<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.24985,2.27773,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="36.192.81.31" src_port="10186"/>
      <from sec="1118034034" usec="0"/>
      <to sec="1118034039" usec="0"/>
    </slice>
    <from sec="1118034034" usec="0"/>
    <to sec="1118034039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24985,2.27773,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="217.99.226.132" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="217.99.226.132" src_port="1026"/>
      <from sec="1118034702" usec="0"/>
      <to sec="1118034715" usec="0"/>
    </slice>
    <from sec="1118034702" usec="0"/>
    <to sec="1118034716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24985,2.27773,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="81.15.33.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="81.15.33.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="81.15.33.161" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="81.15.33.161" src_port="22"/>
      <from sec="1118034672" usec="0"/>
      <to sec="1118034686" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="176.196.93.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="176.196.93.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="176.196.93.161" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="176.196.93.161" src_port="22"/>
      <from sec="1118034673" usec="0"/>
      <to sec="1118034684" usec="0"/>
    </slice>
    <from sec="1118034672" usec="0"/>
    <to sec="1118034686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24985,2.27773,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="38.126.145.251" src_port="1049"/>
      <from sec="1118034637" usec="0"/>
      <to sec="1118034646" usec="0"/>
    </slice>
    <from sec="1118034637" usec="0"/>
    <to sec="1118034646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24985,2.27773,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="197.2.3.77"/>
      <from sec="1118034829" usec="0"/>
      <to sec="1118034831" usec="0"/>
    </slice>
    <from sec="1118034829" usec="0"/>
    <to sec="1118034831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24985,2.27773,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="445" proto="tcp" src_ip="37.173.74.213"/>
      <filter dst_ip="175.199.142.152" dst_port="135" proto="tcp" src_ip="37.173.74.213"/>
      <from sec="1118034158" usec="0"/>
      <to sec="1118034229" usec="0"/>
    </slice>
    <from sec="1118034157" usec="0"/>
    <to sec="1118034229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24985,2.27773,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.171.106.148" proto="icmp"/>
      <filter dst_ip="220.171.106.148" proto="icmp"/>
      <filter dst_ip="220.171.106.148" proto="icmp"/>
      <filter dst_ip="220.171.106.148" proto="icmp"/>
      <from sec="1118034046" usec="0"/>
      <to sec="1118034051" usec="0"/>
    </slice>
    <from sec="1118034046" usec="0"/>
    <to sec="1118034051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.61669,2.51666,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="81.15.33.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="81.15.33.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="81.15.33.161" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="81.15.33.161" src_port="22"/>
      <from sec="1118034674" usec="0"/>
      <to sec="1118034686" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="176.196.93.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="176.196.93.161" src_port="1025"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="tcp" src_ip="176.196.93.161" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="137" proto="udp" src_ip="176.196.93.161" src_port="22"/>
      <from sec="1118034676" usec="0"/>
      <to sec="1118034684" usec="0"/>
    </slice>
    <from sec="1118034674" usec="0"/>
    <to sec="1118034686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.61669,2.51666,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.53.136.70" dst_port="445" proto="tcp" src_ip="196.28.51.67" src_port="80"/>
      <from sec="1118034403" usec="0"/>
      <to sec="1118034427" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="196.53.136.70" dst_port="445" proto="tcp" src_ip="176.196.23.67" src_port="80"/>
      <from sec="1118034414" usec="0"/>
      <to sec="1118034427" usec="0"/>
    </slice>
    <from sec="1118034403" usec="0"/>
    <to sec="1118034427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817465,2.1662,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
221[label="175.199.181.100;d;6pkt 6fpkt", shape=diamond, color=yellow];
222[label="222.113.53.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
3804[label="222.113.53.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7681[label="222.113.53.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 175.199.181.100:*}[66.6667%]&lt;BR/&gt;{222.113.53.24:*, 175.199.181.100:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27791: (20%)&lt;BR/&gt; 20130: (20%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 35656: (10%)&lt;BR/&gt; 34438: (10%)&gt;];
}
221--222[label="1;2pkt 2fpkt"];
221--3804[label="1;1pkt 1fpkt"];
221--7681[label="1;1pkt 1fpkt"];
222--3804[label="1;1pkt 1fpkt"];
222--7681[label="1;1pkt 1fpkt"];
3804--7681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.181.100" src_ip="222.113.53.24"/>
      <filter dst_ip="175.199.181.100" src_port="1863"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
390[label="53.244.227.168;d;66pkt 66fpkt", shape=diamond, color=yellow];
391[label="183.82.172.15;s;66pkt 66fpkt", shape=diamond, color=yellow];
3699[label="183.82.172.15;92pkt 92fpkt", shape=pentagon, color=darkviolet];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.172.15:*, 53.244.227.168:80}[96.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3304%)&lt;BR/&gt; 44013: (0.669643%)&lt;BR/&gt; 44012: (0.669643%)&lt;BR/&gt; 44010: (0.669643%)&lt;BR/&gt; 44009: (0.669643%)&gt;];
}
390--391[label="1;66pkt 66fpkt"];
390--3699[label="1;66pkt 66fpkt"];
391--3699[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="53.244.227.168" dst_port="80" src_ip="183.82.172.15"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
401[label="128.65.169.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
402[label="201.85.72.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2683[label="128.65.169.160;s;1pkt 1fpkt", shape=hexagon, color=black];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.169.160:1070, 201.85.72.2:7665}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7665: (50%)&lt;BR/&gt; 1070: (50%)&gt;];
}
401--402[label="1;1pkt 1fpkt"];
401--2683[label="1;1pkt 1fpkt"];
402--2683[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.85.72.2" dst_port="7665" src_ip="128.65.169.160" src_port="1070"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10837,2.19046,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
459[label="133.167.0.39;d;3pkt 3fpkt", shape=diamond, color=yellow];
460[label="218.181.21.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
2910[label="218.181.21.32;s;1pkt 1fpkt", shape=hexagon, color=black];
6260[label="218.181.21.32;1pkt 1fpkt", shape=invtriangle, color=brown];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.181.21.32:1694, 133.167.0.39:33603}[33.3333%]&lt;BR/&gt;{48.218.44.49:50703, 133.167.0.39:2764}[33.3333%]&lt;BR/&gt;{187.226.88.85:53286, 133.167.0.39:1874}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33603: (33.3333%)&lt;BR/&gt; 1694: (33.3333%)&lt;BR/&gt; 53286: (8.33333%)&lt;BR/&gt; 50703: (8.33333%)&lt;BR/&gt; 2764: (8.33333%)&gt;];
}
459--460[label="1;1pkt 1fpkt"];
459--2910[label="1;1pkt 1fpkt"];
459--6260[label="1;1pkt 1fpkt"];
460--2910[label="1;1pkt 1fpkt"];
460--6260[label="1;1pkt 1fpkt"];
2910--6260[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.0.39" dst_port="1874" src_ip="187.226.88.85" src_port="53286"/>
      <filter dst_ip="133.167.0.39" dst_port="2764" src_ip="48.218.44.49" src_port="50703"/>
      <filter dst_ip="133.167.0.39" dst_port="33603" src_ip="218.181.21.32" src_port="1694"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3595,2.23251,901,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
110[label="197.185.169.178s;252pkt 252fpkt", shape=rectangle, color=red];
489[label="197.185.169.178;s;380pkt 380fpkt", shape=diamond, color=yellow];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.185.169.178:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4348: (0.158228%)&lt;BR/&gt; 4347: (0.158228%)&lt;BR/&gt; 4346: (0.158228%)&lt;BR/&gt; 4345: (0.158228%)&gt;];
}
110--489[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.185.169.178"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
231[label="197.77.192.69;s;2pkt 2fpkt", shape=diamond, color=yellow];
561[label="209.60.151.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
3037[label="197.77.192.69;s;2pkt 2fpkt", shape=hexagon, color=black];
4233[label="197.77.192.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6495[label="197.77.192.69;1pkt 1fpkt", shape=invtriangle, color=brown];
7822[label="197.77.192.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.192.69:68, 114.254.192.23:67}[50%]&lt;BR/&gt;{197.77.192.69:3198, 209.60.151.84:13304}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 68: (31.25%)&lt;BR/&gt; 67: (31.25%)&lt;BR/&gt; 13304: (18.75%)&lt;BR/&gt; 3198: (18.75%)&gt;];
}
231--561[label="1;1pkt 1fpkt"];
231--3037[label="1;2pkt 2fpkt"];
231--4233[label="1;1pkt 1fpkt"];
231--6495[label="1;1pkt 1fpkt"];
231--7822[label="1;1pkt 1fpkt"];
561--3037[label="1;1pkt 1fpkt"];
3037--4233[label="1;1pkt 1fpkt"];
3037--6495[label="1;1pkt 1fpkt"];
3037--7822[label="1;1pkt 1fpkt"];
4233--6495[label="1;1pkt 1fpkt"];
4233--7822[label="1;1pkt 1fpkt"];
6495--7822[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.60.151.84" dst_port="13304" src_ip="197.77.192.69" src_port="3198"/>
      <filter dst_ip="114.254.192.23" dst_port="67" src_ip="197.77.192.69" src_port="68"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
279[label="183.82.19.226;s;2pkt 2fpkt", shape=diamond, color=yellow];
601[label="215.8.23.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
2874[label="215.8.23.178;d;1pkt 1fpkt", shape=hexagon, color=black];
5834[label="183.82.19.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.19.226:1179, 192.9.56.144:1863}[50%]&lt;BR/&gt;{183.82.19.226:1414, 215.8.23.178:9500}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9500: (40%)&lt;BR/&gt; 1414: (40%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1179: (10%)&gt;];
}
279--601[label="1;1pkt 1fpkt"];
279--2874[label="1;1pkt 1fpkt"];
279--5834[label="1;1pkt 1fpkt"];
601--2874[label="1;1pkt 1fpkt"];
601--5834[label="1;1pkt 1fpkt"];
2874--5834[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.8.23.178" dst_port="9500" src_ip="183.82.19.226" src_port="1414"/>
      <filter dst_ip="192.9.56.144" dst_port="1863" src_ip="183.82.19.226" src_port="1179"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
294[label="183.174.32.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
611[label="194.83.237.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
2789[label="183.174.32.76;s;1pkt 1fpkt", shape=hexagon, color=black];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.32.76:1885, 194.83.237.41:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1885: (50%)&gt;];
}
294--611[label="1;1pkt 1fpkt"];
294--2789[label="1;1pkt 1fpkt"];
611--2789[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.83.237.41" dst_port="8000" src_ip="183.174.32.76" src_port="1885"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817465,2.1662,901,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
311[label="216.165.8.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
620[label="130.154.168.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
4644[label="216.165.8.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7942[label="216.165.8.109;1pkt 1fpkt", shape=invhouse, color=bisque];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.165.8.109:20136, 130.154.168.49:1029}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20136: (50%)&lt;BR/&gt; 1029: (50%)&gt;];
}
311--620[label="1;1pkt 1fpkt"];
311--4644[label="1;1pkt 1fpkt"];
311--7942[label="1;1pkt 1fpkt"];
620--4644[label="1;1pkt 1fpkt"];
620--7942[label="1;1pkt 1fpkt"];
4644--7942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.168.49" dst_port="1029" src_ip="216.165.8.109" src_port="20136"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
657[label="172.17.2.21;d;2pkt 2fpkt", shape=diamond, color=yellow];
658[label="197.66.101.202;s;2pkt 2fpkt", shape=diamond, color=yellow];
5618[label="197.66.101.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.101.202:1042, 172.17.2.21:6666}[50%]&lt;BR/&gt;{197.66.101.202:1043, 172.17.2.21:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 6666: (25%)&lt;BR/&gt; 1043: (25%)&lt;BR/&gt; 1042: (25%)&gt;];
}
657--658[label="1;2pkt 2fpkt"];
657--5618[label="1;2pkt 2fpkt"];
658--5618[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.17.2.21" dst_port="6667" src_ip="197.66.101.202" src_port="1043"/>
      <filter dst_ip="172.17.2.21" dst_port="6666" src_ip="197.66.101.202" src_port="1042"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
407[label="53.236.199.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
697[label="176.196.99.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
4490[label="176.196.99.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.99.91:51317, 53.236.199.159:11986}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51317: (50%)&lt;BR/&gt; 11986: (50%)&gt;];
}
407--697[label="1;1pkt 1fpkt"];
407--4490[label="1;1pkt 1fpkt"];
697--4490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="53.236.199.159" dst_port="11986" src_ip="176.196.99.91" src_port="51317"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
711[label="53.69.132.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
712[label="183.82.194.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
3052[label="183.82.194.180;s;1pkt 1fpkt", shape=hexagon, color=black];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.194.180:2879, 53.69.132.136:2010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2879: (50%)&lt;BR/&gt; 2010: (50%)&gt;];
}
711--712[label="1;1pkt 1fpkt"];
711--3052[label="1;1pkt 1fpkt"];
712--3052[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="53.69.132.136" dst_port="2010" src_ip="183.82.194.180" src_port="2879"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
727[label="198.47.248.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
728[label="176.197.101.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2742[label="176.197.101.202;s;1pkt 1fpkt", shape=hexagon, color=black];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.101.202:2969, 198.47.248.247:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2969: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
727--728[label="1;1pkt 1fpkt"];
727--2742[label="1;1pkt 1fpkt"];
728--2742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.47.248.247" dst_port="1755" src_ip="176.197.101.202" src_port="2969"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="48.205.153.224"/>
      <from sec="1118034661" usec="0"/>
      <to sec="1118034806" usec="0"/>
    </slice>
    <from sec="1118034661" usec="0"/>
    <to sec="1118034806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.168.128.3"/>
      <from sec="1118034623" usec="0"/>
      <to sec="1118034736" usec="0"/>
    </slice>
    <from sec="1118034623" usec="0"/>
    <to sec="1118034736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.8.24.4"/>
      <from sec="1118034623" usec="0"/>
      <to sec="1118034828" usec="0"/>
    </slice>
    <from sec="1118034623" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
527[label="197.66.117.170;s;2pkt 2fpkt", shape=diamond, color=yellow];
879[label="211.136.153.72;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.117.170:3189, 211.136.153.72:443}[50%]&lt;BR/&gt;{197.66.117.170:3934, 211.136.153.72:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3934: (25%)&lt;BR/&gt; 3189: (25%)&gt;];
}
527--879[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.136.153.72" dst_port="443" src_ip="197.66.117.170" src_port="3934"/>
      <filter dst_ip="211.136.153.72" dst_port="443" src_ip="197.66.117.170" src_port="3189"/>
    </slice>
    <from sec="1118034016" usec="0"/>
    <to sec="1118034080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
811[label="196.8.20.123;d;13pkt 13fpkt", shape=diamond, color=yellow];
906[label="193.203.218.134;s;11pkt 11fpkt", shape=diamond, color=yellow];
2849[label="193.203.218.134;s;11pkt 11fpkt", shape=hexagon, color=black];
4909[label="193.203.218.134;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.203.218.134:80, 196.8.20.123:*}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.1111%)&lt;BR/&gt; 22: (8.88889%)&lt;BR/&gt; 2657: (4.44444%)&lt;BR/&gt; 2655: (4.44444%)&lt;BR/&gt; 2654: (4.44444%)&gt;];
}
811--906[label="1;11pkt 11fpkt"];
811--2849[label="1;11pkt 11fpkt"];
811--3477[label="0.0769231;1pkt 1fpkt"];
811--3495[label="0.0769231;1pkt 1fpkt"];
811--4909[label="1;10pkt 10fpkt"];
906--2849[label="1;11pkt 11fpkt"];
906--3477[label="0.0909091;1pkt 1fpkt"];
906--3495[label="0.0909091;1pkt 1fpkt"];
906--4909[label="1;10pkt 10fpkt"];
2849--3477[label="0.0909091;1pkt 1fpkt"];
2849--3495[label="0.0909091;1pkt 1fpkt"];
2849--4909[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="196.8.20.123" src_ip="193.203.218.134" src_port="80"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28879,2.1536,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
108[label="197.2.48.172s;384pkt 384fpkt", shape=rectangle, color=red];
942[label="197.2.48.172;s;1020pkt 1020fpkt", shape=diamond, color=yellow];
5309[label="197.2.48.172;1020pkt 1020fpkt", shape=pentagon, color=darkviolet];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.2.48.172:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3378: (0.103135%)&lt;BR/&gt; 3377: (0.103135%)&lt;BR/&gt; 3376: (0.103135%)&lt;BR/&gt; 3375: (0.103135%)&gt;];
}
108--942[label="1;384pkt 384fpkt"];
108--5309[label="1;384pkt 384fpkt"];
942--5309[label="1;1020pkt 1020fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.2.48.172"/>
    </slice>
    <from sec="1118034104" usec="0"/>
    <to sec="1118034199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
375[label="218.110.153.221;d;2pkt 2fpkt", shape=diamond, color=yellow];
1006[label="183.82.38.18;s;3pkt 3fpkt", shape=diamond, color=yellow];
2976[label="183.82.38.18;s;3pkt 3fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.38.18:2655, 192.9.57.99:1863}[33.3333%]&lt;BR/&gt;{183.82.38.18:62229, 218.110.153.221:2796}[33.3333%]&lt;BR/&gt;{183.82.38.18:62229, 218.110.153.221:2814}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62229: (37.5%)&lt;BR/&gt; 2814: (18.75%)&lt;BR/&gt; 2796: (18.75%)&lt;BR/&gt; 2655: (12.5%)&lt;BR/&gt; 1863: (12.5%)&gt;];
}
375--1006[label="1;2pkt 2fpkt"];
375--2976[label="1;2pkt 2fpkt"];
1006--2976[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="218.110.153.221" dst_port="2814" src_ip="183.82.38.18" src_port="62229"/>
      <filter dst_ip="218.110.153.221" dst_port="2796" src_ip="183.82.38.18" src_port="62229"/>
      <filter dst_ip="192.9.57.99" dst_port="1863" src_ip="183.82.38.18" src_port="2655"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
384[label="176.196.217.182;s;163pkt 163fpkt", shape=diamond, color=yellow];
1045[label="205.107.103.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
1778[label="37.4.41.215;d;4pkt 4fpkt", shape=diamond, color=yellow];
2230[label="222.45.155.53;d;4pkt 4fpkt", shape=diamond, color=yellow];
5428[label="176.196.217.182;185pkt 185fpkt", shape=pentagon, color=darkviolet];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.217.182:6527, 189.183.238.25:*}[43.2432%]&lt;BR/&gt;{176.196.217.182:6527, 196.217.104.52:*}[35.6757%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6527: (38.0952%)&lt;BR/&gt; 6668: (7.56303%)&lt;BR/&gt; 5485: (4.06162%)&lt;BR/&gt; 4768: (0.560224%)&lt;BR/&gt; 4766: (0.560224%)&gt;];
}
384--1045[label="1;1pkt 1fpkt"];
384--1778[label="1;4pkt 4fpkt"];
384--2230[label="1;4pkt 4fpkt"];
384--5428[label="1;163pkt 163fpkt"];
1045--5428[label="1;1pkt 1fpkt"];
1778--5428[label="1;4pkt 4fpkt"];
2230--5428[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="189.183.238.25" src_ip="176.196.217.182" src_port="6527"/>
      <filter dst_ip="196.217.104.52" src_ip="176.196.217.182" src_port="6527"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="53.180.66.61"/>
      <from sec="1118034000" usec="0"/>
      <to sec="1118034828" usec="0"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
905[label="193.203.218.134;d;11pkt 11fpkt", shape=diamond, color=yellow];
1089[label="196.8.20.123;s;13pkt 13fpkt", shape=diamond, color=yellow];
4781[label="196.8.20.123;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.20.123:*, 193.203.218.134:80}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.8919%)&lt;BR/&gt; 22: (8.10811%)&lt;BR/&gt; 2657: (4.05405%)&lt;BR/&gt; 2655: (4.05405%)&lt;BR/&gt; 2654: (4.05405%)&gt;];
}
905--1089[label="1;11pkt 11fpkt"];
905--4781[label="1;11pkt 11fpkt"];
1089--4781[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="193.203.218.134" dst_port="80" src_ip="196.8.20.123"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
884[label="176.196.154.27;s;8pkt 8fpkt", shape=diamond, color=yellow];
1154[label="210.202.233.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
2939[label="176.196.154.27;s;8pkt 8fpkt", shape=hexagon, color=black];
3843[label="176.196.154.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.154.27:*, 130.14.21.164:8294}[25%]&lt;BR/&gt;{176.196.154.27:*, *:8194}[25%]&lt;BR/&gt;{176.196.154.27:*, *:8195}[25%]&lt;BR/&gt;{176.196.154.27:*, 210.202.233.13:*}[25%]&lt;BR/&gt;{176.196.154.27:*, 193.178.157.179:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8294: (16.6667%)&lt;BR/&gt; 8292: (11.1111%)&lt;BR/&gt; 8280: (11.1111%)&lt;BR/&gt; 8195: (11.1111%)&lt;BR/&gt; 8194: (11.1111%)&gt;];
}
884--1154[label="1;1pkt 1fpkt"];
884--2939[label="1;8pkt 8fpkt"];
884--3843[label="1;1pkt 1fpkt"];
1154--2939[label="1;1pkt 1fpkt"];
1154--3843[label="1;1pkt 1fpkt"];
2939--3843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.178.157.179" src_ip="176.196.154.27"/>
      <filter dst_ip="210.202.233.13" src_ip="176.196.154.27"/>
      <filter dst_port="8195" src_ip="176.196.154.27"/>
      <filter dst_port="8194" src_ip="176.196.154.27"/>
      <filter dst_ip="130.14.21.164" dst_port="8294" src_ip="176.196.154.27"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
1102[label="176.197.57.26;s;32pkt 32fpkt", shape=diamond, color=yellow];
1218[label="203.125.47.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
3825[label="176.197.57.26;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6229[label="176.197.57.26;32pkt 32fpkt", shape=invtriangle, color=brown];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.57.26:24183, *:*}[90.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24183: (45.3608%)&lt;BR/&gt; 61652: (3.09278%)&lt;BR/&gt; 3128: (3.09278%)&lt;BR/&gt; 443: (3.09278%)&lt;BR/&gt; 50144: (2.06186%)&gt;];
}
1102--1218[label="1;2pkt 2fpkt"];
1102--3825[label="1;31pkt 31fpkt"];
1102--6229[label="1;32pkt 32fpkt"];
1218--3825[label="1;2pkt 2fpkt"];
1218--6229[label="1;2pkt 2fpkt"];
3825--6229[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.57.26" src_port="24183"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
970[label="197.77.200.250;d;143pkt 143fpkt", shape=diamond, color=yellow];
1240[label="203.0.148.243;s;39pkt 39fpkt", shape=diamond, color=yellow];
2868[label="203.0.148.243;s;43pkt 43fpkt", shape=hexagon, color=black];
3104[label="197.77.200.250;d;118pkt 118fpkt", shape=hexagon, color=black];
4294[label="55.172.135.74;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5611[label="100.18.201.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.0.148.243:80, 197.77.200.250:*}[57.3427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3051%)&lt;BR/&gt; 24159: (0.988701%)&lt;BR/&gt; 3050: (0.423729%)&lt;BR/&gt; 1860: (0.423729%)&lt;BR/&gt; 1843: (0.423729%)&gt;];
}
970--1240[label="1;39pkt 39fpkt"];
970--1348[label="0.0240964;2pkt 2fpkt"];
970--2868[label="1;43pkt 43fpkt"];
970--3104[label="1;118pkt 118fpkt"];
970--3477[label="0.0909091;13pkt 13fpkt"];
970--3495[label="0.0909091;13pkt 13fpkt"];
970--4294[label="1;10pkt 10fpkt"];
970--5611[label="1;1pkt 1fpkt"];
1240--3104[label="1;39pkt 39fpkt"];
2868--3104[label="1;43pkt 43fpkt"];
3104--3477[label="0.110169;13pkt 13fpkt"];
3104--3495[label="0.110169;13pkt 13fpkt"];
3104--5611[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.200.250" src_ip="203.0.148.243" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
995[label="176.196.29.115;s;397pkt 397fpkt", shape=diamond, color=yellow];
1252[label="55.126.19.122;d;281pkt 281fpkt", shape=diamond, color=yellow];
2126[label="217.134.24.129;d;115pkt 115fpkt", shape=diamond, color=yellow];
3112[label="176.196.29.115;s;312pkt 312fpkt", shape=hexagon, color=black];
4717[label="176.196.29.115;444pkt 444fpkt", shape=pentagon, color=darkviolet];
6786[label="176.196.29.115;444pkt 444fpkt", shape=invtriangle, color=brown];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.29.115:*, 55.126.19.122:80}[70.4955%]&lt;BR/&gt;{176.196.29.115:*, 217.134.24.129:80}[29.2793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33808: (0.250878%)&lt;BR/&gt; 34551: (0.22579%)&lt;BR/&gt; 34423: (0.22579%)&lt;BR/&gt; 34129: (0.22579%)&gt;];
}
995--1252[label="1;281pkt 281fpkt"];
995--2126[label="1;115pkt 115fpkt"];
995--3112[label="1;312pkt 312fpkt"];
995--3478[label="0.0881612;35pkt 35fpkt"];
995--3485[label="0.0453401;18pkt 18fpkt"];
995--4717[label="1;397pkt 397fpkt"];
995--6786[label="1;397pkt 397fpkt"];
1252--3112[label="0.786477;221pkt 221fpkt"];
1252--3478[label="0.0854093;24pkt 24fpkt"];
1252--3485[label="0.0427046;12pkt 12fpkt"];
1252--4717[label="1;281pkt 281fpkt"];
1252--6786[label="1;281pkt 281fpkt"];
2126--3112[label="0.782609;90pkt 90fpkt"];
2126--3478[label="0.0869565;10pkt 10fpkt"];
2126--3485[label="0.0434783;5pkt 5fpkt"];
2126--4717[label="1;115pkt 115fpkt"];
2126--6786[label="1;115pkt 115fpkt"];
3112--3478[label="0.112179;35pkt 35fpkt"];
3112--3485[label="0.0576923;18pkt 18fpkt"];
3112--4717[label="1;312pkt 312fpkt"];
3112--6786[label="1;312pkt 312fpkt"];
4717--6786[label="1;444pkt 444fpkt"];
</description>
    <slice>
      <filter dst_ip="55.126.19.122" dst_port="80" src_ip="176.196.29.115"/>
      <filter dst_ip="217.134.24.129" dst_port="80" src_ip="176.196.29.115"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
368[label="214.4.6.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
1296[label="196.8.25.188;d;30pkt 30fpkt", shape=diamond, color=yellow];
2730[label="214.4.6.103;s;1pkt 1fpkt", shape=hexagon, color=black];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.8.25.188:25}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4375%)&lt;BR/&gt; 1656: (4.6875%)&lt;BR/&gt; 0: (3.125%)&lt;BR/&gt; 56137: (1.5625%)&lt;BR/&gt; 50014: (1.5625%)&gt;];
}
368--1296[label="1;1pkt 1fpkt"];
368--2730[label="1;1pkt 1fpkt"];
1296--2730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.8.25.188" dst_port="25"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1303[label="197.77.205.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1304[label="216.139.86.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.139.86.244:554, 197.77.205.37:1060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1060: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1303--1304[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.205.37" dst_port="1060" src_ip="216.139.86.244" src_port="554"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
1330[label="128.65.192.25;d;15pkt 15fpkt", shape=diamond, color=yellow];
1331[label="52.79.38.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
2989[label="52.79.38.134;s;1pkt 1fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.65.192.25:40135}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40135: (38.2353%)&lt;BR/&gt; 4109: (8.82353%)&lt;BR/&gt; 554: (8.82353%)&lt;BR/&gt; 62706: (2.94118%)&lt;BR/&gt; 62173: (2.94118%)&gt;];
}
1330--1331[label="1;1pkt 1fpkt"];
1330--2989[label="1;1pkt 1fpkt"];
1331--2989[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.192.25" dst_port="40135"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1335[label="217.9.103.29;d;393pkt 393fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.9.103.29:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1335--1600[label="0.00254453;1pkt 1fpkt"];
1335--2044[label="0.00254453;1pkt 1fpkt"];
1335--2097[label="0.00478469;1pkt 1fpkt"];
1335--2248[label="0.00819672;1pkt 1fpkt"];
1335--2302[label="0.00387597;1pkt 1fpkt"];
1335--2669[label="0.00254453;1pkt 1fpkt"];
1335--2788[label="0.00273973;1pkt 1fpkt"];
1335--3046[label="0.00254453;1pkt 1fpkt"];
1335--3207[label="0.00254453;1pkt 1fpkt"];
1335--3224[label="0.00819672;1pkt 1fpkt"];
1335--3225[label="0.00259067;1pkt 1fpkt"];
1335--3331[label="0.00254453;1pkt 1fpkt"];
1335--3540[label="0.00254453;1pkt 1fpkt"];
1335--3644[label="0.0125;1pkt 1fpkt"];
1335--3768[label="0.012987;1pkt 1fpkt"];
1335--4217[label="0.00254453;1pkt 1fpkt"];
1335--4692[label="0.00254453;1pkt 1fpkt"];
1335--4840[label="0.00254453;1pkt 1fpkt"];
1335--5114[label="0.00254453;1pkt 1fpkt"];
1335--6062[label="0.00254453;1pkt 1fpkt"];
1335--6127[label="0.0125;1pkt 1fpkt"];
1335--6201[label="0.012987;1pkt 1fpkt"];
1335--6484[label="0.00254453;1pkt 1fpkt"];
1335--6772[label="0.00254453;1pkt 1fpkt"];
1335--6863[label="0.00254453;1pkt 1fpkt"];
1335--7017[label="0.00254453;1pkt 1fpkt"];
1335--7818[label="0.00254453;1pkt 1fpkt"];
1335--8081[label="0.00254453;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.9.103.29"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="48.205.153.224"/>
      <from sec="1118034661" usec="0"/>
      <to sec="1118034806" usec="0"/>
    </slice>
    <from sec="1118034661" usec="0"/>
    <to sec="1118034806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
1399[label="208.164.87.141;s;10pkt 10fpkt", shape=diamond, color=yellow];
1400[label="128.65.49.56;d;10pkt 10fpkt", shape=diamond, color=yellow];
2942[label="208.164.87.141;s;7pkt 7fpkt", shape=hexagon, color=black];
4983[label="208.164.87.141;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6940[label="208.164.87.141;13pkt 13fpkt", shape=invtriangle, color=brown];
8043[label="208.164.87.141;12pkt 12fpkt", shape=invhouse, color=bisque];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.164.87.141:80, 128.65.49.56:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1921: (4.61538%)&lt;BR/&gt; 1918: (4.61538%)&lt;BR/&gt; 1917: (4.61538%)&lt;BR/&gt; 1916: (4.61538%)&gt;];
}
1399--1400[label="1;10pkt 10fpkt"];
1399--2942[label="1;7pkt 7fpkt"];
1399--3477[label="0.1;1pkt 1fpkt"];
1399--3495[label="0.1;1pkt 1fpkt"];
1399--4983[label="1;10pkt 10fpkt"];
1399--6940[label="1;10pkt 10fpkt"];
1399--8043[label="0.9;9pkt 9fpkt"];
1400--2942[label="1;7pkt 7fpkt"];
1400--3477[label="0.1;1pkt 1fpkt"];
1400--3495[label="0.1;1pkt 1fpkt"];
1400--4983[label="1;10pkt 10fpkt"];
1400--6940[label="1;10pkt 10fpkt"];
1400--8043[label="0.9;9pkt 9fpkt"];
2942--3477[label="0.142857;1pkt 1fpkt"];
2942--3495[label="0.142857;1pkt 1fpkt"];
2942--4983[label="1;7pkt 7fpkt"];
2942--6940[label="1;7pkt 7fpkt"];
2942--8043[label="0.857143;6pkt 6fpkt"];
4983--6940[label="1;13pkt 13fpkt"];
4983--8043[label="1;12pkt 12fpkt"];
6940--8043[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.49.56" src_ip="208.164.87.141" src_port="80"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
538[label="53.69.210.102;d;78pkt 78fpkt", shape=diamond, color=yellow];
1403[label="183.174.90.154;s;83pkt 83fpkt", shape=diamond, color=yellow];
2944[label="183.174.90.154;s;81pkt 81fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.90.154:*, 53.69.210.102:80}[93.9759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1872: (0.619835%)&lt;BR/&gt; 1871: (0.619835%)&lt;BR/&gt; 1870: (0.619835%)&lt;BR/&gt; 1869: (0.619835%)&gt;];
}
538--1403[label="1;78pkt 78fpkt"];
538--2944[label="1;78pkt 78fpkt"];
1403--2944[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="53.69.210.102" dst_port="80" src_ip="183.174.90.154"/>
    </slice>
    <from sec="1118034036" usec="0"/>
    <to sec="1118034420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
1449[label="219.209.145.212;d;397pkt 397fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 219.209.145.212:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1449--3046[label="0.00251889;1pkt 1fpkt"];
1449--4692[label="0.00251889;1pkt 1fpkt"];
1449--6772[label="0.00251889;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.209.145.212"/>
    </slice>
    <from sec="1118034217" usec="0"/>
    <to sec="1118034431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10837,2.19046,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1457[label="49.195.94.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
1458[label="183.82.32.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
3025[label="183.82.32.150;s;1pkt 1fpkt", shape=hexagon, color=black];
6994[label="183.82.32.150;1pkt 1fpkt", shape=invtriangle, color=brown];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.32.150:1643, 49.195.94.243:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1643: (50%)&gt;];
}
1457--1458[label="1;1pkt 1fpkt"];
1457--3025[label="1;1pkt 1fpkt"];
1457--6994[label="1;1pkt 1fpkt"];
1458--3025[label="1;1pkt 1fpkt"];
1458--6994[label="1;1pkt 1fpkt"];
3025--6994[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="49.195.94.243" dst_port="8000" src_ip="183.82.32.150" src_port="1643"/>
    </slice>
    <from sec="1118034236" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28879,2.1536,010,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
92[label="196.77.70.21s;780pkt 780fpkt", shape=rectangle, color=red];
1488[label="196.77.70.21;s;810pkt 810fpkt", shape=diamond, color=yellow];
3774[label="196.77.70.21;810pkt 810fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.77.70.21:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3349: (0.1875%)&lt;BR/&gt; 3347: (0.1875%)&lt;BR/&gt; 3345: (0.1875%)&lt;BR/&gt; 3342: (0.1875%)&gt;];
}
92--1488[label="1;780pkt 780fpkt"];
92--3774[label="1;780pkt 780fpkt"];
1488--3774[label="1;810pkt 810fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="196.77.70.21"/>
    </slice>
    <from sec="1118034309" usec="0"/>
    <to sec="1118034409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
1525[label="197.130.185.125;d;379pkt 379fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 197.130.185.125:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1525--1600[label="0.00263852;1pkt 1fpkt"];
1525--2097[label="0.00478469;1pkt 1fpkt"];
1525--2302[label="0.00387597;1pkt 1fpkt"];
1525--2669[label="0.00263852;1pkt 1fpkt"];
1525--2788[label="0.00273973;1pkt 1fpkt"];
1525--3046[label="0.00263852;1pkt 1fpkt"];
1525--3207[label="0.00263852;1pkt 1fpkt"];
1525--3225[label="0.00263852;1pkt 1fpkt"];
1525--3540[label="0.00263852;1pkt 1fpkt"];
1525--3644[label="0.0125;1pkt 1fpkt"];
1525--4217[label="0.00263852;1pkt 1fpkt"];
1525--4692[label="0.00263852;1pkt 1fpkt"];
1525--4840[label="0.00263852;1pkt 1fpkt"];
1525--5114[label="0.00263852;1pkt 1fpkt"];
1525--6062[label="0.00263852;1pkt 1fpkt"];
1525--6127[label="0.0125;1pkt 1fpkt"];
1525--6484[label="0.00263852;1pkt 1fpkt"];
1525--6772[label="0.00263852;1pkt 1fpkt"];
1525--6863[label="0.00263852;1pkt 1fpkt"];
1525--7017[label="0.00263852;1pkt 1fpkt"];
1525--7818[label="0.00263852;1pkt 1fpkt"];
1525--8081[label="0.00263852;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.130.185.125"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
1532[label="176.196.221.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
1595[label="197.41.21.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
2999[label="197.41.21.198;s;1pkt 1fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.41.21.198:1000, 176.196.221.99:1403}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1403: (50%)&lt;BR/&gt; 1000: (50%)&gt;];
}
1532--1595[label="1;1pkt 1fpkt"];
1532--2999[label="1;1pkt 1fpkt"];
1595--2999[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.221.99" dst_port="1403" src_ip="197.41.21.198" src_port="1000"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
5591[label="197.66.101.200;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.101.200:*, *:80}[93.1034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5517%)&lt;BR/&gt; 57450: (0.862069%)&lt;BR/&gt; 53000: (0.862069%)&lt;BR/&gt; 39512: (0.862069%)&lt;BR/&gt; 39507: (0.862069%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="197.66.101.200"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1746[label="211.187.98.70;d;304pkt 304fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 211.187.98.70:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1746--2044[label="0.00328947;1pkt 1fpkt"];
1746--2097[label="0.00478469;1pkt 1fpkt"];
1746--2302[label="0.00387597;1pkt 1fpkt"];
1746--2669[label="0.00328947;1pkt 1fpkt"];
1746--2788[label="0.00328947;1pkt 1fpkt"];
1746--3046[label="0.00328947;1pkt 1fpkt"];
1746--3207[label="0.00328947;1pkt 1fpkt"];
1746--3225[label="0.00328947;1pkt 1fpkt"];
1746--3331[label="0.00328947;1pkt 1fpkt"];
1746--3540[label="0.00328947;1pkt 1fpkt"];
1746--3644[label="0.0125;1pkt 1fpkt"];
1746--4217[label="0.00328947;1pkt 1fpkt"];
1746--4692[label="0.00328947;1pkt 1fpkt"];
1746--4840[label="0.00328947;1pkt 1fpkt"];
1746--5114[label="0.00328947;1pkt 1fpkt"];
1746--6062[label="0.00328947;1pkt 1fpkt"];
1746--6127[label="0.0125;1pkt 1fpkt"];
1746--6484[label="0.00328947;1pkt 1fpkt"];
1746--6772[label="0.00328947;1pkt 1fpkt"];
1746--6863[label="0.00328947;1pkt 1fpkt"];
1746--7017[label="0.00328947;1pkt 1fpkt"];
1746--7818[label="0.00328947;1pkt 1fpkt"];
1746--8081[label="0.00328947;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.187.98.70"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
1765[label="53.75.89.235;d;2pkt 2fpkt", shape=diamond, color=yellow];
1766[label="176.196.158.187;s;2pkt 2fpkt", shape=diamond, color=yellow];
3326[label="176.196.158.187;s;2pkt 2fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.158.187:1135, 53.75.89.235:554}[50%]&lt;BR/&gt;{176.196.158.187:6970, 53.75.89.235:30960}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30960: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1135: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1765--1766[label="1;2pkt 2fpkt"];
1765--3326[label="1;2pkt 2fpkt"];
1766--3326[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="53.75.89.235" dst_port="30960" src_ip="176.196.158.187" src_port="6970"/>
      <filter dst_ip="53.75.89.235" dst_port="554" src_ip="176.196.158.187" src_port="1135"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1538[label="87.38.5.116;s;2pkt 2fpkt", shape=diamond, color=yellow];
1775[label="175.199.180.4;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.9.57.80:1863, 175.199.180.4:1031}[25%]&lt;BR/&gt;{197.136.13.172:8012, 175.199.180.4:3506}[25%]&lt;BR/&gt;{87.38.5.116:2002, 175.199.180.4:3508}[25%]&lt;BR/&gt;{87.38.5.116:3400, 175.199.180.4:3507}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3508: (16.6667%)&lt;BR/&gt; 3507: (16.6667%)&lt;BR/&gt; 3400: (16.6667%)&lt;BR/&gt; 2002: (16.6667%)&lt;BR/&gt; 8012: (8.33333%)&gt;];
}
1538--1775[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.180.4" dst_port="3507" src_ip="87.38.5.116" src_port="3400"/>
      <filter dst_ip="175.199.180.4" dst_port="3508" src_ip="87.38.5.116" src_port="2002"/>
      <filter dst_ip="175.199.180.4" dst_port="3506" src_ip="197.136.13.172" src_port="8012"/>
      <filter dst_ip="175.199.180.4" dst_port="1031" src_ip="192.9.57.80" src_port="1863"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="219.160.67.4"/>
      <from sec="1118034000" usec="0"/>
      <to sec="1118034828" usec="0"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1782[label="197.77.205.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1783[label="216.139.86.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
3946[label="197.77.205.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.205.37:1060, 216.139.86.244:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1060: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1782--1783[label="1;1pkt 1fpkt"];
1782--3946[label="1;1pkt 1fpkt"];
1783--3946[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.139.86.244" dst_port="554" src_ip="197.77.205.37" src_port="1060"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.65.157.17"/>
      <from sec="1118034003" usec="0"/>
      <to sec="1118034828" usec="0"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
365[label="133.167.78.43;s;47pkt 47fpkt", shape=diamond, color=yellow];
1861[label="196.158.161.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
2020[label="49.78.53.178;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.78.43:6881, *:*}[93.617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (47%)&lt;BR/&gt; 61045: (2%)&lt;BR/&gt; 60942: (2%)&lt;BR/&gt; 2653: (2%)&lt;BR/&gt; 63811: (1%)&gt;];
}
365--1861[label="1;1pkt 1fpkt"];
365--2020[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.78.43" src_port="6881"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.80.163.239"/>
      <from sec="1118034204" usec="0"/>
      <to sec="1118034828" usec="0"/>
    </slice>
    <from sec="1118034204" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="31.107.109.96"/>
      <from sec="1118034309" usec="0"/>
      <to sec="1118034523" usec="0"/>
    </slice>
    <from sec="1118034309" usec="0"/>
    <to sec="1118034523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
3786[label="176.197.149.22;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.149.22:*, 55.15.226.2:80}[74.359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2117: (1.28205%)&lt;BR/&gt; 2116: (1.28205%)&lt;BR/&gt; 2115: (1.28205%)&lt;BR/&gt; 2114: (1.28205%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="55.15.226.2" dst_port="80" src_ip="176.197.149.22"/>
    </slice>
    <from sec="1118034225" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
1751[label="176.196.140.173;s;2pkt 2fpkt", shape=diamond, color=yellow];
2026[label="214.236.218.31;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.140.173:1277, 214.236.218.31:554}[50%]&lt;BR/&gt;{176.196.140.173:6970, 214.236.218.31:13224}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13224: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1277: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1751--2026[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.236.218.31" dst_port="13224" src_ip="176.196.140.173" src_port="6970"/>
      <filter dst_ip="214.236.218.31" dst_port="554" src_ip="176.196.140.173" src_port="1277"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
1013[label="176.197.50.39;s;16pkt 16fpkt", shape=diamond, color=yellow];
2028[label="39.214.74.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
3959[label="176.197.50.39;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6309[label="176.197.50.39;16pkt 16fpkt", shape=invtriangle, color=brown];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.50.39:*, 53.160.169.159:80}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46%)&lt;BR/&gt; 12650: (4%)&lt;BR/&gt; 1755: (4%)&lt;BR/&gt; 12743: (3%)&lt;BR/&gt; 12735: (3%)&gt;];
}
1013--2028[label="1;1pkt 1fpkt"];
1013--3478[label="0.0625;1pkt 1fpkt"];
1013--3959[label="1;16pkt 16fpkt"];
1013--6309[label="0.9375;15pkt 15fpkt"];
2028--3959[label="1;1pkt 1fpkt"];
2028--6309[label="1;1pkt 1fpkt"];
3959--6309[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="53.160.169.159" dst_port="80" src_ip="176.197.50.39"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,502,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
1760[label="176.196.64.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
2035[label="49.2.143.76;d;2pkt 2fpkt", shape=diamond, color=yellow];
5513[label="176.196.64.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.3.90:993, 49.2.143.76:60272}[50%]&lt;BR/&gt;{176.196.64.193:22, 49.2.143.76:47517}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47517: (37.5%)&lt;BR/&gt; 22: (37.5%)&lt;BR/&gt; 60272: (12.5%)&lt;BR/&gt; 993: (12.5%)&gt;];
}
1760--2035[label="1;1pkt 1fpkt"];
1760--5513[label="1;1pkt 1fpkt"];
2035--5513[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="49.2.143.76" dst_port="47517" src_ip="176.196.64.193" src_port="22"/>
      <filter dst_ip="49.2.143.76" dst_port="60272" src_ip="183.82.3.90" src_port="993"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
2062[label="196.8.21.222;d;478pkt 478fpkt", shape=diamond, color=yellow];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 196.8.21.222:6881}[52.7197%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (76.1506%)&lt;BR/&gt; 49152: (0.83682%)&lt;BR/&gt; 6882: (0.523013%)&lt;BR/&gt; 65535: (0.41841%)&lt;BR/&gt; 6890: (0.41841%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="196.8.21.222" dst_port="6881" src_port="6881"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
2066[label="222.28.90.1;s;671pkt 671fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.28.90.1:1104, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1104: (50%)&gt;];
}
2066--3105[label="0.0114943;1pkt 1fpkt"];
2066--3429[label="0.0114943;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="222.28.90.1" src_port="1104"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="49.173.29.251"/>
      <from sec="1118034002" usec="0"/>
      <to sec="1118034827" usec="0"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
2097[label="196.8.27.84;s;209pkt 209fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.27.84:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2097--2227[label="0.00483092;1pkt 1fpkt"];
2097--2251[label="0.00478469;1pkt 1fpkt"];
2097--2450[label="0.00497512;1pkt 1fpkt"];
2097--2456[label="0.00529101;1pkt 1fpkt"];
2097--2795[label="0.00719424;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.27.84"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
2099[label="183.82.240.246;s;1911pkt 1911fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.240.246:53, *:1025}[37.5196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.0785%)&lt;BR/&gt; 1025: (18.7598%)&lt;BR/&gt; 1031: (4.00314%)&lt;BR/&gt; 1027: (2.43328%)&lt;BR/&gt; 1028: (1.88383%)&gt;];
}
2099--3476[label="0.00104657;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="183.82.240.246" src_port="53"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="39.237.66.231"/>
      <from sec="1118034222" usec="0"/>
      <to sec="1118034823" usec="0"/>
    </slice>
    <from sec="1118034222" usec="0"/>
    <to sec="1118034823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
2148[label="183.144.90.203;s;151pkt 151fpkt", shape=diamond, color=yellow];
2179[label="52.181.109.98;d;131pkt 131fpkt", shape=diamond, color=yellow];
3290[label="183.144.90.203;s;150pkt 150fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.144.90.203:80, 52.181.109.98:*}[86.755%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5278%)&lt;BR/&gt; 53: (3.7037%)&lt;BR/&gt; 1024: (2.08333%)&lt;BR/&gt; 32150: (0.347222%)&lt;BR/&gt; 32149: (0.347222%)&gt;];
}
2148--2179[label="1;131pkt 131fpkt"];
2148--3290[label="1;150pkt 150fpkt"];
2179--3290[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_ip="52.181.109.98" src_ip="183.144.90.203" src_port="80"/>
    </slice>
    <from sec="1118034310" usec="0"/>
    <to sec="1118034764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
2067[label="197.77.192.161;d;6pkt 6fpkt", shape=diamond, color=yellow];
2202[label="53.150.76.159;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.150.76.159:80, 197.77.192.161:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4520: (9.09091%)&lt;BR/&gt; 4518: (9.09091%)&lt;BR/&gt; 4513: (9.09091%)&lt;BR/&gt; 4511: (9.09091%)&gt;];
}
2067--2202[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.192.161" src_ip="53.150.76.159" src_port="80"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
2227[label="219.176.192.18;d;207pkt 207fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 219.176.192.18:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2227--2302[label="0.00483092;1pkt 1fpkt"];
2227--2460[label="0.0114943;1pkt 1fpkt"];
2227--2669[label="0.00483092;1pkt 1fpkt"];
2227--3046[label="0.00483092;1pkt 1fpkt"];
2227--3207[label="0.00483092;1pkt 1fpkt"];
2227--3225[label="0.00483092;1pkt 1fpkt"];
2227--3540[label="0.00483092;1pkt 1fpkt"];
2227--3644[label="0.0125;1pkt 1fpkt"];
2227--4217[label="0.00483092;1pkt 1fpkt"];
2227--4692[label="0.00483092;1pkt 1fpkt"];
2227--5114[label="0.00483092;1pkt 1fpkt"];
2227--5331[label="0.011236;1pkt 1fpkt"];
2227--6062[label="0.00483092;1pkt 1fpkt"];
2227--6127[label="0.0125;1pkt 1fpkt"];
2227--6484[label="0.00483092;1pkt 1fpkt"];
2227--6772[label="0.00483092;1pkt 1fpkt"];
2227--7017[label="0.00483092;1pkt 1fpkt"];
2227--7818[label="0.00483092;1pkt 1fpkt"];
2227--8081[label="0.00483092;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.176.192.18"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.167.42.112"/>
      <from sec="1118034000" usec="0"/>
      <to sec="1118034828" usec="0"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
2244[label="192.9.173.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
2245[label="183.82.39.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
3220[label="183.82.39.136;s;1pkt 1fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.39.136:1194, 192.9.173.249:28805}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28805: (50%)&lt;BR/&gt; 1194: (50%)&gt;];
}
2244--2245[label="1;1pkt 1fpkt"];
2244--3220[label="1;1pkt 1fpkt"];
2245--3220[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.173.249" dst_port="28805" src_ip="183.82.39.136" src_port="1194"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
1807[label="128.65.192.25;s;34pkt 34fpkt", shape=diamond, color=yellow];
2273[label="52.79.38.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
3137[label="128.65.192.25;s;34pkt 34fpkt", shape=hexagon, color=black];
3815[label="128.65.192.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.192.25:40135, *:*}[91.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40135: (44.2857%)&lt;BR/&gt; 57392: (2.85714%)&lt;BR/&gt; 4109: (2.85714%)&lt;BR/&gt; 554: (2.85714%)&lt;BR/&gt; 63267: (1.42857%)&gt;];
}
1807--2273[label="1;1pkt 1fpkt"];
1807--3137[label="1;34pkt 34fpkt"];
1807--3815[label="1;1pkt 1fpkt"];
2273--3137[label="1;1pkt 1fpkt"];
2273--3815[label="1;1pkt 1fpkt"];
3137--3815[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.65.192.25" src_port="40135"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1900[label="128.65.32.172;s;44pkt 44fpkt", shape=diamond, color=yellow];
2352[label="214.162.38.98;d;16pkt 16fpkt", shape=diamond, color=yellow];
3284[label="128.65.32.172;s;35pkt 35fpkt", shape=hexagon, color=black];
5308[label="128.65.32.172;45pkt 45fpkt", shape=pentagon, color=darkviolet];
7151[label="128.65.32.172;45pkt 45fpkt", shape=invtriangle, color=brown];
8147[label="128.65.32.172;44pkt 44fpkt", shape=invhouse, color=bisque];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.32.172:*, 214.162.38.98:80}[35.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1398: (1.31004%)&lt;BR/&gt; 1397: (1.31004%)&lt;BR/&gt; 1396: (1.31004%)&lt;BR/&gt; 1393: (1.31004%)&gt;];
}
1900--2352[label="1;16pkt 16fpkt"];
1900--3284[label="1;35pkt 35fpkt"];
1900--3478[label="0.0681818;3pkt 3fpkt"];
1900--3485[label="0.159091;7pkt 7fpkt"];
1900--5308[label="1;44pkt 44fpkt"];
1900--7151[label="1;44pkt 44fpkt"];
1900--8147[label="0.977273;43pkt 43fpkt"];
2352--3284[label="0.8125;13pkt 13fpkt"];
2352--3478[label="0.1875;3pkt 3fpkt"];
2352--3485[label="0.1875;3pkt 3fpkt"];
2352--5308[label="1;16pkt 16fpkt"];
2352--7151[label="1;16pkt 16fpkt"];
2352--8147[label="1;16pkt 16fpkt"];
3284--3478[label="0.0857143;3pkt 3fpkt"];
3284--3485[label="0.2;7pkt 7fpkt"];
3284--5308[label="1;35pkt 35fpkt"];
3284--7151[label="1;35pkt 35fpkt"];
3284--8147[label="0.971429;34pkt 34fpkt"];
5308--7151[label="1;45pkt 45fpkt"];
5308--8147[label="1;44pkt 44fpkt"];
7151--8147[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.38.98" dst_port="80" src_ip="128.65.32.172"/>
    </slice>
    <from sec="1118034137" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
3686[label="128.65.116.14;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5598[label="133.167.32.201;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5927[label="176.196.112.235;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.32.201:*, *:80}[31.6667%]&lt;BR/&gt;{128.65.116.14:*, *:*}[28.3333%]&lt;BR/&gt;{176.196.112.235:*, 53.160.142.157:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.5%)&lt;BR/&gt; 33841: (5.83333%)&lt;BR/&gt; 3478: (4.16667%)&lt;BR/&gt; 5061: (1.66667%)&lt;BR/&gt; 5050: (1.66667%)&gt;];
}
</description>
    <slice>
      <filter src_ip="128.65.116.14"/>
      <filter dst_port="80" src_ip="133.167.32.201"/>
      <filter dst_ip="53.160.142.157" dst_port="80" src_ip="176.196.112.235"/>
    </slice>
    <from sec="1118034015" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
2421[label="55.133.107.125;s;4pkt 4fpkt", shape=diamond, color=yellow];
2422[label="128.65.214.33;d;4pkt 4fpkt", shape=diamond, color=yellow];
4800[label="55.133.107.125;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6841[label="55.133.107.125;3pkt 3fpkt", shape=invtriangle, color=brown];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.133.107.125:80, 128.65.214.33:10378}[25%]&lt;BR/&gt;{55.133.107.125:80, 128.65.214.33:10379}[25%]&lt;BR/&gt;{55.133.107.125:80, 128.65.214.33:10380}[25%]&lt;BR/&gt;{55.133.107.125:80, 128.65.214.33:10381}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10381: (13.3333%)&lt;BR/&gt; 10380: (13.3333%)&lt;BR/&gt; 10379: (13.3333%)&lt;BR/&gt; 10378: (10%)&gt;];
}
2421--2422[label="1;4pkt 4fpkt"];
2421--4800[label="1;4pkt 4fpkt"];
2421--6841[label="1;3pkt 3fpkt"];
2422--4800[label="1;4pkt 4fpkt"];
2422--6841[label="1;3pkt 3fpkt"];
4800--6841[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.214.33" dst_port="10381" src_ip="55.133.107.125" src_port="80"/>
      <filter dst_ip="128.65.214.33" dst_port="10380" src_ip="55.133.107.125" src_port="80"/>
      <filter dst_ip="128.65.214.33" dst_port="10379" src_ip="55.133.107.125" src_port="80"/>
      <filter dst_ip="128.65.214.33" dst_port="10378" src_ip="55.133.107.125" src_port="80"/>
    </slice>
    <from sec="1118034598" usec="0"/>
    <to sec="1118034714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
2437[label="208.160.244.177;d;5pkt 5fpkt", shape=diamond, color=yellow];
2438[label="197.77.192.80;s;5pkt 5fpkt", shape=diamond, color=yellow];
3313[label="197.77.192.80;s;5pkt 5fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.192.80:3278, 208.160.244.177:21}[20%]&lt;BR/&gt;{197.77.192.80:3279, 208.160.244.177:19082}[20%]&lt;BR/&gt;{197.77.192.80:3280, 208.160.244.177:19083}[20%]&lt;BR/&gt;{197.77.192.80:3281, 208.160.244.177:19084}[20%]&lt;BR/&gt;{197.77.192.80:3282, 208.160.244.177:19085}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19085: (10%)&lt;BR/&gt; 19084: (10%)&lt;BR/&gt; 19083: (10%)&lt;BR/&gt; 19082: (10%)&lt;BR/&gt; 3282: (10%)&gt;];
}
2437--2438[label="1;5pkt 5fpkt"];
2437--3313[label="1;5pkt 5fpkt"];
2438--3313[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.160.244.177" dst_port="19085" src_ip="197.77.192.80" src_port="3282"/>
      <filter dst_ip="208.160.244.177" dst_port="19084" src_ip="197.77.192.80" src_port="3281"/>
      <filter dst_ip="208.160.244.177" dst_port="19083" src_ip="197.77.192.80" src_port="3280"/>
      <filter dst_ip="208.160.244.177" dst_port="19082" src_ip="197.77.192.80" src_port="3279"/>
      <filter dst_ip="208.160.244.177" dst_port="21" src_ip="197.77.192.80" src_port="3278"/>
    </slice>
    <from sec="1118034644" usec="0"/>
    <to sec="1118034718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="129.170.249.240"/>
      <from sec="1118034000" usec="0"/>
      <to sec="1118034827" usec="0"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
2492[label="128.65.64.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
2493[label="49.173.29.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.216.241.80:0, 128.65.64.111:0}[50%]&lt;BR/&gt;{49.173.29.251:6667, 128.65.64.111:1077}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (33.3333%)&lt;BR/&gt; 1077: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
2492--2493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.64.111" dst_port="1077" src_ip="49.173.29.251" src_port="6667"/>
      <filter dst_ip="128.65.64.111" src_ip="192.216.241.80"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
1840[label="176.196.176.66;s;90pkt 90fpkt", shape=diamond, color=yellow];
2498[label="214.236.218.152;d;29pkt 29fpkt", shape=diamond, color=yellow];
4192[label="176.196.176.66;92pkt 92fpkt", shape=pentagon, color=darkviolet];
6466[label="176.196.176.66;92pkt 92fpkt", shape=invtriangle, color=brown];
7807[label="176.196.176.66;92pkt 92fpkt", shape=invhouse, color=bisque];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.176.66:*, 85.56.128.232:80}[36.5591%]&lt;BR/&gt;{176.196.176.66:*, 214.236.218.152:80}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4937%)&lt;BR/&gt; 123: (1.01266%)&lt;BR/&gt; 2260: (0.632911%)&lt;BR/&gt; 2258: (0.632911%)&lt;BR/&gt; 2252: (0.632911%)&gt;];
}
1840--2498[label="1;29pkt 29fpkt"];
1840--3478[label="0.0222222;2pkt 2fpkt"];
1840--3485[label="0.255556;23pkt 23fpkt"];
1840--4192[label="0.988889;89pkt 89fpkt"];
1840--6466[label="0.988889;89pkt 89fpkt"];
1840--7807[label="0.988889;89pkt 89fpkt"];
2498--3485[label="0.206897;6pkt 6fpkt"];
2498--4192[label="0.965517;28pkt 28fpkt"];
2498--6466[label="0.965517;28pkt 28fpkt"];
2498--7807[label="0.965517;28pkt 28fpkt"];
4192--6466[label="1;92pkt 92fpkt"];
4192--7807[label="1;92pkt 92fpkt"];
6466--7807[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="85.56.128.232" dst_port="80" src_ip="176.196.176.66"/>
      <filter dst_ip="214.236.218.152" dst_port="80" src_ip="176.196.176.66"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
4951[label="176.196.132.138;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.132.138:*, 192.9.62.68:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3006: (1.19048%)&lt;BR/&gt; 3005: (1.19048%)&lt;BR/&gt; 3004: (1.19048%)&lt;BR/&gt; 3003: (1.19048%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="192.9.62.68" dst_port="80" src_ip="176.196.132.138"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
213[label="218.106.178.71;d;5pkt 5fpkt", shape=diamond, color=yellow];
387[label="220.10.52.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
553[label="183.82.33.231;s;80pkt 80fpkt", shape=diamond, color=yellow];
563[label="87.16.163.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
828[label="87.2.109.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1049[label="197.133.161.66;d;4pkt 4fpkt", shape=diamond, color=yellow];
1142[label="87.2.173.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1283[label="218.106.199.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1289[label="220.140.5.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
2678[label="220.10.52.134;d;1pkt 1fpkt", shape=hexagon, color=black];
5880[label="183.82.33.231;79pkt 79fpkt", shape=pentagon, color=darkviolet];
7488[label="183.82.33.231;80pkt 80fpkt", shape=invtriangle, color=brown];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.33.231:9172, *:*}[35%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9172: (17.8431%)&lt;BR/&gt; 18058: (5.29412%)&lt;BR/&gt; 17175: (3.52941%)&lt;BR/&gt; 7391: (3.52941%)&lt;BR/&gt; 8884: (2.35294%)&gt;];
}
213--553[label="1;5pkt 5fpkt"];
213--5880[label="1;5pkt 5fpkt"];
213--7488[label="1;5pkt 5fpkt"];
387--553[label="1;1pkt 1fpkt"];
387--2678[label="1;1pkt 1fpkt"];
387--5880[label="1;1pkt 1fpkt"];
387--7488[label="1;1pkt 1fpkt"];
553--563[label="1;1pkt 1fpkt"];
553--828[label="1;1pkt 1fpkt"];
553--1049[label="1;4pkt 4fpkt"];
553--1142[label="1;1pkt 1fpkt"];
553--1283[label="1;1pkt 1fpkt"];
553--1289[label="1;1pkt 1fpkt"];
553--2678[label="1;1pkt 1fpkt"];
553--5880[label="1;79pkt 79fpkt"];
553--7488[label="1;80pkt 80fpkt"];
563--5880[label="1;1pkt 1fpkt"];
563--7488[label="1;1pkt 1fpkt"];
828--5880[label="1;1pkt 1fpkt"];
828--7488[label="1;1pkt 1fpkt"];
1049--5880[label="0.75;3pkt 3fpkt"];
1049--7488[label="1;4pkt 4fpkt"];
1142--5880[label="1;1pkt 1fpkt"];
1142--7488[label="1;1pkt 1fpkt"];
1283--5880[label="1;1pkt 1fpkt"];
1283--7488[label="1;1pkt 1fpkt"];
1289--5880[label="1;1pkt 1fpkt"];
1289--7488[label="1;1pkt 1fpkt"];
2678--5880[label="1;1pkt 1fpkt"];
2678--7488[label="1;1pkt 1fpkt"];
5880--7488[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.33.231" src_port="9172"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
1001[label="87.52.170.177;s;1798pkt 1798fpkt", shape=diamond, color=yellow];
2799[label="87.52.170.177;s;1413pkt 1413fpkt", shape=hexagon, color=black];
5373[label="87.52.170.177;1967pkt 1967fpkt", shape=pentagon, color=darkviolet];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.52.170.177:40001, *:*}[50.7372%]&lt;BR/&gt;{87.52.170.177:40002, *:*}[49.2628%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40001: (25.2221%)&lt;BR/&gt; 40002: (24.7779%)&lt;BR/&gt; 65037: (0.115875%)&lt;BR/&gt; 64558: (0.0869061%)&lt;BR/&gt; 48693: (0.0869061%)&gt;];
}
1001--2799[label="1;1413pkt 1413fpkt"];
1001--5373[label="1;1798pkt 1798fpkt"];
2799--5373[label="1;1413pkt 1413fpkt"];
</description>
    <slice>
      <filter src_ip="87.52.170.177" src_port="40001"/>
      <filter src_ip="87.52.170.177" src_port="40002"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
659[label="211.187.98.70;s;2963pkt 2963fpkt", shape=diamond, color=yellow];
2801[label="211.187.98.70;s;1037pkt 1037fpkt", shape=hexagon, color=black];
4244[label="211.187.98.70;3217pkt 3217fpkt", shape=pentagon, color=darkviolet];
6500[label="211.187.98.70;3216pkt 3216fpkt", shape=invtriangle, color=brown];
7827[label="211.187.98.70;3217pkt 3217fpkt", shape=invhouse, color=bisque];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.187.98.70:1037, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
659--2801[label="1;1037pkt 1037fpkt"];
659--4244[label="1;2963pkt 2963fpkt"];
659--6500[label="0.999663;2962pkt 2962fpkt"];
659--7827[label="1;2963pkt 2963fpkt"];
2801--4244[label="1;1037pkt 1037fpkt"];
2801--6500[label="0.999036;1036pkt 1036fpkt"];
2801--7827[label="1;1037pkt 1037fpkt"];
4244--6500[label="1;3216pkt 3216fpkt"];
4244--7827[label="1;3217pkt 3217fpkt"];
6500--7827[label="1;3216pkt 3216fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="211.187.98.70" src_port="1037"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
965[label="37.173.74.213;s;508pkt 508fpkt", shape=diamond, color=yellow];
2859[label="37.173.74.213;s;508pkt 508fpkt", shape=hexagon, color=black];
5733[label="37.173.74.213;508pkt 508fpkt", shape=pentagon, color=darkviolet];
7393[label="37.173.74.213;508pkt 508fpkt", shape=invtriangle, color=brown];
8269[label="37.173.74.213;508pkt 508fpkt", shape=invhouse, color=bisque];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.173.74.213:*, *:135}[50%]&lt;BR/&gt;{37.173.74.213:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4380: (0.0984252%)&lt;BR/&gt; 4379: (0.0984252%)&lt;BR/&gt; 4378: (0.0984252%)&gt;];
}
965--2859[label="1;508pkt 508fpkt"];
965--5733[label="1;508pkt 508fpkt"];
965--7393[label="1;508pkt 508fpkt"];
965--8269[label="1;508pkt 508fpkt"];
2859--5733[label="1;508pkt 508fpkt"];
2859--7393[label="1;508pkt 508fpkt"];
2859--8269[label="1;508pkt 508fpkt"];
5733--7393[label="1;508pkt 508fpkt"];
5733--8269[label="1;508pkt 508fpkt"];
7393--8269[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="37.173.74.213"/>
      <filter dst_port="135" src_ip="37.173.74.213"/>
    </slice>
    <from sec="1118034146" usec="0"/>
    <to sec="1118034247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
283[label="54.84.41.212;d;7pkt 7fpkt", shape=diamond, color=yellow];
284[label="183.82.34.47;s;13pkt 13fpkt", shape=diamond, color=yellow];
2875[label="54.84.41.212;d;3pkt 3fpkt", shape=hexagon, color=black];
4040[label="183.82.34.47;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6360[label="183.82.34.47;13pkt 13fpkt", shape=invtriangle, color=brown];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.34.47:24430, 54.84.41.212:*}[53.8462%]&lt;BR/&gt;{183.82.34.47:*, *:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24430: (38.5417%)&lt;BR/&gt; 80: (8.33333%)&lt;BR/&gt; 3443: (5.20833%)&lt;BR/&gt; 3440: (5.20833%)&lt;BR/&gt; 3338: (5.20833%)&gt;];
}
283--284[label="1;7pkt 7fpkt"];
283--2875[label="1;3pkt 3fpkt"];
283--4040[label="1;7pkt 7fpkt"];
283--6360[label="1;7pkt 7fpkt"];
284--2875[label="1;3pkt 3fpkt"];
284--4040[label="1;12pkt 12fpkt"];
284--6360[label="1;13pkt 13fpkt"];
2875--4040[label="1;3pkt 3fpkt"];
2875--6360[label="1;3pkt 3fpkt"];
4040--6360[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="183.82.34.47"/>
      <filter dst_ip="54.84.41.212" src_ip="183.82.34.47" src_port="24430"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
229[label="197.77.211.207;s;324pkt 324fpkt", shape=diamond, color=yellow];
560[label="48.104.214.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
607[label="218.109.140.250;d;2pkt 2fpkt", shape=diamond, color=yellow];
612[label="87.65.4.97;d;6pkt 6fpkt", shape=diamond, color=yellow];
1561[label="87.66.200.109;d;6pkt 6fpkt", shape=diamond, color=yellow];
2878[label="218.109.140.250;d;1pkt 1fpkt", shape=hexagon, color=black];
5679[label="197.77.211.207;383pkt 383fpkt", shape=pentagon, color=darkviolet];
7359[label="197.77.211.207;384pkt 384fpkt", shape=invtriangle, color=brown];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.211.207:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59978: (1.76152%)&lt;BR/&gt; 64035: (1.30985%)&lt;BR/&gt; 64633: (1.17435%)&lt;BR/&gt; 54806: (1.08401%)&lt;BR/&gt; 17902: (1.03884%)&gt;];
}
229--560[label="1;1pkt 1fpkt"];
229--607[label="1;2pkt 2fpkt"];
229--612[label="1;6pkt 6fpkt"];
229--1561[label="1;6pkt 6fpkt"];
229--2878[label="1;1pkt 1fpkt"];
229--5679[label="0.996914;323pkt 323fpkt"];
229--7359[label="1;324pkt 324fpkt"];
560--5679[label="1;1pkt 1fpkt"];
560--7359[label="1;1pkt 1fpkt"];
607--2878[label="1;1pkt 1fpkt"];
607--5679[label="1;2pkt 2fpkt"];
607--7359[label="1;2pkt 2fpkt"];
612--5679[label="1;6pkt 6fpkt"];
612--7359[label="1;6pkt 6fpkt"];
1561--5679[label="1;6pkt 6fpkt"];
1561--7359[label="1;6pkt 6fpkt"];
2878--5679[label="1;1pkt 1fpkt"];
2878--7359[label="1;1pkt 1fpkt"];
5679--7359[label="1;383pkt 383fpkt"];
</description>
    <slice>
      <filter src_ip="197.77.211.207"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
637[label="176.196.24.245;s;2024pkt 2024fpkt", shape=diamond, color=yellow];
765[label="194.1.124.146;d;494pkt 494fpkt", shape=diamond, color=yellow];
992[label="52.161.122.115;d;524pkt 524fpkt", shape=diamond, color=yellow];
1054[label="192.20.175.207;d;493pkt 493fpkt", shape=diamond, color=yellow];
2885[label="52.161.122.115;d;524pkt 524fpkt", shape=hexagon, color=black];
5986[label="176.196.24.245;2024pkt 2024fpkt", shape=pentagon, color=darkviolet];
7558[label="176.196.24.245;2023pkt 2023fpkt", shape=invtriangle, color=brown];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.24.245:*, 52.161.122.115:80}[25.8399%]&lt;BR/&gt;{176.196.24.245:80, *:*}[25.1976%]&lt;BR/&gt;{176.196.24.245:*, 192.20.175.207:80}[24.3577%]&lt;BR/&gt;{176.196.24.245:*, 194.1.124.146:80}[24.3577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.926%)&lt;BR/&gt; 1552: (0.172712%)&lt;BR/&gt; 1532: (0.154207%)&lt;BR/&gt; 1970: (0.135702%)&lt;BR/&gt; 1824: (0.135702%)&gt;];
}
637--765[label="1;494pkt 494fpkt"];
637--992[label="1;524pkt 524fpkt"];
637--1054[label="1;493pkt 493fpkt"];
637--2885[label="1;524pkt 524fpkt"];
637--3478[label="0.000494071;1pkt 1fpkt"];
637--5986[label="1;2024pkt 2024fpkt"];
637--7558[label="1;2023pkt 2023fpkt"];
765--5986[label="1;494pkt 494fpkt"];
765--7558[label="1;494pkt 494fpkt"];
992--2885[label="1;524pkt 524fpkt"];
992--5986[label="1;524pkt 524fpkt"];
992--7558[label="1;524pkt 524fpkt"];
1054--5986[label="1;493pkt 493fpkt"];
1054--7558[label="1;493pkt 493fpkt"];
2885--5986[label="1;524pkt 524fpkt"];
2885--7558[label="1;524pkt 524fpkt"];
5986--7558[label="1;2023pkt 2023fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.24.245" src_port="80"/>
      <filter dst_ip="52.161.122.115" dst_port="80" src_ip="176.196.24.245"/>
      <filter dst_ip="194.1.124.146" dst_port="80" src_ip="176.196.24.245"/>
      <filter dst_ip="192.20.175.207" dst_port="80" src_ip="176.196.24.245"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
675[label="176.197.38.205;s;144pkt 144fpkt", shape=diamond, color=yellow];
947[label="193.151.205.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
2891[label="176.197.38.205;s;144pkt 144fpkt", shape=hexagon, color=black];
5655[label="176.197.38.205;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.38.205:25, *:*}[74.6667%]&lt;BR/&gt;{176.197.38.205:*, *:25}[24.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6575%)&lt;BR/&gt; 4155: (0.684932%)&lt;BR/&gt; 2571: (0.684932%)&lt;BR/&gt; 26280: (0.456621%)&lt;BR/&gt; 64918: (0.342466%)&gt;];
}
675--947[label="1;1pkt 1fpkt"];
675--2891[label="1;144pkt 144fpkt"];
675--5655[label="0.993056;143pkt 143fpkt"];
947--2891[label="1;1pkt 1fpkt"];
947--5655[label="1;1pkt 1fpkt"];
2891--5655[label="0.993056;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.38.205" src_port="25"/>
      <filter dst_port="25" src_ip="176.197.38.205"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1274[label="176.196.21.229;s;3pkt 3fpkt", shape=diamond, color=yellow];
2896[label="176.196.21.229;s;3pkt 3fpkt", shape=hexagon, color=black];
5863[label="176.196.21.229;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7479[label="176.196.21.229;3pkt 3fpkt", shape=invtriangle, color=brown];
8314[label="176.196.21.229;2pkt 2fpkt", shape=invhouse, color=bisque];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.21.229:62207, 141.3.133.47:38293}[33.3333%]&lt;BR/&gt;{176.196.21.229:46667, 53.8.177.64:443}[33.3333%]&lt;BR/&gt;{176.196.21.229:46701, 192.9.56.153:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62207: (17.8571%)&lt;BR/&gt; 46667: (17.8571%)&lt;BR/&gt; 38293: (17.8571%)&lt;BR/&gt; 443: (17.8571%)&lt;BR/&gt; 46701: (14.2857%)&gt;];
}
1274--2896[label="1;3pkt 3fpkt"];
1274--5863[label="1;3pkt 3fpkt"];
1274--7479[label="1;3pkt 3fpkt"];
1274--8314[label="1;2pkt 2fpkt"];
2896--5863[label="1;3pkt 3fpkt"];
2896--7479[label="1;3pkt 3fpkt"];
2896--8314[label="1;2pkt 2fpkt"];
5863--7479[label="1;3pkt 3fpkt"];
5863--8314[label="1;2pkt 2fpkt"];
7479--8314[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.56.153" dst_port="1863" src_ip="176.196.21.229" src_port="46701"/>
      <filter dst_ip="53.8.177.64" dst_port="443" src_ip="176.196.21.229" src_port="46667"/>
      <filter dst_ip="141.3.133.47" dst_port="38293" src_ip="176.196.21.229" src_port="62207"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
1026[label="197.130.48.163;s;2117pkt 2117fpkt", shape=diamond, color=yellow];
2897[label="197.130.48.163;s;1073pkt 1073fpkt", shape=hexagon, color=black];
5214[label="197.130.48.163;2619pkt 2619fpkt", shape=pentagon, color=darkviolet];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.130.48.163:1091, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1091: (50%)&gt;];
}
1026--2897[label="1;1073pkt 1073fpkt"];
1026--5214[label="1;2117pkt 2117fpkt"];
2897--5214[label="1;1073pkt 1073fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.130.48.163" src_port="1091"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
729[label="205.169.155.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
730[label="176.197.145.240;s;51pkt 51fpkt", shape=diamond, color=yellow];
2898[label="205.169.155.75;d;1pkt 1fpkt", shape=hexagon, color=black];
5956[label="176.197.145.240;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7537[label="176.197.145.240;51pkt 51fpkt", shape=invtriangle, color=brown];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.145.240:*, 55.104.157.121:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6104%)&lt;BR/&gt; 443: (6.81818%)&lt;BR/&gt; 123: (1.94805%)&lt;BR/&gt; 1985: (1.62338%)&lt;BR/&gt; 554: (1.62338%)&gt;];
}
729--730[label="1;1pkt 1fpkt"];
729--2898[label="1;1pkt 1fpkt"];
729--5956[label="1;1pkt 1fpkt"];
729--7537[label="1;1pkt 1fpkt"];
730--2898[label="1;1pkt 1fpkt"];
730--3477[label="0.0784314;4pkt 4fpkt"];
730--3495[label="0.0784314;4pkt 4fpkt"];
730--5956[label="1;50pkt 50fpkt"];
730--7537[label="1;51pkt 51fpkt"];
2898--5956[label="1;1pkt 1fpkt"];
2898--7537[label="1;1pkt 1fpkt"];
5956--7537[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="55.104.157.121" dst_port="80" src_ip="176.197.145.240"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1287[label="202.4.107.12;d;48pkt 48fpkt", shape=diamond, color=yellow];
1288[label="176.197.72.181;s;53pkt 53fpkt", shape=diamond, color=yellow];
2905[label="202.4.107.12;d;48pkt 48fpkt", shape=hexagon, color=black];
2906[label="176.197.72.181;s;52pkt 52fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.72.181:*, 202.4.107.12:443}[90.566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.7612%)&lt;BR/&gt; 80: (2.23881%)&lt;BR/&gt; 49454: (0.995025%)&lt;BR/&gt; 49453: (0.995025%)&lt;BR/&gt; 49452: (0.995025%)&gt;];
}
1287--1288[label="1;48pkt 48fpkt"];
1287--2905[label="1;48pkt 48fpkt"];
1287--2906[label="1;48pkt 48fpkt"];
1288--2905[label="1;48pkt 48fpkt"];
1288--2906[label="1;52pkt 52fpkt"];
1288--3485[label="0.0188679;1pkt 1fpkt"];
2905--2906[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="202.4.107.12" dst_port="443" src_ip="176.197.72.181"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
759[label="87.8.63.91;s;2391pkt 2391fpkt", shape=diamond, color=yellow];
2908[label="87.8.63.91;s;2124pkt 2124fpkt", shape=hexagon, color=black];
4488[label="87.8.63.91;2593pkt 2593fpkt", shape=pentagon, color=darkviolet];
6647[label="87.8.63.91;2592pkt 2592fpkt", shape=invtriangle, color=brown];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.8.63.91:1181, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1181: (50%)&gt;];
}
759--2908[label="1;2124pkt 2124fpkt"];
759--4488[label="1;2391pkt 2391fpkt"];
759--6647[label="0.999582;2390pkt 2390fpkt"];
2908--4488[label="1;2124pkt 2124fpkt"];
2908--6647[label="0.999529;2123pkt 2123fpkt"];
4488--6647[label="1;2592pkt 2592fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="87.8.63.91" src_port="1181"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
343[label="183.144.91.113;s;1720pkt 1720fpkt", shape=diamond, color=yellow];
606[label="183.174.87.129;s;750pkt 750fpkt", shape=diamond, color=yellow];
2032[label="87.30.159.115;d;26pkt 26fpkt", shape=diamond, color=yellow];
2788[label="183.174.87.129;s;365pkt 365fpkt", shape=hexagon, color=black];
3046[label="183.144.91.113;s;1374pkt 1374fpkt", shape=hexagon, color=black];
4692[label="183.144.91.113;1969pkt 1969fpkt", shape=pentagon, color=darkviolet];
4840[label="183.174.87.129;791pkt 791fpkt", shape=pentagon, color=darkviolet];
6772[label="183.144.91.113;1969pkt 1969fpkt", shape=invtriangle, color=brown];
6863[label="183.174.87.129;790pkt 790fpkt", shape=invtriangle, color=brown];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.144.91.113:0, *:0}[70.5206%]&lt;BR/&gt;{183.174.87.129:0, *:0}[28.4022%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7027%)&lt;BR/&gt; 65524: (0.0871437%)&lt;BR/&gt; 53: (0.0871437%)&lt;BR/&gt; 80: (0.0615132%)&lt;BR/&gt; 8734: (0.0051261%)&gt;];
}
343--609[label="0.00286533;1pkt 1fpkt"];
343--990[label="0.00719424;1pkt 1fpkt"];
343--1335[label="0.00254453;1pkt 1fpkt"];
343--1449[label="0.00251889;1pkt 1fpkt"];
343--1513[label="0.0027027;1pkt 1fpkt"];
343--1525[label="0.00263852;1pkt 1fpkt"];
343--1555[label="0.00308642;1pkt 1fpkt"];
343--1746[label="0.00328947;1pkt 1fpkt"];
343--1755[label="0.00584795;1pkt 1fpkt"];
343--2032[label="0.0384615;1pkt 1fpkt"];
343--2227[label="0.00483092;1pkt 1fpkt"];
343--2251[label="0.00440529;1pkt 1fpkt"];
343--2450[label="0.00497512;1pkt 1fpkt"];
343--2456[label="0.00529101;1pkt 1fpkt"];
343--2795[label="0.00719424;1pkt 1fpkt"];
343--3046[label="1;1374pkt 1374fpkt"];
343--4692[label="0.999419;1719pkt 1719fpkt"];
343--6772[label="0.999419;1719pkt 1719fpkt"];
606--990[label="0.00719424;1pkt 1fpkt"];
606--1335[label="0.00254453;1pkt 1fpkt"];
606--1513[label="0.0027027;1pkt 1fpkt"];
606--1525[label="0.00263852;1pkt 1fpkt"];
606--1555[label="0.00308642;1pkt 1fpkt"];
606--1746[label="0.00328947;1pkt 1fpkt"];
606--2032[label="0.0384615;1pkt 1fpkt"];
606--2251[label="0.00440529;1pkt 1fpkt"];
606--2788[label="1;365pkt 365fpkt"];
606--2795[label="0.00719424;1pkt 1fpkt"];
606--4840[label="1;750pkt 750fpkt"];
606--6863[label="0.998667;749pkt 749fpkt"];
2032--2766[label="0.0384615;1pkt 1fpkt"];
2032--2788[label="0.0384615;1pkt 1fpkt"];
2032--3046[label="0.0384615;1pkt 1fpkt"];
2032--3478[label="0.0384615;1pkt 1fpkt"];
2032--4692[label="0.0384615;1pkt 1fpkt"];
2032--4840[label="0.0384615;1pkt 1fpkt"];
2032--5930[label="0.0384615;1pkt 1fpkt"];
2032--6772[label="0.0384615;1pkt 1fpkt"];
2032--6863[label="0.0384615;1pkt 1fpkt"];
2788--2795[label="0.00719424;1pkt 1fpkt"];
2788--4840[label="1;365pkt 365fpkt"];
2788--6863[label="0.99726;364pkt 364fpkt"];
3046--4692[label="0.999272;1373pkt 1373fpkt"];
3046--6772[label="0.999272;1373pkt 1373fpkt"];
4692--6772[label="1;1969pkt 1969fpkt"];
4840--6863[label="1;790pkt 790fpkt"];
</description>
    <slice>
      <filter src_ip="183.144.91.113"/>
      <filter src_ip="183.174.87.129"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1328[label="196.8.21.222;s;845pkt 845fpkt", shape=diamond, color=yellow];
3060[label="196.8.21.222;s;845pkt 845fpkt", shape=hexagon, color=black];
5809[label="196.8.21.222;913pkt 913fpkt", shape=pentagon, color=darkviolet];
7444[label="196.8.21.222;914pkt 914fpkt", shape=invtriangle, color=brown];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.21.222:0, *:0}[96.2801%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.2468%)&lt;BR/&gt; 6881: (1.76287%)&lt;BR/&gt; 80: (0.113733%)&lt;BR/&gt; 65170: (0.0568666%)&lt;BR/&gt; 65017: (0.0568666%)&gt;];
}
1328--3060[label="1;845pkt 845fpkt"];
1328--5809[label="0.998817;844pkt 844fpkt"];
1328--7444[label="1;845pkt 845fpkt"];
3060--5809[label="0.998817;844pkt 844fpkt"];
3060--7444[label="1;845pkt 845fpkt"];
5809--7444[label="1;913pkt 913fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.21.222"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1581[label="87.45.71.97;s;863pkt 863fpkt", shape=diamond, color=yellow];
3065[label="87.45.71.97;s;693pkt 693fpkt", shape=hexagon, color=black];
4547[label="87.45.71.97;916pkt 916fpkt", shape=pentagon, color=darkviolet];
6685[label="87.45.71.97;915pkt 915fpkt", shape=invtriangle, color=brown];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.45.71.97:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 40746: (0.118099%)&lt;BR/&gt; 40527: (0.118099%)&lt;BR/&gt; 39938: (0.118099%)&lt;BR/&gt; 30451: (0.118099%)&gt;];
}
1581--3065[label="1;693pkt 693fpkt"];
1581--4547[label="0.998841;862pkt 862fpkt"];
1581--6685[label="0.997683;861pkt 861fpkt"];
3065--4547[label="0.998557;692pkt 692fpkt"];
3065--6685[label="0.997114;691pkt 691fpkt"];
4547--6685[label="1;915pkt 915fpkt"];
</description>
    <slice>
      <filter src_ip="87.45.71.97" src_port="7000"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792138,2.26821,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
2524[label="183.82.34.88;s;171pkt 171fpkt", shape=diamond, color=yellow];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.34.88:*, 193.151.192.138:80}[50.8772%]&lt;BR/&gt;{183.82.34.88:*, 193.151.192.137:80}[27.4854%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7076%)&lt;BR/&gt; 1863: (0.292398%)&lt;BR/&gt; 1482: (0.292398%)&lt;BR/&gt; 1481: (0.292398%)&lt;BR/&gt; 1480: (0.292398%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="193.151.192.138" dst_port="80" src_ip="183.82.34.88"/>
      <filter dst_ip="193.151.192.137" dst_port="80" src_ip="183.82.34.88"/>
    </slice>
    <from sec="1118034014" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,502,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
779[label="32.139.171.58;d;3pkt 3fpkt", shape=diamond, color=yellow];
780[label="133.167.96.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
1614[label="133.167.59.4;s;2pkt 2fpkt", shape=diamond, color=yellow];
2754[label="133.167.96.202;s;1pkt 1fpkt", shape=hexagon, color=black];
3074[label="133.167.59.4;s;2pkt 2fpkt", shape=hexagon, color=black];
3552[label="133.167.59.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.37.193:0, 32.139.171.58:0}[25%]&lt;BR/&gt;{133.167.96.202:64977, 32.139.171.58:22}[25%]&lt;BR/&gt;{133.167.59.4:32785, 216.212.121.247:5050}[25%]&lt;BR/&gt;{133.167.59.4:32790, 32.139.171.58:22}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (31.8182%)&lt;BR/&gt; 32790: (18.1818%)&lt;BR/&gt; 64977: (13.6364%)&lt;BR/&gt; 32785: (13.6364%)&lt;BR/&gt; 5050: (13.6364%)&gt;];
}
779--780[label="1;1pkt 1fpkt"];
779--1614[label="0.5;1pkt 1fpkt"];
779--2754[label="1;1pkt 1fpkt"];
779--3074[label="0.5;1pkt 1fpkt"];
779--3552[label="0.5;1pkt 1fpkt"];
780--2754[label="1;1pkt 1fpkt"];
1614--3074[label="1;2pkt 2fpkt"];
1614--3552[label="1;2pkt 2fpkt"];
3074--3552[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.139.171.58" dst_port="22" src_ip="133.167.59.4" src_port="32790"/>
      <filter dst_ip="216.212.121.247" dst_port="5050" src_ip="133.167.59.4" src_port="32785"/>
      <filter dst_ip="32.139.171.58" dst_port="22" src_ip="133.167.96.202" src_port="64977"/>
      <filter dst_ip="32.139.171.58" src_ip="133.167.37.193"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
1509[label="196.8.29.125;s;91pkt 91fpkt", shape=diamond, color=yellow];
3116[label="196.8.29.125;s;85pkt 85fpkt", shape=hexagon, color=black];
4794[label="196.8.29.125;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.29.125:25, *:*}[52.9412%]&lt;BR/&gt;{196.8.29.125:*, *:113}[45.098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.259%)&lt;BR/&gt; 113: (22.6619%)&lt;BR/&gt; 0: (1.07914%)&lt;BR/&gt; 63611: (0.539568%)&lt;BR/&gt; 63610: (0.539568%)&gt;];
}
1509--3116[label="1;85pkt 85fpkt"];
1509--4794[label="1;91pkt 91fpkt"];
3116--4794[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.29.125" src_port="25"/>
      <filter dst_port="113" src_ip="196.8.29.125"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1032[label="176.196.221.99;s;5pkt 5fpkt", shape=diamond, color=yellow];
1531[label="54.99.147.56;d;37pkt 37fpkt", shape=diamond, color=yellow];
1545[label="128.65.41.115;s;36pkt 36fpkt", shape=diamond, color=yellow];
2290[label="197.41.21.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
3122[label="54.99.147.56;d;30pkt 30fpkt", shape=hexagon, color=black];
3123[label="176.196.221.99;s;5pkt 5fpkt", shape=hexagon, color=black];
4574[label="176.196.221.99;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.41.115:*, 54.99.147.56:80}[67.4419%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.4711%)&lt;BR/&gt; 443: (6.19835%)&lt;BR/&gt; 3020: (2.89256%)&lt;BR/&gt; 1000: (2.47934%)&lt;BR/&gt; 1408: (2.06612%)&gt;];
}
1032--1531[label="0.6;3pkt 3fpkt"];
1032--2290[label="0.5;1pkt 1fpkt"];
1032--3122[label="0.6;3pkt 3fpkt"];
1032--3123[label="1;5pkt 5fpkt"];
1032--4574[label="0.8;4pkt 4fpkt"];
1531--1545[label="0.944444;34pkt 34fpkt"];
1531--3122[label="1;30pkt 30fpkt"];
1531--3123[label="0.6;3pkt 3fpkt"];
1531--3478[label="0.0540541;2pkt 2fpkt"];
1531--3485[label="0.0540541;2pkt 2fpkt"];
1531--4574[label="0.333333;2pkt 2fpkt"];
1545--2290[label="0.5;1pkt 1fpkt"];
1545--3122[label="0.9;27pkt 27fpkt"];
1545--3478[label="0.0555556;2pkt 2fpkt"];
1545--3485[label="0.0555556;2pkt 2fpkt"];
2290--3123[label="0.5;1pkt 1fpkt"];
2290--4574[label="0.5;1pkt 1fpkt"];
3122--3123[label="0.6;3pkt 3fpkt"];
3122--3478[label="0.0666667;2pkt 2fpkt"];
3122--3485[label="0.0666667;2pkt 2fpkt"];
3122--4574[label="0.333333;2pkt 2fpkt"];
3123--4574[label="0.8;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="54.99.147.56" dst_port="80" src_ip="128.65.41.115"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1327[label="196.8.21.188;s;109pkt 109fpkt", shape=diamond, color=yellow];
3135[label="196.8.21.188;s;80pkt 80fpkt", shape=hexagon, color=black];
5475[label="196.8.21.188;113pkt 113fpkt", shape=pentagon, color=darkviolet];
7242[label="196.8.21.188;113pkt 113fpkt", shape=invtriangle, color=brown];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.21.188:37602, *:*}[86.7257%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37602: (43.6145%)&lt;BR/&gt; 443: (3.01205%)&lt;BR/&gt; 60643: (0.963855%)&lt;BR/&gt; 55697: (0.963855%)&lt;BR/&gt; 39552: (0.963855%)&gt;];
}
1327--3135[label="1;80pkt 80fpkt"];
1327--5475[label="1;109pkt 109fpkt"];
1327--7242[label="1;109pkt 109fpkt"];
3135--5475[label="1;80pkt 80fpkt"];
3135--7242[label="1;80pkt 80fpkt"];
5475--7242[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.21.188" src_port="37602"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
484[label="176.196.154.242;s;1609pkt 1609fpkt", shape=diamond, color=yellow];
530[label="192.49.61.136;d;19pkt 19fpkt", shape=diamond, color=yellow];
1027[label="176.196.167.156;s;209pkt 209fpkt", shape=diamond, color=yellow];
1041[label="176.196.44.93;s;287pkt 287fpkt", shape=diamond, color=yellow];
1081[label="176.196.175.99;s;376pkt 376fpkt", shape=diamond, color=yellow];
1085[label="176.196.44.92;s;146pkt 146fpkt", shape=diamond, color=yellow];
1308[label="183.82.12.227;s;291pkt 291fpkt", shape=diamond, color=yellow];
1336[label="192.9.62.44;d;173pkt 173fpkt", shape=diamond, color=yellow];
1480[label="183.82.37.254;s;24pkt 24fpkt", shape=diamond, color=yellow];
1497[label="216.62.72.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
1578[label="192.9.62.18;d;87pkt 87fpkt", shape=diamond, color=yellow];
1657[label="219.1.87.3;d;26pkt 26fpkt", shape=diamond, color=yellow];
1772[label="192.9.62.34;d;111pkt 111fpkt", shape=diamond, color=yellow];
1817[label="196.8.31.11;s;90pkt 90fpkt", shape=diamond, color=yellow];
1925[label="219.1.22.189;d;672pkt 672fpkt", shape=diamond, color=yellow];
1928[label="128.65.65.184;s;114pkt 114fpkt", shape=diamond, color=yellow];
2065[label="192.9.62.32;d;120pkt 120fpkt", shape=diamond, color=yellow];
2151[label="204.96.228.172;d;66pkt 66fpkt", shape=diamond, color=yellow];
2152[label="205.216.12.99;d;9pkt 9fpkt", shape=diamond, color=yellow];
2264[label="192.9.62.144;d;143pkt 143fpkt", shape=diamond, color=yellow];
2279[label="192.9.62.21;d;87pkt 87fpkt", shape=diamond, color=yellow];
2284[label="192.9.62.22;d;79pkt 79fpkt", shape=diamond, color=yellow];
2321[label="176.196.1.6;s;124pkt 124fpkt", shape=diamond, color=yellow];
2330[label="192.9.62.33;d;81pkt 81fpkt", shape=diamond, color=yellow];
2380[label="176.196.146.80;s;106pkt 106fpkt", shape=diamond, color=yellow];
2436[label="209.9.240.212;d;99pkt 99fpkt", shape=diamond, color=yellow];
2699[label="176.196.154.242;s;116pkt 116fpkt", shape=hexagon, color=black];
2825[label="176.196.44.92;s;121pkt 121fpkt", shape=hexagon, color=black];
2914[label="183.82.12.227;s;126pkt 126fpkt", shape=hexagon, color=black];
3063[label="196.8.31.11;s;63pkt 63fpkt", shape=hexagon, color=black];
3124[label="176.196.44.93;s;287pkt 287fpkt", shape=hexagon, color=black];
3138[label="176.196.175.99;s;278pkt 278fpkt", shape=hexagon, color=black];
3325[label="176.196.167.156;s;209pkt 209fpkt", shape=hexagon, color=black];
3578[label="176.196.1.6;131pkt 131fpkt", shape=pentagon, color=darkviolet];
3652[label="196.8.31.11;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4508[label="176.196.44.93;301pkt 301fpkt", shape=pentagon, color=darkviolet];
5438[label="128.65.65.184;113pkt 113fpkt", shape=pentagon, color=darkviolet];
5840[label="183.82.12.227;314pkt 314fpkt", shape=pentagon, color=darkviolet];
6035[label="183.82.37.254;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6082[label="176.196.1.6;132pkt 132fpkt", shape=invtriangle, color=brown];
7219[label="128.65.65.184;114pkt 114fpkt", shape=invtriangle, color=brown];
7592[label="183.82.37.254;34pkt 34fpkt", shape=invtriangle, color=brown];
7610[label="176.196.1.6;132pkt 132fpkt", shape=invhouse, color=bisque];
8368[label="183.82.37.254;34pkt 34fpkt", shape=invhouse, color=bisque];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.154.242:*, *:80}[23.4916%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.6593%)&lt;BR/&gt; 25: (4.06013%)&lt;BR/&gt; 443: (1.65103%)&lt;BR/&gt; 85: (0.205576%)&lt;BR/&gt; 53: (0.192728%)&gt;];
}
484--499[label="0.00496278;2pkt 2fpkt"];
484--706[label="0.004329;2pkt 2fpkt"];
484--775[label="0.05;5pkt 5fpkt"];
484--846[label="0.14;14pkt 14fpkt"];
484--875[label="0.0291971;8pkt 8fpkt"];
484--902[label="0.166667;2pkt 2fpkt"];
484--1098[label="0.00689655;1pkt 1fpkt"];
484--1336[label="0.352601;61pkt 61fpkt"];
484--1521[label="0.102564;4pkt 4fpkt"];
484--1562[label="0.0251256;5pkt 5fpkt"];
484--1578[label="0.390805;34pkt 34fpkt"];
484--1594[label="0.0363636;4pkt 4fpkt"];
484--1596[label="0.0333333;1pkt 1fpkt"];
484--1604[label="0.0571429;2pkt 2fpkt"];
484--1623[label="0.03125;1pkt 1fpkt"];
484--1634[label="0.333333;2pkt 2fpkt"];
484--1657[label="0.923077;24pkt 24fpkt"];
484--1714[label="0.25;2pkt 2fpkt"];
484--1925[label="0.407738;274pkt 274fpkt"];
484--2065[label="0.475;57pkt 57fpkt"];
484--2100[label="0.0119048;2pkt 2fpkt"];
484--2107[label="0.753425;55pkt 55fpkt"];
484--2264[label="0.041958;6pkt 6fpkt"];
484--2322[label="0.430108;40pkt 40fpkt"];
484--2436[label="1;99pkt 99fpkt"];
484--2699[label="1;116pkt 116fpkt"];
484--3202[label="0.00526316;2pkt 2fpkt"];
484--3256[label="0.04;1pkt 1fpkt"];
484--3478[label="0.118086;190pkt 190fpkt"];
484--3485[label="0.0248602;40pkt 40fpkt"];
530--973[label="0.0526316;1pkt 1fpkt"];
530--1085[label="0.842105;16pkt 16fpkt"];
530--2825[label="0.842105;16pkt 16fpkt"];
530--3478[label="0.210526;4pkt 4fpkt"];
530--5314[label="0.0526316;1pkt 1fpkt"];
530--5436[label="0.105263;2pkt 2fpkt"];
530--7155[label="0.0526316;1pkt 1fpkt"];
530--8150[label="0.0526316;1pkt 1fpkt"];
1027--1059[label="0.00512821;1pkt 1fpkt"];
1027--1279[label="0.028169;2pkt 2fpkt"];
1027--1389[label="0.0588235;2pkt 2fpkt"];
1027--1406[label="0.0285714;1pkt 1fpkt"];
1027--1562[label="0.00502513;1pkt 1fpkt"];
1027--1594[label="0.0181818;2pkt 2fpkt"];
1027--2065[label="0.108333;13pkt 13fpkt"];
1027--2076[label="0.00478469;1pkt 1fpkt"];
1027--2107[label="0.0273973;2pkt 2fpkt"];
1027--2264[label="0.0559441;8pkt 8fpkt"];
1027--2279[label="0.505747;44pkt 44fpkt"];
1027--2300[label="0.4;10pkt 10fpkt"];
1027--2322[label="0.0322581;3pkt 3fpkt"];
1027--2330[label="0.148148;12pkt 12fpkt"];
1027--2702[label="0.00956938;2pkt 2fpkt"];
1027--2899[label="0.0289855;2pkt 2fpkt"];
1027--3325[label="1;209pkt 209fpkt"];
1027--3478[label="0.0574163;12pkt 12fpkt"];
1027--3485[label="0.0334928;7pkt 7fpkt"];
1041--1336[label="0.260116;45pkt 45fpkt"];
1041--1389[label="0.0294118;1pkt 1fpkt"];
1041--1772[label="0.432432;48pkt 48fpkt"];
1041--1843[label="0.840909;37pkt 37fpkt"];
1041--2152[label="0.444444;4pkt 4fpkt"];
1041--2279[label="0.471264;41pkt 41fpkt"];
1041--2284[label="0.0759494;6pkt 6fpkt"];
1041--3124[label="1;287pkt 287fpkt"];
1041--3202[label="0.00348432;1pkt 1fpkt"];
1041--3250[label="0.00348432;1pkt 1fpkt"];
1041--3478[label="0.0627178;18pkt 18fpkt"];
1041--3485[label="0.184669;53pkt 53fpkt"];
1041--4508[label="1;287pkt 287fpkt"];
1081--1098[label="0.00689655;1pkt 1fpkt"];
1081--1117[label="0.0153846;1pkt 1fpkt"];
1081--1251[label="0.00265957;1pkt 1fpkt"];
1081--1333[label="0.00271739;1pkt 1fpkt"];
1081--1336[label="0.242775;42pkt 42fpkt"];
1081--1578[label="0.551724;48pkt 48fpkt"];
1081--1714[label="0.125;1pkt 1fpkt"];
1081--1877[label="0.00952381;1pkt 1fpkt"];
1081--1884[label="0.017094;2pkt 2fpkt"];
1081--1923[label="0.0235294;2pkt 2fpkt"];
1081--2065[label="0.4;48pkt 48fpkt"];
1081--2068[label="0.047619;2pkt 2fpkt"];
1081--2098[label="0.0123457;1pkt 1fpkt"];
1081--2108[label="0.00909091;1pkt 1fpkt"];
1081--2284[label="0.35443;28pkt 28fpkt"];
1081--2330[label="0.666667;54pkt 54fpkt"];
1081--2345[label="0.0952381;2pkt 2fpkt"];
1081--2702[label="0.00380228;1pkt 1fpkt"];
1081--2725[label="0.0131579;1pkt 1fpkt"];
1081--3138[label="1;278pkt 278fpkt"];
1081--3202[label="0.00265957;1pkt 1fpkt"];
1081--3478[label="0.0585106;22pkt 22fpkt"];
1081--3485[label="0.0611702;23pkt 23fpkt"];
1085--1251[label="0.0136986;2pkt 2fpkt"];
1085--1333[label="0.0136986;2pkt 2fpkt"];
1085--1337[label="0.00684932;1pkt 1fpkt"];
1085--1799[label="0.00943396;1pkt 1fpkt"];
1085--1842[label="0.00819672;1pkt 1fpkt"];
1085--2240[label="0.0120482;1pkt 1fpkt"];
1085--2264[label="0.00699301;1pkt 1fpkt"];
1085--2279[label="0.0114943;1pkt 1fpkt"];
1085--2284[label="0.544304;43pkt 43fpkt"];
1085--2825[label="1;121pkt 121fpkt"];
1085--3202[label="0.0205479;3pkt 3fpkt"];
1085--3478[label="0.136986;20pkt 20fpkt"];
1085--3485[label="0.0273973;4pkt 4fpkt"];
1308--1333[label="0.00343643;1pkt 1fpkt"];
1308--1353[label="0.027933;5pkt 5fpkt"];
1308--1594[label="0.0363636;4pkt 4fpkt"];
1308--1772[label="0.540541;60pkt 60fpkt"];
1308--2362[label="0.0847458;10pkt 10fpkt"];
1308--2914[label="1;126pkt 126fpkt"];
1308--3478[label="0.0756014;22pkt 22fpkt"];
1308--3485[label="0.0378007;11pkt 11fpkt"];
1308--5840[label="1;291pkt 291fpkt"];
1336--2699[label="0.103448;12pkt 12fpkt"];
1336--2706[label="0.00657895;1pkt 1fpkt"];
1336--3124[label="0.260116;45pkt 45fpkt"];
1336--3138[label="0.190751;33pkt 33fpkt"];
1336--3478[label="0.0809249;14pkt 14fpkt"];
1336--3485[label="0.0867052;15pkt 15fpkt"];
1336--4508[label="0.260116;45pkt 45fpkt"];
1336--5626[label="0.138728;24pkt 24fpkt"];
1336--7328[label="0.138728;24pkt 24fpkt"];
1480--1497[label="1;2pkt 2fpkt"];
1480--2075[label="0.0833333;2pkt 2fpkt"];
1480--3478[label="0.208333;5pkt 5fpkt"];
1480--6035[label="1;24pkt 24fpkt"];
1480--7592[label="1;24pkt 24fpkt"];
1480--8368[label="1;24pkt 24fpkt"];
1497--3478[label="1;2pkt 2fpkt"];
1497--6035[label="1;2pkt 2fpkt"];
1497--7592[label="1;2pkt 2fpkt"];
1497--8368[label="1;2pkt 2fpkt"];
1578--2699[label="0.321839;28pkt 28fpkt"];
1578--2918[label="0.0114943;1pkt 1fpkt"];
1578--2979[label="0.0114943;1pkt 1fpkt"];
1578--3138[label="0.402299;35pkt 35fpkt"];
1578--3478[label="0.0689655;6pkt 6fpkt"];
1578--3485[label="0.0804598;7pkt 7fpkt"];
1578--4861[label="0.0357143;1pkt 1fpkt"];
1578--5269[label="0.2;1pkt 1fpkt"];
1578--5592[label="0.0114943;1pkt 1fpkt"];
1578--6872[label="0.037037;1pkt 1fpkt"];
1578--7117[label="0.166667;1pkt 1fpkt"];
1578--8011[label="0.0357143;1pkt 1fpkt"];
1657--2664[label="0.0769231;2pkt 2fpkt"];
1657--2699[label="0.269231;7pkt 7fpkt"];
1657--3394[label="0.0769231;2pkt 2fpkt"];
1657--5165[label="0.0769231;2pkt 2fpkt"];
1657--7052[label="0.0769231;2pkt 2fpkt"];
1772--2914[label="0.252252;28pkt 28fpkt"];
1772--2918[label="0.00900901;1pkt 1fpkt"];
1772--3124[label="0.432432;48pkt 48fpkt"];
1772--3478[label="0.0990991;11pkt 11fpkt"];
1772--3485[label="0.0900901;10pkt 10fpkt"];
1772--4508[label="0.432432;48pkt 48fpkt"];
1772--4861[label="0.0357143;1pkt 1fpkt"];
1772--5840[label="0.540541;60pkt 60fpkt"];
1772--6872[label="0.037037;1pkt 1fpkt"];
1772--8011[label="0.0357143;1pkt 1fpkt"];
1817--2264[label="0.922222;83pkt 83fpkt"];
1817--3063[label="1;63pkt 63fpkt"];
1817--3478[label="0.0666667;6pkt 6fpkt"];
1817--3485[label="0.0444444;4pkt 4fpkt"];
1817--3652[label="0.988889;89pkt 89fpkt"];
1925--2078[label="0.323308;43pkt 43fpkt"];
1925--2321[label="0.870968;108pkt 108fpkt"];
1925--2380[label="0.95283;101pkt 101fpkt"];
1925--3478[label="0.183036;123pkt 123fpkt"];
1925--3485[label="0.260417;175pkt 175fpkt"];
1925--3578[label="0.824427;108pkt 108fpkt"];
1925--6082[label="0.818182;108pkt 108fpkt"];
1925--7610[label="0.818182;108pkt 108fpkt"];
1928--2151[label="1;66pkt 66fpkt"];
1928--2152[label="0.222222;2pkt 2fpkt"];
1928--3478[label="0.201754;23pkt 23fpkt"];
1928--3485[label="0.00877193;1pkt 1fpkt"];
1928--5438[label="1;113pkt 113fpkt"];
1928--7219[label="1;114pkt 114fpkt"];
2065--2329[label="0.0714286;1pkt 1fpkt"];
2065--2699[label="0.0862069;10pkt 10fpkt"];
2065--3138[label="0.3;36pkt 36fpkt"];
2065--3325[label="0.108333;13pkt 13fpkt"];
2065--3357[label="0.0714286;1pkt 1fpkt"];
2065--3478[label="0.0666667;8pkt 8fpkt"];
2065--3485[label="0.0583333;7pkt 7fpkt"];
2065--4283[label="0.0714286;1pkt 1fpkt"];
2151--3478[label="0.242424;16pkt 16fpkt"];
2151--5438[label="1;66pkt 66fpkt"];
2151--7219[label="1;66pkt 66fpkt"];
2152--3042[label="0.111111;1pkt 1fpkt"];
2152--3124[label="0.444444;4pkt 4fpkt"];
2152--3478[label="0.222222;2pkt 2fpkt"];
2152--3485[label="0.222222;2pkt 2fpkt"];
2152--4238[label="0.111111;1pkt 1fpkt"];
2152--4508[label="0.444444;4pkt 4fpkt"];
2152--5438[label="0.222222;2pkt 2fpkt"];
2152--6035[label="0.222222;2pkt 2fpkt"];
2152--7219[label="0.222222;2pkt 2fpkt"];
2152--7592[label="0.222222;2pkt 2fpkt"];
2152--8368[label="0.222222;2pkt 2fpkt"];
2264--2329[label="0.285714;4pkt 4fpkt"];
2264--2669[label="0.00699301;1pkt 1fpkt"];
2264--2699[label="0.00862069;1pkt 1fpkt"];
2264--2706[label="0.00699301;1pkt 1fpkt"];
2264--2709[label="0.00699301;1pkt 1fpkt"];
2264--2918[label="0.013986;2pkt 2fpkt"];
2264--2979[label="0.013986;2pkt 2fpkt"];
2264--3063[label="0.904762;57pkt 57fpkt"];
2264--3286[label="0.025;1pkt 1fpkt"];
2264--3325[label="0.0559441;8pkt 8fpkt"];
2264--3357[label="0.285714;4pkt 4fpkt"];
2264--3458[label="0.00699301;1pkt 1fpkt"];
2264--3478[label="0.048951;7pkt 7fpkt"];
2264--3485[label="0.020979;3pkt 3fpkt"];
2264--3652[label="0.882979;83pkt 83fpkt"];
2264--3693[label="0.0625;1pkt 1fpkt"];
2264--3850[label="0.0114943;1pkt 1fpkt"];
2264--3982[label="0.333333;2pkt 2fpkt"];
2264--4138[label="0.142857;1pkt 1fpkt"];
2264--4217[label="0.00699301;1pkt 1fpkt"];
2264--4283[label="0.285714;4pkt 4fpkt"];
2264--4541[label="0.0909091;1pkt 1fpkt"];
2264--4861[label="0.0357143;1pkt 1fpkt"];
2264--4924[label="0.0143885;2pkt 2fpkt"];
2264--5151[label="0.00699301;1pkt 1fpkt"];
2264--5416[label="0.0909091;1pkt 1fpkt"];
2264--5592[label="0.027972;4pkt 4fpkt"];
2264--5626[label="0.027972;4pkt 4fpkt"];
2264--6157[label="0.0666667;1pkt 1fpkt"];
2264--6240[label="0.0114943;1pkt 1fpkt"];
2264--6433[label="0.142857;1pkt 1fpkt"];
2264--6484[label="0.00699301;1pkt 1fpkt"];
2264--6872[label="0.037037;1pkt 1fpkt"];
2264--6909[label="0.0143885;2pkt 2fpkt"];
2264--7042[label="0.00699301;1pkt 1fpkt"];
2264--7328[label="0.027972;4pkt 4fpkt"];
2264--7643[label="0.0666667;1pkt 1fpkt"];
2264--7689[label="0.0117647;1pkt 1fpkt"];
2264--7818[label="0.00699301;1pkt 1fpkt"];
2264--8011[label="0.0357143;1pkt 1fpkt"];
2279--3124[label="0.471264;41pkt 41fpkt"];
2279--3325[label="0.505747;44pkt 44fpkt"];
2279--3478[label="0.091954;8pkt 8fpkt"];
2279--3485[label="0.0804598;7pkt 7fpkt"];
2279--4508[label="0.471264;41pkt 41fpkt"];
2284--2825[label="0.493671;39pkt 39fpkt"];
2284--3124[label="0.0759494;6pkt 6fpkt"];
2284--3138[label="0.291139;23pkt 23fpkt"];
2284--3478[label="0.0632911;5pkt 5fpkt"];
2284--3485[label="0.0886076;7pkt 7fpkt"];
2284--4508[label="0.0759494;6pkt 6fpkt"];
2321--3578[label="0.991935;123pkt 123fpkt"];
2321--6082[label="1;124pkt 124fpkt"];
2321--7610[label="1;124pkt 124fpkt"];
2330--3138[label="0.493827;40pkt 40fpkt"];
2330--3325[label="0.148148;12pkt 12fpkt"];
2330--3357[label="0.0714286;1pkt 1fpkt"];
2330--3478[label="0.0740741;6pkt 6fpkt"];
2330--3485[label="0.0987654;8pkt 8fpkt"];
2330--4283[label="0.0714286;1pkt 1fpkt"];
2380--3485[label="0.00943396;1pkt 1fpkt"];
2699--3202[label="0.0172414;2pkt 2fpkt"];
2825--3202[label="0.0247934;3pkt 3fpkt"];
2825--3478[label="0.165289;20pkt 20fpkt"];
2825--3485[label="0.0330579;4pkt 4fpkt"];
2914--3478[label="0.174603;22pkt 22fpkt"];
2914--5840[label="1;126pkt 126fpkt"];
3063--3478[label="0.0952381;6pkt 6fpkt"];
3063--3485[label="0.047619;3pkt 3fpkt"];
3063--3652[label="0.984127;62pkt 62fpkt"];
3124--3202[label="0.00348432;1pkt 1fpkt"];
3124--3250[label="0.00348432;1pkt 1fpkt"];
3124--3478[label="0.0627178;18pkt 18fpkt"];
3124--3485[label="0.184669;53pkt 53fpkt"];
3124--4508[label="1;287pkt 287fpkt"];
3138--3202[label="0.00359712;1pkt 1fpkt"];
3138--3478[label="0.0791367;22pkt 22fpkt"];
3138--3485[label="0.0827338;23pkt 23fpkt"];
3325--3478[label="0.0574163;12pkt 12fpkt"];
3325--3485[label="0.0334928;7pkt 7fpkt"];
3578--6082[label="1;131pkt 131fpkt"];
3578--7610[label="1;131pkt 131fpkt"];
5438--7219[label="1;113pkt 113fpkt"];
6035--7592[label="1;34pkt 34fpkt"];
6035--8368[label="1;34pkt 34fpkt"];
6082--7610[label="1;132pkt 132fpkt"];
7592--8368[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="176.196.154.242"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
264[label="175.199.64.205;d;41pkt 41fpkt", shape=diamond, color=yellow];
819[label="86.237.191.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
974[label="219.178.188.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1075[label="87.180.83.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
2104[label="222.121.72.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
2928[label="86.237.191.112;s;1pkt 1fpkt", shape=hexagon, color=black];
3191[label="219.178.188.232;s;1pkt 1fpkt", shape=hexagon, color=black];
3265[label="222.121.72.54;s;1pkt 1fpkt", shape=hexagon, color=black];
5897[label="219.178.188.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7500[label="219.178.188.232;1pkt 1fpkt", shape=invtriangle, color=brown];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 175.199.64.205:80}[58.5366%]&lt;BR/&gt;{*:10000, 175.199.64.205:*}[26.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29%)&lt;BR/&gt; 10000: (20%)&lt;BR/&gt; 1246: (5%)&lt;BR/&gt; 1775: (3%)&lt;BR/&gt; 1697: (3%)&gt;];
}
264--819[label="1;1pkt 1fpkt"];
264--974[label="1;1pkt 1fpkt"];
264--1075[label="1;1pkt 1fpkt"];
264--2104[label="1;1pkt 1fpkt"];
264--2928[label="1;1pkt 1fpkt"];
264--3191[label="1;1pkt 1fpkt"];
264--3265[label="1;1pkt 1fpkt"];
264--3477[label="0.0243902;1pkt 1fpkt"];
264--3485[label="0.0487805;2pkt 2fpkt"];
264--3495[label="0.0243902;1pkt 1fpkt"];
264--5897[label="1;1pkt 1fpkt"];
264--7500[label="1;1pkt 1fpkt"];
819--2928[label="1;1pkt 1fpkt"];
974--3191[label="1;1pkt 1fpkt"];
974--5897[label="1;1pkt 1fpkt"];
974--7500[label="1;1pkt 1fpkt"];
2104--3265[label="1;1pkt 1fpkt"];
3191--5897[label="1;1pkt 1fpkt"];
3191--7500[label="1;1pkt 1fpkt"];
5897--7500[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.64.205" src_port="10000"/>
      <filter dst_ip="175.199.64.205" dst_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1043[label="176.196.30.101;s;139pkt 139fpkt", shape=diamond, color=yellow];
3219[label="176.196.30.101;s;139pkt 139fpkt", shape=hexagon, color=black];
4578[label="176.196.30.101;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6706[label="176.196.30.101;145pkt 145fpkt", shape=invtriangle, color=brown];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.30.101:25, *:*}[91.0345%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2958%)&lt;BR/&gt; 3177: (0.704225%)&lt;BR/&gt; 113: (0.704225%)&lt;BR/&gt; 65312: (0.352113%)&lt;BR/&gt; 63451: (0.352113%)&gt;];
}
1043--3219[label="1;139pkt 139fpkt"];
1043--4578[label="1;139pkt 139fpkt"];
1043--6706[label="1;139pkt 139fpkt"];
3219--4578[label="1;139pkt 139fpkt"];
3219--6706[label="1;139pkt 139fpkt"];
4578--6706[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.30.101" src_port="25"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1543[label="197.210.79.137;s;49pkt 49fpkt", shape=diamond, color=yellow];
3222[label="197.210.79.137;s;43pkt 43fpkt", shape=hexagon, color=black];
4937[label="197.210.79.137;50pkt 50fpkt", shape=pentagon, color=darkviolet];
6916[label="197.210.79.137;50pkt 50fpkt", shape=invtriangle, color=brown];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.210.79.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1543--3222[label="1;43pkt 43fpkt"];
1543--4937[label="0.979592;48pkt 48fpkt"];
1543--6916[label="0.979592;48pkt 48fpkt"];
3222--4937[label="0.976744;42pkt 42fpkt"];
3222--6916[label="0.976744;42pkt 42fpkt"];
4937--6916[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="197.210.79.137"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
339[label="54.86.148.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
457[label="39.72.124.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
644[label="183.82.183.87;s;7pkt 7fpkt", shape=diamond, color=yellow];
1981[label="32.177.232.110;d;2pkt 2fpkt", shape=diamond, color=yellow];
2434[label="54.82.90.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
3223[label="39.72.124.3;d;1pkt 1fpkt", shape=hexagon, color=black];
4447[label="183.82.183.87;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.183.87:1024, 32.177.232.110:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 4977: (10.5263%)&lt;BR/&gt; 1518: (7.89474%)&lt;BR/&gt; 1463: (7.89474%)&lt;BR/&gt; 1025: (7.89474%)&gt;];
}
339--644[label="1;1pkt 1fpkt"];
339--4447[label="1;1pkt 1fpkt"];
457--644[label="1;1pkt 1fpkt"];
457--3223[label="1;1pkt 1fpkt"];
457--4447[label="1;1pkt 1fpkt"];
644--1981[label="1;2pkt 2fpkt"];
644--2434[label="1;1pkt 1fpkt"];
644--3223[label="1;1pkt 1fpkt"];
644--4447[label="1;6pkt 6fpkt"];
1981--4447[label="1;2pkt 2fpkt"];
3223--4447[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.177.232.110" src_ip="183.82.183.87" src_port="1024"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1306[label="128.2.47.3;s;386pkt 386fpkt", shape=diamond, color=yellow];
3225[label="128.2.47.3;s;386pkt 386fpkt", shape=hexagon, color=black];
3540[label="128.2.47.3;428pkt 428fpkt", shape=pentagon, color=darkviolet];
6062[label="128.2.47.3;428pkt 428fpkt", shape=invtriangle, color=brown];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.47.3:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1306--1335[label="0.00259067;1pkt 1fpkt"];
1306--1513[label="0.0027027;1pkt 1fpkt"];
1306--1525[label="0.00263852;1pkt 1fpkt"];
1306--1555[label="0.00308642;1pkt 1fpkt"];
1306--1746[label="0.00328947;1pkt 1fpkt"];
1306--1755[label="0.00584795;1pkt 1fpkt"];
1306--2227[label="0.00483092;1pkt 1fpkt"];
1306--2251[label="0.00440529;1pkt 1fpkt"];
1306--2450[label="0.00497512;1pkt 1fpkt"];
1306--2456[label="0.00529101;1pkt 1fpkt"];
1306--2795[label="0.00719424;1pkt 1fpkt"];
1306--3225[label="1;386pkt 386fpkt"];
1306--3540[label="0.997409;385pkt 385fpkt"];
1306--6062[label="0.997409;385pkt 385fpkt"];
3225--3540[label="0.997409;385pkt 385fpkt"];
3225--6062[label="0.997409;385pkt 385fpkt"];
3540--6062[label="1;428pkt 428fpkt"];
</description>
    <slice>
      <filter src_ip="128.2.47.3"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1066[label="197.137.49.176;s;1151pkt 1151fpkt", shape=diamond, color=yellow];
1417[label="208.240.11.122;s;629pkt 629fpkt", shape=diamond, color=yellow];
1818[label="128.2.0.98;d;387pkt 387fpkt", shape=diamond, color=yellow];
1835[label="183.144.202.33;d;484pkt 484fpkt", shape=diamond, color=yellow];
1845[label="183.199.138.74;d;548pkt 548fpkt", shape=diamond, color=yellow];
2050[label="183.199.201.226;d;515pkt 515fpkt", shape=diamond, color=yellow];
3144[label="183.144.202.33;d;373pkt 373fpkt", shape=hexagon, color=black];
3228[label="197.137.49.176;s;1151pkt 1151fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.137.49.176:80, *:*}[57.6942%]&lt;BR/&gt;{208.240.11.122:9092, *:*}[42.1554%]&lt;BR/&gt;{*:*, 183.199.138.74:*}[27.5188%]&lt;BR/&gt;{*:*, 183.199.201.226:*}[25.8145%]&lt;BR/&gt;{*:*, 183.144.202.33:*}[24.2607%]&lt;BR/&gt;{*:*, 128.2.0.98:*}[22.406%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.5552%)&lt;BR/&gt; 9092: (15.4735%)&lt;BR/&gt; 46638: (0.076365%)&lt;BR/&gt; 38673: (0.076365%)&lt;BR/&gt; 6763: (0.076365%)&gt;];
}
1066--1818[label="0.55814;216pkt 216fpkt"];
1066--1835[label="0.547521;265pkt 265fpkt"];
1066--1845[label="0.607664;333pkt 333fpkt"];
1066--2050[label="0.535922;276pkt 276fpkt"];
1066--3144[label="0.595174;222pkt 222fpkt"];
1066--3228[label="1;1151pkt 1151fpkt"];
1066--3477[label="0.0755864;87pkt 87fpkt"];
1066--3495[label="0.0755864;87pkt 87fpkt"];
1417--1818[label="0.439276;170pkt 170fpkt"];
1417--1835[label="0.31405;152pkt 152fpkt"];
1417--1845[label="0.273723;150pkt 150fpkt"];
1417--2050[label="0.304854;157pkt 157fpkt"];
1417--3144[label="0.404826;151pkt 151fpkt"];
1417--3478[label="0.00158983;1pkt 1fpkt"];
1818--2869[label="0.00258398;1pkt 1fpkt"];
1818--3228[label="0.55814;216pkt 216fpkt"];
1818--3404[label="0.00258398;1pkt 1fpkt"];
1818--3471[label="0.00258398;1pkt 1fpkt"];
1818--3477[label="0.0413437;16pkt 16fpkt"];
1818--3495[label="0.0413437;16pkt 16fpkt"];
1818--5829[label="0.00258398;1pkt 1fpkt"];
1818--7456[label="0.00258398;1pkt 1fpkt"];
1818--8305[label="0.00258398;1pkt 1fpkt"];
1835--3144[label="1;373pkt 373fpkt"];
1835--3228[label="0.547521;265pkt 265fpkt"];
1835--3477[label="0.0413223;20pkt 20fpkt"];
1835--3495[label="0.0413223;20pkt 20fpkt"];
1845--3228[label="0.607664;333pkt 333fpkt"];
1845--3477[label="0.060219;33pkt 33fpkt"];
1845--3495[label="0.060219;33pkt 33fpkt"];
2050--3228[label="0.535922;276pkt 276fpkt"];
2050--3477[label="0.0349515;18pkt 18fpkt"];
2050--3478[label="0.00194175;1pkt 1fpkt"];
2050--3495[label="0.0349515;18pkt 18fpkt"];
3144--3228[label="0.595174;222pkt 222fpkt"];
3144--3477[label="0.0536193;20pkt 20fpkt"];
3144--3495[label="0.0536193;20pkt 20fpkt"];
3228--3477[label="0.0755864;87pkt 87fpkt"];
3228--3495[label="0.0755864;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="183.199.138.74"/>
      <filter dst_ip="183.199.201.226"/>
      <filter dst_ip="183.144.202.33"/>
      <filter dst_ip="128.2.0.98"/>
      <filter src_ip="197.137.49.176" src_port="80"/>
      <filter src_ip="208.240.11.122" src_port="9092"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
1323[label="133.167.84.168;s;559pkt 559fpkt", shape=diamond, color=yellow];
3234[label="133.167.84.168;s;516pkt 516fpkt", shape=hexagon, color=black];
5272[label="133.167.84.168;603pkt 603fpkt", shape=pentagon, color=darkviolet];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.84.168:3531, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3531: (50%)&lt;BR/&gt; 2096: (0.178784%)&lt;BR/&gt; 2081: (0.178784%)&lt;BR/&gt; 1525: (0.178784%)&lt;BR/&gt; 1524: (0.178784%)&gt;];
}
1323--3234[label="1;516pkt 516fpkt"];
1323--5272[label="0.998211;558pkt 558fpkt"];
3234--5272[label="0.998062;515pkt 515fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.84.168" src_port="3531"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
1334[label="183.82.173.131;s;33pkt 33fpkt", shape=diamond, color=yellow];
3244[label="183.82.173.131;s;33pkt 33fpkt", shape=hexagon, color=black];
4869[label="183.82.173.131;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.173.131:47089, *:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47089: (35.1485%)&lt;BR/&gt; 80: (5.94059%)&lt;BR/&gt; 443: (4.45545%)&lt;BR/&gt; 15208: (2.9703%)&lt;BR/&gt; 8600: (2.9703%)&gt;];
}
1334--3244[label="1;33pkt 33fpkt"];
1334--3478[label="0.0606061;2pkt 2fpkt"];
1334--4869[label="1;33pkt 33fpkt"];
3244--3478[label="0.0606061;2pkt 2fpkt"];
3244--4869[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.173.131" src_port="47089"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
282[label="176.197.67.32;s;269pkt 269fpkt", shape=diamond, color=yellow];
760[label="201.151.168.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
761[label="32.159.131.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
1021[label="198.138.216.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
1627[label="85.13.248.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
1761[label="187.225.222.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
1832[label="36.144.185.148;d;2pkt 2fpkt", shape=diamond, color=yellow];
1841[label="39.72.73.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
2089[label="37.95.153.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
2116[label="51.101.22.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
2176[label="192.9.155.95;d;29pkt 29fpkt", shape=diamond, color=yellow];
2281[label="34.196.203.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
2371[label="37.212.64.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
3053[label="187.225.222.242;d;1pkt 1fpkt", shape=hexagon, color=black];
3886[label="176.197.67.32;287pkt 287fpkt", shape=pentagon, color=darkviolet];
6261[label="176.197.67.32;288pkt 288fpkt", shape=invtriangle, color=brown];
7697[label="176.197.67.32;288pkt 288fpkt", shape=invhouse, color=bisque];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.67.32:*, *:80}[24.5955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.7564%)&lt;BR/&gt; 6000: (2.68313%)&lt;BR/&gt; 16881: (2.34242%)&lt;BR/&gt; 49152: (1.32027%)&lt;BR/&gt; 443: (0.72402%)&gt;];
}
282--706[label="0.00371747;1pkt 1fpkt"];
282--760[label="1;1pkt 1fpkt"];
282--761[label="1;1pkt 1fpkt"];
282--999[label="0.00873362;2pkt 2fpkt"];
282--1021[label="1;1pkt 1fpkt"];
282--1548[label="0.00743494;2pkt 2fpkt"];
282--1562[label="0.00502513;1pkt 1fpkt"];
282--1627[label="1;1pkt 1fpkt"];
282--1761[label="1;1pkt 1fpkt"];
282--1832[label="1;2pkt 2fpkt"];
282--1841[label="1;1pkt 1fpkt"];
282--2089[label="1;1pkt 1fpkt"];
282--2108[label="0.00909091;1pkt 1fpkt"];
282--2116[label="1;1pkt 1fpkt"];
282--2176[label="0.275862;8pkt 8fpkt"];
282--2281[label="1;1pkt 1fpkt"];
282--2315[label="0.0176991;2pkt 2fpkt"];
282--2371[label="1;1pkt 1fpkt"];
282--2480[label="0.0194175;2pkt 2fpkt"];
282--3053[label="1;1pkt 1fpkt"];
282--3485[label="0.0148699;4pkt 4fpkt"];
282--3886[label="0.996283;268pkt 268fpkt"];
282--6261[label="1;269pkt 269fpkt"];
282--7697[label="1;269pkt 269fpkt"];
760--3886[label="1;1pkt 1fpkt"];
760--6261[label="1;1pkt 1fpkt"];
760--7697[label="1;1pkt 1fpkt"];
761--3886[label="1;1pkt 1fpkt"];
761--6261[label="1;1pkt 1fpkt"];
761--7697[label="1;1pkt 1fpkt"];
1021--3886[label="1;1pkt 1fpkt"];
1021--6261[label="1;1pkt 1fpkt"];
1021--7697[label="1;1pkt 1fpkt"];
1627--3886[label="1;1pkt 1fpkt"];
1627--6261[label="1;1pkt 1fpkt"];
1627--7697[label="1;1pkt 1fpkt"];
1761--3053[label="1;1pkt 1fpkt"];
1761--3886[label="1;1pkt 1fpkt"];
1761--6261[label="1;1pkt 1fpkt"];
1761--7697[label="1;1pkt 1fpkt"];
1832--3886[label="1;2pkt 2fpkt"];
1832--6261[label="1;2pkt 2fpkt"];
1832--7697[label="1;2pkt 2fpkt"];
1841--3886[label="1;1pkt 1fpkt"];
1841--6261[label="1;1pkt 1fpkt"];
1841--7697[label="1;1pkt 1fpkt"];
2089--3886[label="1;1pkt 1fpkt"];
2089--6261[label="1;1pkt 1fpkt"];
2089--7697[label="1;1pkt 1fpkt"];
2116--3886[label="1;1pkt 1fpkt"];
2116--6261[label="1;1pkt 1fpkt"];
2116--7697[label="1;1pkt 1fpkt"];
2176--2674[label="0.0689655;2pkt 2fpkt"];
2176--2971[label="0.0344828;1pkt 1fpkt"];
2176--3485[label="0.275862;8pkt 8fpkt"];
2176--3743[label="0.125;1pkt 1fpkt"];
2176--3886[label="0.275862;8pkt 8fpkt"];
2176--4151[label="0.0344828;1pkt 1fpkt"];
2176--5291[label="0.0909091;1pkt 1fpkt"];
2176--5355[label="0.103448;3pkt 3fpkt"];
2176--5377[label="0.0689655;2pkt 2fpkt"];
2176--6188[label="0.142857;1pkt 1fpkt"];
2176--6261[label="0.275862;8pkt 8fpkt"];
2176--7136[label="0.1;1pkt 1fpkt"];
2176--7173[label="0.103448;3pkt 3fpkt"];
2176--7186[label="0.0689655;2pkt 2fpkt"];
2176--7662[label="0.125;1pkt 1fpkt"];
2176--7697[label="0.275862;8pkt 8fpkt"];
2281--3886[label="1;1pkt 1fpkt"];
2281--6261[label="1;1pkt 1fpkt"];
2281--7697[label="1;1pkt 1fpkt"];
2371--3886[label="1;1pkt 1fpkt"];
2371--6261[label="1;1pkt 1fpkt"];
2371--7697[label="1;1pkt 1fpkt"];
3053--3886[label="1;1pkt 1fpkt"];
3053--6261[label="1;1pkt 1fpkt"];
3053--7697[label="1;1pkt 1fpkt"];
3886--6261[label="1;287pkt 287fpkt"];
3886--7697[label="1;287pkt 287fpkt"];
6261--7697[label="1;288pkt 288fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="176.197.67.32"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1603[label="196.8.31.215;s;336pkt 336fpkt", shape=diamond, color=yellow];
3257[label="196.8.31.215;s;303pkt 303fpkt", shape=hexagon, color=black];
5748[label="196.8.31.215;354pkt 354fpkt", shape=pentagon, color=darkviolet];
7403[label="196.8.31.215;354pkt 354fpkt", shape=invtriangle, color=brown];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.31.215:62722, *:53}[93.2394%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62722: (46.6221%)&lt;BR/&gt; 53: (46.6221%)&lt;BR/&gt; 0: (6.23608%)&lt;BR/&gt; 135: (0.259837%)&lt;BR/&gt; 3666: (0.148478%)&gt;];
}
1603--1754[label="0.00917431;1pkt 1fpkt"];
1603--2029[label="0.00934579;1pkt 1fpkt"];
1603--2233[label="0.00990099;1pkt 1fpkt"];
1603--2288[label="0.0103093;1pkt 1fpkt"];
1603--2454[label="0.0104167;1pkt 1fpkt"];
1603--2474[label="0.0102041;1pkt 1fpkt"];
1603--3257[label="1;303pkt 303fpkt"];
1603--5748[label="0.997024;335pkt 335fpkt"];
1603--7403[label="0.997024;335pkt 335fpkt"];
3257--5748[label="0.9967;302pkt 302fpkt"];
3257--7403[label="0.9967;302pkt 302fpkt"];
5748--7403[label="1;354pkt 354fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="196.8.31.215" src_port="62722"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1850[label="196.8.31.110;s;50pkt 50fpkt", shape=diamond, color=yellow];
3262[label="196.8.31.110;s;50pkt 50fpkt", shape=hexagon, color=black];
4659[label="196.8.31.110;49pkt 49fpkt", shape=pentagon, color=darkviolet];
6755[label="196.8.31.110;50pkt 50fpkt", shape=invtriangle, color=brown];
7949[label="196.8.31.110;50pkt 50fpkt", shape=invhouse, color=bisque];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.31.110:44074, *:*}[56%]&lt;BR/&gt;{196.8.31.110:*, *:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44074: (27.9116%)&lt;BR/&gt; 80: (20.0803%)&lt;BR/&gt; 62204: (1.00402%)&lt;BR/&gt; 60907: (1.00402%)&lt;BR/&gt; 58884: (1.00402%)&gt;];
}
1850--3262[label="1;50pkt 50fpkt"];
1850--3485[label="0.16;8pkt 8fpkt"];
1850--4659[label="1;49pkt 49fpkt"];
1850--6755[label="1;50pkt 50fpkt"];
1850--7949[label="1;50pkt 50fpkt"];
3262--3485[label="0.16;8pkt 8fpkt"];
3262--4659[label="1;49pkt 49fpkt"];
3262--6755[label="1;50pkt 50fpkt"];
3262--7949[label="1;50pkt 50fpkt"];
4659--6755[label="1;49pkt 49fpkt"];
4659--7949[label="1;49pkt 49fpkt"];
6755--7949[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.31.110" src_port="44074"/>
      <filter dst_port="80" src_ip="196.8.31.110"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
5027[label="196.166.5.146;71pkt 71fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.166.5.146:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2578: (1.40845%)&lt;BR/&gt; 4992: (0.704225%)&lt;BR/&gt; 4701: (0.704225%)&lt;BR/&gt; 4690: (0.704225%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="196.166.5.146"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10837,2.19046,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
2146[label="176.196.170.195;s;25pkt 25fpkt", shape=diamond, color=yellow];
2564[label="216.131.194.187;d;15pkt 15fpkt", shape=diamond, color=yellow];
3288[label="176.196.170.195;s;23pkt 23fpkt", shape=hexagon, color=black];
7287[label="176.196.170.195;29pkt 29fpkt", shape=invtriangle, color=brown];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.170.195:*, 216.131.194.187:80}[57.5758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1357: (2.17391%)&lt;BR/&gt; 1356: (2.17391%)&lt;BR/&gt; 1355: (2.17391%)&lt;BR/&gt; 1354: (2.17391%)&gt;];
}
2146--2564[label="0.733333;11pkt 11fpkt"];
2146--3288[label="1;23pkt 23fpkt"];
2146--3478[label="0.16;4pkt 4fpkt"];
2146--3485[label="0.12;3pkt 3fpkt"];
2146--7287[label="1;25pkt 25fpkt"];
2564--3288[label="0.6;9pkt 9fpkt"];
2564--3485[label="0.2;3pkt 3fpkt"];
2564--7287[label="0.733333;11pkt 11fpkt"];
3288--3478[label="0.173913;4pkt 4fpkt"];
3288--3485[label="0.130435;3pkt 3fpkt"];
3288--7287[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="216.131.194.187" dst_port="80" src_ip="176.196.170.195"/>
    </slice>
    <from sec="1118034292" usec="0"/>
    <to sec="1118034881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
848[label="183.82.33.41;s;169pkt 169fpkt", shape=diamond, color=yellow];
2206[label="211.73.224.167;d;90pkt 90fpkt", shape=diamond, color=yellow];
2207[label="176.196.170.148;s;77pkt 77fpkt", shape=diamond, color=yellow];
3075[label="183.82.33.41;s;61pkt 61fpkt", shape=hexagon, color=black];
3305[label="176.196.170.148;s;78pkt 78fpkt", shape=hexagon, color=black];
3971[label="183.82.33.41;205pkt 205fpkt", shape=pentagon, color=darkviolet];
5054[label="176.196.170.148;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6317[label="183.82.33.41;205pkt 205fpkt", shape=invtriangle, color=brown];
6985[label="176.196.170.148;81pkt 81fpkt", shape=invtriangle, color=brown];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.33.41:*, *:80}[54.5139%]&lt;BR/&gt;{*:*, 211.73.224.167:*}[31.25%]&lt;BR/&gt;{*:*, *:443}[20.8333%]&lt;BR/&gt;{176.196.170.148:*, *:80}[20.4861%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.533%)&lt;BR/&gt; 443: (11.3658%)&lt;BR/&gt; 1863: (1.19389%)&lt;BR/&gt; 7001: (0.859599%)&lt;BR/&gt; 1828: (0.382044%)&gt;];
}
848--1270[label="0.00892857;1pkt 1fpkt"];
848--1503[label="0.0177515;3pkt 3fpkt"];
848--1548[label="0.0295858;5pkt 5fpkt"];
848--1591[label="0.0212766;1pkt 1fpkt"];
848--2076[label="0.0118343;2pkt 2fpkt"];
848--2206[label="0.433333;39pkt 39fpkt"];
848--2280[label="0.028169;2pkt 2fpkt"];
848--2315[label="0.0176991;2pkt 2fpkt"];
848--2551[label="0.0454545;1pkt 1fpkt"];
848--3075[label="1;61pkt 61fpkt"];
848--3478[label="0.0414201;7pkt 7fpkt"];
848--3485[label="0.213018;36pkt 36fpkt"];
848--3971[label="0.994083;168pkt 168fpkt"];
848--6317[label="0.994083;168pkt 168fpkt"];
2206--2207[label="0.662338;51pkt 51fpkt"];
2206--3305[label="0.653846;51pkt 51fpkt"];
2206--3485[label="0.6;54pkt 54fpkt"];
2206--3971[label="0.433333;39pkt 39fpkt"];
2206--5054[label="0.62963;51pkt 51fpkt"];
2206--6317[label="0.433333;39pkt 39fpkt"];
2206--6985[label="0.62963;51pkt 51fpkt"];
2207--3305[label="1;77pkt 77fpkt"];
2207--3485[label="0.571429;44pkt 44fpkt"];
2207--5054[label="1;77pkt 77fpkt"];
2207--6985[label="1;77pkt 77fpkt"];
3075--3478[label="0.114754;7pkt 7fpkt"];
3075--3485[label="0.0163934;1pkt 1fpkt"];
3075--3971[label="0.983607;60pkt 60fpkt"];
3075--6317[label="0.983607;60pkt 60fpkt"];
3305--3485[label="0.564103;44pkt 44fpkt"];
3305--5054[label="0.987179;77pkt 77fpkt"];
3305--6985[label="0.987179;77pkt 77fpkt"];
3971--6317[label="1;205pkt 205fpkt"];
5054--6985[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="211.73.224.167"/>
      <filter dst_port="443"/>
      <filter dst_port="80" src_ip="183.82.33.41"/>
      <filter dst_port="80" src_ip="176.196.170.148"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18747,2.20936,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
2332[label="175.199.1.76;d;4pkt 4fpkt", shape=diamond, color=yellow];
2441[label="208.84.72.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
2442[label="87.229.101.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
3314[label="87.229.101.239;s;1pkt 1fpkt", shape=hexagon, color=black];
8195[label="87.5.163.189;519pkt 519fpkt", shape=invhouse, color=bisque];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.5.163.189:1099, *:1434}[99.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (49.4297%)&lt;BR/&gt; 1099: (49.4297%)&lt;BR/&gt; 19101: (0.475285%)&lt;BR/&gt; 2432: (0.285171%)&lt;BR/&gt; 2427: (0.190114%)&gt;];
}
2332--2441[label="1;1pkt 1fpkt"];
2332--2442[label="1;1pkt 1fpkt"];
2332--3314[label="1;1pkt 1fpkt"];
2332--8195[label="0.25;1pkt 1fpkt"];
2442--3314[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="87.5.163.189" src_port="1099"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
655[label="219.176.192.18;s;2530pkt 2530fpkt", shape=diamond, color=yellow];
1737[label="175.199.2.176;d;21pkt 21fpkt", shape=diamond, color=yellow];
1738[label="208.59.88.78;s;20pkt 20fpkt", shape=diamond, color=yellow];
3321[label="219.176.192.18;s;2530pkt 2530fpkt", shape=hexagon, color=black];
4341[label="208.59.88.78;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6558[label="208.59.88.78;21pkt 21fpkt", shape=invtriangle, color=brown];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.176.192.18:4288, *:1434}[99.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4288: (49.2028%)&lt;BR/&gt; 1434: (49.2028%)&lt;BR/&gt; 21: (0.291659%)&lt;BR/&gt; 4226: (0.0388878%)&lt;BR/&gt; 4193: (0.0388878%)&gt;];
}
655--1737[label="0.047619;1pkt 1fpkt"];
655--3321[label="1;2530pkt 2530fpkt"];
1737--1738[label="1;20pkt 20fpkt"];
1737--3321[label="0.047619;1pkt 1fpkt"];
1737--4341[label="0.904762;19pkt 19fpkt"];
1737--6558[label="0.904762;19pkt 19fpkt"];
1738--4341[label="0.95;19pkt 19fpkt"];
1738--6558[label="0.95;19pkt 19fpkt"];
4341--6558[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.176.192.18" src_port="4288"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
2044[label="196.8.28.28;s;511pkt 511fpkt", shape=diamond, color=yellow];
3331[label="196.8.28.28;s;511pkt 511fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.28.28:0, *:0}[99.8043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8043%)&lt;BR/&gt; 3272: (0.0978474%)&lt;BR/&gt; 135: (0.0978474%)&gt;];
}
2044--2251[label="0.00440529;1pkt 1fpkt"];
2044--2450[label="0.00497512;1pkt 1fpkt"];
2044--2795[label="0.00719424;1pkt 1fpkt"];
2044--3331[label="1;511pkt 511fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.28.28"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
2473[label="197.66.106.20;s;166pkt 166fpkt", shape=diamond, color=yellow];
3342[label="197.66.106.20;s;166pkt 166fpkt", shape=hexagon, color=black];
3766[label="197.66.106.20;178pkt 178fpkt", shape=pentagon, color=darkviolet];
6199[label="197.66.106.20;178pkt 178fpkt", shape=invtriangle, color=brown];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.106.20:53, *:*}[43.8202%]&lt;BR/&gt;{197.66.106.20:32768, *:53}[30.8989%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.3895%)&lt;BR/&gt; 32768: (16.2791%)&lt;BR/&gt; 25: (7.26744%)&lt;BR/&gt; 113: (4.79651%)&lt;BR/&gt; 9253: (0.581395%)&gt;];
}
2473--3342[label="1;166pkt 166fpkt"];
2473--3476[label="0.0361446;6pkt 6fpkt"];
2473--3766[label="1;166pkt 166fpkt"];
2473--6199[label="1;166pkt 166fpkt"];
3342--3476[label="0.0361446;6pkt 6fpkt"];
3342--3766[label="1;166pkt 166fpkt"];
3342--6199[label="1;166pkt 166fpkt"];
3766--6199[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter src_ip="197.66.106.20" src_port="53"/>
      <filter dst_port="53" src_ip="197.66.106.20" src_port="32768"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
2647[label="176.196.129.68;s;122pkt 122fpkt", shape=diamond, color=yellow];
3385[label="176.196.129.68;s;122pkt 122fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.68:*, 208.168.155.45:80}[45.9016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2587: (0.409836%)&lt;BR/&gt; 2586: (0.409836%)&lt;BR/&gt; 2585: (0.409836%)&lt;BR/&gt; 2584: (0.409836%)&gt;];
}
2647--3385[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="208.168.155.45" dst_port="80" src_ip="176.196.129.68"/>
    </slice>
    <from sec="1118034802" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.54.0"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
2469[label="222.28.90.0;s;556pkt 556fpkt", shape=diamond, color=yellow];
3505[label="222.28.90.0;606pkt 606fpkt", shape=pentagon, color=darkviolet];
6044[label="222.28.90.0;606pkt 606fpkt", shape=invtriangle, color=brown];
7594[label="222.28.90.0;607pkt 607fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.28.90.0:1293, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1293: (50%)&gt;];
}
2469--3505[label="0.998201;555pkt 555fpkt"];
2469--6044[label="0.998201;555pkt 555fpkt"];
2469--7594[label="1;556pkt 556fpkt"];
3505--6044[label="1;606pkt 606fpkt"];
3505--7594[label="1;606pkt 606fpkt"];
6044--7594[label="1;606pkt 606fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="222.28.90.0" src_port="1293"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.216.83.1"/>
    </slice>
    <from sec="1118034076" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.28.90.1"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
3526[label="128.65.52.2;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.52.2:*, 53.148.25.57:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2344: (0.862069%)&lt;BR/&gt; 2343: (0.862069%)&lt;BR/&gt; 2342: (0.862069%)&lt;BR/&gt; 2341: (0.862069%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="53.148.25.57" dst_port="80" src_ip="128.65.52.2"/>
    </slice>
    <from sec="1118034275" usec="0"/>
    <to sec="1118034347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.196.125.2"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.74.147.2"/>
    </slice>
    <from sec="1118034737" usec="0"/>
    <to sec="1118034753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.36.3"/>
    </slice>
    <from sec="1118034013" usec="0"/>
    <to sec="1118034714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.241.139.4"/>
    </slice>
    <from sec="1118034751" usec="0"/>
    <to sec="1118034810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
518[label="176.196.172.4;s;47pkt 47fpkt", shape=diamond, color=yellow];
550[label="87.1.16.112;d;14pkt 14fpkt", shape=diamond, color=yellow];
2705[label="176.196.172.4;s;30pkt 30fpkt", shape=hexagon, color=black];
3558[label="176.196.172.4;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.172.4:*, 87.1.16.5:80}[30.303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1695: (0.789474%)&lt;BR/&gt; 1694: (0.789474%)&lt;BR/&gt; 1693: (0.789474%)&lt;BR/&gt; 1692: (0.789474%)&gt;];
}
518--3478[label="0.0851064;4pkt 4fpkt"];
518--3485[label="0.191489;9pkt 9fpkt"];
518--3558[label="1;47pkt 47fpkt"];
550--2705[label="0.857143;12pkt 12fpkt"];
550--3558[label="1;14pkt 14fpkt"];
2705--3558[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="87.1.16.5" dst_port="80" src_ip="176.196.172.4"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.214.5"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.128.18.6"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.81.150.6"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.53.3.7"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.203.216.7"/>
    </slice>
    <from sec="1118034774" usec="0"/>
    <to sec="1118034840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.233.99.8"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.65.172.8"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.78.163.9"/>
    </slice>
    <from sec="1118034036" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.56.94.10"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.18.162.10"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.141.178.10"/>
    </slice>
    <from sec="1118034032" usec="0"/>
    <to sec="1118034047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.193.10"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.117.11"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.24.135.11"/>
    </slice>
    <from sec="1118034421" usec="0"/>
    <to sec="1118034422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.240.192.11"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.138.66.12"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
577[label="197.66.102.12;s;300pkt 300fpkt", shape=diamond, color=yellow];
743[label="197.66.101.192;s;463pkt 463fpkt", shape=diamond, color=yellow];
1131[label="171.77.117.199;d;141pkt 141fpkt", shape=diamond, color=yellow];
1500[label="50.128.114.137;d;8pkt 8fpkt", shape=diamond, color=yellow];
2365[label="53.4.1.147;d;97pkt 97fpkt", shape=diamond, color=yellow];
2904[label="197.66.101.192;s;463pkt 463fpkt", shape=hexagon, color=black];
3666[label="197.66.102.12;340pkt 340fpkt", shape=pentagon, color=darkviolet];
5506[label="197.66.101.192;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6140[label="197.66.102.12;340pkt 340fpkt", shape=invtriangle, color=brown];
7263[label="197.66.101.192;4pkt 4fpkt", shape=invtriangle, color=brown];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.102.12:*, *:80}[40.4467%]&lt;BR/&gt;{197.66.101.192:*, *:80}[24.3176%]&lt;BR/&gt;{197.66.101.192:*, *:443}[20.3474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.2098%)&lt;BR/&gt; 443: (10.9541%)&lt;BR/&gt; 32768: (4.74757%)&lt;BR/&gt; 53: (4.74757%)&lt;BR/&gt; 59480: (0.648448%)&gt;];
}
577--1114[label="0.02;3pkt 3fpkt"];
577--1305[label="0.0174672;4pkt 4fpkt"];
577--1389[label="0.0294118;1pkt 1fpkt"];
577--1500[label="0.5;4pkt 4fpkt"];
577--1515[label="0.01;3pkt 3fpkt"];
577--1873[label="0.0416667;1pkt 1fpkt"];
577--1902[label="0.02;6pkt 6fpkt"];
577--2365[label="0.876289;85pkt 85fpkt"];
577--3478[label="0.08;24pkt 24fpkt"];
577--3485[label="0.116667;35pkt 35fpkt"];
577--3666[label="0.996667;299pkt 299fpkt"];
577--6140[label="0.996667;299pkt 299fpkt"];
743--787[label="0.0539957;25pkt 25fpkt"];
743--835[label="0.00215983;1pkt 1fpkt"];
743--985[label="0.0172786;8pkt 8fpkt"];
743--1131[label="1;141pkt 141fpkt"];
743--1133[label="0.00647948;3pkt 3fpkt"];
743--1305[label="0.0393013;9pkt 9fpkt"];
743--1500[label="0.5;4pkt 4fpkt"];
743--1503[label="0.0220264;5pkt 5fpkt"];
743--1533[label="0.00714286;1pkt 1fpkt"];
743--1754[label="0.00917431;1pkt 1fpkt"];
743--1873[label="0.625;15pkt 15fpkt"];
743--1902[label="0.0323974;15pkt 15fpkt"];
743--2029[label="0.00934579;1pkt 1fpkt"];
743--2064[label="0.039604;4pkt 4fpkt"];
743--2123[label="0.0454545;3pkt 3fpkt"];
743--2225[label="0.0253165;2pkt 2fpkt"];
743--2233[label="0.00990099;1pkt 1fpkt"];
743--2266[label="0.0833333;2pkt 2fpkt"];
743--2288[label="0.0103093;1pkt 1fpkt"];
743--2365[label="0.0103093;1pkt 1fpkt"];
743--2454[label="0.0104167;1pkt 1fpkt"];
743--2474[label="0.0102041;1pkt 1fpkt"];
743--2477[label="0.0204082;1pkt 1fpkt"];
743--2904[label="1;463pkt 463fpkt"];
743--3478[label="0.0388769;18pkt 18fpkt"];
743--3485[label="0.0410367;19pkt 19fpkt"];
743--5506[label="0.666667;2pkt 2fpkt"];
743--7263[label="0.5;2pkt 2fpkt"];
1131--2904[label="1;141pkt 141fpkt"];
1131--5506[label="0.666667;2pkt 2fpkt"];
1131--7263[label="0.5;2pkt 2fpkt"];
1500--2904[label="0.5;4pkt 4fpkt"];
1500--3485[label="0.75;6pkt 6fpkt"];
1500--3666[label="0.5;4pkt 4fpkt"];
1500--6140[label="0.5;4pkt 4fpkt"];
2365--2904[label="0.0103093;1pkt 1fpkt"];
2365--3478[label="0.0103093;1pkt 1fpkt"];
2365--3485[label="0.123711;12pkt 12fpkt"];
2365--3666[label="0.989691;96pkt 96fpkt"];
2365--6140[label="0.989691;96pkt 96fpkt"];
2904--3478[label="0.0388769;18pkt 18fpkt"];
2904--3485[label="0.0410367;19pkt 19fpkt"];
2904--5506[label="0.666667;2pkt 2fpkt"];
2904--7263[label="0.5;2pkt 2fpkt"];
3666--6140[label="1;340pkt 340fpkt"];
5506--7263[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="197.66.101.192"/>
      <filter dst_port="443" src_ip="197.66.101.192"/>
      <filter dst_port="80" src_ip="197.66.102.12"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.3.13"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.39.13"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
4053[label="128.65.32.49;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5765[label="176.196.221.216;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.32.49:*, 210.50.51.50:80}[55.5556%]&lt;BR/&gt;{176.196.221.216:*, *:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49969: (5.55556%)&lt;BR/&gt; 49918: (5.55556%)&lt;BR/&gt; 49917: (5.55556%)&lt;BR/&gt; 2416: (5.55556%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="176.196.221.216"/>
      <filter dst_ip="210.50.51.50" dst_port="80" src_ip="128.65.32.49"/>
    </slice>
    <from sec="1118034385" usec="0"/>
    <to sec="1118034539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.146.153.14"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.246.172.14"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.171.9.15"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.186.93.15"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
2214[label="176.196.172.15;s;86pkt 86fpkt", shape=diamond, color=yellow];
3700[label="176.196.172.15;85pkt 85fpkt", shape=pentagon, color=darkviolet];
6161[label="176.196.172.15;86pkt 86fpkt", shape=invtriangle, color=brown];
7646[label="176.196.172.15;85pkt 85fpkt", shape=invhouse, color=bisque];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.172.15:*, 55.126.28.241:80}[58.1395%]&lt;BR/&gt;{176.196.172.15:*, 55.126.14.65:80}[26.7442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4151: (0.584795%)&lt;BR/&gt; 4150: (0.584795%)&lt;BR/&gt; 4149: (0.584795%)&lt;BR/&gt; 4148: (0.584795%)&gt;];
}
2214--3485[label="0.662791;57pkt 57fpkt"];
2214--3700[label="1;85pkt 85fpkt"];
2214--6161[label="1;86pkt 86fpkt"];
2214--7646[label="1;85pkt 85fpkt"];
3700--6161[label="1;85pkt 85fpkt"];
3700--7646[label="1;85pkt 85fpkt"];
6161--7646[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="55.126.28.241" dst_port="80" src_ip="176.196.172.15"/>
      <filter dst_ip="55.126.14.65" dst_port="80" src_ip="176.196.172.15"/>
    </slice>
    <from sec="1118034559" usec="0"/>
    <to sec="1118034651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.38.16"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.114.114.16"/>
    </slice>
    <from sec="1118034292" usec="0"/>
    <to sec="1118034602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.174.131.16"/>
    </slice>
    <from sec="1118034047" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.129.132.16"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.42.146.16"/>
    </slice>
    <from sec="1118034062" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.38.1.17"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
866[label="128.65.39.17;s;42pkt 42fpkt", shape=diamond, color=yellow];
3722[label="128.65.39.17;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6173[label="128.65.39.17;41pkt 41fpkt", shape=invtriangle, color=brown];
7652[label="128.65.39.17;42pkt 42fpkt", shape=invhouse, color=bisque];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.39.17:*, *:80}[38.0952%]&lt;BR/&gt;{128.65.39.17:*, 208.75.27.141:9548}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9548: (29.5181%)&lt;BR/&gt; 80: (19.2771%)&lt;BR/&gt; 2510: (1.20482%)&lt;BR/&gt; 2509: (1.20482%)&lt;BR/&gt; 2508: (1.20482%)&gt;];
}
866--3478[label="0.047619;2pkt 2fpkt"];
866--3485[label="0.0238095;1pkt 1fpkt"];
866--3722[label="1;41pkt 41fpkt"];
866--6173[label="1;41pkt 41fpkt"];
866--7652[label="1;42pkt 42fpkt"];
3722--6173[label="1;41pkt 41fpkt"];
3722--7652[label="1;41pkt 41fpkt"];
6173--7652[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.65.39.17"/>
      <filter dst_ip="208.75.27.141" dst_port="9548" src_ip="128.65.39.17"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
2348[label="176.196.172.12;d;96pkt 96fpkt", shape=diamond, color=yellow];
3723[label="197.30.55.17;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3769[label="197.30.55.21;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.30.55.21:80, 176.196.172.12:*}[54.1284%]&lt;BR/&gt;{197.30.55.17:80, 176.196.172.12:*}[38.5321%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1407: (0.510204%)&lt;BR/&gt; 1405: (0.510204%)&lt;BR/&gt; 1404: (0.510204%)&lt;BR/&gt; 1403: (0.510204%)&gt;];
}
2348--3477[label="0.0104167;1pkt 1fpkt"];
2348--3495[label="0.0104167;1pkt 1fpkt"];
2348--3723[label="1;41pkt 41fpkt"];
2348--3769[label="0.779661;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.172.12" src_ip="197.30.55.21" src_port="80"/>
      <filter dst_ip="176.196.172.12" src_ip="197.30.55.17" src_port="80"/>
    </slice>
    <from sec="1118034105" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.104.205.17"/>
    </slice>
    <from sec="1118034038" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1504[label="183.82.37.19;s;59pkt 59fpkt", shape=diamond, color=yellow];
3742[label="183.82.37.19;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.37.19:*, 214.48.172.120:80}[42.3729%]&lt;BR/&gt;{183.82.37.19:*, 193.47.124.150:80}[28.8136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1752: (0.854701%)&lt;BR/&gt; 1750: (0.854701%)&lt;BR/&gt; 1748: (0.854701%)&lt;BR/&gt; 1744: (0.854701%)&gt;];
}
1504--3742[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="214.48.172.120" dst_port="80" src_ip="183.82.37.19"/>
      <filter dst_ip="193.47.124.150" dst_port="80" src_ip="183.82.37.19"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1047[label="133.167.60.19;s;135pkt 135fpkt", shape=diamond, color=yellow];
3748[label="133.167.60.19;155pkt 155fpkt", shape=pentagon, color=darkviolet];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.60.19:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3490: (0.689655%)&lt;BR/&gt; 1504: (0.517241%)&lt;BR/&gt; 63287: (0.344828%)&lt;BR/&gt; 61082: (0.344828%)&gt;];
}
1047--3748[label="0.992593;134pkt 134fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.60.19" src_port="25"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
3771[label="176.197.57.21;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.57.21:3921, *:*}[72.4138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3921: (36.2069%)&lt;BR/&gt; 443: (6.89655%)&lt;BR/&gt; 80: (6.89655%)&lt;BR/&gt; 58797: (0.862069%)&lt;BR/&gt; 44095: (0.862069%)&gt;];
}
</description>
    <slice>
      <filter src_ip="176.197.57.21" src_port="3921"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.71.69.21"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.168.178.22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.114.181.23"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.46.151.24"/>
    </slice>
    <from sec="1118034787" usec="0"/>
    <to sec="1118034811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.76.26"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.197.80.26"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.140.110.26"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.162.26"/>
    </slice>
    <from sec="1118034848" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.136.176.26"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
3841[label="183.82.89.27;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.89.27:*, 55.190.224.106:80}[43.75%]&lt;BR/&gt;{183.82.89.27:*, *:1863}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.875%)&lt;BR/&gt; 1863: (15.625%)&lt;BR/&gt; 1040: (9.375%)&lt;BR/&gt; 53: (9.375%)&lt;BR/&gt; 3227: (3.125%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1863" src_ip="183.82.89.27"/>
      <filter dst_ip="55.190.224.106" dst_port="80" src_ip="183.82.89.27"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.54.28"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.129.28"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.38.157.28"/>
    </slice>
    <from sec="1118034063" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.32.184.28"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
676[label="55.210.107.172;d;6pkt 6fpkt", shape=diamond, color=yellow];
1009[label="176.196.138.29;s;7pkt 7fpkt", shape=diamond, color=yellow];
3867[label="176.196.138.29;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6248[label="176.196.138.29;6pkt 6fpkt", shape=invtriangle, color=brown];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.138.29:*, 55.210.107.172:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 1432: (7.69231%)&lt;BR/&gt; 1320: (7.69231%)&lt;BR/&gt; 1232: (7.69231%)&lt;BR/&gt; 1203: (7.69231%)&gt;];
}
676--1009[label="1;6pkt 6fpkt"];
676--3867[label="1;6pkt 6fpkt"];
676--6248[label="1;6pkt 6fpkt"];
1009--3867[label="1;7pkt 7fpkt"];
1009--6248[label="1;6pkt 6fpkt"];
3867--6248[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="55.210.107.172" dst_port="80" src_ip="176.196.138.29"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.128.170.29"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
1491[label="201.158.149.124;d;30pkt 30fpkt", shape=diamond, color=yellow];
1492[label="176.196.138.30;s;209pkt 209fpkt", shape=diamond, color=yellow];
2628[label="36.36.2.166;d;10pkt 10fpkt", shape=diamond, color=yellow];
3873[label="176.196.138.30;208pkt 208fpkt", shape=pentagon, color=darkviolet];
6253[label="176.196.138.30;208pkt 208fpkt", shape=invtriangle, color=brown];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.138.30:*, 201.158.149.27:80}[27.2727%]&lt;BR/&gt;{176.196.138.30:*, 203.125.32.13:80}[20.0957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2382: (0.300752%)&lt;BR/&gt; 2381: (0.300752%)&lt;BR/&gt; 2371: (0.300752%)&lt;BR/&gt; 2370: (0.300752%)&gt;];
}
1491--1492[label="1;30pkt 30fpkt"];
1491--3478[label="0.266667;8pkt 8fpkt"];
1491--3485[label="0.266667;8pkt 8fpkt"];
1491--3873[label="0.966667;29pkt 29fpkt"];
1491--6253[label="0.966667;29pkt 29fpkt"];
1492--2628[label="1;10pkt 10fpkt"];
1492--3202[label="0.00956938;2pkt 2fpkt"];
1492--3478[label="0.119617;25pkt 25fpkt"];
1492--3485[label="0.110048;23pkt 23fpkt"];
1492--3873[label="1;208pkt 208fpkt"];
1492--6253[label="1;208pkt 208fpkt"];
2628--3873[label="1;10pkt 10fpkt"];
2628--6253[label="1;10pkt 10fpkt"];
3873--6253[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_ip="201.158.149.27" dst_port="80" src_ip="176.196.138.30"/>
      <filter dst_ip="203.125.32.13" dst_port="80" src_ip="176.196.138.30"/>
    </slice>
    <from sec="1118034314" usec="0"/>
    <to sec="1118034868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.103.31"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.181.21.32"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.133.46.32"/>
    </slice>
    <from sec="1118034057" usec="0"/>
    <to sec="1118034092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1868[label="176.196.151.32;s;57pkt 57fpkt", shape=diamond, color=yellow];
3890[label="176.196.151.32;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.151.32:25, *:*}[72.8814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.6522%)&lt;BR/&gt; 113: (4.34783%)&lt;BR/&gt; 63615: (0.869565%)&lt;BR/&gt; 63593: (0.869565%)&lt;BR/&gt; 61120: (0.869565%)&gt;];
}
1868--3890[label="0.982456;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.151.32" src_port="25"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.237.252.32"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
3895[label="133.167.70.33;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.70.33:*, 49.160.52.1:6663}[22.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6663: (47.5%)&lt;BR/&gt; 0: (5%)&lt;BR/&gt; 4943: (1.25%)&lt;BR/&gt; 4720: (1.25%)&lt;BR/&gt; 4594: (1.25%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="49.160.52.1" dst_port="6663" src_ip="133.167.70.33"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.191.183.34"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.31.35"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.199.14.36"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.2.109.36"/>
    </slice>
    <from sec="1118034201" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19217,2.15698,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
94[label="220.146.154.36s;181pkt 181fpkt", shape=rectangle, color=red];
3933[label="220.146.154.36;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6293[label="220.146.154.36;254pkt 254fpkt", shape=invtriangle, color=brown];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.146.154.36:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 64519: (0.217707%)&lt;BR/&gt; 64007: (0.217707%)&lt;BR/&gt; 64005: (0.217707%)&lt;BR/&gt; 63236: (0.217707%)&gt;];
}
94--3933[label="1;181pkt 181fpkt"];
94--6293[label="1;181pkt 181fpkt"];
3933--6293[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.146.154.36"/>
    </slice>
    <from sec="1118034540" usec="0"/>
    <to sec="1118034558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.227.96.37"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.8.145.38"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.38.166.38"/>
    </slice>
    <from sec="1118034274" usec="0"/>
    <to sec="1118034405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.65.135.39"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.176.142.39"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
2505[label="209.21.40.40;s;529pkt 529fpkt", shape=diamond, color=yellow];
3966[label="209.21.40.40;583pkt 583fpkt", shape=pentagon, color=darkviolet];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.21.40.40:1314, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1314: (50%)&gt;];
}
2505--3966[label="1;529pkt 529fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.21.40.40" src_port="1314"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.131.11.41"/>
    </slice>
    <from sec="1118034048" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.58.41"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.131.89.42"/>
    </slice>
    <from sec="1118034424" usec="0"/>
    <to sec="1118034470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.78.6.44"/>
    </slice>
    <from sec="1118034795" usec="0"/>
    <to sec="1118034820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.132.60.44"/>
    </slice>
    <from sec="1118034058" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.89.156.44"/>
    </slice>
    <from sec="1118034034" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.50.177.44"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.2.202.44"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.21.1.45"/>
    </slice>
    <from sec="1118034724" usec="0"/>
    <to sec="1118034754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.76.4.45"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.3.114.45"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.104.214.46"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.41.32.47"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.163.198.49"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.110.199.49"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.120.233.49"/>
    </slice>
    <from sec="1118034098" usec="0"/>
    <to sec="1118034837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.194.183.52"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
4289[label="176.196.107.74;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5955[label="176.196.143.240;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.143.240:*, 217.221.119.179:80}[43.1818%]&lt;BR/&gt;{176.196.107.74:*, 87.5.176.241:5000}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2273%)&lt;BR/&gt; 5000: (12.5%)&lt;BR/&gt; 1863: (2.27273%)&lt;BR/&gt; 3982: (1.13636%)&lt;BR/&gt; 3965: (1.13636%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="217.221.119.179" dst_port="80" src_ip="176.196.143.240"/>
      <filter dst_ip="87.5.176.241" dst_port="5000" src_ip="176.196.107.74"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.172.51.53"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.163.220.54"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.80.242.56"/>
    </slice>
    <from sec="1118034023" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.227.75.58"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.174.32.59"/>
    </slice>
    <from sec="1118034847" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.203.59"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.105.89.60"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.236.234.60"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.201.58.61"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.138.72.61"/>
    </slice>
    <from sec="1118034160" usec="0"/>
    <to sec="1118034205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.112.9.63"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28879,2.1536,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
66[label="183.82.32.146s;2pkt 2fpkt", shape=rectangle, color=red];
506[label="176.197.186.125;s;80pkt 80fpkt", shape=diamond, color=yellow];
509[label="85.166.13.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
1712[label="183.82.32.146;s;59pkt 59fpkt", shape=diamond, color=yellow];
1724[label="208.80.28.184;d;54pkt 54fpkt", shape=diamond, color=yellow];
4804[label="176.197.186.125;84pkt 84fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.32.146:*, 208.80.28.184:80}[36.3014%]&lt;BR/&gt;{176.197.186.125:*, 192.177.10.58:80}[33.5616%]&lt;BR/&gt;{176.197.186.125:*, *:53}[21.9178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.3665%)&lt;BR/&gt; 53: (10.6762%)&lt;BR/&gt; 123: (1.42349%)&lt;BR/&gt; 1168: (0.711744%)&lt;BR/&gt; 50376: (0.533808%)&gt;];
}
66--1712[label="0.5;1pkt 1fpkt"];
66--1724[label="0.5;1pkt 1fpkt"];
506--509[label="1;2pkt 2fpkt"];
506--1754[label="0.0125;1pkt 1fpkt"];
506--2029[label="0.05;4pkt 4fpkt"];
506--2288[label="0.0125;1pkt 1fpkt"];
506--2454[label="0.0125;1pkt 1fpkt"];
506--4804[label="0.9875;79pkt 79fpkt"];
509--4804[label="1;2pkt 2fpkt"];
1712--1724[label="0.981481;53pkt 53fpkt"];
1712--3478[label="0.0169492;1pkt 1fpkt"];
1712--3485[label="0.0169492;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="176.197.186.125"/>
      <filter dst_ip="192.177.10.58" dst_port="80" src_ip="176.197.186.125"/>
      <filter dst_ip="208.80.28.184" dst_port="80" src_ip="183.82.32.146"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.176.92.63"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.34.64"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.126.27.65"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.180.65"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.147.33.66"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.56.160.66"/>
    </slice>
    <from sec="1118034489" usec="0"/>
    <to sec="1118034642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.133.161.66"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.24.200.67"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.52.204.67"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.3.68"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.197.112.69"/>
    </slice>
    <from sec="1118034030" usec="0"/>
    <to sec="1118034873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.66.103.70"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
4255[label="176.196.99.71;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.99.71:64679, 192.9.61.78:1863}[33.3333%]&lt;BR/&gt;{176.196.99.71:64599, 192.9.57.124:1863}[33.3333%]&lt;BR/&gt;{176.196.99.71:64673, 53.245.85.234:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (33.3333%)&lt;BR/&gt; 64679: (16.6667%)&lt;BR/&gt; 64673: (16.6667%)&lt;BR/&gt; 64599: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="53.245.85.234" dst_port="80" src_ip="176.196.99.71" src_port="64673"/>
      <filter dst_ip="192.9.57.124" dst_port="1863" src_ip="176.196.99.71" src_port="64599"/>
      <filter dst_ip="192.9.61.78" dst_port="1863" src_ip="176.196.99.71" src_port="64679"/>
    </slice>
    <from sec="1118034021" usec="0"/>
    <to sec="1118034879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.93.226.72"/>
    </slice>
    <from sec="1118034716" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.43.73"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
4273[label="176.196.129.73;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.73:*, 208.80.25.71:80}[67.7966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3350: (0.847458%)&lt;BR/&gt; 3349: (0.847458%)&lt;BR/&gt; 3348: (0.847458%)&lt;BR/&gt; 3347: (0.847458%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="208.80.25.71" dst_port="80" src_ip="176.196.129.73"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.49.74"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.177.115.74"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.81.129.74"/>
    </slice>
    <from sec="1118034719" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
389[label="87.29.142.74;s;4583pkt 4583fpkt", shape=diamond, color=yellow];
4296[label="87.29.142.74;4976pkt 4976fpkt", shape=pentagon, color=darkviolet];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.29.142.74:1099, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1099: (50%)&gt;];
}
389--2415[label="0.0142857;1pkt 1fpkt"];
389--4296[label="0.999782;4582pkt 4582fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="87.29.142.74" src_port="1099"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.174.32.76"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.136.44.76"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
300[label="192.139.122.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
301[label="197.77.202.76;s;6pkt 6fpkt", shape=diamond, color=yellow];
2721[label="192.139.122.163;d;1pkt 1fpkt", shape=hexagon, color=black];
2790[label="197.77.202.76;s;6pkt 6fpkt", shape=hexagon, color=black];
4325[label="197.77.202.76;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6548[label="197.77.202.76;7pkt 7fpkt", shape=invtriangle, color=brown];
7852[label="197.77.202.76;7pkt 7fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.202.76:*, 202.0.49.199:6969}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6969: (19.1176%)&lt;BR/&gt; 38785: (10.2941%)&lt;BR/&gt; 3470: (10.2941%)&lt;BR/&gt; 17661: (7.35294%)&lt;BR/&gt; 3966: (7.35294%)&gt;];
}
300--301[label="1;1pkt 1fpkt"];
300--2721[label="1;1pkt 1fpkt"];
300--2790[label="1;1pkt 1fpkt"];
300--4325[label="1;1pkt 1fpkt"];
300--6548[label="1;1pkt 1fpkt"];
300--7852[label="1;1pkt 1fpkt"];
301--2721[label="1;1pkt 1fpkt"];
301--2790[label="1;6pkt 6fpkt"];
301--4325[label="0.833333;5pkt 5fpkt"];
301--6548[label="1;6pkt 6fpkt"];
301--7852[label="1;6pkt 6fpkt"];
2721--2790[label="1;1pkt 1fpkt"];
2721--4325[label="1;1pkt 1fpkt"];
2721--6548[label="1;1pkt 1fpkt"];
2721--7852[label="1;1pkt 1fpkt"];
2790--4325[label="0.833333;5pkt 5fpkt"];
2790--6548[label="1;6pkt 6fpkt"];
2790--7852[label="1;6pkt 6fpkt"];
4325--6548[label="1;6pkt 6fpkt"];
4325--7852[label="1;6pkt 6fpkt"];
6548--7852[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="202.0.49.199" dst_port="6969" src_ip="197.77.202.76"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.2.3.77"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1347[label="183.174.84.77;s;264pkt 264fpkt", shape=diamond, color=yellow];
1938[label="215.226.196.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
3348[label="183.174.84.77;s;264pkt 264fpkt", shape=hexagon, color=black];
4329[label="183.174.84.77;282pkt 282fpkt", shape=pentagon, color=darkviolet];
6551[label="183.174.84.77;283pkt 283fpkt", shape=invtriangle, color=brown];
7853[label="183.174.84.77;283pkt 283fpkt", shape=invhouse, color=bisque];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.84.77:32781, *:53}[57.5972%]&lt;BR/&gt;{183.174.84.77:53, *:*}[32.5088%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.2963%)&lt;BR/&gt; 32781: (29.4481%)&lt;BR/&gt; 25: (4.79303%)&lt;BR/&gt; 32768: (0.835149%)&lt;BR/&gt; 1024: (0.472041%)&gt;];
}
1347--1754[label="0.00917431;1pkt 1fpkt"];
1347--1938[label="1;1pkt 1fpkt"];
1347--2029[label="0.00934579;1pkt 1fpkt"];
1347--2233[label="0.00990099;1pkt 1fpkt"];
1347--2288[label="0.0103093;1pkt 1fpkt"];
1347--2454[label="0.0104167;1pkt 1fpkt"];
1347--2474[label="0.0102041;1pkt 1fpkt"];
1347--3348[label="1;264pkt 264fpkt"];
1347--3476[label="0.0340909;9pkt 9fpkt"];
1347--4329[label="0.996212;263pkt 263fpkt"];
1347--6551[label="1;264pkt 264fpkt"];
1347--7853[label="1;264pkt 264fpkt"];
1938--3348[label="1;1pkt 1fpkt"];
1938--4329[label="1;1pkt 1fpkt"];
1938--6551[label="1;1pkt 1fpkt"];
1938--7853[label="1;1pkt 1fpkt"];
3348--3476[label="0.0340909;9pkt 9fpkt"];
3348--4329[label="0.996212;263pkt 263fpkt"];
3348--6551[label="1;264pkt 264fpkt"];
3348--7853[label="1;264pkt 264fpkt"];
4329--6551[label="1;282pkt 282fpkt"];
4329--7853[label="1;282pkt 282fpkt"];
6551--7853[label="1;283pkt 283fpkt"];
</description>
    <slice>
      <filter src_ip="183.174.84.77" src_port="53"/>
      <filter dst_port="53" src_ip="183.174.84.77" src_port="32781"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.37.124.77"/>
    </slice>
    <from sec="1118034057" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.90.138.77"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.191.140.77"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.8.78"/>
    </slice>
    <from sec="1118034080" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.47.87.78"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.164.98.78"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.136.221.78"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.126.16.79"/>
    </slice>
    <from sec="1118034143" usec="0"/>
    <to sec="1118034200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.235.183.79"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.64.80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.114.65.80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.139.91.80"/>
    </slice>
    <from sec="1118034015" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.2.81"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.130.81"/>
    </slice>
    <from sec="1118034055" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.43.82"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.68.82"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.159.82"/>
    </slice>
    <from sec="1118034880" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.169.82"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.99.83"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.243.212.84"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.119.214.84"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.161.190.85"/>
    </slice>
    <from sec="1118034793" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.122.230.85"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.12.87"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.67.87"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.232.93.87"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.155.135.88"/>
    </slice>
    <from sec="1118034459" usec="0"/>
    <to sec="1118034874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.82.96.89"/>
    </slice>
    <from sec="1118034013" usec="0"/>
    <to sec="1118034879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
893[label="176.197.137.89;s;35pkt 35fpkt", shape=diamond, color=yellow];
4463[label="176.197.137.89;52pkt 52fpkt", shape=pentagon, color=darkviolet];
6630[label="176.197.137.89;51pkt 51fpkt", shape=invtriangle, color=brown];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.137.89:*, 201.139.153.0:80}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2228: (1.08696%)&lt;BR/&gt; 2171: (1.08696%)&lt;BR/&gt; 2170: (1.08696%)&lt;BR/&gt; 2169: (1.08696%)&gt;];
}
893--912[label="0.333333;1pkt 1fpkt"];
893--3478[label="0.0285714;1pkt 1fpkt"];
893--4463[label="1;35pkt 35fpkt"];
893--6630[label="0.971429;34pkt 34fpkt"];
4463--6630[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="201.139.153.0" dst_port="80" src_ip="176.197.137.89"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.230.255.89"/>
    </slice>
    <from sec="1118034013" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.242.80.91"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.70.134.91"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28425,2.13221,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
101[label="80.104.166.91s;202pkt 202fpkt", shape=rectangle, color=red];
4492[label="80.104.166.91;201pkt 201fpkt", shape=pentagon, color=darkviolet];
6650[label="80.104.166.91;201pkt 201fpkt", shape=invtriangle, color=brown];
7898[label="80.104.166.91;201pkt 201fpkt", shape=invhouse, color=bisque];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.104.166.91:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1842: (0.248447%)&lt;BR/&gt; 1836: (0.248447%)&lt;BR/&gt; 1835: (0.248447%)&lt;BR/&gt; 1834: (0.248447%)&gt;];
}
101--4492[label="1;201pkt 201fpkt"];
101--6650[label="1;201pkt 201fpkt"];
101--7898[label="1;201pkt 201fpkt"];
4492--6650[label="1;201pkt 201fpkt"];
4492--7898[label="1;201pkt 201fpkt"];
6650--7898[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="80.104.166.91"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
380[label="220.152.226.91;s;3582pkt 3582fpkt", shape=diamond, color=yellow];
2470[label="176.196.159.112;d;38pkt 38fpkt", shape=diamond, color=yellow];
4496[label="220.152.226.91;3919pkt 3919fpkt", shape=pentagon, color=darkviolet];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.152.226.91:*, *:1433}[99.0647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.7546%)&lt;BR/&gt; 40903: (0.218862%)&lt;BR/&gt; 2057: (0.0928505%)&lt;BR/&gt; 2628: (0.072954%)&lt;BR/&gt; 1590: (0.072954%)&gt;];
}
380--2379[label="0.00840336;1pkt 1fpkt"];
380--2470[label="0.0263158;1pkt 1fpkt"];
380--4496[label="1;3582pkt 3582fpkt"];
2470--4496[label="0.0263158;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="220.152.226.91"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.44.92"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.128.101.92"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.202.4.94"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.32.31.94"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.41.95"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.88.110.95"/>
    </slice>
    <from sec="1118034234" usec="0"/>
    <to sec="1118034239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.9.146.95"/>
    </slice>
    <from sec="1118034168" usec="0"/>
    <to sec="1118034472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
682[label="196.8.29.154;s;562pkt 562fpkt", shape=diamond, color=yellow];
951[label="208.129.225.33;d;7pkt 7fpkt", shape=diamond, color=yellow];
954[label="196.10.194.236;d;755pkt 755fpkt", shape=diamond, color=yellow];
1034[label="196.8.28.176;s;322pkt 322fpkt", shape=diamond, color=yellow];
1070[label="196.8.29.161;s;333pkt 333fpkt", shape=diamond, color=yellow];
1193[label="196.8.18.148;s;13pkt 13fpkt", shape=diamond, color=yellow];
1367[label="195.1.83.22;d;19pkt 19fpkt", shape=diamond, color=yellow];
1513[label="87.29.142.74;d;370pkt 370fpkt", shape=diamond, color=yellow];
1565[label="196.8.27.96;s;109pkt 109fpkt", shape=diamond, color=yellow];
1600[label="200.5.188.64;s;402pkt 402fpkt", shape=diamond, color=yellow];
1644[label="196.8.26.110;s;40pkt 40fpkt", shape=diamond, color=yellow];
1804[label="195.1.60.42;d;14pkt 14fpkt", shape=diamond, color=yellow];
1867[label="10.2.7.7;d;69pkt 69fpkt", shape=diamond, color=yellow];
2248[label="196.8.27.111;s;122pkt 122fpkt", shape=diamond, color=yellow];
2251[label="53.180.66.61;d;227pkt 227fpkt", shape=diamond, color=yellow];
2902[label="196.8.28.176;s;281pkt 281fpkt", shape=hexagon, color=black];
2934[label="195.1.83.22;d;19pkt 19fpkt", shape=hexagon, color=black];
3011[label="196.8.26.110;s;40pkt 40fpkt", shape=hexagon, color=black];
3207[label="196.8.29.154;s;510pkt 510fpkt", shape=hexagon, color=black];
3224[label="196.8.27.111;s;122pkt 122fpkt", shape=hexagon, color=black];
3232[label="196.8.29.161;s;332pkt 332fpkt", shape=hexagon, color=black];
3549[label="196.8.24.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3705[label="200.20.63.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3731[label="196.8.19.18;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3768[label="196.8.26.21;77pkt 77fpkt", shape=pentagon, color=darkviolet];
4164[label="200.5.188.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4524[label="196.8.27.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4626[label="196.8.24.106;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4658[label="196.8.26.110;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4672[label="196.8.26.112;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4818[label="196.8.26.128;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4878[label="196.8.29.132;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5044[label="196.8.18.148;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5114[label="196.8.29.154;599pkt 599fpkt", shape=pentagon, color=darkviolet];
5162[label="196.8.28.160;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5256[label="196.8.26.167;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5263[label="196.8.18.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5267[label="196.8.28.168;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5354[label="196.8.28.176;324pkt 324fpkt", shape=pentagon, color=darkviolet];
5395[label="196.8.30.180;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5661[label="196.8.26.206;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5687[label="175.147.94.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5729[label="196.8.29.213;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5936[label="196.8.31.237;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6165[label="200.20.63.16;2pkt 2fpkt", shape=invtriangle, color=brown];
6178[label="196.8.19.18;66pkt 66fpkt", shape=invtriangle, color=brown];
6201[label="196.8.26.21;77pkt 77fpkt", shape=invtriangle, color=brown];
6670[label="196.8.27.96;3pkt 3fpkt", shape=invtriangle, color=brown];
6735[label="196.8.24.106;7pkt 7fpkt", shape=invtriangle, color=brown];
6754[label="196.8.26.110;48pkt 48fpkt", shape=invtriangle, color=brown];
6882[label="196.8.29.132;4pkt 4fpkt", shape=invtriangle, color=brown];
6977[label="196.8.18.148;15pkt 15fpkt", shape=invtriangle, color=brown];
7017[label="196.8.29.154;600pkt 600fpkt", shape=invtriangle, color=brown];
7050[label="196.8.28.160;32pkt 32fpkt", shape=invtriangle, color=brown];
7108[label="196.8.26.167;37pkt 37fpkt", shape=invtriangle, color=brown];
7115[label="196.8.28.168;30pkt 30fpkt", shape=invtriangle, color=brown];
7172[label="196.8.28.176;324pkt 324fpkt", shape=invtriangle, color=brown];
7391[label="196.8.29.213;18pkt 18fpkt", shape=invtriangle, color=brown];
7525[label="196.8.31.237;7pkt 7fpkt", shape=invtriangle, color=brown];
7655[label="196.8.19.18;66pkt 66fpkt", shape=invhouse, color=bisque];
7948[label="196.8.26.110;47pkt 47fpkt", shape=invhouse, color=bisque];
8015[label="196.8.29.132;4pkt 4fpkt", shape=invhouse, color=bisque];
8063[label="196.8.18.148;16pkt 16fpkt", shape=invhouse, color=bisque];
8081[label="196.8.29.154;600pkt 600fpkt", shape=invhouse, color=bisque];
8100[label="196.8.28.160;32pkt 32fpkt", shape=invhouse, color=bisque];
8127[label="196.8.26.167;37pkt 37fpkt", shape=invhouse, color=bisque];
8131[label="196.8.28.168;30pkt 30fpkt", shape=invhouse, color=bisque];
8267[label="196.8.29.213;18pkt 18fpkt", shape=invhouse, color=bisque];
8338[label="196.8.31.237;8pkt 8fpkt", shape=invhouse, color=bisque];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[73.246%]&lt;BR/&gt;{*:*, 196.10.194.236:*}[20.6388%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (80.5147%)&lt;BR/&gt; 135: (4.76716%)&lt;BR/&gt; 25: (2.31618%)&lt;BR/&gt; 515: (1.19485%)&lt;BR/&gt; 53: (0.386029%)&gt;];
}
682--954[label="0.00355872;2pkt 2fpkt"];
682--990[label="0.00719424;1pkt 1fpkt"];
682--1335[label="0.00254453;1pkt 1fpkt"];
682--1367[label="0.0526316;1pkt 1fpkt"];
682--1513[label="0.0027027;1pkt 1fpkt"];
682--1525[label="0.00263852;1pkt 1fpkt"];
682--1555[label="0.00308642;1pkt 1fpkt"];
682--1746[label="0.00328947;1pkt 1fpkt"];
682--2219[label="0.00847458;1pkt 1fpkt"];
682--2227[label="0.00483092;1pkt 1fpkt"];
682--2251[label="0.00440529;1pkt 1fpkt"];
682--2450[label="0.00497512;1pkt 1fpkt"];
682--2456[label="0.00529101;1pkt 1fpkt"];
682--2795[label="0.00719424;1pkt 1fpkt"];
682--2934[label="0.0526316;1pkt 1fpkt"];
682--3207[label="0.998039;509pkt 509fpkt"];
682--5114[label="1;562pkt 562fpkt"];
682--7017[label="1;562pkt 562fpkt"];
682--8081[label="1;562pkt 562fpkt"];
951--1193[label="1;7pkt 7fpkt"];
951--5044[label="1;7pkt 7fpkt"];
951--6977[label="1;7pkt 7fpkt"];
951--8063[label="1;7pkt 7fpkt"];
954--1034[label="0.00310559;1pkt 1fpkt"];
954--1070[label="0.003003;1pkt 1fpkt"];
954--1193[label="0.0769231;1pkt 1fpkt"];
954--1311[label="0.0013245;1pkt 1fpkt"];
954--1315[label="0.00135135;1pkt 1fpkt"];
954--1509[label="0.010989;1pkt 1fpkt"];
954--1565[label="0.00917431;1pkt 1fpkt"];
954--1603[label="0.00297619;1pkt 1fpkt"];
954--1644[label="0.025;1pkt 1fpkt"];
954--1776[label="0.00293255;1pkt 1fpkt"];
954--2044[label="0.00391389;2pkt 2fpkt"];
954--2248[label="0.00819672;1pkt 1fpkt"];
954--2326[label="0.0114943;1pkt 1fpkt"];
954--2460[label="0.0114943;1pkt 1fpkt"];
954--2739[label="0.0013947;1pkt 1fpkt"];
954--2773[label="0.25;1pkt 1fpkt"];
954--2805[label="0.037037;1pkt 1fpkt"];
954--2902[label="0.00355872;1pkt 1fpkt"];
954--2916[label="0.0025974;1pkt 1fpkt"];
954--3011[label="0.025;1pkt 1fpkt"];
954--3116[label="0.0117647;1pkt 1fpkt"];
954--3207[label="0.00392157;2pkt 2fpkt"];
954--3224[label="0.00819672;1pkt 1fpkt"];
954--3232[label="0.00301205;1pkt 1fpkt"];
954--3257[label="0.00330033;1pkt 1fpkt"];
954--3331[label="0.00391389;2pkt 2fpkt"];
954--3407[label="0.04;1pkt 1fpkt"];
954--3549[label="0.333333;1pkt 1fpkt"];
954--3619[label="0.0909091;2pkt 2fpkt"];
954--3731[label="0.0151515;1pkt 1fpkt"];
954--3768[label="0.012987;1pkt 1fpkt"];
954--3970[label="0.05;1pkt 1fpkt"];
954--4212[label="0.00276243;1pkt 1fpkt"];
954--4539[label="0.0285714;1pkt 1fpkt"];
954--4540[label="0.25;1pkt 1fpkt"];
954--4618[label="0.00138696;1pkt 1fpkt"];
954--4626[label="0.125;1pkt 1fpkt"];
954--4658[label="0.0208333;1pkt 1fpkt"];
954--4672[label="0.0555556;1pkt 1fpkt"];
954--4700[label="0.0013245;1pkt 1fpkt"];
954--4701[label="0.00321543;1pkt 1fpkt"];
954--4729[label="0.00392157;1pkt 1fpkt"];
954--4794[label="0.00980392;1pkt 1fpkt"];
954--4876[label="0.00518135;1pkt 1fpkt"];
954--4878[label="0.2;1pkt 1fpkt"];
954--4932[label="0.0222222;1pkt 1fpkt"];
954--5044[label="0.0625;1pkt 1fpkt"];
954--5058[label="0.00150602;1pkt 1fpkt"];
954--5114[label="0.0033389;2pkt 2fpkt"];
954--5162[label="0.0645161;2pkt 2fpkt"];
954--5256[label="0.027027;1pkt 1fpkt"];
954--5263[label="1;1pkt 1fpkt"];
954--5267[label="0.0333333;1pkt 1fpkt"];
954--5331[label="0.011236;1pkt 1fpkt"];
954--5354[label="0.00308642;1pkt 1fpkt"];
954--5395[label="0.2;1pkt 1fpkt"];
954--5661[label="0.0357143;1pkt 1fpkt"];
954--5729[label="0.0555556;1pkt 1fpkt"];
954--5748[label="0.00282486;1pkt 1fpkt"];
954--5936[label="0.125;1pkt 1fpkt"];
954--6111[label="0.0909091;2pkt 2fpkt"];
954--6178[label="0.0151515;1pkt 1fpkt"];
954--6201[label="0.012987;1pkt 1fpkt"];
954--6681[label="0.0277778;1pkt 1fpkt"];
954--6728[label="0.00138696;1pkt 1fpkt"];
954--6754[label="0.0208333;1pkt 1fpkt"];
954--6776[label="0.0013245;1pkt 1fpkt"];
954--6881[label="0.00518135;1pkt 1fpkt"];
954--6882[label="0.25;1pkt 1fpkt"];
954--6914[label="0.0222222;1pkt 1fpkt"];
954--6977[label="0.0666667;1pkt 1fpkt"];
954--7017[label="0.00333333;2pkt 2fpkt"];
954--7050[label="0.0625;2pkt 2fpkt"];
954--7108[label="0.027027;1pkt 1fpkt"];
954--7115[label="0.0333333;1pkt 1fpkt"];
954--7172[label="0.00308642;1pkt 1fpkt"];
954--7354[label="0.5;1pkt 1fpkt"];
954--7391[label="0.0555556;1pkt 1fpkt"];
954--7403[label="0.00282486;1pkt 1fpkt"];
954--7525[label="0.142857;1pkt 1fpkt"];
954--7626[label="0.0909091;2pkt 2fpkt"];
954--7655[label="0.0151515;1pkt 1fpkt"];
954--7913[label="0.25;1pkt 1fpkt"];
954--7948[label="0.0212766;1pkt 1fpkt"];
954--8015[label="0.25;1pkt 1fpkt"];
954--8063[label="0.0625;1pkt 1fpkt"];
954--8081[label="0.00333333;2pkt 2fpkt"];
954--8100[label="0.0625;2pkt 2fpkt"];
954--8127[label="0.027027;1pkt 1fpkt"];
954--8131[label="0.0333333;1pkt 1fpkt"];
954--8248[label="0.5;1pkt 1fpkt"];
954--8267[label="0.0555556;1pkt 1fpkt"];
954--8338[label="0.125;1pkt 1fpkt"];
1034--1367[label="0.0526316;1pkt 1fpkt"];
1034--1804[label="0.0714286;1pkt 1fpkt"];
1034--2902[label="1;281pkt 281fpkt"];
1034--2934[label="0.0526316;1pkt 1fpkt"];
1034--5354[label="1;322pkt 322fpkt"];
1034--7172[label="1;322pkt 322fpkt"];
1070--1367[label="0.0526316;1pkt 1fpkt"];
1070--1804[label="0.0714286;1pkt 1fpkt"];
1070--2934[label="0.0526316;1pkt 1fpkt"];
1070--3232[label="1;332pkt 332fpkt"];
1193--5044[label="1;13pkt 13fpkt"];
1193--6977[label="1;13pkt 13fpkt"];
1193--8063[label="1;13pkt 13fpkt"];
1367--1565[label="0.0526316;1pkt 1fpkt"];
1367--2248[label="0.0526316;1pkt 1fpkt"];
1367--2669[label="0.0526316;1pkt 1fpkt"];
1367--2902[label="0.0526316;1pkt 1fpkt"];
1367--2934[label="1;19pkt 19fpkt"];
1367--3207[label="0.0526316;1pkt 1fpkt"];
1367--3224[label="0.0526316;1pkt 1fpkt"];
1367--3232[label="0.0526316;1pkt 1fpkt"];
1367--3768[label="0.0526316;1pkt 1fpkt"];
1367--4217[label="0.0526316;1pkt 1fpkt"];
1367--4524[label="0.5;1pkt 1fpkt"];
1367--4878[label="0.2;1pkt 1fpkt"];
1367--5114[label="0.0526316;1pkt 1fpkt"];
1367--5162[label="0.0526316;1pkt 1fpkt"];
1367--5354[label="0.0526316;1pkt 1fpkt"];
1367--5661[label="0.0526316;1pkt 1fpkt"];
1367--5729[label="0.0555556;1pkt 1fpkt"];
1367--5936[label="0.125;1pkt 1fpkt"];
1367--6201[label="0.0526316;1pkt 1fpkt"];
1367--6484[label="0.0526316;1pkt 1fpkt"];
1367--6670[label="0.333333;1pkt 1fpkt"];
1367--7017[label="0.0526316;1pkt 1fpkt"];
1367--7050[label="0.0526316;1pkt 1fpkt"];
1367--7172[label="0.0526316;1pkt 1fpkt"];
1367--7391[label="0.0555556;1pkt 1fpkt"];
1367--7525[label="0.142857;1pkt 1fpkt"];
1367--7818[label="0.0526316;1pkt 1fpkt"];
1367--8081[label="0.0526316;1pkt 1fpkt"];
1367--8100[label="0.0526316;1pkt 1fpkt"];
1367--8267[label="0.0555556;1pkt 1fpkt"];
1367--8338[label="0.125;1pkt 1fpkt"];
1513--1600[label="0.0027027;1pkt 1fpkt"];
1513--2044[label="0.0027027;1pkt 1fpkt"];
1513--2097[label="0.00478469;1pkt 1fpkt"];
1513--2248[label="0.00819672;1pkt 1fpkt"];
1513--2302[label="0.00387597;1pkt 1fpkt"];
1513--2326[label="0.0114943;1pkt 1fpkt"];
1513--2669[label="0.0027027;1pkt 1fpkt"];
1513--2788[label="0.00273973;1pkt 1fpkt"];
1513--3046[label="0.0027027;1pkt 1fpkt"];
1513--3207[label="0.0027027;1pkt 1fpkt"];
1513--3224[label="0.00819672;1pkt 1fpkt"];
1513--3225[label="0.0027027;1pkt 1fpkt"];
1513--3331[label="0.0027027;1pkt 1fpkt"];
1513--3540[label="0.0027027;1pkt 1fpkt"];
1513--4217[label="0.0027027;1pkt 1fpkt"];
1513--4692[label="0.0027027;1pkt 1fpkt"];
1513--4840[label="0.0027027;1pkt 1fpkt"];
1513--5114[label="0.0027027;1pkt 1fpkt"];
1513--5729[label="0.0555556;1pkt 1fpkt"];
1513--6062[label="0.0027027;1pkt 1fpkt"];
1513--6484[label="0.0027027;1pkt 1fpkt"];
1513--6772[label="0.0027027;1pkt 1fpkt"];
1513--6863[label="0.0027027;1pkt 1fpkt"];
1513--7017[label="0.0027027;1pkt 1fpkt"];
1513--7391[label="0.0555556;1pkt 1fpkt"];
1513--7818[label="0.0027027;1pkt 1fpkt"];
1513--8081[label="0.0027027;1pkt 1fpkt"];
1513--8267[label="0.0555556;1pkt 1fpkt"];
1565--1804[label="0.0714286;1pkt 1fpkt"];
1565--2934[label="0.0526316;1pkt 1fpkt"];
1565--4524[label="1;2pkt 2fpkt"];
1565--6670[label="1;3pkt 3fpkt"];
1600--1746[label="0.00328947;1pkt 1fpkt"];
1600--1804[label="0.0714286;1pkt 1fpkt"];
1600--2251[label="0.00440529;1pkt 1fpkt"];
1600--2456[label="0.00529101;1pkt 1fpkt"];
1600--2795[label="0.00719424;1pkt 1fpkt"];
1600--4164[label="1;1pkt 1fpkt"];
1644--3011[label="1;40pkt 40fpkt"];
1644--4658[label="1;40pkt 40fpkt"];
1644--6754[label="1;40pkt 40fpkt"];
1644--7948[label="0.975;39pkt 39fpkt"];
1804--2902[label="0.0714286;1pkt 1fpkt"];
1804--3232[label="0.0714286;1pkt 1fpkt"];
1804--3705[label="0.5;1pkt 1fpkt"];
1804--3768[label="0.0714286;1pkt 1fpkt"];
1804--5162[label="0.0714286;1pkt 1fpkt"];
1804--5354[label="0.0714286;1pkt 1fpkt"];
1804--5661[label="0.0714286;1pkt 1fpkt"];
1804--5687[label="1;1pkt 1fpkt"];
1804--5729[label="0.0714286;1pkt 1fpkt"];
1804--5936[label="0.125;1pkt 1fpkt"];
1804--6165[label="0.5;1pkt 1fpkt"];
1804--6201[label="0.0714286;1pkt 1fpkt"];
1804--7050[label="0.0714286;1pkt 1fpkt"];
1804--7172[label="0.0714286;1pkt 1fpkt"];
1804--7391[label="0.0714286;1pkt 1fpkt"];
1804--7525[label="0.142857;1pkt 1fpkt"];
1804--8100[label="0.0714286;1pkt 1fpkt"];
1804--8267[label="0.0714286;1pkt 1fpkt"];
1804--8338[label="0.125;1pkt 1fpkt"];
1867--4818[label="0.916667;33pkt 33fpkt"];
1867--5256[label="0.945946;35pkt 35fpkt"];
1867--7108[label="0.945946;35pkt 35fpkt"];
1867--8127[label="0.945946;35pkt 35fpkt"];
2248--2795[label="0.00819672;1pkt 1fpkt"];
2248--2934[label="0.0526316;1pkt 1fpkt"];
2248--3224[label="1;122pkt 122fpkt"];
2251--2302[label="0.00440529;1pkt 1fpkt"];
2251--2669[label="0.00440529;1pkt 1fpkt"];
2251--2788[label="0.00440529;1pkt 1fpkt"];
2251--3046[label="0.00440529;1pkt 1fpkt"];
2251--3207[label="0.00440529;1pkt 1fpkt"];
2251--3225[label="0.00440529;1pkt 1fpkt"];
2251--3331[label="0.00440529;1pkt 1fpkt"];
2251--3540[label="0.00440529;1pkt 1fpkt"];
2251--3644[label="0.0125;1pkt 1fpkt"];
2251--4217[label="0.00440529;1pkt 1fpkt"];
2251--4692[label="0.00440529;1pkt 1fpkt"];
2251--4840[label="0.00440529;1pkt 1fpkt"];
2251--5114[label="0.00440529;1pkt 1fpkt"];
2251--5395[label="0.2;1pkt 1fpkt"];
2251--6062[label="0.00440529;1pkt 1fpkt"];
2251--6127[label="0.0125;1pkt 1fpkt"];
2251--6484[label="0.00440529;1pkt 1fpkt"];
2251--6772[label="0.00440529;1pkt 1fpkt"];
2251--6863[label="0.00440529;1pkt 1fpkt"];
2251--7017[label="0.00440529;1pkt 1fpkt"];
2251--7818[label="0.00440529;1pkt 1fpkt"];
2251--8081[label="0.00440529;1pkt 1fpkt"];
2902--2934[label="0.0526316;1pkt 1fpkt"];
2902--5354[label="1;281pkt 281fpkt"];
2902--7172[label="1;281pkt 281fpkt"];
2934--3207[label="0.0526316;1pkt 1fpkt"];
2934--3224[label="0.0526316;1pkt 1fpkt"];
2934--3232[label="0.0526316;1pkt 1fpkt"];
2934--3768[label="0.0526316;1pkt 1fpkt"];
2934--4217[label="0.0526316;1pkt 1fpkt"];
2934--4524[label="0.5;1pkt 1fpkt"];
2934--4878[label="0.2;1pkt 1fpkt"];
2934--5114[label="0.0526316;1pkt 1fpkt"];
2934--5162[label="0.0526316;1pkt 1fpkt"];
2934--5354[label="0.0526316;1pkt 1fpkt"];
2934--5661[label="0.0526316;1pkt 1fpkt"];
2934--5729[label="0.0555556;1pkt 1fpkt"];
2934--5936[label="0.125;1pkt 1fpkt"];
2934--6201[label="0.0526316;1pkt 1fpkt"];
2934--6484[label="0.0526316;1pkt 1fpkt"];
2934--6670[label="0.333333;1pkt 1fpkt"];
2934--7017[label="0.0526316;1pkt 1fpkt"];
2934--7050[label="0.0526316;1pkt 1fpkt"];
2934--7172[label="0.0526316;1pkt 1fpkt"];
2934--7391[label="0.0555556;1pkt 1fpkt"];
2934--7525[label="0.142857;1pkt 1fpkt"];
2934--7818[label="0.0526316;1pkt 1fpkt"];
2934--8081[label="0.0526316;1pkt 1fpkt"];
2934--8100[label="0.0526316;1pkt 1fpkt"];
2934--8267[label="0.0555556;1pkt 1fpkt"];
2934--8338[label="0.125;1pkt 1fpkt"];
3011--4658[label="1;40pkt 40fpkt"];
3011--6754[label="1;40pkt 40fpkt"];
3011--7948[label="0.975;39pkt 39fpkt"];
3207--5114[label="0.998039;509pkt 509fpkt"];
3207--7017[label="1;510pkt 510fpkt"];
3207--8081[label="1;510pkt 510fpkt"];
3705--6165[label="1;2pkt 2fpkt"];
3731--6178[label="1;66pkt 66fpkt"];
3731--7655[label="1;66pkt 66fpkt"];
3768--6201[label="1;77pkt 77fpkt"];
4524--6670[label="1;2pkt 2fpkt"];
4626--6735[label="1;7pkt 7fpkt"];
4658--6754[label="1;48pkt 48fpkt"];
4658--7948[label="1;47pkt 47fpkt"];
4878--6882[label="1;4pkt 4fpkt"];
4878--8015[label="1;4pkt 4fpkt"];
5044--6977[label="1;15pkt 15fpkt"];
5044--8063[label="1;16pkt 16fpkt"];
5114--7017[label="1;599pkt 599fpkt"];
5114--8081[label="1;599pkt 599fpkt"];
5162--7050[label="1;31pkt 31fpkt"];
5162--8100[label="1;31pkt 31fpkt"];
5256--7108[label="1;37pkt 37fpkt"];
5256--8127[label="1;37pkt 37fpkt"];
5267--7115[label="1;30pkt 30fpkt"];
5267--8131[label="1;30pkt 30fpkt"];
5354--7172[label="1;324pkt 324fpkt"];
5729--7391[label="1;18pkt 18fpkt"];
5729--8267[label="1;18pkt 18fpkt"];
5936--7525[label="1;7pkt 7fpkt"];
5936--8338[label="1;8pkt 8fpkt"];
6178--7655[label="1;66pkt 66fpkt"];
6754--7948[label="1;47pkt 47fpkt"];
6882--8015[label="1;4pkt 4fpkt"];
6977--8063[label="1;15pkt 15fpkt"];
7017--8081[label="1;600pkt 600fpkt"];
7050--8100[label="1;32pkt 32fpkt"];
7108--8127[label="1;37pkt 37fpkt"];
7115--8131[label="1;30pkt 30fpkt"];
7391--8267[label="1;18pkt 18fpkt"];
7525--8338[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="196.10.194.236"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.38.96"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.40.97"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.197.0.98"/>
    </slice>
    <from sec="1118034489" usec="0"/>
    <to sec="1118034577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.92.236.98"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.68.100"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.42.254.100"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.33.101"/>
    </slice>
    <from sec="1118034013" usec="0"/>
    <to sec="1118034865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.95.101"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.95.102"/>
    </slice>
    <from sec="1118034873" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
672[label="197.128.102.102;s;2601pkt 2601fpkt", shape=diamond, color=yellow];
4594[label="197.128.102.102;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.128.102.102:1040, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1040: (50%)&gt;];
}
672--1811[label="0.00113636;1pkt 1fpkt"];
672--4594[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.128.102.102" src_port="1040"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.75.224.102"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.55.42.103"/>
    </slice>
    <from sec="1118034835" usec="0"/>
    <to sec="1118034851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.243.162.104"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.224.51.105"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.39.108"/>
    </slice>
    <from sec="1118034060" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.41.64.108"/>
    </slice>
    <from sec="1118034107" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.251.34.109"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
2561[label="197.77.44.109;s;20pkt 20fpkt", shape=diamond, color=yellow];
4650[label="197.77.44.109;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.44.109:*, 194.18.128.130:80}[46.9388%]&lt;BR/&gt;{197.77.44.109:*, 194.18.128.128:80}[26.5306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1217: (1.44928%)&lt;BR/&gt; 1216: (1.44928%)&lt;BR/&gt; 1215: (1.44928%)&lt;BR/&gt; 1214: (1.44928%)&gt;];
}
2561--3485[label="0.1;2pkt 2fpkt"];
2561--4650[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="194.18.128.130" dst_port="80" src_ip="197.77.44.109"/>
      <filter dst_ip="194.18.128.128" dst_port="80" src_ip="197.77.44.109"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.64.111"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.175.69.111"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.171.12.112"/>
    </slice>
    <from sec="1118034228" usec="0"/>
    <to sec="1118034243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
2118[label="183.144.91.112;s;141pkt 141fpkt", shape=diamond, color=yellow];
4682[label="183.144.91.112;146pkt 146fpkt", shape=pentagon, color=darkviolet];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.144.91.112:65534, *:53}[62.585%]&lt;BR/&gt;{183.144.91.112:*, 192.9.62.25:80}[36.0544%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65534: (31.8815%)&lt;BR/&gt; 53: (31.8815%)&lt;BR/&gt; 80: (17.4216%)&lt;BR/&gt; 0: (1.39373%)&lt;BR/&gt; 60293: (0.348432%)&gt;];
}
2118--2474[label="0.0102041;1pkt 1fpkt"];
2118--3478[label="0.0283688;4pkt 4fpkt"];
2118--3485[label="0.0212766;3pkt 3fpkt"];
2118--4682[label="0.992908;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.62.25" dst_port="80" src_ip="183.144.91.112"/>
      <filter dst_port="53" src_ip="183.144.91.112" src_port="65534"/>
    </slice>
    <from sec="1118034015" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
4684[label="214.128.115.112;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.128.115.112:80, 128.65.34.251:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4519: (1.28205%)&lt;BR/&gt; 4518: (1.28205%)&lt;BR/&gt; 4517: (1.28205%)&lt;BR/&gt; 4516: (1.28205%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="128.65.34.251" src_ip="214.128.115.112" src_port="80"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.237.191.112"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.11.114"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
722[label="196.8.30.114;s;289pkt 289fpkt", shape=diamond, color=yellow];
1393[label="196.8.29.116;s;29pkt 29fpkt", shape=diamond, color=yellow];
1413[label="52.21.34.51;d;71pkt 71fpkt", shape=diamond, color=yellow];
1414[label="196.8.25.164;s;87pkt 87fpkt", shape=diamond, color=yellow];
3163[label="196.8.25.164;s;72pkt 72fpkt", shape=hexagon, color=black];
4701[label="196.8.30.114;311pkt 311fpkt", shape=pentagon, color=darkviolet];
4730[label="196.8.29.116;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5226[label="196.8.25.164;113pkt 113fpkt", shape=pentagon, color=darkviolet];
6796[label="196.8.29.116;28pkt 28fpkt", shape=invtriangle, color=brown];
7968[label="196.8.29.116;28pkt 28fpkt", shape=invhouse, color=bisque];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.30.114:80, *:*}[50.8584%]&lt;BR/&gt;{196.8.25.164:80, *:*}[24.2489%]&lt;BR/&gt;{*:80, 52.21.34.51:*}[20.8155%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9451%)&lt;BR/&gt; 554: (5.01894%)&lt;BR/&gt; 6970: (1.13636%)&lt;BR/&gt; 6972: (0.473485%)&lt;BR/&gt; 15231: (0.236742%)&gt;];
}
722--749[label="0.160714;9pkt 9fpkt"];
722--954[label="0.00346021;1pkt 1fpkt"];
722--1413[label="0.492958;35pkt 35fpkt"];
722--3477[label="0.0346021;10pkt 10fpkt"];
722--3495[label="0.0346021;10pkt 10fpkt"];
722--4701[label="0.99654;288pkt 288fpkt"];
1393--1413[label="0.0344828;1pkt 1fpkt"];
1393--3477[label="0.0344828;1pkt 1fpkt"];
1393--3495[label="0.0344828;1pkt 1fpkt"];
1393--4730[label="1;28pkt 28fpkt"];
1393--6796[label="1;28pkt 28fpkt"];
1393--7968[label="1;28pkt 28fpkt"];
1413--1414[label="0.338028;24pkt 24fpkt"];
1413--3163[label="0.338028;24pkt 24fpkt"];
1413--3477[label="0.0140845;1pkt 1fpkt"];
1413--3495[label="0.0140845;1pkt 1fpkt"];
1413--4618[label="0.028169;2pkt 2fpkt"];
1413--4701[label="0.492958;35pkt 35fpkt"];
1413--4730[label="0.0357143;1pkt 1fpkt"];
1413--5226[label="0.338028;24pkt 24fpkt"];
1413--6728[label="0.028169;2pkt 2fpkt"];
1413--6796[label="0.0357143;1pkt 1fpkt"];
1413--7968[label="0.0357143;1pkt 1fpkt"];
1414--3163[label="1;72pkt 72fpkt"];
1414--3477[label="0.0804598;7pkt 7fpkt"];
1414--3495[label="0.0804598;7pkt 7fpkt"];
1414--5226[label="0.988506;86pkt 86fpkt"];
3163--3477[label="0.0972222;7pkt 7fpkt"];
3163--3495[label="0.0972222;7pkt 7fpkt"];
3163--5226[label="0.986111;71pkt 71fpkt"];
4730--6796[label="1;28pkt 28fpkt"];
4730--7968[label="1;28pkt 28fpkt"];
6796--7968[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.30.114" src_port="80"/>
      <filter src_ip="196.8.25.164" src_port="80"/>
      <filter dst_ip="52.21.34.51" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
335[label="133.167.67.114;s;4633pkt 4633fpkt", shape=diamond, color=yellow];
4708[label="133.167.67.114;4948pkt 4948fpkt", shape=pentagon, color=darkviolet];
6781[label="133.167.67.114;4949pkt 4949fpkt", shape=invtriangle, color=brown];
7960[label="133.167.67.114;4948pkt 4948fpkt", shape=invhouse, color=bisque];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.67.114:2965, *:*}[98.8685%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2965: (49.443%)&lt;BR/&gt; 443: (0.318308%)&lt;BR/&gt; 80: (0.238731%)&lt;BR/&gt; 54045: (0.164288%)&lt;BR/&gt; 1025: (0.12835%)&gt;];
}
335--3477[label="0.000217486;1pkt 1fpkt"];
335--3495[label="0.000217486;1pkt 1fpkt"];
335--4708[label="1;4633pkt 4633fpkt"];
335--6781[label="1;4633pkt 4633fpkt"];
335--7960[label="1;4633pkt 4633fpkt"];
4708--6781[label="1;4948pkt 4948fpkt"];
4708--7960[label="1;4948pkt 4948fpkt"];
6781--7960[label="1;4948pkt 4948fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.67.114" src_port="2965"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
4710[label="183.144.89.114;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.144.89.114:*, 195.196.185.242:80}[41.1765%]&lt;BR/&gt;{183.144.89.114:51079, *:*}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.4706%)&lt;BR/&gt; 51079: (20.5882%)&lt;BR/&gt; 1863: (5.88235%)&lt;BR/&gt; 65025: (2.94118%)&lt;BR/&gt; 53661: (2.94118%)&gt;];
}
</description>
    <slice>
      <filter src_ip="183.144.89.114" src_port="51079"/>
      <filter dst_ip="195.196.185.242" dst_port="80" src_ip="183.144.89.114"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.246.157.116"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
4738[label="176.196.176.117;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.176.117:*, 85.237.143.103:80}[73.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3068: (1.19048%)&lt;BR/&gt; 3067: (1.19048%)&lt;BR/&gt; 3066: (1.19048%)&lt;BR/&gt; 3065: (1.19048%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="85.237.143.103" dst_port="80" src_ip="176.196.176.117"/>
    </slice>
    <from sec="1118034177" usec="0"/>
    <to sec="1118034854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.165.8.118"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.243.11.118"/>
    </slice>
    <from sec="1118034614" usec="0"/>
    <to sec="1118034780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.34.119"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.181.164.119"/>
    </slice>
    <from sec="1118034046" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.55.50.121"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.64.95.122"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
2018[label="197.66.76.123;s;171pkt 171fpkt", shape=diamond, color=yellow];
4784[label="197.66.76.123;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.76.123:32911, *:53}[66.8539%]&lt;BR/&gt;{197.66.76.123:53, *:*}[33.1461%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.1494%)&lt;BR/&gt; 32911: (33.908%)&lt;BR/&gt; 32769: (1.14943%)&lt;BR/&gt; 32768: (0.862069%)&lt;BR/&gt; 1028: (0.574713%)&gt;];
}
2018--3476[label="0.0292398;5pkt 5fpkt"];
2018--4784[label="0.994152;170pkt 170fpkt"];
</description>
    <slice>
      <filter src_ip="197.66.76.123" src_port="53"/>
      <filter dst_port="53" src_ip="197.66.76.123" src_port="32911"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.43.124"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.44.69.125"/>
    </slice>
    <from sec="1118034426" usec="0"/>
    <to sec="1118034438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.95.125"/>
    </slice>
    <from sec="1118034852" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
422[label="169.101.77.159;s;3pkt 3fpkt", shape=diamond, color=yellow];
437[label="197.130.185.125;s;4780pkt 4780fpkt", shape=diamond, color=yellow];
719[label="175.199.182.234;d;6pkt 6fpkt", shape=diamond, color=yellow];
2687[label="169.101.77.159;s;3pkt 3fpkt", shape=hexagon, color=black];
4803[label="197.130.185.125;5188pkt 5188fpkt", shape=pentagon, color=darkviolet];
5156[label="169.101.77.159;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7047[label="169.101.77.159;2pkt 2fpkt", shape=invtriangle, color=brown];
8098[label="169.101.77.159;3pkt 3fpkt", shape=invhouse, color=bisque];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.130.185.125:1030, *:1434}[99.9037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (49.9099%)&lt;BR/&gt; 1030: (49.9099%)&lt;BR/&gt; 5004: (0.0500651%)&lt;BR/&gt; 1672: (0.0300391%)&lt;BR/&gt; 1670: (0.0300391%)&gt;];
}
422--719[label="1;3pkt 3fpkt"];
422--2687[label="1;3pkt 3fpkt"];
422--5156[label="1;2pkt 2fpkt"];
422--7047[label="1;2pkt 2fpkt"];
422--8098[label="1;3pkt 3fpkt"];
437--719[label="0.166667;1pkt 1fpkt"];
437--4803[label="1;4780pkt 4780fpkt"];
719--2687[label="1;3pkt 3fpkt"];
719--4803[label="0.166667;1pkt 1fpkt"];
719--5156[label="1;2pkt 2fpkt"];
719--7047[label="1;2pkt 2fpkt"];
719--8098[label="1;3pkt 3fpkt"];
2687--5156[label="1;2pkt 2fpkt"];
2687--7047[label="1;2pkt 2fpkt"];
2687--8098[label="1;3pkt 3fpkt"];
5156--7047[label="1;2pkt 2fpkt"];
5156--8098[label="1;2pkt 2fpkt"];
7047--8098[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.130.185.125" src_port="1030"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.14.81.126"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.198.170.127"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.73.129"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.242.119.129"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.93.130"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.133.107.130"/>
    </slice>
    <from sec="1118034858" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.18.128.130"/>
    </slice>
    <from sec="1118034051" usec="0"/>
    <to sec="1118034605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.209.27.131"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.105.89.131"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.113.121.131"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.35.184.131"/>
    </slice>
    <from sec="1118034531" usec="0"/>
    <to sec="1118034560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.83.231.131"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.37.133"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.68.133"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.252.213.133"/>
    </slice>
    <from sec="1118034056" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.3.232.133"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.15.134"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.144.85.135"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.40.136"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.58.79.136"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.226.9.137"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.96.1.138"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.39.138"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
2276[label="197.134.199.139;s;595pkt 595fpkt", shape=diamond, color=yellow];
4963[label="197.134.199.139;645pkt 645fpkt", shape=pentagon, color=darkviolet];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.134.199.139:1078, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1078: (50%)&gt;];
}
2276--4963[label="0.998319;594pkt 594fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.134.199.139" src_port="1078"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.236.8.140"/>
    </slice>
    <from sec="1118034407" usec="0"/>
    <to sec="1118034870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.138.19.140"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.207.105.140"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.77.221.140"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.160.138.141"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.33.188.141"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.32.142"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.176.235.142"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
1197[label="214.141.9.72;d;17pkt 17fpkt", shape=diamond, color=yellow];
1198[label="176.197.67.144;s;17pkt 17fpkt", shape=diamond, color=yellow];
5009[label="176.197.67.144;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6958[label="176.197.67.144;23pkt 23fpkt", shape=invtriangle, color=brown];
8051[label="176.197.67.144;23pkt 23fpkt", shape=invhouse, color=bisque];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.67.144:*, 214.141.9.72:80}[73.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2103: (2.42718%)&lt;BR/&gt; 2095: (2.42718%)&lt;BR/&gt; 2094: (2.42718%)&lt;BR/&gt; 2092: (2.42718%)&gt;];
}
1197--1198[label="1;17pkt 17fpkt"];
1197--5009[label="1;17pkt 17fpkt"];
1197--6958[label="1;17pkt 17fpkt"];
1197--8051[label="1;17pkt 17fpkt"];
1198--5009[label="1;17pkt 17fpkt"];
1198--6958[label="1;17pkt 17fpkt"];
1198--8051[label="1;17pkt 17fpkt"];
5009--6958[label="1;23pkt 23fpkt"];
5009--8051[label="1;23pkt 23fpkt"];
6958--8051[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="214.141.9.72" dst_port="80" src_ip="176.197.67.144"/>
    </slice>
    <from sec="1118034137" usec="0"/>
    <to sec="1118034877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28425,2.13221,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
27[label="176.196.213.144s;2pkt 2fpkt", shape=rectangle, color=red];
5018[label="176.196.213.144;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6964[label="176.196.213.144;9pkt 9fpkt", shape=invtriangle, color=brown];
8055[label="176.196.213.144;10pkt 10fpkt", shape=invhouse, color=bisque];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.213.144:*, 186.68.3.133:80}[30%]&lt;BR/&gt;{176.196.213.144:*, 215.20.64.19:80}[20%]&lt;BR/&gt;{176.196.213.144:*, 53.168.18.213:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1331: (6.45161%)&lt;BR/&gt; 1330: (6.45161%)&lt;BR/&gt; 1360: (4.83871%)&lt;BR/&gt; 1357: (4.83871%)&gt;];
}
27--5018[label="1;2pkt 2fpkt"];
27--6964[label="1;2pkt 2fpkt"];
27--8055[label="1;2pkt 2fpkt"];
5018--6964[label="1;9pkt 9fpkt"];
5018--8055[label="1;10pkt 10fpkt"];
6964--8055[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="186.68.3.133" dst_port="80" src_ip="176.196.213.144"/>
      <filter dst_ip="53.168.18.213" dst_port="80" src_ip="176.196.213.144"/>
      <filter dst_ip="215.20.64.19" dst_port="80" src_ip="176.196.213.144"/>
    </slice>
    <from sec="1118034241" usec="0"/>
    <to sec="1118034700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.34.145"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.205.90.145"/>
    </slice>
    <from sec="1118034122" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.67.146"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.67.147"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.157.148"/>
    </slice>
    <from sec="1118034842" usec="0"/>
    <to sec="1118034861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.33.149"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
1487[label="197.141.123.149;s;740pkt 740fpkt", shape=diamond, color=yellow];
5064[label="197.141.123.149;739pkt 739fpkt", shape=pentagon, color=darkviolet];
6990[label="197.141.123.149;740pkt 740fpkt", shape=invtriangle, color=brown];
8066[label="197.141.123.149;739pkt 739fpkt", shape=invhouse, color=bisque];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.141.123.149:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 64214: (0.0676133%)&lt;BR/&gt; 64213: (0.0676133%)&lt;BR/&gt; 64212: (0.0676133%)&lt;BR/&gt; 64211: (0.0676133%)&gt;];
}
1487--5064[label="1;739pkt 739fpkt"];
1487--6990[label="1;740pkt 740fpkt"];
1487--8066[label="1;739pkt 739fpkt"];
5064--6990[label="1;739pkt 739fpkt"];
5064--8066[label="1;739pkt 739fpkt"];
6990--8066[label="1;739pkt 739fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.141.123.149"/>
    </slice>
    <from sec="1118034287" usec="0"/>
    <to sec="1118034381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.32.150"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.100.45.150"/>
    </slice>
    <from sec="1118034670" usec="0"/>
    <to sec="1118034689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.38.1.152"/>
    </slice>
    <from sec="1118034378" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.34.152"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.218.48.152"/>
    </slice>
    <from sec="1118034058" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.155.97.152"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.106.233.152"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.113.49.153"/>
    </slice>
    <from sec="1118034158" usec="0"/>
    <to sec="1118034207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.21.70.153"/>
    </slice>
    <from sec="1118034557" usec="0"/>
    <to sec="1118034581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.36.154"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.56.154"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.208.30.155"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.0.156"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
2553[label="183.82.130.156;s;90pkt 90fpkt", shape=diamond, color=yellow];
5135[label="183.82.130.156;91pkt 91fpkt", shape=pentagon, color=darkviolet];
7030[label="183.82.130.156;90pkt 90fpkt", shape=invtriangle, color=brown];
8090[label="183.82.130.156;90pkt 90fpkt", shape=invhouse, color=bisque];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.130.156:*, 193.151.192.137:80}[51.6484%]&lt;BR/&gt;{183.82.130.156:*, 193.151.192.136:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0305%)&lt;BR/&gt; 1863: (0.969529%)&lt;BR/&gt; 4259: (0.554017%)&lt;BR/&gt; 4258: (0.554017%)&lt;BR/&gt; 4254: (0.554017%)&gt;];
}
2553--5135[label="1;90pkt 90fpkt"];
2553--7030[label="0.988889;89pkt 89fpkt"];
2553--8090[label="0.988889;89pkt 89fpkt"];
5135--7030[label="1;90pkt 90fpkt"];
5135--8090[label="1;90pkt 90fpkt"];
7030--8090[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="193.151.192.137" dst_port="80" src_ip="183.82.130.156"/>
      <filter dst_ip="193.151.192.136" dst_port="80" src_ip="183.82.130.156"/>
    </slice>
    <from sec="1118034059" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.152.234.156"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
2335[label="183.82.240.158;s;897pkt 897fpkt", shape=diamond, color=yellow];
5153[label="183.82.240.158;903pkt 903fpkt", shape=pentagon, color=darkviolet];
7044[label="183.82.240.158;904pkt 904fpkt", shape=invtriangle, color=brown];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.240.158:53, *:1025}[38.011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.9815%)&lt;BR/&gt; 1025: (19.0643%)&lt;BR/&gt; 1031: (4.19749%)&lt;BR/&gt; 1027: (2.58876%)&lt;BR/&gt; 32769: (2.27441%)&gt;];
}
2335--3476[label="0.00111483;1pkt 1fpkt"];
2335--5153[label="0.99777;895pkt 895fpkt"];
2335--7044[label="0.998885;896pkt 896fpkt"];
5153--7044[label="1;903pkt 903fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="183.82.240.158" src_port="53"/>
    </slice>
    <from sec="1118034023" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.19.160"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.203.83.160"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.169.160"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.160.4.161"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.145.26.161"/>
    </slice>
    <from sec="1118034123" usec="0"/>
    <to sec="1118034139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.15.33.161"/>
    </slice>
    <from sec="1118034672" usec="0"/>
    <to sec="1118034686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.174.117.161"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.202.48.162"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.18.88.163"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.96.163"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.102.132.163"/>
    </slice>
    <from sec="1118034480" usec="0"/>
    <to sec="1118034795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
330[label="54.108.194.163;s;2426pkt 2426fpkt", shape=diamond, color=yellow];
2727[label="54.108.194.163;s;1559pkt 1559fpkt", shape=hexagon, color=black];
5222[label="54.108.194.163;2947pkt 2947fpkt", shape=pentagon, color=darkviolet];
7086[label="54.108.194.163;2946pkt 2946fpkt", shape=invtriangle, color=brown];
8117[label="54.108.194.163;2946pkt 2946fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.108.194.163:80, *:3072}[51.5439%]&lt;BR/&gt;{54.108.194.163:80, *:1024}[48.4561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3072: (25.7954%)&lt;BR/&gt; 1024: (24.2046%)&gt;];
}
330--411[label="0.0147059;1pkt 1fpkt"];
330--2727[label="1;1559pkt 1559fpkt"];
330--3477[label="0.0725474;176pkt 176fpkt"];
330--3495[label="0.0725474;176pkt 176fpkt"];
330--5222[label="1;2426pkt 2426fpkt"];
330--7086[label="0.999588;2425pkt 2425fpkt"];
330--8117[label="0.999588;2425pkt 2425fpkt"];
2727--3477[label="0.112893;176pkt 176fpkt"];
2727--3495[label="0.112893;176pkt 176fpkt"];
2727--5222[label="1;1559pkt 1559fpkt"];
2727--7086[label="0.999359;1558pkt 1558fpkt"];
2727--8117[label="0.999359;1558pkt 1558fpkt"];
5222--7086[label="1;2946pkt 2946fpkt"];
5222--8117[label="1;2946pkt 2946fpkt"];
7086--8117[label="1;2946pkt 2946fpkt"];
</description>
    <slice>
      <filter dst_port="3072" src_ip="54.108.194.163" src_port="80"/>
      <filter dst_port="1024" src_ip="54.108.194.163" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.55.195.163"/>
    </slice>
    <from sec="1118034689" usec="0"/>
    <to sec="1118034738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.56.164"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.166.1.165"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.196.27.166"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
5250[label="133.167.36.166;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.36.166:64835, *:53}[90.8451%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.831%)&lt;BR/&gt; 64835: (45.4225%)&lt;BR/&gt; 0: (6.33803%)&lt;BR/&gt; 55555: (0.352113%)&lt;BR/&gt; 39065: (0.352113%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="133.167.36.166" src_port="64835"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
2640[label="210.241.51.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
5251[label="210.241.51.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.241.51.166:80, 197.77.47.160:52656}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52656: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2640--5251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.47.160" dst_port="52656" src_ip="210.241.51.166" src_port="80"/>
    </slice>
    <from sec="1118034766" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.200.65.166"/>
    </slice>
    <from sec="1118034044" usec="0"/>
    <to sec="1118034857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.235.85.166"/>
    </slice>
    <from sec="1118034757" usec="0"/>
    <to sec="1118034864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.155.2.167"/>
    </slice>
    <from sec="1118034812" usec="0"/>
    <to sec="1118034826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19217,2.15698,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
87[label="36.209.146.167s;254pkt 254fpkt", shape=rectangle, color=red];
5261[label="36.209.146.167;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7111[label="36.209.146.167;253pkt 253fpkt", shape=invtriangle, color=brown];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.209.146.167:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
87--5261[label="1;254pkt 254fpkt"];
87--7111[label="1;253pkt 253fpkt"];
5261--7111[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.209.146.167" src_port="1025"/>
    </slice>
    <from sec="1118034385" usec="0"/>
    <to sec="1118034401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.24.169"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.128.208.171"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.147.3.172"/>
    </slice>
    <from sec="1118034053" usec="0"/>
    <to sec="1118034079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.184.21.173"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.173.58.173"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.51.90.173"/>
    </slice>
    <from sec="1118034249" usec="0"/>
    <to sec="1118034270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.140.173"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.169.173"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
2460[label="196.8.30.174;s;87pkt 87fpkt", shape=diamond, color=yellow];
5331[label="196.8.30.174;89pkt 89fpkt", shape=pentagon, color=darkviolet];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.30.174:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2460--5331[label="0.988506;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.30.174"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.79.43.174"/>
    </slice>
    <from sec="1118034306" usec="0"/>
    <to sec="1118034696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.194.44.175"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.49.2.176"/>
    </slice>
    <from sec="1118034661" usec="0"/>
    <to sec="1118034673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.106.25.176"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.115.123.176"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.195.126.176"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.210.119.177"/>
    </slice>
    <from sec="1118034417" usec="0"/>
    <to sec="1118034448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
1769[label="128.65.49.161;d;43pkt 43fpkt", shape=diamond, color=yellow];
5374[label="194.10.253.177;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7184[label="194.10.253.177;27pkt 27fpkt", shape=invtriangle, color=brown];
8165[label="194.10.253.177;27pkt 27fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.10.253.177:80, 128.65.49.161:*}[65.1163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3226: (1.6129%)&lt;BR/&gt; 3225: (1.6129%)&lt;BR/&gt; 3222: (1.6129%)&lt;BR/&gt; 3221: (1.6129%)&gt;];
}
1769--5374[label="1;27pkt 27fpkt"];
1769--7184[label="1;27pkt 27fpkt"];
1769--8165[label="1;27pkt 27fpkt"];
5374--7184[label="1;27pkt 27fpkt"];
5374--8165[label="1;27pkt 27fpkt"];
7184--8165[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.49.161" src_ip="194.10.253.177" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.84.131.178"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.106.114.179"/>
    </slice>
    <from sec="1118034026" usec="0"/>
    <to sec="1118034865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
2071[label="87.5.160.179;s;594pkt 594fpkt", shape=diamond, color=yellow];
5392[label="87.5.160.179;723pkt 723fpkt", shape=pentagon, color=darkviolet];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.5.160.179:1195, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1195: (50%)&gt;];
}
2071--5392[label="0.998316;593pkt 593fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="87.5.160.179" src_port="1195"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.13.180"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.221.16.180"/>
    </slice>
    <from sec="1118034233" usec="0"/>
    <to sec="1118034256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.194.180"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.145.75.181"/>
    </slice>
    <from sec="1118034056" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.209.121.182"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
5260[label="176.197.104.167;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5546[label="183.174.55.196;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.55.196:*, *:80}[41.3793%]&lt;BR/&gt;{176.197.104.167:*, 200.24.185.64:80}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1034%)&lt;BR/&gt; 443: (3.44828%)&lt;BR/&gt; 123: (3.44828%)&lt;BR/&gt; 63848: (1.72414%)&lt;BR/&gt; 63733: (1.72414%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="183.174.55.196"/>
      <filter dst_ip="200.24.185.64" dst_port="80" src_ip="176.197.104.167"/>
    </slice>
    <from sec="1118034461" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.26.183"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.38.183"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.185.67.183"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
939[label="197.142.177.184;s;992pkt 992fpkt", shape=diamond, color=yellow];
5445[label="197.142.177.184;992pkt 992fpkt", shape=pentagon, color=darkviolet];
7223[label="197.142.177.184;992pkt 992fpkt", shape=invtriangle, color=brown];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.142.177.184:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4045: (0.100806%)&lt;BR/&gt; 4044: (0.100806%)&lt;BR/&gt; 4043: (0.100806%)&lt;BR/&gt; 4042: (0.100806%)&gt;];
}
939--5445[label="1;992pkt 992fpkt"];
939--7223[label="1;992pkt 992fpkt"];
5445--7223[label="1;992pkt 992fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.142.177.184"/>
    </slice>
    <from sec="1118034101" usec="0"/>
    <to sec="1118034197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.173.185"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.85.190.186"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.116.200.186"/>
    </slice>
    <from sec="1118034017" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.77.220.186"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.158.187"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.237.20.188"/>
    </slice>
    <from sec="1118034626" usec="0"/>
    <to sec="1118034808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.36.190"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.30.190.190"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.95.191"/>
    </slice>
    <from sec="1118034870" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.58.232.191"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.100.127.192"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.73.217.193"/>
    </slice>
    <from sec="1118034779" usec="0"/>
    <to sec="1118034873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
1574[label="176.197.38.194;s;405pkt 405fpkt", shape=diamond, color=yellow];
5518[label="176.197.38.194;447pkt 447fpkt", shape=pentagon, color=darkviolet];
7271[label="176.197.38.194;448pkt 448fpkt", shape=invtriangle, color=brown];
8203[label="176.197.38.194;448pkt 448fpkt", shape=invhouse, color=bisque];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.38.194:53, *:*}[82.3661%]&lt;BR/&gt;{176.197.38.194:*, *:53}[22.7679%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.5744%)&lt;BR/&gt; 1348: (8.40961%)&lt;BR/&gt; 33701: (1.83066%)&lt;BR/&gt; 32768: (1.80206%)&lt;BR/&gt; 32769: (1.22998%)&gt;];
}
1574--1583[label="0.00892857;1pkt 1fpkt"];
1574--1754[label="0.00917431;1pkt 1fpkt"];
1574--2029[label="0.00934579;1pkt 1fpkt"];
1574--2233[label="0.00990099;1pkt 1fpkt"];
1574--2288[label="0.0103093;1pkt 1fpkt"];
1574--2454[label="0.0104167;1pkt 1fpkt"];
1574--2474[label="0.0102041;1pkt 1fpkt"];
1574--3476[label="0.0790123;32pkt 32fpkt"];
1574--5518[label="0.997531;404pkt 404fpkt"];
1574--7271[label="1;405pkt 405fpkt"];
1574--8203[label="1;405pkt 405fpkt"];
5518--7271[label="1;447pkt 447fpkt"];
5518--8203[label="1;447pkt 447fpkt"];
7271--8203[label="1;448pkt 448fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.38.194" src_port="53"/>
      <filter dst_port="53" src_ip="176.197.38.194"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.25.71.195"/>
    </slice>
    <from sec="1118034030" usec="0"/>
    <to sec="1118034042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.76.194.195"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.133.194.195"/>
    </slice>
    <from sec="1118034058" usec="0"/>
    <to sec="1118034878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
5545[label="128.2.47.196;88pkt 88fpkt", shape=pentagon, color=darkviolet];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.47.196:54045, *:*}[82.9545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54045: (42.0455%)&lt;BR/&gt; 80: (6.25%)&lt;BR/&gt; 52334: (1.13636%)&lt;BR/&gt; 6881: (1.13636%)&lt;BR/&gt; 64402: (0.568182%)&gt;];
}
</description>
    <slice>
      <filter src_ip="128.2.47.196" src_port="54045"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.167.196"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.19.197"/>
    </slice>
    <from sec="1118034671" usec="0"/>
    <to sec="1118034861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
2472[label="197.134.199.197;s;640pkt 640fpkt", shape=diamond, color=yellow];
5561[label="197.134.199.197;697pkt 697fpkt", shape=pentagon, color=darkviolet];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.134.199.197:2508, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2508: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2472--5561[label="1;640pkt 640fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.134.199.197" src_port="2508"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.228.132.198"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.170.198"/>
    </slice>
    <from sec="1118034729" usec="0"/>
    <to sec="1118034770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.77.213.199"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.19.200"/>
    </slice>
    <from sec="1118034035" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
5585[label="128.2.47.200;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.47.200:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (7.42574%)&lt;BR/&gt; 38255: (1.9802%)&lt;BR/&gt; 50768: (1.48515%)&lt;BR/&gt; 37723: (1.48515%)&lt;BR/&gt; 34343: (1.48515%)&gt;];
}
</description>
    <slice>
      <filter src_ip="128.2.47.200"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.52.201"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.217.73.201"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.129.201"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.82.152.201"/>
    </slice>
    <from sec="1118034028" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.129.251.201"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
351[label="200.147.18.202;s;1225pkt 1225fpkt", shape=diamond, color=yellow];
2974[label="200.147.18.202;s;1066pkt 1066fpkt", shape=hexagon, color=black];
5613[label="200.147.18.202;1520pkt 1520fpkt", shape=pentagon, color=darkviolet];
7322[label="200.147.18.202;1521pkt 1521fpkt", shape=invtriangle, color=brown];
8232[label="200.147.18.202;1509pkt 1509fpkt", shape=invhouse, color=bisque];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.147.18.202:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2429: (0.168104%)&lt;BR/&gt; 3014: (0.146177%)&lt;BR/&gt; 1314: (0.146177%)&lt;BR/&gt; 1045: (0.146177%)&gt;];
}
351--2974[label="1;1066pkt 1066fpkt"];
351--3476[label="0.0816327;100pkt 100fpkt"];
351--5613[label="0.999184;1224pkt 1224fpkt"];
351--7322[label="1;1225pkt 1225fpkt"];
351--8232[label="0.990204;1213pkt 1213fpkt"];
2974--3476[label="0.0938086;100pkt 100fpkt"];
2974--5613[label="0.999062;1065pkt 1065fpkt"];
2974--7322[label="1;1066pkt 1066fpkt"];
2974--8232[label="0.988743;1054pkt 1054fpkt"];
5613--7322[label="1;1520pkt 1520fpkt"];
5613--8232[label="0.999337;1508pkt 1508fpkt"];
7322--8232[label="1;1509pkt 1509fpkt"];
</description>
    <slice>
      <filter src_ip="200.147.18.202" src_port="53"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.80.202"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.197.101.202"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.139.144.202"/>
    </slice>
    <from sec="1118034482" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.86.180.202"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.58.19.203"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
1113[label="176.196.64.203;s;177pkt 177fpkt", shape=diamond, color=yellow];
2931[label="176.196.64.203;s;158pkt 158fpkt", shape=hexagon, color=black];
5631[label="176.196.64.203;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7330[label="176.196.64.203;2pkt 2fpkt", shape=invtriangle, color=brown];
8234[label="176.196.64.203;2pkt 2fpkt", shape=invhouse, color=bisque];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.64.203:*, 217.144.80.185:80}[22.0339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.3372%)&lt;BR/&gt; 53: (9.53079%)&lt;BR/&gt; 0: (2.34604%)&lt;BR/&gt; 1863: (1.6129%)&lt;BR/&gt; 35420: (0.733138%)&gt;];
}
1113--1366[label="0.0102041;1pkt 1fpkt"];
1113--2931[label="1;158pkt 158fpkt"];
1113--3478[label="0.079096;14pkt 14fpkt"];
1113--5631[label="1;2pkt 2fpkt"];
1113--7330[label="1;2pkt 2fpkt"];
1113--8234[label="1;2pkt 2fpkt"];
2931--3478[label="0.0886076;14pkt 14fpkt"];
2931--5631[label="1;2pkt 2fpkt"];
2931--7330[label="1;2pkt 2fpkt"];
2931--8234[label="1;2pkt 2fpkt"];
5631--7330[label="1;2pkt 2fpkt"];
5631--8234[label="1;2pkt 2fpkt"];
7330--8234[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.144.80.185" dst_port="80" src_ip="176.196.64.203"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.171.81.203"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.98.114.203"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.8.119.203"/>
    </slice>
    <from sec="1118034027" usec="0"/>
    <to sec="1118034848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.117.110.205"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.10.74.206"/>
    </slice>
    <from sec="1118034455" usec="0"/>
    <to sec="1118034483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.47.177.206"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.14.207"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.230.133.207"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.56.35.208"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.109.24.209"/>
    </slice>
    <from sec="1118034352" usec="0"/>
    <to sec="1118034778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.146.101.209"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.7.206.209"/>
    </slice>
    <from sec="1118034026" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.192.87.212"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.54.213"/>
    </slice>
    <from sec="1118034374" usec="0"/>
    <to sec="1118034399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.160.165.213"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.37.214"/>
    </slice>
    <from sec="1118034032" usec="0"/>
    <to sec="1118034865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
1615[label="176.197.38.214;s;407pkt 407fpkt", shape=diamond, color=yellow];
3001[label="176.197.38.214;s;293pkt 293fpkt", shape=hexagon, color=black];
5740[label="176.197.38.214;441pkt 441fpkt", shape=pentagon, color=darkviolet];
7397[label="176.197.38.214;441pkt 441fpkt", shape=invtriangle, color=brown];
8271[label="176.197.38.214;442pkt 442fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.38.214:53, *:*}[70.1357%]&lt;BR/&gt;{176.197.38.214:3853, *:53}[29.8643%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.6186%)&lt;BR/&gt; 3853: (15.0445%)&lt;BR/&gt; 32768: (2.0998%)&lt;BR/&gt; 33701: (1.13636%)&lt;BR/&gt; 32769: (0.889328%)&gt;];
}
1615--1754[label="0.00917431;1pkt 1fpkt"];
1615--2029[label="0.00934579;1pkt 1fpkt"];
1615--2233[label="0.00990099;1pkt 1fpkt"];
1615--2288[label="0.0103093;1pkt 1fpkt"];
1615--2454[label="0.0104167;1pkt 1fpkt"];
1615--2474[label="0.0102041;1pkt 1fpkt"];
1615--3001[label="1;293pkt 293fpkt"];
1615--3476[label="0.0540541;22pkt 22fpkt"];
1615--5740[label="0.997543;406pkt 406fpkt"];
1615--7397[label="0.997543;406pkt 406fpkt"];
1615--8271[label="1;407pkt 407fpkt"];
3001--3476[label="0.0750853;22pkt 22fpkt"];
3001--5740[label="0.996587;292pkt 292fpkt"];
3001--7397[label="0.996587;292pkt 292fpkt"];
3001--8271[label="1;293pkt 293fpkt"];
5740--7397[label="1;441pkt 441fpkt"];
5740--8271[label="1;441pkt 441fpkt"];
7397--8271[label="1;441pkt 441fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.38.214" src_port="53"/>
      <filter dst_port="53" src_ip="176.197.38.214" src_port="3853"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.237.109.214"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
1680[label="176.196.136.215;s;162pkt 162fpkt", shape=diamond, color=yellow];
3088[label="176.196.136.215;s;162pkt 162fpkt", shape=hexagon, color=black];
5753[label="176.196.136.215;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7408[label="176.196.136.215;162pkt 162fpkt", shape=invtriangle, color=brown];
8276[label="176.196.136.215;162pkt 162fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.136.215:*, 49.164.68.180:80}[32.716%]&lt;BR/&gt;{176.196.136.215:*, 55.133.214.52:80}[20.9877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1843: (0.309023%)&lt;BR/&gt; 1842: (0.309023%)&lt;BR/&gt; 1839: (0.309023%)&lt;BR/&gt; 1838: (0.309023%)&gt;];
}
1680--3088[label="1;162pkt 162fpkt"];
1680--3478[label="0.0123457;2pkt 2fpkt"];
1680--5753[label="1;161pkt 161fpkt"];
1680--7408[label="1;162pkt 162fpkt"];
1680--8276[label="1;162pkt 162fpkt"];
3088--3478[label="0.0123457;2pkt 2fpkt"];
3088--5753[label="1;161pkt 161fpkt"];
3088--7408[label="1;162pkt 162fpkt"];
3088--8276[label="1;162pkt 162fpkt"];
5753--7408[label="1;161pkt 161fpkt"];
5753--8276[label="1;161pkt 161fpkt"];
7408--8276[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_ip="49.164.68.180" dst_port="80" src_ip="176.196.136.215"/>
      <filter dst_ip="55.133.214.52" dst_port="80" src_ip="176.196.136.215"/>
    </slice>
    <from sec="1118034210" usec="0"/>
    <to sec="1118034540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.161.155.215"/>
    </slice>
    <from sec="1118034042" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.73.31.216"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.21.3.217"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.189.69.218"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.12.100.218"/>
    </slice>
    <from sec="1118034701" usec="0"/>
    <to sec="1118034774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.77.213.218"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.21.222.218"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.157.75.219"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.206.176.219"/>
    </slice>
    <from sec="1118034014" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.62.173.220"/>
    </slice>
    <from sec="1118034155" usec="0"/>
    <to sec="1118034222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.110.153.221"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.182.129.222"/>
    </slice>
    <from sec="1118034122" usec="0"/>
    <to sec="1118034236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66349,2.19058,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
2021[label="175.199.150.64;d;117pkt 117fpkt", shape=diamond, color=yellow];
5817[label="170.111.182.223;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 175.199.150.64:65335}[94.9153%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65335: (47.8992%)&lt;BR/&gt; 61184: (1.2605%)&lt;BR/&gt; 443: (1.2605%)&lt;BR/&gt; 64608: (0.420168%)&lt;BR/&gt; 64579: (0.420168%)&gt;];
}
2021--2649[label="0.00854701;1pkt 1fpkt"];
2021--4733[label="0.00854701;1pkt 1fpkt"];
2021--5817[label="0.5;1pkt 1fpkt"];
2021--6799[label="0.00854701;1pkt 1fpkt"];
2021--7970[label="0.00854701;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.150.64" dst_port="65335"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.73.224"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.155.52.225"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.238.22.227"/>
    </slice>
    <from sec="1118034023" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.144.134.227"/>
    </slice>
    <from sec="1118034259" usec="0"/>
    <to sec="1118034283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.82.33.229"/>
    </slice>
    <from sec="1118034041" usec="0"/>
    <to sec="1118034733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.65.184.229"/>
    </slice>
    <from sec="1118034031" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.210.177.230"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.174.20.231"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.205.20.232"/>
    </slice>
    <from sec="1118034067" usec="0"/>
    <to sec="1118034868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.11.111.232"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.140.134.232"/>
    </slice>
    <from sec="1118034581" usec="0"/>
    <to sec="1118034613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.80.233"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.150.122.233"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
329[label="200.147.18.234;s;1192pkt 1192fpkt", shape=diamond, color=yellow];
2970[label="200.147.18.234;s;760pkt 760fpkt", shape=hexagon, color=black];
5911[label="200.147.18.234;1475pkt 1475fpkt", shape=pentagon, color=darkviolet];
7506[label="200.147.18.234;1474pkt 1474fpkt", shape=invtriangle, color=brown];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.147.18.234:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 3277: (0.122424%)&lt;BR/&gt; 3272: (0.122424%)&lt;BR/&gt; 3245: (0.122424%)&lt;BR/&gt; 2660: (0.122424%)&gt;];
}
329--2970[label="1;760pkt 760fpkt"];
329--3476[label="0.0788591;94pkt 94fpkt"];
329--5911[label="1;1192pkt 1192fpkt"];
329--7506[label="0.999161;1191pkt 1191fpkt"];
2970--3476[label="0.123684;94pkt 94fpkt"];
2970--5911[label="1;760pkt 760fpkt"];
2970--7506[label="0.998684;759pkt 759fpkt"];
5911--7506[label="1;1474pkt 1474fpkt"];
</description>
    <slice>
      <filter src_ip="200.147.18.234" src_port="53"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.43.208.234"/>
    </slice>
    <from sec="1118034028" usec="0"/>
    <to sec="1118034406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.147.193.235"/>
    </slice>
    <from sec="1118034089" usec="0"/>
    <to sec="1118034188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.145.227.236"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.8.21.238"/>
    </slice>
    <from sec="1118034199" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.77.221.238"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.229.101.239"/>
    </slice>
    <from sec="1118034653" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.241.210.239"/>
    </slice>
    <from sec="1118034071" usec="0"/>
    <to sec="1118034140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.233.2.240"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.59.180.241"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.132.185.241"/>
    </slice>
    <from sec="1118034683" usec="0"/>
    <to sec="1118034711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.229.46.244"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.139.86.244"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
998[label="87.24.204.244;s;1272pkt 1272fpkt", shape=diamond, color=yellow];
5982[label="87.24.204.244;1394pkt 1394fpkt", shape=pentagon, color=darkviolet];
7555[label="87.24.204.244;1393pkt 1393fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.24.204.244:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32543: (0.0739098%)&lt;BR/&gt; 27594: (0.0739098%)&lt;BR/&gt; 27086: (0.0739098%)&lt;BR/&gt; 26243: (0.0739098%)&gt;];
}
998--3477[label="0.0581761;74pkt 74fpkt"];
998--3495[label="0.0581761;74pkt 74fpkt"];
998--5982[label="1;1272pkt 1272fpkt"];
998--7555[label="0.999214;1271pkt 1271fpkt"];
5982--7555[label="1;1393pkt 1393fpkt"];
</description>
    <slice>
      <filter src_ip="87.24.204.244" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.161.67.245"/>
    </slice>
    <from sec="1118034041" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.149.189.245"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.99.248"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.228.135.248"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.209.49.250"/>
    </slice>
    <from sec="1118034101" usec="0"/>
    <to sec="1118034574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.196.95.250"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.132.35.252"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.167.64.252"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.216.90.253"/>
    </slice>
    <from sec="1118034083" usec="0"/>
    <to sec="1118034883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
2550[label="183.82.136.253;s;39pkt 39fpkt", shape=diamond, color=yellow];
6031[label="183.82.136.253;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7589[label="183.82.136.253;49pkt 49fpkt", shape=invtriangle, color=brown];
8366[label="183.82.136.253;49pkt 49fpkt", shape=invhouse, color=bisque];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.136.253:*, 204.27.37.15:80}[44%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49614: (1.06952%)&lt;BR/&gt; 49613: (1.06952%)&lt;BR/&gt; 49611: (1.06952%)&lt;BR/&gt; 49604: (1.06952%)&gt;];
}
2550--3478[label="0.025641;1pkt 1fpkt"];
2550--6031[label="1;39pkt 39fpkt"];
2550--7589[label="0.974359;38pkt 38fpkt"];
2550--8366[label="0.974359;38pkt 38fpkt"];
6031--7589[label="1;49pkt 49fpkt"];
6031--8366[label="1;49pkt 49fpkt"];
7589--8366[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="204.27.37.15" dst_port="80" src_ip="183.82.136.253"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392574,2.23666,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.144.213.255"/>
    </slice>
    <from sec="1118034067" usec="0"/>
    <to sec="1118034257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
462[label="52.21.8.162;s;27pkt 27fpkt", shape=diamond, color=yellow];
604[label="175.199.142.24;d;797pkt 797fpkt", shape=diamond, color=yellow];
823[label="192.9.87.194;s;11pkt 11fpkt", shape=diamond, color=yellow];
838[label="175.199.88.210;d;111pkt 111fpkt", shape=diamond, color=yellow];
850[label="175.199.84.125;d;57pkt 57fpkt", shape=diamond, color=yellow];
888[label="175.199.217.94;d;63pkt 63fpkt", shape=diamond, color=yellow];
1094[label="53.160.155.92;s;24pkt 24fpkt", shape=diamond, color=yellow];
1191[label="219.182.107.44;s;22pkt 22fpkt", shape=diamond, color=yellow];
1201[label="216.165.8.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
1425[label="216.165.9.176;s;10pkt 10fpkt", shape=diamond, color=yellow];
1895[label="222.116.124.59;s;224pkt 224fpkt", shape=diamond, color=yellow];
2128[label="192.9.160.107;s;16pkt 16fpkt", shape=diamond, color=yellow];
2153[label="175.199.56.73;d;42pkt 42fpkt", shape=diamond, color=yellow];
2260[label="175.199.192.221;d;23pkt 23fpkt", shape=diamond, color=yellow];
2478[label="219.190.105.16;s;47pkt 47fpkt", shape=diamond, color=yellow];
2546[label="53.212.92.234;s;29pkt 29fpkt", shape=diamond, color=yellow];
2583[label="175.199.181.4;d;149pkt 149fpkt", shape=diamond, color=yellow];
2624[label="87.1.7.14;s;102pkt 102fpkt", shape=diamond, color=yellow];
2759[label="192.9.87.194;s;11pkt 11fpkt", shape=hexagon, color=black];
3159[label="192.9.160.107;s;16pkt 16fpkt", shape=hexagon, color=black];
3379[label="87.1.7.14;s;102pkt 102fpkt", shape=hexagon, color=black];
3498[label="87.38.0.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3535[label="87.38.0.3;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3570[label="216.2.108.5;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3630[label="208.14.137.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3683[label="87.1.7.14;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3711[label="219.190.105.16;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3935[label="192.69.212.36;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3978[label="192.69.208.41;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4005[label="219.182.107.44;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4161[label="52.21.42.64;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4174[label="216.2.108.65;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4229[label="216.2.108.69;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4257[label="216.2.109.71;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4274[label="53.160.132.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4298[label="53.22.206.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4306[label="220.1.148.75;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4504[label="53.160.155.92;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4634[label="192.9.160.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4736[label="219.182.94.117;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4764[label="219.182.88.121;74pkt 74fpkt", shape=pentagon, color=darkviolet];
4816[label="87.38.0.128;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4846[label="87.38.0.130;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4956[label="216.165.9.139;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5032[label="192.9.56.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5079[label="87.1.1.151;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5185[label="192.9.61.161;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5197[label="52.21.8.162;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5286[label="87.38.0.170;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5352[label="216.165.9.176;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5360[label="53.160.131.176;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5508[label="219.209.148.192;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5521[label="192.9.87.194;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5718[label="52.21.26.212;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5774[label="87.38.0.218;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5917[label="53.212.92.234;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6018[label="48.114.162.251;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6040[label="87.38.0.0;8pkt 8fpkt", shape=invtriangle, color=brown];
6118[label="208.14.137.9;2pkt 2fpkt", shape=invtriangle, color=brown];
6151[label="87.1.7.14;102pkt 102fpkt", shape=invtriangle, color=brown];
6294[label="192.69.212.36;17pkt 17fpkt", shape=invtriangle, color=brown];
6319[label="192.69.208.41;9pkt 9fpkt", shape=invtriangle, color=brown];
6340[label="219.182.107.44;21pkt 21fpkt", shape=invtriangle, color=brown];
6446[label="52.21.42.64;25pkt 25fpkt", shape=invtriangle, color=brown];
6454[label="216.2.108.65;8pkt 8fpkt", shape=invtriangle, color=brown];
6491[label="216.2.108.69;33pkt 33fpkt", shape=invtriangle, color=brown];
6508[label="216.2.109.71;17pkt 17fpkt", shape=invtriangle, color=brown];
6521[label="53.160.132.73;1pkt 1fpkt", shape=invtriangle, color=brown];
6532[label="53.22.206.74;2pkt 2fpkt", shape=invtriangle, color=brown];
6659[label="53.160.155.92;24pkt 24fpkt", shape=invtriangle, color=brown];
6742[label="192.9.160.107;1pkt 1fpkt", shape=invtriangle, color=brown];
6801[label="219.182.94.117;10pkt 10fpkt", shape=invtriangle, color=brown];
6847[label="87.38.0.128;5pkt 5fpkt", shape=invtriangle, color=brown];
6998[label="87.1.1.151;38pkt 38fpkt", shape=invtriangle, color=brown];
7064[label="192.9.61.161;4pkt 4fpkt", shape=invtriangle, color=brown];
7131[label="87.38.0.170;33pkt 33fpkt", shape=invtriangle, color=brown];
7177[label="53.160.131.176;34pkt 34fpkt", shape=invtriangle, color=brown];
7265[label="219.209.148.192;33pkt 33fpkt", shape=invtriangle, color=brown];
7382[label="52.21.26.212;4pkt 4fpkt", shape=invtriangle, color=brown];
7509[label="53.212.92.234;42pkt 42fpkt", shape=invtriangle, color=brown];
7580[label="48.114.162.251;29pkt 29fpkt", shape=invtriangle, color=brown];
7641[label="87.1.7.14;102pkt 102fpkt", shape=invhouse, color=bisque];
7718[label="192.69.212.36;17pkt 17fpkt", shape=invhouse, color=bisque];
7731[label="192.69.208.41;10pkt 10fpkt", shape=invhouse, color=bisque];
7831[label="216.2.109.71;17pkt 17fpkt", shape=invhouse, color=bisque];
7845[label="53.22.206.74;3pkt 3fpkt", shape=invhouse, color=bisque];
7904[label="53.160.155.92;24pkt 24fpkt", shape=invhouse, color=bisque];
7940[label="192.9.160.107;1pkt 1fpkt", shape=invhouse, color=bisque];
7971[label="219.182.94.117;10pkt 10fpkt", shape=invhouse, color=bisque];
8071[label="87.1.1.151;38pkt 38fpkt", shape=invhouse, color=bisque];
8161[label="53.160.131.176;34pkt 34fpkt", shape=invhouse, color=bisque];
8201[label="219.209.148.192;33pkt 33fpkt", shape=invhouse, color=bisque];
8262[label="52.21.26.212;4pkt 4fpkt", shape=invhouse, color=bisque];
8331[label="53.212.92.234;42pkt 42fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.199.142.24:*}[49.5333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7202%)&lt;BR/&gt; 443: (1.45851%)&lt;BR/&gt; 1863: (0.410649%)&lt;BR/&gt; 1152: (0.184084%)&lt;BR/&gt; 1150: (0.184084%)&gt;];
}
462--604[label="0.777778;21pkt 21fpkt"];
462--3477[label="0.148148;4pkt 4fpkt"];
462--3495[label="0.148148;4pkt 4fpkt"];
462--5197[label="0.962963;26pkt 26fpkt"];
604--660[label="0.0198675;3pkt 3fpkt"];
604--823[label="1;11pkt 11fpkt"];
604--978[label="0.0839161;12pkt 12fpkt"];
604--1094[label="1;24pkt 24fpkt"];
604--1149[label="0.0859375;11pkt 11fpkt"];
604--1201[label="1;1pkt 1fpkt"];
604--1375[label="0.0454545;1pkt 1fpkt"];
604--1640[label="0.0517241;3pkt 3fpkt"];
604--1810[label="0.0224719;2pkt 2fpkt"];
604--1822[label="0.025641;1pkt 1fpkt"];
604--1849[label="0.020979;3pkt 3fpkt"];
604--1895[label="0.857143;192pkt 192fpkt"];
604--2012[label="0.0322581;2pkt 2fpkt"];
604--2124[label="0.0350877;2pkt 2fpkt"];
604--2128[label="1;16pkt 16fpkt"];
604--2243[label="0.029703;3pkt 3fpkt"];
604--2274[label="0.03125;1pkt 1fpkt"];
604--2448[label="0.0645161;2pkt 2fpkt"];
604--2507[label="0.461538;6pkt 6fpkt"];
604--2546[label="0.275862;8pkt 8fpkt"];
604--2722[label="0.5;1pkt 1fpkt"];
604--2731[label="0.05;3pkt 3fpkt"];
604--2752[label="0.150943;16pkt 16fpkt"];
604--2759[label="1;11pkt 11fpkt"];
604--2809[label="0.00584795;2pkt 2fpkt"];
604--2876[label="0.0839161;12pkt 12fpkt"];
604--3007[label="0.0526316;1pkt 1fpkt"];
604--3109[label="0.037037;2pkt 2fpkt"];
604--3159[label="1;16pkt 16fpkt"];
604--3241[label="0.0333333;1pkt 1fpkt"];
604--3251[label="0.025641;1pkt 1fpkt"];
604--3430[label="0.037037;2pkt 2fpkt"];
604--3431[label="0.00584795;2pkt 2fpkt"];
604--3477[label="0.0526976;42pkt 42fpkt"];
604--3495[label="0.0526976;42pkt 42fpkt"];
604--3498[label="0.25;2pkt 2fpkt"];
604--3535[label="0.428571;3pkt 3fpkt"];
604--3547[label="0.125;3pkt 3fpkt"];
604--3570[label="0.857143;24pkt 24fpkt"];
604--3595[label="1;8pkt 8fpkt"];
604--3685[label="0.02;1pkt 1fpkt"];
604--3935[label="0.0588235;1pkt 1fpkt"];
604--3978[label="0.3;3pkt 3fpkt"];
604--4161[label="0.04;1pkt 1fpkt"];
604--4174[label="0.625;5pkt 5fpkt"];
604--4229[label="0.939394;31pkt 31fpkt"];
604--4274[label="1;1pkt 1fpkt"];
604--4298[label="1;2pkt 2fpkt"];
604--4300[label="0.0322581;2pkt 2fpkt"];
604--4306[label="0.666667;16pkt 16fpkt"];
604--4504[label="1;24pkt 24fpkt"];
604--4634[label="1;1pkt 1fpkt"];
604--4675[label="0.0820896;11pkt 11fpkt"];
604--4755[label="0.03125;1pkt 1fpkt"];
604--4764[label="0.243243;18pkt 18fpkt"];
604--4807[label="0.0794702;12pkt 12fpkt"];
604--4816[label="1;6pkt 6fpkt"];
604--4841[label="0.00428266;2pkt 2fpkt"];
604--4846[label="1;6pkt 6fpkt"];
604--5068[label="0.0198675;3pkt 3fpkt"];
604--5082[label="0.020202;2pkt 2fpkt"];
604--5197[label="0.571429;20pkt 20fpkt"];
604--5286[label="0.212121;7pkt 7fpkt"];
604--5352[label="0.037037;1pkt 1fpkt"];
604--5360[label="0.142857;5pkt 5fpkt"];
604--5508[label="0.121212;4pkt 4fpkt"];
604--5521[label="1;11pkt 11fpkt"];
604--5587[label="0.0272727;3pkt 3fpkt"];
604--5718[label="0.75;3pkt 3fpkt"];
604--5756[label="0.0178571;3pkt 3fpkt"];
604--5855[label="0.0025;1pkt 1fpkt"];
604--5917[label="0.238095;10pkt 10fpkt"];
604--6005[label="0.0588235;2pkt 2fpkt"];
604--6040[label="0.25;2pkt 2fpkt"];
604--6152[label="0.02;1pkt 1fpkt"];
604--6294[label="0.0588235;1pkt 1fpkt"];
604--6319[label="0.333333;3pkt 3fpkt"];
604--6446[label="0.04;1pkt 1fpkt"];
604--6454[label="0.625;5pkt 5fpkt"];
604--6491[label="0.939394;31pkt 31fpkt"];
604--6521[label="1;1pkt 1fpkt"];
604--6532[label="1;2pkt 2fpkt"];
604--6533[label="0.031746;2pkt 2fpkt"];
604--6659[label="1;24pkt 24fpkt"];
604--6742[label="1;1pkt 1fpkt"];
604--6847[label="1;5pkt 5fpkt"];
604--6992[label="0.0198675;3pkt 3fpkt"];
604--7131[label="0.212121;7pkt 7fpkt"];
604--7177[label="0.147059;5pkt 5fpkt"];
604--7265[label="0.121212;4pkt 4fpkt"];
604--7309[label="0.0272727;3pkt 3fpkt"];
604--7382[label="0.75;3pkt 3fpkt"];
604--7410[label="0.0179641;3pkt 3fpkt"];
604--7509[label="0.238095;10pkt 10fpkt"];
604--7718[label="0.0588235;1pkt 1fpkt"];
604--7731[label="0.3;3pkt 3fpkt"];
604--7845[label="1;3pkt 3fpkt"];
604--7846[label="0.031746;2pkt 2fpkt"];
604--7904[label="1;24pkt 24fpkt"];
604--7940[label="1;1pkt 1fpkt"];
604--8161[label="0.147059;5pkt 5fpkt"];
604--8187[label="0.046875;3pkt 3fpkt"];
604--8201[label="0.121212;4pkt 4fpkt"];
604--8223[label="0.0272727;3pkt 3fpkt"];
604--8262[label="0.75;3pkt 3fpkt"];
604--8331[label="0.238095;10pkt 10fpkt"];
823--2759[label="1;11pkt 11fpkt"];
823--3477[label="0.0909091;1pkt 1fpkt"];
823--3495[label="0.0909091;1pkt 1fpkt"];
823--5521[label="1;11pkt 11fpkt"];
838--2478[label="0.382979;18pkt 18fpkt"];
838--3477[label="0.00900901;1pkt 1fpkt"];
838--3495[label="0.00900901;1pkt 1fpkt"];
838--3547[label="0.0833333;2pkt 2fpkt"];
838--3630[label="1;2pkt 2fpkt"];
838--3711[label="0.391304;18pkt 18fpkt"];
838--4736[label="1;11pkt 11fpkt"];
838--5079[label="1;38pkt 38fpkt"];
838--5185[label="0.2;1pkt 1fpkt"];
838--6118[label="1;2pkt 2fpkt"];
838--6801[label="1;10pkt 10fpkt"];
838--6998[label="1;38pkt 38fpkt"];
838--7064[label="0.25;1pkt 1fpkt"];
838--7971[label="1;10pkt 10fpkt"];
838--8071[label="1;38pkt 38fpkt"];
850--1425[label="1;10pkt 10fpkt"];
850--2809[label="0.0175439;1pkt 1fpkt"];
850--3431[label="0.0175439;1pkt 1fpkt"];
850--3477[label="0.0175439;1pkt 1fpkt"];
850--3495[label="0.0175439;1pkt 1fpkt"];
850--4174[label="0.125;1pkt 1fpkt"];
850--4841[label="0.0175439;1pkt 1fpkt"];
850--4956[label="0.8;4pkt 4fpkt"];
850--5352[label="0.925926;25pkt 25fpkt"];
850--6018[label="0.7;21pkt 21fpkt"];
850--6454[label="0.125;1pkt 1fpkt"];
850--7580[label="0.724138;21pkt 21fpkt"];
888--1191[label="1;22pkt 22fpkt"];
888--3535[label="0.142857;1pkt 1fpkt"];
888--4005[label="1;21pkt 21fpkt"];
888--5726[label="0.015873;1pkt 1fpkt"];
888--6340[label="1;21pkt 21fpkt"];
888--7279[label="0.0833333;1pkt 1fpkt"];
1094--4504[label="1;24pkt 24fpkt"];
1094--6659[label="1;24pkt 24fpkt"];
1094--7904[label="1;24pkt 24fpkt"];
1191--4005[label="1;21pkt 21fpkt"];
1191--6340[label="1;21pkt 21fpkt"];
1425--5352[label="1;10pkt 10fpkt"];
2128--3159[label="1;16pkt 16fpkt"];
2128--3477[label="0.0625;1pkt 1fpkt"];
2128--3495[label="0.0625;1pkt 1fpkt"];
2153--3935[label="0.352941;6pkt 6fpkt"];
2153--4161[label="0.04;1pkt 1fpkt"];
2153--4257[label="0.117647;2pkt 2fpkt"];
2153--5032[label="0.5;1pkt 1fpkt"];
2153--6294[label="0.352941;6pkt 6fpkt"];
2153--6446[label="0.04;1pkt 1fpkt"];
2153--6508[label="0.117647;2pkt 2fpkt"];
2153--7718[label="0.352941;6pkt 6fpkt"];
2153--7831[label="0.117647;2pkt 2fpkt"];
2260--5185[label="0.2;1pkt 1fpkt"];
2260--7064[label="0.25;1pkt 1fpkt"];
2478--2583[label="0.148936;7pkt 7fpkt"];
2478--3711[label="1;46pkt 46fpkt"];
2546--5917[label="0.965517;28pkt 28fpkt"];
2546--7509[label="0.965517;28pkt 28fpkt"];
2546--8331[label="0.965517;28pkt 28fpkt"];
2583--2624[label="1;102pkt 102fpkt"];
2583--3379[label="1;102pkt 102fpkt"];
2583--3498[label="0.375;3pkt 3fpkt"];
2583--3683[label="1;102pkt 102fpkt"];
2583--3711[label="0.152174;7pkt 7fpkt"];
2583--4764[label="0.0135135;1pkt 1fpkt"];
2583--4929[label="0.0425532;2pkt 2fpkt"];
2583--5774[label="0.189189;7pkt 7fpkt"];
2583--6040[label="0.375;3pkt 3fpkt"];
2583--6151[label="1;102pkt 102fpkt"];
2583--7641[label="1;102pkt 102fpkt"];
2624--3379[label="1;102pkt 102fpkt"];
2624--3683[label="1;102pkt 102fpkt"];
2624--6151[label="1;102pkt 102fpkt"];
2624--7641[label="1;102pkt 102fpkt"];
2759--3477[label="0.0909091;1pkt 1fpkt"];
2759--3495[label="0.0909091;1pkt 1fpkt"];
2759--5521[label="1;11pkt 11fpkt"];
3159--3477[label="0.0625;1pkt 1fpkt"];
3159--3495[label="0.0625;1pkt 1fpkt"];
3379--3683[label="1;102pkt 102fpkt"];
3379--6151[label="1;102pkt 102fpkt"];
3379--7641[label="1;102pkt 102fpkt"];
3498--6040[label="1;8pkt 8fpkt"];
3630--6118[label="1;2pkt 2fpkt"];
3683--6151[label="1;102pkt 102fpkt"];
3683--7641[label="1;102pkt 102fpkt"];
3935--6294[label="1;17pkt 17fpkt"];
3935--7718[label="1;17pkt 17fpkt"];
3978--6319[label="1;9pkt 9fpkt"];
3978--7731[label="1;10pkt 10fpkt"];
4005--6340[label="1;21pkt 21fpkt"];
4161--6446[label="1;25pkt 25fpkt"];
4174--6454[label="1;8pkt 8fpkt"];
4229--6491[label="1;33pkt 33fpkt"];
4257--6508[label="1;17pkt 17fpkt"];
4257--7831[label="1;17pkt 17fpkt"];
4274--6521[label="1;1pkt 1fpkt"];
4298--6532[label="1;2pkt 2fpkt"];
4298--7845[label="1;2pkt 2fpkt"];
4504--6659[label="1;24pkt 24fpkt"];
4504--7904[label="1;24pkt 24fpkt"];
4634--6742[label="1;1pkt 1fpkt"];
4634--7940[label="1;1pkt 1fpkt"];
4736--6801[label="1;10pkt 10fpkt"];
4736--7971[label="1;10pkt 10fpkt"];
4816--6847[label="1;5pkt 5fpkt"];
5079--6998[label="1;38pkt 38fpkt"];
5079--8071[label="1;38pkt 38fpkt"];
5185--7064[label="1;4pkt 4fpkt"];
5286--7131[label="1;33pkt 33fpkt"];
5360--7177[label="1;34pkt 34fpkt"];
5360--8161[label="1;34pkt 34fpkt"];
5508--7265[label="1;33pkt 33fpkt"];
5508--8201[label="1;33pkt 33fpkt"];
5718--7382[label="1;4pkt 4fpkt"];
5718--8262[label="1;4pkt 4fpkt"];
5917--7509[label="1;42pkt 42fpkt"];
5917--8331[label="1;42pkt 42fpkt"];
6018--7580[label="1;29pkt 29fpkt"];
6151--7641[label="1;102pkt 102fpkt"];
6294--7718[label="1;17pkt 17fpkt"];
6319--7731[label="1;9pkt 9fpkt"];
6508--7831[label="1;17pkt 17fpkt"];
6532--7845[label="1;2pkt 2fpkt"];
6659--7904[label="1;24pkt 24fpkt"];
6742--7940[label="1;1pkt 1fpkt"];
6801--7971[label="1;10pkt 10fpkt"];
6998--8071[label="1;38pkt 38fpkt"];
7177--8161[label="1;34pkt 34fpkt"];
7265--8201[label="1;33pkt 33fpkt"];
7382--8262[label="1;4pkt 4fpkt"];
7509--8331[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.24" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
3501[label="197.228.36.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6043[label="197.228.36.0;1pkt 1fpkt", shape=invtriangle, color=brown];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.228.36.0:3151, 192.9.87.227:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3151: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3501--6043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.87.227" dst_port="80" src_ip="197.228.36.0" src_port="3151"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
3512[label="197.228.36.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6048[label="197.228.36.1;1pkt 1fpkt", shape=invtriangle, color=brown];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.228.36.1:4749, 215.67.46.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4749: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3512--6048[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.67.46.169" dst_port="80" src_ip="197.228.36.1" src_port="4749"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.216.83.1"/>
    </slice>
    <from sec="1118034076" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
3515[label="196.42.84.1;130pkt 130fpkt", shape=pentagon, color=darkviolet];
6051[label="196.42.84.1;130pkt 130fpkt", shape=invtriangle, color=brown];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.84.1:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4534: (0.769231%)&lt;BR/&gt; 3762: (0.769231%)&lt;BR/&gt; 3448: (0.769231%)&lt;BR/&gt; 4991: (0.384615%)&gt;];
}
3515--6051[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="196.42.84.1"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
3524[label="193.203.216.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6056[label="193.203.216.1;1pkt 1fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.203.216.1:80, 197.77.47.160:53836}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53836: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3524--6056[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.47.160" dst_port="53836" src_ip="193.203.216.1" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.85.72.2"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.196.125.2"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
3539[label="197.228.36.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6061[label="197.228.36.3;2pkt 2fpkt", shape=invtriangle, color=brown];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.228.36.3:4238, 55.69.54.149:80}[50%]&lt;BR/&gt;{197.228.36.3:4746, 215.67.46.169:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4746: (33.3333%)&lt;BR/&gt; 4238: (16.6667%)&gt;];
}
3539--6061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.67.46.169" dst_port="80" src_ip="197.228.36.3" src_port="4746"/>
      <filter dst_ip="55.69.54.149" dst_port="80" src_ip="197.228.36.3" src_port="4238"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
3543[label="218.181.132.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6064[label="218.181.132.3;1pkt 1fpkt", shape=invtriangle, color=brown];
7601[label="218.181.132.3;1pkt 1fpkt", shape=invhouse, color=bisque];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.181.132.3:0, 197.66.101.145:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3543--6064[label="1;1pkt 1fpkt"];
3543--7601[label="1;1pkt 1fpkt"];
6064--7601[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.145" src_ip="218.181.132.3"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.0.133.3"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
3545[label="176.196.176.3;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6066[label="176.196.176.3;3pkt 3fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.176.3:4154, 52.21.89.61:80}[33.3333%]&lt;BR/&gt;{176.196.176.3:4170, 53.160.138.141:80}[33.3333%]&lt;BR/&gt;{176.196.176.3:4171, 53.160.138.141:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4171: (16.6667%)&lt;BR/&gt; 4170: (16.6667%)&lt;BR/&gt; 4154: (16.6667%)&gt;];
}
3545--6066[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="53.160.138.141" dst_port="80" src_ip="176.196.176.3" src_port="4171"/>
      <filter dst_ip="53.160.138.141" dst_port="80" src_ip="176.196.176.3" src_port="4170"/>
      <filter dst_ip="52.21.89.61" dst_port="80" src_ip="176.196.176.3" src_port="4154"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3553[label="219.160.67.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6069[label="219.160.67.4;1pkt 1fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.160.67.4:1163, 133.167.233.27:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1163: (50%)&gt;];
}
3553--6069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.233.27" dst_port="1434" src_ip="219.160.67.4" src_port="1163"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
3562[label="193.203.216.4;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6074[label="193.203.216.4;23pkt 23fpkt", shape=invtriangle, color=brown];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.203.216.4:80, 197.77.47.160:*}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53850: (2.12766%)&lt;BR/&gt; 53839: (2.12766%)&lt;BR/&gt; 53829: (2.12766%)&lt;BR/&gt; 53823: (2.12766%)&gt;];
}
3562--6074[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.47.160" src_ip="193.203.216.4" src_port="80"/>
    </slice>
    <from sec="1118034824" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
3581[label="183.82.33.6;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6084[label="183.82.33.6;4pkt 4fpkt", shape=invtriangle, color=brown];
7612[label="183.82.33.6;4pkt 4fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.33.6:2144, 192.9.56.2:1863}[25%]&lt;BR/&gt;{183.82.33.6:2290, 192.9.61.19:1863}[25%]&lt;BR/&gt;{183.82.33.6:2291, 192.9.61.82:1863}[25%]&lt;BR/&gt;{183.82.33.6:2302, 192.9.61.97:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2302: (13.6364%)&lt;BR/&gt; 2291: (13.6364%)&lt;BR/&gt; 2290: (13.6364%)&lt;BR/&gt; 2144: (9.09091%)&gt;];
}
3581--6084[label="1;3pkt 3fpkt"];
3581--7612[label="1;3pkt 3fpkt"];
6084--7612[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.61.97" dst_port="1863" src_ip="183.82.33.6" src_port="2302"/>
      <filter dst_ip="192.9.61.82" dst_port="1863" src_ip="183.82.33.6" src_port="2291"/>
      <filter dst_ip="192.9.61.19" dst_port="1863" src_ip="183.82.33.6" src_port="2290"/>
      <filter dst_ip="192.9.56.2" dst_port="1863" src_ip="183.82.33.6" src_port="2144"/>
    </slice>
    <from sec="1118034014" usec="0"/>
    <to sec="1118034856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3584[label="209.243.82.6;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6087[label="209.243.82.6;8pkt 8fpkt", shape=invtriangle, color=brown];
7613[label="209.243.82.6;8pkt 8fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.243.82.6:80, 128.65.51.157:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53600: (6.25%)&lt;BR/&gt; 53597: (6.25%)&lt;BR/&gt; 53596: (6.25%)&lt;BR/&gt; 53595: (6.25%)&gt;];
}
3584--6087[label="1;8pkt 8fpkt"];
3584--7613[label="1;8pkt 8fpkt"];
6087--7613[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.51.157" src_ip="209.243.82.6" src_port="80"/>
    </slice>
    <from sec="1118034086" usec="0"/>
    <to sec="1118034143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.81.150.6"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
3587[label="193.203.216.6;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6090[label="193.203.216.6;23pkt 23fpkt", shape=invtriangle, color=brown];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.203.216.6:80, 197.77.47.160:*}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53852: (2.12766%)&lt;BR/&gt; 53840: (2.12766%)&lt;BR/&gt; 53834: (2.12766%)&lt;BR/&gt; 53826: (2.12766%)&gt;];
}
3587--6090[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.47.160" src_ip="193.203.216.6" src_port="80"/>
    </slice>
    <from sec="1118034824" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
3588[label="134.4.229.6;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6091[label="134.4.229.6;6pkt 6fpkt", shape=invtriangle, color=brown];
7616[label="134.4.229.6;6pkt 6fpkt", shape=invhouse, color=bisque];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.4.229.6:*, 176.196.137.109:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62609: (8.33333%)&lt;BR/&gt; 62608: (8.33333%)&lt;BR/&gt; 62607: (8.33333%)&lt;BR/&gt; 62606: (8.33333%)&gt;];
}
3588--6091[label="1;6pkt 6fpkt"];
3588--7616[label="1;6pkt 6fpkt"];
6091--7616[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.137.109" dst_port="80" src_ip="134.4.229.6"/>
    </slice>
    <from sec="1118034818" usec="0"/>
    <to sec="1118034853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.53.3.7"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
3592[label="215.24.40.7;243pkt 243fpkt", shape=pentagon, color=darkviolet];
6094[label="215.24.40.7;243pkt 243fpkt", shape=invtriangle, color=brown];
7618[label="215.24.40.7;243pkt 243fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.24.40.7:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3592--6094[label="1;243pkt 243fpkt"];
3592--7618[label="1;243pkt 243fpkt"];
6094--7618[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.24.40.7" src_port="1029"/>
    </slice>
    <from sec="1118034725" usec="0"/>
    <to sec="1118034763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
320[label="133.167.13.136;s;2374pkt 2374fpkt", shape=diamond, color=yellow];
416[label="133.167.43.48;s;1896pkt 1896fpkt", shape=diamond, color=yellow];
522[label="49.139.4.130;d;1367pkt 1367fpkt", shape=diamond, color=yellow];
549[label="193.83.178.21;d;145pkt 145fpkt", shape=diamond, color=yellow];
625[label="49.139.4.131;d;854pkt 854fpkt", shape=diamond, color=yellow];
715[label="216.217.120.114;d;4pkt 4fpkt", shape=diamond, color=yellow];
915[label="193.83.178.27;d;35pkt 35fpkt", shape=diamond, color=yellow];
1020[label="133.167.10.190;s;5pkt 5fpkt", shape=diamond, color=yellow];
1161[label="133.167.54.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
1891[label="133.167.20.80;s;116pkt 116fpkt", shape=diamond, color=yellow];
2061[label="197.66.102.140;s;159pkt 159fpkt", shape=diamond, color=yellow];
2320[label="203.21.128.64;d;9pkt 9fpkt", shape=diamond, color=yellow];
2686[label="133.167.43.48;s;402pkt 402fpkt", shape=hexagon, color=black];
3134[label="197.66.102.140;s;159pkt 159fpkt", shape=hexagon, color=black];
3164[label="133.167.20.80;s;116pkt 116fpkt", shape=hexagon, color=black];
3199[label="133.167.13.136;s;2374pkt 2374fpkt", shape=hexagon, color=black];
3211[label="133.167.10.190;s;5pkt 5fpkt", shape=hexagon, color=black];
3276[label="133.167.54.0;s;1pkt 1fpkt", shape=hexagon, color=black];
3604[label="133.167.39.8;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4046[label="133.167.43.48;2006pkt 2006fpkt", shape=pentagon, color=darkviolet];
4917[label="133.167.13.136;2373pkt 2373fpkt", shape=pentagon, color=darkviolet];
4971[label="197.66.102.140;163pkt 163fpkt", shape=pentagon, color=darkviolet];
5489[label="133.167.10.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6102[label="133.167.39.8;11pkt 11fpkt", shape=invtriangle, color=brown];
6904[label="133.167.13.136;2373pkt 2373fpkt", shape=invtriangle, color=brown];
7252[label="133.167.10.190;2pkt 2fpkt", shape=invtriangle, color=brown];
7621[label="133.167.39.8;10pkt 10fpkt", shape=invhouse, color=bisque];
8027[label="133.167.13.136;2359pkt 2359fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.13.136:*, 49.139.4.130:80}[28.3569%]&lt;BR/&gt;{133.167.43.48:52183, *:53}[22.5841%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.8908%)&lt;BR/&gt; 53: (11.4278%)&lt;BR/&gt; 52183: (6.04242%)&lt;BR/&gt; 0: (2.70564%)&lt;BR/&gt; 33701: (0.142266%)&gt;];
}
320--522[label="0.98098;1341pkt 1341fpkt"];
320--549[label="0.993103;144pkt 144fpkt"];
320--625[label="0.973068;831pkt 831fpkt"];
320--915[label="0.971429;34pkt 34fpkt"];
320--3199[label="1;2374pkt 2374fpkt"];
320--3478[label="0.0914069;217pkt 217fpkt"];
320--3485[label="0.00084246;2pkt 2fpkt"];
320--4917[label="1;2373pkt 2373fpkt"];
320--6904[label="1;2373pkt 2373fpkt"];
320--8027[label="1;2359pkt 2359fpkt"];
416--610[label="0.0172414;1pkt 1fpkt"];
416--652[label="0.1;1pkt 1fpkt"];
416--715[label="0.25;1pkt 1fpkt"];
416--748[label="0.0104167;1pkt 1fpkt"];
416--822[label="0.1;1pkt 1fpkt"];
416--1754[label="0.00917431;1pkt 1fpkt"];
416--2016[label="0.016129;1pkt 1fpkt"];
416--2029[label="0.00934579;1pkt 1fpkt"];
416--2233[label="0.00990099;1pkt 1fpkt"];
416--2288[label="0.0103093;1pkt 1fpkt"];
416--2454[label="0.0104167;1pkt 1fpkt"];
416--2474[label="0.0102041;1pkt 1fpkt"];
416--2686[label="1;402pkt 402fpkt"];
416--3476[label="0.0501055;95pkt 95fpkt"];
416--4046[label="1;1896pkt 1896fpkt"];
522--973[label="0.00146306;2pkt 2fpkt"];
522--3199[label="0.98098;1341pkt 1341fpkt"];
522--3478[label="0.0182882;25pkt 25fpkt"];
522--3485[label="0.0051207;7pkt 7fpkt"];
522--4756[label="0.00658376;9pkt 9fpkt"];
522--4917[label="0.98098;1341pkt 1341fpkt"];
522--5314[label="0.00146306;2pkt 2fpkt"];
522--6815[label="0.00658376;9pkt 9fpkt"];
522--6904[label="0.98098;1341pkt 1341fpkt"];
522--7155[label="0.00146306;2pkt 2fpkt"];
522--7979[label="0.00658376;9pkt 9fpkt"];
522--8027[label="0.98098;1341pkt 1341fpkt"];
522--8150[label="0.00146306;2pkt 2fpkt"];
549--2061[label="0.00689655;1pkt 1fpkt"];
549--3134[label="0.00689655;1pkt 1fpkt"];
549--3199[label="0.993103;144pkt 144fpkt"];
549--4917[label="0.993103;144pkt 144fpkt"];
549--4971[label="0.00689655;1pkt 1fpkt"];
549--6904[label="0.993103;144pkt 144fpkt"];
549--8027[label="0.993103;144pkt 144fpkt"];
625--973[label="0.00117096;1pkt 1fpkt"];
625--2961[label="0.00117096;1pkt 1fpkt"];
625--3199[label="0.973068;831pkt 831fpkt"];
625--3478[label="0.235363;201pkt 201fpkt"];
625--3485[label="0.00117096;1pkt 1fpkt"];
625--4756[label="0.0128806;11pkt 11fpkt"];
625--4917[label="0.973068;831pkt 831fpkt"];
625--5314[label="0.00117096;1pkt 1fpkt"];
625--5327[label="0.00117096;1pkt 1fpkt"];
625--6815[label="0.0128806;11pkt 11fpkt"];
625--6904[label="0.973068;831pkt 831fpkt"];
625--7155[label="0.00117096;1pkt 1fpkt"];
625--7979[label="0.0128806;11pkt 11fpkt"];
625--8027[label="0.955504;816pkt 816fpkt"];
625--8150[label="0.00117096;1pkt 1fpkt"];
625--8154[label="0.00117096;1pkt 1fpkt"];
715--1020[label="0.25;1pkt 1fpkt"];
715--1161[label="1;1pkt 1fpkt"];
715--2061[label="0.25;1pkt 1fpkt"];
715--2686[label="0.25;1pkt 1fpkt"];
715--3134[label="0.25;1pkt 1fpkt"];
715--3211[label="0.25;1pkt 1fpkt"];
715--3276[label="1;1pkt 1fpkt"];
715--4046[label="0.25;1pkt 1fpkt"];
715--4971[label="0.25;1pkt 1fpkt"];
715--5489[label="1;1pkt 1fpkt"];
715--7252[label="0.5;1pkt 1fpkt"];
915--2061[label="0.0285714;1pkt 1fpkt"];
915--3134[label="0.0285714;1pkt 1fpkt"];
915--3199[label="0.971429;34pkt 34fpkt"];
915--4917[label="0.942857;33pkt 33fpkt"];
915--4971[label="0.0285714;1pkt 1fpkt"];
915--6904[label="0.942857;33pkt 33fpkt"];
915--8027[label="0.971429;34pkt 34fpkt"];
1020--3211[label="1;5pkt 5fpkt"];
1020--5489[label="1;1pkt 1fpkt"];
1020--7252[label="1;2pkt 2fpkt"];
1161--3276[label="1;1pkt 1fpkt"];
1891--2320[label="0.222222;2pkt 2fpkt"];
1891--3164[label="1;116pkt 116fpkt"];
2061--2320[label="0.111111;1pkt 1fpkt"];
2061--2451[label="0.0833333;1pkt 1fpkt"];
2061--3134[label="1;159pkt 159fpkt"];
2061--4971[label="1;159pkt 159fpkt"];
2320--3134[label="0.111111;1pkt 1fpkt"];
2320--3164[label="0.222222;2pkt 2fpkt"];
2320--3604[label="0.111111;1pkt 1fpkt"];
2320--4063[label="0.333333;3pkt 3fpkt"];
2320--4971[label="0.111111;1pkt 1fpkt"];
2320--6102[label="0.222222;2pkt 2fpkt"];
2320--7621[label="0.111111;1pkt 1fpkt"];
2686--3476[label="0.0522388;21pkt 21fpkt"];
2686--4046[label="1;402pkt 402fpkt"];
3134--4971[label="1;159pkt 159fpkt"];
3199--3478[label="0.0914069;217pkt 217fpkt"];
3199--3485[label="0.00084246;2pkt 2fpkt"];
3199--4917[label="1;2373pkt 2373fpkt"];
3199--6904[label="1;2373pkt 2373fpkt"];
3199--8027[label="1;2359pkt 2359fpkt"];
3211--5489[label="1;1pkt 1fpkt"];
3211--7252[label="1;2pkt 2fpkt"];
3604--6102[label="1;10pkt 10fpkt"];
3604--7621[label="1;10pkt 10fpkt"];
4917--6904[label="1;2373pkt 2373fpkt"];
4917--8027[label="0.999576;2358pkt 2358fpkt"];
5489--7252[label="1;1pkt 1fpkt"];
6102--7621[label="1;10pkt 10fpkt"];
6904--8027[label="0.999576;2358pkt 2358fpkt"];
</description>
    <slice>
      <filter dst_ip="49.139.4.130" dst_port="80" src_ip="133.167.13.136"/>
      <filter dst_port="53" src_ip="133.167.43.48" src_port="52183"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
3606[label="87.20.89.8;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6104[label="87.20.89.8;31pkt 31fpkt", shape=invtriangle, color=brown];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.20.89.8:*, 175.199.142.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4385: (1.63934%)&lt;BR/&gt; 4383: (1.63934%)&lt;BR/&gt; 4382: (1.63934%)&lt;BR/&gt; 4381: (1.63934%)&gt;];
}
3606--6104[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="87.20.89.8"/>
    </slice>
    <from sec="1118034872" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
3618[label="176.196.20.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6110[label="176.196.20.9;2pkt 2fpkt", shape=invtriangle, color=brown];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.20.9:61368, 200.24.185.70:80}[50%]&lt;BR/&gt;{176.196.20.9:61399, 205.0.192.202:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61399: (33.3333%)&lt;BR/&gt; 61368: (16.6667%)&gt;];
}
3618--6110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.192.202" dst_port="80" src_ip="176.196.20.9" src_port="61399"/>
      <filter dst_ip="200.24.185.70" dst_port="80" src_ip="176.196.20.9" src_port="61368"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.78.163.9"/>
    </slice>
    <from sec="1118034036" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
3634[label="197.77.204.9;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6122[label="197.77.204.9;10pkt 10fpkt", shape=invtriangle, color=brown];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.204.9:*, 55.210.8.168:80}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1838: (5.26316%)&lt;BR/&gt; 1836: (5.26316%)&lt;BR/&gt; 1834: (5.26316%)&lt;BR/&gt; 1830: (5.26316%)&gt;];
}
3634--6122[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="55.210.8.168" dst_port="80" src_ip="197.77.204.9"/>
    </slice>
    <from sec="1118034169" usec="0"/>
    <to sec="1118034854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
3636[label="53.120.240.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6123[label="53.120.240.9;1pkt 1fpkt", shape=invtriangle, color=brown];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.120.240.9:80, 197.66.101.172:64425}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64425: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3636--6123[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.172" dst_port="64425" src_ip="53.120.240.9" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3637[label="81.137.55.10;204pkt 204fpkt", shape=pentagon, color=darkviolet];
6124[label="81.137.55.10;204pkt 204fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.137.55.10:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3637--6124[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="81.137.55.10" src_port="1026"/>
    </slice>
    <from sec="1118034766" usec="0"/>
    <to sec="1118034799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
3644[label="197.66.116.10;80pkt 80fpkt", shape=pentagon, color=darkviolet];
6127[label="197.66.116.10;80pkt 80fpkt", shape=invtriangle, color=brown];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.116.10:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3644--6127[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter src_ip="197.66.116.10"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.240.192.11"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.138.66.12"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
3667[label="196.78.119.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6141[label="196.78.119.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.78.119.12:80, 176.196.129.74:2380}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2380: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3667--6141[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.129.74" dst_port="2380" src_ip="196.78.119.12" src_port="80"/>
    </slice>
    <from sec="1118034637" usec="0"/>
    <to sec="1118034679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
3668[label="176.196.129.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6142[label="176.196.129.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.12:4507, 192.9.62.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4507: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3668--6142[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.62.72" dst_port="80" src_ip="176.196.129.12" src_port="4507"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
3676[label="183.82.42.13;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6147[label="183.82.42.13;23pkt 23fpkt", shape=invtriangle, color=brown];
7639[label="183.82.42.13;23pkt 23fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.42.13:15083, *:*}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15083: (43.4783%)&lt;BR/&gt; 64060: (2.17391%)&lt;BR/&gt; 63327: (2.17391%)&lt;BR/&gt; 60801: (2.17391%)&lt;BR/&gt; 60323: (2.17391%)&gt;];
}
3676--6147[label="1;23pkt 23fpkt"];
3676--7639[label="1;23pkt 23fpkt"];
6147--7639[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.42.13" src_port="15083"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.146.153.14"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.186.93.15"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
3697[label="87.17.130.15;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6160[label="87.17.130.15;26pkt 26fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.17.130.15:82, 176.196.1.110:*}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 82: (48.1132%)&lt;BR/&gt; 0: (3.77358%)&lt;BR/&gt; 28785: (1.88679%)&lt;BR/&gt; 17909: (1.88679%)&lt;BR/&gt; 17857: (1.88679%)&gt;];
}
3697--6160[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.1.110" src_ip="87.17.130.15" src_port="82"/>
    </slice>
    <from sec="1118034619" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
3701[label="176.197.26.16;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6162[label="176.197.26.16;40pkt 40fpkt", shape=invtriangle, color=brown];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.26.16:*, 49.180.145.183:80}[53.6585%]&lt;BR/&gt;{176.197.26.16:*, 216.65.90.144:80}[26.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7654%)&lt;BR/&gt; 63902: (1.23457%)&lt;BR/&gt; 63901: (1.23457%)&lt;BR/&gt; 63832: (1.23457%)&lt;BR/&gt; 63734: (1.23457%)&gt;];
}
3701--6162[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="49.180.145.183" dst_port="80" src_ip="176.197.26.16"/>
      <filter dst_ip="216.65.90.144" dst_port="80" src_ip="176.197.26.16"/>
    </slice>
    <from sec="1118034085" usec="0"/>
    <to sec="1118034866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3704[label="183.82.39.16;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6164[label="183.82.39.16;5pkt 5fpkt", shape=invtriangle, color=brown];
7648[label="183.82.39.16;6pkt 6fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.39.16:*, *:1863}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (41.1765%)&lt;BR/&gt; 2610: (8.82353%)&lt;BR/&gt; 2608: (8.82353%)&lt;BR/&gt; 2580: (8.82353%)&lt;BR/&gt; 2575: (8.82353%)&gt;];
}
3704--6164[label="1;5pkt 5fpkt"];
3704--7648[label="1;6pkt 6fpkt"];
6164--7648[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="183.82.39.16"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
3710[label="197.66.102.16;65pkt 65fpkt", shape=pentagon, color=darkviolet];
6168[label="197.66.102.16;64pkt 64fpkt", shape=invtriangle, color=brown];
7649[label="197.66.102.16;65pkt 65fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.102.16:3699, *:53}[64.6154%]&lt;BR/&gt;{197.66.102.16:80, 192.9.48.25:*}[26.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3699: (32.2165%)&lt;BR/&gt; 53: (32.2165%)&lt;BR/&gt; 80: (13.9175%)&lt;BR/&gt; 0: (7.73196%)&lt;BR/&gt; 58244: (0.773196%)&gt;];
}
3710--6168[label="1;64pkt 64fpkt"];
3710--7649[label="1;65pkt 65fpkt"];
6168--7649[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.48.25" src_ip="197.66.102.16" src_port="80"/>
      <filter dst_port="53" src_ip="197.66.102.16" src_port="3699"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="140.42.146.16"/>
    </slice>
    <from sec="1118034062" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
505[label="183.144.90.37;d;213pkt 213fpkt", shape=diamond, color=yellow];
537[label="197.44.114.76;s;2pkt 2fpkt", shape=diamond, color=yellow];
3146[label="183.144.90.37;d;163pkt 163fpkt", shape=hexagon, color=black];
4320[label="197.44.114.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6544[label="197.44.114.76;1pkt 1fpkt", shape=invtriangle, color=brown];
7849[label="197.44.114.76;1pkt 1fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 183.144.90.37:53}[50.2347%]&lt;BR/&gt;{*:53, 183.144.90.37:4671}[40.3756%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.5879%)&lt;BR/&gt; 4671: (20.7349%)&lt;BR/&gt; 25: (4.72441%)&lt;BR/&gt; 1053: (0.918635%)&lt;BR/&gt; 28740: (0.787402%)&gt;];
}
505--537[label="1;2pkt 2fpkt"];
505--2235[label="0.0136986;1pkt 1fpkt"];
505--3146[label="1;163pkt 163fpkt"];
505--3323[label="0.0136986;1pkt 1fpkt"];
505--3476[label="0.0704225;15pkt 15fpkt"];
505--3876[label="0.0133333;1pkt 1fpkt"];
505--3925[label="0.0181818;1pkt 1fpkt"];
505--4049[label="0.030303;1pkt 1fpkt"];
505--4320[label="1;1pkt 1fpkt"];
505--4815[label="0.0135135;1pkt 1fpkt"];
505--4982[label="0.0322581;1pkt 1fpkt"];
505--5381[label="0.0208333;1pkt 1fpkt"];
505--6366[label="0.0294118;1pkt 1fpkt"];
505--6544[label="1;1pkt 1fpkt"];
505--7756[label="0.0294118;1pkt 1fpkt"];
505--7849[label="1;1pkt 1fpkt"];
537--3146[label="1;2pkt 2fpkt"];
537--4320[label="1;1pkt 1fpkt"];
537--6544[label="1;1pkt 1fpkt"];
537--7849[label="1;1pkt 1fpkt"];
3146--3323[label="0.0136986;1pkt 1fpkt"];
3146--3476[label="0.0920245;15pkt 15fpkt"];
3146--3876[label="0.0133333;1pkt 1fpkt"];
3146--3925[label="0.0181818;1pkt 1fpkt"];
3146--4049[label="0.030303;1pkt 1fpkt"];
3146--4320[label="1;1pkt 1fpkt"];
3146--4815[label="0.0135135;1pkt 1fpkt"];
3146--4982[label="0.0322581;1pkt 1fpkt"];
3146--5381[label="0.0208333;1pkt 1fpkt"];
3146--6366[label="0.0294118;1pkt 1fpkt"];
3146--6544[label="1;1pkt 1fpkt"];
3146--7756[label="0.0294118;1pkt 1fpkt"];
3146--7849[label="1;1pkt 1fpkt"];
4320--6544[label="1;1pkt 1fpkt"];
4320--7849[label="1;1pkt 1fpkt"];
6544--7849[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="183.144.90.37" dst_port="53"/>
      <filter dst_ip="183.144.90.37" dst_port="4671" src_port="53"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
3735[label="176.197.113.18;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6182[label="176.197.113.18;8pkt 8fpkt", shape=invtriangle, color=brown];
7658[label="176.197.113.18;9pkt 9fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.113.18:*, 85.64.13.27:80}[44.4444%]&lt;BR/&gt;{176.197.113.18:*, 55.56.122.66:80}[22.2222%]&lt;BR/&gt;{176.197.113.18:*, 203.215.44.155:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59996: (6%)&lt;BR/&gt; 59995: (6%)&lt;BR/&gt; 59985: (6%)&lt;BR/&gt; 59983: (6%)&gt;];
}
3735--6182[label="1;8pkt 8fpkt"];
3735--7658[label="1;8pkt 8fpkt"];
6182--7658[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="85.64.13.27" dst_port="80" src_ip="176.197.113.18"/>
      <filter dst_ip="203.215.44.155" dst_port="80" src_ip="176.197.113.18"/>
      <filter dst_ip="55.56.122.66" dst_port="80" src_ip="176.197.113.18"/>
    </slice>
    <from sec="1118034261" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
3736[label="219.176.192.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6183[label="219.176.192.18;3pkt 3fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.176.192.18:4288, 183.174.133.53:1434}[33.3333%]&lt;BR/&gt;{219.176.192.18:4288, 183.144.177.180:1434}[33.3333%]&lt;BR/&gt;{219.176.192.18:4288, 196.8.90.181:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4288: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
3736--6183[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="196.8.90.181" dst_port="1434" src_ip="219.176.192.18" src_port="4288"/>
      <filter dst_ip="183.144.177.180" dst_port="1434" src_ip="219.176.192.18" src_port="4288"/>
      <filter dst_ip="183.174.133.53" dst_port="1434" src_ip="219.176.192.18" src_port="4288"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
764[label="176.197.67.9;s;213pkt 213fpkt", shape=diamond, color=yellow];
1665[label="87.1.1.99;d;32pkt 32fpkt", shape=diamond, color=yellow];
2815[label="176.197.67.9;s;166pkt 166fpkt", shape=hexagon, color=black];
3020[label="87.1.1.99;d;32pkt 32fpkt", shape=hexagon, color=black];
3624[label="176.197.67.9;224pkt 224fpkt", shape=pentagon, color=darkviolet];
6115[label="176.197.67.9;224pkt 224fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.67.9:*, 87.1.16.132:80}[22.7679%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7093%)&lt;BR/&gt; 2529: (0.505051%)&lt;BR/&gt; 2526: (0.505051%)&lt;BR/&gt; 2522: (0.505051%)&lt;BR/&gt; 123: (0.448934%)&gt;];
}
764--1117[label="0.0307692;2pkt 2fpkt"];
764--1591[label="0.0212766;1pkt 1fpkt"];
764--1665[label="1;32pkt 32fpkt"];
764--1825[label="0.0338983;4pkt 4fpkt"];
764--2454[label="0.0104167;1pkt 1fpkt"];
764--2815[label="1;166pkt 166fpkt"];
764--3020[label="1;32pkt 32fpkt"];
764--3478[label="0.295775;63pkt 63fpkt"];
764--3485[label="0.028169;6pkt 6fpkt"];
764--3624[label="1;213pkt 213fpkt"];
764--6115[label="1;213pkt 213fpkt"];
1665--2815[label="0.9375;30pkt 30fpkt"];
1665--3020[label="1;32pkt 32fpkt"];
1665--3478[label="0.03125;1pkt 1fpkt"];
1665--3624[label="1;32pkt 32fpkt"];
1665--6115[label="1;32pkt 32fpkt"];
2815--3020[label="0.9375;30pkt 30fpkt"];
2815--3478[label="0.379518;63pkt 63fpkt"];
2815--3624[label="1;166pkt 166fpkt"];
2815--6115[label="1;166pkt 166fpkt"];
3020--3478[label="0.03125;1pkt 1fpkt"];
3020--3624[label="1;32pkt 32fpkt"];
3020--6115[label="1;32pkt 32fpkt"];
3624--6115[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_ip="87.1.16.132" dst_port="80" src_ip="176.197.67.9"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
3744[label="176.196.40.19;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6189[label="176.196.40.19;43pkt 43fpkt", shape=invtriangle, color=brown];
7663[label="176.196.40.19;44pkt 44fpkt", shape=invhouse, color=bisque];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.40.19:*, 216.90.130.181:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 0: (7.69231%)&lt;BR/&gt; 3711: (1.15385%)&lt;BR/&gt; 3710: (1.15385%)&lt;BR/&gt; 3709: (1.15385%)&gt;];
}
3744--6189[label="1;43pkt 43fpkt"];
3744--7663[label="1;43pkt 43fpkt"];
6189--7663[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="216.90.130.181" dst_port="80" src_ip="176.196.40.19"/>
    </slice>
    <from sec="1118034013" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
3746[label="222.113.53.19;228pkt 228fpkt", shape=pentagon, color=darkviolet];
6190[label="222.113.53.19;227pkt 227fpkt", shape=invtriangle, color=brown];
7664[label="222.113.53.19;228pkt 228fpkt", shape=invhouse, color=bisque];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.113.53.19:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3746--6190[label="1;227pkt 227fpkt"];
3746--7664[label="1;228pkt 228fpkt"];
6190--7664[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="222.113.53.19" src_port="1032"/>
    </slice>
    <from sec="1118034371" usec="0"/>
    <to sec="1118034387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
3747[label="192.9.57.19;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6191[label="192.9.57.19;3pkt 3fpkt", shape=invtriangle, color=brown];
7665[label="192.9.57.19;4pkt 4fpkt", shape=invhouse, color=bisque];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.9.57.19:1863, 175.199.150.20:1538}[25%]&lt;BR/&gt;{192.9.57.19:1863, 175.199.180.22:3066}[25%]&lt;BR/&gt;{192.9.57.19:1863, 175.199.110.27:1027}[25%]&lt;BR/&gt;{192.9.57.19:1863, 175.199.80.170:2952}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3066: (15%)&lt;BR/&gt; 2952: (15%)&lt;BR/&gt; 1538: (15%)&lt;BR/&gt; 1027: (5%)&gt;];
}
3747--6191[label="1;3pkt 3fpkt"];
3747--7665[label="1;3pkt 3fpkt"];
6191--7665[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.80.170" dst_port="2952" src_ip="192.9.57.19" src_port="1863"/>
      <filter dst_ip="175.199.110.27" dst_port="1027" src_ip="192.9.57.19" src_port="1863"/>
      <filter dst_ip="175.199.180.22" dst_port="3066" src_ip="192.9.57.19" src_port="1863"/>
      <filter dst_ip="175.199.150.20" dst_port="1538" src_ip="192.9.57.19" src_port="1863"/>
    </slice>
    <from sec="1118034033" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
3749[label="133.167.70.19;40pkt 40fpkt", shape=pentagon, color=darkviolet];
6192[label="133.167.70.19;40pkt 40fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.70.19:1280, *:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1280: (43.75%)&lt;BR/&gt; 52573: (2.5%)&lt;BR/&gt; 31929: (2.5%)&lt;BR/&gt; 21623: (2.5%)&lt;BR/&gt; 64069: (1.25%)&gt;];
}
3749--6192[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.70.19" src_port="1280"/>
    </slice>
    <from sec="1118034034" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3763[label="192.85.64.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6196[label="192.85.64.20;1pkt 1fpkt", shape=invtriangle, color=brown];
7666[label="192.85.64.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.85.64.20:6699, 197.77.192.138:4196}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4196: (50%)&gt;];
}
3763--6196[label="1;1pkt 1fpkt"];
3763--7666[label="1;1pkt 1fpkt"];
6196--7666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.192.138" dst_port="4196" src_ip="192.85.64.20" src_port="6699"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
3795[label="222.152.109.23;304pkt 304fpkt", shape=pentagon, color=darkviolet];
6215[label="222.152.109.23;305pkt 305fpkt", shape=invtriangle, color=brown];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.152.109.23:1152, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1152: (50%)&gt;];
}
3795--6215[label="1;304pkt 304fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="222.152.109.23" src_port="1152"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_672{
style=filled;
color=gray75;
3813[label="196.88.58.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6223[label="196.88.58.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat672[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.88.58.25:60604, 175.199.142.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60604: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3813--6223[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="196.88.58.25" src_port="60604"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
3821[label="197.2.18.26;75pkt 75fpkt", shape=pentagon, color=darkviolet];
6227[label="197.2.18.26;75pkt 75fpkt", shape=invtriangle, color=brown];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.2.18.26:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3896: (1.33333%)&lt;BR/&gt; 4974: (0.666667%)&lt;BR/&gt; 4959: (0.666667%)&lt;BR/&gt; 4884: (0.666667%)&gt;];
}
3821--6227[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="197.2.18.26"/>
    </slice>
    <from sec="1118034076" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
3833[label="128.65.157.26;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6232[label="128.65.157.26;9pkt 9fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.157.26:80, 194.43.100.218:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49479: (5.88235%)&lt;BR/&gt; 45728: (5.88235%)&lt;BR/&gt; 45144: (5.88235%)&lt;BR/&gt; 41242: (5.88235%)&gt;];
}
3833--6232[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="194.43.100.218" src_ip="128.65.157.26" src_port="80"/>
    </slice>
    <from sec="1118034167" usec="0"/>
    <to sec="1118034872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
3845[label="196.8.24.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6236[label="196.8.24.28;1pkt 1fpkt", shape=invtriangle, color=brown];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.24.28:1582, 192.168.254.254:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1582: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3845--6236[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.254" dst_port="80" src_ip="196.8.24.28" src_port="1582"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
2090[label="176.197.38.28;s;115pkt 115fpkt", shape=diamond, color=yellow];
3847[label="176.197.38.28;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6238[label="176.197.38.28;116pkt 116fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.38.28:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2090--3847[label="0.991304;114pkt 114fpkt"];
2090--6238[label="0.991304;114pkt 114fpkt"];
3847--6238[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.38.28"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
399[label="176.196.68.94;s;334pkt 334fpkt", shape=diamond, color=yellow];
748[label="53.160.161.113;d;96pkt 96fpkt", shape=diamond, color=yellow];
1157[label="176.196.71.115;s;41pkt 41fpkt", shape=diamond, color=yellow];
1189[label="179.82.228.51;d;27pkt 27fpkt", shape=diamond, color=yellow];
1340[label="176.197.154.241;s;336pkt 336fpkt", shape=diamond, color=yellow];
1622[label="176.197.184.226;s;229pkt 229fpkt", shape=diamond, color=yellow];
1853[label="176.197.186.66;s;295pkt 295fpkt", shape=diamond, color=yellow];
2288[label="200.2.26.50;d;97pkt 97fpkt", shape=diamond, color=yellow];
2454[label="200.34.203.170;d;96pkt 96fpkt", shape=diamond, color=yellow];
2552[label="55.154.160.48;d;76pkt 76fpkt", shape=diamond, color=yellow];
2953[label="179.82.228.51;d;27pkt 27fpkt", shape=hexagon, color=black];
3345[label="176.197.154.241;s;336pkt 336fpkt", shape=hexagon, color=black];
3985[label="176.197.67.42;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4037[label="196.8.24.47;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4114[label="183.82.16.57;108pkt 108fpkt", shape=pentagon, color=darkviolet];
4517[label="176.196.68.94;339pkt 339fpkt", shape=pentagon, color=darkviolet];
4888[label="133.167.3.133;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4895[label="197.66.101.133;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4932[label="196.8.19.137;45pkt 45fpkt", shape=pentagon, color=darkviolet];
5839[label="176.197.184.226;246pkt 246fpkt", shape=pentagon, color=darkviolet];
5915[label="183.82.54.234;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5961[label="176.197.154.241;355pkt 355fpkt", shape=pentagon, color=darkviolet];
6417[label="183.82.16.57;107pkt 107fpkt", shape=invtriangle, color=brown];
6667[label="176.196.68.94;340pkt 340fpkt", shape=invtriangle, color=brown];
6887[label="133.167.3.133;69pkt 69fpkt", shape=invtriangle, color=brown];
6890[label="197.66.101.133;68pkt 68fpkt", shape=invtriangle, color=brown];
6914[label="196.8.19.137;45pkt 45fpkt", shape=invtriangle, color=brown];
7464[label="176.197.184.226;245pkt 245fpkt", shape=invtriangle, color=brown];
8018[label="133.167.3.133;70pkt 70fpkt", shape=invhouse, color=bisque];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[54.374%]&lt;BR/&gt;{*:*, *:80}[24.1488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.8852%)&lt;BR/&gt; 80: (17.1978%)&lt;BR/&gt; 32768: (2.015%)&lt;BR/&gt; 1024: (1.74555%)&lt;BR/&gt; 0: (1.4761%)&gt;];
}
399--438[label="0.0209581;7pkt 7fpkt"];
399--444[label="0.011976;4pkt 4fpkt"];
399--499[label="0.00598802;2pkt 2fpkt"];
399--636[label="0.00526316;1pkt 1fpkt"];
399--706[label="0.00299401;1pkt 1fpkt"];
399--748[label="0.09375;9pkt 9fpkt"];
399--852[label="0.00392157;1pkt 1fpkt"];
399--997[label="0.00434783;1pkt 1fpkt"];
399--1004[label="0.00454545;1pkt 1fpkt"];
399--1251[label="0.0628743;21pkt 21fpkt"];
399--1337[label="0.00431034;1pkt 1fpkt"];
399--1502[label="0.0701754;4pkt 4fpkt"];
399--1842[label="0.00819672;1pkt 1fpkt"];
399--1884[label="0.00854701;1pkt 1fpkt"];
399--2068[label="0.0238095;1pkt 1fpkt"];
399--2076[label="0.00434783;1pkt 1fpkt"];
399--2240[label="0.0120482;1pkt 1fpkt"];
399--2277[label="0.0769231;4pkt 4fpkt"];
399--2288[label="0.0309278;3pkt 3fpkt"];
399--2362[label="0.0762712;9pkt 9fpkt"];
399--2454[label="0.0729167;7pkt 7fpkt"];
399--2466[label="0.00952381;1pkt 1fpkt"];
399--3202[label="0.00299401;1pkt 1fpkt"];
399--3478[label="0.0778443;26pkt 26fpkt"];
399--3485[label="0.10479;35pkt 35fpkt"];
399--4517[label="0.997006;333pkt 333fpkt"];
399--6667[label="1;334pkt 334fpkt"];
748--792[label="0.0104167;1pkt 1fpkt"];
748--840[label="0.0104167;1pkt 1fpkt"];
748--1037[label="0.0104167;1pkt 1fpkt"];
748--1067[label="0.0104167;1pkt 1fpkt"];
748--1082[label="0.0104167;1pkt 1fpkt"];
748--1105[label="0.0104167;1pkt 1fpkt"];
748--1110[label="0.0104167;1pkt 1fpkt"];
748--1164[label="0.015625;1pkt 1fpkt"];
748--1269[label="0.0104167;1pkt 1fpkt"];
748--1302[label="0.0104167;1pkt 1fpkt"];
748--1311[label="0.0104167;1pkt 1fpkt"];
748--1332[label="0.0104167;1pkt 1fpkt"];
748--1340[label="0.0833333;8pkt 8fpkt"];
748--1341[label="0.0104167;1pkt 1fpkt"];
748--1347[label="0.0104167;1pkt 1fpkt"];
748--1518[label="0.0666667;1pkt 1fpkt"];
748--1571[label="0.0104167;1pkt 1fpkt"];
748--1603[label="0.0104167;1pkt 1fpkt"];
748--1615[label="0.0104167;1pkt 1fpkt"];
748--1622[label="0.0104167;1pkt 1fpkt"];
748--1742[label="0.0104167;1pkt 1fpkt"];
748--1815[label="0.0104167;1pkt 1fpkt"];
748--2072[label="0.0104167;1pkt 1fpkt"];
748--2295[label="0.0104167;1pkt 1fpkt"];
748--2297[label="0.0104167;1pkt 1fpkt"];
748--2494[label="0.0104167;1pkt 1fpkt"];
748--2669[label="0.0104167;1pkt 1fpkt"];
748--2686[label="0.0104167;1pkt 1fpkt"];
748--2707[label="0.0131579;1pkt 1fpkt"];
748--2724[label="0.0104167;1pkt 1fpkt"];
748--2726[label="0.0104167;1pkt 1fpkt"];
748--2736[label="0.0104167;1pkt 1fpkt"];
748--2832[label="0.0106383;1pkt 1fpkt"];
748--2846[label="0.016129;1pkt 1fpkt"];
748--2879[label="0.0104167;1pkt 1fpkt"];
748--2903[label="0.0104167;1pkt 1fpkt"];
748--2923[label="0.0104167;1pkt 1fpkt"];
748--2930[label="0.0104167;1pkt 1fpkt"];
748--2978[label="0.0714286;1pkt 1fpkt"];
748--2993[label="0.0104167;1pkt 1fpkt"];
748--3001[label="0.0104167;1pkt 1fpkt"];
748--3238[label="0.0104167;1pkt 1fpkt"];
748--3246[label="0.0104167;1pkt 1fpkt"];
748--3257[label="0.0104167;1pkt 1fpkt"];
748--3345[label="0.0833333;8pkt 8fpkt"];
748--3348[label="0.0104167;1pkt 1fpkt"];
748--3351[label="0.0104167;1pkt 1fpkt"];
748--3405[label="0.0104167;1pkt 1fpkt"];
748--3455[label="0.0104167;1pkt 1fpkt"];
748--3476[label="0.03125;3pkt 3fpkt"];
748--3541[label="0.015625;1pkt 1fpkt"];
748--3898[label="0.0105263;1pkt 1fpkt"];
748--3974[label="0.0104167;1pkt 1fpkt"];
748--3985[label="0.0344828;1pkt 1fpkt"];
748--4037[label="0.03125;1pkt 1fpkt"];
748--4046[label="0.0104167;1pkt 1fpkt"];
748--4059[label="0.0104167;1pkt 1fpkt"];
748--4217[label="0.0104167;1pkt 1fpkt"];
748--4265[label="0.0104167;1pkt 1fpkt"];
748--4272[label="0.0104167;1pkt 1fpkt"];
748--4329[label="0.0104167;1pkt 1fpkt"];
748--4354[label="0.0104167;1pkt 1fpkt"];
748--4389[label="0.0104167;1pkt 1fpkt"];
748--4453[label="0.015625;1pkt 1fpkt"];
748--4517[label="0.09375;9pkt 9fpkt"];
748--4519[label="0.0104167;1pkt 1fpkt"];
748--4689[label="0.0104167;1pkt 1fpkt"];
748--4713[label="0.0104167;1pkt 1fpkt"];
748--4714[label="0.0104167;1pkt 1fpkt"];
748--4715[label="0.0104167;1pkt 1fpkt"];
748--5013[label="0.0192308;1pkt 1fpkt"];
748--5177[label="0.0104167;1pkt 1fpkt"];
748--5364[label="0.03125;3pkt 3fpkt"];
748--5378[label="0.0520833;5pkt 5fpkt"];
748--5444[label="0.0104167;1pkt 1fpkt"];
748--5454[label="0.0104167;1pkt 1fpkt"];
748--5570[label="0.0104167;1pkt 1fpkt"];
748--5715[label="0.0104167;1pkt 1fpkt"];
748--5740[label="0.0104167;1pkt 1fpkt"];
748--5748[label="0.0104167;1pkt 1fpkt"];
748--5839[label="0.0104167;1pkt 1fpkt"];
748--5854[label="0.0104167;1pkt 1fpkt"];
748--5915[label="0.0238095;1pkt 1fpkt"];
748--5961[label="0.0833333;8pkt 8fpkt"];
748--6024[label="0.0104167;1pkt 1fpkt"];
748--6270[label="0.0104167;1pkt 1fpkt"];
748--6318[label="0.0104167;1pkt 1fpkt"];
748--6484[label="0.0104167;1pkt 1fpkt"];
748--6514[label="0.0104167;1pkt 1fpkt"];
748--6520[label="0.0104167;1pkt 1fpkt"];
748--6551[label="0.0104167;1pkt 1fpkt"];
748--6667[label="0.09375;9pkt 9fpkt"];
748--6782[label="0.0104167;1pkt 1fpkt"];
748--6783[label="0.0104167;1pkt 1fpkt"];
748--6784[label="0.0104167;1pkt 1fpkt"];
748--7060[label="0.0104167;1pkt 1fpkt"];
748--7302[label="0.0104167;1pkt 1fpkt"];
748--7380[label="0.0104167;1pkt 1fpkt"];
748--7397[label="0.0104167;1pkt 1fpkt"];
748--7403[label="0.0104167;1pkt 1fpkt"];
748--7464[label="0.0104167;1pkt 1fpkt"];
748--7471[label="0.0104167;1pkt 1fpkt"];
748--7704[label="0.0104167;1pkt 1fpkt"];
748--7730[label="0.0104167;1pkt 1fpkt"];
748--7818[label="0.0104167;1pkt 1fpkt"];
748--7835[label="0.0104167;1pkt 1fpkt"];
748--7853[label="0.0104167;1pkt 1fpkt"];
748--7961[label="0.0104167;1pkt 1fpkt"];
748--7962[label="0.0104167;1pkt 1fpkt"];
748--8271[label="0.0104167;1pkt 1fpkt"];
1157--1189[label="1;27pkt 27fpkt"];
1157--2288[label="0.0243902;1pkt 1fpkt"];
1157--2953[label="1;27pkt 27fpkt"];
1189--2953[label="1;27pkt 27fpkt"];
1340--1373[label="0.261364;23pkt 23fpkt"];
1340--1548[label="0.00595238;2pkt 2fpkt"];
1340--1754[label="0.0275229;3pkt 3fpkt"];
1340--1799[label="0.0188679;2pkt 2fpkt"];
1340--1842[label="0.0163934;2pkt 2fpkt"];
1340--2029[label="0.046729;5pkt 5fpkt"];
1340--2233[label="0.039604;4pkt 4fpkt"];
1340--2288[label="0.0103093;1pkt 1fpkt"];
1340--2454[label="0.03125;3pkt 3fpkt"];
1340--2474[label="0.0102041;1pkt 1fpkt"];
1340--3345[label="1;336pkt 336fpkt"];
1340--3478[label="0.0833333;28pkt 28fpkt"];
1340--3485[label="0.014881;5pkt 5fpkt"];
1340--5961[label="0.997024;335pkt 335fpkt"];
1622--1754[label="0.00917431;1pkt 1fpkt"];
1622--2029[label="0.0186916;2pkt 2fpkt"];
1622--2288[label="0.0103093;1pkt 1fpkt"];
1622--2454[label="0.0208333;2pkt 2fpkt"];
1622--2474[label="0.0102041;1pkt 1fpkt"];
1622--3476[label="0.069869;16pkt 16fpkt"];
1622--5839[label="1;229pkt 229fpkt"];
1622--7464[label="0.995633;228pkt 228fpkt"];
1853--2029[label="0.0186916;2pkt 2fpkt"];
1853--2233[label="0.029703;3pkt 3fpkt"];
1853--2288[label="0.0412371;4pkt 4fpkt"];
1853--2454[label="0.0104167;1pkt 1fpkt"];
1853--2474[label="0.0714286;7pkt 7fpkt"];
1853--2540[label="0.0196078;1pkt 1fpkt"];
1853--2552[label="1;76pkt 76fpkt"];
1853--3477[label="0.00338983;1pkt 1fpkt"];
1853--3485[label="0.00338983;1pkt 1fpkt"];
1853--3495[label="0.00338983;1pkt 1fpkt"];
2288--2295[label="0.0103093;1pkt 1fpkt"];
2288--2297[label="0.0103093;1pkt 1fpkt"];
2288--2473[label="0.0103093;1pkt 1fpkt"];
2288--2494[label="0.0103093;1pkt 1fpkt"];
2288--2686[label="0.0103093;1pkt 1fpkt"];
2288--2707[label="0.0131579;1pkt 1fpkt"];
2288--2724[label="0.0103093;1pkt 1fpkt"];
2288--2726[label="0.0103093;1pkt 1fpkt"];
2288--2736[label="0.0103093;1pkt 1fpkt"];
2288--2818[label="0.0103093;1pkt 1fpkt"];
2288--2879[label="0.0103093;1pkt 1fpkt"];
2288--2903[label="0.0103093;1pkt 1fpkt"];
2288--2904[label="0.0103093;1pkt 1fpkt"];
2288--2923[label="0.0103093;1pkt 1fpkt"];
2288--2993[label="0.0103093;1pkt 1fpkt"];
2288--3001[label="0.0103093;1pkt 1fpkt"];
2288--3238[label="0.0103093;1pkt 1fpkt"];
2288--3246[label="0.0103093;1pkt 1fpkt"];
2288--3257[label="0.0103093;1pkt 1fpkt"];
2288--3324[label="0.0103093;1pkt 1fpkt"];
2288--3338[label="0.0103093;1pkt 1fpkt"];
2288--3342[label="0.0103093;1pkt 1fpkt"];
2288--3345[label="0.0103093;1pkt 1fpkt"];
2288--3348[label="0.0103093;1pkt 1fpkt"];
2288--3351[label="0.0103093;1pkt 1fpkt"];
2288--3405[label="0.0103093;1pkt 1fpkt"];
2288--3433[label="0.0103093;1pkt 1fpkt"];
2288--3455[label="0.0103093;1pkt 1fpkt"];
2288--3476[label="0.0412371;4pkt 4fpkt"];
2288--3513[label="0.0277778;1pkt 1fpkt"];
2288--3766[label="0.0103093;1pkt 1fpkt"];
2288--3877[label="0.0103093;1pkt 1fpkt"];
2288--3898[label="0.0105263;1pkt 1fpkt"];
2288--3928[label="0.0103093;1pkt 1fpkt"];
2288--3974[label="0.0103093;1pkt 1fpkt"];
2288--3985[label="0.0344828;1pkt 1fpkt"];
2288--4046[label="0.0103093;1pkt 1fpkt"];
2288--4059[label="0.0103093;1pkt 1fpkt"];
2288--4114[label="0.0206186;2pkt 2fpkt"];
2288--4223[label="0.0103093;1pkt 1fpkt"];
2288--4224[label="0.0103093;1pkt 1fpkt"];
2288--4265[label="0.0103093;1pkt 1fpkt"];
2288--4272[label="0.0103093;1pkt 1fpkt"];
2288--4329[label="0.0103093;1pkt 1fpkt"];
2288--4354[label="0.0103093;1pkt 1fpkt"];
2288--4389[label="0.0103093;1pkt 1fpkt"];
2288--4453[label="0.015625;1pkt 1fpkt"];
2288--4517[label="0.0309278;3pkt 3fpkt"];
2288--4519[label="0.0103093;1pkt 1fpkt"];
2288--4689[label="0.0412371;4pkt 4fpkt"];
2288--4713[label="0.0103093;1pkt 1fpkt"];
2288--4714[label="0.0103093;1pkt 1fpkt"];
2288--4715[label="0.0103093;1pkt 1fpkt"];
2288--4804[label="0.0119048;1pkt 1fpkt"];
2288--4888[label="0.0144928;1pkt 1fpkt"];
2288--4948[label="0.0123457;1pkt 1fpkt"];
2288--5035[label="0.0204082;1pkt 1fpkt"];
2288--5169[label="0.0103093;1pkt 1fpkt"];
2288--5177[label="0.0103093;1pkt 1fpkt"];
2288--5250[label="0.0103093;1pkt 1fpkt"];
2288--5322[label="0.0103093;1pkt 1fpkt"];
2288--5364[label="0.0721649;7pkt 7fpkt"];
2288--5378[label="0.0103093;1pkt 1fpkt"];
2288--5444[label="0.0103093;1pkt 1fpkt"];
2288--5454[label="0.0103093;1pkt 1fpkt"];
2288--5518[label="0.0103093;1pkt 1fpkt"];
2288--5715[label="0.0103093;1pkt 1fpkt"];
2288--5740[label="0.0103093;1pkt 1fpkt"];
2288--5748[label="0.0103093;1pkt 1fpkt"];
2288--5839[label="0.0103093;1pkt 1fpkt"];
2288--5847[label="0.0103093;1pkt 1fpkt"];
2288--5854[label="0.0103093;1pkt 1fpkt"];
2288--5961[label="0.0103093;1pkt 1fpkt"];
2288--6049[label="0.0285714;1pkt 1fpkt"];
2288--6199[label="0.0103093;1pkt 1fpkt"];
2288--6256[label="0.0103093;1pkt 1fpkt"];
2288--6270[label="0.0104167;1pkt 1fpkt"];
2288--6288[label="0.0103093;1pkt 1fpkt"];
2288--6318[label="0.0103093;1pkt 1fpkt"];
2288--6417[label="0.0206186;2pkt 2fpkt"];
2288--6514[label="0.0103093;1pkt 1fpkt"];
2288--6520[label="0.0103093;1pkt 1fpkt"];
2288--6551[label="0.0103093;1pkt 1fpkt"];
2288--6667[label="0.0309278;3pkt 3fpkt"];
2288--6782[label="0.0103093;1pkt 1fpkt"];
2288--6783[label="0.0103093;1pkt 1fpkt"];
2288--6784[label="0.0103093;1pkt 1fpkt"];
2288--6887[label="0.0144928;1pkt 1fpkt"];
2288--7060[label="0.0103093;1pkt 1fpkt"];
2288--7271[label="0.0103093;1pkt 1fpkt"];
2288--7380[label="0.0103093;1pkt 1fpkt"];
2288--7397[label="0.0103093;1pkt 1fpkt"];
2288--7403[label="0.0103093;1pkt 1fpkt"];
2288--7464[label="0.0103093;1pkt 1fpkt"];
2288--7468[label="0.0103093;1pkt 1fpkt"];
2288--7471[label="0.0103093;1pkt 1fpkt"];
2288--7704[label="0.0104167;1pkt 1fpkt"];
2288--7730[label="0.0103093;1pkt 1fpkt"];
2288--7835[label="0.0103093;1pkt 1fpkt"];
2288--7853[label="0.0103093;1pkt 1fpkt"];
2288--7961[label="0.0103093;1pkt 1fpkt"];
2288--7962[label="0.0103093;1pkt 1fpkt"];
2288--8018[label="0.0142857;1pkt 1fpkt"];
2288--8203[label="0.0103093;1pkt 1fpkt"];
2288--8271[label="0.0103093;1pkt 1fpkt"];
2454--2473[label="0.0104167;1pkt 1fpkt"];
2454--2494[label="0.0104167;1pkt 1fpkt"];
2454--2686[label="0.0104167;1pkt 1fpkt"];
2454--2724[label="0.0104167;1pkt 1fpkt"];
2454--2726[label="0.0104167;1pkt 1fpkt"];
2454--2733[label="0.0104167;1pkt 1fpkt"];
2454--2736[label="0.0104167;1pkt 1fpkt"];
2454--2818[label="0.0208333;2pkt 2fpkt"];
2454--2879[label="0.0104167;1pkt 1fpkt"];
2454--2903[label="0.0104167;1pkt 1fpkt"];
2454--2904[label="0.0104167;1pkt 1fpkt"];
2454--2923[label="0.0104167;1pkt 1fpkt"];
2454--2930[label="0.0104167;1pkt 1fpkt"];
2454--3001[label="0.0104167;1pkt 1fpkt"];
2454--3071[label="0.0229885;2pkt 2fpkt"];
2454--3238[label="0.0104167;1pkt 1fpkt"];
2454--3246[label="0.0104167;1pkt 1fpkt"];
2454--3257[label="0.0104167;1pkt 1fpkt"];
2454--3324[label="0.0104167;1pkt 1fpkt"];
2454--3342[label="0.0104167;1pkt 1fpkt"];
2454--3345[label="0.03125;3pkt 3fpkt"];
2454--3348[label="0.0104167;1pkt 1fpkt"];
2454--3405[label="0.0104167;1pkt 1fpkt"];
2454--3433[label="0.0208333;2pkt 2fpkt"];
2454--3466[label="0.0104167;1pkt 1fpkt"];
2454--3476[label="0.0416667;4pkt 4fpkt"];
2454--3513[label="0.0277778;1pkt 1fpkt"];
2454--3624[label="0.0104167;1pkt 1fpkt"];
2454--3766[label="0.0104167;1pkt 1fpkt"];
2454--3877[label="0.0104167;1pkt 1fpkt"];
2454--3898[label="0.0105263;1pkt 1fpkt"];
2454--3974[label="0.0104167;1pkt 1fpkt"];
2454--3985[label="0.0344828;1pkt 1fpkt"];
2454--4046[label="0.0104167;1pkt 1fpkt"];
2454--4114[label="0.0208333;2pkt 2fpkt"];
2454--4136[label="0.0104167;1pkt 1fpkt"];
2454--4234[label="0.0169492;1pkt 1fpkt"];
2454--4265[label="0.0104167;1pkt 1fpkt"];
2454--4272[label="0.0208333;2pkt 2fpkt"];
2454--4329[label="0.0104167;1pkt 1fpkt"];
2454--4354[label="0.0104167;1pkt 1fpkt"];
2454--4517[label="0.0729167;7pkt 7fpkt"];
2454--4519[label="0.0104167;1pkt 1fpkt"];
2454--4689[label="0.03125;3pkt 3fpkt"];
2454--4713[label="0.0104167;1pkt 1fpkt"];
2454--4714[label="0.0104167;1pkt 1fpkt"];
2454--4715[label="0.0104167;1pkt 1fpkt"];
2454--4804[label="0.0119048;1pkt 1fpkt"];
2454--4895[label="0.0144928;1pkt 1fpkt"];
2454--4932[label="0.0222222;1pkt 1fpkt"];
2454--4948[label="0.0123457;1pkt 1fpkt"];
2454--5035[label="0.0204082;1pkt 1fpkt"];
2454--5169[label="0.0104167;1pkt 1fpkt"];
2454--5177[label="0.0104167;1pkt 1fpkt"];
2454--5364[label="0.0729167;7pkt 7fpkt"];
2454--5378[label="0.0104167;1pkt 1fpkt"];
2454--5444[label="0.0104167;1pkt 1fpkt"];
2454--5454[label="0.0104167;1pkt 1fpkt"];
2454--5518[label="0.0104167;1pkt 1fpkt"];
2454--5715[label="0.0104167;1pkt 1fpkt"];
2454--5740[label="0.0104167;1pkt 1fpkt"];
2454--5748[label="0.0104167;1pkt 1fpkt"];
2454--5839[label="0.0208333;2pkt 2fpkt"];
2454--5847[label="0.0104167;1pkt 1fpkt"];
2454--5854[label="0.0104167;1pkt 1fpkt"];
2454--5881[label="0.0210526;2pkt 2fpkt"];
2454--5961[label="0.03125;3pkt 3fpkt"];
2454--6049[label="0.0285714;1pkt 1fpkt"];
2454--6115[label="0.0104167;1pkt 1fpkt"];
2454--6199[label="0.0104167;1pkt 1fpkt"];
2454--6256[label="0.0104167;1pkt 1fpkt"];
2454--6270[label="0.0104167;1pkt 1fpkt"];
2454--6318[label="0.0104167;1pkt 1fpkt"];
2454--6417[label="0.0208333;2pkt 2fpkt"];
2454--6432[label="0.0104167;1pkt 1fpkt"];
2454--6514[label="0.0104167;1pkt 1fpkt"];
2454--6520[label="0.0208333;2pkt 2fpkt"];
2454--6551[label="0.0104167;1pkt 1fpkt"];
2454--6667[label="0.0729167;7pkt 7fpkt"];
2454--6782[label="0.0104167;1pkt 1fpkt"];
2454--6783[label="0.0104167;1pkt 1fpkt"];
2454--6784[label="0.0104167;1pkt 1fpkt"];
2454--6890[label="0.0147059;1pkt 1fpkt"];
2454--6914[label="0.0222222;1pkt 1fpkt"];
2454--7060[label="0.0104167;1pkt 1fpkt"];
2454--7271[label="0.0104167;1pkt 1fpkt"];
2454--7380[label="0.0104167;1pkt 1fpkt"];
2454--7397[label="0.0104167;1pkt 1fpkt"];
2454--7403[label="0.0104167;1pkt 1fpkt"];
2454--7464[label="0.0208333;2pkt 2fpkt"];
2454--7468[label="0.0104167;1pkt 1fpkt"];
2454--7471[label="0.0104167;1pkt 1fpkt"];
2454--7489[label="0.0208333;2pkt 2fpkt"];
2454--7704[label="0.0104167;1pkt 1fpkt"];
2454--7730[label="0.0104167;1pkt 1fpkt"];
2454--7793[label="0.0104167;1pkt 1fpkt"];
2454--7835[label="0.0104167;1pkt 1fpkt"];
2454--7853[label="0.0104167;1pkt 1fpkt"];
2454--7961[label="0.0104167;1pkt 1fpkt"];
2454--7962[label="0.0104167;1pkt 1fpkt"];
2454--8203[label="0.0104167;1pkt 1fpkt"];
2454--8271[label="0.0104167;1pkt 1fpkt"];
2454--8318[label="0.0210526;2pkt 2fpkt"];
3345--3478[label="0.0833333;28pkt 28fpkt"];
3345--3485[label="0.014881;5pkt 5fpkt"];
3345--5961[label="0.997024;335pkt 335fpkt"];
4114--6417[label="1;107pkt 107fpkt"];
4517--6667[label="1;339pkt 339fpkt"];
4888--6887[label="1;69pkt 69fpkt"];
4888--8018[label="1;69pkt 69fpkt"];
4895--6890[label="1;68pkt 68fpkt"];
4932--6914[label="1;45pkt 45fpkt"];
5839--7464[label="1;245pkt 245fpkt"];
6887--8018[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="53"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
313[label="183.82.173.220;d;3628pkt 3628fpkt", shape=diamond, color=yellow];
3870[label="220.14.89.30;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3872[label="218.12.121.30;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3968[label="128.223.191.40;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4379[label="209.104.225.81;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4556[label="222.224.22.98;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5121[label="222.24.121.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5451[label="219.196.101.185;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5596[label="219.238.197.200;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5802[label="218.100.242.220;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5816[label="219.134.52.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5818[label="219.237.0.224;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5874[label="221.12.206.230;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5876[label="208.208.225.230;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5910[label="218.103.9.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5913[label="87.104.39.234;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6251[label="220.14.89.30;24pkt 24fpkt", shape=invtriangle, color=brown];
6252[label="218.12.121.30;6pkt 6fpkt", shape=invtriangle, color=brown];
6691[label="222.224.22.98;19pkt 19fpkt", shape=invtriangle, color=brown];
7021[label="222.24.121.154;3pkt 3fpkt", shape=invtriangle, color=brown];
7189[label="86.84.131.178;1pkt 1fpkt", shape=invtriangle, color=brown];
7229[label="219.196.101.185;28pkt 28fpkt", shape=invtriangle, color=brown];
7314[label="219.238.197.200;3pkt 3fpkt", shape=invtriangle, color=brown];
7508[label="87.104.39.234;6pkt 6fpkt", shape=invtriangle, color=brown];
7695[label="218.12.121.30;6pkt 6fpkt", shape=invhouse, color=bisque];
7917[label="222.224.22.98;19pkt 19fpkt", shape=invhouse, color=bisque];
8084[label="222.24.121.154;2pkt 2fpkt", shape=invhouse, color=bisque];
8186[label="219.196.101.185;28pkt 28fpkt", shape=invhouse, color=bisque];
8330[label="87.104.39.234;6pkt 6fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 183.82.173.220:54426}[98.136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54426: (49.0861%)&lt;BR/&gt; 443: (0.406194%)&lt;BR/&gt; 80: (0.228484%)&lt;BR/&gt; 44172: (0.139629%)&lt;BR/&gt; 1025: (0.139629%)&gt;];
}
313--2872[label="0.5;1pkt 1fpkt"];
313--3478[label="0.00248071;9pkt 9fpkt"];
313--3485[label="0.00248071;9pkt 9fpkt"];
313--3870[label="0.695652;16pkt 16fpkt"];
313--3872[label="1;6pkt 6fpkt"];
313--3968[label="1;6pkt 6fpkt"];
313--4379[label="1;9pkt 9fpkt"];
313--4556[label="1;19pkt 19fpkt"];
313--4960[label="1;5pkt 5fpkt"];
313--5121[label="1;2pkt 2fpkt"];
313--5397[label="0.0952381;2pkt 2fpkt"];
313--5451[label="0.965517;28pkt 28fpkt"];
313--5596[label="1;3pkt 3fpkt"];
313--5802[label="1;6pkt 6fpkt"];
313--5816[label="1;1pkt 1fpkt"];
313--5818[label="1;10pkt 10fpkt"];
313--5874[label="0.676471;23pkt 23fpkt"];
313--5876[label="1;5pkt 5fpkt"];
313--5910[label="1;2pkt 2fpkt"];
313--5913[label="1;5pkt 5fpkt"];
313--5931[label="0.666667;2pkt 2fpkt"];
313--6251[label="0.666667;16pkt 16fpkt"];
313--6252[label="1;6pkt 6fpkt"];
313--6691[label="1;19pkt 19fpkt"];
313--7021[label="1;3pkt 3fpkt"];
313--7189[label="1;1pkt 1fpkt"];
313--7195[label="0.0952381;2pkt 2fpkt"];
313--7229[label="0.964286;27pkt 27fpkt"];
313--7314[label="1;3pkt 3fpkt"];
313--7508[label="1;6pkt 6fpkt"];
313--7520[label="0.666667;2pkt 2fpkt"];
313--7695[label="1;6pkt 6fpkt"];
313--7917[label="1;19pkt 19fpkt"];
313--8084[label="1;2pkt 2fpkt"];
313--8186[label="0.964286;27pkt 27fpkt"];
313--8330[label="1;6pkt 6fpkt"];
3870--6251[label="1;23pkt 23fpkt"];
3872--6252[label="1;6pkt 6fpkt"];
3872--7695[label="1;6pkt 6fpkt"];
4556--6691[label="1;19pkt 19fpkt"];
4556--7917[label="1;19pkt 19fpkt"];
5121--7021[label="1;2pkt 2fpkt"];
5121--8084[label="1;2pkt 2fpkt"];
5451--7229[label="1;28pkt 28fpkt"];
5451--8186[label="1;28pkt 28fpkt"];
5596--7314[label="1;3pkt 3fpkt"];
5913--7508[label="1;5pkt 5fpkt"];
5913--8330[label="1;5pkt 5fpkt"];
6252--7695[label="1;6pkt 6fpkt"];
6691--7917[label="1;19pkt 19fpkt"];
7021--8084[label="1;2pkt 2fpkt"];
7229--8186[label="1;28pkt 28fpkt"];
7508--8330[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="183.82.173.220" dst_port="54426"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
3896[label="48.164.88.33;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6268[label="48.164.88.33;9pkt 9fpkt", shape=invtriangle, color=brown];
7702[label="48.164.88.33;10pkt 10fpkt", shape=invhouse, color=bisque];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.164.88.33:*, 197.77.41.153:80}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4645: (5.35714%)&lt;BR/&gt; 4644: (5.35714%)&lt;BR/&gt; 3543: (5.35714%)&lt;BR/&gt; 3542: (5.35714%)&gt;];
}
3896--6268[label="1;9pkt 9fpkt"];
3896--7702[label="1;9pkt 9fpkt"];
6268--7702[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.41.153" dst_port="80" src_ip="48.164.88.33"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
3900[label="197.66.116.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6272[label="197.66.116.33;2pkt 2fpkt", shape=invtriangle, color=brown];
7706[label="197.66.116.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.116.33:62249, 38.33.188.141:80}[50%]&lt;BR/&gt;{197.66.116.33:62260, 38.33.188.141:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62260: (25%)&lt;BR/&gt; 62249: (25%)&gt;];
}
3900--6272[label="1;2pkt 2fpkt"];
3900--7706[label="1;2pkt 2fpkt"];
6272--7706[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="38.33.188.141" dst_port="80" src_ip="197.66.116.33" src_port="62260"/>
      <filter dst_ip="38.33.188.141" dst_port="80" src_ip="197.66.116.33" src_port="62249"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
3915[label="53.137.10.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6281[label="53.137.10.35;1pkt 1fpkt", shape=invtriangle, color=brown];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.137.10.35:80, 197.66.101.200:39460}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39460: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3915--6281[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.200" dst_port="39460" src_ip="53.137.10.35" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
3917[label="183.82.39.35;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6282[label="183.82.39.35;18pkt 18fpkt", shape=invtriangle, color=brown];
7714[label="183.82.39.35;19pkt 19fpkt", shape=invhouse, color=bisque];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.39.35:*, 209.9.73.187:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2429: (2.72727%)&lt;BR/&gt; 2428: (2.72727%)&lt;BR/&gt; 2427: (2.72727%)&lt;BR/&gt; 2408: (2.72727%)&gt;];
}
3917--6282[label="1;18pkt 18fpkt"];
3917--7714[label="1;18pkt 18fpkt"];
6282--7714[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="209.9.73.187" dst_port="80" src_ip="183.82.39.35"/>
    </slice>
    <from sec="1118034039" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
3926[label="183.82.37.36;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6287[label="183.82.37.36;11pkt 11fpkt", shape=invtriangle, color=brown];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.37.36:*, *:1863}[36.3636%]&lt;BR/&gt;{183.82.37.36:*, *:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (18.1818%)&lt;BR/&gt; 80: (13.6364%)&lt;BR/&gt; 7001: (9.09091%)&lt;BR/&gt; 443: (9.09091%)&lt;BR/&gt; 1130: (4.54545%)&gt;];
}
3926--6287[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="183.82.37.36"/>
      <filter dst_port="80" src_ip="183.82.37.36"/>
    </slice>
    <from sec="1118034849" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
328[label="133.167.3.91;s;430pkt 430fpkt", shape=diamond, color=yellow];
436[label="133.167.10.16;s;1088pkt 1088fpkt", shape=diamond, color=yellow];
631[label="53.227.238.33;d;477pkt 477fpkt", shape=diamond, color=yellow];
1785[label="216.212.121.223;d;28pkt 28fpkt", shape=diamond, color=yellow];
2743[label="133.167.10.16;s;1088pkt 1088fpkt", shape=hexagon, color=black];
2969[label="133.167.3.91;s;264pkt 264fpkt", shape=hexagon, color=black];
3929[label="133.167.65.36;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4484[label="133.167.3.91;500pkt 500fpkt", shape=pentagon, color=darkviolet];
6289[label="133.167.65.36;3pkt 3fpkt", shape=invtriangle, color=brown];
6645[label="133.167.3.91;500pkt 500fpkt", shape=invtriangle, color=brown];
7716[label="133.167.65.36;4pkt 4fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.3.91:*, 53.227.238.33:80}[30.8405%]&lt;BR/&gt;{133.167.10.16:6701, *:4672}[27.5649%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6701: (24.715%)&lt;BR/&gt; 80: (24.715%)&lt;BR/&gt; 4672: (10.1687%)&lt;BR/&gt; 5050: (0.353397%)&lt;BR/&gt; 8730: (0.273598%)&gt;];
}
328--631[label="0.997674;429pkt 429fpkt"];
328--1785[label="0.0357143;1pkt 1fpkt"];
328--2969[label="1;264pkt 264fpkt"];
328--3478[label="0.0837209;36pkt 36fpkt"];
328--3485[label="0.0837209;36pkt 36fpkt"];
328--4484[label="1;430pkt 430fpkt"];
328--6645[label="1;430pkt 430fpkt"];
436--1785[label="0.0357143;1pkt 1fpkt"];
436--2743[label="1;1088pkt 1088fpkt"];
631--2061[label="0.00628931;1pkt 1fpkt"];
631--2969[label="0.996212;263pkt 263fpkt"];
631--3134[label="0.00628931;1pkt 1fpkt"];
631--3478[label="0.0754717;36pkt 36fpkt"];
631--3485[label="0.0754717;36pkt 36fpkt"];
631--4484[label="0.997904;476pkt 476fpkt"];
631--4971[label="0.00613497;1pkt 1fpkt"];
631--6645[label="0.997904;476pkt 476fpkt"];
1785--2743[label="0.0357143;1pkt 1fpkt"];
1785--2770[label="0.0357143;1pkt 1fpkt"];
1785--2969[label="0.0357143;1pkt 1fpkt"];
1785--3929[label="0.25;1pkt 1fpkt"];
1785--4484[label="0.0357143;1pkt 1fpkt"];
1785--5858[label="0.0357143;1pkt 1fpkt"];
1785--6289[label="0.333333;1pkt 1fpkt"];
1785--6645[label="0.0357143;1pkt 1fpkt"];
1785--7474[label="0.0357143;1pkt 1fpkt"];
1785--7716[label="0.25;1pkt 1fpkt"];
2969--3478[label="0.136364;36pkt 36fpkt"];
2969--3485[label="0.00378788;1pkt 1fpkt"];
2969--4484[label="1;264pkt 264fpkt"];
2969--6645[label="1;264pkt 264fpkt"];
3929--6289[label="1;3pkt 3fpkt"];
3929--7716[label="1;4pkt 4fpkt"];
4484--6645[label="1;500pkt 500fpkt"];
6289--7716[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="133.167.10.16" src_port="6701"/>
      <filter dst_ip="53.227.238.33" dst_port="80" src_ip="133.167.3.91"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.2.109.36"/>
    </slice>
    <from sec="1118034201" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
3939[label="183.82.36.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6298[label="183.82.36.37;2pkt 2fpkt", shape=invtriangle, color=brown];
7721[label="183.82.36.37;2pkt 2fpkt", shape=invhouse, color=bisque];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.36.37:4059, 192.9.57.92:1863}[50%]&lt;BR/&gt;{183.82.36.37:4331, 192.9.61.180:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4331: (25%)&lt;BR/&gt; 4059: (25%)&gt;];
}
3939--6298[label="1;2pkt 2fpkt"];
3939--7721[label="1;2pkt 2fpkt"];
6298--7721[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.61.180" dst_port="1863" src_ip="183.82.36.37" src_port="4331"/>
      <filter dst_ip="192.9.57.92" dst_port="1863" src_ip="183.82.36.37" src_port="4059"/>
    </slice>
    <from sec="1118034025" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
3941[label="183.144.90.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6300[label="183.144.90.37;1pkt 1fpkt", shape=invtriangle, color=brown];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.144.90.37:25, 222.35.68.67:1658}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1658: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3941--6300[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.35.68.67" dst_port="1658" src_ip="183.144.90.37" src_port="25"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.77.205.37"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.176.142.39"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
3967[label="87.20.51.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6315[label="87.20.51.40;4pkt 4fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.20.51.40:64526, 183.82.34.64:45378}[25%]&lt;BR/&gt;{87.20.51.40:64845, 183.82.34.64:45378}[25%]&lt;BR/&gt;{87.20.51.40:65110, 183.82.34.64:45378}[25%]&lt;BR/&gt;{87.20.51.40:65353, 183.82.34.64:45378}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45378: (50%)&lt;BR/&gt; 65353: (14.2857%)&lt;BR/&gt; 64845: (14.2857%)&lt;BR/&gt; 64526: (14.2857%)&lt;BR/&gt; 65110: (7.14286%)&gt;];
}
3967--6315[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="183.82.34.64" dst_port="45378" src_ip="87.20.51.40" src_port="65353"/>
      <filter dst_ip="183.82.34.64" dst_port="45378" src_ip="87.20.51.40" src_port="65110"/>
      <filter dst_ip="183.82.34.64" dst_port="45378" src_ip="87.20.51.40" src_port="64845"/>
      <filter dst_ip="183.82.34.64" dst_port="45378" src_ip="87.20.51.40" src_port="64526"/>
    </slice>
    <from sec="1118034375" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.131.11.41"/>
    </slice>
    <from sec="1118034048" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
3974[label="197.66.116.41;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6318[label="197.66.116.41;111pkt 111fpkt", shape=invtriangle, color=brown];
7730[label="197.66.116.41;110pkt 110fpkt", shape=invhouse, color=bisque];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.116.41:1024, *:53}[96.3964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.0964%)&lt;BR/&gt; 1024: (48.1928%)&lt;BR/&gt; 0: (0.903614%)&lt;BR/&gt; 51382: (0.451807%)&lt;BR/&gt; 32769: (0.451807%)&gt;];
}
3974--6318[label="1;111pkt 111fpkt"];
3974--7730[label="1;110pkt 110fpkt"];
6318--7730[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="197.66.116.41" src_port="1024"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
3979[label="183.82.32.42;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6320[label="183.82.32.42;42pkt 42fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.32.42:13102, *:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13102: (46.4286%)&lt;BR/&gt; 53791: (2.38095%)&lt;BR/&gt; 10981: (2.38095%)&lt;BR/&gt; 0: (2.38095%)&lt;BR/&gt; 63510: (1.19048%)&gt;];
}
3979--6320[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.32.42" src_port="13102"/>
    </slice>
    <from sec="1118034026" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
3980[label="183.174.32.42;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6321[label="183.174.32.42;11pkt 11fpkt", shape=invtriangle, color=brown];
7732[label="183.174.32.42;11pkt 11fpkt", shape=invhouse, color=bisque];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.32.42:*, 104.4.39.240:80}[41.6667%]&lt;BR/&gt;{183.174.32.42:*, 65.1.59.194:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49268: (4.41176%)&lt;BR/&gt; 49267: (4.41176%)&lt;BR/&gt; 49266: (4.41176%)&lt;BR/&gt; 49265: (4.41176%)&gt;];
}
3980--6321[label="1;11pkt 11fpkt"];
3980--7732[label="1;11pkt 11fpkt"];
6321--7732[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="104.4.39.240" dst_port="80" src_ip="183.174.32.42"/>
      <filter dst_ip="65.1.59.194" dst_port="80" src_ip="183.174.32.42"/>
    </slice>
    <from sec="1118034219" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
3981[label="183.82.33.42;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6322[label="183.82.33.42;3pkt 3fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.33.42:2966, 192.9.61.90:1863}[33.3333%]&lt;BR/&gt;{183.82.33.42:2972, 192.9.61.103:1863}[33.3333%]&lt;BR/&gt;{183.82.33.42:2865, 192.9.57.150:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2972: (16.6667%)&lt;BR/&gt; 2966: (16.6667%)&lt;BR/&gt; 2865: (16.6667%)&gt;];
}
3981--6322[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.57.150" dst_port="1863" src_ip="183.82.33.42" src_port="2865"/>
      <filter dst_ip="192.9.61.103" dst_port="1863" src_ip="183.82.33.42" src_port="2972"/>
      <filter dst_ip="192.9.61.90" dst_port="1863" src_ip="183.82.33.42" src_port="2966"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
1535[label="196.8.28.176;d;157pkt 157fpkt", shape=diamond, color=yellow];
1796[label="196.8.29.161;d;165pkt 165fpkt", shape=diamond, color=yellow];
3784[label="195.1.83.22;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3984[label="195.1.60.42;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4410[label="195.1.61.84;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6324[label="195.1.60.42;16pkt 16fpkt", shape=invtriangle, color=brown];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 196.8.29.161:0}[44.837%]&lt;BR/&gt;{*:0, 196.8.28.176:0}[42.663%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1535--3784[label="0.047619;1pkt 1fpkt"];
1535--3984[label="0.0625;1pkt 1fpkt"];
1535--4410[label="0.0666667;1pkt 1fpkt"];
1535--6324[label="0.0625;1pkt 1fpkt"];
1796--3784[label="0.047619;1pkt 1fpkt"];
1796--3984[label="0.0625;1pkt 1fpkt"];
1796--4410[label="0.0666667;1pkt 1fpkt"];
1796--6324[label="0.0625;1pkt 1fpkt"];
3984--6324[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="196.8.29.161"/>
      <filter dst_ip="196.8.28.176"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
3989[label="176.196.172.42;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6327[label="176.196.172.42;27pkt 27fpkt", shape=invtriangle, color=brown];
7735[label="176.196.172.42;26pkt 26fpkt", shape=invhouse, color=bisque];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.172.42:*, 196.81.180.60:80}[25.9259%]&lt;BR/&gt;{176.196.172.42:*, 193.218.217.223:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.25%)&lt;BR/&gt; 443: (3.75%)&lt;BR/&gt; 1863: (1.875%)&lt;BR/&gt; 1860: (1.875%)&lt;BR/&gt; 1859: (1.875%)&gt;];
}
3989--6327[label="1;27pkt 27fpkt"];
3989--7735[label="1;26pkt 26fpkt"];
6327--7735[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="193.218.217.223" src_ip="176.196.172.42"/>
      <filter dst_ip="196.81.180.60" dst_port="80" src_ip="176.196.172.42"/>
    </slice>
    <from sec="1118034457" usec="0"/>
    <to sec="1118034821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
3991[label="220.140.182.42;122pkt 122fpkt", shape=pentagon, color=darkviolet];
6329[label="220.140.182.42;122pkt 122fpkt", shape=invtriangle, color=brown];
7736[label="220.140.182.42;121pkt 121fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.140.182.42:32769, *:1027}[51.6393%]&lt;BR/&gt;{220.140.182.42:32769, *:1026}[48.3607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32769: (50%)&lt;BR/&gt; 1027: (25.8904%)&lt;BR/&gt; 1026: (24.1096%)&gt;];
}
3991--6329[label="1;122pkt 122fpkt"];
3991--7736[label="1;121pkt 121fpkt"];
6329--7736[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="220.140.182.42" src_port="32769"/>
      <filter dst_port="1026" src_ip="220.140.182.42" src_port="32769"/>
    </slice>
    <from sec="1118034678" usec="0"/>
    <to sec="1118034679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
3999[label="196.170.189.43;453pkt 453fpkt", shape=pentagon, color=darkviolet];
6336[label="196.170.189.43;453pkt 453fpkt", shape=invtriangle, color=brown];
7740[label="196.170.189.43;452pkt 452fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.170.189.43:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2825: (0.441826%)&lt;BR/&gt; 3315: (0.33137%)&lt;BR/&gt; 4830: (0.220913%)&lt;BR/&gt; 4754: (0.220913%)&gt;];
}
3999--6336[label="1;453pkt 453fpkt"];
3999--7740[label="1;452pkt 452fpkt"];
6336--7740[label="1;452pkt 452fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="196.170.189.43"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.132.60.44"/>
    </slice>
    <from sec="1118034058" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.89.156.44"/>
    </slice>
    <from sec="1118034034" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
367[label="192.168.254.254;d;1564pkt 1564fpkt", shape=diamond, color=yellow];
1286[label="176.196.80.162;s;374pkt 374fpkt", shape=diamond, color=yellow];
2476[label="197.77.221.196;s;167pkt 167fpkt", shape=diamond, color=yellow];
2484[label="176.196.86.82;s;197pkt 197fpkt", shape=diamond, color=yellow];
2487[label="176.196.24.212;s;49pkt 49fpkt", shape=diamond, color=yellow];
2889[label="192.168.254.254;d;758pkt 758fpkt", shape=hexagon, color=black];
3754[label="128.73.141.19;85pkt 85fpkt", shape=pentagon, color=darkviolet];
4010[label="197.77.193.44;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4075[label="128.73.92.52;89pkt 89fpkt", shape=pentagon, color=darkviolet];
4387[label="176.196.86.82;215pkt 215fpkt", shape=pentagon, color=darkviolet];
4400[label="176.196.86.83;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4465[label="128.73.168.89;91pkt 91fpkt", shape=pentagon, color=darkviolet];
4568[label="176.196.99.99;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4877[label="176.196.24.132;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4906[label="176.196.124.134;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4913[label="128.73.137.135;90pkt 90fpkt", shape=pentagon, color=darkviolet];
4949[label="176.196.99.138;87pkt 87fpkt", shape=pentagon, color=darkviolet];
4998[label="197.66.102.142;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5203[label="176.196.80.162;381pkt 381fpkt", shape=pentagon, color=darkviolet];
5362[label="197.77.220.176;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5541[label="128.73.141.195;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5552[label="197.77.221.196;181pkt 181fpkt", shape=pentagon, color=darkviolet];
5717[label="176.196.24.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5824[label="197.77.213.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6342[label="197.77.193.44;3pkt 3fpkt", shape=invtriangle, color=brown];
6592[label="176.196.86.83;18pkt 18fpkt", shape=invtriangle, color=brown];
6897[label="176.196.124.134;4pkt 4fpkt", shape=invtriangle, color=brown];
6922[label="176.196.99.138;86pkt 86fpkt", shape=invtriangle, color=brown];
6949[label="197.66.102.142;39pkt 39fpkt", shape=invtriangle, color=brown];
7178[label="197.77.220.176;43pkt 43fpkt", shape=invtriangle, color=brown];
7453[label="197.77.213.224;1pkt 1fpkt", shape=invtriangle, color=brown];
7742[label="197.77.193.44;3pkt 3fpkt", shape=invhouse, color=bisque];
7872[label="176.196.86.83;19pkt 19fpkt", shape=invhouse, color=bisque];
8023[label="176.196.124.134;3pkt 3fpkt", shape=invhouse, color=bisque];
8034[label="176.196.99.138;87pkt 87fpkt", shape=invhouse, color=bisque];
8162[label="197.77.220.176;43pkt 43fpkt", shape=invhouse, color=bisque];
8302[label="197.77.213.224;2pkt 2fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.168.254.254:80}[78.202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5102%)&lt;BR/&gt; 0: (1.53689%)&lt;BR/&gt; 515: (0.665984%)&lt;BR/&gt; 16841: (0.245902%)&lt;BR/&gt; 1863: (0.215164%)&gt;];
}
367--830[label="0.0114943;1pkt 1fpkt"];
367--1050[label="0.00645161;1pkt 1fpkt"];
367--1286[label="0.184492;69pkt 69fpkt"];
367--1511[label="0.016129;1pkt 1fpkt"];
367--1816[label="0.02;1pkt 1fpkt"];
367--2476[label="0.994012;166pkt 166fpkt"];
367--2484[label="0.827411;163pkt 163fpkt"];
367--2487[label="0.0204082;1pkt 1fpkt"];
367--2509[label="0.0322581;1pkt 1fpkt"];
367--2889[label="1;758pkt 758fpkt"];
367--2909[label="0.0147059;1pkt 1fpkt"];
367--2975[label="0.016129;1pkt 1fpkt"];
367--3071[label="0.0114943;1pkt 1fpkt"];
367--3111[label="0.0361011;30pkt 30fpkt"];
367--3478[label="0.0716113;112pkt 112fpkt"];
367--3485[label="0.0709719;111pkt 111fpkt"];
367--3708[label="0.0169492;1pkt 1fpkt"];
367--3732[label="0.0163934;1pkt 1fpkt"];
367--3754[label="0.929412;79pkt 79fpkt"];
367--4010[label="0.25;1pkt 1fpkt"];
367--4075[label="0.921348;82pkt 82fpkt"];
367--4143[label="0.0326442;30pkt 30fpkt"];
367--4387[label="0.75814;163pkt 163fpkt"];
367--4400[label="0.0555556;1pkt 1fpkt"];
367--4465[label="0.923077;84pkt 84fpkt"];
367--4568[label="0.333333;1pkt 1fpkt"];
367--4877[label="0.888889;40pkt 40fpkt"];
367--4906[label="0.25;1pkt 1fpkt"];
367--4913[label="0.922222;83pkt 83fpkt"];
367--4949[label="0.908046;79pkt 79fpkt"];
367--4998[label="0.921053;35pkt 35fpkt"];
367--5035[label="0.0204082;1pkt 1fpkt"];
367--5203[label="0.181102;69pkt 69fpkt"];
367--5362[label="0.930233;40pkt 40fpkt"];
367--5505[label="0.0217391;1pkt 1fpkt"];
367--5541[label="0.930233;40pkt 40fpkt"];
367--5552[label="0.917127;166pkt 166fpkt"];
367--5585[label="0.00990099;1pkt 1fpkt"];
367--5717[label="0.5;1pkt 1fpkt"];
367--5801[label="0.0454545;1pkt 1fpkt"];
367--5824[label="1;1pkt 1fpkt"];
367--5881[label="0.0105263;1pkt 1fpkt"];
367--6179[label="0.016129;1pkt 1fpkt"];
367--6342[label="0.333333;1pkt 1fpkt"];
367--6592[label="0.0555556;1pkt 1fpkt"];
367--6897[label="0.25;1pkt 1fpkt"];
367--6922[label="0.906977;78pkt 78fpkt"];
367--6949[label="0.923077;36pkt 36fpkt"];
367--7178[label="0.930233;40pkt 40fpkt"];
367--7262[label="0.0212766;1pkt 1fpkt"];
367--7453[label="1;1pkt 1fpkt"];
367--7489[label="0.0104167;1pkt 1fpkt"];
367--7656[label="0.016129;1pkt 1fpkt"];
367--7742[label="0.333333;1pkt 1fpkt"];
367--7872[label="0.0526316;1pkt 1fpkt"];
367--8023[label="0.333333;1pkt 1fpkt"];
367--8034[label="0.908046;79pkt 79fpkt"];
367--8162[label="0.930233;40pkt 40fpkt"];
367--8302[label="0.5;1pkt 1fpkt"];
367--8318[label="0.0105263;1pkt 1fpkt"];
1286--1314[label="0.00380228;1pkt 1fpkt"];
1286--1594[label="0.0181818;2pkt 2fpkt"];
1286--1852[label="0.00571429;1pkt 1fpkt"];
1286--2075[label="0.00396825;1pkt 1fpkt"];
1286--2889[label="0.0989305;37pkt 37fpkt"];
1286--3478[label="0.687166;257pkt 257fpkt"];
1286--3485[label="0.0213904;8pkt 8fpkt"];
1286--5203[label="0.997326;373pkt 373fpkt"];
2476--2889[label="0.45509;76pkt 76fpkt"];
2476--3478[label="0.0658683;11pkt 11fpkt"];
2476--3485[label="0.0718563;12pkt 12fpkt"];
2476--5552[label="1;167pkt 167fpkt"];
2484--2889[label="0.370558;73pkt 73fpkt"];
2484--3478[label="0.0558376;11pkt 11fpkt"];
2484--3485[label="0.0558376;11pkt 11fpkt"];
2484--4387[label="1;197pkt 197fpkt"];
2487--2889[label="0.0204082;1pkt 1fpkt"];
2487--3202[label="0.0204082;1pkt 1fpkt"];
2487--3478[label="0.0204082;1pkt 1fpkt"];
2487--5717[label="0.5;1pkt 1fpkt"];
2889--2909[label="0.0147059;1pkt 1fpkt"];
2889--2975[label="0.016129;1pkt 1fpkt"];
2889--3071[label="0.0114943;1pkt 1fpkt"];
2889--3111[label="0.0329815;25pkt 25fpkt"];
2889--3478[label="0.147757;112pkt 112fpkt"];
2889--3485[label="0.0105541;8pkt 8fpkt"];
2889--3708[label="0.0169492;1pkt 1fpkt"];
2889--3732[label="0.0163934;1pkt 1fpkt"];
2889--3754[label="0.435294;37pkt 37fpkt"];
2889--4010[label="0.25;1pkt 1fpkt"];
2889--4075[label="0.41573;37pkt 37fpkt"];
2889--4143[label="0.0329815;25pkt 25fpkt"];
2889--4387[label="0.339535;73pkt 73fpkt"];
2889--4400[label="0.0555556;1pkt 1fpkt"];
2889--4465[label="0.428571;39pkt 39fpkt"];
2889--4568[label="0.333333;1pkt 1fpkt"];
2889--4877[label="0.422222;19pkt 19fpkt"];
2889--4906[label="0.25;1pkt 1fpkt"];
2889--4913[label="0.433333;39pkt 39fpkt"];
2889--4949[label="0.425287;37pkt 37fpkt"];
2889--4998[label="0.421053;16pkt 16fpkt"];
2889--5035[label="0.0204082;1pkt 1fpkt"];
2889--5203[label="0.0971129;37pkt 37fpkt"];
2889--5362[label="0.418605;18pkt 18fpkt"];
2889--5505[label="0.0217391;1pkt 1fpkt"];
2889--5541[label="0.44186;19pkt 19fpkt"];
2889--5552[label="0.41989;76pkt 76fpkt"];
2889--5585[label="0.00990099;1pkt 1fpkt"];
2889--5717[label="0.5;1pkt 1fpkt"];
2889--5801[label="0.0454545;1pkt 1fpkt"];
2889--5824[label="1;1pkt 1fpkt"];
2889--5881[label="0.0105263;1pkt 1fpkt"];
2889--6179[label="0.016129;1pkt 1fpkt"];
2889--6342[label="0.333333;1pkt 1fpkt"];
2889--6592[label="0.0555556;1pkt 1fpkt"];
2889--6897[label="0.25;1pkt 1fpkt"];
2889--6922[label="0.418605;36pkt 36fpkt"];
2889--6949[label="0.435897;17pkt 17fpkt"];
2889--7178[label="0.418605;18pkt 18fpkt"];
2889--7262[label="0.0212766;1pkt 1fpkt"];
2889--7453[label="1;1pkt 1fpkt"];
2889--7489[label="0.0104167;1pkt 1fpkt"];
2889--7656[label="0.016129;1pkt 1fpkt"];
2889--7742[label="0.333333;1pkt 1fpkt"];
2889--7872[label="0.0526316;1pkt 1fpkt"];
2889--8023[label="0.333333;1pkt 1fpkt"];
2889--8034[label="0.425287;37pkt 37fpkt"];
2889--8162[label="0.418605;18pkt 18fpkt"];
2889--8302[label="0.5;1pkt 1fpkt"];
2889--8318[label="0.0105263;1pkt 1fpkt"];
4010--6342[label="1;3pkt 3fpkt"];
4010--7742[label="1;3pkt 3fpkt"];
4400--6592[label="1;18pkt 18fpkt"];
4400--7872[label="1;18pkt 18fpkt"];
4906--6897[label="1;4pkt 4fpkt"];
4906--8023[label="1;3pkt 3fpkt"];
4949--6922[label="1;86pkt 86fpkt"];
4949--8034[label="1;87pkt 87fpkt"];
4998--6949[label="1;38pkt 38fpkt"];
5362--7178[label="1;43pkt 43fpkt"];
5362--8162[label="1;43pkt 43fpkt"];
5824--7453[label="1;1pkt 1fpkt"];
5824--8302[label="1;1pkt 1fpkt"];
6342--7742[label="1;3pkt 3fpkt"];
6592--7872[label="1;18pkt 18fpkt"];
6897--8023[label="1;3pkt 3fpkt"];
6922--8034[label="1;86pkt 86fpkt"];
7178--8162[label="1;43pkt 43fpkt"];
7453--8302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.254" dst_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.2.202.44"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.21.1.45"/>
    </slice>
    <from sec="1118034724" usec="0"/>
    <to sec="1118034754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
4016[label="176.197.8.45;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6346[label="176.197.8.45;6pkt 6fpkt", shape=invtriangle, color=brown];
7746[label="176.197.8.45;6pkt 6fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.8.45:*, 205.0.192.202:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63678: (8.82353%)&lt;BR/&gt; 63677: (8.82353%)&lt;BR/&gt; 63676: (8.82353%)&lt;BR/&gt; 63675: (8.82353%)&gt;];
}
4016--6346[label="1;5pkt 5fpkt"];
4016--7746[label="1;5pkt 5fpkt"];
6346--7746[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.192.202" dst_port="80" src_ip="176.197.8.45"/>
    </slice>
    <from sec="1118034840" usec="0"/>
    <to sec="1118034865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
4022[label="176.196.143.45;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6349[label="176.196.143.45;25pkt 25fpkt", shape=invtriangle, color=brown];
7749[label="176.196.143.45;25pkt 25fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.143.45:*, 194.83.165.112:80}[24%]&lt;BR/&gt;{176.196.143.45:*, 194.83.128.174:80}[20%]&lt;BR/&gt;{176.196.143.45:*, 194.83.165.112:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38%)&lt;BR/&gt; 443: (12%)&lt;BR/&gt; 1280: (2%)&lt;BR/&gt; 1279: (2%)&lt;BR/&gt; 1278: (2%)&gt;];
}
4022--6349[label="1;25pkt 25fpkt"];
4022--7749[label="1;25pkt 25fpkt"];
6349--7749[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="194.83.165.112" dst_port="80" src_ip="176.196.143.45"/>
      <filter dst_ip="194.83.165.112" dst_port="443" src_ip="176.196.143.45"/>
      <filter dst_ip="194.83.128.174" dst_port="80" src_ip="176.196.143.45"/>
    </slice>
    <from sec="1118034639" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
4023[label="128.65.245.45;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6350[label="128.65.245.45;15pkt 15fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.245.45:*, 197.216.210.107:80}[60%]&lt;BR/&gt;{128.65.245.45:*, 55.126.26.49:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61116: (3.33333%)&lt;BR/&gt; 61115: (3.33333%)&lt;BR/&gt; 61114: (3.33333%)&lt;BR/&gt; 61113: (3.33333%)&gt;];
}
4023--6350[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="197.216.210.107" dst_port="80" src_ip="128.65.245.45"/>
      <filter dst_ip="55.126.26.49" dst_port="80" src_ip="128.65.245.45"/>
    </slice>
    <from sec="1118034041" usec="0"/>
    <to sec="1118034449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.196.62.46"/>
    </slice>
    <from sec="1118034755" usec="0"/>
    <to sec="1118034796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
4045[label="183.82.36.48;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6364[label="183.82.36.48;124pkt 124fpkt", shape=invtriangle, color=brown];
7754[label="183.82.36.48;124pkt 124fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.36.48:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (8.49057%)&lt;BR/&gt; 443: (7.68194%)&lt;BR/&gt; 16327: (3.2345%)&lt;BR/&gt; 44059: (1.61725%)&lt;BR/&gt; 37375: (1.61725%)&gt;];
}
4045--6364[label="1;123pkt 123fpkt"];
4045--7754[label="1;123pkt 123fpkt"];
6364--7754[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.36.48"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
4055[label="192.20.131.49;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6371[label="192.20.131.49;9pkt 9fpkt", shape=invtriangle, color=brown];
7759[label="192.20.131.49;8pkt 8fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.20.131.49:80, 197.77.47.160:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 52915: (6%)&lt;BR/&gt; 52743: (6%)&lt;BR/&gt; 52741: (6%)&lt;BR/&gt; 52740: (6%)&gt;];
}
4055--6371[label="1;8pkt 8fpkt"];
4055--7759[label="1;8pkt 8fpkt"];
6371--7759[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.47.160" src_ip="192.20.131.49" src_port="80"/>
    </slice>
    <from sec="1118034766" usec="0"/>
    <to sec="1118034802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.163.198.49"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
4062[label="200.226.80.50;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6375[label="200.226.80.50;3pkt 3fpkt", shape=invtriangle, color=brown];
7760[label="200.226.80.50;3pkt 3fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.226.80.50:53, 53.32.140.26:1011}[33.3333%]&lt;BR/&gt;{200.226.80.50:53, 55.67.91.166:3236}[33.3333%]&lt;BR/&gt;{200.226.80.50:53, 217.96.16.187:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (66.6667%)&lt;BR/&gt; 3236: (16.6667%)&lt;BR/&gt; 1011: (16.6667%)&gt;];
}
4062--6375[label="1;3pkt 3fpkt"];
4062--7760[label="1;3pkt 3fpkt"];
6375--7760[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.96.16.187" dst_port="53" src_ip="200.226.80.50" src_port="53"/>
      <filter dst_ip="55.67.91.166" dst_port="3236" src_ip="200.226.80.50" src_port="53"/>
      <filter dst_ip="53.32.140.26" dst_port="1011" src_ip="200.226.80.50" src_port="53"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
4071[label="196.149.75.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6382[label="196.149.75.51;1pkt 1fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.149.75.51:80, 128.65.184.249:3091}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3091: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4071--6382[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.184.249" dst_port="3091" src_ip="196.149.75.51" src_port="80"/>
    </slice>
    <from sec="1118034092" usec="0"/>
    <to sec="1118034120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
677[label="176.196.217.182;d;133pkt 133fpkt", shape=diamond, color=yellow];
1010[label="222.45.155.53;s;4pkt 4fpkt", shape=diamond, color=yellow];
2806[label="222.45.155.53;s;3pkt 3fpkt", shape=hexagon, color=black];
3818[label="189.183.238.25;80pkt 80fpkt", shape=pentagon, color=darkviolet];
4076[label="196.217.104.52;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4088[label="222.45.155.53;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6225[label="189.183.238.25;80pkt 80fpkt", shape=invtriangle, color=brown];
6384[label="196.217.104.52;69pkt 69fpkt", shape=invtriangle, color=brown];
6394[label="222.45.155.53;4pkt 4fpkt", shape=invtriangle, color=brown];
7765[label="196.217.104.52;68pkt 68fpkt", shape=invhouse, color=bisque];
7772[label="222.45.155.53;5pkt 5fpkt", shape=invhouse, color=bisque];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.183.238.25:*, 176.196.217.182:6527}[51.6129%]&lt;BR/&gt;{196.217.104.52:*, 176.196.217.182:6527}[44.5161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6527: (47.3077%)&lt;BR/&gt; 5485: (2.40385%)&lt;BR/&gt; 2509: (0.576923%)&lt;BR/&gt; 2385: (0.576923%)&lt;BR/&gt; 2965: (0.480769%)&gt;];
}
677--1010[label="1;4pkt 4fpkt"];
677--2806[label="1;3pkt 3fpkt"];
677--3818[label="0.8625;69pkt 69fpkt"];
677--4076[label="0.855072;59pkt 59fpkt"];
677--4088[label="0.8;4pkt 4fpkt"];
677--6225[label="0.8625;69pkt 69fpkt"];
677--6384[label="0.855072;59pkt 59fpkt"];
677--6394[label="0.75;3pkt 3fpkt"];
677--7765[label="0.852941;58pkt 58fpkt"];
677--7772[label="0.8;4pkt 4fpkt"];
1010--2806[label="1;3pkt 3fpkt"];
1010--4088[label="1;4pkt 4fpkt"];
1010--6394[label="0.75;3pkt 3fpkt"];
1010--7772[label="1;4pkt 4fpkt"];
2806--4088[label="1;3pkt 3fpkt"];
2806--6394[label="0.666667;2pkt 2fpkt"];
2806--7772[label="1;3pkt 3fpkt"];
3818--6225[label="1;80pkt 80fpkt"];
4076--6384[label="1;69pkt 69fpkt"];
4076--7765[label="1;68pkt 68fpkt"];
4088--6394[label="1;4pkt 4fpkt"];
4088--7772[label="1;5pkt 5fpkt"];
6384--7765[label="1;68pkt 68fpkt"];
6394--7772[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.217.182" dst_port="6527" src_ip="189.183.238.25"/>
      <filter dst_ip="176.196.217.182" dst_port="6527" src_ip="196.217.104.52"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08723,2.23327,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
1784[label="216.212.121.236;d;25pkt 25fpkt", shape=diamond, color=yellow];
3056[label="216.212.121.236;d;23pkt 23fpkt", shape=hexagon, color=black];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.212.121.236:5050}[92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45.8333%)&lt;BR/&gt; 32786: (2.08333%)&lt;BR/&gt; 4278: (2.08333%)&lt;BR/&gt; 3621: (2.08333%)&lt;BR/&gt; 3042: (2.08333%)&gt;];
}
1784--3056[label="1;23pkt 23fpkt"];
1784--3764[label="0.04;1pkt 1fpkt"];
1784--4086[label="0.04;1pkt 1fpkt"];
1784--5708[label="0.04;1pkt 1fpkt"];
1784--6197[label="0.04;1pkt 1fpkt"];
1784--6393[label="0.04;1pkt 1fpkt"];
1784--7771[label="0.04;1pkt 1fpkt"];
3056--3764[label="0.0434783;1pkt 1fpkt"];
3056--4086[label="0.0434783;1pkt 1fpkt"];
3056--5708[label="0.0434783;1pkt 1fpkt"];
3056--6197[label="0.0434783;1pkt 1fpkt"];
3056--6393[label="0.0434783;1pkt 1fpkt"];
3056--7771[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.121.236" dst_port="5050"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
4091[label="197.140.215.53;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6397[label="197.140.215.53;13pkt 13fpkt", shape=invtriangle, color=brown];
7773[label="197.140.215.53;14pkt 14fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.140.215.53:*, 176.196.71.65:25}[50%]&lt;BR/&gt;{197.140.215.53:*, 176.196.30.101:25}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.2439%)&lt;BR/&gt; 53: (9.7561%)&lt;BR/&gt; 62857: (7.31707%)&lt;BR/&gt; 56043: (3.65854%)&lt;BR/&gt; 55886: (3.65854%)&gt;];
}
4091--6397[label="1;13pkt 13fpkt"];
4091--7773[label="1;14pkt 14fpkt"];
6397--7773[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.71.65" dst_port="25" src_ip="197.140.215.53"/>
      <filter dst_ip="176.196.30.101" dst_port="25" src_ip="197.140.215.53"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.163.220.54"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
4102[label="133.167.70.55;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6406[label="133.167.70.55;13pkt 13fpkt", shape=invtriangle, color=brown];
7780[label="133.167.70.55;13pkt 13fpkt", shape=invhouse, color=bisque];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.70.55:47438, *:*}[69.2308%]&lt;BR/&gt;{133.167.70.55:*, 201.90.135.172:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47438: (34.2105%)&lt;BR/&gt; 59789: (7.89474%)&lt;BR/&gt; 80: (7.89474%)&lt;BR/&gt; 63478: (3.94737%)&lt;BR/&gt; 62902: (3.94737%)&gt;];
}
4102--6406[label="1;12pkt 12fpkt"];
4102--7780[label="1;12pkt 12fpkt"];
6406--7780[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="201.90.135.172" src_ip="133.167.70.55"/>
      <filter src_ip="133.167.70.55" src_port="47438"/>
    </slice>
    <from sec="1118034013" usec="0"/>
    <to sec="1118034868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
4103[label="128.65.73.55;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6407[label="128.65.73.55;4pkt 4fpkt", shape=invtriangle, color=brown];
7781[label="128.65.73.55;3pkt 3fpkt", shape=invhouse, color=bisque];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.73.55:3364, 192.9.146.158:80}[25%]&lt;BR/&gt;{128.65.73.55:3360, 192.9.171.234:80}[25%]&lt;BR/&gt;{128.65.73.55:3362, 192.9.87.161:80}[25%]&lt;BR/&gt;{128.65.73.55:3366, 192.9.87.161:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 3366: (13.6364%)&lt;BR/&gt; 3364: (13.6364%)&lt;BR/&gt; 3360: (13.6364%)&lt;BR/&gt; 443: (13.6364%)&gt;];
}
4103--6407[label="1;4pkt 4fpkt"];
4103--7781[label="1;3pkt 3fpkt"];
6407--7781[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.87.161" dst_port="443" src_ip="128.65.73.55" src_port="3366"/>
      <filter dst_ip="192.9.87.161" dst_port="80" src_ip="128.65.73.55" src_port="3362"/>
      <filter dst_ip="192.9.171.234" dst_port="80" src_ip="128.65.73.55" src_port="3360"/>
      <filter dst_ip="192.9.146.158" dst_port="80" src_ip="128.65.73.55" src_port="3364"/>
    </slice>
    <from sec="1118034859" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.78.172.55"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
4109[label="128.65.49.56;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6412[label="128.65.49.56;13pkt 13fpkt", shape=invtriangle, color=brown];
7782[label="128.65.49.56;13pkt 13fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.49.56:*, 208.164.87.141:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1927: (3.94737%)&lt;BR/&gt; 1926: (3.94737%)&lt;BR/&gt; 1925: (3.94737%)&lt;BR/&gt; 1924: (3.94737%)&gt;];
}
4109--6412[label="1;12pkt 12fpkt"];
4109--7782[label="1;12pkt 12fpkt"];
6412--7782[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="208.164.87.141" dst_port="80" src_ip="128.65.49.56"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
4111[label="51.21.91.56;252pkt 252fpkt", shape=pentagon, color=darkviolet];
6414[label="51.21.91.56;253pkt 253fpkt", shape=invtriangle, color=brown];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.21.91.56:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4111--6414[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="51.21.91.56" src_port="1028"/>
    </slice>
    <from sec="1118034539" usec="0"/>
    <to sec="1118034562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.80.242.56"/>
    </slice>
    <from sec="1118034023" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
4116[label="197.77.46.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6419[label="197.77.46.57;2pkt 2fpkt", shape=invtriangle, color=brown];
7785[label="197.77.46.57;3pkt 3fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.46.57:1212, 192.9.57.53:1863}[33.3333%]&lt;BR/&gt;{197.77.46.57:1751, 192.9.61.84:1863}[33.3333%]&lt;BR/&gt;{197.77.46.57:1729, 192.9.61.182:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1729: (21.4286%)&lt;BR/&gt; 1212: (21.4286%)&lt;BR/&gt; 1751: (7.14286%)&gt;];
}
4116--6419[label="1;2pkt 2fpkt"];
4116--7785[label="1;2pkt 2fpkt"];
6419--7785[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.61.182" dst_port="1863" src_ip="197.77.46.57" src_port="1729"/>
      <filter dst_ip="192.9.61.84" dst_port="1863" src_ip="197.77.46.57" src_port="1751"/>
      <filter dst_ip="192.9.57.53" dst_port="1863" src_ip="197.77.46.57" src_port="1212"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
4117[label="84.10.67.57;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6420[label="84.10.67.57;5pkt 5fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.10.67.57:80, 128.65.180.158:1122}[20%]&lt;BR/&gt;{84.10.67.57:80, 128.65.180.158:1123}[20%]&lt;BR/&gt;{84.10.67.57:80, 128.65.180.158:1124}[20%]&lt;BR/&gt;{84.10.67.57:80, 128.65.180.158:1125}[20%]&lt;BR/&gt;{84.10.67.57:80, 128.65.180.158:1127}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1127: (10%)&lt;BR/&gt; 1125: (10%)&lt;BR/&gt; 1124: (10%)&lt;BR/&gt; 1123: (10%)&gt;];
}
4117--6420[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.180.158" dst_port="1127" src_ip="84.10.67.57" src_port="80"/>
      <filter dst_ip="128.65.180.158" dst_port="1125" src_ip="84.10.67.57" src_port="80"/>
      <filter dst_ip="128.65.180.158" dst_port="1124" src_ip="84.10.67.57" src_port="80"/>
      <filter dst_ip="128.65.180.158" dst_port="1123" src_ip="84.10.67.57" src_port="80"/>
      <filter dst_ip="128.65.180.158" dst_port="1122" src_ip="84.10.67.57" src_port="80"/>
    </slice>
    <from sec="1118034812" usec="0"/>
    <to sec="1118034846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
4123[label="128.65.49.58;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6424[label="128.65.49.58;7pkt 7fpkt", shape=invtriangle, color=brown];
7788[label="128.65.49.58;8pkt 8fpkt", shape=invhouse, color=bisque];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.49.58:*, 48.114.162.250:80}[50%]&lt;BR/&gt;{128.65.49.58:*, 53.54.212.208:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4783%)&lt;BR/&gt; 3369: (6.52174%)&lt;BR/&gt; 3368: (6.52174%)&lt;BR/&gt; 3367: (6.52174%)&lt;BR/&gt; 3366: (6.52174%)&gt;];
}
4123--6424[label="1;7pkt 7fpkt"];
4123--7788[label="1;8pkt 8fpkt"];
6424--7788[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="48.114.162.250" dst_port="80" src_ip="128.65.49.58"/>
      <filter dst_ip="53.54.212.208" dst_port="80" src_ip="128.65.49.58"/>
    </slice>
    <from sec="1118034039" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
4134[label="176.196.44.60;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6430[label="176.196.44.60;117pkt 117fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.44.60:*, 205.72.117.112:53}[58.9744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 3308: (0.429185%)&lt;BR/&gt; 3306: (0.429185%)&lt;BR/&gt; 3299: (0.429185%)&lt;BR/&gt; 3293: (0.429185%)&gt;];
}
4134--6430[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="205.72.117.112" dst_port="53" src_ip="176.196.44.60"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.105.89.60"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="186.142.13.61"/>
    </slice>
    <from sec="1118034010" usec="0"/>
    <to sec="1118034122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
4145[label="53.180.66.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6436[label="53.180.66.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.180.66.61:1547, 183.174.6.162:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1547: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4145--6436[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="183.174.6.162" dst_port="1434" src_ip="53.180.66.61" src_port="1547"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
4149[label="216.206.144.62;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6438[label="216.206.144.62;8pkt 8fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.206.144.62:80, 197.66.101.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32901: (6.25%)&lt;BR/&gt; 32900: (6.25%)&lt;BR/&gt; 32899: (6.25%)&lt;BR/&gt; 32898: (6.25%)&gt;];
}
4149--6438[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.210" src_ip="216.206.144.62" src_port="80"/>
    </slice>
    <from sec="1118034875" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
4150[label="183.82.194.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6439[label="183.82.194.62;1pkt 1fpkt", shape=invtriangle, color=brown];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.194.62:55710, 215.101.95.80:80}[50%]&lt;BR/&gt;{183.82.194.62:55700, 214.189.210.246:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55710: (33.3333%)&lt;BR/&gt; 55700: (16.6667%)&gt;];
}
4150--6439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.189.210.246" dst_port="80" src_ip="183.82.194.62" src_port="55700"/>
      <filter dst_ip="215.101.95.80" dst_port="80" src_ip="183.82.194.62" src_port="55710"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.176.92.63"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
4162[label="48.114.119.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6447[label="48.114.119.64;1pkt 1fpkt", shape=invtriangle, color=brown];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.114.119.64:80, 197.66.101.173:3955}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3955: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4162--6447[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.173" dst_port="3955" src_ip="48.114.119.64" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.126.27.65"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
4167[label="133.167.51.65;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6449[label="133.167.51.65;14pkt 14fpkt", shape=invtriangle, color=brown];
7801[label="133.167.51.65;14pkt 14fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.51.65:*, 194.83.247.122:80}[71.4286%]&lt;BR/&gt;{133.167.51.65:*, *:5190}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.3659%)&lt;BR/&gt; 5190: (14.6341%)&lt;BR/&gt; 2439: (3.65854%)&lt;BR/&gt; 1074: (3.65854%)&lt;BR/&gt; 1072: (3.65854%)&gt;];
}
4167--6449[label="1;13pkt 13fpkt"];
4167--7801[label="1;13pkt 13fpkt"];
6449--7801[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="5190" src_ip="133.167.51.65"/>
      <filter dst_ip="194.83.247.122" dst_port="80" src_ip="133.167.51.65"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
4168[label="87.8.56.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6450[label="87.8.56.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.8.56.65:1719, 200.20.23.1:1434}[50%]&lt;BR/&gt;{87.8.56.65:1719, 183.174.220.29:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1719: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4168--6450[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="183.174.220.29" dst_port="1434" src_ip="87.8.56.65" src_port="1719"/>
      <filter dst_ip="200.20.23.1" dst_port="1434" src_ip="87.8.56.65" src_port="1719"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
4169[label="133.167.56.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6451[label="133.167.56.65;1pkt 1fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.56.65:80, 52.43.75.252:36428}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36428: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4169--6451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="52.43.75.252" dst_port="36428" src_ip="133.167.56.65" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
1735[label="176.196.71.65;s;140pkt 140fpkt", shape=diamond, color=yellow];
4170[label="176.196.71.65;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6452[label="176.196.71.65;145pkt 145fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.71.65:25, *:*}[55.4795%]&lt;BR/&gt;{176.196.71.65:53, *:*}[44.5205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.5581%)&lt;BR/&gt; 53: (25.9302%)&lt;BR/&gt; 32769: (1.04651%)&lt;BR/&gt; 33701: (0.697674%)&lt;BR/&gt; 32770: (0.697674%)&gt;];
}
1735--3476[label="0.0428571;6pkt 6fpkt"];
1735--4170[label="0.992857;139pkt 139fpkt"];
1735--6452[label="0.992857;139pkt 139fpkt"];
4170--6452[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.71.65" src_port="25"/>
      <filter src_ip="176.196.71.65" src_port="53"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
4185[label="176.197.42.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6462[label="176.197.42.66;1pkt 1fpkt", shape=invtriangle, color=brown];
7806[label="176.197.42.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.42.66:63917, 216.212.122.39:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63917: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4185--6462[label="1;1pkt 1fpkt"];
4185--7806[label="1;1pkt 1fpkt"];
6462--7806[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.122.39" dst_port="80" src_ip="176.197.42.66" src_port="63917"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
4187[label="55.92.92.66;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6464[label="55.92.92.66;32pkt 32fpkt", shape=invtriangle, color=brown];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.92.92.66:*, *:33439}[21.875%]&lt;BR/&gt;{55.92.92.66:*, *:33440}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33440: (10.9375%)&lt;BR/&gt; 33439: (10.9375%)&lt;BR/&gt; 33438: (9.375%)&lt;BR/&gt; 33437: (9.375%)&lt;BR/&gt; 33436: (9.375%)&gt;];
}
4187--6464[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="33440" src_ip="55.92.92.66"/>
      <filter dst_port="33439" src_ip="55.92.92.66"/>
    </slice>
    <from sec="1118034650" usec="0"/>
    <to sec="1118034797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
4195[label="176.196.20.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6468[label="176.196.20.67;2pkt 2fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.20.67:2391, 39.170.43.34:53}[50%]&lt;BR/&gt;{176.196.20.67:2391, 194.8.94.246:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2391: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4195--6468[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.8.94.246" dst_port="53" src_ip="176.196.20.67" src_port="2391"/>
      <filter dst_ip="39.170.43.34" dst_port="53" src_ip="176.196.20.67" src_port="2391"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
4201[label="176.196.59.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6472[label="176.196.59.67;1pkt 1fpkt", shape=invtriangle, color=brown];
7812[label="176.196.59.67;1pkt 1fpkt", shape=invhouse, color=bisque];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.59.67:0, 54.222.84.48:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4201--6472[label="1;1pkt 1fpkt"];
4201--7812[label="1;1pkt 1fpkt"];
6472--7812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="54.222.84.48" src_ip="176.196.59.67"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
4204[label="197.141.143.67;227pkt 227fpkt", shape=pentagon, color=darkviolet];
6474[label="197.141.143.67;226pkt 226fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.141.143.67:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4084: (0.662252%)&lt;BR/&gt; 2517: (0.662252%)&lt;BR/&gt; 4900: (0.441501%)&lt;BR/&gt; 4589: (0.441501%)&gt;];
}
4204--6474[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="197.141.143.67"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
4205[label="219.221.149.67;85pkt 85fpkt", shape=pentagon, color=darkviolet];
6475[label="219.221.149.67;85pkt 85fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.221.149.67:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4714: (0.588235%)&lt;BR/&gt; 4707: (0.588235%)&lt;BR/&gt; 4701: (0.588235%)&lt;BR/&gt; 4694: (0.588235%)&gt;];
}
4205--6475[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="219.221.149.67"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.52.204.67"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
4210[label="184.236.11.68;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6478[label="184.236.11.68;6pkt 6fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{184.236.11.68:80, 183.174.171.189:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40429: (8.33333%)&lt;BR/&gt; 40428: (8.33333%)&lt;BR/&gt; 40384: (8.33333%)&lt;BR/&gt; 40373: (8.33333%)&gt;];
}
4210--6478[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="183.174.171.189" src_ip="184.236.11.68" src_port="80"/>
    </slice>
    <from sec="1118034748" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
4214[label="216.160.37.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6481[label="216.160.37.68;1pkt 1fpkt", shape=invtriangle, color=brown];
7817[label="216.160.37.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.160.37.68:443, 197.66.101.173:3877}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3877: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4214--6481[label="1;1pkt 1fpkt"];
4214--7817[label="1;1pkt 1fpkt"];
6481--7817[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.173" dst_port="3877" src_ip="216.160.37.68" src_port="443"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
4216[label="197.77.44.68;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6483[label="197.77.44.68;5pkt 5fpkt", shape=invtriangle, color=brown];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.44.68:*, 215.20.64.19:80}[33.3333%]&lt;BR/&gt;{197.77.44.68:*, 186.68.3.133:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1128: (9.09091%)&lt;BR/&gt; 1127: (9.09091%)&lt;BR/&gt; 1126: (9.09091%)&lt;BR/&gt; 1124: (9.09091%)&gt;];
}
4216--6483[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="186.68.3.133" dst_port="80" src_ip="197.77.44.68"/>
      <filter dst_ip="215.20.64.19" dst_port="80" src_ip="197.77.44.68"/>
    </slice>
    <from sec="1118034717" usec="0"/>
    <to sec="1118034790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
4218[label="176.196.129.68;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6485[label="176.196.129.68;9pkt 9fpkt", shape=invtriangle, color=brown];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.68:*, 208.168.155.45:80}[44.4444%]&lt;BR/&gt;{176.196.129.68:*, 208.80.84.7:80}[22.2222%]&lt;BR/&gt;{176.196.129.68:*, 208.80.40.114:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2831: (5.55556%)&lt;BR/&gt; 2830: (5.55556%)&lt;BR/&gt; 2829: (5.55556%)&lt;BR/&gt; 2828: (5.55556%)&gt;];
}
4218--6485[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="208.168.155.45" dst_port="80" src_ip="176.196.129.68"/>
      <filter dst_ip="208.80.40.114" dst_port="80" src_ip="176.196.129.68"/>
      <filter dst_ip="208.80.84.7" dst_port="80" src_ip="176.196.129.68"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.197.112.69"/>
    </slice>
    <from sec="1118034030" usec="0"/>
    <to sec="1118034873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
4231[label="209.6.128.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6493[label="209.6.128.69;3pkt 3fpkt", shape=invtriangle, color=brown];
7820[label="209.6.128.69;4pkt 4fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.6.128.69:1087, 176.196.145.177:80}[25%]&lt;BR/&gt;{209.6.128.69:1088, 176.196.145.177:80}[25%]&lt;BR/&gt;{209.6.128.69:1089, 176.196.145.177:80}[25%]&lt;BR/&gt;{209.6.128.69:1090, 176.196.145.177:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1090: (13.6364%)&lt;BR/&gt; 1089: (13.6364%)&lt;BR/&gt; 1088: (13.6364%)&lt;BR/&gt; 1087: (9.09091%)&gt;];
}
4231--6493[label="1;3pkt 3fpkt"];
4231--7820[label="1;4pkt 4fpkt"];
6493--7820[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.145.177" dst_port="80" src_ip="209.6.128.69" src_port="1090"/>
      <filter dst_ip="176.196.145.177" dst_port="80" src_ip="209.6.128.69" src_port="1089"/>
      <filter dst_ip="176.196.145.177" dst_port="80" src_ip="209.6.128.69" src_port="1088"/>
      <filter dst_ip="176.196.145.177" dst_port="80" src_ip="209.6.128.69" src_port="1087"/>
    </slice>
    <from sec="1118034611" usec="0"/>
    <to sec="1118034634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.153.20.71"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
4253[label="87.24.29.71;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6506[label="87.24.29.71;8pkt 8fpkt", shape=invtriangle, color=brown];
7830[label="87.24.29.71;8pkt 8fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.24.29.71:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29699: (6.25%)&lt;BR/&gt; 27649: (6.25%)&lt;BR/&gt; 24776: (6.25%)&lt;BR/&gt; 16422: (6.25%)&gt;];
}
4253--6506[label="1;8pkt 8fpkt"];
4253--7830[label="1;8pkt 8fpkt"];
6506--7830[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="87.24.29.71" src_port="80"/>
    </slice>
    <from sec="1118034566" usec="0"/>
    <to sec="1118034725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
4256[label="219.176.100.71;65pkt 65fpkt", shape=pentagon, color=darkviolet];
6507[label="219.176.100.71;64pkt 64fpkt", shape=invtriangle, color=brown];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.176.100.71:*, *:135}[33.8462%]&lt;BR/&gt;{219.176.100.71:*, *:445}[33.8462%]&lt;BR/&gt;{219.176.100.71:*, *:1025}[32.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (17.0543%)&lt;BR/&gt; 135: (16.6667%)&lt;BR/&gt; 1025: (16.2791%)&lt;BR/&gt; 4991: (0.775194%)&lt;BR/&gt; 4990: (0.775194%)&gt;];
}
4256--6507[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="219.176.100.71"/>
      <filter dst_port="135" src_ip="219.176.100.71"/>
      <filter dst_port="1025" src_ip="219.176.100.71"/>
    </slice>
    <from sec="1118034137" usec="0"/>
    <to sec="1118034782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.93.226.72"/>
    </slice>
    <from sec="1118034716" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.197.43.73"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
4276[label="209.114.145.73;206pkt 206fpkt", shape=pentagon, color=darkviolet];
6522[label="209.114.145.73;206pkt 206fpkt", shape=invtriangle, color=brown];
7839[label="209.114.145.73;205pkt 205fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.114.145.73:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 45402: (0.243112%)&lt;BR/&gt; 42352: (0.243112%)&lt;BR/&gt; 42351: (0.243112%)&lt;BR/&gt; 42350: (0.243112%)&gt;];
}
4276--6522[label="1;206pkt 206fpkt"];
4276--7839[label="1;205pkt 205fpkt"];
6522--7839[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="209.114.145.73"/>
    </slice>
    <from sec="1118034537" usec="0"/>
    <to sec="1118034538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.5.91.74"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
4309[label="202.250.253.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6536[label="202.250.253.75;2pkt 2fpkt", shape=invtriangle, color=brown];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.250.253.75:80, 197.66.101.172:64391}[50%]&lt;BR/&gt;{202.250.253.75:80, 197.66.101.172:64411}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64411: (25%)&lt;BR/&gt; 64391: (25%)&gt;];
}
4309--6536[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.172" dst_port="64411" src_ip="202.250.253.75" src_port="80"/>
      <filter dst_ip="197.66.101.172" dst_port="64391" src_ip="202.250.253.75" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
4312[label="36.103.40.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6537[label="36.103.40.76;2pkt 2fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.103.40.76:80, 128.65.65.225:4523}[50%]&lt;BR/&gt;{36.103.40.76:80, 128.65.65.225:4524}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4524: (33.3333%)&lt;BR/&gt; 4523: (16.6667%)&gt;];
}
4312--6537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.65.225" dst_port="4524" src_ip="36.103.40.76" src_port="80"/>
      <filter dst_ip="128.65.65.225" dst_port="4523" src_ip="36.103.40.76" src_port="80"/>
    </slice>
    <from sec="1118034159" usec="0"/>
    <to sec="1118034202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
2311[label="216.212.121.245;d;17pkt 17fpkt", shape=diamond, color=yellow];
4313[label="133.167.42.76;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5294[label="133.167.84.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6538[label="133.167.42.76;7pkt 7fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.212.121.245:5050}[62.5%]&lt;BR/&gt;{133.167.42.76:*, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.2727%)&lt;BR/&gt; 3478: (7.57576%)&lt;BR/&gt; 5061: (6.06061%)&lt;BR/&gt; 1110: (6.06061%)&lt;BR/&gt; 1106: (4.54545%)&gt;];
}
2311--4313[label="0.125;1pkt 1fpkt"];
2311--5294[label="1;1pkt 1fpkt"];
2311--6538[label="0.142857;1pkt 1fpkt"];
4313--6538[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.42.76"/>
      <filter dst_ip="216.212.121.245" dst_port="5050"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
4317[label="53.137.80.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6541[label="53.137.80.76;1pkt 1fpkt", shape=invtriangle, color=brown];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.137.80.76:80, 197.66.101.200:39381}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39381: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4317--6541[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.200" dst_port="39381" src_ip="53.137.80.76" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
4318[label="183.174.84.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6542[label="183.174.84.76;2pkt 2fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.84.76:64794, 134.144.152.78:53}[50%]&lt;BR/&gt;{183.174.84.76:53, 197.5.87.135:38378}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 64794: (25%)&lt;BR/&gt; 38378: (25%)&gt;];
}
4318--6542[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.5.87.135" dst_port="38378" src_ip="183.174.84.76" src_port="53"/>
      <filter dst_ip="134.144.152.78" dst_port="53" src_ip="183.174.84.76" src_port="64794"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
4322[label="176.196.157.76;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6545[label="176.196.157.76;31pkt 31fpkt", shape=invtriangle, color=brown];
7850[label="176.196.157.76;31pkt 31fpkt", shape=invhouse, color=bisque];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.157.76:*, 192.9.146.158:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1238: (1.63043%)&lt;BR/&gt; 1237: (1.63043%)&lt;BR/&gt; 1236: (1.63043%)&lt;BR/&gt; 1235: (1.63043%)&gt;];
}
4322--6545[label="1;30pkt 30fpkt"];
4322--7850[label="1;30pkt 30fpkt"];
6545--7850[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.146.158" dst_port="80" src_ip="176.196.157.76"/>
    </slice>
    <from sec="1118034794" usec="0"/>
    <to sec="1118034834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
4323[label="211.93.164.76;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6546[label="211.93.164.76;6pkt 6fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.93.164.76:80, 197.66.101.200:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39429: (7.69231%)&lt;BR/&gt; 39428: (7.69231%)&lt;BR/&gt; 39427: (7.69231%)&lt;BR/&gt; 39426: (7.69231%)&gt;];
}
4323--6546[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.200" src_ip="211.93.164.76" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
4328[label="176.196.5.77;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6550[label="176.196.5.77;13pkt 13fpkt", shape=invtriangle, color=brown];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.5.77:25, *:*}[61.5385%]&lt;BR/&gt;{176.196.5.77:*, 197.181.44.202:25}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 55842: (3.84615%)&lt;BR/&gt; 45732: (3.84615%)&lt;BR/&gt; 44851: (3.84615%)&lt;BR/&gt; 22378: (3.84615%)&gt;];
}
4328--6550[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.5.77" src_port="25"/>
      <filter dst_ip="197.181.44.202" dst_port="25" src_ip="176.196.5.77"/>
    </slice>
    <from sec="1118034129" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.37.124.77"/>
    </slice>
    <from sec="1118034057" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
4337[label="87.178.25.78;110pkt 110fpkt", shape=pentagon, color=darkviolet];
6556[label="87.178.25.78;111pkt 111fpkt", shape=invtriangle, color=brown];
7856[label="87.178.25.78;111pkt 111fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.178.25.78:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4319: (0.451807%)&lt;BR/&gt; 4318: (0.451807%)&lt;BR/&gt; 4310: (0.451807%)&lt;BR/&gt; 4309: (0.451807%)&gt;];
}
4337--6556[label="1;110pkt 110fpkt"];
4337--7856[label="1;110pkt 110fpkt"];
6556--7856[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="87.178.25.78"/>
    </slice>
    <from sec="1118034308" usec="0"/>
    <to sec="1118034310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.136.221.78"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
4356[label="176.197.42.80;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6566[label="176.197.42.80;9pkt 9fpkt", shape=invtriangle, color=brown];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.42.80:*, 53.160.140.107:80}[66.6667%]&lt;BR/&gt;{176.197.42.80:*, 197.12.142.150:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 2035: (5.88235%)&lt;BR/&gt; 1952: (5.88235%)&lt;BR/&gt; 1811: (5.88235%)&lt;BR/&gt; 1792: (5.88235%)&gt;];
}
4356--6566[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="53.160.140.107" dst_port="80" src_ip="176.197.42.80"/>
      <filter dst_ip="197.12.142.150" dst_port="80" src_ip="176.197.42.80"/>
    </slice>
    <from sec="1118034068" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
1329[label="176.196.59.80;s;277pkt 277fpkt", shape=diamond, color=yellow];
4357[label="176.196.59.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6567[label="176.196.59.80;2pkt 2fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.59.80:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1329--1335[label="0.00361011;1pkt 1fpkt"];
1329--1513[label="0.00361011;1pkt 1fpkt"];
1329--1525[label="0.00361011;1pkt 1fpkt"];
1329--1555[label="0.00361011;1pkt 1fpkt"];
1329--1746[label="0.00361011;1pkt 1fpkt"];
1329--1755[label="0.00584795;1pkt 1fpkt"];
1329--2227[label="0.00483092;1pkt 1fpkt"];
1329--2251[label="0.00440529;1pkt 1fpkt"];
1329--2450[label="0.00497512;1pkt 1fpkt"];
1329--2456[label="0.00529101;1pkt 1fpkt"];
1329--4357[label="0.5;1pkt 1fpkt"];
1329--6567[label="0.5;1pkt 1fpkt"];
4357--6567[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.59.80"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.65.64.80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
4361[label="176.197.67.80;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6569[label="176.197.67.80;4pkt 4fpkt", shape=invtriangle, color=brown];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.67.80:80, 48.114.107.17:56582}[25%]&lt;BR/&gt;{176.197.67.80:80, 48.114.106.39:47555}[25%]&lt;BR/&gt;{176.197.67.80:80, 48.114.107.208:47028}[25%]&lt;BR/&gt;{176.197.67.80:80, 48.114.107.208:47268}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56582: (14.2857%)&lt;BR/&gt; 47268: (14.2857%)&lt;BR/&gt; 47028: (14.2857%)&lt;BR/&gt; 47555: (7.14286%)&gt;];
}
4361--6569[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="48.114.107.208" dst_port="47268" src_ip="176.197.67.80" src_port="80"/>
      <filter dst_ip="48.114.107.208" dst_port="47028" src_ip="176.197.67.80" src_port="80"/>
      <filter dst_ip="48.114.106.39" dst_port="47555" src_ip="176.197.67.80" src_port="80"/>
      <filter dst_ip="48.114.107.17" dst_port="56582" src_ip="176.197.67.80" src_port="80"/>
    </slice>
    <from sec="1118034375" usec="0"/>
    <to sec="1118034397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
4376[label="87.176.134.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6577[label="87.176.134.81;1pkt 1fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.176.134.81:30552, 130.154.162.233:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30552: (50%)&lt;BR/&gt; 1433: (50%)&gt;];
}
4376--6577[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.162.233" dst_port="1433" src_ip="87.176.134.81" src_port="30552"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
4377[label="183.82.168.81;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6578[label="183.82.168.81;26pkt 26fpkt", shape=invtriangle, color=brown];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.168.81:*, *:6660}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6660: (38.2353%)&lt;BR/&gt; 6667: (7.84314%)&lt;BR/&gt; 6060: (3.92157%)&lt;BR/&gt; 57696: (1.96078%)&lt;BR/&gt; 57695: (1.96078%)&gt;];
}
4377--6578[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="6660" src_ip="183.82.168.81"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.197.43.82"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.167.68.82"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
4390[label="176.196.138.82;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6587[label="176.196.138.82;6pkt 6fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.138.82:*, 195.153.196.213:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1102: (7.69231%)&lt;BR/&gt; 1101: (7.69231%)&lt;BR/&gt; 1100: (7.69231%)&lt;BR/&gt; 1099: (7.69231%)&gt;];
}
4390--6587[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="195.153.196.213" dst_port="80" src_ip="176.196.138.82"/>
    </slice>
    <from sec="1118034771" usec="0"/>
    <to sec="1118034867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
4404[label="197.66.124.83;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6595[label="197.66.124.83;18pkt 18fpkt", shape=invtriangle, color=brown];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.124.83:65534, *:53}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 65534: (47.2222%)&lt;BR/&gt; 32769: (2.77778%)&gt;];
}
4404--6595[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="197.66.124.83" src_port="65534"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
4406[label="196.8.2.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6597[label="196.8.2.84;2pkt 2fpkt", shape=invtriangle, color=brown];
7874[label="196.8.2.84;2pkt 2fpkt", shape=invhouse, color=bisque];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.2.84:4518, 194.92.200.91:80}[50%]&lt;BR/&gt;{196.8.2.84:4530, 194.92.200.91:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4530: (25%)&lt;BR/&gt; 4518: (25%)&gt;];
}
4406--6597[label="1;2pkt 2fpkt"];
4406--7874[label="1;2pkt 2fpkt"];
6597--7874[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.92.200.91" dst_port="80" src_ip="196.8.2.84" src_port="4530"/>
      <filter dst_ip="194.92.200.91" dst_port="80" src_ip="196.8.2.84" src_port="4518"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
1524[label="216.212.121.220;d;31pkt 31fpkt", shape=diamond, color=yellow];
3579[label="133.167.4.6;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4409[label="133.167.48.84;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6083[label="133.167.4.6;11pkt 11fpkt", shape=invtriangle, color=brown];
6599[label="133.167.48.84;42pkt 42fpkt", shape=invtriangle, color=brown];
7611[label="133.167.4.6;12pkt 12fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.48.84:*, *:6663}[47.561%]&lt;BR/&gt;{*:*, 216.212.121.220:5050}[26.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6663: (26%)&lt;BR/&gt; 5050: (10%)&lt;BR/&gt; 3478: (5%)&lt;BR/&gt; 5061: (2%)&lt;BR/&gt; 1467: (2%)&gt;];
}
1524--2461[label="0.0625;1pkt 1fpkt"];
1524--3478[label="0.0322581;1pkt 1fpkt"];
1524--3485[label="0.0322581;1pkt 1fpkt"];
1524--3579[label="0.166667;2pkt 2fpkt"];
1524--3814[label="0.0416667;1pkt 1fpkt"];
1524--4019[label="0.0666667;1pkt 1fpkt"];
1524--4409[label="0.0322581;1pkt 1fpkt"];
1524--6083[label="0.181818;2pkt 2fpkt"];
1524--6599[label="0.0322581;1pkt 1fpkt"];
1524--7611[label="0.166667;2pkt 2fpkt"];
3579--6083[label="1;11pkt 11fpkt"];
3579--7611[label="1;12pkt 12fpkt"];
4409--6599[label="1;42pkt 42fpkt"];
6083--7611[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="6663" src_ip="133.167.48.84"/>
      <filter dst_ip="216.212.121.220" dst_port="5050"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
4414[label="176.196.137.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6602[label="176.196.137.84;1pkt 1fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.137.84:25, 50.10.110.242:40289}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40289: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4414--6602[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="50.10.110.242" dst_port="40289" src_ip="176.196.137.84" src_port="25"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
4415[label="219.219.146.84;349pkt 349fpkt", shape=pentagon, color=darkviolet];
6603[label="219.219.146.84;349pkt 349fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.219.146.84:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65379: (0.143266%)&lt;BR/&gt; 65366: (0.143266%)&lt;BR/&gt; 65287: (0.143266%)&lt;BR/&gt; 65151: (0.143266%)&gt;];
}
4415--6603[label="1;349pkt 349fpkt"];
</description>
    <slice>
      <filter src_ip="219.219.146.84" src_port="80"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.119.214.84"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
4426[label="196.58.147.85;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6608[label="196.58.147.85;8pkt 8fpkt", shape=invtriangle, color=brown];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.58.147.85:80, 197.66.101.210:*}[62.5%]&lt;BR/&gt;{196.58.147.85:32769, *:53}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 32769: (18.75%)&lt;BR/&gt; 53: (18.75%)&lt;BR/&gt; 32857: (6.25%)&lt;BR/&gt; 32856: (6.25%)&gt;];
}
4426--6608[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.210" src_ip="196.58.147.85" src_port="80"/>
      <filter dst_port="53" src_ip="196.58.147.85" src_port="32769"/>
    </slice>
    <from sec="1118034859" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
4427[label="217.96.189.85;137pkt 137fpkt", shape=pentagon, color=darkviolet];
6609[label="217.96.189.85;138pkt 138fpkt", shape=invtriangle, color=brown];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.96.189.85:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4392: (0.727273%)&lt;BR/&gt; 3243: (0.727273%)&lt;BR/&gt; 1198: (0.727273%)&lt;BR/&gt; 1178: (0.727273%)&gt;];
}
4427--6609[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="217.96.189.85"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
4430[label="176.196.14.86;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6610[label="176.196.14.86;16pkt 16fpkt", shape=invtriangle, color=brown];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.14.86:*, 204.36.98.226:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1267: (3.125%)&lt;BR/&gt; 1266: (3.125%)&lt;BR/&gt; 1265: (3.125%)&lt;BR/&gt; 1264: (3.125%)&gt;];
}
4430--6610[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="204.36.98.226" dst_port="80" src_ip="176.196.14.86"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
4438[label="176.196.194.86;54pkt 54fpkt", shape=pentagon, color=darkviolet];
6615[label="176.196.194.86;54pkt 54fpkt", shape=invtriangle, color=brown];
7883[label="176.196.194.86;54pkt 54fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.194.86:*, 216.153.65.193:113}[20.3704%]&lt;BR/&gt;{176.196.194.86:25, 216.153.65.193:*}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 55349: (0.925926%)&lt;BR/&gt; 54941: (0.925926%)&lt;BR/&gt; 54361: (0.925926%)&gt;];
}
4438--6615[label="1;54pkt 54fpkt"];
4438--7883[label="1;54pkt 54fpkt"];
6615--7883[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="216.153.65.193" src_ip="176.196.194.86" src_port="25"/>
      <filter dst_ip="216.153.65.193" dst_port="113" src_ip="176.196.194.86"/>
    </slice>
    <from sec="1118034032" usec="0"/>
    <to sec="1118034870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
4458[label="183.82.37.89;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6625[label="183.82.37.89;16pkt 16fpkt", shape=invtriangle, color=brown];
7889[label="183.82.37.89;15pkt 15fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.37.89:*, *:1863}[75%]&lt;BR/&gt;{183.82.37.89:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (37.234%)&lt;BR/&gt; 80: (12.766%)&lt;BR/&gt; 1795: (3.19149%)&lt;BR/&gt; 1794: (3.19149%)&lt;BR/&gt; 1793: (3.19149%)&gt;];
}
4458--6625[label="1;16pkt 16fpkt"];
4458--7889[label="1;15pkt 15fpkt"];
6625--7889[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="183.82.37.89"/>
      <filter dst_port="80" src_ip="183.82.37.89"/>
    </slice>
    <from sec="1118034025" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.56.97.89"/>
    </slice>
    <from sec="1118034281" usec="0"/>
    <to sec="1118034326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0204,2.10998,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
237[label="218.106.43.158;s;2pkt 2fpkt", shape=diamond, color=yellow];
569[label="196.8.19.132;d;80pkt 80fpkt", shape=diamond, color=yellow];
2778[label="218.106.43.158;s;2pkt 2fpkt", shape=hexagon, color=black];
4473[label="210.224.22.90;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4929[label="87.38.0.137;47pkt 47fpkt", shape=pentagon, color=darkviolet];
5148[label="218.106.43.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6638[label="210.224.22.90;28pkt 28fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 196.8.19.132:*}[43.0657%]&lt;BR/&gt;{87.38.0.137:80, 175.199.181.4:*}[32.8467%]&lt;BR/&gt;{210.224.22.90:80, *:*}[20.438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.328%)&lt;BR/&gt; 53: (4.49735%)&lt;BR/&gt; 57121: (3.1746%)&lt;BR/&gt; 5180: (1.0582%)&lt;BR/&gt; 5013: (1.0582%)&gt;];
}
237--569[label="1;2pkt 2fpkt"];
237--2778[label="1;2pkt 2fpkt"];
237--5148[label="1;2pkt 2fpkt"];
569--1106[label="0.0375;3pkt 3fpkt"];
569--1348[label="0.025;2pkt 2fpkt"];
569--2778[label="1;2pkt 2fpkt"];
569--3476[label="0.025;2pkt 2fpkt"];
569--3477[label="0.0125;1pkt 1fpkt"];
569--3495[label="0.0125;1pkt 1fpkt"];
569--4473[label="0.571429;16pkt 16fpkt"];
569--4904[label="0.0322581;1pkt 1fpkt"];
569--4929[label="0.0425532;2pkt 2fpkt"];
569--4982[label="0.0322581;1pkt 1fpkt"];
569--5148[label="1;2pkt 2fpkt"];
569--5855[label="0.0625;5pkt 5fpkt"];
569--6638[label="0.571429;16pkt 16fpkt"];
2778--5148[label="1;2pkt 2fpkt"];
4473--6638[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="210.224.22.90" src_port="80"/>
      <filter dst_ip="196.8.19.132" src_port="80"/>
      <filter dst_ip="175.199.181.4" src_ip="87.38.0.137" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
4480[label="219.191.192.90;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6642[label="219.191.192.90;14pkt 14fpkt", shape=invtriangle, color=brown];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.191.192.90:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4480--6642[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.191.192.90" src_port="1035"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.242.80.91"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.70.134.91"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
4493[label="52.101.172.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6651[label="52.101.172.91;1pkt 1fpkt", shape=invtriangle, color=brown];
7899[label="52.101.172.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.101.172.91:80, 133.167.12.180:2106}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2106: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4493--6651[label="1;1pkt 1fpkt"];
4493--7899[label="1;1pkt 1fpkt"];
6651--7899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.12.180" dst_port="2106" src_ip="52.101.172.91" src_port="80"/>
    </slice>
    <from sec="1118034755" usec="0"/>
    <to sec="1118034858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
4497[label="183.82.3.92;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6654[label="183.82.3.92;10pkt 10fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.3.92:995, 53.189.140.121:*}[36.3636%]&lt;BR/&gt;{183.82.3.92:110, 55.204.160.29:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (26.1905%)&lt;BR/&gt; 110: (19.0476%)&lt;BR/&gt; 52354: (4.7619%)&lt;BR/&gt; 52349: (4.7619%)&lt;BR/&gt; 52344: (4.7619%)&gt;];
}
4497--6654[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="53.189.140.121" src_ip="183.82.3.92" src_port="995"/>
      <filter dst_ip="55.204.160.29" src_ip="183.82.3.92" src_port="110"/>
    </slice>
    <from sec="1118034130" usec="0"/>
    <to sec="1118034837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
4501[label="222.228.51.92;308pkt 308fpkt", shape=pentagon, color=darkviolet];
6657[label="222.228.51.92;308pkt 308fpkt", shape=invtriangle, color=brown];
7903[label="222.228.51.92;309pkt 309fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.228.51.92:*, *:1026}[50.8091%]&lt;BR/&gt;{222.228.51.92:*, *:1027}[49.1909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.3514%)&lt;BR/&gt; 1027: (24.6486%)&lt;BR/&gt; 35085: (3.89189%)&lt;BR/&gt; 34729: (2.43243%)&lt;BR/&gt; 34895: (2.10811%)&gt;];
}
4501--6657[label="1;308pkt 308fpkt"];
4501--7903[label="1;308pkt 308fpkt"];
6657--7903[label="1;308pkt 308fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="222.228.51.92"/>
      <filter dst_port="1027" src_ip="222.228.51.92"/>
    </slice>
    <from sec="1118034217" usec="0"/>
    <to sec="1118034218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
4503[label="196.174.131.92;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6658[label="196.174.131.92;26pkt 26fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.174.131.92:80, 128.65.184.243:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1463: (1.96078%)&lt;BR/&gt; 1459: (1.96078%)&lt;BR/&gt; 1457: (1.96078%)&lt;BR/&gt; 1454: (1.96078%)&gt;];
}
4503--6658[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.184.243" src_ip="196.174.131.92" src_port="80"/>
    </slice>
    <from sec="1118034853" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
517[label="176.196.172.4;d;48pkt 48fpkt", shape=diamond, color=yellow];
551[label="87.1.16.112;s;14pkt 14fpkt", shape=diamond, color=yellow];
2147[label="87.1.16.5;s;21pkt 21fpkt", shape=diamond, color=yellow];
2772[label="87.1.16.112;s;14pkt 14fpkt", shape=hexagon, color=black];
2839[label="176.196.172.4;d;53pkt 53fpkt", shape=hexagon, color=black];
3289[label="87.1.16.5;s;22pkt 22fpkt", shape=hexagon, color=black];
3564[label="87.1.16.5;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4506[label="87.1.16.93;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6660[label="87.1.16.93;12pkt 12fpkt", shape=invtriangle, color=brown];
7905[label="87.1.16.93;12pkt 12fpkt", shape=invhouse, color=bisque];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.1.16.5:80, 176.196.172.4:*}[29.703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1769: (0.840336%)&lt;BR/&gt; 1767: (0.840336%)&lt;BR/&gt; 1766: (0.840336%)&lt;BR/&gt; 1763: (0.840336%)&gt;];
}
517--2147[label="1;21pkt 21fpkt"];
517--3289[label="0.954545;21pkt 21fpkt"];
517--3477[label="0.104167;5pkt 5fpkt"];
517--3495[label="0.104167;5pkt 5fpkt"];
517--3564[label="0.7;21pkt 21fpkt"];
551--2772[label="1;14pkt 14fpkt"];
551--2839[label="1;14pkt 14fpkt"];
2147--3289[label="1;21pkt 21fpkt"];
2147--3477[label="0.0952381;2pkt 2fpkt"];
2147--3495[label="0.0952381;2pkt 2fpkt"];
2147--3564[label="1;21pkt 21fpkt"];
2772--2839[label="1;14pkt 14fpkt"];
2839--3289[label="0.0454545;1pkt 1fpkt"];
2839--3564[label="0.3;9pkt 9fpkt"];
2839--4506[label="1;12pkt 12fpkt"];
2839--6660[label="1;12pkt 12fpkt"];
2839--7905[label="1;12pkt 12fpkt"];
3289--3477[label="0.0909091;2pkt 2fpkt"];
3289--3495[label="0.0909091;2pkt 2fpkt"];
3289--3564[label="1;22pkt 22fpkt"];
4506--6660[label="1;12pkt 12fpkt"];
4506--7905[label="1;12pkt 12fpkt"];
6660--7905[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.172.4" src_ip="87.1.16.5" src_port="80"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
4507[label="183.82.32.93;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6661[label="183.82.32.93;10pkt 10fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.32.93:*, 192.9.160.107:80}[63.6364%]&lt;BR/&gt;{183.82.32.93:*, 192.9.163.0:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1926: (4.7619%)&lt;BR/&gt; 1925: (4.7619%)&lt;BR/&gt; 1924: (4.7619%)&lt;BR/&gt; 1923: (4.7619%)&gt;];
}
4507--6661[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.160.107" dst_port="80" src_ip="183.82.32.93"/>
      <filter dst_ip="192.9.163.0" dst_port="80" src_ip="183.82.32.93"/>
    </slice>
    <from sec="1118034850" usec="0"/>
    <to sec="1118034870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
4512[label="55.221.229.93;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6664[label="55.221.229.93;4pkt 4fpkt", shape=invtriangle, color=brown];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.221.229.93:80, 197.66.101.210:32950}[25%]&lt;BR/&gt;{55.221.229.93:80, 197.66.101.210:32951}[25%]&lt;BR/&gt;{55.221.229.93:80, 197.66.101.210:32964}[25%]&lt;BR/&gt;{55.221.229.93:80, 197.66.101.210:32966}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32966: (12.5%)&lt;BR/&gt; 32964: (12.5%)&lt;BR/&gt; 32951: (12.5%)&lt;BR/&gt; 32950: (12.5%)&gt;];
}
4512--6664[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.210" dst_port="32966" src_ip="55.221.229.93" src_port="80"/>
      <filter dst_ip="197.66.101.210" dst_port="32964" src_ip="55.221.229.93" src_port="80"/>
      <filter dst_ip="197.66.101.210" dst_port="32951" src_ip="55.221.229.93" src_port="80"/>
      <filter dst_ip="197.66.101.210" dst_port="32950" src_ip="55.221.229.93" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.202.4.94"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.136.77.96"/>
    </slice>
    <from sec="1118034853" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
4530[label="176.196.95.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6675[label="176.196.95.96;3pkt 3fpkt", shape=invtriangle, color=brown];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.96:22, 219.5.199.201:38382}[33.3333%]&lt;BR/&gt;{176.196.95.96:22, 219.5.199.201:42548}[33.3333%]&lt;BR/&gt;{176.196.95.96:22, 219.5.199.201:42855}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42855: (20%)&lt;BR/&gt; 42548: (20%)&lt;BR/&gt; 38382: (10%)&gt;];
}
4530--6675[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42855" src_ip="176.196.95.96" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42548" src_ip="176.196.95.96" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="38382" src_ip="176.196.95.96" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
4535[label="133.167.162.96;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6678[label="133.167.162.96;116pkt 116fpkt", shape=invtriangle, color=brown];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.162.96:*, *:6663}[56.4103%]&lt;BR/&gt;{133.167.162.96:*, 203.64.36.41:53}[29.0598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6663: (28.3262%)&lt;BR/&gt; 53: (18.6695%)&lt;BR/&gt; 0: (3.43348%)&lt;BR/&gt; 2753: (0.858369%)&lt;BR/&gt; 2742: (0.858369%)&gt;];
}
4535--6678[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="6663" src_ip="133.167.162.96"/>
      <filter dst_ip="203.64.36.41" dst_port="53" src_ip="133.167.162.96"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
4546[label="132.187.66.97;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6684[label="132.187.66.97;10pkt 10fpkt", shape=invtriangle, color=brown];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.187.66.97:*, 133.167.76.217:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38680: (5%)&lt;BR/&gt; 38502: (5%)&lt;BR/&gt; 38326: (5%)&lt;BR/&gt; 38259: (5%)&gt;];
}
4546--6684[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.76.217" dst_port="80" src_ip="132.187.66.97"/>
    </slice>
    <from sec="1118034726" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
4550[label="176.196.95.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6687[label="176.196.95.97;2pkt 2fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.97:22, 219.5.199.201:42534}[50%]&lt;BR/&gt;{176.196.95.97:22, 219.5.199.201:42875}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42875: (25%)&lt;BR/&gt; 42534: (25%)&gt;];
}
4550--6687[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42875" src_ip="176.196.95.97" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42534" src_ip="176.196.95.97" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.197.0.98"/>
    </slice>
    <from sec="1118034489" usec="0"/>
    <to sec="1118034577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
4561[label="33.199.100.98;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6695[label="33.199.100.98;254pkt 254fpkt", shape=invtriangle, color=brown];
7919[label="33.199.100.98;254pkt 254fpkt", shape=invhouse, color=bisque];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.199.100.98:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4561--6695[label="1;254pkt 254fpkt"];
4561--7919[label="1;254pkt 254fpkt"];
6695--7919[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="33.199.100.98" src_port="1026"/>
    </slice>
    <from sec="1118034637" usec="0"/>
    <to sec="1118034656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
4562[label="87.17.220.98;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6696[label="87.17.220.98;117pkt 117fpkt", shape=invtriangle, color=brown];
7920[label="87.17.220.98;117pkt 117fpkt", shape=invhouse, color=bisque];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.17.220.98:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4562--6696[label="1;116pkt 116fpkt"];
4562--7920[label="1;116pkt 116fpkt"];
6696--7920[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="87.17.220.98" src_port="1030"/>
    </slice>
    <from sec="1118034115" usec="0"/>
    <to sec="1118034138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.92.236.98"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
4567[label="209.44.72.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6699[label="209.44.72.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.44.72.99:8000, 176.196.24.108:4168}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 4168: (50%)&gt;];
}
4567--6699[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.24.108" dst_port="4168" src_ip="209.44.72.99" src_port="8000"/>
    </slice>
    <from sec="1118034448" usec="0"/>
    <to sec="1118034464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
4569[label="128.65.100.99;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6700[label="128.65.100.99;5pkt 5fpkt", shape=invtriangle, color=brown];
7921[label="128.65.100.99;4pkt 4fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.100.99:80, 48.114.104.75:56117}[20%]&lt;BR/&gt;{128.65.100.99:80, 52.213.73.189:34132}[20%]&lt;BR/&gt;{128.65.100.99:80, 52.213.73.189:34416}[20%]&lt;BR/&gt;{128.65.100.99:80, 192.69.226.211:44880}[20%]&lt;BR/&gt;{128.65.100.99:80, 192.69.226.211:45144}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45144: (11.5385%)&lt;BR/&gt; 44880: (11.5385%)&lt;BR/&gt; 34416: (11.5385%)&lt;BR/&gt; 34132: (11.5385%)&gt;];
}
4569--6700[label="1;4pkt 4fpkt"];
4569--7921[label="1;4pkt 4fpkt"];
6700--7921[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.69.226.211" dst_port="45144" src_ip="128.65.100.99" src_port="80"/>
      <filter dst_ip="192.69.226.211" dst_port="44880" src_ip="128.65.100.99" src_port="80"/>
      <filter dst_ip="52.213.73.189" dst_port="34416" src_ip="128.65.100.99" src_port="80"/>
      <filter dst_ip="52.213.73.189" dst_port="34132" src_ip="128.65.100.99" src_port="80"/>
      <filter dst_ip="48.114.104.75" dst_port="56117" src_ip="128.65.100.99" src_port="80"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
4571[label="176.196.175.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6701[label="176.196.175.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.175.99:38114, 192.9.62.44:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38114: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4571--6701[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.62.44" dst_port="80" src_ip="176.196.175.99" src_port="38114"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
3633[label="176.197.173.9;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6121[label="176.197.173.9;43pkt 43fpkt", shape=invtriangle, color=brown];
7630[label="176.197.173.9;43pkt 43fpkt", shape=invhouse, color=bisque];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.173.9:*, 178.122.172.4:443}[74.4186%]&lt;BR/&gt;{176.197.173.9:*, *:80}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (39.4531%)&lt;BR/&gt; 80: (10.5469%)&lt;BR/&gt; 53701: (1.17188%)&lt;BR/&gt; 53700: (1.17188%)&lt;BR/&gt; 53699: (1.17188%)&gt;];
}
3633--6121[label="1;42pkt 42fpkt"];
3633--7630[label="1;42pkt 42fpkt"];
6121--7630[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="176.197.173.9"/>
      <filter dst_ip="178.122.172.4" dst_port="443" src_ip="176.197.173.9"/>
    </slice>
    <from sec="1118034248" usec="0"/>
    <to sec="1118034832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.167.68.100"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
4586[label="176.196.129.101;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6710[label="176.196.129.101;43pkt 43fpkt", shape=invtriangle, color=brown];
7923[label="176.196.129.101;43pkt 43fpkt", shape=invhouse, color=bisque];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.101:*, 192.9.62.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4105: (1.16279%)&lt;BR/&gt; 4104: (1.16279%)&lt;BR/&gt; 4103: (1.16279%)&lt;BR/&gt; 4102: (1.16279%)&gt;];
}
4586--6710[label="1;43pkt 43fpkt"];
4586--7923[label="1;43pkt 43fpkt"];
6710--7923[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.62.81" dst_port="80" src_ip="176.196.129.101"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
4587[label="176.196.131.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6711[label="176.196.131.101;2pkt 2fpkt", shape=invtriangle, color=brown];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.131.101:25, 167.132.72.44:2483}[50%]&lt;BR/&gt;{176.196.131.101:25, 219.211.224.60:8680}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 8680: (33.3333%)&lt;BR/&gt; 2483: (16.6667%)&gt;];
}
4587--6711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.211.224.60" dst_port="8680" src_ip="176.196.131.101" src_port="25"/>
      <filter dst_ip="167.132.72.44" dst_port="2483" src_ip="176.196.131.101" src_port="25"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
4588[label="133.167.163.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6712[label="133.167.163.101;1pkt 1fpkt", shape=invtriangle, color=brown];
7924[label="133.167.163.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.163.101:1305, 208.160.249.58:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1305: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4588--6712[label="1;1pkt 1fpkt"];
4588--7924[label="1;1pkt 1fpkt"];
6712--7924[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.160.249.58" dst_port="80" src_ip="133.167.163.101" src_port="1305"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.75.224.102"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
4598[label="192.9.61.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6717[label="192.9.61.103;1pkt 1fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.9.61.103:1863, 175.199.207.37:4204}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4204: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
4598--6717[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.207.37" dst_port="4204" src_ip="192.9.61.103" src_port="1863"/>
    </slice>
    <from sec="1118034517" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
4599[label="176.196.95.103;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6718[label="176.196.95.103;8pkt 8fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.103:22, 219.5.199.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42675: (6.66667%)&lt;BR/&gt; 42357: (6.66667%)&lt;BR/&gt; 42009: (6.66667%)&lt;BR/&gt; 41671: (6.66667%)&gt;];
}
4599--6718[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" src_ip="176.196.95.103" src_port="22"/>
    </slice>
    <from sec="1118034877" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
4607[label="176.197.104.104;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6723[label="176.197.104.104;32pkt 32fpkt", shape=invtriangle, color=brown];
7932[label="176.197.104.104;31pkt 31fpkt", shape=invhouse, color=bisque];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.104.104:80, 55.1.38.87:*}[90.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50284: (1.59574%)&lt;BR/&gt; 47285: (1.59574%)&lt;BR/&gt; 4967: (1.59574%)&lt;BR/&gt; 4935: (1.59574%)&gt;];
}
4607--6723[label="1;31pkt 31fpkt"];
4607--7932[label="1;31pkt 31fpkt"];
6723--7932[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="55.1.38.87" src_ip="176.197.104.104" src_port="80"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
4608[label="176.197.140.104;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6724[label="176.197.140.104;30pkt 30fpkt", shape=invtriangle, color=brown];
7933[label="176.197.140.104;30pkt 30fpkt", shape=invhouse, color=bisque];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.140.104:*, *:25}[83.871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.7582%)&lt;BR/&gt; 110: (6.59341%)&lt;BR/&gt; 63469: (1.64835%)&lt;BR/&gt; 63465: (1.64835%)&lt;BR/&gt; 63453: (1.64835%)&gt;];
}
4608--6724[label="1;30pkt 30fpkt"];
4608--7933[label="1;30pkt 30fpkt"];
6724--7933[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="176.197.140.104"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
4611[label="84.26.168.104;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6725[label="84.26.168.104;2pkt 2fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.26.168.104:80, 197.66.101.210:32925}[33.3333%]&lt;BR/&gt;{84.26.168.104:80, 197.66.101.210:60972}[33.3333%]&lt;BR/&gt;{84.26.168.104:80, 197.66.101.210:60980}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60980: (20%)&lt;BR/&gt; 32925: (20%)&lt;BR/&gt; 60972: (10%)&gt;];
}
4611--6725[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.210" dst_port="60980" src_ip="84.26.168.104" src_port="80"/>
      <filter dst_ip="197.66.101.210" dst_port="60972" src_ip="84.26.168.104" src_port="80"/>
      <filter dst_ip="197.66.101.210" dst_port="32925" src_ip="84.26.168.104" src_port="80"/>
    </slice>
    <from sec="1118034834" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.197.24.105"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
4619[label="128.65.37.105;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6729[label="128.65.37.105;5pkt 5fpkt", shape=invtriangle, color=brown];
7934[label="128.65.37.105;5pkt 5fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.37.105:1877, 192.145.212.101:80}[20%]&lt;BR/&gt;{128.65.37.105:1878, 192.145.212.101:80}[20%]&lt;BR/&gt;{128.65.37.105:1879, 192.145.212.101:80}[20%]&lt;BR/&gt;{128.65.37.105:1880, 192.145.212.101:80}[20%]&lt;BR/&gt;{128.65.37.105:1881, 192.145.212.101:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1881: (10%)&lt;BR/&gt; 1880: (10%)&lt;BR/&gt; 1879: (10%)&lt;BR/&gt; 1878: (10%)&gt;];
}
4619--6729[label="1;5pkt 5fpkt"];
4619--7934[label="1;5pkt 5fpkt"];
6729--7934[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.145.212.101" dst_port="80" src_ip="128.65.37.105" src_port="1881"/>
      <filter dst_ip="192.145.212.101" dst_port="80" src_ip="128.65.37.105" src_port="1880"/>
      <filter dst_ip="192.145.212.101" dst_port="80" src_ip="128.65.37.105" src_port="1879"/>
      <filter dst_ip="192.145.212.101" dst_port="80" src_ip="128.65.37.105" src_port="1878"/>
      <filter dst_ip="192.145.212.101" dst_port="80" src_ip="128.65.37.105" src_port="1877"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
4623[label="176.196.95.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6733[label="176.196.95.105;2pkt 2fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.105:22, 219.5.199.201:42583}[50%]&lt;BR/&gt;{176.196.95.105:22, 219.5.199.201:42882}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42882: (25%)&lt;BR/&gt; 42583: (25%)&gt;];
}
4623--6733[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42882" src_ip="176.196.95.105" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42583" src_ip="176.196.95.105" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
4630[label="197.216.210.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6738[label="197.216.210.106;1pkt 1fpkt", shape=invtriangle, color=brown];
7938[label="197.216.210.106;2pkt 2fpkt", shape=invhouse, color=bisque];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.216.210.106:80, 197.66.101.172:53925}[50%]&lt;BR/&gt;{197.216.210.106:80, 197.66.101.173:4115}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4115: (37.5%)&lt;BR/&gt; 53925: (12.5%)&gt;];
}
4630--6738[label="1;1pkt 1fpkt"];
4630--7938[label="1;1pkt 1fpkt"];
6738--7938[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.173" dst_port="4115" src_ip="197.216.210.106" src_port="80"/>
      <filter dst_ip="197.66.101.172" dst_port="53925" src_ip="197.216.210.106" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
4631[label="197.66.67.107;93pkt 93fpkt", shape=pentagon, color=darkviolet];
6739[label="197.66.67.107;92pkt 92fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.67.107:41682, *:53}[56.9892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.7297%)&lt;BR/&gt; 41682: (28.6486%)&lt;BR/&gt; 25: (8.10811%)&lt;BR/&gt; 0: (7.56757%)&lt;BR/&gt; 32769: (2.16216%)&gt;];
}
4631--6739[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="197.66.67.107" src_port="41682"/>
    </slice>
    <from sec="1118034024" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
4632[label="176.196.133.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6740[label="176.196.133.107;7pkt 7fpkt", shape=invtriangle, color=brown];
7939[label="176.196.133.107;6pkt 6fpkt", shape=invhouse, color=bisque];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.133.107:*, 65.18.131.194:443}[71.4286%]&lt;BR/&gt;{176.196.133.107:*, 65.18.131.40:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (34.2105%)&lt;BR/&gt; 80: (15.7895%)&lt;BR/&gt; 1556: (7.89474%)&lt;BR/&gt; 1555: (7.89474%)&lt;BR/&gt; 1554: (7.89474%)&gt;];
}
4632--6740[label="1;6pkt 6fpkt"];
4632--7939[label="1;6pkt 6fpkt"];
6740--7939[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="65.18.131.194" dst_port="443" src_ip="176.196.133.107"/>
      <filter dst_ip="65.18.131.40" dst_port="80" src_ip="176.196.133.107"/>
    </slice>
    <from sec="1118034377" usec="0"/>
    <to sec="1118034430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.41.64.108"/>
    </slice>
    <from sec="1118034107" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.165.8.109"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
2306[label="183.82.221.113;s;532pkt 532fpkt", shape=diamond, color=yellow];
3673[label="176.196.21.13;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4698[label="183.82.221.113;538pkt 538fpkt", shape=pentagon, color=darkviolet];
6146[label="176.196.21.13;20pkt 20fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.221.113:53, *:1025}[36.8515%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.0162%)&lt;BR/&gt; 1025: (18.5302%)&lt;BR/&gt; 1031: (4.46348%)&lt;BR/&gt; 32769: (2.25428%)&lt;BR/&gt; 1028: (2.25428%)&gt;];
}
2306--3476[label="0.0037594;2pkt 2fpkt"];
2306--3477[label="0.0018797;1pkt 1fpkt"];
2306--3495[label="0.0018797;1pkt 1fpkt"];
2306--4698[label="0.99812;531pkt 531fpkt"];
3673--6146[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="183.82.221.113" src_port="53"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
1958[label="200.174.2.150;d;48pkt 48fpkt", shape=diamond, color=yellow];
4182[label="176.196.30.66;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4646[label="176.197.30.109;46pkt 46fpkt", shape=pentagon, color=darkviolet];
6460[label="176.196.30.66;28pkt 28fpkt", shape=invtriangle, color=brown];
6748[label="176.197.30.109;46pkt 46fpkt", shape=invtriangle, color=brown];
7943[label="176.197.30.109;46pkt 46fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.30.109:*, 200.174.2.150:80}[61.3333%]&lt;BR/&gt;{176.196.30.66:*, 177.99.81.117:80}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30326: (0.826446%)&lt;BR/&gt; 30257: (0.826446%)&lt;BR/&gt; 30252: (0.826446%)&lt;BR/&gt; 30118: (0.826446%)&gt;];
}
1958--3485[label="0.3125;15pkt 15fpkt"];
1958--4182[label="0.0357143;1pkt 1fpkt"];
1958--4646[label="1;46pkt 46fpkt"];
1958--6460[label="0.0357143;1pkt 1fpkt"];
1958--6748[label="1;46pkt 46fpkt"];
1958--7943[label="1;46pkt 46fpkt"];
4182--6460[label="1;28pkt 28fpkt"];
4646--6748[label="1;46pkt 46fpkt"];
4646--7943[label="1;46pkt 46fpkt"];
6748--7943[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="200.174.2.150" dst_port="80" src_ip="176.197.30.109"/>
      <filter dst_ip="177.99.81.117" dst_port="80" src_ip="176.196.30.66"/>
    </slice>
    <from sec="1118034110" usec="0"/>
    <to sec="1118034824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
1889[label="197.77.221.141;d;69pkt 69fpkt", shape=diamond, color=yellow];
2199[label="104.2.44.109;s;42pkt 42fpkt", shape=diamond, color=yellow];
4384[label="104.2.44.82;68pkt 68fpkt", shape=pentagon, color=darkviolet];
4649[label="104.2.44.109;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6583[label="104.2.44.82;69pkt 69fpkt", shape=invtriangle, color=brown];
6750[label="104.2.44.109;64pkt 64fpkt", shape=invtriangle, color=brown];
7945[label="104.2.44.109;63pkt 63fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.2.44.109:443, 197.77.221.141:*}[38.2353%]&lt;BR/&gt;{104.2.44.82:443, 128.65.36.230:*}[24.2647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.8998%)&lt;BR/&gt; 80: (3.98633%)&lt;BR/&gt; 56367: (0.569476%)&lt;BR/&gt; 56366: (0.569476%)&lt;BR/&gt; 56365: (0.569476%)&gt;];
}
1889--2199[label="1;42pkt 42fpkt"];
1889--4384[label="0.205882;14pkt 14fpkt"];
1889--4649[label="0.8125;52pkt 52fpkt"];
1889--6583[label="0.202899;14pkt 14fpkt"];
1889--6750[label="0.8125;52pkt 52fpkt"];
1889--7945[label="0.825397;52pkt 52fpkt"];
2199--4649[label="1;42pkt 42fpkt"];
2199--6750[label="1;42pkt 42fpkt"];
2199--7945[label="1;42pkt 42fpkt"];
4384--6583[label="1;68pkt 68fpkt"];
4649--6750[label="1;64pkt 64fpkt"];
4649--7945[label="1;63pkt 63fpkt"];
6750--7945[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.36.230" src_ip="104.2.44.82" src_port="443"/>
      <filter dst_ip="197.77.221.141" src_ip="104.2.44.109" src_port="443"/>
    </slice>
    <from sec="1118034031" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
4655[label="197.143.245.109;284pkt 284fpkt", shape=pentagon, color=darkviolet];
6752[label="197.143.245.109;284pkt 284fpkt", shape=invtriangle, color=brown];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.143.245.109:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4909: (0.176056%)&lt;BR/&gt; 4905: (0.176056%)&lt;BR/&gt; 4891: (0.176056%)&lt;BR/&gt; 4886: (0.176056%)&gt;];
}
4655--6752[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.143.245.109"/>
    </slice>
    <from sec="1118034737" usec="0"/>
    <to sec="1118034843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
501[label="176.196.175.164;s;77pkt 77fpkt", shape=diamond, color=yellow];
1104[label="216.8.115.163;d;11pkt 11fpkt", shape=diamond, color=yellow];
1196[label="205.196.57.146;d;133pkt 133fpkt", shape=diamond, color=yellow];
1227[label="176.197.165.34;s;78pkt 78fpkt", shape=diamond, color=yellow];
1353[label="216.65.90.7;d;179pkt 179fpkt", shape=diamond, color=yellow];
1358[label="169.222.48.13;d;213pkt 213fpkt", shape=diamond, color=yellow];
1655[label="183.174.45.136;s;120pkt 120fpkt", shape=diamond, color=yellow];
1846[label="176.196.1.110;s;102pkt 102fpkt", shape=diamond, color=yellow];
1926[label="176.197.28.197;s;45pkt 45fpkt", shape=diamond, color=yellow];
2435[label="176.197.28.193;s;77pkt 77fpkt", shape=diamond, color=yellow];
3148[label="169.222.48.13;d;134pkt 134fpkt", shape=hexagon, color=black];
3353[label="176.196.1.110;s;102pkt 102fpkt", shape=hexagon, color=black];
3910[label="176.197.165.34;79pkt 79fpkt", shape=pentagon, color=darkviolet];
4656[label="176.196.1.110;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4924[label="183.174.45.136;139pkt 139fpkt", shape=pentagon, color=darkviolet];
5233[label="176.196.175.164;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5511[label="176.197.28.193;76pkt 76fpkt", shape=pentagon, color=darkviolet];
5554[label="176.197.28.197;45pkt 45fpkt", shape=pentagon, color=darkviolet];
6279[label="176.197.165.34;79pkt 79fpkt", shape=invtriangle, color=brown];
6753[label="176.196.1.110;1pkt 1fpkt", shape=invtriangle, color=brown];
6909[label="183.174.45.136;139pkt 139fpkt", shape=invtriangle, color=brown];
7092[label="176.196.175.164;80pkt 80fpkt", shape=invtriangle, color=brown];
7267[label="176.197.28.193;76pkt 76fpkt", shape=invtriangle, color=brown];
7291[label="176.197.28.197;45pkt 45fpkt", shape=invtriangle, color=brown];
7712[label="176.197.165.34;79pkt 79fpkt", shape=invhouse, color=bisque];
7947[label="176.196.1.110;1pkt 1fpkt", shape=invhouse, color=bisque];
8120[label="176.196.175.164;80pkt 80fpkt", shape=invhouse, color=bisque];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.222.48.13:80}[30.9783%]&lt;BR/&gt;{*:*, 216.65.90.7:80}[24.4565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6129%)&lt;BR/&gt; 82: (0.902686%)&lt;BR/&gt; 1863: (0.176134%)&lt;BR/&gt; 2806: (0.154117%)&lt;BR/&gt; 443: (0.154117%)&gt;];
}
501--1104[label="1;11pkt 11fpkt"];
501--1353[label="0.168831;13pkt 13fpkt"];
501--3478[label="0.0909091;7pkt 7fpkt"];
501--5233[label="1;77pkt 77fpkt"];
501--7092[label="1;77pkt 77fpkt"];
501--8120[label="1;77pkt 77fpkt"];
1104--3478[label="0.0909091;1pkt 1fpkt"];
1104--5233[label="1;11pkt 11fpkt"];
1104--7092[label="1;11pkt 11fpkt"];
1104--8120[label="1;11pkt 11fpkt"];
1196--1227[label="0.961538;75pkt 75fpkt"];
1196--3478[label="0.12782;17pkt 17fpkt"];
1196--3485[label="0.0225564;3pkt 3fpkt"];
1196--3910[label="0.949367;75pkt 75fpkt"];
1196--6279[label="0.949367;75pkt 75fpkt"];
1196--7712[label="0.949367;75pkt 75fpkt"];
1227--1353[label="0.0384615;3pkt 3fpkt"];
1227--3910[label="0.987179;77pkt 77fpkt"];
1227--6279[label="0.987179;77pkt 77fpkt"];
1227--7712[label="0.987179;77pkt 77fpkt"];
1353--1655[label="0.0333333;4pkt 4fpkt"];
1353--1660[label="0.0338983;2pkt 2fpkt"];
1353--1846[label="0.0588235;6pkt 6fpkt"];
1353--1926[label="0.2;9pkt 9fpkt"];
1353--2237[label="0.0606061;2pkt 2fpkt"];
1353--2252[label="0.016;2pkt 2fpkt"];
1353--2435[label="0.168831;13pkt 13fpkt"];
1353--2729[label="0.0223464;4pkt 4fpkt"];
1353--2787[label="0.027933;5pkt 5fpkt"];
1353--2914[label="0.0396825;5pkt 5fpkt"];
1353--2961[label="0.0614525;11pkt 11fpkt"];
1353--3019[label="0.037037;2pkt 2fpkt"];
1353--3209[label="0.0645161;2pkt 2fpkt"];
1353--3353[label="0.0588235;6pkt 6fpkt"];
1353--3411[label="0.027933;5pkt 5fpkt"];
1353--3478[label="0.0949721;17pkt 17fpkt"];
1353--3485[label="0.0558659;10pkt 10fpkt"];
1353--3910[label="0.0253165;2pkt 2fpkt"];
1353--3994[label="0.0289855;2pkt 2fpkt"];
1353--4041[label="0.0223464;4pkt 4fpkt"];
1353--4402[label="0.00558659;1pkt 1fpkt"];
1353--4685[label="0.027933;5pkt 5fpkt"];
1353--4689[label="0.027933;5pkt 5fpkt"];
1353--4756[label="0.0893855;16pkt 16fpkt"];
1353--4924[label="0.028777;4pkt 4fpkt"];
1353--5014[label="0.0111732;2pkt 2fpkt"];
1353--5233[label="0.164557;13pkt 13fpkt"];
1353--5355[label="0.0335196;6pkt 6fpkt"];
1353--5377[label="0.0391061;7pkt 7fpkt"];
1353--5511[label="0.171053;13pkt 13fpkt"];
1353--5554[label="0.2;9pkt 9fpkt"];
1353--5626[label="0.0558659;10pkt 10fpkt"];
1353--5716[label="0.175;7pkt 7fpkt"];
1353--5813[label="0.031746;4pkt 4fpkt"];
1353--5840[label="0.027933;5pkt 5fpkt"];
1353--6279[label="0.0253165;2pkt 2fpkt"];
1353--6332[label="0.0294118;2pkt 2fpkt"];
1353--6361[label="0.0223464;4pkt 4fpkt"];
1353--6593[label="0.00558659;1pkt 1fpkt"];
1353--6815[label="0.0893855;16pkt 16fpkt"];
1353--6909[label="0.028777;4pkt 4fpkt"];
1353--6961[label="0.0111732;2pkt 2fpkt"];
1353--7092[label="0.1625;13pkt 13fpkt"];
1353--7173[label="0.0335196;6pkt 6fpkt"];
1353--7186[label="0.0391061;7pkt 7fpkt"];
1353--7267[label="0.171053;13pkt 13fpkt"];
1353--7291[label="0.2;9pkt 9fpkt"];
1353--7328[label="0.0558659;10pkt 10fpkt"];
1353--7381[label="0.175;7pkt 7fpkt"];
1353--7447[label="0.0314961;4pkt 4fpkt"];
1353--7712[label="0.0253165;2pkt 2fpkt"];
1353--7979[label="0.0893855;16pkt 16fpkt"];
1353--8054[label="0.0111732;2pkt 2fpkt"];
1353--8120[label="0.1625;13pkt 13fpkt"];
1353--8298[label="0.0314961;4pkt 4fpkt"];
1358--1655[label="0.716667;86pkt 86fpkt"];
1358--1846[label="0.0490196;5pkt 5fpkt"];
1358--1926[label="0.8;36pkt 36fpkt"];
1358--2435[label="0.831169;64pkt 64fpkt"];
1358--2653[label="0.0187793;4pkt 4fpkt"];
1358--2669[label="0.00469484;1pkt 1fpkt"];
1358--3148[label="1;134pkt 134fpkt"];
1358--3353[label="0.0490196;5pkt 5fpkt"];
1358--3478[label="0.126761;27pkt 27fpkt"];
1358--3485[label="0.0328638;7pkt 7fpkt"];
1358--4217[label="0.00469484;1pkt 1fpkt"];
1358--4656[label="0.5;1pkt 1fpkt"];
1358--4924[label="0.611511;85pkt 85fpkt"];
1358--5314[label="0.0234742;5pkt 5fpkt"];
1358--5327[label="0.0422535;9pkt 9fpkt"];
1358--5511[label="0.828947;63pkt 63fpkt"];
1358--5554[label="0.8;36pkt 36fpkt"];
1358--6484[label="0.00469484;1pkt 1fpkt"];
1358--6909[label="0.611511;85pkt 85fpkt"];
1358--7155[label="0.0234742;5pkt 5fpkt"];
1358--7267[label="0.828947;63pkt 63fpkt"];
1358--7291[label="0.8;36pkt 36fpkt"];
1358--7818[label="0.00469484;1pkt 1fpkt"];
1358--8150[label="0.0234742;5pkt 5fpkt"];
1358--8154[label="0.0422535;9pkt 9fpkt"];
1655--2264[label="0.0166667;2pkt 2fpkt"];
1655--3148[label="0.416667;50pkt 50fpkt"];
1655--3478[label="0.133333;16pkt 16fpkt"];
1655--3485[label="0.0166667;2pkt 2fpkt"];
1655--4924[label="0.991667;119pkt 119fpkt"];
1655--6909[label="0.991667;119pkt 119fpkt"];
1846--1888[label="0.0784314;8pkt 8fpkt"];
1846--2076[label="0.00980392;1pkt 1fpkt"];
1846--2100[label="0.00980392;1pkt 1fpkt"];
1846--3148[label="0.0490196;5pkt 5fpkt"];
1846--3353[label="1;102pkt 102fpkt"];
1846--3485[label="0.0588235;6pkt 6fpkt"];
1846--4656[label="0.5;1pkt 1fpkt"];
1926--3148[label="0.8;36pkt 36fpkt"];
1926--3478[label="0.111111;5pkt 5fpkt"];
1926--3485[label="0.0444444;2pkt 2fpkt"];
1926--5554[label="1;45pkt 45fpkt"];
1926--7291[label="1;45pkt 45fpkt"];
2435--3148[label="0.272727;21pkt 21fpkt"];
2435--5511[label="1;76pkt 76fpkt"];
2435--7267[label="1;76pkt 76fpkt"];
3148--3353[label="0.0490196;5pkt 5fpkt"];
3148--3478[label="0.201493;27pkt 27fpkt"];
3148--3485[label="0.0522388;7pkt 7fpkt"];
3148--4217[label="0.00746269;1pkt 1fpkt"];
3148--4656[label="0.5;1pkt 1fpkt"];
3148--4924[label="0.365672;49pkt 49fpkt"];
3148--5314[label="0.0373134;5pkt 5fpkt"];
3148--5327[label="0.0671642;9pkt 9fpkt"];
3148--5511[label="0.263158;20pkt 20fpkt"];
3148--5554[label="0.8;36pkt 36fpkt"];
3148--6484[label="0.00746269;1pkt 1fpkt"];
3148--6909[label="0.365672;49pkt 49fpkt"];
3148--7155[label="0.0373134;5pkt 5fpkt"];
3148--7267[label="0.263158;20pkt 20fpkt"];
3148--7291[label="0.8;36pkt 36fpkt"];
3148--7818[label="0.00746269;1pkt 1fpkt"];
3148--8150[label="0.0373134;5pkt 5fpkt"];
3148--8154[label="0.0671642;9pkt 9fpkt"];
3353--3485[label="0.0588235;6pkt 6fpkt"];
3353--4656[label="0.5;1pkt 1fpkt"];
3910--6279[label="1;79pkt 79fpkt"];
3910--7712[label="1;79pkt 79fpkt"];
4656--6753[label="1;1pkt 1fpkt"];
4656--7947[label="1;1pkt 1fpkt"];
4924--6909[label="1;139pkt 139fpkt"];
5233--7092[label="1;79pkt 79fpkt"];
5233--8120[label="1;79pkt 79fpkt"];
5511--7267[label="1;76pkt 76fpkt"];
5554--7291[label="1;45pkt 45fpkt"];
6279--7712[label="1;79pkt 79fpkt"];
6753--7947[label="1;1pkt 1fpkt"];
7092--8120[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="169.222.48.13" dst_port="80"/>
      <filter dst_ip="216.65.90.7" dst_port="80"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
2047[label="197.66.103.113;s;198pkt 198fpkt", shape=diamond, color=yellow];
3227[label="197.66.103.113;s;183pkt 183fpkt", shape=hexagon, color=black];
4694[label="197.66.103.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6773[label="197.66.103.113;1pkt 1fpkt", shape=invtriangle, color=brown];
7959[label="197.66.103.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.103.113:53, *:*}[61.809%]&lt;BR/&gt;{197.66.103.113:4367, *:53}[30.1508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.961%)&lt;BR/&gt; 4367: (14.9351%)&lt;BR/&gt; 80: (3.37662%)&lt;BR/&gt; 1026: (1.68831%)&lt;BR/&gt; 0: (1.55844%)&gt;];
}
2047--2474[label="0.0102041;1pkt 1fpkt"];
2047--3227[label="1;183pkt 183fpkt"];
2047--3476[label="0.0909091;18pkt 18fpkt"];
2047--7959[label="0.5;1pkt 1fpkt"];
3227--3476[label="0.0983607;18pkt 18fpkt"];
3227--7959[label="0.5;1pkt 1fpkt"];
4694--6773[label="1;1pkt 1fpkt"];
4694--7959[label="1;1pkt 1fpkt"];
6773--7959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="197.66.103.113" src_port="53"/>
      <filter dst_port="53" src_ip="197.66.103.113" src_port="4367"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
4695[label="176.196.129.113;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6774[label="176.196.129.113;26pkt 26fpkt", shape=invtriangle, color=brown];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.113:*, 197.216.210.107:80}[53.8462%]&lt;BR/&gt;{176.196.129.113:*, 197.216.210.70:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2985: (1.92308%)&lt;BR/&gt; 2984: (1.92308%)&lt;BR/&gt; 2983: (1.92308%)&lt;BR/&gt; 2982: (1.92308%)&gt;];
}
4695--6774[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="197.216.210.107" dst_port="80" src_ip="176.196.129.113"/>
      <filter dst_ip="197.216.210.70" dst_port="80" src_ip="176.196.129.113"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
323[label="175.199.142.0;d;149pkt 149fpkt", shape=diamond, color=yellow];
434[label="176.196.206.159;d;337pkt 337fpkt", shape=diamond, color=yellow];
1052[label="176.196.167.196;d;79pkt 79fpkt", shape=diamond, color=yellow];
1256[label="197.140.2.29;s;43pkt 43fpkt", shape=diamond, color=yellow];
1505[label="183.82.3.149;d;401pkt 401fpkt", shape=diamond, color=yellow];
1587[label="183.174.84.77;d;154pkt 154fpkt", shape=diamond, color=yellow];
1811[label="200.226.80.50;d;880pkt 880fpkt", shape=diamond, color=yellow];
1883[label="53.120.247.50;s;29pkt 29fpkt", shape=diamond, color=yellow];
1939[label="215.226.196.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
2131[label="197.136.2.57;s;44pkt 44fpkt", shape=diamond, color=yellow];
2340[label="128.65.158.165;d;20pkt 20fpkt", shape=diamond, color=yellow];
2481[label="183.174.84.76;d;131pkt 131fpkt", shape=diamond, color=yellow];
2497[label="128.65.157.17;d;52pkt 52fpkt", shape=diamond, color=yellow];
2670[label="175.199.142.0;d;14pkt 14fpkt", shape=hexagon, color=black];
2973[label="197.140.2.29;s;35pkt 35fpkt", shape=hexagon, color=black];
3095[label="215.226.196.147;s;1pkt 1fpkt", shape=hexagon, color=black];
3160[label="197.136.2.57;s;44pkt 44fpkt", shape=hexagon, color=black];
3278[label="53.120.247.50;s;29pkt 29fpkt", shape=hexagon, color=black];
3548[label="196.224.3.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3796[label="81.138.135.23;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3861[label="197.140.2.29;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3964[label="221.175.176.39;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4068[label="53.120.247.50;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4081[label="86.84.253.52;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4177[label="220.159.165.65;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4240[label="193.98.57.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4469[label="53.120.233.89;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4495[label="86.74.203.91;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4518[label="221.156.134.94;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4625[label="201.85.212.105;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4704[label="87.13.33.114;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4739[label="80.104.2.118;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4745[label="219.43.216.118;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4780[label="197.136.4.123;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4859[label="197.137.0.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5040[label="87.23.86.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5154[label="197.242.27.159;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5303[label="216.234.164.171;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5318[label="219.180.8.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5387[label="208.176.70.179;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5503[label="219.37.94.192;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5533[label="36.193.32.195;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5581[label="81.136.13.200;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5593[label="81.238.134.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5722[label="87.169.44.212;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5745[label="222.20.132.214;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5842[label="219.11.33.227;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5872[label="219.13.177.230;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5906[label="197.136.180.233;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6023[label="87.214.0.253;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6068[label="196.224.3.4;3pkt 3fpkt", shape=invtriangle, color=brown];
6216[label="81.138.135.23;6pkt 6fpkt", shape=invtriangle, color=brown];
6313[label="221.175.176.39;15pkt 15fpkt", shape=invtriangle, color=brown];
6380[label="53.120.247.50;40pkt 40fpkt", shape=invtriangle, color=brown];
6388[label="86.84.253.52;8pkt 8fpkt", shape=invtriangle, color=brown];
6457[label="220.159.165.65;17pkt 17fpkt", shape=invtriangle, color=brown];
6497[label="193.98.57.70;1pkt 1fpkt", shape=invtriangle, color=brown];
6634[label="53.120.233.89;12pkt 12fpkt", shape=invtriangle, color=brown];
6653[label="86.74.203.91;10pkt 10fpkt", shape=invtriangle, color=brown];
6668[label="221.156.134.94;15pkt 15fpkt", shape=invtriangle, color=brown];
6734[label="201.85.212.105;13pkt 13fpkt", shape=invtriangle, color=brown];
6779[label="87.13.33.114;7pkt 7fpkt", shape=invtriangle, color=brown];
6803[label="80.104.2.118;17pkt 17fpkt", shape=invtriangle, color=brown];
6808[label="219.43.216.118;15pkt 15fpkt", shape=invtriangle, color=brown];
7045[label="197.242.27.159;15pkt 15fpkt", shape=invtriangle, color=brown];
7061[label="221.145.26.161;1pkt 1fpkt", shape=invtriangle, color=brown];
7147[label="216.234.164.171;17pkt 17fpkt", shape=invtriangle, color=brown];
7260[label="219.37.94.192;26pkt 26fpkt", shape=invtriangle, color=brown];
7280[label="36.193.32.195;20pkt 20fpkt", shape=invtriangle, color=brown];
7307[label="81.136.13.200;7pkt 7fpkt", shape=invtriangle, color=brown];
7386[label="87.169.44.212;8pkt 8fpkt", shape=invtriangle, color=brown];
7402[label="222.20.132.214;10pkt 10fpkt", shape=invtriangle, color=brown];
7465[label="219.11.33.227;9pkt 9fpkt", shape=invtriangle, color=brown];
7503[label="197.136.180.233;20pkt 20fpkt", shape=invtriangle, color=brown];
7584[label="87.214.0.253;8pkt 8fpkt", shape=invtriangle, color=brown];
7603[label="196.224.3.4;3pkt 3fpkt", shape=invhouse, color=bisque];
7728[label="221.175.176.39;15pkt 15fpkt", shape=invhouse, color=bisque];
7762[label="53.120.247.50;39pkt 39fpkt", shape=invhouse, color=bisque];
7768[label="86.84.253.52;8pkt 8fpkt", shape=invhouse, color=bisque];
7803[label="220.159.165.65;17pkt 17fpkt", shape=invhouse, color=bisque];
7824[label="193.98.57.70;1pkt 1fpkt", shape=invhouse, color=bisque];
7894[label="53.120.233.89;11pkt 11fpkt", shape=invhouse, color=bisque];
7901[label="86.74.203.91;9pkt 9fpkt", shape=invhouse, color=bisque];
7908[label="221.156.134.94;14pkt 14fpkt", shape=invhouse, color=bisque];
7973[label="80.104.2.118;16pkt 16fpkt", shape=invhouse, color=bisque];
8143[label="216.234.164.171;17pkt 17fpkt", shape=invhouse, color=bisque];
8169[label="208.176.70.179;30pkt 30fpkt", shape=invhouse, color=bisque];
8208[label="36.193.32.195;20pkt 20fpkt", shape=invhouse, color=bisque];
8273[label="222.20.132.214;10pkt 10fpkt", shape=invhouse, color=bisque];
8362[label="87.214.0.253;8pkt 8fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.226.80.50:53}[38.5057%]&lt;BR/&gt;{*:*, *:25}[25.1547%]&lt;BR/&gt;{*:25, *:*}[22.9001%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.3027%)&lt;BR/&gt; 53: (17.7562%)&lt;BR/&gt; 1025: (1.85512%)&lt;BR/&gt; 32781: (1.25147%)&lt;BR/&gt; 64794: (1.08952%)&gt;];
}
323--1256[label="0.0465116;2pkt 2fpkt"];
323--2670[label="1;14pkt 14fpkt"];
323--2973[label="0.0285714;1pkt 1fpkt"];
323--3861[label="0.047619;2pkt 2fpkt"];
323--4240[label="1;1pkt 1fpkt"];
323--4469[label="0.181818;2pkt 2fpkt"];
323--4780[label="0.272727;3pkt 3fpkt"];
323--5040[label="1;1pkt 1fpkt"];
323--5154[label="0.0666667;1pkt 1fpkt"];
323--5303[label="0.166667;3pkt 3fpkt"];
323--5318[label="1;1pkt 1fpkt"];
323--5906[label="0.1;2pkt 2fpkt"];
323--6497[label="1;1pkt 1fpkt"];
323--6634[label="0.166667;2pkt 2fpkt"];
323--7045[label="0.0666667;1pkt 1fpkt"];
323--7147[label="0.176471;3pkt 3fpkt"];
323--7503[label="0.1;2pkt 2fpkt"];
323--7824[label="1;1pkt 1fpkt"];
323--7894[label="0.181818;2pkt 2fpkt"];
323--8143[label="0.176471;3pkt 3fpkt"];
434--1256[label="0.744186;32pkt 32fpkt"];
434--2131[label="0.977273;43pkt 43fpkt"];
434--2973[label="0.771429;27pkt 27fpkt"];
434--3160[label="0.977273;43pkt 43fpkt"];
434--3861[label="0.761905;32pkt 32fpkt"];
434--4704[label="1;7pkt 7fpkt"];
434--4780[label="0.0909091;1pkt 1fpkt"];
434--4859[label="1;2pkt 2fpkt"];
434--5154[label="0.733333;11pkt 11fpkt"];
434--5906[label="0.55;11pkt 11fpkt"];
434--6779[label="1;7pkt 7fpkt"];
434--7045[label="0.733333;11pkt 11fpkt"];
434--7503[label="0.55;11pkt 11fpkt"];
1052--5154[label="0.0666667;1pkt 1fpkt"];
1052--5745[label="1;9pkt 9fpkt"];
1052--7045[label="0.0666667;1pkt 1fpkt"];
1052--7402[label="1;10pkt 10fpkt"];
1052--8273[label="1;10pkt 10fpkt"];
1256--1505[label="0.116279;5pkt 5fpkt"];
1256--2973[label="1;35pkt 35fpkt"];
1256--3861[label="1;42pkt 42fpkt"];
1505--2973[label="0.0857143;3pkt 3fpkt"];
1505--3548[label="1;3pkt 3fpkt"];
1505--3796[label="1;6pkt 6fpkt"];
1505--3861[label="0.119048;5pkt 5fpkt"];
1505--3964[label="1;15pkt 15fpkt"];
1505--4081[label="1;9pkt 9fpkt"];
1505--4177[label="1;16pkt 16fpkt"];
1505--4495[label="1;9pkt 9fpkt"];
1505--4518[label="1;15pkt 15fpkt"];
1505--4625[label="1;12pkt 12fpkt"];
1505--4739[label="1;16pkt 16fpkt"];
1505--4745[label="1;15pkt 15fpkt"];
1505--4780[label="0.272727;3pkt 3fpkt"];
1505--5043[label="0.047619;1pkt 1fpkt"];
1505--5154[label="0.0666667;1pkt 1fpkt"];
1505--5387[label="1;31pkt 31fpkt"];
1505--5503[label="1;26pkt 26fpkt"];
1505--5533[label="1;20pkt 20fpkt"];
1505--5581[label="1;7pkt 7fpkt"];
1505--5593[label="1;2pkt 2fpkt"];
1505--5722[label="1;9pkt 9fpkt"];
1505--5842[label="1;10pkt 10fpkt"];
1505--5872[label="1;7pkt 7fpkt"];
1505--5906[label="0.05;1pkt 1fpkt"];
1505--6023[label="1;9pkt 9fpkt"];
1505--6068[label="1;3pkt 3fpkt"];
1505--6216[label="1;6pkt 6fpkt"];
1505--6313[label="1;15pkt 15fpkt"];
1505--6388[label="1;8pkt 8fpkt"];
1505--6457[label="1;17pkt 17fpkt"];
1505--6653[label="1;10pkt 10fpkt"];
1505--6668[label="1;15pkt 15fpkt"];
1505--6734[label="1;13pkt 13fpkt"];
1505--6803[label="1;17pkt 17fpkt"];
1505--6808[label="1;15pkt 15fpkt"];
1505--6976[label="0.0454545;1pkt 1fpkt"];
1505--7045[label="0.0666667;1pkt 1fpkt"];
1505--7061[label="1;1pkt 1fpkt"];
1505--7260[label="1;26pkt 26fpkt"];
1505--7280[label="1;20pkt 20fpkt"];
1505--7307[label="1;7pkt 7fpkt"];
1505--7386[label="1;8pkt 8fpkt"];
1505--7465[label="1;9pkt 9fpkt"];
1505--7503[label="0.05;1pkt 1fpkt"];
1505--7584[label="1;8pkt 8fpkt"];
1505--7603[label="1;3pkt 3fpkt"];
1505--7728[label="1;15pkt 15fpkt"];
1505--7768[label="1;8pkt 8fpkt"];
1505--7803[label="1;17pkt 17fpkt"];
1505--7901[label="1;9pkt 9fpkt"];
1505--7908[label="1;14pkt 14fpkt"];
1505--7973[label="1;16pkt 16fpkt"];
1505--8062[label="0.0454545;1pkt 1fpkt"];
1505--8169[label="1;30pkt 30fpkt"];
1505--8208[label="1;20pkt 20fpkt"];
1505--8362[label="1;8pkt 8fpkt"];
1587--1883[label="0.0344828;1pkt 1fpkt"];
1587--1939[label="1;1pkt 1fpkt"];
1587--2235[label="0.0136986;1pkt 1fpkt"];
1587--3095[label="1;1pkt 1fpkt"];
1587--3278[label="0.0344828;1pkt 1fpkt"];
1587--3323[label="0.0136986;1pkt 1fpkt"];
1587--3476[label="0.12987;20pkt 20fpkt"];
1587--3876[label="0.0133333;1pkt 1fpkt"];
1587--3925[label="0.0181818;1pkt 1fpkt"];
1587--4068[label="0.025;1pkt 1fpkt"];
1587--4815[label="0.0135135;1pkt 1fpkt"];
1587--4904[label="0.0322581;1pkt 1fpkt"];
1587--5154[label="0.0666667;1pkt 1fpkt"];
1587--5176[label="0.0384615;1pkt 1fpkt"];
1587--6380[label="0.025;1pkt 1fpkt"];
1587--7045[label="0.0666667;1pkt 1fpkt"];
1587--7059[label="0.037037;1pkt 1fpkt"];
1587--7762[label="0.025641;1pkt 1fpkt"];
1811--3476[label="0.00340909;3pkt 3fpkt"];
1811--4815[label="0.0405405;3pkt 3fpkt"];
1811--4959[label="0.00649351;1pkt 1fpkt"];
1811--5303[label="0.166667;3pkt 3fpkt"];
1811--6928[label="0.00645161;1pkt 1fpkt"];
1811--7147[label="0.176471;3pkt 3fpkt"];
1811--8038[label="0.00645161;1pkt 1fpkt"];
1811--8143[label="0.176471;3pkt 3fpkt"];
1883--2340[label="0.45;9pkt 9fpkt"];
1883--2481[label="0.103448;3pkt 3fpkt"];
1883--3278[label="1;29pkt 29fpkt"];
1883--4068[label="1;29pkt 29fpkt"];
1883--6380[label="1;29pkt 29fpkt"];
1883--7762[label="0.965517;28pkt 28fpkt"];
1939--3095[label="1;1pkt 1fpkt"];
2131--3160[label="1;44pkt 44fpkt"];
2340--3278[label="0.45;9pkt 9fpkt"];
2340--4068[label="0.45;9pkt 9fpkt"];
2340--6380[label="0.45;9pkt 9fpkt"];
2340--7762[label="0.4;8pkt 8fpkt"];
2481--3278[label="0.103448;3pkt 3fpkt"];
2481--3323[label="0.0136986;1pkt 1fpkt"];
2481--3476[label="0.145038;19pkt 19fpkt"];
2481--3876[label="0.0133333;1pkt 1fpkt"];
2481--3925[label="0.0181818;1pkt 1fpkt"];
2481--4068[label="0.075;3pkt 3fpkt"];
2481--4126[label="0.0212766;1pkt 1fpkt"];
2481--4552[label="0.047619;1pkt 1fpkt"];
2481--4982[label="0.0322581;1pkt 1fpkt"];
2481--5176[label="0.0384615;1pkt 1fpkt"];
2481--6380[label="0.075;3pkt 3fpkt"];
2481--6426[label="0.0212766;1pkt 1fpkt"];
2481--7059[label="0.037037;1pkt 1fpkt"];
2481--7762[label="0.0769231;3pkt 3fpkt"];
2481--7790[label="0.0208333;1pkt 1fpkt"];
2497--5303[label="0.277778;5pkt 5fpkt"];
2497--7147[label="0.294118;5pkt 5fpkt"];
2497--8143[label="0.294118;5pkt 5fpkt"];
2973--3861[label="0.971429;34pkt 34fpkt"];
3278--4068[label="1;29pkt 29fpkt"];
3278--6380[label="1;29pkt 29fpkt"];
3278--7762[label="0.965517;28pkt 28fpkt"];
3548--6068[label="1;3pkt 3fpkt"];
3548--7603[label="1;3pkt 3fpkt"];
3796--6216[label="1;6pkt 6fpkt"];
3964--6313[label="1;15pkt 15fpkt"];
3964--7728[label="1;15pkt 15fpkt"];
4068--6380[label="1;40pkt 40fpkt"];
4068--7762[label="1;39pkt 39fpkt"];
4081--6388[label="1;8pkt 8fpkt"];
4081--7768[label="1;8pkt 8fpkt"];
4177--6457[label="1;16pkt 16fpkt"];
4177--7803[label="1;16pkt 16fpkt"];
4240--6497[label="1;1pkt 1fpkt"];
4240--7824[label="1;1pkt 1fpkt"];
4469--6634[label="1;11pkt 11fpkt"];
4469--7894[label="1;11pkt 11fpkt"];
4495--6653[label="1;9pkt 9fpkt"];
4495--7901[label="1;9pkt 9fpkt"];
4518--6668[label="1;15pkt 15fpkt"];
4518--7908[label="1;14pkt 14fpkt"];
4625--6734[label="1;12pkt 12fpkt"];
4704--6779[label="1;7pkt 7fpkt"];
4739--6803[label="1;16pkt 16fpkt"];
4739--7973[label="1;16pkt 16fpkt"];
4745--6808[label="1;15pkt 15fpkt"];
5154--7045[label="1;15pkt 15fpkt"];
5303--7147[label="1;17pkt 17fpkt"];
5303--8143[label="1;17pkt 17fpkt"];
5387--8169[label="1;30pkt 30fpkt"];
5503--7260[label="1;26pkt 26fpkt"];
5533--7280[label="1;20pkt 20fpkt"];
5533--8208[label="1;20pkt 20fpkt"];
5581--7307[label="1;7pkt 7fpkt"];
5722--7386[label="1;8pkt 8fpkt"];
5745--7402[label="1;9pkt 9fpkt"];
5745--8273[label="1;9pkt 9fpkt"];
5842--7465[label="1;9pkt 9fpkt"];
5906--7503[label="1;20pkt 20fpkt"];
6023--7584[label="1;8pkt 8fpkt"];
6023--8362[label="1;8pkt 8fpkt"];
6068--7603[label="1;3pkt 3fpkt"];
6313--7728[label="1;15pkt 15fpkt"];
6380--7762[label="1;39pkt 39fpkt"];
6388--7768[label="1;8pkt 8fpkt"];
6457--7803[label="1;17pkt 17fpkt"];
6497--7824[label="1;1pkt 1fpkt"];
6634--7894[label="1;11pkt 11fpkt"];
6653--7901[label="1;9pkt 9fpkt"];
6668--7908[label="1;14pkt 14fpkt"];
6803--7973[label="1;16pkt 16fpkt"];
7147--8143[label="1;17pkt 17fpkt"];
7280--8208[label="1;20pkt 20fpkt"];
7402--8273[label="1;10pkt 10fpkt"];
7584--8362[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25"/>
      <filter dst_ip="200.226.80.50" dst_port="53"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
4707[label="133.167.42.114;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6780[label="133.167.42.114;69pkt 69fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.42.114:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4707--6780[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.42.114"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
1407[label="128.65.65.97;s;31pkt 31fpkt", shape=diamond, color=yellow];
1446[label="210.244.52.25;d;7pkt 7fpkt", shape=diamond, color=yellow];
2494[label="128.65.208.106;s;326pkt 326fpkt", shape=diamond, color=yellow];
4545[label="128.65.65.97;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4715[label="128.65.209.114;275pkt 275fpkt", shape=pentagon, color=darkviolet];
6683[label="128.65.65.97;31pkt 31fpkt", shape=invtriangle, color=brown];
6784[label="128.65.209.114;275pkt 275fpkt", shape=invtriangle, color=brown];
7914[label="128.65.65.97;30pkt 30fpkt", shape=invhouse, color=bisque];
7962[label="128.65.209.114;275pkt 275fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.208.106:49926, *:53}[49.3671%]&lt;BR/&gt;{128.65.209.114:59809, *:53}[39.2405%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.2959%)&lt;BR/&gt; 59809: (29.0788%)&lt;BR/&gt; 49926: (12.217%)&lt;BR/&gt; 0: (7.41608%)&lt;BR/&gt; 80: (4.83997%)&gt;];
}
1407--1446[label="0.714286;5pkt 5fpkt"];
1407--3478[label="0.0967742;3pkt 3fpkt"];
1407--3485[label="0.387097;12pkt 12fpkt"];
1407--4545[label="1;31pkt 31fpkt"];
1407--6683[label="1;31pkt 31fpkt"];
1407--7914[label="1;30pkt 30fpkt"];
1446--2494[label="0.142857;1pkt 1fpkt"];
1446--3478[label="0.285714;2pkt 2fpkt"];
1446--4545[label="0.714286;5pkt 5fpkt"];
1446--4715[label="0.142857;1pkt 1fpkt"];
1446--6683[label="0.714286;5pkt 5fpkt"];
1446--6784[label="0.142857;1pkt 1fpkt"];
1446--7914[label="0.571429;4pkt 4fpkt"];
1446--7962[label="0.142857;1pkt 1fpkt"];
4545--6683[label="1;31pkt 31fpkt"];
4545--7914[label="1;30pkt 30fpkt"];
4715--6784[label="1;275pkt 275fpkt"];
4715--7962[label="1;275pkt 275fpkt"];
6683--7914[label="1;30pkt 30fpkt"];
6784--7962[label="1;275pkt 275fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="128.65.208.106" src_port="49926"/>
      <filter dst_port="53" src_ip="128.65.209.114" src_port="59809"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
4723[label="87.30.159.115;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6791[label="87.30.159.115;2pkt 2fpkt", shape=invtriangle, color=brown];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.30.159.115:80, 183.144.220.98:6274}[50%]&lt;BR/&gt;{87.30.159.115:80, 176.196.255.116:2902}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6274: (25%)&lt;BR/&gt; 2902: (25%)&gt;];
}
4723--6791[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.255.116" dst_port="2902" src_ip="87.30.159.115" src_port="80"/>
      <filter dst_ip="183.144.220.98" dst_port="6274" src_ip="87.30.159.115" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.246.157.116"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
4734[label="32.8.252.116;156pkt 156fpkt", shape=pentagon, color=darkviolet];
6800[label="32.8.252.116;156pkt 156fpkt", shape=invtriangle, color=brown];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.8.252.116:11551, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11551: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4734--6800[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="32.8.252.116" src_port="11551"/>
    </slice>
    <from sec="1118034695" usec="0"/>
    <to sec="1118034719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
4737[label="176.196.95.117;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6802[label="176.196.95.117;17pkt 17fpkt", shape=invtriangle, color=brown];
7972[label="176.196.95.117;17pkt 17fpkt", shape=invhouse, color=bisque];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.117:22, 219.5.199.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 40857: (2.88462%)&lt;BR/&gt; 40570: (2.88462%)&lt;BR/&gt; 39816: (2.88462%)&lt;BR/&gt; 39503: (2.88462%)&gt;];
}
4737--6802[label="1;17pkt 17fpkt"];
4737--7972[label="1;17pkt 17fpkt"];
6802--7972[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" src_ip="176.196.95.117" src_port="22"/>
    </slice>
    <from sec="1118034827" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.165.8.118"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
4744[label="176.196.95.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6807[label="176.196.95.118;2pkt 2fpkt", shape=invtriangle, color=brown];
7976[label="176.196.95.118;2pkt 2fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.118:22, 219.5.199.201:42558}[50%]&lt;BR/&gt;{176.196.95.118:22, 219.5.199.201:42861}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42861: (25%)&lt;BR/&gt; 42558: (25%)&gt;];
}
4744--6807[label="1;2pkt 2fpkt"];
4744--7976[label="1;2pkt 2fpkt"];
6807--7976[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42861" src_ip="176.196.95.118" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42558" src_ip="176.196.95.118" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
4748[label="176.196.95.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6810[label="176.196.95.119;2pkt 2fpkt", shape=invtriangle, color=brown];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.119:22, 219.5.199.201:35986}[50%]&lt;BR/&gt;{176.196.95.119:22, 219.5.199.201:42665}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42665: (33.3333%)&lt;BR/&gt; 35986: (16.6667%)&gt;];
}
4748--6810[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42665" src_ip="176.196.95.119" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="35986" src_ip="176.196.95.119" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
4750[label="176.197.120.119;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6812[label="176.197.120.119;35pkt 35fpkt", shape=invtriangle, color=brown];
7977[label="176.197.120.119;35pkt 35fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.120.119:*, 211.221.32.24:80}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5849%)&lt;BR/&gt; 2896: (1.41509%)&lt;BR/&gt; 2895: (1.41509%)&lt;BR/&gt; 2894: (1.41509%)&lt;BR/&gt; 2893: (1.41509%)&gt;];
}
4750--6812[label="1;35pkt 35fpkt"];
4750--7977[label="1;35pkt 35fpkt"];
6812--7977[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="211.221.32.24" dst_port="80" src_ip="176.197.120.119"/>
    </slice>
    <from sec="1118034139" usec="0"/>
    <to sec="1118034700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.16.163.119"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
4758[label="196.80.116.120;181pkt 181fpkt", shape=pentagon, color=darkviolet];
6817[label="196.80.116.120;181pkt 181fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.80.116.120:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4453: (0.276243%)&lt;BR/&gt; 4452: (0.276243%)&lt;BR/&gt; 4451: (0.276243%)&lt;BR/&gt; 4449: (0.276243%)&gt;];
}
4758--6817[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="196.80.116.120"/>
    </slice>
    <from sec="1118034787" usec="0"/>
    <to sec="1118034789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
4765[label="176.196.95.121;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6821[label="176.196.95.121;18pkt 18fpkt", shape=invtriangle, color=brown];
7981[label="176.196.95.121;17pkt 17fpkt", shape=invhouse, color=bisque];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.121:22, 219.5.199.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42678: (2.88462%)&lt;BR/&gt; 42362: (2.88462%)&lt;BR/&gt; 42047: (2.88462%)&lt;BR/&gt; 41696: (2.88462%)&gt;];
}
4765--6821[label="1;17pkt 17fpkt"];
4765--7981[label="1;17pkt 17fpkt"];
6821--7981[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" src_ip="176.196.95.121" src_port="22"/>
    </slice>
    <from sec="1118034840" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
698[label="200.174.16.152;d;48pkt 48fpkt", shape=diamond, color=yellow];
699[label="183.82.34.34;s;64pkt 64fpkt", shape=diamond, color=yellow];
3905[label="183.82.34.34;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6276[label="183.82.34.34;64pkt 64fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.34.34:*, 200.174.16.152:443}[73.8462%]&lt;BR/&gt;{183.82.34.34:*, 216.170.31.240:110}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (40%)&lt;BR/&gt; 110: (9.16667%)&lt;BR/&gt; 56640: (0.833333%)&lt;BR/&gt; 56639: (0.833333%)&lt;BR/&gt; 56638: (0.833333%)&gt;];
}
698--699[label="1;48pkt 48fpkt"];
698--3905[label="1;48pkt 48fpkt"];
698--6276[label="1;48pkt 48fpkt"];
699--1366[label="0.015625;1pkt 1fpkt"];
699--3905[label="0.984375;63pkt 63fpkt"];
699--6276[label="0.984375;63pkt 63fpkt"];
3905--6276[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="200.174.16.152" dst_port="443" src_ip="183.82.34.34"/>
      <filter dst_ip="216.170.31.240" dst_port="110" src_ip="183.82.34.34"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
4777[label="176.196.95.122;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6828[label="176.196.95.122;20pkt 20fpkt", shape=invtriangle, color=brown];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.122:22, 219.5.199.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42671: (2.43902%)&lt;BR/&gt; 42311: (2.43902%)&lt;BR/&gt; 41685: (2.43902%)&lt;BR/&gt; 41295: (2.43902%)&gt;];
}
4777--6828[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" src_ip="176.196.95.122" src_port="22"/>
    </slice>
    <from sec="1118034835" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.129.48.123"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
4786[label="176.196.95.123;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6831[label="176.196.95.123;3pkt 3fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.123:22, 219.5.199.201:36266}[33.3333%]&lt;BR/&gt;{176.196.95.123:22, 219.5.199.201:42549}[33.3333%]&lt;BR/&gt;{176.196.95.123:22, 219.5.199.201:42849}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42849: (16.6667%)&lt;BR/&gt; 42549: (16.6667%)&lt;BR/&gt; 36266: (16.6667%)&gt;];
}
4786--6831[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42849" src_ip="176.196.95.123" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42549" src_ip="176.196.95.123" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="36266" src_ip="176.196.95.123" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
4788[label="183.82.32.124;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6832[label="183.82.32.124;17pkt 17fpkt", shape=invtriangle, color=brown];
7985[label="183.82.32.124;16pkt 16fpkt", shape=invhouse, color=bisque];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.32.124:*, *:80}[52.9412%]&lt;BR/&gt;{183.82.32.124:*, *:1863}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.551%)&lt;BR/&gt; 1863: (10.2041%)&lt;BR/&gt; 7001: (6.12245%)&lt;BR/&gt; 443: (6.12245%)&lt;BR/&gt; 3562: (3.06122%)&gt;];
}
4788--6832[label="1;16pkt 16fpkt"];
4788--7985[label="1;16pkt 16fpkt"];
6832--7985[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="183.82.32.124"/>
      <filter dst_port="1863" src_ip="183.82.32.124"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.197.43.124"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.44.69.125"/>
    </slice>
    <from sec="1118034426" usec="0"/>
    <to sec="1118034438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
4801[label="55.112.134.125;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6842[label="55.112.134.125;101pkt 101fpkt", shape=invtriangle, color=brown];
7992[label="55.112.134.125;100pkt 100fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.112.134.125:*, 133.167.20.80:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35612: (1.49007%)&lt;BR/&gt; 30022: (1.49007%)&lt;BR/&gt; 29992: (1.49007%)&lt;BR/&gt; 19991: (1.49007%)&lt;BR/&gt; 19086: (1.49007%)&gt;];
}
4801--6842[label="1;101pkt 101fpkt"];
4801--7992[label="1;100pkt 100fpkt"];
6842--7992[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.20.80" src_ip="55.112.134.125"/>
    </slice>
    <from sec="1118034123" usec="0"/>
    <to sec="1118034130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
4812[label="176.196.95.127;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6846[label="176.196.95.127;15pkt 15fpkt", shape=invtriangle, color=brown];
7995[label="176.196.95.127;15pkt 15fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.127:22, 219.5.199.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42601: (3.26087%)&lt;BR/&gt; 42295: (3.26087%)&lt;BR/&gt; 41976: (3.26087%)&lt;BR/&gt; 41639: (3.26087%)&gt;];
}
4812--6846[label="1;15pkt 15fpkt"];
4812--7995[label="1;15pkt 15fpkt"];
6846--7995[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" src_ip="176.196.95.127" src_port="22"/>
    </slice>
    <from sec="1118034854" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
4817[label="133.167.15.128;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6848[label="133.167.15.128;5pkt 5fpkt", shape=invtriangle, color=brown];
7996[label="133.167.15.128;5pkt 5fpkt", shape=invhouse, color=bisque];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.15.128:*, 55.4.81.6:6667}[33.3333%]&lt;BR/&gt;{133.167.15.128:113, 55.4.81.6:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.75%)&lt;BR/&gt; 113: (18.75%)&lt;BR/&gt; 56362: (9.375%)&lt;BR/&gt; 41150: (9.375%)&lt;BR/&gt; 7001: (9.375%)&gt;];
}
4817--6848[label="1;5pkt 5fpkt"];
4817--7996[label="1;5pkt 5fpkt"];
6848--7996[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="55.4.81.6" src_ip="133.167.15.128" src_port="113"/>
      <filter dst_ip="55.4.81.6" dst_port="6667" src_ip="133.167.15.128"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
4821[label="208.84.72.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6851[label="208.84.72.128;1pkt 1fpkt", shape=invtriangle, color=brown];
7999[label="208.84.72.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.84.72.128:19101, 175.199.1.76:2654}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (50%)&lt;BR/&gt; 2654: (50%)&gt;];
}
4821--6851[label="1;1pkt 1fpkt"];
4821--7999[label="1;1pkt 1fpkt"];
6851--7999[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.1.76" dst_port="2654" src_ip="208.84.72.128" src_port="19101"/>
    </slice>
    <from sec="1118034653" usec="0"/>
    <to sec="1118034859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
1395[label="52.21.34.89;d;12pkt 12fpkt", shape=diamond, color=yellow];
1555[label="208.22.56.181;d;324pkt 324fpkt", shape=diamond, color=yellow];
2302[label="128.65.253.111;s;258pkt 258fpkt", shape=diamond, color=yellow];
2450[label="197.128.102.102;d;201pkt 201fpkt", shape=diamond, color=yellow];
3530[label="128.65.110.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4670[label="128.65.253.111;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4826[label="128.65.114.128;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6059[label="128.65.110.2;1pkt 1fpkt", shape=invtriangle, color=brown];
6855[label="128.65.114.128;16pkt 16fpkt", shape=invtriangle, color=brown];
8003[label="128.65.114.128;16pkt 16fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.22.56.181:0}[40.3487%]&lt;BR/&gt;{128.65.253.111:0, *:0}[32.254%]&lt;BR/&gt;{*:0, 197.128.102.102:0}[25.0311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.8151%)&lt;BR/&gt; 80: (3.59246%)&lt;BR/&gt; 24056: (0.235571%)&lt;BR/&gt; 23388: (0.235571%)&lt;BR/&gt; 22764: (0.235571%)&gt;];
}
1395--1416[label="0.166667;2pkt 2fpkt"];
1395--2302[label="0.0833333;1pkt 1fpkt"];
1395--3477[label="0.25;3pkt 3fpkt"];
1395--3495[label="0.25;3pkt 3fpkt"];
1395--3530[label="1;1pkt 1fpkt"];
1395--4826[label="0.5;6pkt 6fpkt"];
1395--6059[label="1;1pkt 1fpkt"];
1395--6855[label="0.5;6pkt 6fpkt"];
1395--8003[label="0.5;6pkt 6fpkt"];
1555--1600[label="0.00308642;1pkt 1fpkt"];
1555--2097[label="0.00478469;1pkt 1fpkt"];
1555--2302[label="0.00387597;1pkt 1fpkt"];
1555--2669[label="0.00308642;1pkt 1fpkt"];
1555--2788[label="0.00308642;1pkt 1fpkt"];
1555--3046[label="0.00308642;1pkt 1fpkt"];
1555--3207[label="0.00308642;1pkt 1fpkt"];
1555--3225[label="0.00308642;1pkt 1fpkt"];
1555--3540[label="0.00308642;1pkt 1fpkt"];
1555--3644[label="0.0125;1pkt 1fpkt"];
1555--4217[label="0.00308642;1pkt 1fpkt"];
1555--4670[label="0.25;1pkt 1fpkt"];
1555--4692[label="0.00308642;1pkt 1fpkt"];
1555--4840[label="0.00308642;1pkt 1fpkt"];
1555--5114[label="0.00308642;1pkt 1fpkt"];
1555--6062[label="0.00308642;1pkt 1fpkt"];
1555--6127[label="0.0125;1pkt 1fpkt"];
1555--6484[label="0.00308642;1pkt 1fpkt"];
1555--6772[label="0.00308642;1pkt 1fpkt"];
1555--6863[label="0.00308642;1pkt 1fpkt"];
1555--7017[label="0.00308642;1pkt 1fpkt"];
1555--7818[label="0.00308642;1pkt 1fpkt"];
1555--8081[label="0.00308642;1pkt 1fpkt"];
2302--2450[label="0.00497512;1pkt 1fpkt"];
2302--2456[label="0.00529101;1pkt 1fpkt"];
2302--4670[label="0.75;3pkt 3fpkt"];
2450--2460[label="0.0114943;1pkt 1fpkt"];
2450--2669[label="0.00497512;1pkt 1fpkt"];
2450--3046[label="0.00497512;1pkt 1fpkt"];
2450--3207[label="0.00497512;1pkt 1fpkt"];
2450--3225[label="0.00497512;1pkt 1fpkt"];
2450--3331[label="0.00497512;1pkt 1fpkt"];
2450--3540[label="0.00497512;1pkt 1fpkt"];
2450--4217[label="0.00497512;1pkt 1fpkt"];
2450--4670[label="0.25;1pkt 1fpkt"];
2450--4692[label="0.00497512;1pkt 1fpkt"];
2450--5114[label="0.00497512;1pkt 1fpkt"];
2450--5331[label="0.011236;1pkt 1fpkt"];
2450--6062[label="0.00497512;1pkt 1fpkt"];
2450--6484[label="0.00497512;1pkt 1fpkt"];
2450--6772[label="0.00497512;1pkt 1fpkt"];
2450--7017[label="0.00497512;1pkt 1fpkt"];
2450--7818[label="0.00497512;1pkt 1fpkt"];
2450--8081[label="0.00497512;1pkt 1fpkt"];
3530--6059[label="1;1pkt 1fpkt"];
4826--6855[label="1;16pkt 16fpkt"];
4826--8003[label="1;16pkt 16fpkt"];
6855--8003[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="128.65.253.111"/>
      <filter dst_ip="208.22.56.181"/>
      <filter dst_ip="197.128.102.102"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
4827[label="194.18.128.128;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6856[label="194.18.128.128;12pkt 12fpkt", shape=invtriangle, color=brown];
8004[label="194.18.128.128;12pkt 12fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.18.128.128:80, 197.77.44.109:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1092: (4.16667%)&lt;BR/&gt; 1091: (4.16667%)&lt;BR/&gt; 1090: (4.16667%)&lt;BR/&gt; 1089: (4.16667%)&gt;];
}
4827--6856[label="1;12pkt 12fpkt"];
4827--8004[label="1;12pkt 12fpkt"];
6856--8004[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.44.109" src_ip="194.18.128.128" src_port="80"/>
    </slice>
    <from sec="1118034242" usec="0"/>
    <to sec="1118034285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
4828[label="176.197.145.128;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6857[label="176.197.145.128;11pkt 11fpkt", shape=invtriangle, color=brown];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.145.128:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65007: (4.34783%)&lt;BR/&gt; 61750: (4.34783%)&lt;BR/&gt; 54657: (4.34783%)&lt;BR/&gt; 54656: (4.34783%)&lt;BR/&gt; 54652: (4.34783%)&gt;];
}
4828--6857[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.145.128"/>
    </slice>
    <from sec="1118034014" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
4830[label="176.197.163.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6858[label="176.197.163.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.163.128:33439, 184.236.11.96:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33439: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4830--6858[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="184.236.11.96" dst_port="80" src_ip="176.197.163.128" src_port="33439"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
4834[label="133.167.14.129;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6859[label="133.167.14.129;24pkt 24fpkt", shape=invtriangle, color=brown];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.14.129:80, 196.146.128.221:*}[37.5%]&lt;BR/&gt;{133.167.14.129:80, 193.134.223.211:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50865: (2.08333%)&lt;BR/&gt; 50864: (2.08333%)&lt;BR/&gt; 50863: (2.08333%)&lt;BR/&gt; 50862: (2.08333%)&gt;];
}
4834--6859[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="196.146.128.221" src_ip="133.167.14.129" src_port="80"/>
      <filter dst_ip="193.134.223.211" src_ip="133.167.14.129" src_port="80"/>
    </slice>
    <from sec="1118034042" usec="0"/>
    <to sec="1118034729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
4836[label="176.197.61.129;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6861[label="176.197.61.129;3pkt 3fpkt", shape=invtriangle, color=brown];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.61.129:33200, 196.244.156.207:80}[33.3333%]&lt;BR/&gt;{176.197.61.129:33387, 196.174.175.46:80}[33.3333%]&lt;BR/&gt;{176.197.61.129:33755, 196.174.175.46:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33755: (16.6667%)&lt;BR/&gt; 33387: (16.6667%)&lt;BR/&gt; 33200: (16.6667%)&gt;];
}
4836--6861[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="196.174.175.46" dst_port="80" src_ip="176.197.61.129" src_port="33755"/>
      <filter dst_ip="196.174.175.46" dst_port="80" src_ip="176.197.61.129" src_port="33387"/>
      <filter dst_ip="196.244.156.207" dst_port="80" src_ip="176.197.61.129" src_port="33200"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
4847[label="128.65.0.130;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6866[label="128.65.0.130;5pkt 5fpkt", shape=invtriangle, color=brown];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.0.130:2423, 209.9.240.212:443}[20%]&lt;BR/&gt;{128.65.0.130:2424, 209.9.240.212:443}[20%]&lt;BR/&gt;{128.65.0.130:2504, 209.9.240.212:443}[20%]&lt;BR/&gt;{128.65.0.130:2507, 209.9.240.212:443}[20%]&lt;BR/&gt;{128.65.0.130:2514, 209.9.240.212:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2514: (10%)&lt;BR/&gt; 2507: (10%)&lt;BR/&gt; 2504: (10%)&lt;BR/&gt; 2424: (10%)&gt;];
}
4847--6866[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.9.240.212" dst_port="443" src_ip="128.65.0.130" src_port="2514"/>
      <filter dst_ip="209.9.240.212" dst_port="443" src_ip="128.65.0.130" src_port="2507"/>
      <filter dst_ip="209.9.240.212" dst_port="443" src_ip="128.65.0.130" src_port="2504"/>
      <filter dst_ip="209.9.240.212" dst_port="443" src_ip="128.65.0.130" src_port="2424"/>
      <filter dst_ip="209.9.240.212" dst_port="443" src_ip="128.65.0.130" src_port="2423"/>
    </slice>
    <from sec="1118034085" usec="0"/>
    <to sec="1118034203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
4857[label="196.59.182.130;302pkt 302fpkt", shape=pentagon, color=darkviolet];
6870[label="196.59.182.130;302pkt 302fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.59.182.130:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4715: (0.496689%)&lt;BR/&gt; 3021: (0.496689%)&lt;BR/&gt; 4774: (0.331126%)&lt;BR/&gt; 4491: (0.331126%)&gt;];
}
4857--6870[label="1;302pkt 302fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="196.59.182.130"/>
    </slice>
    <from sec="1118034557" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
4864[label="128.65.54.131;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6874[label="128.65.54.131;16pkt 16fpkt", shape=invtriangle, color=brown];
8012[label="128.65.54.131;16pkt 16fpkt", shape=invhouse, color=bisque];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.54.131:*, 211.234.16.195:80}[31.25%]&lt;BR/&gt;{128.65.54.131:*, 192.3.235.91:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3528: (3.19149%)&lt;BR/&gt; 3527: (3.19149%)&lt;BR/&gt; 3526: (3.19149%)&lt;BR/&gt; 3525: (3.19149%)&gt;];
}
4864--6874[label="1;15pkt 15fpkt"];
4864--8012[label="1;15pkt 15fpkt"];
6874--8012[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="211.234.16.195" dst_port="80" src_ip="128.65.54.131"/>
      <filter dst_ip="192.3.235.91" dst_port="80" src_ip="128.65.54.131"/>
    </slice>
    <from sec="1118034083" usec="0"/>
    <to sec="1118034709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
4879[label="183.82.33.132;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6883[label="183.82.33.132;4pkt 4fpkt", shape=invtriangle, color=brown];
8016[label="183.82.33.132;5pkt 5fpkt", shape=invhouse, color=bisque];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.33.132:2509, 192.9.57.3:1863}[20%]&lt;BR/&gt;{183.82.33.132:2518, 192.9.61.65:1863}[20%]&lt;BR/&gt;{183.82.33.132:2535, 192.9.61.68:1863}[20%]&lt;BR/&gt;{183.82.33.132:2539, 192.9.61.78:1863}[20%]&lt;BR/&gt;{183.82.33.132:2528, 192.9.61.91:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2539: (10.7143%)&lt;BR/&gt; 2535: (10.7143%)&lt;BR/&gt; 2518: (10.7143%)&lt;BR/&gt; 2509: (10.7143%)&gt;];
}
4879--6883[label="1;4pkt 4fpkt"];
4879--8016[label="1;5pkt 5fpkt"];
6883--8016[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.61.91" dst_port="1863" src_ip="183.82.33.132" src_port="2528"/>
      <filter dst_ip="192.9.61.78" dst_port="1863" src_ip="183.82.33.132" src_port="2539"/>
      <filter dst_ip="192.9.61.68" dst_port="1863" src_ip="183.82.33.132" src_port="2535"/>
      <filter dst_ip="192.9.61.65" dst_port="1863" src_ip="183.82.33.132" src_port="2518"/>
      <filter dst_ip="192.9.57.3" dst_port="1863" src_ip="183.82.33.132" src_port="2509"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.252.213.133"/>
    </slice>
    <from sec="1118034056" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
4907[label="176.196.172.134;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6898[label="176.196.172.134;44pkt 44fpkt", shape=invtriangle, color=brown];
8024[label="176.196.172.134;44pkt 44fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.172.134:*, 192.9.62.74:80}[97.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3850: (1.13636%)&lt;BR/&gt; 3849: (1.13636%)&lt;BR/&gt; 3844: (1.13636%)&lt;BR/&gt; 3843: (1.13636%)&gt;];
}
4907--6898[label="1;44pkt 44fpkt"];
4907--8024[label="1;44pkt 44fpkt"];
6898--8024[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.62.74" dst_port="80" src_ip="176.196.172.134"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
478[label="192.177.190.150;d;142pkt 142fpkt", shape=diamond, color=yellow];
502[label="183.82.37.220;s;114pkt 114fpkt", shape=diamond, color=yellow];
829[label="183.82.32.123;s;36pkt 36fpkt", shape=diamond, color=yellow];
1649[label="183.82.34.253;s;89pkt 89fpkt", shape=diamond, color=yellow];
2698[label="192.177.190.150;d;33pkt 33fpkt", shape=hexagon, color=black];
3279[label="183.82.34.253;s;74pkt 74fpkt", shape=hexagon, color=black];
4198[label="183.82.34.67;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4475[label="183.82.39.90;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5795[label="183.82.37.220;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6026[label="183.82.34.253;89pkt 89fpkt", shape=pentagon, color=darkviolet];
6639[label="183.82.39.90;17pkt 17fpkt", shape=invtriangle, color=brown];
7435[label="183.82.37.220;117pkt 117fpkt", shape=invtriangle, color=brown];
7585[label="183.82.34.253;89pkt 89fpkt", shape=invtriangle, color=brown];
8291[label="183.82.37.220;117pkt 117fpkt", shape=invhouse, color=bisque];
8363[label="183.82.34.253;89pkt 89fpkt", shape=invhouse, color=bisque];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.37.220:*, *:80}[41.637%]&lt;BR/&gt;{183.82.34.253:*, 192.177.190.150:80}[23.8434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2639%)&lt;BR/&gt; 1863: (0.954861%)&lt;BR/&gt; 7001: (0.520833%)&lt;BR/&gt; 1810: (0.303819%)&lt;BR/&gt; 1808: (0.303819%)&gt;];
}
478--502[label="0.175439;20pkt 20fpkt"];
478--520[label="0.028169;4pkt 4fpkt"];
478--829[label="0.583333;21pkt 21fpkt"];
478--1649[label="0.752809;67pkt 67fpkt"];
478--2698[label="1;33pkt 33fpkt"];
478--2918[label="0.0140845;2pkt 2fpkt"];
478--3279[label="0.72973;54pkt 54fpkt"];
478--3478[label="0.0492958;7pkt 7fpkt"];
478--3485[label="0.119718;17pkt 17fpkt"];
478--4198[label="0.928571;13pkt 13fpkt"];
478--4475[label="0.8125;13pkt 13fpkt"];
478--5795[label="0.172414;20pkt 20fpkt"];
478--6026[label="0.752809;67pkt 67fpkt"];
478--6639[label="0.764706;13pkt 13fpkt"];
478--7435[label="0.17094;20pkt 20fpkt"];
478--7585[label="0.752809;67pkt 67fpkt"];
478--8291[label="0.17094;20pkt 20fpkt"];
478--8363[label="0.752809;67pkt 67fpkt"];
502--1133[label="0.157895;18pkt 18fpkt"];
502--1612[label="0.0263158;3pkt 3fpkt"];
502--2698[label="0.30303;10pkt 10fpkt"];
502--3478[label="0.0614035;7pkt 7fpkt"];
502--3485[label="0.0263158;3pkt 3fpkt"];
502--5795[label="0.991228;113pkt 113fpkt"];
502--7435[label="1;114pkt 114fpkt"];
502--8291[label="1;114pkt 114fpkt"];
829--1548[label="0.0555556;2pkt 2fpkt"];
829--2076[label="0.0277778;1pkt 1fpkt"];
829--2698[label="0.0606061;2pkt 2fpkt"];
829--3478[label="0.0555556;2pkt 2fpkt"];
829--3485[label="0.0555556;2pkt 2fpkt"];
1649--2076[label="0.011236;1pkt 1fpkt"];
1649--2698[label="0.242424;8pkt 8fpkt"];
1649--3279[label="1;74pkt 74fpkt"];
1649--3478[label="0.0449438;4pkt 4fpkt"];
1649--3485[label="0.168539;15pkt 15fpkt"];
1649--6026[label="1;89pkt 89fpkt"];
1649--7585[label="1;89pkt 89fpkt"];
1649--8363[label="1;89pkt 89fpkt"];
2698--2918[label="0.0606061;2pkt 2fpkt"];
2698--3279[label="0.242424;8pkt 8fpkt"];
2698--4198[label="0.142857;2pkt 2fpkt"];
2698--4475[label="0.5625;9pkt 9fpkt"];
2698--5795[label="0.30303;10pkt 10fpkt"];
2698--6026[label="0.242424;8pkt 8fpkt"];
2698--6639[label="0.529412;9pkt 9fpkt"];
2698--7435[label="0.30303;10pkt 10fpkt"];
2698--7585[label="0.242424;8pkt 8fpkt"];
2698--8291[label="0.30303;10pkt 10fpkt"];
2698--8363[label="0.242424;8pkt 8fpkt"];
3279--3478[label="0.0540541;4pkt 4fpkt"];
3279--3485[label="0.202703;15pkt 15fpkt"];
3279--6026[label="1;74pkt 74fpkt"];
3279--7585[label="1;74pkt 74fpkt"];
3279--8363[label="1;74pkt 74fpkt"];
4475--6639[label="1;16pkt 16fpkt"];
5795--7435[label="1;116pkt 116fpkt"];
5795--8291[label="1;116pkt 116fpkt"];
6026--7585[label="1;89pkt 89fpkt"];
6026--8363[label="1;89pkt 89fpkt"];
7435--8291[label="1;117pkt 117fpkt"];
7585--8363[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="183.82.37.220"/>
      <filter dst_ip="192.177.190.150" dst_port="80" src_ip="183.82.34.253"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
4922[label="183.174.38.136;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6908[label="183.174.38.136;12pkt 12fpkt", shape=invtriangle, color=brown];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.38.136:*, 193.203.208.153:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50256: (4.34783%)&lt;BR/&gt; 50229: (4.34783%)&lt;BR/&gt; 50187: (4.34783%)&lt;BR/&gt; 50184: (4.34783%)&gt;];
}
4922--6908[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="193.203.208.153" dst_port="80" src_ip="183.174.38.136"/>
    </slice>
    <from sec="1118034021" usec="0"/>
    <to sec="1118034820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
4928[label="130.154.170.136;79pkt 79fpkt", shape=pentagon, color=darkviolet];
6911[label="130.154.170.136;79pkt 79fpkt", shape=invtriangle, color=brown];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.154.170.136:53, *:*}[98.7342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.6329%)&lt;BR/&gt; 5353: (3.16456%)&lt;BR/&gt; 32829: (1.26582%)&lt;BR/&gt; 32772: (1.26582%)&lt;BR/&gt; 32768: (1.26582%)&gt;];
}
4928--6911[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="130.154.170.136" src_port="53"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.226.9.137"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
4933[label="219.176.25.137;416pkt 416fpkt", shape=pentagon, color=darkviolet];
6915[label="219.176.25.137;416pkt 416fpkt", shape=invtriangle, color=brown];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.176.25.137:2155, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2155: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4933--6915[label="1;416pkt 416fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.176.25.137" src_port="2155"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
687[label="176.197.169.198;s;103pkt 103fpkt", shape=diamond, color=yellow];
999[label="192.9.171.234;d;229pkt 229fpkt", shape=diamond, color=yellow];
1101[label="192.9.87.194;d;37pkt 37fpkt", shape=diamond, color=yellow];
1237[label="176.197.77.106;s;6pkt 6fpkt", shape=diamond, color=yellow];
1242[label="193.211.50.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
1802[label="192.9.146.158;d;446pkt 446fpkt", shape=diamond, color=yellow];
1855[label="176.196.137.1;s;19pkt 19fpkt", shape=diamond, color=yellow];
2232[label="192.9.201.34;d;19pkt 19fpkt", shape=diamond, color=yellow];
2867[label="176.197.77.106;s;4pkt 4fpkt", shape=hexagon, color=black];
3253[label="192.9.87.194;d;37pkt 37fpkt", shape=hexagon, color=black];
3519[label="176.196.137.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3574[label="176.196.157.5;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3575[label="176.197.163.5;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3611[label="176.196.157.8;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3631[label="176.196.148.9;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3947[label="176.196.217.37;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4017[label="176.197.65.45;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4051[label="176.196.223.48;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4163[label="176.196.157.64;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4239[label="183.174.45.70;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4678[label="183.174.50.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4798[label="197.66.76.125;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4844[label="176.196.157.129;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4887[label="176.196.157.132;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4940[label="176.196.157.137;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4974[label="176.196.157.140;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4986[label="176.196.157.141;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5209[label="176.196.157.162;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5262[label="176.196.208.167;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5441[label="176.197.104.184;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5570[label="176.197.169.198;110pkt 110fpkt", shape=pentagon, color=darkviolet];
5723[label="176.197.64.212;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6053[label="176.196.137.1;1pkt 1fpkt", shape=invtriangle, color=brown];
6080[label="176.197.163.5;14pkt 14fpkt", shape=invtriangle, color=brown];
6107[label="176.196.157.8;31pkt 31fpkt", shape=invtriangle, color=brown];
6119[label="176.196.148.9;9pkt 9fpkt", shape=invtriangle, color=brown];
6304[label="176.196.217.37;21pkt 21fpkt", shape=invtriangle, color=brown];
6347[label="176.197.65.45;10pkt 10fpkt", shape=invtriangle, color=brown];
6368[label="176.196.223.48;20pkt 20fpkt", shape=invtriangle, color=brown];
6764[label="183.174.50.112;2pkt 2fpkt", shape=invtriangle, color=brown];
6840[label="197.66.76.125;26pkt 26fpkt", shape=invtriangle, color=brown];
6865[label="176.196.157.129;30pkt 30fpkt", shape=invtriangle, color=brown];
6918[label="176.196.157.137;30pkt 30fpkt", shape=invtriangle, color=brown];
6933[label="176.196.157.140;27pkt 27fpkt", shape=invtriangle, color=brown];
6942[label="176.196.157.141;29pkt 29fpkt", shape=invtriangle, color=brown];
7221[label="176.197.104.184;22pkt 22fpkt", shape=invtriangle, color=brown];
7302[label="176.197.169.198;110pkt 110fpkt", shape=invtriangle, color=brown];
7387[label="176.197.64.212;13pkt 13fpkt", shape=invtriangle, color=brown];
7609[label="176.197.163.5;14pkt 14fpkt", shape=invhouse, color=bisque];
7629[label="176.196.148.9;9pkt 9fpkt", shape=invhouse, color=bisque];
7747[label="176.197.65.45;10pkt 10fpkt", shape=invhouse, color=bisque];
7954[label="183.174.50.112;2pkt 2fpkt", shape=invhouse, color=bisque];
8007[label="176.196.157.129;30pkt 30fpkt", shape=invhouse, color=bisque];
8032[label="176.196.157.137;30pkt 30fpkt", shape=invhouse, color=bisque];
8264[label="176.197.64.212;12pkt 12fpkt", shape=invhouse, color=bisque];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.9.146.158:80}[50.4875%]&lt;BR/&gt;{*:*, 192.9.171.234:80}[24.9187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.608%)&lt;BR/&gt; 443: (1.24288%)&lt;BR/&gt; 53: (1.00984%)&lt;BR/&gt; 0: (0.880373%)&lt;BR/&gt; 33076: (0.62144%)&gt;];
}
687--748[label="0.0104167;1pkt 1fpkt"];
687--999[label="0.038835;4pkt 4fpkt"];
687--1101[label="0.135135;5pkt 5fpkt"];
687--1305[label="0.0194175;2pkt 2fpkt"];
687--1591[label="0.0425532;2pkt 2fpkt"];
687--1754[label="0.00970874;1pkt 1fpkt"];
687--1802[label="0.00970874;1pkt 1fpkt"];
687--2013[label="0.0147059;1pkt 1fpkt"];
687--2023[label="0.173913;4pkt 4fpkt"];
687--2034[label="0.047619;1pkt 1fpkt"];
687--2232[label="1;19pkt 19fpkt"];
687--2466[label="0.00970874;1pkt 1fpkt"];
687--3197[label="0.0163934;1pkt 1fpkt"];
687--3253[label="0.135135;5pkt 5fpkt"];
687--3478[label="0.0776699;8pkt 8fpkt"];
687--3485[label="0.0291262;3pkt 3fpkt"];
687--5570[label="1;103pkt 103fpkt"];
687--7302[label="1;103pkt 103fpkt"];
999--1172[label="0.0240964;2pkt 2fpkt"];
999--1259[label="0.00970874;1pkt 1fpkt"];
999--1554[label="0.0218978;3pkt 3fpkt"];
999--1855[label="0.210526;4pkt 4fpkt"];
999--2087[label="0.040404;4pkt 4fpkt"];
999--2653[label="0.0174672;4pkt 4fpkt"];
999--2729[label="0.0131004;3pkt 3fpkt"];
999--2971[label="0.021978;2pkt 2fpkt"];
999--3111[label="0.00436681;1pkt 1fpkt"];
999--3478[label="0.113537;26pkt 26fpkt"];
999--3485[label="0.100437;23pkt 23fpkt"];
999--3575[label="0.0714286;1pkt 1fpkt"];
999--3631[label="0.625;5pkt 5fpkt"];
999--3886[label="0.00873362;2pkt 2fpkt"];
999--3888[label="0.111111;22pkt 22fpkt"];
999--3947[label="1;22pkt 22fpkt"];
999--4017[label="0.363636;4pkt 4fpkt"];
999--4051[label="1;20pkt 20fpkt"];
999--4143[label="0.00436681;1pkt 1fpkt"];
999--4151[label="0.0204082;2pkt 2fpkt"];
999--4249[label="0.0833333;1pkt 1fpkt"];
999--4573[label="0.047619;1pkt 1fpkt"];
999--4689[label="0.0480349;11pkt 11fpkt"];
999--4798[label="0.0384615;1pkt 1fpkt"];
999--4855[label="0.0909091;1pkt 1fpkt"];
999--5262[label="0.416667;5pkt 5fpkt"];
999--5314[label="0.0305677;7pkt 7fpkt"];
999--5327[label="0.0393013;9pkt 9fpkt"];
999--5355[label="0.0524017;12pkt 12fpkt"];
999--5377[label="0.0218341;5pkt 5fpkt"];
999--5441[label="0.130435;3pkt 3fpkt"];
999--5516[label="0.027027;1pkt 1fpkt"];
999--5569[label="0.0769231;1pkt 1fpkt"];
999--5570[label="0.0363636;4pkt 4fpkt"];
999--5941[label="0.2;1pkt 1fpkt"];
999--6080[label="0.0714286;1pkt 1fpkt"];
999--6119[label="0.555556;5pkt 5fpkt"];
999--6261[label="0.00873362;2pkt 2fpkt"];
999--6263[label="0.110553;22pkt 22fpkt"];
999--6304[label="1;21pkt 21fpkt"];
999--6347[label="0.4;4pkt 4fpkt"];
999--6368[label="1;20pkt 20fpkt"];
999--6503[label="0.0909091;1pkt 1fpkt"];
999--6840[label="0.0384615;1pkt 1fpkt"];
999--7155[label="0.0305677;7pkt 7fpkt"];
999--7173[label="0.0524017;12pkt 12fpkt"];
999--7186[label="0.0218341;5pkt 5fpkt"];
999--7221[label="0.136364;3pkt 3fpkt"];
999--7301[label="0.0769231;1pkt 1fpkt"];
999--7302[label="0.0363636;4pkt 4fpkt"];
999--7528[label="0.2;1pkt 1fpkt"];
999--7609[label="0.0714286;1pkt 1fpkt"];
999--7629[label="0.555556;5pkt 5fpkt"];
999--7697[label="0.00873362;2pkt 2fpkt"];
999--7747[label="0.4;4pkt 4fpkt"];
999--8150[label="0.0305677;7pkt 7fpkt"];
999--8154[label="0.0393013;9pkt 9fpkt"];
999--8340[label="0.166667;1pkt 1fpkt"];
1101--2669[label="0.027027;1pkt 1fpkt"];
1101--2729[label="0.027027;1pkt 1fpkt"];
1101--2961[label="0.0540541;2pkt 2fpkt"];
1101--2971[label="0.0540541;2pkt 2fpkt"];
1101--3253[label="1;37pkt 37fpkt"];
1101--3478[label="0.135135;5pkt 5fpkt"];
1101--3631[label="0.25;2pkt 2fpkt"];
1101--4017[label="0.0909091;1pkt 1fpkt"];
1101--4151[label="0.0540541;2pkt 2fpkt"];
1101--4217[label="0.027027;1pkt 1fpkt"];
1101--4239[label="0.333333;1pkt 1fpkt"];
1101--4678[label="0.5;1pkt 1fpkt"];
1101--4756[label="0.0540541;2pkt 2fpkt"];
1101--5262[label="0.333333;4pkt 4fpkt"];
1101--5314[label="0.027027;1pkt 1fpkt"];
1101--5355[label="0.108108;4pkt 4fpkt"];
1101--5377[label="0.0540541;2pkt 2fpkt"];
1101--5441[label="0.0869565;2pkt 2fpkt"];
1101--5570[label="0.135135;5pkt 5fpkt"];
1101--5723[label="0.0833333;1pkt 1fpkt"];
1101--6119[label="0.333333;3pkt 3fpkt"];
1101--6484[label="0.027027;1pkt 1fpkt"];
1101--6764[label="0.5;1pkt 1fpkt"];
1101--6815[label="0.0540541;2pkt 2fpkt"];
1101--7155[label="0.027027;1pkt 1fpkt"];
1101--7173[label="0.108108;4pkt 4fpkt"];
1101--7186[label="0.0540541;2pkt 2fpkt"];
1101--7221[label="0.0909091;2pkt 2fpkt"];
1101--7302[label="0.135135;5pkt 5fpkt"];
1101--7387[label="0.0769231;1pkt 1fpkt"];
1101--7629[label="0.333333;3pkt 3fpkt"];
1101--7818[label="0.027027;1pkt 1fpkt"];
1101--7954[label="0.5;1pkt 1fpkt"];
1101--7979[label="0.0540541;2pkt 2fpkt"];
1101--8150[label="0.027027;1pkt 1fpkt"];
1101--8264[label="0.0833333;1pkt 1fpkt"];
1237--1242[label="1;1pkt 1fpkt"];
1237--1802[label="0.166667;1pkt 1fpkt"];
1237--2867[label="1;4pkt 4fpkt"];
1242--2867[label="1;1pkt 1fpkt"];
1802--1816[label="0.02;1pkt 1fpkt"];
1802--2275[label="0.0149254;1pkt 1fpkt"];
1802--2729[label="0.00224215;1pkt 1fpkt"];
1802--2787[label="0.0246637;11pkt 11fpkt"];
1802--2867[label="0.25;1pkt 1fpkt"];
1802--2971[label="0.010989;1pkt 1fpkt"];
1802--3111[label="0.00672646;3pkt 3fpkt"];
1802--3120[label="0.00224215;1pkt 1fpkt"];
1802--3242[label="0.0149254;1pkt 1fpkt"];
1802--3411[label="0.0246637;11pkt 11fpkt"];
1802--3478[label="0.0426009;19pkt 19fpkt"];
1802--3485[label="0.0762332;34pkt 34fpkt"];
1802--3574[label="0.366667;11pkt 11fpkt"];
1802--3575[label="0.0714286;1pkt 1fpkt"];
1802--3611[label="1;31pkt 31fpkt"];
1802--3631[label="0.125;1pkt 1fpkt"];
1802--3708[label="0.0169492;1pkt 1fpkt"];
1802--4017[label="0.0909091;1pkt 1fpkt"];
1802--4018[label="0.2;1pkt 1fpkt"];
1802--4143[label="0.00672646;3pkt 3fpkt"];
1802--4151[label="0.0102041;1pkt 1fpkt"];
1802--4163[label="1;30pkt 30fpkt"];
1802--4239[label="0.333333;1pkt 1fpkt"];
1802--4678[label="0.5;1pkt 1fpkt"];
1802--4685[label="0.0515695;23pkt 23fpkt"];
1802--4689[label="0.0044843;2pkt 2fpkt"];
1802--4844[label="0.966667;29pkt 29fpkt"];
1802--4855[label="0.0909091;1pkt 1fpkt"];
1802--4887[label="1;29pkt 29fpkt"];
1802--4940[label="1;30pkt 30fpkt"];
1802--4974[label="1;28pkt 28fpkt"];
1802--4986[label="1;29pkt 29fpkt"];
1802--5159[label="0.00224215;1pkt 1fpkt"];
1802--5209[label="1;27pkt 27fpkt"];
1802--5262[label="0.25;3pkt 3fpkt"];
1802--5355[label="0.00224215;1pkt 1fpkt"];
1802--5377[label="0.0044843;2pkt 2fpkt"];
1802--5441[label="0.0434783;1pkt 1fpkt"];
1802--5516[label="0.027027;1pkt 1fpkt"];
1802--5569[label="0.0769231;1pkt 1fpkt"];
1802--5570[label="0.00909091;1pkt 1fpkt"];
1802--5723[label="0.0833333;1pkt 1fpkt"];
1802--5941[label="0.2;1pkt 1fpkt"];
1802--6080[label="0.0714286;1pkt 1fpkt"];
1802--6107[label="1;31pkt 31fpkt"];
1802--6119[label="0.111111;1pkt 1fpkt"];
1802--6347[label="0.1;1pkt 1fpkt"];
1802--6764[label="0.5;1pkt 1fpkt"];
1802--6865[label="0.966667;29pkt 29fpkt"];
1802--6918[label="1;30pkt 30fpkt"];
1802--6933[label="1;27pkt 27fpkt"];
1802--6942[label="1;29pkt 29fpkt"];
1802--7173[label="0.00224215;1pkt 1fpkt"];
1802--7186[label="0.0044843;2pkt 2fpkt"];
1802--7221[label="0.0454545;1pkt 1fpkt"];
1802--7301[label="0.0769231;1pkt 1fpkt"];
1802--7302[label="0.00909091;1pkt 1fpkt"];
1802--7387[label="0.0769231;1pkt 1fpkt"];
1802--7528[label="0.2;1pkt 1fpkt"];
1802--7609[label="0.0714286;1pkt 1fpkt"];
1802--7629[label="0.111111;1pkt 1fpkt"];
1802--7747[label="0.1;1pkt 1fpkt"];
1802--7954[label="0.5;1pkt 1fpkt"];
1802--8007[label="0.966667;29pkt 29fpkt"];
1802--8032[label="1;30pkt 30fpkt"];
1802--8264[label="0.0833333;1pkt 1fpkt"];
1802--8340[label="0.166667;1pkt 1fpkt"];
1855--3478[label="0.0526316;1pkt 1fpkt"];
1855--3519[label="1;1pkt 1fpkt"];
1855--6053[label="1;1pkt 1fpkt"];
2232--3478[label="0.0526316;1pkt 1fpkt"];
2232--3485[label="0.0526316;1pkt 1fpkt"];
2232--5570[label="1;19pkt 19fpkt"];
2232--7302[label="1;19pkt 19fpkt"];
3253--3478[label="0.135135;5pkt 5fpkt"];
3253--3631[label="0.25;2pkt 2fpkt"];
3253--4017[label="0.0909091;1pkt 1fpkt"];
3253--4151[label="0.0540541;2pkt 2fpkt"];
3253--4217[label="0.027027;1pkt 1fpkt"];
3253--4239[label="0.333333;1pkt 1fpkt"];
3253--4678[label="0.5;1pkt 1fpkt"];
3253--4756[label="0.0540541;2pkt 2fpkt"];
3253--5262[label="0.333333;4pkt 4fpkt"];
3253--5314[label="0.027027;1pkt 1fpkt"];
3253--5355[label="0.108108;4pkt 4fpkt"];
3253--5377[label="0.0540541;2pkt 2fpkt"];
3253--5441[label="0.0869565;2pkt 2fpkt"];
3253--5570[label="0.135135;5pkt 5fpkt"];
3253--5723[label="0.0833333;1pkt 1fpkt"];
3253--6119[label="0.333333;3pkt 3fpkt"];
3253--6484[label="0.027027;1pkt 1fpkt"];
3253--6764[label="0.5;1pkt 1fpkt"];
3253--6815[label="0.0540541;2pkt 2fpkt"];
3253--7155[label="0.027027;1pkt 1fpkt"];
3253--7173[label="0.108108;4pkt 4fpkt"];
3253--7186[label="0.0540541;2pkt 2fpkt"];
3253--7221[label="0.0909091;2pkt 2fpkt"];
3253--7302[label="0.135135;5pkt 5fpkt"];
3253--7387[label="0.0769231;1pkt 1fpkt"];
3253--7629[label="0.333333;3pkt 3fpkt"];
3253--7818[label="0.027027;1pkt 1fpkt"];
3253--7954[label="0.5;1pkt 1fpkt"];
3253--7979[label="0.0540541;2pkt 2fpkt"];
3253--8150[label="0.027027;1pkt 1fpkt"];
3253--8264[label="0.0833333;1pkt 1fpkt"];
3519--6053[label="1;1pkt 1fpkt"];
3575--6080[label="1;14pkt 14fpkt"];
3575--7609[label="1;14pkt 14fpkt"];
3611--6107[label="1;31pkt 31fpkt"];
3631--6119[label="1;8pkt 8fpkt"];
3631--7629[label="1;8pkt 8fpkt"];
3947--6304[label="1;21pkt 21fpkt"];
4017--6347[label="1;10pkt 10fpkt"];
4017--7747[label="1;10pkt 10fpkt"];
4051--6368[label="1;20pkt 20fpkt"];
4678--6764[label="1;2pkt 2fpkt"];
4678--7954[label="1;2pkt 2fpkt"];
4798--6840[label="1;26pkt 26fpkt"];
4844--6865[label="1;30pkt 30fpkt"];
4844--8007[label="1;30pkt 30fpkt"];
4940--6918[label="1;30pkt 30fpkt"];
4940--8032[label="1;30pkt 30fpkt"];
4974--6933[label="1;27pkt 27fpkt"];
4986--6942[label="1;29pkt 29fpkt"];
5441--7221[label="1;22pkt 22fpkt"];
5570--7302[label="1;110pkt 110fpkt"];
5723--7387[label="1;12pkt 12fpkt"];
5723--8264[label="1;12pkt 12fpkt"];
6080--7609[label="1;14pkt 14fpkt"];
6119--7629[label="1;9pkt 9fpkt"];
6347--7747[label="1;10pkt 10fpkt"];
6764--7954[label="1;2pkt 2fpkt"];
6865--8007[label="1;30pkt 30fpkt"];
6918--8032[label="1;30pkt 30fpkt"];
7387--8264[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.146.158" dst_port="80"/>
      <filter dst_ip="192.9.171.234" dst_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
1523[label="176.196.129.138;s;86pkt 86fpkt", shape=diamond, color=yellow];
4950[label="176.196.129.138;150pkt 150fpkt", shape=pentagon, color=darkviolet];
6923[label="176.196.129.138;151pkt 151fpkt", shape=invtriangle, color=brown];
8035[label="176.196.129.138;150pkt 150fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.138:*, 216.37.211.80:80}[23.1788%]&lt;BR/&gt;{176.196.129.138:*, 201.255.173.122:80}[21.8543%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3106: (0.372439%)&lt;BR/&gt; 3105: (0.372439%)&lt;BR/&gt; 3104: (0.372439%)&lt;BR/&gt; 3103: (0.372439%)&gt;];
}
1523--3478[label="0.395349;34pkt 34fpkt"];
1523--3485[label="0.0232558;2pkt 2fpkt"];
1523--4950[label="0.988372;85pkt 85fpkt"];
1523--6923[label="1;86pkt 86fpkt"];
1523--8035[label="0.988372;85pkt 85fpkt"];
4950--6923[label="1;150pkt 150fpkt"];
4950--8035[label="1;150pkt 150fpkt"];
6923--8035[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_ip="216.37.211.80" dst_port="80" src_ip="176.196.129.138"/>
      <filter dst_ip="201.255.173.122" dst_port="80" src_ip="176.196.129.138"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
4953[label="197.77.192.138;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6925[label="197.77.192.138;3pkt 3fpkt", shape=invtriangle, color=brown];
8036[label="197.77.192.138;4pkt 4fpkt", shape=invhouse, color=bisque];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.192.138:4196, 192.85.64.20:6699}[25%]&lt;BR/&gt;{197.77.192.138:4184, 192.9.56.58:1863}[25%]&lt;BR/&gt;{197.77.192.138:4249, 192.9.146.95:80}[25%]&lt;BR/&gt;{197.77.192.138:4250, 192.9.146.95:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (15%)&lt;BR/&gt; 4250: (15%)&lt;BR/&gt; 4249: (15%)&lt;BR/&gt; 4196: (15%)&lt;BR/&gt; 443: (15%)&gt;];
}
4953--6925[label="1;3pkt 3fpkt"];
4953--8036[label="1;3pkt 3fpkt"];
6925--8036[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.146.95" dst_port="443" src_ip="197.77.192.138" src_port="4250"/>
      <filter dst_ip="192.9.146.95" dst_port="80" src_ip="197.77.192.138" src_port="4249"/>
      <filter dst_ip="192.9.56.58" dst_port="1863" src_ip="197.77.192.138" src_port="4184"/>
      <filter dst_ip="192.85.64.20" dst_port="6699" src_ip="197.77.192.138" src_port="4196"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.101.58.139"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
4959[label="218.100.128.139;154pkt 154fpkt", shape=pentagon, color=darkviolet];
6928[label="218.100.128.139;155pkt 155fpkt", shape=invtriangle, color=brown];
8038[label="218.100.128.139;155pkt 155fpkt", shape=invhouse, color=bisque];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.100.128.139:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 2710: (0.323276%)&lt;BR/&gt; 2709: (0.323276%)&lt;BR/&gt; 2708: (0.323276%)&lt;BR/&gt; 2707: (0.323276%)&gt;];
}
4959--6928[label="1;154pkt 154fpkt"];
4959--8038[label="1;154pkt 154fpkt"];
6928--8038[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="218.100.128.139"/>
    </slice>
    <from sec="1118034066" usec="0"/>
    <to sec="1118034082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
4970[label="176.196.93.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6932[label="176.196.93.140;2pkt 2fpkt", shape=invtriangle, color=brown];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.93.140:22, 219.5.199.201:42487}[50%]&lt;BR/&gt;{176.196.93.140:22, 219.5.199.201:42832}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42832: (25%)&lt;BR/&gt; 42487: (25%)&gt;];
}
4970--6932[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42832" src_ip="176.196.93.140" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42487" src_ip="176.196.93.140" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
4975[label="176.196.158.140;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6934[label="176.196.158.140;8pkt 8fpkt", shape=invtriangle, color=brown];
8040[label="176.196.158.140;8pkt 8fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.158.140:80, 218.171.9.157:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55648: (6.25%)&lt;BR/&gt; 1237: (6.25%)&lt;BR/&gt; 1236: (6.25%)&lt;BR/&gt; 1235: (6.25%)&gt;];
}
4975--6934[label="1;8pkt 8fpkt"];
4975--8040[label="1;8pkt 8fpkt"];
6934--8040[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="218.171.9.157" src_ip="176.196.158.140" src_port="80"/>
    </slice>
    <from sec="1118034177" usec="0"/>
    <to sec="1118034804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.77.221.140"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
4984[label="176.196.129.141;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6941[label="176.196.129.141;42pkt 42fpkt", shape=invtriangle, color=brown];
8044[label="176.196.129.141;42pkt 42fpkt", shape=invhouse, color=bisque];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.141:*, 192.9.62.82:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3437: (1.19048%)&lt;BR/&gt; 3436: (1.19048%)&lt;BR/&gt; 3435: (1.19048%)&lt;BR/&gt; 3434: (1.19048%)&gt;];
}
4984--6941[label="1;42pkt 42fpkt"];
4984--8044[label="1;42pkt 42fpkt"];
6941--8044[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.62.82" dst_port="80" src_ip="176.196.129.141"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
2447[label="53.160.172.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
2568[label="175.199.36.54;d;6pkt 6fpkt", shape=diamond, color=yellow];
4987[label="53.160.174.141;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5974[label="53.160.172.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6943[label="53.160.174.141;17pkt 17fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.160.174.141:80, 175.199.211.104:*}[65%]&lt;BR/&gt;{*:80, 175.199.36.54:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 443: (5.95238%)&lt;BR/&gt; 1090: (3.57143%)&lt;BR/&gt; 1088: (3.57143%)&lt;BR/&gt; 1083: (3.57143%)&gt;];
}
2447--2568[label="1;1pkt 1fpkt"];
2447--5974[label="1;1pkt 1fpkt"];
2568--4987[label="0.5;3pkt 3fpkt"];
2568--5974[label="1;1pkt 1fpkt"];
2568--6943[label="0.5;3pkt 3fpkt"];
4987--6943[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.36.54" src_port="80"/>
      <filter dst_ip="175.199.211.104" src_ip="53.160.174.141" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
4991[label="128.65.0.142;72pkt 72fpkt", shape=pentagon, color=darkviolet];
6945[label="128.65.0.142;71pkt 71fpkt", shape=invtriangle, color=brown];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.0.142:*, 55.1.21.192:8200}[79.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 3158: (0.699301%)&lt;BR/&gt; 3157: (0.699301%)&lt;BR/&gt; 3156: (0.699301%)&lt;BR/&gt; 3155: (0.699301%)&gt;];
}
4991--6945[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="55.1.21.192" dst_port="8200" src_ip="128.65.0.142"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
4992[label="196.8.20.142;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6946[label="196.8.20.142;2pkt 2fpkt", shape=invtriangle, color=brown];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.20.142:55462, 200.196.222.34:53}[33.3333%]&lt;BR/&gt;{196.8.20.142:55462, 205.67.31.54:53}[33.3333%]&lt;BR/&gt;{196.8.20.142:55462, 200.11.137.97:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55462: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4992--6946[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.137.97" dst_port="53" src_ip="196.8.20.142" src_port="55462"/>
      <filter dst_ip="205.67.31.54" dst_port="53" src_ip="196.8.20.142" src_port="55462"/>
      <filter dst_ip="200.196.222.34" dst_port="53" src_ip="196.8.20.142" src_port="55462"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
5002[label="176.197.46.143;68pkt 68fpkt", shape=pentagon, color=darkviolet];
6952[label="176.197.46.143;69pkt 69fpkt", shape=invtriangle, color=brown];
8048[label="176.197.46.143;69pkt 69fpkt", shape=invhouse, color=bisque];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.46.143:*, 205.218.71.160:80}[98.5507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (0.728155%)&lt;BR/&gt; 4999: (0.728155%)&lt;BR/&gt; 4998: (0.728155%)&lt;BR/&gt; 4997: (0.728155%)&gt;];
}
5002--6952[label="1;68pkt 68fpkt"];
5002--8048[label="1;68pkt 68fpkt"];
6952--8048[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="205.218.71.160" dst_port="80" src_ip="176.197.46.143"/>
    </slice>
    <from sec="1118034799" usec="0"/>
    <to sec="1118034874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
5004[label="176.196.80.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6954[label="176.196.80.143;2pkt 2fpkt", shape=invtriangle, color=brown];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.80.143:1146, 171.188.107.12:80}[50%]&lt;BR/&gt;{176.196.80.143:1147, 171.188.107.12:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1147: (25%)&lt;BR/&gt; 1146: (25%)&gt;];
}
5004--6954[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="171.188.107.12" dst_port="80" src_ip="176.196.80.143" src_port="1147"/>
      <filter dst_ip="171.188.107.12" dst_port="80" src_ip="176.196.80.143" src_port="1146"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
5005[label="176.197.113.143;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6955[label="176.197.113.143;2pkt 2fpkt", shape=invtriangle, color=brown];
8049[label="176.197.113.143;3pkt 3fpkt", shape=invhouse, color=bisque];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.113.143:33205, 203.214.26.105:6667}[33.3333%]&lt;BR/&gt;{176.197.113.143:33252, 203.97.198.35:6666}[33.3333%]&lt;BR/&gt;{176.197.113.143:33267, 203.97.198.35:6666}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (31.25%)&lt;BR/&gt; 33267: (18.75%)&lt;BR/&gt; 33205: (18.75%)&lt;BR/&gt; 6667: (18.75%)&lt;BR/&gt; 33252: (12.5%)&gt;];
}
5005--6955[label="1;2pkt 2fpkt"];
5005--8049[label="1;3pkt 3fpkt"];
6955--8049[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.97.198.35" dst_port="6666" src_ip="176.197.113.143" src_port="33267"/>
      <filter dst_ip="203.97.198.35" dst_port="6666" src_ip="176.197.113.143" src_port="33252"/>
      <filter dst_ip="203.214.26.105" dst_port="6667" src_ip="176.197.113.143" src_port="33205"/>
    </slice>
    <from sec="1118034016" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.205.90.145"/>
    </slice>
    <from sec="1118034122" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
5025[label="183.174.118.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6968[label="183.174.118.145;2pkt 2fpkt", shape=invtriangle, color=brown];
8057[label="183.174.118.145;2pkt 2fpkt", shape=invhouse, color=bisque];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.174.118.145:2119, 214.96.43.161:80}[50%]&lt;BR/&gt;{183.174.118.145:2120, 214.96.43.161:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2120: (25%)&lt;BR/&gt; 2119: (25%)&gt;];
}
5025--6968[label="1;2pkt 2fpkt"];
5025--8057[label="1;2pkt 2fpkt"];
6968--8057[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.96.43.161" dst_port="80" src_ip="183.174.118.145" src_port="2120"/>
      <filter dst_ip="214.96.43.161" dst_port="80" src_ip="183.174.118.145" src_port="2119"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
5026[label="48.219.152.145;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6969[label="48.219.152.145;29pkt 29fpkt", shape=invtriangle, color=brown];
8058[label="48.219.152.145;29pkt 29fpkt", shape=invhouse, color=bisque];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.219.152.145:*, 133.167.14.189:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63505: (1.72414%)&lt;BR/&gt; 63497: (1.72414%)&lt;BR/&gt; 63496: (1.72414%)&lt;BR/&gt; 63495: (1.72414%)&gt;];
}
5026--6969[label="1;29pkt 29fpkt"];
5026--8058[label="1;29pkt 29fpkt"];
6969--8058[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.14.189" dst_port="80" src_ip="48.219.152.145"/>
    </slice>
    <from sec="1118034443" usec="0"/>
    <to sec="1118034517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
5029[label="183.82.33.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6970[label="183.82.33.146;4pkt 4fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.33.146:1889, 192.9.56.33:1863}[25%]&lt;BR/&gt;{183.82.33.146:2174, 192.9.61.78:1863}[25%]&lt;BR/&gt;{183.82.33.146:2176, 192.9.61.78:1863}[25%]&lt;BR/&gt;{183.82.33.146:2181, 192.9.61.78:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2181: (12.5%)&lt;BR/&gt; 2176: (12.5%)&lt;BR/&gt; 2174: (12.5%)&lt;BR/&gt; 1889: (12.5%)&gt;];
}
5029--6970[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.61.78" dst_port="1863" src_ip="183.82.33.146" src_port="2181"/>
      <filter dst_ip="192.9.61.78" dst_port="1863" src_ip="183.82.33.146" src_port="2176"/>
      <filter dst_ip="192.9.61.78" dst_port="1863" src_ip="183.82.33.146" src_port="2174"/>
      <filter dst_ip="192.9.56.33" dst_port="1863" src_ip="183.82.33.146" src_port="1889"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
5042[label="176.196.148.147;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6975[label="176.196.148.147;18pkt 18fpkt", shape=invtriangle, color=brown];
8060[label="176.196.148.147;18pkt 18fpkt", shape=invhouse, color=bisque];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.148.147:*, 216.212.115.65:80}[22.2222%]&lt;BR/&gt;{176.196.148.147:*, 216.37.216.205:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2160: (2.77778%)&lt;BR/&gt; 2159: (2.77778%)&lt;BR/&gt; 2158: (2.77778%)&lt;BR/&gt; 2157: (2.77778%)&gt;];
}
5042--6975[label="1;18pkt 18fpkt"];
5042--8060[label="1;18pkt 18fpkt"];
6975--8060[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="216.37.216.205" dst_port="80" src_ip="176.196.148.147"/>
      <filter dst_ip="216.212.115.65" dst_port="80" src_ip="176.196.148.147"/>
    </slice>
    <from sec="1118034687" usec="0"/>
    <to sec="1118034793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
776[label="183.82.221.118;d;1185pkt 1185fpkt", shape=diamond, color=yellow];
5043[label="208.98.14.148;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5420[label="140.53.191.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6976[label="208.98.14.148;22pkt 22fpkt", shape=invtriangle, color=brown];
7210[label="140.53.191.181;1pkt 1fpkt", shape=invtriangle, color=brown];
8062[label="208.98.14.148;22pkt 22fpkt", shape=invhouse, color=bisque];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 183.82.221.118:53}[93.3725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.7636%)&lt;BR/&gt; 25: (5.11182%)&lt;BR/&gt; 32768: (2.95527%)&lt;BR/&gt; 32769: (1.59744%)&lt;BR/&gt; 32772: (0.559105%)&gt;];
}
776--1228[label="0.142857;1pkt 1fpkt"];
776--2865[label="0.142857;1pkt 1fpkt"];
776--3476[label="0.014346;17pkt 17fpkt"];
776--4004[label="0.05;1pkt 1fpkt"];
776--4126[label="0.0212766;1pkt 1fpkt"];
776--5043[label="0.714286;15pkt 15fpkt"];
776--5420[label="1;1pkt 1fpkt"];
776--6426[label="0.0212766;1pkt 1fpkt"];
776--6819[label="0.030303;1pkt 1fpkt"];
776--6976[label="0.681818;15pkt 15fpkt"];
776--7210[label="1;1pkt 1fpkt"];
776--7790[label="0.0208333;1pkt 1fpkt"];
776--8062[label="0.681818;15pkt 15fpkt"];
5043--6976[label="1;21pkt 21fpkt"];
5043--8062[label="1;21pkt 21fpkt"];
5420--7210[label="1;1pkt 1fpkt"];
6976--8062[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="183.82.221.118" dst_port="53"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19217,2.15698,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
85[label="220.171.106.148s;91pkt 91fpkt", shape=rectangle, color=red];
5050[label="220.171.106.148;211pkt 211fpkt", shape=pentagon, color=darkviolet];
6982[label="220.171.106.148;211pkt 211fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.171.106.148:36096, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36096: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
85--5050[label="0.989011;90pkt 90fpkt"];
85--6982[label="0.989011;90pkt 90fpkt"];
5050--6982[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.171.106.148" src_port="36096"/>
    </slice>
    <from sec="1118034037" usec="0"/>
    <to sec="1118034052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.96.231.148"/>
    </slice>
    <from sec="1118034128" usec="0"/>
    <to sec="1118034850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997398,2.15439,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
544[label="49.138.27.3;d;5pkt 5fpkt", shape=diamond, color=yellow];
880[label="183.82.36.186;s;8pkt 8fpkt", shape=diamond, color=yellow];
1299[label="176.196.99.83;s;1164pkt 1164fpkt", shape=diamond, color=yellow];
1781[label="53.160.161.29;d;1016pkt 1016fpkt", shape=diamond, color=yellow];
2911[label="176.196.99.83;s;746pkt 746fpkt", shape=hexagon, color=black];
5460[label="183.82.36.186;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.99.83:*, 53.160.161.29:3544}[97.5382%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3544: (49.2195%)&lt;BR/&gt; 80: (0.390227%)&lt;BR/&gt; 554: (0.254496%)&lt;BR/&gt; 1863: (0.101798%)&lt;BR/&gt; 64409: (0.084832%)&gt;];
}
544--880[label="1;5pkt 5fpkt"];
544--5460[label="1;5pkt 5fpkt"];
880--1781[label="0.125;1pkt 1fpkt"];
880--5460[label="1;8pkt 8fpkt"];
1299--1612[label="0.0163934;2pkt 2fpkt"];
1299--1781[label="0.99311;1009pkt 1009fpkt"];
1299--2911[label="1;746pkt 746fpkt"];
1299--3485[label="0.00515464;6pkt 6fpkt"];
1781--1831[label="0.0277778;1pkt 1fpkt"];
1781--2911[label="0.981233;732pkt 732fpkt"];
1781--3254[label="0.0277778;1pkt 1fpkt"];
1781--4689[label="0.000984252;1pkt 1fpkt"];
1781--4742[label="0.0714286;1pkt 1fpkt"];
1781--4957[label="0.0833333;1pkt 1fpkt"];
1781--5460[label="0.125;1pkt 1fpkt"];
1781--6805[label="0.0714286;1pkt 1fpkt"];
1781--6926[label="0.0769231;1pkt 1fpkt"];
1781--8037[label="0.0833333;1pkt 1fpkt"];
2911--3485[label="0.00670241;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="53.160.161.29" dst_port="3544" src_ip="176.196.99.83"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.155.97.152"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
5107[label="222.152.192.153;224pkt 224fpkt", shape=pentagon, color=darkviolet];
7011[label="222.152.192.153;223pkt 223fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.152.192.153:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5107--7011[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="222.152.192.153" src_port="1029"/>
    </slice>
    <from sec="1118034510" usec="0"/>
    <to sec="1118034524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
2629[label="128.65.36.154;s;49pkt 49fpkt", shape=diamond, color=yellow];
5115[label="128.65.36.154;71pkt 71fpkt", shape=pentagon, color=darkviolet];
7018[label="128.65.36.154;71pkt 71fpkt", shape=invtriangle, color=brown];
8082[label="128.65.36.154;70pkt 70fpkt", shape=invhouse, color=bisque];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.36.154:*, 215.20.64.19:80}[39.4366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1486: (0.766284%)&lt;BR/&gt; 1485: (0.766284%)&lt;BR/&gt; 1484: (0.766284%)&lt;BR/&gt; 1483: (0.766284%)&gt;];
}
2629--5115[label="1;49pkt 49fpkt"];
2629--7018[label="1;49pkt 49fpkt"];
2629--8082[label="0.979592;48pkt 48fpkt"];
5115--7018[label="1;71pkt 71fpkt"];
5115--8082[label="1;70pkt 70fpkt"];
7018--8082[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="215.20.64.19" dst_port="80" src_ip="128.65.36.154"/>
    </slice>
    <from sec="1118034735" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.208.30.155"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
5131[label="133.167.9.156;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7027[label="133.167.9.156;32pkt 32fpkt", shape=invtriangle, color=brown];
8088[label="133.167.9.156;32pkt 32fpkt", shape=invhouse, color=bisque];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.9.156:34239, *:53}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.4211%)&lt;BR/&gt; 34239: (43.6842%)&lt;BR/&gt; 25: (3.15789%)&lt;BR/&gt; 54516: (1.57895%)&lt;BR/&gt; 33924: (1.57895%)&gt;];
}
5131--7027[label="1;31pkt 31fpkt"];
5131--8088[label="1;31pkt 31fpkt"];
7027--8088[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="133.167.9.156" src_port="34239"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.152.234.156"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
5143[label="128.65.184.157;61pkt 61fpkt", shape=pentagon, color=darkviolet];
7037[label="128.65.184.157;60pkt 60fpkt", shape=invtriangle, color=brown];
8094[label="128.65.184.157;60pkt 60fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.184.157:*, 204.36.98.61:80}[72.1311%]&lt;BR/&gt;{128.65.184.157:*, 204.36.98.60:80}[24.5902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32976: (0.828729%)&lt;BR/&gt; 32955: (0.828729%)&lt;BR/&gt; 32954: (0.828729%)&lt;BR/&gt; 32953: (0.828729%)&gt;];
}
5143--7037[label="1;60pkt 60fpkt"];
5143--8094[label="1;60pkt 60fpkt"];
7037--8094[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="204.36.98.61" dst_port="80" src_ip="128.65.184.157"/>
      <filter dst_ip="204.36.98.60" dst_port="80" src_ip="128.65.184.157"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
5150[label="85.7.143.158;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7041[label="85.7.143.158;6pkt 6fpkt", shape=invtriangle, color=brown];
8095[label="85.7.143.158;7pkt 7fpkt", shape=invhouse, color=bisque];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.7.143.158:80, 128.65.39.9:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1037: (7.89474%)&lt;BR/&gt; 1036: (7.89474%)&lt;BR/&gt; 1035: (7.89474%)&lt;BR/&gt; 1032: (7.89474%)&gt;];
}
5150--7041[label="1;6pkt 6fpkt"];
5150--8095[label="1;6pkt 6fpkt"];
7041--8095[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.39.9" src_ip="85.7.143.158" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.203.83.160"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
5174[label="176.196.237.160;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7057[label="176.196.237.160;13pkt 13fpkt", shape=invtriangle, color=brown];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.237.160:80, 138.47.96.90:*}[76.9231%]&lt;BR/&gt;{176.196.237.160:80, 53.106.147.9:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48977: (3.84615%)&lt;BR/&gt; 36417: (3.84615%)&lt;BR/&gt; 33350: (3.84615%)&lt;BR/&gt; 3346: (3.84615%)&gt;];
}
5174--7057[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="138.47.96.90" src_ip="176.196.237.160" src_port="80"/>
      <filter dst_ip="53.106.147.9" src_ip="176.196.237.160" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.160.4.161"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
929[label="52.21.54.72;d;54pkt 54fpkt", shape=diamond, color=yellow];
1645[label="183.82.39.161;s;24pkt 24fpkt", shape=diamond, color=yellow];
5181[label="183.82.39.161;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5644[label="183.82.37.204;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7062[label="183.82.39.161;34pkt 34fpkt", shape=invtriangle, color=brown];
8104[label="183.82.39.161;34pkt 34fpkt", shape=invhouse, color=bisque];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.37.204:*, *:80}[38.6792%]&lt;BR/&gt;{183.82.39.161:*, 52.21.54.72:80}[21.6981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0435%)&lt;BR/&gt; 1574: (1.08696%)&lt;BR/&gt; 1573: (1.08696%)&lt;BR/&gt; 1572: (1.08696%)&lt;BR/&gt; 1571: (1.08696%)&gt;];
}
929--1645[label="0.75;18pkt 18fpkt"];
929--3478[label="0.185185;10pkt 10fpkt"];
929--3485[label="0.12963;7pkt 7fpkt"];
929--5181[label="0.647059;22pkt 22fpkt"];
929--5644[label="0.2;10pkt 10fpkt"];
929--7062[label="0.647059;22pkt 22fpkt"];
929--8104[label="0.647059;22pkt 22fpkt"];
1645--3478[label="0.125;3pkt 3fpkt"];
1645--5181[label="0.958333;23pkt 23fpkt"];
1645--7062[label="0.958333;23pkt 23fpkt"];
1645--8104[label="0.958333;23pkt 23fpkt"];
5181--7062[label="1;34pkt 34fpkt"];
5181--8104[label="1;34pkt 34fpkt"];
7062--8104[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="183.82.37.204"/>
      <filter dst_ip="52.21.54.72" dst_port="80" src_ip="183.82.39.161"/>
    </slice>
    <from sec="1118034025" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
5187[label="176.196.88.161;29pkt 29fpkt", shape=pentagon, color=darkviolet];
7066[label="176.196.88.161;29pkt 29fpkt", shape=invtriangle, color=brown];
8107[label="176.196.88.161;29pkt 29fpkt", shape=invhouse, color=bisque];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.88.161:*, 192.168.0.253:80}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3793%)&lt;BR/&gt; 515: (6.89655%)&lt;BR/&gt; 1863: (1.72414%)&lt;BR/&gt; 1260: (1.72414%)&lt;BR/&gt; 1258: (1.72414%)&gt;];
}
5187--7066[label="1;29pkt 29fpkt"];
5187--8107[label="1;29pkt 29fpkt"];
7066--8107[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.253" dst_port="80" src_ip="176.196.88.161"/>
    </slice>
    <from sec="1118034017" usec="0"/>
    <to sec="1118034552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
5212[label="183.82.36.163;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7081[label="183.82.36.163;17pkt 17fpkt", shape=invtriangle, color=brown];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.36.163:55970, *:*}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55970: (40.9091%)&lt;BR/&gt; 64981: (3.0303%)&lt;BR/&gt; 64973: (3.0303%)&lt;BR/&gt; 63873: (3.0303%)&lt;BR/&gt; 61403: (3.0303%)&gt;];
}
5212--7081[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.36.163" src_port="55970"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
5213[label="176.197.42.163;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7082[label="176.197.42.163;23pkt 23fpkt", shape=invtriangle, color=brown];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.42.163:*, 36.168.80.175:80}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4891: (2.17391%)&lt;BR/&gt; 4636: (2.17391%)&lt;BR/&gt; 4564: (2.17391%)&lt;BR/&gt; 4405: (2.17391%)&gt;];
}
5213--7082[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="36.168.80.175" dst_port="80" src_ip="176.197.42.163"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.102.132.163"/>
    </slice>
    <from sec="1118034480" usec="0"/>
    <to sec="1118034795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
346[label="197.77.41.47;s;285pkt 285fpkt", shape=diamond, color=yellow];
996[label="216.183.91.196;d;4pkt 4fpkt", shape=diamond, color=yellow];
1120[label="176.197.67.90;s;144pkt 144fpkt", shape=diamond, color=yellow];
1848[label="202.183.52.141;d;87pkt 87fpkt", shape=diamond, color=yellow];
2334[label="55.0.64.209;d;127pkt 127fpkt", shape=diamond, color=yellow];
2510[label="176.196.88.149;s;79pkt 79fpkt", shape=diamond, color=yellow];
2798[label="197.77.41.47;s;89pkt 89fpkt", shape=hexagon, color=black];
3320[label="216.183.91.196;d;4pkt 4fpkt", shape=hexagon, color=black];
4041[label="197.77.41.47;297pkt 297fpkt", shape=pentagon, color=darkviolet];
4477[label="176.197.67.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4657[label="183.82.22.110;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4947[label="183.174.45.138;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4965[label="176.197.13.140;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5062[label="176.196.88.149;93pkt 93fpkt", shape=pentagon, color=darkviolet];
5225[label="133.167.12.164;77pkt 77fpkt", shape=pentagon, color=darkviolet];
6361[label="197.77.41.47;297pkt 297fpkt", shape=invtriangle, color=brown];
6930[label="176.197.13.140;21pkt 21fpkt", shape=invtriangle, color=brown];
7087[label="133.167.12.164;77pkt 77fpkt", shape=invtriangle, color=brown];
8118[label="133.167.12.164;78pkt 78fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.41.47:*, *:80}[37.4834%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0853%)&lt;BR/&gt; 443: (1.06674%)&lt;BR/&gt; 8203: (0.601751%)&lt;BR/&gt; 3222: (0.218818%)&lt;BR/&gt; 3415: (0.191466%)&gt;];
}
346--349[label="0.00701754;2pkt 2fpkt"];
346--371[label="0.00350877;1pkt 1fpkt"];
346--438[label="0.00701754;2pkt 2fpkt"];
346--444[label="0.0140351;4pkt 4fpkt"];
346--490[label="0.0210526;6pkt 6fpkt"];
346--499[label="0.0105263;3pkt 3fpkt"];
346--627[label="0.0240964;4pkt 4fpkt"];
346--636[label="0.0421053;8pkt 8fpkt"];
346--681[label="0.5;9pkt 9fpkt"];
346--706[label="0.00701754;2pkt 2fpkt"];
346--818[label="0.00701754;2pkt 2fpkt"];
346--996[label="1;4pkt 4fpkt"];
346--997[label="0.0304348;7pkt 7fpkt"];
346--1004[label="0.00454545;1pkt 1fpkt"];
346--1314[label="0.0114068;3pkt 3fpkt"];
346--1321[label="0.0294118;4pkt 4fpkt"];
346--1337[label="0.00431034;1pkt 1fpkt"];
346--1353[label="0.0223464;4pkt 4fpkt"];
346--1389[label="0.0294118;1pkt 1fpkt"];
346--1452[label="0.482759;14pkt 14fpkt"];
346--1562[label="0.0100503;2pkt 2fpkt"];
346--1662[label="0.25;1pkt 1fpkt"];
346--1744[label="0.428571;6pkt 6fpkt"];
346--1842[label="0.00819672;1pkt 1fpkt"];
346--2068[label="0.047619;2pkt 2fpkt"];
346--2075[label="0.015873;4pkt 4fpkt"];
346--2094[label="0.0149254;2pkt 2fpkt"];
346--2334[label="0.0787402;10pkt 10fpkt"];
346--2725[label="0.0394737;3pkt 3fpkt"];
346--2798[label="1;89pkt 89fpkt"];
346--3202[label="0.00701754;2pkt 2fpkt"];
346--3250[label="0.00701754;2pkt 2fpkt"];
346--3320[label="1;4pkt 4fpkt"];
346--3478[label="0.0912281;26pkt 26fpkt"];
346--3485[label="0.249123;71pkt 71fpkt"];
346--4041[label="1;285pkt 285fpkt"];
346--6361[label="1;285pkt 285fpkt"];
996--2798[label="0.5;2pkt 2fpkt"];
996--3320[label="1;4pkt 4fpkt"];
996--4041[label="1;4pkt 4fpkt"];
996--6361[label="1;4pkt 4fpkt"];
1120--1802[label="0.00694444;1pkt 1fpkt"];
1120--1848[label="1;87pkt 87fpkt"];
1120--2013[label="0.0147059;1pkt 1fpkt"];
1120--2334[label="0.023622;3pkt 3fpkt"];
1120--3197[label="0.0163934;1pkt 1fpkt"];
1120--3478[label="0.0902778;13pkt 13fpkt"];
1120--3485[label="0.0694444;10pkt 10fpkt"];
1120--4477[label="1;1pkt 1fpkt"];
1848--3478[label="0.103448;9pkt 9fpkt"];
1848--3485[label="0.091954;8pkt 8fpkt"];
2334--2510[label="0.0886076;7pkt 7fpkt"];
2334--2518[label="0.0111111;1pkt 1fpkt"];
2334--2798[label="0.11236;10pkt 10fpkt"];
2334--2840[label="0.126126;14pkt 14fpkt"];
2334--3478[label="0.0787402;10pkt 10fpkt"];
2334--4041[label="0.0787402;10pkt 10fpkt"];
2334--4157[label="0.0108696;1pkt 1fpkt"];
2334--4657[label="0.121212;4pkt 4fpkt"];
2334--4689[label="0.0708661;9pkt 9fpkt"];
2334--4947[label="0.0714286;1pkt 1fpkt"];
2334--4965[label="0.666667;14pkt 14fpkt"];
2334--5014[label="0.0472441;6pkt 6fpkt"];
2334--5062[label="0.0752688;7pkt 7fpkt"];
2334--5084[label="0.127273;7pkt 7fpkt"];
2334--5225[label="0.181818;14pkt 14fpkt"];
2334--5314[label="0.015748;2pkt 2fpkt"];
2334--6361[label="0.0787402;10pkt 10fpkt"];
2334--6930[label="0.666667;14pkt 14fpkt"];
2334--6961[label="0.0472441;6pkt 6fpkt"];
2334--7087[label="0.181818;14pkt 14fpkt"];
2334--7155[label="0.015748;2pkt 2fpkt"];
2334--8054[label="0.0472441;6pkt 6fpkt"];
2334--8118[label="0.179487;14pkt 14fpkt"];
2334--8150[label="0.015748;2pkt 2fpkt"];
2510--5062[label="0.987342;78pkt 78fpkt"];
2798--3202[label="0.011236;1pkt 1fpkt"];
2798--3250[label="0.0224719;2pkt 2fpkt"];
2798--3320[label="0.5;2pkt 2fpkt"];
2798--3478[label="0.179775;16pkt 16fpkt"];
2798--3485[label="0.0449438;4pkt 4fpkt"];
2798--4041[label="1;89pkt 89fpkt"];
2798--6361[label="1;89pkt 89fpkt"];
3320--4041[label="1;4pkt 4fpkt"];
3320--6361[label="1;4pkt 4fpkt"];
4041--6361[label="1;297pkt 297fpkt"];
4965--6930[label="1;21pkt 21fpkt"];
5225--7087[label="1;77pkt 77fpkt"];
5225--8118[label="1;77pkt 77fpkt"];
7087--8118[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="197.77.41.47"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.167.56.164"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
5232[label="176.196.129.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7091[label="176.196.129.164;5pkt 5fpkt", shape=invtriangle, color=brown];
8119[label="176.196.129.164;5pkt 5fpkt", shape=invhouse, color=bisque];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.164:1908, 180.1.218.52:80}[20%]&lt;BR/&gt;{176.196.129.164:1909, 180.1.218.52:80}[20%]&lt;BR/&gt;{176.196.129.164:1912, 55.235.163.183:80}[20%]&lt;BR/&gt;{176.196.129.164:1913, 55.235.163.183:80}[20%]&lt;BR/&gt;{176.196.129.164:1914, 55.235.163.183:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1914: (10%)&lt;BR/&gt; 1913: (10%)&lt;BR/&gt; 1912: (10%)&lt;BR/&gt; 1909: (10%)&gt;];
}
5232--7091[label="1;5pkt 5fpkt"];
5232--8119[label="1;5pkt 5fpkt"];
7091--8119[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="55.235.163.183" dst_port="80" src_ip="176.196.129.164" src_port="1914"/>
      <filter dst_ip="55.235.163.183" dst_port="80" src_ip="176.196.129.164" src_port="1913"/>
      <filter dst_ip="55.235.163.183" dst_port="80" src_ip="176.196.129.164" src_port="1912"/>
      <filter dst_ip="180.1.218.52" dst_port="80" src_ip="176.196.129.164" src_port="1909"/>
      <filter dst_ip="180.1.218.52" dst_port="80" src_ip="176.196.129.164" src_port="1908"/>
    </slice>
    <from sec="1118034810" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
5237[label="128.65.37.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7095[label="128.65.37.165;2pkt 2fpkt", shape=invtriangle, color=brown];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.37.165:49597, 182.2.205.8:80}[50%]&lt;BR/&gt;{128.65.37.165:49598, 182.2.205.8:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49598: (25%)&lt;BR/&gt; 49597: (25%)&gt;];
}
5237--7095[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="182.2.205.8" dst_port="80" src_ip="128.65.37.165" src_port="49598"/>
      <filter dst_ip="182.2.205.8" dst_port="80" src_ip="128.65.37.165" src_port="49597"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
5240[label="128.65.59.165;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7097[label="128.65.59.165;7pkt 7fpkt", shape=invtriangle, color=brown];
8122[label="128.65.59.165;7pkt 7fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.59.165:*, 202.144.87.89:80}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 123: (14.2857%)&lt;BR/&gt; 49606: (7.14286%)&lt;BR/&gt; 49580: (7.14286%)&lt;BR/&gt; 49579: (7.14286%)&gt;];
}
5240--7097[label="1;7pkt 7fpkt"];
5240--8122[label="1;7pkt 7fpkt"];
7097--8122[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="202.144.87.89" dst_port="80" src_ip="128.65.59.165"/>
    </slice>
    <from sec="1118034307" usec="0"/>
    <to sec="1118034593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
5246[label="218.104.128.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7101[label="218.104.128.165;3pkt 3fpkt", shape=invtriangle, color=brown];
8124[label="218.104.128.165;2pkt 2fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.104.128.165:2231, 175.199.142.152:80}[33.3333%]&lt;BR/&gt;{218.104.128.165:2236, 175.199.142.152:80}[33.3333%]&lt;BR/&gt;{218.104.128.165:2239, 175.199.142.152:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2239: (21.4286%)&lt;BR/&gt; 2236: (21.4286%)&lt;BR/&gt; 2231: (7.14286%)&gt;];
}
5246--7101[label="1;2pkt 2fpkt"];
5246--8124[label="1;2pkt 2fpkt"];
7101--8124[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="218.104.128.165" src_port="2239"/>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="218.104.128.165" src_port="2236"/>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="218.104.128.165" src_port="2231"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.196.27.166"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.241.51.166"/>
    </slice>
    <from sec="1118034767" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
5258[label="196.42.101.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7110[label="196.42.101.167;1pkt 1fpkt", shape=invtriangle, color=brown];
8129[label="196.42.101.167;1pkt 1fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.101.167:63088, 196.8.26.110:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63088: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5258--7110[label="1;1pkt 1fpkt"];
5258--8129[label="1;1pkt 1fpkt"];
7110--8129[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.8.26.110" dst_port="25" src_ip="196.42.101.167" src_port="63088"/>
    </slice>
    <from sec="1118034168" usec="0"/>
    <to sec="1118034174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
5266[label="196.8.25.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7114[label="196.8.25.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.25.168:25, 199.78.188.30:3754}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3754: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5266--7114[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.78.188.30" dst_port="3754" src_ip="196.8.25.168" src_port="25"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.8.24.169"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
809[label="192.9.62.96;d;85pkt 85fpkt", shape=diamond, color=yellow];
834[label="183.82.32.201;s;82pkt 82fpkt", shape=diamond, color=yellow];
859[label="192.9.173.252;d;55pkt 55fpkt", shape=diamond, color=yellow];
1030[label="176.196.158.138;s;276pkt 276fpkt", shape=diamond, color=yellow];
1096[label="183.82.18.38;s;110pkt 110fpkt", shape=diamond, color=yellow];
1392[label="104.2.44.82;d;150pkt 150fpkt", shape=diamond, color=yellow];
1814[label="211.234.31.43;d;114pkt 114fpkt", shape=diamond, color=yellow];
1834[label="192.9.61.18;d;12pkt 12fpkt", shape=diamond, color=yellow];
1890[label="197.77.221.141;s;70pkt 70fpkt", shape=diamond, color=yellow];
2198[label="104.2.44.109;d;56pkt 56fpkt", shape=diamond, color=yellow];
2514[label="104.4.39.240;d;126pkt 126fpkt", shape=diamond, color=yellow];
2760[label="183.82.32.201;s;77pkt 77fpkt", shape=hexagon, color=black];
2900[label="176.196.158.138;s;125pkt 125fpkt", shape=hexagon, color=black];
3162[label="197.77.221.141;s;70pkt 70fpkt", shape=hexagon, color=black];
3184[label="104.2.44.109;d;42pkt 42fpkt", shape=hexagon, color=black];
3602[label="183.82.33.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3615[label="176.196.198.8;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3853[label="176.196.101.28;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3948[label="183.82.18.38;119pkt 119fpkt", shape=pentagon, color=darkviolet];
4122[label="197.77.46.58;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4301[label="183.82.38.75;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4499[label="183.82.36.92;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4703[label="183.82.32.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4705[label="183.82.34.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4875[label="196.8.18.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4880[label="183.82.36.132;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4952[label="176.196.158.138;332pkt 332fpkt", shape=pentagon, color=darkviolet];
4990[label="197.77.221.141;71pkt 71fpkt", shape=pentagon, color=darkviolet];
5597[label="183.82.32.201;82pkt 82fpkt", shape=pentagon, color=darkviolet];
6100[label="183.82.33.8;4pkt 4fpkt", shape=invtriangle, color=brown];
6242[label="176.196.101.28;53pkt 53fpkt", shape=invtriangle, color=brown];
6423[label="197.77.46.58;4pkt 4fpkt", shape=invtriangle, color=brown];
6778[label="183.82.32.114;3pkt 3fpkt", shape=invtriangle, color=brown];
6880[label="196.8.18.132;3pkt 3fpkt", shape=invtriangle, color=brown];
6924[label="176.196.158.138;333pkt 333fpkt", shape=invtriangle, color=brown];
7620[label="183.82.33.8;5pkt 5fpkt", shape=invhouse, color=bisque];
7690[label="176.196.101.28;53pkt 53fpkt", shape=invhouse, color=bisque];
8014[label="196.8.18.132;2pkt 2fpkt", shape=invhouse, color=bisque];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.158.138:*, *:80}[35.877%]&lt;BR/&gt;{*:*, *:443}[20.615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.672%)&lt;BR/&gt; 443: (11.4512%)&lt;BR/&gt; 1863: (2.17309%)&lt;BR/&gt; 16795: (2.09751%)&lt;BR/&gt; 123: (0.283447%)&gt;];
}
809--834[label="0.0609756;5pkt 5fpkt"];
809--973[label="0.0117647;1pkt 1fpkt"];
809--1050[label="0.0117647;1pkt 1fpkt"];
809--1069[label="0.0117647;1pkt 1fpkt"];
809--1071[label="0.025641;1pkt 1fpkt"];
809--1084[label="0.0117647;1pkt 1fpkt"];
809--1259[label="0.0117647;1pkt 1fpkt"];
809--1268[label="0.0117647;1pkt 1fpkt"];
809--1745[label="0.015625;1pkt 1fpkt"];
809--1896[label="0.0212766;1pkt 1fpkt"];
809--1911[label="0.025;1pkt 1fpkt"];
809--1937[label="0.0169492;1pkt 1fpkt"];
809--2139[label="0.0117647;1pkt 1fpkt"];
809--2255[label="0.0227273;1pkt 1fpkt"];
809--2487[label="0.0204082;1pkt 1fpkt"];
809--2554[label="0.0142857;1pkt 1fpkt"];
809--2653[label="0.0470588;4pkt 4fpkt"];
809--2706[label="0.0235294;2pkt 2fpkt"];
809--2709[label="0.0117647;1pkt 1fpkt"];
809--2760[label="0.0649351;5pkt 5fpkt"];
809--2818[label="0.0117647;1pkt 1fpkt"];
809--2836[label="0.0178571;1pkt 1fpkt"];
809--2918[label="0.0235294;2pkt 2fpkt"];
809--3286[label="0.025;1pkt 1fpkt"];
809--3433[label="0.0117647;1pkt 1fpkt"];
809--3458[label="0.0117647;1pkt 1fpkt"];
809--3478[label="0.0941176;8pkt 8fpkt"];
809--3485[label="0.0941176;8pkt 8fpkt"];
809--3591[label="0.0208333;1pkt 1fpkt"];
809--3691[label="0.0117647;1pkt 1fpkt"];
809--3693[label="0.0625;1pkt 1fpkt"];
809--3760[label="0.0142857;1pkt 1fpkt"];
809--3762[label="0.0192308;1pkt 1fpkt"];
809--3810[label="0.0196078;1pkt 1fpkt"];
809--3949[label="0.0454545;1pkt 1fpkt"];
809--4025[label="0.0588235;1pkt 1fpkt"];
809--4160[label="0.0526316;1pkt 1fpkt"];
809--4301[label="0.666667;4pkt 4fpkt"];
809--4443[label="0.0175439;1pkt 1fpkt"];
809--4499[label="0.0689655;2pkt 2fpkt"];
809--4515[label="0.0625;1pkt 1fpkt"];
809--4689[label="0.0117647;1pkt 1fpkt"];
809--4697[label="0.0625;1pkt 1fpkt"];
809--4705[label="0.5;1pkt 1fpkt"];
809--4757[label="0.0344828;1pkt 1fpkt"];
809--5151[label="0.0117647;1pkt 1fpkt"];
809--5314[label="0.0117647;1pkt 1fpkt"];
809--5321[label="0.0217391;1pkt 1fpkt"];
809--5327[label="0.0470588;4pkt 4fpkt"];
809--5534[label="0.0147059;1pkt 1fpkt"];
809--5597[label="0.0609756;5pkt 5fpkt"];
809--5768[label="0.0555556;1pkt 1fpkt"];
809--6011[label="0.0117647;1pkt 1fpkt"];
809--6156[label="0.0117647;1pkt 1fpkt"];
809--6221[label="0.0196078;1pkt 1fpkt"];
809--6242[label="0.0188679;1pkt 1fpkt"];
809--6351[label="0.0588235;1pkt 1fpkt"];
809--6352[label="0.027027;1pkt 1fpkt"];
809--6445[label="0.0526316;1pkt 1fpkt"];
809--6693[label="0.027027;1pkt 1fpkt"];
809--6775[label="0.0625;1pkt 1fpkt"];
809--6816[label="0.0344828;1pkt 1fpkt"];
809--6880[label="0.333333;1pkt 1fpkt"];
809--7042[label="0.0117647;1pkt 1fpkt"];
809--7155[label="0.0117647;1pkt 1fpkt"];
809--7159[label="0.0217391;1pkt 1fpkt"];
809--7507[label="0.0212766;1pkt 1fpkt"];
809--7526[label="0.0416667;1pkt 1fpkt"];
809--7642[label="0.0117647;1pkt 1fpkt"];
809--7690[label="0.0188679;1pkt 1fpkt"];
809--8150[label="0.0117647;1pkt 1fpkt"];
809--8154[label="0.0470588;4pkt 4fpkt"];
809--8156[label="0.0666667;1pkt 1fpkt"];
834--859[label="0.909091;50pkt 50fpkt"];
834--1337[label="0.0365854;3pkt 3fpkt"];
834--1834[label="0.0833333;1pkt 1fpkt"];
834--2760[label="1;77pkt 77fpkt"];
834--3478[label="0.0121951;1pkt 1fpkt"];
834--5597[label="1;82pkt 82fpkt"];
859--2760[label="0.909091;50pkt 50fpkt"];
859--4499[label="0.172414;5pkt 5fpkt"];
859--5597[label="0.909091;50pkt 50fpkt"];
1030--1279[label="0.028169;2pkt 2fpkt"];
1030--1337[label="0.00431034;1pkt 1fpkt"];
1030--1366[label="0.0612245;6pkt 6fpkt"];
1030--1392[label="0.0133333;2pkt 2fpkt"];
1030--1548[label="0.00724638;2pkt 2fpkt"];
1030--1814[label="1;114pkt 114fpkt"];
1030--1833[label="0.00806452;1pkt 1fpkt"];
1030--1834[label="0.0833333;1pkt 1fpkt"];
1030--1884[label="0.0512821;6pkt 6fpkt"];
1030--2100[label="0.00595238;1pkt 1fpkt"];
1030--2514[label="0.896825;113pkt 113fpkt"];
1030--2899[label="0.0289855;2pkt 2fpkt"];
1030--2900[label="1;125pkt 125fpkt"];
1030--3478[label="0.0434783;12pkt 12fpkt"];
1030--3485[label="0.0507246;14pkt 14fpkt"];
1030--4952[label="0.996377;275pkt 275fpkt"];
1030--6924[label="1;276pkt 276fpkt"];
1096--1392[label="0.718182;79pkt 79fpkt"];
1096--3948[label="0.990909;109pkt 109fpkt"];
1392--1890[label="0.2;14pkt 14fpkt"];
1392--2363[label="0.021978;2pkt 2fpkt"];
1392--2900[label="0.016;2pkt 2fpkt"];
1392--3111[label="0.0266667;4pkt 4fpkt"];
1392--3162[label="0.2;14pkt 14fpkt"];
1392--3478[label="0.02;3pkt 3fpkt"];
1392--3485[label="0.0333333;5pkt 5fpkt"];
1392--3615[label="0.5;13pkt 13fpkt"];
1392--3948[label="0.663866;79pkt 79fpkt"];
1392--4143[label="0.0266667;4pkt 4fpkt"];
1392--4689[label="0.00666667;1pkt 1fpkt"];
1392--4952[label="0.0133333;2pkt 2fpkt"];
1392--4990[label="0.197183;14pkt 14fpkt"];
1392--5014[label="0.00666667;1pkt 1fpkt"];
1392--5969[label="0.0175439;2pkt 2fpkt"];
1392--6924[label="0.0133333;2pkt 2fpkt"];
1392--6961[label="0.00666667;1pkt 1fpkt"];
1392--7547[label="0.0176991;2pkt 2fpkt"];
1392--8054[label="0.00666667;1pkt 1fpkt"];
1392--8347[label="0.0175439;2pkt 2fpkt"];
1814--2900[label="0.447368;51pkt 51fpkt"];
1814--3478[label="0.0526316;6pkt 6fpkt"];
1814--3485[label="0.0614035;7pkt 7fpkt"];
1814--4952[label="1;114pkt 114fpkt"];
1814--6924[label="1;114pkt 114fpkt"];
1834--2091[label="0.0833333;1pkt 1fpkt"];
1834--2900[label="0.0833333;1pkt 1fpkt"];
1834--2997[label="0.166667;2pkt 2fpkt"];
1834--3145[label="0.0833333;1pkt 1fpkt"];
1834--3602[label="0.25;1pkt 1fpkt"];
1834--4122[label="0.333333;1pkt 1fpkt"];
1834--4703[label="0.333333;1pkt 1fpkt"];
1834--4880[label="0.2;1pkt 1fpkt"];
1834--4903[label="0.0833333;1pkt 1fpkt"];
1834--4952[label="0.0833333;1pkt 1fpkt"];
1834--5597[label="0.0833333;1pkt 1fpkt"];
1834--6100[label="0.25;1pkt 1fpkt"];
1834--6423[label="0.25;1pkt 1fpkt"];
1834--6778[label="0.333333;1pkt 1fpkt"];
1834--6895[label="0.0833333;1pkt 1fpkt"];
1834--6924[label="0.0833333;1pkt 1fpkt"];
1834--7620[label="0.2;1pkt 1fpkt"];
1890--2198[label="0.928571;52pkt 52fpkt"];
1890--3162[label="0.985714;69pkt 69fpkt"];
1890--3184[label="1;42pkt 42fpkt"];
1890--3485[label="0.0142857;1pkt 1fpkt"];
1890--4990[label="1;70pkt 70fpkt"];
2198--3162[label="0.928571;52pkt 52fpkt"];
2198--3184[label="1;42pkt 42fpkt"];
2198--4990[label="0.928571;52pkt 52fpkt"];
2514--2900[label="0.408;51pkt 51fpkt"];
2514--3254[label="0.111111;4pkt 4fpkt"];
2514--3478[label="0.047619;6pkt 6fpkt"];
2514--3485[label="0.0555556;7pkt 7fpkt"];
2514--4483[label="0.0425532;2pkt 2fpkt"];
2514--4952[label="0.896825;113pkt 113fpkt"];
2514--5969[label="0.0175439;2pkt 2fpkt"];
2514--6644[label="0.0425532;2pkt 2fpkt"];
2514--6924[label="0.896825;113pkt 113fpkt"];
2514--7547[label="0.0176991;2pkt 2fpkt"];
2514--8347[label="0.0175439;2pkt 2fpkt"];
2760--3478[label="0.012987;1pkt 1fpkt"];
2760--5597[label="1;77pkt 77fpkt"];
2900--3478[label="0.096;12pkt 12fpkt"];
2900--4952[label="0.992;124pkt 124fpkt"];
2900--6924[label="1;125pkt 125fpkt"];
3162--3184[label="1;42pkt 42fpkt"];
3162--3485[label="0.0142857;1pkt 1fpkt"];
3162--4990[label="1;70pkt 70fpkt"];
3184--4990[label="1;42pkt 42fpkt"];
3602--6100[label="1;4pkt 4fpkt"];
3602--7620[label="1;4pkt 4fpkt"];
3853--6242[label="1;52pkt 52fpkt"];
3853--7690[label="1;52pkt 52fpkt"];
4122--6423[label="1;3pkt 3fpkt"];
4703--6778[label="1;3pkt 3fpkt"];
4875--6880[label="1;2pkt 2fpkt"];
4875--8014[label="1;2pkt 2fpkt"];
4952--6924[label="1;332pkt 332fpkt"];
6100--7620[label="1;4pkt 4fpkt"];
6242--7690[label="1;53pkt 53fpkt"];
6880--8014[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="443"/>
      <filter dst_port="80" src_ip="176.196.158.138"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
5281[label="128.65.54.169;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7128[label="128.65.54.169;13pkt 13fpkt", shape=invtriangle, color=brown];
8135[label="128.65.54.169;12pkt 12fpkt", shape=invhouse, color=bisque];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.54.169:*, 202.131.116.76:80}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1106: (3.94737%)&lt;BR/&gt; 1105: (3.94737%)&lt;BR/&gt; 1104: (3.94737%)&lt;BR/&gt; 1103: (3.94737%)&gt;];
}
5281--7128[label="1;13pkt 13fpkt"];
5281--8135[label="1;12pkt 12fpkt"];
7128--8135[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="202.131.116.76" dst_port="80" src_ip="128.65.54.169"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
5293[label="176.196.72.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7138[label="176.196.72.170;2pkt 2fpkt", shape=invtriangle, color=brown];
8140[label="176.196.72.170;2pkt 2fpkt", shape=invhouse, color=bisque];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.72.170:2617, 49.146.58.177:80}[50%]&lt;BR/&gt;{176.196.72.170:2618, 49.146.58.191:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2618: (30%)&lt;BR/&gt; 2617: (20%)&gt;];
}
5293--7138[label="1;1pkt 1fpkt"];
5293--8140[label="1;1pkt 1fpkt"];
7138--8140[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="49.146.58.191" dst_port="80" src_ip="176.196.72.170" src_port="2618"/>
      <filter dst_ip="49.146.58.177" dst_port="80" src_ip="176.196.72.170" src_port="2617"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.167.84.170"/>
    </slice>
    <from sec="1118034009" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
5295[label="128.65.88.170;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7140[label="128.65.88.170;34pkt 34fpkt", shape=invtriangle, color=brown];
8141[label="128.65.88.170;33pkt 33fpkt", shape=invhouse, color=bisque];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.88.170:80, 55.1.38.87:*}[79.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56057: (1.48515%)&lt;BR/&gt; 52651: (1.48515%)&lt;BR/&gt; 49463: (1.48515%)&lt;BR/&gt; 46904: (1.48515%)&gt;];
}
5295--7140[label="1;34pkt 34fpkt"];
5295--8141[label="1;33pkt 33fpkt"];
7140--8141[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="55.1.38.87" src_ip="128.65.88.170" src_port="80"/>
    </slice>
    <from sec="1118034020" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
5297[label="196.8.26.171;32pkt 32fpkt", shape=pentagon, color=darkviolet];
7143[label="196.8.26.171;32pkt 32fpkt", shape=invtriangle, color=brown];
8142[label="196.8.26.171;31pkt 31fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.26.171:59548, *:*}[28.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59548: (14.2105%)&lt;BR/&gt; 0: (9.47368%)&lt;BR/&gt; 443: (4.73684%)&lt;BR/&gt; 80: (4.73684%)&lt;BR/&gt; 31523: (3.15789%)&gt;];
}
5297--7143[label="1;32pkt 32fpkt"];
5297--8142[label="1;31pkt 31fpkt"];
7143--8142[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.26.171" src_port="59548"/>
    </slice>
    <from sec="1118034480" usec="0"/>
    <to sec="1118034677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
5305[label="183.82.3.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7148[label="183.82.3.172;2pkt 2fpkt", shape=invtriangle, color=brown];
8144[label="183.82.3.172;2pkt 2fpkt", shape=invhouse, color=bisque];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.3.172:32797, 202.105.208.4:80}[50%]&lt;BR/&gt;{183.82.3.172:32798, 202.105.208.4:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32798: (30%)&lt;BR/&gt; 32797: (20%)&gt;];
}
5305--7148[label="1;1pkt 1fpkt"];
5305--8144[label="1;1pkt 1fpkt"];
7148--8144[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="202.105.208.4" dst_port="80" src_ip="183.82.3.172" src_port="32798"/>
      <filter dst_ip="202.105.208.4" dst_port="80" src_ip="183.82.3.172" src_port="32797"/>
    </slice>
    <from sec="1118034811" usec="0"/>
    <to sec="1118034815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
5316[label="215.12.220.172;217pkt 217fpkt", shape=pentagon, color=darkviolet];
7157[label="215.12.220.172;218pkt 218fpkt", shape=invtriangle, color=brown];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.12.220.172:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5316--7157[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.12.220.172" src_port="1028"/>
    </slice>
    <from sec="1118034850" usec="0"/>
    <to sec="1118034866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.184.21.173"/>
    </slice>
    <from sec="1118034029" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.51.90.173"/>
    </slice>
    <from sec="1118034249" usec="0"/>
    <to sec="1118034270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
5325[label="183.144.90.173;73pkt 73fpkt", shape=pentagon, color=darkviolet];
7161[label="183.144.90.173;73pkt 73fpkt", shape=invtriangle, color=brown];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.144.90.173:1024, *:53}[34.2466%]&lt;BR/&gt;{183.144.90.173:*, 53.237.107.102:80}[21.9178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.8219%)&lt;BR/&gt; 1024: (17.1233%)&lt;BR/&gt; 53: (17.1233%)&lt;BR/&gt; 0: (4.10959%)&lt;BR/&gt; 1402: (1.36986%)&gt;];
}
5325--7161[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="53.237.107.102" dst_port="80" src_ip="183.144.90.173"/>
      <filter dst_port="53" src_ip="183.144.90.173" src_port="1024"/>
    </slice>
    <from sec="1118034217" usec="0"/>
    <to sec="1118034789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.49.2.176"/>
    </slice>
    <from sec="1118034661" usec="0"/>
    <to sec="1118034673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.115.123.176"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.196.80.177"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
5375[label="87.38.0.178;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7185[label="87.38.0.178;21pkt 21fpkt", shape=invtriangle, color=brown];
8166[label="87.38.0.178;21pkt 21fpkt", shape=invhouse, color=bisque];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.38.0.178:80, 175.199.249.136:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1263: (2.34375%)&lt;BR/&gt; 1262: (2.34375%)&lt;BR/&gt; 1258: (2.34375%)&lt;BR/&gt; 1257: (2.34375%)&gt;];
}
5375--7185[label="1;21pkt 21fpkt"];
5375--8166[label="1;21pkt 21fpkt"];
7185--8166[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.249.136" src_ip="87.38.0.178" src_port="80"/>
    </slice>
    <from sec="1118034858" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
5383[label="183.82.180.178;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7190[label="183.82.180.178;44pkt 44fpkt", shape=invtriangle, color=brown];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.180.178:1334, *:*}[77.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1334: (38.6364%)&lt;BR/&gt; 80: (4.54545%)&lt;BR/&gt; 443: (3.40909%)&lt;BR/&gt; 42707: (2.27273%)&lt;BR/&gt; 18352: (2.27273%)&gt;];
}
5383--7190[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="183.82.180.178" src_port="1334"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
5399[label="49.164.68.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7197[label="49.164.68.180;1pkt 1fpkt", shape=invtriangle, color=brown];
8171[label="49.164.68.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.164.68.180:80, 197.66.101.172:64396}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64396: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5399--7197[label="1;1pkt 1fpkt"];
5399--8171[label="1;1pkt 1fpkt"];
7197--8171[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.172" dst_port="64396" src_ip="49.164.68.180" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
5400[label="217.212.77.180;248pkt 248fpkt", shape=pentagon, color=darkviolet];
7198[label="217.212.77.180;248pkt 248fpkt", shape=invtriangle, color=brown];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.212.77.180:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5400--7198[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.212.77.180" src_port="1028"/>
    </slice>
    <from sec="1118034427" usec="0"/>
    <to sec="1118034466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.82.194.180"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
5410[label="133.167.14.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7204[label="133.167.14.181;1pkt 1fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.14.181:25, 55.221.226.106:30947}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30947: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5410--7204[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="55.221.226.106" dst_port="30947" src_ip="133.167.14.181" src_port="25"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.145.75.181"/>
    </slice>
    <from sec="1118034056" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_972{
style=filled;
color=gray75;
252[label="197.77.47.160;d;1413pkt 1413fpkt", shape=diamond, color=yellow];
345[label="197.77.41.47;d;159pkt 159fpkt", shape=diamond, color=yellow];
386[label="87.10.128.216;s;18pkt 18fpkt", shape=diamond, color=yellow];
770[label="197.77.45.74;d;279pkt 279fpkt", shape=diamond, color=yellow];
826[label="193.151.192.137;s;356pkt 356fpkt", shape=diamond, color=yellow];
978[label="216.160.32.126;s;143pkt 143fpkt", shape=diamond, color=yellow];
1103[label="193.151.192.136;s;421pkt 421fpkt", shape=diamond, color=yellow];
1141[label="193.151.192.138;s;251pkt 251fpkt", shape=diamond, color=yellow];
1149[label="216.160.32.112;s;128pkt 128fpkt", shape=diamond, color=yellow];
1195[label="219.202.226.182;s;2pkt 2fpkt", shape=diamond, color=yellow];
1200[label="87.5.189.181;s;12pkt 12fpkt", shape=diamond, color=yellow];
1663[label="219.202.226.180;s;4pkt 4fpkt", shape=diamond, color=yellow];
2000[label="197.139.144.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2019[label="87.24.232.25;s;14pkt 14fpkt", shape=diamond, color=yellow];
2049[label="128.65.65.100;d;51pkt 51fpkt", shape=diamond, color=yellow];
2074[label="193.203.209.112;s;59pkt 59fpkt", shape=diamond, color=yellow];
2382[label="218.102.132.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
2520[label="175.199.248.2;d;34pkt 34fpkt", shape=diamond, color=yellow];
2621[label="69.206.241.19;s;7pkt 7fpkt", shape=diamond, color=yellow];
2876[label="216.160.32.126;s;143pkt 143fpkt", shape=hexagon, color=black];
2892[label="87.10.128.216;s;17pkt 17fpkt", shape=hexagon, color=black];
3113[label="87.24.232.25;s;14pkt 14fpkt", shape=hexagon, color=black];
3270[label="193.151.192.138;s;251pkt 251fpkt", shape=hexagon, color=black];
3566[label="104.2.44.5;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3596[label="48.114.162.7;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3600[label="193.203.219.7;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3663[label="197.242.26.12;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3756[label="49.183.233.19;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3757[label="69.206.241.19;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3817[label="87.24.232.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3830[label="55.227.107.26;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3906[label="197.136.80.34;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4002[label="210.241.51.44;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4602[label="84.73.28.104;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4675[label="216.160.32.112;134pkt 134fpkt", shape=pentagon, color=darkviolet];
4688[label="193.203.209.112;64pkt 64fpkt", shape=pentagon, color=darkviolet];
4807[label="216.160.32.126;151pkt 151fpkt", shape=pentagon, color=darkviolet];
4942[label="193.151.192.137;356pkt 356fpkt", shape=pentagon, color=darkviolet];
4954[label="193.151.192.138;250pkt 250fpkt", shape=pentagon, color=darkviolet];
5006[label="193.203.209.143;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5109[label="193.203.208.153;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5196[label="87.1.1.162;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5351[label="215.66.3.176;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5406[label="87.24.169.180;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5419[label="87.5.189.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5429[label="219.202.226.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5530[label="219.176.216.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5531[label="87.1.25.195;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5763[label="87.10.128.216;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5929[label="193.203.210.235;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6098[label="193.203.219.7;26pkt 26fpkt", shape=invtriangle, color=brown];
6138[label="197.242.26.12;6pkt 6fpkt", shape=invtriangle, color=brown];
6195[label="49.183.233.19;2pkt 2fpkt", shape=invtriangle, color=brown];
6224[label="87.24.232.25;1pkt 1fpkt", shape=invtriangle, color=brown];
6231[label="55.227.107.26;5pkt 5fpkt", shape=invtriangle, color=brown];
6277[label="197.136.80.34;6pkt 6fpkt", shape=invtriangle, color=brown];
6337[label="210.241.51.44;7pkt 7fpkt", shape=invtriangle, color=brown];
6769[label="193.203.209.112;64pkt 64fpkt", shape=invtriangle, color=brown];
6956[label="193.203.209.143;12pkt 12fpkt", shape=invtriangle, color=brown];
7013[label="193.203.208.153;20pkt 20fpkt", shape=invtriangle, color=brown];
7071[label="87.1.1.162;7pkt 7fpkt", shape=invtriangle, color=brown];
7202[label="87.24.169.180;6pkt 6fpkt", shape=invtriangle, color=brown];
7209[label="87.5.189.181;2pkt 2fpkt", shape=invtriangle, color=brown];
7215[label="219.202.226.182;4pkt 4fpkt", shape=invtriangle, color=brown];
7279[label="87.1.25.195;12pkt 12fpkt", shape=invtriangle, color=brown];
7413[label="87.10.128.216;18pkt 18fpkt", shape=invtriangle, color=brown];
7518[label="193.203.210.235;15pkt 15fpkt", shape=invtriangle, color=brown];
7685[label="87.24.232.25;1pkt 1fpkt", shape=invhouse, color=bisque];
7709[label="197.136.80.34;6pkt 6fpkt", shape=invhouse, color=bisque];
7741[label="210.241.51.44;7pkt 7fpkt", shape=invhouse, color=bisque];
7957[label="193.203.209.112;64pkt 64fpkt", shape=invhouse, color=bisque];
8050[label="193.203.209.143;12pkt 12fpkt", shape=invhouse, color=bisque];
8079[label="193.203.208.153;19pkt 19fpkt", shape=invhouse, color=bisque];
8174[label="87.24.169.180;6pkt 6fpkt", shape=invhouse, color=bisque];
8176[label="87.5.189.181;2pkt 2fpkt", shape=invhouse, color=bisque];
8178[label="219.202.226.182;3pkt 3fpkt", shape=invhouse, color=bisque];
8279[label="87.10.128.216;17pkt 17fpkt", shape=invhouse, color=bisque];
stat972[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 197.77.47.160:*}[65.0772%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8578%)&lt;BR/&gt; 1639: (0.0853404%)&lt;BR/&gt; 1635: (0.0758581%)&lt;BR/&gt; 1616: (0.0758581%)&lt;BR/&gt; 1601: (0.0758581%)&gt;];
}
252--324[label="0.0378378;14pkt 14fpkt"];
252--374[label="0.033195;16pkt 16fpkt"];
252--386[label="0.5;9pkt 9fpkt"];
252--406[label="0.037296;16pkt 16fpkt"];
252--464[label="0.0413223;15pkt 15fpkt"];
252--469[label="0.0282051;11pkt 11fpkt"];
252--826[label="0.985955;351pkt 351fpkt"];
252--903[label="0.142857;1pkt 1fpkt"];
252--918[label="0.0888889;4pkt 4fpkt"];
252--978[label="0.13986;20pkt 20fpkt"];
252--1103[label="0.997625;420pkt 420fpkt"];
252--1141[label="0.992032;249pkt 249fpkt"];
252--1149[label="0.148438;19pkt 19fpkt"];
252--1195[label="0.5;1pkt 1fpkt"];
252--1200[label="1;12pkt 12fpkt"];
252--1375[label="0.0454545;1pkt 1fpkt"];
252--1663[label="0.75;3pkt 3fpkt"];
252--2000[label="1;1pkt 1fpkt"];
252--2019[label="0.428571;6pkt 6fpkt"];
252--2382[label="1;1pkt 1fpkt"];
252--2478[label="0.0212766;1pkt 1fpkt"];
252--2621[label="0.714286;5pkt 5fpkt"];
252--2752[label="0.0188679;2pkt 2fpkt"];
252--2809[label="0.0350877;12pkt 12fpkt"];
252--2876[label="0.13986;20pkt 20fpkt"];
252--2892[label="0.470588;8pkt 8fpkt"];
252--3007[label="0.0526316;1pkt 1fpkt"];
252--3015[label="0.142857;1pkt 1fpkt"];
252--3113[label="0.428571;6pkt 6fpkt"];
252--3270[label="0.992032;249pkt 249fpkt"];
252--3431[label="0.0350877;12pkt 12fpkt"];
252--3477[label="0.0566171;80pkt 80fpkt"];
252--3495[label="0.0566171;80pkt 80fpkt"];
252--3557[label="0.5;1pkt 1fpkt"];
252--3566[label="0.1875;3pkt 3fpkt"];
252--3596[label="0.5;2pkt 2fpkt"];
252--3600[label="0.111111;3pkt 3fpkt"];
252--3661[label="0.272727;3pkt 3fpkt"];
252--3663[label="1;6pkt 6fpkt"];
252--3711[label="0.0217391;1pkt 1fpkt"];
252--3756[label="1;3pkt 3fpkt"];
252--3757[label="0.666667;4pkt 4fpkt"];
252--3817[label="0.5;1pkt 1fpkt"];
252--3906[label="0.2;1pkt 1fpkt"];
252--4002[label="0.285714;2pkt 2fpkt"];
252--4553[label="0.1;1pkt 1fpkt"];
252--4602[label="0.285714;2pkt 2fpkt"];
252--4675[label="0.141791;19pkt 19fpkt"];
252--4807[label="0.13245;20pkt 20fpkt"];
252--4841[label="0.0342612;16pkt 16fpkt"];
252--4942[label="0.985955;351pkt 351fpkt"];
252--4954[label="0.996;249pkt 249fpkt"];
252--5006[label="0.25;3pkt 3fpkt"];
252--5109[label="0.315789;6pkt 6fpkt"];
252--5196[label="1;7pkt 7fpkt"];
252--5351[label="0.375;3pkt 3fpkt"];
252--5406[label="0.666667;4pkt 4fpkt"];
252--5419[label="1;2pkt 2fpkt"];
252--5429[label="0.75;3pkt 3fpkt"];
252--5530[label="1;1pkt 1fpkt"];
252--5531[label="0.636364;7pkt 7fpkt"];
252--5763[label="0.5;9pkt 9fpkt"];
252--5855[label="0.0375;15pkt 15fpkt"];
252--6071[label="0.333333;1pkt 1fpkt"];
252--6098[label="0.0769231;2pkt 2fpkt"];
252--6136[label="0.272727;3pkt 3fpkt"];
252--6138[label="1;6pkt 6fpkt"];
252--6195[label="1;2pkt 2fpkt"];
252--6277[label="0.333333;2pkt 2fpkt"];
252--6337[label="0.285714;2pkt 2fpkt"];
252--6956[label="0.25;3pkt 3fpkt"];
252--7013[label="0.35;7pkt 7fpkt"];
252--7071[label="1;7pkt 7fpkt"];
252--7202[label="0.666667;4pkt 4fpkt"];
252--7209[label="1;2pkt 2fpkt"];
252--7215[label="0.75;3pkt 3fpkt"];
252--7279[label="0.583333;7pkt 7fpkt"];
252--7413[label="0.5;9pkt 9fpkt"];
252--7636[label="0.333333;4pkt 4fpkt"];
252--7709[label="0.333333;2pkt 2fpkt"];
252--7741[label="0.285714;2pkt 2fpkt"];
252--8050[label="0.25;3pkt 3fpkt"];
252--8079[label="0.315789;6pkt 6fpkt"];
252--8174[label="0.666667;4pkt 4fpkt"];
252--8176[label="1;2pkt 2fpkt"];
252--8178[label="0.666667;2pkt 2fpkt"];
252--8279[label="0.470588;8pkt 8fpkt"];
345--374[label="0.0880503;14pkt 14fpkt"];
345--386[label="0.5;9pkt 9fpkt"];
345--406[label="0.0754717;12pkt 12fpkt"];
345--978[label="0.111888;16pkt 16fpkt"];
345--1149[label="0.117188;15pkt 15fpkt"];
345--1195[label="0.5;1pkt 1fpkt"];
345--1663[label="0.25;1pkt 1fpkt"];
345--2019[label="0.428571;6pkt 6fpkt"];
345--2809[label="0.0503145;8pkt 8fpkt"];
345--2876[label="0.111888;16pkt 16fpkt"];
345--2892[label="0.529412;9pkt 9fpkt"];
345--3113[label="0.428571;6pkt 6fpkt"];
345--3431[label="0.0503145;8pkt 8fpkt"];
345--3477[label="0.100629;16pkt 16fpkt"];
345--3495[label="0.100629;16pkt 16fpkt"];
345--3600[label="0.037037;1pkt 1fpkt"];
345--3906[label="0.6;3pkt 3fpkt"];
345--4602[label="0.142857;1pkt 1fpkt"];
345--4675[label="0.11194;15pkt 15fpkt"];
345--4780[label="0.0909091;1pkt 1fpkt"];
345--4807[label="0.10596;16pkt 16fpkt"];
345--4841[label="0.0754717;12pkt 12fpkt"];
345--5351[label="0.625;5pkt 5fpkt"];
345--5406[label="0.333333;2pkt 2fpkt"];
345--5429[label="0.25;1pkt 1fpkt"];
345--5763[label="0.5;9pkt 9fpkt"];
345--6098[label="0.0384615;1pkt 1fpkt"];
345--6277[label="0.5;3pkt 3fpkt"];
345--7202[label="0.333333;2pkt 2fpkt"];
345--7215[label="0.25;1pkt 1fpkt"];
345--7413[label="0.5;9pkt 9fpkt"];
345--7709[label="0.5;3pkt 3fpkt"];
345--8174[label="0.333333;2pkt 2fpkt"];
345--8178[label="0.333333;1pkt 1fpkt"];
345--8279[label="0.529412;9pkt 9fpkt"];
386--2892[label="1;17pkt 17fpkt"];
386--3477[label="0.388889;7pkt 7fpkt"];
386--3495[label="0.388889;7pkt 7fpkt"];
386--5763[label="1;18pkt 18fpkt"];
386--7413[label="1;18pkt 18fpkt"];
386--8279[label="1;17pkt 17fpkt"];
770--978[label="0.258741;37pkt 37fpkt"];
770--1149[label="0.28125;36pkt 36fpkt"];
770--1822[label="0.025641;1pkt 1fpkt"];
770--2448[label="0.0322581;1pkt 1fpkt"];
770--2752[label="0.264151;28pkt 28fpkt"];
770--2809[label="0.0215054;6pkt 6fpkt"];
770--2876[label="0.258741;37pkt 37fpkt"];
770--3251[label="0.025641;1pkt 1fpkt"];
770--3431[label="0.0215054;6pkt 6fpkt"];
770--3477[label="0.0537634;15pkt 15fpkt"];
770--3495[label="0.0537634;15pkt 15fpkt"];
770--3601[label="0.0232558;1pkt 1fpkt"];
770--4095[label="0.047619;2pkt 2fpkt"];
770--4675[label="0.268657;36pkt 36fpkt"];
770--4807[label="0.238411;36pkt 36fpkt"];
770--4841[label="0.0358423;10pkt 10fpkt"];
770--5508[label="0.0909091;3pkt 3fpkt"];
770--5855[label="0.240143;67pkt 67fpkt"];
770--6005[label="0.0294118;1pkt 1fpkt"];
770--6231[label="0.2;1pkt 1fpkt"];
770--6401[label="0.047619;2pkt 2fpkt"];
770--7265[label="0.0909091;3pkt 3fpkt"];
770--7775[label="0.0697674;3pkt 3fpkt"];
770--8201[label="0.0909091;3pkt 3fpkt"];
826--3477[label="0.0196629;7pkt 7fpkt"];
826--3495[label="0.0196629;7pkt 7fpkt"];
826--4942[label="1;356pkt 356fpkt"];
978--1245[label="0.00819672;1pkt 1fpkt"];
978--2520[label="0.705882;24pkt 24fpkt"];
978--2876[label="1;143pkt 143fpkt"];
978--3040[label="0.00952381;1pkt 1fpkt"];
978--3477[label="0.0839161;12pkt 12fpkt"];
978--3495[label="0.0839161;12pkt 12fpkt"];
978--4807[label="0.993007;142pkt 142fpkt"];
1103--3477[label="0.0285036;12pkt 12fpkt"];
1103--3495[label="0.0285036;12pkt 12fpkt"];
1141--3270[label="1;251pkt 251fpkt"];
1141--3477[label="0.0478088;12pkt 12fpkt"];
1141--3495[label="0.0478088;12pkt 12fpkt"];
1141--4954[label="1;250pkt 250fpkt"];
1149--1245[label="0.00819672;1pkt 1fpkt"];
1149--1894[label="0.09375;3pkt 3fpkt"];
1149--2520[label="0.147059;5pkt 5fpkt"];
1149--3040[label="0.00952381;1pkt 1fpkt"];
1149--3477[label="0.109375;14pkt 14fpkt"];
1149--3495[label="0.109375;14pkt 14fpkt"];
1149--4675[label="0.992188;127pkt 127fpkt"];
1195--5429[label="1;2pkt 2fpkt"];
1195--7215[label="1;2pkt 2fpkt"];
1195--8178[label="1;2pkt 2fpkt"];
1200--3477[label="0.333333;4pkt 4fpkt"];
1200--3495[label="0.333333;4pkt 4fpkt"];
1200--5419[label="1;2pkt 2fpkt"];
1200--7209[label="1;2pkt 2fpkt"];
1200--8176[label="1;2pkt 2fpkt"];
1663--3477[label="0.25;1pkt 1fpkt"];
1663--3495[label="0.25;1pkt 1fpkt"];
2019--3113[label="1;14pkt 14fpkt"];
2019--3477[label="0.357143;5pkt 5fpkt"];
2019--3495[label="0.357143;5pkt 5fpkt"];
2019--3817[label="1;2pkt 2fpkt"];
2019--6224[label="1;1pkt 1fpkt"];
2019--7685[label="1;1pkt 1fpkt"];
2049--2074[label="0.0980392;5pkt 5fpkt"];
2049--2318[label="0.0196078;1pkt 1fpkt"];
2049--3477[label="0.0196078;1pkt 1fpkt"];
2049--3495[label="0.0196078;1pkt 1fpkt"];
2049--3600[label="0.296296;8pkt 8fpkt"];
2049--3661[label="0.272727;3pkt 3fpkt"];
2049--4166[label="0.0196078;1pkt 1fpkt"];
2049--4688[label="0.0980392;5pkt 5fpkt"];
2049--5929[label="0.4;6pkt 6fpkt"];
2049--6098[label="0.307692;8pkt 8fpkt"];
2049--6136[label="0.272727;3pkt 3fpkt"];
2049--6769[label="0.0980392;5pkt 5fpkt"];
2049--7518[label="0.4;6pkt 6fpkt"];
2049--7636[label="0.25;3pkt 3fpkt"];
2049--7957[label="0.0980392;5pkt 5fpkt"];
2074--3477[label="0.0338983;2pkt 2fpkt"];
2074--3495[label="0.0338983;2pkt 2fpkt"];
2074--4688[label="1;59pkt 59fpkt"];
2074--6769[label="1;59pkt 59fpkt"];
2074--7957[label="1;59pkt 59fpkt"];
2520--2876[label="0.705882;24pkt 24fpkt"];
2520--3477[label="0.205882;7pkt 7fpkt"];
2520--3495[label="0.205882;7pkt 7fpkt"];
2520--4675[label="0.147059;5pkt 5fpkt"];
2520--4807[label="0.705882;24pkt 24fpkt"];
2621--3757[label="1;6pkt 6fpkt"];
2876--3040[label="0.00952381;1pkt 1fpkt"];
2876--3477[label="0.0839161;12pkt 12fpkt"];
2876--3495[label="0.0839161;12pkt 12fpkt"];
2876--4807[label="0.993007;142pkt 142fpkt"];
2892--3477[label="0.411765;7pkt 7fpkt"];
2892--3495[label="0.411765;7pkt 7fpkt"];
2892--5763[label="1;17pkt 17fpkt"];
2892--7413[label="1;17pkt 17fpkt"];
2892--8279[label="0.941176;16pkt 16fpkt"];
3113--3477[label="0.357143;5pkt 5fpkt"];
3113--3495[label="0.357143;5pkt 5fpkt"];
3113--3817[label="1;2pkt 2fpkt"];
3113--6224[label="1;1pkt 1fpkt"];
3113--7685[label="1;1pkt 1fpkt"];
3270--3477[label="0.0478088;12pkt 12fpkt"];
3270--3495[label="0.0478088;12pkt 12fpkt"];
3270--4954[label="1;250pkt 250fpkt"];
3600--6098[label="1;26pkt 26fpkt"];
3663--6138[label="1;6pkt 6fpkt"];
3756--6195[label="1;2pkt 2fpkt"];
3817--6224[label="1;1pkt 1fpkt"];
3817--7685[label="1;1pkt 1fpkt"];
3830--6231[label="1;4pkt 4fpkt"];
3906--6277[label="1;5pkt 5fpkt"];
3906--7709[label="1;5pkt 5fpkt"];
4002--6337[label="1;7pkt 7fpkt"];
4002--7741[label="1;7pkt 7fpkt"];
4688--6769[label="1;64pkt 64fpkt"];
4688--7957[label="1;64pkt 64fpkt"];
5006--6956[label="1;12pkt 12fpkt"];
5006--8050[label="1;12pkt 12fpkt"];
5109--7013[label="1;19pkt 19fpkt"];
5109--8079[label="1;19pkt 19fpkt"];
5196--7071[label="1;7pkt 7fpkt"];
5406--7202[label="1;6pkt 6fpkt"];
5406--8174[label="1;6pkt 6fpkt"];
5419--7209[label="1;2pkt 2fpkt"];
5419--8176[label="1;2pkt 2fpkt"];
5429--7215[label="1;4pkt 4fpkt"];
5429--8178[label="1;3pkt 3fpkt"];
5531--7279[label="1;11pkt 11fpkt"];
5763--7413[label="1;18pkt 18fpkt"];
5763--8279[label="1;17pkt 17fpkt"];
5929--7518[label="1;15pkt 15fpkt"];
6224--7685[label="1;1pkt 1fpkt"];
6277--7709[label="1;6pkt 6fpkt"];
6337--7741[label="1;7pkt 7fpkt"];
6769--7957[label="1;64pkt 64fpkt"];
6956--8050[label="1;12pkt 12fpkt"];
7013--8079[label="1;19pkt 19fpkt"];
7202--8174[label="1;6pkt 6fpkt"];
7209--8176[label="1;2pkt 2fpkt"];
7215--8178[label="1;3pkt 3fpkt"];
7413--8279[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.47.160" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
1291[label="133.167.60.19;d;90pkt 90fpkt", shape=diamond, color=yellow];
3536[label="184.236.11.3;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3738[label="184.236.11.19;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5425[label="132.173.99.182;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6184[label="184.236.11.19;28pkt 28fpkt", shape=invtriangle, color=brown];
7212[label="132.173.99.182;5pkt 5fpkt", shape=invtriangle, color=brown];
7659[label="184.236.11.19;28pkt 28fpkt", shape=invhouse, color=bisque];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.167.60.19:25}[58.3333%]&lt;BR/&gt;{184.236.11.3:*, *:25}[28.4722%]&lt;BR/&gt;{*:*, 133.167.42.101:25}[22.2222%]&lt;BR/&gt;{184.236.11.3:*, 133.167.42.101:*}[20.1389%]&lt;BR/&gt;{184.236.11.19:*, *:*}[20.1389%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.9787%)&lt;BR/&gt; 113: (4.46809%)&lt;BR/&gt; 53: (2.55319%)&lt;BR/&gt; 46953: (0.851064%)&lt;BR/&gt; 46855: (0.851064%)&gt;];
}
1291--3536[label="0.36;18pkt 18fpkt"];
1291--3738[label="0.344828;10pkt 10fpkt"];
1291--5425[label="0.4;2pkt 2fpkt"];
1291--6184[label="0.357143;10pkt 10fpkt"];
1291--7212[label="0.4;2pkt 2fpkt"];
1291--7659[label="0.357143;10pkt 10fpkt"];
3738--6184[label="1;28pkt 28fpkt"];
3738--7659[label="1;28pkt 28fpkt"];
5425--7212[label="1;5pkt 5fpkt"];
6184--7659[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="184.236.11.19"/>
      <filter dst_ip="133.167.42.101" src_ip="184.236.11.3"/>
      <filter dst_port="25" src_ip="184.236.11.3"/>
      <filter dst_ip="133.167.60.19" dst_port="25"/>
      <filter dst_ip="133.167.42.101" dst_port="25"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.209.121.182"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.202.168.184"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
5461[label="133.167.58.186;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7233[label="133.167.58.186;3pkt 3fpkt", shape=invtriangle, color=brown];
8188[label="133.167.58.186;3pkt 3fpkt", shape=invhouse, color=bisque];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.58.186:49614, 192.9.57.149:1863}[33.3333%]&lt;BR/&gt;{133.167.58.186:49636, 104.4.16.182:80}[33.3333%]&lt;BR/&gt;{133.167.58.186:49611, 216.212.121.227:5050}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49636: (16.6667%)&lt;BR/&gt; 49614: (16.6667%)&lt;BR/&gt; 49611: (16.6667%)&lt;BR/&gt; 5050: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&gt;];
}
5461--7233[label="1;3pkt 3fpkt"];
5461--8188[label="1;3pkt 3fpkt"];
7233--8188[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.121.227" dst_port="5050" src_ip="133.167.58.186" src_port="49611"/>
      <filter dst_ip="104.4.16.182" dst_port="80" src_ip="133.167.58.186" src_port="49636"/>
      <filter dst_ip="192.9.57.149" dst_port="1863" src_ip="133.167.58.186" src_port="49614"/>
    </slice>
    <from sec="1118034028" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.85.190.186"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.116.200.186"/>
    </slice>
    <from sec="1118034017" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.196.158.187"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
5483[label="209.243.83.189;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7249[label="209.243.83.189;18pkt 18fpkt", shape=invtriangle, color=brown];
8194[label="209.243.83.189;18pkt 18fpkt", shape=invhouse, color=bisque];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.243.83.189:80, 128.65.32.149:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2471: (2.77778%)&lt;BR/&gt; 2344: (2.77778%)&lt;BR/&gt; 2343: (2.77778%)&lt;BR/&gt; 2342: (2.77778%)&gt;];
}
5483--7249[label="1;18pkt 18fpkt"];
5483--8194[label="1;18pkt 18fpkt"];
7249--8194[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.32.149" src_ip="209.243.83.189" src_port="80"/>
    </slice>
    <from sec="1118034256" usec="0"/>
    <to sec="1118034656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_982{
style=filled;
color=gray75;
5485[label="87.5.163.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7251[label="87.5.163.189;1pkt 1fpkt", shape=invtriangle, color=brown];
stat982[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.5.163.189:1099, 133.167.197.97:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1099: (50%)&gt;];
}
5485--7251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.197.97" dst_port="1434" src_ip="87.5.163.189" src_port="1099"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.30.190.190"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
5497[label="176.196.213.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7256[label="176.196.213.191;1pkt 1fpkt", shape=invtriangle, color=brown];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.213.191:1055, 169.69.252.220:9999}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9999: (50%)&lt;BR/&gt; 1055: (50%)&gt;];
}
5497--7256[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.69.252.220" dst_port="9999" src_ip="176.196.213.191" src_port="1055"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.58.232.191"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
5499[label="55.1.21.192;56pkt 56fpkt", shape=pentagon, color=darkviolet];
7258[label="55.1.21.192;57pkt 57fpkt", shape=invtriangle, color=brown];
8198[label="55.1.21.192;57pkt 57fpkt", shape=invhouse, color=bisque];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.1.21.192:8200, 128.65.0.142:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 3158: (0.882353%)&lt;BR/&gt; 3157: (0.882353%)&lt;BR/&gt; 3156: (0.882353%)&lt;BR/&gt; 3155: (0.882353%)&gt;];
}
5499--7258[label="1;56pkt 56fpkt"];
5499--8198[label="1;56pkt 56fpkt"];
7258--8198[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.0.142" src_ip="55.1.21.192" src_port="8200"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.251.98.192"/>
    </slice>
    <from sec="1118034204" usec="0"/>
    <to sec="1118034225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.100.127.192"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
5515[label="176.196.102.193;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7270[label="176.196.102.193;23pkt 23fpkt", shape=invtriangle, color=brown];
8202[label="176.196.102.193;24pkt 24fpkt", shape=invhouse, color=bisque];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.102.193:53, *:*}[70.8333%]&lt;BR/&gt;{176.196.102.193:25, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.2857%)&lt;BR/&gt; 25: (15%)&lt;BR/&gt; 64150: (2.14286%)&lt;BR/&gt; 63170: (2.14286%)&lt;BR/&gt; 52013: (2.14286%)&gt;];
}
5515--7270[label="1;23pkt 23fpkt"];
5515--8202[label="1;23pkt 23fpkt"];
7270--8202[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.102.193" src_port="53"/>
      <filter src_ip="176.196.102.193" src_port="25"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
5522[label="176.196.93.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7273[label="176.196.93.194;2pkt 2fpkt", shape=invtriangle, color=brown];
8205[label="176.196.93.194;2pkt 2fpkt", shape=invhouse, color=bisque];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.93.194:22, 219.5.199.201:42489}[50%]&lt;BR/&gt;{176.196.93.194:22, 219.5.199.201:42829}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42829: (25%)&lt;BR/&gt; 42489: (25%)&gt;];
}
5522--7273[label="1;2pkt 2fpkt"];
5522--8205[label="1;2pkt 2fpkt"];
7273--8205[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42829" src_ip="176.196.93.194" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42489" src_ip="176.196.93.194" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
5523[label="176.196.109.194;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7274[label="176.196.109.194;35pkt 35fpkt", shape=invtriangle, color=brown];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.109.194:*, 172.25.0.70:515}[97.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 515: (48.5714%)&lt;BR/&gt; 55997: (1.42857%)&lt;BR/&gt; 55970: (1.42857%)&lt;BR/&gt; 55965: (1.42857%)&lt;BR/&gt; 55964: (1.42857%)&gt;];
}
5523--7274[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="172.25.0.70" dst_port="515" src_ip="176.196.109.194"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
5525[label="87.24.167.194;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7276[label="87.24.167.194;15pkt 15fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.24.167.194:110, 183.82.180.131:*}[80%]&lt;BR/&gt;{87.24.167.194:110, 183.82.180.161:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 3127: (3.44828%)&lt;BR/&gt; 3112: (3.44828%)&lt;BR/&gt; 3098: (3.44828%)&lt;BR/&gt; 2125: (3.44828%)&gt;];
}
5525--7276[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="183.82.180.131" src_ip="87.24.167.194" src_port="110"/>
      <filter dst_ip="183.82.180.161" src_ip="87.24.167.194" src_port="110"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
5535[label="197.77.42.195;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7281[label="197.77.42.195;7pkt 7fpkt", shape=invtriangle, color=brown];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.42.195:*, 192.9.61.125:1863}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2556: (7.14286%)&lt;BR/&gt; 2512: (7.14286%)&lt;BR/&gt; 2510: (7.14286%)&lt;BR/&gt; 2509: (7.14286%)&gt;];
}
5535--7281[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.61.125" dst_port="1863" src_ip="197.77.42.195"/>
    </slice>
    <from sec="1118034036" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.76.194.195"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.133.194.195"/>
    </slice>
    <from sec="1118034058" usec="0"/>
    <to sec="1118034878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
5557[label="211.50.61.197;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7294[label="211.50.61.197;16pkt 16fpkt", shape=invtriangle, color=brown];
8214[label="211.50.61.197;15pkt 15fpkt", shape=invhouse, color=bisque];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.50.61.197:80, 197.77.200.213:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1775: (3.19149%)&lt;BR/&gt; 1773: (3.19149%)&lt;BR/&gt; 1771: (3.19149%)&lt;BR/&gt; 1769: (3.19149%)&gt;];
}
5557--7294[label="1;16pkt 16fpkt"];
5557--8214[label="1;15pkt 15fpkt"];
7294--8214[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="197.77.200.213" src_ip="211.50.61.197" src_port="80"/>
    </slice>
    <from sec="1118034671" usec="0"/>
    <to sec="1118034762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
5564[label="133.167.52.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7299[label="133.167.52.198;1pkt 1fpkt", shape=invtriangle, color=brown];
8216[label="133.167.52.198;1pkt 1fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.52.198:1815, 216.212.121.233:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1815: (50%)&gt;];
}
5564--7299[label="1;1pkt 1fpkt"];
5564--8216[label="1;1pkt 1fpkt"];
7299--8216[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.121.233" dst_port="5050" src_ip="133.167.52.198" src_port="1815"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
236[label="196.8.19.132;s;174pkt 174fpkt", shape=diamond, color=yellow];
570[label="218.106.43.158;d;2pkt 2fpkt", shape=diamond, color=yellow];
2022[label="192.9.61.100;d;7pkt 7fpkt", shape=diamond, color=yellow];
2475[label="176.196.137.26;s;57pkt 57fpkt", shape=diamond, color=yellow];
2532[label="192.9.61.22;d;14pkt 14fpkt", shape=diamond, color=yellow];
2533[label="192.9.61.98;d;11pkt 11fpkt", shape=diamond, color=yellow];
3360[label="192.9.61.98;d;11pkt 11fpkt", shape=hexagon, color=black];
3832[label="176.196.137.26;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4280[label="183.82.33.74;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4706[label="183.82.39.114;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4766[label="183.82.133.121;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4861[label="183.82.37.131;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4876[label="196.8.19.132;193pkt 193fpkt", shape=pentagon, color=darkviolet];
4977[label="128.65.182.140;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5418[label="128.65.182.181;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5574[label="183.82.39.199;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5803[label="176.196.30.221;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5852[label="183.82.33.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6525[label="183.82.33.74;7pkt 7fpkt", shape=invtriangle, color=brown];
6822[label="183.82.133.121;4pkt 4fpkt", shape=invtriangle, color=brown];
6872[label="183.82.37.131;27pkt 27fpkt", shape=invtriangle, color=brown];
6881[label="196.8.19.132;193pkt 193fpkt", shape=invtriangle, color=brown];
6936[label="128.65.182.140;8pkt 8fpkt", shape=invtriangle, color=brown];
7208[label="128.65.182.181;17pkt 17fpkt", shape=invtriangle, color=brown];
7304[label="183.82.39.199;6pkt 6fpkt", shape=invtriangle, color=brown];
7439[label="176.196.30.221;18pkt 18fpkt", shape=invtriangle, color=brown];
7841[label="183.82.33.74;7pkt 7fpkt", shape=invhouse, color=bisque];
7982[label="183.82.133.121;4pkt 4fpkt", shape=invhouse, color=bisque];
8011[label="183.82.37.131;28pkt 28fpkt", shape=invhouse, color=bisque];
8042[label="128.65.182.140;8pkt 8fpkt", shape=invhouse, color=bisque];
8219[label="183.82.39.199;6pkt 6fpkt", shape=invhouse, color=bisque];
8293[label="176.196.30.221;17pkt 17fpkt", shape=invhouse, color=bisque];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.19.132:*, *:80}[35.2304%]&lt;BR/&gt;{*:*, *:1863}[20.5962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.1026%)&lt;BR/&gt; 1863: (9.94872%)&lt;BR/&gt; 53: (6.41026%)&lt;BR/&gt; 57121: (5.38462%)&lt;BR/&gt; 42044: (3.23077%)&gt;];
}
236--438[label="0.00574713;1pkt 1fpkt"];
236--570[label="1;2pkt 2fpkt"];
236--954[label="0.00574713;1pkt 1fpkt"];
236--2029[label="0.00934579;1pkt 1fpkt"];
236--2233[label="0.00990099;1pkt 1fpkt"];
236--2301[label="0.245902;15pkt 15fpkt"];
236--2532[label="0.0714286;1pkt 1fpkt"];
236--3260[label="0.245902;15pkt 15fpkt"];
236--3476[label="0.0114943;2pkt 2fpkt"];
236--3478[label="0.0172414;3pkt 3fpkt"];
236--3485[label="0.00574713;1pkt 1fpkt"];
236--4876[label="1;174pkt 174fpkt"];
236--6881[label="1;174pkt 174fpkt"];
570--4876[label="1;2pkt 2fpkt"];
570--6881[label="1;2pkt 2fpkt"];
2022--4280[label="0.166667;1pkt 1fpkt"];
2022--4766[label="0.2;1pkt 1fpkt"];
2022--5574[label="0.2;1pkt 1fpkt"];
2022--5803[label="0.142857;1pkt 1fpkt"];
2022--6525[label="0.142857;1pkt 1fpkt"];
2022--6822[label="0.25;1pkt 1fpkt"];
2022--7304[label="0.166667;1pkt 1fpkt"];
2022--7439[label="0.142857;1pkt 1fpkt"];
2022--7841[label="0.142857;1pkt 1fpkt"];
2022--7982[label="0.25;1pkt 1fpkt"];
2022--8219[label="0.166667;1pkt 1fpkt"];
2022--8293[label="0.142857;1pkt 1fpkt"];
2475--2533[label="0.0909091;1pkt 1fpkt"];
2475--3360[label="0.0909091;1pkt 1fpkt"];
2475--3478[label="0.0350877;2pkt 2fpkt"];
2475--3832[label="0.982456;56pkt 56fpkt"];
2532--3254[label="0.0714286;1pkt 1fpkt"];
2532--4301[label="0.166667;1pkt 1fpkt"];
2532--4706[label="0.166667;1pkt 1fpkt"];
2532--4876[label="0.0714286;1pkt 1fpkt"];
2532--5418[label="0.142857;2pkt 2fpkt"];
2532--5584[label="0.142857;2pkt 2fpkt"];
2532--5803[label="0.0714286;1pkt 1fpkt"];
2532--5852[label="0.25;1pkt 1fpkt"];
2532--6881[label="0.0714286;1pkt 1fpkt"];
2532--7208[label="0.142857;2pkt 2fpkt"];
2532--7439[label="0.0714286;1pkt 1fpkt"];
2532--8293[label="0.0714286;1pkt 1fpkt"];
2533--3360[label="1;11pkt 11fpkt"];
2533--3832[label="0.0909091;1pkt 1fpkt"];
2533--4861[label="0.0909091;1pkt 1fpkt"];
2533--5418[label="0.0909091;1pkt 1fpkt"];
2533--5573[label="0.0909091;1pkt 1fpkt"];
2533--5574[label="0.2;1pkt 1fpkt"];
2533--6936[label="0.125;1pkt 1fpkt"];
2533--7208[label="0.0909091;1pkt 1fpkt"];
2533--7304[label="0.333333;2pkt 2fpkt"];
2533--7439[label="0.0909091;1pkt 1fpkt"];
2533--8011[label="0.0909091;1pkt 1fpkt"];
2533--8042[label="0.125;1pkt 1fpkt"];
2533--8219[label="0.333333;2pkt 2fpkt"];
3360--3832[label="0.0909091;1pkt 1fpkt"];
3360--4861[label="0.0909091;1pkt 1fpkt"];
3360--5418[label="0.0909091;1pkt 1fpkt"];
3360--5573[label="0.0909091;1pkt 1fpkt"];
3360--5574[label="0.2;1pkt 1fpkt"];
3360--6936[label="0.125;1pkt 1fpkt"];
3360--7208[label="0.0909091;1pkt 1fpkt"];
3360--7304[label="0.333333;2pkt 2fpkt"];
3360--7439[label="0.0909091;1pkt 1fpkt"];
3360--8011[label="0.0909091;1pkt 1fpkt"];
3360--8042[label="0.125;1pkt 1fpkt"];
3360--8219[label="0.333333;2pkt 2fpkt"];
4280--6525[label="1;6pkt 6fpkt"];
4280--7841[label="1;6pkt 6fpkt"];
4766--6822[label="1;4pkt 4fpkt"];
4766--7982[label="1;4pkt 4fpkt"];
4861--6872[label="1;27pkt 27fpkt"];
4861--8011[label="1;28pkt 28fpkt"];
4876--6881[label="1;193pkt 193fpkt"];
4977--6936[label="1;7pkt 7fpkt"];
4977--8042[label="1;7pkt 7fpkt"];
5418--7208[label="1;17pkt 17fpkt"];
5574--7304[label="1;5pkt 5fpkt"];
5574--8219[label="1;5pkt 5fpkt"];
5803--7439[label="1;17pkt 17fpkt"];
5803--8293[label="1;17pkt 17fpkt"];
6525--7841[label="1;7pkt 7fpkt"];
6822--7982[label="1;4pkt 4fpkt"];
6872--8011[label="1;27pkt 27fpkt"];
6936--8042[label="1;8pkt 8fpkt"];
7304--8219[label="1;6pkt 6fpkt"];
7439--8293[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="1863"/>
      <filter dst_port="80" src_ip="196.8.19.132"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
5575[label="176.197.42.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7305[label="176.197.42.199;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.42.199:32977, 211.138.113.201:443}[50%]&lt;BR/&gt;{176.197.42.199:32979, 211.138.113.201:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 32979: (25%)&lt;BR/&gt; 32977: (25%)&gt;];
}
5575--7305[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.138.113.201" dst_port="443" src_ip="176.197.42.199" src_port="32979"/>
      <filter dst_ip="211.138.113.201" dst_port="443" src_ip="176.197.42.199" src_port="32977"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
1264[label="52.213.73.79;d;59pkt 59fpkt", shape=diamond, color=yellow];
2132[label="128.65.157.27;s;4pkt 4fpkt", shape=diamond, color=yellow];
3844[label="128.65.157.27;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3901[label="128.65.184.33;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5586[label="128.65.69.200;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6235[label="128.65.157.27;4pkt 4fpkt", shape=invtriangle, color=brown];
6273[label="128.65.184.33;6pkt 6fpkt", shape=invtriangle, color=brown];
7308[label="128.65.69.200;38pkt 38fpkt", shape=invtriangle, color=brown];
7687[label="128.65.157.27;4pkt 4fpkt", shape=invhouse, color=bisque];
7707[label="128.65.184.33;6pkt 6fpkt", shape=invhouse, color=bisque];
8222[label="128.65.69.200;37pkt 37fpkt", shape=invhouse, color=bisque];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.69.200:80, 52.213.73.79:*}[43.5897%]&lt;BR/&gt;{128.65.238.101:80, 52.213.73.79:*}[35.8974%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56838: (1.21951%)&lt;BR/&gt; 60858: (0.97561%)&lt;BR/&gt; 60210: (0.97561%)&lt;BR/&gt; 59429: (0.97561%)&gt;];
}
1264--2132[label="0.25;1pkt 1fpkt"];
1264--2732[label="0.444444;4pkt 4fpkt"];
1264--3477[label="0.118644;7pkt 7fpkt"];
1264--3495[label="0.118644;7pkt 7fpkt"];
1264--3844[label="0.25;1pkt 1fpkt"];
1264--3901[label="0.2;1pkt 1fpkt"];
1264--5586[label="0.710526;27pkt 27fpkt"];
1264--6235[label="0.25;1pkt 1fpkt"];
1264--6273[label="0.166667;1pkt 1fpkt"];
1264--7308[label="0.710526;27pkt 27fpkt"];
1264--7687[label="0.25;1pkt 1fpkt"];
1264--7707[label="0.166667;1pkt 1fpkt"];
1264--8222[label="0.72973;27pkt 27fpkt"];
2132--3844[label="1;4pkt 4fpkt"];
2132--6235[label="1;4pkt 4fpkt"];
2132--7687[label="1;4pkt 4fpkt"];
3844--6235[label="1;4pkt 4fpkt"];
3844--7687[label="1;4pkt 4fpkt"];
3901--6273[label="1;5pkt 5fpkt"];
3901--7707[label="1;5pkt 5fpkt"];
5586--7308[label="1;38pkt 38fpkt"];
5586--8222[label="1;37pkt 37fpkt"];
6235--7687[label="1;4pkt 4fpkt"];
6273--7707[label="1;6pkt 6fpkt"];
7308--8222[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="52.213.73.79" src_ip="128.65.69.200" src_port="80"/>
      <filter dst_ip="52.213.73.79" src_ip="128.65.238.101" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.217.73.201"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
5603[label="220.130.90.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7318[label="220.130.90.201;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.130.90.201:2104, 175.199.142.152:50251}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50251: (50%)&lt;BR/&gt; 2104: (50%)&gt;];
}
5603--7318[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="50251" src_ip="220.130.90.201" src_port="2104"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
5617[label="176.196.93.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7324[label="176.196.93.202;1pkt 1fpkt", shape=invtriangle, color=brown];
8233[label="176.196.93.202;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.93.202:22, 219.5.199.201:42775}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42775: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
5617--7324[label="1;1pkt 1fpkt"];
5617--8233[label="1;1pkt 1fpkt"];
7324--8233[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42775" src_ip="176.196.93.202" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.139.144.202"/>
    </slice>
    <from sec="1118034482" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.79.155.202"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.171.81.203"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="142.79.186.203"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
5652[label="197.2.2.205;71pkt 71fpkt", shape=pentagon, color=darkviolet];
7342[label="197.2.2.205;71pkt 71fpkt", shape=invtriangle, color=brown];
8242[label="197.2.2.205;71pkt 71fpkt", shape=invhouse, color=bisque];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.2.2.205:*, *:1433}[98.5915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.2958%)&lt;BR/&gt; 2337: (1.40845%)&lt;BR/&gt; 4961: (0.704225%)&lt;BR/&gt; 4868: (0.704225%)&lt;BR/&gt; 4813: (0.704225%)&gt;];
}
5652--7342[label="1;71pkt 71fpkt"];
5652--8242[label="1;71pkt 71fpkt"];
7342--8242[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="197.2.2.205"/>
    </slice>
    <from sec="1118034177" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
5654[label="133.167.32.205;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7343[label="133.167.32.205;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.32.205:*, 211.109.195.127:5050}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.75%)&lt;BR/&gt; 9370: (6.25%)&lt;BR/&gt; 1073: (6.25%)&lt;BR/&gt; 1063: (6.25%)&lt;BR/&gt; 1062: (6.25%)&gt;];
}
5654--7343[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="211.109.195.127" dst_port="5050" src_ip="133.167.32.205"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.117.110.205"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
5662[label="55.184.56.206;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7346[label="55.184.56.206;12pkt 12fpkt", shape=invtriangle, color=brown];
8244[label="55.184.56.206;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.184.56.206:80, 133.167.42.120:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65375: (4.16667%)&lt;BR/&gt; 64504: (4.16667%)&lt;BR/&gt; 64169: (4.16667%)&lt;BR/&gt; 63088: (4.16667%)&gt;];
}
5662--7346[label="1;12pkt 12fpkt"];
5662--8244[label="1;12pkt 12fpkt"];
7346--8244[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="133.167.42.120" src_ip="55.184.56.206" src_port="80"/>
    </slice>
    <from sec="1118034820" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
742[label="197.77.219.42;s;66pkt 66fpkt", shape=diamond, color=yellow];
1281[label="52.213.72.7;d;74pkt 74fpkt", shape=diamond, color=yellow];
2331[label="183.174.84.2;s;25pkt 25fpkt", shape=diamond, color=yellow];
2811[label="197.77.219.42;s;39pkt 39fpkt", shape=hexagon, color=black];
3528[label="183.174.84.2;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3840[label="183.174.84.27;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3993[label="197.77.219.42;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6331[label="197.77.219.42;70pkt 70fpkt", shape=invtriangle, color=brown];
7737[label="197.77.219.42;69pkt 69fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.219.42:80, *:*}[43.6709%]&lt;BR/&gt;{183.174.84.27:80, 52.213.72.7:*}[28.481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2944%)&lt;BR/&gt; 0: (1.41129%)&lt;BR/&gt; 57574: (0.604839%)&lt;BR/&gt; 57341: (0.604839%)&lt;BR/&gt; 56954: (0.604839%)&gt;];
}
742--1281[label="0.424242;28pkt 28fpkt"];
742--2811[label="1;39pkt 39fpkt"];
742--3477[label="0.0909091;6pkt 6fpkt"];
742--3495[label="0.0909091;6pkt 6fpkt"];
742--3993[label="0.984848;65pkt 65fpkt"];
742--6331[label="1;66pkt 66fpkt"];
742--7737[label="0.984848;65pkt 65fpkt"];
1281--2331[label="0.04;1pkt 1fpkt"];
1281--2811[label="0.307692;12pkt 12fpkt"];
1281--3477[label="0.0810811;6pkt 6fpkt"];
1281--3495[label="0.0810811;6pkt 6fpkt"];
1281--3840[label="0.711864;42pkt 42fpkt"];
1281--3993[label="0.405797;28pkt 28fpkt"];
1281--5162[label="0.0322581;1pkt 1fpkt"];
1281--6331[label="0.4;28pkt 28fpkt"];
1281--7050[label="0.03125;1pkt 1fpkt"];
1281--7737[label="0.405797;28pkt 28fpkt"];
1281--8100[label="0.03125;1pkt 1fpkt"];
2331--3477[label="0.04;1pkt 1fpkt"];
2331--3495[label="0.04;1pkt 1fpkt"];
2331--3528[label="0.96;24pkt 24fpkt"];
2811--3477[label="0.153846;6pkt 6fpkt"];
2811--3495[label="0.153846;6pkt 6fpkt"];
2811--3993[label="1;39pkt 39fpkt"];
2811--6331[label="1;39pkt 39fpkt"];
2811--7737[label="1;39pkt 39fpkt"];
3993--6331[label="1;69pkt 69fpkt"];
3993--7737[label="1;69pkt 69fpkt"];
6331--7737[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="197.77.219.42" src_port="80"/>
      <filter dst_ip="52.213.72.7" src_ip="183.174.84.27" src_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.10.74.206"/>
    </slice>
    <from sec="1118034455" usec="0"/>
    <to sec="1118034483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.56.35.208"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.146.101.209"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
5698[label="176.196.129.209;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7370[label="176.196.129.209;17pkt 17fpkt", shape=invtriangle, color=brown];
8257[label="176.196.129.209;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.129.209:*, 52.21.45.20:80}[29.4118%]&lt;BR/&gt;{176.196.129.209:*, 53.160.131.176:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47%)&lt;BR/&gt; 2813: (3%)&lt;BR/&gt; 2812: (3%)&lt;BR/&gt; 2811: (3%)&lt;BR/&gt; 2810: (3%)&gt;];
}
5698--7370[label="1;17pkt 17fpkt"];
5698--8257[label="1;16pkt 16fpkt"];
7370--8257[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="52.21.45.20" dst_port="80" src_ip="176.196.129.209"/>
      <filter dst_ip="53.160.131.176" dst_port="80" src_ip="176.196.129.209"/>
    </slice>
    <from sec="1118034873" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
5719[label="183.82.34.212;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7383[label="183.82.34.212;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.34.212:4768, 208.229.246.41:80}[33.3333%]&lt;BR/&gt;{183.82.34.212:4767, 193.203.217.43:80}[33.3333%]&lt;BR/&gt;{183.82.34.212:4762, 210.240.149.204:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4768: (16.6667%)&lt;BR/&gt; 4767: (16.6667%)&lt;BR/&gt; 4762: (16.6667%)&gt;];
}
5719--7383[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="210.240.149.204" dst_port="80" src_ip="183.82.34.212" src_port="4762"/>
      <filter dst_ip="193.203.217.43" dst_port="80" src_ip="183.82.34.212" src_port="4767"/>
      <filter dst_ip="208.229.246.41" dst_port="80" src_ip="183.82.34.212" src_port="4768"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
5721[label="52.84.37.212;231pkt 231fpkt", shape=pentagon, color=darkviolet];
7385[label="52.84.37.212;230pkt 230fpkt", shape=invtriangle, color=brown];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.84.37.212:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51286: (0.21692%)&lt;BR/&gt; 51285: (0.21692%)&lt;BR/&gt; 51284: (0.21692%)&lt;BR/&gt; 51283: (0.21692%)&gt;];
}
5721--7385[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="52.84.37.212"/>
    </slice>
    <from sec="1118034623" usec="0"/>
    <to sec="1118034659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.192.87.212"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
5736[label="197.77.200.213;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7395[label="197.77.200.213;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.200.213:*, 211.50.61.197:80}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1775: (2.7027%)&lt;BR/&gt; 1773: (2.7027%)&lt;BR/&gt; 1771: (2.7027%)&lt;BR/&gt; 1769: (2.7027%)&gt;];
}
5736--7395[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="211.50.61.197" dst_port="80" src_ip="197.77.200.213"/>
    </slice>
    <from sec="1118034059" usec="0"/>
    <to sec="1118034762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
5741[label="210.234.70.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7398[label="210.234.70.214;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.234.70.214:80, 197.66.101.200:39002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39002: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5741--7398[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.101.200" dst_port="39002" src_ip="210.234.70.214" src_port="80"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.237.109.214"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
5751[label="197.36.122.215;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7406[label="197.36.122.215;4pkt 4fpkt", shape=invtriangle, color=brown];
8275[label="197.36.122.215;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.36.122.215:80, 176.196.199.70:46086}[25%]&lt;BR/&gt;{197.36.122.215:80, 176.196.199.70:46093}[25%]&lt;BR/&gt;{197.36.122.215:80, 176.196.199.70:46094}[25%]&lt;BR/&gt;{197.36.122.215:80, 176.196.199.70:46095}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46095: (13.6364%)&lt;BR/&gt; 46094: (13.6364%)&lt;BR/&gt; 46093: (13.6364%)&lt;BR/&gt; 46086: (9.09091%)&gt;];
}
5751--7406[label="1;4pkt 4fpkt"];
5751--8275[label="1;3pkt 3fpkt"];
7406--8275[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.199.70" dst_port="46095" src_ip="197.36.122.215" src_port="80"/>
      <filter dst_ip="176.196.199.70" dst_port="46094" src_ip="197.36.122.215" src_port="80"/>
      <filter dst_ip="176.196.199.70" dst_port="46093" src_ip="197.36.122.215" src_port="80"/>
      <filter dst_ip="176.196.199.70" dst_port="46086" src_ip="197.36.122.215" src_port="80"/>
    </slice>
    <from sec="1118034613" usec="0"/>
    <to sec="1118034620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
5770[label="128.65.65.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7419[label="128.65.65.217;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.65.217:1085, 192.9.154.200:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1085: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
5770--7419[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.9.154.200" dst_port="443" src_ip="128.65.65.217" src_port="1085"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.189.69.218"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
5781[label="194.43.100.218;43pkt 43fpkt", shape=pentagon, color=darkviolet];
7424[label="194.43.100.218;43pkt 43fpkt", shape=invtriangle, color=brown];
8285[label="194.43.100.218;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.43.100.218:*, 128.65.157.65:80}[95.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1620: (1.16279%)&lt;BR/&gt; 1619: (1.16279%)&lt;BR/&gt; 1618: (1.16279%)&lt;BR/&gt; 1617: (1.16279%)&gt;];
}
5781--7424[label="1;43pkt 43fpkt"];
5781--8285[label="1;43pkt 43fpkt"];
7424--8285[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="128.65.157.65" dst_port="80" src_ip="194.43.100.218"/>
    </slice>
    <from sec="1118034179" usec="0"/>
    <to sec="1118034313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
1727[label="128.65.0.160;s;96pkt 96fpkt", shape=diamond, color=yellow];
1970[label="209.9.246.16;d;87pkt 87fpkt", shape=diamond, color=yellow];
2162[label="209.9.246.23;d;44pkt 44fpkt", shape=diamond, color=yellow];
2386[label="85.206.3.194;d;12pkt 12fpkt", shape=diamond, color=yellow];
3034[label="128.65.0.160;s;96pkt 96fpkt", shape=hexagon, color=black];
3721[label="183.82.34.17;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4652[label="176.196.176.109;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5160[label="128.65.0.160;97pkt 97fpkt", shape=pentagon, color=darkviolet];
5645[label="128.2.47.204;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5782[label="176.196.129.218;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6172[label="183.82.34.17;26pkt 26fpkt", shape=invtriangle, color=brown];
7049[label="128.65.0.160;96pkt 96fpkt", shape=invtriangle, color=brown];
7337[label="128.2.47.204;14pkt 14fpkt", shape=invtriangle, color=brown];
7425[label="176.196.129.218;25pkt 25fpkt", shape=invtriangle, color=brown];
7651[label="183.82.34.17;26pkt 26fpkt", shape=invhouse, color=bisque];
8099[label="128.65.0.160;96pkt 96fpkt", shape=invhouse, color=bisque];
8238[label="128.2.47.204;13pkt 13fpkt", shape=invhouse, color=bisque];
8286[label="176.196.129.218;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.0.160:*, 209.9.246.16:80}[48.8506%]&lt;BR/&gt;{*:*, 209.9.246.23:80}[25.2874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6372%)&lt;BR/&gt; 2367: (0.544135%)&lt;BR/&gt; 2366: (0.544135%)&lt;BR/&gt; 2364: (0.544135%)&lt;BR/&gt; 2363: (0.544135%)&gt;];
}
1727--1970[label="0.977011;85pkt 85fpkt"];
1727--2162[label="0.25;11pkt 11fpkt"];
1727--3034[label="1;96pkt 96fpkt"];
1727--5160[label="1;96pkt 96fpkt"];
1727--7049[label="0.989583;95pkt 95fpkt"];
1727--8099[label="0.989583;95pkt 95fpkt"];
1970--3034[label="0.977011;85pkt 85fpkt"];
1970--3485[label="0.0229885;2pkt 2fpkt"];
1970--3721[label="0.04;1pkt 1fpkt"];
1970--5160[label="0.977011;85pkt 85fpkt"];
1970--6172[label="0.0769231;2pkt 2fpkt"];
1970--7049[label="0.965517;84pkt 84fpkt"];
1970--7651[label="0.0769231;2pkt 2fpkt"];
1970--8099[label="0.965517;84pkt 84fpkt"];
2162--3034[label="0.25;11pkt 11fpkt"];
2162--3485[label="0.204545;9pkt 9fpkt"];
2162--3721[label="0.24;6pkt 6fpkt"];
2162--4652[label="1;11pkt 11fpkt"];
2162--5160[label="0.272727;12pkt 12fpkt"];
2162--5645[label="1;13pkt 13fpkt"];
2162--6172[label="0.230769;6pkt 6fpkt"];
2162--7049[label="0.272727;12pkt 12fpkt"];
2162--7337[label="1;14pkt 14fpkt"];
2162--7651[label="0.230769;6pkt 6fpkt"];
2162--8099[label="0.272727;12pkt 12fpkt"];
2162--8238[label="1;13pkt 13fpkt"];
2386--3485[label="0.166667;2pkt 2fpkt"];
2386--3721[label="0.416667;5pkt 5fpkt"];
2386--5782[label="0.583333;7pkt 7fpkt"];
2386--6172[label="0.416667;5pkt 5fpkt"];
2386--7425[label="0.583333;7pkt 7fpkt"];
2386--7651[label="0.416667;5pkt 5fpkt"];
2386--8286[label="0.583333;7pkt 7fpkt"];
3034--5160[label="1;96pkt 96fpkt"];
3034--7049[label="0.989583;95pkt 95fpkt"];
3034--8099[label="0.989583;95pkt 95fpkt"];
3721--6172[label="1;25pkt 25fpkt"];
3721--7651[label="1;25pkt 25fpkt"];
5160--7049[label="1;96pkt 96fpkt"];
5160--8099[label="1;96pkt 96fpkt"];
5645--7337[label="1;13pkt 13fpkt"];
5645--8238[label="1;13pkt 13fpkt"];
5782--7425[label="1;25pkt 25fpkt"];
5782--8286[label="1;25pkt 25fpkt"];
6172--7651[label="1;26pkt 26fpkt"];
7049--8099[label="1;96pkt 96fpkt"];
7337--8238[label="1;13pkt 13fpkt"];
7425--8286[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="209.9.246.23" dst_port="80"/>
      <filter dst_ip="209.9.246.16" dst_port="80" src_ip="128.65.0.160"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
5783[label="176.197.177.218;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7426[label="176.197.177.218;25pkt 25fpkt", shape=invtriangle, color=brown];
8287[label="176.197.177.218;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.177.218:53, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24%)&lt;BR/&gt; 25: (16%)&lt;BR/&gt; 113: (8%)&lt;BR/&gt; 3117: (4%)&lt;BR/&gt; 58520: (2%)&gt;];
}
5783--7426[label="1;25pkt 25fpkt"];
5783--8287[label="1;25pkt 25fpkt"];
7426--8287[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.177.218" src_port="53"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.206.176.219"/>
    </slice>
    <from sec="1118034014" usec="0"/>
    <to sec="1118034886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
5797[label="176.196.156.220;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7436[label="176.196.156.220;22pkt 22fpkt", shape=invtriangle, color=brown];
8292[label="176.196.156.220;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.156.220:21069, *:*}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21069: (43.1818%)&lt;BR/&gt; 80: (4.54545%)&lt;BR/&gt; 65028: (2.27273%)&lt;BR/&gt; 62233: (2.27273%)&lt;BR/&gt; 61511: (2.27273%)&gt;];
}
5797--7436[label="1;22pkt 22fpkt"];
5797--8292[label="1;22pkt 22fpkt"];
7436--8292[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="176.196.156.220" src_port="21069"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
5804[label="176.196.93.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7440[label="176.196.93.221;1pkt 1fpkt", shape=invtriangle, color=brown];
8294[label="176.196.93.221;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.93.221:22, 219.5.199.201:42772}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42772: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
5804--7440[label="1;1pkt 1fpkt"];
5804--8294[label="1;1pkt 1fpkt"];
7440--8294[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42772" src_ip="176.196.93.221" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
5807[label="87.12.162.221;179pkt 179fpkt", shape=pentagon, color=darkviolet];
7442[label="87.12.162.221;179pkt 179fpkt", shape=invtriangle, color=brown];
8295[label="87.12.162.221;179pkt 179fpkt", shape=invhouse, color=bisque];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.12.162.221:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5807--7442[label="1;179pkt 179fpkt"];
5807--8295[label="1;179pkt 179fpkt"];
7442--8295[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="87.12.162.221" src_port="1028"/>
    </slice>
    <from sec="1118034025" usec="0"/>
    <to sec="1118034059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.182.129.222"/>
    </slice>
    <from sec="1118034122" usec="0"/>
    <to sec="1118034236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
5815[label="197.77.47.223;49pkt 49fpkt", shape=pentagon, color=darkviolet];
7448[label="197.77.47.223;49pkt 49fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.47.223:80, 52.213.72.4:*}[97.9592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60791: (1.02041%)&lt;BR/&gt; 60314: (1.02041%)&lt;BR/&gt; 59986: (1.02041%)&lt;BR/&gt; 59677: (1.02041%)&gt;];
}
5815--7448[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="52.213.72.4" src_ip="197.77.47.223" src_port="80"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.155.52.225"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
5831[label="216.212.121.225;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7458[label="216.212.121.225;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.121.225:5050, 175.199.163.110:2672}[33.3333%]&lt;BR/&gt;{216.212.121.225:5050, 175.199.221.216:1063}[33.3333%]&lt;BR/&gt;{216.212.121.225:5050, 175.199.221.216:1074}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 2672: (16.6667%)&lt;BR/&gt; 1074: (16.6667%)&lt;BR/&gt; 1063: (16.6667%)&gt;];
}
5831--7458[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.221.216" dst_port="1074" src_ip="216.212.121.225" src_port="5050"/>
      <filter dst_ip="175.199.221.216" dst_port="1063" src_ip="216.212.121.225" src_port="5050"/>
      <filter dst_ip="175.199.163.110" dst_port="2672" src_ip="216.212.121.225" src_port="5050"/>
    </slice>
    <from sec="1118034018" usec="0"/>
    <to sec="1118034874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
5846[label="222.156.138.227;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7467[label="222.156.138.227;18pkt 18fpkt", shape=invtriangle, color=brown];
8310[label="222.156.138.227;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.156.138.227:*, 175.199.142.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31219: (2.88462%)&lt;BR/&gt; 31214: (2.88462%)&lt;BR/&gt; 30540: (2.88462%)&lt;BR/&gt; 30539: (2.88462%)&gt;];
}
5846--7467[label="1;17pkt 17fpkt"];
5846--8310[label="1;17pkt 17fpkt"];
7467--8310[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="222.156.138.227"/>
    </slice>
    <from sec="1118034837" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
5850[label="196.153.0.228;476pkt 476fpkt", shape=pentagon, color=darkviolet];
7470[label="196.153.0.228;475pkt 475fpkt", shape=invtriangle, color=brown];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.153.0.228:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3578: (0.315457%)&lt;BR/&gt; 4354: (0.210305%)&lt;BR/&gt; 4130: (0.210305%)&lt;BR/&gt; 4097: (0.210305%)&gt;];
}
5850--7470[label="1;475pkt 475fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="196.153.0.228"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
5857[label="176.196.95.228;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7473[label="176.196.95.228;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.228:22, 219.5.199.201:42501}[50%]&lt;BR/&gt;{176.196.95.228:22, 219.5.199.201:42818}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42818: (25%)&lt;BR/&gt; 42501: (25%)&gt;];
}
5857--7473[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42818" src_ip="176.196.95.228" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42501" src_ip="176.196.95.228" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
5859[label="196.65.180.228;114pkt 114fpkt", shape=pentagon, color=darkviolet];
7475[label="196.65.180.228;115pkt 115fpkt", shape=invtriangle, color=brown];
8311[label="196.65.180.228;114pkt 114fpkt", shape=invhouse, color=bisque];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.65.180.228:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5859--7475[label="1;114pkt 114fpkt"];
5859--8311[label="1;114pkt 114fpkt"];
7475--8311[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.65.180.228" src_port="1025"/>
    </slice>
    <from sec="1118034077" usec="0"/>
    <to sec="1118034105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
5860[label="176.196.180.228;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7476[label="176.196.180.228;21pkt 21fpkt", shape=invtriangle, color=brown];
8312[label="176.196.180.228;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.180.228:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3359: (2.38095%)&lt;BR/&gt; 3355: (2.38095%)&lt;BR/&gt; 3322: (2.38095%)&lt;BR/&gt; 3321: (2.38095%)&gt;];
}
5860--7476[label="1;21pkt 21fpkt"];
5860--8312[label="1;21pkt 21fpkt"];
7476--8312[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="176.196.180.228"/>
    </slice>
    <from sec="1118034704" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.11.111.232"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
5908[label="176.196.198.233;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7505[label="176.196.198.233;20pkt 20fpkt", shape=invtriangle, color=brown];
8328[label="176.196.198.233;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.198.233:*, 198.69.142.172:80}[33.3333%]&lt;BR/&gt;{176.196.198.233:*, 198.69.142.175:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50797: (4.83871%)&lt;BR/&gt; 50834: (2.41935%)&lt;BR/&gt; 50823: (2.41935%)&lt;BR/&gt; 50817: (2.41935%)&gt;];
}
5908--7505[label="1;20pkt 20fpkt"];
5908--8328[label="1;21pkt 21fpkt"];
7505--8328[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="198.69.142.175" dst_port="80" src_ip="176.196.198.233"/>
      <filter dst_ip="198.69.142.172" dst_port="80" src_ip="176.196.198.233"/>
    </slice>
    <from sec="1118034692" usec="0"/>
    <to sec="1118034837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
5918[label="176.196.95.234;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7510[label="176.196.95.234;3pkt 3fpkt", shape=invtriangle, color=brown];
8332[label="176.196.95.234;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.95.234:22, 219.5.199.201:42750}[33.3333%]&lt;BR/&gt;{176.196.95.234:22, 219.5.199.201:42815}[33.3333%]&lt;BR/&gt;{176.196.95.234:22, 219.5.199.201:42867}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42867: (16.6667%)&lt;BR/&gt; 42815: (16.6667%)&lt;BR/&gt; 42750: (16.6667%)&gt;];
}
5918--7510[label="1;3pkt 3fpkt"];
5918--8332[label="1;3pkt 3fpkt"];
7510--8332[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.5.199.201" dst_port="42867" src_ip="176.196.95.234" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42815" src_ip="176.196.95.234" src_port="22"/>
      <filter dst_ip="219.5.199.201" dst_port="42750" src_ip="176.196.95.234" src_port="22"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
5919[label="128.65.120.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7511[label="128.65.120.234;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.120.234:2551, 52.162.96.216:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2551: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5919--7511[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="52.162.96.216" dst_port="80" src_ip="128.65.120.234" src_port="2551"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
5923[label="176.196.1.235;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7514[label="176.196.1.235;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.1.235:*, 214.236.218.123:80}[47.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13390: (2.22222%)&lt;BR/&gt; 13389: (2.22222%)&lt;BR/&gt; 13386: (2.22222%)&lt;BR/&gt; 13385: (2.22222%)&gt;];
}
5923--7514[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="214.236.218.123" dst_port="80" src_ip="176.196.1.235"/>
    </slice>
    <from sec="1118034283" usec="0"/>
    <to sec="1118034778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
5925[label="218.181.43.235;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7515[label="218.181.43.235;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.181.43.235:*, 175.199.142.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3165: (5.55556%)&lt;BR/&gt; 3164: (5.55556%)&lt;BR/&gt; 3163: (5.55556%)&lt;BR/&gt; 3162: (5.55556%)&gt;];
}
5925--7515[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="218.181.43.235"/>
    </slice>
    <from sec="1118034849" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.147.193.235"/>
    </slice>
    <from sec="1118034089" usec="0"/>
    <to sec="1118034188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.145.227.236"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.229.101.239"/>
    </slice>
    <from sec="1118034653" usec="0"/>
    <to sec="1118034828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.241.210.239"/>
    </slice>
    <from sec="1118034071" usec="0"/>
    <to sec="1118034140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.233.2.240"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.62.24.240"/>
    </slice>
    <from sec="1118034756" usec="0"/>
    <to sec="1118034820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
5954[label="219.76.99.240;131pkt 131fpkt", shape=pentagon, color=darkviolet];
7536[label="219.76.99.240;130pkt 130fpkt", shape=invtriangle, color=brown];
8345[label="219.76.99.240;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.76.99.240:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5954--7536[label="1;130pkt 130fpkt"];
5954--8345[label="1;130pkt 130fpkt"];
7536--8345[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.76.99.240" src_port="1025"/>
    </slice>
    <from sec="1118034108" usec="0"/>
    <to sec="1118034137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
5957[label="176.196.207.240;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7538[label="176.196.207.240;28pkt 28fpkt", shape=invtriangle, color=brown];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.207.240:*, 178.122.107.20:80}[32.1429%]&lt;BR/&gt;{176.196.207.240:*, 215.20.64.19:443}[32.1429%]&lt;BR/&gt;{176.196.207.240:*, 178.122.106.70:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.6364%)&lt;BR/&gt; 443: (16.3636%)&lt;BR/&gt; 49821: (1.81818%)&lt;BR/&gt; 49820: (1.81818%)&lt;BR/&gt; 49819: (1.81818%)&gt;];
}
5957--7538[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="215.20.64.19" dst_port="443" src_ip="176.196.207.240"/>
      <filter dst_ip="178.122.107.20" dst_port="80" src_ip="176.196.207.240"/>
      <filter dst_ip="178.122.106.70" dst_port="80" src_ip="176.196.207.240"/>
    </slice>
    <from sec="1118034414" usec="0"/>
    <to sec="1118034634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
556[label="176.197.67.132;s;968pkt 968fpkt", shape=diamond, color=yellow];
562[label="220.130.28.122;d;2pkt 2fpkt", shape=diamond, color=yellow];
587[label="219.188.217.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
614[label="176.197.97.32;s;185pkt 185fpkt", shape=diamond, color=yellow];
790[label="221.42.163.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
824[label="219.32.18.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="220.131.5.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
1150[label="220.169.118.12;d;7pkt 7fpkt", shape=diamond, color=yellow];
1261[label="39.67.77.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1380[label="87.77.135.228;d;7pkt 7fpkt", shape=diamond, color=yellow];
1514[label="222.141.186.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
1522[label="193.211.206.126;d;12pkt 12fpkt", shape=diamond, color=yellow];
1610[label="51.99.147.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
1638[label="221.163.100.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1865[label="39.84.219.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
1888[label="192.9.148.0;d;160pkt 160fpkt", shape=diamond, color=yellow];
2127[label="220.133.40.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
2289[label="219.192.250.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
2449[label="222.214.235.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
3132[label="221.42.163.145;d;1pkt 1fpkt", shape=hexagon, color=black];
3888[label="176.197.97.32;198pkt 198fpkt", shape=pentagon, color=darkviolet];
3938[label="176.197.32.37;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4882[label="176.197.67.132;1067pkt 1067fpkt", shape=pentagon, color=darkviolet];
5966[label="176.197.65.242;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6263[label="176.197.97.32;199pkt 199fpkt", shape=invtriangle, color=brown];
6297[label="176.197.32.37;46pkt 46fpkt", shape=invtriangle, color=brown];
6884[label="176.197.67.132;1067pkt 1067fpkt", shape=invtriangle, color=brown];
7544[label="176.197.65.242;60pkt 60fpkt", shape=invtriangle, color=brown];
7720[label="176.197.32.37;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.197.67.132:*, *:*}[73.1507%]&lt;BR/&gt;{*:*, *:80}[28.0822%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.001%)&lt;BR/&gt; 16881: (6.28923%)&lt;BR/&gt; 9305: (1.12265%)&lt;BR/&gt; 20702: (0.953646%)&lt;BR/&gt; 18858: (0.820859%)&gt;];
}
556--562[label="1;2pkt 2fpkt"];
556--587[label="1;1pkt 1fpkt"];
556--790[label="1;1pkt 1fpkt"];
556--824[label="1;1pkt 1fpkt"];
556--971[label="1;1pkt 1fpkt"];
556--1114[label="0.02;3pkt 3fpkt"];
556--1150[label="1;7pkt 7fpkt"];
556--1261[label="1;1pkt 1fpkt"];
556--1270[label="0.00892857;1pkt 1fpkt"];
556--1343[label="0.0119048;2pkt 2fpkt"];
556--1380[label="1;7pkt 7fpkt"];
556--1514[label="1;1pkt 1fpkt"];
556--1548[label="0.00347222;2pkt 2fpkt"];
556--1610[label="1;1pkt 1fpkt"];
556--1638[label="1;1pkt 1fpkt"];
556--1865[label="1;1pkt 1fpkt"];
556--1888[label="0.025;4pkt 4fpkt"];
556--2094[label="0.0298507;4pkt 4fpkt"];
556--2121[label="0.0212766;1pkt 1fpkt"];
556--2127[label="1;1pkt 1fpkt"];
556--2240[label="0.0120482;1pkt 1fpkt"];
556--2289[label="1;1pkt 1fpkt"];
556--2449[label="1;1pkt 1fpkt"];
556--3132[label="1;1pkt 1fpkt"];
556--3478[label="0.00103306;1pkt 1fpkt"];
556--3485[label="0.00103306;1pkt 1fpkt"];
556--4882[label="0.998967;967pkt 967fpkt"];
556--6884[label="0.998967;967pkt 967fpkt"];
562--4882[label="1;2pkt 2fpkt"];
562--6884[label="1;2pkt 2fpkt"];
587--4882[label="1;1pkt 1fpkt"];
587--6884[label="1;1pkt 1fpkt"];
614--706[label="0.0162162;3pkt 3fpkt"];
614--798[label="0.0277778;2pkt 2fpkt"];
614--818[label="0.00540541;1pkt 1fpkt"];
614--852[label="0.00540541;1pkt 1fpkt"];
614--999[label="0.118919;22pkt 22fpkt"];
614--1133[label="0.0648649;12pkt 12fpkt"];
614--1163[label="0.025;1pkt 1fpkt"];
614--1379[label="0.0702703;13pkt 13fpkt"];
614--1522[label="0.0833333;1pkt 1fpkt"];
614--1548[label="0.0108108;2pkt 2fpkt"];
614--1591[label="0.0212766;1pkt 1fpkt"];
614--1612[label="0.00819672;1pkt 1fpkt"];
614--1833[label="0.00806452;1pkt 1fpkt"];
614--1842[label="0.0163934;2pkt 2fpkt"];
614--1888[label="0.1625;26pkt 26fpkt"];
614--2013[label="0.0294118;2pkt 2fpkt"];
614--2094[label="0.0223881;3pkt 3fpkt"];
614--2095[label="0.0294118;1pkt 1fpkt"];
614--2280[label="0.0140845;1pkt 1fpkt"];
614--2495[label="0.142857;7pkt 7fpkt"];
614--3158[label="0.0322581;1pkt 1fpkt"];
614--3197[label="0.0327869;2pkt 2fpkt"];
614--3250[label="0.00540541;1pkt 1fpkt"];
614--3478[label="0.0378378;7pkt 7fpkt"];
614--3485[label="0.140541;26pkt 26fpkt"];
614--3888[label="0.994595;184pkt 184fpkt"];
614--6263[label="1;185pkt 185fpkt"];
790--3132[label="1;1pkt 1fpkt"];
790--4882[label="1;1pkt 1fpkt"];
790--6884[label="1;1pkt 1fpkt"];
824--4882[label="1;1pkt 1fpkt"];
824--6884[label="1;1pkt 1fpkt"];
971--4882[label="1;1pkt 1fpkt"];
971--6884[label="1;1pkt 1fpkt"];
1150--4882[label="1;7pkt 7fpkt"];
1150--6884[label="1;7pkt 7fpkt"];
1261--4882[label="1;1pkt 1fpkt"];
1261--6884[label="1;1pkt 1fpkt"];
1380--4882[label="1;7pkt 7fpkt"];
1380--6884[label="1;7pkt 7fpkt"];
1514--4882[label="1;1pkt 1fpkt"];
1514--6884[label="1;1pkt 1fpkt"];
1522--3118[label="0.0833333;1pkt 1fpkt"];
1522--3888[label="0.0833333;1pkt 1fpkt"];
1522--4314[label="0.166667;1pkt 1fpkt"];
1522--4398[label="0.0833333;1pkt 1fpkt"];
1522--4510[label="0.0833333;1pkt 1fpkt"];
1522--6263[label="0.0833333;1pkt 1fpkt"];
1522--6539[label="0.166667;1pkt 1fpkt"];
1522--6663[label="0.0833333;1pkt 1fpkt"];
1610--4882[label="1;1pkt 1fpkt"];
1610--6884[label="1;1pkt 1fpkt"];
1638--4882[label="1;1pkt 1fpkt"];
1638--6884[label="1;1pkt 1fpkt"];
1865--4882[label="1;1pkt 1fpkt"];
1865--6884[label="1;1pkt 1fpkt"];
1888--2136[label="0.140351;8pkt 8fpkt"];
1888--2355[label="0.0941176;8pkt 8fpkt"];
1888--2653[label="0.0125;2pkt 2fpkt"];
1888--3353[label="0.0784314;8pkt 8fpkt"];
1888--3478[label="0.025;4pkt 4fpkt"];
1888--3485[label="0.05625;9pkt 9fpkt"];
1888--3647[label="0.133333;12pkt 12fpkt"];
1888--3888[label="0.1625;26pkt 26fpkt"];
1888--3938[label="0.133333;6pkt 6fpkt"];
1888--4756[label="0.00625;1pkt 1fpkt"];
1888--4882[label="0.025;4pkt 4fpkt"];
1888--5327[label="0.0125;2pkt 2fpkt"];
1888--5355[label="0.1125;18pkt 18fpkt"];
1888--5377[label="0.025;4pkt 4fpkt"];
1888--5966[label="0.803279;49pkt 49fpkt"];
1888--6263[label="0.1625;26pkt 26fpkt"];
1888--6297[label="0.130435;6pkt 6fpkt"];
1888--6815[label="0.00625;1pkt 1fpkt"];
1888--6884[label="0.025;4pkt 4fpkt"];
1888--7173[label="0.1125;18pkt 18fpkt"];
1888--7186[label="0.025;4pkt 4fpkt"];
1888--7544[label="0.816667;49pkt 49fpkt"];
1888--7720[label="0.133333;6pkt 6fpkt"];
1888--7979[label="0.00625;1pkt 1fpkt"];
1888--8154[label="0.0125;2pkt 2fpkt"];
2127--4882[label="1;1pkt 1fpkt"];
2127--6884[label="1;1pkt 1fpkt"];
2289--4882[label="1;1pkt 1fpkt"];
2289--6884[label="1;1pkt 1fpkt"];
2449--4882[label="1;1pkt 1fpkt"];
2449--6884[label="1;1pkt 1fpkt"];
3132--4882[label="1;1pkt 1fpkt"];
3132--6884[label="1;1pkt 1fpkt"];
3888--6263[label="1;198pkt 198fpkt"];
3938--6297[label="1;45pkt 45fpkt"];
3938--7720[label="1;45pkt 45fpkt"];
4882--6884[label="1;1067pkt 1067fpkt"];
5966--7544[label="1;60pkt 60fpkt"];
6297--7720[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter src_ip="176.197.67.132"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
5968[label="176.196.154.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7546[label="176.196.154.242;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.154.242:25, 221.8.138.37:8116}[50%]&lt;BR/&gt;{176.196.154.242:34778, 85.10.41.127:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 34778: (25%)&lt;BR/&gt; 8116: (25%)&gt;];
}
5968--7546[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.10.41.127" dst_port="25" src_ip="176.196.154.242" src_port="34778"/>
      <filter dst_ip="221.8.138.37" dst_port="8116" src_ip="176.196.154.242" src_port="25"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
5973[label="218.112.64.243;300pkt 300fpkt", shape=pentagon, color=darkviolet];
7551[label="218.112.64.243;299pkt 299fpkt", shape=invtriangle, color=brown];
8349[label="218.112.64.243;299pkt 299fpkt", shape=invhouse, color=bisque];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.112.64.243:1026, *:137}[59.6667%]&lt;BR/&gt;{218.112.64.243:1034, *:137}[40.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (29.7884%)&lt;BR/&gt; 1034: (20.2116%)&gt;];
}
5973--7551[label="1;299pkt 299fpkt"];
5973--8349[label="1;299pkt 299fpkt"];
7551--8349[label="1;299pkt 299fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.112.64.243" src_port="1026"/>
      <filter dst_port="137" src_ip="218.112.64.243" src_port="1034"/>
    </slice>
    <from sec="1118034687" usec="0"/>
    <to sec="1118034847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.139.86.244"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
5981[label="209.60.198.244;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7554[label="209.60.198.244;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.60.198.244:80, 176.196.44.61:3616}[25%]&lt;BR/&gt;{209.60.198.244:80, 176.196.44.61:3617}[25%]&lt;BR/&gt;{209.60.198.244:80, 176.196.44.61:3622}[25%]&lt;BR/&gt;{209.60.198.244:80, 176.196.44.61:3623}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3623: (12.5%)&lt;BR/&gt; 3622: (12.5%)&lt;BR/&gt; 3617: (12.5%)&lt;BR/&gt; 3616: (12.5%)&gt;];
}
5981--7554[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.196.44.61" dst_port="3623" src_ip="209.60.198.244" src_port="80"/>
      <filter dst_ip="176.196.44.61" dst_port="3622" src_ip="209.60.198.244" src_port="80"/>
      <filter dst_ip="176.196.44.61" dst_port="3617" src_ip="209.60.198.244" src_port="80"/>
      <filter dst_ip="176.196.44.61" dst_port="3616" src_ip="209.60.198.244" src_port="80"/>
    </slice>
    <from sec="1118034889" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697589,2.14692,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
2501[label="183.82.3.89;d;96pkt 96fpkt", shape=diamond, color=yellow];
2542[label="143.56.19.240;s;49pkt 49fpkt", shape=diamond, color=yellow];
5459[label="87.1.21.186;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5984[label="221.165.15.245;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7232[label="87.1.21.186;45pkt 45fpkt", shape=invtriangle, color=brown];
7556[label="221.165.15.245;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.1.21.186:*, *:80}[37.0968%]&lt;BR/&gt;{143.56.19.240:*, 183.82.3.89:80}[36.2903%]&lt;BR/&gt;{*:*, 183.82.3.23:80}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60271: (0.553506%)&lt;BR/&gt; 60270: (0.553506%)&lt;BR/&gt; 58291: (0.553506%)&lt;BR/&gt; 58290: (0.553506%)&gt;];
}
2501--2542[label="0.918367;45pkt 45fpkt"];
2501--3478[label="0.0104167;1pkt 1fpkt"];
2501--3485[label="0.0625;6pkt 6fpkt"];
2501--5459[label="0.478261;22pkt 22fpkt"];
2501--5984[label="1;18pkt 18fpkt"];
2501--7232[label="0.488889;22pkt 22fpkt"];
2501--7556[label="1;17pkt 17fpkt"];
2542--3478[label="0.0612245;3pkt 3fpkt"];
2542--3485[label="0.0612245;3pkt 3fpkt"];
5459--7232[label="1;45pkt 45fpkt"];
5984--7556[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="87.1.21.186"/>
      <filter dst_ip="183.82.3.23" dst_port="80"/>
      <filter dst_ip="183.82.3.89" dst_port="80" src_ip="143.56.19.240"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.149.189.245"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
5991[label="53.116.239.245;111pkt 111fpkt", shape=pentagon, color=darkviolet];
7561[label="53.116.239.245;110pkt 110fpkt", shape=invtriangle, color=brown];
8353[label="53.116.239.245;111pkt 111fpkt", shape=invhouse, color=bisque];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.116.239.245:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3525: (0.903614%)&lt;BR/&gt; 2512: (0.903614%)&lt;BR/&gt; 4958: (0.451807%)&lt;BR/&gt; 4794: (0.451807%)&gt;];
}
5991--7561[label="1;110pkt 110fpkt"];
5991--8353[label="1;111pkt 111fpkt"];
7561--8353[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="53.116.239.245"/>
    </slice>
    <from sec="1118034020" usec="0"/>
    <to sec="1118034890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
5994[label="87.29.171.246;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7563[label="87.29.171.246;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.29.171.246:1319, 183.82.175.10:80}[33.3333%]&lt;BR/&gt;{87.29.171.246:1392, 183.82.127.84:80}[33.3333%]&lt;BR/&gt;{87.29.171.246:4586, 183.82.10.108:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4586: (16.6667%)&lt;BR/&gt; 1392: (16.6667%)&lt;BR/&gt; 1319: (16.6667%)&gt;];
}
5994--7563[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="183.82.10.108" dst_port="80" src_ip="87.29.171.246" src_port="4586"/>
      <filter dst_ip="183.82.127.84" dst_port="80" src_ip="87.29.171.246" src_port="1392"/>
      <filter dst_ip="183.82.175.10" dst_port="80" src_ip="87.29.171.246" src_port="1319"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.228.135.248"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
6001[label="221.58.20.249;218pkt 218fpkt", shape=pentagon, color=darkviolet];
7568[label="221.58.20.249;218pkt 218fpkt", shape=invtriangle, color=brown];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.58.20.249:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6001--7568[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.58.20.249" src_port="1026"/>
    </slice>
    <from sec="1118034484" usec="0"/>
    <to sec="1118034500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.209.49.250"/>
    </slice>
    <from sec="1118034101" usec="0"/>
    <to sec="1118034574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654642,2.16956,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
6013[label="128.65.34.251;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7578[label="128.65.34.251;40pkt 40fpkt", shape=invtriangle, color=brown];
8360[label="128.65.34.251;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.65.34.251:*, 214.128.115.112:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4519: (1.2605%)&lt;BR/&gt; 4518: (1.2605%)&lt;BR/&gt; 4517: (1.2605%)&lt;BR/&gt; 4516: (1.2605%)&gt;];
}
6013--7578[label="1;40pkt 40fpkt"];
6013--8360[label="1;39pkt 39fpkt"];
7578--8360[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="214.128.115.112" dst_port="80" src_ip="128.65.34.251"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.4478,2.19391,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
6019[label="86.240.221.251;119pkt 119fpkt", shape=pentagon, color=darkviolet];
7581[label="86.240.221.251;119pkt 119fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.240.221.251:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4436: (0.840336%)&lt;BR/&gt; 3939: (0.840336%)&lt;BR/&gt; 3657: (0.840336%)&lt;BR/&gt; 3499: (0.840336%)&gt;];
}
6019--7581[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="86.240.221.251"/>
    </slice>
    <from sec="1118034021" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.132.35.252"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.622726,2.27142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.167.64.252"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
483[label="184.236.11.96;d;274pkt 274fpkt", shape=diamond, color=yellow];
827[label="176.196.14.86;s;110pkt 110fpkt", shape=diamond, color=yellow];
997[label="192.177.8.145;d;230pkt 230fpkt", shape=diamond, color=yellow];
1187[label="176.197.13.14;s;55pkt 55fpkt", shape=diamond, color=yellow];
1597[label="176.196.24.22;s;47pkt 47fpkt", shape=diamond, color=yellow];
1745[label="176.196.17.155;s;64pkt 64fpkt", shape=diamond, color=yellow];
1803[label="211.213.217.13;d;100pkt 100fpkt", shape=diamond, color=yellow];
2003[label="195.196.185.240;d;4pkt 4fpkt", shape=diamond, color=yellow];
2467[label="176.196.1.91;s;44pkt 44fpkt", shape=diamond, color=yellow];
2635[label="176.197.163.128;s;23pkt 23fpkt", shape=diamond, color=yellow];
2854[label="176.197.13.14;s;37pkt 37fpkt", shape=hexagon, color=black];
3255[label="176.196.14.86;s;110pkt 110fpkt", shape=hexagon, color=black];
3341[label="211.213.217.13;d;100pkt 100fpkt", shape=hexagon, color=black];
3684[label="176.197.13.14;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3781[label="176.196.24.22;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3918[label="128.65.50.35;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4084[label="183.82.34.53;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4316[label="183.174.44.76;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4397[label="183.82.39.83;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4483[label="176.196.1.91;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4620[label="183.174.38.105;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5080[label="176.197.26.151;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5125[label="176.196.17.155;67pkt 67fpkt", shape=pentagon, color=darkviolet];
5265[label="176.196.24.168;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5486[label="183.174.171.189;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5778[label="176.196.72.218;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6027[label="183.82.39.253;48pkt 48fpkt", shape=pentagon, color=darkviolet];
6283[label="128.65.50.35;14pkt 14fpkt", shape=invtriangle, color=brown];
6391[label="183.82.34.53;8pkt 8fpkt", shape=invtriangle, color=brown];
6644[label="176.196.1.91;47pkt 47fpkt", shape=invtriangle, color=brown];
6730[label="183.174.38.105;32pkt 32fpkt", shape=invtriangle, color=brown];
6999[label="176.197.26.151;20pkt 20fpkt", shape=invtriangle, color=brown];
7024[label="176.196.17.155;67pkt 67fpkt", shape=invtriangle, color=brown];
7113[label="176.196.24.168;5pkt 5fpkt", shape=invtriangle, color=brown];
7586[label="183.82.39.253;47pkt 47fpkt", shape=invtriangle, color=brown];
7715[label="128.65.50.35;14pkt 14fpkt", shape=invhouse, color=bisque];
7769[label="183.82.34.53;8pkt 8fpkt", shape=invhouse, color=bisque];
7935[label="183.174.38.105;32pkt 32fpkt", shape=invhouse, color=bisque];
8072[label="176.197.26.151;20pkt 20fpkt", shape=invhouse, color=bisque];
8130[label="176.196.24.168;4pkt 4fpkt", shape=invhouse, color=bisque];
8364[label="183.82.39.253;48pkt 48fpkt", shape=invhouse, color=bisque];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 184.236.11.96:80}[29.4485%]&lt;BR/&gt;{*:*, 192.177.8.145:80}[22.3725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1047%)&lt;BR/&gt; 1863: (1.93249%)&lt;BR/&gt; 443: (1.61448%)&lt;BR/&gt; 53: (1.36986%)&lt;BR/&gt; 32769: (0.978474%)&gt;];
}
483--827[label="0.145455;16pkt 16fpkt"];
483--1003[label="0.00364964;1pkt 1fpkt"];
483--1050[label="0.0580645;9pkt 9fpkt"];
483--1085[label="0.123288;18pkt 18fpkt"];
483--1187[label="0.6;33pkt 33fpkt"];
483--1388[label="0.324324;12pkt 12fpkt"];
483--1391[label="0.213333;16pkt 16fpkt"];
483--1511[label="0.0806452;5pkt 5fpkt"];
483--1597[label="0.893617;42pkt 42fpkt"];
483--1745[label="0.09375;6pkt 6fpkt"];
483--2635[label="0.782609;18pkt 18fpkt"];
483--2854[label="0.459459;17pkt 17fpkt"];
483--2975[label="0.0806452;5pkt 5fpkt"];
483--3156[label="0.171429;12pkt 12fpkt"];
483--3255[label="0.145455;16pkt 16fpkt"];
483--3478[label="0.0656934;18pkt 18fpkt"];
483--3485[label="0.0437956;12pkt 12fpkt"];
483--3684[label="0.52381;33pkt 33fpkt"];
483--3732[label="0.0819672;5pkt 5fpkt"];
483--3781[label="0.84;42pkt 42fpkt"];
483--5014[label="0.0839416;23pkt 23fpkt"];
483--5080[label="1;21pkt 21fpkt"];
483--5125[label="0.0895522;6pkt 6fpkt"];
483--5265[label="1;4pkt 4fpkt"];
483--5355[label="0.0474453;13pkt 13fpkt"];
483--5377[label="0.0547445;15pkt 15fpkt"];
483--5486[label="0.357143;15pkt 15fpkt"];
483--6179[label="0.0806452;5pkt 5fpkt"];
483--6961[label="0.0839416;23pkt 23fpkt"];
483--6999[label="1;20pkt 20fpkt"];
483--7024[label="0.0895522;6pkt 6fpkt"];
483--7113[label="1;5pkt 5fpkt"];
483--7173[label="0.0474453;13pkt 13fpkt"];
483--7186[label="0.0547445;15pkt 15fpkt"];
483--7656[label="0.0806452;5pkt 5fpkt"];
483--8054[label="0.0839416;23pkt 23fpkt"];
483--8072[label="1;20pkt 20fpkt"];
483--8130[label="1;4pkt 4fpkt"];
827--2219[label="0.0181818;2pkt 2fpkt"];
827--3255[label="1;110pkt 110fpkt"];
827--3477[label="0.0181818;2pkt 2fpkt"];
827--3495[label="0.0181818;2pkt 2fpkt"];
997--1187[label="0.0363636;2pkt 2fpkt"];
997--1440[label="0.0142857;2pkt 2fpkt"];
997--1659[label="0.02;1pkt 1fpkt"];
997--2136[label="0.0526316;3pkt 3fpkt"];
997--2467[label="0.454545;20pkt 20fpkt"];
997--2518[label="0.0111111;1pkt 1fpkt"];
997--2664[label="0.121739;28pkt 28fpkt"];
997--2798[label="0.0224719;2pkt 2fpkt"];
997--2854[label="0.0540541;2pkt 2fpkt"];
997--2918[label="0.0304348;7pkt 7fpkt"];
997--2955[label="0.0153846;2pkt 2fpkt"];
997--2971[label="0.010989;1pkt 1fpkt"];
997--3111[label="0.00434783;1pkt 1fpkt"];
997--3394[label="0.0521739;12pkt 12fpkt"];
997--3478[label="0.208696;48pkt 48fpkt"];
997--3485[label="0.0956522;22pkt 22fpkt"];
997--3684[label="0.031746;2pkt 2fpkt"];
997--3696[label="0.0454545;1pkt 1fpkt"];
997--4030[label="0.0136054;2pkt 2fpkt"];
997--4041[label="0.0304348;7pkt 7fpkt"];
997--4083[label="0.0833333;1pkt 1fpkt"];
997--4143[label="0.00434783;1pkt 1fpkt"];
997--4151[label="0.0102041;1pkt 1fpkt"];
997--4157[label="0.0108696;1pkt 1fpkt"];
997--4397[label="0.565217;13pkt 13fpkt"];
997--4483[label="0.425532;20pkt 20fpkt"];
997--4517[label="0.00434783;1pkt 1fpkt"];
997--4628[label="0.04;1pkt 1fpkt"];
997--4651[label="0.0192308;1pkt 1fpkt"];
997--4989[label="0.0105263;1pkt 1fpkt"];
997--5014[label="0.0130435;3pkt 3fpkt"];
997--5165[label="0.156522;36pkt 36fpkt"];
997--5355[label="0.0913043;21pkt 21fpkt"];
997--5592[label="0.0608696;14pkt 14fpkt"];
997--5800[label="0.0909091;1pkt 1fpkt"];
997--5843[label="0.153846;2pkt 2fpkt"];
997--6027[label="0.645833;31pkt 31fpkt"];
997--6159[label="0.0434783;1pkt 1fpkt"];
997--6361[label="0.0304348;7pkt 7fpkt"];
997--6644[label="0.425532;20pkt 20fpkt"];
997--6667[label="0.00434783;1pkt 1fpkt"];
997--6737[label="0.04;1pkt 1fpkt"];
997--6944[label="0.0105263;1pkt 1fpkt"];
997--6961[label="0.0130435;3pkt 3fpkt"];
997--7052[label="0.156522;36pkt 36fpkt"];
997--7173[label="0.0913043;21pkt 21fpkt"];
997--7438[label="0.0909091;1pkt 1fpkt"];
997--7586[label="0.659574;31pkt 31fpkt"];
997--7645[label="0.0434783;1pkt 1fpkt"];
997--7751[label="0.0769231;1pkt 1fpkt"];
997--8054[label="0.0130435;3pkt 3fpkt"];
997--8364[label="0.645833;31pkt 31fpkt"];
1187--1591[label="0.0212766;1pkt 1fpkt"];
1187--1833[label="0.0181818;1pkt 1fpkt"];
1187--2854[label="1;37pkt 37fpkt"];
1187--3478[label="0.145455;8pkt 8fpkt"];
1187--3485[label="0.0363636;2pkt 2fpkt"];
1187--3684[label="0.981818;54pkt 54fpkt"];
1597--3478[label="0.0425532;2pkt 2fpkt"];
1597--3485[label="0.0851064;4pkt 4fpkt"];
1597--3781[label="1;47pkt 47fpkt"];
1745--1803[label="0.03125;2pkt 2fpkt"];
1745--2003[label="1;4pkt 4fpkt"];
1745--2571[label="0.015625;1pkt 1fpkt"];
1745--2702[label="0.015625;1pkt 1fpkt"];
1745--3202[label="0.03125;2pkt 2fpkt"];
1745--3341[label="0.03125;2pkt 2fpkt"];
1745--3478[label="0.015625;1pkt 1fpkt"];
1745--3485[label="0.15625;10pkt 10fpkt"];
1745--5125[label="0.984375;63pkt 63fpkt"];
1745--7024[label="0.984375;63pkt 63fpkt"];
1803--2467[label="0.0454545;2pkt 2fpkt"];
1803--2669[label="0.01;1pkt 1fpkt"];
1803--2800[label="0.01;1pkt 1fpkt"];
1803--2918[label="0.01;1pkt 1fpkt"];
1803--3042[label="0.166667;2pkt 2fpkt"];
1803--3341[label="1;100pkt 100fpkt"];
1803--3478[label="0.1;10pkt 10fpkt"];
1803--3485[label="0.04;4pkt 4fpkt"];
1803--3918[label="0.666667;10pkt 10fpkt"];
1803--4084[label="0.25;2pkt 2fpkt"];
1803--4217[label="0.01;1pkt 1fpkt"];
1803--4238[label="0.142857;2pkt 2fpkt"];
1803--4316[label="0.0333333;1pkt 1fpkt"];
1803--4402[label="0.02;2pkt 2fpkt"];
1803--4483[label="0.0425532;2pkt 2fpkt"];
1803--4620[label="0.30303;10pkt 10fpkt"];
1803--4685[label="0.01;1pkt 1fpkt"];
1803--5125[label="0.0298507;2pkt 2fpkt"];
1803--5708[label="0.04;4pkt 4fpkt"];
1803--5778[label="0.344828;10pkt 10fpkt"];
1803--6283[label="0.642857;9pkt 9fpkt"];
1803--6391[label="0.25;2pkt 2fpkt"];
1803--6484[label="0.01;1pkt 1fpkt"];
1803--6593[label="0.02;2pkt 2fpkt"];
1803--6644[label="0.0425532;2pkt 2fpkt"];
1803--6730[label="0.3125;10pkt 10fpkt"];
1803--7024[label="0.0298507;2pkt 2fpkt"];
1803--7715[label="0.642857;9pkt 9fpkt"];
1803--7769[label="0.25;2pkt 2fpkt"];
1803--7818[label="0.01;1pkt 1fpkt"];
1803--7935[label="0.3125;10pkt 10fpkt"];
2003--5125[label="1;4pkt 4fpkt"];
2003--7024[label="1;4pkt 4fpkt"];
2467--2514[label="0.0454545;2pkt 2fpkt"];
2467--3250[label="0.0454545;2pkt 2fpkt"];
2467--3341[label="0.0454545;2pkt 2fpkt"];
2467--3478[label="0.0909091;4pkt 4fpkt"];
2467--3485[label="0.0227273;1pkt 1fpkt"];
2467--4483[label="1;44pkt 44fpkt"];
2467--6644[label="1;44pkt 44fpkt"];
2854--3478[label="0.216216;8pkt 8fpkt"];
2854--3485[label="0.0540541;2pkt 2fpkt"];
2854--3684[label="0.972973;36pkt 36fpkt"];
3255--3477[label="0.0181818;2pkt 2fpkt"];
3255--3495[label="0.0181818;2pkt 2fpkt"];
3341--3478[label="0.1;10pkt 10fpkt"];
3341--3485[label="0.04;4pkt 4fpkt"];
3341--3918[label="0.666667;10pkt 10fpkt"];
3341--4084[label="0.25;2pkt 2fpkt"];
3341--4217[label="0.01;1pkt 1fpkt"];
3341--4238[label="0.142857;2pkt 2fpkt"];
3341--4316[label="0.0333333;1pkt 1fpkt"];
3341--4402[label="0.02;2pkt 2fpkt"];
3341--4483[label="0.0425532;2pkt 2fpkt"];
3341--4620[label="0.30303;10pkt 10fpkt"];
3341--4685[label="0.01;1pkt 1fpkt"];
3341--5125[label="0.0298507;2pkt 2fpkt"];
3341--5708[label="0.04;4pkt 4fpkt"];
3341--5778[label="0.344828;10pkt 10fpkt"];
3341--6283[label="0.642857;9pkt 9fpkt"];
3341--6391[label="0.25;2pkt 2fpkt"];
3341--6484[label="0.01;1pkt 1fpkt"];
3341--6593[label="0.02;2pkt 2fpkt"];
3341--6644[label="0.0425532;2pkt 2fpkt"];
3341--6730[label="0.3125;10pkt 10fpkt"];
3341--7024[label="0.0298507;2pkt 2fpkt"];
3341--7715[label="0.642857;9pkt 9fpkt"];
3341--7769[label="0.25;2pkt 2fpkt"];
3341--7818[label="0.01;1pkt 1fpkt"];
3341--7935[label="0.3125;10pkt 10fpkt"];
3918--6283[label="1;14pkt 14fpkt"];
3918--7715[label="1;14pkt 14fpkt"];
4084--6391[label="1;8pkt 8fpkt"];
4084--7769[label="1;8pkt 8fpkt"];
4483--6644[label="1;47pkt 47fpkt"];
4620--6730[label="1;32pkt 32fpkt"];
4620--7935[label="1;32pkt 32fpkt"];
5080--6999[label="1;20pkt 20fpkt"];
5080--8072[label="1;20pkt 20fpkt"];
5125--7024[label="1;67pkt 67fpkt"];
5265--7113[label="1;4pkt 4fpkt"];
5265--8130[label="1;4pkt 4fpkt"];
6027--7586[label="1;47pkt 47fpkt"];
6027--8364[label="1;48pkt 48fpkt"];
6283--7715[label="1;14pkt 14fpkt"];
6391--7769[label="1;8pkt 8fpkt"];
6730--7935[label="1;32pkt 32fpkt"];
6999--8072[label="1;20pkt 20fpkt"];
7113--8130[label="1;4pkt 4fpkt"];
7586--8364[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="184.236.11.96" dst_port="80"/>
      <filter dst_ip="192.177.8.145" dst_port="80"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.85.72.2"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.0.133.3"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.81.150.6"/>
    </slice>
    <from sec="1118034022" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.53.3.7"/>
    </slice>
    <from sec="1118034045" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.2.109.9"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.240.192.11"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.186.93.15"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.128.170.29"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.77.205.37"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.87.65.43"/>
    </slice>
    <from sec="1118034488" usec="0"/>
    <to sec="1118034522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.2.202.44"/>
    </slice>
    <from sec="1118034043" usec="0"/>
    <to sec="1118034893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.21.1.45"/>
    </slice>
    <from sec="1118034724" usec="0"/>
    <to sec="1118034754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.196.62.46"/>
    </slice>
    <from sec="1118034755" usec="0"/>
    <to sec="1118034796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.227.75.58"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.105.89.60"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.126.27.65"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.197.112.69"/>
    </slice>
    <from sec="1118034030" usec="0"/>
    <to sec="1118034873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
356[label="133.167.51.122;s;10200pkt 10200fpkt", shape=diamond, color=yellow];
2468[label="10.0.1.128;d;87pkt 87fpkt", shape=diamond, color=yellow];
2531[label="197.66.76.26;s;69pkt 69fpkt", shape=diamond, color=yellow];
2675[label="133.167.51.122;s;8030pkt 8030fpkt", shape=hexagon, color=black];
3826[label="197.66.76.26;71pkt 71fpkt", shape=pentagon, color=darkviolet];
4775[label="133.167.51.122;11049pkt 11049fpkt", shape=pentagon, color=darkviolet];
4862[label="197.77.41.131;76pkt 76fpkt", shape=pentagon, color=darkviolet];
6230[label="197.66.76.26;70pkt 70fpkt", shape=invtriangle, color=brown];
6827[label="133.167.51.122;11048pkt 11048fpkt", shape=invtriangle, color=brown];
6873[label="197.77.41.131;75pkt 75fpkt", shape=invtriangle, color=brown];
7826[label="133.167.68.70;58pkt 58fpkt", shape=invhouse, color=bisque];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.51.122:0, *:0}[97.1972%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2661%)&lt;BR/&gt; 25: (0.495922%)&lt;BR/&gt; 6667: (0.31837%)&lt;BR/&gt; 80: (0.039184%)&lt;BR/&gt; 65289: (0.0085715%)&gt;];
}
356--2468[label="0.0574713;5pkt 5fpkt"];
356--2675[label="1;8030pkt 8030fpkt"];
356--3485[label="0.000243457;2pkt 2fpkt"];
356--4775[label="1;10200pkt 10200fpkt"];
356--6827[label="0.999902;10199pkt 10199fpkt"];
2468--2531[label="0.0289855;2pkt 2fpkt"];
2468--2675[label="0.045977;4pkt 4fpkt"];
2468--3826[label="0.028169;2pkt 2fpkt"];
2468--4775[label="0.0574713;5pkt 5fpkt"];
2468--4862[label="0.118421;9pkt 9fpkt"];
2468--6230[label="0.0285714;2pkt 2fpkt"];
2468--6827[label="0.0574713;5pkt 5fpkt"];
2468--6873[label="0.12;9pkt 9fpkt"];
2468--7826[label="0.258621;15pkt 15fpkt"];
2531--3826[label="1;69pkt 69fpkt"];
2531--6230[label="0.985507;68pkt 68fpkt"];
2675--3485[label="0.000249066;2pkt 2fpkt"];
2675--4775[label="1;8030pkt 8030fpkt"];
2675--6827[label="0.999875;8029pkt 8029fpkt"];
3826--6230[label="1;70pkt 70fpkt"];
4775--6827[label="1;11048pkt 11048fpkt"];
4862--6873[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.51.122"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.136.221.78"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.197.43.82"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.167.68.82"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.784741,2.24791,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
6617[label="176.196.12.87;1pkt 1fpkt", shape=invtriangle, color=brown];
7884[label="176.196.12.87;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.196.12.87:16080, 48.114.106.48:53270}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53270: (50%)&lt;BR/&gt; 16080: (50%)&gt;];
}
6617--7884[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="48.114.106.48" dst_port="53270" src_ip="176.196.12.87" src_port="16080"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.56.97.89"/>
    </slice>
    <from sec="1118034281" usec="0"/>
    <to sec="1118034326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.182.176.89"/>
    </slice>
    <from sec="1118034007" usec="0"/>
    <to sec="1118034558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.168.253.93"/>
    </slice>
    <from sec="1118034122" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618178,2.21278,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
4529[label="196.136.77.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7910[label="196.136.77.96;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.136.77.96:2001, 175.199.142.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2001: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4529--7910[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.199.142.152" dst_port="80" src_ip="196.136.77.96" src_port="2001"/>
    </slice>
    <from sec="1118034853" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.197.0.98"/>
    </slice>
    <from sec="1118034489" usec="0"/>
    <to sec="1118034577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.75.224.102"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.233.119.103"/>
    </slice>
    <from sec="1118034464" usec="0"/>
    <to sec="1118034724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.224.51.105"/>
    </slice>
    <from sec="1118034011" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.41.64.108"/>
    </slice>
    <from sec="1118034107" usec="0"/>
    <to sec="1118034892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.112.223.115"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.165.8.118"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.16.163.119"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.197.43.124"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.44.69.125"/>
    </slice>
    <from sec="1118034426" usec="0"/>
    <to sec="1118034438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.14.81.126"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.252.213.133"/>
    </slice>
    <from sec="1118034056" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.226.9.137"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,010,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.167.0.148"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.82.32.150"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.155.97.152"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.145.26.161"/>
    </slice>
    <from sec="1118034123" usec="0"/>
    <to sec="1118034139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.102.132.163"/>
    </slice>
    <from sec="1118034480" usec="0"/>
    <to sec="1118034795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.241.51.166"/>
    </slice>
    <from sec="1118034767" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.147.3.172"/>
    </slice>
    <from sec="1118034053" usec="0"/>
    <to sec="1118034079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="140.53.191.181"/>
    </slice>
    <from sec="1118034345" usec="0"/>
    <to sec="1118034346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.85.190.186"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.116.200.186"/>
    </slice>
    <from sec="1118034017" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845376,2.12203,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
2042[label="196.8.25.188;s;63pkt 63fpkt", shape=diamond, color=yellow];
5476[label="196.8.25.188;67pkt 67fpkt", shape=pentagon, color=darkviolet];
7243[label="196.8.25.188;67pkt 67fpkt", shape=invtriangle, color=brown];
8192[label="196.8.25.188;68pkt 68fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.25.188:25, *:*}[70.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.717%)&lt;BR/&gt; 443: (4.5283%)&lt;BR/&gt; 60497: (0.754717%)&lt;BR/&gt; 56137: (0.754717%)&lt;BR/&gt; 50014: (0.754717%)&gt;];
}
2042--5476[label="0.984127;62pkt 62fpkt"];
2042--7243[label="0.984127;62pkt 62fpkt"];
2042--8192[label="1;63pkt 63fpkt"];
5476--7243[label="1;67pkt 67fpkt"];
5476--8192[label="1;67pkt 67fpkt"];
7243--8192[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.25.188" src_port="25"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.196.213.191"/>
    </slice>
    <from sec="1118034005" usec="0"/>
    <to sec="1118034895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.58.232.191"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.66.101.195"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.118.65.201"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.129.251.201"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="142.79.186.203"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.117.110.205"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.10.74.206"/>
    </slice>
    <from sec="1118034455" usec="0"/>
    <to sec="1118034483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.47.177.206"/>
    </slice>
    <from sec="1118034002" usec="0"/>
    <to sec="1118034900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.56.35.208"/>
    </slice>
    <from sec="1118034019" usec="0"/>
    <to sec="1118034077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.192.87.212"/>
    </slice>
    <from sec="1118034040" usec="0"/>
    <to sec="1118034882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.237.109.214"/>
    </slice>
    <from sec="1118034004" usec="0"/>
    <to sec="1118034875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.234.91.217"/>
    </slice>
    <from sec="1118034106" usec="0"/>
    <to sec="1118034117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.29.23.218"/>
    </slice>
    <from sec="1118034001" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.189.69.218"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.82.37.222"/>
    </slice>
    <from sec="1118034003" usec="0"/>
    <to sec="1118034041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.182.129.222"/>
    </slice>
    <from sec="1118034122" usec="0"/>
    <to sec="1118034236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.155.52.225"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.210.177.230"/>
    </slice>
    <from sec="1118034008" usec="0"/>
    <to sec="1118034897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.205.20.232"/>
    </slice>
    <from sec="1118034067" usec="0"/>
    <to sec="1118034868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="179.147.193.235"/>
    </slice>
    <from sec="1118034089" usec="0"/>
    <to sec="1118034188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12661,2.08465,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
439[label="217.146.33.168;d;29pkt 29fpkt", shape=diamond, color=yellow];
1061[label="133.167.79.19;s;50pkt 50fpkt", shape=diamond, color=yellow];
2241[label="133.167.12.69;s;2pkt 2fpkt", shape=diamond, color=yellow];
2256[label="216.212.121.237;d;31pkt 31fpkt", shape=diamond, color=yellow];
2458[label="133.167.14.187;s;46pkt 46fpkt", shape=diamond, color=yellow];
2516[label="133.167.12.237;s;2pkt 2fpkt", shape=diamond, color=yellow];
3327[label="133.167.12.69;s;2pkt 2fpkt", shape=hexagon, color=black];
3330[label="133.167.79.19;s;50pkt 50fpkt", shape=hexagon, color=black];
3750[label="133.167.79.19;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3839[label="133.167.76.27;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4222[label="133.167.12.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5467[label="133.167.14.187;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5934[label="133.167.12.237;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6193[label="133.167.79.19;50pkt 50fpkt", shape=invtriangle, color=brown];
6487[label="133.167.12.69;1pkt 1fpkt", shape=invtriangle, color=brown];
7237[label="133.167.14.187;49pkt 49fpkt", shape=invtriangle, color=brown];
7523[label="133.167.12.237;2pkt 2fpkt", shape=invtriangle, color=brown];
8337[label="133.167.12.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.167.79.19:1039, *:*}[30.4348%]&lt;BR/&gt;{133.167.14.187:*, *:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (22.2222%)&lt;BR/&gt; 80: (13.0385%)&lt;BR/&gt; 4665: (8.16327%)&lt;BR/&gt; 25: (5.89569%)&lt;BR/&gt; 4246: (4.08163%)&gt;];
}
439--973[label="0.0344828;1pkt 1fpkt"];
439--1061[label="0.0344828;1pkt 1fpkt"];
439--2241[label="0.5;1pkt 1fpkt"];
439--2458[label="0.724138;21pkt 21fpkt"];
439--2516[label="0.5;1pkt 1fpkt"];
439--3327[label="0.5;1pkt 1fpkt"];
439--3330[label="0.0344828;1pkt 1fpkt"];
439--3750[label="0.0344828;1pkt 1fpkt"];
439--5314[label="0.0344828;1pkt 1fpkt"];
439--5467[label="0.724138;21pkt 21fpkt"];
439--5934[label="0.5;1pkt 1fpkt"];
439--6193[label="0.0344828;1pkt 1fpkt"];
439--7155[label="0.0344828;1pkt 1fpkt"];
439--7237[label="0.724138;21pkt 21fpkt"];
439--7523[label="0.5;1pkt 1fpkt"];
439--8150[label="0.0344828;1pkt 1fpkt"];
439--8337[label="1;1pkt 1fpkt"];
1061--3330[label="1;50pkt 50fpkt"];
1061--3750[label="1;50pkt 50fpkt"];
1061--6193[label="1;50pkt 50fpkt"];
2241--2256[label="0.5;1pkt 1fpkt"];
2241--3327[label="1;2pkt 2fpkt"];
2241--4222[label="1;1pkt 1fpkt"];
2241--6487[label="1;1pkt 1fpkt"];
2256--2275[label="0.0322581;1pkt 1fpkt"];
2256--3242[label="0.0322581;1pkt 1fpkt"];
2256--3327[label="0.5;1pkt 1fpkt"];
2256--3478[label="0.0322581;1pkt 1fpkt"];
2256--3485[label="0.0322581;1pkt 1fpkt"];
2256--3839[label="0.08;2pkt 2fpkt"];
2256--4222[label="1;1pkt 1fpkt"];
2256--6487[label="1;1pkt 1fpkt"];
2458--3477[label="0.0217391;1pkt 1fpkt"];
2458--3495[label="0.0217391;1pkt 1fpkt"];
2458--5467[label="0.978261;45pkt 45fpkt"];
2458--7237[label="1;46pkt 46fpkt"];
2516--5934[label="1;2pkt 2fpkt"];
2516--7523[label="1;2pkt 2fpkt"];
2516--8337[label="1;1pkt 1fpkt"];
3327--4222[label="1;1pkt 1fpkt"];
3327--6487[label="1;1pkt 1fpkt"];
3330--3750[label="1;50pkt 50fpkt"];
3330--6193[label="1;50pkt 50fpkt"];
3750--6193[label="1;50pkt 50fpkt"];
4222--6487[label="1;1pkt 1fpkt"];
5467--7237[label="1;48pkt 48fpkt"];
5934--7523[label="1;2pkt 2fpkt"];
5934--8337[label="1;1pkt 1fpkt"];
7523--8337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.167.14.187"/>
      <filter src_ip="133.167.79.19" src_port="1039"/>
    </slice>
    <from sec="1118034000" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.233.2.240"/>
    </slice>
    <from sec="1118034006" usec="0"/>
    <to sec="1118034891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.139.86.244"/>
    </slice>
    <from sec="1118034900" usec="0"/>
    <to sec="1118034901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.149.189.245"/>
    </slice>
    <from sec="1118034012" usec="0"/>
    <to sec="1118034899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754591,2.28965,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.209.49.250"/>
    </slice>
    <from sec="1118034101" usec="0"/>
    <to sec="1118034574" usec="0"/>
  </anomaly>

</admd:annotation>
