<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.86209,1.86095,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="135.69.21.123" dst_port="34549" proto="tcp" src_ip="193.219.196.111" src_port="25"/>
      <from sec="1112591651" usec="0"/>
      <to sec="1112591654" usec="0"/>
    </slice>
    <from sec="1112591651" usec="0"/>
    <to sec="1112591656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.126.164.131" dst_port="61107" proto="tcp" src_ip="209.19.98.131" src_port="62435"/>
      <from sec="1112591666" usec="0"/>
      <to sec="1112591682" usec="0"/>
    </slice>
    <from sec="1112591666" usec="0"/>
    <to sec="1112591682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.41.161.133" dst_port="80" proto="tcp" src_ip="211.58.238.94" src_port="80"/>
      <filter dst_ip="197.91.10.242" dst_port="80" proto="tcp" src_ip="211.58.238.94" src_port="80"/>
      <from sec="1112591234" usec="0"/>
      <to sec="1112591241" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="193.41.161.133" dst_port="80" proto="tcp" src_ip="135.68.54.107" src_port="80"/>
      <filter dst_ip="197.91.10.242" dst_port="80" proto="tcp" src_ip="135.68.54.107" src_port="80"/>
      <from sec="1112591234" usec="0"/>
      <to sec="1112591240" usec="0"/>
    </slice>
    <from sec="1112591234" usec="0"/>
    <to sec="1112591241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="18.225.72.112" src_port="80"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="18.225.72.112" src_port="80"/>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="18.225.72.112" src_port="443"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="18.225.72.112" src_port="443"/>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="18.225.72.112" src_port="52187"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="18.225.72.112" src_port="52187"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="18.225.72.112" src_port="80"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="18.225.72.112" src_port="80"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="18.225.72.112" src_port="443"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="18.225.72.112" src_port="443"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="18.225.72.112" src_port="52187"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="18.225.72.112" src_port="52187"/>
      <from sec="1112591651" usec="0"/>
      <to sec="1112591691" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="129.52.0.102" src_port="80"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="129.52.0.102" src_port="80"/>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="129.52.0.102" src_port="443"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="129.52.0.102" src_port="443"/>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="129.52.0.102" src_port="52187"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="129.52.0.102" src_port="52187"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="129.52.0.102" src_port="80"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="129.52.0.102" src_port="80"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="129.52.0.102" src_port="443"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="129.52.0.102" src_port="443"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="129.52.0.102" src_port="52187"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="129.52.0.102" src_port="52187"/>
      <from sec="1112591652" usec="0"/>
      <to sec="1112591658" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="135.69.148.113" src_port="80"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="135.69.148.113" src_port="80"/>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="135.69.148.113" src_port="443"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="135.69.148.113" src_port="443"/>
      <filter dst_ip="193.41.161.234" dst_port="1931" proto="tcp" src_ip="135.69.148.113" src_port="52187"/>
      <filter dst_ip="193.41.161.234" dst_port="1935" proto="tcp" src_ip="135.69.148.113" src_port="52187"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="135.69.148.113" src_port="80"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="135.69.148.113" src_port="80"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="135.69.148.113" src_port="443"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="135.69.148.113" src_port="443"/>
      <filter dst_ip="193.41.161.235" dst_port="1931" proto="tcp" src_ip="135.69.148.113" src_port="52187"/>
      <filter dst_ip="193.41.161.235" dst_port="1935" proto="tcp" src_ip="135.69.148.113" src_port="52187"/>
      <from sec="1112591651" usec="0"/>
      <to sec="1112591658" usec="0"/>
    </slice>
    <from sec="1112591651" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="99.92.186.44" dst_port="137" proto="tcp" src_ip="98.220.248.166" src_port="12111"/>
      <filter dst_ip="99.92.186.44" dst_port="137" proto="udp" src_ip="98.220.248.166" src_port="12111"/>
      <filter dst_ip="99.92.186.44" dst_port="80" proto="tcp" src_ip="98.220.248.166" src_port="12111"/>
      <filter dst_ip="99.92.186.44" dst_port="80" proto="udp" src_ip="98.220.248.166" src_port="12111"/>
      <from sec="1112591600" usec="0"/>
      <to sec="1112591610" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="99.92.186.44" dst_port="137" proto="tcp" src_ip="129.2.64.166" src_port="12111"/>
      <filter dst_ip="99.92.186.44" dst_port="137" proto="udp" src_ip="129.2.64.166" src_port="12111"/>
      <filter dst_ip="99.92.186.44" dst_port="80" proto="tcp" src_ip="129.2.64.166" src_port="12111"/>
      <filter dst_ip="99.92.186.44" dst_port="80" proto="udp" src_ip="129.2.64.166" src_port="12111"/>
      <from sec="1112591600" usec="0"/>
      <to sec="1112591612" usec="0"/>
    </slice>
    <from sec="1112591600" usec="0"/>
    <to sec="1112591612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="98.26.198.171" src_port="1030"/>
      <from sec="1112590980" usec="0"/>
      <to sec="1112590986" usec="0"/>
    </slice>
    <from sec="1112590980" usec="0"/>
    <to sec="1112590986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.60.210.177" src_port="63633"/>
      <from sec="1112591637" usec="0"/>
      <to sec="1112591645" usec="0"/>
    </slice>
    <from sec="1112591637" usec="0"/>
    <to sec="1112591645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="193.236.87.195" src_port="1028"/>
      <from sec="1112591674" usec="0"/>
      <to sec="1112591700" usec="0"/>
    </slice>
    <from sec="1112591674" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.236.87.195" proto="tcp"/>
      <filter dst_ip="193.236.87.195" proto="icmp"/>
      <filter dst_ip="193.236.87.195" proto="tcp"/>
      <filter dst_ip="193.236.87.195" proto="icmp"/>
      <filter dst_ip="193.236.87.195" proto="tcp"/>
      <filter dst_ip="193.236.87.195" proto="icmp"/>
      <filter dst_ip="193.236.87.195" proto="tcp"/>
      <filter dst_ip="193.236.87.195" proto="icmp"/>
      <from sec="1112591684" usec="0"/>
      <to sec="1112591695" usec="0"/>
    </slice>
    <from sec="1112591684" usec="0"/>
    <to sec="1112591695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86209,1.86095,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="99.32.203.232" proto="icmp"/>
      <filter dst_ip="99.32.203.232" proto="icmp"/>
      <filter dst_ip="99.32.203.232" proto="icmp"/>
      <filter dst_ip="99.32.203.232" proto="icmp"/>
      <from sec="1112591033" usec="0"/>
      <to sec="1112591039" usec="0"/>
    </slice>
    <from sec="1112591033" usec="0"/>
    <to sec="1112591039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987658,1.92233,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
117[label="135.69.32.253s;2pkt 2fpkt", shape=ellipse, color=green];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.32.253:1045, 96.227.225.175:80}[50%]&lt;BR/&gt;{135.69.32.253:1050, 96.227.225.175:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1050: (25%)&lt;BR/&gt; 1045: (25%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="96.227.225.175" dst_port="80" src_ip="135.69.32.253" src_port="1050"/>
      <filter dst_ip="96.227.225.175" dst_port="80" src_ip="135.69.32.253" src_port="1045"/>
    </slice>
    <from sec="1112591692" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.1883,1.84845,901,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
49[label="208.93.30.75s;212pkt 212fpkt", shape=rectangle, color=red];
127[label="208.93.30.75s;212pkt 212fpkt", shape=ellipse, color=green];
3435[label="208.93.30.75;215pkt 215fpkt", shape=pentagon, color=darkviolet];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.93.30.75:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
49--127[label="1;212pkt 212fpkt"];
49--3435[label="1;212pkt 212fpkt"];
127--3435[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.93.30.75" src_port="1029"/>
    </slice>
    <from sec="1112590822" usec="0"/>
    <to sec="1112590848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20269,1.89352,503,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
64[label="215.66.168.220s;1pkt 1fpkt", shape=rectangle, color=red];
134[label="215.66.168.220s;1pkt 1fpkt", shape=ellipse, color=green];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.24.220:2055, 23.74.5.79:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2055: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
64--134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.74.5.79" dst_port="80" src_ip="135.68.24.220" src_port="2055"/>
    </slice>
    <from sec="1112590893" usec="0"/>
    <to sec="1112590898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.1883,1.84845,010,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
69[label="193.96.176.1s;128pkt 128fpkt", shape=rectangle, color=red];
138[label="193.96.176.1s;128pkt 128fpkt", shape=ellipse, color=green];
3168[label="193.96.176.1;303pkt 303fpkt", shape=pentagon, color=darkviolet];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.96.176.1:*, *:445}[71.9472%]&lt;BR/&gt;{193.96.176.1:*, *:135}[28.0528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.3971%)&lt;BR/&gt; 135: (7.60286%)&lt;BR/&gt; 24825: (0.268336%)&lt;BR/&gt; 24824: (0.268336%)&lt;BR/&gt; 24823: (0.268336%)&gt;];
}
69--138[label="1;128pkt 128fpkt"];
69--3168[label="1;128pkt 128fpkt"];
138--3168[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="193.96.176.1"/>
      <filter dst_port="135" src_ip="193.96.176.1"/>
    </slice>
    <from sec="1112591182" usec="0"/>
    <to sec="1112591222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20269,1.89352,901,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
78[label="214.33.104.67s;339pkt 339fpkt", shape=rectangle, color=red];
146[label="214.33.104.67s;339pkt 339fpkt", shape=ellipse, color=green];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.33.104.67:*, *:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 4993: (0.147493%)&lt;BR/&gt; 4992: (0.147493%)&lt;BR/&gt; 4991: (0.147493%)&lt;BR/&gt; 4989: (0.147493%)&gt;];
}
78--146[label="1;339pkt 339fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="214.33.104.67"/>
    </slice>
    <from sec="1112591000" usec="0"/>
    <to sec="1112591002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04262,1.94124,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.126.164.131" dst_port="80" proto="tcp" src_ip="193.41.161.234"/>
      <filter dst_ip="144.126.164.131" dst_port="80" proto="tcp" src_ip="193.41.161.234"/>
      <filter dst_ip="144.126.164.131" dst_port="80" proto="tcp" src_ip="193.41.161.234"/>
      <filter dst_ip="144.126.164.131" dst_port="80" proto="tcp" src_ip="193.41.161.234"/>
      <from sec="1112590800" usec="0"/>
      <to sec="1112591674" usec="0"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
270[label="135.68.13.42;s;1753pkt 1753fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.13.42:24183, *:*}[96.4062%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24183: (48.2031%)&lt;BR/&gt; 443: (0.969766%)&lt;BR/&gt; 80: (0.827153%)&lt;BR/&gt; 54045: (0.11409%)&lt;BR/&gt; 10001: (0.0855676%)&gt;];
}
270--3126[label="0.00399315;7pkt 7fpkt"];
270--3130[label="0.00285225;5pkt 5fpkt"];
270--3135[label="0.0034227;6pkt 6fpkt"];
270--3140[label="0.00399315;7pkt 7fpkt"];
270--3142[label="0.00285225;5pkt 5fpkt"];
270--3147[label="0.0034227;6pkt 6fpkt"];
270--3150[label="0.00399315;7pkt 7fpkt"];
270--3152[label="0.00285225;5pkt 5fpkt"];
270--3157[label="0.0034227;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.13.42" src_port="24183"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
266[label="193.32.176.68;d;182pkt 182fpkt", shape=diamond, color=yellow];
268[label="195.44.232.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
296[label="211.219.175.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
305[label="194.16.118.18;s;3pkt 3fpkt", shape=diamond, color=yellow];
560[label="16.244.208.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
846[label="208.78.177.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
916[label="96.149.221.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
1292[label="98.142.242.189;s;2pkt 2fpkt", shape=diamond, color=yellow];
1348[label="200.97.224.61;s;3pkt 3fpkt", shape=diamond, color=yellow];
1680[label="23.204.141.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
1990[label="215.1.205.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
2012[label="3.116.23.153;s;2pkt 2fpkt", shape=diamond, color=yellow];
2068[label="209.63.172.225;s;8pkt 8fpkt", shape=diamond, color=yellow];
2309[label="195.44.232.52;s;1pkt 1fpkt", shape=hexagon, color=black];
2506[label="98.142.242.189;s;2pkt 2fpkt", shape=hexagon, color=black];
2550[label="194.16.118.18;s;2pkt 2fpkt", shape=hexagon, color=black];
2627[label="23.204.141.216;s;1pkt 1fpkt", shape=hexagon, color=black];
2655[label="193.32.176.68;d;148pkt 148fpkt", shape=hexagon, color=black];
2717[label="208.78.177.30;s;1pkt 1fpkt", shape=hexagon, color=black];
2752[label="96.149.221.125;s;1pkt 1fpkt", shape=hexagon, color=black];
3397[label="200.97.224.61;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3468[label="23.111.40.86;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4147[label="200.97.224.61;2pkt 2fpkt", shape=invtriangle, color=brown];
4180[label="23.111.40.86;3pkt 3fpkt", shape=invtriangle, color=brown];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.32.176.68:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6884: (8.57909%)&lt;BR/&gt; 6887: (7.64075%)&lt;BR/&gt; 6881: (6.83646%)&lt;BR/&gt; 6885: (5.63003%)&lt;BR/&gt; 6882: (2.81501%)&gt;];
}
266--268[label="1;1pkt 1fpkt"];
266--296[label="1;1pkt 1fpkt"];
266--305[label="1;3pkt 3fpkt"];
266--560[label="1;1pkt 1fpkt"];
266--846[label="1;1pkt 1fpkt"];
266--916[label="1;1pkt 1fpkt"];
266--1292[label="1;2pkt 2fpkt"];
266--1348[label="1;3pkt 3fpkt"];
266--1680[label="1;1pkt 1fpkt"];
266--1990[label="1;1pkt 1fpkt"];
266--2012[label="1;2pkt 2fpkt"];
266--2068[label="1;8pkt 8fpkt"];
266--2309[label="1;1pkt 1fpkt"];
266--2506[label="1;2pkt 2fpkt"];
266--2550[label="1;2pkt 2fpkt"];
266--2627[label="1;1pkt 1fpkt"];
266--2655[label="1;148pkt 148fpkt"];
266--2717[label="1;1pkt 1fpkt"];
266--2752[label="1;1pkt 1fpkt"];
266--3397[label="1;3pkt 3fpkt"];
266--3400[label="0.00549451;1pkt 1fpkt"];
266--3468[label="0.5;1pkt 1fpkt"];
266--3510[label="0.00549451;1pkt 1fpkt"];
266--4147[label="1;2pkt 2fpkt"];
266--4180[label="0.666667;2pkt 2fpkt"];
266--4195[label="0.00549451;1pkt 1fpkt"];
266--4514[label="0.00549451;1pkt 1fpkt"];
268--2309[label="1;1pkt 1fpkt"];
268--2655[label="1;1pkt 1fpkt"];
296--2655[label="1;1pkt 1fpkt"];
305--2550[label="1;2pkt 2fpkt"];
305--2655[label="0.666667;2pkt 2fpkt"];
560--2655[label="1;1pkt 1fpkt"];
846--2655[label="1;1pkt 1fpkt"];
846--2717[label="1;1pkt 1fpkt"];
916--2655[label="1;1pkt 1fpkt"];
916--2752[label="1;1pkt 1fpkt"];
1292--2506[label="1;2pkt 2fpkt"];
1292--2655[label="1;2pkt 2fpkt"];
1348--2655[label="1;3pkt 3fpkt"];
1348--3397[label="1;3pkt 3fpkt"];
1348--4147[label="1;2pkt 2fpkt"];
1680--2627[label="1;1pkt 1fpkt"];
1680--2655[label="1;1pkt 1fpkt"];
1990--2655[label="1;1pkt 1fpkt"];
2012--2655[label="1;2pkt 2fpkt"];
2068--2655[label="0.25;2pkt 2fpkt"];
2309--2655[label="1;1pkt 1fpkt"];
2506--2655[label="1;2pkt 2fpkt"];
2550--2655[label="1;2pkt 2fpkt"];
2627--2655[label="1;1pkt 1fpkt"];
2655--2717[label="1;1pkt 1fpkt"];
2655--2752[label="1;1pkt 1fpkt"];
2655--3397[label="1;3pkt 3fpkt"];
2655--3468[label="0.5;1pkt 1fpkt"];
2655--3510[label="0.00675676;1pkt 1fpkt"];
2655--4147[label="1;2pkt 2fpkt"];
2655--4180[label="0.666667;2pkt 2fpkt"];
2655--4195[label="0.00675676;1pkt 1fpkt"];
2655--4514[label="0.00675676;1pkt 1fpkt"];
3397--4147[label="1;2pkt 2fpkt"];
3468--4180[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.32.176.68"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
314[label="162.94.169.22;d;3pkt 3fpkt", shape=diamond, color=yellow];
315[label="211.64.40.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.64.40.119:20192, 162.94.169.22:2881}[33.3333%]&lt;BR/&gt;{217.86.123.240:80, 162.94.169.22:3081}[33.3333%]&lt;BR/&gt;{217.86.123.240:80, 162.94.169.22:3082}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20192: (25%)&lt;BR/&gt; 2881: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 3082: (12.5%)&lt;BR/&gt; 3081: (12.5%)&gt;];
}
314--315[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.169.22" dst_port="3082" src_ip="217.86.123.240" src_port="80"/>
      <filter dst_ip="162.94.169.22" dst_port="3081" src_ip="217.86.123.240" src_port="80"/>
      <filter dst_ip="162.94.169.22" dst_port="2881" src_ip="211.64.40.119" src_port="20192"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
340[label="198.41.163.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
341[label="135.68.234.124;s;11pkt 11fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.234.124:*, *:7001}[27.2727%]&lt;BR/&gt;{135.68.234.124:*, 16.66.118.45:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7001: (12.5%)&lt;BR/&gt; 8004: (8.33333%)&lt;BR/&gt; 1558: (8.33333%)&lt;BR/&gt; 1043: (8.33333%)&lt;BR/&gt; 443: (8.33333%)&gt;];
}
340--341[label="1;1pkt 1fpkt"];
341--882[label="0.0909091;1pkt 1fpkt"];
341--992[label="0.181818;2pkt 2fpkt"];
341--1500[label="0.0909091;1pkt 1fpkt"];
341--1553[label="0.0909091;1pkt 1fpkt"];
341--2581[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.66.118.45" src_ip="135.68.234.124"/>
      <filter dst_port="7001" src_ip="135.68.234.124"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918341,1.6998,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
0[label="101.73.22.4s;1pkt 1fpkt", shape=rectangle, color=red];
27[label="97.157.138.191s;1pkt 1fpkt", shape=rectangle, color=red];
301[label="144.126.128.160;d;14pkt 14fpkt", shape=diamond, color=yellow];
302[label="208.77.151.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
347[label="97.157.138.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
1122[label="210.170.245.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
1744[label="101.73.22.4;s;3pkt 3fpkt", shape=diamond, color=yellow];
2351[label="208.77.151.39;s;1pkt 1fpkt", shape=hexagon, color=black];
2448[label="97.157.138.191;s;1pkt 1fpkt", shape=hexagon, color=black];
3174[label="101.73.22.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.69.225.126:80, 144.126.128.160:*}[50%]&lt;BR/&gt;{101.73.22.4:*, 144.126.128.160:49423}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49423: (36.5385%)&lt;BR/&gt; 80: (13.4615%)&lt;BR/&gt; 1853: (7.69231%)&lt;BR/&gt; 3637: (5.76923%)&lt;BR/&gt; 2841: (5.76923%)&gt;];
}
0--301[label="1;1pkt 1fpkt"];
0--1744[label="1;1pkt 1fpkt"];
27--301[label="1;1pkt 1fpkt"];
27--347[label="1;1pkt 1fpkt"];
27--2448[label="1;1pkt 1fpkt"];
301--302[label="1;1pkt 1fpkt"];
301--347[label="1;1pkt 1fpkt"];
301--418[label="0.5;7pkt 7fpkt"];
301--1122[label="1;1pkt 1fpkt"];
301--1744[label="1;3pkt 3fpkt"];
301--2321[label="0.142857;2pkt 2fpkt"];
301--2351[label="1;1pkt 1fpkt"];
301--2448[label="1;1pkt 1fpkt"];
301--3135[label="0.0714286;1pkt 1fpkt"];
301--3147[label="0.0714286;1pkt 1fpkt"];
301--3157[label="0.0714286;1pkt 1fpkt"];
301--3174[label="1;2pkt 2fpkt"];
302--2351[label="1;1pkt 1fpkt"];
347--2448[label="1;1pkt 1fpkt"];
1744--3174[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.128.160" src_ip="211.69.225.126" src_port="80"/>
      <filter dst_ip="144.126.128.160" dst_port="49423" src_ip="101.73.22.4"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.78.218.93"/>
      <from sec="1112590803" usec="0"/>
      <to sec="1112590906" usec="0"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112590906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
411[label="135.68.88.201;s;89pkt 89fpkt", shape=diamond, color=yellow];
486[label="220.154.236.253;d;4pkt 4fpkt", shape=diamond, color=yellow];
2838[label="135.68.88.201;s;89pkt 89fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.88.201:*, 93.104.215.31:80}[26.9663%]&lt;BR/&gt;{135.68.88.201:*, 25.159.121.36:80}[25.8427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2527%)&lt;BR/&gt; 36805: (0.824176%)&lt;BR/&gt; 36804: (0.824176%)&lt;BR/&gt; 36803: (0.824176%)&lt;BR/&gt; 36802: (0.824176%)&gt;];
}
411--486[label="1;4pkt 4fpkt"];
411--496[label="0.0449438;4pkt 4fpkt"];
411--2133[label="0.0227273;1pkt 1fpkt"];
411--2838[label="1;89pkt 89fpkt"];
411--3127[label="0.0224719;2pkt 2fpkt"];
486--2838[label="1;4pkt 4fpkt"];
2838--3127[label="0.0224719;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="93.104.215.31" dst_port="80" src_ip="135.68.88.201"/>
      <filter dst_ip="25.159.121.36" dst_port="80" src_ip="135.68.88.201"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936893,1.74871,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
14[label="192.65.184.113s;1pkt 1fpkt", shape=rectangle, color=red];
487[label="196.34.85.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
488[label="192.65.184.113;s;84pkt 84fpkt", shape=diamond, color=yellow];
2425[label="192.65.184.113;s;43pkt 43fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.184.113:*, 196.34.91.106:80}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9231%)&lt;BR/&gt; 22: (2.69231%)&lt;BR/&gt; 1722: (1.53846%)&lt;BR/&gt; 1813: (0.769231%)&lt;BR/&gt; 1804: (0.769231%)&gt;];
}
14--487[label="1;1pkt 1fpkt"];
14--488[label="1;1pkt 1fpkt"];
14--2425[label="1;1pkt 1fpkt"];
487--488[label="0.5;1pkt 1fpkt"];
487--2425[label="0.5;1pkt 1fpkt"];
488--2425[label="1;43pkt 43fpkt"];
488--3127[label="0.0119048;1pkt 1fpkt"];
2425--3127[label="0.0232558;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.34.91.106" dst_port="80" src_ip="192.65.184.113"/>
    </slice>
    <from sec="1112590878" usec="0"/>
    <to sec="1112591331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
525[label="96.201.49.156;s;1220pkt 1220fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.201.49.156:0, *:0}[84.7541%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (84.7541%)&lt;BR/&gt; 1433: (5.53279%)&lt;BR/&gt; 139: (1.84426%)&lt;BR/&gt; 137: (0.491803%)&lt;BR/&gt; 4718: (0.0819672%)&gt;];
}
525--3124[label="0.00901639;11pkt 11fpkt"];
525--3128[label="0.0114754;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="96.201.49.156"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
564[label="192.178.109.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
565[label="135.68.117.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.117.28:62940, 192.178.109.210:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62940: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
564--565[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.178.109.210" dst_port="554" src_ip="135.68.117.28" src_port="62940"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
587[label="198.41.65.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
588[label="162.94.16.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
2373[label="162.94.16.88;s;1pkt 1fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.16.88:49183, 198.41.65.241:5190}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49183: (50%)&lt;BR/&gt; 5190: (50%)&gt;];
}
587--588[label="1;1pkt 1fpkt"];
587--2373[label="1;1pkt 1fpkt"];
588--2373[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.41.65.241" dst_port="5190" src_ip="162.94.16.88" src_port="49183"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
387[label="162.94.193.11;s;18pkt 18fpkt", shape=diamond, color=yellow];
596[label="16.148.97.216;d;12pkt 12fpkt", shape=diamond, color=yellow];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.193.11:*, 16.148.97.216:80}[66.6667%]&lt;BR/&gt;{162.94.193.11:*, 16.148.97.218:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4246: (3.33333%)&lt;BR/&gt; 4245: (3.33333%)&lt;BR/&gt; 4243: (3.33333%)&lt;BR/&gt; 4242: (3.33333%)&gt;];
}
387--596[label="1;12pkt 12fpkt"];
387--3127[label="0.222222;4pkt 4fpkt"];
596--3127[label="0.333333;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="16.148.97.216" dst_port="80" src_ip="162.94.193.11"/>
      <filter dst_ip="16.148.97.218" dst_port="80" src_ip="162.94.193.11"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936893,1.74871,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
8[label="193.32.176.68s;2pkt 2fpkt", shape=rectangle, color=red];
267[label="193.32.176.68;s;169pkt 169fpkt", shape=diamond, color=yellow];
559[label="16.244.208.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
667[label="23.130.229.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
847[label="18.116.82.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
999[label="211.219.175.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
1019[label="98.142.242.189;d;2pkt 2fpkt", shape=diamond, color=yellow];
1059[label="23.196.136.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
1070[label="23.153.121.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
1276[label="195.44.232.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
1282[label="194.16.118.18;d;3pkt 3fpkt", shape=diamond, color=yellow];
1529[label="70.234.179.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1565[label="70.26.188.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
1677[label="20.239.148.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
1831[label="0.84.117.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
2002[label="0.134.69.35;d;3pkt 3fpkt", shape=diamond, color=yellow];
2011[label="3.116.23.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
2180[label="70.79.135.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
2197[label="23.232.93.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
2998[label="0.134.69.35;d;3pkt 3fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:*, *:6881}[36.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (18.3417%)&lt;BR/&gt; 6882: (2.01005%)&lt;BR/&gt; 27274: (1.25628%)&lt;BR/&gt; 15001: (1.00503%)&lt;BR/&gt; 8882: (1.00503%)&gt;];
}
8--267[label="1;2pkt 2fpkt"];
8--559[label="1;1pkt 1fpkt"];
8--667[label="0.5;1pkt 1fpkt"];
267--443[label="1;1pkt 1fpkt"];
267--559[label="1;1pkt 1fpkt"];
267--667[label="1;2pkt 2fpkt"];
267--847[label="1;1pkt 1fpkt"];
267--999[label="1;1pkt 1fpkt"];
267--1019[label="1;2pkt 2fpkt"];
267--1059[label="1;1pkt 1fpkt"];
267--1070[label="1;2pkt 2fpkt"];
267--1112[label="1;1pkt 1fpkt"];
267--1276[label="1;1pkt 1fpkt"];
267--1282[label="0.666667;2pkt 2fpkt"];
267--1358[label="1;2pkt 2fpkt"];
267--1428[label="1;1pkt 1fpkt"];
267--1527[label="1;2pkt 2fpkt"];
267--1529[label="1;1pkt 1fpkt"];
267--1565[label="1;1pkt 1fpkt"];
267--1614[label="1;1pkt 1fpkt"];
267--1677[label="1;1pkt 1fpkt"];
267--1679[label="1;1pkt 1fpkt"];
267--1789[label="1;3pkt 3fpkt"];
267--1814[label="1;1pkt 1fpkt"];
267--1831[label="1;1pkt 1fpkt"];
267--1989[label="1;1pkt 1fpkt"];
267--2002[label="1;3pkt 3fpkt"];
267--2011[label="1;2pkt 2fpkt"];
267--2180[label="1;1pkt 1fpkt"];
267--2194[label="1;1pkt 1fpkt"];
267--2197[label="1;1pkt 1fpkt"];
267--2727[label="1;1pkt 1fpkt"];
267--2762[label="1;1pkt 1fpkt"];
267--2869[label="1;1pkt 1fpkt"];
267--2874[label="1;1pkt 1fpkt"];
267--2883[label="1;1pkt 1fpkt"];
267--2941[label="1;2pkt 2fpkt"];
267--2963[label="1;3pkt 3fpkt"];
267--2973[label="1;2pkt 2fpkt"];
267--2975[label="1;1pkt 1fpkt"];
267--2985[label="1;1pkt 1fpkt"];
267--2998[label="1;3pkt 3fpkt"];
267--3022[label="1;1pkt 1fpkt"];
2002--2998[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="6881" src_ip="193.32.176.68"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
1687[label="220.177.160.133;d;21pkt 21fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.90.211:*, 220.177.160.133:21}[76.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (38.0952%)&lt;BR/&gt; 64065: (2.38095%)&lt;BR/&gt; 54967: (2.38095%)&lt;BR/&gt; 48374: (2.38095%)&lt;BR/&gt; 36524: (2.38095%)&gt;];
}
1687--3901[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="220.177.160.133" dst_port="21" src_ip="135.68.90.211"/>
    </slice>
    <from sec="1112591152" usec="0"/>
    <to sec="1112591549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.217.78.56"/>
      <from sec="1112590800" usec="0"/>
      <to sec="1112591628" usec="0"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
577[label="203.66.228.57;d;2pkt 2fpkt", shape=diamond, color=yellow];
579[label="192.65.179.79;s;274pkt 274fpkt", shape=diamond, color=yellow];
1085[label="192.161.92.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
2084[label="214.32.39.137;d;3pkt 3fpkt", shape=diamond, color=yellow];
2111[label="221.227.157.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
2177[label="16.229.22.52;d;140pkt 140fpkt", shape=diamond, color=yellow];
2683[label="192.65.179.79;s;238pkt 238fpkt", shape=hexagon, color=black];
3449[label="192.65.179.79;295pkt 295fpkt", shape=pentagon, color=darkviolet];
3507[label="135.68.226.96;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3895[label="135.69.179.209;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4171[label="192.65.179.79;294pkt 294fpkt", shape=invtriangle, color=brown];
4369[label="135.69.179.209;23pkt 23fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.179.79:80, *:*}[38.4454%]&lt;BR/&gt;{*:80, 16.229.22.52:*}[22.6891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.4033%)&lt;BR/&gt; 53: (15.3729%)&lt;BR/&gt; 0: (5.85997%)&lt;BR/&gt; 4753: (5.74581%)&lt;BR/&gt; 25: (1.21766%)&gt;];
}
577--579[label="0.5;1pkt 1fpkt"];
577--866[label="0.5;1pkt 1fpkt"];
577--2465[label="0.5;1pkt 1fpkt"];
577--2683[label="0.5;1pkt 1fpkt"];
577--3449[label="0.5;1pkt 1fpkt"];
577--4171[label="0.5;1pkt 1fpkt"];
579--727[label="0.333333;1pkt 1fpkt"];
579--1085[label="1;1pkt 1fpkt"];
579--1525[label="0.0125;1pkt 1fpkt"];
579--1947[label="0.025;1pkt 1fpkt"];
579--2084[label="0.666667;2pkt 2fpkt"];
579--2111[label="1;1pkt 1fpkt"];
579--2177[label="0.0142857;2pkt 2fpkt"];
579--2683[label="1;238pkt 238fpkt"];
579--3125[label="0.00364964;1pkt 1fpkt"];
579--3126[label="0.040146;11pkt 11fpkt"];
579--3130[label="0.0255474;7pkt 7fpkt"];
579--3134[label="0.00364964;1pkt 1fpkt"];
579--3135[label="0.0364964;10pkt 10fpkt"];
579--3137[label="0.00729927;2pkt 2fpkt"];
579--3139[label="0.00364964;1pkt 1fpkt"];
579--3140[label="0.040146;11pkt 11fpkt"];
579--3142[label="0.0255474;7pkt 7fpkt"];
579--3146[label="0.00364964;1pkt 1fpkt"];
579--3147[label="0.0364964;10pkt 10fpkt"];
579--3149[label="0.00364964;1pkt 1fpkt"];
579--3150[label="0.040146;11pkt 11fpkt"];
579--3152[label="0.0255474;7pkt 7fpkt"];
579--3156[label="0.00364964;1pkt 1fpkt"];
579--3157[label="0.0364964;10pkt 10fpkt"];
579--3449[label="0.99635;273pkt 273fpkt"];
579--4171[label="0.992701;272pkt 272fpkt"];
1085--2683[label="1;1pkt 1fpkt"];
1085--3449[label="1;1pkt 1fpkt"];
1085--4171[label="1;1pkt 1fpkt"];
2084--3130[label="0.333333;1pkt 1fpkt"];
2084--3135[label="0.333333;1pkt 1fpkt"];
2084--3142[label="0.333333;1pkt 1fpkt"];
2084--3147[label="0.333333;1pkt 1fpkt"];
2084--3152[label="0.333333;1pkt 1fpkt"];
2084--3157[label="0.333333;1pkt 1fpkt"];
2084--3449[label="0.666667;2pkt 2fpkt"];
2084--4171[label="0.666667;2pkt 2fpkt"];
2111--2683[label="1;1pkt 1fpkt"];
2111--3449[label="1;1pkt 1fpkt"];
2111--4171[label="1;1pkt 1fpkt"];
2177--2220[label="0.166667;1pkt 1fpkt"];
2177--2278[label="0.00714286;1pkt 1fpkt"];
2177--2317[label="0.114286;16pkt 16fpkt"];
2177--2360[label="0.00714286;1pkt 1fpkt"];
2177--2374[label="0.0434783;2pkt 2fpkt"];
2177--2375[label="0.00714286;1pkt 1fpkt"];
2177--2458[label="0.00714286;1pkt 1fpkt"];
2177--2683[label="0.0142857;2pkt 2fpkt"];
2177--2729[label="0.04;3pkt 3fpkt"];
2177--2825[label="0.00714286;1pkt 1fpkt"];
2177--2830[label="0.0285714;4pkt 4fpkt"];
2177--2860[label="0.0214286;3pkt 3fpkt"];
2177--2967[label="0.00714286;1pkt 1fpkt"];
2177--2990[label="0.05;1pkt 1fpkt"];
2177--3006[label="0.00714286;1pkt 1fpkt"];
2177--3125[label="0.0142857;2pkt 2fpkt"];
2177--3126[label="0.0571429;8pkt 8fpkt"];
2177--3130[label="0.0571429;8pkt 8fpkt"];
2177--3134[label="0.00714286;1pkt 1fpkt"];
2177--3135[label="0.0642857;9pkt 9fpkt"];
2177--3139[label="0.0142857;2pkt 2fpkt"];
2177--3140[label="0.0571429;8pkt 8fpkt"];
2177--3142[label="0.0571429;8pkt 8fpkt"];
2177--3146[label="0.00714286;1pkt 1fpkt"];
2177--3147[label="0.0642857;9pkt 9fpkt"];
2177--3149[label="0.0142857;2pkt 2fpkt"];
2177--3150[label="0.0571429;8pkt 8fpkt"];
2177--3152[label="0.0571429;8pkt 8fpkt"];
2177--3156[label="0.00714286;1pkt 1fpkt"];
2177--3157[label="0.0642857;9pkt 9fpkt"];
2177--3218[label="0.0214286;3pkt 3fpkt"];
2177--3264[label="0.00714286;1pkt 1fpkt"];
2177--3320[label="0.0666667;4pkt 4fpkt"];
2177--3449[label="0.0142857;2pkt 2fpkt"];
2177--3498[label="0.00714286;1pkt 1fpkt"];
2177--3507[label="0.1;2pkt 2fpkt"];
2177--3559[label="0.037037;1pkt 1fpkt"];
2177--3677[label="0.0222222;1pkt 1fpkt"];
2177--3741[label="0.037037;1pkt 1fpkt"];
2177--3895[label="0.0434783;1pkt 1fpkt"];
2177--3959[label="0.00714286;1pkt 1fpkt"];
2177--4025[label="0.0526316;1pkt 1fpkt"];
2177--4107[label="0.0655738;4pkt 4fpkt"];
2177--4171[label="0.0142857;2pkt 2fpkt"];
2177--4190[label="0.00714286;1pkt 1fpkt"];
2177--4369[label="0.0434783;1pkt 1fpkt"];
2177--4393[label="0.00714286;1pkt 1fpkt"];
2177--4451[label="0.00714286;1pkt 1fpkt"];
2683--3125[label="0.00420168;1pkt 1fpkt"];
2683--3126[label="0.0462185;11pkt 11fpkt"];
2683--3137[label="0.00840336;2pkt 2fpkt"];
2683--3139[label="0.00420168;1pkt 1fpkt"];
2683--3140[label="0.0462185;11pkt 11fpkt"];
2683--3149[label="0.00420168;1pkt 1fpkt"];
2683--3150[label="0.0462185;11pkt 11fpkt"];
2683--3449[label="0.995798;237pkt 237fpkt"];
2683--4171[label="0.991597;236pkt 236fpkt"];
3449--4171[label="1;294pkt 294fpkt"];
3895--4369[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.179.79" src_port="80"/>
      <filter dst_ip="16.229.22.52" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
475[label="202.100.203.46;d;81pkt 81fpkt", shape=diamond, color=yellow];
906[label="135.68.57.80;s;351pkt 351fpkt", shape=diamond, color=yellow];
1510[label="211.58.236.176;d;25pkt 25fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.57.80:80, *:*}[55.2%]&lt;BR/&gt;{135.68.57.80:*, 202.100.203.46:443}[24.2667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.477%)&lt;BR/&gt; 443: (19.256%)&lt;BR/&gt; 5050: (2.51641%)&lt;BR/&gt; 0: (0.875274%)&lt;BR/&gt; 1863: (0.547046%)&gt;];
}
475--906[label="1;81pkt 81fpkt"];
906--1510[label="0.04;1pkt 1fpkt"];
906--1609[label="0.00943396;1pkt 1fpkt"];
906--1847[label="0.0277778;1pkt 1fpkt"];
906--2770[label="0.0277778;1pkt 1fpkt"];
906--3126[label="0.002849;1pkt 1fpkt"];
906--3127[label="0.00854701;3pkt 3fpkt"];
906--3130[label="0.019943;7pkt 7fpkt"];
906--3135[label="0.019943;7pkt 7fpkt"];
906--3138[label="0.002849;1pkt 1fpkt"];
906--3140[label="0.002849;1pkt 1fpkt"];
906--3142[label="0.019943;7pkt 7fpkt"];
906--3147[label="0.019943;7pkt 7fpkt"];
906--3150[label="0.002849;1pkt 1fpkt"];
906--3152[label="0.019943;7pkt 7fpkt"];
906--3157[label="0.019943;7pkt 7fpkt"];
1510--1546[label="0.04;1pkt 1fpkt"];
1510--3288[label="0.0769231;1pkt 1fpkt"];
1510--3717[label="0.04;1pkt 1fpkt"];
1510--4283[label="0.04;1pkt 1fpkt"];
1510--4554[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.57.80" src_port="80"/>
      <filter dst_ip="202.100.203.46" dst_port="443" src_ip="135.68.57.80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
698[label="129.141.178.43;s;5pkt 5fpkt", shape=diamond, color=yellow];
923[label="0.86.51.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.141.178.43:1069, 197.91.13.5:1863}[20%]&lt;BR/&gt;{129.141.178.43:1104, 16.78.180.20:5190}[20%]&lt;BR/&gt;{129.141.178.43:2032, 197.91.8.110:1863}[20%]&lt;BR/&gt;{129.141.178.43:2021, 0.86.51.144:6698}[20%]&lt;BR/&gt;{129.141.178.43:1098, 198.41.42.176:5190}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6698: (16.6667%)&lt;BR/&gt; 5190: (16.6667%)&lt;BR/&gt; 2021: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 2032: (8.33333%)&gt;];
}
698--923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.41.42.176" dst_port="5190" src_ip="129.141.178.43" src_port="1098"/>
      <filter dst_ip="0.86.51.144" dst_port="6698" src_ip="129.141.178.43" src_port="2021"/>
      <filter dst_ip="197.91.8.110" dst_port="1863" src_ip="129.141.178.43" src_port="2032"/>
      <filter dst_ip="16.78.180.20" dst_port="5190" src_ip="129.141.178.43" src_port="1104"/>
      <filter dst_ip="197.91.13.5" dst_port="1863" src_ip="129.141.178.43" src_port="1069"/>
    </slice>
    <from sec="1112590816" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916178,1.78744,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
527[label="135.68.24.128;s;106pkt 106fpkt", shape=diamond, color=yellow];
1001[label="220.95.28.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1791[label="16.78.183.116;d;79pkt 79fpkt", shape=diamond, color=yellow];
2664[label="135.68.24.128;s;106pkt 106fpkt", shape=hexagon, color=black];
2851[label="16.78.183.116;d;79pkt 79fpkt", shape=hexagon, color=black];
4531[label="135.68.24.128;106pkt 106fpkt", shape=invhouse, color=bisque];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.24.128:*, *:80}[54.8913%]&lt;BR/&gt;{135.68.16.225:*, 16.78.183.116:80}[40.7609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1132%)&lt;BR/&gt; 443: (1.88679%)&lt;BR/&gt; 1508: (0.838574%)&lt;BR/&gt; 1512: (0.628931%)&lt;BR/&gt; 1511: (0.628931%)&gt;];
}
527--676[label="0.00943396;1pkt 1fpkt"];
527--1001[label="1;1pkt 1fpkt"];
527--1791[label="0.0253165;2pkt 2fpkt"];
527--1843[label="0.027027;1pkt 1fpkt"];
527--2664[label="1;106pkt 106fpkt"];
527--2851[label="0.0253165;2pkt 2fpkt"];
527--3127[label="0.0283019;3pkt 3fpkt"];
527--3138[label="0.0566038;6pkt 6fpkt"];
527--4531[label="0.990566;105pkt 105fpkt"];
1001--2664[label="1;1pkt 1fpkt"];
1001--3127[label="1;1pkt 1fpkt"];
1001--3138[label="1;1pkt 1fpkt"];
1001--4531[label="1;1pkt 1fpkt"];
1791--2135[label="0.05;2pkt 2fpkt"];
1791--2342[label="0.911392;72pkt 72fpkt"];
1791--2664[label="0.0253165;2pkt 2fpkt"];
1791--2851[label="1;79pkt 79fpkt"];
1791--3127[label="0.0506329;4pkt 4fpkt"];
1791--3138[label="0.0379747;3pkt 3fpkt"];
1791--4531[label="0.0253165;2pkt 2fpkt"];
2664--2851[label="0.0253165;2pkt 2fpkt"];
2664--3127[label="0.0283019;3pkt 3fpkt"];
2664--3138[label="0.0566038;6pkt 6fpkt"];
2664--4531[label="0.990566;105pkt 105fpkt"];
2851--3127[label="0.0506329;4pkt 4fpkt"];
2851--3138[label="0.0379747;3pkt 3fpkt"];
2851--4531[label="0.0253165;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="135.68.24.128"/>
      <filter dst_ip="16.78.183.116" dst_port="80" src_ip="135.68.16.225"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.227.15.30"/>
      <from sec="1112590947" usec="0"/>
      <to sec="1112591008" usec="0"/>
    </slice>
    <from sec="1112590947" usec="0"/>
    <to sec="1112591008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936893,1.74871,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
70[label="98.160.42.5s;661pkt 661fpkt", shape=rectangle, color=red];
970[label="98.160.42.5;s;995pkt 995fpkt", shape=diamond, color=yellow];
2479[label="98.160.42.5;s;995pkt 995fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.160.42.5:*, *:5900}[25.2261%]&lt;BR/&gt;{98.160.42.5:*, *:42}[24.9246%]&lt;BR/&gt;{98.160.42.5:*, *:4899}[24.9246%]&lt;BR/&gt;{98.160.42.5:*, *:6101}[24.9246%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (12.6179%)&lt;BR/&gt; 6101: (12.4859%)&lt;BR/&gt; 4899: (12.4481%)&lt;BR/&gt; 42: (12.4481%)&lt;BR/&gt; 4557: (0.094304%)&gt;];
}
70--970[label="1;661pkt 661fpkt"];
70--2479[label="1;661pkt 661fpkt"];
970--2479[label="1;995pkt 995fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="98.160.42.5"/>
      <filter dst_port="6101" src_ip="98.160.42.5"/>
      <filter dst_port="4899" src_ip="98.160.42.5"/>
      <filter dst_port="42" src_ip="98.160.42.5"/>
    </slice>
    <from sec="1112590990" usec="0"/>
    <to sec="1112591055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.186.130.117"/>
      <from sec="1112590996" usec="0"/>
      <to sec="1112591104" usec="0"/>
    </slice>
    <from sec="1112590996" usec="0"/>
    <to sec="1112591104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
272[label="162.94.122.243;s;10pkt 10fpkt", shape=diamond, color=yellow];
993[label="17.12.233.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
2267[label="162.94.122.243;s;10pkt 10fpkt", shape=hexagon, color=black];
3997[label="162.94.122.243;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4411[label="162.94.122.243;12pkt 12fpkt", shape=invtriangle, color=brown];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.122.243:51570, *:*}[38.4615%]&lt;BR/&gt;{162.94.122.243:*, 195.44.11.173:60945}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51570: (21.1111%)&lt;BR/&gt; 60945: (11.1111%)&lt;BR/&gt; 57590: (8.88889%)&lt;BR/&gt; 4976: (8.88889%)&lt;BR/&gt; 62181: (6.66667%)&gt;];
}
272--993[label="1;1pkt 1fpkt"];
272--2267[label="1;10pkt 10fpkt"];
272--3997[label="0.9;9pkt 9fpkt"];
272--4411[label="0.9;9pkt 9fpkt"];
993--2267[label="1;1pkt 1fpkt"];
993--3997[label="1;1pkt 1fpkt"];
993--4411[label="1;1pkt 1fpkt"];
2267--3997[label="0.9;9pkt 9fpkt"];
2267--4411[label="0.9;9pkt 9fpkt"];
3997--4411[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="162.94.122.243" src_port="51570"/>
      <filter dst_ip="195.44.11.173" dst_port="60945" src_ip="162.94.122.243"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
299[label="192.87.54.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
1000[label="135.69.65.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
2350[label="192.87.54.91;s;1pkt 1fpkt", shape=hexagon, color=black];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.87.54.91:32305, 135.69.65.208:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32305: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
299--1000[label="1;1pkt 1fpkt"];
299--2350[label="1;1pkt 1fpkt"];
1000--2350[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.65.208" dst_port="20" src_ip="192.87.54.91" src_port="32305"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
927[label="18.221.72.143;s;5pkt 5fpkt", shape=diamond, color=yellow];
2415[label="18.221.72.143;s;5pkt 5fpkt", shape=hexagon, color=black];
3670[label="18.221.72.143;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4264[label="18.221.72.143;6pkt 6fpkt", shape=invtriangle, color=brown];
4546[label="18.221.72.143;6pkt 6fpkt", shape=invhouse, color=bisque];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.221.72.143:80, 193.41.162.33:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14587: (9.25926%)&lt;BR/&gt; 14521: (9.25926%)&lt;BR/&gt; 14452: (9.25926%)&lt;BR/&gt; 14324: (9.25926%)&gt;];
}
927--2415[label="1;5pkt 5fpkt"];
927--3126[label="0.2;1pkt 1fpkt"];
927--3140[label="0.2;1pkt 1fpkt"];
927--3150[label="0.2;1pkt 1fpkt"];
927--3670[label="0.8;4pkt 4fpkt"];
927--4264[label="1;5pkt 5fpkt"];
927--4546[label="1;5pkt 5fpkt"];
2415--3126[label="0.2;1pkt 1fpkt"];
2415--3140[label="0.2;1pkt 1fpkt"];
2415--3150[label="0.2;1pkt 1fpkt"];
2415--3670[label="0.8;4pkt 4fpkt"];
2415--4264[label="1;5pkt 5fpkt"];
2415--4546[label="1;5pkt 5fpkt"];
3670--4264[label="1;5pkt 5fpkt"];
3670--4546[label="1;5pkt 5fpkt"];
4264--4546[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.162.33" src_ip="18.221.72.143" src_port="80"/>
    </slice>
    <from sec="1112590825" usec="0"/>
    <to sec="1112591499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
346[label="192.65.181.91;s;56pkt 56fpkt", shape=diamond, color=yellow];
812[label="195.131.122.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
966[label="192.65.181.98;s;4pkt 4fpkt", shape=diamond, color=yellow];
976[label="22.190.185.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
1013[label="221.1.50.26;d;357pkt 357fpkt", shape=diamond, color=yellow];
1285[label="193.118.46.161;d;103pkt 103fpkt", shape=diamond, color=yellow];
1413[label="209.165.170.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1644[label="199.209.192.48;d;16pkt 16fpkt", shape=diamond, color=yellow];
1806[label="192.65.179.48;s;75pkt 75fpkt", shape=diamond, color=yellow];
2358[label="192.65.181.91;s;30pkt 30fpkt", shape=hexagon, color=black];
2378[label="192.65.180.111;s;390pkt 390fpkt", shape=hexagon, color=black];
2621[label="192.65.181.98;s;4pkt 4fpkt", shape=hexagon, color=black];
2865[label="192.65.179.48;s;75pkt 75fpkt", shape=hexagon, color=black];
2877[label="209.165.170.196;d;1pkt 1fpkt", shape=hexagon, color=black];
3324[label="192.65.182.40;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3346[label="193.194.165.46;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3513[label="192.65.181.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3646[label="192.65.182.138;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3677[label="192.65.181.144;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.180.111:0, *:0}[39%]&lt;BR/&gt;{*:0, 221.1.50.26:0}[35.7%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (70.0927%)&lt;BR/&gt; 25: (10.0674%)&lt;BR/&gt; 80: (2.06403%)&lt;BR/&gt; 53: (0.505476%)&lt;BR/&gt; 1032: (0.336984%)&gt;];
}
346--812[label="1;1pkt 1fpkt"];
346--1013[label="0.0178571;1pkt 1fpkt"];
346--1413[label="1;1pkt 1fpkt"];
346--2211[label="1;3pkt 3fpkt"];
346--2358[label="1;30pkt 30fpkt"];
346--2877[label="1;1pkt 1fpkt"];
346--3126[label="0.0178571;1pkt 1fpkt"];
346--3130[label="0.0535714;3pkt 3fpkt"];
346--3135[label="0.0535714;3pkt 3fpkt"];
346--3140[label="0.0178571;1pkt 1fpkt"];
346--3142[label="0.0535714;3pkt 3fpkt"];
346--3147[label="0.0535714;3pkt 3fpkt"];
346--3150[label="0.0178571;1pkt 1fpkt"];
346--3152[label="0.0535714;3pkt 3fpkt"];
346--3157[label="0.0535714;3pkt 3fpkt"];
812--2358[label="1;1pkt 1fpkt"];
966--976[label="1;1pkt 1fpkt"];
966--1013[label="0.25;1pkt 1fpkt"];
966--2621[label="1;4pkt 4fpkt"];
966--3127[label="0.25;1pkt 1fpkt"];
966--3513[label="1;3pkt 3fpkt"];
976--2621[label="1;1pkt 1fpkt"];
976--3127[label="1;1pkt 1fpkt"];
976--3513[label="1;1pkt 1fpkt"];
1013--1063[label="0.00456621;1pkt 1fpkt"];
1013--1082[label="0.00613497;1pkt 1fpkt"];
1013--1518[label="0.00917431;1pkt 1fpkt"];
1013--1522[label="0.00280112;1pkt 1fpkt"];
1013--1557[label="0.0116279;1pkt 1fpkt"];
1013--1759[label="0.00280112;1pkt 1fpkt"];
1013--1806[label="0.0133333;1pkt 1fpkt"];
1013--1981[label="0.00970874;1pkt 1fpkt"];
1013--2174[label="0.00373134;1pkt 1fpkt"];
1013--2358[label="0.0333333;1pkt 1fpkt"];
1013--2375[label="0.00280112;1pkt 1fpkt"];
1013--2378[label="0.00280112;1pkt 1fpkt"];
1013--2382[label="0.00826446;1pkt 1fpkt"];
1013--2437[label="0.00280112;1pkt 1fpkt"];
1013--2447[label="0.00280112;1pkt 1fpkt"];
1013--2458[label="0.00280112;1pkt 1fpkt"];
1013--2462[label="0.00287356;1pkt 1fpkt"];
1013--2586[label="0.0666667;1pkt 1fpkt"];
1013--2621[label="0.25;1pkt 1fpkt"];
1013--2675[label="0.00293255;1pkt 1fpkt"];
1013--2690[label="0.00917431;1pkt 1fpkt"];
1013--2712[label="0.00666667;1pkt 1fpkt"];
1013--2865[label="0.0133333;1pkt 1fpkt"];
1013--3004[label="0.00373134;1pkt 1fpkt"];
1013--3085[label="0.00280112;1pkt 1fpkt"];
1013--3324[label="0.0625;1pkt 1fpkt"];
1013--3410[label="0.0625;1pkt 1fpkt"];
1013--3605[label="0.00284091;1pkt 1fpkt"];
1013--3646[label="0.142857;1pkt 1fpkt"];
1013--3677[label="0.0222222;1pkt 1fpkt"];
1013--3685[label="0.00909091;1pkt 1fpkt"];
1013--4153[label="0.0666667;1pkt 1fpkt"];
1013--4459[label="0.00280112;1pkt 1fpkt"];
1013--4494[label="0.0666667;1pkt 1fpkt"];
1285--1286[label="0.955556;43pkt 43fpkt"];
1285--1806[label="0.8;60pkt 60fpkt"];
1285--2505[label="1;42pkt 42fpkt"];
1285--2865[label="0.8;60pkt 60fpkt"];
1413--2358[label="1;1pkt 1fpkt"];
1413--2877[label="1;1pkt 1fpkt"];
1644--2378[label="0.0625;1pkt 1fpkt"];
1644--2650[label="0.0625;1pkt 1fpkt"];
1644--2712[label="0.0625;1pkt 1fpkt"];
1644--3325[label="0.142857;1pkt 1fpkt"];
1644--3346[label="0.5;1pkt 1fpkt"];
1644--3646[label="0.142857;1pkt 1fpkt"];
1644--3677[label="0.0625;1pkt 1fpkt"];
1806--2865[label="1;75pkt 75fpkt"];
2358--2877[label="1;1pkt 1fpkt"];
2358--3126[label="0.0333333;1pkt 1fpkt"];
2358--3140[label="0.0333333;1pkt 1fpkt"];
2358--3150[label="0.0333333;1pkt 1fpkt"];
2378--2695[label="0.00452489;1pkt 1fpkt"];
2378--3027[label="0.0666667;1pkt 1fpkt"];
2621--3127[label="0.25;1pkt 1fpkt"];
2621--3513[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.180.111"/>
      <filter dst_ip="221.1.50.26"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1016[label="221.143.48.39;d;2pkt 2fpkt", shape=diamond, color=yellow];
1017[label="162.94.101.113;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.101.113:8507, 22.50.196.20:2183}[25%]&lt;BR/&gt;{162.94.101.113:1070, 23.2.236.186:2704}[25%]&lt;BR/&gt;{162.94.101.113:1080, 221.143.48.39:554}[25%]&lt;BR/&gt;{162.94.101.113:6970, 221.143.48.39:27096}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27096: (16.6667%)&lt;BR/&gt; 6970: (16.6667%)&lt;BR/&gt; 1080: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&lt;BR/&gt; 8507: (8.33333%)&gt;];
}
1016--1017[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="221.143.48.39" dst_port="27096" src_ip="162.94.101.113" src_port="6970"/>
      <filter dst_ip="221.143.48.39" dst_port="554" src_ip="162.94.101.113" src_port="1080"/>
      <filter dst_ip="23.2.236.186" dst_port="2704" src_ip="162.94.101.113" src_port="1070"/>
      <filter dst_ip="22.50.196.20" dst_port="2183" src_ip="162.94.101.113" src_port="8507"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
572[label="129.2.7.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
1029[label="192.41.156.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.7.92:1937, 192.41.156.15:3389}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (50%)&lt;BR/&gt; 1937: (50%)&gt;];
}
572--1029[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.41.156.15" dst_port="3389" src_ip="129.2.7.92" src_port="1937"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1054[label="196.67.213.247;d;2pkt 2fpkt", shape=diamond, color=yellow];
1055[label="135.69.0.140;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.0.140:8200, 218.8.63.73:8196}[25%]&lt;BR/&gt;{135.69.0.140:8277, 198.107.151.185:8292}[25%]&lt;BR/&gt;{135.69.0.140:8199, 196.67.213.247:8195}[25%]&lt;BR/&gt;{135.69.0.140:8201, 196.67.213.247:8196}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8196: (25%)&lt;BR/&gt; 8201: (16.6667%)&lt;BR/&gt; 8199: (16.6667%)&lt;BR/&gt; 8195: (16.6667%)&lt;BR/&gt; 8292: (8.33333%)&gt;];
}
1054--1055[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.67.213.247" dst_port="8196" src_ip="135.69.0.140" src_port="8201"/>
      <filter dst_ip="196.67.213.247" dst_port="8195" src_ip="135.69.0.140" src_port="8199"/>
      <filter dst_ip="198.107.151.185" dst_port="8292" src_ip="135.69.0.140" src_port="8277"/>
      <filter dst_ip="218.8.63.73" dst_port="8196" src_ip="135.69.0.140" src_port="8200"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
1074[label="135.69.197.117;s;261pkt 261fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.197.117:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1074--1521[label="0.00383142;1pkt 1fpkt"];
1074--2695[label="0.00452489;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="135.69.197.117"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.222.226.155"/>
      <from sec="1112590801" usec="0"/>
      <to sec="1112591628" usec="0"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
896[label="162.94.0.69;d;18pkt 18fpkt", shape=diamond, color=yellow];
1147[label="0.42.75.124;s;18pkt 18fpkt", shape=diamond, color=yellow];
3593[label="0.42.75.124;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.42.75.124:80, 162.94.0.69:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1794: (2.72727%)&lt;BR/&gt; 1793: (2.72727%)&lt;BR/&gt; 1792: (2.72727%)&lt;BR/&gt; 1791: (2.72727%)&gt;];
}
896--1147[label="1;18pkt 18fpkt"];
896--3126[label="0.166667;3pkt 3fpkt"];
896--3140[label="0.166667;3pkt 3fpkt"];
896--3150[label="0.166667;3pkt 3fpkt"];
896--3593[label="1;18pkt 18fpkt"];
1147--3126[label="0.166667;3pkt 3fpkt"];
1147--3140[label="0.166667;3pkt 3fpkt"];
1147--3150[label="0.166667;3pkt 3fpkt"];
1147--3593[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.0.69" src_ip="0.42.75.124" src_port="80"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
749[label="135.69.212.134;d;65pkt 65fpkt", shape=diamond, color=yellow];
2824[label="135.69.212.134;d;65pkt 65fpkt", shape=hexagon, color=black];
3331[label="192.48.155.43;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3849[label="192.48.155.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4112[label="192.48.155.43;1pkt 1fpkt", shape=invtriangle, color=brown];
4348[label="192.48.155.194;1pkt 1fpkt", shape=invtriangle, color=brown];
4477[label="192.48.155.43;2pkt 2fpkt", shape=invhouse, color=bisque];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 135.69.212.134:*}[53.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.3623%)&lt;BR/&gt; 26373: (3.26087%)&lt;BR/&gt; 4897: (1.81159%)&lt;BR/&gt; 26476: (1.44928%)&lt;BR/&gt; 26475: (1.44928%)&gt;];
}
749--1199[label="0.0208333;1pkt 1fpkt"];
749--2767[label="0.0222222;1pkt 1fpkt"];
749--2824[label="1;65pkt 65fpkt"];
749--3130[label="0.0769231;5pkt 5fpkt"];
749--3135[label="0.0461538;3pkt 3fpkt"];
749--3142[label="0.0769231;5pkt 5fpkt"];
749--3147[label="0.0461538;3pkt 3fpkt"];
749--3152[label="0.0769231;5pkt 5fpkt"];
749--3157[label="0.0461538;3pkt 3fpkt"];
749--3331[label="1;2pkt 2fpkt"];
749--3704[label="0.0212766;1pkt 1fpkt"];
749--3737[label="0.333333;4pkt 4fpkt"];
749--3849[label="1;2pkt 2fpkt"];
749--4112[label="1;1pkt 1fpkt"];
749--4348[label="1;1pkt 1fpkt"];
749--4477[label="1;2pkt 2fpkt"];
2824--3130[label="0.0769231;5pkt 5fpkt"];
2824--3135[label="0.0461538;3pkt 3fpkt"];
2824--3142[label="0.0769231;5pkt 5fpkt"];
2824--3147[label="0.0461538;3pkt 3fpkt"];
2824--3152[label="0.0769231;5pkt 5fpkt"];
2824--3157[label="0.0461538;3pkt 3fpkt"];
2824--3331[label="1;2pkt 2fpkt"];
2824--3704[label="0.0212766;1pkt 1fpkt"];
2824--3737[label="0.333333;4pkt 4fpkt"];
2824--3849[label="1;2pkt 2fpkt"];
2824--4112[label="1;1pkt 1fpkt"];
2824--4348[label="1;1pkt 1fpkt"];
2824--4477[label="1;2pkt 2fpkt"];
3331--4112[label="1;1pkt 1fpkt"];
3331--4477[label="1;2pkt 2fpkt"];
3849--4348[label="1;1pkt 1fpkt"];
4112--4477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.212.134" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
968[label="162.94.106.128;s;14pkt 14fpkt", shape=diamond, color=yellow];
1213[label="198.77.204.113;d;20pkt 20fpkt", shape=diamond, color=yellow];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.106.128:*, 198.77.204.113:21}[35%]&lt;BR/&gt;{162.94.19.81:*, 198.77.204.113:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (23.5294%)&lt;BR/&gt; 58145: (2.94118%)&lt;BR/&gt; 55187: (2.94118%)&lt;BR/&gt; 54589: (2.94118%)&lt;BR/&gt; 47024: (2.94118%)&gt;];
}
968--1213[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="198.77.204.113" src_ip="162.94.19.81"/>
      <filter dst_ip="198.77.204.113" dst_port="21" src_ip="162.94.106.128"/>
    </slice>
    <from sec="1112590937" usec="0"/>
    <to sec="1112591197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
413[label="144.126.181.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
414[label="210.128.254.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
1247[label="0.50.167.81;s;3104pkt 3104fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.50.167.81:*, *:20031}[99.9678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20031: (49.9678%)&lt;BR/&gt; 4080: (0.0482781%)&lt;BR/&gt; 4053: (0.0482781%)&lt;BR/&gt; 4002: (0.0482781%)&lt;BR/&gt; 3907: (0.0482781%)&gt;];
}
413--414[label="1;1pkt 1fpkt"];
413--1247[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="20031" src_ip="0.50.167.81"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
557[label="129.141.168.223;s;5pkt 5fpkt", shape=diamond, color=yellow];
1290[label="197.221.255.7;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.141.168.223:8000, 197.221.255.7:1782}[20%]&lt;BR/&gt;{129.141.168.223:8000, 197.221.255.7:1809}[20%]&lt;BR/&gt;{129.141.168.223:35280, 198.41.163.130:80}[20%]&lt;BR/&gt;{129.141.168.223:35281, 198.41.163.130:80}[20%]&lt;BR/&gt;{129.141.168.223:35282, 198.41.163.130:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 1809: (14.2857%)&lt;BR/&gt; 1782: (14.2857%)&lt;BR/&gt; 35282: (7.14286%)&gt;];
}
557--1290[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.41.163.130" dst_port="80" src_ip="129.141.168.223" src_port="35282"/>
      <filter dst_ip="198.41.163.130" dst_port="80" src_ip="129.141.168.223" src_port="35281"/>
      <filter dst_ip="198.41.163.130" dst_port="80" src_ip="129.141.168.223" src_port="35280"/>
      <filter dst_ip="197.221.255.7" dst_port="1809" src_ip="129.141.168.223" src_port="8000"/>
      <filter dst_ip="197.221.255.7" dst_port="1782" src_ip="129.141.168.223" src_port="8000"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.172.13.47"/>
      <from sec="1112590800" usec="0"/>
      <to sec="1112591628" usec="0"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
797[label="217.166.245.180;s;509pkt 509fpkt", shape=diamond, color=yellow];
1302[label="144.126.227.227;d;509pkt 509fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.166.245.180:*, 144.126.227.227:80}[46.9548%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.112%)&lt;BR/&gt; 53: (4.12574%)&lt;BR/&gt; 25: (2.75049%)&lt;BR/&gt; 5554: (1.08055%)&lt;BR/&gt; 1023: (0.785855%)&gt;];
}
797--1302[label="1;509pkt 509fpkt"];
797--3124[label="0.00392927;2pkt 2fpkt"];
797--3125[label="0.0196464;10pkt 10fpkt"];
797--3126[label="0.0137525;7pkt 7fpkt"];
797--3127[label="0.0255403;13pkt 13fpkt"];
797--3129[label="0.0157171;8pkt 8fpkt"];
797--3130[label="0.00785855;4pkt 4fpkt"];
797--3131[label="0.00196464;1pkt 1fpkt"];
797--3134[label="0.0117878;6pkt 6fpkt"];
797--3135[label="0.00589391;3pkt 3fpkt"];
797--3136[label="0.00196464;1pkt 1fpkt"];
797--3137[label="0.00392927;2pkt 2fpkt"];
797--3138[label="0.0314342;16pkt 16fpkt"];
797--3139[label="0.0196464;10pkt 10fpkt"];
797--3140[label="0.0137525;7pkt 7fpkt"];
797--3141[label="0.0157171;8pkt 8fpkt"];
797--3142[label="0.00785855;4pkt 4fpkt"];
797--3143[label="0.00196464;1pkt 1fpkt"];
797--3146[label="0.0117878;6pkt 6fpkt"];
797--3147[label="0.00589391;3pkt 3fpkt"];
797--3148[label="0.00196464;1pkt 1fpkt"];
797--3149[label="0.0196464;10pkt 10fpkt"];
797--3150[label="0.0137525;7pkt 7fpkt"];
797--3151[label="0.0157171;8pkt 8fpkt"];
797--3152[label="0.00785855;4pkt 4fpkt"];
797--3153[label="0.00196464;1pkt 1fpkt"];
797--3156[label="0.0117878;6pkt 6fpkt"];
797--3157[label="0.00589391;3pkt 3fpkt"];
797--3158[label="0.00196464;1pkt 1fpkt"];
1302--3124[label="0.00392927;2pkt 2fpkt"];
1302--3125[label="0.0196464;10pkt 10fpkt"];
1302--3126[label="0.0137525;7pkt 7fpkt"];
1302--3127[label="0.0255403;13pkt 13fpkt"];
1302--3129[label="0.0157171;8pkt 8fpkt"];
1302--3130[label="0.00785855;4pkt 4fpkt"];
1302--3131[label="0.00196464;1pkt 1fpkt"];
1302--3134[label="0.0117878;6pkt 6fpkt"];
1302--3135[label="0.00589391;3pkt 3fpkt"];
1302--3136[label="0.00196464;1pkt 1fpkt"];
1302--3137[label="0.00392927;2pkt 2fpkt"];
1302--3138[label="0.0314342;16pkt 16fpkt"];
1302--3139[label="0.0196464;10pkt 10fpkt"];
1302--3140[label="0.0137525;7pkt 7fpkt"];
1302--3141[label="0.0157171;8pkt 8fpkt"];
1302--3142[label="0.00785855;4pkt 4fpkt"];
1302--3143[label="0.00196464;1pkt 1fpkt"];
1302--3146[label="0.0117878;6pkt 6fpkt"];
1302--3147[label="0.00589391;3pkt 3fpkt"];
1302--3148[label="0.00196464;1pkt 1fpkt"];
1302--3149[label="0.0196464;10pkt 10fpkt"];
1302--3150[label="0.0137525;7pkt 7fpkt"];
1302--3151[label="0.0157171;8pkt 8fpkt"];
1302--3152[label="0.00785855;4pkt 4fpkt"];
1302--3153[label="0.00196464;1pkt 1fpkt"];
1302--3156[label="0.0117878;6pkt 6fpkt"];
1302--3157[label="0.00589391;3pkt 3fpkt"];
1302--3158[label="0.00196464;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.227.227" dst_port="80" src_ip="217.166.245.180"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1318[label="162.8.42.8;s;400pkt 400fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.8.42.8:0, *:0}[99.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5%)&lt;BR/&gt; 2710: (0.125%)&lt;BR/&gt; 2664: (0.125%)&lt;BR/&gt; 445: (0.125%)&lt;BR/&gt; 135: (0.125%)&gt;];
}
1318--1521[label="0.00361011;1pkt 1fpkt"];
1318--2695[label="0.00452489;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="162.8.42.8"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
848[label="192.65.181.129;s;350pkt 350fpkt", shape=diamond, color=yellow];
991[label="192.65.180.83;s;145pkt 145fpkt", shape=diamond, color=yellow];
1063[label="192.65.180.64;s;219pkt 219fpkt", shape=diamond, color=yellow];
1082[label="192.65.178.96;s;163pkt 163fpkt", shape=diamond, color=yellow];
1280[label="203.48.185.19;s;405pkt 405fpkt", shape=diamond, color=yellow];
1343[label="199.209.187.244;d;17pkt 17fpkt", shape=diamond, color=yellow];
1557[label="192.65.178.107;s;86pkt 86fpkt", shape=diamond, color=yellow];
2034[label="199.209.186.12;d;14pkt 14fpkt", shape=diamond, color=yellow];
2036[label="199.209.193.24;d;15pkt 15fpkt", shape=diamond, color=yellow];
2462[label="192.65.181.129;s;348pkt 348fpkt", shape=hexagon, color=black];
2712[label="192.65.178.96;s;150pkt 150fpkt", shape=hexagon, color=black];
3325[label="192.65.183.40;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3605[label="192.65.181.129;352pkt 352fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.48.185.19:0, *:0}[28.703%]&lt;BR/&gt;{192.65.181.129:0, *:0}[25.0177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8679%)&lt;BR/&gt; 135: (0.0660502%)&lt;BR/&gt; 2353: (0.0220167%)&lt;BR/&gt; 2303: (0.0220167%)&lt;BR/&gt; 2177: (0.0220167%)&gt;];
}
848--1013[label="0.00285714;1pkt 1fpkt"];
848--1343[label="0.0588235;1pkt 1fpkt"];
848--2034[label="0.0714286;1pkt 1fpkt"];
848--2036[label="0.0666667;1pkt 1fpkt"];
848--2462[label="1;348pkt 348fpkt"];
848--3027[label="0.0666667;1pkt 1fpkt"];
848--3605[label="0.997143;349pkt 349fpkt"];
991--1013[label="0.00689655;1pkt 1fpkt"];
991--1343[label="0.0588235;1pkt 1fpkt"];
991--2036[label="0.0666667;1pkt 1fpkt"];
991--3027[label="0.0666667;1pkt 1fpkt"];
1063--1343[label="0.0588235;1pkt 1fpkt"];
1063--1521[label="0.00456621;1pkt 1fpkt"];
1063--1644[label="0.0625;1pkt 1fpkt"];
1063--2034[label="0.0714286;1pkt 1fpkt"];
1063--2695[label="0.00456621;1pkt 1fpkt"];
1082--1343[label="0.0588235;1pkt 1fpkt"];
1082--1644[label="0.0625;1pkt 1fpkt"];
1082--2712[label="1;150pkt 150fpkt"];
1280--1521[label="0.00361011;1pkt 1fpkt"];
1280--2036[label="0.0666667;1pkt 1fpkt"];
1280--2695[label="0.00452489;1pkt 1fpkt"];
1280--3027[label="0.0666667;1pkt 1fpkt"];
1343--1557[label="0.0588235;1pkt 1fpkt"];
1343--2462[label="0.0588235;1pkt 1fpkt"];
1343--2712[label="0.0588235;1pkt 1fpkt"];
1343--3325[label="0.142857;1pkt 1fpkt"];
1343--3605[label="0.0588235;1pkt 1fpkt"];
1343--3646[label="0.142857;1pkt 1fpkt"];
1343--3677[label="0.0588235;1pkt 1fpkt"];
2034--2462[label="0.0714286;1pkt 1fpkt"];
2034--3325[label="0.142857;1pkt 1fpkt"];
2034--3605[label="0.0714286;1pkt 1fpkt"];
2034--3646[label="0.142857;1pkt 1fpkt"];
2036--2378[label="0.0666667;1pkt 1fpkt"];
2036--2462[label="0.0666667;1pkt 1fpkt"];
2036--3027[label="1;15pkt 15fpkt"];
2036--3325[label="0.142857;1pkt 1fpkt"];
2036--3346[label="0.5;1pkt 1fpkt"];
2036--3605[label="0.0666667;1pkt 1fpkt"];
2036--3646[label="0.142857;1pkt 1fpkt"];
2036--3677[label="0.0666667;1pkt 1fpkt"];
2462--3027[label="0.0666667;1pkt 1fpkt"];
2462--3605[label="0.997126;347pkt 347fpkt"];
</description>
    <slice>
      <filter src_ip="203.48.185.19"/>
      <filter src_ip="192.65.181.129"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
629[label="135.69.241.55;s;674pkt 674fpkt", shape=diamond, color=yellow];
898[label="17.106.68.171;d;202pkt 202fpkt", shape=diamond, color=yellow];
1380[label="197.14.116.116;d;197pkt 197fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.241.55:*, 17.106.68.171:80}[29.5402%]&lt;BR/&gt;{*:*, 197.14.116.116:80}[22.5287%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8779%)&lt;BR/&gt; 2920: (0.27959%)&lt;BR/&gt; 1228: (0.27959%)&lt;BR/&gt; 2408: (0.232992%)&lt;BR/&gt; 2615: (0.186393%)&gt;];
}
629--676[label="0.289902;89pkt 89fpkt"];
629--822[label="0.0147059;1pkt 1fpkt"];
629--898[label="0.985149;199pkt 199fpkt"];
629--1319[label="0.00763359;1pkt 1fpkt"];
629--1380[label="0.0203046;4pkt 4fpkt"];
629--1547[label="0.344398;83pkt 83fpkt"];
629--1554[label="0.255193;172pkt 172fpkt"];
629--2389[label="0.0147059;1pkt 1fpkt"];
629--3127[label="0.0519288;35pkt 35fpkt"];
629--3138[label="0.0489614;33pkt 33fpkt"];
898--1155[label="0.0267857;3pkt 3fpkt"];
898--3127[label="0.0742574;15pkt 15fpkt"];
1380--1681[label="0.0116279;1pkt 1fpkt"];
1380--2342[label="0.0101523;2pkt 2fpkt"];
1380--2650[label="0.00507614;1pkt 1fpkt"];
1380--2792[label="0.0138889;1pkt 1fpkt"];
1380--2911[label="0.0101523;2pkt 2fpkt"];
1380--3127[label="0.121827;24pkt 24fpkt"];
1380--3384[label="0.0227273;1pkt 1fpkt"];
1380--3477[label="0.0140845;1pkt 1fpkt"];
1380--3872[label="0.0106383;1pkt 1fpkt"];
1380--3898[label="0.0172414;1pkt 1fpkt"];
1380--4139[label="0.0227273;1pkt 1fpkt"];
1380--4183[label="0.0140845;1pkt 1fpkt"];
1380--4359[label="0.0107527;1pkt 1fpkt"];
1380--4509[label="0.0138889;1pkt 1fpkt"];
1380--4581[label="0.0107527;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.14.116.116" dst_port="80"/>
      <filter dst_ip="17.106.68.171" dst_port="80" src_ip="135.69.241.55"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.75.190.70"/>
      <from sec="1112591273" usec="0"/>
      <to sec="1112591596" usec="0"/>
    </slice>
    <from sec="1112591273" usec="0"/>
    <to sec="1112591596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
318[label="193.32.58.11;s;764pkt 764fpkt", shape=diamond, color=yellow];
650[label="211.113.239.220;d;2pkt 2fpkt", shape=diamond, color=yellow];
915[label="135.69.89.90;s;72pkt 72fpkt", shape=diamond, color=yellow];
984[label="18.216.197.72;d;100pkt 100fpkt", shape=diamond, color=yellow];
1418[label="209.190.113.147;d;14pkt 14fpkt", shape=diamond, color=yellow];
1560[label="96.227.225.172;d;110pkt 110fpkt", shape=diamond, color=yellow];
1660[label="99.92.186.49;d;37pkt 37fpkt", shape=diamond, color=yellow];
1703[label="208.129.18.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1730[label="216.108.195.138;d;3pkt 3fpkt", shape=diamond, color=yellow];
1825[label="216.108.194.181;d;28pkt 28fpkt", shape=diamond, color=yellow];
1857[label="117.198.180.25;d;57pkt 57fpkt", shape=diamond, color=yellow];
1903[label="215.147.146.89;d;2pkt 2fpkt", shape=diamond, color=yellow];
2037[label="99.76.5.41;d;13pkt 13fpkt", shape=diamond, color=yellow];
2075[label="162.94.27.4;s;59pkt 59fpkt", shape=diamond, color=yellow];
2096[label="17.89.10.86;d;12pkt 12fpkt", shape=diamond, color=yellow];
2609[label="193.32.62.173;s;240pkt 240fpkt", shape=hexagon, color=black];
2667[label="193.32.58.11;s;717pkt 717fpkt", shape=hexagon, color=black];
2744[label="193.32.58.221;s;37pkt 37fpkt", shape=hexagon, color=black];
3175[label="162.94.27.4;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3205[label="193.32.58.11;788pkt 788fpkt", shape=pentagon, color=darkviolet];
3291[label="162.94.16.34;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4038[label="162.94.27.4;58pkt 58fpkt", shape=invtriangle, color=brown];
4052[label="193.32.58.11;784pkt 784fpkt", shape=invtriangle, color=brown];
4188[label="135.69.89.90;78pkt 78fpkt", shape=invtriangle, color=brown];
4435[label="162.94.27.4;58pkt 58fpkt", shape=invhouse, color=bisque];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.58.11:*, *:80}[57.5982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.245%)&lt;BR/&gt; 443: (0.243546%)&lt;BR/&gt; 81: (0.207014%)&lt;BR/&gt; 0: (0.194837%)&lt;BR/&gt; 88: (0.121773%)&gt;];
}
318--456[label="0.222222;2pkt 2fpkt"];
318--480[label="0.0185185;4pkt 4fpkt"];
318--496[label="0.0075188;3pkt 3fpkt"];
318--498[label="0.0046729;1pkt 1fpkt"];
318--641[label="0.00487805;1pkt 1fpkt"];
318--650[label="0.5;1pkt 1fpkt"];
318--662[label="0.172727;19pkt 19fpkt"];
318--713[label="0.00906344;3pkt 3fpkt"];
318--822[label="0.0294118;2pkt 2fpkt"];
318--858[label="0.096;12pkt 12fpkt"];
318--984[label="0.73;73pkt 73fpkt"];
318--1172[label="0.145833;14pkt 14fpkt"];
318--1194[label="0.341463;28pkt 28fpkt"];
318--1418[label="1;14pkt 14fpkt"];
318--1444[label="0.27451;14pkt 14fpkt"];
318--1560[label="0.0272727;3pkt 3fpkt"];
318--1660[label="0.351351;13pkt 13fpkt"];
318--1662[label="0.197183;14pkt 14fpkt"];
318--1703[label="1;1pkt 1fpkt"];
318--1825[label="0.107143;3pkt 3fpkt"];
318--1827[label="0.142857;6pkt 6fpkt"];
318--1857[label="0.0701754;4pkt 4fpkt"];
318--1903[label="1;2pkt 2fpkt"];
318--2037[label="1;13pkt 13fpkt"];
318--2096[label="0.75;9pkt 9fpkt"];
318--2133[label="0.0227273;1pkt 1fpkt"];
318--2148[label="0.0967742;3pkt 3fpkt"];
318--2296[label="0.166667;1pkt 1fpkt"];
318--2389[label="0.0294118;2pkt 2fpkt"];
318--2667[label="1;717pkt 717fpkt"];
318--3003[label="0.142857;6pkt 6fpkt"];
318--3065[label="0.2;1pkt 1fpkt"];
318--3127[label="0.121728;93pkt 93fpkt"];
318--3138[label="0.0562827;43pkt 43fpkt"];
318--3205[label="0.998691;763pkt 763fpkt"];
318--4052[label="0.993455;759pkt 759fpkt"];
650--2545[label="0.5;1pkt 1fpkt"];
650--2667[label="0.5;1pkt 1fpkt"];
650--3127[label="0.5;1pkt 1fpkt"];
650--3138[label="0.5;1pkt 1fpkt"];
650--3205[label="0.5;1pkt 1fpkt"];
650--4052[label="0.5;1pkt 1fpkt"];
915--1397[label="0.0416667;3pkt 3fpkt"];
915--1716[label="0.0138889;1pkt 1fpkt"];
915--1730[label="1;3pkt 3fpkt"];
915--1825[label="0.892857;25pkt 25fpkt"];
915--1847[label="0.0555556;2pkt 2fpkt"];
915--2770[label="0.0555556;2pkt 2fpkt"];
915--3034[label="0.0138889;1pkt 1fpkt"];
915--3127[label="0.0555556;4pkt 4fpkt"];
915--3138[label="0.0138889;1pkt 1fpkt"];
915--4188[label="0.972222;70pkt 70fpkt"];
984--2609[label="0.27;27pkt 27fpkt"];
984--2667[label="0.73;73pkt 73fpkt"];
984--3127[label="0.63;63pkt 63fpkt"];
984--3205[label="0.73;73pkt 73fpkt"];
984--4052[label="0.73;73pkt 73fpkt"];
1418--2667[label="1;14pkt 14fpkt"];
1418--3127[label="0.214286;3pkt 3fpkt"];
1418--3138[label="0.214286;3pkt 3fpkt"];
1418--3205[label="1;14pkt 14fpkt"];
1418--4052[label="1;14pkt 14fpkt"];
1560--2075[label="0.610169;36pkt 36fpkt"];
1560--2379[label="0.0272727;3pkt 3fpkt"];
1560--2514[label="0.025;1pkt 1fpkt"];
1560--2599[label="0.00909091;1pkt 1fpkt"];
1560--2667[label="0.0272727;3pkt 3fpkt"];
1560--3127[label="0.00909091;1pkt 1fpkt"];
1560--3138[label="0.109091;12pkt 12fpkt"];
1560--3175[label="0.610169;36pkt 36fpkt"];
1560--3205[label="0.0272727;3pkt 3fpkt"];
1560--3291[label="0.692308;9pkt 9fpkt"];
1560--3842[label="0.0769231;2pkt 2fpkt"];
1560--3967[label="0.0272727;3pkt 3fpkt"];
1560--4038[label="0.603448;35pkt 35fpkt"];
1560--4052[label="0.0181818;2pkt 2fpkt"];
1560--4343[label="0.08;2pkt 2fpkt"];
1560--4399[label="0.0272727;3pkt 3fpkt"];
1560--4435[label="0.603448;35pkt 35fpkt"];
1660--2609[label="0.0810811;3pkt 3fpkt"];
1660--2667[label="0.351351;13pkt 13fpkt"];
1660--2673[label="0.0540541;2pkt 2fpkt"];
1660--2744[label="0.216216;8pkt 8fpkt"];
1660--3127[label="0.027027;1pkt 1fpkt"];
1660--3138[label="0.162162;6pkt 6fpkt"];
1660--3205[label="0.351351;13pkt 13fpkt"];
1660--4052[label="0.351351;13pkt 13fpkt"];
1703--2667[label="1;1pkt 1fpkt"];
1703--3138[label="1;1pkt 1fpkt"];
1703--3205[label="1;1pkt 1fpkt"];
1703--4052[label="1;1pkt 1fpkt"];
1730--4188[label="1;3pkt 3fpkt"];
1825--2667[label="0.107143;3pkt 3fpkt"];
1825--3127[label="0.0714286;2pkt 2fpkt"];
1825--3205[label="0.107143;3pkt 3fpkt"];
1825--4052[label="0.107143;3pkt 3fpkt"];
1825--4188[label="0.857143;24pkt 24fpkt"];
1857--2609[label="0.0175439;1pkt 1fpkt"];
1857--2667[label="0.0701754;4pkt 4fpkt"];
1857--3127[label="0.140351;8pkt 8fpkt"];
1857--3138[label="0.0526316;3pkt 3fpkt"];
1857--3205[label="0.0701754;4pkt 4fpkt"];
1857--4052[label="0.0701754;4pkt 4fpkt"];
1903--2667[label="1;2pkt 2fpkt"];
1903--3205[label="1;2pkt 2fpkt"];
1903--4052[label="1;2pkt 2fpkt"];
2037--2667[label="0.923077;12pkt 12fpkt"];
2037--3127[label="0.307692;4pkt 4fpkt"];
2037--3138[label="0.153846;2pkt 2fpkt"];
2037--3205[label="1;13pkt 13fpkt"];
2037--4052[label="1;13pkt 13fpkt"];
2075--3138[label="0.220339;13pkt 13fpkt"];
2075--3175[label="1;59pkt 59fpkt"];
2075--4038[label="1;58pkt 58fpkt"];
2075--4435[label="1;58pkt 58fpkt"];
2096--2667[label="0.75;9pkt 9fpkt"];
2096--3205[label="0.75;9pkt 9fpkt"];
2096--4052[label="0.75;9pkt 9fpkt"];
2609--3127[label="0.133333;32pkt 32fpkt"];
2609--3138[label="0.00416667;1pkt 1fpkt"];
2667--3003[label="0.142857;6pkt 6fpkt"];
2667--3065[label="0.2;1pkt 1fpkt"];
2667--3127[label="0.129707;93pkt 93fpkt"];
2667--3138[label="0.0376569;27pkt 27fpkt"];
2667--3205[label="0.998605;716pkt 716fpkt"];
2667--4052[label="0.993026;712pkt 712fpkt"];
3175--4038[label="1;58pkt 58fpkt"];
3175--4435[label="1;58pkt 58fpkt"];
3205--4052[label="1;784pkt 784fpkt"];
4038--4435[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.32.58.11"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
648[label="193.41.161.152;d;121pkt 121fpkt", shape=diamond, color=yellow];
956[label="96.169.192.244;s;3pkt 3fpkt", shape=diamond, color=yellow];
1473[label="196.103.225.1;s;3pkt 3fpkt", shape=diamond, color=yellow];
2064[label="196.103.225.0;s;3pkt 3fpkt", shape=diamond, color=yellow];
2426[label="96.169.192.244;s;2pkt 2fpkt", shape=hexagon, color=black];
3169[label="196.103.225.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3424[label="18.221.27.72;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4001[label="96.169.192.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4033[label="196.103.225.1;2pkt 2fpkt", shape=invtriangle, color=brown];
4158[label="18.221.27.72;36pkt 36fpkt", shape=invtriangle, color=brown];
4415[label="96.169.192.244;2pkt 2fpkt", shape=invtriangle, color=brown];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 193.41.161.152:32774}[40.146%]&lt;BR/&gt;{18.221.27.72:80, 193.41.161.152:*}[27.0073%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.9057%)&lt;BR/&gt; 53: (13.6792%)&lt;BR/&gt; 32774: (12.9717%)&lt;BR/&gt; 49304: (1.17925%)&lt;BR/&gt; 49340: (0.943396%)&gt;];
}
648--670[label="0.0330579;4pkt 4fpkt"];
648--956[label="1;3pkt 3fpkt"];
648--1473[label="1;3pkt 3fpkt"];
648--1515[label="0.0165289;2pkt 2fpkt"];
648--2064[label="1;3pkt 3fpkt"];
648--2153[label="0.0125;1pkt 1fpkt"];
648--2426[label="1;2pkt 2fpkt"];
648--2685[label="0.0165289;2pkt 2fpkt"];
648--3125[label="0.107438;13pkt 13fpkt"];
648--3126[label="0.0165289;2pkt 2fpkt"];
648--3129[label="0.0743802;9pkt 9fpkt"];
648--3130[label="0.0165289;2pkt 2fpkt"];
648--3134[label="0.0661157;8pkt 8fpkt"];
648--3135[label="0.00826446;1pkt 1fpkt"];
648--3139[label="0.107438;13pkt 13fpkt"];
648--3140[label="0.0165289;2pkt 2fpkt"];
648--3141[label="0.0743802;9pkt 9fpkt"];
648--3142[label="0.0165289;2pkt 2fpkt"];
648--3146[label="0.0661157;8pkt 8fpkt"];
648--3147[label="0.00826446;1pkt 1fpkt"];
648--3149[label="0.107438;13pkt 13fpkt"];
648--3150[label="0.0165289;2pkt 2fpkt"];
648--3151[label="0.0743802;9pkt 9fpkt"];
648--3152[label="0.0165289;2pkt 2fpkt"];
648--3156[label="0.0661157;8pkt 8fpkt"];
648--3157[label="0.00826446;1pkt 1fpkt"];
648--3166[label="1;2pkt 2fpkt"];
648--3169[label="1;2pkt 2fpkt"];
648--3424[label="0.555556;20pkt 20fpkt"];
648--3510[label="0.00826446;1pkt 1fpkt"];
648--3514[label="0.0330579;4pkt 4fpkt"];
648--4001[label="1;2pkt 2fpkt"];
648--4031[label="1;2pkt 2fpkt"];
648--4033[label="1;2pkt 2fpkt"];
648--4158[label="0.555556;20pkt 20fpkt"];
648--4195[label="0.00826446;1pkt 1fpkt"];
648--4196[label="0.0330579;4pkt 4fpkt"];
648--4415[label="1;2pkt 2fpkt"];
648--4514[label="0.00826446;1pkt 1fpkt"];
648--4515[label="0.0330579;4pkt 4fpkt"];
956--2426[label="1;2pkt 2fpkt"];
956--3126[label="0.333333;1pkt 1fpkt"];
956--3140[label="0.333333;1pkt 1fpkt"];
956--3150[label="0.333333;1pkt 1fpkt"];
956--4001[label="1;2pkt 2fpkt"];
956--4415[label="1;2pkt 2fpkt"];
1473--3169[label="1;2pkt 2fpkt"];
1473--4033[label="1;2pkt 2fpkt"];
2064--3130[label="0.333333;1pkt 1fpkt"];
2064--3135[label="0.333333;1pkt 1fpkt"];
2064--3142[label="0.333333;1pkt 1fpkt"];
2064--3147[label="0.333333;1pkt 1fpkt"];
2064--3152[label="0.333333;1pkt 1fpkt"];
2064--3157[label="0.333333;1pkt 1fpkt"];
2064--3166[label="1;2pkt 2fpkt"];
2064--4031[label="1;2pkt 2fpkt"];
2426--3126[label="0.5;1pkt 1fpkt"];
2426--3140[label="0.5;1pkt 1fpkt"];
2426--3150[label="0.5;1pkt 1fpkt"];
2426--4001[label="0.5;1pkt 1fpkt"];
2426--4415[label="0.5;1pkt 1fpkt"];
3169--4033[label="1;2pkt 2fpkt"];
3424--4158[label="1;36pkt 36fpkt"];
4001--4415[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.161.152" src_ip="18.221.27.72" src_port="80"/>
      <filter dst_ip="193.41.161.152" dst_port="32774" src_port="53"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1468[label="135.69.212.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="215.128.6.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
2625[label="135.69.212.137;d;1pkt 1fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.128.6.178:80, 135.69.212.137:3121}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3121: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1468--1490[label="1;1pkt 1fpkt"];
1468--2625[label="1;1pkt 1fpkt"];
1490--2625[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.212.137" dst_port="3121" src_ip="215.128.6.178" src_port="80"/>
    </slice>
    <from sec="1112591106" usec="0"/>
    <to sec="1112591586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
1346[label="130.39.97.174;s;7pkt 7fpkt", shape=diamond, color=yellow];
1498[label="167.172.18.142;d;13pkt 13fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.39.97.174:25, 167.172.18.142:*}[53.8462%]&lt;BR/&gt;{*:*, 167.172.18.142:25}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.5%)&lt;BR/&gt; 4966: (5%)&lt;BR/&gt; 4176: (5%)&lt;BR/&gt; 4005: (5%)&lt;BR/&gt; 3900: (5%)&gt;];
}
1346--1498[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="167.172.18.142" dst_port="25"/>
      <filter dst_ip="167.172.18.142" src_ip="130.39.97.174" src_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
1362[label="96.160.136.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
1502[label="213.24.87.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.80.24:5485, 213.24.87.45:4185}[50%]&lt;BR/&gt;{135.69.80.24:5485, 96.160.136.50:1037}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5485: (50%)&lt;BR/&gt; 4185: (25%)&lt;BR/&gt; 1037: (25%)&gt;];
}
1362--3263[label="1;1pkt 1fpkt"];
1502--3263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.160.136.50" dst_port="1037" src_ip="135.69.80.24" src_port="5485"/>
      <filter dst_ip="213.24.87.45" dst_port="4185" src_ip="135.69.80.24" src_port="5485"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1522[label="192.65.181.18;s;541pkt 541fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.181.18:0, *:0}[99.8152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8152%)&lt;BR/&gt; 1297: (0.0924214%)&lt;BR/&gt; 80: (0.0924214%)&gt;];
}
</description>
    <slice>
      <filter src_ip="192.65.181.18"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.181.142.248"/>
      <from sec="1112590800" usec="0"/>
      <to sec="1112591626" usec="0"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
1377[label="129.52.54.159;s;134pkt 134fpkt", shape=diamond, color=yellow];
1578[label="205.77.119.136;d;135pkt 135fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.52.54.159:445, 205.77.119.136:*}[99.2593%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (49.8141%)&lt;BR/&gt; 4928: (0.371747%)&lt;BR/&gt; 4858: (0.371747%)&lt;BR/&gt; 4719: (0.371747%)&lt;BR/&gt; 4714: (0.371747%)&gt;];
}
1377--1578[label="1;134pkt 134fpkt"];
1578--2437[label="0.00740741;1pkt 1fpkt"];
1578--4459[label="0.00740741;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.77.119.136" src_ip="129.52.54.159" src_port="445"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
692[label="135.69.89.90;d;62pkt 62fpkt", shape=diamond, color=yellow];
1511[label="135.69.140.134;d;85pkt 85fpkt", shape=diamond, color=yellow];
1717[label="209.51.164.0;s;301pkt 301fpkt", shape=diamond, color=yellow];
1731[label="216.108.195.138;s;3pkt 3fpkt", shape=diamond, color=yellow];
2636[label="209.51.164.0;s;86pkt 86fpkt", shape=hexagon, color=black];
3164[label="209.51.164.0;310pkt 310fpkt", shape=pentagon, color=darkviolet];
4125[label="217.215.117.47;1pkt 1fpkt", shape=invtriangle, color=brown];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.51.164.0:80, 135.69.136.4:*}[45.7364%]&lt;BR/&gt;{*:*, 135.69.140.134:*}[21.9638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5283%)&lt;BR/&gt; 0: (0.353774%)&lt;BR/&gt; 4073: (0.235849%)&lt;BR/&gt; 3330: (0.235849%)&lt;BR/&gt; 3328: (0.235849%)&gt;];
}
692--1610[label="0.892857;25pkt 25fpkt"];
692--1717[label="0.016129;1pkt 1fpkt"];
692--1731[label="1;3pkt 3fpkt"];
692--2636[label="0.016129;1pkt 1fpkt"];
692--3126[label="0.0645161;4pkt 4fpkt"];
692--3140[label="0.0645161;4pkt 4fpkt"];
692--3150[label="0.0645161;4pkt 4fpkt"];
692--3164[label="0.016129;1pkt 1fpkt"];
692--4125[label="1;1pkt 1fpkt"];
1511--1717[label="0.823529;70pkt 70fpkt"];
1511--2636[label="0.823529;70pkt 70fpkt"];
1511--3164[label="0.823529;70pkt 70fpkt"];
1717--1835[label="0.908602;169pkt 169fpkt"];
1717--2636[label="1;86pkt 86fpkt"];
1717--3130[label="0.0664452;20pkt 20fpkt"];
1717--3135[label="0.126246;38pkt 38fpkt"];
1717--3142[label="0.0664452;20pkt 20fpkt"];
1717--3147[label="0.126246;38pkt 38fpkt"];
1717--3152[label="0.0664452;20pkt 20fpkt"];
1717--3157[label="0.126246;38pkt 38fpkt"];
1717--3164[label="0.996678;300pkt 300fpkt"];
2636--3164[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.140.134"/>
      <filter dst_ip="135.69.136.4" src_ip="209.51.164.0" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1672[label="193.77.16.83;s;3pkt 3fpkt", shape=diamond, color=yellow];
1673[label="129.2.72.85;d;3pkt 3fpkt", shape=diamond, color=yellow];
2789[label="193.77.16.83;s;3pkt 3fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.77.16.83:80, 129.2.72.85:32843}[33.3333%]&lt;BR/&gt;{193.77.16.83:80, 129.2.72.85:32844}[33.3333%]&lt;BR/&gt;{193.77.16.83:80, 129.2.72.85:32848}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32848: (16.6667%)&lt;BR/&gt; 32844: (16.6667%)&lt;BR/&gt; 32843: (16.6667%)&gt;];
}
1672--1673[label="1;3pkt 3fpkt"];
1672--2789[label="1;3pkt 3fpkt"];
1673--2789[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="129.2.72.85" dst_port="32848" src_ip="193.77.16.83" src_port="80"/>
      <filter dst_ip="129.2.72.85" dst_port="32844" src_ip="193.77.16.83" src_port="80"/>
      <filter dst_ip="129.2.72.85" dst_port="32843" src_ip="193.77.16.83" src_port="80"/>
    </slice>
    <from sec="1112591115" usec="0"/>
    <to sec="1112591311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
1671[label="193.77.16.83;d;3pkt 3fpkt", shape=diamond, color=yellow];
1674[label="129.2.72.85;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.72.85:32843, 193.77.16.83:80}[33.3333%]&lt;BR/&gt;{129.2.72.85:32844, 193.77.16.83:80}[33.3333%]&lt;BR/&gt;{129.2.72.85:32848, 193.77.16.83:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32848: (16.6667%)&lt;BR/&gt; 32844: (16.6667%)&lt;BR/&gt; 32843: (16.6667%)&gt;];
}
1671--1674[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.77.16.83" dst_port="80" src_ip="129.2.72.85" src_port="32848"/>
      <filter dst_ip="193.77.16.83" dst_port="80" src_ip="129.2.72.85" src_port="32844"/>
      <filter dst_ip="193.77.16.83" dst_port="80" src_ip="129.2.72.85" src_port="32843"/>
    </slice>
    <from sec="1112591115" usec="0"/>
    <to sec="1112591311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
649[label="193.41.161.152;s;189pkt 189fpkt", shape=diamond, color=yellow];
1678[label="196.103.225.1;d;3pkt 3fpkt", shape=diamond, color=yellow];
3709[label="193.41.161.152;226pkt 226fpkt", shape=pentagon, color=darkviolet];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.161.152:32774, *:53}[50.2203%]&lt;BR/&gt;{193.41.161.152:*, *:80}[37.4449%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.2967%)&lt;BR/&gt; 32774: (26.1962%)&lt;BR/&gt; 80: (17.3445%)&lt;BR/&gt; 0: (4.06699%)&lt;BR/&gt; 49340: (0.358852%)&gt;];
}
649--669[label="0.021164;4pkt 4fpkt"];
649--955[label="1;3pkt 3fpkt"];
649--1296[label="0.010582;2pkt 2fpkt"];
649--1525[label="0.0125;1pkt 1fpkt"];
649--1678[label="1;3pkt 3fpkt"];
649--1799[label="0.00793651;1pkt 1fpkt"];
649--2140[label="0.00909091;1pkt 1fpkt"];
649--2151[label="0.00961538;1pkt 1fpkt"];
649--2156[label="0.0103093;1pkt 1fpkt"];
649--2983[label="0.00793651;1pkt 1fpkt"];
649--2987[label="0.0103093;1pkt 1fpkt"];
649--3127[label="0.010582;2pkt 2fpkt"];
649--3134[label="0.010582;2pkt 2fpkt"];
649--3137[label="0.0952381;18pkt 18fpkt"];
649--3138[label="0.00529101;1pkt 1fpkt"];
649--3146[label="0.010582;2pkt 2fpkt"];
649--3156[label="0.010582;2pkt 2fpkt"];
649--3709[label="0.994709;188pkt 188fpkt"];
1678--3709[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.41.161.152"/>
      <filter dst_port="53" src_ip="193.41.161.152" src_port="32774"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
1457[label="129.2.73.161;s;99pkt 99fpkt", shape=diamond, color=yellow];
1684[label="2.43.13.224;d;79pkt 79fpkt", shape=diamond, color=yellow];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.73.161:*, 2.43.13.224:80}[78%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9101%)&lt;BR/&gt; 443: (2.80899%)&lt;BR/&gt; 63030: (0.561798%)&lt;BR/&gt; 63029: (0.561798%)&lt;BR/&gt; 63028: (0.561798%)&gt;];
}
1457--1684[label="0.987342;78pkt 78fpkt"];
1457--3127[label="0.020202;2pkt 2fpkt"];
1457--3138[label="0.020202;2pkt 2fpkt"];
1684--2527[label="0.0126582;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.43.13.224" dst_port="80" src_ip="129.2.73.161"/>
    </slice>
    <from sec="1112591048" usec="0"/>
    <to sec="1112591617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
1718[label="215.128.6.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
1719[label="129.141.217.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2637[label="129.141.217.112;d;1pkt 1fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.128.6.162:80, 129.141.217.112:1028}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1718--1719[label="1;1pkt 1fpkt"];
1718--2637[label="1;1pkt 1fpkt"];
1719--2637[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.141.217.112" dst_port="1028" src_ip="215.128.6.162" src_port="80"/>
    </slice>
    <from sec="1112591274" usec="0"/>
    <to sec="1112591295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
364[label="162.94.36.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
366[label="17.141.160.45;s;4pkt 4fpkt", shape=diamond, color=yellow];
1721[label="162.94.36.176;d;6pkt 6fpkt", shape=diamond, color=yellow];
2639[label="162.94.36.176;d;6pkt 6fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.227.225.182:80, 162.94.36.176:*}[55.5556%]&lt;BR/&gt;{17.141.160.45:80, *:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4231: (8.82353%)&lt;BR/&gt; 4940: (5.88235%)&lt;BR/&gt; 4236: (5.88235%)&lt;BR/&gt; 4235: (5.88235%)&gt;];
}
364--366[label="1;1pkt 1fpkt"];
366--1721[label="0.25;1pkt 1fpkt"];
366--2639[label="0.25;1pkt 1fpkt"];
1721--2639[label="1;6pkt 6fpkt"];
1721--3818[label="0.833333;5pkt 5fpkt"];
2639--3818[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="17.141.160.45" src_port="80"/>
      <filter dst_ip="162.94.36.176" src_ip="96.227.225.182" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
403[label="135.68.241.48;s;147pkt 147fpkt", shape=diamond, color=yellow];
737[label="18.114.130.142;d;4pkt 4fpkt", shape=diamond, color=yellow];
981[label="18.114.214.18;d;7pkt 7fpkt", shape=diamond, color=yellow];
1268[label="22.210.1.170;d;5pkt 5fpkt", shape=diamond, color=yellow];
1726[label="16.248.201.1;d;8pkt 8fpkt", shape=diamond, color=yellow];
2253[label="18.76.6.63;d;14pkt 14fpkt", shape=diamond, color=yellow];
2284[label="135.68.241.48;s;116pkt 116fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.241.48:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46085: (0.498339%)&lt;BR/&gt; 46084: (0.498339%)&lt;BR/&gt; 46083: (0.498339%)&lt;BR/&gt; 46082: (0.498339%)&gt;];
}
403--708[label="0.0909091;4pkt 4fpkt"];
403--737[label="1;4pkt 4fpkt"];
403--981[label="1;7pkt 7fpkt"];
403--1092[label="0.00680272;1pkt 1fpkt"];
403--1186[label="0.057377;7pkt 7fpkt"];
403--1268[label="1;5pkt 5fpkt"];
403--1726[label="1;8pkt 8fpkt"];
403--1976[label="0.0645161;2pkt 2fpkt"];
403--2021[label="0.0285714;1pkt 1fpkt"];
403--2253[label="1;14pkt 14fpkt"];
403--2284[label="0.991379;115pkt 115fpkt"];
403--2761[label="0.1;4pkt 4fpkt"];
403--2954[label="0.00680272;1pkt 1fpkt"];
403--3127[label="0.217687;32pkt 32fpkt"];
403--3138[label="0.122449;18pkt 18fpkt"];
737--2284[label="1;4pkt 4fpkt"];
981--2284[label="1;7pkt 7fpkt"];
981--3127[label="1;7pkt 7fpkt"];
1268--2284[label="1;5pkt 5fpkt"];
1726--2284[label="1;8pkt 8fpkt"];
2284--2761[label="0.1;4pkt 4fpkt"];
2284--2954[label="0.00862069;1pkt 1fpkt"];
2284--3127[label="0.275862;32pkt 32fpkt"];
2284--3138[label="0.00862069;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="135.68.241.48"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
324[label="193.32.61.54;s;22pkt 22fpkt", shape=diamond, color=yellow];
1504[label="193.177.127.86;d;15pkt 15fpkt", shape=diamond, color=yellow];
1756[label="208.153.236.15;d;4pkt 4fpkt", shape=diamond, color=yellow];
2445[label="193.32.61.54;s;22pkt 22fpkt", shape=hexagon, color=black];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.61.54:*, 193.177.127.86:1007}[68.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1007: (35.7143%)&lt;BR/&gt; 3004: (4.7619%)&lt;BR/&gt; 2002: (4.7619%)&lt;BR/&gt; 1863: (3.1746%)&lt;BR/&gt; 3915: (2.38095%)&gt;];
}
324--1504[label="1;15pkt 15fpkt"];
324--1756[label="1;4pkt 4fpkt"];
324--2445[label="1;22pkt 22fpkt"];
1504--2445[label="1;15pkt 15fpkt"];
1756--2445[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="193.177.127.86" dst_port="1007" src_ip="193.32.61.54"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
509[label="193.41.161.156;s;66pkt 66fpkt", shape=diamond, color=yellow];
1018[label="70.33.146.230;d;2pkt 2fpkt", shape=diamond, color=yellow];
1496[label="23.62.71.138;d;2pkt 2fpkt", shape=diamond, color=yellow];
1787[label="197.199.51.140;d;3pkt 3fpkt", shape=diamond, color=yellow];
2847[label="197.199.51.140;d;3pkt 3fpkt", shape=hexagon, color=black];
2906[label="23.62.71.138;d;2pkt 2fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.161.156:6346, *:*}[77.6119%]&lt;BR/&gt;{193.41.161.156:*, *:6346}[23.8806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50.641%)&lt;BR/&gt; 6348: (5.76923%)&lt;BR/&gt; 4969: (1.92308%)&lt;BR/&gt; 4480: (1.92308%)&lt;BR/&gt; 3172: (1.92308%)&gt;];
}
509--1018[label="0.5;1pkt 1fpkt"];
509--1496[label="1;2pkt 2fpkt"];
509--1787[label="1;3pkt 3fpkt"];
509--1797[label="1;3pkt 3fpkt"];
509--2734[label="1;3pkt 3fpkt"];
509--2847[label="1;3pkt 3fpkt"];
509--2906[label="1;2pkt 2fpkt"];
1496--2906[label="1;2pkt 2fpkt"];
1787--2847[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="193.41.161.156" src_port="6346"/>
      <filter dst_port="6346" src_ip="193.41.161.156"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1168[label="167.172.1.80;s;197pkt 197fpkt", shape=diamond, color=yellow];
1169[label="220.165.35.127;d;196pkt 196fpkt", shape=diamond, color=yellow];
1800[label="211.58.236.183;d;15pkt 15fpkt", shape=diamond, color=yellow];
2605[label="167.172.1.80;s;197pkt 197fpkt", shape=hexagon, color=black];
2997[label="220.165.35.127;d;196pkt 196fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.172.1.80:*, 220.165.35.127:6667}[92.891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (48.9388%)&lt;BR/&gt; 5050: (0.998752%)&lt;BR/&gt; 3657: (0.31211%)&lt;BR/&gt; 3750: (0.249688%)&lt;BR/&gt; 3749: (0.249688%)&gt;];
}
1168--1169[label="1;196pkt 196fpkt"];
1168--1800[label="0.0666667;1pkt 1fpkt"];
1168--2605[label="1;197pkt 197fpkt"];
1168--2997[label="1;196pkt 196fpkt"];
1169--2605[label="1;196pkt 196fpkt"];
1169--2997[label="1;196pkt 196fpkt"];
1800--2328[label="0.0666667;1pkt 1fpkt"];
1800--2605[label="0.0666667;1pkt 1fpkt"];
2605--2997[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_ip="220.165.35.127" dst_port="6667" src_ip="167.172.1.80"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.869278,1.80159,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
45[label="135.69.241.193s;52pkt 52fpkt", shape=rectangle, color=red];
465[label="135.69.241.193;s;306pkt 306fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.241.193:*, 216.81.72.213:80}[21.2418%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8603%)&lt;BR/&gt; 1080: (0.418994%)&lt;BR/&gt; 1064: (0.418994%)&lt;BR/&gt; 1047: (0.418994%)&lt;BR/&gt; 1614: (0.27933%)&gt;];
}
45--465[label="1;52pkt 52fpkt"];
45--2867[label="1;52pkt 52fpkt"];
465--660[label="0.00458716;1pkt 1fpkt"];
465--1869[label="0.894737;17pkt 17fpkt"];
465--2325[label="0.00458716;1pkt 1fpkt"];
465--2867[label="1;306pkt 306fpkt"];
465--3138[label="0.00326797;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.81.72.213" dst_port="80" src_ip="135.69.241.193"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
1878[label="135.69.65.248;d;29pkt 29fpkt", shape=diamond, color=yellow];
1900[label="215.132.99.190;s;29pkt 29fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.132.99.190:80, 135.69.65.248:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49827: (1.72414%)&lt;BR/&gt; 49826: (1.72414%)&lt;BR/&gt; 49825: (1.72414%)&lt;BR/&gt; 49824: (1.72414%)&gt;];
}
1878--1900[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.65.248" src_ip="215.132.99.190" src_port="80"/>
    </slice>
    <from sec="1112591214" usec="0"/>
    <to sec="1112591517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
362[label="220.153.114.26;s;1608pkt 1608fpkt", shape=diamond, color=yellow];
1284[label="193.41.141.128;d;1772pkt 1772fpkt", shape=diamond, color=yellow];
1920[label="72.113.179.40;s;17pkt 17fpkt", shape=diamond, color=yellow];
1937[label="72.119.77.10;s;26pkt 26fpkt", shape=diamond, color=yellow];
2361[label="220.153.114.26;s;603pkt 603fpkt", shape=hexagon, color=black];
3323[label="72.113.179.40;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3456[label="196.103.236.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4109[label="72.113.179.40;16pkt 16fpkt", shape=invtriangle, color=brown];
4173[label="196.103.236.81;2pkt 2fpkt", shape=invtriangle, color=brown];
4474[label="72.113.179.40;17pkt 17fpkt", shape=invhouse, color=bisque];
4502[label="196.103.236.81;2pkt 2fpkt", shape=invhouse, color=bisque];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.41.141.128:*}[24.2455%]&lt;BR/&gt;{220.153.114.26:*, 193.41.141.128:80}[23.6317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.8177%)&lt;BR/&gt; 53: (3.5653%)&lt;BR/&gt; 5554: (2.09507%)&lt;BR/&gt; 1023: (1.9603%)&lt;BR/&gt; 9898: (1.69076%)&gt;];
}
362--1284[label="0.896766;1442pkt 1442fpkt"];
362--2361[label="1;603pkt 603fpkt"];
362--3124[label="0.00248756;4pkt 4fpkt"];
362--3125[label="0.00559701;9pkt 9fpkt"];
362--3126[label="0.0161692;26pkt 26fpkt"];
362--3127[label="0.028607;46pkt 46fpkt"];
362--3128[label="0.00373134;6pkt 6fpkt"];
362--3129[label="0.00746269;12pkt 12fpkt"];
362--3130[label="0.0161692;26pkt 26fpkt"];
362--3131[label="0.000621891;1pkt 1fpkt"];
362--3134[label="0.00746269;12pkt 12fpkt"];
362--3135[label="0.0180348;29pkt 29fpkt"];
362--3136[label="0.000793651;1pkt 1fpkt"];
362--3137[label="0.00435323;7pkt 7fpkt"];
362--3138[label="0.0254975;41pkt 41fpkt"];
362--3139[label="0.00559701;9pkt 9fpkt"];
362--3140[label="0.0161692;26pkt 26fpkt"];
362--3141[label="0.00746269;12pkt 12fpkt"];
362--3142[label="0.0161692;26pkt 26fpkt"];
362--3143[label="0.000621891;1pkt 1fpkt"];
362--3146[label="0.00746269;12pkt 12fpkt"];
362--3147[label="0.0180348;29pkt 29fpkt"];
362--3148[label="0.000793651;1pkt 1fpkt"];
362--3149[label="0.00559701;9pkt 9fpkt"];
362--3150[label="0.0161692;26pkt 26fpkt"];
362--3151[label="0.00746269;12pkt 12fpkt"];
362--3152[label="0.0161692;26pkt 26fpkt"];
362--3153[label="0.000621891;1pkt 1fpkt"];
362--3156[label="0.00746269;12pkt 12fpkt"];
362--3157[label="0.0180348;29pkt 29fpkt"];
362--3158[label="0.000793651;1pkt 1fpkt"];
1284--1355[label="0.280702;32pkt 32fpkt"];
1284--1401[label="0.0113636;1pkt 1fpkt"];
1284--1439[label="0.333333;1pkt 1fpkt"];
1284--1920[label="1;17pkt 17fpkt"];
1284--1937[label="0.384615;10pkt 10fpkt"];
1284--2153[label="0.0375;3pkt 3fpkt"];
1284--2361[label="1;603pkt 603fpkt"];
1284--2560[label="0.00282167;5pkt 5fpkt"];
1284--2584[label="0.0650888;11pkt 11fpkt"];
1284--2617[label="0.333333;1pkt 1fpkt"];
1284--2750[label="0.012987;1pkt 1fpkt"];
1284--2970[label="0.280702;32pkt 32fpkt"];
1284--3124[label="0.00225734;4pkt 4fpkt"];
1284--3125[label="0.00902935;16pkt 16fpkt"];
1284--3126[label="0.0197517;35pkt 35fpkt"];
1284--3127[label="0.0259594;46pkt 46fpkt"];
1284--3128[label="0.003386;6pkt 6fpkt"];
1284--3129[label="0.0129797;23pkt 23fpkt"];
1284--3130[label="0.0248307;44pkt 44fpkt"];
1284--3131[label="0.000564334;1pkt 1fpkt"];
1284--3134[label="0.00733634;13pkt 13fpkt"];
1284--3135[label="0.01693;30pkt 30fpkt"];
1284--3136[label="0.000793651;1pkt 1fpkt"];
1284--3137[label="0.00282167;5pkt 5fpkt"];
1284--3138[label="0.011851;21pkt 21fpkt"];
1284--3139[label="0.00902935;16pkt 16fpkt"];
1284--3140[label="0.0197517;35pkt 35fpkt"];
1284--3141[label="0.0129797;23pkt 23fpkt"];
1284--3142[label="0.0248307;44pkt 44fpkt"];
1284--3143[label="0.000564334;1pkt 1fpkt"];
1284--3146[label="0.00733634;13pkt 13fpkt"];
1284--3147[label="0.01693;30pkt 30fpkt"];
1284--3148[label="0.000793651;1pkt 1fpkt"];
1284--3149[label="0.00902935;16pkt 16fpkt"];
1284--3150[label="0.0197517;35pkt 35fpkt"];
1284--3151[label="0.0129797;23pkt 23fpkt"];
1284--3152[label="0.0248307;44pkt 44fpkt"];
1284--3153[label="0.000564334;1pkt 1fpkt"];
1284--3156[label="0.00733634;13pkt 13fpkt"];
1284--3157[label="0.01693;30pkt 30fpkt"];
1284--3158[label="0.000793651;1pkt 1fpkt"];
1284--3323[label="1;16pkt 16fpkt"];
1284--3330[label="1;3pkt 3fpkt"];
1284--3456[label="0.5;1pkt 1fpkt"];
1284--3493[label="0.0909091;3pkt 3fpkt"];
1284--3510[label="0.000564334;1pkt 1fpkt"];
1284--3526[label="0.103448;3pkt 3fpkt"];
1284--3818[label="0.025641;1pkt 1fpkt"];
1284--3905[label="0.0909091;3pkt 3fpkt"];
1284--4109[label="1;16pkt 16fpkt"];
1284--4111[label="1;4pkt 4fpkt"];
1284--4173[label="0.5;1pkt 1fpkt"];
1284--4195[label="0.000564334;1pkt 1fpkt"];
1284--4474[label="1;17pkt 17fpkt"];
1284--4502[label="0.5;1pkt 1fpkt"];
1284--4514[label="0.000564334;1pkt 1fpkt"];
1920--3323[label="1;16pkt 16fpkt"];
1920--4109[label="1;16pkt 16fpkt"];
1920--4474[label="1;17pkt 17fpkt"];
2361--3124[label="0.0066335;4pkt 4fpkt"];
2361--3125[label="0.0149254;9pkt 9fpkt"];
2361--3126[label="0.0431177;26pkt 26fpkt"];
2361--3127[label="0.0762852;46pkt 46fpkt"];
2361--3128[label="0.00995025;6pkt 6fpkt"];
2361--3129[label="0.00829187;5pkt 5fpkt"];
2361--3130[label="0.00497512;3pkt 3fpkt"];
2361--3131[label="0.00165837;1pkt 1fpkt"];
2361--3134[label="0.00829187;5pkt 5fpkt"];
2361--3135[label="0.00497512;3pkt 3fpkt"];
2361--3137[label="0.00331675;2pkt 2fpkt"];
2361--3138[label="0.0066335;4pkt 4fpkt"];
2361--3139[label="0.0149254;9pkt 9fpkt"];
2361--3140[label="0.0431177;26pkt 26fpkt"];
2361--3141[label="0.00829187;5pkt 5fpkt"];
2361--3142[label="0.00497512;3pkt 3fpkt"];
2361--3143[label="0.00165837;1pkt 1fpkt"];
2361--3146[label="0.00829187;5pkt 5fpkt"];
2361--3147[label="0.00497512;3pkt 3fpkt"];
2361--3149[label="0.0149254;9pkt 9fpkt"];
2361--3150[label="0.0431177;26pkt 26fpkt"];
2361--3151[label="0.00829187;5pkt 5fpkt"];
2361--3152[label="0.00497512;3pkt 3fpkt"];
2361--3153[label="0.00165837;1pkt 1fpkt"];
2361--3156[label="0.00829187;5pkt 5fpkt"];
2361--3157[label="0.00497512;3pkt 3fpkt"];
3323--4109[label="1;16pkt 16fpkt"];
3323--4474[label="1;16pkt 16fpkt"];
3456--4173[label="1;2pkt 2fpkt"];
3456--4502[label="1;2pkt 2fpkt"];
4109--4474[label="1;16pkt 16fpkt"];
4173--4502[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.141.128" src_port="80"/>
      <filter dst_ip="193.41.141.128" dst_port="80" src_ip="220.153.114.26"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="96.139.192.18"/>
      <from sec="1112590800" usec="0"/>
      <to sec="1112591622" usec="0"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897198,1.73963,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1114[label="197.200.39.83;d;58pkt 58fpkt", shape=diamond, color=yellow];
1958[label="135.69.18.137;s;70pkt 70fpkt", shape=diamond, color=yellow];
2751[label="16.66.100.182;d;25pkt 25fpkt", shape=hexagon, color=black];
3634[label="135.69.18.137;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4538[label="135.69.18.137;72pkt 72fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.200.39.83:80}[30.5195%]&lt;BR/&gt;{135.69.18.137:*, 197.91.10.243:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4698%)&lt;BR/&gt; 443: (4.5302%)&lt;BR/&gt; 17366: (0.671141%)&lt;BR/&gt; 2011: (0.671141%)&lt;BR/&gt; 1535: (0.671141%)&gt;];
}
1114--1808[label="0.0172414;1pkt 1fpkt"];
1114--1841[label="0.727273;24pkt 24fpkt"];
1114--1958[label="0.0172414;1pkt 1fpkt"];
1114--2272[label="0.0689655;4pkt 4fpkt"];
1114--2342[label="0.137931;8pkt 8fpkt"];
1114--2364[label="0.0555556;1pkt 1fpkt"];
1114--3060[label="0.0689655;4pkt 4fpkt"];
1114--3127[label="0.103448;6pkt 6fpkt"];
1114--3138[label="0.0172414;1pkt 1fpkt"];
1114--3634[label="0.0172414;1pkt 1fpkt"];
1114--3753[label="0.71875;23pkt 23fpkt"];
1114--4538[label="0.0172414;1pkt 1fpkt"];
1958--1968[label="0.0285714;2pkt 2fpkt"];
1958--1985[label="0.0285714;2pkt 2fpkt"];
1958--1988[label="0.0285714;2pkt 2fpkt"];
1958--1998[label="0.0428571;3pkt 3fpkt"];
1958--2751[label="0.04;1pkt 1fpkt"];
1958--3127[label="0.0571429;4pkt 4fpkt"];
1958--3138[label="0.0714286;5pkt 5fpkt"];
1958--3634[label="1;70pkt 70fpkt"];
1958--4245[label="0.971429;68pkt 68fpkt"];
1958--4538[label="0.985714;69pkt 69fpkt"];
2751--3127[label="0.12;3pkt 3fpkt"];
2751--3634[label="0.04;1pkt 1fpkt"];
2751--3680[label="0.04;1pkt 1fpkt"];
2751--4245[label="0.04;1pkt 1fpkt"];
2751--4268[label="0.04;1pkt 1fpkt"];
2751--4538[label="0.04;1pkt 1fpkt"];
3634--4245[label="1;71pkt 71fpkt"];
3634--4538[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="197.200.39.83" dst_port="80"/>
      <filter dst_ip="197.91.10.243" dst_port="80" src_ip="135.69.18.137"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.29.158.243"/>
      <from sec="1112590802" usec="0"/>
      <to sec="1112591628" usec="0"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.58.236.161"/>
      <from sec="1112590804" usec="0"/>
      <to sec="1112591538" usec="0"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
608[label="135.69.234.165;d;119pkt 119fpkt", shape=diamond, color=yellow];
717[label="99.165.113.36;s;2pkt 2fpkt", shape=diamond, color=yellow];
2008[label="192.48.155.181;s;96pkt 96fpkt", shape=diamond, color=yellow];
2566[label="135.69.234.165;d;119pkt 119fpkt", shape=hexagon, color=black];
3726[label="99.210.3.157;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.48.155.181:80, 135.69.234.165:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2741%)&lt;BR/&gt; 19101: (5.97668%)&lt;BR/&gt; 2569: (0.874636%)&lt;BR/&gt; 2566: (0.874636%)&lt;BR/&gt; 2562: (0.728863%)&gt;];
}
608--717[label="1;2pkt 2fpkt"];
608--2008[label="1;96pkt 96fpkt"];
608--2566[label="1;119pkt 119fpkt"];
608--3126[label="0.0420168;5pkt 5fpkt"];
608--3130[label="0.0420168;5pkt 5fpkt"];
608--3135[label="0.0420168;5pkt 5fpkt"];
608--3140[label="0.0420168;5pkt 5fpkt"];
608--3142[label="0.0420168;5pkt 5fpkt"];
608--3147[label="0.0420168;5pkt 5fpkt"];
608--3150[label="0.0420168;5pkt 5fpkt"];
608--3152[label="0.0420168;5pkt 5fpkt"];
608--3157[label="0.0420168;5pkt 5fpkt"];
608--3726[label="0.857143;6pkt 6fpkt"];
717--2566[label="1;2pkt 2fpkt"];
2008--2566[label="1;96pkt 96fpkt"];
2008--3126[label="0.0520833;5pkt 5fpkt"];
2008--3130[label="0.0520833;5pkt 5fpkt"];
2008--3135[label="0.0520833;5pkt 5fpkt"];
2008--3140[label="0.0520833;5pkt 5fpkt"];
2008--3142[label="0.0520833;5pkt 5fpkt"];
2008--3147[label="0.0520833;5pkt 5fpkt"];
2008--3150[label="0.0520833;5pkt 5fpkt"];
2008--3152[label="0.0520833;5pkt 5fpkt"];
2008--3157[label="0.0520833;5pkt 5fpkt"];
2566--3126[label="0.0420168;5pkt 5fpkt"];
2566--3130[label="0.0420168;5pkt 5fpkt"];
2566--3135[label="0.0420168;5pkt 5fpkt"];
2566--3140[label="0.0420168;5pkt 5fpkt"];
2566--3142[label="0.0420168;5pkt 5fpkt"];
2566--3147[label="0.0420168;5pkt 5fpkt"];
2566--3150[label="0.0420168;5pkt 5fpkt"];
2566--3152[label="0.0420168;5pkt 5fpkt"];
2566--3157[label="0.0420168;5pkt 5fpkt"];
2566--3726[label="0.857143;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.234.165" src_ip="192.48.155.181" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="135.69.78.204"/>
      <from sec="1112590817" usec="0"/>
      <to sec="1112591616" usec="0"/>
    </slice>
    <from sec="1112590817" usec="0"/>
    <to sec="1112591616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
2047[label="197.69.140.76;d;6pkt 6fpkt", shape=diamond, color=yellow];
2048[label="193.32.180.221;s;29pkt 29fpkt", shape=diamond, color=yellow];
3932[label="193.32.180.221;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.180.221:*, 18.33.110.26:80}[54.0541%]&lt;BR/&gt;{193.32.180.221:*, 196.193.176.51:80}[29.7297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3008: (2.17391%)&lt;BR/&gt; 2967: (2.17391%)&lt;BR/&gt; 2966: (2.17391%)&lt;BR/&gt; 3034: (1.44928%)&gt;];
}
2047--2048[label="0.5;3pkt 3fpkt"];
2047--3138[label="0.333333;2pkt 2fpkt"];
2047--3932[label="0.5;3pkt 3fpkt"];
2048--3138[label="0.206897;6pkt 6fpkt"];
2048--3932[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="18.33.110.26" dst_port="80" src_ip="193.32.180.221"/>
      <filter dst_ip="196.193.176.51" dst_port="80" src_ip="193.32.180.221"/>
    </slice>
    <from sec="1112591253" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.218.91.128"/>
      <from sec="1112591274" usec="0"/>
      <to sec="1112591538" usec="0"/>
    </slice>
    <from sec="1112591274" usec="0"/>
    <to sec="1112591538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
1676[label="72.113.178.143;d;71pkt 71fpkt", shape=diamond, color=yellow];
2055[label="129.141.43.46;s;57pkt 57fpkt", shape=diamond, color=yellow];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.6.168:*, 72.113.178.143:443}[26.8519%]&lt;BR/&gt;{129.141.43.46:*, 72.113.178.61:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (31.25%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 49363: (1.17188%)&lt;BR/&gt; 49418: (0.78125%)&lt;BR/&gt; 49416: (0.78125%)&gt;];
}
1676--1702[label="0.450704;32pkt 32fpkt"];
1676--2055[label="0.350877;20pkt 20fpkt"];
1676--3138[label="0.028169;2pkt 2fpkt"];
2055--3138[label="0.105263;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="72.113.178.61" dst_port="80" src_ip="129.141.43.46"/>
      <filter dst_ip="72.113.178.143" dst_port="443" src_ip="135.69.6.168"/>
    </slice>
    <from sec="1112591120" usec="0"/>
    <to sec="1112591624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1892[label="129.141.27.68;s;2pkt 2fpkt", shape=diamond, color=yellow];
2071[label="17.50.106.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.141.27.68:80, 17.50.106.7:58391}[50%]&lt;BR/&gt;{129.141.27.68:80, 196.127.110.239:35700}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58391: (33.3333%)&lt;BR/&gt; 35700: (16.6667%)&gt;];
}
1892--2071[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.127.110.239" dst_port="35700" src_ip="129.141.27.68" src_port="80"/>
      <filter dst_ip="17.50.106.7" dst_port="58391" src_ip="129.141.27.68" src_port="80"/>
    </slice>
    <from sec="1112591281" usec="0"/>
    <to sec="1112591458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1126[label="18.160.160.80;d;280pkt 280fpkt", shape=diamond, color=yellow];
1352[label="135.69.23.19;s;179pkt 179fpkt", shape=diamond, color=yellow];
1499[label="18.160.160.76;d;474pkt 474fpkt", shape=diamond, color=yellow];
1594[label="135.69.10.19;s;114pkt 114fpkt", shape=diamond, color=yellow];
2102[label="135.69.102.212;s;84pkt 84fpkt", shape=diamond, color=yellow];
2822[label="18.160.160.76;d;474pkt 474fpkt", shape=hexagon, color=black];
3632[label="129.141.145.136;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4244[label="129.141.145.136;37pkt 37fpkt", shape=invtriangle, color=brown];
4537[label="129.141.145.136;37pkt 37fpkt", shape=invhouse, color=bisque];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 18.160.160.80:2703}[35.5164%]&lt;BR/&gt;{135.68.31.98:*, *:2703}[22.0403%]&lt;BR/&gt;{135.69.23.19:*, 18.160.160.76:2703}[20.6549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (48.6022%)&lt;BR/&gt; 25: (0.873617%)&lt;BR/&gt; 9898: (0.174723%)&lt;BR/&gt; 5554: (0.174723%)&lt;BR/&gt; 1023: (0.174723%)&gt;];
}
1126--1189[label="0.402778;87pkt 87fpkt"];
1126--1594[label="0.491228;56pkt 56fpkt"];
1126--2102[label="0.416667;35pkt 35fpkt"];
1126--3006[label="0.402778;87pkt 87fpkt"];
1126--3632[label="0.368421;14pkt 14fpkt"];
1126--4244[label="0.378378;14pkt 14fpkt"];
1126--4537[label="0.378378;14pkt 14fpkt"];
1352--1499[label="0.916201;164pkt 164fpkt"];
1352--2822[label="0.916201;164pkt 164fpkt"];
1499--1594[label="0.491228;56pkt 56fpkt"];
1499--2102[label="0.428571;36pkt 36fpkt"];
1499--2822[label="1;474pkt 474fpkt"];
1499--3006[label="0.407407;88pkt 88fpkt"];
1499--3632[label="0.368421;14pkt 14fpkt"];
1499--4244[label="0.351351;13pkt 13fpkt"];
1499--4537[label="0.351351;13pkt 13fpkt"];
1594--2822[label="0.491228;56pkt 56fpkt"];
2102--2822[label="0.428571;36pkt 36fpkt"];
2822--3006[label="0.407407;88pkt 88fpkt"];
2822--3632[label="0.368421;14pkt 14fpkt"];
2822--4244[label="0.351351;13pkt 13fpkt"];
2822--4537[label="0.351351;13pkt 13fpkt"];
3632--4244[label="1;37pkt 37fpkt"];
3632--4537[label="1;37pkt 37fpkt"];
4244--4537[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="2703" src_ip="135.68.31.98"/>
      <filter dst_ip="18.160.160.80" dst_port="2703"/>
      <filter dst_ip="18.160.160.76" dst_port="2703" src_ip="135.69.23.19"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.226.114.217"/>
      <from sec="1112590800" usec="0"/>
      <to sec="1112591626" usec="0"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.172.24.39"/>
      <from sec="1112590802" usec="0"/>
      <to sec="1112591628" usec="0"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
837[label="144.126.209.94;d;99pkt 99fpkt", shape=diamond, color=yellow];
1335[label="99.124.93.237;s;2pkt 2fpkt", shape=diamond, color=yellow];
2162[label="214.134.34.49;s;57pkt 57fpkt", shape=diamond, color=yellow];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.134.34.49:21, 144.126.209.94:*}[28.2828%]&lt;BR/&gt;{208.130.15.128:80, 144.126.209.94:*}[26.2626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (17.7215%)&lt;BR/&gt; 80: (11.7089%)&lt;BR/&gt; 1490: (1.26582%)&lt;BR/&gt; 8000: (0.949367%)&lt;BR/&gt; 4001: (0.949367%)&gt;];
}
837--1335[label="1;2pkt 2fpkt"];
837--2162[label="1;57pkt 57fpkt"];
837--3126[label="0.020202;2pkt 2fpkt"];
837--3135[label="0.0505051;5pkt 5fpkt"];
837--3140[label="0.020202;2pkt 2fpkt"];
837--3147[label="0.0505051;5pkt 5fpkt"];
837--3150[label="0.020202;2pkt 2fpkt"];
837--3157[label="0.0505051;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.209.94" src_ip="214.134.34.49" src_port="21"/>
      <filter dst_ip="144.126.209.94" src_ip="208.130.15.128" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.218.91.128"/>
      <from sec="1112591274" usec="0"/>
      <to sec="1112591627" usec="0"/>
    </slice>
    <from sec="1112591274" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
578[label="192.65.179.79;d;104pkt 104fpkt", shape=diamond, color=yellow];
2222[label="214.32.39.137;s;3pkt 3fpkt", shape=diamond, color=yellow];
3576[label="201.53.87.116;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3637[label="214.32.39.137;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4246[label="214.32.39.137;2pkt 2fpkt", shape=invtriangle, color=brown];
4539[label="214.32.39.137;3pkt 3fpkt", shape=invhouse, color=bisque];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.65.179.79:80}[40.1869%]&lt;BR/&gt;{*:*, 192.65.179.79:53}[28.972%]&lt;BR/&gt;{*:53, 192.65.179.79:*}[21.4953%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.6923%)&lt;BR/&gt; 53: (20.7692%)&lt;BR/&gt; 4753: (5.38462%)&lt;BR/&gt; 0: (3.84615%)&lt;BR/&gt; 25: (2.30769%)&gt;];
}
578--639[label="1;1pkt 1fpkt"];
578--728[label="0.00961538;1pkt 1fpkt"];
578--2222[label="0.666667;2pkt 2fpkt"];
578--2323[label="1;1pkt 1fpkt"];
578--2336[label="0.00961538;1pkt 1fpkt"];
578--3069[label="0.00961538;1pkt 1fpkt"];
578--3125[label="0.0192308;2pkt 2fpkt"];
578--3127[label="0.0384615;4pkt 4fpkt"];
578--3129[label="0.00961538;1pkt 1fpkt"];
578--3131[label="0.00961538;1pkt 1fpkt"];
578--3134[label="0.00961538;1pkt 1fpkt"];
578--3137[label="0.0288462;3pkt 3fpkt"];
578--3138[label="0.0480769;5pkt 5fpkt"];
578--3139[label="0.0192308;2pkt 2fpkt"];
578--3141[label="0.00961538;1pkt 1fpkt"];
578--3143[label="0.00961538;1pkt 1fpkt"];
578--3146[label="0.00961538;1pkt 1fpkt"];
578--3149[label="0.0192308;2pkt 2fpkt"];
578--3151[label="0.00961538;1pkt 1fpkt"];
578--3153[label="0.00961538;1pkt 1fpkt"];
578--3156[label="0.00961538;1pkt 1fpkt"];
578--3510[label="0.00961538;1pkt 1fpkt"];
578--3517[label="0.0106383;1pkt 1fpkt"];
578--3576[label="0.866667;13pkt 13fpkt"];
578--3616[label="0.0104167;1pkt 1fpkt"];
578--3637[label="0.666667;2pkt 2fpkt"];
578--3905[label="0.030303;1pkt 1fpkt"];
578--4195[label="0.00961538;1pkt 1fpkt"];
578--4246[label="1;2pkt 2fpkt"];
578--4514[label="0.00961538;1pkt 1fpkt"];
578--4539[label="0.666667;2pkt 2fpkt"];
2222--3138[label="0.333333;1pkt 1fpkt"];
2222--3637[label="1;3pkt 3fpkt"];
2222--4246[label="1;2pkt 2fpkt"];
2222--4539[label="1;3pkt 3fpkt"];
3637--4246[label="1;2pkt 2fpkt"];
3637--4539[label="1;3pkt 3fpkt"];
4246--4539[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.179.79" src_port="53"/>
      <filter dst_ip="192.65.179.79" dst_port="80"/>
      <filter dst_ip="192.65.179.79" dst_port="53"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
382[label="135.69.20.200;s;802pkt 802fpkt", shape=diamond, color=yellow];
586[label="202.100.240.252;d;430pkt 430fpkt", shape=diamond, color=yellow];
979[label="220.95.31.98;d;86pkt 86fpkt", shape=diamond, color=yellow];
1460[label="220.95.28.176;d;14pkt 14fpkt", shape=diamond, color=yellow];
2158[label="202.100.240.253;d;77pkt 77fpkt", shape=diamond, color=yellow];
2215[label="199.216.81.109;d;24pkt 24fpkt", shape=diamond, color=yellow];
2280[label="135.69.20.200;s;82pkt 82fpkt", shape=hexagon, color=black];
2537[label="220.95.28.176;d;14pkt 14fpkt", shape=hexagon, color=black];
2988[label="202.100.240.253;d;77pkt 77fpkt", shape=hexagon, color=black];
3864[label="135.69.20.200;845pkt 845fpkt", shape=pentagon, color=darkviolet];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.20.200:*, 202.100.240.252:80}[52.7684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9184%)&lt;BR/&gt; 3394: (0.163199%)&lt;BR/&gt; 2559: (0.163199%)&lt;BR/&gt; 2267: (0.163199%)&lt;BR/&gt; 4739: (0.142799%)&gt;];
}
382--462[label="0.03125;4pkt 4fpkt"];
382--472[label="0.0549451;5pkt 5fpkt"];
382--586[label="1;430pkt 430fpkt"];
382--693[label="0.015873;1pkt 1fpkt"];
382--961[label="1;57pkt 57fpkt"];
382--979[label="0.569767;49pkt 49fpkt"];
382--1460[label="0.857143;12pkt 12fpkt"];
382--1608[label="0.0120482;1pkt 1fpkt"];
382--2158[label="1;77pkt 77fpkt"];
382--2215[label="1;24pkt 24fpkt"];
382--2280[label="1;82pkt 82fpkt"];
382--2526[label="0.0487805;4pkt 4fpkt"];
382--2537[label="0.857143;12pkt 12fpkt"];
382--2988[label="1;77pkt 77fpkt"];
382--3078[label="0.0487805;4pkt 4fpkt"];
382--3127[label="0.104738;84pkt 84fpkt"];
382--3138[label="0.0648379;52pkt 52fpkt"];
382--3864[label="0.998753;801pkt 801fpkt"];
586--2280[label="0.768293;63pkt 63fpkt"];
586--3127[label="0.0790698;34pkt 34fpkt"];
586--3138[label="0.0860465;37pkt 37fpkt"];
586--3864[label="0.997674;429pkt 429fpkt"];
979--2615[label="0.430233;37pkt 37fpkt"];
979--3127[label="0.639535;55pkt 55fpkt"];
979--3864[label="0.569767;49pkt 49fpkt"];
1460--2537[label="1;14pkt 14fpkt"];
1460--3864[label="0.857143;12pkt 12fpkt"];
2158--2280[label="0.12987;10pkt 10fpkt"];
2158--2988[label="1;77pkt 77fpkt"];
2158--3127[label="0.0519481;4pkt 4fpkt"];
2158--3138[label="0.0519481;4pkt 4fpkt"];
2158--3864[label="1;77pkt 77fpkt"];
2215--3138[label="0.291667;7pkt 7fpkt"];
2215--3864[label="1;24pkt 24fpkt"];
2280--2526[label="0.0121951;1pkt 1fpkt"];
2280--2988[label="0.12987;10pkt 10fpkt"];
2280--3078[label="0.0121951;1pkt 1fpkt"];
2280--3127[label="0.0853659;7pkt 7fpkt"];
2280--3864[label="0.987805;81pkt 81fpkt"];
2537--3864[label="0.857143;12pkt 12fpkt"];
2988--3127[label="0.0519481;4pkt 4fpkt"];
2988--3138[label="0.0519481;4pkt 4fpkt"];
2988--3864[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="202.100.240.252" dst_port="80" src_ip="135.69.20.200"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
398[label="145.81.243.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
399[label="135.69.234.165;s;13pkt 13fpkt", shape=diamond, color=yellow];
2282[label="135.69.234.165;s;6pkt 6fpkt", shape=hexagon, color=black];
2693[label="145.81.243.228;d;1pkt 1fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.234.165:19101, 99.210.3.157:*}[53.8462%]&lt;BR/&gt;{135.69.234.165:*, *:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (38.0952%)&lt;BR/&gt; 62038: (9.52381%)&lt;BR/&gt; 80: (7.14286%)&lt;BR/&gt; 61838: (4.7619%)&lt;BR/&gt; 61310: (4.7619%)&gt;];
}
398--399[label="1;1pkt 1fpkt"];
398--2282[label="1;1pkt 1fpkt"];
398--2693[label="1;1pkt 1fpkt"];
399--882[label="0.0769231;1pkt 1fpkt"];
399--2282[label="1;6pkt 6fpkt"];
399--2693[label="1;1pkt 1fpkt"];
2282--2693[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="135.69.234.165"/>
      <filter dst_ip="99.210.3.157" src_ip="135.69.234.165" src_port="19101"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
402[label="129.2.67.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
1308[label="96.162.86.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
2283[label="129.2.67.123;s;1pkt 1fpkt", shape=hexagon, color=black];
2836[label="96.162.86.244;d;1pkt 1fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.67.123:1919, 96.162.86.244:8069}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8069: (50%)&lt;BR/&gt; 1919: (50%)&gt;];
}
402--1308[label="1;1pkt 1fpkt"];
402--2283[label="1;1pkt 1fpkt"];
402--2836[label="1;1pkt 1fpkt"];
1308--2283[label="1;1pkt 1fpkt"];
1308--2836[label="1;1pkt 1fpkt"];
2283--2836[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.162.86.244" dst_port="8069" src_ip="129.2.67.123" src_port="1919"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
473[label="17.106.81.29;d;32pkt 32fpkt", shape=diamond, color=yellow];
485[label="135.68.100.166;s;6pkt 6fpkt", shape=diamond, color=yellow];
2299[label="17.106.81.29;d;32pkt 32fpkt", shape=hexagon, color=black];
2302[label="135.68.100.166;s;6pkt 6fpkt", shape=hexagon, color=black];
3760[label="135.68.100.166;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4301[label="135.68.100.166;12pkt 12fpkt", shape=invtriangle, color=brown];
4560[label="135.68.100.166;13pkt 13fpkt", shape=invhouse, color=bisque];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.16.225:*, 17.106.81.29:80}[48.5714%]&lt;BR/&gt;{135.68.100.166:*, 17.106.81.29:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2456%)&lt;BR/&gt; 27195: (3.07018%)&lt;BR/&gt; 26845: (3.07018%)&lt;BR/&gt; 23359: (3.07018%)&lt;BR/&gt; 21986: (3.07018%)&gt;];
}
473--485[label="0.833333;5pkt 5fpkt"];
473--739[label="0.53125;17pkt 17fpkt"];
473--2299[label="1;32pkt 32fpkt"];
473--2302[label="0.833333;5pkt 5fpkt"];
473--2342[label="0.46875;15pkt 15fpkt"];
473--3127[label="0.03125;1pkt 1fpkt"];
473--3138[label="0.03125;1pkt 1fpkt"];
473--3760[label="0.769231;10pkt 10fpkt"];
473--4301[label="0.833333;10pkt 10fpkt"];
473--4560[label="0.769231;10pkt 10fpkt"];
485--2299[label="0.833333;5pkt 5fpkt"];
485--2302[label="1;6pkt 6fpkt"];
485--3760[label="1;6pkt 6fpkt"];
485--4301[label="0.833333;5pkt 5fpkt"];
485--4560[label="1;6pkt 6fpkt"];
2299--2302[label="0.833333;5pkt 5fpkt"];
2299--2342[label="0.46875;15pkt 15fpkt"];
2299--3127[label="0.03125;1pkt 1fpkt"];
2299--3138[label="0.03125;1pkt 1fpkt"];
2299--3760[label="0.769231;10pkt 10fpkt"];
2299--4301[label="0.833333;10pkt 10fpkt"];
2299--4560[label="0.769231;10pkt 10fpkt"];
2302--3760[label="1;6pkt 6fpkt"];
2302--4301[label="0.833333;5pkt 5fpkt"];
2302--4560[label="1;6pkt 6fpkt"];
3760--4301[label="1;12pkt 12fpkt"];
3760--4560[label="1;13pkt 13fpkt"];
4301--4560[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="17.106.81.29" dst_port="80" src_ip="135.68.16.225"/>
      <filter dst_ip="17.106.81.29" dst_port="80" src_ip="135.68.100.166"/>
    </slice>
    <from sec="1112590813" usec="0"/>
    <to sec="1112591607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
345[label="135.68.16.171;s;334pkt 334fpkt", shape=diamond, color=yellow];
466[label="202.185.27.165;d;37pkt 37fpkt", shape=diamond, color=yellow];
626[label="18.240.108.21;d;40pkt 40fpkt", shape=diamond, color=yellow];
1664[label="214.232.118.24;d;98pkt 98fpkt", shape=diamond, color=yellow];
2317[label="135.68.16.171;s;311pkt 311fpkt", shape=hexagon, color=black];
2795[label="23.74.16.28;d;5pkt 5fpkt", shape=hexagon, color=black];
3556[label="135.68.225.112;65pkt 65fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.16.171:80, *:*}[82.266%]&lt;BR/&gt;{*:*, 214.232.118.24:*}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6404%)&lt;BR/&gt; 443: (7.35955%)&lt;BR/&gt; 60739: (0.168539%)&lt;BR/&gt; 47274: (0.168539%)&lt;BR/&gt; 46814: (0.168539%)&gt;];
}
345--466[label="1;37pkt 37fpkt"];
345--626[label="1;40pkt 40fpkt"];
345--1658[label="0.209302;9pkt 9fpkt"];
345--1664[label="0.306122;30pkt 30fpkt"];
345--1875[label="0.2;1pkt 1fpkt"];
345--2177[label="0.121429;17pkt 17fpkt"];
345--2226[label="1;10pkt 10fpkt"];
345--2317[label="1;311pkt 311fpkt"];
345--2795[label="0.2;1pkt 1fpkt"];
345--3047[label="1;10pkt 10fpkt"];
345--3126[label="0.10479;35pkt 35fpkt"];
345--3130[label="0.0389222;13pkt 13fpkt"];
345--3135[label="0.0568862;19pkt 19fpkt"];
345--3140[label="0.10479;35pkt 35fpkt"];
345--3142[label="0.0389222;13pkt 13fpkt"];
345--3147[label="0.0568862;19pkt 19fpkt"];
345--3150[label="0.10479;35pkt 35fpkt"];
345--3152[label="0.0389222;13pkt 13fpkt"];
345--3157[label="0.0568862;19pkt 19fpkt"];
466--2317[label="1;37pkt 37fpkt"];
626--2317[label="1;40pkt 40fpkt"];
626--3126[label="0.325;13pkt 13fpkt"];
626--3140[label="0.325;13pkt 13fpkt"];
626--3150[label="0.325;13pkt 13fpkt"];
1664--2317[label="0.306122;30pkt 30fpkt"];
1664--3556[label="1;65pkt 65fpkt"];
2317--2795[label="0.2;1pkt 1fpkt"];
2317--3047[label="0.4;4pkt 4fpkt"];
2317--3126[label="0.11254;35pkt 35fpkt"];
2317--3130[label="0.0418006;13pkt 13fpkt"];
2317--3135[label="0.0257235;8pkt 8fpkt"];
2317--3140[label="0.11254;35pkt 35fpkt"];
2317--3142[label="0.0418006;13pkt 13fpkt"];
2317--3147[label="0.0257235;8pkt 8fpkt"];
2317--3150[label="0.11254;35pkt 35fpkt"];
2317--3152[label="0.0418006;13pkt 13fpkt"];
2317--3157[label="0.0257235;8pkt 8fpkt"];
2795--3320[label="0.2;1pkt 1fpkt"];
2795--4107[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.232.118.24"/>
      <filter src_ip="135.68.16.171" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
355[label="160.9.9.41;d;5pkt 5fpkt", shape=diamond, color=yellow];
356[label="211.64.40.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
2318[label="211.64.40.113;s;1pkt 1fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.64.41.72:33189, 160.9.9.41:33442}[20%]&lt;BR/&gt;{211.64.41.84:33194, 160.9.9.41:33443}[20%]&lt;BR/&gt;{211.64.41.86:33190, 160.9.9.41:33443}[20%]&lt;BR/&gt;{211.64.41.87:33193, 160.9.9.41:33443}[20%]&lt;BR/&gt;{211.64.40.113:20176, 160.9.9.41:1033}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33443: (21.4286%)&lt;BR/&gt; 20176: (21.4286%)&lt;BR/&gt; 1033: (21.4286%)&lt;BR/&gt; 33442: (7.14286%)&lt;BR/&gt; 33194: (7.14286%)&gt;];
}
355--356[label="1;1pkt 1fpkt"];
355--2318[label="1;1pkt 1fpkt"];
356--2318[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.9.9.41" dst_port="1033" src_ip="211.64.40.113" src_port="20176"/>
      <filter dst_ip="160.9.9.41" dst_port="33443" src_ip="211.64.41.87" src_port="33193"/>
      <filter dst_ip="160.9.9.41" dst_port="33443" src_ip="211.64.41.86" src_port="33190"/>
      <filter dst_ip="160.9.9.41" dst_port="33443" src_ip="211.64.41.84" src_port="33194"/>
      <filter dst_ip="160.9.9.41" dst_port="33442" src_ip="211.64.41.72" src_port="33189"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
612[label="219.40.31.215;s;2584pkt 2584fpkt", shape=diamond, color=yellow];
2320[label="219.40.31.215;s;1175pkt 1175fpkt", shape=hexagon, color=black];
3912[label="219.40.31.215;2795pkt 2795fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.40.31.215:1076, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1076: (50%)&gt;];
}
612--2320[label="1;1175pkt 1175fpkt"];
612--3912[label="0.996517;2575pkt 2575fpkt"];
2320--3912[label="0.99234;1166pkt 1166fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.40.31.215" src_port="1076"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897198,1.73963,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
623[label="18.20.164.103;d;3pkt 3fpkt", shape=diamond, color=yellow];
624[label="129.2.69.19;s;2pkt 2fpkt", shape=diamond, color=yellow];
2322[label="129.2.69.19;s;2pkt 2fpkt", shape=hexagon, color=black];
3240[label="129.2.69.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4445[label="129.2.69.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.243.92:53, 18.20.164.103:53}[33.3333%]&lt;BR/&gt;{129.2.69.19:3729, 18.20.164.103:8008}[33.3333%]&lt;BR/&gt;{129.2.69.19:3738, 18.20.164.103:8008}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8008: (44.4444%)&lt;BR/&gt; 3738: (27.7778%)&lt;BR/&gt; 3729: (16.6667%)&lt;BR/&gt; 53: (11.1111%)&gt;];
}
623--624[label="1;2pkt 2fpkt"];
623--1385[label="0.333333;1pkt 1fpkt"];
623--2322[label="1;2pkt 2fpkt"];
623--3240[label="1;1pkt 1fpkt"];
623--4445[label="1;1pkt 1fpkt"];
624--2322[label="1;2pkt 2fpkt"];
624--3240[label="1;1pkt 1fpkt"];
624--4445[label="1;1pkt 1fpkt"];
2322--3240[label="1;1pkt 1fpkt"];
2322--4445[label="1;1pkt 1fpkt"];
3240--4445[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.20.164.103" dst_port="8008" src_ip="129.2.69.19" src_port="3738"/>
      <filter dst_ip="18.20.164.103" dst_port="8008" src_ip="129.2.69.19" src_port="3729"/>
      <filter dst_ip="18.20.164.103" dst_port="53" src_ip="129.2.243.92" src_port="53"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
639[label="192.161.92.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
2323[label="192.161.92.162;s;1pkt 1fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.161.92.162:58383, 192.65.179.79:54009}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58383: (50%)&lt;BR/&gt; 54009: (50%)&gt;];
}
639--2323[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.179.79" dst_port="54009" src_ip="192.161.92.162" src_port="58383"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936893,1.74871,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1[label="135.69.232.9s;4pkt 4fpkt", shape=rectangle, color=red];
467[label="135.69.232.9;s;145pkt 145fpkt", shape=diamond, color=yellow];
2035[label="200.226.209.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
2329[label="135.69.232.9;s;143pkt 143fpkt", shape=hexagon, color=black];
3026[label="200.226.209.16;d;1pkt 1fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.232.9:*, 117.196.87.196:80}[28.9655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9388%)&lt;BR/&gt; 5190: (1.02041%)&lt;BR/&gt; 2047: (1.02041%)&lt;BR/&gt; 1701: (0.680272%)&lt;BR/&gt; 1664: (0.510204%)&gt;];
}
1--467[label="1;4pkt 4fpkt"];
1--2329[label="1;4pkt 4fpkt"];
467--472[label="0.010989;1pkt 1fpkt"];
467--882[label="0.00689655;1pkt 1fpkt"];
467--2035[label="1;1pkt 1fpkt"];
467--2329[label="1;143pkt 143fpkt"];
467--3026[label="1;1pkt 1fpkt"];
467--3127[label="0.0137931;2pkt 2fpkt"];
2035--2329[label="1;1pkt 1fpkt"];
2035--3026[label="1;1pkt 1fpkt"];
2329--3026[label="1;1pkt 1fpkt"];
2329--3127[label="0.013986;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="117.196.87.196" dst_port="80" src_ip="135.69.232.9"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
697[label="209.165.170.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
2331[label="209.165.170.196;s;1pkt 1fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.165.170.196:59956, 192.65.181.91:873}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59956: (50%)&lt;BR/&gt; 873: (50%)&gt;];
}
697--2331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.181.91" dst_port="873" src_ip="209.165.170.196" src_port="59956"/>
    </slice>
    <from sec="1112590816" usec="0"/>
    <to sec="1112591519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
711[label="213.7.79.137;d;3pkt 3fpkt", shape=diamond, color=yellow];
2334[label="213.7.79.137;d;2pkt 2fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.10.89:34218, 213.7.79.137:80}[33.3333%]&lt;BR/&gt;{135.68.10.89:34219, 213.7.79.137:80}[33.3333%]&lt;BR/&gt;{135.68.10.89:34222, 213.7.79.137:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34219: (20%)&lt;BR/&gt; 34218: (20%)&lt;BR/&gt; 34222: (10%)&gt;];
}
711--2334[label="1;2pkt 2fpkt"];
711--3127[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.79.137" dst_port="80" src_ip="135.68.10.89" src_port="34222"/>
      <filter dst_ip="213.7.79.137" dst_port="80" src_ip="135.68.10.89" src_port="34219"/>
      <filter dst_ip="213.7.79.137" dst_port="80" src_ip="135.68.10.89" src_port="34218"/>
    </slice>
    <from sec="1112590832" usec="0"/>
    <to sec="1112591037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
731[label="208.142.137.105;s;8pkt 8fpkt", shape=diamond, color=yellow];
2337[label="208.142.137.105;s;8pkt 8fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.142.137.105:*, 192.65.176.80:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50295: (6.25%)&lt;BR/&gt; 50294: (6.25%)&lt;BR/&gt; 50293: (6.25%)&lt;BR/&gt; 50291: (6.25%)&gt;];
}
731--2337[label="1;8pkt 8fpkt"];
731--3127[label="0.625;5pkt 5fpkt"];
2337--3127[label="0.625;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.176.80" dst_port="80" src_ip="208.142.137.105"/>
    </slice>
    <from sec="1112590935" usec="0"/>
    <to sec="1112591321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
505[label="129.52.0.102;s;4183pkt 4183fpkt", shape=diamond, color=yellow];
2006[label="215.8.190.5;d;22pkt 22fpkt", shape=diamond, color=yellow];
2343[label="129.52.0.102;s;3523pkt 3523fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.52.0.102:52187, *:*}[99.8566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52187: (49.9224%)&lt;BR/&gt; 54045: (0.207039%)&lt;BR/&gt; 1025: (0.1294%)&lt;BR/&gt; 0: (0.0776398%)&lt;BR/&gt; 1032: (0.0582298%)&gt;];
}
505--2006[label="1;22pkt 22fpkt"];
505--2343[label="1;3523pkt 3523fpkt"];
505--2411[label="0.0384615;1pkt 1fpkt"];
2006--2343[label="0.909091;20pkt 20fpkt"];
2343--2411[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="129.52.0.102" src_port="52187"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916178,1.78744,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
282[label="135.68.225.115;s;311pkt 311fpkt", shape=diamond, color=yellow];
1912[label="211.169.53.230;d;2pkt 2fpkt", shape=diamond, color=yellow];
2346[label="135.68.225.115;s;114pkt 114fpkt", shape=hexagon, color=black];
2816[label="211.169.53.230;d;2pkt 2fpkt", shape=hexagon, color=black];
4528[label="135.68.225.115;334pkt 334fpkt", shape=invhouse, color=bisque];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.225.115:25, *:*}[94.0476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6723%)&lt;BR/&gt; 0: (0.655308%)&lt;BR/&gt; 1610: (0.393185%)&lt;BR/&gt; 4604: (0.327654%)&lt;BR/&gt; 4188: (0.327654%)&gt;];
}
282--528[label="0.0188679;1pkt 1fpkt"];
282--655[label="0.0384615;1pkt 1fpkt"];
282--677[label="0.025;1pkt 1fpkt"];
282--1089[label="0.0454545;1pkt 1fpkt"];
282--1912[label="1;2pkt 2fpkt"];
282--2346[label="1;114pkt 114fpkt"];
282--2519[label="0.0454545;1pkt 1fpkt"];
282--2816[label="1;2pkt 2fpkt"];
282--4528[label="0.993569;309pkt 309fpkt"];
1912--2816[label="1;2pkt 2fpkt"];
1912--4528[label="1;2pkt 2fpkt"];
2346--4528[label="0.991228;113pkt 113fpkt"];
2816--4528[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.225.115" src_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
292[label="70.55.66.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
2349[label="70.55.66.114;s;1pkt 1fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.55.66.114:51495, 192.65.185.3:6881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51495: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
292--998[label="1;1pkt 1fpkt"];
292--2349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.185.3" dst_port="6881" src_ip="70.55.66.114" src_port="51495"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
308[label="135.68.45.239;s;497pkt 497fpkt", shape=diamond, color=yellow];
696[label="22.6.17.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
830[label="20.201.98.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
869[label="209.205.37.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
1051[label="215.81.120.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
1073[label="99.88.170.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
1328[label="98.15.173.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
2353[label="135.68.45.239;s;207pkt 207fpkt", shape=hexagon, color=black];
2709[label="20.201.98.24;d;1pkt 1fpkt", shape=hexagon, color=black];
2857[label="209.205.37.76;d;1pkt 1fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.45.239:*, *:16881}[22.5352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (10.4635%)&lt;BR/&gt; 11539: (3.01966%)&lt;BR/&gt; 80: (2.10674%)&lt;BR/&gt; 8498: (1.75562%)&lt;BR/&gt; 11900: (1.40449%)&gt;];
}
308--696[label="1;1pkt 1fpkt"];
308--830[label="1;1pkt 1fpkt"];
308--858[label="0.024;3pkt 3fpkt"];
308--869[label="1;1pkt 1fpkt"];
308--1014[label="0.00201207;1pkt 1fpkt"];
308--1051[label="1;1pkt 1fpkt"];
308--1073[label="1;1pkt 1fpkt"];
308--1328[label="1;1pkt 1fpkt"];
308--1444[label="0.0588235;3pkt 3fpkt"];
308--1553[label="0.00892857;1pkt 1fpkt"];
308--2353[label="1;207pkt 207fpkt"];
308--2709[label="1;1pkt 1fpkt"];
308--2857[label="1;1pkt 1fpkt"];
308--3127[label="0.00804829;4pkt 4fpkt"];
696--2353[label="1;1pkt 1fpkt"];
830--2353[label="1;1pkt 1fpkt"];
830--2709[label="1;1pkt 1fpkt"];
869--2353[label="1;1pkt 1fpkt"];
869--2857[label="1;1pkt 1fpkt"];
1051--2353[label="1;1pkt 1fpkt"];
1073--2353[label="1;1pkt 1fpkt"];
1328--2353[label="1;1pkt 1fpkt"];
2353--2709[label="1;1pkt 1fpkt"];
2353--2857[label="1;1pkt 1fpkt"];
2353--3127[label="0.0193237;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="16881" src_ip="135.68.45.239"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
567[label="135.68.86.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
1022[label="221.143.48.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
2362[label="135.68.86.61;s;1pkt 1fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.86.61:64114, 221.143.48.32:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64114: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
567--1022[label="1;1pkt 1fpkt"];
567--2362[label="1;1pkt 1fpkt"];
1022--2362[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.143.48.32" dst_port="554" src_ip="135.68.86.61" src_port="64114"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
575[label="129.2.73.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
2367[label="129.2.73.170;s;1pkt 1fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.73.170:49153, 23.74.160.173:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49153: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
575--2367[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.74.160.173" dst_port="80" src_ip="129.2.73.170" src_port="49153"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112590932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
376[label="23.225.11.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
377[label="192.65.189.117;s;3pkt 3fpkt", shape=diamond, color=yellow];
2239[label="23.149.14.224;d;2pkt 2fpkt", shape=diamond, color=yellow];
2368[label="23.225.11.251;d;1pkt 1fpkt", shape=hexagon, color=black];
2369[label="192.65.189.117;s;1pkt 1fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.189.117:1755, 23.225.11.251:4985}[33.3333%]&lt;BR/&gt;{192.65.189.117:43547, 23.149.14.224:2941}[33.3333%]&lt;BR/&gt;{192.65.189.117:1755, 23.149.14.224:2939}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (37.5%)&lt;BR/&gt; 4985: (25%)&lt;BR/&gt; 43547: (12.5%)&lt;BR/&gt; 2941: (12.5%)&lt;BR/&gt; 2939: (12.5%)&gt;];
}
376--377[label="1;1pkt 1fpkt"];
376--2368[label="1;1pkt 1fpkt"];
376--2369[label="1;1pkt 1fpkt"];
377--2239[label="1;2pkt 2fpkt"];
377--2368[label="1;1pkt 1fpkt"];
377--2369[label="1;1pkt 1fpkt"];
2368--2369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.149.14.224" dst_port="2939" src_ip="192.65.189.117" src_port="1755"/>
      <filter dst_ip="23.149.14.224" dst_port="2941" src_ip="192.65.189.117" src_port="43547"/>
      <filter dst_ip="23.225.11.251" dst_port="4985" src_ip="192.65.189.117" src_port="1755"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
585[label="97.2.139.119;s;1078pkt 1078fpkt", shape=diamond, color=yellow];
2370[label="97.2.139.119;s;1078pkt 1078fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.2.139.119:0, *:0}[95.1763%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.1763%)&lt;BR/&gt; 1433: (0.834879%)&lt;BR/&gt; 445: (0.602968%)&lt;BR/&gt; 139: (0.602968%)&lt;BR/&gt; 137: (0.463822%)&gt;];
}
585--1289[label="0.0025641;1pkt 1fpkt"];
585--2106[label="0.00641026;1pkt 1fpkt"];
585--2370[label="1;1078pkt 1078fpkt"];
585--3124[label="0.0102041;11pkt 11fpkt"];
585--3137[label="0.000927644;1pkt 1fpkt"];
2370--3124[label="0.0102041;11pkt 11fpkt"];
2370--3137[label="0.000927644;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="97.2.139.119"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
381[label="135.68.10.89;s;12pkt 12fpkt", shape=diamond, color=yellow];
785[label="221.143.48.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1321[label="211.58.236.178;d;24pkt 24fpkt", shape=diamond, color=yellow];
1455[label="213.7.79.37;d;3pkt 3fpkt", shape=diamond, color=yellow];
2229[label="213.7.66.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
2372[label="221.143.48.196;d;1pkt 1fpkt", shape=hexagon, color=black];
3215[label="167.172.99.13;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.172.99.13:*, *:443}[61.1111%]&lt;BR/&gt;{*:*, 211.58.236.178:5050}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.7778%)&lt;BR/&gt; 5050: (11.1111%)&lt;BR/&gt; 80: (6.56566%)&lt;BR/&gt; 33980: (1.51515%)&lt;BR/&gt; 554: (1.51515%)&gt;];
}
381--711[label="1;3pkt 3fpkt"];
381--785[label="1;1pkt 1fpkt"];
381--1321[label="0.0833333;1pkt 1fpkt"];
381--1455[label="1;3pkt 3fpkt"];
381--2229[label="1;2pkt 2fpkt"];
381--2334[label="1;2pkt 2fpkt"];
381--2372[label="1;1pkt 1fpkt"];
381--3127[label="0.25;3pkt 3fpkt"];
381--3138[label="0.0833333;1pkt 1fpkt"];
785--2372[label="1;1pkt 1fpkt"];
1321--1932[label="0.0833333;2pkt 2fpkt"];
1321--3215[label="0.0416667;1pkt 1fpkt"];
1455--3127[label="0.666667;2pkt 2fpkt"];
2229--3138[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="167.172.99.13"/>
      <filter dst_ip="211.58.236.178" dst_port="5050"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
610[label="16.248.219.50;d;28pkt 28fpkt", shape=diamond, color=yellow];
611[label="135.68.121.8;s;167pkt 167fpkt", shape=diamond, color=yellow];
2381[label="135.68.121.8;s;153pkt 153fpkt", shape=hexagon, color=black];
3193[label="135.68.121.8;167pkt 167fpkt", shape=pentagon, color=darkviolet];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.121.8:*, 219.195.61.19:80}[23.9521%]&lt;BR/&gt;{135.68.121.8:*, 22.190.73.86:80}[22.1557%]&lt;BR/&gt;{135.68.121.8:*, 196.34.88.38:80}[20.3593%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7087%)&lt;BR/&gt; 1367: (0.38835%)&lt;BR/&gt; 1366: (0.38835%)&lt;BR/&gt; 1365: (0.38835%)&lt;BR/&gt; 1364: (0.38835%)&gt;];
}
610--611[label="1;28pkt 28fpkt"];
610--2381[label="1;28pkt 28fpkt"];
610--3193[label="1;28pkt 28fpkt"];
611--1968[label="0.00917431;1pkt 1fpkt"];
611--1988[label="0.00900901;1pkt 1fpkt"];
611--2381[label="1;153pkt 153fpkt"];
611--3127[label="0.167665;28pkt 28fpkt"];
611--3138[label="0.0538922;9pkt 9fpkt"];
611--3193[label="1;167pkt 167fpkt"];
2381--3127[label="0.183007;28pkt 28fpkt"];
2381--3193[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_ip="219.195.61.19" dst_port="80" src_ip="135.68.121.8"/>
      <filter dst_ip="22.190.73.86" dst_port="80" src_ip="135.68.121.8"/>
      <filter dst_ip="196.34.88.38" dst_port="80" src_ip="135.68.121.8"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
807[label="192.65.182.158;s;192pkt 192fpkt", shape=diamond, color=yellow];
2382[label="192.65.182.158;s;121pkt 121fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.182.158:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
807--1013[label="0.00520833;1pkt 1fpkt"];
807--2382[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.182.158"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
856[label="209.230.25.166;s;1980pkt 1980fpkt", shape=diamond, color=yellow];
2393[label="209.230.25.166;s;930pkt 930fpkt", shape=hexagon, color=black];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.230.25.166:1043, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1043: (50%)&gt;];
}
856--2393[label="1;930pkt 930fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.230.25.166" src_port="1043"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
726[label="162.94.19.165;s;5pkt 5fpkt", shape=diamond, color=yellow];
2427[label="162.94.19.165;s;5pkt 5fpkt", shape=hexagon, color=black];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.19.165:3569, 96.227.225.182:80}[20%]&lt;BR/&gt;{162.94.19.165:3570, 96.227.225.182:80}[20%]&lt;BR/&gt;{162.94.19.165:3571, 96.227.225.182:80}[20%]&lt;BR/&gt;{162.94.19.165:3572, 96.227.225.182:80}[20%]&lt;BR/&gt;{162.94.19.165:3573, 96.227.225.182:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3573: (10%)&lt;BR/&gt; 3572: (10%)&lt;BR/&gt; 3571: (10%)&lt;BR/&gt; 3570: (10%)&gt;];
}
726--2427[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="96.227.225.182" dst_port="80" src_ip="162.94.19.165" src_port="3573"/>
      <filter dst_ip="96.227.225.182" dst_port="80" src_ip="162.94.19.165" src_port="3572"/>
      <filter dst_ip="96.227.225.182" dst_port="80" src_ip="162.94.19.165" src_port="3571"/>
      <filter dst_ip="96.227.225.182" dst_port="80" src_ip="162.94.19.165" src_port="3570"/>
      <filter dst_ip="96.227.225.182" dst_port="80" src_ip="162.94.19.165" src_port="3569"/>
    </slice>
    <from sec="1112590912" usec="0"/>
    <to sec="1112590949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
244[label="210.250.254.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
245[label="135.68.240.212;s;126pkt 126fpkt", shape=diamond, color=yellow];
2434[label="135.68.240.212;s;111pkt 111fpkt", shape=hexagon, color=black];
2905[label="210.250.254.73;d;1pkt 1fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.240.212:*, *:80}[98.4127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7448%)&lt;BR/&gt; 8080: (0.83682%)&lt;BR/&gt; 2255: (0.83682%)&lt;BR/&gt; 2607: (0.41841%)&lt;BR/&gt; 2606: (0.41841%)&gt;];
}
244--245[label="1;1pkt 1fpkt"];
244--2434[label="1;1pkt 1fpkt"];
244--2905[label="1;1pkt 1fpkt"];
245--2434[label="1;111pkt 111fpkt"];
245--2905[label="1;1pkt 1fpkt"];
245--3127[label="0.238095;30pkt 30fpkt"];
245--3138[label="0.0793651;10pkt 10fpkt"];
2434--2905[label="1;1pkt 1fpkt"];
2434--3127[label="0.27027;30pkt 30fpkt"];
2434--3138[label="0.00900901;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="135.68.240.212"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
534[label="162.94.169.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
760[label="211.64.40.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
2443[label="162.94.169.22;s;1pkt 1fpkt", shape=hexagon, color=black];
2666[label="211.64.40.119;d;1pkt 1fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.169.22:2881, 211.64.40.119:20192}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20192: (50%)&lt;BR/&gt; 2881: (50%)&gt;];
}
534--760[label="1;1pkt 1fpkt"];
534--2443[label="1;1pkt 1fpkt"];
534--2666[label="1;1pkt 1fpkt"];
760--2443[label="1;1pkt 1fpkt"];
760--2666[label="1;1pkt 1fpkt"];
2443--2666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.64.40.119" dst_port="20192" src_ip="162.94.169.22" src_port="2881"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
788[label="192.65.180.134;s;957pkt 957fpkt", shape=diamond, color=yellow];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.180.134:53, *:*}[76.8025%]&lt;BR/&gt;{192.65.180.134:65340, *:53}[21.1076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.814%)&lt;BR/&gt; 65340: (10.5538%)&lt;BR/&gt; 32768: (1.35841%)&lt;BR/&gt; 32769: (0.731452%)&lt;BR/&gt; 0: (0.522466%)&gt;];
}
788--1013[label="0.00280112;1pkt 1fpkt"];
788--1525[label="0.0125;1pkt 1fpkt"];
788--1799[label="0.00793651;1pkt 1fpkt"];
788--2140[label="0.00909091;1pkt 1fpkt"];
788--2151[label="0.00961538;1pkt 1fpkt"];
788--2156[label="0.0103093;1pkt 1fpkt"];
788--2177[label="0.0142857;2pkt 2fpkt"];
788--2219[label="0.0277778;1pkt 1fpkt"];
788--2375[label="1;751pkt 751fpkt"];
788--2411[label="0.0384615;1pkt 1fpkt"];
788--2983[label="0.00793651;1pkt 1fpkt"];
788--2987[label="0.0103093;1pkt 1fpkt"];
788--3125[label="0.0553814;53pkt 53fpkt"];
788--3129[label="0.0491118;47pkt 47fpkt"];
788--3134[label="0.0428422;41pkt 41fpkt"];
788--3137[label="0.0271682;26pkt 26fpkt"];
788--3139[label="0.0553814;53pkt 53fpkt"];
788--3141[label="0.0491118;47pkt 47fpkt"];
788--3146[label="0.0428422;41pkt 41fpkt"];
788--3149[label="0.0553814;53pkt 53fpkt"];
788--3151[label="0.0491118;47pkt 47fpkt"];
788--3156[label="0.0428422;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.180.134" src_port="53"/>
      <filter dst_port="53" src_ip="192.65.180.134" src_port="65340"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
816[label="129.2.67.96;s;17pkt 17fpkt", shape=diamond, color=yellow];
817[label="18.193.221.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
2388[label="129.2.67.96;s;14pkt 14fpkt", shape=hexagon, color=black];
2456[label="18.193.221.81;d;1pkt 1fpkt", shape=hexagon, color=black];
3505[label="129.2.67.96;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.67.96:*, 18.193.221.132:80}[58.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.898%)&lt;BR/&gt; 1716: (5.10204%)&lt;BR/&gt; 554: (5.10204%)&lt;BR/&gt; 1869: (3.06122%)&lt;BR/&gt; 1868: (3.06122%)&gt;];
}
816--817[label="1;1pkt 1fpkt"];
816--2388[label="1;14pkt 14fpkt"];
816--2456[label="1;1pkt 1fpkt"];
816--3138[label="0.176471;3pkt 3fpkt"];
816--3505[label="1;16pkt 16fpkt"];
817--2388[label="1;1pkt 1fpkt"];
817--2456[label="1;1pkt 1fpkt"];
817--3505[label="1;1pkt 1fpkt"];
2388--2456[label="1;1pkt 1fpkt"];
2388--3505[label="0.928571;13pkt 13fpkt"];
2456--3505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.193.221.132" dst_port="80" src_ip="129.2.67.96"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
834[label="162.94.135.108;d;280pkt 280fpkt", shape=diamond, color=yellow];
1083[label="18.207.226.165;s;337pkt 337fpkt", shape=diamond, color=yellow];
2459[label="18.207.226.165;s;337pkt 337fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.207.226.165:*, 162.94.135.108:80}[97.9592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56611: (0.157233%)&lt;BR/&gt; 56592: (0.157233%)&lt;BR/&gt; 56412: (0.157233%)&lt;BR/&gt; 56396: (0.157233%)&gt;];
}
834--849[label="0.0588235;1pkt 1fpkt"];
834--1083[label="0.978571;274pkt 274fpkt"];
834--2459[label="0.978571;274pkt 274fpkt"];
834--3127[label="0.0428571;12pkt 12fpkt"];
834--3138[label="0.0321429;9pkt 9fpkt"];
834--3995[label="0.025;1pkt 1fpkt"];
834--4410[label="0.025;1pkt 1fpkt"];
1083--2459[label="1;337pkt 337fpkt"];
1083--3127[label="0.0296736;10pkt 10fpkt"];
1083--3138[label="0.0949555;32pkt 32fpkt"];
2459--3127[label="0.0296736;10pkt 10fpkt"];
2459--3138[label="0.0949555;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.135.108" dst_port="80" src_ip="18.207.226.165"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
1154[label="135.69.136.190;d;87pkt 87fpkt", shape=diamond, color=yellow];
1212[label="216.200.44.39;s;26pkt 26fpkt", shape=diamond, color=yellow];
1894[label="217.199.41.61;s;3pkt 3fpkt", shape=diamond, color=yellow];
2774[label="216.200.44.39;s;26pkt 26fpkt", shape=hexagon, color=black];
3394[label="217.199.41.61;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3666[label="216.47.146.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4261[label="216.47.146.142;1pkt 1fpkt", shape=invtriangle, color=brown];
4545[label="216.47.146.142;2pkt 2fpkt", shape=invhouse, color=bisque];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.200.44.39:80, 135.69.136.190:*}[29.8851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6174%)&lt;BR/&gt; 8000: (3.3557%)&lt;BR/&gt; 63933: (2.01342%)&lt;BR/&gt; 60915: (1.67785%)&lt;BR/&gt; 63166: (1.34228%)&gt;];
}
1154--1212[label="1;26pkt 26fpkt"];
1154--1552[label="0.0131579;1pkt 1fpkt"];
1154--1894[label="1;3pkt 3fpkt"];
1154--2469[label="1;69pkt 69fpkt"];
1154--2774[label="1;26pkt 26fpkt"];
1154--3126[label="0.114943;10pkt 10fpkt"];
1154--3140[label="0.114943;10pkt 10fpkt"];
1154--3150[label="0.114943;10pkt 10fpkt"];
1154--3394[label="1;2pkt 2fpkt"];
1154--3472[label="0.333333;3pkt 3fpkt"];
1154--3497[label="0.0125;1pkt 1fpkt"];
1154--3666[label="1;2pkt 2fpkt"];
1154--4261[label="1;1pkt 1fpkt"];
1154--4545[label="1;2pkt 2fpkt"];
1212--2469[label="1;26pkt 26fpkt"];
1212--2774[label="1;26pkt 26fpkt"];
1212--3126[label="0.346154;9pkt 9fpkt"];
1212--3140[label="0.346154;9pkt 9fpkt"];
1212--3150[label="0.346154;9pkt 9fpkt"];
1894--3394[label="1;2pkt 2fpkt"];
2774--3126[label="0.346154;9pkt 9fpkt"];
2774--3140[label="0.346154;9pkt 9fpkt"];
2774--3150[label="0.346154;9pkt 9fpkt"];
3666--4261[label="1;1pkt 1fpkt"];
3666--4545[label="1;2pkt 2fpkt"];
4261--4545[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.136.190" src_ip="216.200.44.39" src_port="80"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1474[label="193.32.58.235;s;133pkt 133fpkt", shape=diamond, color=yellow];
1488[label="217.212.65.28;d;101pkt 101fpkt", shape=diamond, color=yellow];
3967[label="193.32.58.235;142pkt 142fpkt", shape=pentagon, color=darkviolet];
4399[label="193.32.58.235;142pkt 142fpkt", shape=invtriangle, color=brown];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.58.235:*, 217.212.65.28:80}[70.6294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1737%)&lt;BR/&gt; 0: (5.59846%)&lt;BR/&gt; 8153: (2.02703%)&lt;BR/&gt; 53: (2.02703%)&lt;BR/&gt; 2462: (0.3861%)&gt;];
}
1474--1488[label="1;101pkt 101fpkt"];
1474--1560[label="0.0272727;3pkt 3fpkt"];
1474--2389[label="0.0735294;5pkt 5fpkt"];
1474--3135[label="0.0075188;1pkt 1fpkt"];
1474--3137[label="0.0075188;1pkt 1fpkt"];
1474--3138[label="0.0451128;6pkt 6fpkt"];
1474--3147[label="0.0075188;1pkt 1fpkt"];
1474--3157[label="0.0075188;1pkt 1fpkt"];
1474--3967[label="0.992481;132pkt 132fpkt"];
1474--4399[label="0.992481;132pkt 132fpkt"];
1488--3967[label="1;101pkt 101fpkt"];
1488--4399[label="1;101pkt 101fpkt"];
3967--4399[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_ip="217.212.65.28" dst_port="80" src_ip="193.32.58.235"/>
    </slice>
    <from sec="1112590825" usec="0"/>
    <to sec="1112591660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
558[label="210.50.156.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
940[label="142.133.32.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
998[label="192.65.185.3;d;106pkt 106fpkt", shape=diamond, color=yellow];
1599[label="17.46.66.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
1632[label="5.233.203.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1642[label="70.52.166.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
2474[label="142.133.32.188;s;1pkt 1fpkt", shape=hexagon, color=black];
3341[label="4.0.94.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.65.185.3:6881}[49.0566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (32.7434%)&lt;BR/&gt; 6882: (2.65487%)&lt;BR/&gt; 4599: (1.32743%)&lt;BR/&gt; 1217: (1.32743%)&lt;BR/&gt; 34828: (0.884956%)&gt;];
}
558--998[label="1;1pkt 1fpkt"];
940--998[label="1;1pkt 1fpkt"];
940--2474[label="1;1pkt 1fpkt"];
998--1599[label="1;1pkt 1fpkt"];
998--1632[label="1;1pkt 1fpkt"];
998--1642[label="1;1pkt 1fpkt"];
998--2336[label="0.00943396;1pkt 1fpkt"];
998--2349[label="1;1pkt 1fpkt"];
998--2474[label="1;1pkt 1fpkt"];
998--2771[label="1;1pkt 1fpkt"];
998--3069[label="0.00943396;1pkt 1fpkt"];
998--3131[label="0.0188679;2pkt 2fpkt"];
998--3143[label="0.0188679;2pkt 2fpkt"];
998--3153[label="0.0188679;2pkt 2fpkt"];
998--3341[label="1;1pkt 1fpkt"];
998--3510[label="0.00943396;1pkt 1fpkt"];
998--4164[label="1;1pkt 1fpkt"];
998--4195[label="0.00943396;1pkt 1fpkt"];
998--4497[label="1;1pkt 1fpkt"];
998--4514[label="0.00943396;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.185.3" dst_port="6881"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
420[label="192.168.254.254;d;521pkt 521fpkt", shape=diamond, color=yellow];
1214[label="192.65.183.184;s;52pkt 52fpkt", shape=diamond, color=yellow];
1341[label="135.69.238.66;s;70pkt 70fpkt", shape=diamond, color=yellow];
1564[label="72.113.178.61;d;277pkt 277fpkt", shape=diamond, color=yellow];
1702[label="135.69.6.168;s;208pkt 208fpkt", shape=diamond, color=yellow];
1774[label="135.69.181.174;s;27pkt 27fpkt", shape=diamond, color=yellow];
1782[label="197.91.160.58;d;51pkt 51fpkt", shape=diamond, color=yellow];
1852[label="192.65.183.218;s;90pkt 90fpkt", shape=diamond, color=yellow];
2161[label="135.69.232.149;s;20pkt 20fpkt", shape=diamond, color=yellow];
2289[label="192.168.254.254;d;521pkt 521fpkt", shape=hexagon, color=black];
2776[label="192.65.183.218;s;83pkt 83fpkt", shape=hexagon, color=black];
2846[label="135.68.251.21;s;44pkt 44fpkt", shape=hexagon, color=black];
2990[label="135.69.232.149;s;20pkt 20fpkt", shape=hexagon, color=black];
3187[label="135.69.65.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3202[label="135.69.168.9;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3782[label="162.83.25.172;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3833[label="162.8.42.190;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3923[label="192.65.183.218;97pkt 97fpkt", shape=pentagon, color=darkviolet];
4314[label="162.83.25.172;42pkt 42fpkt", shape=invtriangle, color=brown];
4339[label="162.8.42.190;1pkt 1fpkt", shape=invtriangle, color=brown];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.168.254.254:80}[43.3766%]&lt;BR/&gt;{*:*, 72.113.178.61:80}[23.9827%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8243%)&lt;BR/&gt; 0: (3.58786%)&lt;BR/&gt; 56350: (2.00092%)&lt;BR/&gt; 443: (1.28795%)&lt;BR/&gt; 1863: (0.919963%)&gt;];
}
420--1118[label="0.0131579;1pkt 1fpkt"];
420--1214[label="0.615385;32pkt 32fpkt"];
420--1341[label="0.0142857;1pkt 1fpkt"];
420--1774[label="0.037037;1pkt 1fpkt"];
420--1852[label="0.344444;31pkt 31fpkt"];
420--2161[label="0.05;1pkt 1fpkt"];
420--2289[label="1;521pkt 521fpkt"];
420--2477[label="0.37931;11pkt 11fpkt"];
420--2776[label="0.325301;27pkt 27fpkt"];
420--2978[label="0.0131579;1pkt 1fpkt"];
420--2990[label="0.05;1pkt 1fpkt"];
420--3127[label="0.0690979;36pkt 36fpkt"];
420--3138[label="0.0633397;33pkt 33fpkt"];
420--3187[label="0.5;1pkt 1fpkt"];
420--3202[label="0.25;1pkt 1fpkt"];
420--3782[label="0.928571;39pkt 39fpkt"];
420--3833[label="0.5;1pkt 1fpkt"];
420--3923[label="0.319588;31pkt 31fpkt"];
420--4314[label="0.928571;39pkt 39fpkt"];
420--4339[label="1;1pkt 1fpkt"];
420--4600[label="0.1;1pkt 1fpkt"];
1214--1332[label="0.0192308;1pkt 1fpkt"];
1214--1592[label="0.0192308;1pkt 1fpkt"];
1214--1843[label="0.027027;1pkt 1fpkt"];
1214--2289[label="0.615385;32pkt 32fpkt"];
1214--2477[label="1;29pkt 29fpkt"];
1214--2604[label="0.0192308;1pkt 1fpkt"];
1214--2740[label="0.0192308;1pkt 1fpkt"];
1214--2977[label="0.0192308;1pkt 1fpkt"];
1214--3127[label="0.173077;9pkt 9fpkt"];
1214--3138[label="0.0961538;5pkt 5fpkt"];
1341--2289[label="0.0142857;1pkt 1fpkt"];
1564--1702[label="0.725962;151pkt 151fpkt"];
1564--1774[label="0.037037;1pkt 1fpkt"];
1564--2055[label="0.473684;27pkt 27fpkt"];
1564--2272[label="0.00361011;1pkt 1fpkt"];
1564--2342[label="0.032491;9pkt 9fpkt"];
1564--2412[label="0.00675676;1pkt 1fpkt"];
1564--2577[label="0.00361011;1pkt 1fpkt"];
1564--2846[label="0.0227273;1pkt 1fpkt"];
1564--3060[label="0.00361011;1pkt 1fpkt"];
1564--3127[label="0.00361011;1pkt 1fpkt"];
1564--3138[label="0.00361011;1pkt 1fpkt"];
1774--2289[label="0.037037;1pkt 1fpkt"];
1774--3138[label="0.111111;3pkt 3fpkt"];
1782--1824[label="0.0588235;3pkt 3fpkt"];
1782--2256[label="0.0392157;2pkt 2fpkt"];
1782--2272[label="0.0196078;1pkt 1fpkt"];
1782--2342[label="0.0980392;5pkt 5fpkt"];
1782--2406[label="0.0196078;1pkt 1fpkt"];
1782--2720[label="1;33pkt 33fpkt"];
1782--2846[label="0.0227273;1pkt 1fpkt"];
1782--3060[label="0.0196078;1pkt 1fpkt"];
1782--3067[label="0.0392157;2pkt 2fpkt"];
1782--3127[label="0.0588235;3pkt 3fpkt"];
1782--3138[label="0.0588235;3pkt 3fpkt"];
1782--3343[label="0.0588235;3pkt 3fpkt"];
1782--3806[label="0.5;6pkt 6fpkt"];
1782--3963[label="0.0392157;2pkt 2fpkt"];
1782--4395[label="0.0392157;2pkt 2fpkt"];
1852--2289[label="0.344444;31pkt 31fpkt"];
1852--2581[label="0.0131579;1pkt 1fpkt"];
1852--2776[label="1;83pkt 83fpkt"];
1852--3127[label="0.0333333;3pkt 3fpkt"];
1852--3138[label="0.0222222;2pkt 2fpkt"];
1852--3923[label="1;90pkt 90fpkt"];
2161--2177[label="0.05;1pkt 1fpkt"];
2161--2289[label="0.05;1pkt 1fpkt"];
2161--2990[label="1;20pkt 20fpkt"];
2289--2477[label="0.37931;11pkt 11fpkt"];
2289--2776[label="0.325301;27pkt 27fpkt"];
2289--2978[label="0.0131579;1pkt 1fpkt"];
2289--2990[label="0.05;1pkt 1fpkt"];
2289--3127[label="0.0690979;36pkt 36fpkt"];
2289--3138[label="0.0633397;33pkt 33fpkt"];
2289--3187[label="0.5;1pkt 1fpkt"];
2289--3202[label="0.25;1pkt 1fpkt"];
2289--3782[label="0.928571;39pkt 39fpkt"];
2289--3833[label="0.5;1pkt 1fpkt"];
2289--3923[label="0.319588;31pkt 31fpkt"];
2289--4314[label="0.928571;39pkt 39fpkt"];
2289--4339[label="1;1pkt 1fpkt"];
2289--4600[label="0.1;1pkt 1fpkt"];
2776--3127[label="0.0361446;3pkt 3fpkt"];
2776--3138[label="0.0120482;1pkt 1fpkt"];
2776--3923[label="1;83pkt 83fpkt"];
3782--4314[label="1;42pkt 42fpkt"];
3833--4339[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.254" dst_port="80"/>
      <filter dst_ip="72.113.178.61" dst_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916178,1.78744,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1226[label="216.162.91.54;s;35pkt 35fpkt", shape=diamond, color=yellow];
1227[label="162.94.73.246;d;43pkt 43fpkt", shape=diamond, color=yellow];
2482[label="216.162.91.54;s;35pkt 35fpkt", shape=hexagon, color=black];
2483[label="162.94.73.246;d;23pkt 23fpkt", shape=hexagon, color=black];
4486[label="216.162.91.54;37pkt 37fpkt", shape=invhouse, color=bisque];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.162.91.54:80, 162.94.73.246:*}[82.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1194: (1.44509%)&lt;BR/&gt; 1193: (1.44509%)&lt;BR/&gt; 1181: (1.44509%)&lt;BR/&gt; 1180: (1.44509%)&gt;];
}
1226--1227[label="1;35pkt 35fpkt"];
1226--2482[label="1;35pkt 35fpkt"];
1226--2483[label="0.695652;16pkt 16fpkt"];
1226--3126[label="0.0571429;2pkt 2fpkt"];
1226--3130[label="0.4;14pkt 14fpkt"];
1226--3135[label="0.314286;11pkt 11fpkt"];
1226--3140[label="0.0571429;2pkt 2fpkt"];
1226--3142[label="0.4;14pkt 14fpkt"];
1226--3147[label="0.314286;11pkt 11fpkt"];
1226--3150[label="0.0571429;2pkt 2fpkt"];
1226--3152[label="0.4;14pkt 14fpkt"];
1226--3157[label="0.314286;11pkt 11fpkt"];
1226--4486[label="1;35pkt 35fpkt"];
1227--2482[label="1;35pkt 35fpkt"];
1227--2483[label="1;23pkt 23fpkt"];
1227--3126[label="0.0930233;4pkt 4fpkt"];
1227--3130[label="0.325581;14pkt 14fpkt"];
1227--3135[label="0.255814;11pkt 11fpkt"];
1227--3140[label="0.0930233;4pkt 4fpkt"];
1227--3142[label="0.325581;14pkt 14fpkt"];
1227--3147[label="0.255814;11pkt 11fpkt"];
1227--3150[label="0.0930233;4pkt 4fpkt"];
1227--3152[label="0.325581;14pkt 14fpkt"];
1227--3157[label="0.255814;11pkt 11fpkt"];
1227--4486[label="0.945946;35pkt 35fpkt"];
2482--2483[label="0.695652;16pkt 16fpkt"];
2482--3126[label="0.0571429;2pkt 2fpkt"];
2482--3130[label="0.4;14pkt 14fpkt"];
2482--3135[label="0.314286;11pkt 11fpkt"];
2482--3140[label="0.0571429;2pkt 2fpkt"];
2482--3142[label="0.4;14pkt 14fpkt"];
2482--3147[label="0.314286;11pkt 11fpkt"];
2482--3150[label="0.0571429;2pkt 2fpkt"];
2482--3152[label="0.4;14pkt 14fpkt"];
2482--3157[label="0.314286;11pkt 11fpkt"];
2482--4486[label="1;35pkt 35fpkt"];
2483--3126[label="0.173913;4pkt 4fpkt"];
2483--3140[label="0.173913;4pkt 4fpkt"];
2483--3150[label="0.173913;4pkt 4fpkt"];
2483--4486[label="0.695652;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.73.246" src_ip="216.162.91.54" src_port="80"/>
    </slice>
    <from sec="1112590856" usec="0"/>
    <to sec="1112591542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1239[label="219.155.121.177;s;175pkt 175fpkt", shape=diamond, color=yellow];
2486[label="219.155.121.177;s;106pkt 106fpkt", shape=hexagon, color=black];
3798[label="219.155.121.177;174pkt 174fpkt", shape=pentagon, color=darkviolet];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.155.121.177:80, 193.41.161.236:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3224: (0.32967%)&lt;BR/&gt; 3218: (0.32967%)&lt;BR/&gt; 3211: (0.32967%)&lt;BR/&gt; 3210: (0.32967%)&gt;];
}
1239--2486[label="1;106pkt 106fpkt"];
1239--3126[label="0.0457143;8pkt 8fpkt"];
1239--3130[label="0.0114286;2pkt 2fpkt"];
1239--3140[label="0.0457143;8pkt 8fpkt"];
1239--3142[label="0.0114286;2pkt 2fpkt"];
1239--3150[label="0.0457143;8pkt 8fpkt"];
1239--3152[label="0.0114286;2pkt 2fpkt"];
1239--3798[label="1;174pkt 174fpkt"];
2486--3126[label="0.0754717;8pkt 8fpkt"];
2486--3140[label="0.0754717;8pkt 8fpkt"];
2486--3150[label="0.0754717;8pkt 8fpkt"];
2486--3798[label="0.990566;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.161.236" src_ip="219.155.121.177" src_port="80"/>
    </slice>
    <from sec="1112591059" usec="0"/>
    <to sec="1112591493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936893,1.74871,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
7[label="135.69.5.67s;2pkt 2fpkt", shape=rectangle, color=red];
262[label="196.131.189.99;d;4pkt 4fpkt", shape=diamond, color=yellow];
263[label="135.69.5.67;s;5pkt 5fpkt", shape=diamond, color=yellow];
2502[label="135.69.5.67;s;5pkt 5fpkt", shape=hexagon, color=black];
2654[label="196.131.189.99;d;4pkt 4fpkt", shape=hexagon, color=black];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.5.67:20031, 145.90.94.31:1350}[20%]&lt;BR/&gt;{135.69.5.67:2110, 196.131.189.99:50426}[20%]&lt;BR/&gt;{135.69.5.67:2110, 196.131.189.99:50427}[20%]&lt;BR/&gt;{135.69.5.67:2111, 196.131.189.99:20060}[20%]&lt;BR/&gt;{135.69.5.67:2111, 196.131.189.99:20061}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2111: (22.5%)&lt;BR/&gt; 2110: (22.5%)&lt;BR/&gt; 50426: (12.5%)&lt;BR/&gt; 20060: (12.5%)&lt;BR/&gt; 50427: (10%)&gt;];
}
7--262[label="1;2pkt 2fpkt"];
7--263[label="1;2pkt 2fpkt"];
7--2502[label="1;2pkt 2fpkt"];
7--2654[label="1;2pkt 2fpkt"];
262--263[label="1;4pkt 4fpkt"];
262--2502[label="1;4pkt 4fpkt"];
262--2654[label="1;4pkt 4fpkt"];
263--882[label="0.2;1pkt 1fpkt"];
263--2502[label="1;5pkt 5fpkt"];
263--2654[label="1;4pkt 4fpkt"];
2502--2654[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.131.189.99" dst_port="20061" src_ip="135.69.5.67" src_port="2111"/>
      <filter dst_ip="196.131.189.99" dst_port="20060" src_ip="135.69.5.67" src_port="2111"/>
      <filter dst_ip="196.131.189.99" dst_port="50427" src_ip="135.69.5.67" src_port="2110"/>
      <filter dst_ip="196.131.189.99" dst_port="50426" src_ip="135.69.5.67" src_port="2110"/>
      <filter dst_ip="145.90.94.31" dst_port="1350" src_ip="135.69.5.67" src_port="20031"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1286[label="193.36.24.72;s;45pkt 45fpkt", shape=diamond, color=yellow];
2505[label="193.36.24.72;s;42pkt 42fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.36.24.72:25, 193.118.46.161:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62304: (1.14943%)&lt;BR/&gt; 62298: (1.14943%)&lt;BR/&gt; 62259: (1.14943%)&lt;BR/&gt; 62227: (1.14943%)&gt;];
}
1286--2505[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="193.118.46.161" src_ip="193.36.24.72" src_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1324[label="99.105.45.127;s;2pkt 2fpkt", shape=diamond, color=yellow];
2518[label="99.105.45.127;s;2pkt 2fpkt", shape=hexagon, color=black];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.105.45.127:21, 144.126.86.184:1112}[50%]&lt;BR/&gt;{99.105.45.127:3166, 144.126.86.184:1560}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3166: (25%)&lt;BR/&gt; 1560: (25%)&lt;BR/&gt; 1112: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
1324--2518[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.86.184" dst_port="1560" src_ip="99.105.45.127" src_port="3166"/>
      <filter dst_ip="144.126.86.184" dst_port="1112" src_ip="99.105.45.127" src_port="21"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
274[label="167.172.18.142;s;190pkt 190fpkt", shape=diamond, color=yellow];
400[label="135.68.16.152;s;577pkt 577fpkt", shape=diamond, color=yellow];
427[label="167.172.13.40;s;157pkt 157fpkt", shape=diamond, color=yellow];
495[label="135.68.196.23;s;91pkt 91fpkt", shape=diamond, color=yellow];
506[label="192.65.176.81;s;226pkt 226fpkt", shape=diamond, color=yellow];
528[label="16.167.169.132;d;53pkt 53fpkt", shape=diamond, color=yellow];
532[label="16.166.68.81;d;32pkt 32fpkt", shape=diamond, color=yellow];
543[label="19.97.72.27;d;55pkt 55fpkt", shape=diamond, color=yellow];
589[label="16.166.68.90;d;46pkt 46fpkt", shape=diamond, color=yellow];
631[label="129.141.145.30;s;1141pkt 1141fpkt", shape=diamond, color=yellow];
655[label="16.166.68.83;d;26pkt 26fpkt", shape=diamond, color=yellow];
677[label="19.97.74.221;d;40pkt 40fpkt", shape=diamond, color=yellow];
814[label="192.65.176.64;s;595pkt 595fpkt", shape=diamond, color=yellow];
815[label="135.69.40.235;s;350pkt 350fpkt", shape=diamond, color=yellow];
891[label="135.69.21.123;s;244pkt 244fpkt", shape=diamond, color=yellow];
924[label="196.133.22.61;d;98pkt 98fpkt", shape=diamond, color=yellow];
1021[label="19.97.74.218;d;44pkt 44fpkt", shape=diamond, color=yellow];
1064[label="16.166.68.82;d;22pkt 22fpkt", shape=diamond, color=yellow];
1089[label="16.166.68.71;d;22pkt 22fpkt", shape=diamond, color=yellow];
1096[label="129.141.145.132;s;416pkt 416fpkt", shape=diamond, color=yellow];
1148[label="135.69.235.39;s;252pkt 252fpkt", shape=diamond, color=yellow];
1189[label="135.68.31.98;s;216pkt 216fpkt", shape=diamond, color=yellow];
1326[label="135.69.249.100;s;242pkt 242fpkt", shape=diamond, color=yellow];
1350[label="135.69.133.187;s;150pkt 150fpkt", shape=diamond, color=yellow];
1368[label="167.172.25.68;s;292pkt 292fpkt", shape=diamond, color=yellow];
1393[label="135.69.53.138;s;206pkt 206fpkt", shape=diamond, color=yellow];
1495[label="193.41.141.193;s;102pkt 102fpkt", shape=diamond, color=yellow];
1497[label="19.97.72.26;d;47pkt 47fpkt", shape=diamond, color=yellow];
1588[label="135.68.16.178;s;64pkt 64fpkt", shape=diamond, color=yellow];
1653[label="220.248.17.82;d;38pkt 38fpkt", shape=diamond, color=yellow];
1803[label="162.94.201.242;s;71pkt 71fpkt", shape=diamond, color=yellow];
1819[label="162.94.202.30;s;52pkt 52fpkt", shape=diamond, color=yellow];
1971[label="135.69.227.162;s;38pkt 38fpkt", shape=diamond, color=yellow];
2023[label="16.66.64.89;d;10pkt 10fpkt", shape=diamond, color=yellow];
2167[label="129.141.145.25;s;61pkt 61fpkt", shape=diamond, color=yellow];
2171[label="200.212.178.46;d;12pkt 12fpkt", shape=diamond, color=yellow];
2246[label="17.106.36.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
2268[label="167.172.18.142;s;87pkt 87fpkt", shape=hexagon, color=black];
2405[label="135.69.21.123;s;90pkt 90fpkt", shape=hexagon, color=black];
2455[label="135.68.16.152;s;436pkt 436fpkt", shape=hexagon, color=black];
2516[label="135.69.40.235;s;243pkt 243fpkt", shape=hexagon, color=black];
2519[label="16.166.68.71;d;22pkt 22fpkt", shape=hexagon, color=black];
2603[label="135.68.16.178;s;51pkt 51fpkt", shape=hexagon, color=black];
2680[label="19.97.74.218;d;35pkt 35fpkt", shape=hexagon, color=black];
2739[label="135.69.235.39;s;207pkt 207fpkt", shape=hexagon, color=black];
2747[label="162.94.202.30;s;52pkt 52fpkt", shape=hexagon, color=black];
2839[label="167.172.13.32;s;50pkt 50fpkt", shape=hexagon, color=black];
2842[label="16.166.68.82;d;21pkt 21fpkt", shape=hexagon, color=black];
2916[label="16.166.68.81;d;32pkt 32fpkt", shape=hexagon, color=black];
3006[label="135.68.31.98;s;216pkt 216fpkt", shape=hexagon, color=black];
3207[label="135.69.229.11;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3283[label="129.141.145.30;1176pkt 1176fpkt", shape=pentagon, color=darkviolet];
3321[label="135.69.235.39;273pkt 273fpkt", shape=pentagon, color=darkviolet];
3333[label="167.172.13.44;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3345[label="162.8.42.46;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3589[label="135.69.21.123;321pkt 321fpkt", shape=pentagon, color=darkviolet];
3650[label="135.69.232.139;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3664[label="167.172.18.142;195pkt 195fpkt", shape=pentagon, color=darkviolet];
3807[label="135.68.16.180;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3827[label="135.68.18.188;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3994[label="162.94.201.242;78pkt 78fpkt", shape=pentagon, color=darkviolet];
4108[label="135.69.235.39;274pkt 274fpkt", shape=invtriangle, color=brown];
4114[label="167.172.13.44;57pkt 57fpkt", shape=invtriangle, color=brown];
4121[label="162.8.42.46;55pkt 55fpkt", shape=invtriangle, color=brown];
4260[label="167.172.18.142;194pkt 194fpkt", shape=invtriangle, color=brown];
4326[label="135.68.16.178;101pkt 101fpkt", shape=invtriangle, color=brown];
4473[label="135.69.235.39;274pkt 274fpkt", shape=invhouse, color=bisque];
4532[label="129.141.145.132;432pkt 432fpkt", shape=invhouse, color=bisque];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[52.0006%]&lt;BR/&gt;{*:25, *:*}[25.5296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.1201%)&lt;BR/&gt; 53: (6.89044%)&lt;BR/&gt; 49152: (2.77346%)&lt;BR/&gt; 2703: (1.51633%)&lt;BR/&gt; 1024: (1.48177%)&gt;];
}
274--528[label="0.301887;16pkt 16fpkt"];
274--532[label="0.59375;19pkt 19fpkt"];
274--543[label="0.254545;14pkt 14fpkt"];
274--589[label="0.391304;18pkt 18fpkt"];
274--655[label="0.538462;14pkt 14fpkt"];
274--677[label="0.35;14pkt 14fpkt"];
274--1021[label="0.272727;12pkt 12fpkt"];
274--1064[label="0.409091;9pkt 9fpkt"];
274--1089[label="0.454545;10pkt 10fpkt"];
274--1497[label="0.276596;13pkt 13fpkt"];
274--2171[label="0.333333;4pkt 4fpkt"];
274--2268[label="1;87pkt 87fpkt"];
274--2519[label="0.454545;10pkt 10fpkt"];
274--2680[label="0.314286;11pkt 11fpkt"];
274--2842[label="0.380952;8pkt 8fpkt"];
274--2916[label="0.59375;19pkt 19fpkt"];
274--3664[label="1;190pkt 190fpkt"];
274--4260[label="0.994737;189pkt 189fpkt"];
400--532[label="0.0625;2pkt 2fpkt"];
400--543[label="0.0181818;1pkt 1fpkt"];
400--677[label="0.025;1pkt 1fpkt"];
400--924[label="0.0306122;3pkt 3fpkt"];
400--1021[label="0.0227273;1pkt 1fpkt"];
400--1089[label="0.0909091;2pkt 2fpkt"];
400--1497[label="0.0425532;2pkt 2fpkt"];
400--2022[label="0.0294118;1pkt 1fpkt"];
400--2023[label="0.1;1pkt 1fpkt"];
400--2455[label="1;436pkt 436fpkt"];
400--2519[label="0.0909091;2pkt 2fpkt"];
400--2916[label="0.0625;2pkt 2fpkt"];
427--528[label="0.0377358;2pkt 2fpkt"];
427--532[label="0.09375;3pkt 3fpkt"];
427--543[label="0.0181818;1pkt 1fpkt"];
427--589[label="0.0217391;1pkt 1fpkt"];
427--655[label="0.0769231;2pkt 2fpkt"];
427--677[label="0.025;1pkt 1fpkt"];
427--924[label="0.0306122;3pkt 3fpkt"];
427--1021[label="0.0454545;2pkt 2fpkt"];
427--1064[label="0.227273;5pkt 5fpkt"];
427--1497[label="0.0638298;3pkt 3fpkt"];
427--2171[label="0.166667;2pkt 2fpkt"];
427--2680[label="0.0571429;2pkt 2fpkt"];
427--2842[label="0.238095;5pkt 5fpkt"];
427--2916[label="0.09375;3pkt 3fpkt"];
495--1021[label="0.0227273;1pkt 1fpkt"];
495--1089[label="0.0909091;2pkt 2fpkt"];
495--1653[label="0.0263158;1pkt 1fpkt"];
495--2519[label="0.0909091;2pkt 2fpkt"];
495--2680[label="0.0285714;1pkt 1fpkt"];
506--528[label="0.188679;10pkt 10fpkt"];
506--543[label="0.254545;14pkt 14fpkt"];
506--589[label="0.130435;6pkt 6fpkt"];
506--677[label="0.325;13pkt 13fpkt"];
506--1021[label="0.227273;10pkt 10fpkt"];
506--1446[label="0.0403226;5pkt 5fpkt"];
506--1497[label="0.212766;10pkt 10fpkt"];
506--2680[label="0.285714;10pkt 10fpkt"];
506--3020[label="0.0403226;5pkt 5fpkt"];
528--631[label="0.113208;6pkt 6fpkt"];
528--686[label="0.0188679;1pkt 1fpkt"];
528--1096[label="0.0566038;3pkt 3fpkt"];
528--1148[label="0.0188679;1pkt 1fpkt"];
528--1189[label="0.0188679;1pkt 1fpkt"];
528--1350[label="0.0188679;1pkt 1fpkt"];
528--1368[label="0.0188679;1pkt 1fpkt"];
528--1588[label="0.0188679;1pkt 1fpkt"];
528--1803[label="0.0188679;1pkt 1fpkt"];
528--1819[label="0.0192308;1pkt 1fpkt"];
528--2268[label="0.245283;13pkt 13fpkt"];
528--2328[label="0.0188679;1pkt 1fpkt"];
528--2603[label="0.0196078;1pkt 1fpkt"];
528--2739[label="0.0188679;1pkt 1fpkt"];
528--2747[label="0.0192308;1pkt 1fpkt"];
528--3006[label="0.0188679;1pkt 1fpkt"];
528--3283[label="0.113208;6pkt 6fpkt"];
528--3321[label="0.0188679;1pkt 1fpkt"];
528--3664[label="0.301887;16pkt 16fpkt"];
528--3807[label="0.0188679;1pkt 1fpkt"];
528--3994[label="0.0188679;1pkt 1fpkt"];
528--4108[label="0.0188679;1pkt 1fpkt"];
528--4260[label="0.301887;16pkt 16fpkt"];
528--4326[label="0.0188679;1pkt 1fpkt"];
528--4473[label="0.0188679;1pkt 1fpkt"];
528--4528[label="0.0188679;1pkt 1fpkt"];
528--4532[label="0.0566038;3pkt 3fpkt"];
532--815[label="0.03125;1pkt 1fpkt"];
532--1096[label="0.03125;1pkt 1fpkt"];
532--1189[label="0.03125;1pkt 1fpkt"];
532--1368[label="0.03125;1pkt 1fpkt"];
532--1495[label="0.03125;1pkt 1fpkt"];
532--2268[label="0.25;8pkt 8fpkt"];
532--2455[label="0.0625;2pkt 2fpkt"];
532--2516[label="0.03125;1pkt 1fpkt"];
532--2916[label="1;32pkt 32fpkt"];
532--3006[label="0.03125;1pkt 1fpkt"];
532--3345[label="0.03125;1pkt 1fpkt"];
532--3664[label="0.59375;19pkt 19fpkt"];
532--3807[label="0.03125;1pkt 1fpkt"];
532--4121[label="0.03125;1pkt 1fpkt"];
532--4260[label="0.59375;19pkt 19fpkt"];
532--4532[label="0.03125;1pkt 1fpkt"];
543--631[label="0.0545455;3pkt 3fpkt"];
543--686[label="0.0181818;1pkt 1fpkt"];
543--891[label="0.0181818;1pkt 1fpkt"];
543--1096[label="0.0545455;3pkt 3fpkt"];
543--1350[label="0.0181818;1pkt 1fpkt"];
543--1368[label="0.127273;7pkt 7fpkt"];
543--1971[label="0.0263158;1pkt 1fpkt"];
543--2167[label="0.0363636;2pkt 2fpkt"];
543--2168[label="0.0181818;1pkt 1fpkt"];
543--2268[label="0.181818;10pkt 10fpkt"];
543--2328[label="0.0181818;1pkt 1fpkt"];
543--2455[label="0.0181818;1pkt 1fpkt"];
543--3207[label="0.0232558;1pkt 1fpkt"];
543--3283[label="0.0545455;3pkt 3fpkt"];
543--3589[label="0.0181818;1pkt 1fpkt"];
543--3650[label="0.0294118;1pkt 1fpkt"];
543--3664[label="0.254545;14pkt 14fpkt"];
543--3827[label="0.0181818;1pkt 1fpkt"];
543--4260[label="0.254545;14pkt 14fpkt"];
543--4532[label="0.0545455;3pkt 3fpkt"];
589--631[label="0.173913;8pkt 8fpkt"];
589--815[label="0.0217391;1pkt 1fpkt"];
589--891[label="0.0217391;1pkt 1fpkt"];
589--1096[label="0.0217391;1pkt 1fpkt"];
589--1148[label="0.0217391;1pkt 1fpkt"];
589--1189[label="0.0217391;1pkt 1fpkt"];
589--1326[label="0.0217391;1pkt 1fpkt"];
589--1350[label="0.0217391;1pkt 1fpkt"];
589--1495[label="0.0217391;1pkt 1fpkt"];
589--1588[label="0.0217391;1pkt 1fpkt"];
589--1819[label="0.0434783;2pkt 2fpkt"];
589--1932[label="0.0263158;1pkt 1fpkt"];
589--2268[label="0.26087;12pkt 12fpkt"];
589--2405[label="0.0217391;1pkt 1fpkt"];
589--2516[label="0.0217391;1pkt 1fpkt"];
589--2603[label="0.0217391;1pkt 1fpkt"];
589--2739[label="0.0217391;1pkt 1fpkt"];
589--2747[label="0.0434783;2pkt 2fpkt"];
589--3006[label="0.0217391;1pkt 1fpkt"];
589--3283[label="0.173913;8pkt 8fpkt"];
589--3321[label="0.0217391;1pkt 1fpkt"];
589--3589[label="0.0217391;1pkt 1fpkt"];
589--3664[label="0.391304;18pkt 18fpkt"];
589--4108[label="0.0217391;1pkt 1fpkt"];
589--4260[label="0.391304;18pkt 18fpkt"];
589--4326[label="0.0217391;1pkt 1fpkt"];
589--4473[label="0.0217391;1pkt 1fpkt"];
589--4532[label="0.0217391;1pkt 1fpkt"];
631--924[label="0.214286;21pkt 21fpkt"];
631--1021[label="0.181818;8pkt 8fpkt"];
631--1089[label="0.0454545;1pkt 1fpkt"];
631--1269[label="0.00681818;3pkt 3fpkt"];
631--1483[label="0.00700935;3pkt 3fpkt"];
631--1497[label="0.106383;5pkt 5fpkt"];
631--1653[label="0.5;19pkt 19fpkt"];
631--2023[label="0.1;1pkt 1fpkt"];
631--2519[label="0.0454545;1pkt 1fpkt"];
631--2680[label="0.171429;6pkt 6fpkt"];
631--3283[label="0.999124;1140pkt 1140fpkt"];
655--1096[label="0.0384615;1pkt 1fpkt"];
655--1279[label="0.0384615;1pkt 1fpkt"];
655--1368[label="0.0384615;1pkt 1fpkt"];
655--1588[label="0.0384615;1pkt 1fpkt"];
655--1813[label="0.0384615;1pkt 1fpkt"];
655--1819[label="0.0384615;1pkt 1fpkt"];
655--2268[label="0.269231;7pkt 7fpkt"];
655--2747[label="0.0384615;1pkt 1fpkt"];
655--3664[label="0.538462;14pkt 14fpkt"];
655--4260[label="0.538462;14pkt 14fpkt"];
655--4326[label="0.0384615;1pkt 1fpkt"];
655--4528[label="0.0384615;1pkt 1fpkt"];
655--4532[label="0.0384615;1pkt 1fpkt"];
677--891[label="0.025;1pkt 1fpkt"];
677--1368[label="0.075;3pkt 3fpkt"];
677--1819[label="0.025;1pkt 1fpkt"];
677--2167[label="0.025;1pkt 1fpkt"];
677--2176[label="0.025;1pkt 1fpkt"];
677--2268[label="0.2;8pkt 8fpkt"];
677--2405[label="0.025;1pkt 1fpkt"];
677--2455[label="0.025;1pkt 1fpkt"];
677--2747[label="0.025;1pkt 1fpkt"];
677--2839[label="0.025;1pkt 1fpkt"];
677--3589[label="0.025;1pkt 1fpkt"];
677--3664[label="0.35;14pkt 14fpkt"];
677--4260[label="0.35;14pkt 14fpkt"];
677--4528[label="0.025;1pkt 1fpkt"];
814--881[label="0.0471698;5pkt 5fpkt"];
814--1064[label="0.0454545;1pkt 1fpkt"];
814--1089[label="0.0454545;1pkt 1fpkt"];
814--1313[label="0.0111111;1pkt 1fpkt"];
814--1314[label="0.0357143;1pkt 1fpkt"];
814--1351[label="0.0172414;1pkt 1fpkt"];
814--1525[label="0.0125;1pkt 1fpkt"];
814--1786[label="0.0208333;1pkt 1fpkt"];
814--1799[label="0.00793651;1pkt 1fpkt"];
814--1947[label="0.025;1pkt 1fpkt"];
814--2140[label="0.00909091;1pkt 1fpkt"];
814--2151[label="0.00961538;1pkt 1fpkt"];
814--2156[label="0.0103093;1pkt 1fpkt"];
814--2387[label="1;344pkt 344fpkt"];
814--2519[label="0.0454545;1pkt 1fpkt"];
814--2725[label="0.0277778;1pkt 1fpkt"];
814--2842[label="0.047619;1pkt 1fpkt"];
814--2862[label="0.0543478;5pkt 5fpkt"];
814--2983[label="0.00793651;1pkt 1fpkt"];
814--2987[label="0.0103093;1pkt 1fpkt"];
814--3125[label="0.0420168;25pkt 25fpkt"];
814--3129[label="0.0184874;11pkt 11fpkt"];
814--3134[label="0.0218487;13pkt 13fpkt"];
814--3137[label="0.0756303;45pkt 45fpkt"];
814--3139[label="0.0420168;25pkt 25fpkt"];
814--3141[label="0.0184874;11pkt 11fpkt"];
814--3146[label="0.0218487;13pkt 13fpkt"];
814--3149[label="0.0420168;25pkt 25fpkt"];
814--3151[label="0.0184874;11pkt 11fpkt"];
814--3156[label="0.0218487;13pkt 13fpkt"];
815--882[label="0.00285714;1pkt 1fpkt"];
815--924[label="0.163265;16pkt 16fpkt"];
815--1653[label="0.0263158;1pkt 1fpkt"];
815--2516[label="1;243pkt 243fpkt"];
815--2916[label="0.03125;1pkt 1fpkt"];
891--924[label="0.142857;14pkt 14fpkt"];
891--1653[label="0.0789474;3pkt 3fpkt"];
891--2405[label="0.988889;89pkt 89fpkt"];
891--3589[label="1;244pkt 244fpkt"];
924--1096[label="0.0816327;8pkt 8fpkt"];
924--1350[label="0.0408163;4pkt 4fpkt"];
924--1368[label="0.0306122;3pkt 3fpkt"];
924--1393[label="0.0204082;2pkt 2fpkt"];
924--1406[label="0.0204082;2pkt 2fpkt"];
924--2176[label="0.0273973;2pkt 2fpkt"];
924--2277[label="0.0102041;1pkt 1fpkt"];
924--2396[label="0.0102041;1pkt 1fpkt"];
924--2405[label="0.0666667;6pkt 6fpkt"];
924--2455[label="0.0204082;2pkt 2fpkt"];
924--2516[label="0.122449;12pkt 12fpkt"];
924--3283[label="0.214286;21pkt 21fpkt"];
924--3333[label="0.0178571;1pkt 1fpkt"];
924--3589[label="0.142857;14pkt 14fpkt"];
924--4114[label="0.0175439;1pkt 1fpkt"];
924--4532[label="0.0816327;8pkt 8fpkt"];
1021--1096[label="0.0227273;1pkt 1fpkt"];
1021--1368[label="0.0454545;2pkt 2fpkt"];
1021--1588[label="0.0227273;1pkt 1fpkt"];
1021--1813[label="0.0227273;1pkt 1fpkt"];
1021--1819[label="0.0227273;1pkt 1fpkt"];
1021--2132[label="0.0227273;1pkt 1fpkt"];
1021--2268[label="0.136364;6pkt 6fpkt"];
1021--2328[label="0.0227273;1pkt 1fpkt"];
1021--2680[label="1;35pkt 35fpkt"];
1021--2747[label="0.0227273;1pkt 1fpkt"];
1021--3207[label="0.0232558;1pkt 1fpkt"];
1021--3283[label="0.181818;8pkt 8fpkt"];
1021--3333[label="0.0227273;1pkt 1fpkt"];
1021--3664[label="0.272727;12pkt 12fpkt"];
1021--3909[label="0.0227273;1pkt 1fpkt"];
1021--4114[label="0.0227273;1pkt 1fpkt"];
1021--4260[label="0.272727;12pkt 12fpkt"];
1021--4326[label="0.0227273;1pkt 1fpkt"];
1021--4374[label="0.0227273;1pkt 1fpkt"];
1021--4532[label="0.0227273;1pkt 1fpkt"];
1064--1495[label="0.0454545;1pkt 1fpkt"];
1064--1803[label="0.0454545;1pkt 1fpkt"];
1064--1813[label="0.0454545;1pkt 1fpkt"];
1064--1819[label="0.0454545;1pkt 1fpkt"];
1064--2167[label="0.0454545;1pkt 1fpkt"];
1064--2268[label="0.136364;3pkt 3fpkt"];
1064--2387[label="0.0454545;1pkt 1fpkt"];
1064--2747[label="0.0454545;1pkt 1fpkt"];
1064--2842[label="1;21pkt 21fpkt"];
1064--3664[label="0.409091;9pkt 9fpkt"];
1064--3994[label="0.0454545;1pkt 1fpkt"];
1064--4260[label="0.409091;9pkt 9fpkt"];
1089--1588[label="0.0454545;1pkt 1fpkt"];
1089--1932[label="0.0454545;1pkt 1fpkt"];
1089--2268[label="0.227273;5pkt 5fpkt"];
1089--2387[label="0.0454545;1pkt 1fpkt"];
1089--2455[label="0.0909091;2pkt 2fpkt"];
1089--2519[label="1;22pkt 22fpkt"];
1089--2603[label="0.0454545;1pkt 1fpkt"];
1089--2839[label="0.0454545;1pkt 1fpkt"];
1089--3283[label="0.0454545;1pkt 1fpkt"];
1089--3664[label="0.454545;10pkt 10fpkt"];
1089--4260[label="0.454545;10pkt 10fpkt"];
1089--4326[label="0.0454545;1pkt 1fpkt"];
1089--4528[label="0.0454545;1pkt 1fpkt"];
1096--1269[label="0.00721154;3pkt 3fpkt"];
1096--1483[label="0.00721154;3pkt 3fpkt"];
1096--1497[label="0.0212766;1pkt 1fpkt"];
1096--1653[label="0.210526;8pkt 8fpkt"];
1096--2023[label="0.1;1pkt 1fpkt"];
1096--2916[label="0.03125;1pkt 1fpkt"];
1096--4532[label="1;416pkt 416fpkt"];
1148--1313[label="0.0111111;1pkt 1fpkt"];
1148--1314[label="0.0357143;1pkt 1fpkt"];
1148--1351[label="0.0172414;1pkt 1fpkt"];
1148--1497[label="0.0425532;2pkt 2fpkt"];
1148--1525[label="0.0125;1pkt 1fpkt"];
1148--1786[label="0.0208333;1pkt 1fpkt"];
1148--1799[label="0.00793651;1pkt 1fpkt"];
1148--1947[label="0.025;1pkt 1fpkt"];
1148--2140[label="0.00909091;1pkt 1fpkt"];
1148--2151[label="0.00961538;1pkt 1fpkt"];
1148--2156[label="0.0103093;1pkt 1fpkt"];
1148--2725[label="0.0277778;1pkt 1fpkt"];
1148--2739[label="1;207pkt 207fpkt"];
1148--2862[label="0.0326087;3pkt 3fpkt"];
1148--2983[label="0.00793651;1pkt 1fpkt"];
1148--2987[label="0.0103093;1pkt 1fpkt"];
1148--3129[label="0.00396825;1pkt 1fpkt"];
1148--3137[label="0.0793651;20pkt 20fpkt"];
1148--3141[label="0.00396825;1pkt 1fpkt"];
1148--3151[label="0.00396825;1pkt 1fpkt"];
1148--3321[label="0.996032;251pkt 251fpkt"];
1148--4108[label="1;252pkt 252fpkt"];
1148--4473[label="1;252pkt 252fpkt"];
1189--1313[label="0.0111111;1pkt 1fpkt"];
1189--1314[label="0.0357143;1pkt 1fpkt"];
1189--1499[label="0.407407;88pkt 88fpkt"];
1189--2177[label="0.00714286;1pkt 1fpkt"];
1189--2822[label="0.407407;88pkt 88fpkt"];
1189--2916[label="0.03125;1pkt 1fpkt"];
1189--3006[label="1;216pkt 216fpkt"];
1189--3125[label="0.00462963;1pkt 1fpkt"];
1189--3134[label="0.00462963;1pkt 1fpkt"];
1189--3137[label="0.00925926;2pkt 2fpkt"];
1189--3139[label="0.00462963;1pkt 1fpkt"];
1189--3146[label="0.00462963;1pkt 1fpkt"];
1189--3149[label="0.00462963;1pkt 1fpkt"];
1189--3156[label="0.00462963;1pkt 1fpkt"];
1326--1351[label="0.0172414;1pkt 1fpkt"];
1326--1525[label="0.0125;1pkt 1fpkt"];
1326--1786[label="0.0208333;1pkt 1fpkt"];
1326--1799[label="0.00793651;1pkt 1fpkt"];
1326--1947[label="0.025;1pkt 1fpkt"];
1326--2140[label="0.00909091;1pkt 1fpkt"];
1326--2151[label="0.00961538;1pkt 1fpkt"];
1326--2156[label="0.0103093;1pkt 1fpkt"];
1326--2725[label="0.0277778;1pkt 1fpkt"];
1326--2862[label="0.0434783;4pkt 4fpkt"];
1326--2983[label="0.00793651;1pkt 1fpkt"];
1326--2987[label="0.0103093;1pkt 1fpkt"];
1326--3125[label="0.00826446;2pkt 2fpkt"];
1326--3127[label="0.00413223;1pkt 1fpkt"];
1326--3129[label="0.00826446;2pkt 2fpkt"];
1326--3137[label="0.0289256;7pkt 7fpkt"];
1326--3139[label="0.00826446;2pkt 2fpkt"];
1326--3141[label="0.00826446;2pkt 2fpkt"];
1326--3149[label="0.00826446;2pkt 2fpkt"];
1326--3151[label="0.00826446;2pkt 2fpkt"];
1368--1497[label="0.0212766;1pkt 1fpkt"];
1368--1653[label="0.105263;4pkt 4fpkt"];
1368--1804[label="0.0416667;1pkt 1fpkt"];
1368--1943[label="0.0333333;1pkt 1fpkt"];
1368--2171[label="0.416667;5pkt 5fpkt"];
1368--2680[label="0.0571429;2pkt 2fpkt"];
1368--2916[label="0.03125;1pkt 1fpkt"];
1368--2931[label="0.0333333;1pkt 1fpkt"];
1368--2944[label="0.0298507;2pkt 2fpkt"];
1393--1608[label="0.0481928;4pkt 4fpkt"];
1393--1781[label="0.266187;37pkt 37fpkt"];
1393--1966[label="0.0645161;4pkt 4fpkt"];
1393--3125[label="0.00485437;1pkt 1fpkt"];
1393--3127[label="0.0485437;10pkt 10fpkt"];
1393--3134[label="0.00485437;1pkt 1fpkt"];
1393--3138[label="0.0291262;6pkt 6fpkt"];
1393--3139[label="0.00485437;1pkt 1fpkt"];
1393--3146[label="0.00485437;1pkt 1fpkt"];
1393--3149[label="0.00485437;1pkt 1fpkt"];
1393--3156[label="0.00485437;1pkt 1fpkt"];
1495--1497[label="0.0425532;2pkt 2fpkt"];
1495--2171[label="0.0833333;1pkt 1fpkt"];
1495--2842[label="0.047619;1pkt 1fpkt"];
1495--2916[label="0.03125;1pkt 1fpkt"];
1497--1971[label="0.0263158;1pkt 1fpkt"];
1497--2268[label="0.148936;7pkt 7fpkt"];
1497--2455[label="0.0425532;2pkt 2fpkt"];
1497--2739[label="0.0425532;2pkt 2fpkt"];
1497--2839[label="0.0212766;1pkt 1fpkt"];
1497--2909[label="0.0212766;1pkt 1fpkt"];
1497--3207[label="0.0232558;1pkt 1fpkt"];
1497--3283[label="0.106383;5pkt 5fpkt"];
1497--3321[label="0.0425532;2pkt 2fpkt"];
1497--3333[label="0.0212766;1pkt 1fpkt"];
1497--3664[label="0.276596;13pkt 13fpkt"];
1497--4108[label="0.0425532;2pkt 2fpkt"];
1497--4114[label="0.0212766;1pkt 1fpkt"];
1497--4260[label="0.276596;13pkt 13fpkt"];
1497--4473[label="0.0425532;2pkt 2fpkt"];
1497--4532[label="0.0212766;1pkt 1fpkt"];
1588--2023[label="0.1;1pkt 1fpkt"];
1588--2519[label="0.0454545;1pkt 1fpkt"];
1588--2603[label="1;51pkt 51fpkt"];
1588--4326[label="1;64pkt 64fpkt"];
1653--2277[label="0.0526316;2pkt 2fpkt"];
1653--2405[label="0.0263158;1pkt 1fpkt"];
1653--2516[label="0.0263158;1pkt 1fpkt"];
1653--3283[label="0.5;19pkt 19fpkt"];
1653--3589[label="0.0789474;3pkt 3fpkt"];
1653--4532[label="0.210526;8pkt 8fpkt"];
1803--2246[label="1;1pkt 1fpkt"];
1803--2842[label="0.047619;1pkt 1fpkt"];
1803--3020[label="0.084507;6pkt 6fpkt"];
1803--3994[label="1;71pkt 71fpkt"];
1819--2023[label="0.1;1pkt 1fpkt"];
1819--2680[label="0.0285714;1pkt 1fpkt"];
1819--2747[label="1;52pkt 52fpkt"];
1819--2842[label="0.047619;1pkt 1fpkt"];
1971--2968[label="0.5;1pkt 1fpkt"];
1971--3134[label="0.0789474;3pkt 3fpkt"];
1971--3137[label="0.157895;6pkt 6fpkt"];
1971--3146[label="0.0789474;3pkt 3fpkt"];
1971--3156[label="0.0789474;3pkt 3fpkt"];
2023--2603[label="0.1;1pkt 1fpkt"];
2023--2747[label="0.1;1pkt 1fpkt"];
2023--3207[label="0.1;1pkt 1fpkt"];
2023--3283[label="0.1;1pkt 1fpkt"];
2023--3333[label="0.1;1pkt 1fpkt"];
2023--3807[label="0.2;2pkt 2fpkt"];
2023--4114[label="0.1;1pkt 1fpkt"];
2023--4326[label="0.1;1pkt 1fpkt"];
2023--4532[label="0.1;1pkt 1fpkt"];
2167--2842[label="0.047619;1pkt 1fpkt"];
2171--2268[label="0.166667;2pkt 2fpkt"];
2171--3664[label="0.333333;4pkt 4fpkt"];
2171--4260[label="0.333333;4pkt 4fpkt"];
2246--3994[label="1;1pkt 1fpkt"];
2268--2519[label="0.227273;5pkt 5fpkt"];
2268--2680[label="0.171429;6pkt 6fpkt"];
2268--2842[label="0.142857;3pkt 3fpkt"];
2268--2916[label="0.25;8pkt 8fpkt"];
2268--3664[label="1;87pkt 87fpkt"];
2268--4260[label="1;87pkt 87fpkt"];
2405--3589[label="0.988889;89pkt 89fpkt"];
2455--2519[label="0.0909091;2pkt 2fpkt"];
2455--2916[label="0.0625;2pkt 2fpkt"];
2516--2916[label="0.03125;1pkt 1fpkt"];
2519--2603[label="0.0454545;1pkt 1fpkt"];
2519--2839[label="0.0454545;1pkt 1fpkt"];
2519--3283[label="0.0454545;1pkt 1fpkt"];
2519--3664[label="0.454545;10pkt 10fpkt"];
2519--4260[label="0.454545;10pkt 10fpkt"];
2519--4326[label="0.0454545;1pkt 1fpkt"];
2519--4528[label="0.0454545;1pkt 1fpkt"];
2603--4326[label="1;51pkt 51fpkt"];
2680--2747[label="0.0285714;1pkt 1fpkt"];
2680--3207[label="0.0285714;1pkt 1fpkt"];
2680--3283[label="0.171429;6pkt 6fpkt"];
2680--3664[label="0.314286;11pkt 11fpkt"];
2680--4260[label="0.314286;11pkt 11fpkt"];
2739--2862[label="0.0217391;2pkt 2fpkt"];
2739--2983[label="0.00793651;1pkt 1fpkt"];
2739--2987[label="0.0103093;1pkt 1fpkt"];
2739--3137[label="0.0966184;20pkt 20fpkt"];
2739--3321[label="0.995169;206pkt 206fpkt"];
2739--4108[label="1;207pkt 207fpkt"];
2739--4473[label="1;207pkt 207fpkt"];
2747--2842[label="0.047619;1pkt 1fpkt"];
2839--2931[label="0.0666667;2pkt 2fpkt"];
2839--2944[label="0.04;2pkt 2fpkt"];
2842--3664[label="0.380952;8pkt 8fpkt"];
2842--3994[label="0.047619;1pkt 1fpkt"];
2842--4260[label="0.380952;8pkt 8fpkt"];
2916--3006[label="0.03125;1pkt 1fpkt"];
2916--3345[label="0.03125;1pkt 1fpkt"];
2916--3664[label="0.59375;19pkt 19fpkt"];
2916--3807[label="0.03125;1pkt 1fpkt"];
2916--4121[label="0.03125;1pkt 1fpkt"];
2916--4260[label="0.59375;19pkt 19fpkt"];
2916--4532[label="0.03125;1pkt 1fpkt"];
3006--3125[label="0.00462963;1pkt 1fpkt"];
3006--3134[label="0.00462963;1pkt 1fpkt"];
3006--3137[label="0.00925926;2pkt 2fpkt"];
3006--3139[label="0.00462963;1pkt 1fpkt"];
3006--3146[label="0.00462963;1pkt 1fpkt"];
3006--3149[label="0.00462963;1pkt 1fpkt"];
3006--3156[label="0.00462963;1pkt 1fpkt"];
3321--4108[label="1;273pkt 273fpkt"];
3321--4473[label="1;273pkt 273fpkt"];
3333--4114[label="1;56pkt 56fpkt"];
3345--4121[label="1;55pkt 55fpkt"];
3664--4260[label="1;194pkt 194fpkt"];
4108--4473[label="1;274pkt 274fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1157[label="135.69.136.178;s;224pkt 224fpkt", shape=diamond, color=yellow];
2204[label="99.91.56.179;d;14pkt 14fpkt", shape=diamond, color=yellow];
2528[label="135.69.136.178;s;219pkt 219fpkt", shape=hexagon, color=black];
3803[label="135.69.136.178;226pkt 226fpkt", shape=pentagon, color=darkviolet];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.136.178:*, 219.83.143.80:80}[38.0531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4627%)&lt;BR/&gt; 1863: (0.878477%)&lt;BR/&gt; 7001: (0.439239%)&lt;BR/&gt; 0: (0.439239%)&lt;BR/&gt; 63571: (0.292826%)&gt;];
}
1157--1434[label="0.00625;1pkt 1fpkt"];
1157--1553[label="0.00892857;1pkt 1fpkt"];
1157--2204[label="1;14pkt 14fpkt"];
1157--2325[label="0.00458716;1pkt 1fpkt"];
1157--2528[label="1;219pkt 219fpkt"];
1157--2581[label="0.0131579;1pkt 1fpkt"];
1157--3803[label="1;224pkt 224fpkt"];
2204--2528[label="0.642857;9pkt 9fpkt"];
2204--3803[label="1;14pkt 14fpkt"];
2528--2581[label="0.0131579;1pkt 1fpkt"];
2528--3803[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_ip="219.83.143.80" dst_port="80" src_ip="135.69.136.178"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1452[label="135.68.2.147;s;13pkt 13fpkt", shape=diamond, color=yellow];
1683[label="70.28.171.80;d;9pkt 9fpkt", shape=diamond, color=yellow];
2533[label="135.68.2.147;s;6pkt 6fpkt", shape=hexagon, color=black];
3687[label="135.68.2.147;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4271[label="135.68.2.147;12pkt 12fpkt", shape=invtriangle, color=brown];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.2.147:80, 70.28.171.80:*}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60665: (4.71698%)&lt;BR/&gt; 60659: (4.71698%)&lt;BR/&gt; 60629: (4.71698%)&lt;BR/&gt; 60677: (3.77358%)&gt;];
}
1452--1683[label="1;9pkt 9fpkt"];
1452--2533[label="1;6pkt 6fpkt"];
1452--3687[label="1;13pkt 13fpkt"];
1452--4271[label="1;12pkt 12fpkt"];
1683--2533[label="0.666667;4pkt 4fpkt"];
1683--3687[label="1;9pkt 9fpkt"];
1683--4271[label="0.888889;8pkt 8fpkt"];
2533--3687[label="1;6pkt 6fpkt"];
2533--4271[label="0.833333;5pkt 5fpkt"];
3687--4271[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="70.28.171.80" src_ip="135.68.2.147" src_port="80"/>
    </slice>
    <from sec="1112591016" usec="0"/>
    <to sec="1112591433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1242[label="204.152.149.114;s;4pkt 4fpkt", shape=diamond, color=yellow];
3568[label="204.152.149.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4219[label="204.152.149.114;3pkt 3fpkt", shape=invtriangle, color=brown];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.152.149.114:80, 193.41.161.133:60901}[25%]&lt;BR/&gt;{204.152.149.114:80, 193.41.161.133:60912}[25%]&lt;BR/&gt;{204.152.149.114:80, 193.41.161.133:60913}[25%]&lt;BR/&gt;{204.152.149.114:80, 193.41.161.133:60940}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60940: (15%)&lt;BR/&gt; 60913: (15%)&lt;BR/&gt; 60912: (15%)&lt;BR/&gt; 60901: (5%)&gt;];
}
1242--2544[label="1;4pkt 4fpkt"];
1242--3568[label="1;3pkt 3fpkt"];
1242--4219[label="1;3pkt 3fpkt"];
3568--4219[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.161.133" dst_port="60940" src_ip="204.152.149.114" src_port="80"/>
      <filter dst_ip="193.41.161.133" dst_port="60913" src_ip="204.152.149.114" src_port="80"/>
      <filter dst_ip="193.41.161.133" dst_port="60912" src_ip="204.152.149.114" src_port="80"/>
      <filter dst_ip="193.41.161.133" dst_port="60901" src_ip="204.152.149.114" src_port="80"/>
    </slice>
    <from sec="1112591083" usec="0"/>
    <to sec="1112591324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
291[label="70.55.66.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
293[label="192.65.185.3;s;198pkt 198fpkt", shape=diamond, color=yellow];
344[label="210.50.156.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
542[label="163.41.175.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
709[label="23.3.38.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
939[label="70.166.129.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
947[label="217.128.234.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
1200[label="142.133.32.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
1311[label="18.1.208.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
1422[label="5.233.203.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
1440[label="80.208.128.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1598[label="17.46.66.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
1628[label="16.17.125.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
1840[label="23.192.83.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
1845[label="70.52.166.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
1997[label="70.108.177.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2424[label="217.128.234.75;d;1pkt 1fpkt", shape=hexagon, color=black];
2548[label="192.65.185.3;s;150pkt 150fpkt", shape=hexagon, color=black];
2613[label="70.166.129.63;d;1pkt 1fpkt", shape=hexagon, color=black];
2618[label="80.208.128.119;d;1pkt 1fpkt", shape=hexagon, color=black];
3173[label="192.65.185.3;200pkt 200fpkt", shape=pentagon, color=darkviolet];
4037[label="192.65.185.3;200pkt 200fpkt", shape=invtriangle, color=brown];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.185.3:6881, *:*}[54.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (37.5326%)&lt;BR/&gt; 6882: (2.21932%)&lt;BR/&gt; 26890: (0.522193%)&lt;BR/&gt; 10275: (0.522193%)&lt;BR/&gt; 4000: (0.522193%)&gt;];
}
291--293[label="1;1pkt 1fpkt"];
291--2548[label="1;1pkt 1fpkt"];
291--3173[label="1;1pkt 1fpkt"];
291--4037[label="1;1pkt 1fpkt"];
293--344[label="1;1pkt 1fpkt"];
293--542[label="1;1pkt 1fpkt"];
293--709[label="1;1pkt 1fpkt"];
293--939[label="1;1pkt 1fpkt"];
293--947[label="1;1pkt 1fpkt"];
293--1200[label="1;1pkt 1fpkt"];
293--1311[label="1;1pkt 1fpkt"];
293--1422[label="1;1pkt 1fpkt"];
293--1440[label="1;1pkt 1fpkt"];
293--1598[label="1;1pkt 1fpkt"];
293--1628[label="1;1pkt 1fpkt"];
293--1840[label="1;1pkt 1fpkt"];
293--1845[label="1;1pkt 1fpkt"];
293--1997[label="1;1pkt 1fpkt"];
293--2424[label="1;1pkt 1fpkt"];
293--2548[label="1;150pkt 150fpkt"];
293--2613[label="1;1pkt 1fpkt"];
293--2618[label="1;1pkt 1fpkt"];
293--3173[label="1;198pkt 198fpkt"];
293--4037[label="1;198pkt 198fpkt"];
344--2548[label="1;1pkt 1fpkt"];
344--3173[label="1;1pkt 1fpkt"];
344--4037[label="1;1pkt 1fpkt"];
542--2548[label="1;1pkt 1fpkt"];
542--3173[label="1;1pkt 1fpkt"];
542--4037[label="1;1pkt 1fpkt"];
709--2548[label="1;1pkt 1fpkt"];
709--3173[label="1;1pkt 1fpkt"];
709--4037[label="1;1pkt 1fpkt"];
939--2548[label="1;1pkt 1fpkt"];
939--2613[label="1;1pkt 1fpkt"];
939--3173[label="1;1pkt 1fpkt"];
939--4037[label="1;1pkt 1fpkt"];
947--2424[label="1;1pkt 1fpkt"];
947--2548[label="1;1pkt 1fpkt"];
947--3173[label="1;1pkt 1fpkt"];
947--4037[label="1;1pkt 1fpkt"];
1200--2548[label="1;1pkt 1fpkt"];
1200--3173[label="1;1pkt 1fpkt"];
1200--4037[label="1;1pkt 1fpkt"];
1311--2548[label="1;1pkt 1fpkt"];
1311--3173[label="1;1pkt 1fpkt"];
1311--4037[label="1;1pkt 1fpkt"];
1422--2548[label="1;1pkt 1fpkt"];
1422--3173[label="1;1pkt 1fpkt"];
1422--4037[label="1;1pkt 1fpkt"];
1440--2548[label="1;1pkt 1fpkt"];
1440--2618[label="1;1pkt 1fpkt"];
1440--3173[label="1;1pkt 1fpkt"];
1440--4037[label="1;1pkt 1fpkt"];
1598--2548[label="1;1pkt 1fpkt"];
1598--3173[label="1;1pkt 1fpkt"];
1598--4037[label="1;1pkt 1fpkt"];
1628--2548[label="1;1pkt 1fpkt"];
1628--3173[label="1;1pkt 1fpkt"];
1628--4037[label="1;1pkt 1fpkt"];
1840--2548[label="1;1pkt 1fpkt"];
1840--3173[label="1;1pkt 1fpkt"];
1840--4037[label="1;1pkt 1fpkt"];
1845--2548[label="1;1pkt 1fpkt"];
1845--3173[label="1;1pkt 1fpkt"];
1845--4037[label="1;1pkt 1fpkt"];
1997--2548[label="1;1pkt 1fpkt"];
1997--3173[label="1;1pkt 1fpkt"];
1997--4037[label="1;1pkt 1fpkt"];
2424--2548[label="1;1pkt 1fpkt"];
2424--3173[label="1;1pkt 1fpkt"];
2424--4037[label="1;1pkt 1fpkt"];
2548--2613[label="1;1pkt 1fpkt"];
2548--2618[label="1;1pkt 1fpkt"];
2548--3173[label="1;150pkt 150fpkt"];
2548--4037[label="1;150pkt 150fpkt"];
2613--3173[label="1;1pkt 1fpkt"];
2613--4037[label="1;1pkt 1fpkt"];
2618--3173[label="1;1pkt 1fpkt"];
2618--4037[label="1;1pkt 1fpkt"];
3173--4037[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.185.3" src_port="6881"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
300[label="135.69.65.208;s;4pkt 4fpkt", shape=diamond, color=yellow];
524[label="192.87.54.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
2549[label="192.87.54.91;d;1pkt 1fpkt", shape=hexagon, color=black];
3889[label="135.69.65.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.65.208:20031, 145.90.94.31:1152}[20%]&lt;BR/&gt;{135.69.65.208:0, 17.120.46.65:0}[20%]&lt;BR/&gt;{135.69.65.208:20, 192.87.54.91:32305}[20%]&lt;BR/&gt;{135.69.65.208:123, 72.113.176.173:123}[20%]&lt;BR/&gt;{135.69.65.208:49152, 203.26.188.212:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32305: (18.1818%)&lt;BR/&gt; 123: (18.1818%)&lt;BR/&gt; 20: (18.1818%)&lt;BR/&gt; 0: (18.1818%)&lt;BR/&gt; 20031: (9.09091%)&gt;];
}
300--524[label="1;1pkt 1fpkt"];
300--882[label="0.25;1pkt 1fpkt"];
300--2549[label="1;1pkt 1fpkt"];
300--3889[label="1;4pkt 4fpkt"];
524--2549[label="1;1pkt 1fpkt"];
524--3889[label="1;1pkt 1fpkt"];
2549--3889[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.26.188.212" dst_port="53" src_ip="135.69.65.208" src_port="49152"/>
      <filter dst_ip="72.113.176.173" dst_port="123" src_ip="135.69.65.208" src_port="123"/>
      <filter dst_ip="192.87.54.91" dst_port="32305" src_ip="135.69.65.208" src_port="20"/>
      <filter dst_ip="17.120.46.65" src_ip="135.69.65.208"/>
      <filter dst_ip="145.90.94.31" dst_port="1152" src_ip="135.69.65.208" src_port="20031"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1283[label="200.116.166.145;s;882pkt 882fpkt", shape=diamond, color=yellow];
2551[label="200.116.166.145;s;692pkt 692fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.116.166.145:53, *:1024}[50.907%]&lt;BR/&gt;{200.116.166.145:53, *:3072}[48.5261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7776%)&lt;BR/&gt; 1024: (25.7306%)&lt;BR/&gt; 3072: (24.2694%)&lt;BR/&gt; 6667: (0.222363%)&gt;];
}
1283--2551[label="1;692pkt 692fpkt"];
1283--3125[label="0.0623583;55pkt 55fpkt"];
1283--3129[label="0.0566893;50pkt 50fpkt"];
1283--3134[label="0.0634921;56pkt 56fpkt"];
1283--3139[label="0.0623583;55pkt 55fpkt"];
1283--3141[label="0.0566893;50pkt 50fpkt"];
1283--3146[label="0.0634921;56pkt 56fpkt"];
1283--3149[label="0.0623583;55pkt 55fpkt"];
1283--3151[label="0.0566893;50pkt 50fpkt"];
1283--3156[label="0.0634921;56pkt 56fpkt"];
2551--3125[label="0.0794798;55pkt 55fpkt"];
2551--3129[label="0.00144509;1pkt 1fpkt"];
2551--3134[label="0.00144509;1pkt 1fpkt"];
2551--3139[label="0.0794798;55pkt 55fpkt"];
2551--3141[label="0.00144509;1pkt 1fpkt"];
2551--3146[label="0.00144509;1pkt 1fpkt"];
2551--3149[label="0.0794798;55pkt 55fpkt"];
2551--3151[label="0.00144509;1pkt 1fpkt"];
2551--3156[label="0.00144509;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1024" src_ip="200.116.166.145" src_port="53"/>
      <filter dst_port="3072" src_ip="200.116.166.145" src_port="53"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
774[label="70.33.146.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
2558[label="70.33.146.230;s;1pkt 1fpkt", shape=hexagon, color=black];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.33.146.230:2221, 193.41.161.156:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2221: (50%)&gt;];
}
774--2558[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.161.156" dst_port="6346" src_ip="70.33.146.230" src_port="2221"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
613[label="192.65.188.101;s;2pkt 2fpkt", shape=diamond, color=yellow];
614[label="200.142.190.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
2567[label="192.65.188.101;s;2pkt 2fpkt", shape=hexagon, color=black];
2837[label="200.142.190.32;d;1pkt 1fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.188.101:2843, 200.142.190.32:80}[50%]&lt;BR/&gt;{192.65.188.101:2792, 197.91.13.213:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2843: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 2792: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&gt;];
}
613--614[label="1;1pkt 1fpkt"];
613--2567[label="1;2pkt 2fpkt"];
613--2837[label="1;1pkt 1fpkt"];
613--3127[label="0.5;1pkt 1fpkt"];
613--3138[label="0.5;1pkt 1fpkt"];
614--2567[label="1;1pkt 1fpkt"];
614--2837[label="1;1pkt 1fpkt"];
614--3127[label="1;1pkt 1fpkt"];
614--3138[label="1;1pkt 1fpkt"];
2567--2837[label="1;1pkt 1fpkt"];
2567--3127[label="0.5;1pkt 1fpkt"];
2567--3138[label="0.5;1pkt 1fpkt"];
2837--3127[label="1;1pkt 1fpkt"];
2837--3138[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.91.13.213" dst_port="1863" src_ip="192.65.188.101" src_port="2792"/>
      <filter dst_ip="200.142.190.32" dst_port="80" src_ip="192.65.188.101" src_port="2843"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
419[label="21.76.238.112;d;286pkt 286fpkt", shape=diamond, color=yellow];
2570[label="21.76.238.112;d;286pkt 286fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.165.2:445, 21.76.238.112:*}[24.1259%]&lt;BR/&gt;{192.65.165.2:139, 21.76.238.112:*}[23.4266%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (31.4685%)&lt;BR/&gt; 139: (16.6084%)&lt;BR/&gt; 0: (3.84615%)&lt;BR/&gt; 63967: (0.174825%)&lt;BR/&gt; 63928: (0.174825%)&gt;];
}
419--2570[label="1;286pkt 286fpkt"];
</description>
    <slice>
      <filter dst_ip="21.76.238.112" src_ip="192.65.165.2" src_port="445"/>
      <filter dst_ip="21.76.238.112" src_ip="192.65.165.2" src_port="139"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1072[label="167.172.46.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
2571[label="167.172.46.89;s;2pkt 2fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.172.46.89:25, 203.80.198.145:43026}[50%]&lt;BR/&gt;{167.172.46.89:25, 203.80.198.145:43981}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43981: (25%)&lt;BR/&gt; 43026: (25%)&gt;];
}
1072--1317[label="1;2pkt 2fpkt"];
1072--2571[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.80.198.145" dst_port="43981" src_ip="167.172.46.89" src_port="25"/>
      <filter dst_ip="203.80.198.145" dst_port="43026" src_ip="167.172.46.89" src_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
444[label="133.78.137.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
445[label="162.94.163.136;s;6pkt 6fpkt", shape=diamond, color=yellow];
704[label="197.184.189.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
2585[label="162.94.163.136;s;6pkt 6fpkt", shape=hexagon, color=black];
2728[label="133.78.137.53;d;1pkt 1fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.163.136:*, 203.9.240.197:80}[42.8571%]&lt;BR/&gt;{*:*, 197.184.189.229:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3992: (12.5%)&lt;BR/&gt; 1363: (9.375%)&lt;BR/&gt; 3990: (6.25%)&lt;BR/&gt; 1366: (6.25%)&gt;];
}
444--445[label="1;1pkt 1fpkt"];
444--2585[label="1;1pkt 1fpkt"];
444--2728[label="1;1pkt 1fpkt"];
444--3127[label="1;1pkt 1fpkt"];
444--3138[label="1;1pkt 1fpkt"];
445--704[label="0.5;1pkt 1fpkt"];
445--712[label="1;1pkt 1fpkt"];
445--2585[label="1;6pkt 6fpkt"];
445--2728[label="1;1pkt 1fpkt"];
445--3127[label="0.5;3pkt 3fpkt"];
445--3138[label="0.5;3pkt 3fpkt"];
704--2585[label="0.5;1pkt 1fpkt"];
704--3127[label="0.5;1pkt 1fpkt"];
704--3138[label="0.5;1pkt 1fpkt"];
2585--2728[label="1;1pkt 1fpkt"];
2585--3127[label="0.5;3pkt 3fpkt"];
2585--3138[label="0.5;3pkt 3fpkt"];
2728--3127[label="1;1pkt 1fpkt"];
2728--3138[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.184.189.229" dst_port="80"/>
      <filter dst_ip="203.9.240.197" dst_port="80" src_ip="162.94.163.136"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
446[label="17.212.145.70;d;2pkt 2fpkt", shape=diamond, color=yellow];
447[label="192.65.179.67;s;15pkt 15fpkt", shape=diamond, color=yellow];
727[label="17.106.64.19;d;3pkt 3fpkt", shape=diamond, color=yellow];
2586[label="192.65.179.67;s;15pkt 15fpkt", shape=hexagon, color=black];
3410[label="192.65.179.67;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4153[label="192.65.179.67;15pkt 15fpkt", shape=invtriangle, color=brown];
4494[label="192.65.179.67;15pkt 15fpkt", shape=invhouse, color=bisque];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.179.67:65534, *:53}[35.2941%]&lt;BR/&gt;{192.65.179.67:80, 17.212.145.70:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.1358%)&lt;BR/&gt; 65534: (18.5185%)&lt;BR/&gt; 53: (18.5185%)&lt;BR/&gt; 25: (6.17284%)&lt;BR/&gt; 0: (6.17284%)&gt;];
}
446--447[label="1;2pkt 2fpkt"];
446--2586[label="1;2pkt 2fpkt"];
446--3126[label="0.5;1pkt 1fpkt"];
446--3130[label="0.5;1pkt 1fpkt"];
446--3140[label="0.5;1pkt 1fpkt"];
446--3142[label="0.5;1pkt 1fpkt"];
446--3150[label="0.5;1pkt 1fpkt"];
446--3152[label="0.5;1pkt 1fpkt"];
446--3410[label="1;2pkt 2fpkt"];
446--4153[label="1;2pkt 2fpkt"];
446--4494[label="1;2pkt 2fpkt"];
447--727[label="0.666667;2pkt 2fpkt"];
447--1013[label="0.0666667;1pkt 1fpkt"];
447--2586[label="1;15pkt 15fpkt"];
447--3126[label="0.2;3pkt 3fpkt"];
447--3130[label="0.0666667;1pkt 1fpkt"];
447--3137[label="0.0666667;1pkt 1fpkt"];
447--3140[label="0.2;3pkt 3fpkt"];
447--3142[label="0.0666667;1pkt 1fpkt"];
447--3150[label="0.2;3pkt 3fpkt"];
447--3152[label="0.0666667;1pkt 1fpkt"];
447--3410[label="1;15pkt 15fpkt"];
447--4153[label="0.933333;14pkt 14fpkt"];
447--4494[label="0.933333;14pkt 14fpkt"];
727--2586[label="0.666667;2pkt 2fpkt"];
727--2683[label="0.333333;1pkt 1fpkt"];
727--3126[label="0.666667;2pkt 2fpkt"];
727--3140[label="0.666667;2pkt 2fpkt"];
727--3150[label="0.666667;2pkt 2fpkt"];
727--3410[label="0.666667;2pkt 2fpkt"];
727--3449[label="0.333333;1pkt 1fpkt"];
727--4153[label="0.666667;2pkt 2fpkt"];
727--4171[label="0.333333;1pkt 1fpkt"];
727--4494[label="0.666667;2pkt 2fpkt"];
2586--3126[label="0.2;3pkt 3fpkt"];
2586--3130[label="0.0666667;1pkt 1fpkt"];
2586--3137[label="0.0666667;1pkt 1fpkt"];
2586--3140[label="0.2;3pkt 3fpkt"];
2586--3142[label="0.0666667;1pkt 1fpkt"];
2586--3150[label="0.2;3pkt 3fpkt"];
2586--3152[label="0.0666667;1pkt 1fpkt"];
2586--3410[label="1;15pkt 15fpkt"];
2586--4153[label="0.933333;14pkt 14fpkt"];
2586--4494[label="0.933333;14pkt 14fpkt"];
3410--4153[label="1;15pkt 15fpkt"];
3410--4494[label="1;15pkt 15fpkt"];
4153--4494[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="17.212.145.70" src_ip="192.65.179.67" src_port="80"/>
      <filter dst_port="53" src_ip="192.65.179.67" src_port="65534"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1626[label="162.94.12.33;s;14pkt 14fpkt", shape=diamond, color=yellow];
1649[label="19.88.7.126;d;13pkt 13fpkt", shape=diamond, color=yellow];
2610[label="162.94.12.33;s;14pkt 14fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.12.33:*, 19.88.7.126:80}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.561%)&lt;BR/&gt; 3792: (3.65854%)&lt;BR/&gt; 3791: (3.65854%)&lt;BR/&gt; 3790: (3.65854%)&lt;BR/&gt; 3789: (3.65854%)&gt;];
}
1626--1649[label="1;13pkt 13fpkt"];
1626--2610[label="1;14pkt 14fpkt"];
1626--3127[label="0.214286;3pkt 3fpkt"];
1649--2610[label="1;13pkt 13fpkt"];
1649--3127[label="0.230769;3pkt 3fpkt"];
2610--3127[label="0.214286;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="19.88.7.126" dst_port="80" src_ip="162.94.12.33"/>
    </slice>
    <from sec="1112590818" usec="0"/>
    <to sec="1112591492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
941[label="135.69.50.169;s;39pkt 39fpkt", shape=diamond, color=yellow];
1254[label="217.234.131.199;d;162pkt 162fpkt", shape=diamond, color=yellow];
2615[label="135.69.50.169;s;381pkt 381fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.50.169:*, 217.234.131.199:80}[38.9021%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5704%)&lt;BR/&gt; 9003: (0.343643%)&lt;BR/&gt; 2894: (0.171821%)&lt;BR/&gt; 2891: (0.171821%)&lt;BR/&gt; 2890: (0.171821%)&gt;];
}
941--2615[label="0.025641;1pkt 1fpkt"];
941--3138[label="0.153846;6pkt 6fpkt"];
1254--2615[label="1;162pkt 162fpkt"];
2615--3127[label="0.0813648;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="217.234.131.199" dst_port="80" src_ip="135.69.50.169"/>
    </slice>
    <from sec="1112590847" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1461[label="133.0.37.66;d;57pkt 57fpkt", shape=diamond, color=yellow];
1462[label="135.69.92.79;s;64pkt 64fpkt", shape=diamond, color=yellow];
2624[label="135.69.92.79;s;42pkt 42fpkt", shape=hexagon, color=black];
3447[label="135.69.92.79;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.92.79:*, 133.0.37.66:80}[89.0625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6784%)&lt;BR/&gt; 0: (1.32159%)&lt;BR/&gt; 50436: (0.881057%)&lt;BR/&gt; 50435: (0.881057%)&lt;BR/&gt; 50434: (0.881057%)&gt;];
}
1461--1462[label="1;57pkt 57fpkt"];
1461--2624[label="0.952381;40pkt 40fpkt"];
1461--3447[label="1;57pkt 57fpkt"];
1462--2624[label="1;42pkt 42fpkt"];
1462--3138[label="0.0625;4pkt 4fpkt"];
1462--3447[label="1;64pkt 64fpkt"];
2624--3447[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.37.66" dst_port="80" src_ip="135.69.92.79"/>
    </slice>
    <from sec="1112591081" usec="0"/>
    <to sec="1112591587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1417[label="162.94.14.144;d;7pkt 7fpkt", shape=diamond, color=yellow];
1699[label="213.7.79.52;s;4pkt 4fpkt", shape=diamond, color=yellow];
2629[label="213.7.79.52;s;4pkt 4fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.79.52:80, 162.94.14.144:*}[57.1429%]&lt;BR/&gt;{213.7.79.75:80, 162.94.14.144:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2581: (10%)&lt;BR/&gt; 2580: (10%)&lt;BR/&gt; 2480: (10%)&lt;BR/&gt; 2478: (10%)&gt;];
}
1417--1699[label="1;4pkt 4fpkt"];
1417--2629[label="1;4pkt 4fpkt"];
1699--2629[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.14.144" src_ip="213.7.79.52" src_port="80"/>
      <filter dst_ip="162.94.14.144" src_ip="213.7.79.75" src_port="80"/>
    </slice>
    <from sec="1112590824" usec="0"/>
    <to sec="1112591620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,001,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1707[label="217.211.190.106;s;629pkt 629fpkt", shape=diamond, color=yellow];
2631[label="217.211.190.106;s;629pkt 629fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.211.190.106:*, *:5554}[37.3609%]&lt;BR/&gt;{217.211.190.106:*, *:1023}[35.7711%]&lt;BR/&gt;{217.211.190.106:*, *:9898}[26.868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (18.6804%)&lt;BR/&gt; 1023: (17.8855%)&lt;BR/&gt; 9898: (13.434%)&lt;BR/&gt; 34555: (0.0794913%)&lt;BR/&gt; 34554: (0.0794913%)&gt;];
}
1707--2631[label="1;629pkt 629fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="217.211.190.106"/>
      <filter dst_port="1023" src_ip="217.211.190.106"/>
      <filter dst_port="9898" src_ip="217.211.190.106"/>
    </slice>
    <from sec="1112591245" usec="0"/>
    <to sec="1112591299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
1723[label="70.118.70.176;s;255pkt 255fpkt", shape=diamond, color=yellow];
2641[label="70.118.70.176;s;255pkt 255fpkt", shape=hexagon, color=black];
3795[label="70.118.70.176;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4321[label="70.118.70.176;254pkt 254fpkt", shape=invtriangle, color=brown];
4568[label="70.118.70.176;255pkt 255fpkt", shape=invhouse, color=bisque];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.118.70.176:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3392: (0.196386%)&lt;BR/&gt; 3386: (0.196386%)&lt;BR/&gt; 3385: (0.196386%)&lt;BR/&gt; 3383: (0.196386%)&gt;];
}
1723--1972[label="0.00392157;1pkt 1fpkt"];
1723--2641[label="1;255pkt 255fpkt"];
1723--3795[label="1;254pkt 254fpkt"];
1723--4321[label="1;254pkt 254fpkt"];
1723--4568[label="1;255pkt 255fpkt"];
2641--3795[label="1;254pkt 254fpkt"];
2641--4321[label="1;254pkt 254fpkt"];
2641--4568[label="1;255pkt 255fpkt"];
3795--4321[label="1;254pkt 254fpkt"];
3795--4568[label="1;254pkt 254fpkt"];
4321--4568[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="70.118.70.176"/>
    </slice>
    <from sec="1112591283" usec="0"/>
    <to sec="1112591300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
241[label="144.126.6.178;d;54pkt 54fpkt", shape=diamond, color=yellow];
242[label="23.63.173.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
283[label="19.44.44.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
1297[label="214.197.123.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
1654[label="22.30.15.70;s;2pkt 2fpkt", shape=diamond, color=yellow];
1914[label="20.201.134.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
1961[label="209.176.195.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
2340[label="23.63.173.87;s;1pkt 1fpkt", shape=hexagon, color=black];
2651[label="144.126.6.178;d;50pkt 50fpkt", shape=hexagon, color=black];
2661[label="19.44.44.68;s;1pkt 1fpkt", shape=hexagon, color=black];
2953[label="209.176.195.231;s;1pkt 1fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.126.6.178:37594}[81.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37594: (41.3043%)&lt;BR/&gt; 39723: (1.73913%)&lt;BR/&gt; 4682: (1.73913%)&lt;BR/&gt; 2915: (1.73913%)&lt;BR/&gt; 65429: (1.30435%)&gt;];
}
241--242[label="1;2pkt 2fpkt"];
241--283[label="1;1pkt 1fpkt"];
241--1297[label="1;1pkt 1fpkt"];
241--1654[label="1;2pkt 2fpkt"];
241--1914[label="1;1pkt 1fpkt"];
241--1961[label="1;1pkt 1fpkt"];
241--2260[label="0.0185185;1pkt 1fpkt"];
241--2340[label="1;1pkt 1fpkt"];
241--2651[label="1;50pkt 50fpkt"];
241--2661[label="1;1pkt 1fpkt"];
241--2953[label="1;1pkt 1fpkt"];
242--2340[label="1;1pkt 1fpkt"];
242--2651[label="1;2pkt 2fpkt"];
283--2651[label="1;1pkt 1fpkt"];
283--2661[label="1;1pkt 1fpkt"];
1297--2651[label="1;1pkt 1fpkt"];
1654--2651[label="1;2pkt 2fpkt"];
1914--2651[label="1;1pkt 1fpkt"];
1961--2651[label="1;1pkt 1fpkt"];
1961--2953[label="1;1pkt 1fpkt"];
2340--2651[label="1;1pkt 1fpkt"];
2651--2661[label="1;1pkt 1fpkt"];
2651--2953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.6.178" dst_port="37594"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1753[label="193.235.187.235;s;47pkt 47fpkt", shape=diamond, color=yellow];
2652[label="193.235.187.235;s;39pkt 39fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.235.187.235:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1753--2652[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="193.235.187.235"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
323[label="193.32.61.54;d;22pkt 22fpkt", shape=diamond, color=yellow];
325[label="193.177.127.86;s;15pkt 15fpkt", shape=diamond, color=yellow];
1757[label="208.153.236.15;s;4pkt 4fpkt", shape=diamond, color=yellow];
2672[label="208.153.236.15;s;4pkt 4fpkt", shape=hexagon, color=black];
3223[label="208.153.236.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3470[label="193.177.127.86;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.177.127.86:1007, 193.32.61.54:*}[68.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1007: (35.4839%)&lt;BR/&gt; 2002: (6.45161%)&lt;BR/&gt; 3004: (5.64516%)&lt;BR/&gt; 3864: (3.22581%)&lt;BR/&gt; 3858: (3.22581%)&gt;];
}
323--325[label="1;15pkt 15fpkt"];
323--1757[label="1;4pkt 4fpkt"];
323--2672[label="1;4pkt 4fpkt"];
323--3223[label="1;3pkt 3fpkt"];
323--3470[label="1;14pkt 14fpkt"];
323--3510[label="0.0454545;1pkt 1fpkt"];
323--4195[label="0.0454545;1pkt 1fpkt"];
323--4514[label="0.0454545;1pkt 1fpkt"];
325--3470[label="1;14pkt 14fpkt"];
1757--2672[label="1;4pkt 4fpkt"];
1757--3223[label="1;3pkt 3fpkt"];
2672--3223[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.32.61.54" src_ip="193.177.127.86" src_port="1007"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1759[label="192.65.178.88;s;416pkt 416fpkt", shape=diamond, color=yellow];
2675[label="192.65.178.88;s;341pkt 341fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.178.88:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1759--2675[label="1;341pkt 341fpkt"];
1759--2695[label="0.00452489;1pkt 1fpkt"];
2675--2695[label="0.00452489;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.178.88"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
349[label="197.91.173.65;d;10pkt 10fpkt", shape=diamond, color=yellow];
350[label="135.68.251.163;s;119pkt 119fpkt", shape=diamond, color=yellow];
602[label="197.91.161.23;d;26pkt 26fpkt", shape=diamond, color=yellow];
870[label="135.68.251.210;s;58pkt 58fpkt", shape=diamond, color=yellow];
950[label="197.91.160.0;d;13pkt 13fpkt", shape=diamond, color=yellow];
1336[label="196.51.204.94;d;10pkt 10fpkt", shape=diamond, color=yellow];
1595[label="135.69.232.77;s;65pkt 65fpkt", shape=diamond, color=yellow];
2679[label="135.68.251.163;s;115pkt 115fpkt", shape=hexagon, color=black];
3442[label="135.69.232.77;68pkt 68fpkt", shape=pentagon, color=darkviolet];
3750[label="135.68.251.163;133pkt 133fpkt", shape=pentagon, color=darkviolet];
3898[label="135.68.251.210;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4207[label="135.68.192.107;14pkt 14fpkt", shape=invtriangle, color=brown];
4298[label="135.68.251.163;133pkt 133fpkt", shape=invtriangle, color=brown];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.251.163:*, *:80}[36.8966%]&lt;BR/&gt;{135.69.232.77:*, *:80}[22.069%]&lt;BR/&gt;{135.68.251.210:*, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.545%)&lt;BR/&gt; 1863: (3.3455%)&lt;BR/&gt; 443: (2.31144%)&lt;BR/&gt; 0: (2.18978%)&lt;BR/&gt; 1031: (1.03406%)&gt;];
}
349--350[label="0.1;1pkt 1fpkt"];
349--870[label="0.7;7pkt 7fpkt"];
349--2679[label="0.1;1pkt 1fpkt"];
349--3750[label="0.1;1pkt 1fpkt"];
349--3898[label="0.7;7pkt 7fpkt"];
349--4298[label="0.1;1pkt 1fpkt"];
350--470[label="0.195122;8pkt 8fpkt"];
350--498[label="0.00840336;1pkt 1fpkt"];
350--602[label="0.307692;8pkt 8fpkt"];
350--882[label="0.00840336;1pkt 1fpkt"];
350--950[label="0.615385;8pkt 8fpkt"];
350--1197[label="0.181818;4pkt 4fpkt"];
350--1336[label="0.1;1pkt 1fpkt"];
350--1968[label="0.0183486;2pkt 2fpkt"];
350--1988[label="0.00900901;1pkt 1fpkt"];
350--2145[label="0.0420168;5pkt 5fpkt"];
350--2195[label="0.2;2pkt 2fpkt"];
350--2679[label="0.991304;114pkt 114fpkt"];
350--3012[label="0.181818;4pkt 4fpkt"];
350--3127[label="0.10084;12pkt 12fpkt"];
350--3138[label="0.0420168;5pkt 5fpkt"];
350--3750[label="1;119pkt 119fpkt"];
350--4298[label="1;119pkt 119fpkt"];
602--1595[label="0.615385;16pkt 16fpkt"];
602--1829[label="0.142857;2pkt 2fpkt"];
602--2679[label="0.307692;8pkt 8fpkt"];
602--2993[label="0.615385;16pkt 16fpkt"];
602--3127[label="0.230769;6pkt 6fpkt"];
602--3442[label="0.615385;16pkt 16fpkt"];
602--3750[label="0.307692;8pkt 8fpkt"];
602--4207[label="0.142857;2pkt 2fpkt"];
602--4298[label="0.307692;8pkt 8fpkt"];
870--882[label="0.0172414;1pkt 1fpkt"];
870--1360[label="0.0689655;4pkt 4fpkt"];
870--1380[label="0.0172414;1pkt 1fpkt"];
870--1534[label="0.155172;9pkt 9fpkt"];
870--1554[label="0.0517241;3pkt 3fpkt"];
870--1985[label="0.0689655;4pkt 4fpkt"];
870--2145[label="0.0172414;1pkt 1fpkt"];
870--3127[label="0.0172414;1pkt 1fpkt"];
870--3898[label="1;58pkt 58fpkt"];
950--2679[label="0.615385;8pkt 8fpkt"];
950--3320[label="0.230769;3pkt 3fpkt"];
950--3750[label="0.615385;8pkt 8fpkt"];
950--4107[label="0.230769;3pkt 3fpkt"];
950--4298[label="0.615385;8pkt 8fpkt"];
1336--2165[label="0.1;1pkt 1fpkt"];
1336--2679[label="0.1;1pkt 1fpkt"];
1336--3750[label="0.1;1pkt 1fpkt"];
1336--4298[label="0.1;1pkt 1fpkt"];
1595--2145[label="0.492308;32pkt 32fpkt"];
1595--2993[label="1;65pkt 65fpkt"];
1595--3442[label="1;65pkt 65fpkt"];
2679--3012[label="0.181818;4pkt 4fpkt"];
2679--3127[label="0.104348;12pkt 12fpkt"];
2679--3750[label="0.991304;114pkt 114fpkt"];
2679--4298[label="0.991304;114pkt 114fpkt"];
3750--4298[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.251.210"/>
      <filter dst_port="80" src_ip="135.68.251.163"/>
      <filter dst_port="80" src_ip="135.69.232.77"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
378[label="217.166.245.125;s;551pkt 551fpkt", shape=diamond, color=yellow];
584[label="144.126.67.27;d;552pkt 552fpkt", shape=diamond, color=yellow];
2684[label="217.166.245.125;s;434pkt 434fpkt", shape=hexagon, color=black];
2833[label="144.126.67.27;d;552pkt 552fpkt", shape=hexagon, color=black];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.166.245.125:*, 144.126.67.27:80}[40.3986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.5146%)&lt;BR/&gt; 53: (3.87745%)&lt;BR/&gt; 25: (1.84299%)&lt;BR/&gt; 1023: (1.0292%)&lt;BR/&gt; 443: (0.861656%)&gt;];
}
378--584[label="1;551pkt 551fpkt"];
378--2684[label="1;434pkt 434fpkt"];
378--2833[label="1;551pkt 551fpkt"];
378--3125[label="0.0145191;8pkt 8fpkt"];
378--3126[label="0.00907441;5pkt 5fpkt"];
378--3127[label="0.0235935;13pkt 13fpkt"];
378--3129[label="0.0145191;8pkt 8fpkt"];
378--3130[label="0.0127042;7pkt 7fpkt"];
378--3131[label="0.00181488;1pkt 1fpkt"];
378--3134[label="0.00907441;5pkt 5fpkt"];
378--3135[label="0.0127042;7pkt 7fpkt"];
378--3137[label="0.00544465;3pkt 3fpkt"];
378--3138[label="0.0254083;14pkt 14fpkt"];
378--3139[label="0.0145191;8pkt 8fpkt"];
378--3140[label="0.00907441;5pkt 5fpkt"];
378--3141[label="0.0145191;8pkt 8fpkt"];
378--3142[label="0.0127042;7pkt 7fpkt"];
378--3143[label="0.00181488;1pkt 1fpkt"];
378--3146[label="0.00907441;5pkt 5fpkt"];
378--3147[label="0.0127042;7pkt 7fpkt"];
378--3149[label="0.0145191;8pkt 8fpkt"];
378--3150[label="0.00907441;5pkt 5fpkt"];
378--3151[label="0.0145191;8pkt 8fpkt"];
378--3152[label="0.0127042;7pkt 7fpkt"];
378--3153[label="0.00181488;1pkt 1fpkt"];
378--3156[label="0.00907441;5pkt 5fpkt"];
378--3157[label="0.0127042;7pkt 7fpkt"];
584--2301[label="0.00181159;1pkt 1fpkt"];
584--2684[label="1;434pkt 434fpkt"];
584--2833[label="1;552pkt 552fpkt"];
584--3125[label="0.0144928;8pkt 8fpkt"];
584--3126[label="0.00905797;5pkt 5fpkt"];
584--3127[label="0.0235507;13pkt 13fpkt"];
584--3129[label="0.0144928;8pkt 8fpkt"];
584--3130[label="0.0126812;7pkt 7fpkt"];
584--3131[label="0.00181159;1pkt 1fpkt"];
584--3134[label="0.00905797;5pkt 5fpkt"];
584--3135[label="0.0126812;7pkt 7fpkt"];
584--3137[label="0.00543478;3pkt 3fpkt"];
584--3138[label="0.0253623;14pkt 14fpkt"];
584--3139[label="0.0144928;8pkt 8fpkt"];
584--3140[label="0.00905797;5pkt 5fpkt"];
584--3141[label="0.0144928;8pkt 8fpkt"];
584--3142[label="0.0126812;7pkt 7fpkt"];
584--3143[label="0.00181159;1pkt 1fpkt"];
584--3146[label="0.00905797;5pkt 5fpkt"];
584--3147[label="0.0126812;7pkt 7fpkt"];
584--3149[label="0.0144928;8pkt 8fpkt"];
584--3150[label="0.00905797;5pkt 5fpkt"];
584--3151[label="0.0144928;8pkt 8fpkt"];
584--3152[label="0.0126812;7pkt 7fpkt"];
584--3153[label="0.00181159;1pkt 1fpkt"];
584--3156[label="0.00905797;5pkt 5fpkt"];
584--3157[label="0.0126812;7pkt 7fpkt"];
2684--2833[label="1;434pkt 434fpkt"];
2684--3125[label="0.0184332;8pkt 8fpkt"];
2684--3126[label="0.0115207;5pkt 5fpkt"];
2684--3127[label="0.0299539;13pkt 13fpkt"];
2684--3129[label="0.0138249;6pkt 6fpkt"];
2684--3131[label="0.00230415;1pkt 1fpkt"];
2684--3134[label="0.0115207;5pkt 5fpkt"];
2684--3137[label="0.00460829;2pkt 2fpkt"];
2684--3138[label="0.00460829;2pkt 2fpkt"];
2684--3139[label="0.0184332;8pkt 8fpkt"];
2684--3140[label="0.0115207;5pkt 5fpkt"];
2684--3141[label="0.0138249;6pkt 6fpkt"];
2684--3143[label="0.00230415;1pkt 1fpkt"];
2684--3146[label="0.0115207;5pkt 5fpkt"];
2684--3149[label="0.0184332;8pkt 8fpkt"];
2684--3150[label="0.0115207;5pkt 5fpkt"];
2684--3151[label="0.0138249;6pkt 6fpkt"];
2684--3153[label="0.00230415;1pkt 1fpkt"];
2684--3156[label="0.0115207;5pkt 5fpkt"];
2833--3125[label="0.0144928;8pkt 8fpkt"];
2833--3126[label="0.00905797;5pkt 5fpkt"];
2833--3127[label="0.0235507;13pkt 13fpkt"];
2833--3129[label="0.0144928;8pkt 8fpkt"];
2833--3130[label="0.0126812;7pkt 7fpkt"];
2833--3131[label="0.00181159;1pkt 1fpkt"];
2833--3134[label="0.00905797;5pkt 5fpkt"];
2833--3135[label="0.0126812;7pkt 7fpkt"];
2833--3137[label="0.00543478;3pkt 3fpkt"];
2833--3138[label="0.0253623;14pkt 14fpkt"];
2833--3139[label="0.0144928;8pkt 8fpkt"];
2833--3140[label="0.00905797;5pkt 5fpkt"];
2833--3141[label="0.0144928;8pkt 8fpkt"];
2833--3142[label="0.0126812;7pkt 7fpkt"];
2833--3143[label="0.00181159;1pkt 1fpkt"];
2833--3146[label="0.00905797;5pkt 5fpkt"];
2833--3147[label="0.0126812;7pkt 7fpkt"];
2833--3149[label="0.0144928;8pkt 8fpkt"];
2833--3150[label="0.00905797;5pkt 5fpkt"];
2833--3151[label="0.0144928;8pkt 8fpkt"];
2833--3152[label="0.0126812;7pkt 7fpkt"];
2833--3153[label="0.00181159;1pkt 1fpkt"];
2833--3156[label="0.00905797;5pkt 5fpkt"];
2833--3157[label="0.0126812;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.67.27" dst_port="80" src_ip="217.166.245.125"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,001,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
784[label="129.141.154.128;s;12pkt 12fpkt", shape=diamond, color=yellow];
1269[label="214.142.147.88;d;440pkt 440fpkt", shape=diamond, color=yellow];
1483[label="215.172.32.92;d;428pkt 428fpkt", shape=diamond, color=yellow];
1550[label="23.148.205.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
2686[label="129.141.154.128;s;12pkt 12fpkt", shape=hexagon, color=black];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.142.147.88:*}[50.3432%]&lt;BR/&gt;{*:*, 215.172.32.92:*}[48.9703%]&lt;BR/&gt;{*:1023, *:*}[33.2952%]&lt;BR/&gt;{*:9898, *:*}[32.7231%]&lt;BR/&gt;{*:5554, *:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (16.5174%)&lt;BR/&gt; 9898: (16.2374%)&lt;BR/&gt; 5554: (15.6775%)&lt;BR/&gt; 6346: (1.45577%)&lt;BR/&gt; 0: (0.895857%)&gt;];
}
784--1269[label="0.25;3pkt 3fpkt"];
784--1483[label="0.25;3pkt 3fpkt"];
784--1550[label="1;1pkt 1fpkt"];
784--2686[label="1;12pkt 12fpkt"];
1269--2024[label="0.0545455;3pkt 3fpkt"];
1269--2167[label="0.0491803;3pkt 3fpkt"];
1269--2278[label="0.00681818;3pkt 3fpkt"];
1269--2686[label="0.25;3pkt 3fpkt"];
1269--3014[label="0.0545455;3pkt 3fpkt"];
1269--3264[label="0.00681818;3pkt 3fpkt"];
1269--3283[label="0.00681818;3pkt 3fpkt"];
1269--3462[label="0.111111;3pkt 3fpkt"];
1269--3465[label="0.0535714;3pkt 3fpkt"];
1269--3632[label="0.0789474;3pkt 3fpkt"];
1269--3741[label="0.111111;3pkt 3fpkt"];
1269--4176[label="0.111111;3pkt 3fpkt"];
1269--4177[label="0.0545455;3pkt 3fpkt"];
1269--4244[label="0.0810811;3pkt 3fpkt"];
1269--4451[label="0.00681818;3pkt 3fpkt"];
1269--4504[label="0.111111;3pkt 3fpkt"];
1269--4532[label="0.00694444;3pkt 3fpkt"];
1269--4537[label="0.0810811;3pkt 3fpkt"];
1483--2024[label="0.0545455;3pkt 3fpkt"];
1483--2167[label="0.0491803;3pkt 3fpkt"];
1483--2278[label="0.00700935;3pkt 3fpkt"];
1483--2686[label="0.25;3pkt 3fpkt"];
1483--3014[label="0.0545455;3pkt 3fpkt"];
1483--3264[label="0.00700935;3pkt 3fpkt"];
1483--3283[label="0.00700935;3pkt 3fpkt"];
1483--3462[label="0.111111;3pkt 3fpkt"];
1483--3465[label="0.0535714;3pkt 3fpkt"];
1483--3632[label="0.0789474;3pkt 3fpkt"];
1483--3741[label="0.111111;3pkt 3fpkt"];
1483--4176[label="0.111111;3pkt 3fpkt"];
1483--4177[label="0.0545455;3pkt 3fpkt"];
1483--4244[label="0.0810811;3pkt 3fpkt"];
1483--4451[label="0.00700935;3pkt 3fpkt"];
1483--4504[label="0.111111;3pkt 3fpkt"];
1483--4532[label="0.00700935;3pkt 3fpkt"];
1483--4537[label="0.0810811;3pkt 3fpkt"];
1550--2686[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.142.147.88"/>
      <filter dst_ip="215.172.32.92"/>
      <filter src_port="1023"/>
      <filter src_port="9898"/>
      <filter src_port="5554"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00678,1.75573,503,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
385[label="16.148.97.216;s;12pkt 12fpkt", shape=diamond, color=yellow];
386[label="162.94.193.11;d;18pkt 18fpkt", shape=diamond, color=yellow];
2689[label="162.94.193.11;d;16pkt 16fpkt", shape=hexagon, color=black];
2933[label="16.148.97.216;s;12pkt 12fpkt", shape=hexagon, color=black];
4377[label="16.148.97.216;11pkt 11fpkt", shape=invtriangle, color=brown];
4588[label="16.148.97.216;11pkt 11fpkt", shape=invhouse, color=bisque];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.148.97.216:80, 162.94.193.11:*}[66.6667%]&lt;BR/&gt;{16.148.97.218:80, 162.94.193.11:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4243: (3.75%)&lt;BR/&gt; 4242: (3.75%)&lt;BR/&gt; 4241: (3.75%)&lt;BR/&gt; 4237: (3.75%)&gt;];
}
385--386[label="1;12pkt 12fpkt"];
385--2689[label="0.833333;10pkt 10fpkt"];
385--2933[label="1;12pkt 12fpkt"];
385--3126[label="0.333333;4pkt 4fpkt"];
385--3140[label="0.333333;4pkt 4fpkt"];
385--3150[label="0.333333;4pkt 4fpkt"];
385--4377[label="1;11pkt 11fpkt"];
385--4588[label="1;11pkt 11fpkt"];
386--2689[label="1;16pkt 16fpkt"];
386--2933[label="1;12pkt 12fpkt"];
386--3126[label="0.222222;4pkt 4fpkt"];
386--3140[label="0.222222;4pkt 4fpkt"];
386--3150[label="0.222222;4pkt 4fpkt"];
386--4377[label="1;11pkt 11fpkt"];
386--4588[label="1;11pkt 11fpkt"];
2689--2933[label="0.833333;10pkt 10fpkt"];
2689--3126[label="0.25;4pkt 4fpkt"];
2689--3140[label="0.25;4pkt 4fpkt"];
2689--3150[label="0.25;4pkt 4fpkt"];
2689--4377[label="0.818182;9pkt 9fpkt"];
2689--4588[label="0.818182;9pkt 9fpkt"];
2933--3126[label="0.333333;4pkt 4fpkt"];
2933--3140[label="0.333333;4pkt 4fpkt"];
2933--3150[label="0.333333;4pkt 4fpkt"];
2933--4377[label="1;11pkt 11fpkt"];
2933--4588[label="1;11pkt 11fpkt"];
4377--4588[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.193.11" src_ip="16.148.97.216" src_port="80"/>
      <filter dst_ip="162.94.193.11" src_ip="16.148.97.218" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
1521[label="219.40.31.215;d;277pkt 277fpkt", shape=diamond, color=yellow];
2695[label="219.40.31.215;d;221pkt 221fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 219.40.31.215:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1521--1557[label="0.0116279;1pkt 1fpkt"];
1521--1759[label="0.00361011;1pkt 1fpkt"];
1521--2169[label="0.00361011;1pkt 1fpkt"];
1521--2378[label="0.00361011;1pkt 1fpkt"];
1521--2437[label="0.00361011;1pkt 1fpkt"];
1521--2543[label="0.00361011;1pkt 1fpkt"];
1521--2650[label="0.00361011;1pkt 1fpkt"];
1521--2675[label="0.00361011;1pkt 1fpkt"];
1521--2695[label="1;221pkt 221fpkt"];
1521--3091[label="0.00361011;1pkt 1fpkt"];
1521--4459[label="0.00361011;1pkt 1fpkt"];
2695--3091[label="0.00452489;1pkt 1fpkt"];
2695--4459[label="0.00452489;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.40.31.215"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
617[label="129.2.67.96;d;16pkt 16fpkt", shape=diamond, color=yellow];
618[label="18.193.221.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
2701[label="18.193.221.81;s;1pkt 1fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.193.221.132:80, 129.2.67.96:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 1716: (8.33333%)&lt;BR/&gt; 554: (8.33333%)&lt;BR/&gt; 1874: (2.77778%)&lt;BR/&gt; 1873: (2.77778%)&gt;];
}
617--618[label="1;1pkt 1fpkt"];
617--2701[label="1;1pkt 1fpkt"];
617--3135[label="0.1875;3pkt 3fpkt"];
617--3147[label="0.1875;3pkt 3fpkt"];
617--3157[label="0.1875;3pkt 3fpkt"];
618--2701[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.2.67.96" src_ip="18.193.221.132" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
825[label="135.69.7.45;s;2pkt 2fpkt", shape=diamond, color=yellow];
1077[label="218.8.63.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
2706[label="218.8.63.18;d;1pkt 1fpkt", shape=hexagon, color=black];
2945[label="135.69.7.45;s;2pkt 2fpkt", shape=hexagon, color=black];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.7.45:8277, 218.8.63.18:8292}[50%]&lt;BR/&gt;{135.69.7.45:20031, 145.90.94.31:1307}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (33.3333%)&lt;BR/&gt; 8277: (33.3333%)&lt;BR/&gt; 20031: (16.6667%)&lt;BR/&gt; 1307: (16.6667%)&gt;];
}
825--882[label="0.5;1pkt 1fpkt"];
825--1077[label="1;1pkt 1fpkt"];
825--2706[label="1;1pkt 1fpkt"];
825--2945[label="1;2pkt 2fpkt"];
1077--2706[label="1;1pkt 1fpkt"];
1077--2945[label="1;1pkt 1fpkt"];
2706--2945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.90.94.31" dst_port="1307" src_ip="135.69.7.45" src_port="20031"/>
      <filter dst_ip="218.8.63.18" dst_port="8292" src_ip="135.69.7.45" src_port="8277"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
633[label="160.180.28.154;s;3pkt 3fpkt", shape=diamond, color=yellow];
2707[label="160.180.28.154;s;3pkt 3fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.180.28.154:554, 144.126.110.244:1650}[33.3333%]&lt;BR/&gt;{160.180.28.154:5004, 144.126.110.244:1652}[33.3333%]&lt;BR/&gt;{160.180.28.154:5004, 144.126.110.244:1654}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5004: (33.3333%)&lt;BR/&gt; 1654: (16.6667%)&lt;BR/&gt; 1652: (16.6667%)&lt;BR/&gt; 1650: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&gt;];
}
633--2707[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.110.244" dst_port="1654" src_ip="160.180.28.154" src_port="5004"/>
      <filter dst_ip="144.126.110.244" dst_port="1652" src_ip="160.180.28.154" src_port="5004"/>
      <filter dst_ip="144.126.110.244" dst_port="1650" src_ip="160.180.28.154" src_port="554"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
375[label="129.141.145.24;s;2377pkt 2377fpkt", shape=diamond, color=yellow];
1947[label="99.92.179.123;d;40pkt 40fpkt", shape=diamond, color=yellow];
3264[label="129.141.145.24;2508pkt 2508fpkt", shape=pentagon, color=darkviolet];
3679[label="193.41.141.145;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4267[label="193.41.141.145;33pkt 33fpkt", shape=invtriangle, color=brown];
4451[label="129.141.145.24;2501pkt 2501fpkt", shape=invhouse, color=bisque];
4548[label="193.41.141.145;33pkt 33fpkt", shape=invhouse, color=bisque];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.141.145.24:53, *:*}[56.6835%]&lt;BR/&gt;{129.141.145.24:59099, *:53}[38.2022%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.2756%)&lt;BR/&gt; 59099: (19.3795%)&lt;BR/&gt; 0: (2.04624%)&lt;BR/&gt; 32768: (1.00319%)&lt;BR/&gt; 9253: (0.518204%)&gt;];
}
375--468[label="0.0357143;2pkt 2fpkt"];
375--818[label="0.125;1pkt 1fpkt"];
375--881[label="0.0188679;2pkt 2fpkt"];
375--1269[label="0.00681818;3pkt 3fpkt"];
375--1313[label="0.0222222;2pkt 2fpkt"];
375--1314[label="0.0357143;1pkt 1fpkt"];
375--1351[label="0.0172414;1pkt 1fpkt"];
375--1483[label="0.00700935;3pkt 3fpkt"];
375--1525[label="0.0125;1pkt 1fpkt"];
375--1786[label="0.0208333;1pkt 1fpkt"];
375--1799[label="0.00793651;1pkt 1fpkt"];
375--1947[label="0.025;1pkt 1fpkt"];
375--2140[label="0.00909091;1pkt 1fpkt"];
375--2151[label="0.00961538;1pkt 1fpkt"];
375--2156[label="0.0103093;1pkt 1fpkt"];
375--2177[label="0.00714286;1pkt 1fpkt"];
375--2233[label="0.0142857;1pkt 1fpkt"];
375--2278[label="1;1750pkt 1750fpkt"];
375--2725[label="0.0277778;1pkt 1fpkt"];
375--2862[label="0.0108696;1pkt 1fpkt"];
375--2983[label="0.00793651;1pkt 1fpkt"];
375--2987[label="0.0103093;1pkt 1fpkt"];
375--3125[label="0.0681531;162pkt 162fpkt"];
375--3129[label="0.057215;136pkt 136fpkt"];
375--3134[label="0.0525873;125pkt 125fpkt"];
375--3137[label="0.0769878;183pkt 183fpkt"];
375--3139[label="0.0681531;162pkt 162fpkt"];
375--3141[label="0.057215;136pkt 136fpkt"];
375--3146[label="0.0525873;125pkt 125fpkt"];
375--3149[label="0.0681531;162pkt 162fpkt"];
375--3151[label="0.057215;136pkt 136fpkt"];
375--3156[label="0.0525873;125pkt 125fpkt"];
375--3264[label="1;2377pkt 2377fpkt"];
375--4451[label="0.996634;2369pkt 2369fpkt"];
1947--2132[label="0.025;1pkt 1fpkt"];
1947--2137[label="0.025;1pkt 1fpkt"];
1947--2278[label="0.025;1pkt 1fpkt"];
1947--2310[label="0.05;2pkt 2fpkt"];
1947--2387[label="0.025;1pkt 1fpkt"];
1947--2395[label="0.025;1pkt 1fpkt"];
1947--2517[label="0.025;1pkt 1fpkt"];
1947--2598[label="0.025;1pkt 1fpkt"];
1947--2653[label="0.025;1pkt 1fpkt"];
1947--2683[label="0.025;1pkt 1fpkt"];
1947--2739[label="0.025;1pkt 1fpkt"];
1947--2830[label="0.025;1pkt 1fpkt"];
1947--2939[label="0.05;2pkt 2fpkt"];
1947--2967[label="0.025;1pkt 1fpkt"];
1947--3137[label="0.4;16pkt 16fpkt"];
1947--3264[label="0.025;1pkt 1fpkt"];
1947--3294[label="0.025;1pkt 1fpkt"];
1947--3321[label="0.025;1pkt 1fpkt"];
1947--3449[label="0.025;1pkt 1fpkt"];
1947--3601[label="0.025;1pkt 1fpkt"];
1947--3679[label="0.0294118;1pkt 1fpkt"];
1947--3799[label="0.025;1pkt 1fpkt"];
1947--3892[label="0.025;1pkt 1fpkt"];
1947--3909[label="0.025;1pkt 1fpkt"];
1947--4092[label="0.025;1pkt 1fpkt"];
1947--4108[label="0.025;1pkt 1fpkt"];
1947--4171[label="0.025;1pkt 1fpkt"];
1947--4267[label="0.030303;1pkt 1fpkt"];
1947--4324[label="0.025;1pkt 1fpkt"];
1947--4374[label="0.025;1pkt 1fpkt"];
1947--4451[label="0.025;1pkt 1fpkt"];
1947--4463[label="0.025;1pkt 1fpkt"];
1947--4473[label="0.025;1pkt 1fpkt"];
1947--4548[label="0.030303;1pkt 1fpkt"];
3264--4451[label="0.9996;2500pkt 2500fpkt"];
3679--4267[label="1;33pkt 33fpkt"];
3679--4548[label="1;33pkt 33fpkt"];
4267--4548[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="129.141.145.24" src_port="53"/>
      <filter dst_port="53" src_ip="129.141.145.24" src_port="59099"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
443[label="80.205.56.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
2727[label="80.205.56.37;d;1pkt 1fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3480, 80.205.56.37:13486}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13486: (50%)&lt;BR/&gt; 3480: (50%)&gt;];
}
443--2727[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.205.56.37" dst_port="13486" src_ip="193.32.176.68" src_port="3480"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
1797[label="70.72.165.150;d;3pkt 3fpkt", shape=diamond, color=yellow];
2734[label="70.72.165.150;d;3pkt 3fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.161.156:6346, 70.72.165.150:61034}[33.3333%]&lt;BR/&gt;{193.41.161.156:6346, 70.72.165.150:62296}[33.3333%]&lt;BR/&gt;{193.41.161.156:6346, 70.72.165.150:63821}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 63821: (16.6667%)&lt;BR/&gt; 62296: (16.6667%)&lt;BR/&gt; 61034: (16.6667%)&gt;];
}
1797--2734[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="70.72.165.150" dst_port="63821" src_ip="193.41.161.156" src_port="6346"/>
      <filter dst_ip="70.72.165.150" dst_port="62296" src_ip="193.41.161.156" src_port="6346"/>
      <filter dst_ip="70.72.165.150" dst_port="61034" src_ip="193.41.161.156" src_port="6346"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
1167[label="167.172.1.80;d;196pkt 196fpkt", shape=diamond, color=yellow];
1170[label="220.165.35.127;s;196pkt 196fpkt", shape=diamond, color=yellow];
2749[label="220.165.35.127;s;196pkt 196fpkt", shape=hexagon, color=black];
2996[label="167.172.1.80;d;196pkt 196fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.165.35.127:6667, 167.172.1.80:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 3750: (0.255102%)&lt;BR/&gt; 3749: (0.255102%)&lt;BR/&gt; 3748: (0.255102%)&lt;BR/&gt; 3747: (0.255102%)&gt;];
}
1167--1170[label="1;196pkt 196fpkt"];
1167--2749[label="1;196pkt 196fpkt"];
1167--2996[label="1;196pkt 196fpkt"];
1170--2749[label="1;196pkt 196fpkt"];
1170--2996[label="1;196pkt 196fpkt"];
2749--2996[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_ip="167.172.1.80" src_ip="220.165.35.127" src_port="6667"/>
    </slice>
    <from sec="1112590808" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
1630[label="162.94.14.144;s;14pkt 14fpkt", shape=diamond, color=yellow];
1698[label="213.7.79.52;d;4pkt 4fpkt", shape=diamond, color=yellow];
2756[label="162.94.14.144;s;14pkt 14fpkt", shape=hexagon, color=black];
3674[label="162.94.14.144;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.14.144:*, 213.7.79.52:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7391%)&lt;BR/&gt; 2581: (4.34783%)&lt;BR/&gt; 2580: (4.34783%)&lt;BR/&gt; 2480: (4.34783%)&lt;BR/&gt; 2478: (4.34783%)&gt;];
}
1630--1698[label="1;4pkt 4fpkt"];
1630--2756[label="1;14pkt 14fpkt"];
1630--3674[label="1;14pkt 14fpkt"];
1698--2756[label="1;4pkt 4fpkt"];
1698--3674[label="1;4pkt 4fpkt"];
2756--3674[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.79.52" dst_port="80" src_ip="162.94.14.144"/>
    </slice>
    <from sec="1112590824" usec="0"/>
    <to sec="1112591667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
1428[label="19.149.105.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
2762[label="19.149.105.138;d;1pkt 1fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3584, 19.149.105.138:57313}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57313: (50%)&lt;BR/&gt; 3584: (50%)&gt;];
}
1428--2762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="19.149.105.138" dst_port="57313" src_ip="193.32.176.68" src_port="3584"/>
    </slice>
    <from sec="1112590833" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
1430[label="135.69.212.195;s;192pkt 192fpkt", shape=diamond, color=yellow];
1633[label="134.34.178.142;d;192pkt 192fpkt", shape=diamond, color=yellow];
2765[label="135.69.212.195;s;175pkt 175fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.212.195:*, 134.34.178.142:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2261: (0.268336%)&lt;BR/&gt; 2260: (0.268336%)&lt;BR/&gt; 2259: (0.268336%)&lt;BR/&gt; 2258: (0.268336%)&gt;];
}
1430--1633[label="1;192pkt 192fpkt"];
1430--2765[label="1;175pkt 175fpkt"];
1430--3127[label="0.0989583;19pkt 19fpkt"];
1430--3138[label="0.0364583;7pkt 7fpkt"];
1633--2765[label="1;175pkt 175fpkt"];
1633--3127[label="0.0989583;19pkt 19fpkt"];
1633--3138[label="0.0364583;7pkt 7fpkt"];
2765--3127[label="0.108571;19pkt 19fpkt"];
2765--3138[label="0.04;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="134.34.178.142" dst_port="80" src_ip="135.69.212.195"/>
    </slice>
    <from sec="1112590838" usec="0"/>
    <to sec="1112591606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00678,1.75573,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
721[label="217.128.234.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
2771[label="217.128.234.75;s;1pkt 1fpkt", shape=hexagon, color=black];
4164[label="217.128.234.75;1pkt 1fpkt", shape=invtriangle, color=brown];
4497[label="217.128.234.75;1pkt 1fpkt", shape=invhouse, color=bisque];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.128.234.75:40401, 192.65.185.3:6881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40401: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
721--998[label="1;1pkt 1fpkt"];
721--2771[label="1;1pkt 1fpkt"];
721--4164[label="1;1pkt 1fpkt"];
721--4497[label="1;1pkt 1fpkt"];
2771--4164[label="1;1pkt 1fpkt"];
2771--4497[label="1;1pkt 1fpkt"];
4164--4497[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.185.3" dst_port="6881" src_ip="217.128.234.75" src_port="40401"/>
    </slice>
    <from sec="1112590877" usec="0"/>
    <to sec="1112591595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
673[label="129.2.72.45;s;160pkt 160fpkt", shape=diamond, color=yellow];
1374[label="0.59.190.125;d;43pkt 43fpkt", shape=diamond, color=yellow];
1604[label="0.59.190.100;d;17pkt 17fpkt", shape=diamond, color=yellow];
1617[label="135.68.34.211;s;43pkt 43fpkt", shape=diamond, color=yellow];
2735[label="129.2.72.45;s;133pkt 133fpkt", shape=hexagon, color=black];
2999[label="0.59.190.100;d;17pkt 17fpkt", shape=hexagon, color=black];
3339[label="129.2.72.45;175pkt 175fpkt", shape=pentagon, color=darkviolet];
3899[label="135.68.34.211;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.72.45:*, 202.150.153.73:80}[43.6364%]&lt;BR/&gt;{129.2.72.45:*, 0.59.190.125:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6825%)&lt;BR/&gt; 0: (0.47619%)&lt;BR/&gt; 2227: (0.396825%)&lt;BR/&gt; 2188: (0.396825%)&lt;BR/&gt; 2164: (0.396825%)&gt;];
}
673--1374[label="0.906977;39pkt 39fpkt"];
673--1604[label="0.823529;14pkt 14fpkt"];
673--2735[label="1;133pkt 133fpkt"];
673--2999[label="0.823529;14pkt 14fpkt"];
673--3127[label="0.09375;15pkt 15fpkt"];
673--3138[label="0.0625;10pkt 10fpkt"];
673--3339[label="1;160pkt 160fpkt"];
1374--1617[label="0.0697674;3pkt 3fpkt"];
1374--2650[label="0.0232558;1pkt 1fpkt"];
1374--2735[label="0.906977;39pkt 39fpkt"];
1374--3127[label="0.116279;5pkt 5fpkt"];
1374--3138[label="0.0232558;1pkt 1fpkt"];
1374--3339[label="0.906977;39pkt 39fpkt"];
1374--3899[label="0.0714286;3pkt 3fpkt"];
1604--1617[label="0.117647;2pkt 2fpkt"];
1604--2650[label="0.0588235;1pkt 1fpkt"];
1604--2735[label="0.705882;12pkt 12fpkt"];
1604--2999[label="1;17pkt 17fpkt"];
1604--3127[label="0.235294;4pkt 4fpkt"];
1604--3138[label="0.117647;2pkt 2fpkt"];
1604--3339[label="0.823529;14pkt 14fpkt"];
1604--3899[label="0.117647;2pkt 2fpkt"];
1617--2999[label="0.117647;2pkt 2fpkt"];
1617--3127[label="0.209302;9pkt 9fpkt"];
1617--3899[label="1;42pkt 42fpkt"];
2735--2999[label="0.705882;12pkt 12fpkt"];
2735--3127[label="0.112782;15pkt 15fpkt"];
2735--3138[label="0.0075188;1pkt 1fpkt"];
2735--3339[label="1;133pkt 133fpkt"];
2999--3127[label="0.235294;4pkt 4fpkt"];
2999--3138[label="0.117647;2pkt 2fpkt"];
2999--3339[label="0.823529;14pkt 14fpkt"];
2999--3899[label="0.117647;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="202.150.153.73" dst_port="80" src_ip="129.2.72.45"/>
      <filter dst_ip="0.59.190.125" dst_port="80" src_ip="129.2.72.45"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
603[label="193.148.131.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.148.131.3:8000, 135.69.148.113:6919}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 6919: (50%)&gt;];
}
603--1047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.148.113" dst_port="6919" src_ip="193.148.131.3" src_port="8000"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
910[label="129.141.130.93;s;77pkt 77fpkt", shape=diamond, color=yellow];
1009[label="16.217.89.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1010[label="135.68.209.45;s;6pkt 6fpkt", shape=diamond, color=yellow];
1180[label="135.68.90.138;s;54pkt 54fpkt", shape=diamond, color=yellow];
2828[label="72.119.77.10;d;55pkt 55fpkt", shape=hexagon, color=black];
3494[label="129.141.130.93;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.90.138:*, *:*}[28.5714%]&lt;BR/&gt;{*:*, 72.119.77.10:143}[22.7513%]&lt;BR/&gt;{129.141.130.93:*, *:80}[21.164%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.6667%)&lt;BR/&gt; 143: (8.51852%)&lt;BR/&gt; 1863: (2.40741%)&lt;BR/&gt; 3544: (2.22222%)&lt;BR/&gt; 27494: (1.85185%)&gt;];
}
910--1003[label="0.0172414;1pkt 1fpkt"];
910--1364[label="0.363636;28pkt 28fpkt"];
910--2325[label="0.012987;1pkt 1fpkt"];
910--2828[label="0.0181818;1pkt 1fpkt"];
910--3127[label="0.025974;2pkt 2fpkt"];
910--3138[label="0.103896;8pkt 8fpkt"];
910--3494[label="1;77pkt 77fpkt"];
1009--1010[label="1;1pkt 1fpkt"];
1010--2828[label="0.166667;1pkt 1fpkt"];
1180--1985[label="0.0185185;1pkt 1fpkt"];
1180--2470[label="1;54pkt 54fpkt"];
1180--2828[label="0.0185185;1pkt 1fpkt"];
1180--3126[label="0.0185185;1pkt 1fpkt"];
1180--3140[label="0.0185185;1pkt 1fpkt"];
1180--3150[label="0.0185185;1pkt 1fpkt"];
1180--3645[label="1;54pkt 54fpkt"];
2828--3288[label="0.0769231;1pkt 1fpkt"];
2828--3477[label="0.0363636;2pkt 2fpkt"];
2828--3494[label="0.0181818;1pkt 1fpkt"];
2828--3638[label="0.173913;4pkt 4fpkt"];
2828--3645[label="0.0181818;1pkt 1fpkt"];
2828--3649[label="0.5;1pkt 1fpkt"];
2828--4183[label="0.0363636;2pkt 2fpkt"];
2828--4247[label="0.136364;3pkt 3fpkt"];
2828--4509[label="0.0363636;2pkt 2fpkt"];
2828--4540[label="0.136364;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.90.138"/>
      <filter dst_port="80" src_ip="129.141.130.93"/>
      <filter dst_ip="72.119.77.10" dst_port="143"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
793[label="167.172.24.191;s;1332pkt 1332fpkt", shape=diamond, color=yellow];
1120[label="135.69.36.15;s;740pkt 740fpkt", shape=diamond, color=yellow];
1382[label="135.69.196.177;s;526pkt 526fpkt", shape=diamond, color=yellow];
1579[label="162.94.200.127;s;297pkt 297fpkt", shape=diamond, color=yellow];
2598[label="162.94.200.127;s;189pkt 189fpkt", shape=hexagon, color=black];
2862[label="221.218.160.214;d;92pkt 92fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[53.7894%]&lt;BR/&gt;{167.172.24.191:53, *:*}[33.0315%]&lt;BR/&gt;{135.69.36.15:*, *:*}[24.8156%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.677%)&lt;BR/&gt; 1026: (8.78463%)&lt;BR/&gt; 2716: (7.10013%)&lt;BR/&gt; 1045: (5.41562%)&lt;BR/&gt; 2458: (3.77834%)&gt;];
}
793--881[label="0.0188679;2pkt 2fpkt"];
793--1313[label="0.0222222;2pkt 2fpkt"];
793--1314[label="0.0357143;1pkt 1fpkt"];
793--1351[label="0.0172414;1pkt 1fpkt"];
793--1525[label="0.0125;1pkt 1fpkt"];
793--1799[label="0.00793651;1pkt 1fpkt"];
793--2140[label="0.00909091;1pkt 1fpkt"];
793--2151[label="0.00961538;1pkt 1fpkt"];
793--2156[label="0.0103093;1pkt 1fpkt"];
793--2219[label="0.0277778;1pkt 1fpkt"];
793--2454[label="1;688pkt 688fpkt"];
793--2862[label="0.0217391;2pkt 2fpkt"];
793--2983[label="0.00793651;1pkt 1fpkt"];
793--2987[label="0.0103093;1pkt 1fpkt"];
793--3125[label="0.0863363;115pkt 115fpkt"];
793--3129[label="0.117117;156pkt 156fpkt"];
793--3134[label="0.0728228;97pkt 97fpkt"];
793--3137[label="0.0540541;72pkt 72fpkt"];
793--3139[label="0.0863363;115pkt 115fpkt"];
793--3141[label="0.117117;156pkt 156fpkt"];
793--3146[label="0.0728228;97pkt 97fpkt"];
793--3149[label="0.0863363;115pkt 115fpkt"];
793--3151[label="0.117117;156pkt 156fpkt"];
793--3156[label="0.0728228;97pkt 97fpkt"];
1120--1313[label="0.0333333;3pkt 3fpkt"];
1120--1314[label="0.0357143;1pkt 1fpkt"];
1120--1351[label="0.0172414;1pkt 1fpkt"];
1120--1525[label="0.0125;1pkt 1fpkt"];
1120--1786[label="0.0208333;1pkt 1fpkt"];
1120--1799[label="0.00793651;1pkt 1fpkt"];
1120--2140[label="0.00909091;1pkt 1fpkt"];
1120--2151[label="0.00961538;1pkt 1fpkt"];
1120--2156[label="0.0103093;1pkt 1fpkt"];
1120--2177[label="0.0214286;3pkt 3fpkt"];
1120--2725[label="0.0277778;1pkt 1fpkt"];
1120--2860[label="1;681pkt 681fpkt"];
1120--2862[label="0.0217391;2pkt 2fpkt"];
1120--2983[label="0.00793651;1pkt 1fpkt"];
1120--2987[label="0.0103093;1pkt 1fpkt"];
1120--3125[label="0.0135135;10pkt 10fpkt"];
1120--3129[label="0.0148649;11pkt 11fpkt"];
1120--3134[label="0.0175676;13pkt 13fpkt"];
1120--3137[label="0.0783784;58pkt 58fpkt"];
1120--3139[label="0.0135135;10pkt 10fpkt"];
1120--3141[label="0.0148649;11pkt 11fpkt"];
1120--3146[label="0.0175676;13pkt 13fpkt"];
1120--3149[label="0.0135135;10pkt 10fpkt"];
1120--3151[label="0.0148649;11pkt 11fpkt"];
1120--3156[label="0.0175676;13pkt 13fpkt"];
1120--3218[label="0.998649;739pkt 739fpkt"];
1382--1525[label="0.0125;1pkt 1fpkt"];
1382--1786[label="0.0208333;1pkt 1fpkt"];
1382--1799[label="0.00793651;1pkt 1fpkt"];
1382--1947[label="0.025;1pkt 1fpkt"];
1382--2140[label="0.00909091;1pkt 1fpkt"];
1382--2151[label="0.00961538;1pkt 1fpkt"];
1382--2156[label="0.0103093;1pkt 1fpkt"];
1382--2725[label="0.0277778;1pkt 1fpkt"];
1382--2862[label="0.0108696;1pkt 1fpkt"];
1382--2983[label="0.00793651;1pkt 1fpkt"];
1382--2987[label="0.0103093;1pkt 1fpkt"];
1382--3125[label="0.0513308;27pkt 27fpkt"];
1382--3129[label="0.0513308;27pkt 27fpkt"];
1382--3134[label="0.0418251;22pkt 22fpkt"];
1382--3137[label="0.0893536;47pkt 47fpkt"];
1382--3139[label="0.0513308;27pkt 27fpkt"];
1382--3141[label="0.0513308;27pkt 27fpkt"];
1382--3146[label="0.0418251;22pkt 22fpkt"];
1382--3149[label="0.0513308;27pkt 27fpkt"];
1382--3151[label="0.0513308;27pkt 27fpkt"];
1382--3156[label="0.0418251;22pkt 22fpkt"];
1382--3799[label="0.998099;525pkt 525fpkt"];
1382--4324[label="0.996198;524pkt 524fpkt"];
1579--1786[label="0.0208333;1pkt 1fpkt"];
1579--1799[label="0.00793651;1pkt 1fpkt"];
1579--1947[label="0.025;1pkt 1fpkt"];
1579--2140[label="0.00909091;1pkt 1fpkt"];
1579--2151[label="0.00961538;1pkt 1fpkt"];
1579--2156[label="0.0103093;1pkt 1fpkt"];
1579--2598[label="1;189pkt 189fpkt"];
1579--2725[label="0.0277778;1pkt 1fpkt"];
1579--2983[label="0.00793651;1pkt 1fpkt"];
1579--2987[label="0.0103093;1pkt 1fpkt"];
1579--3125[label="0.003367;1pkt 1fpkt"];
1579--3129[label="0.003367;1pkt 1fpkt"];
1579--3137[label="0.185185;55pkt 55fpkt"];
1579--3139[label="0.003367;1pkt 1fpkt"];
1579--3141[label="0.003367;1pkt 1fpkt"];
1579--3149[label="0.003367;1pkt 1fpkt"];
1579--3151[label="0.003367;1pkt 1fpkt"];
2598--2725[label="0.0277778;1pkt 1fpkt"];
2598--2983[label="0.00793651;1pkt 1fpkt"];
2598--2987[label="0.0103093;1pkt 1fpkt"];
2598--3125[label="0.00529101;1pkt 1fpkt"];
2598--3137[label="0.179894;34pkt 34fpkt"];
2598--3139[label="0.00529101;1pkt 1fpkt"];
2598--3149[label="0.00529101;1pkt 1fpkt"];
2862--2939[label="0.0217391;2pkt 2fpkt"];
2862--3137[label="0.336957;31pkt 31fpkt"];
2862--3218[label="0.0217391;2pkt 2fpkt"];
2862--3264[label="0.0108696;1pkt 1fpkt"];
2862--3321[label="0.0326087;3pkt 3fpkt"];
2862--3363[label="0.0612245;3pkt 3fpkt"];
2862--3601[label="0.0326087;3pkt 3fpkt"];
2862--3799[label="0.0108696;1pkt 1fpkt"];
2862--3827[label="0.0886076;7pkt 7fpkt"];
2862--3892[label="0.0108696;1pkt 1fpkt"];
2862--3909[label="0.0326087;3pkt 3fpkt"];
2862--4108[label="0.0326087;3pkt 3fpkt"];
2862--4324[label="0.0108696;1pkt 1fpkt"];
2862--4374[label="0.0326087;3pkt 3fpkt"];
2862--4451[label="0.0108696;1pkt 1fpkt"];
2862--4473[label="0.0326087;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="135.69.36.15"/>
      <filter dst_port="53"/>
      <filter src_ip="167.172.24.191" src_port="53"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1814[label="1.13.20.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
2869[label="1.13.20.87;d;1pkt 1fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:1607, 1.13.20.87:22684}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22684: (50%)&lt;BR/&gt; 1607: (50%)&gt;];
}
1814--2869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.13.20.87" dst_port="22684" src_ip="193.32.176.68" src_port="1607"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
1614[label="96.149.221.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
2874[label="96.149.221.125;d;1pkt 1fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:1050, 96.149.221.125:6881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 1050: (50%)&gt;];
}
1614--2874[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.149.221.125" dst_port="6881" src_ip="193.32.176.68" src_port="1050"/>
    </slice>
    <from sec="1112590811" usec="0"/>
    <to sec="1112591617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1679[label="23.204.141.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
2883[label="23.204.141.216;d;1pkt 1fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3719, 23.204.141.216:47435}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47435: (50%)&lt;BR/&gt; 3719: (50%)&gt;];
}
1679--2883[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.204.141.216" dst_port="47435" src_ip="193.32.176.68" src_port="3719"/>
    </slice>
    <from sec="1112591129" usec="0"/>
    <to sec="1112591620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
286[label="16.235.143.245;d;25pkt 25fpkt", shape=diamond, color=yellow];
2347[label="193.41.141.139;s;17pkt 17fpkt", shape=hexagon, color=black];
2888[label="16.235.143.245;d;25pkt 25fpkt", shape=hexagon, color=black];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.141.139:*, 16.235.143.245:80}[76.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20090: (1.49254%)&lt;BR/&gt; 20082: (1.49254%)&lt;BR/&gt; 20079: (1.49254%)&lt;BR/&gt; 20078: (1.49254%)&gt;];
}
286--2888[label="0.96;24pkt 24fpkt"];
286--3138[label="0.04;1pkt 1fpkt"];
2347--2888[label="0.0588235;1pkt 1fpkt"];
2347--3127[label="0.764706;13pkt 13fpkt"];
2888--3138[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.235.143.245" dst_port="80" src_ip="193.41.141.139"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
513[label="135.68.16.159;s;468pkt 468fpkt", shape=diamond, color=yellow];
2099[label="99.15.36.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
2902[label="99.15.36.169;d;1pkt 1fpkt", shape=hexagon, color=black];
2909[label="135.68.16.159;s;468pkt 468fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.16.159:25, *:*}[68.3761%]&lt;BR/&gt;{135.68.16.159:*, *:25}[30.9829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6802%)&lt;BR/&gt; 0: (0.639659%)&lt;BR/&gt; 65033: (0.21322%)&lt;BR/&gt; 4503: (0.21322%)&lt;BR/&gt; 4229: (0.21322%)&gt;];
}
513--1497[label="0.0212766;1pkt 1fpkt"];
513--1943[label="0.0333333;1pkt 1fpkt"];
513--2099[label="1;1pkt 1fpkt"];
513--2902[label="1;1pkt 1fpkt"];
513--2909[label="1;468pkt 468fpkt"];
513--2931[label="0.0333333;1pkt 1fpkt"];
2099--2902[label="1;1pkt 1fpkt"];
2099--2909[label="1;1pkt 1fpkt"];
2902--2909[label="1;1pkt 1fpkt"];
2909--2931[label="0.0333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.16.159" src_port="25"/>
      <filter dst_port="25" src_ip="135.68.16.159"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
546[label="192.115.251.220;s;15pkt 15fpkt", shape=diamond, color=yellow];
990[label="193.41.163.34;d;447pkt 447fpkt", shape=diamond, color=yellow];
2670[label="192.115.251.220;s;15pkt 15fpkt", shape=hexagon, color=black];
2907[label="193.41.163.34;d;447pkt 447fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.41.163.34:53}[95.4447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.4589%)&lt;BR/&gt; 33701: (1.40693%)&lt;BR/&gt; 80: (1.40693%)&lt;BR/&gt; 0: (1.2987%)&lt;BR/&gt; 32768: (1.19048%)&gt;];
}
546--990[label="0.0666667;1pkt 1fpkt"];
546--1524[label="0.0666667;1pkt 1fpkt"];
546--2304[label="0.2;3pkt 3fpkt"];
546--2339[label="0.666667;10pkt 10fpkt"];
546--2670[label="1;15pkt 15fpkt"];
546--2907[label="0.0666667;1pkt 1fpkt"];
546--3066[label="0.2;3pkt 3fpkt"];
546--3126[label="0.2;3pkt 3fpkt"];
546--3140[label="0.2;3pkt 3fpkt"];
546--3150[label="0.2;3pkt 3fpkt"];
990--1862[label="0.0232558;1pkt 1fpkt"];
990--2670[label="0.0666667;1pkt 1fpkt"];
990--2880[label="0.0232558;1pkt 1fpkt"];
990--2907[label="1;447pkt 447fpkt"];
990--3125[label="0.00447427;2pkt 2fpkt"];
990--3129[label="0.0134228;6pkt 6fpkt"];
990--3134[label="0.00223714;1pkt 1fpkt"];
990--3137[label="0.10962;49pkt 49fpkt"];
990--3139[label="0.00447427;2pkt 2fpkt"];
990--3141[label="0.0134228;6pkt 6fpkt"];
990--3146[label="0.00223714;1pkt 1fpkt"];
990--3149[label="0.00447427;2pkt 2fpkt"];
990--3151[label="0.0134228;6pkt 6fpkt"];
990--3156[label="0.00223714;1pkt 1fpkt"];
990--3510[label="0.00223714;1pkt 1fpkt"];
990--3517[label="0.117021;11pkt 11fpkt"];
990--3626[label="0.166667;1pkt 1fpkt"];
990--4195[label="0.00223714;1pkt 1fpkt"];
990--4227[label="0.05;1pkt 1fpkt"];
990--4514[label="0.00223714;1pkt 1fpkt"];
990--4529[label="0.05;1pkt 1fpkt"];
2670--2907[label="0.0666667;1pkt 1fpkt"];
2670--3066[label="0.2;3pkt 3fpkt"];
2670--3126[label="0.2;3pkt 3fpkt"];
2670--3140[label="0.2;3pkt 3fpkt"];
2670--3150[label="0.2;3pkt 3fpkt"];
2907--3125[label="0.00447427;2pkt 2fpkt"];
2907--3129[label="0.0134228;6pkt 6fpkt"];
2907--3134[label="0.00223714;1pkt 1fpkt"];
2907--3137[label="0.10962;49pkt 49fpkt"];
2907--3139[label="0.00447427;2pkt 2fpkt"];
2907--3141[label="0.0134228;6pkt 6fpkt"];
2907--3146[label="0.00223714;1pkt 1fpkt"];
2907--3149[label="0.00447427;2pkt 2fpkt"];
2907--3151[label="0.0134228;6pkt 6fpkt"];
2907--3156[label="0.00223714;1pkt 1fpkt"];
2907--3510[label="0.00223714;1pkt 1fpkt"];
2907--3517[label="0.117021;11pkt 11fpkt"];
2907--3626[label="0.166667;1pkt 1fpkt"];
2907--4195[label="0.00223714;1pkt 1fpkt"];
2907--4227[label="0.05;1pkt 1fpkt"];
2907--4514[label="0.00223714;1pkt 1fpkt"];
2907--4529[label="0.05;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.163.34" dst_port="53"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
536[label="16.217.89.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
767[label="144.126.195.124;d;2pkt 2fpkt", shape=diamond, color=yellow];
2918[label="16.217.89.148;s;2pkt 2fpkt", shape=hexagon, color=black];
3691[label="16.217.89.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.217.89.148:554, 144.126.195.124:1689}[50%]&lt;BR/&gt;{16.217.89.148:13806, 144.126.195.124:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1689: (28.5714%)&lt;BR/&gt; 554: (28.5714%)&lt;BR/&gt; 13806: (21.4286%)&lt;BR/&gt; 6970: (21.4286%)&gt;];
}
536--767[label="1;2pkt 2fpkt"];
536--2918[label="1;2pkt 2fpkt"];
536--3691[label="1;1pkt 1fpkt"];
767--2918[label="1;2pkt 2fpkt"];
767--3691[label="1;1pkt 1fpkt"];
2918--3691[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.195.124" dst_port="6970" src_ip="16.217.89.148" src_port="13806"/>
      <filter dst_ip="144.126.195.124" dst_port="1689" src_ip="16.217.89.148" src_port="554"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1275[label="135.69.80.24;d;3pkt 3fpkt", shape=diamond, color=yellow];
1503[label="213.24.87.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
2919[label="213.24.87.45;s;1pkt 1fpkt", shape=hexagon, color=black];
3340[label="213.24.87.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.132.37.31:60298, 135.69.80.24:6527}[33.3333%]&lt;BR/&gt;{213.24.87.45:4185, 135.69.80.24:5485}[33.3333%]&lt;BR/&gt;{192.81.27.194:3906, 135.69.80.24:6527}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5485: (33.3333%)&lt;BR/&gt; 4185: (33.3333%)&lt;BR/&gt; 6527: (16.6667%)&lt;BR/&gt; 60298: (8.33333%)&lt;BR/&gt; 3906: (8.33333%)&gt;];
}
1275--1503[label="1;1pkt 1fpkt"];
1275--2919[label="1;1pkt 1fpkt"];
1275--3340[label="1;1pkt 1fpkt"];
1503--2919[label="1;1pkt 1fpkt"];
1503--3340[label="1;1pkt 1fpkt"];
2919--3340[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.80.24" dst_port="6527" src_ip="192.81.27.194" src_port="3906"/>
      <filter dst_ip="135.69.80.24" dst_port="5485" src_ip="213.24.87.45" src_port="4185"/>
      <filter dst_ip="135.69.80.24" dst_port="6527" src_ip="192.132.37.31" src_port="60298"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
568[label="221.143.48.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
569[label="135.68.97.205;s;107pkt 107fpkt", shape=diamond, color=yellow];
2926[label="221.143.48.173;d;1pkt 1fpkt", shape=hexagon, color=black];
3882[label="135.68.97.205;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4365[label="135.68.97.205;3pkt 3fpkt", shape=invtriangle, color=brown];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.97.205:*, *:80}[94.4954%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.2174%)&lt;BR/&gt; 2214: (2.17391%)&lt;BR/&gt; 554: (2.17391%)&lt;BR/&gt; 1863: (1.73913%)&lt;BR/&gt; 2576: (0.869565%)&gt;];
}
568--569[label="1;1pkt 1fpkt"];
568--2364[label="1;1pkt 1fpkt"];
568--2926[label="1;1pkt 1fpkt"];
568--3882[label="1;1pkt 1fpkt"];
568--4365[label="1;1pkt 1fpkt"];
569--641[label="0.00934579;1pkt 1fpkt"];
569--660[label="0.11215;12pkt 12fpkt"];
569--676[label="0.0186916;2pkt 2fpkt"];
569--680[label="0.133333;10pkt 10fpkt"];
569--713[label="0.00934579;1pkt 1fpkt"];
569--992[label="0.0408163;2pkt 2fpkt"];
569--1114[label="0.0172414;1pkt 1fpkt"];
569--1376[label="0.00934579;1pkt 1fpkt"];
569--1390[label="0.0280374;3pkt 3fpkt"];
569--1397[label="0.0841121;9pkt 9fpkt"];
569--1622[label="0.0186916;2pkt 2fpkt"];
569--1968[label="0.00934579;1pkt 1fpkt"];
569--1988[label="0.00934579;1pkt 1fpkt"];
569--2130[label="0.045977;4pkt 4fpkt"];
569--2141[label="0.0294118;1pkt 1fpkt"];
569--2325[label="0.11215;12pkt 12fpkt"];
569--2364[label="1;18pkt 18fpkt"];
569--2421[label="0.00934579;1pkt 1fpkt"];
569--2926[label="1;1pkt 1fpkt"];
569--3127[label="0.0280374;3pkt 3fpkt"];
569--3138[label="0.0280374;3pkt 3fpkt"];
569--3882[label="0.333333;1pkt 1fpkt"];
569--4365[label="0.333333;1pkt 1fpkt"];
2926--3882[label="1;1pkt 1fpkt"];
2926--4365[label="1;1pkt 1fpkt"];
3882--4365[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="135.68.97.205"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1527[label="195.107.55.244;d;2pkt 2fpkt", shape=diamond, color=yellow];
2941[label="195.107.55.244;d;2pkt 2fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3371, 195.107.55.244:6881}[50%]&lt;BR/&gt;{193.32.176.68:3587, 195.107.55.244:6881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 3587: (25%)&lt;BR/&gt; 3371: (25%)&gt;];
}
1527--2941[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.107.55.244" dst_port="6881" src_ip="193.32.176.68" src_port="3587"/>
      <filter dst_ip="195.107.55.244" dst_port="6881" src_ip="193.32.176.68" src_port="3371"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
637[label="99.64.226.175;s;1920pkt 1920fpkt", shape=diamond, color=yellow];
2948[label="99.64.226.175;s;1920pkt 1920fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.64.226.175:5590, *:*}[63.1771%]&lt;BR/&gt;{99.64.226.175:3389, *:*}[36.8229%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5590: (31.5885%)&lt;BR/&gt; 3389: (18.4115%)&lt;BR/&gt; 50965: (0.078125%)&lt;BR/&gt; 28470: (0.078125%)&lt;BR/&gt; 62040: (0.0520833%)&gt;];
}
637--2948[label="1;1920pkt 1920fpkt"];
</description>
    <slice>
      <filter src_ip="99.64.226.175" src_port="5590"/>
      <filter src_ip="99.64.226.175" src_port="3389"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
852[label="167.172.46.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
853[label="140.114.247.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
2958[label="167.172.46.142;d;1pkt 1fpkt", shape=hexagon, color=black];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.114.247.1:20, 167.172.46.142:1201}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1201: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
852--853[label="1;1pkt 1fpkt"];
852--2958[label="1;1pkt 1fpkt"];
853--2958[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.172.46.142" dst_port="1201" src_ip="140.114.247.1" src_port="20"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
1039[label="197.91.3.67;d;136pkt 136fpkt", shape=diamond, color=yellow];
2960[label="167.172.9.75;s;141pkt 141fpkt", shape=hexagon, color=black];
3161[label="167.172.40.0;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 197.91.3.67:*}[48.5714%]&lt;BR/&gt;{167.172.9.75:80, *:*}[27.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.5563%)&lt;BR/&gt; 53: (10.5634%)&lt;BR/&gt; 55213: (9.33099%)&lt;BR/&gt; 25: (0.880282%)&lt;BR/&gt; 57802: (0.352113%)&gt;];
}
1039--1183[label="0.028169;2pkt 2fpkt"];
1039--1345[label="0.0147059;2pkt 2fpkt"];
1039--2170[label="0.0731707;3pkt 3fpkt"];
1039--2530[label="0.028169;2pkt 2fpkt"];
1039--2929[label="1;136pkt 136fpkt"];
1039--2960[label="0.0147059;2pkt 2fpkt"];
1039--3079[label="0.0487805;2pkt 2fpkt"];
1039--3126[label="0.110294;15pkt 15fpkt"];
1039--3130[label="0.0588235;8pkt 8fpkt"];
1039--3135[label="0.0441176;6pkt 6fpkt"];
1039--3140[label="0.110294;15pkt 15fpkt"];
1039--3142[label="0.0588235;8pkt 8fpkt"];
1039--3147[label="0.0441176;6pkt 6fpkt"];
1039--3150[label="0.110294;15pkt 15fpkt"];
1039--3152[label="0.0588235;8pkt 8fpkt"];
1039--3157[label="0.0441176;6pkt 6fpkt"];
1039--3161[label="0.285714;2pkt 2fpkt"];
1039--3469[label="0.333333;2pkt 2fpkt"];
1039--3840[label="0.0967742;3pkt 3fpkt"];
2960--2983[label="0.00793651;1pkt 1fpkt"];
2960--3126[label="0.0141844;2pkt 2fpkt"];
2960--3130[label="0.212766;30pkt 30fpkt"];
2960--3134[label="0.0070922;1pkt 1fpkt"];
2960--3135[label="0.0921986;13pkt 13fpkt"];
2960--3137[label="0.0921986;13pkt 13fpkt"];
2960--3140[label="0.0141844;2pkt 2fpkt"];
2960--3142[label="0.212766;30pkt 30fpkt"];
2960--3146[label="0.0070922;1pkt 1fpkt"];
2960--3147[label="0.0921986;13pkt 13fpkt"];
2960--3150[label="0.0141844;2pkt 2fpkt"];
2960--3152[label="0.212766;30pkt 30fpkt"];
2960--3156[label="0.0070922;1pkt 1fpkt"];
2960--3157[label="0.0921986;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="167.172.9.75" src_port="80"/>
      <filter dst_ip="197.91.3.67" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1789[label="200.97.224.61;d;3pkt 3fpkt", shape=diamond, color=yellow];
2963[label="200.97.224.61;d;3pkt 3fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3329, 200.97.224.61:7881}[33.3333%]&lt;BR/&gt;{193.32.176.68:3366, 200.97.224.61:7881}[33.3333%]&lt;BR/&gt;{193.32.176.68:3715, 200.97.224.61:7881}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7881: (50%)&lt;BR/&gt; 3715: (16.6667%)&lt;BR/&gt; 3366: (16.6667%)&lt;BR/&gt; 3329: (16.6667%)&gt;];
}
1789--2963[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.97.224.61" dst_port="7881" src_ip="193.32.176.68" src_port="3715"/>
      <filter dst_ip="200.97.224.61" dst_port="7881" src_ip="193.32.176.68" src_port="3366"/>
      <filter dst_ip="200.97.224.61" dst_port="7881" src_ip="193.32.176.68" src_port="3329"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
1358[label="3.192.60.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
2973[label="3.192.60.74;d;2pkt 2fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:1604, 3.192.60.74:6881}[50%]&lt;BR/&gt;{193.32.176.68:3491, 3.192.60.74:6881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 3491: (25%)&lt;BR/&gt; 1604: (25%)&gt;];
}
1358--2973[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="3.192.60.74" dst_port="6881" src_ip="193.32.176.68" src_port="3491"/>
      <filter dst_ip="3.192.60.74" dst_port="6881" src_ip="193.32.176.68" src_port="1604"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
1112[label="70.176.222.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
2975[label="70.176.222.102;d;1pkt 1fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:4730, 70.176.222.102:6881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4730: (50%)&gt;];
}
1112--2975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.176.222.102" dst_port="6881" src_ip="193.32.176.68" src_port="4730"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
383[label="197.91.3.25;d;113pkt 113fpkt", shape=diamond, color=yellow];
533[label="135.68.225.97;s;1345pkt 1345fpkt", shape=diamond, color=yellow];
862[label="193.41.176.208;s;220pkt 220fpkt", shape=diamond, color=yellow];
1071[label="135.69.182.55;s;5pkt 5fpkt", shape=diamond, color=yellow];
1174[label="129.141.6.91;s;15pkt 15fpkt", shape=diamond, color=yellow];
1394[label="129.141.145.115;s;36pkt 36fpkt", shape=diamond, color=yellow];
1449[label="135.69.232.247;s;3pkt 3fpkt", shape=diamond, color=yellow];
1562[label="135.69.8.186;s;90pkt 90fpkt", shape=diamond, color=yellow];
1813[label="135.69.250.156;s;161pkt 161fpkt", shape=diamond, color=yellow];
2017[label="135.69.136.114;s;73pkt 73fpkt", shape=diamond, color=yellow];
2025[label="129.141.4.198;s;70pkt 70fpkt", shape=diamond, color=yellow];
2725[label="208.139.31.80;d;36pkt 36fpkt", shape=hexagon, color=black];
2729[label="135.69.8.186;s;75pkt 75fpkt", shape=hexagon, color=black];
2787[label="197.91.3.25;d;113pkt 113fpkt", shape=hexagon, color=black];
3195[label="135.69.232.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3515[label="135.69.23.99;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3559[label="129.141.131.113;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3567[label="135.69.136.114;73pkt 73fpkt", shape=pentagon, color=darkviolet];
3638[label="135.69.70.137;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3741[label="129.141.145.160;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3857[label="129.141.4.198;73pkt 73fpkt", shape=pentagon, color=darkviolet];
3892[label="193.41.176.208;228pkt 228fpkt", shape=pentagon, color=darkviolet];
3918[label="135.69.40.217;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3936[label="135.69.30.223;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4008[label="135.69.232.247;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4046[label="135.69.232.8;2pkt 2fpkt", shape=invtriangle, color=brown];
4218[label="135.69.136.114;74pkt 74fpkt", shape=invtriangle, color=brown];
4247[label="135.69.70.137;22pkt 22fpkt", shape=invtriangle, color=brown];
4385[label="135.69.30.223;18pkt 18fpkt", shape=invtriangle, color=brown];
4524[label="135.69.136.114;73pkt 73fpkt", shape=invhouse, color=bisque];
4540[label="135.69.70.137;22pkt 22fpkt", shape=invhouse, color=bisque];
4590[label="135.69.40.217;46pkt 46fpkt", shape=invhouse, color=bisque];
4593[label="135.69.30.223;18pkt 18fpkt", shape=invhouse, color=bisque];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.225.97:1674, *:53}[39.7668%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.0628%)&lt;BR/&gt; 80: (17.2767%)&lt;BR/&gt; 1674: (14.5472%)&lt;BR/&gt; 65534: (5.17513%)&lt;BR/&gt; 1677: (5.04891%)&gt;];
}
383--766[label="0.00884956;1pkt 1fpkt"];
383--1071[label="0.2;1pkt 1fpkt"];
383--1086[label="0.00884956;1pkt 1fpkt"];
383--1118[label="0.0263158;2pkt 2fpkt"];
383--1174[label="0.0666667;1pkt 1fpkt"];
383--1394[label="0.0555556;2pkt 2fpkt"];
383--1449[label="0.666667;2pkt 2fpkt"];
383--1562[label="0.0222222;2pkt 2fpkt"];
383--1813[label="0.0176991;2pkt 2fpkt"];
383--2017[label="0.0410959;3pkt 3fpkt"];
383--2025[label="0.0142857;1pkt 1fpkt"];
383--2356[label="0.00884956;1pkt 1fpkt"];
383--2729[label="0.0266667;2pkt 2fpkt"];
383--2787[label="1;113pkt 113fpkt"];
383--2825[label="0.00884956;1pkt 1fpkt"];
383--2978[label="0.0263158;2pkt 2fpkt"];
383--3092[label="0.00884956;1pkt 1fpkt"];
383--3195[label="1;2pkt 2fpkt"];
383--3320[label="0.0333333;2pkt 2fpkt"];
383--3515[label="0.125;2pkt 2fpkt"];
383--3559[label="0.0740741;2pkt 2fpkt"];
383--3567[label="0.0410959;3pkt 3fpkt"];
383--3638[label="0.0434783;1pkt 1fpkt"];
383--3741[label="0.037037;1pkt 1fpkt"];
383--3857[label="0.0136986;1pkt 1fpkt"];
383--3918[label="0.0208333;1pkt 1fpkt"];
383--3936[label="0.0555556;1pkt 1fpkt"];
383--4008[label="0.5;2pkt 2fpkt"];
383--4046[label="1;2pkt 2fpkt"];
383--4107[label="0.0327869;2pkt 2fpkt"];
383--4218[label="0.0405405;3pkt 3fpkt"];
383--4247[label="0.0454545;1pkt 1fpkt"];
383--4385[label="0.0555556;1pkt 1fpkt"];
383--4524[label="0.0410959;3pkt 3fpkt"];
383--4540[label="0.0454545;1pkt 1fpkt"];
383--4590[label="0.0217391;1pkt 1fpkt"];
383--4593[label="0.0555556;1pkt 1fpkt"];
533--818[label="0.25;2pkt 2fpkt"];
533--881[label="0.0188679;2pkt 2fpkt"];
533--1103[label="0.285714;2pkt 2fpkt"];
533--1313[label="0.0222222;2pkt 2fpkt"];
533--1314[label="0.0714286;2pkt 2fpkt"];
533--1351[label="0.0344828;2pkt 2fpkt"];
533--1525[label="0.025;2pkt 2fpkt"];
533--1786[label="0.0416667;2pkt 2fpkt"];
533--1799[label="0.015873;2pkt 2fpkt"];
533--1947[label="0.05;2pkt 2fpkt"];
533--2140[label="0.0181818;2pkt 2fpkt"];
533--2151[label="0.0192308;2pkt 2fpkt"];
533--2156[label="0.0206186;2pkt 2fpkt"];
533--2310[label="1;1183pkt 1183fpkt"];
533--2725[label="0.0277778;1pkt 1fpkt"];
533--2862[label="0.0108696;1pkt 1fpkt"];
533--2983[label="0.015873;2pkt 2fpkt"];
533--2987[label="0.0206186;2pkt 2fpkt"];
533--3125[label="0.000743494;1pkt 1fpkt"];
533--3134[label="0.000743494;1pkt 1fpkt"];
533--3137[label="0.107807;145pkt 145fpkt"];
533--3139[label="0.000743494;1pkt 1fpkt"];
533--3146[label="0.000743494;1pkt 1fpkt"];
533--3149[label="0.000743494;1pkt 1fpkt"];
533--3156[label="0.000743494;1pkt 1fpkt"];
862--881[label="0.00943396;1pkt 1fpkt"];
862--1351[label="0.0172414;1pkt 1fpkt"];
862--1786[label="0.0208333;1pkt 1fpkt"];
862--1799[label="0.00793651;1pkt 1fpkt"];
862--1947[label="0.025;1pkt 1fpkt"];
862--2140[label="0.00909091;1pkt 1fpkt"];
862--2151[label="0.00961538;1pkt 1fpkt"];
862--2156[label="0.0103093;1pkt 1fpkt"];
862--2395[label="1;193pkt 193fpkt"];
862--2725[label="0.0277778;1pkt 1fpkt"];
862--2862[label="0.0108696;1pkt 1fpkt"];
862--2983[label="0.00793651;1pkt 1fpkt"];
862--2987[label="0.0103093;1pkt 1fpkt"];
862--3125[label="0.0136364;3pkt 3fpkt"];
862--3129[label="0.00909091;2pkt 2fpkt"];
862--3134[label="0.0181818;4pkt 4fpkt"];
862--3137[label="0.136364;30pkt 30fpkt"];
862--3139[label="0.0136364;3pkt 3fpkt"];
862--3141[label="0.00909091;2pkt 2fpkt"];
862--3146[label="0.0181818;4pkt 4fpkt"];
862--3149[label="0.0136364;3pkt 3fpkt"];
862--3151[label="0.00909091;2pkt 2fpkt"];
862--3156[label="0.0181818;4pkt 4fpkt"];
862--3892[label="0.990909;218pkt 218fpkt"];
1071--2291[label="0.2;1pkt 1fpkt"];
1071--2787[label="0.2;1pkt 1fpkt"];
1071--3126[label="0.2;1pkt 1fpkt"];
1071--3130[label="0.2;1pkt 1fpkt"];
1071--3135[label="0.2;1pkt 1fpkt"];
1071--3140[label="0.2;1pkt 1fpkt"];
1071--3142[label="0.2;1pkt 1fpkt"];
1071--3147[label="0.2;1pkt 1fpkt"];
1071--3150[label="0.2;1pkt 1fpkt"];
1071--3152[label="0.2;1pkt 1fpkt"];
1071--3157[label="0.2;1pkt 1fpkt"];
1174--2411[label="0.266667;4pkt 4fpkt"];
1174--2787[label="0.0666667;1pkt 1fpkt"];
1394--2177[label="0.0555556;2pkt 2fpkt"];
1394--2787[label="0.0555556;2pkt 2fpkt"];
1449--2787[label="0.666667;2pkt 2fpkt"];
1449--4008[label="1;3pkt 3fpkt"];
1562--1667[label="0.166667;2pkt 2fpkt"];
1562--1694[label="0.333333;2pkt 2fpkt"];
1562--1895[label="0.0645161;2pkt 2fpkt"];
1562--1944[label="0.12766;6pkt 6fpkt"];
1562--2177[label="0.0555556;5pkt 5fpkt"];
1562--2217[label="1;33pkt 33fpkt"];
1562--2729[label="1;75pkt 75fpkt"];
1562--2787[label="0.0222222;2pkt 2fpkt"];
1562--2835[label="0.146341;6pkt 6fpkt"];
1562--2886[label="0.333333;2pkt 2fpkt"];
1562--2957[label="0.208333;5pkt 5fpkt"];
1562--3126[label="0.0333333;3pkt 3fpkt"];
1562--3130[label="0.122222;11pkt 11fpkt"];
1562--3135[label="0.111111;10pkt 10fpkt"];
1562--3140[label="0.0333333;3pkt 3fpkt"];
1562--3142[label="0.122222;11pkt 11fpkt"];
1562--3147[label="0.111111;10pkt 10fpkt"];
1562--3150[label="0.0333333;3pkt 3fpkt"];
1562--3152[label="0.122222;11pkt 11fpkt"];
1562--3157[label="0.111111;10pkt 10fpkt"];
1813--1839[label="0.03125;2pkt 2fpkt"];
1813--1947[label="0.025;1pkt 1fpkt"];
1813--1985[label="0.0128205;1pkt 1fpkt"];
1813--2184[label="0.1;2pkt 2fpkt"];
1813--2725[label="0.0277778;1pkt 1fpkt"];
1813--2768[label="0.04;2pkt 2fpkt"];
1813--2787[label="0.0176991;2pkt 2fpkt"];
1813--2842[label="0.047619;1pkt 1fpkt"];
1813--3125[label="0.0124224;2pkt 2fpkt"];
1813--3127[label="0.0124224;2pkt 2fpkt"];
1813--3134[label="0.00621118;1pkt 1fpkt"];
1813--3137[label="0.0186335;3pkt 3fpkt"];
1813--3138[label="0.142857;23pkt 23fpkt"];
1813--3139[label="0.0124224;2pkt 2fpkt"];
1813--3146[label="0.00621118;1pkt 1fpkt"];
1813--3149[label="0.0124224;2pkt 2fpkt"];
1813--3156[label="0.00621118;1pkt 1fpkt"];
2017--2191[label="0.0196078;1pkt 1fpkt"];
2017--2715[label="0.589041;43pkt 43fpkt"];
2017--2787[label="0.0410959;3pkt 3fpkt"];
2017--3016[label="0.0196078;1pkt 1fpkt"];
2017--3127[label="0.0273973;2pkt 2fpkt"];
2017--3138[label="0.0136986;1pkt 1fpkt"];
2017--3567[label="0.986301;72pkt 72fpkt"];
2017--4218[label="1;73pkt 73fpkt"];
2017--4524[label="0.986301;72pkt 72fpkt"];
2025--2491[label="0.0428571;3pkt 3fpkt"];
2025--2787[label="0.0142857;1pkt 1fpkt"];
2025--3125[label="0.0285714;2pkt 2fpkt"];
2025--3126[label="0.0285714;2pkt 2fpkt"];
2025--3129[label="0.0285714;2pkt 2fpkt"];
2025--3130[label="0.0285714;2pkt 2fpkt"];
2025--3134[label="0.0142857;1pkt 1fpkt"];
2025--3135[label="0.0142857;1pkt 1fpkt"];
2025--3137[label="0.0857143;6pkt 6fpkt"];
2025--3138[label="0.0142857;1pkt 1fpkt"];
2025--3139[label="0.0285714;2pkt 2fpkt"];
2025--3140[label="0.0285714;2pkt 2fpkt"];
2025--3141[label="0.0285714;2pkt 2fpkt"];
2025--3142[label="0.0285714;2pkt 2fpkt"];
2025--3146[label="0.0142857;1pkt 1fpkt"];
2025--3147[label="0.0142857;1pkt 1fpkt"];
2025--3149[label="0.0285714;2pkt 2fpkt"];
2025--3150[label="0.0285714;2pkt 2fpkt"];
2025--3151[label="0.0285714;2pkt 2fpkt"];
2025--3152[label="0.0285714;2pkt 2fpkt"];
2025--3156[label="0.0142857;1pkt 1fpkt"];
2025--3157[label="0.0142857;1pkt 1fpkt"];
2025--3857[label="1;70pkt 70fpkt"];
2725--2739[label="0.0277778;1pkt 1fpkt"];
2725--2830[label="0.0277778;1pkt 1fpkt"];
2725--2860[label="0.0277778;1pkt 1fpkt"];
2725--2939[label="0.0277778;1pkt 1fpkt"];
2725--3137[label="0.333333;12pkt 12fpkt"];
2725--3218[label="0.0277778;1pkt 1fpkt"];
2725--3264[label="0.0277778;1pkt 1fpkt"];
2725--3294[label="0.0277778;1pkt 1fpkt"];
2725--3321[label="0.0277778;1pkt 1fpkt"];
2725--3601[label="0.0277778;1pkt 1fpkt"];
2725--3799[label="0.0277778;1pkt 1fpkt"];
2725--3892[label="0.0277778;1pkt 1fpkt"];
2725--3909[label="0.0277778;1pkt 1fpkt"];
2725--4092[label="0.0277778;1pkt 1fpkt"];
2725--4108[label="0.0277778;1pkt 1fpkt"];
2725--4324[label="0.0277778;1pkt 1fpkt"];
2725--4374[label="0.0277778;1pkt 1fpkt"];
2725--4451[label="0.0277778;1pkt 1fpkt"];
2725--4463[label="0.0277778;1pkt 1fpkt"];
2725--4473[label="0.0277778;1pkt 1fpkt"];
2729--2787[label="0.0266667;2pkt 2fpkt"];
2729--2835[label="0.146341;6pkt 6fpkt"];
2729--2886[label="0.333333;2pkt 2fpkt"];
2729--2957[label="0.208333;5pkt 5fpkt"];
2729--3126[label="0.04;3pkt 3fpkt"];
2729--3130[label="0.146667;11pkt 11fpkt"];
2729--3135[label="0.0933333;7pkt 7fpkt"];
2729--3140[label="0.04;3pkt 3fpkt"];
2729--3142[label="0.146667;11pkt 11fpkt"];
2729--3147[label="0.0933333;7pkt 7fpkt"];
2729--3150[label="0.04;3pkt 3fpkt"];
2729--3152[label="0.146667;11pkt 11fpkt"];
2729--3157[label="0.0933333;7pkt 7fpkt"];
2787--2825[label="0.00884956;1pkt 1fpkt"];
2787--2978[label="0.0263158;2pkt 2fpkt"];
2787--3092[label="0.00884956;1pkt 1fpkt"];
2787--3195[label="1;2pkt 2fpkt"];
2787--3320[label="0.0333333;2pkt 2fpkt"];
2787--3515[label="0.125;2pkt 2fpkt"];
2787--3559[label="0.0740741;2pkt 2fpkt"];
2787--3567[label="0.0410959;3pkt 3fpkt"];
2787--3638[label="0.0434783;1pkt 1fpkt"];
2787--3741[label="0.037037;1pkt 1fpkt"];
2787--3857[label="0.0136986;1pkt 1fpkt"];
2787--3918[label="0.0208333;1pkt 1fpkt"];
2787--3936[label="0.0555556;1pkt 1fpkt"];
2787--4008[label="0.5;2pkt 2fpkt"];
2787--4046[label="1;2pkt 2fpkt"];
2787--4107[label="0.0327869;2pkt 2fpkt"];
2787--4218[label="0.0405405;3pkt 3fpkt"];
2787--4247[label="0.0454545;1pkt 1fpkt"];
2787--4385[label="0.0555556;1pkt 1fpkt"];
2787--4524[label="0.0410959;3pkt 3fpkt"];
2787--4540[label="0.0454545;1pkt 1fpkt"];
2787--4590[label="0.0217391;1pkt 1fpkt"];
2787--4593[label="0.0555556;1pkt 1fpkt"];
3195--4046[label="1;2pkt 2fpkt"];
3567--4218[label="1;73pkt 73fpkt"];
3567--4524[label="1;73pkt 73fpkt"];
3638--4247[label="1;22pkt 22fpkt"];
3638--4540[label="1;22pkt 22fpkt"];
3918--4590[label="1;46pkt 46fpkt"];
3936--4385[label="1;18pkt 18fpkt"];
3936--4593[label="1;18pkt 18fpkt"];
4218--4524[label="1;73pkt 73fpkt"];
4247--4540[label="1;22pkt 22fpkt"];
4385--4593[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="135.68.225.97" src_port="1674"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
1982[label="135.69.8.166;s;35pkt 35fpkt", shape=diamond, color=yellow];
2982[label="135.69.8.166;s;35pkt 35fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.8.166:*, *:25}[48.5714%]&lt;BR/&gt;{135.69.8.166:*, *:113}[22.8571%]&lt;BR/&gt;{135.69.8.166:25, *:*}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.7143%)&lt;BR/&gt; 113: (11.4286%)&lt;BR/&gt; 3233: (2.85714%)&lt;BR/&gt; 80: (2.85714%)&lt;BR/&gt; 58764: (1.42857%)&gt;];
}
1982--2982[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="135.69.8.166" src_port="25"/>
      <filter dst_port="25" src_ip="135.69.8.166"/>
      <filter dst_port="113" src_ip="135.69.8.166"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
416[label="135.68.16.172;s;1831pkt 1831fpkt", shape=diamond, color=yellow];
756[label="135.69.20.228;s;825pkt 825fpkt", shape=diamond, color=yellow];
824[label="193.41.170.128;s;244pkt 244fpkt", shape=diamond, color=yellow];
881[label="221.218.160.214;d;106pkt 106fpkt", shape=diamond, color=yellow];
1378[label="129.52.54.75;s;416pkt 416fpkt", shape=diamond, color=yellow];
2132[label="135.68.66.214;s;111pkt 111fpkt", shape=diamond, color=yellow];
2151[label="203.58.248.185;d;104pkt 104fpkt", shape=diamond, color=yellow];
2168[label="135.68.18.188;s;71pkt 71fpkt", shape=diamond, color=yellow];
2387[label="192.65.176.64;s;344pkt 344fpkt", shape=hexagon, color=black];
2458[label="192.65.180.158;s;516pkt 516fpkt", shape=hexagon, color=black];
2517[label="193.41.170.128;s;195pkt 195fpkt", shape=hexagon, color=black];
2939[label="135.68.16.172;s;1831pkt 1831fpkt", shape=hexagon, color=black];
2983[label="203.36.48.23;d;126pkt 126fpkt", shape=hexagon, color=black];
2987[label="203.54.88.194;d;97pkt 97fpkt", shape=hexagon, color=black];
3363[label="135.68.241.49;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3601[label="193.41.170.128;262pkt 262fpkt", shape=pentagon, color=darkviolet];
3909[label="135.68.66.214;114pkt 114fpkt", shape=pentagon, color=darkviolet];
4374[label="135.68.66.214;114pkt 114fpkt", shape=invtriangle, color=brown];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.16.172:1638, *:53}[26.9207%]&lt;BR/&gt;{*:53, *:*}[21.1951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.7926%)&lt;BR/&gt; 1638: (17.6047%)&lt;BR/&gt; 1641: (6.78358%)&lt;BR/&gt; 3843: (4.39097%)&lt;BR/&gt; 25: (3.33741%)&gt;];
}
416--818[label="0.25;2pkt 2fpkt"];
416--881[label="0.0188679;2pkt 2fpkt"];
416--1103[label="0.285714;2pkt 2fpkt"];
416--1313[label="0.0333333;3pkt 3fpkt"];
416--1314[label="0.0714286;2pkt 2fpkt"];
416--1351[label="0.0344828;2pkt 2fpkt"];
416--1525[label="0.025;2pkt 2fpkt"];
416--1786[label="0.0416667;2pkt 2fpkt"];
416--1799[label="0.015873;2pkt 2fpkt"];
416--1947[label="0.05;2pkt 2fpkt"];
416--2140[label="0.0181818;2pkt 2fpkt"];
416--2151[label="0.0192308;2pkt 2fpkt"];
416--2156[label="0.0206186;2pkt 2fpkt"];
416--2725[label="0.0277778;1pkt 1fpkt"];
416--2862[label="0.0217391;2pkt 2fpkt"];
416--2939[label="1;1831pkt 1831fpkt"];
416--2983[label="0.015873;2pkt 2fpkt"];
416--2987[label="0.0206186;2pkt 2fpkt"];
416--3129[label="0.00054615;1pkt 1fpkt"];
416--3134[label="0.00054615;1pkt 1fpkt"];
416--3137[label="0.128345;235pkt 235fpkt"];
416--3141[label="0.00054615;1pkt 1fpkt"];
416--3146[label="0.00054615;1pkt 1fpkt"];
416--3151[label="0.00054615;1pkt 1fpkt"];
416--3156[label="0.00054615;1pkt 1fpkt"];
756--881[label="0.0283019;3pkt 3fpkt"];
756--1313[label="0.0333333;3pkt 3fpkt"];
756--1314[label="0.0357143;1pkt 1fpkt"];
756--1351[label="0.0172414;1pkt 1fpkt"];
756--1525[label="0.0125;1pkt 1fpkt"];
756--1786[label="0.0208333;1pkt 1fpkt"];
756--1799[label="0.00793651;1pkt 1fpkt"];
756--1947[label="0.025;1pkt 1fpkt"];
756--2140[label="0.00909091;1pkt 1fpkt"];
756--2151[label="0.00961538;1pkt 1fpkt"];
756--2156[label="0.0103093;1pkt 1fpkt"];
756--2177[label="0.00714286;1pkt 1fpkt"];
756--2725[label="0.0277778;1pkt 1fpkt"];
756--2862[label="0.0326087;3pkt 3fpkt"];
756--2983[label="0.00793651;1pkt 1fpkt"];
756--2987[label="0.0103093;1pkt 1fpkt"];
756--3125[label="0.0169697;14pkt 14fpkt"];
756--3129[label="0.0157576;13pkt 13fpkt"];
756--3134[label="0.0133333;11pkt 11fpkt"];
756--3137[label="0.151515;125pkt 125fpkt"];
756--3139[label="0.0169697;14pkt 14fpkt"];
756--3141[label="0.0157576;13pkt 13fpkt"];
756--3146[label="0.0133333;11pkt 11fpkt"];
756--3149[label="0.0169697;14pkt 14fpkt"];
756--3151[label="0.0157576;13pkt 13fpkt"];
756--3156[label="0.0133333;11pkt 11fpkt"];
824--881[label="0.0283019;3pkt 3fpkt"];
824--1313[label="0.0111111;1pkt 1fpkt"];
824--1314[label="0.0357143;1pkt 1fpkt"];
824--1351[label="0.0172414;1pkt 1fpkt"];
824--1525[label="0.0125;1pkt 1fpkt"];
824--1786[label="0.0208333;1pkt 1fpkt"];
824--1799[label="0.00793651;1pkt 1fpkt"];
824--1947[label="0.025;1pkt 1fpkt"];
824--2156[label="0.0103093;1pkt 1fpkt"];
824--2517[label="1;195pkt 195fpkt"];
824--2725[label="0.0277778;1pkt 1fpkt"];
824--2862[label="0.0326087;3pkt 3fpkt"];
824--2983[label="0.00793651;1pkt 1fpkt"];
824--2987[label="0.0103093;1pkt 1fpkt"];
824--3125[label="0.0286885;7pkt 7fpkt"];
824--3129[label="0.0163934;4pkt 4fpkt"];
824--3134[label="0.0286885;7pkt 7fpkt"];
824--3137[label="0.0737705;18pkt 18fpkt"];
824--3139[label="0.0286885;7pkt 7fpkt"];
824--3141[label="0.0163934;4pkt 4fpkt"];
824--3146[label="0.0286885;7pkt 7fpkt"];
824--3149[label="0.0286885;7pkt 7fpkt"];
824--3151[label="0.0163934;4pkt 4fpkt"];
824--3156[label="0.0286885;7pkt 7fpkt"];
824--3601[label="0.991803;242pkt 242fpkt"];
881--1120[label="0.0283019;3pkt 3fpkt"];
881--1148[label="0.0283019;3pkt 3fpkt"];
881--1326[label="0.0377358;4pkt 4fpkt"];
881--1378[label="0.0943396;10pkt 10fpkt"];
881--1382[label="0.00943396;1pkt 1fpkt"];
881--1558[label="0.00943396;1pkt 1fpkt"];
881--2132[label="0.0283019;3pkt 3fpkt"];
881--2137[label="0.00943396;1pkt 1fpkt"];
881--2168[label="0.0985915;7pkt 7fpkt"];
881--2278[label="0.00943396;1pkt 1fpkt"];
881--2310[label="0.00943396;1pkt 1fpkt"];
881--2387[label="0.0471698;5pkt 5fpkt"];
881--2395[label="0.00943396;1pkt 1fpkt"];
881--2458[label="0.0471698;5pkt 5fpkt"];
881--2517[label="0.0283019;3pkt 3fpkt"];
881--2739[label="0.0188679;2pkt 2fpkt"];
881--2830[label="0.0283019;3pkt 3fpkt"];
881--2860[label="0.0188679;2pkt 2fpkt"];
881--2862[label="1;92pkt 92fpkt"];
881--2939[label="0.0188679;2pkt 2fpkt"];
881--2967[label="0.00943396;1pkt 1fpkt"];
881--3137[label="0.301887;32pkt 32fpkt"];
881--3218[label="0.0283019;3pkt 3fpkt"];
881--3264[label="0.0188679;2pkt 2fpkt"];
881--3321[label="0.0283019;3pkt 3fpkt"];
881--3363[label="0.0612245;3pkt 3fpkt"];
881--3601[label="0.0283019;3pkt 3fpkt"];
881--3799[label="0.00943396;1pkt 1fpkt"];
881--3827[label="0.0886076;7pkt 7fpkt"];
881--3892[label="0.00943396;1pkt 1fpkt"];
881--3909[label="0.0283019;3pkt 3fpkt"];
881--4108[label="0.0283019;3pkt 3fpkt"];
881--4324[label="0.00943396;1pkt 1fpkt"];
881--4374[label="0.0283019;3pkt 3fpkt"];
881--4451[label="0.0188679;2pkt 2fpkt"];
881--4473[label="0.0283019;3pkt 3fpkt"];
1378--1525[label="0.0125;1pkt 1fpkt"];
1378--1799[label="0.00793651;1pkt 1fpkt"];
1378--2140[label="0.00909091;1pkt 1fpkt"];
1378--2151[label="0.00961538;1pkt 1fpkt"];
1378--2156[label="0.0103093;1pkt 1fpkt"];
1378--2862[label="0.108696;10pkt 10fpkt"];
1378--2983[label="0.00793651;1pkt 1fpkt"];
1378--2987[label="0.0103093;1pkt 1fpkt"];
1378--3125[label="0.0504808;21pkt 21fpkt"];
1378--3129[label="0.0432692;18pkt 18fpkt"];
1378--3134[label="0.0360577;15pkt 15fpkt"];
1378--3137[label="0.0480769;20pkt 20fpkt"];
1378--3139[label="0.0504808;21pkt 21fpkt"];
1378--3141[label="0.0432692;18pkt 18fpkt"];
1378--3146[label="0.0360577;15pkt 15fpkt"];
1378--3149[label="0.0504808;21pkt 21fpkt"];
1378--3151[label="0.0432692;18pkt 18fpkt"];
1378--3156[label="0.0360577;15pkt 15fpkt"];
2132--2725[label="0.0277778;1pkt 1fpkt"];
2132--2862[label="0.0326087;3pkt 3fpkt"];
2132--3125[label="0.00900901;1pkt 1fpkt"];
2132--3129[label="0.00900901;1pkt 1fpkt"];
2132--3134[label="0.00900901;1pkt 1fpkt"];
2132--3137[label="0.045045;5pkt 5fpkt"];
2132--3139[label="0.00900901;1pkt 1fpkt"];
2132--3141[label="0.00900901;1pkt 1fpkt"];
2132--3146[label="0.00900901;1pkt 1fpkt"];
2132--3149[label="0.00900901;1pkt 1fpkt"];
2132--3151[label="0.00900901;1pkt 1fpkt"];
2132--3156[label="0.00900901;1pkt 1fpkt"];
2132--3909[label="0.990991;110pkt 110fpkt"];
2132--4374[label="0.990991;110pkt 110fpkt"];
2151--2278[label="0.00961538;1pkt 1fpkt"];
2151--2310[label="0.0192308;2pkt 2fpkt"];
2151--2328[label="0.0576923;6pkt 6fpkt"];
2151--2363[label="0.00961538;1pkt 1fpkt"];
2151--2375[label="0.00961538;1pkt 1fpkt"];
2151--2395[label="0.00961538;1pkt 1fpkt"];
2151--2454[label="0.00961538;1pkt 1fpkt"];
2151--2527[label="0.00961538;1pkt 1fpkt"];
2151--2574[label="0.00961538;1pkt 1fpkt"];
2151--2598[label="0.00961538;1pkt 1fpkt"];
2151--2653[label="0.00961538;1pkt 1fpkt"];
2151--2704[label="0.00961538;1pkt 1fpkt"];
2151--2733[label="0.00961538;1pkt 1fpkt"];
2151--2739[label="0.00961538;1pkt 1fpkt"];
2151--2748[label="0.00961538;1pkt 1fpkt"];
2151--2830[label="0.00961538;1pkt 1fpkt"];
2151--2860[label="0.00961538;1pkt 1fpkt"];
2151--2939[label="0.0192308;2pkt 2fpkt"];
2151--2962[label="0.00961538;1pkt 1fpkt"];
2151--2965[label="0.00961538;1pkt 1fpkt"];
2151--2967[label="0.00961538;1pkt 1fpkt"];
2151--3125[label="0.0288462;3pkt 3fpkt"];
2151--3137[label="0.230769;24pkt 24fpkt"];
2151--3139[label="0.0288462;3pkt 3fpkt"];
2151--3149[label="0.0288462;3pkt 3fpkt"];
2151--3218[label="0.00961538;1pkt 1fpkt"];
2151--3255[label="0.00961538;1pkt 1fpkt"];
2151--3264[label="0.00961538;1pkt 1fpkt"];
2151--3321[label="0.00961538;1pkt 1fpkt"];
2151--3617[label="0.0192308;2pkt 2fpkt"];
2151--3633[label="0.0222222;1pkt 1fpkt"];
2151--3709[label="0.00961538;1pkt 1fpkt"];
2151--3799[label="0.00961538;1pkt 1fpkt"];
2151--3892[label="0.00961538;1pkt 1fpkt"];
2151--3911[label="0.00961538;1pkt 1fpkt"];
2151--3959[label="0.00961538;1pkt 1fpkt"];
2151--4108[label="0.00961538;1pkt 1fpkt"];
2151--4324[label="0.00961538;1pkt 1fpkt"];
2151--4393[label="0.00961538;1pkt 1fpkt"];
2151--4451[label="0.00961538;1pkt 1fpkt"];
2151--4468[label="0.00961538;1pkt 1fpkt"];
2151--4473[label="0.00961538;1pkt 1fpkt"];
2151--4542[label="0.00961538;1pkt 1fpkt"];
2151--4563[label="0.0285714;1pkt 1fpkt"];
2168--2862[label="0.0985915;7pkt 7fpkt"];
2168--2983[label="0.056338;4pkt 4fpkt"];
2168--2987[label="0.0140845;1pkt 1fpkt"];
2168--3827[label="0.957746;68pkt 68fpkt"];
2387--2519[label="0.0454545;1pkt 1fpkt"];
2387--2725[label="0.0277778;1pkt 1fpkt"];
2387--2842[label="0.047619;1pkt 1fpkt"];
2387--2862[label="0.0543478;5pkt 5fpkt"];
2387--3125[label="0.0726744;25pkt 25fpkt"];
2387--3129[label="0.0116279;4pkt 4fpkt"];
2387--3134[label="0.00290698;1pkt 1fpkt"];
2387--3137[label="0.0843023;29pkt 29fpkt"];
2387--3139[label="0.0726744;25pkt 25fpkt"];
2387--3141[label="0.0116279;4pkt 4fpkt"];
2387--3146[label="0.00290698;1pkt 1fpkt"];
2387--3149[label="0.0726744;25pkt 25fpkt"];
2387--3151[label="0.0116279;4pkt 4fpkt"];
2387--3156[label="0.00290698;1pkt 1fpkt"];
2458--2862[label="0.0543478;5pkt 5fpkt"];
2458--2983[label="0.00793651;1pkt 1fpkt"];
2458--3125[label="0.0988372;51pkt 51fpkt"];
2458--3129[label="0.0329457;17pkt 17fpkt"];
2458--3134[label="0.0290698;15pkt 15fpkt"];
2458--3137[label="0.0387597;20pkt 20fpkt"];
2458--3139[label="0.0988372;51pkt 51fpkt"];
2458--3141[label="0.0329457;17pkt 17fpkt"];
2458--3146[label="0.0290698;15pkt 15fpkt"];
2458--3149[label="0.0988372;51pkt 51fpkt"];
2458--3151[label="0.0329457;17pkt 17fpkt"];
2458--3156[label="0.0290698;15pkt 15fpkt"];
2517--2725[label="0.0277778;1pkt 1fpkt"];
2517--2862[label="0.0326087;3pkt 3fpkt"];
2517--2983[label="0.00793651;1pkt 1fpkt"];
2517--2987[label="0.0103093;1pkt 1fpkt"];
2517--3125[label="0.0358974;7pkt 7fpkt"];
2517--3137[label="0.0461538;9pkt 9fpkt"];
2517--3139[label="0.0358974;7pkt 7fpkt"];
2517--3149[label="0.0358974;7pkt 7fpkt"];
2517--3601[label="0.989744;193pkt 193fpkt"];
2939--2983[label="0.015873;2pkt 2fpkt"];
2939--2987[label="0.0206186;2pkt 2fpkt"];
2939--3129[label="0.00054615;1pkt 1fpkt"];
2939--3134[label="0.00054615;1pkt 1fpkt"];
2939--3137[label="0.128345;235pkt 235fpkt"];
2939--3141[label="0.00054615;1pkt 1fpkt"];
2939--3146[label="0.00054615;1pkt 1fpkt"];
2939--3151[label="0.00054615;1pkt 1fpkt"];
2939--3156[label="0.00054615;1pkt 1fpkt"];
2983--3004[label="0.00793651;1pkt 1fpkt"];
2983--3125[label="0.0238095;3pkt 3fpkt"];
2983--3129[label="0.00793651;1pkt 1fpkt"];
2983--3134[label="0.00793651;1pkt 1fpkt"];
2983--3137[label="0.206349;26pkt 26fpkt"];
2983--3139[label="0.0238095;3pkt 3fpkt"];
2983--3141[label="0.00793651;1pkt 1fpkt"];
2983--3146[label="0.00793651;1pkt 1fpkt"];
2983--3149[label="0.0238095;3pkt 3fpkt"];
2983--3151[label="0.00793651;1pkt 1fpkt"];
2983--3156[label="0.00793651;1pkt 1fpkt"];
2983--3180[label="0.05;1pkt 1fpkt"];
2983--3218[label="0.00793651;1pkt 1fpkt"];
2983--3255[label="0.00847458;1pkt 1fpkt"];
2983--3264[label="0.00793651;1pkt 1fpkt"];
2983--3321[label="0.00793651;1pkt 1fpkt"];
2983--3601[label="0.00793651;1pkt 1fpkt"];
2983--3617[label="0.00793651;1pkt 1fpkt"];
2983--3633[label="0.0222222;1pkt 1fpkt"];
2983--3709[label="0.00793651;1pkt 1fpkt"];
2983--3768[label="0.0133333;1pkt 1fpkt"];
2983--3799[label="0.00793651;1pkt 1fpkt"];
2983--3827[label="0.0506329;4pkt 4fpkt"];
2983--3892[label="0.00793651;1pkt 1fpkt"];
2983--3911[label="0.00793651;1pkt 1fpkt"];
2983--3959[label="0.00793651;1pkt 1fpkt"];
2983--4108[label="0.00793651;1pkt 1fpkt"];
2983--4324[label="0.00793651;1pkt 1fpkt"];
2983--4393[label="0.00793651;1pkt 1fpkt"];
2983--4451[label="0.00793651;1pkt 1fpkt"];
2983--4468[label="0.00793651;1pkt 1fpkt"];
2983--4473[label="0.00793651;1pkt 1fpkt"];
2983--4542[label="0.00793651;1pkt 1fpkt"];
2987--3125[label="0.0206186;2pkt 2fpkt"];
2987--3129[label="0.0309278;3pkt 3fpkt"];
2987--3134[label="0.0309278;3pkt 3fpkt"];
2987--3137[label="0.226804;22pkt 22fpkt"];
2987--3139[label="0.0206186;2pkt 2fpkt"];
2987--3141[label="0.0309278;3pkt 3fpkt"];
2987--3146[label="0.0309278;3pkt 3fpkt"];
2987--3149[label="0.0206186;2pkt 2fpkt"];
2987--3151[label="0.0309278;3pkt 3fpkt"];
2987--3156[label="0.0309278;3pkt 3fpkt"];
2987--3218[label="0.0103093;1pkt 1fpkt"];
2987--3255[label="0.0103093;1pkt 1fpkt"];
2987--3264[label="0.0103093;1pkt 1fpkt"];
2987--3294[label="0.0104167;1pkt 1fpkt"];
2987--3321[label="0.0103093;1pkt 1fpkt"];
2987--3601[label="0.0103093;1pkt 1fpkt"];
2987--3617[label="0.0103093;1pkt 1fpkt"];
2987--3709[label="0.0103093;1pkt 1fpkt"];
2987--3768[label="0.0133333;1pkt 1fpkt"];
2987--3799[label="0.0103093;1pkt 1fpkt"];
2987--3827[label="0.0126582;1pkt 1fpkt"];
2987--3892[label="0.0103093;1pkt 1fpkt"];
2987--3911[label="0.0103093;1pkt 1fpkt"];
2987--3959[label="0.0103093;1pkt 1fpkt"];
2987--4092[label="0.0103093;1pkt 1fpkt"];
2987--4108[label="0.0103093;1pkt 1fpkt"];
2987--4324[label="0.0103093;1pkt 1fpkt"];
2987--4393[label="0.0103093;1pkt 1fpkt"];
2987--4451[label="0.0103093;1pkt 1fpkt"];
2987--4463[label="0.0103093;1pkt 1fpkt"];
2987--4468[label="0.0103093;1pkt 1fpkt"];
2987--4473[label="0.0103093;1pkt 1fpkt"];
2987--4542[label="0.0103093;1pkt 1fpkt"];
3909--4374[label="0.991228;113pkt 113fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_port="53" src_ip="135.68.16.172" src_port="1638"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1989[label="215.1.205.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
2985[label="215.1.205.68;d;1pkt 1fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3489, 215.1.205.68:9000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9000: (50%)&lt;BR/&gt; 3489: (50%)&gt;];
}
1989--2985[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.1.205.68" dst_port="9000" src_ip="193.32.176.68" src_port="3489"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
2163[label="135.69.136.178;d;23pkt 23fpkt", shape=diamond, color=yellow];
2205[label="99.91.56.179;s;14pkt 14fpkt", shape=diamond, color=yellow];
2992[label="135.69.136.178;d;23pkt 23fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.91.56.179:80, 135.69.136.178:*}[60.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63839: (2.5%)&lt;BR/&gt; 63645: (2.5%)&lt;BR/&gt; 63571: (2.5%)&lt;BR/&gt; 63541: (2.5%)&gt;];
}
2163--2205[label="1;14pkt 14fpkt"];
2163--2992[label="1;23pkt 23fpkt"];
2163--3130[label="0.0434783;1pkt 1fpkt"];
2163--3142[label="0.0434783;1pkt 1fpkt"];
2163--3152[label="0.0434783;1pkt 1fpkt"];
2205--2992[label="1;14pkt 14fpkt"];
2205--3130[label="0.0714286;1pkt 1fpkt"];
2205--3142[label="0.0714286;1pkt 1fpkt"];
2205--3152[label="0.0714286;1pkt 1fpkt"];
2992--3130[label="0.0434783;1pkt 1fpkt"];
2992--3142[label="0.0434783;1pkt 1fpkt"];
2992--3152[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.136.178" src_ip="99.91.56.179" src_port="80"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1196[label="135.69.26.194;s;159pkt 159fpkt", shape=diamond, color=yellow];
1426[label="220.130.93.112;d;150pkt 150fpkt", shape=diamond, color=yellow];
3011[label="135.69.26.194;s;159pkt 159fpkt", shape=hexagon, color=black];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.26.194:*, 220.130.93.112:80}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7863%)&lt;BR/&gt; 2236: (0.320513%)&lt;BR/&gt; 2235: (0.320513%)&lt;BR/&gt; 2234: (0.320513%)&lt;BR/&gt; 2233: (0.320513%)&gt;];
}
1196--1426[label="1;150pkt 150fpkt"];
1196--3011[label="1;159pkt 159fpkt"];
1196--3127[label="0.0754717;12pkt 12fpkt"];
1196--3138[label="0.0188679;3pkt 3fpkt"];
1426--3011[label="1;150pkt 150fpkt"];
1426--3127[label="0.0666667;10pkt 10fpkt"];
1426--3138[label="0.02;3pkt 3fpkt"];
3011--3127[label="0.0754717;12pkt 12fpkt"];
3011--3138[label="0.0188679;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="220.130.93.112" dst_port="80" src_ip="135.69.26.194"/>
    </slice>
    <from sec="1112590831" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1621[label="192.65.176.75;s;44pkt 44fpkt", shape=diamond, color=yellow];
2608[label="192.65.176.75;s;44pkt 44fpkt", shape=hexagon, color=black];
3020[label="128.28.52.0;d;124pkt 124fpkt", shape=hexagon, color=black];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 128.28.52.0:*}[56.6879%]&lt;BR/&gt;{192.65.176.75:25, *:*}[26.7516%]&lt;BR/&gt;{*:*, 128.28.52.0:113}[22.293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.8019%)&lt;BR/&gt; 113: (8.25472%)&lt;BR/&gt; 443: (0.943396%)&lt;BR/&gt; 45777: (0.707547%)&lt;BR/&gt; 45328: (0.707547%)&gt;];
}
1621--2608[label="1;44pkt 44fpkt"];
1621--3020[label="0.25;11pkt 11fpkt"];
2608--3020[label="0.25;11pkt 11fpkt"];
3020--3294[label="0.166667;16pkt 16fpkt"];
3020--3685[label="0.245455;27pkt 27fpkt"];
3020--3994[label="0.0769231;6pkt 6fpkt"];
3020--4092[label="0.164948;16pkt 16fpkt"];
3020--4463[label="0.164948;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.176.75" src_port="25"/>
      <filter dst_ip="128.28.52.0" src_port="25"/>
      <filter dst_ip="128.28.52.0" dst_port="113"/>
    </slice>
    <from sec="1112590815" usec="0"/>
    <to sec="1112591608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
2194[label="97.11.85.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
3022[label="97.11.85.179;d;1pkt 1fpkt", shape=hexagon, color=black];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.176.68:3660, 97.11.85.179:6881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 3660: (50%)&gt;];
}
2194--3022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="97.11.85.179" dst_port="6881" src_ip="193.32.176.68" src_port="3660"/>
    </slice>
    <from sec="1112591001" usec="0"/>
    <to sec="1112591605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
798[label="192.65.180.111;s;390pkt 390fpkt", shape=diamond, color=yellow];
3027[label="199.209.193.24;d;15pkt 15fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.180.111:0, *:0}[96.5347%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
798--1013[label="0.00280112;1pkt 1fpkt"];
798--1521[label="0.00361011;1pkt 1fpkt"];
798--1644[label="0.0625;1pkt 1fpkt"];
798--2036[label="0.0666667;1pkt 1fpkt"];
798--2378[label="1;390pkt 390fpkt"];
798--2695[label="0.00452489;1pkt 1fpkt"];
798--3027[label="0.0666667;1pkt 1fpkt"];
3027--3325[label="0.142857;1pkt 1fpkt"];
3027--3346[label="0.5;1pkt 1fpkt"];
3027--3605[label="0.0666667;1pkt 1fpkt"];
3027--3646[label="0.142857;1pkt 1fpkt"];
3027--3677[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.65.180.111"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1448[label="135.69.238.52;s;255pkt 255fpkt", shape=diamond, color=yellow];
1864[label="211.195.87.87;d;156pkt 156fpkt", shape=diamond, color=yellow];
3029[label="211.195.87.87;d;156pkt 156fpkt", shape=hexagon, color=black];
3373[label="135.69.238.52;311pkt 311fpkt", shape=pentagon, color=darkviolet];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.238.52:*, 211.195.87.87:80}[61.5385%]&lt;BR/&gt;{135.69.238.52:*, 210.148.141.94:80}[25.641%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34584: (0.341686%)&lt;BR/&gt; 34368: (0.341686%)&lt;BR/&gt; 34216: (0.341686%)&lt;BR/&gt; 34140: (0.341686%)&gt;];
}
1448--1864[label="1;156pkt 156fpkt"];
1448--3029[label="1;156pkt 156fpkt"];
1448--3138[label="0.0784314;20pkt 20fpkt"];
1448--3373[label="0.996078;254pkt 254fpkt"];
1864--3029[label="1;156pkt 156fpkt"];
1864--3138[label="0.0769231;12pkt 12fpkt"];
1864--3373[label="1;156pkt 156fpkt"];
3029--3138[label="0.0769231;12pkt 12fpkt"];
3029--3373[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="211.195.87.87" dst_port="80" src_ip="135.69.238.52"/>
      <filter dst_ip="210.148.141.94" dst_port="80" src_ip="135.69.238.52"/>
    </slice>
    <from sec="1112591001" usec="0"/>
    <to sec="1112591693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
431[label="192.65.189.116;s;22pkt 22fpkt", shape=diamond, color=yellow];
481[label="193.130.163.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
1902[label="19.154.197.192;d;2pkt 2fpkt", shape=diamond, color=yellow];
3039[label="19.154.197.192;d;2pkt 2fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.189.116:80, 22.114.98.180:*}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.2143%)&lt;BR/&gt; 1755: (10.7143%)&lt;BR/&gt; 43544: (5.35714%)&lt;BR/&gt; 1649: (5.35714%)&lt;BR/&gt; 1647: (5.35714%)&gt;];
}
431--481[label="1;2pkt 2fpkt"];
431--1902[label="1;2pkt 2fpkt"];
431--3039[label="1;2pkt 2fpkt"];
431--3126[label="0.0454545;1pkt 1fpkt"];
431--3130[label="0.0909091;2pkt 2fpkt"];
431--3135[label="0.0909091;2pkt 2fpkt"];
431--3140[label="0.0454545;1pkt 1fpkt"];
431--3142[label="0.0909091;2pkt 2fpkt"];
431--3147[label="0.0909091;2pkt 2fpkt"];
431--3150[label="0.0454545;1pkt 1fpkt"];
431--3152[label="0.0909091;2pkt 2fpkt"];
431--3157[label="0.0909091;2pkt 2fpkt"];
1902--3039[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="22.114.98.180" src_ip="192.65.189.116" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
675[label="211.43.125.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
3048[label="211.43.125.168;d;1pkt 1fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.161.159:37503, 211.43.125.168:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37503: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
675--3048[label="1;1pkt 1fpkt"];
675--3138[label="1;1pkt 1fpkt"];
3048--3138[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.43.125.168" dst_port="80" src_ip="193.41.161.159" src_port="37503"/>
    </slice>
    <from sec="1112591525" usec="0"/>
    <to sec="1112591620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637782,1.77986,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
2245[label="195.109.49.8;d;8pkt 8fpkt", shape=diamond, color=yellow];
3049[label="195.109.49.8;d;8pkt 8fpkt", shape=hexagon, color=black];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.202.128:*, 195.109.49.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2238: (6.25%)&lt;BR/&gt; 2163: (6.25%)&lt;BR/&gt; 2117: (6.25%)&lt;BR/&gt; 2116: (6.25%)&gt;];
}
2245--3049[label="1;8pkt 8fpkt"];
2245--3138[label="1;8pkt 8fpkt"];
3049--3138[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="195.109.49.8" dst_port="80" src_ip="135.68.202.128"/>
    </slice>
    <from sec="1112591542" usec="0"/>
    <to sec="1112591580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
1015[label="135.69.6.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.6.103:1531, 16.217.89.149:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1531: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="16.217.89.149" dst_port="554" src_ip="135.69.6.103" src_port="1531"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
2085[label="215.128.6.148;d;3pkt 3fpkt", shape=diamond, color=yellow];
2095[label="135.69.71.8;s;3pkt 3fpkt", shape=diamond, color=yellow];
3044[label="215.128.6.148;d;3pkt 3fpkt", shape=hexagon, color=black];
3192[label="135.69.71.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.227.106:*, 215.128.6.148:80}[28.5714%]&lt;BR/&gt;{135.69.71.8:*, 197.91.168.164:80}[28.5714%]&lt;BR/&gt;{135.69.71.8:*, 205.22.109.38:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 1037: (14.2857%)&lt;BR/&gt; 3746: (7.14286%)&lt;BR/&gt; 3744: (7.14286%)&lt;BR/&gt; 1036: (7.14286%)&gt;];
}
2085--2095[label="0.333333;1pkt 1fpkt"];
2085--3044[label="1;3pkt 3fpkt"];
2085--3138[label="0.333333;1pkt 1fpkt"];
2085--3192[label="0.333333;1pkt 1fpkt"];
2095--3044[label="0.333333;1pkt 1fpkt"];
2095--3138[label="0.666667;2pkt 2fpkt"];
2095--3192[label="1;3pkt 3fpkt"];
3044--3138[label="0.333333;1pkt 1fpkt"];
3044--3192[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.22.109.38" src_ip="135.69.71.8"/>
      <filter dst_ip="197.91.168.164" dst_port="80" src_ip="135.69.71.8"/>
      <filter dst_ip="215.128.6.148" dst_port="80" src_ip="135.69.227.106"/>
    </slice>
    <from sec="1112591294" usec="0"/>
    <to sec="1112591559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533519,1.83185,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1048[label="193.148.131.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.148.113:6919, 193.148.131.3:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 6919: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="193.148.131.3" dst_port="8000" src_ip="135.69.148.113" src_port="6919"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.141.87.4"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112590874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
1058[label="135.69.40.235;d;118pkt 118fpkt", shape=diamond, color=yellow];
3185[label="215.90.40.6;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4043[label="215.90.40.6;9pkt 9fpkt", shape=invtriangle, color=brown];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 135.69.40.235:25}[91.5254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2701%)&lt;BR/&gt; 3677: (1.45985%)&lt;BR/&gt; 3680: (1.09489%)&lt;BR/&gt; 3679: (1.09489%)&lt;BR/&gt; 3678: (1.09489%)&gt;];
}
1058--3185[label="1;10pkt 10fpkt"];
1058--4043[label="1;9pkt 9fpkt"];
3185--4043[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.40.235" dst_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
258[label="129.52.0.102;d;2520pkt 2520fpkt", shape=diamond, color=yellow];
3198[label="99.9.76.9;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.52.0.102:52187}[99.127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52187: (49.5669%)&lt;BR/&gt; 54045: (0.255906%)&lt;BR/&gt; 0: (0.23622%)&lt;BR/&gt; 443: (0.177165%)&lt;BR/&gt; 80: (0.177165%)&gt;];
}
258--3138[label="0.000396825;1pkt 1fpkt"];
258--3198[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="129.52.0.102" dst_port="52187"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.44.84.9"/>
    </slice>
    <from sec="1112591458" usec="0"/>
    <to sec="1112591689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.68.118.10"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.199.106.12"/>
    </slice>
    <from sec="1112590813" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.220.31.13"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.90.74.13"/>
    </slice>
    <from sec="1112590962" usec="0"/>
    <to sec="1112591105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1164[label="211.180.17.130;d;352pkt 352fpkt", shape=diamond, color=yellow];
3159[label="135.68.8.0;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3172[label="193.32.160.3;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3226[label="129.141.142.16;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3234[label="135.68.121.17;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3358[label="162.94.17.49;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3812[label="129.141.167.181;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4128[label="162.94.17.49;58pkt 58fpkt", shape=invtriangle, color=brown];
4481[label="162.94.17.49;59pkt 59fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.180.17.130:80}[81.153%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7778%)&lt;BR/&gt; 1511: (0.444444%)&lt;BR/&gt; 1523: (0.37037%)&lt;BR/&gt; 1509: (0.37037%)&lt;BR/&gt; 1507: (0.37037%)&gt;];
}
1164--1541[label="0.0413223;5pkt 5fpkt"];
1164--1813[label="0.0496894;8pkt 8fpkt"];
1164--1836[label="0.0294118;6pkt 6fpkt"];
1164--2256[label="0.00568182;2pkt 2fpkt"];
1164--2257[label="0.0170455;6pkt 6fpkt"];
1164--2303[label="0.0397727;14pkt 14fpkt"];
1164--2545[label="0.00852273;3pkt 3fpkt"];
1164--2552[label="0.00568182;2pkt 2fpkt"];
1164--2587[label="0.0307692;2pkt 2fpkt"];
1164--2714[label="0.0746269;5pkt 5fpkt"];
1164--2759[label="0.038961;6pkt 6fpkt"];
1164--2911[label="0.0369318;13pkt 13fpkt"];
1164--3067[label="0.00568182;2pkt 2fpkt"];
1164--3070[label="0.0170455;6pkt 6fpkt"];
1164--3127[label="0.0397727;14pkt 14fpkt"];
1164--3138[label="0.0284091;10pkt 10fpkt"];
1164--3159[label="0.5;14pkt 14fpkt"];
1164--3172[label="0.84;21pkt 21fpkt"];
1164--3226[label="0.565217;13pkt 13fpkt"];
1164--3234[label="0.456522;21pkt 21fpkt"];
1164--3358[label="0.310345;18pkt 18fpkt"];
1164--3812[label="0.807692;21pkt 21fpkt"];
1164--3963[label="0.00568182;2pkt 2fpkt"];
1164--3968[label="0.0170455;6pkt 6fpkt"];
1164--4026[label="0.482759;14pkt 14fpkt"];
1164--4032[label="0.0780669;21pkt 21fpkt"];
1164--4128[label="0.310345;18pkt 18fpkt"];
1164--4395[label="0.00568182;2pkt 2fpkt"];
1164--4433[label="0.0780669;21pkt 21fpkt"];
1164--4481[label="0.305085;18pkt 18fpkt"];
1164--4597[label="0.0170455;6pkt 6fpkt"];
3159--4026[label="1;28pkt 28fpkt"];
3358--4128[label="1;58pkt 58fpkt"];
3358--4481[label="1;58pkt 58fpkt"];
4128--4481[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="211.180.17.130" dst_port="80"/>
    </slice>
    <from sec="1112590807" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.77.160.16"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.253.222.16"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.77.92.17"/>
    </slice>
    <from sec="1112590819" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.192.6.20"/>
    </slice>
    <from sec="1112591226" usec="0"/>
    <to sec="1112591615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.65.185.20"/>
    </slice>
    <from sec="1112590840" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
425[label="18.18.33.179;d;67pkt 67fpkt", shape=diamond, color=yellow];
615[label="167.172.13.32;s;55pkt 55fpkt", shape=diamond, color=yellow];
919[label="167.172.108.90;s;87pkt 87fpkt", shape=diamond, color=yellow];
1040[label="167.172.13.47;s;144pkt 144fpkt", shape=diamond, color=yellow];
1317[label="203.80.198.145;d;3pkt 3fpkt", shape=diamond, color=yellow];
1536[label="167.172.29.197;s;18pkt 18fpkt", shape=diamond, color=yellow];
1804[label="18.18.33.186;d;24pkt 24fpkt", shape=diamond, color=yellow];
1931[label="18.18.33.188;d;36pkt 36fpkt", shape=diamond, color=yellow];
1943[label="18.18.33.184;d;30pkt 30fpkt", shape=diamond, color=yellow];
2022[label="18.18.33.191;d;34pkt 34fpkt", shape=diamond, color=yellow];
2170[label="167.172.40.36;s;41pkt 41fpkt", shape=diamond, color=yellow];
2453[label="167.172.13.47;s;144pkt 144fpkt", shape=hexagon, color=black];
2931[label="18.18.33.184;d;30pkt 30fpkt", shape=hexagon, color=black];
2944[label="18.18.33.179;d;67pkt 67fpkt", shape=hexagon, color=black];
3253[label="167.172.36.22;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3349[label="167.172.13.47;151pkt 151fpkt", shape=pentagon, color=darkviolet];
3431[label="167.172.9.74;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3464[label="167.172.40.85;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3522[label="167.172.23.101;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3840[label="167.172.8.192;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4071[label="167.172.36.22;20pkt 20fpkt", shape=invtriangle, color=brown];
4162[label="167.172.9.74;53pkt 53fpkt", shape=invtriangle, color=brown];
4448[label="167.172.36.22;21pkt 21fpkt", shape=invhouse, color=bisque];
4495[label="167.172.9.74;54pkt 54fpkt", shape=invhouse, color=bisque];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.172.13.47:25, *:*}[25.2874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.1411%)&lt;BR/&gt; 53: (2.40664%)&lt;BR/&gt; 80: (1.49378%)&lt;BR/&gt; 33701: (0.871369%)&lt;BR/&gt; 113: (0.290456%)&gt;];
}
425--615[label="0.0363636;2pkt 2fpkt"];
425--919[label="0.0746269;5pkt 5fpkt"];
425--1368[label="0.0298507;2pkt 2fpkt"];
425--1536[label="0.0555556;1pkt 1fpkt"];
425--2170[label="0.0243902;1pkt 1fpkt"];
425--2839[label="0.04;2pkt 2fpkt"];
425--2944[label="1;67pkt 67fpkt"];
425--3253[label="0.047619;1pkt 1fpkt"];
425--3431[label="0.0377358;2pkt 2fpkt"];
425--3522[label="0.166667;2pkt 2fpkt"];
425--3840[label="0.0322581;1pkt 1fpkt"];
425--4071[label="0.05;1pkt 1fpkt"];
425--4162[label="0.0377358;2pkt 2fpkt"];
425--4448[label="0.047619;1pkt 1fpkt"];
425--4495[label="0.037037;2pkt 2fpkt"];
615--677[label="0.025;1pkt 1fpkt"];
615--1089[label="0.0454545;1pkt 1fpkt"];
615--1497[label="0.0212766;1pkt 1fpkt"];
615--1804[label="0.0833333;2pkt 2fpkt"];
615--1931[label="0.0277778;1pkt 1fpkt"];
615--1943[label="0.0666667;2pkt 2fpkt"];
615--2022[label="0.0588235;2pkt 2fpkt"];
615--2519[label="0.0454545;1pkt 1fpkt"];
615--2839[label="0.98;49pkt 49fpkt"];
615--2931[label="0.0666667;2pkt 2fpkt"];
615--2944[label="0.0363636;2pkt 2fpkt"];
919--1039[label="0.0229885;2pkt 2fpkt"];
919--1804[label="0.0833333;2pkt 2fpkt"];
919--1931[label="0.0833333;3pkt 3fpkt"];
919--1943[label="0.133333;4pkt 4fpkt"];
919--2022[label="0.176471;6pkt 6fpkt"];
919--2929[label="0.0229885;2pkt 2fpkt"];
919--2931[label="0.133333;4pkt 4fpkt"];
919--2944[label="0.0746269;5pkt 5fpkt"];
1040--1317[label="0.333333;1pkt 1fpkt"];
1040--1931[label="0.0277778;1pkt 1fpkt"];
1040--1943[label="0.0666667;2pkt 2fpkt"];
1040--2453[label="1;144pkt 144fpkt"];
1040--2931[label="0.0666667;2pkt 2fpkt"];
1040--3349[label="0.979167;141pkt 141fpkt"];
1317--2453[label="0.333333;1pkt 1fpkt"];
1317--2571[label="1;2pkt 2fpkt"];
1317--3349[label="0.333333;1pkt 1fpkt"];
1536--1804[label="0.0555556;1pkt 1fpkt"];
1536--1931[label="0.111111;2pkt 2fpkt"];
1536--2022[label="0.0555556;1pkt 1fpkt"];
1536--2944[label="0.0555556;1pkt 1fpkt"];
1804--2170[label="0.0833333;2pkt 2fpkt"];
1804--2839[label="0.0416667;1pkt 1fpkt"];
1804--3253[label="0.047619;1pkt 1fpkt"];
1804--3464[label="0.111111;1pkt 1fpkt"];
1804--3840[label="0.0416667;1pkt 1fpkt"];
1804--4071[label="0.05;1pkt 1fpkt"];
1804--4448[label="0.047619;1pkt 1fpkt"];
1931--1932[label="0.0555556;2pkt 2fpkt"];
1931--2170[label="0.0555556;2pkt 2fpkt"];
1931--2453[label="0.0277778;1pkt 1fpkt"];
1931--2839[label="0.0277778;1pkt 1fpkt"];
1931--3253[label="0.190476;4pkt 4fpkt"];
1931--3349[label="0.0277778;1pkt 1fpkt"];
1931--3431[label="0.0277778;1pkt 1fpkt"];
1931--4071[label="0.2;4pkt 4fpkt"];
1931--4162[label="0.0277778;1pkt 1fpkt"];
1931--4448[label="0.190476;4pkt 4fpkt"];
1931--4495[label="0.0277778;1pkt 1fpkt"];
1943--2170[label="0.1;3pkt 3fpkt"];
1943--2453[label="0.0666667;2pkt 2fpkt"];
1943--2839[label="0.0666667;2pkt 2fpkt"];
1943--2909[label="0.0333333;1pkt 1fpkt"];
1943--2931[label="1;30pkt 30fpkt"];
1943--3253[label="0.0952381;2pkt 2fpkt"];
1943--3349[label="0.0666667;2pkt 2fpkt"];
1943--3431[label="0.0333333;1pkt 1fpkt"];
1943--3464[label="0.111111;1pkt 1fpkt"];
1943--4071[label="0.1;2pkt 2fpkt"];
1943--4162[label="0.0333333;1pkt 1fpkt"];
1943--4448[label="0.0952381;2pkt 2fpkt"];
1943--4495[label="0.0333333;1pkt 1fpkt"];
2022--2839[label="0.0588235;2pkt 2fpkt"];
2022--3253[label="0.0952381;2pkt 2fpkt"];
2022--3431[label="0.0294118;1pkt 1fpkt"];
2022--4071[label="0.1;2pkt 2fpkt"];
2022--4162[label="0.0294118;1pkt 1fpkt"];
2022--4448[label="0.0952381;2pkt 2fpkt"];
2022--4495[label="0.0294118;1pkt 1fpkt"];
2170--2929[label="0.0731707;3pkt 3fpkt"];
2170--2931[label="0.1;3pkt 3fpkt"];
2170--2944[label="0.0243902;1pkt 1fpkt"];
2170--3126[label="0.0243902;1pkt 1fpkt"];
2170--3140[label="0.0243902;1pkt 1fpkt"];
2170--3150[label="0.0243902;1pkt 1fpkt"];
2453--2931[label="0.0666667;2pkt 2fpkt"];
2453--3349[label="0.979167;141pkt 141fpkt"];
2931--3253[label="0.0952381;2pkt 2fpkt"];
2931--3349[label="0.0666667;2pkt 2fpkt"];
2931--3431[label="0.0333333;1pkt 1fpkt"];
2931--3464[label="0.111111;1pkt 1fpkt"];
2931--4071[label="0.1;2pkt 2fpkt"];
2931--4162[label="0.0333333;1pkt 1fpkt"];
2931--4448[label="0.0952381;2pkt 2fpkt"];
2931--4495[label="0.0333333;1pkt 1fpkt"];
2944--3253[label="0.047619;1pkt 1fpkt"];
2944--3431[label="0.0377358;2pkt 2fpkt"];
2944--3522[label="0.166667;2pkt 2fpkt"];
2944--3840[label="0.0322581;1pkt 1fpkt"];
2944--4071[label="0.05;1pkt 1fpkt"];
2944--4162[label="0.0377358;2pkt 2fpkt"];
2944--4448[label="0.047619;1pkt 1fpkt"];
2944--4495[label="0.037037;2pkt 2fpkt"];
3253--4071[label="1;20pkt 20fpkt"];
3253--4448[label="1;21pkt 21fpkt"];
3431--4162[label="1;53pkt 53fpkt"];
3431--4495[label="1;53pkt 53fpkt"];
4071--4448[label="1;20pkt 20fpkt"];
4162--4495[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="167.172.13.47" src_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.44.50.22"/>
    </slice>
    <from sec="1112590860" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.65.188.23"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.133.13.24"/>
    </slice>
    <from sec="1112591222" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.32.57.24"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
503[label="135.69.80.24;s;57pkt 57fpkt", shape=diamond, color=yellow];
3263[label="135.69.80.24;61pkt 61fpkt", shape=pentagon, color=darkviolet];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.80.24:5485, *:*}[49.1803%]&lt;BR/&gt;{135.69.80.24:6668, 18.117.70.87:*}[44.2623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5485: (25%)&lt;BR/&gt; 6668: (21.6102%)&lt;BR/&gt; 6527: (1.69492%)&lt;BR/&gt; 60298: (0.847458%)&lt;BR/&gt; 20031: (0.847458%)&gt;];
}
503--882[label="0.0175439;1pkt 1fpkt"];
503--1274[label="0.333333;1pkt 1fpkt"];
503--1362[label="1;1pkt 1fpkt"];
503--1502[label="1;1pkt 1fpkt"];
503--3263[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="135.69.80.24" src_port="5485"/>
      <filter dst_ip="18.117.70.87" src_ip="135.69.80.24" src_port="6668"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.190.185.27"/>
    </slice>
    <from sec="1112591008" usec="0"/>
    <to sec="1112591172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.68.117.28"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.219.219.28"/>
    </slice>
    <from sec="1112591651" usec="0"/>
    <to sec="1112591687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.69.154.31"/>
    </slice>
    <from sec="1112591296" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.94.169.33"/>
    </slice>
    <from sec="1112590818" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
388[label="192.65.176.9;s;3096pkt 3096fpkt", shape=diamond, color=yellow];
1446[label="128.28.52.0;d;124pkt 124fpkt", shape=diamond, color=yellow];
1981[label="192.65.180.146;s;103pkt 103fpkt", shape=diamond, color=yellow];
3294[label="192.65.188.34;96pkt 96fpkt", shape=pentagon, color=darkviolet];
3685[label="192.65.180.146;110pkt 110fpkt", shape=pentagon, color=darkviolet];
4092[label="192.65.188.34;97pkt 97fpkt", shape=invtriangle, color=brown];
4463[label="192.65.188.34;97pkt 97fpkt", shape=invhouse, color=bisque];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.176.9:44556, *:53}[45.6956%]&lt;BR/&gt;{192.65.176.9:53, 198.36.98.42:*}[44.3253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.8418%)&lt;BR/&gt; 44556: (20.6017%)&lt;BR/&gt; 25: (3.61268%)&lt;BR/&gt; 113: (2.52485%)&lt;BR/&gt; 4913: (1.82648%)&gt;];
}
388--1313[label="0.0111111;1pkt 1fpkt"];
388--1315[label="1;1437pkt 1437fpkt"];
388--1446[label="0.225806;28pkt 28fpkt"];
388--1525[label="0.0125;1pkt 1fpkt"];
388--1799[label="0.00793651;1pkt 1fpkt"];
388--2140[label="0.00909091;1pkt 1fpkt"];
388--2151[label="0.00961538;1pkt 1fpkt"];
388--2156[label="0.0103093;1pkt 1fpkt"];
388--2983[label="0.00793651;1pkt 1fpkt"];
388--2987[label="0.0103093;1pkt 1fpkt"];
388--3020[label="0.225806;28pkt 28fpkt"];
388--3125[label="0.0968992;300pkt 300fpkt"];
388--3129[label="0.0352067;109pkt 109fpkt"];
388--3134[label="0.0319767;99pkt 99fpkt"];
388--3137[label="0.0281008;87pkt 87fpkt"];
388--3139[label="0.0968992;300pkt 300fpkt"];
388--3141[label="0.0352067;109pkt 109fpkt"];
388--3146[label="0.0319767;99pkt 99fpkt"];
388--3149[label="0.0968992;300pkt 300fpkt"];
388--3151[label="0.0352067;109pkt 109fpkt"];
388--3156[label="0.0319767;99pkt 99fpkt"];
1446--1621[label="0.25;11pkt 11fpkt"];
1446--1803[label="0.084507;6pkt 6fpkt"];
1446--1981[label="0.262136;27pkt 27fpkt"];
1446--2608[label="0.25;11pkt 11fpkt"];
1446--3020[label="1;124pkt 124fpkt"];
1446--3294[label="0.166667;16pkt 16fpkt"];
1446--3685[label="0.245455;27pkt 27fpkt"];
1446--3994[label="0.0769231;6pkt 6fpkt"];
1446--4092[label="0.164948;16pkt 16fpkt"];
1446--4463[label="0.164948;16pkt 16fpkt"];
1981--3020[label="0.262136;27pkt 27fpkt"];
1981--3685[label="0.990291;102pkt 102fpkt"];
3294--4092[label="1;96pkt 96fpkt"];
3294--4463[label="1;96pkt 96fpkt"];
4092--4463[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="198.36.98.42" src_ip="192.65.176.9" src_port="53"/>
      <filter dst_port="53" src_ip="192.65.176.9" src_port="44556"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.199.21.36"/>
    </slice>
    <from sec="1112591444" usec="0"/>
    <to sec="1112591482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93968,1.78384,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
48[label="217.25.178.38s;84pkt 84fpkt", shape=rectangle, color=red];
3316[label="217.25.178.38;180pkt 180fpkt", shape=pentagon, color=darkviolet];
4104[label="217.25.178.38;181pkt 181fpkt", shape=invtriangle, color=brown];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.25.178.38:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
48--3316[label="0.988095;83pkt 83fpkt"];
48--4104[label="1;84pkt 84fpkt"];
3316--4104[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.25.178.38" src_port="1028"/>
    </slice>
    <from sec="1112591596" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826342,1.79278,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
310[label="208.151.77.90;d;3pkt 3fpkt", shape=diamond, color=yellow];
758[label="135.68.102.39;s;20pkt 20fpkt", shape=diamond, color=yellow];
3319[label="135.68.102.39;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4472[label="135.68.102.39;19pkt 19fpkt", shape=invhouse, color=bisque];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.102.39:*, 135.81.232.12:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5806%)&lt;BR/&gt; 2639: (3.22581%)&lt;BR/&gt; 2612: (3.22581%)&lt;BR/&gt; 2844: (2.41935%)&lt;BR/&gt; 2843: (2.41935%)&gt;];
}
310--758[label="1;3pkt 3fpkt"];
310--3127[label="1;3pkt 3fpkt"];
310--3138[label="1;3pkt 3fpkt"];
310--3319[label="1;3pkt 3fpkt"];
310--4472[label="0.666667;2pkt 2fpkt"];
758--3127[label="0.15;3pkt 3fpkt"];
758--3138[label="0.15;3pkt 3fpkt"];
758--3319[label="1;20pkt 20fpkt"];
758--4472[label="1;19pkt 19fpkt"];
3319--4472[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="135.81.232.12" dst_port="80" src_ip="135.68.102.39"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.69.65.41"/>
    </slice>
    <from sec="1112590811" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
832[label="135.69.22.210;d;158pkt 158fpkt", shape=diamond, color=yellow];
1691[label="99.84.21.55;s;15pkt 15fpkt", shape=diamond, color=yellow];
2710[label="135.69.22.210;d;158pkt 158fpkt", shape=hexagon, color=black];
3338[label="209.193.220.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3581[label="209.214.177.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4117[label="209.193.220.44;2pkt 2fpkt", shape=invtriangle, color=brown];
4478[label="209.193.220.44;2pkt 2fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.76.88.236:80, 135.69.22.210:*}[21.3018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4636: (0.737463%)&lt;BR/&gt; 4621: (0.737463%)&lt;BR/&gt; 4633: (0.442478%)&lt;BR/&gt; 4626: (0.442478%)&gt;];
}
832--1552[label="0.0526316;4pkt 4fpkt"];
832--1691[label="0.266667;4pkt 4fpkt"];
832--2710[label="1;158pkt 158fpkt"];
832--3338[label="1;2pkt 2fpkt"];
832--3479[label="0.0740741;2pkt 2fpkt"];
832--3497[label="0.05;4pkt 4fpkt"];
832--3581[label="1;2pkt 2fpkt"];
832--4117[label="1;2pkt 2fpkt"];
832--4478[label="1;2pkt 2fpkt"];
1691--2710[label="0.266667;4pkt 4fpkt"];
2710--3338[label="1;2pkt 2fpkt"];
2710--3479[label="0.0740741;2pkt 2fpkt"];
2710--3497[label="0.05;4pkt 4fpkt"];
2710--3581[label="1;2pkt 2fpkt"];
2710--4117[label="1;2pkt 2fpkt"];
2710--4478[label="1;2pkt 2fpkt"];
3338--4117[label="1;2pkt 2fpkt"];
3338--4478[label="1;2pkt 2fpkt"];
4117--4478[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.22.210" src_ip="99.76.88.236" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.68.210.46"/>
    </slice>
    <from sec="1112591212" usec="0"/>
    <to sec="1112591232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.215.117.47"/>
    </slice>
    <from sec="1112591295" usec="0"/>
    <to sec="1112591316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.47.4.48"/>
    </slice>
    <from sec="1112591611" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
306[label="144.126.43.86;d;109pkt 109fpkt", shape=diamond, color=yellow];
3276[label="209.53.7.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4080[label="209.53.7.29;1pkt 1fpkt", shape=invtriangle, color=brown];
4151[label="216.95.108.66;1pkt 1fpkt", shape=invtriangle, color=brown];
4455[label="209.53.7.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6868, 144.126.43.86:6899}[44.9541%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6899: (30.531%)&lt;BR/&gt; 6868: (22.1239%)&lt;BR/&gt; 0: (15.0442%)&lt;BR/&gt; 9000: (8.84956%)&lt;BR/&gt; 1257: (0.884956%)&gt;];
}
306--476[label="0.00917431;1pkt 1fpkt"];
306--2301[label="0.00917431;1pkt 1fpkt"];
306--3124[label="0.00917431;1pkt 1fpkt"];
306--3126[label="0.00917431;1pkt 1fpkt"];
306--3130[label="0.00917431;1pkt 1fpkt"];
306--3135[label="0.00917431;1pkt 1fpkt"];
306--3140[label="0.00917431;1pkt 1fpkt"];
306--3142[label="0.00917431;1pkt 1fpkt"];
306--3147[label="0.00917431;1pkt 1fpkt"];
306--3150[label="0.00917431;1pkt 1fpkt"];
306--3152[label="0.00917431;1pkt 1fpkt"];
306--3157[label="0.00917431;1pkt 1fpkt"];
306--3276[label="1;1pkt 1fpkt"];
306--3361[label="1;1pkt 1fpkt"];
306--4080[label="1;1pkt 1fpkt"];
306--4130[label="1;1pkt 1fpkt"];
306--4151[label="1;1pkt 1fpkt"];
306--4455[label="1;1pkt 1fpkt"];
3276--4080[label="1;1pkt 1fpkt"];
3276--4455[label="1;1pkt 1fpkt"];
4080--4455[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.43.86" dst_port="6899" src_port="6868"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.139.128.51"/>
    </slice>
    <from sec="1112591241" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.38.53"/>
    </slice>
    <from sec="1112590810" usec="0"/>
    <to sec="1112591677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.47.160.53"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.85.74.54"/>
    </slice>
    <from sec="1112591150" usec="0"/>
    <to sec="1112591696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.2.69.59"/>
    </slice>
    <from sec="1112591309" usec="0"/>
    <to sec="1112591638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.45.160.62"/>
    </slice>
    <from sec="1112590835" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
3400[label="209.229.33.64;209pkt 209fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.229.33.64:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="209.229.33.64" src_port="1030"/>
    </slice>
    <from sec="1112591493" usec="0"/>
    <to sec="1112591549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.140.53.64"/>
    </slice>
    <from sec="1112591619" usec="0"/>
    <to sec="1112591620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.69.90.64"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.223.81.66"/>
    </slice>
    <from sec="1112590863" usec="0"/>
    <to sec="1112590929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.95.108.66"/>
    </slice>
    <from sec="1112590808" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
1818[label="162.94.202.30;d;38pkt 38fpkt", shape=diamond, color=yellow];
2050[label="16.253.195.94;s;6pkt 6fpkt", shape=diamond, color=yellow];
2890[label="16.253.195.94;s;6pkt 6fpkt", shape=hexagon, color=black];
3411[label="16.253.220.67;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 162.94.202.30:*}[74%]&lt;BR/&gt;{16.253.220.67:25, *:*}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4127%)&lt;BR/&gt; 38135: (2.38095%)&lt;BR/&gt; 38038: (2.38095%)&lt;BR/&gt; 38036: (2.38095%)&lt;BR/&gt; 37847: (2.38095%)&gt;];
}
1818--2050[label="0.666667;4pkt 4fpkt"];
1818--2890[label="0.666667;4pkt 4fpkt"];
1818--3411[label="0.230769;3pkt 3fpkt"];
1818--3487[label="0.0769231;1pkt 1fpkt"];
2050--2890[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="16.253.220.67" src_port="25"/>
      <filter dst_ip="162.94.202.30" src_port="25"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.223.0.68"/>
    </slice>
    <from sec="1112591540" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.1.205.68"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1202[label="135.69.50.169;d;242pkt 242fpkt", shape=diamond, color=yellow];
1255[label="217.234.131.199;s;162pkt 162fpkt", shape=diamond, color=yellow];
3844[label="217.234.131.193;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3863[label="217.234.131.199;165pkt 165fpkt", shape=pentagon, color=darkviolet];
3876[label="217.234.131.204;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4344[label="217.234.131.193;10pkt 10fpkt", shape=invtriangle, color=brown];
4355[label="217.234.131.199;164pkt 164fpkt", shape=invtriangle, color=brown];
4362[label="217.234.131.204;21pkt 21fpkt", shape=invtriangle, color=brown];
4582[label="217.234.131.204;22pkt 22fpkt", shape=invhouse, color=bisque];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.234.131.199:80, 135.69.50.169:*}[67.3554%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.511%)&lt;BR/&gt; 9003: (0.488998%)&lt;BR/&gt; 2962: (0.244499%)&lt;BR/&gt; 2957: (0.244499%)&lt;BR/&gt; 2955: (0.244499%)&gt;];
}
1202--1255[label="1;162pkt 162fpkt"];
1202--3419[label="0.5;2pkt 2fpkt"];
1202--3500[label="0.0833333;2pkt 2fpkt"];
1202--3844[label="1;10pkt 10fpkt"];
1202--3863[label="1;165pkt 165fpkt"];
1202--3876[label="1;22pkt 22fpkt"];
1202--4157[label="0.4;2pkt 2fpkt"];
1202--4344[label="1;10pkt 10fpkt"];
1202--4355[label="1;164pkt 164fpkt"];
1202--4362[label="1;21pkt 21fpkt"];
1202--4582[label="1;22pkt 22fpkt"];
1255--3863[label="1;162pkt 162fpkt"];
1255--4355[label="0.993827;161pkt 161fpkt"];
3844--4344[label="1;10pkt 10fpkt"];
3863--4355[label="1;164pkt 164fpkt"];
3876--4362[label="1;21pkt 21fpkt"];
3876--4582[label="1;22pkt 22fpkt"];
4362--4582[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.50.169" src_ip="217.234.131.199" src_port="80"/>
    </slice>
    <from sec="1112590847" usec="0"/>
    <to sec="1112591307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.132.130.71"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.185.191.71"/>
    </slice>
    <from sec="1112590829" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.86.102.73"/>
    </slice>
    <from sec="1112590889" usec="0"/>
    <to sec="1112590893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.208.175.74"/>
    </slice>
    <from sec="1112591040" usec="0"/>
    <to sec="1112591411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.25.1.75"/>
    </slice>
    <from sec="1112591141" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.128.234.75"/>
    </slice>
    <from sec="1112590879" usec="0"/>
    <to sec="1112591595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
3439[label="209.25.66.76;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.25.66.76:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4712: (1.25%)&lt;BR/&gt; 3910: (1.25%)&lt;BR/&gt; 3825: (1.25%)&lt;BR/&gt; 3248: (1.25%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="209.25.66.76"/>
    </slice>
    <from sec="1112590807" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.20.33.77"/>
    </slice>
    <from sec="1112591055" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.38.76.78"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.183.158.79"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.160.160.80"/>
    </slice>
    <from sec="1112590934" usec="0"/>
    <to sec="1112591661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.10.21.82"/>
    </slice>
    <from sec="1112590806" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.114.72.87"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.94.16.88"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.25.8.89"/>
    </slice>
    <from sec="1112591436" usec="0"/>
    <to sec="1112591508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.25.168.92"/>
    </slice>
    <from sec="1112591347" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.4.94"/>
    </slice>
    <from sec="1112590851" usec="0"/>
    <to sec="1112591695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.198.155.97"/>
    </slice>
    <from sec="1112591188" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.130.60.103"/>
    </slice>
    <from sec="1112591232" usec="0"/>
    <to sec="1112591251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.114.174.103"/>
    </slice>
    <from sec="1112591352" usec="0"/>
    <to sec="1112591382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.193.38.104"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
1662[label="117.198.177.112;d;71pkt 71fpkt", shape=diamond, color=yellow];
2076[label="135.68.86.104;s;155pkt 155fpkt", shape=diamond, color=yellow];
2098[label="18.34.128.40;d;5pkt 5fpkt", shape=diamond, color=yellow];
3533[label="135.68.86.104;154pkt 154fpkt", shape=pentagon, color=darkviolet];
4200[label="135.68.86.104;154pkt 154fpkt", shape=invtriangle, color=brown];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 117.198.177.112:80}[36.0406%]&lt;BR/&gt;{135.68.86.104:*, 18.216.255.36:80}[24.8731%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2808: (0.371058%)&lt;BR/&gt; 2807: (0.371058%)&lt;BR/&gt; 2803: (0.371058%)&lt;BR/&gt; 2792: (0.371058%)&gt;];
}
1662--2076[label="0.408451;29pkt 29fpkt"];
1662--2342[label="0.0985915;7pkt 7fpkt"];
1662--2609[label="0.0704225;5pkt 5fpkt"];
1662--2667[label="0.197183;14pkt 14fpkt"];
1662--3127[label="0.028169;2pkt 2fpkt"];
1662--3205[label="0.197183;14pkt 14fpkt"];
1662--3379[label="0.75;9pkt 9fpkt"];
1662--3533[label="0.408451;29pkt 29fpkt"];
1662--4052[label="0.197183;14pkt 14fpkt"];
1662--4200[label="0.408451;29pkt 29fpkt"];
2076--2098[label="1;5pkt 5fpkt"];
2076--3138[label="0.0903226;14pkt 14fpkt"];
2076--3533[label="1;154pkt 154fpkt"];
2076--4200[label="1;154pkt 154fpkt"];
2098--3138[label="0.4;2pkt 2fpkt"];
2098--3533[label="1;5pkt 5fpkt"];
2098--4200[label="1;5pkt 5fpkt"];
3533--4200[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="117.198.177.112" dst_port="80"/>
      <filter dst_ip="18.216.255.36" dst_port="80" src_ip="135.68.86.104"/>
    </slice>
    <from sec="1112591065" usec="0"/>
    <to sec="1112591675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.2.87.104"/>
    </slice>
    <from sec="1112590843" usec="0"/>
    <to sec="1112590910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.101.232.106"/>
    </slice>
    <from sec="1112590823" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.14.209.108"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.33.45.109"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.54.22.111"/>
    </slice>
    <from sec="1112590851" usec="0"/>
    <to sec="1112591692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.244.150.111"/>
    </slice>
    <from sec="1112591453" usec="0"/>
    <to sec="1112591513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.55.66.114"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.139.129.114"/>
    </slice>
    <from sec="1112591411" usec="0"/>
    <to sec="1112591438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.192.217.116"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112590884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.1.54.119"/>
    </slice>
    <from sec="1112590885" usec="0"/>
    <to sec="1112591684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.68.25.122"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.235.161.122"/>
    </slice>
    <from sec="1112590834" usec="0"/>
    <to sec="1112591692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.247.16.126"/>
    </slice>
    <from sec="1112590808" usec="0"/>
    <to sec="1112591687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.6.244.127"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112590829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.10.128"/>
    </slice>
    <from sec="1112590813" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.75.162.129"/>
    </slice>
    <from sec="1112591130" usec="0"/>
    <to sec="1112591330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.41.161.131"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
3616[label="22.145.219.132;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.145.219.132:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 64091: (0.520833%)&lt;BR/&gt; 64056: (0.520833%)&lt;BR/&gt; 64045: (0.520833%)&lt;BR/&gt; 64004: (0.520833%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="22.145.219.132"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.244.72.135"/>
    </slice>
    <from sec="1112590811" usec="0"/>
    <to sec="1112591693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.130.102.135"/>
    </slice>
    <from sec="1112591440" usec="0"/>
    <to sec="1112591472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.94.148.137"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
3712[label="211.22.184.153;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3824[label="0.53.127.184;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4282[label="211.22.184.153;24pkt 24fpkt", shape=invtriangle, color=brown];
4336[label="0.53.127.184;39pkt 39fpkt", shape=invtriangle, color=brown];
4574[label="0.53.127.184;40pkt 40fpkt", shape=invhouse, color=bisque];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.53.127.184:80, 193.41.161.236:*}[62.5%]&lt;BR/&gt;{211.22.184.153:80, 193.41.161.133:*}[32.8125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3976%)&lt;BR/&gt; 4367: (0.903614%)&lt;BR/&gt; 4366: (0.903614%)&lt;BR/&gt; 4244: (0.903614%)&lt;BR/&gt; 4225: (0.903614%)&gt;];
}
3712--4282[label="1;24pkt 24fpkt"];
3824--4336[label="1;39pkt 39fpkt"];
3824--4574[label="1;39pkt 39fpkt"];
4336--4574[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.161.236" src_ip="0.53.127.184" src_port="80"/>
      <filter dst_ip="193.41.161.133" src_ip="211.22.184.153" src_port="80"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.141.44.138"/>
    </slice>
    <from sec="1112590808" usec="0"/>
    <to sec="1112591630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
1788[label="197.199.51.140;s;3pkt 3fpkt", shape=diamond, color=yellow];
3654[label="197.199.51.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.199.51.140:3076, 193.41.161.156:6346}[33.3333%]&lt;BR/&gt;{197.199.51.140:3171, 193.41.161.156:6346}[33.3333%]&lt;BR/&gt;{197.199.51.140:3172, 193.41.161.156:6346}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3172: (20%)&lt;BR/&gt; 3171: (20%)&lt;BR/&gt; 3076: (10%)&gt;];
}
1788--3654[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.161.156" dst_port="6346" src_ip="197.199.51.140" src_port="3172"/>
      <filter dst_ip="193.41.161.156" dst_port="6346" src_ip="197.199.51.140" src_port="3171"/>
      <filter dst_ip="193.41.161.156" dst_port="6346" src_ip="197.199.51.140" src_port="3076"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.172.73.140"/>
    </slice>
    <from sec="1112591071" usec="0"/>
    <to sec="1112591679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.141.182.140"/>
    </slice>
    <from sec="1112590813" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.115.251.140"/>
    </slice>
    <from sec="1112591591" usec="0"/>
    <to sec="1112591633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.181.198.144"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.104.68.146"/>
    </slice>
    <from sec="1112591030" usec="0"/>
    <to sec="1112591054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.58.138.146"/>
    </slice>
    <from sec="1112590811" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.163.54.149"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
3713[label="162.94.54.154;82pkt 82fpkt", shape=pentagon, color=darkviolet];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.54.154:*, 18.160.169.53:8200}[68.2927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (48.7805%)&lt;BR/&gt; 4133: (0.609756%)&lt;BR/&gt; 4132: (0.609756%)&lt;BR/&gt; 4131: (0.609756%)&lt;BR/&gt; 4127: (0.609756%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="18.160.169.53" dst_port="8200" src_ip="162.94.54.154"/>
    </slice>
    <from sec="1112590813" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.68.90.156"/>
    </slice>
    <from sec="1112590833" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.68.4.157"/>
    </slice>
    <from sec="1112591153" usec="0"/>
    <to sec="1112591174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.220.164.158"/>
    </slice>
    <from sec="1112590806" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.94.230.161"/>
    </slice>
    <from sec="1112591632" usec="0"/>
    <to sec="1112591687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.94.36.164"/>
    </slice>
    <from sec="1112590864" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.78.195.165"/>
    </slice>
    <from sec="1112591269" usec="0"/>
    <to sec="1112591309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.147,1.79141,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
56[label="192.226.20.166s;245pkt 245fpkt", shape=rectangle, color=red];
3758[label="192.226.20.166;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4299[label="192.226.20.166;256pkt 256fpkt", shape=invtriangle, color=brown];
4559[label="192.226.20.166;256pkt 256fpkt", shape=invhouse, color=bisque];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.226.20.166:13988, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13988: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
56--3758[label="0.995918;244pkt 244fpkt"];
56--4299[label="1;245pkt 245fpkt"];
56--4559[label="1;245pkt 245fpkt"];
3758--4299[label="1;255pkt 255fpkt"];
3758--4559[label="1;255pkt 255fpkt"];
4299--4559[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.226.20.166" src_port="13988"/>
    </slice>
    <from sec="1112591089" usec="0"/>
    <to sec="1112591116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.75.164.167"/>
    </slice>
    <from sec="1112591186" usec="0"/>
    <to sec="1112591190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.38.171"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.58.236.172"/>
    </slice>
    <from sec="1112590892" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.27.166.173"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.106.175"/>
    </slice>
    <from sec="1112590810" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
1722[label="162.94.36.176;s;6pkt 6fpkt", shape=diamond, color=yellow];
2640[label="162.94.36.176;s;6pkt 6fpkt", shape=hexagon, color=black];
3794[label="162.94.36.176;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.36.176:*, 96.227.225.182:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4236: (8.82353%)&lt;BR/&gt; 4235: (8.82353%)&lt;BR/&gt; 4234: (8.82353%)&lt;BR/&gt; 4233: (8.82353%)&gt;];
}
1722--2640[label="1;6pkt 6fpkt"];
1722--3794[label="1;5pkt 5fpkt"];
2640--3794[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="96.227.225.182" dst_port="80" src_ip="162.94.36.176"/>
    </slice>
    <from sec="1112591281" usec="0"/>
    <to sec="1112591303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.18.95.176"/>
    </slice>
    <from sec="1112591265" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.196.81.180"/>
    </slice>
    <from sec="1112590820" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
514[label="129.141.68.180;d;1444pkt 1444fpkt", shape=diamond, color=yellow];
518[label="217.25.81.73;s;204pkt 204fpkt", shape=diamond, color=yellow];
2043[label="100.22.90.88;s;21pkt 21fpkt", shape=diamond, color=yellow];
2345[label="217.25.81.73;s;145pkt 145fpkt", shape=hexagon, color=black];
2884[label="100.22.90.88;s;21pkt 21fpkt", shape=hexagon, color=black];
3278[label="192.250.50.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3305[label="99.198.104.36;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3364[label="192.55.166.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3450[label="209.131.18.80;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3823[label="208.150.222.183;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3964[label="192.243.200.234;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4081[label="192.250.50.29;1pkt 1fpkt", shape=invtriangle, color=brown];
4131[label="192.55.166.50;2pkt 2fpkt", shape=invtriangle, color=brown];
4160[label="217.25.81.73;209pkt 209fpkt", shape=invtriangle, color=brown];
4397[label="192.243.200.234;30pkt 30fpkt", shape=invtriangle, color=brown];
4453[label="99.131.186.25;4pkt 4fpkt", shape=invhouse, color=bisque];
4456[label="192.250.50.29;2pkt 2fpkt", shape=invhouse, color=bisque];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.141.68.180:80}[91.0678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.927%)&lt;BR/&gt; 0: (6.09982%)&lt;BR/&gt; 48379: (0.115527%)&lt;BR/&gt; 6828: (0.115527%)&lt;BR/&gt; 1279: (0.115527%)&gt;];
}
514--518[label="0.926471;189pkt 189fpkt"];
514--1705[label="0.285714;2pkt 2fpkt"];
514--2043[label="1;21pkt 21fpkt"];
514--2345[label="1;145pkt 145fpkt"];
514--2884[label="1;21pkt 21fpkt"];
514--3127[label="0.0574792;83pkt 83fpkt"];
514--3138[label="0.0540166;78pkt 78fpkt"];
514--3278[label="1;1pkt 1fpkt"];
514--3305[label="1;25pkt 25fpkt"];
514--3364[label="1;1pkt 1fpkt"];
514--3450[label="1;8pkt 8fpkt"];
514--3823[label="0.875;14pkt 14fpkt"];
514--3949[label="0.285714;2pkt 2fpkt"];
514--3964[label="0.466667;14pkt 14fpkt"];
514--4081[label="1;1pkt 1fpkt"];
514--4131[label="1;2pkt 2fpkt"];
514--4160[label="0.885167;185pkt 185fpkt"];
514--4397[label="0.466667;14pkt 14fpkt"];
514--4453[label="0.25;1pkt 1fpkt"];
514--4456[label="1;2pkt 2fpkt"];
518--2345[label="1;145pkt 145fpkt"];
518--3127[label="0.0686275;14pkt 14fpkt"];
518--3138[label="0.0196078;4pkt 4fpkt"];
518--4160[label="0.980392;200pkt 200fpkt"];
2043--2884[label="1;21pkt 21fpkt"];
2345--3127[label="0.0965517;14pkt 14fpkt"];
2345--4160[label="0.972414;141pkt 141fpkt"];
3278--4081[label="1;1pkt 1fpkt"];
3278--4456[label="1;1pkt 1fpkt"];
3364--4131[label="1;1pkt 1fpkt"];
3964--4397[label="1;30pkt 30fpkt"];
4081--4456[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.141.68.180" dst_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.133.32.188"/>
    </slice>
    <from sec="1112590892" usec="0"/>
    <to sec="1112591626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.946279,1.72183,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
62[label="192.200.122.190s;992pkt 992fpkt", shape=rectangle, color=red];
2243[label="192.200.122.190;s;1020pkt 1020fpkt", shape=diamond, color=yellow];
3834[label="192.200.122.190;1019pkt 1019fpkt", shape=pentagon, color=darkviolet];
4340[label="192.200.122.190;1019pkt 1019fpkt", shape=invtriangle, color=brown];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.200.122.190:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4989: (0.0493827%)&lt;BR/&gt; 4988: (0.0493827%)&lt;BR/&gt; 4987: (0.0493827%)&lt;BR/&gt; 4986: (0.0493827%)&gt;];
}
62--2243[label="1;992pkt 992fpkt"];
62--3834[label="0.998992;991pkt 991fpkt"];
62--4340[label="0.998992;991pkt 991fpkt"];
2243--3834[label="1;1019pkt 1019fpkt"];
2243--4340[label="1;1019pkt 1019fpkt"];
3834--4340[label="1;1019pkt 1019fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="192.200.122.190"/>
    </slice>
    <from sec="1112591527" usec="0"/>
    <to sec="1112591623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.55.191"/>
    </slice>
    <from sec="1112590820" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500224,1.78522,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
2010[label="209.160.68.191;s;230pkt 230fpkt", shape=diamond, color=yellow];
3838[label="209.160.68.191;240pkt 240fpkt", shape=pentagon, color=darkviolet];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.160.68.191:*, *:445}[52.9167%]&lt;BR/&gt;{209.160.68.191:*, *:139}[47.0833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.4894%)&lt;BR/&gt; 139: (23.5106%)&lt;BR/&gt; 3891: (0.638298%)&lt;BR/&gt; 4156: (0.425532%)&lt;BR/&gt; 4094: (0.425532%)&gt;];
}
2010--3838[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.160.68.191"/>
      <filter dst_port="139" src_ip="209.160.68.191"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.610203,1.73184,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
748[label="99.70.73.186;s;489pkt 489fpkt", shape=diamond, color=yellow];
2104[label="129.68.144.119;d;184pkt 184fpkt", shape=diamond, color=yellow];
2149[label="162.8.4.189;d;196pkt 196fpkt", shape=diamond, color=yellow];
2662[label="99.70.73.186;s;375pkt 375fpkt", shape=hexagon, color=black];
3825[label="99.70.73.186;523pkt 523fpkt", shape=pentagon, color=darkviolet];
3855[label="213.232.156.197;230pkt 230fpkt", shape=pentagon, color=darkviolet];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.70.73.186:80, *:*}[67.1795%]&lt;BR/&gt;{213.232.156.197:80, *:*}[29.4872%]&lt;BR/&gt;{*:80, 162.8.4.189:*}[26.4103%]&lt;BR/&gt;{*:80, 129.68.232.199:*}[25.7692%]&lt;BR/&gt;{*:80, 129.68.144.119:*}[25.1282%]&lt;BR/&gt;{*:80, 129.52.175.63:*}[22.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64713: (0.175263%)&lt;BR/&gt; 53605: (0.175263%)&lt;BR/&gt; 64684: (0.150225%)&lt;BR/&gt; 32199: (0.150225%)&gt;];
}
748--2104[label="0.641304;118pkt 118fpkt"];
748--2149[label="0.637755;125pkt 125fpkt"];
748--2159[label="0.676923;132pkt 132fpkt"];
748--2662[label="1;375pkt 375fpkt"];
748--3126[label="0.0552147;27pkt 27fpkt"];
748--3130[label="0.0981595;48pkt 48fpkt"];
748--3135[label="0.0715746;35pkt 35fpkt"];
748--3140[label="0.0552147;27pkt 27fpkt"];
748--3142[label="0.0981595;48pkt 48fpkt"];
748--3147[label="0.0715746;35pkt 35fpkt"];
748--3150[label="0.0552147;27pkt 27fpkt"];
748--3152[label="0.0981595;48pkt 48fpkt"];
748--3157[label="0.0715746;35pkt 35fpkt"];
748--3825[label="0.997955;488pkt 488fpkt"];
2104--2662[label="0.516304;95pkt 95fpkt"];
2104--3126[label="0.0543478;10pkt 10fpkt"];
2104--3130[label="0.076087;14pkt 14fpkt"];
2104--3135[label="0.048913;9pkt 9fpkt"];
2104--3140[label="0.0543478;10pkt 10fpkt"];
2104--3142[label="0.076087;14pkt 14fpkt"];
2104--3147[label="0.048913;9pkt 9fpkt"];
2104--3150[label="0.0543478;10pkt 10fpkt"];
2104--3152[label="0.076087;14pkt 14fpkt"];
2104--3157[label="0.048913;9pkt 9fpkt"];
2104--3825[label="0.641304;118pkt 118fpkt"];
2104--3855[label="0.288043;53pkt 53fpkt"];
2149--2662[label="0.469388;92pkt 92fpkt"];
2149--3126[label="0.0408163;8pkt 8fpkt"];
2149--3130[label="0.0918367;18pkt 18fpkt"];
2149--3135[label="0.0714286;14pkt 14fpkt"];
2149--3140[label="0.0408163;8pkt 8fpkt"];
2149--3142[label="0.0918367;18pkt 18fpkt"];
2149--3147[label="0.0714286;14pkt 14fpkt"];
2149--3150[label="0.0408163;8pkt 8fpkt"];
2149--3152[label="0.0918367;18pkt 18fpkt"];
2149--3157[label="0.0714286;14pkt 14fpkt"];
2149--3825[label="0.637755;125pkt 125fpkt"];
2149--3855[label="0.295918;58pkt 58fpkt"];
2662--3126[label="0.072;27pkt 27fpkt"];
2662--3140[label="0.072;27pkt 27fpkt"];
2662--3150[label="0.072;27pkt 27fpkt"];
2662--3825[label="0.997333;374pkt 374fpkt"];
</description>
    <slice>
      <filter src_ip="99.70.73.186" src_port="80"/>
      <filter src_ip="213.232.156.197" src_port="80"/>
      <filter dst_ip="162.8.4.189" src_port="80"/>
      <filter dst_ip="129.68.232.199" src_port="80"/>
      <filter dst_ip="129.68.144.119" src_port="80"/>
      <filter dst_ip="129.52.175.63" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.172.47.200"/>
    </slice>
    <from sec="1112590861" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.128.134.200"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.124.93.204"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.178.211.204"/>
    </slice>
    <from sec="1112590819" usec="0"/>
    <to sec="1112591631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.171.31.205"/>
    </slice>
    <from sec="1112591022" usec="0"/>
    <to sec="1112591468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.69.78.205"/>
    </slice>
    <from sec="1112590817" usec="0"/>
    <to sec="1112591690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.223.1.206"/>
    </slice>
    <from sec="1112590836" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.114.159.207"/>
    </slice>
    <from sec="1112590935" usec="0"/>
    <to sec="1112590962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.76.192.207"/>
    </slice>
    <from sec="1112590960" usec="0"/>
    <to sec="1112590982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.211.22.208"/>
    </slice>
    <from sec="1112591182" usec="0"/>
    <to sec="1112591249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.76.35.211"/>
    </slice>
    <from sec="1112590806" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
3902[label="215.100.228.211;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.100.228.211:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3731: (0.892857%)&lt;BR/&gt; 3583: (0.892857%)&lt;BR/&gt; 4997: (0.446429%)&lt;BR/&gt; 4977: (0.446429%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="215.100.228.211"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.9.89.219"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.8.76.221"/>
    </slice>
    <from sec="1112590807" usec="0"/>
    <to sec="1112591696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.49.84.221"/>
    </slice>
    <from sec="1112591525" usec="0"/>
    <to sec="1112591563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.45.52.225"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112590843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.83.215.234"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
317[label="193.32.58.11;d;683pkt 683fpkt", shape=diamond, color=yellow];
985[label="18.216.197.72;s;100pkt 100fpkt", shape=diamond, color=yellow];
1414[label="193.32.62.173;d;308pkt 308fpkt", shape=diamond, color=yellow];
1436[label="217.90.16.91;s;12pkt 12fpkt", shape=diamond, color=yellow];
1453[label="117.198.180.25;s;57pkt 57fpkt", shape=diamond, color=yellow];
1476[label="18.216.193.47;s;11pkt 11fpkt", shape=diamond, color=yellow];
1661[label="99.92.186.49;s;28pkt 28fpkt", shape=diamond, color=yellow];
1904[label="215.147.146.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
2525[label="211.69.229.209;s;107pkt 107fpkt", shape=hexagon, color=black];
2623[label="117.198.180.25;s;48pkt 48fpkt", shape=hexagon, color=black];
2784[label="99.92.186.49;s;28pkt 28fpkt", shape=hexagon, color=black];
3233[label="22.218.113.17;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3267[label="117.198.180.25;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3280[label="18.216.214.29;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3337[label="99.92.186.44;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3353[label="18.216.193.47;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3484[label="215.147.146.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3488[label="217.90.16.91;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3496[label="193.184.42.94;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3497[label="209.208.79.94;80pkt 80fpkt", shape=pentagon, color=darkviolet];
3512[label="22.218.113.98;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3579[label="99.85.48.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3697[label="209.214.136.149;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3702[label="211.94.69.150;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3706[label="99.84.44.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3810[label="209.199.145.180;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3971[label="165.175.16.236;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4056[label="99.91.49.13;9pkt 9fpkt", shape=invtriangle, color=brown];
4083[label="18.216.214.29;51pkt 51fpkt", shape=invtriangle, color=brown];
4116[label="99.92.186.44;23pkt 23fpkt", shape=invtriangle, color=brown];
4126[label="18.216.193.47;10pkt 10fpkt", shape=invtriangle, color=brown];
4186[label="215.147.146.89;2pkt 2fpkt", shape=invtriangle, color=brown];
4189[label="217.90.16.91;11pkt 11fpkt", shape=invtriangle, color=brown];
4226[label="99.85.48.117;2pkt 2fpkt", shape=invtriangle, color=brown];
4279[label="99.84.44.151;4pkt 4fpkt", shape=invtriangle, color=brown];
4329[label="209.199.145.180;3pkt 3fpkt", shape=invtriangle, color=brown];
4511[label="215.147.146.89;1pkt 1fpkt", shape=invhouse, color=bisque];
4551[label="99.84.44.151;3pkt 3fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.32.58.11:*}[56.1121%]&lt;BR/&gt;{*:80, 193.32.62.173:*}[24.7029%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7949%)&lt;BR/&gt; 33436: (1.08927%)&lt;BR/&gt; 443: (0.690755%)&lt;BR/&gt; 88: (0.21254%)&lt;BR/&gt; 3083: (0.185972%)&gt;];
}
317--391[label="0.00943396;6pkt 6fpkt"];
317--791[label="0.0118577;6pkt 6fpkt"];
317--802[label="0.0105422;7pkt 7fpkt"];
317--930[label="1;14pkt 14fpkt"];
317--985[label="0.73;73pkt 73fpkt"];
317--1355[label="0.0263158;3pkt 3fpkt"];
317--1367[label="0.401869;43pkt 43fpkt"];
317--1436[label="0.666667;8pkt 8fpkt"];
317--1445[label="0.424242;14pkt 14fpkt"];
317--1453[label="0.0701754;4pkt 4fpkt"];
317--1476[label="0.727273;8pkt 8fpkt"];
317--1552[label="0.157895;12pkt 12fpkt"];
317--1568[label="0.364407;43pkt 43fpkt"];
317--1610[label="0.107143;3pkt 3fpkt"];
317--1661[label="0.464286;13pkt 13fpkt"];
317--1691[label="0.733333;11pkt 11fpkt"];
317--1704[label="1;1pkt 1fpkt"];
317--1860[label="1;13pkt 13fpkt"];
317--1904[label="1;2pkt 2fpkt"];
317--2115[label="0.0555556;2pkt 2fpkt"];
317--2417[label="1;7pkt 7fpkt"];
317--2512[label="0.0119403;4pkt 4fpkt"];
317--2525[label="0.401869;43pkt 43fpkt"];
317--2623[label="0.0833333;4pkt 4fpkt"];
317--2775[label="0.424242;14pkt 14fpkt"];
317--2781[label="1;12pkt 12fpkt"];
317--2784[label="0.464286;13pkt 13fpkt"];
317--2943[label="0.0555556;2pkt 2fpkt"];
317--2970[label="0.0263158;3pkt 3fpkt"];
317--3126[label="0.1347;92pkt 92fpkt"];
317--3130[label="0.0600293;41pkt 41fpkt"];
317--3135[label="0.0600293;41pkt 41fpkt"];
317--3140[label="0.1347;92pkt 92fpkt"];
317--3142[label="0.0600293;41pkt 41fpkt"];
317--3147[label="0.0600293;41pkt 41fpkt"];
317--3150[label="0.1347;92pkt 92fpkt"];
317--3152[label="0.0600293;41pkt 41fpkt"];
317--3157[label="0.0600293;41pkt 41fpkt"];
317--3204[label="1;1pkt 1fpkt"];
317--3213[label="1;9pkt 9fpkt"];
317--3233[label="0.285714;2pkt 2fpkt"];
317--3267[label="0.0689655;4pkt 4fpkt"];
317--3280[label="0.784314;40pkt 40fpkt"];
317--3337[label="0.0869565;2pkt 2fpkt"];
317--3353[label="0.727273;8pkt 8fpkt"];
317--3479[label="0.888889;24pkt 24fpkt"];
317--3484[label="1;1pkt 1fpkt"];
317--3488[label="0.666667;8pkt 8fpkt"];
317--3497[label="0.15;12pkt 12fpkt"];
317--3510[label="0.00146413;1pkt 1fpkt"];
317--3512[label="0.6875;33pkt 33fpkt"];
317--3579[label="1;2pkt 2fpkt"];
317--3630[label="0.388889;14pkt 14fpkt"];
317--3697[label="1;3pkt 3fpkt"];
317--3702[label="0.942857;33pkt 33fpkt"];
317--3706[label="1;3pkt 3fpkt"];
317--3810[label="1;4pkt 4fpkt"];
317--3971[label="0.464286;13pkt 13fpkt"];
317--4056[label="1;9pkt 9fpkt"];
317--4083[label="0.784314;40pkt 40fpkt"];
317--4116[label="0.0869565;2pkt 2fpkt"];
317--4126[label="0.8;8pkt 8fpkt"];
317--4186[label="1;2pkt 2fpkt"];
317--4189[label="0.727273;8pkt 8fpkt"];
317--4195[label="0.00146413;1pkt 1fpkt"];
317--4226[label="1;2pkt 2fpkt"];
317--4279[label="1;4pkt 4fpkt"];
317--4329[label="1;3pkt 3fpkt"];
317--4511[label="1;1pkt 1fpkt"];
317--4514[label="0.00146413;1pkt 1fpkt"];
317--4551[label="1;3pkt 3fpkt"];
985--1414[label="0.27;27pkt 27fpkt"];
985--3126[label="0.63;63pkt 63fpkt"];
985--3140[label="0.63;63pkt 63fpkt"];
985--3150[label="0.63;63pkt 63fpkt"];
1414--1445[label="0.121212;4pkt 4fpkt"];
1414--1453[label="0.0175439;1pkt 1fpkt"];
1414--1476[label="0.272727;3pkt 3fpkt"];
1414--1552[label="0.0789474;6pkt 6fpkt"];
1414--1568[label="0.398305;47pkt 47fpkt"];
1414--1661[label="0.107143;3pkt 3fpkt"];
1414--2046[label="0.153846;2pkt 2fpkt"];
1414--2512[label="0.038961;12pkt 12fpkt"];
1414--2525[label="0.429907;46pkt 46fpkt"];
1414--2623[label="0.0208333;1pkt 1fpkt"];
1414--2775[label="0.121212;4pkt 4fpkt"];
1414--2784[label="0.107143;3pkt 3fpkt"];
1414--3126[label="0.0811688;25pkt 25fpkt"];
1414--3130[label="0.0746753;23pkt 23fpkt"];
1414--3135[label="0.0616883;19pkt 19fpkt"];
1414--3140[label="0.0811688;25pkt 25fpkt"];
1414--3142[label="0.0746753;23pkt 23fpkt"];
1414--3147[label="0.0616883;19pkt 19fpkt"];
1414--3150[label="0.0811688;25pkt 25fpkt"];
1414--3152[label="0.0746753;23pkt 23fpkt"];
1414--3157[label="0.0616883;19pkt 19fpkt"];
1414--3233[label="0.714286;5pkt 5fpkt"];
1414--3274[label="0.0833333;2pkt 2fpkt"];
1414--3280[label="0.215686;11pkt 11fpkt"];
1414--3353[label="0.272727;3pkt 3fpkt"];
1414--3496[label="0.923077;12pkt 12fpkt"];
1414--3497[label="0.075;6pkt 6fpkt"];
1414--3510[label="0.00324675;1pkt 1fpkt"];
1414--3512[label="0.3125;15pkt 15fpkt"];
1414--3630[label="0.111111;4pkt 4fpkt"];
1414--3702[label="0.0571429;2pkt 2fpkt"];
1414--4078[label="0.0833333;2pkt 2fpkt"];
1414--4083[label="0.215686;11pkt 11fpkt"];
1414--4126[label="0.2;2pkt 2fpkt"];
1414--4195[label="0.00324675;1pkt 1fpkt"];
1414--4454[label="0.0833333;2pkt 2fpkt"];
1414--4514[label="0.00324675;1pkt 1fpkt"];
1436--3126[label="0.166667;2pkt 2fpkt"];
1436--3140[label="0.166667;2pkt 2fpkt"];
1436--3150[label="0.166667;2pkt 2fpkt"];
1436--3488[label="1;12pkt 12fpkt"];
1436--4189[label="1;11pkt 11fpkt"];
1453--2623[label="1;48pkt 48fpkt"];
1453--3126[label="0.122807;7pkt 7fpkt"];
1453--3130[label="0.122807;7pkt 7fpkt"];
1453--3135[label="0.0526316;3pkt 3fpkt"];
1453--3140[label="0.122807;7pkt 7fpkt"];
1453--3142[label="0.122807;7pkt 7fpkt"];
1453--3147[label="0.0526316;3pkt 3fpkt"];
1453--3150[label="0.122807;7pkt 7fpkt"];
1453--3152[label="0.122807;7pkt 7fpkt"];
1453--3157[label="0.0526316;3pkt 3fpkt"];
1453--3267[label="0.982456;56pkt 56fpkt"];
1476--3353[label="1;11pkt 11fpkt"];
1476--4126[label="1;10pkt 10fpkt"];
1661--1838[label="0.0714286;2pkt 2fpkt"];
1661--2784[label="1;28pkt 28fpkt"];
1661--3126[label="0.0357143;1pkt 1fpkt"];
1661--3140[label="0.0357143;1pkt 1fpkt"];
1661--3150[label="0.0357143;1pkt 1fpkt"];
1904--3484[label="1;1pkt 1fpkt"];
1904--4186[label="1;2pkt 2fpkt"];
1904--4511[label="1;1pkt 1fpkt"];
2525--2561[label="0.0560748;6pkt 6fpkt"];
2525--3095[label="0.0560748;6pkt 6fpkt"];
2525--3126[label="0.102804;11pkt 11fpkt"];
2525--3130[label="0.11215;12pkt 12fpkt"];
2525--3135[label="0.0747664;8pkt 8fpkt"];
2525--3140[label="0.102804;11pkt 11fpkt"];
2525--3142[label="0.11215;12pkt 12fpkt"];
2525--3147[label="0.0747664;8pkt 8fpkt"];
2525--3150[label="0.102804;11pkt 11fpkt"];
2525--3152[label="0.11215;12pkt 12fpkt"];
2525--3157[label="0.0747664;8pkt 8fpkt"];
2623--3126[label="0.145833;7pkt 7fpkt"];
2623--3130[label="0.0208333;1pkt 1fpkt"];
2623--3140[label="0.145833;7pkt 7fpkt"];
2623--3142[label="0.0208333;1pkt 1fpkt"];
2623--3150[label="0.145833;7pkt 7fpkt"];
2623--3152[label="0.0208333;1pkt 1fpkt"];
2623--3267[label="0.979167;47pkt 47fpkt"];
2784--3126[label="0.0357143;1pkt 1fpkt"];
2784--3140[label="0.0357143;1pkt 1fpkt"];
2784--3150[label="0.0357143;1pkt 1fpkt"];
3280--4083[label="1;51pkt 51fpkt"];
3337--4116[label="1;23pkt 23fpkt"];
3353--4126[label="1;10pkt 10fpkt"];
3484--4186[label="1;1pkt 1fpkt"];
3484--4511[label="1;1pkt 1fpkt"];
3488--4189[label="1;11pkt 11fpkt"];
3579--4226[label="1;2pkt 2fpkt"];
3706--4279[label="1;3pkt 3fpkt"];
3706--4551[label="1;3pkt 3fpkt"];
3810--4329[label="1;3pkt 3fpkt"];
4186--4511[label="1;1pkt 1fpkt"];
4279--4551[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.32.58.11" src_port="80"/>
      <filter dst_ip="193.32.62.173" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.946279,1.72183,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
96[label="19.14.113.238s;768pkt 768fpkt", shape=rectangle, color=red];
471[label="19.14.113.238;s;912pkt 912fpkt", shape=diamond, color=yellow];
3979[label="19.14.113.238;911pkt 911fpkt", shape=pentagon, color=darkviolet];
4403[label="19.14.113.238;863pkt 863fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.14.113.238:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4933: (0.0579039%)&lt;BR/&gt; 4932: (0.0579039%)&lt;BR/&gt; 4931: (0.0579039%)&lt;BR/&gt; 4930: (0.0579039%)&gt;];
}
96--471[label="1;768pkt 768fpkt"];
96--3979[label="0.998698;767pkt 767fpkt"];
96--4403[label="0.998698;767pkt 767fpkt"];
471--3979[label="1;911pkt 911fpkt"];
471--4403[label="1;863pkt 863fpkt"];
3979--4403[label="1;863pkt 863fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="19.14.113.238"/>
    </slice>
    <from sec="1112590807" usec="0"/>
    <to sec="1112590929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.7.182.239"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.77.136.241"/>
    </slice>
    <from sec="1112591147" usec="0"/>
    <to sec="1112591696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.168.34.244"/>
    </slice>
    <from sec="1112590965" usec="0"/>
    <to sec="1112591042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.41.128.245"/>
    </slice>
    <from sec="1112591462" usec="0"/>
    <to sec="1112591521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.86.117.247"/>
    </slice>
    <from sec="1112590960" usec="0"/>
    <to sec="1112590969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
1005[label="129.141.68.181;d;997pkt 997fpkt", shape=diamond, color=yellow];
3287[label="209.199.34.33;90pkt 90fpkt", shape=pentagon, color=darkviolet];
4011[label="193.200.166.248;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4089[label="209.199.34.33;91pkt 91fpkt", shape=invtriangle, color=brown];
4423[label="193.200.166.248;2pkt 2fpkt", shape=invtriangle, color=brown];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.141.68.181:53}[61%]&lt;BR/&gt;{*:*, 129.141.68.181:25}[38.6%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (27.5993%)&lt;BR/&gt; 25: (23.9645%)&lt;BR/&gt; 32768: (1.14117%)&lt;BR/&gt; 32769: (0.633981%)&lt;BR/&gt; 32770: (0.46492%)&gt;];
}
1005--3125[label="0.00401204;4pkt 4fpkt"];
1005--3129[label="0.00401204;4pkt 4fpkt"];
1005--3134[label="0.00501505;5pkt 5fpkt"];
1005--3137[label="0.0862588;86pkt 86fpkt"];
1005--3139[label="0.00401204;4pkt 4fpkt"];
1005--3141[label="0.00401204;4pkt 4fpkt"];
1005--3146[label="0.00501505;5pkt 5fpkt"];
1005--3149[label="0.00401204;4pkt 4fpkt"];
1005--3151[label="0.00401204;4pkt 4fpkt"];
1005--3156[label="0.00501505;5pkt 5fpkt"];
1005--3287[label="1;90pkt 90fpkt"];
1005--4011[label="0.333333;1pkt 1fpkt"];
1005--4089[label="0.989011;90pkt 90fpkt"];
1005--4423[label="0.5;1pkt 1fpkt"];
3287--4089[label="1;90pkt 90fpkt"];
4011--4423[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.141.68.181" dst_port="53"/>
      <filter dst_ip="129.141.68.181" dst_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.116.20.249"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.151.178.253"/>
    </slice>
    <from sec="1112591140" usec="0"/>
    <to sec="1112591168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.487626,1.84511,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.15.153.254"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
3162[label="209.25.111.0;68pkt 68fpkt", shape=pentagon, color=darkviolet];
4028[label="209.25.111.0;68pkt 68fpkt", shape=invtriangle, color=brown];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.25.111.0:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4935: (0.735294%)&lt;BR/&gt; 4828: (0.735294%)&lt;BR/&gt; 4780: (0.735294%)&lt;BR/&gt; 4652: (0.735294%)&gt;];
}
3162--4028[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.25.111.0"/>
    </slice>
    <from sec="1112590830" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
3171[label="209.222.64.2;185pkt 185fpkt", shape=pentagon, color=darkviolet];
4035[label="209.222.64.2;185pkt 185fpkt", shape=invtriangle, color=brown];
4434[label="209.222.64.2;184pkt 184fpkt", shape=invhouse, color=bisque];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.222.64.2:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3171--4035[label="1;185pkt 185fpkt"];
3171--4434[label="1;184pkt 184fpkt"];
4035--4434[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.222.64.2" src_port="1026"/>
    </slice>
    <from sec="1112591349" usec="0"/>
    <to sec="1112591383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
3182[label="72.113.178.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4041[label="72.113.178.5;1pkt 1fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.113.178.5:80, 129.2.69.133:54373}[50%]&lt;BR/&gt;{72.113.178.5:80, 129.2.69.133:54374}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54374: (33.3333%)&lt;BR/&gt; 54373: (16.6667%)&gt;];
}
3182--4041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.2.69.133" dst_port="54374" src_ip="72.113.178.5" src_port="80"/>
      <filter dst_ip="129.2.69.133" dst_port="54373" src_ip="72.113.178.5" src_port="80"/>
    </slice>
    <from sec="1112591598" usec="0"/>
    <to sec="1112591676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
3191[label="16.246.32.8;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4045[label="16.246.32.8;15pkt 15fpkt", shape=invtriangle, color=brown];
4439[label="16.246.32.8;15pkt 15fpkt", shape=invhouse, color=bisque];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.246.32.8:40, 162.94.163.241:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40: (46.6667%)&lt;BR/&gt; 1491: (3.33333%)&lt;BR/&gt; 1479: (3.33333%)&lt;BR/&gt; 1478: (3.33333%)&lt;BR/&gt; 1477: (3.33333%)&gt;];
}
3191--4045[label="1;15pkt 15fpkt"];
3191--4439[label="1;15pkt 15fpkt"];
4045--4439[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.163.241" src_ip="16.246.32.8" src_port="40"/>
    </slice>
    <from sec="1112591611" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.14.21.9"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.44.84.9"/>
    </slice>
    <from sec="1112591458" usec="0"/>
    <to sec="1112591689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
3212[label="135.69.40.13;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4055[label="135.69.40.13;7pkt 7fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.40.13:*, 17.141.160.44:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1121: (6.66667%)&lt;BR/&gt; 1120: (6.66667%)&lt;BR/&gt; 1119: (6.66667%)&lt;BR/&gt; 1118: (6.66667%)&gt;];
}
3212--4055[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="17.141.160.44" dst_port="80" src_ip="135.69.40.13"/>
    </slice>
    <from sec="1112591508" usec="0"/>
    <to sec="1112591695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
3238[label="18.6.180.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4064[label="18.6.180.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.6.180.18:554, 192.65.177.192:1491}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1491: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
3238--4064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.177.192" dst_port="1491" src_ip="18.6.180.18" src_port="554"/>
    </slice>
    <from sec="1112591611" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.24.58.19"/>
    </slice>
    <from sec="1112591441" usec="0"/>
    <to sec="1112591459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.44.50.22"/>
    </slice>
    <from sec="1112590860" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.190.185.27"/>
    </slice>
    <from sec="1112591008" usec="0"/>
    <to sec="1112591172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.219.219.28"/>
    </slice>
    <from sec="1112591651" usec="0"/>
    <to sec="1112591687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
3279[label="135.69.185.29;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4082[label="135.69.185.29;36pkt 36fpkt", shape=invtriangle, color=brown];
4457[label="135.69.185.29;37pkt 37fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.185.29:*, 209.216.208.140:80}[35.1351%]&lt;BR/&gt;{135.69.185.29:*, 99.75.178.0:80}[29.7297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34222: (1.36364%)&lt;BR/&gt; 34220: (1.36364%)&lt;BR/&gt; 34219: (1.36364%)&lt;BR/&gt; 34218: (1.36364%)&gt;];
}
3279--4082[label="1;36pkt 36fpkt"];
3279--4457[label="1;37pkt 37fpkt"];
4082--4457[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="209.216.208.140" dst_port="80" src_ip="135.69.185.29"/>
      <filter dst_ip="99.75.178.0" dst_port="80" src_ip="135.69.185.29"/>
    </slice>
    <from sec="1112591125" usec="0"/>
    <to sec="1112591191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.69.154.31"/>
    </slice>
    <from sec="1112591296" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
3292[label="72.119.77.34;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4091[label="72.119.77.34;20pkt 20fpkt", shape=invtriangle, color=brown];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.119.77.34:443, 193.32.165.116:*}[40%]&lt;BR/&gt;{72.119.77.34:443, 193.32.172.81:*}[20%]&lt;BR/&gt;{72.119.77.34:443, 162.94.19.152:*}[20%]&lt;BR/&gt;{72.119.77.34:443, 129.2.30.198:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 56464: (2.5641%)&lt;BR/&gt; 56463: (2.5641%)&lt;BR/&gt; 56450: (2.5641%)&lt;BR/&gt; 56449: (2.5641%)&gt;];
}
3292--4091[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="193.32.165.116" src_ip="72.119.77.34" src_port="443"/>
      <filter dst_ip="129.2.30.198" src_ip="72.119.77.34" src_port="443"/>
      <filter dst_ip="162.94.19.152" src_ip="72.119.77.34" src_port="443"/>
      <filter dst_ip="193.32.172.81" src_ip="72.119.77.34" src_port="443"/>
    </slice>
    <from sec="1112591039" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
3299[label="193.119.118.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4094[label="193.119.118.35;2pkt 2fpkt", shape=invtriangle, color=brown];
4465[label="193.119.118.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.119.118.35:80, 193.41.162.81:4270}[50%]&lt;BR/&gt;{193.119.118.35:80, 193.41.162.81:4272}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4272: (37.5%)&lt;BR/&gt; 4270: (12.5%)&gt;];
}
3299--4094[label="1;1pkt 1fpkt"];
3299--4465[label="1;1pkt 1fpkt"];
4094--4465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.162.81" dst_port="4272" src_ip="193.119.118.35" src_port="80"/>
      <filter dst_ip="193.41.162.81" dst_port="4270" src_ip="193.119.118.35" src_port="80"/>
    </slice>
    <from sec="1112591622" usec="0"/>
    <to sec="1112591627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
1042[label="193.41.162.81;d;193pkt 193fpkt", shape=diamond, color=yellow];
1271[label="144.126.42.112;d;95pkt 95fpkt", shape=diamond, color=yellow];
1689[label="209.51.164.19;s;17pkt 17fpkt", shape=diamond, color=yellow];
1835[label="135.69.136.4;d;186pkt 186fpkt", shape=diamond, color=yellow];
2793[label="144.126.42.112;d;82pkt 82fpkt", shape=hexagon, color=black];
3194[label="209.51.164.8;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3241[label="209.51.164.19;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3244[label="209.51.164.20;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3313[label="209.51.164.37;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3421[label="209.51.164.71;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3511[label="18.225.79.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4067[label="209.51.164.19;16pkt 16fpkt", shape=invtriangle, color=brown];
4103[label="209.51.164.37;10pkt 10fpkt", shape=invtriangle, color=brown];
4446[label="209.51.164.19;16pkt 16fpkt", shape=invhouse, color=bisque];
4470[label="209.51.164.37;9pkt 9fpkt", shape=invhouse, color=bisque];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.41.162.81:*}[40.4211%]&lt;BR/&gt;{209.51.164.0:80, 135.69.136.4:*}[35.5789%]&lt;BR/&gt;{*:80, 144.126.42.112:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6513%)&lt;BR/&gt; 2028: (0.41841%)&lt;BR/&gt; 2027: (0.41841%)&lt;BR/&gt; 2017: (0.41841%)&lt;BR/&gt; 2013: (0.41841%)&gt;];
}
1042--1294[label="0.0859375;11pkt 11fpkt"];
1042--1355[label="0.0263158;3pkt 3fpkt"];
1042--1367[label="0.00934579;1pkt 1fpkt"];
1042--1568[label="0.0169492;2pkt 2fpkt"];
1042--1862[label="0.325581;14pkt 14fpkt"];
1042--1953[label="0.0277778;1pkt 1fpkt"];
1042--2015[label="0.0185185;1pkt 1fpkt"];
1042--2305[label="0.147059;5pkt 5fpkt"];
1042--2508[label="0.0859375;11pkt 11fpkt"];
1042--2512[label="0.015544;3pkt 3fpkt"];
1042--2525[label="0.00934579;1pkt 1fpkt"];
1042--2880[label="0.325581;14pkt 14fpkt"];
1042--2970[label="0.0263158;3pkt 3fpkt"];
1042--3126[label="0.0569948;11pkt 11fpkt"];
1042--3130[label="0.0466321;9pkt 9fpkt"];
1042--3135[label="0.0259067;5pkt 5fpkt"];
1042--3140[label="0.0569948;11pkt 11fpkt"];
1042--3142[label="0.0466321;9pkt 9fpkt"];
1042--3147[label="0.0259067;5pkt 5fpkt"];
1042--3150[label="0.0569948;11pkt 11fpkt"];
1042--3152[label="0.0466321;9pkt 9fpkt"];
1042--3157[label="0.0259067;5pkt 5fpkt"];
1042--3194[label="0.0384615;1pkt 1fpkt"];
1042--3313[label="0.2;2pkt 2fpkt"];
1042--3437[label="0.0333333;1pkt 1fpkt"];
1042--3492[label="0.0526316;1pkt 1fpkt"];
1042--3493[label="0.030303;1pkt 1fpkt"];
1042--3510[label="0.00518135;1pkt 1fpkt"];
1042--3511[label="1;2pkt 2fpkt"];
1042--4103[label="0.2;2pkt 2fpkt"];
1042--4195[label="0.00518135;1pkt 1fpkt"];
1042--4470[label="0.222222;2pkt 2fpkt"];
1042--4514[label="0.00518135;1pkt 1fpkt"];
1271--1689[label="1;17pkt 17fpkt"];
1271--2793[label="1;82pkt 82fpkt"];
1271--3130[label="0.0105263;1pkt 1fpkt"];
1271--3135[label="0.0105263;1pkt 1fpkt"];
1271--3142[label="0.0105263;1pkt 1fpkt"];
1271--3147[label="0.0105263;1pkt 1fpkt"];
1271--3152[label="0.0105263;1pkt 1fpkt"];
1271--3157[label="0.0105263;1pkt 1fpkt"];
1271--3194[label="0.807692;21pkt 21fpkt"];
1271--3241[label="1;16pkt 16fpkt"];
1271--3313[label="0.6;6pkt 6fpkt"];
1271--3421[label="1;34pkt 34fpkt"];
1271--4067[label="1;16pkt 16fpkt"];
1271--4103[label="0.6;6pkt 6fpkt"];
1271--4446[label="1;16pkt 16fpkt"];
1271--4470[label="0.555556;5pkt 5fpkt"];
1689--2793[label="1;17pkt 17fpkt"];
1689--3241[label="1;16pkt 16fpkt"];
1689--4067[label="1;16pkt 16fpkt"];
1689--4446[label="1;16pkt 16fpkt"];
1835--3135[label="0.177419;33pkt 33fpkt"];
1835--3147[label="0.177419;33pkt 33fpkt"];
1835--3157[label="0.177419;33pkt 33fpkt"];
1835--3164[label="0.903226;168pkt 168fpkt"];
1835--3194[label="0.115385;3pkt 3fpkt"];
1835--3244[label="1;5pkt 5fpkt"];
1835--3313[label="0.2;2pkt 2fpkt"];
1835--3785[label="0.0416667;1pkt 1fpkt"];
1835--4103[label="0.2;2pkt 2fpkt"];
1835--4470[label="0.222222;2pkt 2fpkt"];
2793--3194[label="0.653846;17pkt 17fpkt"];
2793--3241[label="1;16pkt 16fpkt"];
2793--3313[label="0.4;4pkt 4fpkt"];
2793--3421[label="0.882353;30pkt 30fpkt"];
2793--4067[label="1;16pkt 16fpkt"];
2793--4103[label="0.4;4pkt 4fpkt"];
2793--4446[label="1;16pkt 16fpkt"];
2793--4470[label="0.333333;3pkt 3fpkt"];
3241--4067[label="1;16pkt 16fpkt"];
3241--4446[label="1;16pkt 16fpkt"];
3313--4103[label="1;10pkt 10fpkt"];
3313--4470[label="1;9pkt 9fpkt"];
4067--4446[label="1;16pkt 16fpkt"];
4103--4470[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.162.81" src_port="80"/>
      <filter dst_ip="144.126.42.112" src_port="80"/>
      <filter dst_ip="135.69.136.4" src_ip="209.51.164.0" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
3328[label="208.85.66.42;380pkt 380fpkt", shape=pentagon, color=darkviolet];
4110[label="208.85.66.42;380pkt 380fpkt", shape=invtriangle, color=brown];
4475[label="208.85.66.42;379pkt 379fpkt", shape=invhouse, color=bisque];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.85.66.42:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1235: (0.263389%)&lt;BR/&gt; 1233: (0.263389%)&lt;BR/&gt; 1230: (0.263389%)&lt;BR/&gt; 1228: (0.263389%)&gt;];
}
3328--4110[label="1;380pkt 380fpkt"];
3328--4475[label="1;379pkt 379fpkt"];
4110--4475[label="1;379pkt 379fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="208.85.66.42"/>
    </slice>
    <from sec="1112591424" usec="0"/>
    <to sec="1112591624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
3330[label="72.113.179.42;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4111[label="72.113.179.42;4pkt 4fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.113.179.42:80, 193.41.141.128:51680}[25%]&lt;BR/&gt;{72.113.179.42:80, 193.41.141.128:51681}[25%]&lt;BR/&gt;{72.113.179.42:80, 193.41.141.128:51682}[25%]&lt;BR/&gt;{72.113.179.42:80, 193.41.141.128:51683}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51683: (14.2857%)&lt;BR/&gt; 51682: (14.2857%)&lt;BR/&gt; 51681: (14.2857%)&lt;BR/&gt; 51680: (7.14286%)&gt;];
}
3330--4111[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.141.128" dst_port="51683" src_ip="72.113.179.42" src_port="80"/>
      <filter dst_ip="193.41.141.128" dst_port="51682" src_ip="72.113.179.42" src_port="80"/>
      <filter dst_ip="193.41.141.128" dst_port="51681" src_ip="72.113.179.42" src_port="80"/>
      <filter dst_ip="193.41.141.128" dst_port="51680" src_ip="72.113.179.42" src_port="80"/>
    </slice>
    <from sec="1112591406" usec="0"/>
    <to sec="1112591411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
438[label="129.2.64.166;d;239pkt 239fpkt", shape=diamond, color=yellow];
3564[label="216.46.117.114;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3832[label="99.75.182.189;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4216[label="216.46.117.114;36pkt 36fpkt", shape=invtriangle, color=brown];
4338[label="99.75.182.189;60pkt 60fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.75.182.189:80, 129.2.64.166:*}[24.5968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0719%)&lt;BR/&gt; 43821: (0.348028%)&lt;BR/&gt; 43809: (0.348028%)&lt;BR/&gt; 43808: (0.348028%)&lt;BR/&gt; 43806: (0.348028%)&gt;];
}
438--802[label="0.0125523;3pkt 3fpkt"];
438--1267[label="0.0125523;3pkt 3fpkt"];
438--1750[label="0.0125523;3pkt 3fpkt"];
438--1751[label="0.0083682;2pkt 2fpkt"];
438--2499[label="0.0125523;3pkt 3fpkt"];
438--2808[label="0.0125523;3pkt 3fpkt"];
438--2809[label="0.0083682;2pkt 2fpkt"];
438--3126[label="0.0878661;21pkt 21fpkt"];
438--3130[label="0.0251046;6pkt 6fpkt"];
438--3135[label="0.0460251;11pkt 11fpkt"];
438--3140[label="0.0878661;21pkt 21fpkt"];
438--3142[label="0.0251046;6pkt 6fpkt"];
438--3147[label="0.0460251;11pkt 11fpkt"];
438--3150[label="0.0878661;21pkt 21fpkt"];
438--3152[label="0.0251046;6pkt 6fpkt"];
438--3157[label="0.0460251;11pkt 11fpkt"];
438--3224[label="0.0125523;3pkt 3fpkt"];
438--3282[label="0.0125523;3pkt 3fpkt"];
438--3337[label="0.913043;21pkt 21fpkt"];
438--3560[label="0.0083682;2pkt 2fpkt"];
438--3564[label="0.742857;26pkt 26fpkt"];
438--3832[label="1;61pkt 61fpkt"];
438--4059[label="0.0125523;3pkt 3fpkt"];
438--4084[label="0.0125523;3pkt 3fpkt"];
438--4116[label="0.913043;21pkt 21fpkt"];
438--4214[label="0.0083682;2pkt 2fpkt"];
438--4216[label="0.75;27pkt 27fpkt"];
438--4338[label="1;60pkt 60fpkt"];
438--4458[label="0.0125523;3pkt 3fpkt"];
438--4521[label="0.0083682;2pkt 2fpkt"];
3564--4216[label="1;35pkt 35fpkt"];
3832--4338[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="129.2.64.166" src_ip="99.75.182.189" src_port="80"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.24.87.45"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.128.254.45"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="135.68.210.46"/>
    </slice>
    <from sec="1112591212" usec="0"/>
    <to sec="1112591232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
3351[label="192.24.52.47;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4124[label="192.24.52.47;47pkt 47fpkt", shape=invtriangle, color=brown];
4480[label="192.24.52.47;47pkt 47fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.24.52.47:*, *:135}[25.5319%]&lt;BR/&gt;{192.24.52.47:*, *:445}[25.5319%]&lt;BR/&gt;{192.24.52.47:*, *:1025}[25.5319%]&lt;BR/&gt;{192.24.52.47:*, *:139}[23.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (12.766%)&lt;BR/&gt; 445: (12.766%)&lt;BR/&gt; 135: (12.766%)&lt;BR/&gt; 139: (11.7021%)&lt;BR/&gt; 1670: (2.12766%)&gt;];
}
3351--4124[label="1;47pkt 47fpkt"];
3351--4480[label="1;47pkt 47fpkt"];
4124--4480[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="192.24.52.47"/>
      <filter dst_port="445" src_ip="192.24.52.47"/>
      <filter dst_port="135" src_ip="192.24.52.47"/>
      <filter dst_port="139" src_ip="192.24.52.47"/>
    </slice>
    <from sec="1112590893" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
3361[label="216.224.80.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4130[label="216.224.80.49;1pkt 1fpkt", shape=invtriangle, color=brown];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.224.80.49:3024, 144.126.43.86:6899}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6899: (50%)&lt;BR/&gt; 3024: (50%)&gt;];
}
3361--4130[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.43.86" dst_port="6899" src_ip="216.224.80.49" src_port="3024"/>
    </slice>
    <from sec="1112590934" usec="0"/>
    <to sec="1112591369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
3368[label="135.69.6.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4132[label="135.69.6.52;2pkt 2fpkt", shape=invtriangle, color=brown];
4484[label="135.69.6.52;2pkt 2fpkt", shape=invhouse, color=bisque];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.6.52:2687, 96.224.50.24:80}[50%]&lt;BR/&gt;{135.69.6.52:2688, 96.224.50.26:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2687: (30%)&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 2688: (20%)&lt;BR/&gt; 443: (20%)&gt;];
}
3368--4132[label="1;1pkt 1fpkt"];
3368--4484[label="1;1pkt 1fpkt"];
4132--4484[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.224.50.26" dst_port="443" src_ip="135.69.6.52" src_port="2688"/>
      <filter dst_ip="96.224.50.24" dst_port="80" src_ip="135.69.6.52" src_port="2687"/>
    </slice>
    <from sec="1112591178" usec="0"/>
    <to sec="1112591201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
1964[label="167.172.9.54;s;605pkt 605fpkt", shape=diamond, color=yellow];
2955[label="167.172.9.54;s;605pkt 605fpkt", shape=hexagon, color=black];
3378[label="167.172.9.54;672pkt 672fpkt", shape=pentagon, color=darkviolet];
4135[label="167.172.9.54;671pkt 671fpkt", shape=invtriangle, color=brown];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.172.9.54:*, 221.10.160.130:53}[36.5527%]&lt;BR/&gt;{167.172.9.54:*, 201.155.130.200:53}[20.208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2447: (0.156678%)&lt;BR/&gt; 2358: (0.156678%)&lt;BR/&gt; 2261: (0.156678%)&lt;BR/&gt; 2092: (0.156678%)&gt;];
}
1964--2955[label="1;605pkt 605fpkt"];
1964--3137[label="0.0512397;31pkt 31fpkt"];
1964--3378[label="0.998347;604pkt 604fpkt"];
1964--4135[label="0.996694;603pkt 603fpkt"];
2955--3137[label="0.0512397;31pkt 31fpkt"];
2955--3378[label="0.998347;604pkt 604fpkt"];
2955--4135[label="0.996694;603pkt 603fpkt"];
3378--4135[label="1;671pkt 671fpkt"];
</description>
    <slice>
      <filter dst_ip="221.10.160.130" dst_port="53" src_ip="167.172.9.54"/>
      <filter dst_ip="201.155.130.200" dst_port="53" src_ip="167.172.9.54"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
3392[label="142.56.132.58;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4145[label="142.56.132.58;4pkt 4fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.56.132.58:32891, 129.2.37.100:80}[25%]&lt;BR/&gt;{142.56.132.58:32896, 129.2.37.100:80}[25%]&lt;BR/&gt;{142.56.132.58:32897, 129.2.37.100:80}[25%]&lt;BR/&gt;{142.56.132.58:32900, 129.2.37.100:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32900: (12.5%)&lt;BR/&gt; 32897: (12.5%)&lt;BR/&gt; 32896: (12.5%)&lt;BR/&gt; 32891: (12.5%)&gt;];
}
3392--4145[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="129.2.37.100" dst_port="80" src_ip="142.56.132.58" src_port="32900"/>
      <filter dst_ip="129.2.37.100" dst_port="80" src_ip="142.56.132.58" src_port="32897"/>
      <filter dst_ip="129.2.37.100" dst_port="80" src_ip="142.56.132.58" src_port="32896"/>
      <filter dst_ip="129.2.37.100" dst_port="80" src_ip="142.56.132.58" src_port="32891"/>
    </slice>
    <from sec="1112591638" usec="0"/>
    <to sec="1112591690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989537,1.70702,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
688[label="144.126.164.18;d;186pkt 186fpkt", shape=diamond, color=yellow];
827[label="129.141.145.30;d;302pkt 302fpkt", shape=diamond, color=yellow];
978[label="211.11.146.95;s;37pkt 37fpkt", shape=diamond, color=yellow];
988[label="192.65.176.81;d;160pkt 160fpkt", shape=diamond, color=yellow];
2429[label="211.11.146.95;s;26pkt 26fpkt", shape=hexagon, color=black];
2871[label="144.126.164.18;d;172pkt 172fpkt", shape=hexagon, color=black];
3163[label="206.5.160.0;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3270[label="19.97.72.26;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3377[label="216.112.171.53;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3487[label="16.166.68.90;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3503[label="211.11.146.95;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3531[label="209.188.1.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3836[label="216.245.179.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3845[label="209.63.153.193;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3929[label="19.97.74.221;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4029[label="206.5.160.0;6pkt 6fpkt", shape=invtriangle, color=brown];
4150[label="18.223.81.66;1pkt 1fpkt", shape=invtriangle, color=brown];
4345[label="209.63.153.193;3pkt 3fpkt", shape=invtriangle, color=brown];
4383[label="19.97.74.221;19pkt 19fpkt", shape=invtriangle, color=brown];
4431[label="206.5.160.0;6pkt 6fpkt", shape=invhouse, color=bisque];
4576[label="209.63.153.193;3pkt 3fpkt", shape=invhouse, color=bisque];
4591[label="19.97.74.218;18pkt 18fpkt", shape=invhouse, color=bisque];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.141.145.30:25}[33.0882%]&lt;BR/&gt;{*:*, 144.126.164.18:*}[27.6471%]&lt;BR/&gt;{*:25, 192.65.176.81:*}[21.0294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.3902%)&lt;BR/&gt; 443: (0.61553%)&lt;BR/&gt; 113: (0.378788%)&lt;BR/&gt; 28504: (0.331439%)&lt;BR/&gt; 0: (0.284091%)&gt;];
}
688--978[label="0.918919;34pkt 34fpkt"];
688--2429[label="0.923077;24pkt 24fpkt"];
688--2871[label="1;172pkt 172fpkt"];
688--3163[label="1;6pkt 6fpkt"];
688--3270[label="0.235294;4pkt 4fpkt"];
688--3487[label="0.230769;3pkt 3fpkt"];
688--3503[label="0.918919;34pkt 34fpkt"];
688--3836[label="1;1pkt 1fpkt"];
688--3845[label="0.25;1pkt 1fpkt"];
688--3929[label="0.105263;2pkt 2fpkt"];
688--4029[label="1;6pkt 6fpkt"];
688--4150[label="1;1pkt 1fpkt"];
688--4345[label="0.333333;1pkt 1fpkt"];
688--4383[label="0.105263;2pkt 2fpkt"];
688--4431[label="1;6pkt 6fpkt"];
688--4576[label="0.333333;1pkt 1fpkt"];
688--4591[label="0.277778;5pkt 5fpkt"];
827--1270[label="0.00993377;3pkt 3fpkt"];
827--1484[label="0.00993377;3pkt 3fpkt"];
827--2500[label="0.00993377;3pkt 3fpkt"];
827--2541[label="0.00993377;3pkt 3fpkt"];
827--3077[label="0.00993377;3pkt 3fpkt"];
827--3082[label="0.00993377;3pkt 3fpkt"];
827--3377[label="0.222222;4pkt 4fpkt"];
827--3476[label="0.00993377;3pkt 3fpkt"];
827--3531[label="1;2pkt 2fpkt"];
827--3845[label="0.5;2pkt 2fpkt"];
827--4182[label="0.00993377;3pkt 3fpkt"];
827--4345[label="0.333333;1pkt 1fpkt"];
827--4508[label="0.00993377;3pkt 3fpkt"];
827--4576[label="0.333333;1pkt 1fpkt"];
978--2429[label="1;26pkt 26fpkt"];
978--2871[label="0.918919;34pkt 34fpkt"];
978--3503[label="0.972973;36pkt 36fpkt"];
988--2336[label="0.00625;1pkt 1fpkt"];
988--3069[label="0.00625;1pkt 1fpkt"];
988--3131[label="0.00625;1pkt 1fpkt"];
988--3143[label="0.00625;1pkt 1fpkt"];
988--3153[label="0.00625;1pkt 1fpkt"];
988--3270[label="0.588235;10pkt 10fpkt"];
988--3487[label="0.538462;7pkt 7fpkt"];
988--3510[label="0.00625;1pkt 1fpkt"];
988--3929[label="0.684211;13pkt 13fpkt"];
988--4195[label="0.00625;1pkt 1fpkt"];
988--4383[label="0.684211;13pkt 13fpkt"];
988--4514[label="0.00625;1pkt 1fpkt"];
988--4591[label="0.555556;10pkt 10fpkt"];
2429--2871[label="0.923077;24pkt 24fpkt"];
2429--3503[label="0.961538;25pkt 25fpkt"];
2871--3163[label="1;6pkt 6fpkt"];
2871--3270[label="0.235294;4pkt 4fpkt"];
2871--3487[label="0.230769;3pkt 3fpkt"];
2871--3503[label="0.918919;34pkt 34fpkt"];
2871--3836[label="1;1pkt 1fpkt"];
2871--3845[label="0.25;1pkt 1fpkt"];
2871--3929[label="0.0526316;1pkt 1fpkt"];
2871--4029[label="1;6pkt 6fpkt"];
2871--4150[label="1;1pkt 1fpkt"];
2871--4345[label="0.333333;1pkt 1fpkt"];
2871--4383[label="0.0526316;1pkt 1fpkt"];
2871--4431[label="1;6pkt 6fpkt"];
2871--4576[label="0.333333;1pkt 1fpkt"];
2871--4591[label="0.222222;4pkt 4fpkt"];
3163--4029[label="1;6pkt 6fpkt"];
3163--4431[label="1;6pkt 6fpkt"];
3845--4345[label="1;3pkt 3fpkt"];
3845--4576[label="1;3pkt 3fpkt"];
3929--4383[label="1;19pkt 19fpkt"];
4029--4431[label="1;6pkt 6fpkt"];
4345--4576[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.164.18"/>
      <filter dst_ip="129.141.145.30" dst_port="25"/>
      <filter dst_ip="192.65.176.81" src_port="25"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
3409[label="210.140.191.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4152[label="210.140.191.66;2pkt 2fpkt", shape=invtriangle, color=brown];
4493[label="210.140.191.66;2pkt 2fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.140.191.66:80, 162.94.101.68:1652}[50%]&lt;BR/&gt;{210.140.191.66:80, 162.94.101.68:1653}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1653: (25%)&lt;BR/&gt; 1652: (25%)&gt;];
}
3409--4152[label="1;2pkt 2fpkt"];
3409--4493[label="1;2pkt 2fpkt"];
4152--4493[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.101.68" dst_port="1653" src_ip="210.140.191.66" src_port="80"/>
      <filter dst_ip="162.94.101.68" dst_port="1652" src_ip="210.140.191.66" src_port="80"/>
    </slice>
    <from sec="1112590902" usec="0"/>
    <to sec="1112590934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.223.0.68"/>
    </slice>
    <from sec="1112591540" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.86.102.73"/>
    </slice>
    <from sec="1112590889" usec="0"/>
    <to sec="1112590893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.61.53.75"/>
    </slice>
    <from sec="1112591200" usec="0"/>
    <to sec="1112591244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
3440[label="129.141.131.76;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4165[label="129.141.131.76;42pkt 42fpkt", shape=invtriangle, color=brown];
4498[label="129.141.131.76;43pkt 43fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.141.131.76:*, 217.212.71.8:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 34209: (1.1811%)&lt;BR/&gt; 34208: (1.1811%)&lt;BR/&gt; 34207: (1.1811%)&lt;BR/&gt; 34206: (1.1811%)&gt;];
}
3440--4165[label="1;42pkt 42fpkt"];
3440--4498[label="1;42pkt 42fpkt"];
4165--4498[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="217.212.71.8" dst_port="443" src_ip="129.141.131.76"/>
    </slice>
    <from sec="1112590819" usec="0"/>
    <to sec="1112591055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.20.33.77"/>
    </slice>
    <from sec="1112591055" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
3446[label="135.68.92.79;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4169[label="135.68.92.79;16pkt 16fpkt", shape=invtriangle, color=brown];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.92.79:12479, *:*}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12479: (42.4242%)&lt;BR/&gt; 65285: (3.0303%)&lt;BR/&gt; 64835: (3.0303%)&lt;BR/&gt; 59829: (3.0303%)&lt;BR/&gt; 54060: (3.0303%)&gt;];
}
3446--4169[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="135.68.92.79" src_port="12479"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.183.158.79"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
3466[label="192.65.176.85;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4178[label="192.65.176.85;26pkt 26fpkt", shape=invtriangle, color=brown];
4505[label="192.65.176.85;26pkt 26fpkt", shape=invhouse, color=bisque];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.176.85:32768, *:53}[88.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (44.2308%)&lt;BR/&gt; 53: (44.2308%)&lt;BR/&gt; 25: (3.84615%)&lt;BR/&gt; 48921: (1.92308%)&lt;BR/&gt; 48566: (1.92308%)&gt;];
}
3466--4178[label="1;26pkt 26fpkt"];
3466--4505[label="1;26pkt 26fpkt"];
4178--4505[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="192.65.176.85" src_port="32768"/>
    </slice>
    <from sec="1112590831" usec="0"/>
    <to sec="1112591669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
3485[label="209.183.172.89;311pkt 311fpkt", shape=pentagon, color=darkviolet];
4187[label="209.183.172.89;310pkt 310fpkt", shape=invtriangle, color=brown];
4512[label="209.183.172.89;310pkt 310fpkt", shape=invhouse, color=bisque];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.183.172.89:*, *:9898}[59.8071%]&lt;BR/&gt;{209.183.172.89:*, *:5554}[40.1929%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (29.9678%)&lt;BR/&gt; 5554: (20.0322%)&lt;BR/&gt; 20276: (0.161117%)&lt;BR/&gt; 20268: (0.161117%)&lt;BR/&gt; 20267: (0.161117%)&gt;];
}
3485--4187[label="1;310pkt 310fpkt"];
3485--4512[label="1;310pkt 310fpkt"];
4187--4512[label="1;310pkt 310fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.183.172.89"/>
      <filter dst_port="5554" src_ip="209.183.172.89"/>
    </slice>
    <from sec="1112591032" usec="0"/>
    <to sec="1112591035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
3499[label="213.0.168.94;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4191[label="213.0.168.94;255pkt 255fpkt", shape=invtriangle, color=brown];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.0.168.94:62457, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62457: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3499--4191[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.0.168.94" src_port="62457"/>
    </slice>
    <from sec="1112591667" usec="0"/>
    <to sec="1112591681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
3501[label="216.155.225.94;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4192[label="216.155.225.94;3pkt 3fpkt", shape=invtriangle, color=brown];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.155.225.94:80, 129.141.27.10:49256}[33.3333%]&lt;BR/&gt;{216.155.225.94:80, 129.141.27.10:49257}[33.3333%]&lt;BR/&gt;{216.155.225.94:80, 129.141.27.10:49258}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49258: (16.6667%)&lt;BR/&gt; 49257: (16.6667%)&lt;BR/&gt; 49256: (16.6667%)&gt;];
}
3501--4192[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="129.141.27.10" dst_port="49258" src_ip="216.155.225.94" src_port="80"/>
      <filter dst_ip="129.141.27.10" dst_port="49257" src_ip="216.155.225.94" src_port="80"/>
      <filter dst_ip="129.141.27.10" dst_port="49256" src_ip="216.155.225.94" src_port="80"/>
    </slice>
    <from sec="1112591630" usec="0"/>
    <to sec="1112591661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
3525[label="135.69.238.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4198[label="135.69.238.101;1pkt 1fpkt", shape=invtriangle, color=brown];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.238.101:64289, 17.23.34.105:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64289: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3525--4198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.23.34.105" dst_port="80" src_ip="135.69.238.101" src_port="64289"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
3528[label="135.69.21.103;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4199[label="135.69.21.103;31pkt 31fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.21.103:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50070: (1.63934%)&lt;BR/&gt; 14709: (1.63934%)&lt;BR/&gt; 4905: (1.63934%)&lt;BR/&gt; 4843: (1.63934%)&gt;];
}
3528--4199[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="135.69.21.103" src_port="25"/>
    </slice>
    <from sec="1112590813" usec="0"/>
    <to sec="1112591663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
3537[label="135.69.168.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4202[label="135.69.168.105;1pkt 1fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.168.105:1101, 211.36.243.60:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1101: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3537--4202[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.36.243.60" dst_port="80" src_ip="135.69.168.105" src_port="1101"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.33.45.109"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.147,1.79141,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
83[label="215.1.235.109s;78pkt 78fpkt", shape=rectangle, color=red];
3548[label="215.1.235.109;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4209[label="215.1.235.109;251pkt 251fpkt", shape=invtriangle, color=brown];
4520[label="215.1.235.109;250pkt 250fpkt", shape=invhouse, color=bisque];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.1.235.109:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2874: (0.241255%)&lt;BR/&gt; 2872: (0.241255%)&lt;BR/&gt; 2870: (0.241255%)&lt;BR/&gt; 2868: (0.241255%)&gt;];
}
83--3548[label="1;78pkt 78fpkt"];
83--4209[label="1;78pkt 78fpkt"];
83--4520[label="1;78pkt 78fpkt"];
3548--4209[label="1;250pkt 250fpkt"];
3548--4520[label="1;250pkt 250fpkt"];
4209--4520[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="215.1.235.109"/>
    </slice>
    <from sec="1112591586" usec="0"/>
    <to sec="1112591638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.244.150.111"/>
    </slice>
    <from sec="1112591453" usec="0"/>
    <to sec="1112591513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
3561[label="209.199.230.113;222pkt 222fpkt", shape=pentagon, color=darkviolet];
4215[label="209.199.230.113;223pkt 223fpkt", shape=invtriangle, color=brown];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.199.230.113:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3561--4215[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.199.230.113" src_port="1044"/>
    </slice>
    <from sec="1112591522" usec="0"/>
    <to sec="1112591535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
3574[label="129.2.84.115;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4224[label="129.2.84.115;8pkt 8fpkt", shape=invtriangle, color=brown];
4526[label="129.2.84.115;8pkt 8fpkt", shape=invhouse, color=bisque];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.84.115:*, 216.46.117.73:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2091: (6.52174%)&lt;BR/&gt; 2090: (6.52174%)&lt;BR/&gt; 2089: (6.52174%)&lt;BR/&gt; 2086: (6.52174%)&gt;];
}
3574--4224[label="1;7pkt 7fpkt"];
3574--4526[label="1;7pkt 7fpkt"];
4224--4526[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="216.46.117.73" dst_port="80" src_ip="129.2.84.115"/>
    </slice>
    <from sec="1112591289" usec="0"/>
    <to sec="1112591398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
3585[label="193.221.157.119;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4228[label="193.221.157.119;6pkt 6fpkt", shape=invtriangle, color=brown];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.221.157.119:20, 167.172.41.159:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (36.3636%)&lt;BR/&gt; 2927: (9.09091%)&lt;BR/&gt; 2926: (9.09091%)&lt;BR/&gt; 2925: (9.09091%)&lt;BR/&gt; 2916: (9.09091%)&gt;];
}
3585--4228[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.172.41.159" src_ip="193.221.157.119" src_port="20"/>
    </slice>
    <from sec="1112590876" usec="0"/>
    <to sec="1112591033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
3590[label="209.185.73.123;244pkt 244fpkt", shape=pentagon, color=darkviolet];
4229[label="209.185.73.123;245pkt 245fpkt", shape=invtriangle, color=brown];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.185.73.123:55745, *:1026}[35.9184%]&lt;BR/&gt;{209.185.73.123:53981, *:1026}[32.2449%]&lt;BR/&gt;{209.185.73.123:52024, *:1026}[31.8367%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 55745: (17.8937%)&lt;BR/&gt; 53981: (16.1554%)&lt;BR/&gt; 52024: (15.9509%)&gt;];
}
3590--4229[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="209.185.73.123" src_port="55745"/>
      <filter dst_port="1026" src_ip="209.185.73.123" src_port="53981"/>
      <filter dst_port="1026" src_ip="209.185.73.123" src_port="52024"/>
    </slice>
    <from sec="1112591132" usec="0"/>
    <to sec="1112591582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
3592[label="193.196.146.123;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4231[label="193.196.146.123;62pkt 62fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.196.146.123:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4947: (0.813008%)&lt;BR/&gt; 4856: (0.813008%)&lt;BR/&gt; 4491: (0.813008%)&lt;BR/&gt; 4319: (0.813008%)&gt;];
}
3592--4231[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="193.196.146.123"/>
    </slice>
    <from sec="1112590824" usec="0"/>
    <to sec="1112591653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.247.16.126"/>
    </slice>
    <from sec="1112590812" usec="0"/>
    <to sec="1112591672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
3597[label="99.131.164.126;67pkt 67fpkt", shape=pentagon, color=darkviolet];
4234[label="99.131.164.126;68pkt 68fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.131.164.126:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4848: (0.740741%)&lt;BR/&gt; 4742: (0.740741%)&lt;BR/&gt; 4741: (0.740741%)&lt;BR/&gt; 4739: (0.740741%)&gt;];
}
3597--4234[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="99.131.164.126"/>
    </slice>
    <from sec="1112590815" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
3619[label="129.2.69.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4239[label="129.2.69.133;2pkt 2fpkt", shape=invtriangle, color=brown];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.2.69.133:54372, 16.78.216.139:80}[33.3333%]&lt;BR/&gt;{129.2.69.133:54373, 72.113.178.5:80}[33.3333%]&lt;BR/&gt;{129.2.69.133:54374, 72.113.178.5:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54374: (20%)&lt;BR/&gt; 54372: (20%)&lt;BR/&gt; 54373: (10%)&gt;];
}
3619--4239[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="72.113.178.5" dst_port="80" src_ip="129.2.69.133" src_port="54374"/>
      <filter dst_ip="72.113.178.5" dst_port="80" src_ip="129.2.69.133" src_port="54373"/>
      <filter dst_ip="16.78.216.139" dst_port="80" src_ip="129.2.69.133" src_port="54372"/>
    </slice>
    <from sec="1112591586" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.172.73.140"/>
    </slice>
    <from sec="1112591071" usec="0"/>
    <to sec="1112591679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
3672[label="99.112.197.143;174pkt 174fpkt", shape=pentagon, color=darkviolet];
4265[label="99.112.197.143;173pkt 173fpkt", shape=invtriangle, color=brown];
4547[label="99.112.197.143;174pkt 174fpkt", shape=invhouse, color=bisque];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.112.197.143:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3672--4265[label="1;173pkt 173fpkt"];
3672--4547[label="1;174pkt 174fpkt"];
4265--4547[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.112.197.143" src_port="1030"/>
    </slice>
    <from sec="1112590827" usec="0"/>
    <to sec="1112590876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
1513[label="144.126.74.210;d;102pkt 102fpkt", shape=diamond, color=yellow];
3673[label="208.130.0.144;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3906[label="208.137.101.213;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4266[label="208.130.0.144;27pkt 27fpkt", shape=invtriangle, color=brown];
4373[label="208.137.101.213;5pkt 5fpkt", shape=invtriangle, color=brown];
4587[label="208.137.101.213;5pkt 5fpkt", shape=invhouse, color=bisque];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.130.0.144:80, 144.126.74.210:*}[27.451%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.5965%)&lt;BR/&gt; 8000: (2.63158%)&lt;BR/&gt; 1124: (1.46199%)&lt;BR/&gt; 4000: (1.16959%)&lt;BR/&gt; 3116: (1.16959%)&gt;];
}
1513--2260[label="0.00980392;1pkt 1fpkt"];
1513--3126[label="0.0588235;6pkt 6fpkt"];
1513--3128[label="0.00980392;1pkt 1fpkt"];
1513--3130[label="0.0294118;3pkt 3fpkt"];
1513--3140[label="0.0588235;6pkt 6fpkt"];
1513--3142[label="0.0294118;3pkt 3fpkt"];
1513--3150[label="0.0588235;6pkt 6fpkt"];
1513--3152[label="0.0294118;3pkt 3fpkt"];
1513--3472[label="0.333333;3pkt 3fpkt"];
1513--3673[label="1;27pkt 27fpkt"];
1513--3906[label="1;5pkt 5fpkt"];
1513--4266[label="1;27pkt 27fpkt"];
1513--4373[label="1;5pkt 5fpkt"];
1513--4587[label="1;5pkt 5fpkt"];
3673--4266[label="1;27pkt 27fpkt"];
3906--4373[label="1;5pkt 5fpkt"];
3906--4587[label="1;5pkt 5fpkt"];
4373--4587[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.74.210" src_ip="208.130.0.144" src_port="80"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.163.54.149"/>
    </slice>
    <from sec="1112590803" usec="0"/>
    <to sec="1112591661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
3718[label="135.68.16.156;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4284[label="135.68.16.156;44pkt 44fpkt", shape=invtriangle, color=brown];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.68.16.156:443, 200.89.74.157:*}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3754: (1.13636%)&lt;BR/&gt; 3753: (1.13636%)&lt;BR/&gt; 3750: (1.13636%)&lt;BR/&gt; 3749: (1.13636%)&gt;];
}
3718--4284[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="200.89.74.157" src_ip="135.68.16.156" src_port="443"/>
    </slice>
    <from sec="1112590821" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
3723[label="211.34.126.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4287[label="211.34.126.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.34.126.156:80, 162.94.157.164:60625}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60625: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3723--4287[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.94.157.164" dst_port="60625" src_ip="211.34.126.156" src_port="80"/>
    </slice>
    <from sec="1112591615" usec="0"/>
    <to sec="1112591639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
3745[label="208.139.114.161;214pkt 214fpkt", shape=pentagon, color=darkviolet];
4296[label="208.139.114.161;214pkt 214fpkt", shape=invtriangle, color=brown];
4558[label="208.139.114.161;214pkt 214fpkt", shape=invhouse, color=bisque];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.139.114.161:19353, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19353: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3745--4296[label="1;214pkt 214fpkt"];
3745--4558[label="1;214pkt 214fpkt"];
4296--4558[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.139.114.161" src_port="19353"/>
    </slice>
    <from sec="1112591126" usec="0"/>
    <to sec="1112591140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.75.164.167"/>
    </slice>
    <from sec="1112591186" usec="0"/>
    <to sec="1112591190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
3776[label="99.188.2.171;239pkt 239fpkt", shape=pentagon, color=darkviolet];
4311[label="99.188.2.171;240pkt 240fpkt", shape=invtriangle, color=brown];
4565[label="99.188.2.171;239pkt 239fpkt", shape=invhouse, color=bisque];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.188.2.171:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3776--4311[label="1;239pkt 239fpkt"];
3776--4565[label="1;239pkt 239fpkt"];
4311--4565[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.188.2.171" src_port="1035"/>
    </slice>
    <from sec="1112591429" usec="0"/>
    <to sec="1112591444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.172.106.175"/>
    </slice>
    <from sec="1112590810" usec="0"/>
    <to sec="1112591697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.18.95.176"/>
    </slice>
    <from sec="1112591265" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
3801[label="162.94.2.178;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4325[label="162.94.2.178;17pkt 17fpkt", shape=invtriangle, color=brown];
4570[label="162.94.2.178;17pkt 17fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.94.2.178:*, 218.186.221.152:80}[72.2222%]&lt;BR/&gt;{162.94.2.178:*, 211.247.40.131:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3697: (2.94118%)&lt;BR/&gt; 3696: (2.94118%)&lt;BR/&gt; 3695: (2.94118%)&lt;BR/&gt; 3694: (2.94118%)&gt;];
}
3801--4325[label="1;17pkt 17fpkt"];
3801--4570[label="0.941176;16pkt 16fpkt"];
4325--4570[label="0.941176;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="218.186.221.152" dst_port="80" src_ip="162.94.2.178"/>
      <filter dst_ip="211.247.40.131" dst_port="80" src_ip="162.94.2.178"/>
    </slice>
    <from sec="1112591086" usec="0"/>
    <to sec="1112591151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
3808[label="99.143.25.180;140pkt 140fpkt", shape=pentagon, color=darkviolet];
4327[label="99.143.25.180;139pkt 139fpkt", shape=invtriangle, color=brown];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.143.25.180:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3808--4327[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.143.25.180" src_port="1025"/>
    </slice>
    <from sec="1112591447" usec="0"/>
    <to sec="1112591461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.196.81.180"/>
    </slice>
    <from sec="1112590820" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1792[label="192.65.160.182;s;21pkt 21fpkt", shape=diamond, color=yellow];
3816[label="192.65.160.182;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4331[label="192.65.160.182;23pkt 23fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.160.182:17151, 208.133.8.146:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17151: (47.7612%)&lt;BR/&gt; 64213: (2.23881%)&lt;BR/&gt; 63707: (2.23881%)&lt;BR/&gt; 63619: (2.23881%)&lt;BR/&gt; 62405: (2.23881%)&gt;];
}
1792--3816[label="1;21pkt 21fpkt"];
1792--4331[label="1;21pkt 21fpkt"];
3816--4331[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="208.133.8.146" src_ip="192.65.160.182" src_port="17151"/>
    </slice>
    <from sec="1112590801" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
3819[label="209.58.77.183;140pkt 140fpkt", shape=pentagon, color=darkviolet];
4333[label="209.58.77.183;139pkt 139fpkt", shape=invtriangle, color=brown];
4572[label="209.58.77.183;139pkt 139fpkt", shape=invhouse, color=bisque];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.58.77.183:*, *:5554}[57.1429%]&lt;BR/&gt;{209.58.77.183:*, *:1023}[41.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (28.4689%)&lt;BR/&gt; 1023: (20.8134%)&lt;BR/&gt; 9898: (0.717703%)&lt;BR/&gt; 4448: (0.358852%)&lt;BR/&gt; 4447: (0.358852%)&gt;];
}
3819--4333[label="1;139pkt 139fpkt"];
3819--4572[label="1;139pkt 139fpkt"];
4333--4572[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="209.58.77.183"/>
      <filter dst_port="1023" src_ip="209.58.77.183"/>
    </slice>
    <from sec="1112591147" usec="0"/>
    <to sec="1112591152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
1983[label="211.58.236.175;d;17pkt 17fpkt", shape=diamond, color=yellow];
3831[label="167.172.38.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4337[label="167.172.38.189;1pkt 1fpkt", shape=invtriangle, color=brown];
4575[label="167.172.38.189;1pkt 1fpkt", shape=invhouse, color=bisque];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.58.236.175:5050}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45%)&lt;BR/&gt; 1632: (10%)&lt;BR/&gt; 64561: (2.5%)&lt;BR/&gt; 4015: (2.5%)&lt;BR/&gt; 3059: (2.5%)&gt;];
}
1983--2514[label="0.0588235;1pkt 1fpkt"];
1983--3600[label="0.0588235;1pkt 1fpkt"];
1983--3831[label="1;1pkt 1fpkt"];
1983--4337[label="1;1pkt 1fpkt"];
1983--4575[label="1;1pkt 1fpkt"];
3831--4337[label="1;1pkt 1fpkt"];
3831--4575[label="1;1pkt 1fpkt"];
4337--4575[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.58.236.175" dst_port="5050"/>
    </slice>
    <from sec="1112590802" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.245.179.190"/>
    </slice>
    <from sec="1112591024" usec="0"/>
    <to sec="1112591202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="135.68.218.193"/>
    </slice>
    <from sec="1112591289" usec="0"/>
    <to sec="1112591653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
2242[label="135.69.24.194;s;44pkt 44fpkt", shape=diamond, color=yellow];
3847[label="135.69.24.194;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4347[label="135.69.24.194;47pkt 47fpkt", shape=invtriangle, color=brown];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.24.194:*, 16.78.173.9:443}[50%]&lt;BR/&gt;{135.69.24.194:*, *:80}[47.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.1739%)&lt;BR/&gt; 80: (22.8261%)&lt;BR/&gt; 1884: (1.08696%)&lt;BR/&gt; 1883: (1.08696%)&lt;BR/&gt; 1882: (1.08696%)&gt;];
}
2242--3138[label="0.159091;7pkt 7fpkt"];
2242--3847[label="0.977273;43pkt 43fpkt"];
2242--4347[label="0.977273;43pkt 43fpkt"];
3847--4347[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="135.69.24.194"/>
      <filter dst_ip="16.78.173.9" dst_port="443" src_ip="135.69.24.194"/>
    </slice>
    <from sec="1112591527" usec="0"/>
    <to sec="1112591689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.90.114.195"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
3854[label="135.69.71.197;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4351[label="135.69.71.197;34pkt 34fpkt", shape=invtriangle, color=brown];
4578[label="135.69.71.197;34pkt 34fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.71.197:*, 16.78.186.247:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49638: (1.45631%)&lt;BR/&gt; 49637: (1.45631%)&lt;BR/&gt; 49636: (1.45631%)&lt;BR/&gt; 49635: (1.45631%)&gt;];
}
3854--4351[label="1;34pkt 34fpkt"];
3854--4578[label="1;34pkt 34fpkt"];
4351--4578[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="16.78.186.247" dst_port="80" src_ip="135.69.71.197"/>
    </slice>
    <from sec="1112591313" usec="0"/>
    <to sec="1112591438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739301,1.69908,051,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1132[label="220.39.130.144;d;116pkt 116fpkt", shape=diamond, color=yellow];
1776[label="211.58.236.168;d;14pkt 14fpkt", shape=diamond, color=yellow];
1940[label="221.233.178.17;d;76pkt 76fpkt", shape=diamond, color=yellow];
1952[label="211.58.236.184;d;23pkt 23fpkt", shape=diamond, color=yellow];
2109[label="211.58.236.152;d;31pkt 31fpkt", shape=diamond, color=yellow];
2946[label="211.58.236.184;d;23pkt 23fpkt", shape=hexagon, color=black];
3743[label="135.68.212.160;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4295[label="135.68.212.160;35pkt 35fpkt", shape=invtriangle, color=brown];
4352[label="167.172.187.198;208pkt 208fpkt", shape=invtriangle, color=brown];
4360[label="167.172.33.203;14pkt 14fpkt", shape=invtriangle, color=brown];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.172.187.198:*, *:443}[39.6588%]&lt;BR/&gt;{*:*, 220.39.130.144:21}[22.1748%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (20.7826%)&lt;BR/&gt; 443: (16.1739%)&lt;BR/&gt; 5050: (8%)&lt;BR/&gt; 25: (0.695652%)&lt;BR/&gt; 20: (0.434783%)&gt;];
}
1132--3743[label="1;35pkt 35fpkt"];
1132--4295[label="1;35pkt 35fpkt"];
1132--4352[label="0.0258621;3pkt 3fpkt"];
1132--4360[label="0.142857;2pkt 2fpkt"];
1776--4360[label="0.0714286;1pkt 1fpkt"];
1940--4352[label="0.0526316;4pkt 4fpkt"];
1952--2946[label="1;23pkt 23fpkt"];
1952--4352[label="0.0434783;1pkt 1fpkt"];
2109--4360[label="0.142857;2pkt 2fpkt"];
2946--4352[label="0.0434783;1pkt 1fpkt"];
3743--4295[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="167.172.187.198"/>
      <filter dst_ip="220.39.130.144" dst_port="21"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.50.231.198"/>
    </slice>
    <from sec="1112591435" usec="0"/>
    <to sec="1112591445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.124.93.204"/>
    </slice>
    <from sec="1112591701" usec="0"/>
    <to sec="1112591702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
3903[label="135.69.50.212;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4371[label="135.69.50.212;13pkt 13fpkt", shape=invtriangle, color=brown];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.69.50.212:*, 196.34.81.197:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2046: (4%)&lt;BR/&gt; 2044: (4%)&lt;BR/&gt; 2040: (4%)&lt;BR/&gt; 2036: (4%)&gt;];
}
3903--4371[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.34.81.197" dst_port="80" src_ip="135.69.50.212"/>
    </slice>
    <from sec="1112591593" usec="0"/>
    <to sec="1112591694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
3920[label="192.122.147.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4380[label="192.122.147.217;2pkt 2fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.122.147.217:80, 144.126.217.70:1116}[50%]&lt;BR/&gt;{192.122.147.217:80, 144.126.217.70:1120}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1120: (33.3333%)&lt;BR/&gt; 1116: (16.6667%)&gt;];
}
3920--4380[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.126.217.70" dst_port="1120" src_ip="192.122.147.217" src_port="80"/>
      <filter dst_ip="144.126.217.70" dst_port="1116" src_ip="192.122.147.217" src_port="80"/>
    </slice>
    <from sec="1112591211" usec="0"/>
    <to sec="1112591251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
3962[label="192.65.177.233;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4394[label="192.65.177.233;7pkt 7fpkt", shape=invtriangle, color=brown];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.65.177.233:*, 197.91.8.3:1863}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1988: (7.69231%)&lt;BR/&gt; 1980: (7.69231%)&lt;BR/&gt; 1977: (7.69231%)&lt;BR/&gt; 1973: (7.69231%)&gt;];
}
3962--4394[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="197.91.8.3" dst_port="1863" src_ip="192.65.177.233"/>
    </slice>
    <from sec="1112590805" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
3980[label="70.195.118.238;115pkt 115fpkt", shape=pentagon, color=darkviolet];
4404[label="70.195.118.238;116pkt 116fpkt", shape=invtriangle, color=brown];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.195.118.238:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3980--4404[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="70.195.118.238" src_port="1031"/>
    </slice>
    <from sec="1112590858" usec="0"/>
    <to sec="1112590872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
3984[label="99.118.185.240;327pkt 327fpkt", shape=pentagon, color=darkviolet];
4406[label="99.118.185.240;327pkt 327fpkt", shape=invtriangle, color=brown];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.118.185.240:*, *:9898}[66.6667%]&lt;BR/&gt;{99.118.185.240:*, *:5554}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (33.3333%)&lt;BR/&gt; 5554: (16.6667%)&lt;BR/&gt; 2177: (0.152905%)&lt;BR/&gt; 2174: (0.152905%)&lt;BR/&gt; 2172: (0.152905%)&gt;];
}
3984--4406[label="1;327pkt 327fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="99.118.185.240"/>
      <filter dst_port="5554" src_ip="99.118.185.240"/>
    </slice>
    <from sec="1112591247" usec="0"/>
    <to sec="1112591249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
3992[label="99.45.150.242;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4408[label="99.45.150.242;60pkt 60fpkt", shape=invtriangle, color=brown];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.45.150.242:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4998: (0.826446%)&lt;BR/&gt; 4899: (0.826446%)&lt;BR/&gt; 4810: (0.826446%)&lt;BR/&gt; 4634: (0.826446%)&gt;];
}
3992--4408[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="99.45.150.242"/>
    </slice>
    <from sec="1112590815" usec="0"/>
    <to sec="1112591659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.668143,1.8603,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.168.34.244"/>
    </slice>
    <from sec="1112590965" usec="0"/>
    <to sec="1112591042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
1342[label="192.65.181.129;d;155pkt 155fpkt", shape=diamond, color=yellow];
4000[label="199.209.187.244;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4414[label="199.209.187.244;15pkt 15fpkt", shape=invtriangle, color=brown];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 192.65.181.129:0}[91.1243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4595%)&lt;BR/&gt; 6000: (0.27027%)&lt;BR/&gt; 4899: (0.27027%)&gt;];
}
1342--2336[label="0.00645161;1pkt 1fpkt"];
1342--3069[label="0.00645161;1pkt 1fpkt"];
1342--3131[label="0.00645161;1pkt 1fpkt"];
1342--3143[label="0.00645161;1pkt 1fpkt"];
1342--3153[label="0.00645161;1pkt 1fpkt"];
1342--3510[label="0.00645161;1pkt 1fpkt"];
1342--4000[label="0.0666667;1pkt 1fpkt"];
1342--4195[label="0.00645161;1pkt 1fpkt"];
1342--4414[label="0.0666667;1pkt 1fpkt"];
1342--4514[label="0.00645161;1pkt 1fpkt"];
4000--4414[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="192.65.181.129"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.651492,1.75346,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
1338[label="193.180.137.245;s;957pkt 957fpkt", shape=diamond, color=yellow];
4005[label="193.180.137.245;1030pkt 1030fpkt", shape=pentagon, color=darkviolet];
4418[label="193.180.137.245;1024pkt 1024fpkt", shape=invtriangle, color=brown];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.180.137.245:1044, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1044: (50%)&gt;];
}
1338--1809[label="0.0128205;1pkt 1fpkt"];
1338--4005[label="0.996865;954pkt 954fpkt"];
1338--4418[label="0.990596;948pkt 948fpkt"];
4005--4418[label="1;1024pkt 1024fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="193.180.137.245" src_port="1044"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919029,1.82184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
4016[label="99.33.178.250;353pkt 353fpkt", shape=pentagon, color=darkviolet];
4425[label="99.33.178.250;353pkt 353fpkt", shape=invtriangle, color=brown];
4609[label="99.33.178.250;353pkt 353fpkt", shape=invhouse, color=bisque];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.33.178.250:*, *:1026}[99.7167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (49.8584%)&lt;BR/&gt; 49057: (0.283286%)&lt;BR/&gt; 48737: (0.283286%)&lt;BR/&gt; 45318: (0.283286%)&lt;BR/&gt; 0: (0.283286%)&gt;];
}
4016--4425[label="1;353pkt 353fpkt"];
4016--4609[label="1;353pkt 353fpkt"];
4425--4609[label="1;353pkt 353fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="99.33.178.250"/>
    </slice>
    <from sec="1112590948" usec="0"/>
    <to sec="1112591551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64187,1.8144,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
4022[label="22.249.110.254;135pkt 135fpkt", shape=pentagon, color=darkviolet];
4428[label="22.249.110.254;136pkt 136fpkt", shape=invtriangle, color=brown];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.249.110.254:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3884: (0.738007%)&lt;BR/&gt; 1992: (0.738007%)&lt;BR/&gt; 1638: (0.738007%)&lt;BR/&gt; 4999: (0.369004%)&gt;];
}
4022--4428[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="22.249.110.254"/>
    </slice>
    <from sec="1112590807" usec="0"/>
    <to sec="1112591698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.6.180.18"/>
    </slice>
    <from sec="1112591611" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.44.50.22"/>
    </slice>
    <from sec="1112590860" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.69.154.31"/>
    </slice>
    <from sec="1112591296" usec="0"/>
    <to sec="1112591699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925775,1.76116,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
762[label="22.6.193.132;d;879pkt 879fpkt", shape=diamond, color=yellow];
3237[label="167.172.99.18;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3797[label="167.172.47.177;84pkt 84fpkt", shape=pentagon, color=darkviolet];
4323[label="167.172.47.177;84pkt 84fpkt", shape=invtriangle, color=brown];
4462[label="167.172.99.34;82pkt 82fpkt", shape=invhouse, color=bisque];
4569[label="167.172.47.177;84pkt 84fpkt", shape=invhouse, color=bisque];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 22.6.193.132:6667}[99.6689%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (49.9615%)&lt;BR/&gt; 1345: (0.307929%)&lt;BR/&gt; 1430: (0.269438%)&lt;BR/&gt; 1973: (0.230947%)&lt;BR/&gt; 1939: (0.230947%)&gt;];
}
762--3237[label="0.906977;78pkt 78fpkt"];
762--3797[label="0.904762;76pkt 76fpkt"];
762--4323[label="0.904762;76pkt 76fpkt"];
762--4462[label="0.865854;71pkt 71fpkt"];
762--4569[label="0.904762;76pkt 76fpkt"];
3797--4323[label="1;84pkt 84fpkt"];
3797--4569[label="1;84pkt 84fpkt"];
4323--4569[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="22.6.193.132" dst_port="6667"/>
    </slice>
    <from sec="1112590800" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.24.87.45"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.183.158.79"/>
    </slice>
    <from sec="1112590804" usec="0"/>
    <to sec="1112591693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.232.93.114"/>
    </slice>
    <from sec="1112591181" usec="0"/>
    <to sec="1112591618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.115.251.140"/>
    </slice>
    <from sec="1112591591" usec="0"/>
    <to sec="1112591633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818777,1.85242,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
3860[label="99.50.231.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4579[label="99.50.231.198;1pkt 1fpkt", shape=invhouse, color=bisque];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.50.231.198:33510, 135.69.246.150:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33510: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3860--4579[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.69.246.150" dst_port="25" src_ip="99.50.231.198" src_port="33510"/>
    </slice>
    <from sec="1112591435" usec="0"/>
    <to sec="1112591445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839532,1.8974,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="175.6.16.241"/>
    </slice>
    <from sec="1112591687" usec="0"/>
    <to sec="1112591700" usec="0"/>
  </anomaly>

</admd:annotation>
