color=yellow];
2457[label="0.8.24.101;d;8pkt 8fpkt", shape=hexagon, color=black];
3194[label="148.177.60.40;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3731[label="148.177.48.144;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4022[label="148.177.206.204;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4361[label="148.177.60.40;4pkt 4fpkt", shape=invtriangle, color=brown];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.46.61:53, 197.102.179.87:*}[34.2541%]&lt;BR/&gt;{170.227.65.135:53, 197.102.179.87:*}[28.7023%]&lt;BR/&gt;{195.81.112.4:53, 197.102.179.87:*}[20.7849%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.9728%)&lt;BR/&gt; 65340: (1.06585%)&lt;BR/&gt; 1026: (0.448065%)&lt;BR/&gt; 80: (0.373388%)&lt;BR/&gt; 32768: (0.190088%)&gt;];
}
490--491[label="0.523074;2505pkt 2505fpkt"];
490--552[label="0.0924115;274pkt 274fpkt"];
490--741[label="0.97266;2099pkt 2099fpkt"];
490--1252[label="0.814577;1520pkt 1520fpkt"];
490--2518[label="0.976785;1683pkt 1683fpkt"];
490--2730[label="0.794733;1026pkt 1026fpkt"];
490--2911[label="0.0886076;315pkt 315fpkt"];
490--2918[label="0.0801527;399pkt 399fpkt"];
490--2924[label="0.0886076;315pkt 315fpkt"];
490--2930[label="0.0801527;399pkt 399fpkt"];
490--2932[label="0.0886076;315pkt 315fpkt"];
490--2934[label="0.0801527;399pkt 399fpkt"];
1115--1181[label="0.0344828;1pkt 1fpkt"];
1115--1850[label="0.0344828;1pkt 1fpkt"];
1115--2457[label="1;8pkt 8fpkt"];
1115--2544[label="0.0344828;1pkt 1fpkt"];
1115--3194[label="0.25;1pkt 1fpkt"];
1115--3239[label="0.125;1pkt 1fpkt"];
1115--3646[label="0.272727;6pkt 6fpkt"];
1115--3731[label="0.142857;1pkt 1fpkt"];
1115--3879[label="0.0344828;1pkt 1fpkt"];
1115--4022[label="0.0344828;1pkt 1fpkt"];
1115--4361[label="0.25;1pkt 1fpkt"];
1115--4735[label="0.0344828;1pkt 1fpkt"];
1115--5125[label="0.0344828;1pkt 1fpkt"];
1211--1479[label="0.0178571;1pkt 1fpkt"];
1211--1767[label="0.0117647;1pkt 1fpkt"];
1211--1776[label="0.00970874;1pkt 1fpkt"];
1211--1916[label="0.0104167;1pkt 1fpkt"];
1211--1956[label="0.0117647;1pkt 1fpkt"];
1211--2081[label="0.012987;1pkt 1fpkt"];
1211--2090[label="0.0113636;1pkt 1fpkt"];
1211--2139[label="0.0128205;1pkt 1fpkt"];
1211--2906[label="0.0180505;15pkt 15fpkt"];
1211--2911[label="0.0517449;43pkt 43fpkt"];
1211--2918[label="0.0661853;55pkt 55fpkt"];
1211--2924[label="0.0517449;43pkt 43fpkt"];
1211--2930[label="0.0661853;55pkt 55fpkt"];
1211--2932[label="0.0517449;43pkt 43fpkt"];
1211--2934[label="0.0661853;55pkt 55fpkt"];
1850--2011[label="0.125;2pkt 2fpkt"];
1850--2457[label="0.125;1pkt 1fpkt"];
1850--4022[label="1;37pkt 37fpkt"];
2457--2544[label="0.125;1pkt 1fpkt"];
2457--4022[label="0.125;1pkt 1fpkt"];
3194--4361[label="1;4pkt 4fpkt"];
3731--4655[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="197.102.179.87" src_ip="144.39.46.61" src_port="53"/>
      <filter dst_ip="197.102.179.87" src_ip="170.227.65.135" src_port="53"/>
      <filter dst_ip="197.102.179.87" src_ip="195.81.112.4" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
1599[label="148.177.215.10;d;68pkt 68fpkt", shape=diamond, color=yellow];
3016[label="210.33.223.12;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3891[label="210.17.65.176;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4267[label="210.33.223.12;9pkt 9fpkt", shape=invtriangle, color=brown];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.177.215.10:25}[40.2174%]&lt;BR/&gt;{*:80, *:*}[28.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.4369%)&lt;BR/&gt; 80: (13.1068%)&lt;BR/&gt; 1178: (1.45631%)&lt;BR/&gt; 55497: (0.970874%)&lt;BR/&gt; 1184: (0.970874%)&gt;];
}
1599--2919[label="0.0147059;1pkt 1fpkt"];
1599--2931[label="0.0147059;1pkt 1fpkt"];
1599--2935[label="0.0147059;1pkt 1fpkt"];
1599--3016[label="0.111111;1pkt 1fpkt"];
1599--3891[label="0.0588235;1pkt 1fpkt"];
1599--4267[label="0.111111;1pkt 1fpkt"];
3016--4267[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="148.177.215.10" dst_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.178.71.0"/>
    </slice>
    <from sec="1109826454" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.166.199.0"/>
    </slice>
    <from sec="1109826328" usec="0"/>
    <to sec="1109826401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.202.0"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.74.135.2"/>
    </slice>
    <from sec="1109826034" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.65.3"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.72.4"/>
    </slice>
    <from sec="1109826011" usec="0"/>
    <to sec="1109826871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.55.7.5"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.8.5"/>
    </slice>
    <from sec="1109826541" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
1637[label="148.177.202.80;s;122pkt 122fpkt", shape=diamond, color=yellow];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.202.80:*, 73.173.16.206:2703}[76.2295%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (38.1148%)&lt;BR/&gt; 25: (11.4754%)&lt;BR/&gt; 51480: (0.819672%)&lt;BR/&gt; 51528: (0.409836%)&lt;BR/&gt; 51527: (0.409836%)&gt;];
}
1637--1785[label="0.762295;93pkt 93fpkt"];
1637--1991[label="0.114754;7pkt 7fpkt"];
1637--2005[label="0.0277778;1pkt 1fpkt"];
1637--2737[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="73.173.16.206" dst_port="2703" src_ip="148.177.202.80"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.204.8"/>
    </slice>
    <from sec="1109826074" usec="0"/>
    <to sec="1109826149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
1092[label="214.182.130.219;d;109pkt 109fpkt", shape=diamond, color=yellow];
1235[label="214.182.130.229;d;68pkt 68fpkt", shape=diamond, color=yellow];
1249[label="214.184.13.4;d;4pkt 4fpkt", shape=diamond, color=yellow];
1250[label="175.150.172.87;s;26pkt 26fpkt", shape=diamond, color=yellow];
1309[label="214.182.130.217;d;134pkt 134fpkt", shape=diamond, color=yellow];
1443[label="214.182.130.220;d;121pkt 121fpkt", shape=diamond, color=yellow];
1634[label="214.182.130.221;d;106pkt 106fpkt", shape=diamond, color=yellow];
2609[label="214.184.13.4;d;4pkt 4fpkt", shape=hexagon, color=black];
2610[label="175.150.172.87;s;26pkt 26fpkt", shape=hexagon, color=black];
2736[label="214.182.130.221;d;106pkt 106fpkt", shape=hexagon, color=black];
2994[label="175.150.130.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3000[label="175.150.138.10;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3337[label="175.150.195.62;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3440[label="175.150.172.87;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3690[label="175.150.190.134;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3753[label="175.150.197.147;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3770[label="175.150.136.151;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4001[label="175.150.224.200;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4085[label="175.150.133.218;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4222[label="175.150.214.255;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4257[label="175.150.130.9;1pkt 1fpkt", shape=invtriangle, color=brown];
4321[label="175.150.181.28;14pkt 14fpkt", shape=invtriangle, color=brown];
4499[label="175.150.172.87;25pkt 25fpkt", shape=invtriangle, color=brown];
4898[label="175.150.214.255;7pkt 7fpkt", shape=invtriangle, color=brown];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:5050}[79.2109%]&lt;BR/&gt;{*:*, 214.182.130.217:*}[20.3338%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (37.0187%)&lt;BR/&gt; 20: (3.24532%)&lt;BR/&gt; 23: (2.0352%)&lt;BR/&gt; 6663: (1.87019%)&lt;BR/&gt; 21: (1.21012%)&gt;];
}
1092--1282[label="0.00917431;1pkt 1fpkt"];
1092--2540[label="0.00943396;1pkt 1fpkt"];
1092--3000[label="0.12;3pkt 3fpkt"];
1092--3690[label="1;6pkt 6fpkt"];
1092--3753[label="0.142857;1pkt 1fpkt"];
1235--1250[label="0.0384615;1pkt 1fpkt"];
1235--1282[label="0.0147059;1pkt 1fpkt"];
1235--2610[label="0.0384615;1pkt 1fpkt"];
1235--2963[label="0.0147059;1pkt 1fpkt"];
1235--2994[label="1;1pkt 1fpkt"];
1235--3000[label="0.04;1pkt 1fpkt"];
1235--3440[label="0.0384615;1pkt 1fpkt"];
1235--3770[label="0.1;1pkt 1fpkt"];
1235--4085[label="0.0333333;1pkt 1fpkt"];
1235--4257[label="1;1pkt 1fpkt"];
1235--4499[label="0.04;1pkt 1fpkt"];
1249--1250[label="0.75;3pkt 3fpkt"];
1249--1282[label="0.25;1pkt 1fpkt"];
1249--2609[label="1;4pkt 4fpkt"];
1249--2610[label="0.75;3pkt 3fpkt"];
1249--3440[label="0.75;3pkt 3fpkt"];
1249--4499[label="0.5;2pkt 2fpkt"];
1250--1309[label="0.0384615;1pkt 1fpkt"];
1250--1430[label="0.0769231;2pkt 2fpkt"];
1250--1443[label="0.0384615;1pkt 1fpkt"];
1250--1634[label="0.0769231;2pkt 2fpkt"];
1250--2609[label="0.75;3pkt 3fpkt"];
1250--2610[label="1;26pkt 26fpkt"];
1250--2736[label="0.0769231;2pkt 2fpkt"];
1250--3440[label="1;26pkt 26fpkt"];
1250--4499[label="1;25pkt 25fpkt"];
1309--1812[label="0.866667;13pkt 13fpkt"];
1309--2610[label="0.0384615;1pkt 1fpkt"];
1309--3124[label="0.866667;13pkt 13fpkt"];
1309--3440[label="0.0384615;1pkt 1fpkt"];
1309--4001[label="0.0243902;1pkt 1fpkt"];
1309--4321[label="0.928571;13pkt 13fpkt"];
1309--4499[label="0.04;1pkt 1fpkt"];
1443--2610[label="0.0384615;1pkt 1fpkt"];
1443--3083[label="0.105263;2pkt 2fpkt"];
1443--3440[label="0.0384615;1pkt 1fpkt"];
1443--4222[label="0.142857;1pkt 1fpkt"];
1443--4499[label="0.04;1pkt 1fpkt"];
1443--4898[label="0.142857;1pkt 1fpkt"];
1634--1843[label="0.6;3pkt 3fpkt"];
1634--2610[label="0.0769231;2pkt 2fpkt"];
1634--2736[label="1;106pkt 106fpkt"];
1634--2745[label="0.6;3pkt 3fpkt"];
1634--3000[label="0.48;12pkt 12fpkt"];
1634--3337[label="1;5pkt 5fpkt"];
1634--3440[label="0.0769231;2pkt 2fpkt"];
1634--3818[label="0.6;3pkt 3fpkt"];
1634--4001[label="0.0243902;1pkt 1fpkt"];
1634--4499[label="0.08;2pkt 2fpkt"];
2609--2610[label="0.75;3pkt 3fpkt"];
2609--3440[label="0.75;3pkt 3fpkt"];
2609--4499[label="0.5;2pkt 2fpkt"];
2610--2736[label="0.0769231;2pkt 2fpkt"];
2610--3440[label="1;26pkt 26fpkt"];
2610--4499[label="1;25pkt 25fpkt"];
2736--2745[label="0.6;3pkt 3fpkt"];
2736--3000[label="0.48;12pkt 12fpkt"];
2736--3337[label="1;5pkt 5fpkt"];
2736--3440[label="0.0769231;2pkt 2fpkt"];
2736--3818[label="0.6;3pkt 3fpkt"];
2736--4001[label="0.0243902;1pkt 1fpkt"];
2736--4499[label="0.08;2pkt 2fpkt"];
2994--4257[label="1;1pkt 1fpkt"];
3440--4499[label="1;25pkt 25fpkt"];
4222--4898[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="214.182.130.217"/>
      <filter dst_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.39.146.11"/>
    </slice>
    <from sec="1109826025" usec="0"/>
    <to sec="1109826866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.224.112.12"/>
    </slice>
    <from sec="1109826198" usec="0"/>
    <to sec="1109826357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
2258[label="213.64.20.13;s;2pkt 2fpkt", shape=diamond, color=yellow];
3017[label="213.64.20.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.64.20.13:51638, 144.39.107.172:80}[50%]&lt;BR/&gt;{213.64.20.13:52264, 144.39.107.172:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52264: (25%)&lt;BR/&gt; 51638: (25%)&gt;];
}
2258--3017[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.39.107.172" dst_port="80" src_ip="213.64.20.13" src_port="52264"/>
      <filter dst_ip="144.39.107.172" dst_port="80" src_ip="213.64.20.13" src_port="51638"/>
    </slice>
    <from sec="1109826790" usec="0"/>
    <to sec="1109826842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.194.13"/>
    </slice>
    <from sec="1109826564" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.39.251.13"/>
    </slice>
    <from sec="1109826671" usec="0"/>
    <to sec="1109826888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.10.111.14"/>
    </slice>
    <from sec="1109826347" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.122.186.14"/>
    </slice>
    <from sec="1109826453" usec="0"/>
    <to sec="1109826487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863895,1.67071,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
171[label="220.61.16.108s;151pkt 151fpkt", shape=rectangle, color=red];
3029[label="128.204.249.14;212pkt 212fpkt", shape=pentagon, color=darkviolet];
3563[label="220.61.16.108;156pkt 156fpkt", shape=pentagon, color=darkviolet];
4271[label="128.204.249.14;211pkt 211fpkt", shape=invtriangle, color=brown];
4565[label="220.61.16.108;155pkt 155fpkt", shape=invtriangle, color=brown];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.204.249.14:1025, *:137}[57.6087%]&lt;BR/&gt;{220.61.16.108:1029, *:137}[42.3913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (27.6271%)&lt;BR/&gt; 1029: (22.3729%)&gt;];
}
171--3029[label="0.437086;66pkt 66fpkt"];
171--3563[label="0.562914;85pkt 85fpkt"];
171--4271[label="0.437086;66pkt 66fpkt"];
171--4565[label="0.562914;85pkt 85fpkt"];
3029--4271[label="1;211pkt 211fpkt"];
3563--4565[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="128.204.249.14" src_port="1025"/>
      <filter dst_port="137" src_ip="220.61.16.108" src_port="1029"/>
    </slice>
    <from sec="1109826508" usec="0"/>
    <to sec="1109826556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.76.179.15"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
1967[label="148.176.56.16;s;29pkt 29fpkt", shape=diamond, color=yellow];
2789[label="148.176.56.16;s;29pkt 29fpkt", shape=hexagon, color=black];
3036[label="148.176.56.16;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.56.16:*, 72.155.9.145:80}[20.6897%]&lt;BR/&gt;{148.176.56.16:32767, *:*}[20.6897%]&lt;BR/&gt;{148.176.56.16:32768, *:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.9535%)&lt;BR/&gt; 32768: (10.4651%)&lt;BR/&gt; 32767: (10.4651%)&lt;BR/&gt; 32769: (6.97674%)&lt;BR/&gt; 32770: (5.23256%)&gt;];
}
1967--2789[label="1;29pkt 29fpkt"];
1967--3036[label="1;28pkt 28fpkt"];
2789--3036[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.56.16" src_port="32768"/>
      <filter src_ip="148.176.56.16" src_port="32767"/>
      <filter dst_ip="72.155.9.145" dst_port="80" src_ip="148.176.56.16"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.187.116.16"/>
    </slice>
    <from sec="1109826502" usec="0"/>
    <to sec="1109826530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
719[label="201.39.2.234;d;2pkt 2fpkt", shape=diamond, color=yellow];
1044[label="148.176.56.18;s;13pkt 13fpkt", shape=diamond, color=yellow];
2549[label="148.176.56.18;s;11pkt 11fpkt", shape=hexagon, color=black];
2717[label="201.39.2.234;d;2pkt 2fpkt", shape=hexagon, color=black];
3055[label="148.176.56.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4286[label="148.176.56.18;2pkt 2fpkt", shape=invtriangle, color=brown];
4928[label="148.176.56.18;2pkt 2fpkt", shape=invhouse, color=bisque];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.56.18:*, *:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (16.1765%)&lt;BR/&gt; 65520: (10.2941%)&lt;BR/&gt; 65327: (7.35294%)&lt;BR/&gt; 53060: (7.35294%)&lt;BR/&gt; 62507: (2.94118%)&gt;];
}
719--1044[label="0.5;1pkt 1fpkt"];
719--2549[label="0.5;1pkt 1fpkt"];
719--2717[label="1;2pkt 2fpkt"];
719--2890[label="1;2pkt 2fpkt"];
719--3055[label="0.5;1pkt 1fpkt"];
719--4286[label="0.5;1pkt 1fpkt"];
719--4928[label="0.5;1pkt 1fpkt"];
1044--2549[label="1;11pkt 11fpkt"];
1044--2717[label="0.5;1pkt 1fpkt"];
1044--2890[label="0.0769231;1pkt 1fpkt"];
1044--3055[label="1;2pkt 2fpkt"];
1044--4286[label="1;2pkt 2fpkt"];
1044--4928[label="1;2pkt 2fpkt"];
2549--2717[label="0.5;1pkt 1fpkt"];
2549--2890[label="0.0909091;1pkt 1fpkt"];
2549--3055[label="1;2pkt 2fpkt"];
2549--4286[label="1;2pkt 2fpkt"];
2549--4928[label="1;2pkt 2fpkt"];
2717--2890[label="1;2pkt 2fpkt"];
2717--3055[label="0.5;1pkt 1fpkt"];
2717--4286[label="0.5;1pkt 1fpkt"];
2717--4928[label="0.5;1pkt 1fpkt"];
3055--4286[label="1;2pkt 2fpkt"];
3055--4928[label="1;2pkt 2fpkt"];
4286--4928[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.56.18"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
1464[label="23.73.98.222;d;95pkt 95fpkt", shape=diamond, color=yellow];
3058[label="175.150.161.18;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.233.147:*, 23.73.98.222:21}[36.8421%]&lt;BR/&gt;{175.150.161.18:*, 23.73.98.222:*}[25.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.4068%)&lt;BR/&gt; 26233: (0.847458%)&lt;BR/&gt; 19914: (0.847458%)&lt;BR/&gt; 19566: (0.847458%)&lt;BR/&gt; 18859: (0.847458%)&gt;];
}
1464--3058[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="23.73.98.222" src_ip="175.150.161.18"/>
      <filter dst_ip="23.73.98.222" dst_port="21" src_ip="175.150.233.147"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.179.116.20"/>
    </slice>
    <from sec="1109826249" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.188.20"/>
    </slice>
    <from sec="1109826117" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.18.21"/>
    </slice>
    <from sec="1109826065" usec="0"/>
    <to sec="1109826132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.5.168.21"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.179.21"/>
    </slice>
    <from sec="1109826085" usec="0"/>
    <to sec="1109826868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.50.190.21"/>
    </slice>
    <from sec="1109826777" usec="0"/>
    <to sec="1109826797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.234.21"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.231.181.22"/>
    </slice>
    <from sec="1109826222" usec="0"/>
    <to sec="1109826866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.92.41.23"/>
    </slice>
    <from sec="1109826316" usec="0"/>
    <to sec="1109826322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
1344[label="130.54.137.73;d;90pkt 90fpkt", shape=diamond, color=yellow];
3004[label="195.32.236.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3099[label="195.32.226.23;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4053[label="208.168.3.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4308[label="195.32.226.23;21pkt 21fpkt", shape=invtriangle, color=brown];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6868, 130.54.137.73:6899}[25.7732%]&lt;BR/&gt;{195.32.236.87:15777, 130.54.137.73:*}[24.7423%]&lt;BR/&gt;{195.32.226.23:*, *:*}[21.6495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14537: (14.5522%)&lt;BR/&gt; 6899: (13.0597%)&lt;BR/&gt; 6868: (9.70149%)&lt;BR/&gt; 15777: (9.32836%)&lt;BR/&gt; 0: (5.97015%)&gt;];
}
1344--3004[label="1;1pkt 1fpkt"];
1344--3099[label="0.666667;14pkt 14fpkt"];
1344--4053[label="1;1pkt 1fpkt"];
1344--4308[label="0.666667;14pkt 14fpkt"];
3099--4308[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="195.32.226.23"/>
      <filter dst_ip="130.54.137.73" src_ip="195.32.236.87" src_port="15777"/>
      <filter dst_ip="130.54.137.73" dst_port="6899" src_port="6868"/>
    </slice>
    <from sec="1109826018" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.241.23"/>
    </slice>
    <from sec="1109826113" usec="0"/>
    <to sec="1109826849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.33.71.25"/>
    </slice>
    <from sec="1109826043" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.209.193.25"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
619[label="153.10.53.112;d;17pkt 17fpkt", shape=diamond, color=yellow];
2574[label="148.176.8.26;s;15pkt 15fpkt", shape=hexagon, color=black];
2959[label="148.177.66.3;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3109[label="148.176.8.26;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.8.26:*, 73.209.221.68:80}[50.3704%]&lt;BR/&gt;{148.177.66.3:*, *:*}[24.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2892%)&lt;BR/&gt; 25: (1.80723%)&lt;BR/&gt; 3326: (0.903614%)&lt;BR/&gt; 3325: (0.903614%)&lt;BR/&gt; 3324: (0.903614%)&gt;];
}
619--833[label="0.0588235;1pkt 1fpkt"];
619--2433[label="0.0588235;1pkt 1fpkt"];
619--2574[label="0.333333;5pkt 5fpkt"];
619--2959[label="0.647059;11pkt 11fpkt"];
619--3109[label="0.294118;5pkt 5fpkt"];
2574--2890[label="0.0666667;1pkt 1fpkt"];
2574--3109[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.66.3"/>
      <filter dst_ip="73.209.221.68" dst_port="80" src_ip="148.176.8.26"/>
    </slice>
    <from sec="1109826019" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842899,1.68456,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
750[label="148.176.144.55;s;131pkt 131fpkt", shape=diamond, color=yellow];
2603[label="148.176.144.55;s;105pkt 105fpkt", shape=hexagon, color=black];
4413[label="148.176.144.55;136pkt 136fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.144.55:*, *:80}[91.3669%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9086%)&lt;BR/&gt; 3544: (1.20968%)&lt;BR/&gt; 123: (1.20968%)&lt;BR/&gt; 63784: (0.806452%)&lt;BR/&gt; 110: (0.672043%)&gt;];
}
750--1088[label="0.0152672;2pkt 2fpkt"];
750--1106[label="0.0152672;2pkt 2fpkt"];
750--1293[label="0.030303;2pkt 2fpkt"];
750--1337[label="0.166667;6pkt 6fpkt"];
750--1923[label="0.0123457;1pkt 1fpkt"];
750--1995[label="0.0547945;4pkt 4fpkt"];
750--2014[label="0.368421;7pkt 7fpkt"];
750--2603[label="1;105pkt 105fpkt"];
750--2890[label="0.0763359;10pkt 10fpkt"];
750--4413[label="0.977099;128pkt 128fpkt"];
2603--2890[label="0.0952381;10pkt 10fpkt"];
2603--4413[label="0.971429;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.144.55"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.233.27"/>
    </slice>
    <from sec="1109826004" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.64.106.29"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.53.100.30"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.92.52.32"/>
    </slice>
    <from sec="1109826739" usec="0"/>
    <to sec="1109826874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.47.60.32"/>
    </slice>
    <from sec="1109826016" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.64.106.32"/>
    </slice>
    <from sec="1109826137" usec="0"/>
    <to sec="1109826817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.24.193.32"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.206.115.33"/>
    </slice>
    <from sec="1109826051" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
2252[label="222.130.193.230;d;2pkt 2fpkt", shape=diamond, color=yellow];
2253[label="194.76.161.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
3155[label="194.76.161.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.76.161.33:1368, 222.130.193.230:443}[50%]&lt;BR/&gt;{194.76.161.33:1581, 222.130.193.230:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1581: (30%)&lt;BR/&gt; 1368: (20%)&gt;];
}
2252--2253[label="1;2pkt 2fpkt"];
2252--3155[label="1;1pkt 1fpkt"];
2253--3155[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.130.193.230" dst_port="443" src_ip="194.76.161.33" src_port="1581"/>
      <filter dst_ip="222.130.193.230" dst_port="443" src_ip="194.76.161.33" src_port="1368"/>
    </slice>
    <from sec="1109826759" usec="0"/>
    <to sec="1109826823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1950[label="144.39.7.34;s;42pkt 42fpkt", shape=diamond, color=yellow];
3160[label="144.39.7.34;41pkt 41fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.7.34:36367, *:*}[88.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36367: (44.5783%)&lt;BR/&gt; 80: (3.01205%)&lt;BR/&gt; 61067: (2.40964%)&lt;BR/&gt; 63511: (1.20482%)&lt;BR/&gt; 63327: (1.20482%)&gt;];
}
1950--3160[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="144.39.7.34" src_port="36367"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
2158[label="169.28.114.35;s;23pkt 23fpkt", shape=diamond, color=yellow];
3166[label="169.28.114.35;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4345[label="169.28.114.35;29pkt 29fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.114.35:*, 204.28.99.192:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3827%)&lt;BR/&gt; 1117: (1.85185%)&lt;BR/&gt; 1116: (1.85185%)&lt;BR/&gt; 1115: (1.85185%)&lt;BR/&gt; 1114: (1.85185%)&gt;];
}
2158--3166[label="0.956522;22pkt 22fpkt"];
2158--4345[label="0.956522;22pkt 22fpkt"];
3166--4345[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="204.28.99.192" dst_port="80" src_ip="169.28.114.35"/>
    </slice>
    <from sec="1109826025" usec="0"/>
    <to sec="1109826886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.174.160.37"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.99.19.38"/>
    </slice>
    <from sec="1109826050" usec="0"/>
    <to sec="1109826888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
987[label="175.150.164.5;d;898pkt 898fpkt", shape=diamond, color=yellow];
2401[label="175.150.164.5;d;319pkt 319fpkt", shape=hexagon, color=black];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 175.150.164.5:1363}[68.2628%]&lt;BR/&gt;{*:*, 175.150.164.5:53}[30.0668%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.7395%)&lt;BR/&gt; 1363: (34.5111%)&lt;BR/&gt; 0: (0.903862%)&lt;BR/&gt; 33701: (0.369762%)&lt;BR/&gt; 32768: (0.369762%)&gt;];
}
987--1674[label="0.0344828;1pkt 1fpkt"];
987--1934[label="0.0238095;1pkt 1fpkt"];
987--1973[label="0.0153846;1pkt 1fpkt"];
987--2075[label="0.0128205;1pkt 1fpkt"];
987--2152[label="0.0147059;1pkt 1fpkt"];
987--2401[label="1;319pkt 319fpkt"];
987--2778[label="0.0238095;1pkt 1fpkt"];
987--2906[label="0.00445434;4pkt 4fpkt"];
987--2911[label="0.0556793;50pkt 50fpkt"];
987--2918[label="0.146993;132pkt 132fpkt"];
987--2924[label="0.0556793;50pkt 50fpkt"];
987--2930[label="0.146993;132pkt 132fpkt"];
987--2932[label="0.0556793;50pkt 50fpkt"];
987--2934[label="0.146993;132pkt 132fpkt"];
987--3002[label="0.0140845;1pkt 1fpkt"];
987--3157[label="0.0357143;1pkt 1fpkt"];
987--3251[label="0.02;1pkt 1fpkt"];
987--3289[label="0.0294118;1pkt 1fpkt"];
987--3485[label="0.0126582;1pkt 1fpkt"];
987--3488[label="0.0136986;1pkt 1fpkt"];
987--3495[label="0.0434783;1pkt 1fpkt"];
987--3535[label="0.0120482;1pkt 1fpkt"];
987--3651[label="0.0212766;1pkt 1fpkt"];
987--3801[label="0.0322581;1pkt 1fpkt"];
987--3934[label="0.166667;1pkt 1fpkt"];
987--3963[label="0.166667;1pkt 1fpkt"];
987--4339[label="0.0344828;1pkt 1fpkt"];
987--4391[label="0.02;1pkt 1fpkt"];
987--4528[label="0.0138889;1pkt 1fpkt"];
987--4551[label="0.0120482;1pkt 1fpkt"];
987--4697[label="0.03125;1pkt 1fpkt"];
2401--2778[label="0.0238095;1pkt 1fpkt"];
2401--2906[label="0.0125392;4pkt 4fpkt"];
2401--2911[label="0.15674;50pkt 50fpkt"];
2401--2918[label="0.238245;76pkt 76fpkt"];
2401--2924[label="0.15674;50pkt 50fpkt"];
2401--2930[label="0.238245;76pkt 76fpkt"];
2401--2932[label="0.15674;50pkt 50fpkt"];
2401--2934[label="0.238245;76pkt 76fpkt"];
2401--3289[label="0.0294118;1pkt 1fpkt"];
2401--3485[label="0.0126582;1pkt 1fpkt"];
2401--3495[label="0.0434783;1pkt 1fpkt"];
2401--3651[label="0.0212766;1pkt 1fpkt"];
2401--3963[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.164.5" dst_port="53"/>
      <filter dst_ip="175.150.164.5" dst_port="1363" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.49.56.39"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.144.39"/>
    </slice>
    <from sec="1109826017" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.24.40"/>
    </slice>
    <from sec="1109826716" usec="0"/>
    <to sec="1109826760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.42.40"/>
    </slice>
    <from sec="1109826056" usec="0"/>
    <to sec="1109826445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.94.99.40"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.244.122.40"/>
    </slice>
    <from sec="1109826590" usec="0"/>
    <to sec="1109826627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
695[label="75.80.27.195;d;210pkt 210fpkt", shape=diamond, color=yellow];
720[label="148.176.146.22;s;33pkt 33fpkt", shape=diamond, color=yellow];
721[label="75.80.27.202;d;132pkt 132fpkt", shape=diamond, color=yellow];
749[label="148.176.172.132;s;224pkt 224fpkt", shape=diamond, color=yellow];
1303[label="197.84.197.182;d;22pkt 22fpkt", shape=diamond, color=yellow];
1546[label="169.28.149.200;s;42pkt 42fpkt", shape=diamond, color=yellow];
1856[label="194.64.145.100;s;11pkt 11fpkt", shape=diamond, color=yellow];
1923[label="197.139.76.158;d;81pkt 81fpkt", shape=diamond, color=yellow];
2202[label="148.177.83.27;s;27pkt 27fpkt", shape=diamond, color=yellow];
2522[label="148.176.172.132;s;203pkt 203fpkt", shape=hexagon, color=black];
2560[label="197.84.197.182;d;22pkt 22fpkt", shape=hexagon, color=black];
2690[label="23.24.200.84;d;36pkt 36fpkt", shape=hexagon, color=black];
2750[label="194.64.145.100;s;9pkt 9fpkt", shape=hexagon, color=black];
2847[label="148.177.83.27;s;27pkt 27fpkt", shape=hexagon, color=black];
2998[label="169.28.32.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3042[label="148.176.133.16;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3063[label="148.177.83.19;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3116[label="148.177.83.27;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3169[label="148.177.251.35;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3202[label="148.176.56.41;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3216[label="169.28.113.43;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3520[label="194.64.145.100;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3605[label="148.177.33.117;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3678[label="148.176.172.132;259pkt 259fpkt", shape=pentagon, color=darkviolet];
3699[label="148.177.81.136;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3702[label="148.177.42.137;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3709[label="148.176.172.138;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3790[label="148.177.81.155;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3840[label="148.177.208.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3873[label="148.177.208.170;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3900[label="148.177.208.177;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3999[label="169.28.149.200;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4014[label="144.39.52.203;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4088[label="148.177.51.219;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4090[label="148.177.81.219;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4259[label="169.28.32.10;3pkt 3fpkt", shape=invtriangle, color=brown];
4277[label="148.176.133.16;79pkt 79fpkt", shape=invtriangle, color=brown];
4292[label="148.177.83.19;5pkt 5fpkt", shape=invtriangle, color=brown];
4318[label="148.177.83.27;28pkt 28fpkt", shape=invtriangle, color=brown];
4365[label="148.176.56.41;4pkt 4fpkt", shape=invtriangle, color=brown];
4381[label="148.177.57.46;9pkt 9fpkt", shape=invtriangle, color=brown];
4494[label="148.177.70.84;4pkt 4fpkt", shape=invtriangle, color=brown];
4542[label="194.64.145.100;11pkt 11fpkt", shape=invtriangle, color=brown];
4625[label="148.176.172.132;258pkt 258fpkt", shape=invtriangle, color=brown];
4734[label="148.177.208.170;6pkt 6fpkt", shape=invtriangle, color=brown];
4749[label="148.177.208.177;5pkt 5fpkt", shape=invtriangle, color=brown];
4792[label="169.28.149.200;41pkt 41fpkt", shape=invtriangle, color=brown];
4833[label="148.177.81.219;7pkt 7fpkt", shape=invtriangle, color=brown];
4939[label="148.176.146.22;33pkt 33fpkt", shape=invhouse, color=bisque];
4961[label="148.176.56.41;4pkt 4fpkt", shape=invhouse, color=bisque];
4965[label="148.177.57.46;10pkt 10fpkt", shape=invhouse, color=bisque];
5013[label="148.177.70.84;4pkt 4fpkt", shape=invhouse, color=bisque];
5040[label="194.64.145.100;10pkt 10fpkt", shape=invhouse, color=bisque];
5123[label="148.177.58.169;7pkt 7fpkt", shape=invhouse, color=bisque];
5132[label="148.177.208.177;5pkt 5fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.172.132:*, *:80}[25.9939%]&lt;BR/&gt;{*:*, 75.80.27.195:80}[21.5087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2819%)&lt;BR/&gt; 443: (1.23344%)&lt;BR/&gt; 53: (0.571037%)&lt;BR/&gt; 4211: (0.251256%)&lt;BR/&gt; 1863: (0.205573%)&gt;];
}
695--720[label="0.030303;1pkt 1fpkt"];
695--749[label="0.0238095;5pkt 5fpkt"];
695--789[label="0.0047619;1pkt 1fpkt"];
695--818[label="0.00552486;1pkt 1fpkt"];
695--844[label="0.0518519;7pkt 7fpkt"];
695--848[label="0.0047619;1pkt 1fpkt"];
695--1050[label="0.00649351;1pkt 1fpkt"];
695--1181[label="0.135417;13pkt 13fpkt"];
695--1202[label="0.0127389;2pkt 2fpkt"];
695--1330[label="0.0322581;3pkt 3fpkt"];
695--1743[label="1;11pkt 11fpkt"];
695--1856[label="0.0909091;1pkt 1fpkt"];
695--2197[label="0.0151515;1pkt 1fpkt"];
695--2206[label="0.0909091;1pkt 1fpkt"];
695--2296[label="0.0152672;2pkt 2fpkt"];
695--2388[label="0.0142857;3pkt 3fpkt"];
695--2508[label="0.0047619;1pkt 1fpkt"];
695--2517[label="0.019802;2pkt 2fpkt"];
695--2522[label="0.0246305;5pkt 5fpkt"];
695--2568[label="0.0322581;3pkt 3fpkt"];
695--2720[label="0.00952381;2pkt 2fpkt"];
695--2758[label="1;9pkt 9fpkt"];
695--2835[label="0.00552486;1pkt 1fpkt"];
695--2849[label="0.0909091;1pkt 1fpkt"];
695--2890[label="0.0857143;18pkt 18fpkt"];
695--2970[label="0.0272727;3pkt 3fpkt"];
695--3042[label="0.0379747;3pkt 3fpkt"];
695--3047[label="0.0121951;2pkt 2fpkt"];
695--3063[label="1;4pkt 4fpkt"];
695--3169[label="1;4pkt 4fpkt"];
695--3202[label="0.8;4pkt 4fpkt"];
695--3216[label="0.666667;4pkt 4fpkt"];
695--3345[label="0.25;6pkt 6fpkt"];
695--3442[label="0.75;6pkt 6fpkt"];
695--3520[label="0.0909091;1pkt 1fpkt"];
695--3605[label="0.166667;1pkt 1fpkt"];
695--3678[label="0.0238095;5pkt 5fpkt"];
695--3702[label="0.8;4pkt 4fpkt"];
695--3709[label="0.8;4pkt 4fpkt"];
695--3825[label="0.111111;1pkt 1fpkt"];
695--3840[label="0.8;4pkt 4fpkt"];
695--3873[label="0.714286;5pkt 5fpkt"];
695--3874[label="0.0254237;3pkt 3fpkt"];
695--3879[label="0.13;13pkt 13fpkt"];
695--3900[label="0.8;4pkt 4fpkt"];
695--3971[label="0.00591716;1pkt 1fpkt"];
695--4002[label="0.0047619;1pkt 1fpkt"];
695--4014[label="0.037037;1pkt 1fpkt"];
695--4017[label="0.0238095;5pkt 5fpkt"];
695--4090[label="1;6pkt 6fpkt"];
695--4183[label="0.916667;11pkt 11fpkt"];
695--4242[label="0.0272727;3pkt 3fpkt"];
695--4277[label="0.0379747;3pkt 3fpkt"];
695--4292[label="1;5pkt 5fpkt"];
695--4365[label="1;4pkt 4fpkt"];
695--4500[label="0.75;6pkt 6fpkt"];
695--4542[label="0.0909091;1pkt 1fpkt"];
695--4625[label="0.0238095;5pkt 5fpkt"];
695--4635[label="0.0666667;1pkt 1fpkt"];
695--4734[label="0.833333;5pkt 5fpkt"];
695--4735[label="0.131313;13pkt 13fpkt"];
695--4749[label="0.8;4pkt 4fpkt"];
695--4781[label="0.00591716;1pkt 1fpkt"];
695--4793[label="0.0047619;1pkt 1fpkt"];
695--4799[label="0.0238095;5pkt 5fpkt"];
695--4813[label="0.0152672;2pkt 2fpkt"];
695--4833[label="0.857143;6pkt 6fpkt"];
695--4939[label="0.030303;1pkt 1fpkt"];
695--4961[label="1;4pkt 4fpkt"];
695--5040[label="0.1;1pkt 1fpkt"];
695--5123[label="0.142857;1pkt 1fpkt"];
695--5125[label="0.131313;13pkt 13fpkt"];
695--5132[label="0.8;4pkt 4fpkt"];
695--5155[label="0.0152672;2pkt 2fpkt"];
720--971[label="0.5;1pkt 1fpkt"];
720--1083[label="0.030303;1pkt 1fpkt"];
720--1792[label="0.030303;1pkt 1fpkt"];
720--1829[label="0.030303;1pkt 1fpkt"];
720--2890[label="0.212121;7pkt 7fpkt"];
720--4939[label="0.969697;32pkt 32fpkt"];
721--1025[label="0.0151515;2pkt 2fpkt"];
721--1168[label="0.125;1pkt 1fpkt"];
721--1181[label="0.0208333;2pkt 2fpkt"];
721--1327[label="0.0285714;1pkt 1fpkt"];
721--1501[label="0.00757576;1pkt 1fpkt"];
721--2202[label="0.111111;3pkt 3fpkt"];
721--2206[label="0.0909091;1pkt 1fpkt"];
721--2296[label="0.0152672;2pkt 2fpkt"];
721--2388[label="0.0151515;2pkt 2fpkt"];
721--2504[label="0.00757576;1pkt 1fpkt"];
721--2508[label="0.0151515;2pkt 2fpkt"];
721--2510[label="0.0378788;5pkt 5fpkt"];
721--2544[label="0.0206186;2pkt 2fpkt"];
721--2567[label="0.0285714;1pkt 1fpkt"];
721--2620[label="0.00757576;1pkt 1fpkt"];
721--2847[label="0.111111;3pkt 3fpkt"];
721--2849[label="0.0909091;1pkt 1fpkt"];
721--2890[label="0.0530303;7pkt 7fpkt"];
721--2959[label="0.0909091;3pkt 3fpkt"];
721--3116[label="0.111111;3pkt 3fpkt"];
721--3202[label="0.2;1pkt 1fpkt"];
721--3229[label="0.111111;1pkt 1fpkt"];
721--3345[label="0.125;3pkt 3fpkt"];
721--3431[label="1;3pkt 3fpkt"];
721--3584[label="0.0769231;1pkt 1fpkt"];
721--3699[label="0.0555556;1pkt 1fpkt"];
721--3790[label="0.25;4pkt 4fpkt"];
721--3868[label="0.2;1pkt 1fpkt"];
721--3873[label="0.142857;1pkt 1fpkt"];
721--3879[label="0.02;2pkt 2fpkt"];
721--3900[label="0.2;1pkt 1fpkt"];
721--4002[label="0.0530303;7pkt 7fpkt"];
721--4017[label="0.0227273;3pkt 3fpkt"];
721--4088[label="0.0810811;3pkt 3fpkt"];
721--4295[label="0.2;1pkt 1fpkt"];
721--4318[label="0.107143;3pkt 3fpkt"];
721--4381[label="0.111111;1pkt 1fpkt"];
721--4494[label="1;4pkt 4fpkt"];
721--4734[label="0.166667;1pkt 1fpkt"];
721--4735[label="0.020202;2pkt 2fpkt"];
721--4749[label="0.2;1pkt 1fpkt"];
721--4793[label="0.0530303;7pkt 7fpkt"];
721--4799[label="0.0227273;3pkt 3fpkt"];
721--4813[label="0.0152672;2pkt 2fpkt"];
721--4933[label="0.2;1pkt 1fpkt"];
721--4965[label="0.1;1pkt 1fpkt"];
721--5013[label="1;4pkt 4fpkt"];
721--5123[label="0.142857;1pkt 1fpkt"];
721--5125[label="0.020202;2pkt 2fpkt"];
721--5132[label="0.2;1pkt 1fpkt"];
721--5155[label="0.0152672;2pkt 2fpkt"];
749--802[label="0.00483092;1pkt 1fpkt"];
749--967[label="0.0223214;5pkt 5fpkt"];
749--1279[label="0.00460829;1pkt 1fpkt"];
749--1293[label="0.0151515;1pkt 1fpkt"];
749--1745[label="0.00952381;2pkt 2fpkt"];
749--1923[label="0.580247;47pkt 47fpkt"];
749--2082[label="0.0147059;1pkt 1fpkt"];
749--2522[label="1;203pkt 203fpkt"];
749--2890[label="0.0446429;10pkt 10fpkt"];
749--3678[label="1;224pkt 224fpkt"];
749--4625[label="0.995536;223pkt 223fpkt"];
1303--1330[label="0.272727;6pkt 6fpkt"];
1303--1546[label="0.0909091;2pkt 2fpkt"];
1303--1833[label="0.0454545;1pkt 1fpkt"];
1303--1999[label="0.136364;3pkt 3fpkt"];
1303--2560[label="1;22pkt 22fpkt"];
1303--2568[label="0.272727;6pkt 6fpkt"];
1303--2890[label="0.136364;3pkt 3fpkt"];
1303--2959[label="0.0454545;1pkt 1fpkt"];
1303--2970[label="0.272727;6pkt 6fpkt"];
1303--2998[label="0.5;2pkt 2fpkt"];
1303--3042[label="0.0909091;2pkt 2fpkt"];
1303--3204[label="0.0454545;1pkt 1fpkt"];
1303--3708[label="0.0454545;1pkt 1fpkt"];
1303--3999[label="0.0909091;2pkt 2fpkt"];
1303--4036[label="0.0454545;1pkt 1fpkt"];
1303--4242[label="0.272727;6pkt 6fpkt"];
1303--4259[label="0.666667;2pkt 2fpkt"];
1303--4277[label="0.0909091;2pkt 2fpkt"];
1303--4366[label="0.0454545;1pkt 1fpkt"];
1303--4635[label="0.0666667;1pkt 1fpkt"];
1303--4792[label="0.0909091;2pkt 2fpkt"];
1303--4809[label="0.0454545;1pkt 1fpkt"];
1546--1987[label="0.0357143;1pkt 1fpkt"];
1546--2560[label="0.0909091;2pkt 2fpkt"];
1546--2700[label="0.731707;30pkt 30fpkt"];
1546--3999[label="1;41pkt 41fpkt"];
1546--4792[label="1;41pkt 41fpkt"];
1856--2118[label="0.0909091;1pkt 1fpkt"];
1856--2120[label="0.0909091;1pkt 1fpkt"];
1856--2690[label="0.454545;5pkt 5fpkt"];
1856--2692[label="0.181818;2pkt 2fpkt"];
1856--2750[label="1;9pkt 9fpkt"];
1856--3520[label="1;11pkt 11fpkt"];
1856--4542[label="1;11pkt 11fpkt"];
1856--5040[label="1;10pkt 10fpkt"];
1923--2312[label="0.037037;3pkt 3fpkt"];
1923--2333[label="0.0246914;2pkt 2fpkt"];
1923--2517[label="0.0123457;1pkt 1fpkt"];
1923--2522[label="0.407407;33pkt 33fpkt"];
1923--2603[label="0.0123457;1pkt 1fpkt"];
1923--2890[label="0.0493827;4pkt 4fpkt"];
1923--3227[label="0.037037;3pkt 3fpkt"];
1923--3678[label="0.580247;47pkt 47fpkt"];
1923--3971[label="0.0123457;1pkt 1fpkt"];
1923--4413[label="0.0123457;1pkt 1fpkt"];
1923--4625[label="0.580247;47pkt 47fpkt"];
1923--4781[label="0.0123457;1pkt 1fpkt"];
2202--2847[label="1;27pkt 27fpkt"];
2202--3116[label="0.962963;26pkt 26fpkt"];
2202--4318[label="1;27pkt 27fpkt"];
2522--2890[label="0.0492611;10pkt 10fpkt"];
2522--3678[label="1;203pkt 203fpkt"];
2522--4625[label="0.995074;202pkt 202fpkt"];
2560--2568[label="0.272727;6pkt 6fpkt"];
2560--2890[label="0.136364;3pkt 3fpkt"];
2560--2959[label="0.0454545;1pkt 1fpkt"];
2560--2970[label="0.272727;6pkt 6fpkt"];
2560--2998[label="0.5;2pkt 2fpkt"];
2560--3042[label="0.0909091;2pkt 2fpkt"];
2560--3204[label="0.0454545;1pkt 1fpkt"];
2560--3708[label="0.0454545;1pkt 1fpkt"];
2560--3999[label="0.0909091;2pkt 2fpkt"];
2560--4036[label="0.0454545;1pkt 1fpkt"];
2560--4242[label="0.272727;6pkt 6fpkt"];
2560--4259[label="0.666667;2pkt 2fpkt"];
2560--4277[label="0.0909091;2pkt 2fpkt"];
2560--4366[label="0.0454545;1pkt 1fpkt"];
2560--4635[label="0.0666667;1pkt 1fpkt"];
2560--4792[label="0.0909091;2pkt 2fpkt"];
2560--4809[label="0.0454545;1pkt 1fpkt"];
2690--2720[label="0.0277778;1pkt 1fpkt"];
2690--2750[label="0.555556;5pkt 5fpkt"];
2690--2890[label="0.0277778;1pkt 1fpkt"];
2690--3154[label="0.0333333;1pkt 1fpkt"];
2690--3520[label="0.454545;5pkt 5fpkt"];
2690--3873[label="0.142857;1pkt 1fpkt"];
2690--3931[label="0.75;3pkt 3fpkt"];
2690--4542[label="0.454545;5pkt 5fpkt"];
2690--4765[label="0.8;4pkt 4fpkt"];
2690--4813[label="0.0555556;2pkt 2fpkt"];
2690--5040[label="0.5;5pkt 5fpkt"];
2690--5155[label="0.0555556;2pkt 2fpkt"];
2750--3520[label="1;9pkt 9fpkt"];
2750--4542[label="1;9pkt 9fpkt"];
2750--5040[label="0.888889;8pkt 8fpkt"];
2847--3116[label="0.962963;26pkt 26fpkt"];
2847--4318[label="1;27pkt 27fpkt"];
2998--4259[label="1;3pkt 3fpkt"];
3042--4277[label="1;79pkt 79fpkt"];
3063--4292[label="1;4pkt 4fpkt"];
3116--4318[label="1;27pkt 27fpkt"];
3202--4365[label="1;4pkt 4fpkt"];
3202--4961[label="1;4pkt 4fpkt"];
3520--4542[label="1;11pkt 11fpkt"];
3520--5040[label="1;10pkt 10fpkt"];
3678--4625[label="1;258pkt 258fpkt"];
3873--4734[label="1;6pkt 6fpkt"];
3900--4749[label="1;5pkt 5fpkt"];
3900--5132[label="1;5pkt 5fpkt"];
3999--4792[label="1;41pkt 41fpkt"];
4090--4833[label="1;6pkt 6fpkt"];
4365--4961[label="1;4pkt 4fpkt"];
4381--4965[label="1;9pkt 9fpkt"];
4494--5013[label="1;4pkt 4fpkt"];
4542--5040[label="1;10pkt 10fpkt"];
4749--5132[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.172.132"/>
      <filter dst_ip="75.80.27.195" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.239.97.42"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.64.115.42"/>
    </slice>
    <from sec="1109826679" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.48.25.43"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.48.43"/>
    </slice>
    <from sec="1109826082" usec="0"/>
    <to sec="1109826820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
544[label="203.128.101.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
739[label="148.176.79.43;s;101pkt 101fpkt", shape=diamond, color=yellow];
2196[label="74.169.216.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2396[label="148.176.79.43;s;69pkt 69fpkt", shape=hexagon, color=black];
3214[label="148.176.79.43;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4372[label="148.176.79.43;101pkt 101fpkt", shape=invtriangle, color=brown];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.79.43:*, *:80}[92.0792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8556%)&lt;BR/&gt; 53: (4.14439%)&lt;BR/&gt; 46204: (0.668449%)&lt;BR/&gt; 55951: (0.534759%)&lt;BR/&gt; 55582: (0.534759%)&gt;];
}
544--739[label="1;1pkt 1fpkt"];
544--2396[label="1;1pkt 1fpkt"];
544--2890[label="1;1pkt 1fpkt"];
544--3214[label="1;1pkt 1fpkt"];
544--4372[label="1;1pkt 1fpkt"];
739--1491[label="0.019802;2pkt 2fpkt"];
739--1492[label="0.019802;2pkt 2fpkt"];
739--1517[label="0.25;7pkt 7fpkt"];
739--1679[label="0.138614;14pkt 14fpkt"];
739--1829[label="0.1;6pkt 6fpkt"];
739--2117[label="0.11828;11pkt 11fpkt"];
739--2120[label="0.0181818;1pkt 1fpkt"];
739--2196[label="1;1pkt 1fpkt"];
739--2396[label="1;69pkt 69fpkt"];
739--2738[label="0.019802;2pkt 2fpkt"];
739--2865[label="0.0192308;1pkt 1fpkt"];
739--2890[label="0.207921;21pkt 21fpkt"];
739--2906[label="0.00990099;1pkt 1fpkt"];
739--3214[label="1;101pkt 101fpkt"];
739--4372[label="1;101pkt 101fpkt"];
2196--3214[label="1;1pkt 1fpkt"];
2196--4372[label="1;1pkt 1fpkt"];
2396--2738[label="0.0289855;2pkt 2fpkt"];
2396--2890[label="0.304348;21pkt 21fpkt"];
2396--2906[label="0.0144928;1pkt 1fpkt"];
2396--3214[label="1;69pkt 69fpkt"];
2396--4372[label="1;69pkt 69fpkt"];
3214--4372[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.79.43"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
1305[label="169.28.32.44;s;33pkt 33fpkt", shape=diamond, color=yellow];
2621[label="169.28.32.44;s;31pkt 31fpkt", shape=hexagon, color=black];
3220[label="169.28.32.44;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4377[label="169.28.32.44;32pkt 32fpkt", shape=invtriangle, color=brown];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.32.44:*, *:80}[93.9394%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 6301: (1.5625%)&lt;BR/&gt; 5050: (1.5625%)&lt;BR/&gt; 3960: (1.5625%)&lt;BR/&gt; 3959: (1.5625%)&gt;];
}
1305--2621[label="1;31pkt 31fpkt"];
1305--3220[label="1;32pkt 32fpkt"];
1305--4377[label="1;32pkt 32fpkt"];
2621--3220[label="0.967742;30pkt 30fpkt"];
2621--4377[label="0.967742;30pkt 30fpkt"];
3220--4377[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="169.28.32.44"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.9.64.46"/>
    </slice>
    <from sec="1109826645" usec="0"/>
    <to sec="1109826754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.166.197.46"/>
    </slice>
    <from sec="1109826500" usec="0"/>
    <to sec="1109826847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.132.214.47"/>
    </slice>
    <from sec="1109826004" usec="0"/>
    <to sec="1109826850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.232.192.48"/>
    </slice>
    <from sec="1109826019" usec="0"/>
    <to sec="1109826889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.240.48"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.28.50"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.111.73.50"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.196.91.50"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.230.163.50"/>
    </slice>
    <from sec="1109826418" usec="0"/>
    <to sec="1109826534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
1288[label="73.241.188.74;s;84pkt 84fpkt", shape=diamond, color=yellow];
1534[label="169.28.129.171;d;83pkt 83fpkt", shape=diamond, color=yellow];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.28.129.171:80}[50.9202%]&lt;BR/&gt;{73.241.188.74:*, *:80}[47.2393%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9042%)&lt;BR/&gt; 53: (1.49701%)&lt;BR/&gt; 61860: (0.598802%)&lt;BR/&gt; 56909: (0.598802%)&lt;BR/&gt; 47950: (0.598802%)&gt;];
}
1288--1488[label="0.0483871;3pkt 3fpkt"];
1288--1530[label="0.0447761;3pkt 3fpkt"];
1288--1534[label="0.0481928;4pkt 4fpkt"];
1288--1759[label="0.0119048;1pkt 1fpkt"];
1288--1760[label="0.0555556;1pkt 1fpkt"];
1288--1976[label="0.04;2pkt 2fpkt"];
1288--2159[label="0.025;1pkt 1fpkt"];
1288--2890[label="0.047619;4pkt 4fpkt"];
1288--3402[label="1;84pkt 84fpkt"];
1534--1653[label="0.0338983;2pkt 2fpkt"];
1534--1664[label="0.0178571;1pkt 1fpkt"];
1534--1666[label="0.0526316;4pkt 4fpkt"];
1534--1678[label="0.0566038;3pkt 3fpkt"];
1534--1973[label="0.0153846;1pkt 1fpkt"];
1534--2149[label="0.028169;2pkt 2fpkt"];
1534--2152[label="0.0735294;5pkt 5fpkt"];
1534--2688[label="0.0526316;4pkt 4fpkt"];
1534--2790[label="0.0163934;1pkt 1fpkt"];
1534--2890[label="0.0361446;3pkt 3fpkt"];
1534--2941[label="0.0461538;3pkt 3fpkt"];
1534--2965[label="0.0517241;3pkt 3fpkt"];
1534--2971[label="0.0481928;4pkt 4fpkt"];
1534--2989[label="0.0566038;3pkt 3fpkt"];
1534--2995[label="0.02;1pkt 1fpkt"];
1534--3002[label="0.0704225;5pkt 5fpkt"];
1534--3007[label="0.030303;1pkt 1fpkt"];
1534--3059[label="0.0204082;1pkt 1fpkt"];
1534--3119[label="0.0185185;1pkt 1fpkt"];
1534--3232[label="0.0238095;1pkt 1fpkt"];
1534--3251[label="0.06;3pkt 3fpkt"];
1534--3269[label="0.0697674;3pkt 3fpkt"];
1534--3294[label="0.0263158;1pkt 1fpkt"];
1534--3402[label="0.0481928;4pkt 4fpkt"];
1534--3428[label="0.0238095;1pkt 1fpkt"];
1534--3447[label="0.0625;4pkt 4fpkt"];
1534--3488[label="0.0136986;1pkt 1fpkt"];
1534--3521[label="0.05;4pkt 4fpkt"];
1534--3535[label="0.0120482;1pkt 1fpkt"];
1534--3555[label="0.0285714;2pkt 2fpkt"];
1534--4239[label="0.0526316;3pkt 3fpkt"];
1534--4289[label="0.0204082;1pkt 1fpkt"];
1534--4391[label="0.06;3pkt 3fpkt"];
1534--4417[label="0.0263158;1pkt 1fpkt"];
1534--4528[label="0.0138889;1pkt 1fpkt"];
1534--4543[label="0.05;4pkt 4fpkt"];
1534--4551[label="0.0120482;1pkt 1fpkt"];
1534--4562[label="0.0285714;2pkt 2fpkt"];
1534--4909[label="0.0517241;3pkt 3fpkt"];
1534--4982[label="0.0263158;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="73.241.188.74"/>
      <filter dst_ip="169.28.129.171" dst_port="80"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.54.51"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.66.103.51"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.23.174.51"/>
    </slice>
    <from sec="1109826268" usec="0"/>
    <to sec="1109826590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.113.49.52"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.130.216.52"/>
    </slice>
    <from sec="1109826008" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.103.131.53"/>
    </slice>
    <from sec="1109826608" usec="0"/>
    <to sec="1109826732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.34.202.53"/>
    </slice>
    <from sec="1109826352" usec="0"/>
    <to sec="1109826689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.148.18.54"/>
    </slice>
    <from sec="1109826004" usec="0"/>
    <to sec="1109826369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,501,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
1931[label="23.73.98.223;d;97pkt 97fpkt", shape=diamond, color=yellow];
3278[label="175.150.44.54;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4407[label="175.150.44.54;10pkt 10fpkt", shape=invtriangle, color=brown];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 23.73.98.223:21}[82.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (38.8889%)&lt;BR/&gt; 53: (5.12821%)&lt;BR/&gt; 3253: (1.28205%)&lt;BR/&gt; 3249: (1.28205%)&lt;BR/&gt; 1240: (1.28205%)&gt;];
}
1931--3278[label="0.2;2pkt 2fpkt"];
1931--4407[label="0.2;2pkt 2fpkt"];
3278--4407[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="23.73.98.223" dst_port="21"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.121.3.55"/>
    </slice>
    <from sec="1109826846" usec="0"/>
    <to sec="1109826887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.32.26.55"/>
    </slice>
    <from sec="1109826706" usec="0"/>
    <to sec="1109826728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.168.170.56"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.238.98.57"/>
    </slice>
    <from sec="1109826010" usec="0"/>
    <to sec="1109826888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.103.131.58"/>
    </slice>
    <from sec="1109826851" usec="0"/>
    <to sec="1109826865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
1196[label="144.39.46.60;s;82pkt 82fpkt", shape=diamond, color=yellow];
3321[label="144.39.46.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.46.60:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 46759: (1.20482%)&lt;BR/&gt; 46841: (0.60241%)&lt;BR/&gt; 46763: (0.60241%)&lt;BR/&gt; 46758: (0.60241%)&gt;];
}
1196--1239[label="0.289474;11pkt 11fpkt"];
1196--1831[label="0.268293;11pkt 11fpkt"];
1196--1834[label="0.275;11pkt 11fpkt"];
1196--2005[label="0.277778;10pkt 10fpkt"];
1196--2512[label="1;52pkt 52fpkt"];
1196--3321[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="144.39.46.60"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
1138[label="20.247.89.60;s;1524pkt 1524fpkt", shape=diamond, color=yellow];
3322[label="20.247.89.60;1523pkt 1523fpkt", shape=pentagon, color=darkviolet];
4434[label="20.247.89.60;1523pkt 1523fpkt", shape=invtriangle, color=brown];
4987[label="20.247.89.60;1524pkt 1524fpkt", shape=invhouse, color=bisque];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.247.89.60:*, *:139}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (16.6557%)&lt;BR/&gt; 4899: (8.36889%)&lt;BR/&gt; 6101: (8.33607%)&lt;BR/&gt; 5900: (8.33607%)&lt;BR/&gt; 42: (8.33607%)&gt;];
}
1138--3322[label="1;1523pkt 1523fpkt"];
1138--4434[label="1;1523pkt 1523fpkt"];
1138--4987[label="1;1524pkt 1524fpkt"];
3322--4434[label="1;1523pkt 1523fpkt"];
3322--4987[label="1;1523pkt 1523fpkt"];
4434--4987[label="1;1523pkt 1523fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="20.247.89.60"/>
    </slice>
    <from sec="1109826190" usec="0"/>
    <to sec="1109826261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801955,1.70721,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
64[label="213.111.205.61s;107pkt 107fpkt", shape=rectangle, color=red];
3328[label="213.111.205.61;243pkt 243fpkt", shape=pentagon, color=darkviolet];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.111.205.61:50123, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50123: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
64--3328[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.111.205.61" src_port="50123"/>
    </slice>
    <from sec="1109826485" usec="0"/>
    <to sec="1109826500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.200.65"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.116.247.66"/>
    </slice>
    <from sec="1109826884" usec="0"/>
    <to sec="1109826890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.85.67"/>
    </slice>
    <from sec="1109826123" usec="0"/>
    <to sec="1109826738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
528[label="195.81.123.67;s;14pkt 14fpkt", shape=diamond, color=yellow];
723[label="77.166.229.210;d;2pkt 2fpkt", shape=diamond, color=yellow];
1379[label="41.222.199.71;d;4pkt 4fpkt", shape=diamond, color=yellow];
1560[label="50.244.74.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
3361[label="195.81.123.67;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.123.67:554, *:*}[27.7778%]&lt;BR/&gt;{195.81.123.67:*, 75.72.176.27:*}[27.7778%]&lt;BR/&gt;{195.81.123.67:1755, 41.222.199.71:*}[22.2222%]&lt;BR/&gt;{195.81.123.67:*, 76.174.129.4:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (32.0513%)&lt;BR/&gt; 554: (10.2564%)&lt;BR/&gt; 62399: (3.84615%)&lt;BR/&gt; 62398: (3.84615%)&lt;BR/&gt; 62366: (3.84615%)&gt;];
}
528--565[label="1;1pkt 1fpkt"];
528--723[label="1;2pkt 2fpkt"];
528--1379[label="1;4pkt 4fpkt"];
528--1560[label="1;2pkt 2fpkt"];
528--3361[label="0.928571;13pkt 13fpkt"];
723--3361[label="1;2pkt 2fpkt"];
1379--3361[label="1;4pkt 4fpkt"];
1560--3361[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.72.176.27" src_ip="195.81.123.67"/>
      <filter dst_ip="76.174.129.4" src_ip="195.81.123.67"/>
      <filter src_ip="195.81.123.67" src_port="554"/>
      <filter dst_ip="41.222.199.71" src_ip="195.81.123.67" src_port="1755"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.124.181.68"/>
    </slice>
    <from sec="1109826675" usec="0"/>
    <to sec="1109826677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.22.69"/>
    </slice>
    <from sec="1109826059" usec="0"/>
    <to sec="1109826465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.80.24.70"/>
    </slice>
    <from sec="1109826683" usec="0"/>
    <to sec="1109826727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.238.178.70"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.32.71"/>
    </slice>
    <from sec="1109826821" usec="0"/>
    <to sec="1109826853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.183.71"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.166.228.71"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.112.40.72"/>
    </slice>
    <from sec="1109826346" usec="0"/>
    <to sec="1109826606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
1496[label="214.100.85.233;d;269pkt 269fpkt", shape=diamond, color=yellow];
3365[label="169.28.114.68;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3399[label="148.177.165.73;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4475[label="148.177.165.73;22pkt 22fpkt", shape=invtriangle, color=brown];
5007[label="148.177.165.73;21pkt 21fpkt", shape=invhouse, color=bisque];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.100.85.233:80}[97.5177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2594: (0.558659%)&lt;BR/&gt; 2593: (0.558659%)&lt;BR/&gt; 2592: (0.558659%)&lt;BR/&gt; 2590: (0.558659%)&gt;];
}
1496--2202[label="0.333333;9pkt 9fpkt"];
1496--2568[label="0.0322581;3pkt 3fpkt"];
1496--2847[label="0.333333;9pkt 9fpkt"];
1496--2890[label="0.0260223;7pkt 7fpkt"];
1496--2970[label="0.0272727;3pkt 3fpkt"];
1496--2979[label="0.0185874;5pkt 5fpkt"];
1496--3116[label="0.333333;9pkt 9fpkt"];
1496--3365[label="0.875;21pkt 21fpkt"];
1496--3399[label="0.545455;12pkt 12fpkt"];
1496--3671[label="0.333333;7pkt 7fpkt"];
1496--4242[label="0.0272727;3pkt 3fpkt"];
1496--4247[label="0.0185874;5pkt 5fpkt"];
1496--4318[label="0.321429;9pkt 9fpkt"];
1496--4475[label="0.545455;12pkt 12fpkt"];
1496--4622[label="0.333333;7pkt 7fpkt"];
1496--5007[label="0.52381;11pkt 11fpkt"];
3399--4475[label="1;22pkt 22fpkt"];
3399--5007[label="1;21pkt 21fpkt"];
4475--5007[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="214.100.85.233" dst_port="80"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.5.74"/>
    </slice>
    <from sec="1109826092" usec="0"/>
    <to sec="1109826882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.90.53.76"/>
    </slice>
    <from sec="1109826705" usec="0"/>
    <to sec="1109826748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.90.149.76"/>
    </slice>
    <from sec="1109826492" usec="0"/>
    <to sec="1109826568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.16.121.78"/>
    </slice>
    <from sec="1109826010" usec="0"/>
    <to sec="1109826892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.50.45.80"/>
    </slice>
    <from sec="1109826701" usec="0"/>
    <to sec="1109826892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.22.74.80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.8.228.80"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863895,1.67071,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
68[label="23.57.108.82s;81pkt 81fpkt", shape=rectangle, color=red];
3425[label="23.57.108.82;256pkt 256fpkt", shape=pentagon, color=darkviolet];
4489[label="23.57.108.82;256pkt 256fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.57.108.82:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
68--3425[label="1;81pkt 81fpkt"];
68--4489[label="1;81pkt 81fpkt"];
3425--4489[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="23.57.108.82" src_port="1028"/>
    </slice>
    <from sec="1109826293" usec="0"/>
    <to sec="1109826307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.117.64.85"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.136.85"/>
    </slice>
    <from sec="1109826017" usec="0"/>
    <to sec="1109826243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
2131[label="194.64.98.87;s;3076pkt 3076fpkt", shape=diamond, color=yellow];
3439[label="194.64.98.87;3088pkt 3088fpkt", shape=pentagon, color=darkviolet];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.98.87:4407, *:27960}[36.9495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4407: (33.9714%)&lt;BR/&gt; 27960: (27.9283%)&lt;BR/&gt; 4408: (9.39325%)&lt;BR/&gt; 4409: (4.08825%)&lt;BR/&gt; 27961: (3.9828%)&gt;];
}
2131--3439[label="1;3076pkt 3076fpkt"];
</description>
    <slice>
      <filter dst_port="27960" src_ip="194.64.98.87" src_port="4407"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.165.0.89"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.252.136.89"/>
    </slice>
    <from sec="1109826032" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
1336[label="148.176.232.22;s;151pkt 151fpkt", shape=diamond, color=yellow];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.232.22:*, 73.172.72.97:80}[33.1126%]&lt;BR/&gt;{148.176.232.22:*, *:53}[29.1391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.457%)&lt;BR/&gt; 53: (15.5629%)&lt;BR/&gt; 0: (3.97351%)&lt;BR/&gt; 5190: (0.662252%)&lt;BR/&gt; 1771: (0.662252%)&gt;];
}
1336--1517[label="0.0357143;1pkt 1fpkt"];
1336--1525[label="0.0535714;3pkt 3fpkt"];
1336--1767[label="0.0117647;1pkt 1fpkt"];
1336--1916[label="0.0208333;2pkt 2fpkt"];
1336--1956[label="0.0117647;1pkt 1fpkt"];
1336--2009[label="0.846154;44pkt 44fpkt"];
1336--2090[label="0.0227273;2pkt 2fpkt"];
1336--2105[label="0.0117647;1pkt 1fpkt"];
1336--2108[label="0.0138889;1pkt 1fpkt"];
1336--2743[label="0.0416667;2pkt 2fpkt"];
1336--2890[label="0.00662252;1pkt 1fpkt"];
1336--2906[label="0.013245;2pkt 2fpkt"];
1336--2912[label="0.00662252;1pkt 1fpkt"];
1336--2925[label="0.00662252;1pkt 1fpkt"];
1336--2933[label="0.00662252;1pkt 1fpkt"];
1336--3090[label="0.993377;150pkt 150fpkt"];
1336--4301[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="148.176.232.22"/>
      <filter dst_ip="73.172.72.97" dst_port="80" src_ip="148.176.232.22"/>
    </slice>
    <from sec="1109826021" usec="0"/>
    <to sec="1109826816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.39.46.92"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
1650[label="146.14.138.155;d;7pkt 7fpkt", shape=diamond, color=yellow];
3469[label="148.176.238.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 146.14.138.155:210}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (50%)&lt;BR/&gt; 3183: (12.5%)&lt;BR/&gt; 24169: (6.25%)&lt;BR/&gt; 6759: (6.25%)&lt;BR/&gt; 4124: (6.25%)&gt;];
}
1650--3469[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="146.14.138.155" dst_port="210"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
1024[label="20.81.91.95;s;793pkt 793fpkt", shape=diamond, color=yellow];
3480[label="20.81.91.95;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4523[label="20.81.91.95;2pkt 2fpkt", shape=invtriangle, color=brown];
5031[label="20.81.91.95;3pkt 3fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.81.91.95:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 39545: (0.187266%)&lt;BR/&gt; 20992: (0.187266%)&lt;BR/&gt; 49: (0.187266%)&lt;BR/&gt; 59731: (0.124844%)&gt;];
}
1024--3480[label="0.333333;1pkt 1fpkt"];
1024--5031[label="0.333333;1pkt 1fpkt"];
3480--4523[label="1;2pkt 2fpkt"];
3480--5031[label="1;3pkt 3fpkt"];
4523--5031[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="20.81.91.95" src_port="7000"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.242.133.95"/>
    </slice>
    <from sec="1109826448" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.102.98.96"/>
    </slice>
    <from sec="1109826129" usec="0"/>
    <to sec="1109826368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1193[label="214.182.130.227;d;92pkt 92fpkt", shape=diamond, color=yellow];
2963[label="175.150.160.3;129pkt 129fpkt", shape=pentagon, color=darkviolet];
3362[label="175.150.129.67;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3493[label="175.150.138.97;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.182.130.227:5050}[36.7257%]&lt;BR/&gt;{175.150.160.3:*, *:5050}[20.7965%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (29.7872%)&lt;BR/&gt; 80: (4.68085%)&lt;BR/&gt; 20: (3.40426%)&lt;BR/&gt; 37: (2.97872%)&lt;BR/&gt; 21: (2.97872%)&gt;];
}
1193--1282[label="0.0108696;1pkt 1fpkt"];
1193--2963[label="0.0652174;6pkt 6fpkt"];
1193--3362[label="0.4;2pkt 2fpkt"];
1193--3493[label="0.111111;1pkt 1fpkt"];
1193--3726[label="0.037037;1pkt 1fpkt"];
1193--4651[label="0.0357143;1pkt 1fpkt"];
1193--5085[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5050" src_ip="175.150.160.3"/>
      <filter dst_ip="214.182.130.227" dst_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.199.43.99"/>
    </slice>
    <from sec="1109826831" usec="0"/>
    <to sec="1109826836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
1849[label="175.150.192.99;s;2pkt 2fpkt", shape=diamond, color=yellow];
3512[label="175.150.192.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.192.99:33473, 200.232.2.65:6667}[50%]&lt;BR/&gt;{175.150.192.99:33471, 222.197.41.192:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 33473: (33.3333%)&lt;BR/&gt; 33471: (16.6667%)&gt;];
}
1849--3512[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.197.41.192" dst_port="6667" src_ip="175.150.192.99" src_port="33471"/>
      <filter dst_ip="200.232.2.65" dst_port="6667" src_ip="175.150.192.99" src_port="33473"/>
    </slice>
    <from sec="1109826186" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.22.100"/>
    </slice>
    <from sec="1109826132" usec="0"/>
    <to sec="1109826210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.85.100"/>
    </slice>
    <from sec="1109826537" usec="0"/>
    <to sec="1109826584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.148.152.101"/>
    </slice>
    <from sec="1109826008" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
1887[label="169.28.3.214;d;55pkt 55fpkt", shape=diamond, color=yellow];
2024[label="151.144.136.102;s;41pkt 41fpkt", shape=diamond, color=yellow];
3533[label="151.144.136.102;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.144.136.102:80, 169.28.3.214:*}[74.5455%]&lt;BR/&gt;{151.144.137.194:80, 169.28.3.214:*}[21.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6324%)&lt;BR/&gt; 1590: (1.10294%)&lt;BR/&gt; 1586: (1.10294%)&lt;BR/&gt; 1583: (1.10294%)&lt;BR/&gt; 1579: (1.10294%)&gt;];
}
1887--2024[label="1;41pkt 41fpkt"];
1887--3533[label="1;40pkt 40fpkt"];
2024--3533[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.3.214" src_ip="151.144.136.102" src_port="80"/>
      <filter dst_ip="169.28.3.214" src_ip="151.144.137.194" src_port="80"/>
    </slice>
    <from sec="1109826476" usec="0"/>
    <to sec="1109826779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
1576[label="169.28.209.194;d;112pkt 112fpkt", shape=diamond, color=yellow];
3101[label="195.10.138.24;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4309[label="195.10.138.24;22pkt 22fpkt", shape=invtriangle, color=brown];
4710[label="194.223.35.163;27pkt 27fpkt", shape=invtriangle, color=brown];
4944[label="195.10.138.24;23pkt 23fpkt", shape=invhouse, color=bisque];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.223.35.163:80, 169.28.209.194:*}[22.807%]&lt;BR/&gt;{195.10.138.24:80, 169.28.209.194:*}[20.1754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5437%)&lt;BR/&gt; 8080: (0.970874%)&lt;BR/&gt; 1627: (0.970874%)&lt;BR/&gt; 1626: (0.970874%)&lt;BR/&gt; 1625: (0.970874%)&gt;];
}
1576--2776[label="0.0357143;4pkt 4fpkt"];
1576--3101[label="1;22pkt 22fpkt"];
1576--3831[label="0.925926;25pkt 25fpkt"];
1576--4309[label="1;22pkt 22fpkt"];
1576--4710[label="0.925926;25pkt 25fpkt"];
1576--4944[label="1;23pkt 23fpkt"];
1576--5115[label="0.925926;25pkt 25fpkt"];
3101--4309[label="1;22pkt 22fpkt"];
3101--4944[label="1;22pkt 22fpkt"];
4309--4944[label="1;22pkt 22fpkt"];
4710--5115[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.209.194" src_ip="194.223.35.163" src_port="80"/>
      <filter dst_ip="169.28.209.194" src_ip="195.10.138.24" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.194.103"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.66.176.104"/>
    </slice>
    <from sec="1109826016" usec="0"/>
    <to sec="1109826889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.21.57.105"/>
    </slice>
    <from sec="1109826160" usec="0"/>
    <to sec="1109826825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.157.153.106"/>
    </slice>
    <from sec="1109826201" usec="0"/>
    <to sec="1109826226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.240.107"/>
    </slice>
    <from sec="1109826688" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.48.187.108"/>
    </slice>
    <from sec="1109826486" usec="0"/>
    <to sec="1109826680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.112.184.112"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.217.196.112"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.174.29.113"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
2016[label="148.176.36.113;s;66pkt 66fpkt", shape=diamond, color=yellow];
2805[label="148.176.36.113;s;38pkt 38fpkt", shape=hexagon, color=black];
3588[label="148.176.36.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.36.113:*, 202.87.5.235:80}[24.2424%]&lt;BR/&gt;{148.176.36.113:*, 73.202.133.35:80}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5714%)&lt;BR/&gt; 1921: (1.42857%)&lt;BR/&gt; 554: (1.42857%)&lt;BR/&gt; 1925: (0.952381%)&lt;BR/&gt; 1924: (0.952381%)&gt;];
}
2016--2805[label="1;38pkt 38fpkt"];
2016--3588[label="1;1pkt 1fpkt"];
2805--3588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.87.5.235" dst_port="80" src_ip="148.176.36.113"/>
      <filter dst_ip="73.202.133.35" dst_port="80" src_ip="148.176.36.113"/>
    </slice>
    <from sec="1109826333" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.70.151.113"/>
    </slice>
    <from sec="1109826230" usec="0"/>
    <to sec="1109826689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.138.116"/>
    </slice>
    <from sec="1109826256" usec="0"/>
    <to sec="1109826867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.241.85.118"/>
    </slice>
    <from sec="1109826092" usec="0"/>
    <to sec="1109826707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.64.148.122"/>
    </slice>
    <from sec="1109826048" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.42.66.124"/>
    </slice>
    <from sec="1109826778" usec="0"/>
    <to sec="1109826800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.211.75.124"/>
    </slice>
    <from sec="1109826572" usec="0"/>
    <to sec="1109826617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.143.155.125"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.132.99.126"/>
    </slice>
    <from sec="1109826159" usec="0"/>
    <to sec="1109826186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.111.73.128"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
1068[label="74.9.128.129;s;82pkt 82fpkt", shape=diamond, color=yellow];
1299[label="74.9.146.98;s;84pkt 84fpkt", shape=diamond, color=yellow];
1433[label="175.150.164.0;d;245pkt 245fpkt", shape=diamond, color=yellow];
1585[label="175.150.173.115;d;89pkt 89fpkt", shape=diamond, color=yellow];
1925[label="175.150.128.193;d;31pkt 31fpkt", shape=diamond, color=yellow];
2012[label="73.58.112.154;s;13pkt 13fpkt", shape=diamond, color=yellow];
2762[label="73.58.112.158;s;26pkt 26fpkt", shape=hexagon, color=black];
3650[label="73.58.112.128;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3740[label="73.58.112.145;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3780[label="73.58.112.154;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4610[label="73.58.112.128;19pkt 19fpkt", shape=invtriangle, color=brown];
4683[label="73.58.112.154;13pkt 13fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 175.150.164.0:*}[30.9441%]&lt;BR/&gt;{*:*, *:25}[26.7483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0046%)&lt;BR/&gt; 113: (0.535988%)&lt;BR/&gt; 42198: (0.306279%)&lt;BR/&gt; 23920: (0.306279%)&lt;BR/&gt; 23913: (0.306279%)&gt;];
}
1068--1433[label="0.0487805;4pkt 4fpkt"];
1068--1502[label="0.268293;22pkt 22fpkt"];
1068--1519[label="0.0365854;3pkt 3fpkt"];
1068--1585[label="0.121951;10pkt 10fpkt"];
1068--1924[label="0.0243902;2pkt 2fpkt"];
1299--1433[label="0.0238095;2pkt 2fpkt"];
1299--1502[label="0.380952;32pkt 32fpkt"];
1299--1519[label="0.0357143;3pkt 3fpkt"];
1299--1585[label="0.0952381;8pkt 8fpkt"];
1299--1924[label="0.0119048;1pkt 1fpkt"];
1433--1681[label="0.0121951;1pkt 1fpkt"];
1433--1828[label="0.115385;3pkt 3fpkt"];
1433--1857[label="0.111111;3pkt 3fpkt"];
1433--2012[label="0.0769231;1pkt 1fpkt"];
1433--2762[label="0.0384615;1pkt 1fpkt"];
1433--2797[label="0.115385;3pkt 3fpkt"];
1433--3397[label="0.137931;4pkt 4fpkt"];
1433--3650[label="0.05;1pkt 1fpkt"];
1433--3740[label="0.111111;2pkt 2fpkt"];
1433--3776[label="0.0967742;3pkt 3fpkt"];
1433--3780[label="0.0769231;1pkt 1fpkt"];
1433--4474[label="0.137931;4pkt 4fpkt"];
1433--4610[label="0.0526316;1pkt 1fpkt"];
1433--4680[label="0.0967742;3pkt 3fpkt"];
1433--4683[label="0.0769231;1pkt 1fpkt"];
1433--5006[label="0.142857;4pkt 4fpkt"];
1433--5101[label="0.0967742;3pkt 3fpkt"];
1585--1828[label="0.269231;7pkt 7fpkt"];
1585--2797[label="0.269231;7pkt 7fpkt"];
1585--3397[label="0.103448;3pkt 3fpkt"];
1585--3998[label="0.0769231;1pkt 1fpkt"];
1585--4010[label="0.190476;4pkt 4fpkt"];
1585--4474[label="0.103448;3pkt 3fpkt"];
1585--4797[label="0.190476;4pkt 4fpkt"];
1585--5006[label="0.107143;3pkt 3fpkt"];
1925--2012[label="0.153846;2pkt 2fpkt"];
1925--2762[label="0.0769231;2pkt 2fpkt"];
1925--3650[label="0.1;2pkt 2fpkt"];
1925--3673[label="0.0666667;1pkt 1fpkt"];
1925--3740[label="0.0555556;1pkt 1fpkt"];
1925--3776[label="0.0645161;2pkt 2fpkt"];
1925--3780[label="0.153846;2pkt 2fpkt"];
1925--3837[label="0.157895;3pkt 3fpkt"];
1925--4610[label="0.105263;2pkt 2fpkt"];
1925--4623[label="0.0666667;1pkt 1fpkt"];
1925--4680[label="0.0645161;2pkt 2fpkt"];
1925--4683[label="0.153846;2pkt 2fpkt"];
1925--4716[label="0.157895;3pkt 3fpkt"];
1925--5101[label="0.0645161;2pkt 2fpkt"];
2012--2208[label="0.333333;1pkt 1fpkt"];
2012--3780[label="1;13pkt 13fpkt"];
2012--4683[label="1;13pkt 13fpkt"];
3650--4610[label="1;19pkt 19fpkt"];
3780--4683[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter dst_ip="175.150.164.0" src_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.226.128"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
2061[label="169.28.112.244;d;139pkt 139fpkt", shape=diamond, color=yellow];
2066[label="76.67.145.77;s;103pkt 103fpkt", shape=diamond, color=yellow];
3410[label="76.67.145.77;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3655[label="76.109.19.129;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4481[label="76.67.145.77;103pkt 103fpkt", shape=invtriangle, color=brown];
4612[label="76.109.19.129;53pkt 53fpkt", shape=invtriangle, color=brown];
5009[label="76.67.145.77;103pkt 103fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.67.145.77:80, 169.28.112.244:*}[59.5376%]&lt;BR/&gt;{76.109.19.129:80, 169.28.112.244:*}[31.2139%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4012: (0.380518%)&lt;BR/&gt; 4010: (0.380518%)&lt;BR/&gt; 4008: (0.380518%)&lt;BR/&gt; 4006: (0.380518%)&gt;];
}
2061--2066[label="1;103pkt 103fpkt"];
2061--3410[label="1;102pkt 102fpkt"];
2061--3655[label="0.37037;20pkt 20fpkt"];
2061--4061[label="0.047619;1pkt 1fpkt"];
2061--4481[label="1;103pkt 103fpkt"];
2061--4612[label="0.358491;19pkt 19fpkt"];
2061--4820[label="0.05;1pkt 1fpkt"];
2061--5009[label="1;103pkt 103fpkt"];
2066--3410[label="1;102pkt 102fpkt"];
2066--4481[label="1;103pkt 103fpkt"];
2066--5009[label="1;103pkt 103fpkt"];
3410--4481[label="1;102pkt 102fpkt"];
3410--5009[label="1;102pkt 102fpkt"];
3655--4612[label="1;53pkt 53fpkt"];
4481--5009[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.112.244" src_ip="76.67.145.77" src_port="80"/>
      <filter dst_ip="169.28.112.244" src_ip="76.109.19.129" src_port="80"/>
    </slice>
    <from sec="1109826665" usec="0"/>
    <to sec="1109826885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.85.188.129"/>
    </slice>
    <from sec="1109826068" usec="0"/>
    <to sec="1109826130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
1687[label="148.176.160.131;s;16pkt 16fpkt", shape=diamond, color=yellow];
1702[label="213.17.79.232;d;9pkt 9fpkt", shape=diamond, color=yellow];
2703[label="148.176.160.131;s;16pkt 16fpkt", shape=hexagon, color=black];
3674[label="148.176.160.131;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.160.131:*, 213.17.79.232:80}[56.25%]&lt;BR/&gt;{148.176.160.131:*, 20.90.72.210:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30681: (3.50877%)&lt;BR/&gt; 30329: (3.50877%)&lt;BR/&gt; 26647: (3.50877%)&lt;BR/&gt; 24811: (3.50877%)&gt;];
}
1687--1702[label="1;9pkt 9fpkt"];
1687--2703[label="1;16pkt 16fpkt"];
1687--3674[label="1;16pkt 16fpkt"];
1702--2703[label="1;9pkt 9fpkt"];
1702--3674[label="1;9pkt 9fpkt"];
2703--3674[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.79.232" dst_port="80" src_ip="148.176.160.131"/>
      <filter dst_ip="20.90.72.210" dst_port="80" src_ip="148.176.160.131"/>
    </slice>
    <from sec="1109826172" usec="0"/>
    <to sec="1109826556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.179.38.132"/>
    </slice>
    <from sec="1109826039" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.181.112.133"/>
    </slice>
    <from sec="1109826358" usec="0"/>
    <to sec="1109826396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.144.135"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.81.122.137"/>
    </slice>
    <from sec="1109826049" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.197.137"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
1583[label="200.232.2.65;d;80pkt 80fpkt", shape=diamond, color=yellow];
1584[label="175.150.160.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
1843[label="175.150.230.160;s;5pkt 5fpkt", shape=diamond, color=yellow];
2745[label="175.150.230.160;s;5pkt 5fpkt", shape=hexagon, color=black];
3710[label="175.150.200.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3783[label="175.150.138.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3818[label="175.150.230.160;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3872[label="175.150.151.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4641[label="175.150.200.138;3pkt 3fpkt", shape=invtriangle, color=brown];
4685[label="175.150.138.154;2pkt 2fpkt", shape=invtriangle, color=brown];
5104[label="175.150.138.154;3pkt 3fpkt", shape=invhouse, color=bisque];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.138.152:*, 200.232.2.65:*}[54.2169%]&lt;BR/&gt;{*:113, 200.232.2.65:*}[26.506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (13.964%)&lt;BR/&gt; 6666: (7.20721%)&lt;BR/&gt; 6667: (6.75676%)&lt;BR/&gt; 1080: (4.95495%)&lt;BR/&gt; 5050: (4.05405%)&gt;];
}
1583--1584[label="1;1pkt 1fpkt"];
1583--1843[label="0.4;2pkt 2fpkt"];
1583--1849[label="0.5;1pkt 1fpkt"];
1583--2745[label="0.4;2pkt 2fpkt"];
1583--3512[label="1;1pkt 1fpkt"];
1583--3710[label="1;2pkt 2fpkt"];
1583--3783[label="1;3pkt 3fpkt"];
1583--3818[label="0.4;2pkt 2fpkt"];
1583--3872[label="1;2pkt 2fpkt"];
1583--4641[label="1;3pkt 3fpkt"];
1583--4685[label="1;2pkt 2fpkt"];
1583--5104[label="1;3pkt 3fpkt"];
1843--2736[label="0.6;3pkt 3fpkt"];
1843--2745[label="1;5pkt 5fpkt"];
1843--3818[label="1;5pkt 5fpkt"];
2745--3818[label="1;5pkt 5fpkt"];
3710--4641[label="1;2pkt 2fpkt"];
3783--4685[label="1;2pkt 2fpkt"];
3783--5104[label="1;3pkt 3fpkt"];
4685--5104[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.232.2.65" src_ip="175.150.138.152"/>
      <filter dst_ip="200.232.2.65" src_port="113"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.220.27.140"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.103.131.140"/>
    </slice>
    <from sec="1109826448" usec="0"/>
    <to sec="1109826483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
630[label="74.161.249.236;d;292pkt 292fpkt", shape=diamond, color=yellow];
789[label="148.177.215.10;s;435pkt 435fpkt", shape=diamond, color=yellow];
844[label="148.176.250.248;s;135pkt 135fpkt", shape=diamond, color=yellow];
889[label="148.177.203.130;s;119pkt 119fpkt", shape=diamond, color=yellow];
904[label="148.177.203.107;s;90pkt 90fpkt", shape=diamond, color=yellow];
2104[label="197.84.12.144;d;64pkt 64fpkt", shape=diamond, color=yellow];
2328[label="144.224.0.163;s;174pkt 174fpkt", shape=hexagon, color=black];
2344[label="148.177.203.130;s;82pkt 82fpkt", shape=hexagon, color=black];
2348[label="148.177.203.107;s;90pkt 90fpkt", shape=hexagon, color=black];
3424[label="148.176.6.82;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3670[label="148.177.203.130;118pkt 118fpkt", shape=pentagon, color=darkviolet];
3726[label="148.176.149.142;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4564[label="148.177.203.107;98pkt 98fpkt", shape=invtriangle, color=brown];
4621[label="148.177.203.130;118pkt 118fpkt", shape=invtriangle, color=brown];
4651[label="148.176.149.142;28pkt 28fpkt", shape=invtriangle, color=brown];
5047[label="148.177.203.107;98pkt 98fpkt", shape=invhouse, color=bisque];
5075[label="148.177.203.130;118pkt 118fpkt", shape=invhouse, color=bisque];
5085[label="148.176.149.142;28pkt 28fpkt", shape=invhouse, color=bisque];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.215.10:*, *:*}[36.1296%]&lt;BR/&gt;{*:*, 74.161.249.236:80}[24.5847%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0949%)&lt;BR/&gt; 25: (7.09586%)&lt;BR/&gt; 12479: (0.822368%)&lt;BR/&gt; 53: (0.352444%)&lt;BR/&gt; 1635: (0.234962%)&gt;];
}
630--631[label="0.0848485;14pkt 14fpkt"];
630--789[label="0.0205479;6pkt 6fpkt"];
630--844[label="0.0888889;12pkt 12fpkt"];
630--861[label="0.128205;15pkt 15fpkt"];
630--889[label="0.546218;65pkt 65fpkt"];
630--904[label="0.311111;28pkt 28fpkt"];
630--1947[label="0.20339;12pkt 12fpkt"];
630--1964[label="0.0947368;9pkt 9fpkt"];
630--2344[label="0.463415;38pkt 38fpkt"];
630--2348[label="0.311111;28pkt 28fpkt"];
630--2388[label="0.0616438;18pkt 18fpkt"];
630--2508[label="0.0376712;11pkt 11fpkt"];
630--2569[label="0.128205;15pkt 15fpkt"];
630--2720[label="0.0308219;9pkt 9fpkt"];
630--2890[label="0.167808;49pkt 49fpkt"];
630--2957[label="0.358974;14pkt 14fpkt"];
630--3238[label="0.206897;12pkt 12fpkt"];
630--3320[label="0.266667;4pkt 4fpkt"];
630--3424[label="0.285714;4pkt 4fpkt"];
630--3492[label="0.253968;16pkt 16fpkt"];
630--3561[label="0.285714;28pkt 28fpkt"];
630--3669[label="0.186047;8pkt 8fpkt"];
630--3670[label="0.550847;65pkt 65fpkt"];
630--3726[label="0.148148;4pkt 4fpkt"];
630--4002[label="0.0684932;20pkt 20fpkt"];
630--4017[label="0.10274;30pkt 30fpkt"];
630--4224[label="0.0843373;14pkt 14fpkt"];
630--4234[label="0.35;14pkt 14fpkt"];
630--4386[label="0.20339;12pkt 12fpkt"];
630--4530[label="0.25;16pkt 16fpkt"];
630--4564[label="0.285714;28pkt 28fpkt"];
630--4621[label="0.550847;65pkt 65fpkt"];
630--4651[label="0.142857;4pkt 4fpkt"];
630--4793[label="0.0684932;20pkt 20fpkt"];
630--4799[label="0.10274;30pkt 30fpkt"];
630--4899[label="0.0848485;14pkt 14fpkt"];
630--5036[label="0.25;16pkt 16fpkt"];
630--5047[label="0.285714;28pkt 28fpkt"];
630--5075[label="0.550847;65pkt 65fpkt"];
630--5085[label="0.142857;4pkt 4fpkt"];
789--802[label="0.00966184;2pkt 2fpkt"];
789--874[label="0.0144928;2pkt 2fpkt"];
789--1009[label="0.00440529;1pkt 1fpkt"];
789--1075[label="0.00293255;1pkt 1fpkt"];
789--1269[label="0.00298507;1pkt 1fpkt"];
789--1277[label="0.0133929;3pkt 3fpkt"];
789--1346[label="0.027027;1pkt 1fpkt"];
789--1491[label="0.0422535;6pkt 6fpkt"];
789--1492[label="0.0458015;6pkt 6fpkt"];
789--1517[label="0.0714286;2pkt 2fpkt"];
789--1525[label="0.0535714;3pkt 3fpkt"];
789--1829[label="0.0166667;1pkt 1fpkt"];
789--1979[label="0.0166667;1pkt 1fpkt"];
789--2104[label="0.4375;28pkt 28fpkt"];
789--2153[label="0.011236;1pkt 1fpkt"];
789--2334[label="0.0173913;2pkt 2fpkt"];
789--2738[label="0.05;6pkt 6fpkt"];
789--2739[label="0.0049505;1pkt 1fpkt"];
789--2743[label="0.0625;3pkt 3fpkt"];
789--2826[label="0.0139373;4pkt 4fpkt"];
789--2890[label="0.0091954;4pkt 4fpkt"];
844--1179[label="0.0125;1pkt 1fpkt"];
844--1269[label="0.0222222;3pkt 3fpkt"];
844--1277[label="0.614815;83pkt 83fpkt"];
844--1916[label="0.0104167;1pkt 1fpkt"];
844--2110[label="0.00943396;1pkt 1fpkt"];
844--2118[label="0.0147059;1pkt 1fpkt"];
844--2826[label="0.0148148;2pkt 2fpkt"];
844--2890[label="0.192593;26pkt 26fpkt"];
889--1075[label="0.092437;11pkt 11fpkt"];
889--1269[label="0.0504202;6pkt 6fpkt"];
889--2110[label="0.00943396;1pkt 1fpkt"];
889--2334[label="0.026087;3pkt 3fpkt"];
889--2344[label="1;82pkt 82fpkt"];
889--2826[label="0.176471;21pkt 21fpkt"];
889--3670[label="1;118pkt 118fpkt"];
889--4621[label="1;118pkt 118fpkt"];
889--5075[label="1;118pkt 118fpkt"];
904--1075[label="0.155556;14pkt 14fpkt"];
904--1431[label="0.0333333;3pkt 3fpkt"];
904--1779[label="0.0666667;6pkt 6fpkt"];
904--1940[label="0.0333333;3pkt 3fpkt"];
904--2110[label="0.0222222;2pkt 2fpkt"];
904--2348[label="1;90pkt 90fpkt"];
904--2780[label="0.0333333;3pkt 3fpkt"];
904--2826[label="0.244444;22pkt 22fpkt"];
904--3561[label="1;90pkt 90fpkt"];
904--4564[label="1;90pkt 90fpkt"];
904--5047[label="1;90pkt 90fpkt"];
2104--2328[label="0.125;8pkt 8fpkt"];
2104--2890[label="0.09375;6pkt 6fpkt"];
2328--2890[label="0.091954;16pkt 16fpkt"];
2344--2826[label="0.256098;21pkt 21fpkt"];
2344--3670[label="0.987805;81pkt 81fpkt"];
2344--4621[label="0.987805;81pkt 81fpkt"];
2344--5075[label="0.987805;81pkt 81fpkt"];
2348--2780[label="0.0333333;3pkt 3fpkt"];
2348--2826[label="0.244444;22pkt 22fpkt"];
2348--3561[label="1;90pkt 90fpkt"];
2348--4564[label="1;90pkt 90fpkt"];
2348--5047[label="1;90pkt 90fpkt"];
3670--4621[label="1;118pkt 118fpkt"];
3670--5075[label="1;118pkt 118fpkt"];
3726--4651[label="1;27pkt 27fpkt"];
3726--5085[label="1;27pkt 27fpkt"];
4564--5047[label="1;98pkt 98fpkt"];
4621--5075[label="1;118pkt 118fpkt"];
4651--5085[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.215.10"/>
      <filter dst_ip="74.161.249.236" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.80.84.143"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.162.117.145"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.58.146"/>
    </slice>
    <from sec="1109826856" usec="0"/>
    <to sec="1109826860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.70.36.149"/>
    </slice>
    <from sec="1109826281" usec="0"/>
    <to sec="1109826366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.5.228.149"/>
    </slice>
    <from sec="1109826274" usec="0"/>
    <to sec="1109826299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.209.153"/>
    </slice>
    <from sec="1109826043" usec="0"/>
    <to sec="1109826883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.7.146.156"/>
    </slice>
    <from sec="1109826321" usec="0"/>
    <to sec="1109826802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
1891[label="210.5.183.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
3798[label="210.5.183.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4694[label="210.5.183.156;1pkt 1fpkt", shape=invtriangle, color=brown];
5109[label="210.5.183.156;2pkt 2fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.5.183.156:80, 148.177.203.123:2464}[50%]&lt;BR/&gt;{210.5.183.156:80, 148.177.203.123:2465}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2465: (28.5714%)&lt;BR/&gt; 2464: (21.4286%)&gt;];
}
1891--3798[label="1;2pkt 2fpkt"];
1891--4694[label="1;1pkt 1fpkt"];
1891--5109[label="1;2pkt 2fpkt"];
3798--4694[label="1;1pkt 1fpkt"];
3798--5109[label="1;2pkt 2fpkt"];
4694--5109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.203.123" dst_port="2465" src_ip="210.5.183.156" src_port="80"/>
      <filter dst_ip="148.177.203.123" dst_port="2464" src_ip="210.5.183.156" src_port="80"/>
    </slice>
    <from sec="1109826515" usec="0"/>
    <to sec="1109826535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.234.158"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.61.129.160"/>
    </slice>
    <from sec="1109826611" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.176.144.160"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.209.83.161"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.203.162"/>
    </slice>
    <from sec="1109826867" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.44.76.163"/>
    </slice>
    <from sec="1109826719" usec="0"/>
    <to sec="1109826766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
1441[label="175.150.128.201;d;26pkt 26fpkt", shape=diamond, color=yellow];
1530[label="175.150.185.50;d;67pkt 67fpkt", shape=diamond, color=yellow];
2033[label="73.241.184.160;s;10pkt 10fpkt", shape=diamond, color=yellow];
3673[label="73.58.112.131;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3735[label="73.58.112.144;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3816[label="73.241.184.160;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3837[label="73.58.112.164;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4623[label="73.58.112.131;15pkt 15fpkt", shape=invtriangle, color=brown];
4657[label="73.58.112.144;17pkt 17fpkt", shape=invtriangle, color=brown];
4705[label="73.241.184.160;9pkt 9fpkt", shape=invtriangle, color=brown];
4716[label="73.58.112.164;19pkt 19fpkt", shape=invtriangle, color=brown];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 175.150.185.50:25}[40.5797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.8072%)&lt;BR/&gt; 80: (9.19283%)&lt;BR/&gt; 39205: (0.896861%)&lt;BR/&gt; 39189: (0.896861%)&lt;BR/&gt; 37974: (0.896861%)&gt;];
}
1441--1857[label="0.0769231;2pkt 2fpkt"];
1441--2012[label="0.230769;3pkt 3fpkt"];
1441--2033[label="1;10pkt 10fpkt"];
1441--2762[label="0.0384615;1pkt 1fpkt"];
1441--3735[label="0.0588235;1pkt 1fpkt"];
1441--3776[label="0.0769231;2pkt 2fpkt"];
1441--3780[label="0.230769;3pkt 3fpkt"];
1441--3816[label="1;9pkt 9fpkt"];
1441--3837[label="0.0526316;1pkt 1fpkt"];
1441--4657[label="0.0588235;1pkt 1fpkt"];
1441--4680[label="0.0769231;2pkt 2fpkt"];
1441--4683[label="0.230769;3pkt 3fpkt"];
1441--4705[label="1;9pkt 9fpkt"];
1441--4716[label="0.0526316;1pkt 1fpkt"];
1441--5101[label="0.0769231;2pkt 2fpkt"];
1530--1828[label="0.0384615;1pkt 1fpkt"];
1530--1857[label="0.037037;1pkt 1fpkt"];
1530--2762[label="0.0769231;2pkt 2fpkt"];
1530--2797[label="0.0384615;1pkt 1fpkt"];
1530--3397[label="0.0344828;1pkt 1fpkt"];
1530--3402[label="0.0447761;3pkt 3fpkt"];
1530--3650[label="0.05;1pkt 1fpkt"];
1530--3673[label="0.0666667;1pkt 1fpkt"];
1530--3696[label="1;1pkt 1fpkt"];
1530--3735[label="0.117647;2pkt 2fpkt"];
1530--3740[label="0.111111;2pkt 2fpkt"];
1530--3776[label="0.0322581;1pkt 1fpkt"];
1530--3826[label="0.153846;2pkt 2fpkt"];
1530--3837[label="0.0526316;1pkt 1fpkt"];
1530--4010[label="0.0952381;2pkt 2fpkt"];
1530--4474[label="0.0344828;1pkt 1fpkt"];
1530--4610[label="0.0526316;1pkt 1fpkt"];
1530--4623[label="0.0666667;1pkt 1fpkt"];
1530--4634[label="0.5;1pkt 1fpkt"];
1530--4657[label="0.117647;2pkt 2fpkt"];
1530--4680[label="0.0322581;1pkt 1fpkt"];
1530--4716[label="0.0526316;1pkt 1fpkt"];
1530--4797[label="0.0952381;2pkt 2fpkt"];
1530--5101[label="0.0322581;1pkt 1fpkt"];
2033--3816[label="1;9pkt 9fpkt"];
2033--4705[label="1;9pkt 9fpkt"];
3673--4623[label="1;15pkt 15fpkt"];
3735--4657[label="1;17pkt 17fpkt"];
3816--4705[label="1;9pkt 9fpkt"];
3837--4716[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.185.50" dst_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.201.215.164"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.180.223.165"/>
    </slice>
    <from sec="1109826057" usec="0"/>
    <to sec="1109826793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.16.166"/>
    </slice>
    <from sec="1109826601" usec="0"/>
    <to sec="1109826706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
804[label="148.177.160.37;s;66pkt 66fpkt", shape=diamond, color=yellow];
1293[label="35.175.156.251;d;66pkt 66fpkt", shape=diamond, color=yellow];
1497[label="148.176.247.105;s;95pkt 95fpkt", shape=diamond, color=yellow];
1706[label="148.176.216.221;s;10pkt 10fpkt", shape=diamond, color=yellow];
2676[label="148.176.247.105;s;94pkt 94fpkt", shape=hexagon, color=black];
2806[label="148.176.216.221;s;10pkt 10fpkt", shape=hexagon, color=black];
3689[label="148.176.172.134;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3830[label="169.28.26.163;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3850[label="148.177.189.166;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4631[label="148.176.172.134;14pkt 14fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.247.105:*, *:*}[36.6795%]&lt;BR/&gt;{*:*, 35.175.156.251:*}[25.4826%]&lt;BR/&gt;{148.177.160.37:*, *:80}[22.7799%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.7815%)&lt;BR/&gt; 54045: (13.1105%)&lt;BR/&gt; 143: (7.32648%)&lt;BR/&gt; 443: (6.42674%)&lt;BR/&gt; 110: (2.18509%)&gt;];
}
804--1293[label="0.0151515;1pkt 1fpkt"];
804--1467[label="0.181818;2pkt 2fpkt"];
804--1495[label="0.025;1pkt 1fpkt"];
804--2082[label="0.0151515;1pkt 1fpkt"];
804--2612[label="0.181818;2pkt 2fpkt"];
804--2890[label="0.272727;18pkt 18fpkt"];
1293--1336[label="0.0151515;1pkt 1fpkt"];
1293--1497[label="0.030303;2pkt 2fpkt"];
1293--1706[label="0.1;1pkt 1fpkt"];
1293--1833[label="0.0151515;1pkt 1fpkt"];
1293--1997[label="0.0151515;1pkt 1fpkt"];
1293--2100[label="0.04;1pkt 1fpkt"];
1293--2277[label="0.0151515;1pkt 1fpkt"];
1293--2504[label="0.0151515;1pkt 1fpkt"];
1293--2522[label="0.0151515;1pkt 1fpkt"];
1293--2540[label="0.0151515;1pkt 1fpkt"];
1293--2603[label="0.0151515;1pkt 1fpkt"];
1293--2676[label="0.0151515;1pkt 1fpkt"];
1293--2806[label="0.1;1pkt 1fpkt"];
1293--3086[label="0.0151515;1pkt 1fpkt"];
1293--3090[label="0.0151515;1pkt 1fpkt"];
1293--3593[label="0.030303;2pkt 2fpkt"];
1293--3678[label="0.0151515;1pkt 1fpkt"];
1293--3689[label="0.142857;2pkt 2fpkt"];
1293--3830[label="1;5pkt 5fpkt"];
1293--3850[label="0.0666667;1pkt 1fpkt"];
1293--3879[label="0.030303;2pkt 2fpkt"];
1293--4036[label="0.0151515;1pkt 1fpkt"];
1293--4299[label="0.0151515;1pkt 1fpkt"];
1293--4301[label="0.0151515;1pkt 1fpkt"];
1293--4413[label="0.030303;2pkt 2fpkt"];
1293--4580[label="0.030303;2pkt 2fpkt"];
1293--4625[label="0.0151515;1pkt 1fpkt"];
1293--4631[label="0.142857;2pkt 2fpkt"];
1293--4735[label="0.030303;2pkt 2fpkt"];
1293--4809[label="0.0151515;1pkt 1fpkt"];
1293--4937[label="0.0151515;1pkt 1fpkt"];
1293--5125[label="0.030303;2pkt 2fpkt"];
1497--2676[label="1;94pkt 94fpkt"];
1706--2806[label="1;10pkt 10fpkt"];
3689--4631[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.247.105"/>
      <filter dst_ip="35.175.156.251"/>
      <filter dst_port="80" src_ip="148.177.160.37"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.224.166"/>
    </slice>
    <from sec="1109826154" usec="0"/>
    <to sec="1109826801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.2.167"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.231.40.167"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.61.129.168"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.244.168"/>
    </slice>
    <from sec="1109826195" usec="0"/>
    <to sec="1109826338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
1682[label="148.176.184.169;s;11pkt 11fpkt", shape=diamond, color=yellow];
1689[label="222.1.134.19;d;20pkt 20fpkt", shape=diamond, color=yellow];
1721[label="195.194.21.221;d;2pkt 2fpkt", shape=diamond, color=yellow];
2696[label="148.176.184.169;s;11pkt 11fpkt", shape=hexagon, color=black];
2710[label="195.194.21.221;d;2pkt 2fpkt", shape=hexagon, color=black];
3866[label="148.176.184.169;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.182.54:*, 222.1.134.19:80}[48.3871%]&lt;BR/&gt;{148.176.184.169:*, *:53}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (17.7966%)&lt;BR/&gt; 53: (15.2542%)&lt;BR/&gt; 80: (12.7119%)&lt;BR/&gt; 65286: (4.23729%)&lt;BR/&gt; 64840: (3.38983%)&gt;];
}
1682--1689[label="0.272727;3pkt 3fpkt"];
1682--1721[label="1;2pkt 2fpkt"];
1682--1776[label="0.0909091;1pkt 1fpkt"];
1682--2696[label="1;11pkt 11fpkt"];
1682--2710[label="1;2pkt 2fpkt"];
1682--2906[label="0.363636;4pkt 4fpkt"];
1682--3866[label="0.909091;10pkt 10fpkt"];
1689--2696[label="0.272727;3pkt 3fpkt"];
1689--3281[label="0.8;16pkt 16fpkt"];
1689--3866[label="0.230769;3pkt 3fpkt"];
1721--2696[label="1;2pkt 2fpkt"];
1721--2710[label="1;2pkt 2fpkt"];
1721--3866[label="0.5;1pkt 1fpkt"];
2696--2710[label="1;2pkt 2fpkt"];
2696--2906[label="0.363636;4pkt 4fpkt"];
2696--3866[label="0.909091;10pkt 10fpkt"];
2710--3866[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="148.176.184.169"/>
      <filter dst_ip="222.1.134.19" dst_port="80" src_ip="148.176.182.54"/>
    </slice>
    <from sec="1109826049" usec="0"/>
    <to sec="1109826771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.116.25.171"/>
    </slice>
    <from sec="1109826067" usec="0"/>
    <to sec="1109826867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.182.171.171"/>
    </slice>
    <from sec="1109826044" usec="0"/>
    <to sec="1109826864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.234.188.173"/>
    </slice>
    <from sec="1109826063" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.222.176"/>
    </slice>
    <from sec="1109826010" usec="0"/>
    <to sec="1109826865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
1673[label="198.1.30.71;d;67pkt 67fpkt", shape=diamond, color=yellow];
1921[label="195.81.119.94;s;42pkt 42fpkt", shape=diamond, color=yellow];
1981[label="195.81.113.170;s;103pkt 103fpkt", shape=diamond, color=yellow];
2841[label="195.81.113.170;s;103pkt 103fpkt", shape=hexagon, color=black];
2842[label="195.81.119.72;s;37pkt 37fpkt", shape=hexagon, color=black];
3475[label="195.81.119.94;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3748[label="175.150.179.146;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4518[label="195.81.119.94;49pkt 49fpkt", shape=invtriangle, color=brown];
5026[label="195.81.119.94;49pkt 49fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 198.1.30.71:*}[22.5806%]&lt;BR/&gt;{195.81.113.170:25, *:*}[20.9677%]&lt;BR/&gt;{195.81.113.170:*, *:113}[20.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.0656%)&lt;BR/&gt; 113: (10.9073%)&lt;BR/&gt; 443: (1.44788%)&lt;BR/&gt; 4903: (0.772201%)&lt;BR/&gt; 51396: (0.482625%)&gt;];
}
1673--1823[label="0.135135;5pkt 5fpkt"];
1673--1921[label="0.047619;2pkt 2fpkt"];
1673--1981[label="0.208955;14pkt 14fpkt"];
1673--2367[label="0.0447761;3pkt 3fpkt"];
1673--2532[label="0.0895522;6pkt 6fpkt"];
1673--2841[label="0.208955;14pkt 14fpkt"];
1673--2842[label="0.135135;5pkt 5fpkt"];
1673--2873[label="0.0895522;6pkt 6fpkt"];
1673--3475[label="0.0416667;2pkt 2fpkt"];
1673--3748[label="0.35;7pkt 7fpkt"];
1673--3899[label="0.24;6pkt 6fpkt"];
1673--3908[label="0.179104;12pkt 12fpkt"];
1673--4518[label="0.0408163;2pkt 2fpkt"];
1673--5026[label="0.0408163;2pkt 2fpkt"];
1921--1993[label="0.0238095;1pkt 1fpkt"];
1921--3475[label="0.97619;41pkt 41fpkt"];
1921--4518[label="1;42pkt 42fpkt"];
1921--5026[label="1;42pkt 42fpkt"];
1981--2841[label="1;103pkt 103fpkt"];
3475--4518[label="1;48pkt 48fpkt"];
3475--5026[label="1;48pkt 48fpkt"];
4518--5026[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.113.170" src_port="25"/>
      <filter dst_port="113" src_ip="195.81.113.170"/>
      <filter dst_ip="198.1.30.71" src_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.17.178"/>
    </slice>
    <from sec="1109826463" usec="0"/>
    <to sec="1109826509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.128.136.178"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.153.75.179"/>
    </slice>
    <from sec="1109826035" usec="0"/>
    <to sec="1109826245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.154.112.180"/>
    </slice>
    <from sec="1109826632" usec="0"/>
    <to sec="1109826798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.177.180"/>
    </slice>
    <from sec="1109826008" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.81.122.181"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
1312[label="130.54.50.239;d;64pkt 64fpkt", shape=diamond, color=yellow];
1695[label="208.99.192.114;s;6pkt 6fpkt", shape=diamond, color=yellow];
3916[label="194.239.118.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.54.50.239:1148}[43.75%]&lt;BR/&gt;{*:23, 130.54.50.239:*}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1148: (21.1268%)&lt;BR/&gt; 23: (11.9718%)&lt;BR/&gt; 32718: (5.6338%)&lt;BR/&gt; 52230: (4.22535%)&lt;BR/&gt; 4197: (2.11268%)&gt;];
}
1312--1695[label="1;6pkt 6fpkt"];
1312--3916[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.50.239" src_port="23"/>
      <filter dst_ip="130.54.50.239" dst_port="1148"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.70.103.184"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
3349[label="144.39.7.65;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.7.65:*, 76.103.142.7:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1240: (5.55556%)&lt;BR/&gt; 1239: (5.55556%)&lt;BR/&gt; 1238: (5.55556%)&lt;BR/&gt; 1237: (5.55556%)&gt;];
}
3349--4451[label="1;9pkt 9fpkt"];
3349--4996[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="76.103.142.7" dst_port="80" src_ip="144.39.7.65"/>
    </slice>
    <from sec="1109826307" usec="0"/>
    <to sec="1109826328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
1212[label="195.81.116.184;d;38pkt 38fpkt", shape=diamond, color=yellow];
1592[label="169.28.163.180;d;64pkt 64fpkt", shape=diamond, color=yellow];
1681[label="214.166.228.71;s;82pkt 82fpkt", shape=diamond, color=yellow];
1886[label="175.150.173.162;d;9pkt 9fpkt", shape=diamond, color=yellow];
1903[label="203.128.186.61;s;3pkt 3fpkt", shape=diamond, color=yellow];
3928[label="210.5.144.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4763[label="210.5.144.185;1pkt 1fpkt", shape=invtriangle, color=brown];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.166.228.71:*, *:25}[39.3064%]&lt;BR/&gt;{*:*, 169.28.163.180:25}[32.948%]&lt;BR/&gt;{*:*, 195.81.116.184:25}[22.5434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.4724%)&lt;BR/&gt; 113: (2.76382%)&lt;BR/&gt; 2401: (1.50754%)&lt;BR/&gt; 53: (1.50754%)&lt;BR/&gt; 55055: (0.502513%)&gt;];
}
1212--1681[label="0.368421;14pkt 14fpkt"];
1212--3928[label="0.5;1pkt 1fpkt"];
1592--1681[label="0.03125;2pkt 2fpkt"];
1592--1824[label="0.21875;14pkt 14fpkt"];
1681--1886[label="0.555556;5pkt 5fpkt"];
1681--1924[label="0.0243902;2pkt 2fpkt"];
1681--1925[label="0.0967742;3pkt 3fpkt"];
1681--2918[label="0.0243902;2pkt 2fpkt"];
1681--2930[label="0.0243902;2pkt 2fpkt"];
1681--2934[label="0.0243902;2pkt 2fpkt"];
1886--1903[label="1;3pkt 3fpkt"];
3928--4763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="214.166.228.71"/>
      <filter dst_ip="169.28.163.180" dst_port="25"/>
      <filter dst_ip="195.81.116.184" dst_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.77.177.186"/>
    </slice>
    <from sec="1109826563" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.76.136.188"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.96.189"/>
    </slice>
    <from sec="1109826187" usec="0"/>
    <to sec="1109826747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.5.144.190"/>
    </slice>
    <from sec="1109826350" usec="0"/>
    <to sec="1109826679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.39.194.192"/>
    </slice>
    <from sec="1109826080" usec="0"/>
    <to sec="1109826820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.201.192"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.225.21.193"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.138.194"/>
    </slice>
    <from sec="1109826450" usec="0"/>
    <to sec="1109826548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.26.154.194"/>
    </slice>
    <from sec="1109826377" usec="0"/>
    <to sec="1109826397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
2064[label="148.176.236.100;s;21pkt 21fpkt", shape=diamond, color=yellow];
3761[label="169.28.153.148;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4802[label="148.177.6.205;41pkt 41fpkt", shape=invtriangle, color=brown];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.6.205:*, *:80}[58.5714%]&lt;BR/&gt;{148.176.236.100:*, 35.175.156.129:80}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.7143%)&lt;BR/&gt; 443: (4.28571%)&lt;BR/&gt; 50905: (0.714286%)&lt;BR/&gt; 50904: (0.714286%)&lt;BR/&gt; 50611: (0.714286%)&gt;];
}
2064--3522[label="1;21pkt 21fpkt"];
2064--4544[label="1;21pkt 21fpkt"];
2064--5041[label="1;21pkt 21fpkt"];
3761--4670[label="1;7pkt 7fpkt"];
3761--5094[label="1;7pkt 7fpkt"];
4802--5151[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.6.205"/>
      <filter dst_ip="35.175.156.129" dst_port="80" src_ip="148.176.236.100"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.146.4.195"/>
    </slice>
    <from sec="1109826369" usec="0"/>
    <to sec="1109826425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.182.130.195"/>
    </slice>
    <from sec="1109826253" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.182.130.196"/>
    </slice>
    <from sec="1109826250" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.169.108.200"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
1944[label="214.182.130.216;d;92pkt 92fpkt", shape=diamond, color=yellow];
3120[label="175.150.200.27;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.133.218:*, 214.182.130.216:5050}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45.3125%)&lt;BR/&gt; 20: (2.60417%)&lt;BR/&gt; 1629: (1.04167%)&lt;BR/&gt; 1628: (1.04167%)&lt;BR/&gt; 1627: (1.04167%)&gt;];
}
1944--3120[label="1;4pkt 4fpkt"];
1944--4001[label="0.0487805;2pkt 2fpkt"];
1944--4085[label="0.966667;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="214.182.130.216" dst_port="5050" src_ip="175.150.133.218"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.170.171.201"/>
    </slice>
    <from sec="1109826111" usec="0"/>
    <to sec="1109826125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.24.80.202"/>
    </slice>
    <from sec="1109826701" usec="0"/>
    <to sec="1109826836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.206.202"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.73.79.203"/>
    </slice>
    <from sec="1109826261" usec="0"/>
    <to sec="1109826887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.136.220.203"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.222.61.204"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.143.8.205"/>
    </slice>
    <from sec="1109826230" usec="0"/>
    <to sec="1109826683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.32.71.205"/>
    </slice>
    <from sec="1109826310" usec="0"/>
    <to sec="1109826375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
571[label="77.209.83.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
689[label="195.81.123.66;d;11pkt 11fpkt", shape=diamond, color=yellow];
4026[label="77.235.86.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{79.127.80.70:*, 195.81.123.66:1755}[27.2727%]&lt;BR/&gt;{77.235.86.205:*, 195.81.123.66:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (42.8571%)&lt;BR/&gt; 4329: (7.14286%)&lt;BR/&gt; 1100: (7.14286%)&lt;BR/&gt; 1095: (7.14286%)&lt;BR/&gt; 49206: (3.57143%)&gt;];
}
571--689[label="1;1pkt 1fpkt"];
689--4026[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.123.66" src_ip="77.235.86.205"/>
      <filter dst_ip="195.81.123.66" dst_port="1755" src_ip="79.127.80.70"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.221.205"/>
    </slice>
    <from sec="1109826358" usec="0"/>
    <to sec="1109826590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.133.208"/>
    </slice>
    <from sec="1109826019" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.108.169.208"/>
    </slice>
    <from sec="1109826032" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
2050[label="210.5.187.208;s;2pkt 2fpkt", shape=diamond, color=yellow];
4041[label="210.5.187.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.5.187.208:80, 148.177.112.70:4054}[50%]&lt;BR/&gt;{210.5.187.208:80, 148.177.112.70:4060}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4060: (33.3333%)&lt;BR/&gt; 4054: (16.6667%)&gt;];
}
2050--4041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.112.70" dst_port="4060" src_ip="210.5.187.208" src_port="80"/>
      <filter dst_ip="148.177.112.70" dst_port="4054" src_ip="210.5.187.208" src_port="80"/>
    </slice>
    <from sec="1109826643" usec="0"/>
    <to sec="1109826682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.177.244.208"/>
    </slice>
    <from sec="1109826201" usec="0"/>
    <to sec="1109826684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.19.39.210"/>
    </slice>
    <from sec="1109826288" usec="0"/>
    <to sec="1109826693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.142.123.210"/>
    </slice>
    <from sec="1109826022" usec="0"/>
    <to sec="1109826864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.127.62.214"/>
    </slice>
    <from sec="1109826464" usec="0"/>
    <to sec="1109826514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.233.124.214"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.193.224.214"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.39.87.216"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
1568[label="144.39.125.217;s;2pkt 2fpkt", shape=diamond, color=yellow];
4081[label="144.39.125.217;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.125.217:1730, 0.8.24.99:80}[50%]&lt;BR/&gt;{144.39.125.217:1750, 175.148.39.109:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1750: (25%)&lt;BR/&gt; 1730: (25%)&gt;];
}
1568--1684[label="0.5;1pkt 1fpkt"];
1568--4081[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.148.39.109" dst_port="80" src_ip="144.39.125.217" src_port="1750"/>
      <filter dst_ip="0.8.24.99" dst_port="80" src_ip="144.39.125.217" src_port="1730"/>
    </slice>
    <from sec="1109826428" usec="0"/>
    <to sec="1109826753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891556,1.6058,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
155[label="165.197.22.218s;982pkt 982fpkt", shape=rectangle, color=red];
2073[label="165.197.22.218;s;1016pkt 1016fpkt", shape=diamond, color=yellow];
4083[label="165.197.22.218;1015pkt 1015fpkt", shape=pentagon, color=darkviolet];
4832[label="165.197.22.218;1016pkt 1016fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.197.22.218:*, *:42}[25%]&lt;BR/&gt;{165.197.22.218:*, *:4899}[25%]&lt;BR/&gt;{165.197.22.218:*, *:5900}[25%]&lt;BR/&gt;{165.197.22.218:*, *:6101}[24.9016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (12.5093%)&lt;BR/&gt; 4899: (12.5093%)&lt;BR/&gt; 42: (12.4845%)&lt;BR/&gt; 6101: (12.4597%)&lt;BR/&gt; 4685: (0.0496401%)&gt;];
}
155--2073[label="1;982pkt 982fpkt"];
155--4083[label="0.998982;981pkt 981fpkt"];
155--4832[label="1;982pkt 982fpkt"];
2073--4083[label="1;1015pkt 1015fpkt"];
2073--4832[label="1;1016pkt 1016fpkt"];
4083--4832[label="1;1015pkt 1015fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="165.197.22.218"/>
      <filter dst_port="4899" src_ip="165.197.22.218"/>
      <filter dst_port="42" src_ip="165.197.22.218"/>
      <filter dst_port="6101" src_ip="165.197.22.218"/>
    </slice>
    <from sec="1109826717" usec="0"/>
    <to sec="1109826820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
1475[label="214.182.130.218;s;57pkt 57fpkt", shape=diamond, color=yellow];
2732[label="214.182.130.218;s;55pkt 55fpkt", shape=hexagon, color=black];
4084[label="214.182.130.218;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.218:5050, *:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.9405%)&lt;BR/&gt; 23: (2.67857%)&lt;BR/&gt; 20: (2.38095%)&lt;BR/&gt; 4937: (0.892857%)&lt;BR/&gt; 4889: (0.892857%)&gt;];
}
1475--2732[label="1;55pkt 55fpkt"];
1475--4084[label="1;56pkt 56fpkt"];
2732--4084[label="0.981818;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.130.218" src_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713624,1.64223,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
1512[label="214.182.130.219;s;50pkt 50fpkt", shape=diamond, color=yellow];
2624[label="214.182.130.219;s;50pkt 50fpkt", shape=hexagon, color=black];
4091[label="214.182.130.219;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.219:5050, *:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45.302%)&lt;BR/&gt; 20: (3.69128%)&lt;BR/&gt; 1143: (2.01342%)&lt;BR/&gt; 63621: (1.00671%)&lt;BR/&gt; 36120: (1.00671%)&gt;];
}
1512--2624[label="1;50pkt 50fpkt"];
1512--4091[label="1;49pkt 49fpkt"];
2624--4091[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.130.219" src_port="5050"/>
    </slice>
    <from sec="1109826009" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.114.170.220"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
1384[label="148.176.233.8;s;39pkt 39fpkt", shape=diamond, color=yellow];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.233.8:*, 197.84.207.131:80}[48.7179%]&lt;BR/&gt;{148.176.233.8:*, 197.84.158.0:80}[28.2051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7179%)&lt;BR/&gt; 1100: (1.28205%)&lt;BR/&gt; 1099: (1.28205%)&lt;BR/&gt; 1098: (1.28205%)&lt;BR/&gt; 1097: (1.28205%)&gt;];
}
1384--2992[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.207.131" dst_port="80" src_ip="148.176.233.8"/>
      <filter dst_ip="197.84.158.0" dst_port="80" src_ip="148.176.233.8"/>
    </slice>
    <from sec="1109826200" usec="0"/>
    <to sec="1109826397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.166.198.221"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.55.37.222"/>
    </slice>
    <from sec="1109826040" usec="0"/>
    <to sec="1109826837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
1919[label="214.182.130.222;s;39pkt 39fpkt", shape=diamond, color=yellow];
4105[label="214.182.130.222;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.222:5050, *:*}[87.1795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.5065%)&lt;BR/&gt; 20: (5.19481%)&lt;BR/&gt; 63730: (1.2987%)&lt;BR/&gt; 3111: (1.2987%)&lt;BR/&gt; 3051: (1.2987%)&gt;];
}
1919--4105[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.130.222" src_port="5050"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.164.149.223"/>
    </slice>
    <from sec="1109826366" usec="0"/>
    <to sec="1109826381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
761[label="74.141.69.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
762[label="144.39.97.224;s;24pkt 24fpkt", shape=diamond, color=yellow];
2658[label="144.39.97.224;s;20pkt 20fpkt", shape=hexagon, color=black];
4109[label="144.39.97.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4841[label="144.39.97.224;1pkt 1fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.97.224:*, 204.169.53.134:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.2979%)&lt;BR/&gt; 443: (6.38298%)&lt;BR/&gt; 3142: (5.31915%)&lt;BR/&gt; 1943: (5.31915%)&lt;BR/&gt; 2611: (2.12766%)&gt;];
}
761--762[label="1;1pkt 1fpkt"];
761--2658[label="1;1pkt 1fpkt"];
761--4109[label="1;1pkt 1fpkt"];
761--4841[label="1;1pkt 1fpkt"];
762--2658[label="1;20pkt 20fpkt"];
762--2890[label="0.208333;5pkt 5fpkt"];
762--4109[label="1;1pkt 1fpkt"];
762--4841[label="1;1pkt 1fpkt"];
2658--2890[label="0.25;5pkt 5fpkt"];
2658--4109[label="1;1pkt 1fpkt"];
2658--4841[label="1;1pkt 1fpkt"];
4109--4841[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.169.53.134" dst_port="80" src_ip="144.39.97.224"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.226.105.224"/>
    </slice>
    <from sec="1109826012" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.39.6.228"/>
    </slice>
    <from sec="1109826103" usec="0"/>
    <to sec="1109826772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.175.156.228"/>
    </slice>
    <from sec="1109826371" usec="0"/>
    <to sec="1109826652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.28.200.228"/>
    </slice>
    <from sec="1109826009" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.135.226.230"/>
    </slice>
    <from sec="1109826519" usec="0"/>
    <to sec="1109826531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
1135[label="148.176.149.231;s;51pkt 51fpkt", shape=diamond, color=yellow];
1826[label="197.84.207.166;d;62pkt 62fpkt", shape=diamond, color=yellow];
2479[label="148.176.149.231;s;51pkt 51fpkt", shape=hexagon, color=black];
4135[label="148.176.149.231;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4853[label="148.176.149.231;51pkt 51fpkt", shape=invtriangle, color=brown];
5173[label="148.176.149.231;51pkt 51fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.149.231:*, 75.188.167.26:80}[22.3404%]&lt;BR/&gt;{148.177.48.136:*, 197.84.207.166:80}[21.2766%]&lt;BR/&gt;{148.176.149.231:*, 197.84.207.166:*}[20.2128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0443%)&lt;BR/&gt; 443: (3.00633%)&lt;BR/&gt; 123: (1.58228%)&lt;BR/&gt; 1371: (1.10759%)&lt;BR/&gt; 1391: (0.949367%)&gt;];
}
1135--1826[label="0.372549;19pkt 19fpkt"];
1135--2479[label="1;51pkt 51fpkt"];
1135--4135[label="1;50pkt 50fpkt"];
1135--4853[label="1;51pkt 51fpkt"];
1135--5173[label="1;51pkt 51fpkt"];
1826--2479[label="0.372549;19pkt 19fpkt"];
1826--2582[label="0.016129;1pkt 1fpkt"];
1826--2634[label="0.42;21pkt 21fpkt"];
1826--2685[label="0.0196078;1pkt 1fpkt"];
1826--2890[label="0.0322581;2pkt 2fpkt"];
1826--3326[label="0.285714;2pkt 2fpkt"];
1826--3444[label="0.0188679;1pkt 1fpkt"];
1826--3450[label="0.016129;1pkt 1fpkt"];
1826--3697[label="0.428571;21pkt 21fpkt"];
1826--4135[label="0.38;19pkt 19fpkt"];
1826--4438[label="0.285714;2pkt 2fpkt"];
1826--4502[label="0.0188679;1pkt 1fpkt"];
1826--4505[label="0.016129;1pkt 1fpkt"];
1826--4636[label="0.42;21pkt 21fpkt"];
1826--4853[label="0.372549;19pkt 19fpkt"];
1826--5016[label="0.0185185;1pkt 1fpkt"];
1826--5019[label="0.016129;1pkt 1fpkt"];
1826--5173[label="0.372549;19pkt 19fpkt"];
2479--4135[label="1;50pkt 50fpkt"];
2479--4853[label="1;51pkt 51fpkt"];
2479--5173[label="1;51pkt 51fpkt"];
4135--4853[label="1;50pkt 50fpkt"];
4135--5173[label="1;50pkt 50fpkt"];
4853--5173[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.207.166" src_ip="148.176.149.231"/>
      <filter dst_ip="75.188.167.26" dst_port="80" src_ip="148.176.149.231"/>
      <filter dst_ip="197.84.207.166" dst_port="80" src_ip="148.177.48.136"/>
    </slice>
    <from sec="1109826025" usec="0"/>
    <to sec="1109826808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.150.151.232"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.241.34.233"/>
    </slice>
    <from sec="1109826284" usec="0"/>
    <to sec="1109826697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.0.241.235"/>
    </slice>
    <from sec="1109826166" usec="0"/>
    <to sec="1109826248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
868[label="194.64.98.39;d;16pkt 16fpkt", shape=diamond, color=yellow];
3965[label="23.40.46.194;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4164[label="23.40.46.237;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4868[label="23.40.46.237;4pkt 4fpkt", shape=invtriangle, color=brown];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.40.46.194:80, 194.64.98.39:*}[31.25%]&lt;BR/&gt;{23.40.46.237:80, 194.64.98.39:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1257: (5.55556%)&lt;BR/&gt; 1255: (5.55556%)&lt;BR/&gt; 1231: (5.55556%)&lt;BR/&gt; 1261: (3.7037%)&gt;];
}
868--3965[label="1;4pkt 4fpkt"];
868--4164[label="1;3pkt 3fpkt"];
868--4868[label="1;4pkt 4fpkt"];
4164--4868[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.98.39" src_ip="23.40.46.194" src_port="80"/>
      <filter dst_ip="194.64.98.39" src_ip="23.40.46.237" src_port="80"/>
    </slice>
    <from sec="1109826561" usec="0"/>
    <to sec="1109826681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.55.77.237"/>
    </slice>
    <from sec="1109826752" usec="0"/>
    <to sec="1109826816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.3.171.237"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,501,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
2145[label="218.136.105.140;d;76pkt 76fpkt", shape=diamond, color=yellow];
4170[label="175.150.233.237;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4871[label="175.150.233.237;54pkt 54fpkt", shape=invtriangle, color=brown];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.136.105.140:21}[57.9365%]&lt;BR/&gt;{175.150.233.237:*, *:443}[36.5079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (24.5946%)&lt;BR/&gt; 21: (21.8919%)&lt;BR/&gt; 4400: (1.62162%)&lt;BR/&gt; 80: (1.08108%)&lt;BR/&gt; 45993: (0.810811%)&gt;];
}
2145--4170[label="0.0909091;5pkt 5fpkt"];
2145--4871[label="0.0925926;5pkt 5fpkt"];
4170--4871[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="175.150.233.237"/>
      <filter dst_ip="218.136.105.140" dst_port="21"/>
    </slice>
    <from sec="1109826003" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.81.118.241"/>
    </slice>
    <from sec="1109826128" usec="0"/>
    <to sec="1109826292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.216.109.244"/>
    </slice>
    <from sec="1109826009" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
2007[label="134.171.167.167;d;38pkt 38fpkt", shape=diamond, color=yellow];
4191[label="203.250.188.245;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4882[label="203.250.188.245;36pkt 36fpkt", shape=invtriangle, color=brown];
5186[label="203.250.188.245;35pkt 35fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.250.188.245:*, 134.171.167.167:113}[23.913%]&lt;BR/&gt;{203.250.188.245:6667, 134.171.167.167:*}[23.913%]&lt;BR/&gt;{203.250.188.246:*, 134.171.167.167:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (16.8966%)&lt;BR/&gt; 6667: (15.8621%)&lt;BR/&gt; 10080: (2.75862%)&lt;BR/&gt; 8080: (2.75862%)&lt;BR/&gt; 8000: (2.75862%)&gt;];
}
2007--4191[label="0.777778;28pkt 28fpkt"];
2007--4882[label="0.777778;28pkt 28fpkt"];
2007--5186[label="0.8;28pkt 28fpkt"];
4191--4882[label="1;36pkt 36fpkt"];
4191--5186[label="1;35pkt 35fpkt"];
4882--5186[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="134.171.167.167" src_ip="203.250.188.246"/>
      <filter dst_ip="134.171.167.167" src_ip="203.250.188.245" src_port="6667"/>
      <filter dst_ip="134.171.167.167" dst_port="113" src_ip="203.250.188.245"/>
    </slice>
    <from sec="1109826202" usec="0"/>
    <to sec="1109826761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.142.201.245"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.80.139.246"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.241.184.246"/>
    </slice>
    <from sec="1109826690" usec="0"/>
    <to sec="1109826702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.227.192.246"/>
    </slice>
    <from sec="1109826455" usec="0"/>
    <to sec="1109826506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.30.109.247"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.182.130.247"/>
    </slice>
    <from sec="1109826251" usec="0"/>
    <to sec="1109826880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.241.186.248"/>
    </slice>
    <from sec="1109826332" usec="0"/>
    <to sec="1109826349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.11.37.249"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
2056[label="223.246.120.4;d;4pkt 4fpkt", shape=diamond, color=yellow];
4207[label="148.177.58.251;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.58.251:9898, 209.171.174.123:2630}[20%]&lt;BR/&gt;{148.177.58.251:1613, 223.246.120.4:21}[20%]&lt;BR/&gt;{148.177.58.251:1614, 223.246.120.4:20}[20%]&lt;BR/&gt;{148.177.58.251:1615, 223.246.120.4:20}[20%]&lt;BR/&gt;{148.177.58.251:1616, 223.246.120.4:20}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 1616: (12.5%)&lt;BR/&gt; 1615: (12.5%)&lt;BR/&gt; 1614: (12.5%)&lt;BR/&gt; 9898: (6.25%)&gt;];
}
2056--2057[label="1;4pkt 4fpkt"];
2056--4207[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="223.246.120.4" dst_port="20" src_ip="148.177.58.251" src_port="1616"/>
      <filter dst_ip="223.246.120.4" dst_port="20" src_ip="148.177.58.251" src_port="1615"/>
      <filter dst_ip="223.246.120.4" dst_port="20" src_ip="148.177.58.251" src_port="1614"/>
      <filter dst_ip="223.246.120.4" dst_port="21" src_ip="148.177.58.251" src_port="1613"/>
      <filter dst_ip="209.171.174.123" dst_port="2630" src_ip="148.177.58.251" src_port="9898"/>
    </slice>
    <from sec="1109826385" usec="0"/>
    <to sec="1109826664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.106.67.252"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.452704,1.74401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.160.210.253"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
2945[label="214.182.137.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4227[label="214.182.137.1;2pkt 2fpkt", shape=invtriangle, color=brown];
4900[label="214.182.137.1;2pkt 2fpkt", shape=invhouse, color=bisque];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.137.1:80, 194.76.179.98:2968}[50%]&lt;BR/&gt;{214.182.137.1:80, 194.76.179.99:4187}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4187: (25%)&lt;BR/&gt; 2968: (25%)&gt;];
}
2945--4227[label="1;2pkt 2fpkt"];
2945--4900[label="1;2pkt 2fpkt"];
4227--4900[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.76.179.99" dst_port="4187" src_ip="214.182.137.1" src_port="80"/>
      <filter dst_ip="194.76.179.98" dst_port="2968" src_ip="214.182.137.1" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
2954[label="175.150.164.2;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4232[label="175.150.164.2;71pkt 71fpkt", shape=invtriangle, color=brown];
4904[label="175.150.164.2;71pkt 71fpkt", shape=invhouse, color=bisque];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.164.2:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2954--4232[label="1;71pkt 71fpkt"];
2954--4904[label="1;71pkt 71fpkt"];
4232--4904[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter src_ip="175.150.164.2"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="144.224.65.3"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
2962[label="209.56.158.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4237[label="209.56.158.3;2pkt 2fpkt", shape=invtriangle, color=brown];
4907[label="209.56.158.3;1pkt 1fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.56.158.3:3392, 194.64.115.42:22593}[50%]&lt;BR/&gt;{209.56.158.3:23022, 194.64.115.42:1092}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22593: (30%)&lt;BR/&gt; 3392: (30%)&lt;BR/&gt; 23022: (20%)&lt;BR/&gt; 1092: (20%)&gt;];
}
2962--4237[label="1;2pkt 2fpkt"];
2962--4907[label="1;1pkt 1fpkt"];
4237--4907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.115.42" dst_port="1092" src_ip="209.56.158.3" src_port="23022"/>
      <filter dst_ip="194.64.115.42" dst_port="22593" src_ip="209.56.158.3" src_port="3392"/>
    </slice>
    <from sec="1109826776" usec="0"/>
    <to sec="1109826802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
2974[label="148.176.2.5;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4243[label="148.176.2.5;3pkt 3fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.2.5:1701, 215.39.196.143:80}[33.3333%]&lt;BR/&gt;{148.176.2.5:1702, 215.39.196.143:80}[33.3333%]&lt;BR/&gt;{148.176.2.5:1703, 215.39.196.143:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1703: (16.6667%)&lt;BR/&gt; 1702: (16.6667%)&lt;BR/&gt; 1701: (16.6667%)&gt;];
}
2974--4243[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.39.196.143" dst_port="80" src_ip="148.176.2.5" src_port="1703"/>
      <filter dst_ip="215.39.196.143" dst_port="80" src_ip="148.176.2.5" src_port="1702"/>
      <filter dst_ip="215.39.196.143" dst_port="80" src_ip="148.176.2.5" src_port="1701"/>
    </slice>
    <from sec="1109826576" usec="0"/>
    <to sec="1109826666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
2978[label="212.183.54.5;229pkt 229fpkt", shape=pentagon, color=darkviolet];
4246[label="212.183.54.5;229pkt 229fpkt", shape=invtriangle, color=brown];
4912[label="212.183.54.5;229pkt 229fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.183.54.5:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4664: (0.218341%)&lt;BR/&gt; 4652: (0.218341%)&lt;BR/&gt; 4627: (0.218341%)&lt;BR/&gt; 4620: (0.218341%)&gt;];
}
2978--4246[label="1;229pkt 229fpkt"];
2978--4912[label="1;229pkt 229fpkt"];
4246--4912[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="212.183.54.5"/>
    </slice>
    <from sec="1109826484" usec="0"/>
    <to sec="1109826486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
1310[label="73.173.16.228;d;200pkt 200fpkt", shape=diamond, color=yellow];
1311[label="148.177.219.145;s;131pkt 131fpkt", shape=diamond, color=yellow];
1469[label="148.176.236.10;s;131pkt 131fpkt", shape=diamond, color=yellow];
1785[label="73.173.16.206;d;165pkt 165fpkt", shape=diamond, color=yellow];
2737[label="148.177.202.80;s;95pkt 95fpkt", shape=hexagon, color=black];
2982[label="148.177.136.6;87pkt 87fpkt", shape=pentagon, color=darkviolet];
4108[label="144.39.46.224;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4250[label="148.177.136.6;87pkt 87fpkt", shape=invtriangle, color=brown];
4840[label="144.39.46.224;55pkt 55fpkt", shape=invtriangle, color=brown];
5166[label="144.39.46.224;55pkt 55fpkt", shape=invhouse, color=bisque];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 73.173.16.228:2703}[37.9562%]&lt;BR/&gt;{*:*, 73.173.16.206:2703}[30.8394%]&lt;BR/&gt;{148.177.219.145:*, *:2703}[24.8175%]&lt;BR/&gt;{148.176.236.10:*, *:*}[23.9051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (47.5024%)&lt;BR/&gt; 25: (1.64939%)&lt;BR/&gt; 113: (0.471254%)&lt;BR/&gt; 53: (0.377003%)&lt;BR/&gt; 52969: (0.329877%)&gt;];
}
1310--1311[label="0.473282;62pkt 62fpkt"];
1310--1469[label="0.396947;52pkt 52fpkt"];
1310--2982[label="0.390805;34pkt 34fpkt"];
1310--4108[label="0.490909;27pkt 27fpkt"];
1310--4250[label="0.390805;34pkt 34fpkt"];
1310--4840[label="0.490909;27pkt 27fpkt"];
1310--5166[label="0.490909;27pkt 27fpkt"];
1311--1785[label="0.183206;24pkt 24fpkt"];
1469--1785[label="0.10687;14pkt 14fpkt"];
1469--2906[label="0.0305344;4pkt 4fpkt"];
1469--2911[label="0.00763359;1pkt 1fpkt"];
1469--2924[label="0.00763359;1pkt 1fpkt"];
1469--2932[label="0.00763359;1pkt 1fpkt"];
1785--2737[label="0.873684;83pkt 83fpkt"];
1785--2982[label="0.114943;10pkt 10fpkt"];
1785--4108[label="0.181818;10pkt 10fpkt"];
1785--4250[label="0.114943;10pkt 10fpkt"];
1785--4840[label="0.181818;10pkt 10fpkt"];
1785--5166[label="0.181818;10pkt 10fpkt"];
2982--4250[label="1;87pkt 87fpkt"];
4108--4840[label="1;55pkt 55fpkt"];
4108--5166[label="1;55pkt 55fpkt"];
4840--5166[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.236.10"/>
      <filter dst_port="2703" src_ip="148.177.219.145"/>
      <filter dst_ip="73.173.16.228" dst_port="2703"/>
      <filter dst_ip="73.173.16.206" dst_port="2703"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
2999[label="194.157.65.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4260[label="194.157.65.10;3pkt 3fpkt", shape=invtriangle, color=brown];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.157.65.10:1687, 170.227.223.34:1434}[33.3333%]&lt;BR/&gt;{194.157.65.10:1687, 169.28.243.57:1434}[33.3333%]&lt;BR/&gt;{194.157.65.10:1687, 144.224.197.133:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1687: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2999--4260[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.197.133" dst_port="1434" src_ip="194.157.65.10" src_port="1687"/>
      <filter dst_ip="169.28.243.57" dst_port="1434" src_ip="194.157.65.10" src_port="1687"/>
      <filter dst_ip="170.227.223.34" dst_port="1434" src_ip="194.157.65.10" src_port="1687"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
3003[label="41.25.233.10;218pkt 218fpkt", shape=pentagon, color=darkviolet];
4262[label="41.25.233.10;217pkt 217fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.233.10:65356, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65356: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3003--4262[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="41.25.233.10" src_port="65356"/>
    </slice>
    <from sec="1109826132" usec="0"/>
    <to sec="1109826171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
1089[label="148.177.200.11;s;61pkt 61fpkt", shape=diamond, color=yellow];
2445[label="148.177.200.11;s;54pkt 54fpkt", shape=hexagon, color=black];
3009[label="148.177.200.11;64pkt 64fpkt", shape=pentagon, color=darkviolet];
4263[label="148.177.200.11;63pkt 63fpkt", shape=invtriangle, color=brown];
4919[label="148.177.200.11;64pkt 64fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.200.11:80, 198.114.137.218:*}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64710: (0.816993%)&lt;BR/&gt; 58783: (0.816993%)&lt;BR/&gt; 58763: (0.816993%)&lt;BR/&gt; 58009: (0.816993%)&gt;];
}
1089--2445[label="1;54pkt 54fpkt"];
1089--2912[label="0.0983607;6pkt 6fpkt"];
1089--2919[label="0.0163934;1pkt 1fpkt"];
1089--2925[label="0.0983607;6pkt 6fpkt"];
1089--2931[label="0.0163934;1pkt 1fpkt"];
1089--2933[label="0.0983607;6pkt 6fpkt"];
1089--2935[label="0.0163934;1pkt 1fpkt"];
1089--3009[label="1;61pkt 61fpkt"];
1089--4263[label="0.983607;60pkt 60fpkt"];
1089--4919[label="1;61pkt 61fpkt"];
2445--2912[label="0.111111;6pkt 6fpkt"];
2445--2925[label="0.111111;6pkt 6fpkt"];
2445--2933[label="0.111111;6pkt 6fpkt"];
2445--3009[label="1;54pkt 54fpkt"];
2445--4263[label="0.981481;53pkt 53fpkt"];
2445--4919[label="1;54pkt 54fpkt"];
3009--4263[label="1;63pkt 63fpkt"];
3009--4919[label="1;64pkt 64fpkt"];
4263--4919[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="198.114.137.218" src_ip="148.177.200.11" src_port="80"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
3011[label="169.28.8.12;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4265[label="169.28.8.12;3pkt 3fpkt", shape=invtriangle, color=brown];
4921[label="169.28.8.12;4pkt 4fpkt", shape=invhouse, color=bisque];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.8.12:1778, 214.131.166.10:443}[25%]&lt;BR/&gt;{169.28.8.12:1779, 214.131.166.10:443}[25%]&lt;BR/&gt;{169.28.8.12:1800, 72.252.154.249:80}[25%]&lt;BR/&gt;{169.28.8.12:1801, 72.252.154.249:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 1801: (13.6364%)&lt;BR/&gt; 1779: (13.6364%)&lt;BR/&gt; 1778: (13.6364%)&gt;];
}
3011--4265[label="1;3pkt 3fpkt"];
3011--4921[label="1;4pkt 4fpkt"];
4265--4921[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="72.252.154.249" dst_port="80" src_ip="169.28.8.12" src_port="1801"/>
      <filter dst_ip="72.252.154.249" dst_port="80" src_ip="169.28.8.12" src_port="1800"/>
      <filter dst_ip="214.131.166.10" dst_port="443" src_ip="169.28.8.12" src_port="1779"/>
      <filter dst_ip="214.131.166.10" dst_port="443" src_ip="169.28.8.12" src_port="1778"/>
    </slice>
    <from sec="1109826198" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
3012[label="214.29.21.12;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4266[label="214.29.21.12;6pkt 6fpkt", shape=invtriangle, color=brown];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.29.21.12:80, 194.76.176.31:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3310: (8.33333%)&lt;BR/&gt; 3284: (8.33333%)&lt;BR/&gt; 3281: (8.33333%)&lt;BR/&gt; 3280: (8.33333%)&gt;];
}
3012--4266[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="194.76.176.31" src_ip="214.29.21.12" src_port="80"/>
    </slice>
    <from sec="1109826798" usec="0"/>
    <to sec="1109826835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
3019[label="72.231.104.13;162pkt 162fpkt", shape=pentagon, color=darkviolet];
4268[label="72.231.104.13;162pkt 162fpkt", shape=invtriangle, color=brown];
4922[label="72.231.104.13;162pkt 162fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.231.104.13:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3019--4268[label="1;162pkt 162fpkt"];
3019--4922[label="1;162pkt 162fpkt"];
4268--4922[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="72.231.104.13" src_port="1030"/>
    </slice>
    <from sec="1109826308" usec="0"/>
    <to sec="1109826333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
3041[label="212.82.130.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4276[label="212.82.130.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.130.16:39169, 213.12.10.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39169: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3041--4276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.12.10.66" dst_port="80" src_ip="212.82.130.16" src_port="39169"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.92.4.17"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.28.108.18"/>
    </slice>
    <from sec="1109826223" usec="0"/>
    <to sec="1109826244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
401[label="144.192.39.143;d;4149pkt 4149fpkt", shape=diamond, color=yellow];
2266[label="144.192.39.143;d;2387pkt 2387fpkt", shape=hexagon, color=black];
2997[label="20.106.8.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3005[label="209.18.43.11;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3062[label="210.59.79.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3530[label="212.167.197.101;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3806[label="194.227.137.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4258[label="20.106.8.10;4pkt 4fpkt", shape=invtriangle, color=brown];
4291[label="210.59.79.19;1pkt 1fpkt", shape=invtriangle, color=brown];
4701[label="194.227.137.158;2pkt 2fpkt", shape=invtriangle, color=brown];
4918[label="20.106.8.10;4pkt 4fpkt", shape=invhouse, color=bisque];
5111[label="194.227.137.158;2pkt 2fpkt", shape=invhouse, color=bisque];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.192.39.143:52187}[98.4823%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52187: (49.324%)&lt;BR/&gt; 443: (0.334194%)&lt;BR/&gt; 80: (0.288622%)&lt;BR/&gt; 0: (0.136716%)&lt;BR/&gt; 64576: (0.11393%)&gt;];
}
401--2266[label="1;2387pkt 2387fpkt"];
401--2890[label="0.000241022;1pkt 1fpkt"];
401--2919[label="0.000252972;1pkt 1fpkt"];
401--2931[label="0.000252972;1pkt 1fpkt"];
401--2935[label="0.000252972;1pkt 1fpkt"];
401--2997[label="1;3pkt 3fpkt"];
401--3005[label="1;5pkt 5fpkt"];
401--3062[label="1;1pkt 1fpkt"];
401--3530[label="0.913043;21pkt 21fpkt"];
401--3806[label="1;2pkt 2fpkt"];
401--4258[label="1;4pkt 4fpkt"];
401--4291[label="1;1pkt 1fpkt"];
401--4701[label="1;2pkt 2fpkt"];
401--4918[label="1;4pkt 4fpkt"];
401--5111[label="1;2pkt 2fpkt"];
2266--2890[label="0.000418936;1pkt 1fpkt"];
2266--2919[label="0.000418936;1pkt 1fpkt"];
2266--2931[label="0.000418936;1pkt 1fpkt"];
2266--2935[label="0.000418936;1pkt 1fpkt"];
2266--2997[label="1;3pkt 3fpkt"];
2266--3005[label="0.8;4pkt 4fpkt"];
2266--3062[label="1;1pkt 1fpkt"];
2266--3530[label="0.478261;11pkt 11fpkt"];
2266--3806[label="1;2pkt 2fpkt"];
2266--4258[label="1;4pkt 4fpkt"];
2266--4291[label="1;1pkt 1fpkt"];
2266--4701[label="1;2pkt 2fpkt"];
2266--4918[label="1;4pkt 4fpkt"];
2266--5111[label="1;2pkt 2fpkt"];
2997--4258[label="1;3pkt 3fpkt"];
2997--4918[label="1;3pkt 3fpkt"];
3062--4291[label="1;1pkt 1fpkt"];
3806--4701[label="1;2pkt 2fpkt"];
3806--5111[label="1;2pkt 2fpkt"];
4258--4918[label="1;4pkt 4fpkt"];
4701--5111[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.192.39.143" dst_port="52187"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
3069[label="209.39.148.20;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4294[label="209.39.148.20;256pkt 256fpkt", shape=invtriangle, color=brown];
4932[label="209.39.148.20;255pkt 255fpkt", shape=invhouse, color=bisque];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.39.148.20:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3069--4294[label="1;255pkt 255fpkt"];
3069--4932[label="1;255pkt 255fpkt"];
4294--4932[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.39.148.20" src_port="1025"/>
    </slice>
    <from sec="1109826252" usec="0"/>
    <to sec="1109826268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
1010[label="195.81.113.21;s;321pkt 321fpkt", shape=diamond, color=yellow];
1456[label="199.48.186.94;d;16pkt 16fpkt", shape=diamond, color=yellow];
3078[label="195.81.113.21;325pkt 325fpkt", shape=pentagon, color=darkviolet];
4297[label="195.81.113.21;325pkt 325fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.113.21:0, *:0}[95.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1010--1345[label="0.0526316;1pkt 1fpkt"];
1010--1456[label="0.0625;1pkt 1fpkt"];
1010--1598[label="0.0588235;1pkt 1fpkt"];
1010--2605[label="0.0625;1pkt 1fpkt"];
1010--3078[label="1;321pkt 321fpkt"];
1010--4297[label="1;321pkt 321fpkt"];
1456--1505[label="0.0625;1pkt 1fpkt"];
1456--2605[label="1;16pkt 16fpkt"];
1456--3078[label="0.0625;1pkt 1fpkt"];
1456--3279[label="0.2;1pkt 1fpkt"];
1456--3725[label="0.0625;1pkt 1fpkt"];
1456--3759[label="0.166667;1pkt 1fpkt"];
1456--4297[label="0.0625;1pkt 1fpkt"];
1456--4408[label="0.2;1pkt 1fpkt"];
1456--4650[label="0.0625;1pkt 1fpkt"];
1456--4668[label="0.166667;1pkt 1fpkt"];
3078--4297[label="1;325pkt 325fpkt"];
</description>
    <slice>
      <filter src_ip="195.81.113.21"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.216.234.21"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
3091[label="148.176.240.22;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4302[label="148.176.240.22;17pkt 17fpkt", shape=invtriangle, color=brown];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.240.22:*, 73.136.180.132:80}[76.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2344: (3.0303%)&lt;BR/&gt; 2343: (3.0303%)&lt;BR/&gt; 2342: (3.0303%)&lt;BR/&gt; 2341: (3.0303%)&gt;];
}
3091--4302[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="73.136.180.132" dst_port="80" src_ip="148.176.240.22"/>
    </slice>
    <from sec="1109826165" usec="0"/>
    <to sec="1109826193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
3111[label="212.166.97.26;235pkt 235fpkt", shape=pentagon, color=darkviolet];
4313[label="212.166.97.26;235pkt 235fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.166.97.26:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3111--4313[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.166.97.26" src_port="1027"/>
    </slice>
    <from sec="1109826034" usec="0"/>
    <to sec="1109826050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.66.231.28"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.64.106.29"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
3134[label="220.205.178.30;256pkt 256fpkt", shape=pentagon, color=darkviolet];
4328[label="220.205.178.30;256pkt 256fpkt", shape=invtriangle, color=brown];
4951[label="220.205.178.30;255pkt 255fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.205.178.30:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3134--4328[label="1;256pkt 256fpkt"];
3134--4951[label="1;255pkt 255fpkt"];
4328--4951[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.205.178.30" src_port="1025"/>
    </slice>
    <from sec="1109826183" usec="0"/>
    <to sec="1109826197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
3136[label="210.175.240.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4330[label="210.175.240.30;2pkt 2fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.175.240.30:7000, 130.54.13.41:58996}[50%]&lt;BR/&gt;{210.175.240.30:7000, 130.54.50.164:19988}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 58996: (25%)&lt;BR/&gt; 19988: (25%)&gt;];
}
3136--4330[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.50.164" dst_port="19988" src_ip="210.175.240.30" src_port="7000"/>
      <filter dst_ip="130.54.13.41" dst_port="58996" src_ip="210.175.240.30" src_port="7000"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
3138[label="20.120.96.31;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4331[label="20.120.96.31;154pkt 154fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.120.96.31:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3730: (0.323625%)&lt;BR/&gt; 3729: (0.323625%)&lt;BR/&gt; 3728: (0.323625%)&lt;BR/&gt; 3727: (0.323625%)&gt;];
}
3138--4331[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="20.120.96.31"/>
    </slice>
    <from sec="1109826268" usec="0"/>
    <to sec="1109826270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
775[label="169.28.163.182;d;149pkt 149fpkt", shape=diamond, color=yellow];
1502[label="175.150.185.61;d;156pkt 156fpkt", shape=diamond, color=yellow];
1519[label="130.54.24.36;d;138pkt 138fpkt", shape=diamond, color=yellow];
1618[label="144.39.46.235;d;87pkt 87fpkt", shape=diamond, color=yellow];
1805[label="175.150.185.58;d;80pkt 80fpkt", shape=diamond, color=yellow];
1828[label="72.163.236.5;s;26pkt 26fpkt", shape=diamond, color=yellow];
2673[label="144.39.46.235;d;60pkt 60fpkt", shape=hexagon, color=black];
2797[label="72.163.236.5;s;26pkt 26fpkt", shape=hexagon, color=black];
3145[label="194.224.89.32;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3397[label="72.163.239.72;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3762[label="35.175.156.148;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3998[label="74.76.134.200;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4010[label="74.76.134.202;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4077[label="85.45.19.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4079[label="213.102.36.217;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4334[label="194.224.89.32;17pkt 17fpkt", shape=invtriangle, color=brown];
4474[label="72.163.239.72;29pkt 29fpkt", shape=invtriangle, color=brown];
4671[label="35.175.156.148;12pkt 12fpkt", shape=invtriangle, color=brown];
4797[label="74.76.134.202;21pkt 21fpkt", shape=invtriangle, color=brown];
4828[label="85.45.19.217;2pkt 2fpkt", shape=invtriangle, color=brown];
5006[label="72.163.239.72;28pkt 28fpkt", shape=invhouse, color=bisque];
5095[label="35.175.156.148;11pkt 11fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 175.150.185.61:*}[22.7205%]&lt;BR/&gt;{*:*, 169.28.163.182:*}[22.4215%]&lt;BR/&gt;{*:*, 130.54.24.36:*}[20.9268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.6758%)&lt;BR/&gt; 0: (0.847458%)&lt;BR/&gt; 113: (0.529661%)&lt;BR/&gt; 3604: (0.264831%)&lt;BR/&gt; 59660: (0.211864%)&gt;];
}
775--1068[label="0.463415;38pkt 38fpkt"];
775--1299[label="0.428571;36pkt 36fpkt"];
775--1828[label="0.153846;4pkt 4fpkt"];
775--2797[label="0.153846;4pkt 4fpkt"];
775--3145[label="0.176471;3pkt 3fpkt"];
775--3397[label="0.103448;3pkt 3fpkt"];
775--3762[label="0.5;6pkt 6fpkt"];
775--3998[label="0.0769231;1pkt 1fpkt"];
775--4010[label="0.0952381;2pkt 2fpkt"];
775--4077[label="1;3pkt 3fpkt"];
775--4334[label="0.176471;3pkt 3fpkt"];
775--4474[label="0.103448;3pkt 3fpkt"];
775--4671[label="0.5;6pkt 6fpkt"];
775--4797[label="0.0952381;2pkt 2fpkt"];
775--4828[label="1;2pkt 2fpkt"];
775--5006[label="0.107143;3pkt 3fpkt"];
775--5095[label="0.545455;6pkt 6fpkt"];
1502--1828[label="0.307692;8pkt 8fpkt"];
1502--2797[label="0.307692;8pkt 8fpkt"];
1502--3397[label="0.275862;8pkt 8fpkt"];
1502--3998[label="0.307692;4pkt 4fpkt"];
1502--4010[label="0.285714;6pkt 6fpkt"];
1502--4474[label="0.275862;8pkt 8fpkt"];
1502--4797[label="0.285714;6pkt 6fpkt"];
1502--5006[label="0.285714;8pkt 8fpkt"];
1519--1828[label="0.0384615;1pkt 1fpkt"];
1519--2797[label="0.0384615;1pkt 1fpkt"];
1519--3145[label="0.0588235;1pkt 1fpkt"];
1519--3397[label="0.137931;4pkt 4fpkt"];
1519--3762[label="0.333333;4pkt 4fpkt"];
1519--3998[label="0.230769;3pkt 3fpkt"];
1519--4010[label="0.142857;3pkt 3fpkt"];
1519--4334[label="0.0588235;1pkt 1fpkt"];
1519--4474[label="0.137931;4pkt 4fpkt"];
1519--4671[label="0.333333;4pkt 4fpkt"];
1519--4797[label="0.142857;3pkt 3fpkt"];
1519--5006[label="0.142857;4pkt 4fpkt"];
1519--5095[label="0.272727;3pkt 3fpkt"];
1618--2673[label="1;60pkt 60fpkt"];
1618--3145[label="0.117647;2pkt 2fpkt"];
1618--3857[label="0.346154;9pkt 9fpkt"];
1618--4079[label="0.142857;1pkt 1fpkt"];
1618--4334[label="0.117647;2pkt 2fpkt"];
1618--4725[label="0.333333;9pkt 9fpkt"];
1618--5122[label="0.333333;9pkt 9fpkt"];
1805--1828[label="0.0769231;2pkt 2fpkt"];
1805--2797[label="0.0769231;2pkt 2fpkt"];
1828--2797[label="1;26pkt 26fpkt"];
2673--3145[label="0.117647;2pkt 2fpkt"];
2673--3857[label="0.153846;4pkt 4fpkt"];
2673--4079[label="0.142857;1pkt 1fpkt"];
2673--4334[label="0.117647;2pkt 2fpkt"];
2673--4725[label="0.148148;4pkt 4fpkt"];
2673--5122[label="0.148148;4pkt 4fpkt"];
3145--4334[label="1;17pkt 17fpkt"];
3397--4474[label="1;29pkt 29fpkt"];
3397--5006[label="1;28pkt 28fpkt"];
3762--4671[label="1;12pkt 12fpkt"];
3762--5095[label="1;11pkt 11fpkt"];
4010--4797[label="1;21pkt 21fpkt"];
4077--4828[label="1;2pkt 2fpkt"];
4474--5006[label="1;28pkt 28fpkt"];
4671--5095[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.163.182"/>
      <filter dst_ip="130.54.24.36"/>
      <filter dst_ip="175.150.185.61" src_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
3150[label="148.176.2.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4336[label="148.176.2.33;2pkt 2fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.2.33:80, 76.150.35.182:4227}[50%]&lt;BR/&gt;{148.176.2.33:80, 76.150.35.182:4228}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4228: (25%)&lt;BR/&gt; 4227: (25%)&gt;];
}
3150--4336[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.150.35.182" dst_port="4228" src_ip="148.176.2.33" src_port="80"/>
      <filter dst_ip="76.150.35.182" dst_port="4227" src_ip="148.176.2.33" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
3152[label="195.81.113.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4337[label="195.81.113.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.113.33:0, 213.118.109.35:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3152--4337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.118.109.35" src_ip="195.81.113.33"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
1203[label="175.150.165.72;d;510pkt 510fpkt", shape=diamond, color=yellow];
3546[label="20.71.159.104;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4557[label="20.71.159.104;24pkt 24fpkt", shape=invtriangle, color=brown];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 175.150.165.72:53}[59.2871%]&lt;BR/&gt;{*:53, 175.150.165.72:1032}[33.5835%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.2567%)&lt;BR/&gt; 1032: (16.4273%)&lt;BR/&gt; 0: (2.51346%)&lt;BR/&gt; 33701: (1.70557%)&lt;BR/&gt; 1024: (0.897666%)&gt;];
}
1203--1288[label="0.0119048;1pkt 1fpkt"];
1203--1666[label="0.0131579;1pkt 1fpkt"];
1203--1674[label="0.0689655;2pkt 2fpkt"];
1203--1681[label="0.0121951;1pkt 1fpkt"];
1203--1934[label="0.0238095;1pkt 1fpkt"];
1203--2075[label="0.0128205;1pkt 1fpkt"];
1203--2152[label="0.0294118;2pkt 2fpkt"];
1203--2688[label="0.0131579;1pkt 1fpkt"];
1203--2778[label="0.0238095;1pkt 1fpkt"];
1203--2906[label="0.0196078;10pkt 10fpkt"];
1203--2911[label="0.0411765;21pkt 21fpkt"];
1203--2918[label="0.0843137;43pkt 43fpkt"];
1203--2924[label="0.0411765;21pkt 21fpkt"];
1203--2930[label="0.0843137;43pkt 43fpkt"];
1203--2932[label="0.0411765;21pkt 21fpkt"];
1203--2934[label="0.0843137;43pkt 43fpkt"];
1203--2955[label="0.0227273;1pkt 1fpkt"];
1203--2971[label="0.021978;2pkt 2fpkt"];
1203--3002[label="0.028169;2pkt 2fpkt"];
1203--3119[label="0.0555556;3pkt 3fpkt"];
1203--3157[label="0.0714286;2pkt 2fpkt"];
1203--3289[label="0.0294118;1pkt 1fpkt"];
1203--3402[label="0.0116279;1pkt 1fpkt"];
1203--3485[label="0.0126582;1pkt 1fpkt"];
1203--3488[label="0.0136986;1pkt 1fpkt"];
1203--3521[label="0.0125;1pkt 1fpkt"];
1203--3546[label="0.0434783;1pkt 1fpkt"];
1203--3651[label="0.0212766;1pkt 1fpkt"];
1203--3801[label="0.0322581;1pkt 1fpkt"];
1203--3934[label="0.166667;1pkt 1fpkt"];
1203--3963[label="0.166667;1pkt 1fpkt"];
1203--4233[label="0.0227273;1pkt 1fpkt"];
1203--4339[label="0.0689655;2pkt 2fpkt"];
1203--4528[label="0.0138889;1pkt 1fpkt"];
1203--4543[label="0.0125;1pkt 1fpkt"];
1203--4557[label="0.0416667;1pkt 1fpkt"];
1203--4697[label="0.03125;1pkt 1fpkt"];
3546--4557[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.165.72" dst_port="53"/>
      <filter dst_ip="175.150.165.72" dst_port="1032" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
3161[label="192.12.49.34;63pkt 63fpkt", shape=pentagon, color=darkviolet];
4341[label="192.12.49.34;64pkt 64fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.12.49.34:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3721: (1.5748%)&lt;BR/&gt; 4951: (0.787402%)&lt;BR/&gt; 4915: (0.787402%)&lt;BR/&gt; 4826: (0.787402%)&gt;];
}
3161--4341[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="192.12.49.34"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
1052[label="20.17.151.34;s;1048pkt 1048fpkt", shape=diamond, color=yellow];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.17.151.34:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62731: (0.0954198%)&lt;BR/&gt; 60775: (0.0954198%)&lt;BR/&gt; 58377: (0.0954198%)&lt;BR/&gt; 42832: (0.0954198%)&gt;];
}
1052--1100[label="0.030303;1pkt 1fpkt"];
1052--2912[label="0.0524809;55pkt 55fpkt"];
1052--2919[label="0.0734733;77pkt 77fpkt"];
1052--2925[label="0.0524809;55pkt 55fpkt"];
1052--2931[label="0.0734733;77pkt 77fpkt"];
1052--2933[label="0.0524809;55pkt 55fpkt"];
1052--2935[label="0.0734733;77pkt 77fpkt"];
1052--3163[label="0.999046;1047pkt 1047fpkt"];
1052--4343[label="1;1048pkt 1048fpkt"];
</description>
    <slice>
      <filter src_ip="20.17.151.34" src_port="80"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
3170[label="213.183.32.36;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4346[label="213.183.32.36;255pkt 255fpkt", shape=invtriangle, color=brown];
4957[label="213.183.32.36;254pkt 254fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.183.32.36:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3170--4346[label="1;255pkt 255fpkt"];
3170--4957[label="1;254pkt 254fpkt"];
4346--4957[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.183.32.36" src_port="1030"/>
    </slice>
    <from sec="1109826180" usec="0"/>
    <to sec="1109826202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
3183[label="20.77.111.38;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4354[label="20.77.111.38;4pkt 4fpkt", shape=invtriangle, color=brown];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.77.111.38:1064, 144.194.4.125:1434}[25%]&lt;BR/&gt;{20.77.111.38:1064, 144.134.9.158:1434}[25%]&lt;BR/&gt;{20.77.111.38:1064, 144.39.184.177:1434}[25%]&lt;BR/&gt;{20.77.111.38:1064, 175.150.228.200:1434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1064: (50%)&gt;];
}
3183--4354[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.228.200" dst_port="1434" src_ip="20.77.111.38" src_port="1064"/>
      <filter dst_ip="144.39.184.177" dst_port="1434" src_ip="20.77.111.38" src_port="1064"/>
      <filter dst_ip="144.134.9.158" dst_port="1434" src_ip="20.77.111.38" src_port="1064"/>
      <filter dst_ip="144.194.4.125" dst_port="1434" src_ip="20.77.111.38" src_port="1064"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
3186[label="144.39.26.39;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4356[label="144.39.26.39;57pkt 57fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.26.39:80, 84.188.35.127:*}[40.3509%]&lt;BR/&gt;{144.39.26.39:80, 149.3.245.221:*}[38.5965%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56810: (0.884956%)&lt;BR/&gt; 33874: (0.884956%)&lt;BR/&gt; 9668: (0.884956%)&lt;BR/&gt; 9666: (0.884956%)&gt;];
}
3186--4356[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="84.188.35.127" src_ip="144.39.26.39" src_port="80"/>
      <filter dst_ip="149.3.245.221" src_ip="144.39.26.39" src_port="80"/>
    </slice>
    <from sec="1109826214" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.177.42.40"/>
    </slice>
    <from sec="1109826056" usec="0"/>
    <to sec="1109826445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.94.99.40"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.48.25.43"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
3218[label="73.241.187.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4375[label="73.241.187.43;1pkt 1fpkt", shape=invtriangle, color=brown];
4964[label="73.241.187.43;2pkt 2fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.187.43:53359, 169.28.202.112:80}[50%]&lt;BR/&gt;{73.241.187.43:47843, 169.28.163.184:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47843: (37.5%)&lt;BR/&gt; 53359: (12.5%)&gt;];
}
3218--4375[label="1;1pkt 1fpkt"];
3218--4964[label="1;1pkt 1fpkt"];
4375--4964[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.163.184" dst_port="80" src_ip="73.241.187.43" src_port="47843"/>
      <filter dst_ip="169.28.202.112" dst_port="80" src_ip="73.241.187.43" src_port="53359"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.220.148.44"/>
    </slice>
    <from sec="1109826052" usec="0"/>
    <to sec="1109826089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
3226[label="175.150.168.45;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4379[label="175.150.168.45;5pkt 5fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.168.45:80, 73.196.61.45:42568}[20%]&lt;BR/&gt;{175.150.168.45:80, 76.1.164.0:60317}[20%]&lt;BR/&gt;{175.150.168.45:80, 76.1.164.0:60405}[20%]&lt;BR/&gt;{175.150.168.45:80, 76.1.164.0:60459}[20%]&lt;BR/&gt;{175.150.168.45:80, 76.1.164.0:60543}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60543: (10%)&lt;BR/&gt; 60459: (10%)&lt;BR/&gt; 60405: (10%)&lt;BR/&gt; 60317: (10%)&gt;];
}
3226--4379[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="76.1.164.0" dst_port="60543" src_ip="175.150.168.45" src_port="80"/>
      <filter dst_ip="76.1.164.0" dst_port="60459" src_ip="175.150.168.45" src_port="80"/>
      <filter dst_ip="76.1.164.0" dst_port="60405" src_ip="175.150.168.45" src_port="80"/>
      <filter dst_ip="76.1.164.0" dst_port="60317" src_ip="175.150.168.45" src_port="80"/>
      <filter dst_ip="73.196.61.45" dst_port="42568" src_ip="175.150.168.45" src_port="80"/>
    </slice>
    <from sec="1109826688" usec="0"/>
    <to sec="1109826812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
3228[label="194.180.220.45;127pkt 127fpkt", shape=pentagon, color=darkviolet];
4380[label="194.180.220.45;128pkt 128fpkt", shape=invtriangle, color=brown];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.180.220.45:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3228--4380[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.180.220.45" src_port="1026"/>
    </slice>
    <from sec="1109826887" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.166.197.46"/>
    </slice>
    <from sec="1109826500" usec="0"/>
    <to sec="1109826847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
3240[label="169.28.153.48;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4387[label="169.28.153.48;25pkt 25fpkt", shape=invtriangle, color=brown];
4968[label="169.28.153.48;24pkt 24fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.153.48:*, 73.209.221.66:80}[64%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.8356%)&lt;BR/&gt; 63069: (2.05479%)&lt;BR/&gt; 31241: (2.05479%)&lt;BR/&gt; 10644: (2.05479%)&lt;BR/&gt; 4650: (2.05479%)&gt;];
}
3240--4387[label="1;24pkt 24fpkt"];
3240--4968[label="1;24pkt 24fpkt"];
4387--4968[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="73.209.221.66" dst_port="80" src_ip="169.28.153.48"/>
    </slice>
    <from sec="1109826010" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
3246[label="144.224.53.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4388[label="144.224.53.50;4pkt 4fpkt", shape=invtriangle, color=brown];
4969[label="144.224.53.50;4pkt 4fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.53.50:0, 219.192.254.91:0}[25%]&lt;BR/&gt;{144.224.53.50:0, 87.149.120.113:0}[25%]&lt;BR/&gt;{144.224.53.50:0, 205.171.107.127:0}[25%]&lt;BR/&gt;{144.224.53.50:0, 41.31.32.255:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3246--4388[label="1;4pkt 4fpkt"];
3246--4969[label="1;4pkt 4fpkt"];
4388--4969[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="41.31.32.255" src_ip="144.224.53.50"/>
      <filter dst_ip="205.171.107.127" src_ip="144.224.53.50"/>
      <filter dst_ip="87.149.120.113" src_ip="144.224.53.50"/>
      <filter dst_ip="219.192.254.91" src_ip="144.224.53.50"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.230.163.50"/>
    </slice>
    <from sec="1109826418" usec="0"/>
    <to sec="1109826534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
3250[label="148.177.170.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4390[label="148.177.170.50;1pkt 1fpkt", shape=invtriangle, color=brown];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.170.50:80, 209.64.179.112:51371}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51371: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3250--4390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.64.179.112" dst_port="51371" src_ip="148.177.170.50" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
3252[label="148.177.217.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4392[label="148.177.217.50;4pkt 4fpkt", shape=invtriangle, color=brown];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.217.50:80, 209.64.179.112:52113}[25%]&lt;BR/&gt;{148.177.217.50:80, 209.64.179.112:52122}[25%]&lt;BR/&gt;{148.177.217.50:80, 209.64.179.112:52143}[25%]&lt;BR/&gt;{148.177.217.50:80, 209.64.179.112:53145}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53145: (12.5%)&lt;BR/&gt; 52143: (12.5%)&lt;BR/&gt; 52122: (12.5%)&lt;BR/&gt; 52113: (12.5%)&gt;];
}
3252--4392[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.64.179.112" dst_port="53145" src_ip="148.177.217.50" src_port="80"/>
      <filter dst_ip="209.64.179.112" dst_port="52143" src_ip="148.177.217.50" src_port="80"/>
      <filter dst_ip="209.64.179.112" dst_port="52122" src_ip="148.177.217.50" src_port="80"/>
      <filter dst_ip="209.64.179.112" dst_port="52113" src_ip="148.177.217.50" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
3253[label="195.120.31.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4393[label="195.120.31.51;1pkt 1fpkt", shape=invtriangle, color=brown];
4971[label="195.120.31.51;1pkt 1fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.120.31.51:4150, 195.81.97.129:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4150: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
3253--4393[label="1;1pkt 1fpkt"];
3253--4971[label="1;1pkt 1fpkt"];
4393--4971[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.97.129" dst_port="445" src_ip="195.120.31.51" src_port="4150"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.66.103.51"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.23.174.51"/>
    </slice>
    <from sec="1109826268" usec="0"/>
    <to sec="1109826590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
3263[label="197.84.2.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4401[label="197.84.2.52;1pkt 1fpkt", shape=invtriangle, color=brown];
4975[label="197.84.2.52;2pkt 2fpkt", shape=invhouse, color=bisque];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.84.2.52:38909, 175.150.44.53:80}[50%]&lt;BR/&gt;{197.84.2.52:40942, 175.150.44.53:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40942: (37.5%)&lt;BR/&gt; 38909: (12.5%)&gt;];
}
3263--4401[label="1;1pkt 1fpkt"];
3263--4975[label="1;1pkt 1fpkt"];
4401--4975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.44.53" dst_port="80" src_ip="197.84.2.52" src_port="40942"/>
      <filter dst_ip="175.150.44.53" dst_port="80" src_ip="197.84.2.52" src_port="38909"/>
    </slice>
    <from sec="1109826564" usec="0"/>
    <to sec="1109826808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.113.49.52"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.28.157.54"/>
    </slice>
    <from sec="1109826451" usec="0"/>
    <to sec="1109826800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
3295[label="220.56.205.56;161pkt 161fpkt", shape=pentagon, color=darkviolet];
4418[label="220.56.205.56;161pkt 161fpkt", shape=invtriangle, color=brown];
4983[label="220.56.205.56;161pkt 161fpkt", shape=invhouse, color=bisque];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.56.205.56:1089, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1089: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3295--4418[label="1;161pkt 161fpkt"];
3295--4983[label="1;161pkt 161fpkt"];
4418--4983[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.56.205.56" src_port="1089"/>
    </slice>
    <from sec="1109826164" usec="0"/>
    <to sec="1109826189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
3296[label="148.177.208.56;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4419[label="148.177.208.56;2pkt 2fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.208.56:12524, 165.240.35.60:80}[50%]&lt;BR/&gt;{148.177.208.56:12526, 165.240.35.60:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 12526: (25%)&lt;BR/&gt; 12524: (25%)&gt;];
}
3296--4419[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.240.35.60" dst_port="80" src_ip="148.177.208.56" src_port="12526"/>
      <filter dst_ip="165.240.35.60" dst_port="80" src_ip="148.177.208.56" src_port="12524"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.108.201.57"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.161.109.59"/>
    </slice>
    <from sec="1109826132" usec="0"/>
    <to sec="1109826176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
1898[label="76.112.165.60;s;15pkt 15fpkt", shape=diamond, color=yellow];
3323[label="76.112.165.60;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4435[label="76.112.165.60;15pkt 15fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.112.165.60:80, 130.54.26.141:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4257: (3.40909%)&lt;BR/&gt; 4256: (3.40909%)&lt;BR/&gt; 4239: (3.40909%)&lt;BR/&gt; 3974: (3.40909%)&gt;];
}
1898--2416[label="0.8;12pkt 12fpkt"];
1898--3323[label="1;14pkt 14fpkt"];
1898--4435[label="1;15pkt 15fpkt"];
1898--4988[label="1;15pkt 15fpkt"];
3323--4435[label="1;14pkt 14fpkt"];
3323--4988[label="1;14pkt 14fpkt"];
4435--4988[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.141" src_ip="76.112.165.60" src_port="80"/>
    </slice>
    <from sec="1109826553" usec="0"/>
    <to sec="1109826804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
3329[label="208.80.218.61;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4440[label="208.80.218.61;7pkt 7fpkt", shape=invtriangle, color=brown];
4991[label="208.80.218.61;6pkt 6fpkt", shape=invhouse, color=bisque];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.80.218.61:*, 148.177.224.65:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2251: (7.5%)&lt;BR/&gt; 2250: (7.5%)&lt;BR/&gt; 2249: (7.5%)&lt;BR/&gt; 2248: (7.5%)&gt;];
}
3329--4440[label="1;7pkt 7fpkt"];
3329--4991[label="1;6pkt 6fpkt"];
4440--4991[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.224.65" dst_port="25" src_ip="208.80.218.61"/>
    </slice>
    <from sec="1109826806" usec="0"/>
    <to sec="1109826831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.46.166.62"/>
    </slice>
    <from sec="1109826344" usec="0"/>
    <to sec="1109826526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
2077[label="169.68.184.63;s;101pkt 101fpkt", shape=diamond, color=yellow];
3339[label="169.68.184.63;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4446[label="169.68.184.63;106pkt 106fpkt", shape=invtriangle, color=brown];
4994[label="169.68.184.63;106pkt 106fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.68.184.63:53, *:*}[57.0093%]&lt;BR/&gt;{169.68.184.63:1024, *:53}[26.1682%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.7857%)&lt;BR/&gt; 1024: (13.2143%)&lt;BR/&gt; 25: (3.21429%)&lt;BR/&gt; 113: (2.7381%)&lt;BR/&gt; 32768: (2.14286%)&gt;];
}
2077--2906[label="0.039604;4pkt 4fpkt"];
2077--2911[label="0.039604;4pkt 4fpkt"];
2077--2918[label="0.0693069;7pkt 7fpkt"];
2077--2924[label="0.039604;4pkt 4fpkt"];
2077--2930[label="0.0693069;7pkt 7fpkt"];
2077--2932[label="0.039604;4pkt 4fpkt"];
2077--2934[label="0.0693069;7pkt 7fpkt"];
2077--3339[label="1;101pkt 101fpkt"];
2077--4446[label="0.990099;100pkt 100fpkt"];
2077--4994[label="0.990099;100pkt 100fpkt"];
3339--4446[label="1;106pkt 106fpkt"];
3339--4994[label="1;106pkt 106fpkt"];
4446--4994[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="169.68.184.63" src_port="53"/>
      <filter dst_port="53" src_ip="169.68.184.63" src_port="1024"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
3342[label="165.56.244.63;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4448[label="165.56.244.63;5pkt 5fpkt", shape=invtriangle, color=brown];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.56.244.63:0, 194.64.148.113:0}[20%]&lt;BR/&gt;{165.56.244.63:4768, 194.64.148.113:80}[20%]&lt;BR/&gt;{165.56.244.63:5664, 194.64.148.113:80}[20%]&lt;BR/&gt;{165.56.244.63:7847, 194.64.148.113:80}[20%]&lt;BR/&gt;{165.56.244.63:9962, 194.64.148.113:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 0: (22.2222%)&lt;BR/&gt; 9962: (11.1111%)&lt;BR/&gt; 7847: (11.1111%)&lt;BR/&gt; 5664: (11.1111%)&gt;];
}
3342--4448[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.148.113" dst_port="80" src_ip="165.56.244.63" src_port="9962"/>
      <filter dst_ip="194.64.148.113" dst_port="80" src_ip="165.56.244.63" src_port="7847"/>
      <filter dst_ip="194.64.148.113" dst_port="80" src_ip="165.56.244.63" src_port="5664"/>
      <filter dst_ip="194.64.148.113" dst_port="80" src_ip="165.56.244.63" src_port="4768"/>
      <filter dst_ip="194.64.148.113" src_ip="165.56.244.63"/>
    </slice>
    <from sec="1109826381" usec="0"/>
    <to sec="1109826454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.891556,1.6058,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
11[label="210.234.53.68s;3pkt 3fpkt", shape=rectangle, color=red];
649[label="210.234.53.68;s;5pkt 5fpkt", shape=diamond, color=yellow];
1716[label="148.177.203.136;s;90pkt 90fpkt", shape=diamond, color=yellow];
1726[label="204.51.237.184;d;33pkt 33fpkt", shape=diamond, color=yellow];
1999[label="148.176.144.140;s;108pkt 108fpkt", shape=diamond, color=yellow];
2177[label="76.2.239.186;d;19pkt 19fpkt", shape=diamond, color=yellow];
3364[label="210.234.53.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4460[label="210.234.53.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.203.136:*, *:80}[43.3498%]&lt;BR/&gt;{148.176.144.140:*, *:80}[24.6305%]&lt;BR/&gt;{148.176.144.140:*, *:53}[22.6601%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.7308%)&lt;BR/&gt; 53: (8.84615%)&lt;BR/&gt; 38252: (6.92308%)&lt;BR/&gt; 0: (4.23077%)&lt;BR/&gt; 41399: (1.92308%)&gt;];
}
11--388[label="0.333333;1pkt 1fpkt"];
11--649[label="0.333333;1pkt 1fpkt"];
11--1716[label="0.333333;1pkt 1fpkt"];
11--1726[label="0.333333;1pkt 1fpkt"];
11--1999[label="0.333333;1pkt 1fpkt"];
11--2177[label="0.333333;1pkt 1fpkt"];
11--2262[label="0.333333;1pkt 1fpkt"];
11--2852[label="0.333333;1pkt 1fpkt"];
11--3364[label="1;1pkt 1fpkt"];
11--4460[label="1;1pkt 1fpkt"];
649--2262[label="1;5pkt 5fpkt"];
649--2852[label="1;5pkt 5fpkt"];
649--3364[label="1;1pkt 1fpkt"];
649--4460[label="1;1pkt 1fpkt"];
1716--1726[label="1;33pkt 33fpkt"];
1999--2090[label="0.0113636;1pkt 1fpkt"];
1999--2105[label="0.0117647;1pkt 1fpkt"];
1999--2108[label="0.0138889;1pkt 1fpkt"];
1999--2120[label="0.0363636;2pkt 2fpkt"];
1999--2139[label="0.0128205;1pkt 1fpkt"];
1999--2177[label="1;19pkt 19fpkt"];
1999--2560[label="0.136364;3pkt 3fpkt"];
1999--2780[label="0.0111111;1pkt 1fpkt"];
1999--2826[label="0.0185185;2pkt 2fpkt"];
3364--4460[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.176.144.140"/>
      <filter dst_port="53" src_ip="148.176.144.140"/>
      <filter dst_port="80" src_ip="148.177.203.136"/>
    </slice>
    <from sec="1109826011" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.7.168.69"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
3385[label="209.64.179.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4466[label="209.64.179.71;2pkt 2fpkt", shape=invtriangle, color=brown];
5001[label="209.64.179.71;1pkt 1fpkt", shape=invhouse, color=bisque];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.64.179.71:49611, 148.177.136.21:80}[50%]&lt;BR/&gt;{209.64.179.71:45365, 148.177.217.52:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45365: (30%)&lt;BR/&gt; 49611: (20%)&gt;];
}
3385--4466[label="1;2pkt 2fpkt"];
3385--5001[label="1;1pkt 1fpkt"];
4466--5001[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.217.52" dst_port="80" src_ip="209.64.179.71" src_port="45365"/>
      <filter dst_ip="148.177.136.21" dst_port="80" src_ip="209.64.179.71" src_port="49611"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.106.183.71"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.112.40.72"/>
    </slice>
    <from sec="1109826346" usec="0"/>
    <to sec="1109826606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
436[label="194.64.104.72;s;45pkt 45fpkt", shape=diamond, color=yellow];
802[label="197.11.213.172;d;207pkt 207fpkt", shape=diamond, color=yellow];
1343[label="75.188.202.165;d;9pkt 9fpkt", shape=diamond, color=yellow];
1833[label="148.177.70.208;s;69pkt 69fpkt", shape=diamond, color=yellow];
1883[label="148.176.232.173;s;54pkt 54fpkt", shape=diamond, color=yellow];
2215[label="144.39.194.144;s;30pkt 30fpkt", shape=diamond, color=yellow];
3204[label="148.176.234.41;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3206[label="169.28.27.42;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3239[label="144.39.130.48;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3392[label="194.64.104.72;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3489[label="148.177.203.96;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3579[label="194.64.112.112;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3737[label="144.39.194.144;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3817[label="148.177.203.160;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3871[label="195.81.119.170;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3981[label="148.177.244.196;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4036[label="148.177.70.208;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4071[label="148.177.244.215;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4096[label="148.177.58.221;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4366[label="148.176.234.41;28pkt 28fpkt", shape=invtriangle, color=brown];
4368[label="169.28.27.42;21pkt 21fpkt", shape=invtriangle, color=brown];
4471[label="194.64.104.72;45pkt 45fpkt", shape=invtriangle, color=brown];
4733[label="195.81.119.170;9pkt 9fpkt", shape=invtriangle, color=brown];
4785[label="148.177.244.196;73pkt 73fpkt", shape=invtriangle, color=brown];
4809[label="148.177.70.208;69pkt 69fpkt", shape=invtriangle, color=brown];
4835[label="148.177.58.221;21pkt 21fpkt", shape=invtriangle, color=brown];
5140[label="194.64.99.193;42pkt 42fpkt", shape=invhouse, color=bisque];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.11.213.172:80}[28.6694%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.7179%)&lt;BR/&gt; 13466: (2.82051%)&lt;BR/&gt; 1863: (2.09402%)&lt;BR/&gt; 7001: (1.45299%)&lt;BR/&gt; 443: (1.36752%)&gt;];
}
436--737[label="0.0888889;4pkt 4fpkt"];
436--802[label="0.0888889;4pkt 4fpkt"];
436--1269[label="0.333333;15pkt 15fpkt"];
436--2826[label="0.0888889;4pkt 4fpkt"];
436--2890[label="0.688889;31pkt 31fpkt"];
436--3392[label="1;45pkt 45fpkt"];
436--4471[label="1;45pkt 45fpkt"];
802--844[label="0.0148148;2pkt 2fpkt"];
802--848[label="0.00483092;1pkt 1fpkt"];
802--904[label="0.0222222;2pkt 2fpkt"];
802--1025[label="0.00966184;2pkt 2fpkt"];
802--1050[label="0.012987;2pkt 2fpkt"];
802--1084[label="0.0273973;2pkt 2fpkt"];
802--1325[label="0.0193237;4pkt 4fpkt"];
802--1351[label="0.016129;2pkt 2fpkt"];
802--1362[label="0.0480769;5pkt 5fpkt"];
802--1501[label="0.00966184;2pkt 2fpkt"];
802--1514[label="0.0384615;2pkt 2fpkt"];
802--1578[label="0.0344828;1pkt 1fpkt"];
802--1645[label="0.0567376;8pkt 8fpkt"];
802--1677[label="0.0222222;1pkt 1fpkt"];
802--1690[label="0.0510204;5pkt 5fpkt"];
802--1833[label="0.0434783;3pkt 3fpkt"];
802--1873[label="0.04;1pkt 1fpkt"];
802--1883[label="0.037037;2pkt 2fpkt"];
802--1947[label="0.0338983;2pkt 2fpkt"];
802--1964[label="0.0105263;1pkt 1fpkt"];
802--1997[label="0.013245;2pkt 2fpkt"];
802--1999[label="0.0185185;2pkt 2fpkt"];
802--2035[label="0.0540541;4pkt 4fpkt"];
802--2215[label="0.1;3pkt 3fpkt"];
802--2261[label="0.00483092;1pkt 1fpkt"];
802--2307[label="0.00483092;1pkt 1fpkt"];
802--2312[label="0.00966184;2pkt 2fpkt"];
802--2323[label="0.00483092;1pkt 1fpkt"];
802--2333[label="0.0251256;5pkt 5fpkt"];
802--2348[label="0.0222222;2pkt 2fpkt"];
802--2504[label="0.00966184;2pkt 2fpkt"];
802--2522[label="0.00492611;1pkt 1fpkt"];
802--2620[label="0.00966184;2pkt 2fpkt"];
802--2685[label="0.0392157;2pkt 2fpkt"];
802--2716[label="0.0344828;1pkt 1fpkt"];
802--2720[label="0.144928;30pkt 30fpkt"];
802--2727[label="0.00966184;2pkt 2fpkt"];
802--2735[label="0.00966184;2pkt 2fpkt"];
802--2751[label="0.0510204;5pkt 5fpkt"];
802--2864[label="0.00483092;1pkt 1fpkt"];
802--2890[label="0.0821256;17pkt 17fpkt"];
802--2973[label="0.178571;5pkt 5fpkt"];
802--3185[label="0.153846;6pkt 6fpkt"];
802--3204[label="0.0714286;2pkt 2fpkt"];
802--3206[label="0.1;2pkt 2fpkt"];
802--3227[label="0.00966184;2pkt 2fpkt"];
802--3234[label="0.00483092;1pkt 1fpkt"];
802--3238[label="0.0344828;2pkt 2fpkt"];
802--3239[label="0.125;1pkt 1fpkt"];
802--3363[label="0.0471698;5pkt 5fpkt"];
802--3378[label="0.00966184;2pkt 2fpkt"];
802--3392[label="0.0888889;4pkt 4fpkt"];
802--3437[label="0.057554;8pkt 8fpkt"];
802--3444[label="0.0377358;2pkt 2fpkt"];
802--3460[label="0.016129;2pkt 2fpkt"];
802--3489[label="0.075;3pkt 3fpkt"];
802--3497[label="0.0416667;1pkt 1fpkt"];
802--3504[label="0.00966184;2pkt 2fpkt"];
802--3561[label="0.0204082;2pkt 2fpkt"];
802--3579[label="0.0625;1pkt 1fpkt"];
802--3635[label="0.0119048;1pkt 1fpkt"];
802--3678[label="0.00483092;1pkt 1fpkt"];
802--3737[label="0.075;3pkt 3fpkt"];
802--3817[label="0.2;1pkt 1fpkt"];
802--3871[label="0.111111;1pkt 1fpkt"];
802--3971[label="0.0118343;2pkt 2fpkt"];
802--3981[label="0.0273973;2pkt 2fpkt"];
802--4036[label="0.0434783;3pkt 3fpkt"];
802--4071[label="0.0547945;4pkt 4fpkt"];
802--4096[label="0.0454545;1pkt 1fpkt"];
802--4355[label="0.153846;6pkt 6fpkt"];
802--4366[label="0.0714286;2pkt 2fpkt"];
802--4368[label="0.0952381;2pkt 2fpkt"];
802--4383[label="0.00483092;1pkt 1fpkt"];
802--4386[label="0.0338983;2pkt 2fpkt"];
802--4459[label="0.046729;5pkt 5fpkt"];
802--4464[label="0.00966184;2pkt 2fpkt"];
802--4471[label="0.0888889;4pkt 4fpkt"];
802--4502[label="0.0377358;2pkt 2fpkt"];
802--4564[label="0.0204082;2pkt 2fpkt"];
802--4603[label="0.0119048;1pkt 1fpkt"];
802--4625[label="0.00483092;1pkt 1fpkt"];
802--4733[label="0.111111;1pkt 1fpkt"];
802--4781[label="0.0118343;2pkt 2fpkt"];
802--4785[label="0.0273973;2pkt 2fpkt"];
802--4809[label="0.0434783;3pkt 3fpkt"];
802--4835[label="0.047619;1pkt 1fpkt"];
802--4966[label="0.00483092;1pkt 1fpkt"];
802--4999[label="0.00966184;2pkt 2fpkt"];
802--5016[label="0.037037;2pkt 2fpkt"];
802--5047[label="0.0204082;2pkt 2fpkt"];
802--5066[label="0.0119048;1pkt 1fpkt"];
802--5140[label="0.0238095;1pkt 1fpkt"];
1343--1382[label="0.222222;2pkt 2fpkt"];
1343--1833[label="0.111111;1pkt 1fpkt"];
1343--2504[label="0.111111;1pkt 1fpkt"];
1343--2582[label="0.222222;2pkt 2fpkt"];
1343--2890[label="0.111111;1pkt 1fpkt"];
1343--3185[label="0.111111;1pkt 1fpkt"];
1343--3450[label="0.222222;2pkt 2fpkt"];
1343--3646[label="0.222222;2pkt 2fpkt"];
1343--3871[label="0.111111;1pkt 1fpkt"];
1343--4036[label="0.111111;1pkt 1fpkt"];
1343--4355[label="0.111111;1pkt 1fpkt"];
1343--4505[label="0.222222;2pkt 2fpkt"];
1343--4733[label="0.111111;1pkt 1fpkt"];
1343--4809[label="0.111111;1pkt 1fpkt"];
1343--5019[label="0.222222;2pkt 2fpkt"];
1833--2110[label="0.0289855;2pkt 2fpkt"];
1833--2118[label="0.0147059;1pkt 1fpkt"];
1833--2120[label="0.0181818;1pkt 1fpkt"];
1833--2560[label="0.0454545;1pkt 1fpkt"];
1833--4036[label="0.985507;68pkt 68fpkt"];
1833--4809[label="0.985507;68pkt 68fpkt"];
1883--1940[label="0.037037;2pkt 2fpkt"];
1883--2780[label="0.037037;2pkt 2fpkt"];
2215--2780[label="0.0333333;1pkt 1fpkt"];
2215--3737[label="1;30pkt 30fpkt"];
3204--4366[label="1;28pkt 28fpkt"];
3206--4368[label="1;20pkt 20fpkt"];
3392--4471[label="1;45pkt 45fpkt"];
3871--4733[label="1;9pkt 9fpkt"];
3981--4785[label="1;73pkt 73fpkt"];
4036--4809[label="1;69pkt 69fpkt"];
4096--4835[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="197.11.213.172" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
3396[label="144.39.238.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4473[label="144.39.238.72;2pkt 2fpkt", shape=invtriangle, color=brown];
5005[label="144.39.238.72;2pkt 2fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.238.72:80, 41.121.3.254:65356}[50%]&lt;BR/&gt;{144.39.238.72:80, 41.121.3.254:65357}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65357: (25%)&lt;BR/&gt; 65356: (25%)&gt;];
}
3396--4473[label="1;2pkt 2fpkt"];
3396--5005[label="1;2pkt 2fpkt"];
4473--5005[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.121.3.254" dst_port="65357" src_ip="144.39.238.72" src_port="80"/>
      <filter dst_ip="41.121.3.254" dst_port="65356" src_ip="144.39.238.72" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
3404[label="196.70.37.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4477[label="196.70.37.75;2pkt 2fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.70.37.75:28015, 175.150.229.69:25}[50%]&lt;BR/&gt;{196.70.37.75:28024, 175.150.229.69:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 28024: (25%)&lt;BR/&gt; 28015: (25%)&gt;];
}
3404--4477[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.229.69" dst_port="25" src_ip="196.70.37.75" src_port="28024"/>
      <filter dst_ip="175.150.229.69" dst_port="25" src_ip="196.70.37.75" src_port="28015"/>
    </slice>
    <from sec="1109826862" usec="0"/>
    <to sec="1109826887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
1626[label="214.182.130.223;d;115pkt 115fpkt", shape=diamond, color=yellow];
1799[label="148.176.36.76;s;26pkt 26fpkt", shape=diamond, color=yellow];
1962[label="193.218.110.225;d;2pkt 2fpkt", shape=diamond, color=yellow];
2788[label="193.218.110.225;d;2pkt 2fpkt", shape=hexagon, color=black];
3043[label="175.150.200.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3406[label="148.176.36.76;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4479[label="148.176.36.76;2pkt 2fpkt", shape=invtriangle, color=brown];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.182.130.223:5050}[72.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34.3137%)&lt;BR/&gt; 80: (9.15033%)&lt;BR/&gt; 33224: (1.63399%)&lt;BR/&gt; 32886: (1.63399%)&lt;BR/&gt; 23: (1.63399%)&gt;];
}
1626--1799[label="0.0384615;1pkt 1fpkt"];
1626--2276[label="0.1;1pkt 1fpkt"];
1626--2540[label="0.00943396;1pkt 1fpkt"];
1626--3043[label="1;3pkt 3fpkt"];
1626--3406[label="0.333333;1pkt 1fpkt"];
1626--3770[label="0.4;4pkt 4fpkt"];
1626--4001[label="0.0243902;1pkt 1fpkt"];
1799--1962[label="1;2pkt 2fpkt"];
1799--2788[label="1;2pkt 2fpkt"];
1799--2890[label="0.0769231;2pkt 2fpkt"];
1799--3406[label="1;3pkt 3fpkt"];
1799--4479[label="1;2pkt 2fpkt"];
1962--2788[label="1;2pkt 2fpkt"];
1962--2890[label="1;2pkt 2fpkt"];
1962--3406[label="1;2pkt 2fpkt"];
1962--4479[label="1;2pkt 2fpkt"];
2788--2890[label="1;2pkt 2fpkt"];
2788--3406[label="1;2pkt 2fpkt"];
2788--4479[label="1;2pkt 2fpkt"];
3406--4479[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.182.130.223" dst_port="5050"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.90.149.76"/>
    </slice>
    <from sec="1109826492" usec="0"/>
    <to sec="1109826568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.22.74.80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
3426[label="195.81.112.82;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4490[label="195.81.112.82;2pkt 2fpkt", shape=invtriangle, color=brown];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.112.82:0, 220.216.48.176:0}[50%]&lt;BR/&gt;{195.81.112.82:0, 76.174.144.209:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3426--4490[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.174.144.209" src_ip="195.81.112.82"/>
      <filter dst_ip="220.216.48.176" src_ip="195.81.112.82"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
2126[label="197.84.12.170;d;81pkt 81fpkt", shape=diamond, color=yellow];
3429[label="144.39.253.83;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3677[label="169.28.80.132;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4492[label="144.39.253.83;8pkt 8fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.80.132:*, 197.84.12.170:80}[47.3118%]&lt;BR/&gt;{194.76.176.80:*, 197.84.12.170:80}[41.9355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.831%)&lt;BR/&gt; 3544: (2.8169%)&lt;BR/&gt; 1327: (1.40845%)&lt;BR/&gt; 1222: (1.40845%)&lt;BR/&gt; 1051: (1.05634%)&gt;];
}
2126--2261[label="0.0123457;1pkt 1fpkt"];
2126--2307[label="0.222222;18pkt 18fpkt"];
2126--2864[label="0.123457;10pkt 10fpkt"];
2126--2890[label="0.0740741;6pkt 6fpkt"];
2126--3429[label="0.125;1pkt 1fpkt"];
2126--3504[label="0.0123457;1pkt 1fpkt"];
2126--3677[label="0.888889;40pkt 40fpkt"];
2126--4492[label="0.125;1pkt 1fpkt"];
3429--4492[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.12.170" dst_port="80" src_ip="169.28.80.132"/>
      <filter dst_ip="197.84.12.170" dst_port="80" src_ip="194.76.176.80"/>
    </slice>
    <from sec="1109826004" usec="0"/>
    <to sec="1109826892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.117.64.85"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
1732[label="74.121.81.87;s;7pkt 7fpkt", shape=diamond, color=yellow];
1733[label="169.28.17.178;d;7pkt 7fpkt", shape=diamond, color=yellow];
3438[label="74.121.81.87;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4498[label="74.121.81.87;6pkt 6fpkt", shape=invtriangle, color=brown];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.121.81.87:80, 169.28.17.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4082: (7.69231%)&lt;BR/&gt; 4081: (7.69231%)&lt;BR/&gt; 4080: (7.69231%)&lt;BR/&gt; 4079: (7.69231%)&gt;];
}
1732--1733[label="1;7pkt 7fpkt"];
1732--3438[label="1;6pkt 6fpkt"];
1732--4498[label="1;6pkt 6fpkt"];
1733--3438[label="1;6pkt 6fpkt"];
1733--4498[label="1;6pkt 6fpkt"];
3438--4498[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.17.178" src_ip="74.121.81.87" src_port="80"/>
    </slice>
    <from sec="1109826462" usec="0"/>
    <to sec="1109826509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
3446[label="195.137.188.88;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4503[label="195.137.188.88;254pkt 254fpkt", shape=invtriangle, color=brown];
5017[label="195.137.188.88;254pkt 254fpkt", shape=invhouse, color=bisque];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.137.188.88:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3446--4503[label="1;254pkt 254fpkt"];
3446--5017[label="1;254pkt 254fpkt"];
4503--5017[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.137.188.88" src_port="1028"/>
    </slice>
    <from sec="1109826301" usec="0"/>
    <to sec="1109826315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.165.0.89"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
3465[label="169.28.4.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4514[label="169.28.4.92;2pkt 2fpkt", shape=invtriangle, color=brown];
5024[label="169.28.4.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.4.92:1224, 214.172.208.57:80}[50%]&lt;BR/&gt;{169.28.4.92:1225, 214.172.208.57:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1225: (25%)&lt;BR/&gt; 1224: (25%)&gt;];
}
3465--4514[label="1;2pkt 2fpkt"];
3465--5024[label="1;2pkt 2fpkt"];
4514--5024[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.172.208.57" dst_port="80" src_ip="169.28.4.92" src_port="1225"/>
      <filter dst_ip="214.172.208.57" dst_port="80" src_ip="169.28.4.92" src_port="1224"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
557[label="73.202.133.34;d;21pkt 21fpkt", shape=diamond, color=yellow];
558[label="194.64.107.92;s;22pkt 22fpkt", shape=diamond, color=yellow];
3468[label="194.64.107.92;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4515[label="194.64.107.92;21pkt 21fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.107.92:*, 73.202.133.34:80}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4312: (2.32558%)&lt;BR/&gt; 4311: (2.32558%)&lt;BR/&gt; 4310: (2.32558%)&lt;BR/&gt; 4309: (2.32558%)&gt;];
}
557--558[label="1;21pkt 21fpkt"];
557--2890[label="0.428571;9pkt 9fpkt"];
557--3468[label="1;21pkt 21fpkt"];
557--4515[label="1;21pkt 21fpkt"];
558--2118[label="0.0454545;1pkt 1fpkt"];
558--2890[label="0.454545;10pkt 10fpkt"];
558--3468[label="1;22pkt 22fpkt"];
558--4515[label="1;21pkt 21fpkt"];
3468--4515[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="73.202.133.34" dst_port="80" src_ip="194.64.107.92"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
3472[label="221.70.101.93;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4516[label="221.70.101.93;5pkt 5fpkt", shape=invtriangle, color=brown];
5025[label="221.70.101.93;4pkt 4fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.70.101.93:80, 144.39.26.107:33541}[20%]&lt;BR/&gt;{221.70.101.93:80, 144.39.26.107:33542}[20%]&lt;BR/&gt;{221.70.101.93:80, 144.39.26.107:33543}[20%]&lt;BR/&gt;{221.70.101.93:80, 144.39.26.107:33544}[20%]&lt;BR/&gt;{221.70.101.93:80, 144.39.26.107:33555}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33555: (11.5385%)&lt;BR/&gt; 33544: (11.5385%)&lt;BR/&gt; 33543: (11.5385%)&lt;BR/&gt; 33542: (11.5385%)&gt;];
}
3472--4516[label="1;4pkt 4fpkt"];
3472--5025[label="1;4pkt 4fpkt"];
4516--5025[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.39.26.107" dst_port="33555" src_ip="221.70.101.93" src_port="80"/>
      <filter dst_ip="144.39.26.107" dst_port="33544" src_ip="221.70.101.93" src_port="80"/>
      <filter dst_ip="144.39.26.107" dst_port="33543" src_ip="221.70.101.93" src_port="80"/>
      <filter dst_ip="144.39.26.107" dst_port="33542" src_ip="221.70.101.93" src_port="80"/>
      <filter dst_ip="144.39.26.107" dst_port="33541" src_ip="221.70.101.93" src_port="80"/>
    </slice>
    <from sec="1109826173" usec="0"/>
    <to sec="1109826379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.177.60.94"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
3483[label="175.150.45.96;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4525[label="175.150.45.96;38pkt 38fpkt", shape=invtriangle, color=brown];
5033[label="175.150.45.96;37pkt 37fpkt", shape=invhouse, color=bisque];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.45.96:*, *:6663}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6663: (50%)&lt;BR/&gt; 2475: (1.32743%)&lt;BR/&gt; 2474: (1.32743%)&lt;BR/&gt; 2473: (1.32743%)&lt;BR/&gt; 2472: (1.32743%)&gt;];
}
3483--4525[label="1;38pkt 38fpkt"];
3483--5033[label="1;37pkt 37fpkt"];
4525--5033[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="6663" src_ip="175.150.45.96"/>
    </slice>
    <from sec="1109826018" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.102.98.96"/>
    </slice>
    <from sec="1109826129" usec="0"/>
    <to sec="1109826368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
748[label="194.236.15.97;s;3854pkt 3854fpkt", shape=diamond, color=yellow];
2319[label="194.236.15.97;s;880pkt 880fpkt", shape=hexagon, color=black];
3491[label="194.236.15.97;4202pkt 4202fpkt", shape=pentagon, color=darkviolet];
4529[label="194.236.15.97;4202pkt 4202fpkt", shape=invtriangle, color=brown];
5035[label="194.236.15.97;4202pkt 4202fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.15.97:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42109: (0.0374856%)&lt;BR/&gt; 17902: (0.0374856%)&lt;BR/&gt; 44778: (0.0346021%)&lt;BR/&gt; 43257: (0.0346021%)&gt;];
}
748--2319[label="1;880pkt 880fpkt"];
748--2912[label="0.0614823;219pkt 219fpkt"];
748--2919[label="0.0557862;215pkt 215fpkt"];
748--2925[label="0.0614823;219pkt 219fpkt"];
748--2931[label="0.0557862;215pkt 215fpkt"];
748--2933[label="0.0614651;219pkt 219fpkt"];
748--2935[label="0.0557862;215pkt 215fpkt"];
748--3491[label="1;3854pkt 3854fpkt"];
748--4529[label="1;3854pkt 3854fpkt"];
748--5035[label="1;3854pkt 3854fpkt"];
2319--2912[label="0.248864;219pkt 219fpkt"];
2319--2925[label="0.248864;219pkt 219fpkt"];
2319--2933[label="0.248864;219pkt 219fpkt"];
2319--3491[label="1;880pkt 880fpkt"];
2319--4529[label="1;880pkt 880fpkt"];
2319--5035[label="1;880pkt 880fpkt"];
3491--4529[label="1;4202pkt 4202fpkt"];
3491--5035[label="1;4202pkt 4202fpkt"];
4529--5035[label="1;4202pkt 4202fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.15.97" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
3500[label="74.9.146.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4534[label="74.9.146.98;3pkt 3fpkt", shape=invtriangle, color=brown];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.9.146.98:25, 175.150.164.0:1237}[33.3333%]&lt;BR/&gt;{74.9.146.98:25, 175.150.164.0:1389}[33.3333%]&lt;BR/&gt;{74.9.146.98:25, 175.150.164.0:1390}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1390: (16.6667%)&lt;BR/&gt; 1389: (16.6667%)&lt;BR/&gt; 1237: (16.6667%)&gt;];
}
3500--4534[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.164.0" dst_port="1390" src_ip="74.9.146.98" src_port="25"/>
      <filter dst_ip="175.150.164.0" dst_port="1389" src_ip="74.9.146.98" src_port="25"/>
      <filter dst_ip="175.150.164.0" dst_port="1237" src_ip="74.9.146.98" src_port="25"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
1221[label="194.76.177.98;s;474pkt 474fpkt", shape=diamond, color=yellow];
3503[label="194.76.177.98;529pkt 529fpkt", shape=pentagon, color=darkviolet];
4535[label="194.76.177.98;529pkt 529fpkt", shape=invtriangle, color=brown];
5037[label="194.76.177.98;529pkt 529fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.76.177.98:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.6822%)&lt;BR/&gt; 32768: (2.18341%)&lt;BR/&gt; 32769: (0.946143%)&lt;BR/&gt; 33701: (0.776322%)&lt;BR/&gt; 1028: (0.776322%)&gt;];
}
1221--2906[label="0.0126582;6pkt 6fpkt"];
1221--2911[label="0.0780591;37pkt 37fpkt"];
1221--2918[label="0.149789;71pkt 71fpkt"];
1221--2924[label="0.0780591;37pkt 37fpkt"];
1221--2930[label="0.149789;71pkt 71fpkt"];
1221--2932[label="0.0780591;37pkt 37fpkt"];
1221--2934[label="0.149789;71pkt 71fpkt"];
1221--3503[label="1;474pkt 474fpkt"];
1221--4535[label="1;474pkt 474fpkt"];
1221--5037[label="1;474pkt 474fpkt"];
3503--4535[label="1;529pkt 529fpkt"];
3503--5037[label="1;529pkt 529fpkt"];
4535--5037[label="1;529pkt 529fpkt"];
</description>
    <slice>
      <filter src_ip="194.76.177.98" src_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="144.224.22.100"/>
    </slice>
    <from sec="1109826132" usec="0"/>
    <to sec="1109826210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
1669[label="197.84.152.7;d;25pkt 25fpkt", shape=diamond, color=yellow];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.84.152.7:443}[56%]&lt;BR/&gt;{*:*, 197.84.152.7:80}[44%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (28%)&lt;BR/&gt; 80: (22%)&lt;BR/&gt; 60304: (2%)&lt;BR/&gt; 60243: (2%)&lt;BR/&gt; 46445: (2%)&gt;];
}
1669--1856[label="0.181818;2pkt 2fpkt"];
1669--2197[label="0.04;1pkt 1fpkt"];
1669--2388[label="0.08;2pkt 2fpkt"];
1669--2582[label="0.04;1pkt 1fpkt"];
1669--2685[label="0.04;1pkt 1fpkt"];
1669--2692[label="1;15pkt 15fpkt"];
1669--2750[label="0.222222;2pkt 2fpkt"];
1669--2890[label="0.04;1pkt 1fpkt"];
1669--2959[label="0.04;1pkt 1fpkt"];
1669--3194[label="0.25;1pkt 1fpkt"];
1669--3444[label="0.04;1pkt 1fpkt"];
1669--3450[label="0.04;1pkt 1fpkt"];
1669--3460[label="0.08;2pkt 2fpkt"];
1669--3520[label="0.181818;2pkt 2fpkt"];
1669--4017[label="0.08;2pkt 2fpkt"];
1669--4361[label="0.25;1pkt 1fpkt"];
1669--4502[label="0.04;1pkt 1fpkt"];
1669--4505[label="0.04;1pkt 1fpkt"];
1669--4542[label="0.181818;2pkt 2fpkt"];
1669--4799[label="0.08;2pkt 2fpkt"];
1669--5016[label="0.04;1pkt 1fpkt"];
1669--5019[label="0.04;1pkt 1fpkt"];
1669--5040[label="0.2;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.152.7" dst_port="443"/>
      <filter dst_ip="197.84.152.7" dst_port="80"/>
    </slice>
    <from sec="1109826018" usec="0"/>
    <to sec="1109826722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779291,1.72077,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
1666[label="73.241.188.100;s;76pkt 76fpkt", shape=diamond, color=yellow];
2773[label="175.150.189.103;d;71pkt 71fpkt", shape=hexagon, color=black];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.188.100:*, *:80}[45.8904%]&lt;BR/&gt;{*:*, 175.150.189.103:80}[21.9178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.6735%)&lt;BR/&gt; 53: (15.6463%)&lt;BR/&gt; 59044: (9.52381%)&lt;BR/&gt; 33701: (2.04082%)&lt;BR/&gt; 34119: (0.680272%)&gt;];
}
1666--1929[label="0.0131579;1pkt 1fpkt"];
1666--2085[label="0.0131579;1pkt 1fpkt"];
1666--2092[label="0.0131579;1pkt 1fpkt"];
1666--2262[label="0.0263158;2pkt 2fpkt"];
1666--2304[label="0.0131579;1pkt 1fpkt"];
1666--2688[label="1;76pkt 76fpkt"];
1666--2773[label="0.0140845;1pkt 1fpkt"];
1666--2852[label="0.0263158;2pkt 2fpkt"];
1666--2890[label="0.0526316;4pkt 4fpkt"];
1666--2906[label="0.0131579;1pkt 1fpkt"];
1666--3521[label="1;76pkt 76fpkt"];
1666--4543[label="1;76pkt 76fpkt"];
2773--2911[label="0.056338;4pkt 4fpkt"];
2773--2918[label="0.084507;6pkt 6fpkt"];
2773--2924[label="0.056338;4pkt 4fpkt"];
2773--2930[label="0.084507;6pkt 6fpkt"];
2773--2932[label="0.056338;4pkt 4fpkt"];
2773--2934[label="0.084507;6pkt 6fpkt"];
2773--2965[label="0.0172414;1pkt 1fpkt"];
2773--3289[label="0.0294118;1pkt 1fpkt"];
2773--3312[label="0.025641;1pkt 1fpkt"];
2773--3521[label="0.0140845;1pkt 1fpkt"];
2773--3735[label="0.0588235;1pkt 1fpkt"];
2773--3801[label="0.0322581;1pkt 1fpkt"];
2773--3963[label="0.166667;1pkt 1fpkt"];
2773--4043[label="0.75;15pkt 15fpkt"];
2773--4239[label="0.0175439;1pkt 1fpkt"];
2773--4430[label="0.0263158;1pkt 1fpkt"];
2773--4543[label="0.0140845;1pkt 1fpkt"];
2773--4657[label="0.0588235;1pkt 1fpkt"];
2773--4697[label="0.03125;1pkt 1fpkt"];
2773--4909[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="73.241.188.100"/>
      <filter dst_ip="175.150.189.103" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
3532[label="73.58.122.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4549[label="73.58.122.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.58.122.102:80, 175.150.164.15:65152}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65152: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3532--4549[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.164.15" dst_port="65152" src_ip="73.58.122.102" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
3541[label="200.10.234.103;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4554[label="200.10.234.103;51pkt 51fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.10.234.103:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2065: (1.96078%)&lt;BR/&gt; 4937: (0.980392%)&lt;BR/&gt; 4876: (0.980392%)&lt;BR/&gt; 4847: (0.980392%)&gt;];
}
3541--4554[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.10.234.103"/>
    </slice>
    <from sec="1109826041" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
3544[label="148.177.48.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4556[label="148.177.48.104;2pkt 2fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.48.104:4806, 75.228.10.235:80}[50%]&lt;BR/&gt;{148.177.48.104:4807, 75.228.10.235:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4807: (25%)&lt;BR/&gt; 4806: (25%)&gt;];
}
3544--4556[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="75.228.10.235" dst_port="80" src_ip="148.177.48.104" src_port="4807"/>
      <filter dst_ip="75.228.10.235" dst_port="80" src_ip="148.177.48.104" src_port="4806"/>
    </slice>
    <from sec="1109826156" usec="0"/>
    <to sec="1109826758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
3552[label="213.101.30.106;461pkt 461fpkt", shape=pentagon, color=darkviolet];
4560[label="213.101.30.106;462pkt 462fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.30.106:*, *:1026}[51.7316%]&lt;BR/&gt;{213.101.30.106:*, *:1027}[48.0519%]&lt;BR/&gt;{213.101.30.106:44196, *:*}[30.5195%]&lt;BR/&gt;{213.101.30.106:47134, *:*}[30.303%]&lt;BR/&gt;{213.101.30.106:44471, *:*}[20.7792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.8938%)&lt;BR/&gt; 1027: (23.9978%)&lt;BR/&gt; 44196: (15.2221%)&lt;BR/&gt; 47134: (15.1679%)&lt;BR/&gt; 44471: (10.4009%)&gt;];
}
3552--4560[label="1;461pkt 461fpkt"];
</description>
    <slice>
      <filter src_ip="213.101.30.106" src_port="44196"/>
      <filter src_ip="213.101.30.106" src_port="47134"/>
      <filter src_ip="213.101.30.106" src_port="44471"/>
      <filter dst_port="1026" src_ip="213.101.30.106"/>
      <filter dst_port="1027" src_ip="213.101.30.106"/>
    </slice>
    <from sec="1109826088" usec="0"/>
    <to sec="1109826829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
3560[label="203.64.164.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4563[label="203.64.164.107;2pkt 2fpkt", shape=invtriangle, color=brown];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.64.164.107:53, 219.119.54.20:5353}[50%]&lt;BR/&gt;{203.64.164.107:53, 215.209.101.191:3115}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 5353: (25%)&lt;BR/&gt; 3115: (25%)&gt;];
}
3560--4563[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.209.101.191" dst_port="3115" src_ip="203.64.164.107" src_port="53"/>
      <filter dst_ip="219.119.54.20" dst_port="5353" src_ip="203.64.164.107" src_port="53"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
3568[label="144.224.75.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4567[label="144.224.75.110;1pkt 1fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.75.110:33134, 219.124.145.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33134: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3568--4567[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.124.145.98" dst_port="80" src_ip="144.224.75.110" src_port="33134"/>
    </slice>
    <from sec="1109826126" usec="0"/>
    <to sec="1109826306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
3569[label="208.84.131.110;136pkt 136fpkt", shape=pentagon, color=darkviolet];
4568[label="208.84.131.110;137pkt 137fpkt", shape=invtriangle, color=brown];
5049[label="208.84.131.110;137pkt 137fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.84.131.110:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3569--4568[label="1;136pkt 136fpkt"];
3569--5049[label="1;136pkt 136fpkt"];
4568--5049[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.84.131.110" src_port="1032"/>
    </slice>
    <from sec="1109826171" usec="0"/>
    <to sec="1109826202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.112.184.112"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
3586[label="209.52.25.113;78pkt 78fpkt", shape=pentagon, color=darkviolet];
4577[label="209.52.25.113;78pkt 78fpkt", shape=invtriangle, color=brown];
5053[label="209.52.25.113;78pkt 78fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.52.25.113:0, *:0}[88.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (88.4615%)&lt;BR/&gt; 80: (3.84615%)&lt;BR/&gt; 42: (1.92308%)&lt;BR/&gt; 63447: (0.641026%)&lt;BR/&gt; 63428: (0.641026%)&gt;];
}
3586--4577[label="1;78pkt 78fpkt"];
3586--5053[label="1;78pkt 78fpkt"];
4577--5053[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter src_ip="209.52.25.113"/>
    </slice>
    <from sec="1109826014" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
3594[label="208.99.192.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4581[label="208.99.192.114;1pkt 1fpkt", shape=invtriangle, color=brown];
5054[label="208.99.192.114;1pkt 1fpkt", shape=invhouse, color=bisque];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.99.192.114:23, 130.54.50.239:4376}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4376: (50%)&lt;BR/&gt; 23: (50%)&gt;];
}
3594--4581[label="1;1pkt 1fpkt"];
3594--5054[label="1;1pkt 1fpkt"];
4581--5054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.50.239" dst_port="4376" src_ip="208.99.192.114" src_port="23"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
3595[label="148.177.203.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4582[label="148.177.203.114;2pkt 2fpkt", shape=invtriangle, color=brown];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.203.114:1605, 194.230.166.244:80}[50%]&lt;BR/&gt;{148.177.203.114:1606, 194.230.166.244:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1606: (25%)&lt;BR/&gt; 1605: (25%)&gt;];
}
3595--4582[label="1;2pkt 2fpkt"];
3595--5055[label="1;2pkt 2fpkt"];
4582--5055[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.230.166.244" dst_port="80" src_ip="148.177.203.114" src_port="1606"/>
      <filter dst_ip="194.230.166.244" dst_port="80" src_ip="148.177.203.114" src_port="1605"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
1013[label="20.72.5.115;s;393pkt 393fpkt", shape=diamond, color=yellow];
1444[label="144.192.230.159;d;340pkt 340fpkt", shape=diamond, color=yellow];
3596[label="20.72.5.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4583[label="20.72.5.115;1pkt 1fpkt", shape=invtriangle, color=brown];
5056[label="20.72.5.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.72.5.115:80, *:*}[62.1835%]&lt;BR/&gt;{*:80, 144.192.230.159:*}[30.6962%]&lt;BR/&gt;{*:7000, 144.192.230.159:*}[22.6266%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.0815%)&lt;BR/&gt; 7000: (9.71467%)&lt;BR/&gt; 60748: (0.339674%)&lt;BR/&gt; 44861: (0.203804%)&lt;BR/&gt; 27698: (0.203804%)&gt;];
}
1013--1435[label="0.311644;91pkt 91fpkt"];
1013--1444[label="0.297059;101pkt 101fpkt"];
1013--1446[label="0.276536;99pkt 99fpkt"];
1013--1579[label="0.274011;97pkt 97fpkt"];
1013--2912[label="0.262087;103pkt 103fpkt"];
1013--2919[label="0.287532;113pkt 113fpkt"];
1013--2925[label="0.262087;103pkt 103fpkt"];
1013--2931[label="0.287532;113pkt 113fpkt"];
1013--2933[label="0.262087;103pkt 103fpkt"];
1013--2935[label="0.287532;113pkt 113fpkt"];
1013--3596[label="1;1pkt 1fpkt"];
1013--4583[label="1;1pkt 1fpkt"];
1013--5056[label="1;1pkt 1fpkt"];
1444--2302[label="0.00882353;3pkt 3fpkt"];
1444--2390[label="0.232673;47pkt 47fpkt"];
1444--2912[label="0.138235;47pkt 47fpkt"];
1444--2919[label="0.144118;49pkt 49fpkt"];
1444--2925[label="0.138235;47pkt 47fpkt"];
1444--2931[label="0.144118;49pkt 49fpkt"];
1444--2933[label="0.138235;47pkt 47fpkt"];
1444--2935[label="0.144118;49pkt 49fpkt"];
1444--3577[label="0.273529;93pkt 93fpkt"];
1444--3596[label="1;1pkt 1fpkt"];
1444--3839[label="0.00882353;3pkt 3fpkt"];
1444--4573[label="0.273529;93pkt 93fpkt"];
1444--4583[label="1;1pkt 1fpkt"];
1444--5056[label="1;1pkt 1fpkt"];
3596--4583[label="1;1pkt 1fpkt"];
3596--5056[label="1;1pkt 1fpkt"];
4583--5056[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="20.72.5.115" src_port="80"/>
      <filter dst_ip="144.192.230.159" src_port="80"/>
      <filter dst_ip="144.192.230.159" src_port="7000"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
3597[label="144.224.68.115;65pkt 65fpkt", shape=pentagon, color=darkviolet];
4584[label="144.224.68.115;64pkt 64fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.68.115:*, 76.91.198.45:80}[98.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4588: (0.775194%)&lt;BR/&gt; 4587: (0.775194%)&lt;BR/&gt; 4586: (0.775194%)&lt;BR/&gt; 4585: (0.775194%)&gt;];
}
3597--4584[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="76.91.198.45" dst_port="80" src_ip="144.224.68.115"/>
    </slice>
    <from sec="1109826516" usec="0"/>
    <to sec="1109826612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
3608[label="144.39.235.117;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4589[label="144.39.235.117;22pkt 22fpkt", shape=invtriangle, color=brown];
5059[label="144.39.235.117;22pkt 22fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.235.117:*, 73.173.41.210:80}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7761%)&lt;BR/&gt; 37212: (2.23881%)&lt;BR/&gt; 37210: (2.23881%)&lt;BR/&gt; 37209: (2.23881%)&lt;BR/&gt; 37208: (2.23881%)&gt;];
}
3608--4589[label="1;22pkt 22fpkt"];
3608--5059[label="1;22pkt 22fpkt"];
4589--5059[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="73.173.41.210" dst_port="80" src_ip="144.39.235.117"/>
    </slice>
    <from sec="1109826014" usec="0"/>
    <to sec="1109826893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
3612[label="148.177.189.118;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4591[label="148.177.189.118;20pkt 20fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.189.118:*, 148.167.77.130:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.2439%)&lt;BR/&gt; 443: (9.7561%)&lt;BR/&gt; 1215: (2.43902%)&lt;BR/&gt; 1213: (2.43902%)&lt;BR/&gt; 1212: (2.43902%)&gt;];
}
3612--4591[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="148.167.77.130" dst_port="80" src_ip="148.177.189.118"/>
    </slice>
    <from sec="1109826484" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
1830[label="148.177.197.118;s;77pkt 77fpkt", shape=diamond, color=yellow];
3613[label="148.177.197.118;76pkt 76fpkt", shape=pentagon, color=darkviolet];
4592[label="148.177.197.118;76pkt 76fpkt", shape=invtriangle, color=brown];
5061[label="148.177.197.118;77pkt 77fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.197.118:*, 218.122.68.1:80}[25.974%]&lt;BR/&gt;{148.177.197.118:*, 215.213.77.129:80}[25.974%]&lt;BR/&gt;{148.177.197.118:*, 214.1.3.3:80}[22.0779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1592: (0.653595%)&lt;BR/&gt; 1591: (0.653595%)&lt;BR/&gt; 1590: (0.653595%)&lt;BR/&gt; 1589: (0.653595%)&gt;];
}
1830--2890[label="0.0649351;5pkt 5fpkt"];
1830--3613[label="1;76pkt 76fpkt"];
1830--4592[label="1;76pkt 76fpkt"];
1830--5061[label="1;77pkt 77fpkt"];
3613--4592[label="1;76pkt 76fpkt"];
3613--5061[label="1;76pkt 76fpkt"];
4592--5061[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="215.213.77.129" dst_port="80" src_ip="148.177.197.118"/>
      <filter dst_ip="218.122.68.1" dst_port="80" src_ip="148.177.197.118"/>
      <filter dst_ip="214.1.3.3" dst_port="80" src_ip="148.177.197.118"/>
    </slice>
    <from sec="1109826031" usec="0"/>
    <to sec="1109826607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
3625[label="74.40.163.121;245pkt 245fpkt", shape=pentagon, color=darkviolet];
4600[label="74.40.163.121;244pkt 244fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.40.163.121:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3625--4600[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="74.40.163.121" src_port="1027"/>
    </slice>
    <from sec="1109826798" usec="0"/>
    <to sec="1109826842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
3629[label="169.28.121.122;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4601[label="169.28.121.122;2pkt 2fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.121.122:1420, 149.24.219.6:80}[33.3333%]&lt;BR/&gt;{169.28.121.122:1194, 76.5.219.38:80}[33.3333%]&lt;BR/&gt;{169.28.121.122:1196, 76.5.219.38:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1196: (20%)&lt;BR/&gt; 1194: (20%)&lt;BR/&gt; 1420: (10%)&gt;];
}
3629--4601[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.5.219.38" dst_port="80" src_ip="169.28.121.122" src_port="1196"/>
      <filter dst_ip="76.5.219.38" dst_port="80" src_ip="169.28.121.122" src_port="1194"/>
      <filter dst_ip="149.24.219.6" dst_port="80" src_ip="169.28.121.122" src_port="1420"/>
    </slice>
    <from sec="1109826385" usec="0"/>
    <to sec="1109826795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.132.99.126"/>
    </slice>
    <from sec="1109826159" usec="0"/>
    <to sec="1109826186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.111.73.128"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.169.167.128"/>
    </slice>
    <from sec="1109826184" usec="0"/>
    <to sec="1109826239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.85.188.129"/>
    </slice>
    <from sec="1109826068" usec="0"/>
    <to sec="1109826130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
3667[label="73.173.29.130;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4619[label="73.173.29.130;58pkt 58fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.173.29.130:8200, 169.28.32.23:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 3931: (0.862069%)&lt;BR/&gt; 3907: (0.862069%)&lt;BR/&gt; 3885: (0.862069%)&lt;BR/&gt; 3880: (0.862069%)&gt;];
}
3667--4619[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.32.23" src_ip="73.173.29.130" src_port="8200"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.115.44.130"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
3676[label="148.177.65.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4624[label="148.177.65.132;1pkt 1fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.65.132:57895, 197.84.207.131:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57895: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
3676--4624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.207.131" dst_port="443" src_ip="148.177.65.132" src_port="57895"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
774[label="148.177.224.65;d;110pkt 110fpkt", shape=diamond, color=yellow];
3580[label="208.67.113.112;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3696[label="209.76.13.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4574[label="208.67.113.112;7pkt 7fpkt", shape=invtriangle, color=brown];
4634[label="209.76.13.136;2pkt 2fpkt", shape=invtriangle, color=brown];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.177.224.65:25}[89.1892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1431: (1.5873%)&lt;BR/&gt; 1432: (1.19048%)&lt;BR/&gt; 1398: (1.19048%)&lt;BR/&gt; 1388: (1.19048%)&gt;];
}
774--3580[label="1;6pkt 6fpkt"];
774--4574[label="1;7pkt 7fpkt"];
774--4634[label="0.5;1pkt 1fpkt"];
3580--4574[label="1;6pkt 6fpkt"];
3696--4634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.224.65" dst_port="25"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.220.27.140"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
3718[label="148.176.253.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4646[label="148.176.253.140;1pkt 1fpkt", shape=invtriangle, color=brown];
5082[label="148.176.253.140;2pkt 2fpkt", shape=invhouse, color=bisque];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.253.140:80, 196.70.44.32:1726}[50%]&lt;BR/&gt;{148.176.253.140:80, 77.96.194.150:24476}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1726: (30%)&lt;BR/&gt; 24476: (20%)&gt;];
}
3718--4646[label="1;1pkt 1fpkt"];
3718--5082[label="1;2pkt 2fpkt"];
4646--5082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="77.96.194.150" dst_port="24476" src_ip="148.176.253.140" src_port="80"/>
      <filter dst_ip="196.70.44.32" dst_port="1726" src_ip="148.176.253.140" src_port="80"/>
    </slice>
    <from sec="1109826155" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
3722[label="208.86.176.141;870pkt 870fpkt", shape=pentagon, color=darkviolet];
4647[label="208.86.176.141;869pkt 869fpkt", shape=invtriangle, color=brown];
5083[label="208.86.176.141;869pkt 869fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.86.176.141:*, *:5554}[50.5747%]&lt;BR/&gt;{208.86.176.141:*, *:9898}[49.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (25.3067%)&lt;BR/&gt; 9898: (24.6933%)&lt;BR/&gt; 3511: (0.115031%)&lt;BR/&gt; 3510: (0.115031%)&lt;BR/&gt; 3495: (0.115031%)&gt;];
}
3722--4647[label="1;869pkt 869fpkt"];
3722--5083[label="1;869pkt 869fpkt"];
4647--5083[label="1;869pkt 869fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="208.86.176.141"/>
      <filter dst_port="9898" src_ip="208.86.176.141"/>
    </slice>
    <from sec="1109826397" usec="0"/>
    <to sec="1109826567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
402[label="144.192.39.143;s;6025pkt 6025fpkt", shape=diamond, color=yellow];
3728[label="144.192.39.143;6386pkt 6386fpkt", shape=pentagon, color=darkviolet];
4653[label="144.192.39.143;6386pkt 6386fpkt", shape=invtriangle, color=brown];
5087[label="144.192.39.143;6386pkt 6386fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.192.39.143:52187, *:*}[99.953%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52187: (49.9762%)&lt;BR/&gt; 54045: (0.146925%)&lt;BR/&gt; 1025: (0.10523%)&lt;BR/&gt; 64576: (0.0933169%)&lt;BR/&gt; 61012: (0.0714768%)&gt;];
}
402--1807[label="0.5;1pkt 1fpkt"];
402--3728[label="1;6025pkt 6025fpkt"];
402--4653[label="1;6025pkt 6025fpkt"];
402--5087[label="1;6025pkt 6025fpkt"];
3728--4653[label="1;6386pkt 6386fpkt"];
3728--5087[label="1;6386pkt 6386fpkt"];
4653--5087[label="1;6386pkt 6386fpkt"];
</description>
    <slice>
      <filter src_ip="144.192.39.143" src_port="52187"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
3738[label="148.177.201.144;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4658[label="148.177.201.144;15pkt 15fpkt", shape=invtriangle, color=brown];
5088[label="148.177.201.144;15pkt 15fpkt", shape=invhouse, color=bisque];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.201.144:25, *:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.5909%)&lt;BR/&gt; 13625: (3.40909%)&lt;BR/&gt; 9898: (3.40909%)&lt;BR/&gt; 4858: (3.40909%)&lt;BR/&gt; 4464: (3.40909%)&gt;];
}
3738--4658[label="1;14pkt 14fpkt"];
3738--5088[label="1;14pkt 14fpkt"];
4658--5088[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.201.144" src_port="25"/>
    </slice>
    <from sec="1109826008" usec="0"/>
    <to sec="1109826858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.162.117.145"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
1381[label="148.177.203.169;s;113pkt 113fpkt", shape=diamond, color=yellow];
1431[label="75.188.250.68;d;185pkt 185fpkt", shape=diamond, color=yellow];
2783[label="148.177.203.114;s;147pkt 147fpkt", shape=hexagon, color=black];
3104[label="169.28.32.25;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3341[label="148.176.228.63;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3739[label="144.192.18.145;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3742[label="148.176.160.145;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3994[label="148.177.36.200;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4310[label="169.28.32.25;21pkt 21fpkt", shape=invtriangle, color=brown];
4447[label="148.176.228.63;13pkt 13fpkt", shape=invtriangle, color=brown];
4659[label="144.192.18.145;20pkt 20fpkt", shape=invtriangle, color=brown];
4661[label="148.176.160.145;25pkt 25fpkt", shape=invtriangle, color=brown];
4730[label="148.177.203.169;120pkt 120fpkt", shape=invtriangle, color=brown];
4945[label="169.28.32.25;22pkt 22fpkt", shape=invhouse, color=bisque];
5089[label="144.192.18.145;21pkt 21fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.203.114:*, *:80}[23.8447%]&lt;BR/&gt;{148.177.203.169:*, *:80}[21.9963%]&lt;BR/&gt;{*:*, 75.188.250.68:443}[20.7024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.5429%)&lt;BR/&gt; 443: (9.78535%)&lt;BR/&gt; 1863: (3.28283%)&lt;BR/&gt; 7001: (0.694444%)&lt;BR/&gt; 1320: (0.378788%)&gt;];
}
1381--1431[label="0.0176991;2pkt 2fpkt"];
1381--1779[label="0.0425532;4pkt 4fpkt"];
1381--2110[label="0.00943396;1pkt 1fpkt"];
1381--2739[label="0.0265487;3pkt 3fpkt"];
1381--3867[label="1;113pkt 113fpkt"];
1381--4730[label="1;113pkt 113fpkt"];
1431--1501[label="0.00540541;1pkt 1fpkt"];
1431--1507[label="0.0220994;4pkt 4fpkt"];
1431--1645[label="0.0070922;1pkt 1fpkt"];
1431--1665[label="0.0846154;11pkt 11fpkt"];
1431--1690[label="0.0510204;5pkt 5fpkt"];
1431--1825[label="0.00724638;1pkt 1fpkt"];
1431--1833[label="0.0434783;3pkt 3fpkt"];
1431--1883[label="0.0740741;4pkt 4fpkt"];
1431--1964[label="0.0526316;5pkt 5fpkt"];
1431--1999[label="0.00925926;1pkt 1fpkt"];
1431--2035[label="0.027027;2pkt 2fpkt"];
1431--2191[label="0.09375;3pkt 3fpkt"];
1431--2215[label="0.0333333;1pkt 1fpkt"];
1431--2261[label="0.00540541;1pkt 1fpkt"];
1431--2307[label="0.00540541;1pkt 1fpkt"];
1431--2333[label="0.0108108;2pkt 2fpkt"];
1431--2348[label="0.0333333;3pkt 3fpkt"];
1431--2385[label="0.0108108;2pkt 2fpkt"];
1431--2388[label="0.0378378;7pkt 7fpkt"];
1431--2406[label="0.02;1pkt 1fpkt"];
1431--2499[label="0.00540541;1pkt 1fpkt"];
1431--2504[label="0.027027;5pkt 5fpkt"];
1431--2508[label="0.0540541;10pkt 10fpkt"];
1431--2582[label="0.015873;1pkt 1fpkt"];
1431--2620[label="0.00540541;1pkt 1fpkt"];
1431--2720[label="0.00540541;1pkt 1fpkt"];
1431--2727[label="0.0108108;2pkt 2fpkt"];
1431--2742[label="0.0846154;11pkt 11fpkt"];
1431--2747[label="0.0181818;1pkt 1fpkt"];
1431--2751[label="0.0510204;5pkt 5fpkt"];
1431--2783[label="0.0204082;3pkt 3fpkt"];
1431--2846[label="0.09375;3pkt 3fpkt"];
1431--2864[label="0.00540541;1pkt 1fpkt"];
1431--2890[label="0.0486486;9pkt 9fpkt"];
1431--3104[label="0.047619;1pkt 1fpkt"];
1431--3234[label="0.00540541;1pkt 1fpkt"];
1431--3239[label="0.125;1pkt 1fpkt"];
1431--3288[label="0.0384615;1pkt 1fpkt"];
1431--3341[label="0.0833333;1pkt 1fpkt"];
1431--3363[label="0.0471698;5pkt 5fpkt"];
1431--3371[label="0.0526316;1pkt 1fpkt"];
1431--3378[label="0.0108108;2pkt 2fpkt"];
1431--3437[label="0.00719424;1pkt 1fpkt"];
1431--3450[label="0.011236;1pkt 1fpkt"];
1431--3470[label="0.105263;2pkt 2fpkt"];
1431--3504[label="0.0162162;3pkt 3fpkt"];
1431--3561[label="0.0306122;3pkt 3fpkt"];
1431--3572[label="0.0212766;1pkt 1fpkt"];
1431--3590[label="0.0149254;1pkt 1fpkt"];
1431--3618[label="0.0909091;2pkt 2fpkt"];
1431--3680[label="0.0869565;2pkt 2fpkt"];
1431--3726[label="0.037037;1pkt 1fpkt"];
1431--3737[label="0.025;1pkt 1fpkt"];
1431--3739[label="0.333333;7pkt 7fpkt"];
1431--3742[label="0.12;3pkt 3fpkt"];
1431--3773[label="0.136364;3pkt 3fpkt"];
1431--3867[label="0.0166667;2pkt 2fpkt"];
1431--3879[label="0.03;3pkt 3fpkt"];
1431--3893[label="0.0758621;11pkt 11fpkt"];
1431--3994[label="0.0384615;1pkt 1fpkt"];
1431--4002[label="0.0540541;10pkt 10fpkt"];
1431--4017[label="0.0378378;7pkt 7fpkt"];
1431--4036[label="0.0434783;3pkt 3fpkt"];
1431--4071[label="0.0273973;2pkt 2fpkt"];
1431--4202[label="0.111111;1pkt 1fpkt"];
1431--4310[label="0.047619;1pkt 1fpkt"];
1431--4383[label="0.00540541;1pkt 1fpkt"];
1431--4412[label="0.0384615;1pkt 1fpkt"];
1431--4447[label="0.0769231;1pkt 1fpkt"];
1431--4459[label="0.046729;5pkt 5fpkt"];
1431--4461[label="0.0555556;1pkt 1fpkt"];
1431--4464[label="0.0108108;2pkt 2fpkt"];
1431--4505[label="0.0113636;1pkt 1fpkt"];
1431--4564[label="0.0306122;3pkt 3fpkt"];
1431--4651[label="0.0357143;1pkt 1fpkt"];
1431--4659[label="0.35;7pkt 7fpkt"];
1431--4661[label="0.12;3pkt 3fpkt"];
1431--4678[label="0.136364;3pkt 3fpkt"];
1431--4730[label="0.0166667;2pkt 2fpkt"];
1431--4735[label="0.030303;3pkt 3fpkt"];
1431--4745[label="0.0753425;11pkt 11fpkt"];
1431--4793[label="0.0540541;10pkt 10fpkt"];
1431--4799[label="0.0378378;7pkt 7fpkt"];
1431--4809[label="0.0434783;3pkt 3fpkt"];
1431--4945[label="0.0454545;1pkt 1fpkt"];
1431--4966[label="0.00540541;1pkt 1fpkt"];
1431--4999[label="0.0108108;2pkt 2fpkt"];
1431--5019[label="0.011236;1pkt 1fpkt"];
1431--5047[label="0.0306122;3pkt 3fpkt"];
1431--5085[label="0.0357143;1pkt 1fpkt"];
1431--5089[label="0.333333;7pkt 7fpkt"];
1431--5125[label="0.030303;3pkt 3fpkt"];
2783--2801[label="0.309524;13pkt 13fpkt"];
2783--2890[label="0.129252;19pkt 19fpkt"];
2783--5055[label="0.333333;1pkt 1fpkt"];
3104--4310[label="1;21pkt 21fpkt"];
3104--4945[label="1;21pkt 21fpkt"];
3341--4447[label="1;12pkt 12fpkt"];
3739--4659[label="1;20pkt 20fpkt"];
3739--5089[label="1;21pkt 21fpkt"];
3742--4661[label="1;25pkt 25fpkt"];
4310--4945[label="1;21pkt 21fpkt"];
4659--5089[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.177.203.114"/>
      <filter dst_port="80" src_ip="148.177.203.169"/>
      <filter dst_ip="75.188.250.68" dst_port="443"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.150.166.149"/>
    </slice>
    <from sec="1109826121" usec="0"/>
    <to sec="1109826771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
3769[label="128.204.250.150;116pkt 116fpkt", shape=pentagon, color=darkviolet];
4676[label="128.204.250.150;116pkt 116fpkt", shape=invtriangle, color=brown];
5098[label="128.204.250.150;116pkt 116fpkt", shape=invhouse, color=bisque];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.204.250.150:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3769--4676[label="1;116pkt 116fpkt"];
3769--5098[label="1;116pkt 116fpkt"];
4676--5098[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="128.204.250.150" src_port="1030"/>
    </slice>
    <from sec="1109826264" usec="0"/>
    <to sec="1109826282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
3777[label="213.39.178.153;372pkt 372fpkt", shape=pentagon, color=darkviolet];
4681[label="213.39.178.153;372pkt 372fpkt", shape=invtriangle, color=brown];
5102[label="213.39.178.153;373pkt 373fpkt", shape=invhouse, color=bisque];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.39.178.153:*, *:9898}[51.4745%]&lt;BR/&gt;{213.39.178.153:*, *:5554}[48.5255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.7833%)&lt;BR/&gt; 5554: (24.2167%)&lt;BR/&gt; 4615: (0.268577%)&lt;BR/&gt; 4570: (0.268577%)&lt;BR/&gt; 4470: (0.268577%)&gt;];
}
3777--4681[label="1;372pkt 372fpkt"];
3777--5102[label="1;372pkt 372fpkt"];
4681--5102[label="1;372pkt 372fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="213.39.178.153"/>
      <filter dst_port="5554" src_ip="213.39.178.153"/>
    </slice>
    <from sec="1109826206" usec="0"/>
    <to sec="1109826225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
3789[label="148.177.244.154;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4690[label="148.177.244.154;28pkt 28fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.244.154:*, 197.84.156.144:80}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1528: (1.81818%)&lt;BR/&gt; 1520: (1.81818%)&lt;BR/&gt; 1515: (1.81818%)&lt;BR/&gt; 1514: (1.81818%)&gt;];
}
3789--4690[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.156.144" dst_port="80" src_ip="148.177.244.154"/>
    </slice>
    <from sec="1109826666" usec="0"/>
    <to sec="1109826852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03198,1.66329,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
133[label="212.174.169.156s;463pkt 463fpkt", shape=rectangle, color=red];
3797[label="212.174.169.156;462pkt 462fpkt", shape=pentagon, color=darkviolet];
4693[label="212.174.169.156;463pkt 463fpkt", shape=invtriangle, color=brown];
5108[label="212.174.169.156;463pkt 463fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.174.169.156:*, *:9898}[50.54%]&lt;BR/&gt;{212.174.169.156:*, *:5554}[49.46%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.2836%)&lt;BR/&gt; 5554: (24.7164%)&lt;BR/&gt; 4166: (0.10805%)&lt;BR/&gt; 4157: (0.10805%)&lt;BR/&gt; 4155: (0.10805%)&gt;];
}
133--3797[label="1;462pkt 462fpkt"];
133--4693[label="1;463pkt 463fpkt"];
133--5108[label="1;463pkt 463fpkt"];
3797--4693[label="1;462pkt 462fpkt"];
3797--5108[label="1;462pkt 462fpkt"];
4693--5108[label="1;463pkt 463fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="212.174.169.156"/>
      <filter dst_port="5554" src_ip="212.174.169.156"/>
    </slice>
    <from sec="1109826172" usec="0"/>
    <to sec="1109826175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
3800[label="148.176.224.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4696[label="148.176.224.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.224.156:80, 74.141.2.132:3833}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3833: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3800--4696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.141.2.132" dst_port="3833" src_ip="148.176.224.156" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
3805[label="195.81.112.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4700[label="195.81.112.158;2pkt 2fpkt", shape=invtriangle, color=brown];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.112.158:80, 73.196.4.248:48855}[50%]&lt;BR/&gt;{195.81.112.158:80, 73.196.4.248:54178}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54178: (25%)&lt;BR/&gt; 48855: (25%)&gt;];
}
3805--4700[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="73.196.4.248" dst_port="54178" src_ip="195.81.112.158" src_port="80"/>
      <filter dst_ip="73.196.4.248" dst_port="48855" src_ip="195.81.112.158" src_port="80"/>
    </slice>
    <from sec="1109826057" usec="0"/>
    <to sec="1109826718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
3829[label="144.224.0.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4709[label="144.224.0.163;2pkt 2fpkt", shape=invtriangle, color=brown];
5114[label="144.224.0.163;2pkt 2fpkt", shape=invhouse, color=bisque];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.0.163:3707, 76.2.177.7:80}[50%]&lt;BR/&gt;{144.224.0.163:3705, 222.202.1.152:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3707: (25%)&lt;BR/&gt; 3705: (25%)&gt;];
}
3829--4709[label="1;2pkt 2fpkt"];
3829--5114[label="1;2pkt 2fpkt"];
4709--5114[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="222.202.1.152" dst_port="80" src_ip="144.224.0.163" src_port="3705"/>
      <filter dst_ip="76.2.177.7" dst_port="80" src_ip="144.224.0.163" src_port="3707"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.44.76.163"/>
    </slice>
    <from sec="1109826719" usec="0"/>
    <to sec="1109826766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
2048[label="148.177.177.37;d;40pkt 40fpkt", shape=diamond, color=yellow];
3836[label="208.186.87.164;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4715[label="208.186.87.164;13pkt 13fpkt", shape=invtriangle, color=brown];
5117[label="208.186.87.164;14pkt 14fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.186.87.135:80, 148.177.177.37:*}[60%]&lt;BR/&gt;{208.186.87.164:80, 148.177.177.37:*}[35%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49702: (2.46914%)&lt;BR/&gt; 49695: (2.46914%)&lt;BR/&gt; 49691: (2.46914%)&lt;BR/&gt; 49690: (2.46914%)&gt;];
}
2048--3836[label="1;14pkt 14fpkt"];
2048--4715[label="1;13pkt 13fpkt"];
2048--5117[label="1;14pkt 14fpkt"];
3836--4715[label="1;13pkt 13fpkt"];
3836--5117[label="1;14pkt 14fpkt"];
4715--5117[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.177.37" src_ip="208.186.87.135" src_port="80"/>
      <filter dst_ip="148.177.177.37" src_ip="208.186.87.164" src_port="80"/>
    </slice>
    <from sec="1109826634" usec="0"/>
    <to sec="1109826645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.201.215.164"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
3844[label="208.14.192.165;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4719[label="208.14.192.165;255pkt 255fpkt", shape=invtriangle, color=brown];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.14.192.165:21431, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21431: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3844--4719[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.14.192.165" src_port="21431"/>
    </slice>
    <from sec="1109826167" usec="0"/>
    <to sec="1109826182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.231.40.167"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
3862[label="148.176.224.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4727[label="148.176.224.168;2pkt 2fpkt", shape=invtriangle, color=brown];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.224.168:3272, 213.21.146.8:25}[50%]&lt;BR/&gt;{148.176.224.168:25, 20.113.164.156:4224}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4224: (25%)&lt;BR/&gt; 3272: (25%)&gt;];
}
3862--4727[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.113.164.156" dst_port="4224" src_ip="148.176.224.168" src_port="25"/>
      <filter dst_ip="213.21.146.8" dst_port="25" src_ip="148.176.224.168" src_port="3272"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03198,1.66329,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
35[label="148.176.181.169s;1pkt 1fpkt", shape=rectangle, color=red];
3865[label="148.176.181.169;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4729[label="148.176.181.169;23pkt 23fpkt", shape=invtriangle, color=brown];
5124[label="148.176.181.169;23pkt 23fpkt", shape=invhouse, color=bisque];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.181.169:*, *:53}[65.2174%]&lt;BR/&gt;{148.176.181.169:80, *:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.5714%)&lt;BR/&gt; 80: (11.4286%)&lt;BR/&gt; 32908: (2.85714%)&lt;BR/&gt; 56552: (2.14286%)&lt;BR/&gt; 55976: (2.14286%)&gt;];
}
35--3865[label="1;1pkt 1fpkt"];
35--4729[label="1;1pkt 1fpkt"];
35--5124[label="1;1pkt 1fpkt"];
3865--4729[label="1;23pkt 23fpkt"];
3865--5124[label="1;23pkt 23fpkt"];
4729--5124[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="148.176.181.169" src_port="80"/>
      <filter dst_port="53" src_ip="148.176.181.169"/>
    </slice>
    <from sec="1109826069" usec="0"/>
    <to sec="1109826746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
3870[label="20.208.33.170;139pkt 139fpkt", shape=pentagon, color=darkviolet];
4732[label="20.208.33.170;139pkt 139fpkt", shape=invtriangle, color=brown];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.208.33.170:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3870--4732[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="20.208.33.170" src_port="1030"/>
    </slice>
    <from sec="1109826694" usec="0"/>
    <to sec="1109826708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
3880[label="221.154.112.172;202pkt 202fpkt", shape=pentagon, color=darkviolet];
4736[label="221.154.112.172;201pkt 201fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.154.112.172:*, *:9898}[64.3564%]&lt;BR/&gt;{221.154.112.172:*, *:5554}[35.6436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (32.134%)&lt;BR/&gt; 5554: (17.866%)&lt;BR/&gt; 4985: (0.496278%)&lt;BR/&gt; 4969: (0.496278%)&lt;BR/&gt; 4956: (0.496278%)&gt;];
}
3880--4736[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="221.154.112.172"/>
      <filter dst_port="5554" src_ip="221.154.112.172"/>
    </slice>
    <from sec="1109826631" usec="0"/>
    <to sec="1109826801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
3884[label="148.177.19.173;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4739[label="148.177.19.173;13pkt 13fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.19.173:*, 73.202.133.42:80}[46.1538%]&lt;BR/&gt;{148.177.19.173:*, 197.167.65.70:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 1351: (3.84615%)&lt;BR/&gt; 1347: (3.84615%)&lt;BR/&gt; 1319: (3.84615%)&lt;BR/&gt; 1314: (3.84615%)&gt;];
}
3884--4739[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="73.202.133.42" dst_port="80" src_ip="148.177.19.173"/>
      <filter dst_ip="197.167.65.70" dst_port="80" src_ip="148.177.19.173"/>
    </slice>
    <from sec="1109826172" usec="0"/>
    <to sec="1109826219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.234.188.173"/>
    </slice>
    <from sec="1109826063" usec="0"/>
    <to sec="1109826897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.232.140.177"/>
    </slice>
    <from sec="1109826146" usec="0"/>
    <to sec="1109826209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
3903[label="148.177.48.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4750[label="148.177.48.179;2pkt 2fpkt", shape=invtriangle, color=brown];
5134[label="148.177.48.179;2pkt 2fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.48.179:64424, 74.161.195.164:3544}[50%]&lt;BR/&gt;{148.177.48.179:64425, 74.161.195.164:3544}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3544: (50%)&lt;BR/&gt; 64425: (25%)&lt;BR/&gt; 64424: (25%)&gt;];
}
3903--4750[label="1;2pkt 2fpkt"];
3903--5134[label="1;2pkt 2fpkt"];
4750--5134[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="74.161.195.164" dst_port="3544" src_ip="148.177.48.179" src_port="64425"/>
      <filter dst_ip="74.161.195.164" dst_port="3544" src_ip="148.177.48.179" src_port="64424"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.177.177.180"/>
    </slice>
    <from sec="1109826008" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
3914[label="148.177.183.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4754[label="148.177.183.181;1pkt 1fpkt", shape=invtriangle, color=brown];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.183.181:25, 133.123.90.160:38037}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38037: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3914--4754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.123.90.160" dst_port="38037" src_ip="148.177.183.181" src_port="25"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
3915[label="148.177.203.181;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4755[label="148.177.203.181;32pkt 32fpkt", shape=invtriangle, color=brown];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.203.181:*, 197.84.175.9:80}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3412: (1.5625%)&lt;BR/&gt; 3411: (1.5625%)&lt;BR/&gt; 3410: (1.5625%)&lt;BR/&gt; 3409: (1.5625%)&gt;];
}
3915--4755[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.175.9" dst_port="80" src_ip="148.177.203.181"/>
    </slice>
    <from sec="1109826078" usec="0"/>
    <to sec="1109826850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
1095[label="169.28.100.184;s;265pkt 265fpkt", shape=diamond, color=yellow];
3924[label="169.28.100.184;389pkt 389fpkt", shape=pentagon, color=darkviolet];
4760[label="169.28.100.184;388pkt 388fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.100.184:*, 221.198.38.6:80}[21.3368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6641%)&lt;BR/&gt; 443: (0.191939%)&lt;BR/&gt; 4766: (0.143954%)&lt;BR/&gt; 3363: (0.143954%)&lt;BR/&gt; 3362: (0.143954%)&gt;];
}
1095--1298[label="0.0188679;5pkt 5fpkt"];
1095--2334[label="0.0173913;2pkt 2fpkt"];
1095--3924[label="1;265pkt 265fpkt"];
1095--4760[label="0.996226;264pkt 264fpkt"];
3924--4760[label="1;388pkt 388fpkt"];
</description>
    <slice>
      <filter dst_ip="221.198.38.6" dst_port="80" src_ip="169.28.100.184"/>
    </slice>
    <from sec="1109826027" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.70.103.184"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.98.186.188"/>
    </slice>
    <from sec="1109826305" usec="0"/>
    <to sec="1109826451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
3941[label="175.150.202.189;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4768[label="175.150.202.189;17pkt 17fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.202.189:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64523: (2.94118%)&lt;BR/&gt; 63497: (2.94118%)&lt;BR/&gt; 60080: (2.94118%)&lt;BR/&gt; 58735: (2.94118%)&gt;];
}
3941--4768[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="175.150.202.189" src_port="25"/>
    </slice>
    <from sec="1109826010" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.5.144.190"/>
    </slice>
    <from sec="1109826350" usec="0"/>
    <to sec="1109826679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
3946[label="192.105.85.192;105pkt 105fpkt", shape=pentagon, color=darkviolet];
4770[label="192.105.85.192;105pkt 105fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.85.192:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3946--4770[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.105.85.192" src_port="1025"/>
    </slice>
    <from sec="1109826308" usec="0"/>
    <to sec="1109826325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
3950[label="144.39.186.192;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4772[label="144.39.186.192;33pkt 33fpkt", shape=invtriangle, color=brown];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.186.192:25, *:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.9091%)&lt;BR/&gt; 3076: (9.09091%)&lt;BR/&gt; 53: (9.09091%)&lt;BR/&gt; 62512: (1.51515%)&lt;BR/&gt; 61158: (1.51515%)&gt;];
}
3950--4772[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="144.39.186.192" src_port="25"/>
    </slice>
    <from sec="1109826047" usec="0"/>
    <to sec="1109826831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
3956[label="215.71.23.193;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4774[label="215.71.23.193;154pkt 154fpkt", shape=invtriangle, color=brown];
5138[label="215.71.23.193;155pkt 155fpkt", shape=invhouse, color=bisque];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.71.23.193:33323, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33323: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3956--4774[label="1;154pkt 154fpkt"];
3956--5138[label="1;155pkt 155fpkt"];
4774--5138[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.71.23.193" src_port="33323"/>
    </slice>
    <from sec="1109826205" usec="0"/>
    <to sec="1109826239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
3959[label="148.177.84.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4775[label="148.177.84.193;1pkt 1fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.84.193:33316, 197.84.9.28:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33316: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3959--4775[label="1;1pkt 1fpkt"];
3959--5139[label="1;1pkt 1fpkt"];
4775--5139[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.84.9.28" dst_port="1863" src_ip="148.177.84.193" src_port="33316"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
3972[label="148.177.232.194;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4782[label="148.177.232.194;31pkt 31fpkt", shape=invtriangle, color=brown];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.232.194:*, 74.161.252.108:80}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 3006: (1.6129%)&lt;BR/&gt; 3005: (1.6129%)&lt;BR/&gt; 3004: (1.6129%)&lt;BR/&gt; 2995: (1.6129%)&gt;];
}
3972--4782[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="74.161.252.108" dst_port="80" src_ip="148.177.232.194"/>
    </slice>
    <from sec="1109826238" usec="0"/>
    <to sec="1109826734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
3973[label="148.177.244.194;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4783[label="148.177.244.194;4pkt 4fpkt", shape=invtriangle, color=brown];
5144[label="148.177.244.194;4pkt 4fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.244.194:2982, 75.188.250.86:443}[25%]&lt;BR/&gt;{148.177.244.194:2983, 75.188.250.86:443}[25%]&lt;BR/&gt;{148.177.244.194:2984, 75.188.250.86:443}[25%]&lt;BR/&gt;{148.177.244.194:2985, 75.188.250.86:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2985: (12.5%)&lt;BR/&gt; 2984: (12.5%)&lt;BR/&gt; 2983: (12.5%)&lt;BR/&gt; 2982: (12.5%)&gt;];
}
3973--4783[label="1;4pkt 4fpkt"];
3973--5144[label="1;4pkt 4fpkt"];
4783--5144[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="75.188.250.86" dst_port="443" src_ip="148.177.244.194" src_port="2985"/>
      <filter dst_ip="75.188.250.86" dst_port="443" src_ip="148.177.244.194" src_port="2984"/>
      <filter dst_ip="75.188.250.86" dst_port="443" src_ip="148.177.244.194" src_port="2983"/>
      <filter dst_ip="75.188.250.86" dst_port="443" src_ip="148.177.244.194" src_port="2982"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782588,1.60424,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
1920[label="144.39.46.92;d;35pkt 35fpkt", shape=diamond, color=yellow];
2768[label="144.39.46.92;d;35pkt 35fpkt", shape=hexagon, color=black];
3843[label="213.66.155.165;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3983[label="213.19.166.197;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4787[label="213.19.166.197;2pkt 2fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.39.46.92:80}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2353: (2.5974%)&lt;BR/&gt; 2351: (2.5974%)&lt;BR/&gt; 1442: (1.94805%)&lt;BR/&gt; 1325: (1.94805%)&gt;];
}
1920--2768[label="1;35pkt 35fpkt"];
1920--2890[label="0.114286;4pkt 4fpkt"];
1920--3843[label="0.666667;2pkt 2fpkt"];
1920--3983[label="1;2pkt 2fpkt"];
1920--4787[label="1;2pkt 2fpkt"];
2768--2890[label="0.114286;4pkt 4fpkt"];
2768--3843[label="0.666667;2pkt 2fpkt"];
2768--3983[label="1;2pkt 2fpkt"];
2768--4787[label="1;2pkt 2fpkt"];
3983--4787[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.39.46.92" dst_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
3984[label="20.226.180.197;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4788[label="20.226.180.197;28pkt 28fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.226.180.197:*, *:5900}[28.5714%]&lt;BR/&gt;{20.226.180.197:*, *:42}[25%]&lt;BR/&gt;{20.226.180.197:*, *:4899}[25%]&lt;BR/&gt;{20.226.180.197:*, *:6101}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (14.5455%)&lt;BR/&gt; 4899: (12.7273%)&lt;BR/&gt; 42: (11.8182%)&lt;BR/&gt; 6101: (10.9091%)&lt;BR/&gt; 40777: (1.81818%)&gt;];
}
3984--4788[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="20.226.180.197"/>
      <filter dst_port="4899" src_ip="20.226.180.197"/>
      <filter dst_port="42" src_ip="20.226.180.197"/>
      <filter dst_port="6101" src_ip="20.226.180.197"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
3986[label="169.28.8.198;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4789[label="169.28.8.198;14pkt 14fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.8.198:*, 199.214.89.168:80}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50457: (5.55556%)&lt;BR/&gt; 50475: (3.7037%)&lt;BR/&gt; 50474: (3.7037%)&lt;BR/&gt; 50471: (3.7037%)&gt;];
}
3986--4789[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="199.214.89.168" dst_port="80" src_ip="169.28.8.198"/>
    </slice>
    <from sec="1109826284" usec="0"/>
    <to sec="1109826568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
3991[label="214.182.130.198;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4790[label="214.182.130.198;3pkt 3fpkt", shape=invtriangle, color=brown];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.198:5050, 175.150.203.25:1168}[25%]&lt;BR/&gt;{214.182.130.198:5050, 175.150.202.105:1472}[25%]&lt;BR/&gt;{214.182.130.198:5050, 175.150.195.217:1204}[25%]&lt;BR/&gt;{214.182.130.198:5050, 175.150.195.217:1205}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1472: (14.2857%)&lt;BR/&gt; 1204: (14.2857%)&lt;BR/&gt; 1168: (14.2857%)&lt;BR/&gt; 1205: (7.14286%)&gt;];
}
3991--4790[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.195.217" dst_port="1205" src_ip="214.182.130.198" src_port="5050"/>
      <filter dst_ip="175.150.195.217" dst_port="1204" src_ip="214.182.130.198" src_port="5050"/>
      <filter dst_ip="175.150.202.105" dst_port="1472" src_ip="214.182.130.198" src_port="5050"/>
      <filter dst_ip="175.150.203.25" dst_port="1168" src_ip="214.182.130.198" src_port="5050"/>
    </slice>
    <from sec="1109826249" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.169.108.200"/>
    </slice>
    <from sec="1109826007" usec="0"/>
    <to sec="1109826167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
4008[label="214.223.200.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4796[label="214.223.200.201;2pkt 2fpkt", shape=invtriangle, color=brown];
5147[label="214.223.200.201;2pkt 2fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.223.200.201:80, 194.76.176.80:61661}[50%]&lt;BR/&gt;{214.223.200.201:80, 194.64.99.242:56667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61661: (25%)&lt;BR/&gt; 56667: (25%)&gt;];
}
4008--4796[label="1;2pkt 2fpkt"];
4008--5147[label="1;2pkt 2fpkt"];
4796--5147[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.99.242" dst_port="56667" src_ip="214.223.200.201" src_port="80"/>
      <filter dst_ip="194.76.176.80" dst_port="61661" src_ip="214.223.200.201" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
4011[label="73.241.186.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4798[label="73.241.186.202;1pkt 1fpkt", shape=invtriangle, color=brown];
5148[label="73.241.186.202;1pkt 1fpkt", shape=invhouse, color=bisque];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.186.202:50198, 170.227.65.134:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50198: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4011--4798[label="1;1pkt 1fpkt"];
4011--5148[label="1;1pkt 1fpkt"];
4798--5148[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.227.65.134" dst_port="80" src_ip="73.241.186.202" src_port="50198"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.32.71.205"/>
    </slice>
    <from sec="1109826310" usec="0"/>
    <to sec="1109826375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
4038[label="74.76.134.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4810[label="74.76.134.208;2pkt 2fpkt", shape=invtriangle, color=brown];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.76.134.208:25, 175.150.164.0:1405}[50%]&lt;BR/&gt;{74.76.134.208:25, 175.150.164.0:1416}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1416: (25%)&lt;BR/&gt; 1405: (25%)&gt;];
}
4038--4810[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.164.0" dst_port="1416" src_ip="74.76.134.208" src_port="25"/>
      <filter dst_ip="175.150.164.0" dst_port="1405" src_ip="74.76.134.208" src_port="25"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
4040[label="73.241.184.208;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4811[label="73.241.184.208;7pkt 7fpkt", shape=invtriangle, color=brown];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.241.184.208:*, 194.64.126.9:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62098: (7.14286%)&lt;BR/&gt; 56805: (7.14286%)&lt;BR/&gt; 44334: (7.14286%)&lt;BR/&gt; 41843: (7.14286%)&gt;];
}
4040--4811[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.126.9" dst_port="80" src_ip="73.241.184.208"/>
    </slice>
    <from sec="1109826171" usec="0"/>
    <to sec="1109826876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
4054[label="196.70.37.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4816[label="196.70.37.212;2pkt 2fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.70.37.212:80, 194.76.179.98:2759}[50%]&lt;BR/&gt;{196.70.37.212:80, 130.54.26.141:4758}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4758: (25%)&lt;BR/&gt; 2759: (25%)&gt;];
}
4054--4816[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.26.141" dst_port="4758" src_ip="196.70.37.212" src_port="80"/>
      <filter dst_ip="194.76.179.98" dst_port="2759" src_ip="196.70.37.212" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
4055[label="144.224.81.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4817[label="144.224.81.212;1pkt 1fpkt", shape=invtriangle, color=brown];
5157[label="144.224.81.212;2pkt 2fpkt", shape=invhouse, color=bisque];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.81.212:3053, 75.234.167.119:80}[50%]&lt;BR/&gt;{144.224.81.212:3054, 75.234.167.119:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3054: (30%)&lt;BR/&gt; 3053: (20%)&gt;];
}
4055--4817[label="1;1pkt 1fpkt"];
4055--5157[label="1;2pkt 2fpkt"];
4817--5157[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.234.167.119" dst_port="80" src_ip="144.224.81.212" src_port="3054"/>
      <filter dst_ip="75.234.167.119" dst_port="80" src_ip="144.224.81.212" src_port="3053"/>
    </slice>
    <from sec="1109826845" usec="0"/>
    <to sec="1109826852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
4056[label="144.39.87.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4818[label="144.39.87.212;2pkt 2fpkt", shape=invtriangle, color=brown];
5158[label="144.39.87.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.87.212:80, 131.68.34.64:1297}[50%]&lt;BR/&gt;{144.39.87.212:80, 72.91.19.198:1318}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1318: (37.5%)&lt;BR/&gt; 1297: (12.5%)&gt;];
}
4056--4818[label="1;1pkt 1fpkt"];
4056--5158[label="1;1pkt 1fpkt"];
4818--5158[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.91.19.198" dst_port="1318" src_ip="144.39.87.212" src_port="80"/>
      <filter dst_ip="131.68.34.64" dst_port="1297" src_ip="144.39.87.212" src_port="80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
4101[label="213.10.214.221;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4837[label="213.10.214.221;250pkt 250fpkt", shape=invtriangle, color=brown];
5165[label="213.10.214.221;249pkt 249fpkt", shape=invhouse, color=bisque];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.10.214.221:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4101--4837[label="1;250pkt 250fpkt"];
4101--5165[label="1;249pkt 249fpkt"];
4837--5165[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.10.214.221" src_port="1027"/>
    </slice>
    <from sec="1109826178" usec="0"/>
    <to sec="1109826216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
4114[label="175.150.204.224;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4845[label="175.150.204.224;10pkt 10fpkt", shape=invtriangle, color=brown];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.204.224:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 58717: (4.7619%)&lt;BR/&gt; 50426: (4.7619%)&lt;BR/&gt; 45060: (4.7619%)&lt;BR/&gt; 42479: (4.7619%)&gt;];
}
4114--4845[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="175.150.204.224" src_port="25"/>
    </slice>
    <from sec="1109826006" usec="0"/>
    <to sec="1109826834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.70.237.227"/>
    </slice>
    <from sec="1109826445" usec="0"/>
    <to sec="1109826512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
2106[label="214.182.130.230;s;48pkt 48fpkt", shape=diamond, color=yellow];
4131[label="214.182.130.230;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4851[label="214.182.130.230;48pkt 48fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.130.230:5050, *:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (46.8531%)&lt;BR/&gt; 23: (2.0979%)&lt;BR/&gt; 4264: (1.04895%)&lt;BR/&gt; 3884: (1.04895%)&lt;BR/&gt; 3609: (1.04895%)&gt;];
}
2106--4131[label="1;47pkt 47fpkt"];
2106--4851[label="1;48pkt 48fpkt"];
4131--4851[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="214.182.130.230" src_port="5050"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
4145[label="169.28.97.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4857[label="169.28.97.233;1pkt 1fpkt", shape=invtriangle, color=brown];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.28.97.233:2096, 74.165.69.66:4103}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4103: (50%)&lt;BR/&gt; 2096: (50%)&gt;];
}
4145--4857[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.165.69.66" dst_port="4103" src_ip="169.28.97.233" src_port="2096"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
4146[label="195.81.115.233;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4858[label="195.81.115.233;35pkt 35fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.115.233:*, 148.167.77.130:80}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8841%)&lt;BR/&gt; 0: (5.7971%)&lt;BR/&gt; 1863: (4.34783%)&lt;BR/&gt; 63972: (1.44928%)&lt;BR/&gt; 52575: (1.44928%)&gt;];
}
4146--4858[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="148.167.77.130" dst_port="80" src_ip="195.81.115.233"/>
    </slice>
    <from sec="1109826664" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
4151[label="213.106.85.234;231pkt 231fpkt", shape=pentagon, color=darkviolet];
4861[label="213.106.85.234;231pkt 231fpkt", shape=invtriangle, color=brown];
5178[label="213.106.85.234;231pkt 231fpkt", shape=invhouse, color=bisque];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.106.85.234:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4151--4861[label="1;231pkt 231fpkt"];
4151--5178[label="1;231pkt 231fpkt"];
4861--5178[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.106.85.234" src_port="1026"/>
    </slice>
    <from sec="1109826109" usec="0"/>
    <to sec="1109826147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
1570[label="148.177.222.234;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.222.234:2887, 75.188.228.106:80}[33.3333%]&lt;BR/&gt;{148.177.222.234:2888, 75.188.228.106:80}[33.3333%]&lt;BR/&gt;{148.177.222.234:2889, 75.188.228.106:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2889: (16.6667%)&lt;BR/&gt; 2888: (16.6667%)&lt;BR/&gt; 2887: (16.6667%)&gt;];
}
1570--4154[label="1;3pkt 3fpkt"];
1570--4863[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="75.188.228.106" dst_port="80" src_ip="148.177.222.234" src_port="2889"/>
      <filter dst_ip="75.188.228.106" dst_port="80" src_ip="148.177.222.234" src_port="2888"/>
      <filter dst_ip="75.188.228.106" dst_port="80" src_ip="148.177.222.234" src_port="2887"/>
    </slice>
    <from sec="1109826443" usec="0"/>
    <to sec="1109826452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.1.225.234"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.0.241.235"/>
    </slice>
    <from sec="1109826166" usec="0"/>
    <to sec="1109826248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
4161[label="220.56.136.236;205pkt 205fpkt", shape=pentagon, color=darkviolet];
4866[label="220.56.136.236;205pkt 205fpkt", shape=invtriangle, color=brown];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.56.136.236:1025, *:137}[70.7317%]&lt;BR/&gt;{220.56.136.236:1028, *:137}[29.2683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (35.3659%)&lt;BR/&gt; 1028: (14.6341%)&gt;];
}
4161--4866[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.56.136.236" src_port="1025"/>
      <filter dst_port="137" src_ip="220.56.136.236" src_port="1028"/>
    </slice>
    <from sec="1109826111" usec="0"/>
    <to sec="1109826134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.3.171.237"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
4177[label="214.1.1.240;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4876[label="214.1.1.240;16pkt 16fpkt", shape=invtriangle, color=brown];
5184[label="214.1.1.240;17pkt 17fpkt", shape=invhouse, color=bisque];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.1.1.240:80, 169.28.49.57:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1810: (3.06122%)&lt;BR/&gt; 1809: (3.06122%)&lt;BR/&gt; 1807: (3.06122%)&lt;BR/&gt; 1806: (3.06122%)&gt;];
}
4177--4876[label="1;16pkt 16fpkt"];
4177--5184[label="1;16pkt 16fpkt"];
4876--5184[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.49.57" src_ip="214.1.1.240" src_port="80"/>
    </slice>
    <from sec="1109826448" usec="0"/>
    <to sec="1109826859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
4186[label="194.64.99.242;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4879[label="194.64.99.242;33pkt 33fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.64.99.242:*, 156.2.218.132:80}[78.7879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56666: (1.51515%)&lt;BR/&gt; 56665: (1.51515%)&lt;BR/&gt; 56664: (1.51515%)&lt;BR/&gt; 56663: (1.51515%)&gt;];
}
4186--4879[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="156.2.218.132" dst_port="80" src_ip="194.64.99.242"/>
    </slice>
    <from sec="1109826220" usec="0"/>
    <to sec="1109826895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.241.186.243"/>
    </slice>
    <from sec="1109826103" usec="0"/>
    <to sec="1109826773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674327,1.72329,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
1746[label="212.80.139.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
4883[label="212.80.139.246;1pkt 1fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.80.139.246:24258, 175.150.165.207:12066}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24258: (50%)&lt;BR/&gt; 12066: (50%)&gt;];
}
1746--4883[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.150.165.207" dst_port="12066" src_ip="212.80.139.246" src_port="24258"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.241.184.246"/>
    </slice>
    <from sec="1109826690" usec="0"/>
    <to sec="1109826702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791699,1.70103,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
4200[label="72.237.154.247;154pkt 154fpkt", shape=pentagon, color=darkviolet];
4886[label="72.237.154.247;155pkt 155fpkt", shape=invtriangle, color=brown];
5188[label="72.237.154.247;146pkt 146fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.237.154.247:1163, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1163: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4200--4886[label="1;154pkt 154fpkt"];
4200--5188[label="0.993151;145pkt 145fpkt"];
4886--5188[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="72.237.154.247" src_port="1163"/>
    </slice>
    <from sec="1109826298" usec="0"/>
    <to sec="1109826324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
4201[label="73.196.4.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4887[label="73.196.4.248;1pkt 1fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.196.4.248:54178, 195.81.112.158:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54178: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4201--4887[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.112.158" dst_port="80" src_ip="73.196.4.248" src_port="54178"/>
    </slice>
    <from sec="1109826181" usec="0"/>
    <to sec="1109826718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.11.37.249"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637306,1.78393,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.106.67.252"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55509,1.70829,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
4214[label="195.8.33.253;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4893[label="195.8.33.253;2pkt 2fpkt", shape=invtriangle, color=brown];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.8.33.253:52894, 169.28.164.236:80}[50%]&lt;BR/&gt;{195.8.33.253:52905, 169.28.164.236:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52905: (25%)&lt;BR/&gt; 52894: (25%)&gt;];
}
4214--4893[label="1;2pkt 2fpkt"];
4214--5190[label="1;2pkt 2fpkt"];
4893--5190[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.28.164.236" dst_port="80" src_ip="195.8.33.253" src_port="52905"/>
      <filter dst_ip="169.28.164.236" dst_port="80" src_ip="195.8.33.253" src_port="52894"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="144.224.65.3"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
990[label="195.81.113.164;d;1445pkt 1445fpkt", shape=diamond, color=yellow];
3954[label="213.12.13.193;147pkt 147fpkt", shape=pentagon, color=darkviolet];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.81.113.164:53}[99.7238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.1407%)&lt;BR/&gt; 32768: (1.16206%)&lt;BR/&gt; 32769: (0.659548%)&lt;BR/&gt; 1024: (0.376884%)&lt;BR/&gt; 33701: (0.345477%)&gt;];
}
990--1288[label="0.0119048;1pkt 1fpkt"];
990--1666[label="0.0263158;2pkt 2fpkt"];
990--2184[label="0.0117647;1pkt 1fpkt"];
990--2688[label="0.0263158;2pkt 2fpkt"];
990--2906[label="0.0719723;104pkt 104fpkt"];
990--2911[label="0.0083045;12pkt 12fpkt"];
990--2918[label="0.00899654;13pkt 13fpkt"];
990--2924[label="0.0083045;12pkt 12fpkt"];
990--2930[label="0.00899654;13pkt 13fpkt"];
990--2932[label="0.0083045;12pkt 12fpkt"];
990--2934[label="0.00899654;13pkt 13fpkt"];
990--2965[label="0.0172414;1pkt 1fpkt"];
990--3119[label="0.0185185;1pkt 1fpkt"];
990--3232[label="0.047619;2pkt 2fpkt"];
990--3251[label="0.04;2pkt 2fpkt"];
990--3402[label="0.0116279;1pkt 1fpkt"];
990--3488[label="0.0410959;3pkt 3fpkt"];
990--3521[label="0.025;2pkt 2fpkt"];
990--3602[label="0.0238095;1pkt 1fpkt"];
990--3954[label="0.979592;144pkt 144fpkt"];
990--4239[label="0.0175439;1pkt 1fpkt"];
990--4391[label="0.04;2pkt 2fpkt"];
990--4528[label="0.0416667;3pkt 3fpkt"];
990--4543[label="0.025;2pkt 2fpkt"];
990--4909[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.81.113.164" dst_port="53"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
4914[label="175.150.164.6;84pkt 84fpkt", shape=invhouse, color=bisque];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.150.164.6:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="175.150.164.6"/>
    </slice>
    <from sec="1109826082" usec="0"/>
    <to sec="1109826875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723605,1.7369,002,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
3077[label="192.8.86.21;219pkt 219fpkt", shape=pentagon, color=darkviolet];
4935[label="192.8.86.21;192pkt 192fpkt", shape=invhouse, color=bisque];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.8.86.21:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3077--4935[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.8.86.21" src_port="1029"/>
    </slice>
    <from sec="1109826110" usec="0"/>
    <to sec="1109826144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.216.234.21"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592902,1.75871,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
2030[label="144.224.85.22;s;13pkt 13fpkt", shape=diamond, color=yellow];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.85.22:*, 74.161.225.246:80}[30.7692%]&lt;BR/&gt;{144.224.85.22:*, 213.4.162.224:110}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 110: (11.5385%)&lt;BR/&gt; 1294: (3.84615%)&lt;BR/&gt; 1293: (3.84615%)&lt;BR/&gt; 1290: (3.84615%)&gt;];
}
2030--3087[label="1;13pkt 13fpkt"];
2030--4300[label="1;13pkt 13fpkt"];
2030--4938[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="74.161.225.246" dst_port="80" src_ip="144.224.85.22"/>
      <filter dst_ip="213.4.162.224" dst_port="110" src_ip="144.224.85.22"/>
    </slice>
    <from sec="1109826488" usec="0"/>
    <to sec="1109826813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.964939,1.59652,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
543[label="197.84.2.99;d;58pkt 58fpkt", shape=diamond, color=yellow];
710[label="144.39.46.92;s;394pkt 394fpkt", shape=diamond, color=yellow];
792[label="75.28.150.123;d;291pkt 291fpkt", shape=diamond, color=yellow];
1088[label="197.11.229.224;d;133pkt 133fpkt", shape=diamond, color=yellow];
1383[label="144.39.233.111;s;20pkt 20fpkt", shape=diamond, color=yellow];
1646[label="148.177.224.102;s;77pkt 77fpkt", shape=diamond, color=yellow];
1668[label="148.177.230.209;s;72pkt 72fpkt", shape=diamond, color=yellow];
1697[label="175.150.128.136;s;11pkt 11fpkt", shape=diamond, color=yellow];
2311[label="144.39.46.92;s;156pkt 156fpkt", shape=hexagon, color=black];
2996[label="148.177.194.9;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3113[label="148.177.200.26;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3471[label="144.39.46.93;105pkt 105fpkt", shape=pentagon, color=darkviolet];
3672[label="148.176.50.131;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3809[label="148.177.61.160;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4158[label="148.177.211.235;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4160[label="144.39.53.236;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4315[label="148.177.200.26;15pkt 15fpkt", shape=invtriangle, color=brown];
4946[label="148.177.200.26;16pkt 16fpkt", shape=invhouse, color=bisque];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.39.46.92:80, *:*}[32.6412%]&lt;BR/&gt;{*:80, 75.28.150.123:*}[24.1694%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.853%)&lt;BR/&gt; 25: (1.07352%)&lt;BR/&gt; 113: (0.422902%)&lt;BR/&gt; 53: (0.195185%)&lt;BR/&gt; 0: (0.195185%)&gt;];
}
543--613[label="0.0344828;2pkt 2fpkt"];
543--653[label="0.0344828;2pkt 2fpkt"];
543--710[label="0.0517241;3pkt 3fpkt"];
543--732[label="0.0517241;3pkt 3fpkt"];
543--738[label="0.025641;1pkt 1fpkt"];
543--1103[label="0.0576923;3pkt 3fpkt"];
543--1266[label="0.0517241;3pkt 3fpkt"];
543--1287[label="0.0178571;1pkt 1fpkt"];
543--1291[label="0.0517241;3pkt 3fpkt"];
543--1383[label="0.15;3pkt 3fpkt"];
543--1646[label="0.0517241;3pkt 3fpkt"];
543--1668[label="0.0517241;3pkt 3fpkt"];
543--2515[label="0.0517241;3pkt 3fpkt"];
543--2996[label="0.0535714;3pkt 3fpkt"];
543--3113[label="0.1875;3pkt 3fpkt"];
543--3471[label="0.0344828;2pkt 2fpkt"];
543--4158[label="0.0714286;2pkt 2fpkt"];
543--4160[label="0.04;2pkt 2fpkt"];
543--4315[label="0.2;3pkt 3fpkt"];
543--4946[label="0.1875;3pkt 3fpkt"];
710--792[label="0.202749;59pkt 59fpkt"];
710--1538[label="0.923077;12pkt 12fpkt"];
710--2311[label="1;156pkt 156fpkt"];
710--2912[label="0.0482234;19pkt 19fpkt"];
710--2919[label="0.0609137;24pkt 24fpkt"];
710--2925[label="0.0482234;19pkt 19fpkt"];
710--2931[label="0.0609137;24pkt 24fpkt"];
710--2933[label="0.0482234;19pkt 19fpkt"];
710--2935[label="0.0609137;24pkt 24fpkt"];
792--1266[label="0.260504;31pkt 31fpkt"];
792--1284[label="0.164948;48pkt 48fpkt"];
792--1291[label="0.112;28pkt 28fpkt"];
792--1301[label="0.338462;22pkt 22fpkt"];
792--1646[label="0.38961;30pkt 30fpkt"];
792--1668[label="0.333333;24pkt 24fpkt"];
792--2311[label="0.141026;22pkt 22fpkt"];
792--2558[label="0.338462;22pkt 22fpkt"];
792--2912[label="0.0687285;20pkt 20fpkt"];
792--2919[label="0.0618557;18pkt 18fpkt"];
792--2925[label="0.0687285;20pkt 20fpkt"];
792--2931[label="0.0618557;18pkt 18fpkt"];
792--2933[label="0.0687285;20pkt 20fpkt"];
792--2935[label="0.0618557;18pkt 18fpkt"];
1088--1287[label="0.0357143;2pkt 2fpkt"];
1088--1646[label="0.025974;2pkt 2fpkt"];
1088--1668[label="0.0277778;2pkt 2fpkt"];
1088--2143[label="0.02;1pkt 1fpkt"];
1088--2515[label="0.0208333;2pkt 2fpkt"];
1088--2552[label="0.0555556;2pkt 2fpkt"];
1088--2603[label="0.0190476;2pkt 2fpkt"];
1088--2912[label="0.0150376;2pkt 2fpkt"];
1088--2919[label="0.0902256;12pkt 12fpkt"];
1088--2925[label="0.0150376;2pkt 2fpkt"];
1088--2931[label="0.0902256;12pkt 12fpkt"];
1088--2933[label="0.0150376;2pkt 2fpkt"];
1088--2935[label="0.0902256;12pkt 12fpkt"];
1088--3113[label="0.125;2pkt 2fpkt"];
1088--3114[label="0.0740741;2pkt 2fpkt"];
1088--3672[label="0.125;2pkt 2fpkt"];
1088--3699[label="0.111111;2pkt 2fpkt"];
1088--3802[label="0.0487805;2pkt 2fpkt"];
1088--3809[label="0.0434783;1pkt 1fpkt"];
1088--3865[label="0.0869565;2pkt 2fpkt"];
1088--4315[label="0.0666667;1pkt 1fpkt"];
1088--4316[label="0.0740741;2pkt 2fpkt"];
1088--4413[label="0.0150376;2pkt 2fpkt"];
1088--4698[label="0.0487805;2pkt 2fpkt"];
1088--4729[label="0.0869565;2pkt 2fpkt"];
1088--4946[label="0.125;2pkt 2fpkt"];
1088--5110[label="0.0487805;2pkt 2fpkt"];
1088--5124[label="0.0869565;2pkt 2fpkt"];
1383--1541[label="0.4375;7pkt 7fpkt"];
1383--2919[label="0.15;3pkt 3fpkt"];
1383--2931[label="0.15;3pkt 3fpkt"];
1383--2935[label="0.15;3pkt 3fpkt"];
1646--1854[label="0.3;3pkt 3fpkt"];
1646--2912[label="0.038961;3pkt 3fpkt"];
1646--2919[label="0.0649351;5pkt 5fpkt"];
1646--2925[label="0.038961;3pkt 3fpkt"];
1646--2931[label="0.0649351;5pkt 5fpkt"];
1646--2933[label="0.038961;3pkt 3fpkt"];
1646--2935[label="0.0649351;5pkt 5fpkt"];
1668--2912[label="0.0416667;3pkt 3fpkt"];
1668--2919[label="0.0555556;4pkt 4fpkt"];
1668--2925[label="0.0416667;3pkt 3fpkt"];
1668--2931[label="0.0555556;4pkt 4fpkt"];
1668--2933[label="0.0416667;3pkt 3fpkt"];
1668--2935[label="0.0555556;4pkt 4fpkt"];
1697--1854[label="0.2;2pkt 2fpkt"];
1697--2919[label="0.454545;5pkt 5fpkt"];
1697--2931[label="0.454545;5pkt 5fpkt"];
1697--2935[label="0.454545;5pkt 5fpkt"];
2311--2912[label="0.121795;19pkt 19fpkt"];
2311--2919[label="0.00641026;1pkt 1fpkt"];
2311--2925[label="0.121795;19pkt 19fpkt"];
2311--2931[label="0.00641026;1pkt 1fpkt"];
2311--2933[label="0.121795;19pkt 19fpkt"];
2311--2935[label="0.00641026;1pkt 1fpkt"];
3113--4315[label="1;15pkt 15fpkt"];
3113--4946[label="1;16pkt 16fpkt"];
4315--4946[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="144.39.46.92" src_port="80"/>
      <filter dst_ip="75.28.150.123" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.169.133.32"/>
    </slice>
    <from sec="1109826352" usec="0"/>
    <to sec="1109826724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.230.163.50"/>
    </slice>
    <from sec="1109826418" usec="0"/>
    <to sec="1109826534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.66.103.51"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.113.49.52"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.108.201.57"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.193.146.58"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.161.109.59"/>
    </slice>
    <from sec="1109826132" usec="0"/>
    <to sec="1109826176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.106.183.71"/>
    </slice>
    <from sec="1109826013" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.22.74.80"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.165.0.89"/>
    </slice>
    <from sec="1109826001" usec="0"/>
    <to sec="1109826900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.11.62.89"/>
    </slice>
    <from sec="1109826005" usec="0"/>
    <to sec="1109826894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.503486,1.68193,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
1471[label="144.224.0.163;d;132pkt 132fpkt", shape=diamond, color=yellow];
2259[label="214.223.194.71;s;13pkt 13fpkt", shape=diamond, color=yellow];
3347[label="85.174.190.64;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.223.200.201:80, 144.224.0.163:*}[25.7576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5696%)&lt;BR/&gt; 443: (1.89873%)&lt;BR/&gt; 33446: (0.949367%)&lt;BR/&gt; 33450: (0.632911%)&lt;BR/&gt; 3483: (0.632911%)&gt;];
}
1471--1531[label="0.0566038;3pkt 3fpkt"];
1471--1621[label="0.0461538;3pkt 3fpkt"];
1471--2138[label="0.411765;14pkt 14fpkt"];
1471--2259[label="1;13pkt 13fpkt"];
1471--2776[label="0.30303;40pkt 40fpkt"];
1471--2796[label="0.0638298;3pkt 3fpkt"];
1471--2912[label="0.0227273;3pkt 3fpkt"];
1471--2919[label="0.0378788;5pkt 5fpkt"];
1471--2925[label="0.0227273;3pkt 3fpkt"];
1471--2931[label="0.0378788;5pkt 5fpkt"];
1471--2933[label="0.0227273;3pkt 3fpkt"];
1471--2935[label="0.0378788;5pkt 5fpkt"];
1471--3010[label="0.0151515;2pkt 2fpkt"];
1471--3347[label="1;13pkt 13fpkt"];
1471--3455[label="0.190476;4pkt 4fpkt"];
1471--4264[label="0.0151515;2pkt 2fpkt"];
1471--4509[label="0.190476;4pkt 4fpkt"];
1471--4920[label="0.0151515;2pkt 2fpkt"];
1471--5022[label="0.181818;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.0.163" src_ip="214.223.200.201" src_port="80"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.132.99.126"/>
    </slice>
    <from sec="1109826159" usec="0"/>
    <to sec="1109826186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.111.73.128"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.162.117.145"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821794,1.63733,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
1788[label="73.209.208.237;d;38pkt 38fpkt", shape=diamond, color=yellow];
1810[label="148.176.160.149;s;91pkt 91fpkt", shape=diamond, color=yellow];
3766[label="148.176.160.149;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4674[label="148.176.160.149;95pkt 95fpkt", shape=invtriangle, color=brown];
5096[label="148.176.160.149;94pkt 94fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.160.149:*, 73.209.208.210:80}[30.7692%]&lt;BR/&gt;{148.176.160.149:*, 73.209.208.237:80}[27.8846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5146%)&lt;BR/&gt; 32549: (0.606796%)&lt;BR/&gt; 32456: (0.606796%)&lt;BR/&gt; 31145: (0.606796%)&lt;BR/&gt; 13606: (0.606796%)&gt;];
}
1788--1810[label="0.763158;29pkt 29fpkt"];
1788--2261[label="0.105263;4pkt 4fpkt"];
1788--2499[label="0.0263158;1pkt 1fpkt"];
1788--2890[label="0.157895;6pkt 6fpkt"];
1788--3139[label="0.0263158;1pkt 1fpkt"];
1788--3504[label="0.184211;7pkt 7fpkt"];
1788--3766[label="0.763158;29pkt 29fpkt"];
1788--4332[label="0.0263158;1pkt 1fpkt"];
1788--4674[label="0.763158;29pkt 29fpkt"];
1788--5096[label="0.763158;29pkt 29fpkt"];
1810--2890[label="0.0659341;6pkt 6fpkt"];
1810--3766[label="0.989011;90pkt 90fpkt"];
1810--4674[label="1;91pkt 91fpkt"];
1810--5096[label="0.989011;90pkt 90fpkt"];
3766--4674[label="1;94pkt 94fpkt"];
3766--5096[label="1;94pkt 94fpkt"];
4674--5096[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="73.209.208.237" dst_port="80" src_ip="148.176.160.149"/>
      <filter dst_ip="73.209.208.210" dst_port="80" src_ip="148.176.160.149"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="175.150.166.149"/>
    </slice>
    <from sec="1109826121" usec="0"/>
    <to sec="1109826771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.44.76.163"/>
    </slice>
    <from sec="1109826719" usec="0"/>
    <to sec="1109826766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.201.215.164"/>
    </slice>
    <from sec="1109826002" usec="0"/>
    <to sec="1109826896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.231.40.167"/>
    </slice>
    <from sec="1109826900" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597229,1.64487,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
2189[label="23.24.200.66;d;70pkt 70fpkt", shape=diamond, color=yellow];
3151[label="169.28.30.33;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3229[label="148.177.57.46;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3431[label="148.177.70.84;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3957[label="148.177.36.193;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4655[label="148.177.48.144;6pkt 6fpkt", shape=invtriangle, color=brown];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 23.24.200.66:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4536%)&lt;BR/&gt; 59645: (1.54639%)&lt;BR/&gt; 59779: (1.03093%)&lt;BR/&gt; 59648: (1.03093%)&lt;BR/&gt; 59647: (1.03093%)&gt;];
}
2189--2202[label="0.037037;1pkt 1fpkt"];
2189--2206[label="0.181818;2pkt 2fpkt"];
2189--2296[label="0.0142857;1pkt 1fpkt"];
2189--2847[label="0.037037;1pkt 1fpkt"];
2189--2849[label="0.181818;2pkt 2fpkt"];
2189--3116[label="0.037037;1pkt 1fpkt"];
2189--3151[label="0.25;1pkt 1fpkt"];
2189--3216[label="0.166667;1pkt 1fpkt"];
2189--3345[label="0.0833333;2pkt 2fpkt"];
2189--3593[label="0.0142857;1pkt 1fpkt"];
2189--3605[label="0.833333;5pkt 5fpkt"];
2189--3731[label="0.571429;4pkt 4fpkt"];
2189--3790[label="0.0625;1pkt 1fpkt"];
2189--3840[label="0.2;1pkt 1fpkt"];
2189--3879[label="0.0571429;4pkt 4fpkt"];
2189--3957[label="0.8;4pkt 4fpkt"];
2189--4318[label="0.0357143;1pkt 1fpkt"];
2189--4580[label="0.0142857;1pkt 1fpkt"];
2189--4655[label="0.666667;4pkt 4fpkt"];
2189--4735[label="0.0571429;4pkt 4fpkt"];
2189--4813[label="0.0142857;1pkt 1fpkt"];
2189--5123[label="0.142857;1pkt 1fpkt"];
2189--5125[label="0.0571429;4pkt 4fpkt"];
2189--5155[label="0.0142857;1pkt 1fpkt"];
3229--4381[label="1;9pkt 9fpkt"];
3229--4965[label="1;9pkt 9fpkt"];
3431--4494[label="1;3pkt 3fpkt"];
3431--5013[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="23.24.200.66" dst_port="80"/>
    </slice>
    <from sec="1109826037" usec="0"/>
    <to sec="1109826882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.232.140.177"/>
    </slice>
    <from sec="1109826146" usec="0"/>
    <to sec="1109826209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.32.71.205"/>
    </slice>
    <from sec="1109826310" usec="0"/>
    <to sec="1109826375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.30.224.210"/>
    </slice>
    <from sec="1109826355" usec="0"/>
    <to sec="1109826876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.1.225.234"/>
    </slice>
    <from sec="1109826000" usec="0"/>
    <to sec="1109826901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788441,1.81135,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.0.241.235"/>
    </slice>
    <from sec="1109826166" usec="0"/>
    <to sec="1109826248" usec="0"/>
  </anomaly>

</admd:annotation>
