<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.28547,2.18409,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="7.160.136.210" dst_port="80" proto="tcp" src_ip="7.160.136.210" src_port="80"/>
      <filter dst_ip="7.160.136.210" dst_port="80" proto="udp" src_ip="7.160.136.210" src_port="80"/>
      <filter dst_ip="7.160.136.210" dst_port="80" proto="tcp" src_ip="7.160.136.210" src_port="21840"/>
      <filter dst_ip="7.160.136.210" dst_port="80" proto="udp" src_ip="7.160.136.210" src_port="21840"/>
      <from sec="1120712851" usec="0"/>
      <to sec="1120713274" usec="0"/>
    </slice>
    <from sec="1120712851" usec="0"/>
    <to sec="1120713274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.166.126.20" dst_port="80" proto="tcp" src_ip="145.223.152.227" src_port="25"/>
      <filter dst_ip="211.166.126.20" dst_port="80" proto="tcp" src_ip="145.223.152.227" src_port="1077"/>
      <filter dst_ip="211.166.126.20" dst_port="80" proto="tcp" src_ip="145.223.152.227" src_port="1075"/>
      <filter dst_ip="220.188.86.51" dst_port="80" proto="tcp" src_ip="145.223.152.227" src_port="25"/>
      <filter dst_ip="220.188.86.51" dst_port="80" proto="tcp" src_ip="145.223.152.227" src_port="1077"/>
      <filter dst_ip="220.188.86.51" dst_port="80" proto="tcp" src_ip="145.223.152.227" src_port="1075"/>
      <from sec="1120713211" usec="0"/>
      <to sec="1120713214" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.166.126.20" dst_port="80" proto="tcp" src_ip="166.59.136.228" src_port="25"/>
      <filter dst_ip="211.166.126.20" dst_port="80" proto="tcp" src_ip="166.59.136.228" src_port="1077"/>
      <filter dst_ip="211.166.126.20" dst_port="80" proto="tcp" src_ip="166.59.136.228" src_port="1075"/>
      <filter dst_ip="220.188.86.51" dst_port="80" proto="tcp" src_ip="166.59.136.228" src_port="25"/>
      <filter dst_ip="220.188.86.51" dst_port="80" proto="tcp" src_ip="166.59.136.228" src_port="1077"/>
      <filter dst_ip="220.188.86.51" dst_port="80" proto="tcp" src_ip="166.59.136.228" src_port="1075"/>
      <from sec="1120713211" usec="0"/>
      <to sec="1120713215" usec="0"/>
    </slice>
    <from sec="1120713211" usec="0"/>
    <to sec="1120713216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="tcp" src_ip="214.61.106.113" src_port="1026"/>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="udp" src_ip="214.61.106.113" src_port="1026"/>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="tcp" src_ip="214.61.106.113" src_port="8080"/>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="udp" src_ip="214.61.106.113" src_port="8080"/>
      <from sec="1120713031" usec="0"/>
      <to sec="1120713050" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="tcp" src_ip="196.177.178.113" src_port="1026"/>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="udp" src_ip="196.177.178.113" src_port="1026"/>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="tcp" src_ip="196.177.178.113" src_port="8080"/>
      <filter dst_ip="145.223.9.18" dst_port="137" proto="udp" src_ip="196.177.178.113" src_port="8080"/>
      <from sec="1120713032" usec="0"/>
      <to sec="1120713035" usec="0"/>
    </slice>
    <from sec="1120713031" usec="0"/>
    <to sec="1120713050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="tcp" src_ip="196.80.237.151" src_port="1033"/>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="udp" src_ip="196.80.237.151" src_port="1033"/>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="tcp" src_ip="196.80.237.151" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="udp" src_ip="196.80.237.151" src_port="80"/>
      <from sec="1120712888" usec="0"/>
      <to sec="1120712899" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="tcp" src_ip="26.132.109.151" src_port="1033"/>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="udp" src_ip="26.132.109.151" src_port="1033"/>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="tcp" src_ip="26.132.109.151" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="137" proto="udp" src_ip="26.132.109.151" src_port="80"/>
      <from sec="1120712887" usec="0"/>
      <to sec="1120712899" usec="0"/>
    </slice>
    <from sec="1120712887" usec="0"/>
    <to sec="1120712899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="tcp" src_ip="197.150.89.194" src_port="1025"/>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="udp" src_ip="197.150.89.194" src_port="1025"/>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="tcp" src_ip="197.150.89.194" src_port="80"/>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="udp" src_ip="197.150.89.194" src_port="80"/>
      <from sec="1120713024" usec="0"/>
      <to sec="1120713030" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="tcp" src_ip="161.99.205.194" src_port="1025"/>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="udp" src_ip="161.99.205.194" src_port="1025"/>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="tcp" src_ip="161.99.205.194" src_port="80"/>
      <filter dst_ip="196.99.198.38" dst_port="137" proto="udp" src_ip="161.99.205.194" src_port="80"/>
      <from sec="1120713025" usec="0"/>
      <to sec="1120713029" usec="0"/>
    </slice>
    <from sec="1120713024" usec="0"/>
    <to sec="1120713030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="198.195.139.6"/>
      <from sec="1120712971" usec="0"/>
      <to sec="1120712972" usec="0"/>
    </slice>
    <from sec="1120712971" usec="0"/>
    <to sec="1120712973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="28.153.202.142" dst_port="5554" proto="tcp" src_ip="84.16.192.179" src_port="80"/>
      <filter dst_ip="28.153.202.142" dst_port="39921" proto="tcp" src_ip="84.16.192.179" src_port="80"/>
      <from sec="1120712637" usec="0"/>
      <to sec="1120712639" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="28.153.202.142" dst_port="5554" proto="tcp" src_ip="145.223.160.179" src_port="80"/>
      <filter dst_ip="28.153.202.142" dst_port="39921" proto="tcp" src_ip="145.223.160.179" src_port="80"/>
      <from sec="1120712635" usec="0"/>
      <to sec="1120712639" usec="0"/>
    </slice>
    <from sec="1120712635" usec="0"/>
    <to sec="1120712639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
5924[label="145.223.51.250;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.51.250:*, 212.133.1.161:80}[62.8205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1188: (0.641026%)&lt;BR/&gt; 1187: (0.641026%)&lt;BR/&gt; 1186: (0.641026%)&lt;BR/&gt; 1185: (0.641026%)&gt;];
}
5924--7345[label="1;78pkt 78fpkt"];
5924--8150[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="212.133.1.161" dst_port="80" src_ip="145.223.51.250"/>
    </slice>
    <from sec="1120712858" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
2760[label="145.223.161.212;s;157pkt 157fpkt", shape=diamond, color=yellow];
3344[label="145.223.161.212;s;157pkt 157fpkt", shape=hexagon, color=black];
4562[label="149.110.196.107;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5594[label="145.223.161.212;276pkt 276fpkt", shape=pentagon, color=darkviolet];
6585[label="149.110.196.107;7pkt 7fpkt", shape=invtriangle, color=brown];
7166[label="145.223.161.212;277pkt 277fpkt", shape=invtriangle, color=brown];
8051[label="145.223.161.212;276pkt 276fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.161.212:*, 2.113.238.92:80}[31.338%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7839%)&lt;BR/&gt; 33763: (0.216076%)&lt;BR/&gt; 33761: (0.216076%)&lt;BR/&gt; 33760: (0.216076%)&lt;BR/&gt; 33759: (0.216076%)&gt;];
}
2760--3344[label="1;157pkt 157fpkt"];
2760--5594[label="0.993631;156pkt 156fpkt"];
2760--7166[label="1;157pkt 157fpkt"];
2760--8051[label="0.993631;156pkt 156fpkt"];
3344--5594[label="0.993631;156pkt 156fpkt"];
3344--7166[label="1;157pkt 157fpkt"];
3344--8051[label="0.993631;156pkt 156fpkt"];
4562--6585[label="1;7pkt 7fpkt"];
4562--7718[label="1;7pkt 7fpkt"];
5594--7166[label="1;276pkt 276fpkt"];
5594--8051[label="1;276pkt 276fpkt"];
6585--7718[label="1;7pkt 7fpkt"];
7166--8051[label="1;276pkt 276fpkt"];
</description>
    <slice>
      <filter dst_ip="2.113.238.92" dst_port="80" src_ip="145.223.161.212"/>
    </slice>
    <from sec="1120712744" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32674,2.16369,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
12[label="145.222.123.188s;1pkt 1fpkt", shape=rectangle, color=red];
165[label="211.166.123.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
166[label="145.222.123.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.123.188:1045, 211.166.123.165:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12--165[label="1;1pkt 1fpkt"];
12--166[label="1;1pkt 1fpkt"];
165--166[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.123.165" dst_port="80" src_ip="145.222.123.188" src_port="1045"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
51[label="145.223.150.103s;1pkt 1fpkt", shape=rectangle, color=red];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.42.10.103:19770, 212.66.63.1:4812}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19770: (50%)&lt;BR/&gt; 4812: (50%)&gt;];
}
51--110[label="1;1pkt 1fpkt"];
51--183[label="1;1pkt 1fpkt"];
51--2800[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="4812" src_ip="193.42.10.103" src_port="19770"/>
    </slice>
    <from sec="1120712561" usec="0"/>
    <to sec="1120712577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
217[label="212.79.195.15;d;845pkt 845fpkt", shape=diamond, color=yellow];
219[label="212.17.207.5;s;4pkt 4fpkt", shape=diamond, color=yellow];
1289[label="212.79.195.83;d;402pkt 402fpkt", shape=diamond, color=yellow];
3200[label="212.17.207.5;s;4pkt 4fpkt", shape=hexagon, color=black];
3462[label="212.17.207.5;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3588[label="27.68.6.17;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3641[label="212.203.40.20;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3721[label="195.165.254.26;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3820[label="205.87.33.37;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3910[label="24.234.201.44;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4428[label="24.137.0.95;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4497[label="24.234.206.101;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4654[label="24.234.206.118;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5439[label="130.77.2.198;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6512[label="24.137.0.95;12pkt 12fpkt", shape=invtriangle, color=brown];
6550[label="24.234.206.101;29pkt 29fpkt", shape=invtriangle, color=brown];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.79.195.15:53}[44.1467%]&lt;BR/&gt;{*:*, 212.79.195.83:53}[28.2793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.4057%)&lt;BR/&gt; 53725: (6.67116%)&lt;BR/&gt; 80: (3.60512%)&lt;BR/&gt; 0: (1.81941%)&lt;BR/&gt; 32768: (1.28032%)&gt;];
}
217--219[label="0.25;1pkt 1fpkt"];
217--1646[label="0.0120482;1pkt 1fpkt"];
217--2190[label="0.0212766;1pkt 1fpkt"];
217--3200[label="0.25;1pkt 1fpkt"];
217--3384[label="0.0934911;79pkt 79fpkt"];
217--3387[label="0.0804734;68pkt 68fpkt"];
217--3462[label="0.25;1pkt 1fpkt"];
217--3588[label="0.2;1pkt 1fpkt"];
217--3641[label="0.0454545;1pkt 1fpkt"];
217--3721[label="0.0967742;3pkt 3fpkt"];
217--3820[label="0.2;1pkt 1fpkt"];
217--3910[label="0.027027;1pkt 1fpkt"];
217--4034[label="0.0243902;1pkt 1fpkt"];
217--4048[label="0.04;1pkt 1fpkt"];
217--4185[label="0.025641;1pkt 1fpkt"];
217--4309[label="0.027027;1pkt 1fpkt"];
217--4383[label="0.186047;8pkt 8fpkt"];
217--4398[label="0.037037;1pkt 1fpkt"];
217--4428[label="0.0833333;1pkt 1fpkt"];
217--4467[label="0.0344828;1pkt 1fpkt"];
217--4497[label="0.0357143;1pkt 1fpkt"];
217--4578[label="0.0208333;1pkt 1fpkt"];
217--4654[label="0.0555556;2pkt 2fpkt"];
217--4841[label="0.025;1pkt 1fpkt"];
217--5303[label="0.333333;1pkt 1fpkt"];
217--5335[label="0.0149254;1pkt 1fpkt"];
217--5415[label="0.0232558;1pkt 1fpkt"];
217--5439[label="0.125;1pkt 1fpkt"];
217--5649[label="0.03125;1pkt 1fpkt"];
217--6375[label="0.0263158;1pkt 1fpkt"];
217--6485[label="0.186047;8pkt 8fpkt"];
217--6493[label="0.0384615;1pkt 1fpkt"];
217--6512[label="0.0833333;1pkt 1fpkt"];
217--6550[label="0.0344828;1pkt 1fpkt"];
217--6594[label="0.0212766;1pkt 1fpkt"];
217--7591[label="0.0263158;1pkt 1fpkt"];
217--7658[label="0.186047;8pkt 8fpkt"];
217--7721[label="0.0212766;1pkt 1fpkt"];
219--1289[label="0.25;1pkt 1fpkt"];
219--3200[label="1;4pkt 4fpkt"];
219--3384[label="0.25;1pkt 1fpkt"];
219--3387[label="0.5;2pkt 2fpkt"];
219--3462[label="1;4pkt 4fpkt"];
1289--1501[label="0.25;2pkt 2fpkt"];
1289--3200[label="0.25;1pkt 1fpkt"];
1289--3384[label="0.134328;54pkt 54fpkt"];
1289--3387[label="0.00497512;2pkt 2fpkt"];
1289--3462[label="0.25;1pkt 1fpkt"];
1289--3588[label="0.2;1pkt 1fpkt"];
1289--3820[label="0.2;1pkt 1fpkt"];
1289--4119[label="0.0212766;1pkt 1fpkt"];
1289--4428[label="0.0833333;1pkt 1fpkt"];
1289--5439[label="0.125;1pkt 1fpkt"];
1289--5611[label="0.25;2pkt 2fpkt"];
1289--6337[label="0.0212766;1pkt 1fpkt"];
1289--6512[label="0.0833333;1pkt 1fpkt"];
1289--7176[label="0.25;2pkt 2fpkt"];
1289--7567[label="0.0217391;1pkt 1fpkt"];
1289--8058[label="0.25;2pkt 2fpkt"];
3200--3384[label="0.25;1pkt 1fpkt"];
3200--3387[label="0.5;2pkt 2fpkt"];
3200--3462[label="1;4pkt 4fpkt"];
4428--6512[label="1;12pkt 12fpkt"];
4497--6550[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.195.15" dst_port="53"/>
      <filter dst_ip="212.79.195.83" dst_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
220[label="160.35.9.53;d;3pkt 3fpkt", shape=diamond, color=yellow];
221[label="161.99.69.78;s;23pkt 23fpkt", shape=diamond, color=yellow];
2926[label="161.99.69.78;s;23pkt 23fpkt", shape=hexagon, color=black];
4261[label="161.99.69.78;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.69.78:31595, *:*}[82.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31595: (38.961%)&lt;BR/&gt; 51319: (7.79221%)&lt;BR/&gt; 47632: (5.84416%)&lt;BR/&gt; 1530: (2.5974%)&lt;BR/&gt; 1489: (2.5974%)&gt;];
}
220--221[label="1;3pkt 3fpkt"];
220--2926[label="1;3pkt 3fpkt"];
220--4261[label="1;3pkt 3fpkt"];
221--2926[label="1;23pkt 23fpkt"];
221--4261[label="1;23pkt 23fpkt"];
2926--4261[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.69.78" src_port="31595"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688708,2.00947,901,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
253[label="24.139.127.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
254[label="149.177.99.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
6197[label="149.177.99.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.99.39:1232, 24.139.127.167:9010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9010: (50%)&lt;BR/&gt; 1232: (50%)&gt;];
}
253--254[label="1;1pkt 1fpkt"];
253--6197[label="1;1pkt 1fpkt"];
254--6197[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.139.127.167" dst_port="9010" src_ip="149.177.99.39" src_port="1232"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32674,2.16369,901,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
56[label="202.105.8.112d;1pkt 1fpkt", shape=rectangle, color=red];
261[label="212.66.34.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
264[label="2.1.95.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.1.95.171:8000, 212.66.34.87:1161}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1161: (50%)&gt;];
}
56--261[label="1;1pkt 1fpkt"];
56--264[label="1;1pkt 1fpkt"];
261--264[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.34.87" dst_port="1161" src_ip="2.1.95.171" src_port="8000"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
262[label="212.66.34.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
263[label="2.1.95.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.34.87:1161, 2.1.95.171:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1161: (50%)&gt;];
}
262--263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.1.95.171" dst_port="8000" src_ip="212.66.34.87" src_port="1161"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
591[label="145.223.172.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.172.102:49266, 120.58.135.6:80}[50%]&lt;BR/&gt;{145.223.172.102:49169, 26.72.157.96:11986}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49266: (25%)&lt;BR/&gt; 49169: (25%)&lt;BR/&gt; 11986: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
591--1404[label="0.5;1pkt 1fpkt"];
591--2929[label="1;2pkt 2fpkt"];
591--4504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.72.157.96" dst_port="11986" src_ip="145.223.172.102" src_port="49169"/>
      <filter dst_ip="120.58.135.6" dst_port="80" src_ip="145.223.172.102" src_port="49266"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31659,2.08138,901,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
40[label="200.46.236.236s;5pkt 5fpkt", shape=rectangle, color=red];
83[label="213.4.132.72s;2463pkt 2463fpkt", shape=rectangle, color=red];
283[label="213.17.234.101;d;29pkt 29fpkt", shape=diamond, color=yellow];
1488[label="200.46.236.236;s;23pkt 23fpkt", shape=diamond, color=yellow];
2034[label="213.17.226.232;d;15pkt 15fpkt", shape=diamond, color=yellow];
2514[label="213.17.229.246;d;19pkt 19fpkt", shape=diamond, color=yellow];
2544[label="213.4.132.72;s;1759pkt 1759fpkt", shape=diamond, color=yellow];
3430[label="24.194.149.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5665[label="210.30.188.217;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5832[label="200.46.236.236;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5980[label="24.194.149.2;1pkt 1fpkt", shape=invtriangle, color=brown];
7286[label="200.46.236.236;22pkt 22fpkt", shape=invtriangle, color=brown];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.4.132.72:*, *:1433}[97.596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (48.3742%)&lt;BR/&gt; 1755: (1.14495%)&lt;BR/&gt; 80: (0.480879%)&lt;BR/&gt; 4109: (0.251889%)&lt;BR/&gt; 1588: (0.251889%)&gt;];
}
40--283[label="0.8;4pkt 4fpkt"];
40--1488[label="0.8;4pkt 4fpkt"];
40--5665[label="0.2;1pkt 1fpkt"];
40--5832[label="0.8;4pkt 4fpkt"];
40--7286[label="0.8;4pkt 4fpkt"];
83--244[label="0.00510204;1pkt 1fpkt"];
83--283[label="0.0344828;1pkt 1fpkt"];
83--640[label="0.000817661;1pkt 1fpkt"];
83--1153[label="0.00358423;1pkt 1fpkt"];
83--1511[label="0.00163132;1pkt 1fpkt"];
83--1687[label="0.0125;1pkt 1fpkt"];
83--2034[label="0.0666667;1pkt 1fpkt"];
83--2514[label="0.0526316;1pkt 1fpkt"];
83--2544[label="0.853894;1502pkt 1502fpkt"];
83--2704[label="0.047619;1pkt 1fpkt"];
83--3386[label="0.461702;217pkt 217fpkt"];
83--3392[label="0.461702;217pkt 217fpkt"];
283--285[label="1;2pkt 2fpkt"];
283--628[label="1;2pkt 2fpkt"];
283--717[label="1;1pkt 1fpkt"];
283--1488[label="1;23pkt 23fpkt"];
283--2544[label="0.0344828;1pkt 1fpkt"];
283--3156[label="1;2pkt 2fpkt"];
283--4622[label="1;1pkt 1fpkt"];
283--5162[label="1;1pkt 1fpkt"];
283--5832[label="1;23pkt 23fpkt"];
283--6619[label="1;1pkt 1fpkt"];
283--6934[label="1;2pkt 2fpkt"];
283--7286[label="1;22pkt 22fpkt"];
283--7912[label="1;2pkt 2fpkt"];
1488--5832[label="1;23pkt 23fpkt"];
1488--7286[label="1;22pkt 22fpkt"];
2034--2544[label="0.0666667;1pkt 1fpkt"];
2034--3388[label="0.2;3pkt 3fpkt"];
2034--3430[label="1;1pkt 1fpkt"];
2034--3660[label="0.111111;1pkt 1fpkt"];
2034--5980[label="1;1pkt 1fpkt"];
2514--2515[label="1;18pkt 18fpkt"];
2514--4255[label="1;18pkt 18fpkt"];
2514--6412[label="1;17pkt 17fpkt"];
2544--2704[label="0.047619;1pkt 1fpkt"];
2544--3386[label="1;470pkt 470fpkt"];
2544--3392[label="1;470pkt 470fpkt"];
3430--5980[label="1;1pkt 1fpkt"];
5832--7286[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="213.4.132.72"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
289[label="149.68.156.113;s;679pkt 679fpkt", shape=diamond, color=yellow];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.68.156.113:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
289--1506[label="0.00436681;1pkt 1fpkt"];
289--1516[label="0.00292398;1pkt 1fpkt"];
289--1819[label="0.00436681;1pkt 1fpkt"];
289--1939[label="0.005;1pkt 1fpkt"];
289--2304[label="0.00485437;1pkt 1fpkt"];
289--2599[label="0.00487805;1pkt 1fpkt"];
289--3130[label="0.00714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.68.156.113"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
290[label="29.9.59.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
291[label="161.99.64.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
3277[label="29.9.59.47;s;1pkt 1fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.9.59.47:8170, 161.99.64.206:52961}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52961: (50%)&lt;BR/&gt; 8170: (50%)&gt;];
}
290--291[label="1;1pkt 1fpkt"];
290--3277[label="1;1pkt 1fpkt"];
291--3277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.64.206" dst_port="52961" src_ip="29.9.59.47" src_port="8170"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
297[label="196.109.107.140;d;2pkt 2fpkt", shape=diamond, color=yellow];
298[label="145.222.24.50;s;14pkt 14fpkt", shape=diamond, color=yellow];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.24.50:24183, *:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24183: (46.875%)&lt;BR/&gt; 44775: (6.25%)&lt;BR/&gt; 2945: (6.25%)&lt;BR/&gt; 65102: (3.125%)&lt;BR/&gt; 61652: (3.125%)&gt;];
}
297--298[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.24.50" src_port="24183"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
322[label="219.28.160.19;d;2pkt 2fpkt", shape=diamond, color=yellow];
323[label="149.110.176.53;s;228pkt 228fpkt", shape=diamond, color=yellow];
4006[label="149.110.176.53;231pkt 231fpkt", shape=pentagon, color=darkviolet];
6278[label="149.110.176.53;230pkt 230fpkt", shape=invtriangle, color=brown];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.176.53:32781, *:53}[59.7403%]&lt;BR/&gt;{149.110.176.53:53, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.0333%)&lt;BR/&gt; 32781: (29.9566%)&lt;BR/&gt; 25: (3.61795%)&lt;BR/&gt; 32771: (0.434153%)&lt;BR/&gt; 1032: (0.434153%)&gt;];
}
322--323[label="1;2pkt 2fpkt"];
322--4006[label="1;2pkt 2fpkt"];
322--6278[label="1;2pkt 2fpkt"];
323--1380[label="0.00854701;1pkt 1fpkt"];
323--1880[label="0.00900901;1pkt 1fpkt"];
323--2600[label="0.00961538;1pkt 1fpkt"];
323--3318[label="0.00854701;1pkt 1fpkt"];
323--3384[label="0.0921053;21pkt 21fpkt"];
323--3387[label="0.0350877;8pkt 8fpkt"];
323--4006[label="1;228pkt 228fpkt"];
323--6278[label="0.995614;227pkt 227fpkt"];
4006--6278[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter src_ip="149.110.176.53" src_port="53"/>
      <filter dst_port="53" src_ip="149.110.176.53" src_port="32781"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
375[label="161.99.26.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
376[label="205.24.158.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
2816[label="205.24.158.7;s;1pkt 1fpkt", shape=hexagon, color=black];
3288[label="161.99.26.14;d;1pkt 1fpkt", shape=hexagon, color=black];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.24.158.7:80, 161.99.26.14:60730}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60730: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
375--376[label="1;1pkt 1fpkt"];
375--2816[label="1;1pkt 1fpkt"];
375--3288[label="1;1pkt 1fpkt"];
375--3388[label="1;1pkt 1fpkt"];
376--2816[label="1;1pkt 1fpkt"];
376--3288[label="1;1pkt 1fpkt"];
376--3388[label="1;1pkt 1fpkt"];
2816--3288[label="1;1pkt 1fpkt"];
2816--3388[label="1;1pkt 1fpkt"];
3288--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.26.14" dst_port="60730" src_ip="205.24.158.7" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
390[label="221.179.30.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
391[label="145.222.90.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
2820[label="221.179.30.73;d;1pkt 1fpkt", shape=hexagon, color=black];
2821[label="145.222.90.183;s;1pkt 1fpkt", shape=hexagon, color=black];
5301[label="145.222.90.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.90.183:2177, 221.179.30.73:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2177: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
390--391[label="1;1pkt 1fpkt"];
390--2820[label="1;1pkt 1fpkt"];
390--2821[label="1;1pkt 1fpkt"];
390--5301[label="1;1pkt 1fpkt"];
391--2820[label="1;1pkt 1fpkt"];
391--2821[label="1;1pkt 1fpkt"];
391--5301[label="1;1pkt 1fpkt"];
2820--2821[label="1;1pkt 1fpkt"];
2820--5301[label="1;1pkt 1fpkt"];
2821--5301[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.179.30.73" dst_port="1755" src_ip="145.222.90.183" src_port="2177"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
349[label="166.59.156.232;d;329pkt 329fpkt", shape=diamond, color=yellow];
468[label="28.153.249.116;s;3pkt 3fpkt", shape=diamond, color=yellow];
768[label="166.59.156.234;d;390pkt 390fpkt", shape=diamond, color=yellow];
1158[label="131.186.182.161;d;107pkt 107fpkt", shape=diamond, color=yellow];
1477[label="192.42.188.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
1535[label="24.88.116.14;s;18pkt 18fpkt", shape=diamond, color=yellow];
1898[label="24.88.116.39;s;52pkt 52fpkt", shape=diamond, color=yellow];
1969[label="166.59.163.43;d;20pkt 20fpkt", shape=diamond, color=yellow];
1982[label="166.59.192.125;d;31pkt 31fpkt", shape=diamond, color=yellow];
2008[label="166.59.202.218;d;4pkt 4fpkt", shape=diamond, color=yellow];
2076[label="166.59.168.141;d;21pkt 21fpkt", shape=diamond, color=yellow];
2248[label="24.88.116.6;s;25pkt 25fpkt", shape=diamond, color=yellow];
2286[label="24.88.116.4;s;62pkt 62fpkt", shape=diamond, color=yellow];
2293[label="24.88.116.11;s;61pkt 61fpkt", shape=diamond, color=yellow];
2490[label="24.88.116.1;s;92pkt 92fpkt", shape=diamond, color=yellow];
2581[label="24.88.116.29;s;56pkt 56fpkt", shape=diamond, color=yellow];
3040[label="166.59.156.232;d;167pkt 167fpkt", shape=hexagon, color=black];
3041[label="24.88.116.14;s;18pkt 18fpkt", shape=hexagon, color=black];
3229[label="24.88.116.39;s;52pkt 52fpkt", shape=hexagon, color=black];
3400[label="24.88.116.0;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3428[label="24.88.116.2;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3442[label="24.88.116.3;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3446[label="24.88.116.4;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3511[label="24.88.116.9;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3534[label="24.88.116.11;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3551[label="24.88.116.13;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3569[label="24.88.116.15;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3597[label="24.88.116.17;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3659[label="24.88.116.21;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3689[label="24.88.116.24;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3702[label="24.88.116.25;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3727[label="24.88.116.27;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3737[label="24.88.116.28;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3750[label="24.88.116.29;81pkt 81fpkt", shape=pentagon, color=darkviolet];
3773[label="24.88.116.32;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3893[label="24.88.116.43;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4475[label="196.28.253.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5579[label="154.248.33.211;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5962[label="24.88.116.0;13pkt 13fpkt", shape=invtriangle, color=brown];
5983[label="24.88.116.3;23pkt 23fpkt", shape=invtriangle, color=brown];
6032[label="24.88.116.11;71pkt 71fpkt", shape=invtriangle, color=brown];
6041[label="24.88.116.13;13pkt 13fpkt", shape=invtriangle, color=brown];
6049[label="24.88.116.15;15pkt 15fpkt", shape=invtriangle, color=brown];
6096[label="24.88.116.21;64pkt 64fpkt", shape=invtriangle, color=brown];
6115[label="24.88.116.24;16pkt 16fpkt", shape=invtriangle, color=brown];
6123[label="24.88.116.25;9pkt 9fpkt", shape=invtriangle, color=brown];
6140[label="24.88.116.28;12pkt 12fpkt", shape=invtriangle, color=brown];
6145[label="24.88.116.29;82pkt 82fpkt", shape=invtriangle, color=brown];
6157[label="24.88.116.32;35pkt 35fpkt", shape=invtriangle, color=brown];
6219[label="24.88.116.43;30pkt 30fpkt", shape=invtriangle, color=brown];
7399[label="24.88.116.13;12pkt 12fpkt", shape=invhouse, color=bisque];
7405[label="24.88.116.15;15pkt 15fpkt", shape=invhouse, color=bisque];
7432[label="24.88.116.21;63pkt 63fpkt", shape=invhouse, color=bisque];
7444[label="24.88.116.25;9pkt 9fpkt", shape=invhouse, color=bisque];
7451[label="24.88.116.28;12pkt 12fpkt", shape=invhouse, color=bisque];
7456[label="24.88.116.29;82pkt 82fpkt", shape=invhouse, color=bisque];
7461[label="24.88.116.32;35pkt 35fpkt", shape=invhouse, color=bisque];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.59.156.234:25}[29.5131%]&lt;BR/&gt;{*:*, 166.59.156.232:25}[22.8464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.7379%)&lt;BR/&gt; 53: (0.909428%)&lt;BR/&gt; 113: (0.204157%)&lt;BR/&gt; 0: (0.185598%)&lt;BR/&gt; 36083: (0.167038%)&gt;];
}
349--468[label="0.333333;1pkt 1fpkt"];
349--1535[label="0.166667;3pkt 3fpkt"];
349--1621[label="0.233333;7pkt 7fpkt"];
349--1898[label="0.173077;9pkt 9fpkt"];
349--2248[label="0.24;6pkt 6fpkt"];
349--2283[label="0.177419;11pkt 11fpkt"];
349--2286[label="0.193548;12pkt 12fpkt"];
349--2293[label="0.180328;11pkt 11fpkt"];
349--2490[label="0.184783;17pkt 17fpkt"];
349--2581[label="0.178571;10pkt 10fpkt"];
349--2849[label="0.00303951;1pkt 1fpkt"];
349--3040[label="1;167pkt 167fpkt"];
349--3041[label="0.166667;3pkt 3fpkt"];
349--3229[label="0.173077;9pkt 9fpkt"];
349--3384[label="0.0151976;5pkt 5fpkt"];
349--3400[label="0.153846;2pkt 2fpkt"];
349--3428[label="0.0714286;1pkt 1fpkt"];
349--3442[label="0.26087;6pkt 6fpkt"];
349--3446[label="0.186667;14pkt 14fpkt"];
349--3511[label="0.222222;2pkt 2fpkt"];
349--3534[label="0.185714;13pkt 13fpkt"];
349--3551[label="0.0833333;1pkt 1fpkt"];
349--3569[label="0.0666667;1pkt 1fpkt"];
349--3597[label="0.222222;8pkt 8fpkt"];
349--3659[label="0.174603;11pkt 11fpkt"];
349--3689[label="0.125;2pkt 2fpkt"];
349--3702[label="0.125;1pkt 1fpkt"];
349--3727[label="0.166667;1pkt 1fpkt"];
349--3737[label="0.0909091;1pkt 1fpkt"];
349--3750[label="0.148148;12pkt 12fpkt"];
349--3773[label="0.147059;5pkt 5fpkt"];
349--3893[label="0.233333;7pkt 7fpkt"];
349--4475[label="1;1pkt 1fpkt"];
349--5579[label="0.175439;10pkt 10fpkt"];
349--5859[label="0.00303951;1pkt 1fpkt"];
349--5962[label="0.153846;2pkt 2fpkt"];
349--5983[label="0.26087;6pkt 6fpkt"];
349--6032[label="0.183099;13pkt 13fpkt"];
349--6041[label="0.153846;2pkt 2fpkt"];
349--6049[label="0.0666667;1pkt 1fpkt"];
349--6096[label="0.171875;11pkt 11fpkt"];
349--6115[label="0.125;2pkt 2fpkt"];
349--6123[label="0.111111;1pkt 1fpkt"];
349--6140[label="0.166667;2pkt 2fpkt"];
349--6145[label="0.146341;12pkt 12fpkt"];
349--6157[label="0.171429;6pkt 6fpkt"];
349--6219[label="0.233333;7pkt 7fpkt"];
349--7399[label="0.0833333;1pkt 1fpkt"];
349--7405[label="0.0666667;1pkt 1fpkt"];
349--7432[label="0.174603;11pkt 11fpkt"];
349--7444[label="0.111111;1pkt 1fpkt"];
349--7451[label="0.166667;2pkt 2fpkt"];
349--7456[label="0.146341;12pkt 12fpkt"];
349--7461[label="0.171429;6pkt 6fpkt"];
468--768[label="0.333333;1pkt 1fpkt"];
468--3040[label="0.333333;1pkt 1fpkt"];
768--1535[label="0.222222;4pkt 4fpkt"];
768--1621[label="0.233333;7pkt 7fpkt"];
768--1898[label="0.211538;11pkt 11fpkt"];
768--2248[label="0.28;7pkt 7fpkt"];
768--2283[label="0.209677;13pkt 13fpkt"];
768--2286[label="0.209677;13pkt 13fpkt"];
768--2293[label="0.213115;13pkt 13fpkt"];
768--2490[label="0.217391;20pkt 20fpkt"];
768--2581[label="0.214286;12pkt 12fpkt"];
768--3041[label="0.222222;4pkt 4fpkt"];
768--3229[label="0.211538;11pkt 11fpkt"];
768--3400[label="0.230769;3pkt 3fpkt"];
768--3428[label="0.0714286;1pkt 1fpkt"];
768--3442[label="0.26087;6pkt 6fpkt"];
768--3446[label="0.213333;16pkt 16fpkt"];
768--3511[label="0.222222;2pkt 2fpkt"];
768--3534[label="0.214286;15pkt 15fpkt"];
768--3551[label="0.25;3pkt 3fpkt"];
768--3569[label="0.2;3pkt 3fpkt"];
768--3597[label="0.25;9pkt 9fpkt"];
768--3659[label="0.206349;13pkt 13fpkt"];
768--3689[label="0.25;4pkt 4fpkt"];
768--3702[label="0.25;2pkt 2fpkt"];
768--3727[label="0.333333;2pkt 2fpkt"];
768--3737[label="0.272727;3pkt 3fpkt"];
768--3750[label="0.185185;15pkt 15fpkt"];
768--3773[label="0.264706;9pkt 9fpkt"];
768--3893[label="0.233333;7pkt 7fpkt"];
768--5962[label="0.230769;3pkt 3fpkt"];
768--5983[label="0.26087;6pkt 6fpkt"];
768--6032[label="0.211268;15pkt 15fpkt"];
768--6041[label="0.230769;3pkt 3fpkt"];
768--6049[label="0.2;3pkt 3fpkt"];
768--6096[label="0.203125;13pkt 13fpkt"];
768--6115[label="0.25;4pkt 4fpkt"];
768--6123[label="0.222222;2pkt 2fpkt"];
768--6140[label="0.25;3pkt 3fpkt"];
768--6145[label="0.182927;15pkt 15fpkt"];
768--6157[label="0.257143;9pkt 9fpkt"];
768--6219[label="0.233333;7pkt 7fpkt"];
768--7399[label="0.25;3pkt 3fpkt"];
768--7405[label="0.2;3pkt 3fpkt"];
768--7432[label="0.206349;13pkt 13fpkt"];
768--7444[label="0.222222;2pkt 2fpkt"];
768--7451[label="0.25;3pkt 3fpkt"];
768--7456[label="0.182927;15pkt 15fpkt"];
768--7461[label="0.257143;9pkt 9fpkt"];
1158--1477[label="1;1pkt 1fpkt"];
1158--1535[label="0.0555556;1pkt 1fpkt"];
1158--3041[label="0.0555556;1pkt 1fpkt"];
1158--3102[label="0.25;3pkt 3fpkt"];
1158--5019[label="0.0357143;1pkt 1fpkt"];
1158--5228[label="0.0666667;1pkt 1fpkt"];
1158--5306[label="0.166667;2pkt 2fpkt"];
1158--6852[label="0.037037;1pkt 1fpkt"];
1158--6968[label="0.125;2pkt 2fpkt"];
1158--7010[label="0.0909091;1pkt 1fpkt"];
1158--7932[label="0.125;2pkt 2fpkt"];
1535--1969[label="0.0555556;1pkt 1fpkt"];
1535--1982[label="0.166667;3pkt 3fpkt"];
1535--2076[label="0.0555556;1pkt 1fpkt"];
1535--2502[label="0.1;1pkt 1fpkt"];
1535--3040[label="0.166667;3pkt 3fpkt"];
1535--3041[label="1;18pkt 18fpkt"];
1898--1917[label="0.153846;2pkt 2fpkt"];
1898--2076[label="0.047619;1pkt 1fpkt"];
1898--3040[label="0.0961538;5pkt 5fpkt"];
1898--3229[label="1;52pkt 52fpkt"];
1969--2248[label="0.05;1pkt 1fpkt"];
1969--2283[label="0.05;1pkt 1fpkt"];
1969--2286[label="0.05;1pkt 1fpkt"];
1969--2293[label="0.05;1pkt 1fpkt"];
1969--2490[label="0.05;1pkt 1fpkt"];
1969--2581[label="0.05;1pkt 1fpkt"];
1969--3041[label="0.0555556;1pkt 1fpkt"];
1969--3400[label="0.0769231;1pkt 1fpkt"];
1969--3428[label="0.0714286;1pkt 1fpkt"];
1969--3446[label="0.05;1pkt 1fpkt"];
1969--3511[label="0.111111;1pkt 1fpkt"];
1969--3534[label="0.05;1pkt 1fpkt"];
1969--3659[label="0.05;1pkt 1fpkt"];
1969--3689[label="0.0625;1pkt 1fpkt"];
1969--3750[label="0.1;2pkt 2fpkt"];
1969--3893[label="0.05;1pkt 1fpkt"];
1969--4208[label="0.1;2pkt 2fpkt"];
1969--5962[label="0.0769231;1pkt 1fpkt"];
1969--6032[label="0.05;1pkt 1fpkt"];
1969--6096[label="0.05;1pkt 1fpkt"];
1969--6115[label="0.0625;1pkt 1fpkt"];
1969--6145[label="0.1;2pkt 2fpkt"];
1969--6219[label="0.05;1pkt 1fpkt"];
1969--6388[label="0.1;2pkt 2fpkt"];
1969--7432[label="0.05;1pkt 1fpkt"];
1969--7456[label="0.1;2pkt 2fpkt"];
1969--7598[label="0.1;2pkt 2fpkt"];
1982--2056[label="1;1pkt 1fpkt"];
1982--2283[label="0.0645161;2pkt 2fpkt"];
1982--2286[label="0.0645161;2pkt 2fpkt"];
1982--2293[label="0.0967742;3pkt 3fpkt"];
1982--2490[label="0.0645161;2pkt 2fpkt"];
1982--2581[label="0.0645161;2pkt 2fpkt"];
1982--3041[label="0.166667;3pkt 3fpkt"];
1982--3147[label="1;1pkt 1fpkt"];
1982--3428[label="0.0714286;1pkt 1fpkt"];
1982--3446[label="0.0645161;2pkt 2fpkt"];
1982--3534[label="0.129032;4pkt 4fpkt"];
1982--3569[label="0.0666667;1pkt 1fpkt"];
1982--3659[label="0.0645161;2pkt 2fpkt"];
1982--3689[label="0.125;2pkt 2fpkt"];
1982--3750[label="0.0645161;2pkt 2fpkt"];
1982--3893[label="0.0333333;1pkt 1fpkt"];
1982--4170[label="0.0666667;2pkt 2fpkt"];
1982--6032[label="0.129032;4pkt 4fpkt"];
1982--6049[label="0.0666667;1pkt 1fpkt"];
1982--6096[label="0.0645161;2pkt 2fpkt"];
1982--6115[label="0.125;2pkt 2fpkt"];
1982--6145[label="0.0645161;2pkt 2fpkt"];
1982--6219[label="0.0333333;1pkt 1fpkt"];
1982--6367[label="0.0689655;2pkt 2fpkt"];
1982--7405[label="0.0666667;1pkt 1fpkt"];
1982--7432[label="0.0645161;2pkt 2fpkt"];
1982--7456[label="0.0645161;2pkt 2fpkt"];
2008--2248[label="0.25;1pkt 1fpkt"];
2076--2490[label="0.047619;1pkt 1fpkt"];
2076--3041[label="0.0555556;1pkt 1fpkt"];
2076--3229[label="0.047619;1pkt 1fpkt"];
2076--3400[label="0.0769231;1pkt 1fpkt"];
2076--3551[label="0.0833333;1pkt 1fpkt"];
2076--3597[label="0.047619;1pkt 1fpkt"];
2076--3750[label="0.047619;1pkt 1fpkt"];
2076--3773[label="0.047619;1pkt 1fpkt"];
2076--3893[label="0.047619;1pkt 1fpkt"];
2076--5962[label="0.0769231;1pkt 1fpkt"];
2076--6041[label="0.0769231;1pkt 1fpkt"];
2076--6145[label="0.047619;1pkt 1fpkt"];
2076--6157[label="0.047619;1pkt 1fpkt"];
2076--6219[label="0.047619;1pkt 1fpkt"];
2076--7399[label="0.0833333;1pkt 1fpkt"];
2076--7456[label="0.047619;1pkt 1fpkt"];
2076--7461[label="0.047619;1pkt 1fpkt"];
2248--3040[label="0.08;2pkt 2fpkt"];
2286--2502[label="0.1;1pkt 1fpkt"];
2286--3446[label="1;62pkt 62fpkt"];
2293--2502[label="0.1;1pkt 1fpkt"];
2293--3534[label="0.983607;60pkt 60fpkt"];
2293--6032[label="1;61pkt 61fpkt"];
2490--2502[label="0.1;1pkt 1fpkt"];
2490--3040[label="0.0434783;4pkt 4fpkt"];
2581--3750[label="0.982143;55pkt 55fpkt"];
2581--6145[label="1;56pkt 56fpkt"];
2581--7456[label="1;56pkt 56fpkt"];
3040--3041[label="0.166667;3pkt 3fpkt"];
3040--3229[label="0.0961538;5pkt 5fpkt"];
3040--3384[label="0.0299401;5pkt 5fpkt"];
3040--3400[label="0.0769231;1pkt 1fpkt"];
3040--3442[label="0.0869565;2pkt 2fpkt"];
3040--3446[label="0.0266667;2pkt 2fpkt"];
3040--3511[label="0.222222;2pkt 2fpkt"];
3040--3534[label="0.0285714;2pkt 2fpkt"];
3040--3597[label="0.222222;8pkt 8fpkt"];
3040--3702[label="0.125;1pkt 1fpkt"];
3040--3727[label="0.166667;1pkt 1fpkt"];
3040--3750[label="0.0246914;2pkt 2fpkt"];
3040--3773[label="0.0588235;2pkt 2fpkt"];
3040--3893[label="0.1;3pkt 3fpkt"];
3040--4475[label="1;1pkt 1fpkt"];
3040--5579[label="0.105263;6pkt 6fpkt"];
3040--5859[label="0.00598802;1pkt 1fpkt"];
3040--5962[label="0.0769231;1pkt 1fpkt"];
3040--5983[label="0.0869565;2pkt 2fpkt"];
3040--6032[label="0.028169;2pkt 2fpkt"];
3040--6041[label="0.0769231;1pkt 1fpkt"];
3040--6123[label="0.111111;1pkt 1fpkt"];
3040--6140[label="0.0833333;1pkt 1fpkt"];
3040--6145[label="0.0243902;2pkt 2fpkt"];
3040--6157[label="0.0857143;3pkt 3fpkt"];
3040--6219[label="0.1;3pkt 3fpkt"];
3040--7444[label="0.111111;1pkt 1fpkt"];
3040--7451[label="0.0833333;1pkt 1fpkt"];
3040--7456[label="0.0243902;2pkt 2fpkt"];
3040--7461[label="0.0857143;3pkt 3fpkt"];
3400--5962[label="1;13pkt 13fpkt"];
3442--5983[label="1;23pkt 23fpkt"];
3534--6032[label="1;70pkt 70fpkt"];
3551--6041[label="1;12pkt 12fpkt"];
3551--7399[label="1;12pkt 12fpkt"];
3569--6049[label="1;15pkt 15fpkt"];
3569--7405[label="1;15pkt 15fpkt"];
3659--6096[label="1;63pkt 63fpkt"];
3659--7432[label="1;63pkt 63fpkt"];
3689--6115[label="1;16pkt 16fpkt"];
3702--6123[label="1;8pkt 8fpkt"];
3702--7444[label="1;8pkt 8fpkt"];
3737--6140[label="1;11pkt 11fpkt"];
3737--7451[label="1;11pkt 11fpkt"];
3750--6145[label="1;81pkt 81fpkt"];
3750--7456[label="1;81pkt 81fpkt"];
3773--6157[label="1;34pkt 34fpkt"];
3773--7461[label="1;34pkt 34fpkt"];
3893--6219[label="1;30pkt 30fpkt"];
6041--7399[label="1;12pkt 12fpkt"];
6049--7405[label="1;15pkt 15fpkt"];
6096--7432[label="1;63pkt 63fpkt"];
6123--7444[label="1;9pkt 9fpkt"];
6140--7451[label="1;12pkt 12fpkt"];
6145--7456[label="1;82pkt 82fpkt"];
6157--7461[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.156.234" dst_port="25"/>
      <filter dst_ip="166.59.156.232" dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
485[label="202.162.40.119;d;2pkt 2fpkt", shape=diamond, color=yellow];
486[label="212.79.210.34;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.210.34:2744, 202.162.40.119:443}[50%]&lt;BR/&gt;{212.79.210.34:2932, 202.162.40.119:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2932: (25%)&lt;BR/&gt; 2744: (25%)&gt;];
}
485--486[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="202.162.40.119" dst_port="443" src_ip="212.79.210.34" src_port="2932"/>
      <filter dst_ip="202.162.40.119" dst_port="443" src_ip="212.79.210.34" src_port="2744"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
340[label="145.223.245.220;s;93pkt 93fpkt", shape=diamond, color=yellow];
501[label="68.80.4.106;d;2pkt 2fpkt", shape=diamond, color=yellow];
522[label="24.1.200.175;d;2pkt 2fpkt", shape=diamond, color=yellow];
546[label="24.178.230.32;d;114pkt 114fpkt", shape=diamond, color=yellow];
5690[label="145.223.245.220;171pkt 171fpkt", shape=pentagon, color=darkviolet];
7211[label="145.223.245.220;171pkt 171fpkt", shape=invtriangle, color=brown];
8080[label="145.223.245.220;171pkt 171fpkt", shape=invhouse, color=bisque];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.1.209:*, 24.178.230.32:80}[28.3636%]&lt;BR/&gt;{145.223.245.220:*, 29.13.34.133:80}[21.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5442%)&lt;BR/&gt; 110: (3.79834%)&lt;BR/&gt; 1863: (1.10497%)&lt;BR/&gt; 0: (0.552486%)&lt;BR/&gt; 1512: (0.345304%)&gt;];
}
340--501[label="1;2pkt 2fpkt"];
340--518[label="0.333333;11pkt 11fpkt"];
340--522[label="1;2pkt 2fpkt"];
340--546[label="0.11828;11pkt 11fpkt"];
340--647[label="0.0752688;7pkt 7fpkt"];
340--1344[label="0.0107527;1pkt 1fpkt"];
340--1826[label="0.0416667;1pkt 1fpkt"];
340--1866[label="0.0107527;1pkt 1fpkt"];
340--1901[label="0.0125;1pkt 1fpkt"];
340--2428[label="0.0215054;2pkt 2fpkt"];
340--2651[label="0.0769231;1pkt 1fpkt"];
340--2700[label="0.0181818;1pkt 1fpkt"];
340--5690[label="0.989247;92pkt 92fpkt"];
340--7211[label="0.989247;92pkt 92fpkt"];
340--8080[label="0.989247;92pkt 92fpkt"];
501--5690[label="1;2pkt 2fpkt"];
501--7211[label="1;2pkt 2fpkt"];
501--8080[label="1;2pkt 2fpkt"];
522--5690[label="1;2pkt 2fpkt"];
522--7211[label="1;2pkt 2fpkt"];
522--8080[label="1;2pkt 2fpkt"];
546--779[label="0.684211;78pkt 78fpkt"];
546--2896[label="0.684211;78pkt 78fpkt"];
546--3374[label="0.684211;78pkt 78fpkt"];
546--4199[label="0.0263158;3pkt 3fpkt"];
546--5532[label="0.175439;20pkt 20fpkt"];
546--5548[label="0.684211;78pkt 78fpkt"];
546--5690[label="0.0964912;11pkt 11fpkt"];
546--5835[label="0.0175439;2pkt 2fpkt"];
546--6384[label="0.0263158;3pkt 3fpkt"];
546--7144[label="0.684211;78pkt 78fpkt"];
546--7211[label="0.0964912;11pkt 11fpkt"];
546--7288[label="0.0175439;2pkt 2fpkt"];
546--7595[label="0.0263158;3pkt 3fpkt"];
546--8038[label="0.684211;78pkt 78fpkt"];
546--8080[label="0.0964912;11pkt 11fpkt"];
546--8121[label="0.0175439;2pkt 2fpkt"];
5690--7211[label="1;171pkt 171fpkt"];
5690--8080[label="1;171pkt 171fpkt"];
7211--8080[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_ip="29.13.34.133" dst_port="80" src_ip="145.223.245.220"/>
      <filter dst_ip="24.178.230.32" dst_port="80" src_ip="145.222.1.209"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
534[label="145.223.225.251;s;6pkt 6fpkt", shape=diamond, color=yellow];
535[label="201.74.163.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
5936[label="145.223.225.251;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7351[label="145.223.225.251;5pkt 5fpkt", shape=invtriangle, color=brown];
8154[label="145.223.225.251;5pkt 5fpkt", shape=invhouse, color=bisque];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.225.251:*, 201.228.33.43:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32967: (10.8696%)&lt;BR/&gt; 32980: (8.69565%)&lt;BR/&gt; 32979: (8.69565%)&lt;BR/&gt; 32977: (8.69565%)&gt;];
}
534--535[label="1;1pkt 1fpkt"];
534--5936[label="1;6pkt 6fpkt"];
534--7351[label="1;5pkt 5fpkt"];
534--8154[label="1;5pkt 5fpkt"];
535--5936[label="1;1pkt 1fpkt"];
535--7351[label="1;1pkt 1fpkt"];
535--8154[label="1;1pkt 1fpkt"];
5936--7351[label="1;5pkt 5fpkt"];
5936--8154[label="1;5pkt 5fpkt"];
7351--8154[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.228.33.43" dst_port="80" src_ip="145.223.225.251"/>
    </slice>
    <from sec="1120712457" usec="0"/>
    <to sec="1120712506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
521[label="27.57.186.67;s;43pkt 43fpkt", shape=diamond, color=yellow];
537[label="131.186.221.166;d;19pkt 19fpkt", shape=diamond, color=yellow];
3327[label="27.57.186.67;s;43pkt 43fpkt", shape=hexagon, color=black];
4147[label="27.57.186.67;43pkt 43fpkt", shape=pentagon, color=darkviolet];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.57.186.67:80, 131.186.221.166:*}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1254: (1.35135%)&lt;BR/&gt; 1252: (1.35135%)&lt;BR/&gt; 1251: (1.35135%)&lt;BR/&gt; 1250: (1.35135%)&gt;];
}
521--537[label="0.631579;12pkt 12fpkt"];
521--3327[label="1;43pkt 43fpkt"];
521--4147[label="0.976744;42pkt 42fpkt"];
537--3327[label="0.631579;12pkt 12fpkt"];
537--4147[label="0.631579;12pkt 12fpkt"];
3327--4147[label="0.976744;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.221.166" src_ip="27.57.186.67" src_port="80"/>
    </slice>
    <from sec="1120712435" usec="0"/>
    <to sec="1120713240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
392[label="145.222.177.66;s;259pkt 259fpkt", shape=diamond, color=yellow];
545[label="213.114.73.166;d;5pkt 5fpkt", shape=diamond, color=yellow];
4131[label="145.222.177.66;266pkt 266fpkt", shape=pentagon, color=darkviolet];
6344[label="145.222.177.66;266pkt 266fpkt", shape=invtriangle, color=brown];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.177.66:25, *:*}[78.6517%]&lt;BR/&gt;{145.222.177.66:*, *:25}[21.3483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3015: (0.376884%)&lt;BR/&gt; 3014: (0.376884%)&lt;BR/&gt; 3013: (0.376884%)&lt;BR/&gt; 3012: (0.376884%)&gt;];
}
392--545[label="1;5pkt 5fpkt"];
392--4131[label="0.996139;258pkt 258fpkt"];
392--6344[label="0.996139;258pkt 258fpkt"];
545--4131[label="1;5pkt 5fpkt"];
545--6344[label="1;5pkt 5fpkt"];
4131--6344[label="1;266pkt 266fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.177.66" src_port="25"/>
      <filter dst_port="25" src_ip="145.222.177.66"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
569[label="149.110.179.73;s;530pkt 530fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.179.73:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
569--1506[label="0.00436681;1pkt 1fpkt"];
569--1516[label="0.00292398;1pkt 1fpkt"];
569--1914[label="0.0046729;1pkt 1fpkt"];
569--1939[label="0.005;1pkt 1fpkt"];
569--2304[label="0.00485437;1pkt 1fpkt"];
569--2377[label="0.00568182;1pkt 1fpkt"];
569--2599[label="0.00487805;1pkt 1fpkt"];
569--3130[label="0.00714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.110.179.73"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
228[label="145.222.13.29;s;148pkt 148fpkt", shape=diamond, color=yellow];
584[label="28.153.202.59;d;2pkt 2fpkt", shape=diamond, color=yellow];
1323[label="24.179.108.229;d;127pkt 127fpkt", shape=diamond, color=yellow];
1860[label="149.110.176.33;s;24pkt 24fpkt", shape=diamond, color=yellow];
2198[label="161.99.130.195;s;25pkt 25fpkt", shape=diamond, color=yellow];
2526[label="211.166.218.234;d;39pkt 39fpkt", shape=diamond, color=yellow];
2705[label="166.59.224.194;s;62pkt 62fpkt", shape=diamond, color=yellow];
3028[label="145.222.13.29;s;91pkt 91fpkt", shape=hexagon, color=black];
3638[label="212.66.176.19;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3742[label="145.222.13.29;159pkt 159fpkt", shape=pentagon, color=darkviolet];
3757[label="166.59.154.30;65pkt 65fpkt", shape=pentagon, color=darkviolet];
4130[label="149.110.176.66;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4382[label="149.110.176.89;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4789[label="145.222.66.133;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5386[label="145.222.80.193;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5402[label="166.59.224.194;64pkt 64fpkt", shape=pentagon, color=darkviolet];
5407[label="161.99.130.195;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5702[label="212.79.237.221;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5773[label="145.222.149.228;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6088[label="212.66.176.19;48pkt 48fpkt", shape=invtriangle, color=brown];
6484[label="149.110.176.89;38pkt 38fpkt", shape=invtriangle, color=brown];
6718[label="145.222.66.133;23pkt 23fpkt", shape=invtriangle, color=brown];
7061[label="145.222.80.193;31pkt 31fpkt", shape=invtriangle, color=brown];
7072[label="166.59.224.194;63pkt 63fpkt", shape=invtriangle, color=brown];
7076[label="161.99.130.195;25pkt 25fpkt", shape=invtriangle, color=brown];
7220[label="212.79.237.221;6pkt 6fpkt", shape=invtriangle, color=brown];
7256[label="145.222.149.228;4pkt 4fpkt", shape=invtriangle, color=brown];
7425[label="212.66.176.19;48pkt 48fpkt", shape=invhouse, color=bisque];
7657[label="149.110.176.89;38pkt 38fpkt", shape=invhouse, color=bisque];
7793[label="145.222.66.133;23pkt 23fpkt", shape=invhouse, color=bisque];
7984[label="145.222.80.193;32pkt 32fpkt", shape=invhouse, color=bisque];
7992[label="166.59.224.194;63pkt 63fpkt", shape=invhouse, color=bisque];
7996[label="161.99.130.195;25pkt 25fpkt", shape=invhouse, color=bisque];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.13.29:80, *:*}[27.1186%]&lt;BR/&gt;{*:80, 24.179.108.229:*}[21.8644%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0191%)&lt;BR/&gt; 53: (1.63934%)&lt;BR/&gt; 49152: (1.05874%)&lt;BR/&gt; 0: (0.409836%)&lt;BR/&gt; 1063: (0.307377%)&gt;];
}
228--584[label="0.5;1pkt 1fpkt"];
228--1323[label="0.0629921;8pkt 8fpkt"];
228--3028[label="1;91pkt 91fpkt"];
228--3388[label="0.0472973;7pkt 7fpkt"];
228--3742[label="0.993243;147pkt 147fpkt"];
584--3028[label="0.5;1pkt 1fpkt"];
584--3742[label="0.5;1pkt 1fpkt"];
584--3757[label="0.5;1pkt 1fpkt"];
1323--1854[label="0.0655738;8pkt 8fpkt"];
1323--1860[label="0.0416667;1pkt 1fpkt"];
1323--2198[label="0.2;5pkt 5fpkt"];
1323--2705[label="0.0483871;3pkt 3fpkt"];
1323--2803[label="0.00787402;1pkt 1fpkt"];
1323--3011[label="0.0314961;4pkt 4fpkt"];
1323--3028[label="0.0769231;7pkt 7fpkt"];
1323--3354[label="0.00787402;1pkt 1fpkt"];
1323--3388[label="0.173228;22pkt 22fpkt"];
1323--3638[label="0.265306;13pkt 13fpkt"];
1323--3742[label="0.0629921;8pkt 8fpkt"];
1323--4130[label="0.0666667;1pkt 1fpkt"];
1323--4701[label="0.00787402;1pkt 1fpkt"];
1323--4789[label="0.409091;9pkt 9fpkt"];
1323--5095[label="0.0708661;9pkt 9fpkt"];
1323--5355[label="0.0314961;4pkt 4fpkt"];
1323--5386[label="0.28125;9pkt 9fpkt"];
1323--5402[label="0.046875;3pkt 3fpkt"];
1323--5407[label="0.2;5pkt 5fpkt"];
1323--5702[label="0.5;3pkt 3fpkt"];
1323--5773[label="0.666667;2pkt 2fpkt"];
1323--6088[label="0.270833;13pkt 13fpkt"];
1323--6665[label="0.00787402;1pkt 1fpkt"];
1323--6718[label="0.391304;9pkt 9fpkt"];
1323--7043[label="0.0314961;4pkt 4fpkt"];
1323--7061[label="0.290323;9pkt 9fpkt"];
1323--7072[label="0.047619;3pkt 3fpkt"];
1323--7076[label="0.2;5pkt 5fpkt"];
1323--7220[label="0.5;3pkt 3fpkt"];
1323--7256[label="0.75;3pkt 3fpkt"];
1323--7425[label="0.270833;13pkt 13fpkt"];
1323--7760[label="0.00787402;1pkt 1fpkt"];
1323--7793[label="0.391304;9pkt 9fpkt"];
1323--7976[label="0.0314961;4pkt 4fpkt"];
1323--7984[label="0.28125;9pkt 9fpkt"];
1323--7992[label="0.047619;3pkt 3fpkt"];
1323--7996[label="0.2;5pkt 5fpkt"];
1860--2526[label="0.375;9pkt 9fpkt"];
1860--3388[label="0.0416667;1pkt 1fpkt"];
2198--3388[label="0.08;2pkt 2fpkt"];
2198--5407[label="1;25pkt 25fpkt"];
2198--7076[label="1;25pkt 25fpkt"];
2198--7996[label="1;25pkt 25fpkt"];
2526--3388[label="0.025641;1pkt 1fpkt"];
2526--4382[label="0.461538;18pkt 18fpkt"];
2526--6484[label="0.473684;18pkt 18fpkt"];
2526--7657[label="0.473684;18pkt 18fpkt"];
2705--3388[label="0.16129;10pkt 10fpkt"];
2705--5402[label="1;62pkt 62fpkt"];
2705--7072[label="0.983871;61pkt 61fpkt"];
2705--7992[label="0.983871;61pkt 61fpkt"];
3028--3388[label="0.032967;3pkt 3fpkt"];
3028--3742[label="0.989011;90pkt 90fpkt"];
3638--6088[label="1;48pkt 48fpkt"];
3638--7425[label="1;48pkt 48fpkt"];
4382--6484[label="1;38pkt 38fpkt"];
4382--7657[label="1;38pkt 38fpkt"];
4789--6718[label="1;22pkt 22fpkt"];
4789--7793[label="1;22pkt 22fpkt"];
5386--7061[label="1;31pkt 31fpkt"];
5386--7984[label="1;32pkt 32fpkt"];
5402--7072[label="1;63pkt 63fpkt"];
5402--7992[label="1;63pkt 63fpkt"];
5407--7076[label="1;25pkt 25fpkt"];
5407--7996[label="1;25pkt 25fpkt"];
5702--7220[label="1;6pkt 6fpkt"];
5773--7256[label="1;3pkt 3fpkt"];
6088--7425[label="1;48pkt 48fpkt"];
6484--7657[label="1;38pkt 38fpkt"];
6718--7793[label="1;23pkt 23fpkt"];
7061--7984[label="1;31pkt 31fpkt"];
7072--7992[label="1;63pkt 63fpkt"];
7076--7996[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.13.29" src_port="80"/>
      <filter dst_ip="24.179.108.229" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
666[label="213.209.37.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
667[label="145.222.74.54;s;3pkt 3fpkt", shape=diamond, color=yellow];
2879[label="145.222.74.54;s;2pkt 2fpkt", shape=hexagon, color=black];
4014[label="145.222.74.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.74.54:60200, 211.166.147.27:1863}[33.3333%]&lt;BR/&gt;{145.222.74.54:60255, 3.156.194.127:123}[33.3333%]&lt;BR/&gt;{145.222.74.54:63885, 213.209.37.146:554}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63885: (22.2222%)&lt;BR/&gt; 554: (22.2222%)&lt;BR/&gt; 60200: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 60255: (11.1111%)&gt;];
}
666--667[label="1;1pkt 1fpkt"];
666--2879[label="1;1pkt 1fpkt"];
666--4014[label="1;1pkt 1fpkt"];
667--2426[label="0.333333;1pkt 1fpkt"];
667--2879[label="1;2pkt 2fpkt"];
667--4014[label="1;3pkt 3fpkt"];
2879--4014[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.209.37.146" dst_port="554" src_ip="145.222.74.54" src_port="63885"/>
      <filter dst_ip="3.156.194.127" dst_port="123" src_ip="145.222.74.54" src_port="60255"/>
      <filter dst_ip="211.166.147.27" dst_port="1863" src_ip="145.222.74.54" src_port="60200"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
394[label="149.177.121.82;s;22pkt 22fpkt", shape=diamond, color=yellow];
673[label="26.134.241.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
836[label="28.162.254.93;d;4pkt 4fpkt", shape=diamond, color=yellow];
2028[label="29.212.237.210;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.121.82:80, *:*}[50%]&lt;BR/&gt;{149.177.121.82:18000, 6.44.74.75:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.0968%)&lt;BR/&gt; 18000: (12.9032%)&lt;BR/&gt; 33575: (3.22581%)&lt;BR/&gt; 4248: (3.22581%)&lt;BR/&gt; 4231: (3.22581%)&gt;];
}
394--673[label="1;1pkt 1fpkt"];
394--789[label="1;3pkt 3fpkt"];
394--836[label="1;4pkt 4fpkt"];
394--2028[label="1;4pkt 4fpkt"];
394--2972[label="1;3pkt 3fpkt"];
394--3388[label="0.181818;4pkt 4fpkt"];
673--3388[label="1;1pkt 1fpkt"];
836--3388[label="0.5;2pkt 2fpkt"];
2028--3388[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.121.82" src_port="80"/>
      <filter dst_ip="6.44.74.75" src_ip="149.177.121.82" src_port="18000"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
701[label="193.205.234.83;s;2213pkt 2213fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.205.234.83:1394, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1394: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1434" src_ip="193.205.234.83" src_port="1394"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
204[label="166.59.140.223;d;1694pkt 1694fpkt", shape=diamond, color=yellow];
247[label="24.166.67.191;s;15pkt 15fpkt", shape=diamond, color=yellow];
624[label="202.131.119.119;s;10pkt 10fpkt", shape=diamond, color=yellow];
660[label="24.107.70.226;s;225pkt 225fpkt", shape=diamond, color=yellow];
691[label="26.128.86.26;s;6pkt 6fpkt", shape=diamond, color=yellow];
970[label="166.59.153.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="213.193.231.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
1675[label="87.44.232.143;s;36pkt 36fpkt", shape=diamond, color=yellow];
1716[label="131.186.132.121;d;118pkt 118fpkt", shape=diamond, color=yellow];
1805[label="87.44.232.142;s;50pkt 50fpkt", shape=diamond, color=yellow];
2036[label="202.224.80.114;s;25pkt 25fpkt", shape=diamond, color=yellow];
2159[label="211.166.128.219;s;34pkt 34fpkt", shape=diamond, color=yellow];
2250[label="205.33.243.39;s;23pkt 23fpkt", shape=diamond, color=yellow];
2422[label="28.153.240.152;s;98pkt 98fpkt", shape=diamond, color=yellow];
2601[label="2.88.199.151;s;5pkt 5fpkt", shape=diamond, color=yellow];
2675[label="87.44.232.152;s;19pkt 19fpkt", shape=diamond, color=yellow];
2686[label="87.44.232.150;s;46pkt 46fpkt", shape=diamond, color=yellow];
2749[label="194.245.132.26;s;11pkt 11fpkt", shape=diamond, color=yellow];
2869[label="26.132.116.161;s;45pkt 45fpkt", shape=hexagon, color=black];
2913[label="131.186.212.177;d;6pkt 6fpkt", shape=hexagon, color=black];
2953[label="26.128.86.26;s;6pkt 6fpkt", shape=hexagon, color=black];
3337[label="205.33.243.39;s;23pkt 23fpkt", shape=hexagon, color=black];
3431[label="24.194.157.2;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3459[label="194.129.154.5;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3710[label="26.128.86.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3812[label="27.57.200.35;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3837[label="29.38.155.38;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3925[label="29.38.155.46;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3990[label="29.38.155.52;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4009[label="24.1.244.53;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4594[label="202.224.80.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4601[label="194.68.32.113;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4612[label="202.224.80.114;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4771[label="24.88.120.131;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4830[label="24.88.120.137;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4872[label="87.44.232.140;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4888[label="87.44.232.142;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4969[label="87.44.232.149;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4978[label="134.224.166.150;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4980[label="87.44.232.150;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4987[label="2.88.199.151;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4996[label="87.44.232.152;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5014[label="87.44.232.154;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5065[label="212.160.211.160;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5069[label="24.64.247.160;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5073[label="26.132.116.161;292pkt 292fpkt", shape=pentagon, color=darkviolet];
5086[label="26.53.165.162;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5202[label="28.153.249.172;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5274[label="28.153.249.180;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5294[label="29.13.192.182;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5303[label="220.38.182.183;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5366[label="24.166.67.191;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5395[label="87.92.49.194;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5496[label="194.165.63.203;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5568[label="24.226.156.210;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5577[label="87.72.1.211;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5583[label="211.197.69.211;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5648[label="219.3.101.216;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5682[label="211.166.128.219;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5751[label="24.107.70.226;242pkt 242fpkt", shape=pentagon, color=darkviolet];
5789[label="68.82.229.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5833[label="211.197.82.237;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5933[label="26.254.131.251;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5981[label="24.194.157.2;35pkt 35fpkt", shape=invtriangle, color=brown];
5989[label="194.129.154.5;5pkt 5fpkt", shape=invtriangle, color=brown];
6131[label="26.128.86.26;6pkt 6fpkt", shape=invtriangle, color=brown];
6188[label="29.38.155.38;14pkt 14fpkt", shape=invtriangle, color=brown];
6605[label="194.68.32.113;17pkt 17fpkt", shape=invtriangle, color=brown];
6706[label="24.88.120.131;13pkt 13fpkt", shape=invtriangle, color=brown];
6737[label="24.88.120.137;6pkt 6fpkt", shape=invtriangle, color=brown];
6767[label="87.44.232.142;52pkt 52fpkt", shape=invtriangle, color=brown];
6828[label="87.44.232.150;47pkt 47fpkt", shape=invtriangle, color=brown];
6834[label="2.88.199.151;4pkt 4fpkt", shape=invtriangle, color=brown];
6840[label="87.44.232.152;23pkt 23fpkt", shape=invtriangle, color=brown];
6850[label="87.44.232.154;18pkt 18fpkt", shape=invtriangle, color=brown];
6880[label="24.64.247.160;36pkt 36fpkt", shape=invtriangle, color=brown];
6887[label="26.53.165.162;3pkt 3fpkt", shape=invtriangle, color=brown];
6992[label="28.153.249.180;9pkt 9fpkt", shape=invtriangle, color=brown];
7067[label="87.92.49.194;22pkt 22fpkt", shape=invtriangle, color=brown];
7156[label="24.226.156.210;20pkt 20fpkt", shape=invtriangle, color=brown];
7207[label="211.166.128.219;34pkt 34fpkt", shape=invtriangle, color=brown];
7263[label="68.82.229.231;2pkt 2fpkt", shape=invtriangle, color=brown];
7287[label="211.197.82.237;17pkt 17fpkt", shape=invtriangle, color=brown];
7378[label="194.129.154.5;5pkt 5fpkt", shape=invhouse, color=bisque];
7727[label="194.68.32.113;18pkt 18fpkt", shape=invhouse, color=bisque];
7785[label="24.88.120.131;14pkt 14fpkt", shape=invhouse, color=bisque];
7801[label="24.88.120.137;5pkt 5fpkt", shape=invhouse, color=bisque];
7815[label="87.44.232.142;51pkt 51fpkt", shape=invhouse, color=bisque];
7851[label="87.44.232.150;48pkt 48fpkt", shape=invhouse, color=bisque];
7861[label="87.44.232.154;18pkt 18fpkt", shape=invhouse, color=bisque];
7877[label="24.64.247.160;36pkt 36fpkt", shape=invhouse, color=bisque];
7879[label="26.53.165.162;4pkt 4fpkt", shape=invhouse, color=bisque];
7919[label="28.153.249.172;14pkt 14fpkt", shape=invhouse, color=bisque];
7945[label="28.153.249.180;9pkt 9fpkt", shape=invhouse, color=bisque];
7947[label="212.196.6.181;15pkt 15fpkt", shape=invhouse, color=bisque];
8044[label="24.226.156.210;20pkt 20fpkt", shape=invhouse, color=bisque];
8109[label="68.82.229.231;1pkt 1fpkt", shape=invhouse, color=bisque];
8120[label="211.197.82.237;16pkt 16fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.59.140.223:*}[60.4181%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8374%)&lt;BR/&gt; 443: (1.12092%)&lt;BR/&gt; 33438: (0.328351%)&lt;BR/&gt; 33437: (0.328351%)&lt;BR/&gt; 81: (0.101902%)&gt;];
}
204--247[label="1;15pkt 15fpkt"];
204--277[label="0.335227;413pkt 413fpkt"];
204--439[label="0.153846;2pkt 2fpkt"];
204--450[label="0.0222222;6pkt 6fpkt"];
204--498[label="0.0285714;6pkt 6fpkt"];
204--550[label="0.4375;7pkt 7fpkt"];
204--561[label="0.0940893;78pkt 78fpkt"];
204--590[label="0.115523;32pkt 32fpkt"];
204--624[label="0.9;9pkt 9fpkt"];
204--634[label="0.217557;57pkt 57fpkt"];
204--660[label="0.0311111;7pkt 7fpkt"];
204--691[label="1;6pkt 6fpkt"];
204--704[label="0.957447;45pkt 45fpkt"];
204--749[label="0.0218978;3pkt 3fpkt"];
204--834[label="0.084507;18pkt 18fpkt"];
204--906[label="0.258621;15pkt 15fpkt"];
204--939[label="0.0483871;3pkt 3fpkt"];
204--971[label="0.5;1pkt 1fpkt"];
204--1086[label="0.0239521;4pkt 4fpkt"];
204--1132[label="0.00961538;2pkt 2fpkt"];
204--1161[label="0.105263;18pkt 18fpkt"];
204--1286[label="1;1pkt 1fpkt"];
204--1297[label="0.0463918;18pkt 18fpkt"];
204--1309[label="0.123596;11pkt 11fpkt"];
204--1330[label="0.2;1pkt 1fpkt"];
204--1342[label="0.157895;3pkt 3fpkt"];
204--1436[label="0.075;3pkt 3fpkt"];
204--1439[label="0.214286;3pkt 3fpkt"];
204--1502[label="0.0594315;23pkt 23fpkt"];
204--1657[label="0.0447761;3pkt 3fpkt"];
204--1675[label="0.222222;8pkt 8fpkt"];
204--1749[label="0.25;4pkt 4fpkt"];
204--1805[label="0.3;15pkt 15fpkt"];
204--1835[label="0.172414;5pkt 5fpkt"];
204--1989[label="0.6;9pkt 9fpkt"];
204--2036[label="1;25pkt 25fpkt"];
204--2159[label="0.0588235;2pkt 2fpkt"];
204--2213[label="0.105263;2pkt 2fpkt"];
204--2234[label="0.333333;5pkt 5fpkt"];
204--2250[label="0.956522;22pkt 22fpkt"];
204--2422[label="0.0714286;7pkt 7fpkt"];
204--2436[label="0.354167;17pkt 17fpkt"];
204--2451[label="0.0333333;1pkt 1fpkt"];
204--2472[label="0.35;7pkt 7fpkt"];
204--2601[label="1;5pkt 5fpkt"];
204--2672[label="0.0144928;1pkt 1fpkt"];
204--2675[label="0.157895;3pkt 3fpkt"];
204--2685[label="0.170732;7pkt 7fpkt"];
204--2686[label="0.130435;6pkt 6fpkt"];
204--2749[label="0.818182;9pkt 9fpkt"];
204--2869[label="0.377778;17pkt 17fpkt"];
204--2889[label="0.025;3pkt 3fpkt"];
204--2906[label="0.0967742;18pkt 18fpkt"];
204--2924[label="0.0940893;78pkt 78fpkt"];
204--2953[label="1;6pkt 6fpkt"];
204--2959[label="0.153846;2pkt 2fpkt"];
204--2964[label="0.0245902;3pkt 3fpkt"];
204--2995[label="0.027027;1pkt 1fpkt"];
204--2999[label="1;1pkt 1fpkt"];
204--3001[label="0.174603;11pkt 11fpkt"];
204--3024[label="0.454545;5pkt 5fpkt"];
204--3057[label="0.333333;1pkt 1fpkt"];
204--3119[label="0.157895;3pkt 3fpkt"];
204--3134[label="0.035503;6pkt 6fpkt"];
204--3182[label="0.133929;15pkt 15fpkt"];
204--3337[label="0.956522;22pkt 22fpkt"];
204--3388[label="0.113932;193pkt 193fpkt"];
204--3431[label="0.114286;4pkt 4fpkt"];
204--3459[label="1;5pkt 5fpkt"];
204--3552[label="1;17pkt 17fpkt"];
204--3594[label="0.0266667;6pkt 6fpkt"];
204--3610[label="0.0779221;18pkt 18fpkt"];
204--3630[label="0.0444444;2pkt 2fpkt"];
204--3710[label="1;6pkt 6fpkt"];
204--3747[label="0.0967742;18pkt 18fpkt"];
204--3812[label="0.0526316;1pkt 1fpkt"];
204--3837[label="0.153846;2pkt 2fpkt"];
204--3896[label="0.375;6pkt 6fpkt"];
204--3925[label="0.5;5pkt 5fpkt"];
204--3962[label="0.25;1pkt 1fpkt"];
204--3988[label="0.04;1pkt 1fpkt"];
204--3990[label="1;8pkt 8fpkt"];
204--4009[label="0.285714;4pkt 4fpkt"];
204--4041[label="0.0714286;2pkt 2fpkt"];
204--4128[label="0.00892857;2pkt 2fpkt"];
204--4145[label="0.258621;15pkt 15fpkt"];
204--4253[label="0.0228571;4pkt 4fpkt"];
204--4318[label="0.0333333;1pkt 1fpkt"];
204--4353[label="0.333333;6pkt 6fpkt"];
204--4468[label="0.0434783;3pkt 3fpkt"];
204--4543[label="0.102894;32pkt 32fpkt"];
204--4580[label="0.285714;2pkt 2fpkt"];
204--4594[label="1;2pkt 2fpkt"];
204--4601[label="1;18pkt 18fpkt"];
204--4612[label="1;24pkt 24fpkt"];
204--4653[label="0.35;7pkt 7fpkt"];
204--4771[label="0.153846;2pkt 2fpkt"];
204--4776[label="0.25;4pkt 4fpkt"];
204--4816[label="0.214286;3pkt 3fpkt"];
204--4830[label="0.5;3pkt 3fpkt"];
204--4872[label="0.155556;7pkt 7fpkt"];
204--4888[label="0.294118;15pkt 15fpkt"];
204--4914[label="0.166667;8pkt 8fpkt"];
204--4943[label="0.34;17pkt 17fpkt"];
204--4969[label="0.16129;5pkt 5fpkt"];
204--4978[label="0.833333;45pkt 45fpkt"];
204--4980[label="0.125;6pkt 6fpkt"];
204--4987[label="1;4pkt 4fpkt"];
204--4996[label="0.130435;3pkt 3fpkt"];
204--4997[label="0.0666667;7pkt 7fpkt"];
204--5014[label="0.277778;5pkt 5fpkt"];
204--5049[label="0.0548926;23pkt 23fpkt"];
204--5069[label="0.694444;25pkt 25fpkt"];
204--5073[label="0.195205;57pkt 57fpkt"];
204--5086[label="0.5;2pkt 2fpkt"];
204--5131[label="0.0852459;78pkt 78fpkt"];
204--5163[label="0.122222;11pkt 11fpkt"];
204--5202[label="0.642857;9pkt 9fpkt"];
204--5274[label="1;10pkt 10fpkt"];
204--5294[label="0.2;3pkt 3fpkt"];
204--5295[label="0.25;4pkt 4fpkt"];
204--5297[label="0.310526;413pkt 413fpkt"];
204--5303[label="0.333333;1pkt 1fpkt"];
204--5325[label="0.230769;3pkt 3fpkt"];
204--5362[label="0.368421;7pkt 7fpkt"];
204--5366[label="1;15pkt 15fpkt"];
204--5395[label="0.636364;14pkt 14fpkt"];
204--5472[label="0.142857;1pkt 1fpkt"];
204--5491[label="0.777778;14pkt 14fpkt"];
204--5496[label="0.0263158;1pkt 1fpkt"];
204--5568[label="1;21pkt 21fpkt"];
204--5577[label="0.666667;18pkt 18fpkt"];
204--5583[label="0.75;3pkt 3fpkt"];
204--5632[label="0.333333;2pkt 2fpkt"];
204--5633[label="0.0430622;18pkt 18fpkt"];
204--5642[label="0.0735294;5pkt 5fpkt"];
204--5648[label="1;5pkt 5fpkt"];
204--5658[label="0.0769231;5pkt 5fpkt"];
204--5682[label="0.0588235;2pkt 2fpkt"];
204--5689[label="0.333333;2pkt 2fpkt"];
204--5701[label="0.0540541;2pkt 2fpkt"];
204--5724[label="0.0793651;5pkt 5fpkt"];
204--5737[label="0.0952381;6pkt 6fpkt"];
204--5751[label="0.0289256;7pkt 7fpkt"];
204--5789[label="1;1pkt 1fpkt"];
204--5815[label="0.0566038;3pkt 3fpkt"];
204--5823[label="0.030303;1pkt 1fpkt"];
204--5833[label="0.0625;1pkt 1fpkt"];
204--5933[label="1;4pkt 4fpkt"];
204--5981[label="0.114286;4pkt 4fpkt"];
204--5989[label="1;5pkt 5fpkt"];
204--6042[label="1;18pkt 18fpkt"];
204--6073[label="0.0782609;18pkt 18fpkt"];
204--6131[label="1;6pkt 6fpkt"];
204--6188[label="0.142857;2pkt 2fpkt"];
204--6221[label="0.375;6pkt 6fpkt"];
204--6256[label="0.2;1pkt 1fpkt"];
204--6464[label="0.333333;6pkt 6fpkt"];
204--6595[label="0.333333;2pkt 2fpkt"];
204--6605[label="1;17pkt 17fpkt"];
204--6637[label="0.368421;7pkt 7fpkt"];
204--6706[label="0.153846;2pkt 2fpkt"];
204--6709[label="0.25;4pkt 4fpkt"];
204--6737[label="0.5;3pkt 3fpkt"];
204--6767[label="0.288462;15pkt 15fpkt"];
204--6782[label="0.163265;8pkt 8fpkt"];
204--6828[label="0.12766;6pkt 6fpkt"];
204--6834[label="1;4pkt 4fpkt"];
204--6840[label="0.130435;3pkt 3fpkt"];
204--6850[label="0.277778;5pkt 5fpkt"];
204--6868[label="0.0548926;23pkt 23fpkt"];
204--6880[label="0.694444;25pkt 25fpkt"];
204--6887[label="0.333333;1pkt 1fpkt"];
204--6935[label="0.120879;11pkt 11fpkt"];
204--6952[label="0.6;9pkt 9fpkt"];
204--6992[label="1;9pkt 9fpkt"];
204--7006[label="0.310526;413pkt 413fpkt"];
204--7067[label="0.636364;14pkt 14fpkt"];
204--7120[label="0.823529;14pkt 14fpkt"];
204--7156[label="1;20pkt 20fpkt"];
204--7190[label="0.0735294;5pkt 5fpkt"];
204--7207[label="0.0588235;2pkt 2fpkt"];
204--7219[label="0.0526316;2pkt 2fpkt"];
204--7235[label="0.0967742;6pkt 6fpkt"];
204--7263[label="1;2pkt 2fpkt"];
204--7278[label="0.0555556;3pkt 3fpkt"];
204--7287[label="0.0588235;1pkt 1fpkt"];
204--7378[label="1;5pkt 5fpkt"];
204--7420[label="0.0779221;18pkt 18fpkt"];
204--7454[label="0.454545;5pkt 5fpkt"];
204--7522[label="0.2;1pkt 1fpkt"];
204--7645[label="0.333333;6pkt 6fpkt"];
204--7727[label="1;18pkt 18fpkt"];
204--7744[label="0.368421;7pkt 7fpkt"];
204--7785[label="0.142857;2pkt 2fpkt"];
204--7787[label="0.266667;4pkt 4fpkt"];
204--7801[label="0.6;3pkt 3fpkt"];
204--7815[label="0.294118;15pkt 15fpkt"];
204--7851[label="0.125;6pkt 6fpkt"];
204--7861[label="0.277778;5pkt 5fpkt"];
204--7869[label="0.0548926;23pkt 23fpkt"];
204--7877[label="0.694444;25pkt 25fpkt"];
204--7879[label="0.5;2pkt 2fpkt"];
204--7919[label="0.642857;9pkt 9fpkt"];
204--7945[label="1;9pkt 9fpkt"];
204--7952[label="0.310526;413pkt 413fpkt"];
204--8020[label="0.777778;14pkt 14fpkt"];
204--8044[label="1;20pkt 20fpkt"];
204--8066[label="0.0746269;5pkt 5fpkt"];
204--8093[label="0.0952381;6pkt 6fpkt"];
204--8109[label="1;1pkt 1fpkt"];
204--8120[label="0.0625;1pkt 1fpkt"];
247--3388[label="0.733333;11pkt 11fpkt"];
247--5366[label="1;15pkt 15fpkt"];
660--703[label="0.1;17pkt 17fpkt"];
660--821[label="0.333333;1pkt 1fpkt"];
660--978[label="0.102222;23pkt 23fpkt"];
660--1952[label="0.0283019;3pkt 3fpkt"];
660--2590[label="0.047619;1pkt 1fpkt"];
660--2913[label="0.166667;1pkt 1fpkt"];
660--3204[label="0.106667;24pkt 24fpkt"];
660--3388[label="0.106667;24pkt 24fpkt"];
660--5751[label="1;225pkt 225fpkt"];
691--2953[label="1;6pkt 6fpkt"];
691--3388[label="0.166667;1pkt 1fpkt"];
691--3710[label="1;6pkt 6fpkt"];
691--6131[label="1;6pkt 6fpkt"];
970--971[label="1;1pkt 1fpkt"];
1675--3388[label="0.277778;10pkt 10fpkt"];
1716--4981[label="1;31pkt 31fpkt"];
1716--5065[label="1;11pkt 11fpkt"];
1716--5276[label="0.933333;14pkt 14fpkt"];
1716--5833[label="0.125;2pkt 2fpkt"];
1716--6829[label="1;32pkt 32fpkt"];
1716--6894[label="0.25;1pkt 1fpkt"];
1716--6994[label="0.933333;14pkt 14fpkt"];
1716--7287[label="0.117647;2pkt 2fpkt"];
1716--7883[label="0.25;1pkt 1fpkt"];
1716--7947[label="0.933333;14pkt 14fpkt"];
1716--8120[label="0.125;2pkt 2fpkt"];
1805--3388[label="0.22;11pkt 11fpkt"];
1805--4888[label="0.98;49pkt 49fpkt"];
1805--6767[label="1;50pkt 50fpkt"];
1805--7815[label="0.98;49pkt 49fpkt"];
2036--4612[label="1;24pkt 24fpkt"];
2159--3388[label="0.0882353;3pkt 3fpkt"];
2159--5682[label="1;34pkt 34fpkt"];
2159--7207[label="1;34pkt 34fpkt"];
2250--3337[label="1;23pkt 23fpkt"];
2250--3388[label="0.130435;3pkt 3fpkt"];
2422--3388[label="0.0714286;7pkt 7fpkt"];
2422--4997[label="0.989796;97pkt 97fpkt"];
2601--4987[label="1;4pkt 4fpkt"];
2601--6834[label="1;4pkt 4fpkt"];
2675--3388[label="0.210526;4pkt 4fpkt"];
2675--4996[label="0.947368;18pkt 18fpkt"];
2675--6840[label="0.947368;18pkt 18fpkt"];
2686--3388[label="0.108696;5pkt 5fpkt"];
2686--4980[label="1;46pkt 46fpkt"];
2686--6828[label="0.978261;45pkt 45fpkt"];
2686--7851[label="1;46pkt 46fpkt"];
2749--3388[label="0.636364;7pkt 7fpkt"];
2869--5073[label="1;45pkt 45fpkt"];
2913--3388[label="0.166667;1pkt 1fpkt"];
2913--3969[label="0.166667;1pkt 1fpkt"];
2913--4077[label="0.166667;1pkt 1fpkt"];
2913--5205[label="1;2pkt 2fpkt"];
2913--5751[label="0.166667;1pkt 1fpkt"];
2913--6258[label="0.166667;1pkt 1fpkt"];
2913--6955[label="1;3pkt 3fpkt"];
2913--7921[label="1;2pkt 2fpkt"];
2953--3388[label="0.166667;1pkt 1fpkt"];
2953--3710[label="1;6pkt 6fpkt"];
2953--6131[label="1;6pkt 6fpkt"];
3337--3388[label="0.130435;3pkt 3fpkt"];
3431--5981[label="1;35pkt 35fpkt"];
3459--5989[label="1;5pkt 5fpkt"];
3459--7378[label="1;5pkt 5fpkt"];
3710--6131[label="1;6pkt 6fpkt"];
3837--6188[label="1;13pkt 13fpkt"];
4601--6605[label="1;17pkt 17fpkt"];
4601--7727[label="1;18pkt 18fpkt"];
4771--6706[label="1;13pkt 13fpkt"];
4771--7785[label="1;13pkt 13fpkt"];
4830--6737[label="1;6pkt 6fpkt"];
4830--7801[label="1;5pkt 5fpkt"];
4888--6767[label="1;51pkt 51fpkt"];
4888--7815[label="1;51pkt 51fpkt"];
4980--6828[label="1;47pkt 47fpkt"];
4980--7851[label="1;48pkt 48fpkt"];
4987--6834[label="1;4pkt 4fpkt"];
4996--6840[label="1;23pkt 23fpkt"];
5014--6850[label="1;18pkt 18fpkt"];
5014--7861[label="1;18pkt 18fpkt"];
5069--6880[label="1;36pkt 36fpkt"];
5069--7877[label="1;36pkt 36fpkt"];
5086--6887[label="1;3pkt 3fpkt"];
5086--7879[label="1;4pkt 4fpkt"];
5202--6952[label="1;14pkt 14fpkt"];
5202--7919[label="1;14pkt 14fpkt"];
5274--6992[label="1;9pkt 9fpkt"];
5274--7945[label="1;9pkt 9fpkt"];
5395--7067[label="1;22pkt 22fpkt"];
5568--7156[label="1;20pkt 20fpkt"];
5568--8044[label="1;20pkt 20fpkt"];
5682--7207[label="1;34pkt 34fpkt"];
5789--7263[label="1;1pkt 1fpkt"];
5789--8109[label="1;1pkt 1fpkt"];
5833--7287[label="1;16pkt 16fpkt"];
5833--8120[label="1;16pkt 16fpkt"];
5989--7378[label="1;5pkt 5fpkt"];
6605--7727[label="1;17pkt 17fpkt"];
6706--7785[label="1;13pkt 13fpkt"];
6737--7801[label="1;5pkt 5fpkt"];
6767--7815[label="1;51pkt 51fpkt"];
6828--7851[label="1;47pkt 47fpkt"];
6850--7861[label="1;18pkt 18fpkt"];
6880--7877[label="1;36pkt 36fpkt"];
6887--7879[label="1;3pkt 3fpkt"];
6992--7945[label="1;9pkt 9fpkt"];
7156--8044[label="1;20pkt 20fpkt"];
7263--8109[label="1;1pkt 1fpkt"];
7287--8120[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.140.223" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
321[label="166.59.141.35;s;2804pkt 2804fpkt", shape=diamond, color=yellow];
710[label="194.226.181.139;d;3pkt 3fpkt", shape=diamond, color=yellow];
1159[label="166.59.151.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
3037[label="166.59.141.35;s;1851pkt 1851fpkt", shape=hexagon, color=black];
3810[label="166.59.141.35;2940pkt 2940fpkt", shape=pentagon, color=darkviolet];
4832[label="166.59.174.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6176[label="166.59.141.35;2939pkt 2939fpkt", shape=invtriangle, color=brown];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.141.35:52954, *:53}[51.744%]&lt;BR/&gt;{166.59.141.35:53, *:*}[47.7819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.8294%)&lt;BR/&gt; 52954: (26.218%)&lt;BR/&gt; 32768: (0.611374%)&lt;BR/&gt; 32769: (0.436019%)&lt;BR/&gt; 9253: (0.374408%)&gt;];
}
321--710[label="0.333333;1pkt 1fpkt"];
321--1380[label="0.00854701;1pkt 1fpkt"];
321--1834[label="0.00934579;1pkt 1fpkt"];
321--1880[label="0.00900901;1pkt 1fpkt"];
321--2126[label="0.00925926;1pkt 1fpkt"];
321--2176[label="0.0102041;1pkt 1fpkt"];
321--2415[label="0.00990099;1pkt 1fpkt"];
321--2425[label="0.00909091;1pkt 1fpkt"];
321--2435[label="0.00961538;1pkt 1fpkt"];
321--2598[label="0.0153846;1pkt 1fpkt"];
321--2600[label="0.00961538;1pkt 1fpkt"];
321--2627[label="0.02;1pkt 1fpkt"];
321--3037[label="1;1851pkt 1851fpkt"];
321--3318[label="0.00854701;1pkt 1fpkt"];
321--3384[label="0.0688302;193pkt 193fpkt"];
321--3387[label="0.0699001;196pkt 196fpkt"];
321--3810[label="1;2804pkt 2804fpkt"];
321--6176[label="0.999643;2803pkt 2803fpkt"];
710--1019[label="0.333333;1pkt 1fpkt"];
710--1159[label="1;1pkt 1fpkt"];
710--3037[label="0.333333;1pkt 1fpkt"];
710--3384[label="0.333333;1pkt 1fpkt"];
710--3810[label="0.333333;1pkt 1fpkt"];
710--4832[label="0.333333;1pkt 1fpkt"];
710--6176[label="0.333333;1pkt 1fpkt"];
710--6738[label="0.333333;1pkt 1fpkt"];
3037--3318[label="0.00854701;1pkt 1fpkt"];
3037--3384[label="0.104268;193pkt 193fpkt"];
3037--3387[label="0.0383576;71pkt 71fpkt"];
3037--3810[label="1;1851pkt 1851fpkt"];
3037--6176[label="0.99946;1850pkt 1850fpkt"];
3810--6176[label="1;2939pkt 2939fpkt"];
4832--6738[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="166.59.141.35" src_port="53"/>
      <filter dst_port="53" src_ip="166.59.141.35" src_port="52954"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
664[label="166.59.192.113;s;121pkt 121fpkt", shape=diamond, color=yellow];
726[label="26.241.199.106;d;96pkt 96fpkt", shape=diamond, color=yellow];
3104[label="166.59.192.113;s;107pkt 107fpkt", shape=hexagon, color=black];
4607[label="166.59.192.113;132pkt 132fpkt", shape=pentagon, color=darkviolet];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.192.113:*, 26.241.199.106:443}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.2719%)&lt;BR/&gt; 25: (3.72807%)&lt;BR/&gt; 65456: (0.438596%)&lt;BR/&gt; 65445: (0.438596%)&lt;BR/&gt; 65391: (0.438596%)&gt;];
}
664--726[label="1;96pkt 96fpkt"];
664--3104[label="1;107pkt 107fpkt"];
664--4607[label="1;121pkt 121fpkt"];
726--3104[label="1;96pkt 96fpkt"];
726--4607[label="1;96pkt 96fpkt"];
3104--4607[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="26.241.199.106" dst_port="443" src_ip="166.59.192.113"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
747[label="149.177.104.11;s;19pkt 19fpkt", shape=diamond, color=yellow];
3300[label="149.177.104.11;s;19pkt 19fpkt", shape=hexagon, color=black];
3532[label="149.177.104.11;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6030[label="149.177.104.11;18pkt 18fpkt", shape=invtriangle, color=brown];
7394[label="149.177.104.11;18pkt 18fpkt", shape=invhouse, color=bisque];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.104.11:*, 211.166.132.112:80}[36.8421%]&lt;BR/&gt;{149.177.104.11:*, 211.166.75.6:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0435%)&lt;BR/&gt; 554: (6.52174%)&lt;BR/&gt; 5190: (2.71739%)&lt;BR/&gt; 5004: (2.71739%)&lt;BR/&gt; 1235: (2.71739%)&gt;];
}
747--1317[label="0.368421;7pkt 7fpkt"];
747--3300[label="1;19pkt 19fpkt"];
747--3532[label="1;18pkt 18fpkt"];
747--6030[label="1;18pkt 18fpkt"];
747--7394[label="1;18pkt 18fpkt"];
3300--3532[label="1;18pkt 18fpkt"];
3300--6030[label="1;18pkt 18fpkt"];
3300--7394[label="1;18pkt 18fpkt"];
3532--6030[label="1;18pkt 18fpkt"];
3532--7394[label="1;18pkt 18fpkt"];
6030--7394[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.132.112" dst_port="80" src_ip="149.177.104.11"/>
      <filter dst_ip="211.166.75.6" dst_port="80" src_ip="149.177.104.11"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
454[label="213.17.226.2;s;13pkt 13fpkt", shape=diamond, color=yellow];
762[label="28.153.200.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
2830[label="213.17.226.2;s;12pkt 12fpkt", shape=hexagon, color=black];
3435[label="213.17.226.2;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.226.2:*, 194.58.104.38:25}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.4634%)&lt;BR/&gt; 43705: (4.87805%)&lt;BR/&gt; 80: (4.87805%)&lt;BR/&gt; 51542: (3.65854%)&lt;BR/&gt; 51541: (3.65854%)&gt;];
}
454--762[label="1;1pkt 1fpkt"];
454--2830[label="1;12pkt 12fpkt"];
454--3435[label="1;13pkt 13fpkt"];
762--2830[label="1;1pkt 1fpkt"];
762--3435[label="1;1pkt 1fpkt"];
2830--3435[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="194.58.104.38" dst_port="25" src_ip="213.17.226.2"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,502,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
302[label="195.161.150.4;s;8pkt 8fpkt", shape=diamond, color=yellow];
947[label="166.59.170.162;d;2pkt 2fpkt", shape=diamond, color=yellow];
993[label="166.59.145.10;d;2pkt 2fpkt", shape=diamond, color=yellow];
1522[label="166.59.170.182;d;2pkt 2fpkt", shape=diamond, color=yellow];
1907[label="166.59.145.87;d;2pkt 2fpkt", shape=diamond, color=yellow];
3450[label="195.161.150.4;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4173[label="194.236.14.70;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4690[label="194.236.14.123;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.123:5050, *:*}[38.7097%]&lt;BR/&gt;{195.161.150.4:22, *:*}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (22.2222%)&lt;BR/&gt; 5050: (20%)&lt;BR/&gt; 23: (4.44444%)&lt;BR/&gt; 1243: (3.33333%)&lt;BR/&gt; 1100: (3.33333%)&gt;];
}
302--769[label="0.5;1pkt 1fpkt"];
302--947[label="0.5;1pkt 1fpkt"];
302--993[label="0.5;1pkt 1fpkt"];
302--1522[label="0.5;1pkt 1fpkt"];
302--1907[label="0.5;1pkt 1fpkt"];
302--3450[label="1;8pkt 8fpkt"];
947--3450[label="0.5;1pkt 1fpkt"];
993--2342[label="0.5;1pkt 1fpkt"];
993--3450[label="0.5;1pkt 1fpkt"];
993--4690[label="0.5;1pkt 1fpkt"];
1522--3450[label="0.5;1pkt 1fpkt"];
1522--4173[label="0.5;1pkt 1fpkt"];
1907--3450[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.123" src_port="5050"/>
      <filter src_ip="195.161.150.4" src_port="22"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28576,2.11155,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
42[label="198.230.88.239s;5pkt 5fpkt", shape=rectangle, color=red];
817[label="198.230.88.239;s;41pkt 41fpkt", shape=diamond, color=yellow];
818[label="145.223.54.222;d;127pkt 127fpkt", shape=diamond, color=yellow];
5516[label="196.177.216.205;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.230.88.239:80, 145.223.54.222:*}[28.4722%]&lt;BR/&gt;{196.177.216.205:80, *:*}[22.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1806: (0.731707%)&lt;BR/&gt; 1800: (0.731707%)&lt;BR/&gt; 1792: (0.731707%)&lt;BR/&gt; 1762: (0.731707%)&gt;];
}
42--817[label="1;5pkt 5fpkt"];
42--818[label="1;5pkt 5fpkt"];
42--3388[label="0.2;1pkt 1fpkt"];
817--818[label="1;41pkt 41fpkt"];
817--3388[label="0.0731707;3pkt 3fpkt"];
818--3388[label="0.0866142;11pkt 11fpkt"];
818--5338[label="0.6;15pkt 15fpkt"];
818--5516[label="0.46875;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="196.177.216.205" src_port="80"/>
      <filter dst_ip="145.223.54.222" src_ip="198.230.88.239" src_port="80"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
360[label="84.65.7.247;s;3787pkt 3787fpkt", shape=diamond, color=yellow];
831[label="131.186.42.139;d;17pkt 17fpkt", shape=diamond, color=yellow];
5900[label="84.65.7.247;3787pkt 3787fpkt", shape=pentagon, color=darkviolet];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.65.7.247:80, *:*}[99.5793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9737%)&lt;BR/&gt; 43893: (0.0395205%)&lt;BR/&gt; 6238: (0.0395205%)&lt;BR/&gt; 2610: (0.0395205%)&lt;BR/&gt; 65139: (0.026347%)&gt;];
}
360--831[label="0.0588235;1pkt 1fpkt"];
360--5900[label="1;3787pkt 3787fpkt"];
831--2159[label="0.117647;2pkt 2fpkt"];
831--5682[label="0.117647;2pkt 2fpkt"];
831--5900[label="0.0588235;1pkt 1fpkt"];
831--7207[label="0.117647;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="84.65.7.247" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
846[label="2.134.157.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.134.157.101:3708, 149.68.157.180:14828}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14828: (50%)&lt;BR/&gt; 3708: (50%)&gt;];
}
846--2791[label="1;1pkt 1fpkt"];
846--7697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="14828" src_ip="2.134.157.101" src_port="3708"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
860[label="144.78.19.40;d;451pkt 451fpkt", shape=diamond, color=yellow];
5059[label="145.223.32.160;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5355[label="145.223.193.189;265pkt 265fpkt", shape=pentagon, color=darkviolet];
6875[label="145.223.32.160;16pkt 16fpkt", shape=invtriangle, color=brown];
7043[label="145.223.193.189;266pkt 266fpkt", shape=invtriangle, color=brown];
7873[label="145.223.32.160;16pkt 16fpkt", shape=invhouse, color=bisque];
7976[label="145.223.193.189;265pkt 265fpkt", shape=invhouse, color=bisque];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.193.189:80, 144.78.19.40:*}[53.617%]&lt;BR/&gt;{145.223.32.163:80, 144.78.19.40:*}[31.9149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7683%)&lt;BR/&gt; 0: (0.46332%)&lt;BR/&gt; 55172: (0.15444%)&lt;BR/&gt; 55171: (0.15444%)&lt;BR/&gt; 55170: (0.15444%)&gt;];
}
860--1167[label="0.954545;252pkt 252fpkt"];
860--2196[label="0.59375;38pkt 38fpkt"];
860--3011[label="0.972973;252pkt 252fpkt"];
860--3388[label="0.00665188;3pkt 3fpkt"];
860--5059[label="0.6875;11pkt 11fpkt"];
860--5355[label="0.950943;252pkt 252fpkt"];
860--6875[label="0.6875;11pkt 11fpkt"];
860--7043[label="0.947368;252pkt 252fpkt"];
860--7873[label="0.6875;11pkt 11fpkt"];
860--7976[label="0.950943;252pkt 252fpkt"];
5059--6875[label="1;16pkt 16fpkt"];
5059--7873[label="1;16pkt 16fpkt"];
5355--7043[label="1;265pkt 265fpkt"];
5355--7976[label="1;265pkt 265fpkt"];
6875--7873[label="1;16pkt 16fpkt"];
7043--7976[label="1;265pkt 265fpkt"];
</description>
    <slice>
      <filter dst_ip="144.78.19.40" src_ip="145.223.193.189" src_port="80"/>
      <filter dst_ip="144.78.19.40" src_ip="145.223.32.163" src_port="80"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
874[label="201.197.54.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
875[label="212.66.181.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
2917[label="201.197.54.220;d;1pkt 1fpkt", shape=hexagon, color=black];
5895[label="212.66.181.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.181.246:1765, 201.197.54.220:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1765: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
874--875[label="1;1pkt 1fpkt"];
874--2917[label="1;1pkt 1fpkt"];
874--5895[label="1;1pkt 1fpkt"];
875--2917[label="1;1pkt 1fpkt"];
875--5895[label="1;1pkt 1fpkt"];
2917--5895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.197.54.220" dst_port="554" src_ip="212.66.181.246" src_port="1765"/>
    </slice>
    <from sec="1120712501" usec="0"/>
    <to sec="1120712715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
792[label="161.99.160.37;d;102pkt 102fpkt", shape=diamond, color=yellow];
889[label="30.85.43.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
1926[label="28.153.230.170;s;14pkt 14fpkt", shape=diamond, color=yellow];
1978[label="131.186.160.244;d;109pkt 109fpkt", shape=diamond, color=yellow];
3124[label="28.153.230.170;s;14pkt 14fpkt", shape=hexagon, color=black];
5187[label="28.153.230.170;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5391[label="29.117.170.193;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5410[label="29.117.170.195;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5706[label="211.166.144.222;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6945[label="28.153.230.170;13pkt 13fpkt", shape=invtriangle, color=brown];
7063[label="29.117.170.193;25pkt 25fpkt", shape=invtriangle, color=brown];
7077[label="29.117.170.195;20pkt 20fpkt", shape=invtriangle, color=brown];
7411[label="27.52.173.16;2pkt 2fpkt", shape=invhouse, color=bisque];
7986[label="29.117.170.193;26pkt 26fpkt", shape=invhouse, color=bisque];
7997[label="29.117.170.195;20pkt 20fpkt", shape=invhouse, color=bisque];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 131.186.160.244:*}[49.0909%]&lt;BR/&gt;{*:80, 161.99.160.37:*}[45.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1505%)&lt;BR/&gt; 1863: (0.728155%)&lt;BR/&gt; 3367: (0.606796%)&lt;BR/&gt; 3366: (0.606796%)&lt;BR/&gt; 3265: (0.606796%)&gt;];
}
792--889[label="1;2pkt 2fpkt"];
792--1874[label="0.0298507;2pkt 2fpkt"];
792--1926[label="0.357143;5pkt 5fpkt"];
792--3124[label="0.357143;5pkt 5fpkt"];
792--5187[label="0.357143;5pkt 5fpkt"];
792--5384[label="0.0212766;2pkt 2fpkt"];
792--5391[label="0.769231;20pkt 20fpkt"];
792--5410[label="0.85;17pkt 17fpkt"];
792--6945[label="0.384615;5pkt 5fpkt"];
792--7059[label="0.0210526;2pkt 2fpkt"];
792--7063[label="0.8;20pkt 20fpkt"];
792--7077[label="0.85;17pkt 17fpkt"];
792--7986[label="0.769231;20pkt 20fpkt"];
792--7997[label="0.85;17pkt 17fpkt"];
1926--1978[label="0.285714;4pkt 4fpkt"];
1926--3124[label="1;14pkt 14fpkt"];
1926--5187[label="1;14pkt 14fpkt"];
1926--6945[label="1;13pkt 13fpkt"];
1978--2073[label="1;3pkt 3fpkt"];
1978--3124[label="0.285714;4pkt 4fpkt"];
1978--3388[label="0.00917431;1pkt 1fpkt"];
1978--3581[label="1;2pkt 2fpkt"];
1978--5187[label="0.285714;4pkt 4fpkt"];
1978--5391[label="0.230769;6pkt 6fpkt"];
1978--5410[label="0.15;3pkt 3fpkt"];
1978--5706[label="0.2;1pkt 1fpkt"];
1978--6059[label="1;2pkt 2fpkt"];
1978--6945[label="0.307692;4pkt 4fpkt"];
1978--7063[label="0.2;5pkt 5fpkt"];
1978--7077[label="0.15;3pkt 3fpkt"];
1978--7411[label="1;2pkt 2fpkt"];
1978--7986[label="0.230769;6pkt 6fpkt"];
1978--7997[label="0.15;3pkt 3fpkt"];
3124--5187[label="1;14pkt 14fpkt"];
3124--6945[label="1;13pkt 13fpkt"];
5187--6945[label="1;13pkt 13fpkt"];
5391--7063[label="1;25pkt 25fpkt"];
5391--7986[label="1;26pkt 26fpkt"];
5410--7077[label="1;20pkt 20fpkt"];
5410--7997[label="1;20pkt 20fpkt"];
7063--7986[label="1;25pkt 25fpkt"];
7077--7997[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.160.244" src_port="80"/>
      <filter dst_ip="161.99.160.37" src_port="80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
916[label="3.74.112.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
917[label="145.222.22.250;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.22.250:36782, 211.166.149.2:1863}[50%]&lt;BR/&gt;{145.222.22.250:37484, 3.74.112.100:1755}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37484: (33.3333%)&lt;BR/&gt; 1755: (33.3333%)&lt;BR/&gt; 36782: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&gt;];
}
916--917[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="3.74.112.100" dst_port="1755" src_ip="145.222.22.250" src_port="37484"/>
      <filter dst_ip="211.166.149.2" dst_port="1863" src_ip="145.222.22.250" src_port="36782"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
273[label="145.223.44.73;s;702pkt 702fpkt", shape=diamond, color=yellow];
325[label="26.25.91.46;d;18pkt 18fpkt", shape=diamond, color=yellow];
352[label="27.57.181.31;d;16pkt 16fpkt", shape=diamond, color=yellow];
353[label="145.223.131.30;s;37pkt 37fpkt", shape=diamond, color=yellow];
433[label="149.177.67.73;s;340pkt 340fpkt", shape=diamond, color=yellow];
452[label="27.57.180.127;d;13pkt 13fpkt", shape=diamond, color=yellow];
453[label="145.222.13.3;s;39pkt 39fpkt", shape=diamond, color=yellow];
745[label="149.177.67.208;s;49pkt 49fpkt", shape=diamond, color=yellow];
957[label="145.223.3.146;s;221pkt 221fpkt", shape=diamond, color=yellow];
1109[label="145.222.154.174;s;108pkt 108fpkt", shape=diamond, color=yellow];
1265[label="26.25.91.180;d;17pkt 17fpkt", shape=diamond, color=yellow];
1314[label="145.223.174.111;s;86pkt 86fpkt", shape=diamond, color=yellow];
2433[label="212.66.49.53;s;79pkt 79fpkt", shape=diamond, color=yellow];
2688[label="145.223.86.57;s;35pkt 35fpkt", shape=diamond, color=yellow];
2719[label="109.130.16.177;d;21pkt 21fpkt", shape=diamond, color=yellow];
2940[label="145.223.3.146;s;173pkt 173fpkt", shape=hexagon, color=black];
2944[label="145.223.131.30;s;32pkt 32fpkt", shape=hexagon, color=black];
3171[label="145.222.13.3;s;27pkt 27fpkt", shape=hexagon, color=black];
3918[label="213.17.230.45;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3999[label="212.66.49.53;80pkt 80fpkt", shape=pentagon, color=darkviolet];
4037[label="145.223.86.57;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4158[label="161.107.109.68;156pkt 156fpkt", shape=pentagon, color=darkviolet];
4474[label="213.17.235.99;57pkt 57fpkt", shape=pentagon, color=darkviolet];
4652[label="145.222.177.118;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4787[label="212.79.237.132;78pkt 78fpkt", shape=pentagon, color=darkviolet];
5242[label="145.223.32.177;81pkt 81fpkt", shape=pentagon, color=darkviolet];
5456[label="161.99.128.199;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5592[label="149.177.67.212;204pkt 204fpkt", shape=pentagon, color=darkviolet];
6234[label="213.17.230.45;55pkt 55fpkt", shape=invtriangle, color=brown];
6636[label="145.222.177.118;22pkt 22fpkt", shape=invtriangle, color=brown];
6716[label="212.79.237.132;78pkt 78fpkt", shape=invtriangle, color=brown];
7103[label="161.99.128.199;48pkt 48fpkt", shape=invtriangle, color=brown];
7165[label="149.177.67.212;205pkt 205fpkt", shape=invtriangle, color=brown];
7505[label="213.17.230.45;55pkt 55fpkt", shape=invhouse, color=bisque];
7791[label="212.79.237.132;79pkt 79fpkt", shape=invhouse, color=bisque];
8010[label="161.99.128.199;48pkt 48fpkt", shape=invhouse, color=bisque];
8050[label="149.177.67.212;204pkt 204fpkt", shape=invhouse, color=bisque];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[43.3784%]&lt;BR/&gt;{145.223.44.73:*, *:*}[28.7823%]&lt;BR/&gt;{*:25, *:*}[27.5933%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.8792%)&lt;BR/&gt; 80: (5.36404%)&lt;BR/&gt; 53: (2.3166%)&lt;BR/&gt; 113: (1.69608%)&lt;BR/&gt; 2703: (1.48924%)&gt;];
}
273--325[label="0.0555556;1pkt 1fpkt"];
273--352[label="0.0625;1pkt 1fpkt"];
273--403[label="0.00598802;1pkt 1fpkt"];
273--458[label="0.00584795;1pkt 1fpkt"];
273--467[label="0.00177936;1pkt 1fpkt"];
273--476[label="0.00995025;2pkt 2fpkt"];
273--759[label="0.012285;5pkt 5fpkt"];
273--929[label="0.431193;47pkt 47fpkt"];
273--1081[label="0.0175439;2pkt 2fpkt"];
273--1082[label="0.0178571;2pkt 2fpkt"];
273--1151[label="0.011236;1pkt 1fpkt"];
273--1198[label="0.00854701;1pkt 1fpkt"];
273--1282[label="0.0136986;2pkt 2fpkt"];
273--1370[label="0.0185185;2pkt 2fpkt"];
273--1510[label="0.011236;1pkt 1fpkt"];
273--1530[label="0.0121951;1pkt 1fpkt"];
273--1572[label="0.0454545;2pkt 2fpkt"];
273--1591[label="0.00909091;1pkt 1fpkt"];
273--1620[label="0.0550459;6pkt 6fpkt"];
273--1691[label="0.0632911;5pkt 5fpkt"];
273--1802[label="0.418033;51pkt 51fpkt"];
273--1813[label="0.0344828;5pkt 5fpkt"];
273--1846[label="0.03125;5pkt 5fpkt"];
273--1866[label="0.00689655;1pkt 1fpkt"];
273--1964[label="0.00666667;1pkt 1fpkt"];
273--2329[label="0.0111111;1pkt 1fpkt"];
273--2429[label="0.397727;35pkt 35fpkt"];
273--2719[label="0.047619;1pkt 1fpkt"];
273--2802[label="0.0459966;27pkt 27fpkt"];
273--3064[label="0.018018;2pkt 2fpkt"];
273--3096[label="0.00228311;1pkt 1fpkt"];
273--3100[label="1;596pkt 596fpkt"];
273--3206[label="0.0136986;2pkt 2fpkt"];
273--3220[label="0.00990099;1pkt 1fpkt"];
273--3387[label="0.002849;2pkt 2fpkt"];
325--326[label="0.111111;2pkt 2fpkt"];
325--433[label="0.0555556;1pkt 1fpkt"];
325--745[label="0.277778;5pkt 5fpkt"];
325--1922[label="0.0555556;1pkt 1fpkt"];
325--2688[label="0.0555556;1pkt 1fpkt"];
325--2712[label="0.111111;2pkt 2fpkt"];
325--3100[label="0.0555556;1pkt 1fpkt"];
325--4037[label="0.0555556;1pkt 1fpkt"];
325--4474[label="0.0555556;1pkt 1fpkt"];
325--4652[label="0.0555556;1pkt 1fpkt"];
325--4787[label="0.0555556;1pkt 1fpkt"];
325--5456[label="0.111111;2pkt 2fpkt"];
325--6636[label="0.0555556;1pkt 1fpkt"];
325--6716[label="0.0555556;1pkt 1fpkt"];
325--7103[label="0.111111;2pkt 2fpkt"];
325--7791[label="0.0555556;1pkt 1fpkt"];
325--8010[label="0.111111;2pkt 2fpkt"];
352--353[label="0.0625;1pkt 1fpkt"];
352--400[label="0.0625;1pkt 1fpkt"];
352--433[label="0.125;2pkt 2fpkt"];
352--453[label="0.1875;3pkt 3fpkt"];
352--775[label="0.0625;1pkt 1fpkt"];
352--799[label="0.0625;1pkt 1fpkt"];
352--1739[label="0.0625;1pkt 1fpkt"];
352--2433[label="0.0625;1pkt 1fpkt"];
352--2594[label="0.0625;1pkt 1fpkt"];
352--2712[label="0.0625;1pkt 1fpkt"];
352--2944[label="0.0625;1pkt 1fpkt"];
352--3100[label="0.0625;1pkt 1fpkt"];
352--3171[label="0.1875;3pkt 3fpkt"];
352--3192[label="0.0625;1pkt 1fpkt"];
352--3999[label="0.0625;1pkt 1fpkt"];
352--4158[label="0.0625;1pkt 1fpkt"];
352--4474[label="0.0625;1pkt 1fpkt"];
352--4697[label="0.0625;1pkt 1fpkt"];
352--5456[label="0.0625;1pkt 1fpkt"];
352--5592[label="0.0625;1pkt 1fpkt"];
352--7103[label="0.0625;1pkt 1fpkt"];
352--7165[label="0.0625;1pkt 1fpkt"];
352--8010[label="0.0625;1pkt 1fpkt"];
352--8050[label="0.0625;1pkt 1fpkt"];
353--452[label="0.0769231;1pkt 1fpkt"];
353--1265[label="0.0588235;1pkt 1fpkt"];
353--2176[label="0.027027;1pkt 1fpkt"];
353--2944[label="1;32pkt 32fpkt"];
433--835[label="1;1pkt 1fpkt"];
433--1455[label="0.00609756;1pkt 1fpkt"];
433--2719[label="0.047619;1pkt 1fpkt"];
433--2907[label="1;1pkt 1fpkt"];
433--3016[label="0.00980392;1pkt 1fpkt"];
452--453[label="0.230769;3pkt 3fpkt"];
452--928[label="0.153846;2pkt 2fpkt"];
452--957[label="0.0769231;1pkt 1fpkt"];
452--1109[label="0.0769231;1pkt 1fpkt"];
452--1314[label="0.0769231;1pkt 1fpkt"];
452--1739[label="0.0769231;1pkt 1fpkt"];
452--2712[label="0.153846;2pkt 2fpkt"];
452--2940[label="0.0769231;1pkt 1fpkt"];
452--2944[label="0.0769231;1pkt 1fpkt"];
452--3171[label="0.230769;3pkt 3fpkt"];
452--3192[label="0.0769231;1pkt 1fpkt"];
452--4158[label="0.0769231;1pkt 1fpkt"];
452--4652[label="0.0769231;1pkt 1fpkt"];
452--5242[label="0.153846;2pkt 2fpkt"];
452--5456[label="0.153846;2pkt 2fpkt"];
452--6636[label="0.0769231;1pkt 1fpkt"];
452--7103[label="0.153846;2pkt 2fpkt"];
452--8010[label="0.153846;2pkt 2fpkt"];
453--644[label="0.277778;5pkt 5fpkt"];
453--1039[label="0.214286;3pkt 3fpkt"];
453--1265[label="0.117647;2pkt 2fpkt"];
453--3171[label="1;27pkt 27fpkt"];
957--1265[label="0.0588235;1pkt 1fpkt"];
957--2823[label="0.03125;1pkt 1fpkt"];
957--2940[label="1;173pkt 173fpkt"];
1109--1380[label="0.0277778;3pkt 3fpkt"];
1109--1691[label="0.0379747;3pkt 3fpkt"];
1109--1880[label="0.0185185;2pkt 2fpkt"];
1109--1942[label="0.0185185;2pkt 2fpkt"];
1109--2133[label="0.0454545;1pkt 1fpkt"];
1109--2176[label="0.0204082;2pkt 2fpkt"];
1109--2425[label="0.00925926;1pkt 1fpkt"];
1109--2435[label="0.0192308;2pkt 2fpkt"];
1109--2604[label="0.0625;1pkt 1fpkt"];
1109--2677[label="0.0625;1pkt 1fpkt"];
1109--3318[label="0.0277778;3pkt 3fpkt"];
1109--3384[label="0.0277778;3pkt 3fpkt"];
1109--3387[label="0.00925926;1pkt 1fpkt"];
1265--1670[label="0.0588235;1pkt 1fpkt"];
1265--1922[label="0.0588235;1pkt 1fpkt"];
1265--2688[label="0.0588235;1pkt 1fpkt"];
1265--2712[label="0.117647;2pkt 2fpkt"];
1265--2940[label="0.0588235;1pkt 1fpkt"];
1265--2944[label="0.0588235;1pkt 1fpkt"];
1265--2970[label="0.0588235;1pkt 1fpkt"];
1265--3704[label="0.0588235;1pkt 1fpkt"];
1265--3918[label="0.0588235;1pkt 1fpkt"];
1265--4037[label="0.0588235;1pkt 1fpkt"];
1265--4787[label="0.0588235;1pkt 1fpkt"];
1265--5242[label="0.0588235;1pkt 1fpkt"];
1265--5456[label="0.117647;2pkt 2fpkt"];
1265--5592[label="0.0588235;1pkt 1fpkt"];
1265--6125[label="0.0588235;1pkt 1fpkt"];
1265--6234[label="0.0588235;1pkt 1fpkt"];
1265--6716[label="0.0588235;1pkt 1fpkt"];
1265--7103[label="0.117647;2pkt 2fpkt"];
1265--7165[label="0.0588235;1pkt 1fpkt"];
1265--7505[label="0.0588235;1pkt 1fpkt"];
1265--7791[label="0.0588235;1pkt 1fpkt"];
1265--8010[label="0.117647;2pkt 2fpkt"];
1265--8050[label="0.0588235;1pkt 1fpkt"];
1314--1568[label="0.0348837;3pkt 3fpkt"];
1314--2110[label="0.0116279;1pkt 1fpkt"];
1314--2249[label="0.0116279;1pkt 1fpkt"];
1314--3206[label="0.0697674;6pkt 6fpkt"];
1314--3215[label="0.0116279;1pkt 1fpkt"];
1314--3336[label="0.0116279;1pkt 1fpkt"];
1314--3384[label="0.0348837;3pkt 3fpkt"];
2433--3384[label="0.0126582;1pkt 1fpkt"];
2433--3999[label="0.987342;78pkt 78fpkt"];
2688--4037[label="1;35pkt 35fpkt"];
2719--3100[label="0.047619;1pkt 1fpkt"];
2719--4697[label="0.047619;1pkt 1fpkt"];
2719--4787[label="0.047619;1pkt 1fpkt"];
2719--6716[label="0.047619;1pkt 1fpkt"];
2719--7791[label="0.047619;1pkt 1fpkt"];
3918--6234[label="1;54pkt 54fpkt"];
3918--7505[label="1;54pkt 54fpkt"];
4652--6636[label="1;21pkt 21fpkt"];
4787--6716[label="1;78pkt 78fpkt"];
4787--7791[label="1;78pkt 78fpkt"];
5456--7103[label="1;48pkt 48fpkt"];
5456--8010[label="1;48pkt 48fpkt"];
5592--7165[label="1;204pkt 204fpkt"];
5592--8050[label="1;204pkt 204fpkt"];
6234--7505[label="1;55pkt 55fpkt"];
6716--7791[label="1;78pkt 78fpkt"];
7103--8010[label="1;48pkt 48fpkt"];
7165--8050[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.44.73"/>
      <filter src_port="25"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
466[label="149.110.213.47;d;33pkt 33fpkt", shape=diamond, color=yellow];
1093[label="201.38.51.44;s;21pkt 21fpkt", shape=diamond, color=yellow];
4389[label="194.255.54.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5170[label="213.4.150.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.38.51.44:80, 149.110.213.47:*}[56.7568%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2167: (1.72414%)&lt;BR/&gt; 2166: (1.72414%)&lt;BR/&gt; 2157: (1.72414%)&lt;BR/&gt; 2154: (1.72414%)&gt;];
}
466--1093[label="1;21pkt 21fpkt"];
466--5124[label="0.857143;6pkt 6fpkt"];
4389--7661[label="1;2pkt 2fpkt"];
5170--6940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.213.47" src_ip="201.38.51.44" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
599[label="145.223.10.118;s;52pkt 52fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.10.118:*, 0.101.10.163:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2308%)&lt;BR/&gt; 6881: (4.80769%)&lt;BR/&gt; 65429: (0.961538%)&lt;BR/&gt; 64982: (0.961538%)&lt;BR/&gt; 64981: (0.961538%)&gt;];
}
599--937[label="1;1pkt 1fpkt"];
599--992[label="0.0192308;1pkt 1fpkt"];
599--4643[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="0.101.10.163" dst_port="80" src_ip="145.223.10.118"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
658[label="166.59.128.24;s;78pkt 78fpkt", shape=diamond, color=yellow];
799[label="145.223.85.123;s;315pkt 315fpkt", shape=diamond, color=yellow];
975[label="26.216.28.177;d;19pkt 19fpkt", shape=diamond, color=yellow];
1890[label="213.17.230.41;s;60pkt 60fpkt", shape=diamond, color=yellow];
2005[label="109.130.16.179;d;12pkt 12fpkt", shape=diamond, color=yellow];
3690[label="166.59.128.24;81pkt 81fpkt", shape=pentagon, color=darkviolet];
3878[label="213.17.230.41;62pkt 62fpkt", shape=pentagon, color=darkviolet];
6116[label="166.59.128.24;81pkt 81fpkt", shape=invtriangle, color=brown];
6211[label="213.17.230.41;62pkt 62fpkt", shape=invtriangle, color=brown];
7439[label="166.59.128.24;81pkt 81fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.85.123:*, *:80}[45.5487%]&lt;BR/&gt;{*:*, *:25}[32.0911%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.9013%)&lt;BR/&gt; 80: (13.1022%)&lt;BR/&gt; 443: (1.11633%)&lt;BR/&gt; 113: (0.940071%)&lt;BR/&gt; 1345: (0.705053%)&gt;];
}
658--975[label="0.0526316;1pkt 1fpkt"];
658--2005[label="0.166667;2pkt 2fpkt"];
658--3690[label="1;78pkt 78fpkt"];
658--6116[label="1;78pkt 78fpkt"];
658--7439[label="1;78pkt 78fpkt"];
799--807[label="0.0031746;1pkt 1fpkt"];
799--815[label="0.191111;43pkt 43fpkt"];
799--931[label="0.0031746;1pkt 1fpkt"];
799--975[label="0.0526316;1pkt 1fpkt"];
799--1039[label="0.0714286;1pkt 1fpkt"];
799--1210[label="0.292063;92pkt 92fpkt"];
799--1317[label="0.00877193;1pkt 1fpkt"];
799--1643[label="0.0109091;3pkt 3fpkt"];
799--1813[label="0.00689655;1pkt 1fpkt"];
799--1846[label="0.00625;1pkt 1fpkt"];
799--1866[label="0.00689655;1pkt 1fpkt"];
799--1927[label="0.00680272;1pkt 1fpkt"];
799--2005[label="0.0833333;1pkt 1fpkt"];
799--2329[label="0.0222222;2pkt 2fpkt"];
799--2719[label="0.047619;1pkt 1fpkt"];
799--2897[label="0.010101;2pkt 2fpkt"];
799--3096[label="0.00634921;2pkt 2fpkt"];
799--3387[label="0.0031746;1pkt 1fpkt"];
799--4697[label="1;315pkt 315fpkt"];
975--1890[label="0.0526316;1pkt 1fpkt"];
975--2175[label="0.0526316;1pkt 1fpkt"];
975--2701[label="0.105263;2pkt 2fpkt"];
975--3690[label="0.0526316;1pkt 1fpkt"];
975--3878[label="0.0526316;1pkt 1fpkt"];
975--4697[label="0.0526316;1pkt 1fpkt"];
975--6116[label="0.0526316;1pkt 1fpkt"];
975--6211[label="0.0526316;1pkt 1fpkt"];
975--7439[label="0.0526316;1pkt 1fpkt"];
1890--3878[label="1;60pkt 60fpkt"];
1890--6211[label="1;60pkt 60fpkt"];
2005--3690[label="0.166667;2pkt 2fpkt"];
2005--4697[label="0.0833333;1pkt 1fpkt"];
2005--6116[label="0.166667;2pkt 2fpkt"];
2005--7439[label="0.166667;2pkt 2fpkt"];
3690--6116[label="1;81pkt 81fpkt"];
3690--7439[label="1;81pkt 81fpkt"];
3878--6211[label="1;62pkt 62fpkt"];
6116--7439[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter dst_port="80" src_ip="145.223.85.123"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
399[label="166.59.140.212;d;282pkt 282fpkt", shape=diamond, color=yellow];
988[label="26.216.28.160;s;11pkt 11fpkt", shape=diamond, color=yellow];
2487[label="161.99.128.199;d;31pkt 31fpkt", shape=diamond, color=yellow];
2720[label="109.130.16.177;s;18pkt 18fpkt", shape=diamond, color=yellow];
5058[label="26.216.28.160;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5149[label="26.132.97.168;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5228[label="109.130.16.176;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5241[label="109.130.16.177;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5306[label="26.216.28.184;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5563[label="26.132.97.210;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6845[label="195.149.7.154;2pkt 2fpkt", shape=invtriangle, color=brown];
6874[label="26.216.28.160;10pkt 10fpkt", shape=invtriangle, color=brown];
6923[label="26.132.97.168;27pkt 27fpkt", shape=invtriangle, color=brown];
6968[label="109.130.16.176;16pkt 16fpkt", shape=invtriangle, color=brown];
7010[label="26.216.28.184;11pkt 11fpkt", shape=invtriangle, color=brown];
7152[label="26.132.97.210;19pkt 19fpkt", shape=invtriangle, color=brown];
7904[label="26.132.97.168;27pkt 27fpkt", shape=invhouse, color=bisque];
7932[label="109.130.16.176;16pkt 16fpkt", shape=invhouse, color=bisque];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 166.59.140.212:*}[53.5613%]&lt;BR/&gt;{*:*, 166.59.140.212:25}[21.3675%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.3392%)&lt;BR/&gt; 113: (0.524476%)&lt;BR/&gt; 62700: (0.34965%)&lt;BR/&gt; 62617: (0.34965%)&lt;BR/&gt; 62475: (0.34965%)&gt;];
}
399--976[label="0.6;12pkt 12fpkt"];
399--988[label="0.727273;8pkt 8fpkt"];
399--1898[label="0.0384615;2pkt 2fpkt"];
399--2231[label="0.8;8pkt 8fpkt"];
399--2283[label="0.016129;1pkt 1fpkt"];
399--2286[label="0.0322581;2pkt 2fpkt"];
399--2293[label="0.0163934;1pkt 1fpkt"];
399--2490[label="0.0326087;3pkt 3fpkt"];
399--2581[label="0.0178571;1pkt 1fpkt"];
399--2720[label="0.611111;11pkt 11fpkt"];
399--3102[label="0.416667;5pkt 5fpkt"];
399--3229[label="0.0384615;2pkt 2fpkt"];
399--3446[label="0.0266667;2pkt 2fpkt"];
399--3534[label="0.0285714;2pkt 2fpkt"];
399--3597[label="0.0277778;1pkt 1fpkt"];
399--3659[label="0.015873;1pkt 1fpkt"];
399--3702[label="0.125;1pkt 1fpkt"];
399--3750[label="0.0246914;2pkt 2fpkt"];
399--5058[label="0.7;7pkt 7fpkt"];
399--5149[label="0.555556;15pkt 15fpkt"];
399--5228[label="0.733333;11pkt 11fpkt"];
399--5241[label="0.611111;11pkt 11fpkt"];
399--5255[label="0.7;7pkt 7fpkt"];
399--5306[label="0.583333;7pkt 7fpkt"];
399--5563[label="0.6;12pkt 12fpkt"];
399--6032[label="0.028169;2pkt 2fpkt"];
399--6096[label="0.015625;1pkt 1fpkt"];
399--6123[label="0.111111;1pkt 1fpkt"];
399--6145[label="0.0243902;2pkt 2fpkt"];
399--6845[label="0.5;1pkt 1fpkt"];
399--6874[label="0.7;7pkt 7fpkt"];
399--6923[label="0.555556;15pkt 15fpkt"];
399--6968[label="0.6875;11pkt 11fpkt"];
399--7010[label="0.636364;7pkt 7fpkt"];
399--7152[label="0.578947;11pkt 11fpkt"];
399--7432[label="0.015873;1pkt 1fpkt"];
399--7444[label="0.111111;1pkt 1fpkt"];
399--7456[label="0.0243902;2pkt 2fpkt"];
399--7904[label="0.555556;15pkt 15fpkt"];
399--7932[label="0.6875;11pkt 11fpkt"];
988--2487[label="0.0909091;1pkt 1fpkt"];
988--5058[label="1;10pkt 10fpkt"];
988--6874[label="1;10pkt 10fpkt"];
2487--5058[label="0.1;1pkt 1fpkt"];
2487--5228[label="0.0666667;1pkt 1fpkt"];
2487--5306[label="0.0833333;1pkt 1fpkt"];
2487--6874[label="0.1;1pkt 1fpkt"];
2487--6968[label="0.0625;1pkt 1fpkt"];
2487--7010[label="0.0909091;1pkt 1fpkt"];
2487--7932[label="0.0625;1pkt 1fpkt"];
2720--5241[label="1;18pkt 18fpkt"];
5058--6874[label="1;10pkt 10fpkt"];
5149--6923[label="1;27pkt 27fpkt"];
5149--7904[label="1;27pkt 27fpkt"];
5228--6968[label="1;15pkt 15fpkt"];
5228--7932[label="1;15pkt 15fpkt"];
5306--7010[label="1;11pkt 11fpkt"];
5563--7152[label="1;19pkt 19fpkt"];
6923--7904[label="1;27pkt 27fpkt"];
6968--7932[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.140.212" src_port="25"/>
      <filter dst_ip="166.59.140.212" dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
976[label="26.216.28.177;s;20pkt 20fpkt", shape=diamond, color=yellow];
977[label="166.59.128.24;d;37pkt 37fpkt", shape=diamond, color=yellow];
2231[label="109.130.16.179;s;10pkt 10fpkt", shape=diamond, color=yellow];
3044[label="166.59.128.24;d;31pkt 31fpkt", shape=hexagon, color=black];
3102[label="26.216.28.177;s;12pkt 12fpkt", shape=hexagon, color=black];
5255[label="109.130.16.179;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 166.59.128.24:*}[49.2308%]&lt;BR/&gt;{*:25, 166.59.140.212:*}[30.7692%]&lt;BR/&gt;{26.216.28.177:25, *:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.1667%)&lt;BR/&gt; 1345: (2.5%)&lt;BR/&gt; 4588: (1.66667%)&lt;BR/&gt; 4361: (1.66667%)&lt;BR/&gt; 3245: (1.66667%)&gt;];
}
976--977[label="0.05;1pkt 1fpkt"];
976--1158[label="0.15;3pkt 3fpkt"];
976--3044[label="0.05;1pkt 1fpkt"];
976--3102[label="1;12pkt 12fpkt"];
977--2231[label="0.2;2pkt 2fpkt"];
977--3044[label="1;31pkt 31fpkt"];
977--3102[label="0.0833333;1pkt 1fpkt"];
977--5255[label="0.2;2pkt 2fpkt"];
977--5306[label="0.0833333;1pkt 1fpkt"];
977--7010[label="0.0909091;1pkt 1fpkt"];
2231--3044[label="0.2;2pkt 2fpkt"];
2231--5255[label="0.9;9pkt 9fpkt"];
3044--3102[label="0.0833333;1pkt 1fpkt"];
3044--5255[label="0.2;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="26.216.28.177" src_port="25"/>
      <filter dst_ip="166.59.128.24" src_port="25"/>
      <filter dst_ip="166.59.140.212" src_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
2276[label="31.190.128.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.230.40:80, 31.190.128.30:4494}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4494: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2276--3265[label="1;1pkt 1fpkt"];
2276--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="31.190.128.30" dst_port="4494" src_ip="213.17.230.40" src_port="80"/>
    </slice>
    <from sec="1120712898" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
337[label="149.110.156.153;s;539pkt 539fpkt", shape=diamond, color=yellow];
641[label="209.89.255.244;d;282pkt 282fpkt", shape=diamond, color=yellow];
983[label="27.109.60.182;d;202pkt 202fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.156.153:*, 209.89.255.244:443}[52.3191%]&lt;BR/&gt;{149.110.156.153:*, 27.109.60.182:443}[40.0742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.9961%)&lt;BR/&gt; 8080: (1.95503%)&lt;BR/&gt; 4998: (0.0977517%)&lt;BR/&gt; 4993: (0.0977517%)&lt;BR/&gt; 4989: (0.0977517%)&gt;];
}
337--641[label="1;282pkt 282fpkt"];
337--983[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_ip="209.89.255.244" dst_port="443" src_ip="149.110.156.153"/>
      <filter dst_ip="27.109.60.182" dst_port="443" src_ip="149.110.156.153"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.176.197.129"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.200.14.203"/>
      <from sec="1120712402" usec="0"/>
      <to sec="1120713139" usec="0"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
378[label="166.59.141.182;s;30pkt 30fpkt", shape=diamond, color=yellow];
668[label="84.208.189.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="25.66.159.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
2950[label="84.208.189.49;d;1pkt 1fpkt", shape=hexagon, color=black];
5290[label="166.59.141.182;32pkt 32fpkt", shape=pentagon, color=darkviolet];
7003[label="166.59.141.182;32pkt 32fpkt", shape=invtriangle, color=brown];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.141.182:*, 6.45.39.8:6882}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (10.8247%)&lt;BR/&gt; 6881: (8.24742%)&lt;BR/&gt; 80: (7.73196%)&lt;BR/&gt; 7348: (7.21649%)&lt;BR/&gt; 6969: (6.18557%)&gt;];
}
378--668[label="1;1pkt 1fpkt"];
378--1078[label="1;1pkt 1fpkt"];
378--1665[label="0.5;1pkt 1fpkt"];
378--2950[label="1;1pkt 1fpkt"];
378--5290[label="1;30pkt 30fpkt"];
378--7003[label="1;30pkt 30fpkt"];
668--2950[label="1;1pkt 1fpkt"];
668--5290[label="1;1pkt 1fpkt"];
668--7003[label="1;1pkt 1fpkt"];
1078--5290[label="1;1pkt 1fpkt"];
1078--7003[label="1;1pkt 1fpkt"];
2950--5290[label="1;1pkt 1fpkt"];
2950--7003[label="1;1pkt 1fpkt"];
5290--7003[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="6.45.39.8" dst_port="6882" src_ip="166.59.141.182"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.177.105.202"/>
      <from sec="1120712402" usec="0"/>
      <to sec="1120712621" usec="0"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
1103[label="27.57.144.54;s;20pkt 20fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.57.144.54:80, 131.186.213.100:*}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20140: (2.5%)&lt;BR/&gt; 1935: (2.5%)&lt;BR/&gt; 1934: (2.5%)&lt;BR/&gt; 1703: (2.5%)&gt;];
}
1103--1130[label="0.1;2pkt 2fpkt"];
1103--2971[label="1;18pkt 18fpkt"];
1103--4018[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.213.100" src_ip="27.57.144.54" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
763[label="161.99.62.48;d;293pkt 293fpkt", shape=diamond, color=yellow];
1124[label="29.28.182.184;s;70pkt 70fpkt", shape=diamond, color=yellow];
2369[label="24.161.76.16;s;220pkt 220fpkt", shape=diamond, color=yellow];
2892[label="161.99.62.48;d;109pkt 109fpkt", shape=hexagon, color=black];
3578[label="24.161.76.16;234pkt 234fpkt", shape=pentagon, color=darkviolet];
6057[label="24.161.76.16;234pkt 234fpkt", shape=invtriangle, color=brown];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.161.76.16:80, 161.99.62.48:*}[76.2987%]&lt;BR/&gt;{29.28.182.184:*, 161.99.62.48:*}[23.0519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4655%)&lt;BR/&gt; 113: (3.44828%)&lt;BR/&gt; 2906: (0.215517%)&lt;BR/&gt; 2905: (0.215517%)&lt;BR/&gt; 2902: (0.215517%)&gt;];
}
763--1124[label="1;70pkt 70fpkt"];
763--2259[label="0.00341297;1pkt 1fpkt"];
763--2369[label="1;220pkt 220fpkt"];
763--2892[label="1;109pkt 109fpkt"];
763--3388[label="0.0853242;25pkt 25fpkt"];
763--3578[label="0.935897;219pkt 219fpkt"];
763--4086[label="0.00341297;1pkt 1fpkt"];
763--4426[label="0.00341297;1pkt 1fpkt"];
763--6057[label="0.935897;219pkt 219fpkt"];
763--6510[label="0.00341297;1pkt 1fpkt"];
763--7673[label="0.00341297;1pkt 1fpkt"];
1124--2892[label="0.371429;26pkt 26fpkt"];
1124--3388[label="0.0714286;5pkt 5fpkt"];
2369--2892[label="0.761468;83pkt 83fpkt"];
2369--3388[label="0.0909091;20pkt 20fpkt"];
2369--3578[label="0.995455;219pkt 219fpkt"];
2369--6057[label="0.995455;219pkt 219fpkt"];
2892--3388[label="0.00917431;1pkt 1fpkt"];
2892--3578[label="0.752294;82pkt 82fpkt"];
2892--6057[label="0.752294;82pkt 82fpkt"];
3578--6057[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.62.48" src_ip="29.28.182.184"/>
      <filter dst_ip="161.99.62.48" src_ip="24.161.76.16" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
1235[label="29.11.83.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
1236[label="161.107.5.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.5.171:27960, 29.11.83.120:27960}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27960: (100%)&gt;];
}
1235--1236[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="29.11.83.120" dst_port="27960" src_ip="161.107.5.171" src_port="27960"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120712727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.107.49.131"/>
      <from sec="1120712621" usec="0"/>
      <to sec="1120713052" usec="0"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120713052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
614[label="149.177.67.144;s;98pkt 98fpkt", shape=diamond, color=yellow];
2232[label="202.226.88.128;d;14pkt 14fpkt", shape=diamond, color=yellow];
4897[label="149.177.67.144;105pkt 105fpkt", shape=pentagon, color=darkviolet];
6772[label="149.177.67.144;105pkt 105fpkt", shape=invtriangle, color=brown];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.67.144:80, *:*}[98.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1145: (0.776398%)&lt;BR/&gt; 1136: (0.776398%)&lt;BR/&gt; 1149: (0.621118%)&lt;BR/&gt; 1147: (0.621118%)&gt;];
}
614--1248[label="0.0714286;7pkt 7fpkt"];
614--2232[label="0.857143;12pkt 12fpkt"];
614--3388[label="0.0816327;8pkt 8fpkt"];
614--4897[label="0.989796;97pkt 97fpkt"];
614--6772[label="0.989796;97pkt 97fpkt"];
2232--4897[label="0.857143;12pkt 12fpkt"];
2232--6772[label="0.857143;12pkt 12fpkt"];
4897--6772[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.67.144" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
928[label="145.223.32.177;s;77pkt 77fpkt", shape=diamond, color=yellow];
1096[label="145.223.98.225;s;82pkt 82fpkt", shape=diamond, color=yellow];
1637[label="212.30.137.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
2970[label="145.223.98.225;s;82pkt 82fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.32.177:*, *:*}[48.4277%]&lt;BR/&gt;{*:*, *:25}[33.3333%]&lt;BR/&gt;{145.223.98.225:*, 24.179.95.18:2703}[30.1887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.3802%)&lt;BR/&gt; 2703: (19.8347%)&lt;BR/&gt; 113: (4.54545%)&lt;BR/&gt; 1217: (0.619835%)&lt;BR/&gt; 80: (0.619835%)&gt;];
}
928--1265[label="0.0588235;1pkt 1fpkt"];
928--5242[label="0.987013;76pkt 76fpkt"];
1096--1265[label="0.0588235;1pkt 1fpkt"];
1096--1637[label="1;1pkt 1fpkt"];
1096--1801[label="0.54878;45pkt 45fpkt"];
1096--2970[label="1;82pkt 82fpkt"];
1637--2970[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.32.177"/>
      <filter dst_port="25"/>
      <filter dst_ip="24.179.95.18" dst_port="2703" src_ip="145.223.98.225"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
1104[label="149.177.182.39;s;56pkt 56fpkt", shape=diamond, color=yellow];
1296[label="212.204.103.169;d;292pkt 292fpkt", shape=diamond, color=yellow];
1506[label="193.141.83.241;d;229pkt 229fpkt", shape=diamond, color=yellow];
4433[label="145.223.253.95;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4466[label="149.177.84.98;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5567[label="166.59.140.210;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5634[label="145.223.74.215;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5659[label="145.223.54.217;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5674[label="166.59.202.218;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6515[label="145.223.253.95;48pkt 48fpkt", shape=invtriangle, color=brown];
6538[label="149.177.84.98;6pkt 6fpkt", shape=invtriangle, color=brown];
7155[label="166.59.140.210;15pkt 15fpkt", shape=invtriangle, color=brown];
7689[label="149.177.84.98;5pkt 5fpkt", shape=invhouse, color=bisque];
8043[label="166.59.140.210;15pkt 15fpkt", shape=invhouse, color=bisque];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.204.103.169:80}[29.9427%]&lt;BR/&gt;{*:0, 193.141.83.241:0}[27.3639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.6725%)&lt;BR/&gt; 80: (19.8992%)&lt;BR/&gt; 53: (6.54912%)&lt;BR/&gt; 40001: (3.84131%)&lt;BR/&gt; 48665: (0.503778%)&gt;];
}
1104--1296[label="0.0178571;1pkt 1fpkt"];
1104--1506[label="0.0178571;1pkt 1fpkt"];
1296--1356[label="0.00359712;1pkt 1fpkt"];
1296--1810[label="0.00342466;1pkt 1fpkt"];
1296--1876[label="0.00689655;1pkt 1fpkt"];
1296--1935[label="0.0135135;1pkt 1fpkt"];
1296--2018[label="0.01;1pkt 1fpkt"];
1296--2284[label="0.0104167;1pkt 1fpkt"];
1296--2307[label="0.0119048;1pkt 1fpkt"];
1296--2320[label="0.00342466;1pkt 1fpkt"];
1296--3053[label="0.00362319;1pkt 1fpkt"];
1296--3902[label="0.00342466;1pkt 1fpkt"];
1296--4262[label="0.00342466;1pkt 1fpkt"];
1296--4433[label="0.0208333;1pkt 1fpkt"];
1296--4466[label="0.2;1pkt 1fpkt"];
1296--4895[label="0.0555556;1pkt 1fpkt"];
1296--5212[label="0.00970874;1pkt 1fpkt"];
1296--5359[label="0.0133333;1pkt 1fpkt"];
1296--5634[label="0.1;1pkt 1fpkt"];
1296--5659[label="0.0232558;1pkt 1fpkt"];
1296--5810[label="0.0606061;2pkt 2fpkt"];
1296--5812[label="0.00952381;1pkt 1fpkt"];
1296--6224[label="0.00342466;1pkt 1fpkt"];
1296--6515[label="0.0208333;1pkt 1fpkt"];
1296--6538[label="0.166667;1pkt 1fpkt"];
1296--6960[label="0.00980392;1pkt 1fpkt"];
1296--7276[label="0.00952381;1pkt 1fpkt"];
1296--7689[label="0.2;1pkt 1fpkt"];
1296--8115[label="0.00961538;1pkt 1fpkt"];
1506--1932[label="0.00436681;1pkt 1fpkt"];
1506--2107[label="0.00436681;1pkt 1fpkt"];
1506--2320[label="0.00436681;1pkt 1fpkt"];
1506--3105[label="0.00436681;1pkt 1fpkt"];
1506--3214[label="0.00436681;1pkt 1fpkt"];
1506--3373[label="0.00436681;1pkt 1fpkt"];
1506--3380[label="0.00436681;1pkt 1fpkt"];
1506--3388[label="0.0742358;17pkt 17fpkt"];
1506--3877[label="0.00436681;1pkt 1fpkt"];
1506--4063[label="0.00436681;1pkt 1fpkt"];
1506--4509[label="0.00436681;1pkt 1fpkt"];
1506--4616[label="0.00436681;1pkt 1fpkt"];
1506--4887[label="0.00436681;1pkt 1fpkt"];
1506--5567[label="0.0666667;1pkt 1fpkt"];
1506--5674[label="0.142857;1pkt 1fpkt"];
1506--5688[label="0.00436681;1pkt 1fpkt"];
1506--6210[label="0.00436681;1pkt 1fpkt"];
1506--6614[label="0.00436681;1pkt 1fpkt"];
1506--6766[label="0.00436681;1pkt 1fpkt"];
1506--7155[label="0.0666667;1pkt 1fpkt"];
1506--7210[label="0.00436681;1pkt 1fpkt"];
1506--7492[label="0.00436681;1pkt 1fpkt"];
1506--7814[label="0.00436681;1pkt 1fpkt"];
1506--8043[label="0.0666667;1pkt 1fpkt"];
1506--8079[label="0.00436681;1pkt 1fpkt"];
4433--6515[label="1;48pkt 48fpkt"];
4466--6538[label="1;5pkt 5fpkt"];
4466--7689[label="1;5pkt 5fpkt"];
5567--7155[label="1;15pkt 15fpkt"];
5567--8043[label="1;15pkt 15fpkt"];
6538--7689[label="1;5pkt 5fpkt"];
7155--8043[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="212.204.103.169" dst_port="80"/>
      <filter dst_ip="193.141.83.241"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
986[label="145.223.197.126;s;98pkt 98fpkt", shape=diamond, color=yellow];
1300[label="28.22.232.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
2615[label="214.242.164.15;d;3pkt 3fpkt", shape=diamond, color=yellow];
4718[label="145.223.197.126;116pkt 116fpkt", shape=pentagon, color=darkviolet];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.197.126:0, *:0}[98.3193%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
986--1300[label="1;1pkt 1fpkt"];
986--1516[label="0.0102041;1pkt 1fpkt"];
986--2304[label="0.0102041;1pkt 1fpkt"];
986--2599[label="0.0102041;1pkt 1fpkt"];
986--2615[label="0.333333;1pkt 1fpkt"];
986--4718[label="0.989796;97pkt 97fpkt"];
1300--4718[label="1;1pkt 1fpkt"];
2615--4249[label="0.333333;1pkt 1fpkt"];
2615--4718[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.197.126"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
1305[label="208.80.57.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
5707[label="166.59.224.222;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.224.222:80, 208.80.57.89:4908}[33.3333%]&lt;BR/&gt;{166.59.224.222:80, 211.80.165.37:4567}[33.3333%]&lt;BR/&gt;{166.59.224.222:80, 211.80.165.37:4568}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4908: (25%)&lt;BR/&gt; 4568: (12.5%)&lt;BR/&gt; 4567: (12.5%)&gt;];
}
1305--1308[label="1;1pkt 1fpkt"];
1305--3388[label="1;1pkt 1fpkt"];
1305--5707[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.165.37" dst_port="4568" src_ip="166.59.224.222" src_port="80"/>
      <filter dst_ip="211.80.165.37" dst_port="4567" src_ip="166.59.224.222" src_port="80"/>
      <filter dst_ip="208.80.57.89" dst_port="4908" src_ip="166.59.224.222" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
967[label="194.236.14.96;d;27pkt 27fpkt", shape=diamond, color=yellow];
1287[label="166.59.153.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
4772[label="166.59.134.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6460[label="166.59.172.85;1pkt 1fpkt", shape=invtriangle, color=brown];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.236.14.96:5050}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.3333%)&lt;BR/&gt; 1034: (5%)&lt;BR/&gt; 1057: (3.33333%)&lt;BR/&gt; 20: (3.33333%)&lt;BR/&gt; 0: (3.33333%)&gt;];
}
967--1318[label="0.037037;1pkt 1fpkt"];
967--4744[label="0.037037;1pkt 1fpkt"];
967--4772[label="1;1pkt 1fpkt"];
967--6460[label="1;1pkt 1fpkt"];
1287--1288[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.96" dst_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1347[label="212.66.34.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1348[label="194.136.209.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
3060[label="212.66.34.80;d;1pkt 1fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.136.209.52:554, 212.66.34.80:1068}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1068: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1347--1348[label="1;1pkt 1fpkt"];
1347--3060[label="1;1pkt 1fpkt"];
1348--3060[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.34.80" dst_port="1068" src_ip="194.136.209.52" src_port="554"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
1217[label="68.85.185.6;s;8pkt 8fpkt", shape=diamond, color=yellow];
1440[label="131.186.133.147;d;48pkt 48fpkt", shape=diamond, color=yellow];
3451[label="68.85.185.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4194[label="203.55.75.72;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6382[label="203.55.75.72;3pkt 3fpkt", shape=invtriangle, color=brown];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.54.185.53:80, 131.186.133.147:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2424%)&lt;BR/&gt; 33680: (2.27273%)&lt;BR/&gt; 33461: (2.27273%)&lt;BR/&gt; 33413: (2.27273%)&lt;BR/&gt; 33663: (1.51515%)&gt;];
}
1217--1440[label="1;8pkt 8fpkt"];
1440--3451[label="1;4pkt 4fpkt"];
1440--4053[label="0.222222;6pkt 6fpkt"];
1440--4194[label="1;3pkt 3fpkt"];
1440--6382[label="1;3pkt 3fpkt"];
4194--6382[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.133.147" src_ip="203.54.185.53" src_port="80"/>
    </slice>
    <from sec="1120712472" usec="0"/>
    <to sec="1120712632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
473[label="145.222.0.3;s;331pkt 331fpkt", shape=diamond, color=yellow];
1230[label="26.73.168.208;d;18pkt 18fpkt", shape=diamond, color=yellow];
1458[label="26.36.33.44;d;197pkt 197fpkt", shape=diamond, color=yellow];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.0.3:*, 26.36.33.44:80}[55.3672%]&lt;BR/&gt;{145.222.0.3:*, 26.36.49.249:80}[36.7232%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8168%)&lt;BR/&gt; 0: (0.3663%)&lt;BR/&gt; 4246: (0.18315%)&lt;BR/&gt; 4244: (0.18315%)&lt;BR/&gt; 4197: (0.18315%)&gt;];
}
473--482[label="1;130pkt 130fpkt"];
473--1230[label="1;18pkt 18fpkt"];
473--1458[label="0.883249;174pkt 174fpkt"];
473--1897[label="0.125;1pkt 1fpkt"];
473--2832[label="1;105pkt 105fpkt"];
473--2835[label="1;130pkt 130fpkt"];
1458--4249[label="0.0196078;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.36.33.44" dst_port="80" src_ip="145.222.0.3"/>
      <filter dst_ip="26.36.49.249" dst_port="80" src_ip="145.222.0.3"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
1332[label="211.166.150.107;d;10pkt 10fpkt", shape=diamond, color=yellow];
1465[label="211.166.144.105;d;17pkt 17fpkt", shape=diamond, color=yellow];
1466[label="161.107.224.52;s;6pkt 6fpkt", shape=diamond, color=yellow];
1471[label="211.166.144.108;d;11pkt 11fpkt", shape=diamond, color=yellow];
1746[label="161.107.225.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
3141[label="161.107.225.156;s;2pkt 2fpkt", shape=hexagon, color=black];
3217[label="211.166.150.107;d;10pkt 10fpkt", shape=hexagon, color=black];
3964[label="161.107.225.49;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3993[label="161.107.224.52;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4855[label="149.177.89.139;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5268[label="149.177.104.180;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6750[label="149.177.89.139;3pkt 3fpkt", shape=invtriangle, color=brown];
7807[label="149.177.89.139;3pkt 3fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.144.105:1863}[32.6923%]&lt;BR/&gt;{*:*, 211.166.144.108:1863}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3226: (3.04878%)&lt;BR/&gt; 1253: (2.43902%)&lt;BR/&gt; 3222: (1.82927%)&lt;BR/&gt; 2456: (1.82927%)&gt;];
}
1332--1466[label="0.166667;1pkt 1fpkt"];
1332--3217[label="1;10pkt 10fpkt"];
1332--3993[label="0.2;1pkt 1fpkt"];
1332--4076[label="0.1;1pkt 1fpkt"];
1332--4855[label="0.333333;1pkt 1fpkt"];
1332--5129[label="0.142857;1pkt 1fpkt"];
1332--5268[label="0.25;1pkt 1fpkt"];
1332--5635[label="0.166667;1pkt 1fpkt"];
1332--6750[label="0.333333;1pkt 1fpkt"];
1332--6912[label="0.125;1pkt 1fpkt"];
1332--7187[label="0.142857;1pkt 1fpkt"];
1332--7807[label="0.333333;1pkt 1fpkt"];
1332--7897[label="0.142857;1pkt 1fpkt"];
1332--8064[label="0.142857;1pkt 1fpkt"];
1465--1466[label="0.166667;1pkt 1fpkt"];
1465--3964[label="0.166667;1pkt 1fpkt"];
1465--5783[label="0.0625;1pkt 1fpkt"];
1466--1471[label="0.166667;1pkt 1fpkt"];
1466--3217[label="0.166667;1pkt 1fpkt"];
1466--3993[label="1;5pkt 5fpkt"];
1471--1743[label="0.0909091;1pkt 1fpkt"];
1471--1746[label="0.5;1pkt 1fpkt"];
1471--3141[label="0.5;1pkt 1fpkt"];
1471--3993[label="0.2;1pkt 1fpkt"];
1471--4871[label="0.0909091;1pkt 1fpkt"];
1471--5596[label="0.2;1pkt 1fpkt"];
1471--7167[label="0.25;1pkt 1fpkt"];
1471--8052[label="0.2;1pkt 1fpkt"];
1746--3141[label="1;2pkt 2fpkt"];
3217--3993[label="0.2;1pkt 1fpkt"];
3217--4076[label="0.1;1pkt 1fpkt"];
3217--4855[label="0.333333;1pkt 1fpkt"];
3217--5129[label="0.142857;1pkt 1fpkt"];
3217--5268[label="0.25;1pkt 1fpkt"];
3217--5635[label="0.166667;1pkt 1fpkt"];
3217--6750[label="0.333333;1pkt 1fpkt"];
3217--6912[label="0.125;1pkt 1fpkt"];
3217--7187[label="0.142857;1pkt 1fpkt"];
3217--7807[label="0.333333;1pkt 1fpkt"];
3217--7897[label="0.142857;1pkt 1fpkt"];
3217--8064[label="0.142857;1pkt 1fpkt"];
4855--6750[label="1;3pkt 3fpkt"];
4855--7807[label="1;3pkt 3fpkt"];
6750--7807[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.105" dst_port="1863"/>
      <filter dst_ip="211.166.144.108" dst_port="1863"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
457[label="145.223.28.87;s;28pkt 28fpkt", shape=diamond, color=yellow];
766[label="200.128.183.222;d;118pkt 118fpkt", shape=diamond, color=yellow];
1470[label="212.66.53.90;s;115pkt 115fpkt", shape=diamond, color=yellow];
1497[label="145.223.242.194;s;16pkt 16fpkt", shape=diamond, color=yellow];
1538[label="200.128.45.19;d;64pkt 64fpkt", shape=diamond, color=yellow];
1772[label="145.223.88.168;s;22pkt 22fpkt", shape=diamond, color=yellow];
3092[label="145.223.242.194;s;11pkt 11fpkt", shape=hexagon, color=black];
3144[label="145.223.88.168;s;22pkt 22fpkt", shape=hexagon, color=black];
3255[label="212.66.53.90;s;115pkt 115fpkt", shape=hexagon, color=black];
4387[label="212.66.53.90;127pkt 127fpkt", shape=pentagon, color=darkviolet];
5148[label="145.223.88.168;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5404[label="145.223.242.194;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6487[label="212.66.53.90;128pkt 128fpkt", shape=invtriangle, color=brown];
6922[label="145.223.88.168;31pkt 31fpkt", shape=invtriangle, color=brown];
7073[label="145.223.242.194;16pkt 16fpkt", shape=invtriangle, color=brown];
7660[label="212.66.53.90;127pkt 127fpkt", shape=invhouse, color=bisque];
7903[label="145.223.88.168;31pkt 31fpkt", shape=invhouse, color=bisque];
7993[label="145.223.242.194;15pkt 15fpkt", shape=invhouse, color=bisque];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.53.90:*, 200.128.183.222:443}[21.7228%]&lt;BR/&gt;{145.223.10.3:*, 200.128.45.19:443}[20.9738%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.0902%)&lt;BR/&gt; 80: (2.37633%)&lt;BR/&gt; 1863: (0.484966%)&lt;BR/&gt; 49293: (0.29098%)&lt;BR/&gt; 49292: (0.29098%)&gt;];
}
457--766[label="1;28pkt 28fpkt"];
766--1470[label="0.408696;47pkt 47fpkt"];
766--1497[label="0.9375;15pkt 15fpkt"];
766--1772[label="0.954545;21pkt 21fpkt"];
766--3092[label="0.909091;10pkt 10fpkt"];
766--3144[label="0.954545;21pkt 21fpkt"];
766--3255[label="0.408696;47pkt 47fpkt"];
766--4387[label="0.398305;47pkt 47fpkt"];
766--5148[label="0.7;21pkt 21fpkt"];
766--5404[label="1;15pkt 15fpkt"];
766--6487[label="0.398305;47pkt 47fpkt"];
766--6922[label="0.677419;21pkt 21fpkt"];
766--7073[label="0.9375;15pkt 15fpkt"];
766--7660[label="0.398305;47pkt 47fpkt"];
766--7903[label="0.677419;21pkt 21fpkt"];
766--7993[label="1;15pkt 15fpkt"];
1470--1538[label="0.109375;7pkt 7fpkt"];
1470--1673[label="0.120879;11pkt 11fpkt"];
1470--3066[label="0.605263;46pkt 46fpkt"];
1470--3255[label="1;115pkt 115fpkt"];
1470--4387[label="0.991304;114pkt 114fpkt"];
1470--6487[label="1;115pkt 115fpkt"];
1470--7660[label="0.991304;114pkt 114fpkt"];
1497--3092[label="1;11pkt 11fpkt"];
1497--5404[label="1;15pkt 15fpkt"];
1497--7073[label="1;16pkt 16fpkt"];
1497--7993[label="1;15pkt 15fpkt"];
1538--2877[label="0.109375;7pkt 7fpkt"];
1538--3255[label="0.109375;7pkt 7fpkt"];
1538--3438[label="0.890625;57pkt 57fpkt"];
1538--4387[label="0.109375;7pkt 7fpkt"];
1538--5982[label="0.890625;57pkt 57fpkt"];
1538--6487[label="0.109375;7pkt 7fpkt"];
1538--7660[label="0.109375;7pkt 7fpkt"];
1772--3144[label="1;22pkt 22fpkt"];
1772--3206[label="0.0454545;1pkt 1fpkt"];
1772--5148[label="1;22pkt 22fpkt"];
1772--6922[label="1;22pkt 22fpkt"];
1772--7903[label="1;22pkt 22fpkt"];
3092--5404[label="0.909091;10pkt 10fpkt"];
3092--7073[label="1;11pkt 11fpkt"];
3092--7993[label="0.909091;10pkt 10fpkt"];
3144--3206[label="0.0454545;1pkt 1fpkt"];
3144--5148[label="1;22pkt 22fpkt"];
3144--6922[label="1;22pkt 22fpkt"];
3144--7903[label="1;22pkt 22fpkt"];
3255--4387[label="0.991304;114pkt 114fpkt"];
3255--6487[label="1;115pkt 115fpkt"];
3255--7660[label="0.991304;114pkt 114fpkt"];
4387--6487[label="1;127pkt 127fpkt"];
4387--7660[label="1;127pkt 127fpkt"];
5148--6922[label="1;30pkt 30fpkt"];
5148--7903[label="1;30pkt 30fpkt"];
5404--7073[label="1;15pkt 15fpkt"];
5404--7993[label="1;15pkt 15fpkt"];
6487--7660[label="1;127pkt 127fpkt"];
6922--7903[label="1;31pkt 31fpkt"];
7073--7993[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="200.128.183.222" dst_port="443" src_ip="212.66.53.90"/>
      <filter dst_ip="200.128.45.19" dst_port="443" src_ip="145.223.10.3"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1276[label="145.223.215.218;d;170pkt 170fpkt", shape=diamond, color=yellow];
1494[label="193.27.34.255;s;2pkt 2fpkt", shape=diamond, color=yellow];
3730[label="201.83.65.28;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4129[label="196.173.164.66;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4226[label="196.173.164.74;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6136[label="201.83.65.28;43pkt 43fpkt", shape=invtriangle, color=brown];
6343[label="196.173.164.66;20pkt 20fpkt", shape=invtriangle, color=brown];
7448[label="201.83.65.28;43pkt 43fpkt", shape=invhouse, color=bisque];
7570[label="196.173.164.66;21pkt 21fpkt", shape=invhouse, color=bisque];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.83.65.28:80, 145.223.215.218:*}[25.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8663%)&lt;BR/&gt; 4546: (0.534759%)&lt;BR/&gt; 4545: (0.534759%)&lt;BR/&gt; 4544: (0.534759%)&lt;BR/&gt; 4543: (0.534759%)&gt;];
}
1276--1494[label="1;2pkt 2fpkt"];
1276--3388[label="0.0235294;4pkt 4fpkt"];
1276--3662[label="0.0243902;1pkt 1fpkt"];
1276--3730[label="1;42pkt 42fpkt"];
1276--4129[label="1;21pkt 21fpkt"];
1276--4226[label="1;12pkt 12fpkt"];
1276--4910[label="0.333333;2pkt 2fpkt"];
1276--5066[label="0.333333;1pkt 1fpkt"];
1276--5338[label="0.08;2pkt 2fpkt"];
1276--6136[label="1;43pkt 43fpkt"];
1276--6343[label="1;20pkt 20fpkt"];
1276--6779[label="0.428571;3pkt 3fpkt"];
1276--7448[label="1;43pkt 43fpkt"];
1276--7570[label="1;21pkt 21fpkt"];
1276--7822[label="0.428571;3pkt 3fpkt"];
3730--6136[label="1;42pkt 42fpkt"];
3730--7448[label="1;42pkt 42fpkt"];
4129--6343[label="1;20pkt 20fpkt"];
4129--7570[label="1;21pkt 21fpkt"];
6136--7448[label="1;43pkt 43fpkt"];
6343--7570[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.215.218" src_ip="201.83.65.28" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.225.136.204"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
742[label="149.70.33.7;s;47pkt 47fpkt", shape=diamond, color=yellow];
1201[label="113.18.233.223;d;3pkt 3fpkt", shape=diamond, color=yellow];
1516[label="197.65.249.213;d;342pkt 342fpkt", shape=diamond, color=yellow];
1939[label="83.176.253.15;d;200pkt 200fpkt", shape=diamond, color=yellow];
2304[label="212.202.33.112;d;206pkt 206fpkt", shape=diamond, color=yellow];
2599[label="212.205.204.176;d;205pkt 205fpkt", shape=diamond, color=yellow];
3118[label="149.70.33.7;s;31pkt 31fpkt", shape=hexagon, color=black];
3130[label="83.176.253.15;d;140pkt 140fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 197.65.249.213:0}[34.3029%]&lt;BR/&gt;{*:0, 212.202.33.112:0}[20.662%]&lt;BR/&gt;{*:0, 212.205.204.176:0}[20.5617%]&lt;BR/&gt;{*:*, 83.176.253.15:*}[20.0602%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (71.6354%)&lt;BR/&gt; 139: (14.0119%)&lt;BR/&gt; 10000: (0.170358%)&lt;BR/&gt; 4117: (0.127768%)&lt;BR/&gt; 2657: (0.127768%)&gt;];
}
742--1201[label="0.666667;2pkt 2fpkt"];
742--1516[label="0.0212766;1pkt 1fpkt"];
742--1939[label="0.0212766;1pkt 1fpkt"];
742--2304[label="0.0212766;1pkt 1fpkt"];
742--2599[label="0.0212766;1pkt 1fpkt"];
742--3118[label="1;31pkt 31fpkt"];
1201--3118[label="0.666667;2pkt 2fpkt"];
1516--1932[label="0.00320513;1pkt 1fpkt"];
1516--2107[label="0.00323625;1pkt 1fpkt"];
1516--3105[label="0.00292398;1pkt 1fpkt"];
1516--3118[label="0.0322581;1pkt 1fpkt"];
1516--3214[label="0.00292398;1pkt 1fpkt"];
1516--3373[label="0.00292398;1pkt 1fpkt"];
1516--3380[label="0.00292398;1pkt 1fpkt"];
1516--3877[label="0.00309598;1pkt 1fpkt"];
1516--4063[label="0.00292398;1pkt 1fpkt"];
1516--4213[label="0.00854701;1pkt 1fpkt"];
1516--4509[label="0.00314465;1pkt 1fpkt"];
1516--4677[label="0.0113636;1pkt 1fpkt"];
1516--4718[label="0.00862069;1pkt 1fpkt"];
1516--4887[label="0.00292398;1pkt 1fpkt"];
1516--5381[label="0.0114943;1pkt 1fpkt"];
1516--5688[label="0.00306748;1pkt 1fpkt"];
1516--6210[label="0.00308642;1pkt 1fpkt"];
1516--6766[label="0.00292398;1pkt 1fpkt"];
1516--7056[label="0.0116279;1pkt 1fpkt"];
1516--7210[label="0.00306748;1pkt 1fpkt"];
1516--7492[label="0.00309598;1pkt 1fpkt"];
1516--7814[label="0.00292398;1pkt 1fpkt"];
1516--8079[label="0.00306748;1pkt 1fpkt"];
1939--3105[label="0.005;1pkt 1fpkt"];
1939--3130[label="1;140pkt 140fpkt"];
1939--3373[label="0.005;1pkt 1fpkt"];
1939--4063[label="0.005;1pkt 1fpkt"];
1939--4616[label="0.005;1pkt 1fpkt"];
1939--6614[label="0.005;1pkt 1fpkt"];
2304--3105[label="0.00485437;1pkt 1fpkt"];
2304--3118[label="0.0322581;1pkt 1fpkt"];
2304--3214[label="0.00485437;1pkt 1fpkt"];
2304--3373[label="0.00485437;1pkt 1fpkt"];
2304--3380[label="0.00485437;1pkt 1fpkt"];
2304--3877[label="0.00485437;1pkt 1fpkt"];
2304--4063[label="0.00485437;1pkt 1fpkt"];
2304--4213[label="0.00854701;1pkt 1fpkt"];
2304--4509[label="0.00485437;1pkt 1fpkt"];
2304--4638[label="0.0196078;1pkt 1fpkt"];
2304--4677[label="0.0113636;1pkt 1fpkt"];
2304--4718[label="0.00862069;1pkt 1fpkt"];
2304--4887[label="0.00485437;1pkt 1fpkt"];
2304--5688[label="0.00485437;1pkt 1fpkt"];
2304--6210[label="0.00485437;1pkt 1fpkt"];
2304--6629[label="0.0196078;1pkt 1fpkt"];
2304--6766[label="0.00485437;1pkt 1fpkt"];
2304--7210[label="0.00485437;1pkt 1fpkt"];
2304--7492[label="0.00485437;1pkt 1fpkt"];
2304--7814[label="0.00485437;1pkt 1fpkt"];
2304--8079[label="0.00485437;1pkt 1fpkt"];
2599--3105[label="0.00487805;1pkt 1fpkt"];
2599--3118[label="0.0322581;1pkt 1fpkt"];
2599--3214[label="0.00487805;1pkt 1fpkt"];
2599--3373[label="0.00487805;1pkt 1fpkt"];
2599--3380[label="0.00487805;1pkt 1fpkt"];
2599--3877[label="0.00487805;1pkt 1fpkt"];
2599--4063[label="0.00487805;1pkt 1fpkt"];
2599--4213[label="0.00854701;1pkt 1fpkt"];
2599--4509[label="0.00487805;1pkt 1fpkt"];
2599--4638[label="0.0196078;1pkt 1fpkt"];
2599--4677[label="0.0113636;1pkt 1fpkt"];
2599--4718[label="0.00862069;1pkt 1fpkt"];
2599--4887[label="0.00487805;1pkt 1fpkt"];
2599--5381[label="0.0114943;1pkt 1fpkt"];
2599--5688[label="0.00487805;1pkt 1fpkt"];
2599--6210[label="0.00487805;1pkt 1fpkt"];
2599--6629[label="0.0196078;1pkt 1fpkt"];
2599--6766[label="0.00487805;1pkt 1fpkt"];
2599--7056[label="0.0116279;1pkt 1fpkt"];
2599--7210[label="0.00487805;1pkt 1fpkt"];
2599--7492[label="0.00487805;1pkt 1fpkt"];
2599--7814[label="0.00487805;1pkt 1fpkt"];
2599--8079[label="0.00487805;1pkt 1fpkt"];
3130--3373[label="0.00714286;1pkt 1fpkt"];
3130--4063[label="0.00714286;1pkt 1fpkt"];
3130--4616[label="0.00714286;1pkt 1fpkt"];
3130--6614[label="0.00714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="83.176.253.15"/>
      <filter dst_ip="197.65.249.213"/>
      <filter dst_ip="212.202.33.112"/>
      <filter dst_ip="212.205.204.176"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
384[label="212.204.103.169;s;8556pkt 8556fpkt", shape=diamond, color=yellow];
1524[label="145.223.49.22;d;43pkt 43fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.204.103.169:80, *:*}[76.9946%]&lt;BR/&gt;{212.204.103.169:40001, *:*}[22.5169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4987%)&lt;BR/&gt; 40001: (11.2571%)&lt;BR/&gt; 25: (0.2384%)&lt;BR/&gt; 53267: (0.0290731%)&lt;BR/&gt; 40538: (0.0290731%)&gt;];
}
384--1524[label="0.0232558;1pkt 1fpkt"];
384--2817[label="0.00492611;1pkt 1fpkt"];
384--3356[label="0.00492611;1pkt 1fpkt"];
384--3388[label="0.0616146;361pkt 361fpkt"];
1524--4930[label="0.1;2pkt 2fpkt"];
1524--5019[label="0.214286;6pkt 6fpkt"];
1524--6793[label="0.1;2pkt 2fpkt"];
1524--6852[label="0.222222;6pkt 6fpkt"];
1524--7831[label="0.1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="212.204.103.169" src_port="80"/>
      <filter src_ip="212.204.103.169" src_port="40001"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
1525[label="145.223.3.146;d;108pkt 108fpkt", shape=diamond, color=yellow];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.223.3.146:25}[99.0741%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4541: (0.925926%)&lt;BR/&gt; 3404: (0.925926%)&lt;BR/&gt; 3284: (0.925926%)&lt;BR/&gt; 1062: (0.925926%)&gt;];
}
1525--2364[label="0.00970874;1pkt 1fpkt"];
1525--4043[label="0.00952381;1pkt 1fpkt"];
1525--6294[label="0.00952381;1pkt 1fpkt"];
1525--7543[label="0.00952381;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.3.146" dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.17.228.112"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
565[label="149.177.210.138;s;7616pkt 7616fpkt", shape=diamond, color=yellow];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.210.138:1113, *:*}[98.8708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1113: (49.4354%)&lt;BR/&gt; 443: (0.367647%)&lt;BR/&gt; 80: (0.210084%)&lt;BR/&gt; 54045: (0.0853466%)&lt;BR/&gt; 10000: (0.0722164%)&gt;];
}
565--2216[label="0.0434783;1pkt 1fpkt"];
565--3388[label="0.0015361;9pkt 9fpkt"];
565--3389[label="0.996216;1843pkt 1843fpkt"];
565--4842[label="0.999869;7615pkt 7615fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.210.138" src_port="1113"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
425[label="145.222.2.135;s;81pkt 81fpkt", shape=diamond, color=yellow];
1581[label="205.166.74.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
2182[label="27.16.32.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
4810[label="145.222.2.135;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6727[label="145.222.2.135;81pkt 81fpkt", shape=invtriangle, color=brown];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.2.135:*, *:80}[28.3951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.0816%)&lt;BR/&gt; 1863: (9.18367%)&lt;BR/&gt; 22470: (1.83673%)&lt;BR/&gt; 1083: (1.83673%)&lt;BR/&gt; 25347: (1.22449%)&gt;];
}
425--1581[label="1;1pkt 1fpkt"];
425--2182[label="1;1pkt 1fpkt"];
425--2508[label="0.111111;2pkt 2fpkt"];
425--4810[label="1;81pkt 81fpkt"];
425--6727[label="1;81pkt 81fpkt"];
1581--4810[label="1;1pkt 1fpkt"];
1581--6727[label="1;1pkt 1fpkt"];
2182--4810[label="1;1pkt 1fpkt"];
2182--6727[label="1;1pkt 1fpkt"];
4810--6727[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.222.2.135"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1583[label="214.180.58.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
1584[label="166.59.154.36;s;3pkt 3fpkt", shape=diamond, color=yellow];
3114[label="214.180.58.222;d;1pkt 1fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.154.36:80, 214.180.58.222:3460}[33.3333%]&lt;BR/&gt;{166.59.154.36:80, 30.219.90.97:2636}[33.3333%]&lt;BR/&gt;{166.59.154.36:80, 30.219.90.97:2694}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3460: (30%)&lt;BR/&gt; 2694: (10%)&lt;BR/&gt; 2636: (10%)&gt;];
}
1583--1584[label="1;1pkt 1fpkt"];
1583--3114[label="1;1pkt 1fpkt"];
1583--3388[label="1;1pkt 1fpkt"];
1584--3114[label="1;1pkt 1fpkt"];
1584--3388[label="0.333333;1pkt 1fpkt"];
3114--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="30.219.90.97" dst_port="2694" src_ip="166.59.154.36" src_port="80"/>
      <filter dst_ip="30.219.90.97" dst_port="2636" src_ip="166.59.154.36" src_port="80"/>
      <filter dst_ip="214.180.58.222" dst_port="3460" src_ip="166.59.154.36" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="83.33.63.166"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713228" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32674,2.16369,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
58[label="200.11.112.1s;1pkt 1fpkt", shape=rectangle, color=red];
1615[label="28.74.116.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.74.116.1:1169, 149.68.157.180:35190}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35190: (50%)&lt;BR/&gt; 1169: (50%)&gt;];
}
58--169[label="1;1pkt 1fpkt"];
58--1615[label="1;1pkt 1fpkt"];
58--2791[label="1;1pkt 1fpkt"];
1615--2791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="35190" src_ip="28.74.116.1" src_port="1169"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
1622[label="197.67.175.69;s;591pkt 591fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.67.175.69:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 65410: (0.0846024%)&lt;BR/&gt; 65316: (0.0846024%)&lt;BR/&gt; 65225: (0.0846024%)&lt;BR/&gt; 65218: (0.0846024%)&gt;];
}
1622--2682[label="0.00263852;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="197.67.175.69"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1545[label="166.59.141.182;d;19pkt 19fpkt", shape=diamond, color=yellow];
1666[label="196.93.197.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
3132[label="196.93.197.148;s;2pkt 2fpkt", shape=hexagon, color=black];
3289[label="166.59.141.182;d;19pkt 19fpkt", shape=hexagon, color=black];
4955[label="196.93.197.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5748[label="198.8.20.226;137pkt 137fpkt", shape=pentagon, color=darkviolet];
6810[label="196.93.197.148;2pkt 2fpkt", shape=invtriangle, color=brown];
7241[label="198.8.20.226;136pkt 136fpkt", shape=invtriangle, color=brown];
8098[label="198.8.20.226;136pkt 136fpkt", shape=invhouse, color=bisque];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.8.20.226:32861, *:1026}[53.8462%]&lt;BR/&gt;{198.8.20.226:32861, *:1027}[33.9744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32861: (45.1648%)&lt;BR/&gt; 1026: (27.4725%)&lt;BR/&gt; 1027: (17.6923%)&lt;BR/&gt; 7348: (1.53846%)&lt;BR/&gt; 6882: (1.53846%)&gt;];
}
1545--1666[label="0.5;1pkt 1fpkt"];
1545--3132[label="0.5;1pkt 1fpkt"];
1545--3289[label="1;19pkt 19fpkt"];
1545--4955[label="0.5;1pkt 1fpkt"];
1545--5748[label="0.0526316;1pkt 1fpkt"];
1545--6810[label="0.5;1pkt 1fpkt"];
1545--7241[label="0.0526316;1pkt 1fpkt"];
1545--8098[label="0.0526316;1pkt 1fpkt"];
1666--2795[label="0.5;1pkt 1fpkt"];
1666--3132[label="1;2pkt 2fpkt"];
1666--3289[label="0.5;1pkt 1fpkt"];
1666--3350[label="0.5;1pkt 1fpkt"];
1666--4955[label="1;2pkt 2fpkt"];
1666--6810[label="1;2pkt 2fpkt"];
3132--3289[label="0.5;1pkt 1fpkt"];
3132--3350[label="0.5;1pkt 1fpkt"];
3132--4955[label="1;2pkt 2fpkt"];
3132--6810[label="1;2pkt 2fpkt"];
3289--4955[label="0.5;1pkt 1fpkt"];
3289--5748[label="0.0526316;1pkt 1fpkt"];
3289--6810[label="0.5;1pkt 1fpkt"];
3289--7241[label="0.0526316;1pkt 1fpkt"];
3289--8098[label="0.0526316;1pkt 1fpkt"];
4955--6810[label="1;2pkt 2fpkt"];
5748--7241[label="1;136pkt 136fpkt"];
5748--8098[label="1;136pkt 136fpkt"];
7241--8098[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="198.8.20.226" src_port="32861"/>
      <filter dst_port="1027" src_ip="198.8.20.226" src_port="32861"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1399[label="136.165.121.92;d;14pkt 14fpkt", shape=diamond, color=yellow];
1677[label="213.17.230.49;s;14pkt 14fpkt", shape=diamond, color=yellow];
3965[label="213.17.230.49;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.230.49:80, 136.165.121.92:*}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9583%)&lt;BR/&gt; 60942: (3.125%)&lt;BR/&gt; 22782: (3.125%)&lt;BR/&gt; 22174: (3.125%)&lt;BR/&gt; 22050: (3.125%)&gt;];
}
1399--1677[label="1;14pkt 14fpkt"];
1399--3965[label="1;14pkt 14fpkt"];
1677--3965[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="136.165.121.92" src_ip="213.17.230.49" src_port="80"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
1678[label="131.186.70.169;d;2pkt 2fpkt", shape=diamond, color=yellow];
1679[label="84.93.173.44;s;3pkt 3fpkt", shape=diamond, color=yellow];
3908[label="84.93.173.44;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6229[label="84.93.173.44;3pkt 3fpkt", shape=invtriangle, color=brown];
7503[label="84.93.173.44;3pkt 3fpkt", shape=invhouse, color=bisque];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.93.173.44:1028, 131.186.72.29:161}[33.3333%]&lt;BR/&gt;{84.93.173.44:0, 131.186.70.169:0}[33.3333%]&lt;BR/&gt;{84.93.173.44:1723, 131.186.70.169:2570}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (35.7143%)&lt;BR/&gt; 2570: (17.8571%)&lt;BR/&gt; 1723: (17.8571%)&lt;BR/&gt; 1028: (14.2857%)&lt;BR/&gt; 161: (14.2857%)&gt;];
}
1678--1679[label="1;2pkt 2fpkt"];
1678--3908[label="1;2pkt 2fpkt"];
1678--6229[label="1;2pkt 2fpkt"];
1678--7503[label="1;2pkt 2fpkt"];
1679--3908[label="1;3pkt 3fpkt"];
1679--6229[label="1;3pkt 3fpkt"];
1679--7503[label="1;3pkt 3fpkt"];
3908--6229[label="1;3pkt 3fpkt"];
3908--7503[label="1;3pkt 3fpkt"];
6229--7503[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.70.169" dst_port="2570" src_ip="84.93.173.44" src_port="1723"/>
      <filter dst_ip="131.186.70.169" src_ip="84.93.173.44"/>
      <filter dst_ip="131.186.72.29" dst_port="161" src_ip="84.93.173.44" src_port="1028"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.841404,1.99398,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1386[label="212.66.63.22;s;6pkt 6fpkt", shape=diamond, color=yellow];
1706[label="212.206.129.140;d;3pkt 3fpkt", shape=diamond, color=yellow];
6098[label="212.66.63.22;5pkt 5fpkt", shape=invtriangle, color=brown];
7433[label="212.66.63.22;5pkt 5fpkt", shape=invhouse, color=bisque];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.63.22:*, *:8000}[50%]&lt;BR/&gt;{212.66.63.22:*, 212.206.129.140:1000}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1000: (21.0526%)&lt;BR/&gt; 8000: (18.4211%)&lt;BR/&gt; 4005: (10.5263%)&lt;BR/&gt; 1385: (10.5263%)&lt;BR/&gt; 1384: (10.5263%)&gt;];
}
1386--1706[label="1;3pkt 3fpkt"];
1386--6098[label="1;5pkt 5fpkt"];
1386--7433[label="1;5pkt 5fpkt"];
1706--6098[label="1;3pkt 3fpkt"];
1706--7433[label="1;3pkt 3fpkt"];
6098--7433[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="8000" src_ip="212.66.63.22"/>
      <filter dst_ip="212.206.129.140" dst_port="1000" src_ip="212.66.63.22"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1238[label="161.107.71.110;s;59pkt 59fpkt", shape=diamond, color=yellow];
1735[label="84.35.1.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
2017[label="211.166.144.88;d;13pkt 13fpkt", shape=diamond, color=yellow];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.71.110:*, *:1863}[50.7042%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (33.5616%)&lt;BR/&gt; 53: (9.58904%)&lt;BR/&gt; 19422: (8.21918%)&lt;BR/&gt; 7001: (2.05479%)&lt;BR/&gt; 1243: (2.05479%)&gt;];
}
1238--1735[label="1;1pkt 1fpkt"];
1238--1741[label="0.117647;2pkt 2fpkt"];
1238--2017[label="0.0769231;1pkt 1fpkt"];
1238--2642[label="0.0338983;2pkt 2fpkt"];
2017--4900[label="0.153846;2pkt 2fpkt"];
2017--5826[label="0.333333;1pkt 1fpkt"];
2017--6774[label="0.153846;2pkt 2fpkt"];
2017--7284[label="0.333333;1pkt 1fpkt"];
2017--7818[label="0.153846;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="161.107.71.110"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120712951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1462[label="161.107.224.26;s;23pkt 23fpkt", shape=diamond, color=yellow];
1736[label="30.178.67.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.224.26:*, 1.174.73.193:6346}[39.1304%]&lt;BR/&gt;{161.107.224.26:*, 31.92.26.22:6346}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (43.75%)&lt;BR/&gt; 6348: (10.4167%)&lt;BR/&gt; 1863: (2.08333%)&lt;BR/&gt; 1637: (2.08333%)&lt;BR/&gt; 1630: (2.08333%)&gt;];
}
1462--1736[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.174.73.193" dst_port="6346" src_ip="161.107.224.26"/>
      <filter dst_ip="31.92.26.22" dst_port="6346" src_ip="161.107.224.26"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120712978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1636[label="212.66.36.48;s;9pkt 9fpkt", shape=diamond, color=yellow];
1778[label="2.6.2.119;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.36.48:*, 29.9.4.189:80}[44.4444%]&lt;BR/&gt;{212.66.36.48:*, 2.6.2.119:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 3256: (9.09091%)&lt;BR/&gt; 3254: (9.09091%)&lt;BR/&gt; 3271: (4.54545%)&lt;BR/&gt; 3268: (4.54545%)&gt;];
}
1636--1778[label="1;2pkt 2fpkt"];
1636--2442[label="0.111111;1pkt 1fpkt"];
1636--3944[label="1;9pkt 9fpkt"];
1778--3944[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="29.9.4.189" dst_port="80" src_ip="212.66.36.48"/>
      <filter dst_ip="2.6.2.119" dst_port="80" src_ip="212.66.36.48"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
651[label="145.223.50.124;s;188pkt 188fpkt", shape=diamond, color=yellow];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.50.124:*, 24.179.95.18:2703}[74.4681%]&lt;BR/&gt;{145.223.50.124:*, *:25}[23.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (37.234%)&lt;BR/&gt; 25: (12.5%)&lt;BR/&gt; 56260: (0.531915%)&lt;BR/&gt; 65468: (0.265957%)&lt;BR/&gt; 65251: (0.265957%)&gt;];
}
651--1801[label="0.702128;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="145.223.50.124"/>
      <filter dst_ip="24.179.95.18" dst_port="2703" src_ip="145.223.50.124"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
339[label="145.222.47.149;s;480pkt 480fpkt", shape=diamond, color=yellow];
1694[label="197.86.45.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
1808[label="197.84.215.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
2706[label="193.148.48.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
3283[label="197.84.215.26;d;1pkt 1fpkt", shape=hexagon, color=black];
4958[label="145.222.47.149;551pkt 551fpkt", shape=pentagon, color=darkviolet];
6813[label="145.222.47.149;550pkt 550fpkt", shape=invtriangle, color=brown];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.47.149:*, *:16881}[22.1416%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (10.8833%)&lt;BR/&gt; 80: (3.21767%)&lt;BR/&gt; 25505: (2.80757%)&lt;BR/&gt; 17362: (2.77603%)&lt;BR/&gt; 19804: (2.64984%)&gt;];
}
339--420[label="0.0104167;5pkt 5fpkt"];
339--757[label="0.00851064;4pkt 4fpkt"];
339--1048[label="0.014881;5pkt 5fpkt"];
339--1177[label="0.121212;8pkt 8fpkt"];
339--1694[label="1;1pkt 1fpkt"];
339--1808[label="1;1pkt 1fpkt"];
339--1831[label="0.016;2pkt 2fpkt"];
339--2643[label="0.0769231;1pkt 1fpkt"];
339--2706[label="1;1pkt 1fpkt"];
339--2954[label="0.015015;5pkt 5fpkt"];
339--3077[label="0.222222;8pkt 8fpkt"];
339--3283[label="1;1pkt 1fpkt"];
339--4958[label="1;480pkt 480fpkt"];
339--6813[label="0.997917;479pkt 479fpkt"];
1694--4958[label="1;1pkt 1fpkt"];
1694--6813[label="1;1pkt 1fpkt"];
1808--3283[label="1;1pkt 1fpkt"];
1808--4958[label="1;1pkt 1fpkt"];
1808--6813[label="1;1pkt 1fpkt"];
2706--4958[label="1;1pkt 1fpkt"];
2706--6813[label="1;1pkt 1fpkt"];
3283--4958[label="1;1pkt 1fpkt"];
3283--6813[label="1;1pkt 1fpkt"];
4958--6813[label="1;550pkt 550fpkt"];
</description>
    <slice>
      <filter dst_port="16881" src_ip="145.222.47.149"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.236.14.76"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1819[label="84.10.62.56;d;229pkt 229fpkt", shape=diamond, color=yellow];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 84.10.62.56:*}[99.1266%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.5633%)&lt;BR/&gt; 0: (0.873362%)&lt;BR/&gt; 1966: (0.655022%)&lt;BR/&gt; 3401: (0.436681%)&lt;BR/&gt; 2921: (0.436681%)&gt;];
}
1819--3105[label="0.00436681;1pkt 1fpkt"];
1819--3373[label="0.00436681;1pkt 1fpkt"];
1819--4063[label="0.00436681;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.10.62.56" src_port="139"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
694[label="145.223.72.218;s;7pkt 7fpkt", shape=diamond, color=yellow];
1842[label="212.34.126.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.72.218:*, 25.112.49.169:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1220: (12.5%)&lt;BR/&gt; 1000: (12.5%)&lt;BR/&gt; 5190: (6.25%)&lt;BR/&gt; 3020: (6.25%)&lt;BR/&gt; 1863: (6.25%)&gt;];
}
694--1629[label="1;4pkt 4fpkt"];
694--1842[label="1;1pkt 1fpkt"];
694--3002[label="1;7pkt 7fpkt"];
694--5669[label="1;7pkt 7fpkt"];
1842--3002[label="1;1pkt 1fpkt"];
1842--5669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.112.49.169" src_ip="145.223.72.218"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1841[label="145.223.72.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
1843[label="212.34.126.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.34.126.50:1000, 145.223.72.218:1220}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1220: (50%)&lt;BR/&gt; 1000: (50%)&gt;];
}
1841--1843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.72.218" dst_port="1220" src_ip="212.34.126.50" src_port="1000"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
1848[label="204.64.75.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
1849[label="145.223.24.70;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.24.70:6970, 204.64.75.80:22158}[20%]&lt;BR/&gt;{145.223.24.70:32936, 204.64.75.80:554}[20%]&lt;BR/&gt;{145.223.24.70:32940, 210.30.187.49:80}[20%]&lt;BR/&gt;{145.223.24.70:32941, 210.30.187.49:80}[20%]&lt;BR/&gt;{145.223.24.70:32942, 210.30.187.49:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 32936: (14.2857%)&lt;BR/&gt; 22158: (14.2857%)&lt;BR/&gt; 6970: (14.2857%)&lt;BR/&gt; 554: (14.2857%)&gt;];
}
1848--1849[label="1;2pkt 2fpkt"];
1849--2385[label="0.6;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="210.30.187.49" dst_port="80" src_ip="145.223.24.70" src_port="32942"/>
      <filter dst_ip="210.30.187.49" dst_port="80" src_ip="145.223.24.70" src_port="32941"/>
      <filter dst_ip="210.30.187.49" dst_port="80" src_ip="145.223.24.70" src_port="32940"/>
      <filter dst_ip="204.64.75.80" dst_port="554" src_ip="145.223.24.70" src_port="32936"/>
      <filter dst_ip="204.64.75.80" dst_port="22158" src_ip="145.223.24.70" src_port="6970"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
1032[label="25.230.54.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.230.54.122:20, 166.59.132.69:60800}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60800: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
1032--2958[label="1;1pkt 1fpkt"];
1032--6656[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.132.69" dst_port="60800" src_ip="25.230.54.122" src_port="20"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
1047[label="145.223.41.26;s;33pkt 33fpkt", shape=diamond, color=yellow];
1875[label="204.64.80.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
3219[label="145.223.41.26;s;33pkt 33fpkt", shape=hexagon, color=black];
3708[label="145.223.41.26;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6129[label="145.223.41.26;33pkt 33fpkt", shape=invtriangle, color=brown];
7446[label="145.223.41.26;33pkt 33fpkt", shape=invhouse, color=bisque];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.41.26:*, 152.56.160.143:80}[84.8485%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1928%)&lt;BR/&gt; 2597: (1.80723%)&lt;BR/&gt; 554: (1.80723%)&lt;BR/&gt; 4986: (1.50602%)&lt;BR/&gt; 4984: (1.50602%)&gt;];
}
1047--1875[label="1;1pkt 1fpkt"];
1047--3219[label="1;33pkt 33fpkt"];
1047--3708[label="1;33pkt 33fpkt"];
1047--6129[label="1;33pkt 33fpkt"];
1047--7446[label="1;33pkt 33fpkt"];
1875--3219[label="1;1pkt 1fpkt"];
1875--3708[label="1;1pkt 1fpkt"];
1875--6129[label="1;1pkt 1fpkt"];
1875--7446[label="1;1pkt 1fpkt"];
3219--3708[label="1;33pkt 33fpkt"];
3219--6129[label="1;33pkt 33fpkt"];
3219--7446[label="1;33pkt 33fpkt"];
3708--6129[label="1;33pkt 33fpkt"];
3708--7446[label="1;33pkt 33fpkt"];
6129--7446[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="152.56.160.143" dst_port="80" src_ip="145.223.41.26"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
1810[label="149.177.87.44;s;688pkt 688fpkt", shape=diamond, color=yellow];
2319[label="214.215.103.60;d;605pkt 605fpkt", shape=diamond, color=yellow];
3902[label="149.177.87.44;741pkt 741fpkt", shape=pentagon, color=darkviolet];
6224[label="149.177.87.44;741pkt 741fpkt", shape=invtriangle, color=brown];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.87.44:*, 214.215.103.60:53}[88.2907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1532%)&lt;BR/&gt; 0: (0.648649%)&lt;BR/&gt; 25: (0.468468%)&lt;BR/&gt; 65497: (0.0720721%)&lt;BR/&gt; 65483: (0.0720721%)&gt;];
}
1810--1880[label="0.018018;2pkt 2fpkt"];
1810--2176[label="0.0306122;3pkt 3fpkt"];
1810--2319[label="0.998347;604pkt 604fpkt"];
1810--2425[label="0.00909091;1pkt 1fpkt"];
1810--2435[label="0.00961538;1pkt 1fpkt"];
1810--3318[label="0.00854701;1pkt 1fpkt"];
1810--3384[label="0.0494186;34pkt 34fpkt"];
1810--3902[label="0.998547;687pkt 687fpkt"];
1810--6224[label="0.998547;687pkt 687fpkt"];
2319--2960[label="0.0025974;1pkt 1fpkt"];
2319--3384[label="0.0545455;33pkt 33fpkt"];
2319--3902[label="0.996694;603pkt 603fpkt"];
2319--4305[label="0.00184502;1pkt 1fpkt"];
2319--6224[label="0.996694;603pkt 603fpkt"];
2319--6440[label="0.00184162;1pkt 1fpkt"];
2319--7632[label="0.00184502;1pkt 1fpkt"];
3902--6224[label="1;741pkt 741fpkt"];
</description>
    <slice>
      <filter dst_ip="214.215.103.60" dst_port="53" src_ip="149.177.87.44"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="84.148.125.238"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713227" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1914[label="84.10.36.27;d;214pkt 214fpkt", shape=diamond, color=yellow];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 84.10.36.27:*}[98.5981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.2991%)&lt;BR/&gt; 0: (1.40187%)&lt;BR/&gt; 3574: (0.46729%)&lt;BR/&gt; 2908: (0.46729%)&lt;BR/&gt; 2075: (0.46729%)&gt;];
}
1914--4616[label="0.0046729;1pkt 1fpkt"];
1914--6614[label="0.0046729;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.10.36.27" src_port="139"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
196[label="27.150.69.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.211.149:54595, 27.150.69.168:80}[50%]&lt;BR/&gt;{212.79.211.149:54648, 27.150.69.168:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54648: (25%)&lt;BR/&gt; 54595: (25%)&gt;];
}
196--197[label="1;2pkt 2fpkt"];
196--4968[label="1;2pkt 2fpkt"];
196--6821[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="27.150.69.168" dst_port="80" src_ip="212.79.211.149" src_port="54648"/>
      <filter dst_ip="27.150.69.168" dst_port="80" src_ip="212.79.211.149" src_port="54595"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1411[label="223.109.24.159;d;140pkt 140fpkt", shape=diamond, color=yellow];
1847[label="26.161.17.237;d;2pkt 2fpkt", shape=diamond, color=yellow];
2110[label="211.197.64.13;d;140pkt 140fpkt", shape=diamond, color=yellow];
2877[label="145.223.10.3;s;124pkt 124fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.10.3:*, 223.109.24.159:80}[35.8056%]&lt;BR/&gt;{145.223.225.241:*, 211.197.64.13:80}[23.2737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5813%)&lt;BR/&gt; 443: (3.94089%)&lt;BR/&gt; 0: (0.738916%)&lt;BR/&gt; 1863: (0.492611%)&lt;BR/&gt; 1111: (0.492611%)&gt;];
}
1411--2877[label="0.104839;13pkt 13fpkt"];
1411--3438[label="1;140pkt 140fpkt"];
1411--5982[label="1;140pkt 140fpkt"];
1847--2877[label="1;2pkt 2fpkt"];
1847--3438[label="1;2pkt 2fpkt"];
1847--5982[label="1;2pkt 2fpkt"];
2110--2639[label="0.125;13pkt 13fpkt"];
2110--2865[label="0.00934579;1pkt 1fpkt"];
2110--2932[label="0.0214286;3pkt 3fpkt"];
2110--3215[label="1;140pkt 140fpkt"];
2110--3438[label="0.0214286;3pkt 3fpkt"];
2110--3859[label="0.134021;13pkt 13fpkt"];
2110--3886[label="0.133333;2pkt 2fpkt"];
2110--4519[label="0.08;4pkt 4fpkt"];
2110--4525[label="0.0625;2pkt 2fpkt"];
2110--4788[label="0.0214286;3pkt 3fpkt"];
2110--5522[label="0.0645161;2pkt 2fpkt"];
2110--5675[label="0.0214286;3pkt 3fpkt"];
2110--5716[label="0.0214286;3pkt 3fpkt"];
2110--5866[label="0.65;91pkt 91fpkt"];
2110--5982[label="0.0214286;3pkt 3fpkt"];
2110--6200[label="0.132653;13pkt 13fpkt"];
2110--6717[label="0.0214286;3pkt 3fpkt"];
2110--7135[label="0.0645161;2pkt 2fpkt"];
2110--7792[label="0.0214286;3pkt 3fpkt"];
2877--2897[label="0.00806452;1pkt 1fpkt"];
2877--3206[label="0.016129;2pkt 2fpkt"];
2877--3226[label="0.0555556;1pkt 1fpkt"];
2877--3438[label="1;124pkt 124fpkt"];
2877--5982[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_ip="223.109.24.159" dst_port="80" src_ip="145.223.10.3"/>
      <filter dst_ip="211.197.64.13" dst_port="80" src_ip="145.223.225.241"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="149.177.105.180"/>
      <from sec="1120712408" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1966[label="149.177.134.47;s;8pkt 8fpkt", shape=diamond, color=yellow];
2012[label="29.68.168.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
2016[label="200.220.168.47;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.134.47:37713, 200.220.168.47:*}[25%]&lt;BR/&gt;{149.177.134.47:*, 210.30.184.182:80}[25%]&lt;BR/&gt;{149.177.134.47:37713, 29.68.168.229:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37713: (37.5%)&lt;BR/&gt; 60071: (8.33333%)&lt;BR/&gt; 60049: (8.33333%)&lt;BR/&gt; 20455: (8.33333%)&lt;BR/&gt; 3809: (8.33333%)&gt;];
}
1966--2012[label="1;2pkt 2fpkt"];
1966--2016[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="29.68.168.229" src_ip="149.177.134.47" src_port="37713"/>
      <filter dst_ip="210.30.184.182" dst_port="80" src_ip="149.177.134.47"/>
      <filter dst_ip="200.220.168.47" src_ip="149.177.134.47" src_port="37713"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
355[label="145.222.130.33;s;168pkt 168fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.130.33:*, 193.201.121.50:80}[55.3571%]&lt;BR/&gt;{145.222.130.33:*, 193.201.121.55:80}[23.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8095%)&lt;BR/&gt; 1863: (1.19048%)&lt;BR/&gt; 1471: (0.595238%)&lt;BR/&gt; 1599: (0.297619%)&lt;BR/&gt; 1597: (0.297619%)&gt;];
}
355--847[label="0.96875;93pkt 93fpkt"];
355--1555[label="0.113095;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="193.201.121.50" dst_port="80" src_ip="145.222.130.33"/>
      <filter dst_ip="193.201.121.55" dst_port="80" src_ip="145.222.130.33"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28547,2.18409,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
5[label="145.223.229.85s;1pkt 1fpkt", shape=rectangle, color=red];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.229.85:63811, 28.153.34.156:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63811: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5--2024[label="1;1pkt 1fpkt"];
5--2059[label="1;1pkt 1fpkt"];
5--3197[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="28.153.34.156" dst_port="80" src_ip="145.223.229.85" src_port="63811"/>
    </slice>
    <from sec="1120712905" usec="0"/>
    <to sec="1120712909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
1240[label="161.107.5.33;s;86pkt 86fpkt", shape=diamond, color=yellow];
1242[label="29.139.20.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
2025[label="113.73.23.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
2990[label="161.107.5.33;s;83pkt 83fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.5.33:*, *:6346}[61.6279%]&lt;BR/&gt;{161.107.5.33:*, *:6348}[25.5814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (33.6257%)&lt;BR/&gt; 6348: (12.5731%)&lt;BR/&gt; 6349: (2.92398%)&lt;BR/&gt; 137: (2.33918%)&lt;BR/&gt; 1035: (0.877193%)&gt;];
}
1240--1242[label="1;1pkt 1fpkt"];
1240--2025[label="1;1pkt 1fpkt"];
1240--2990[label="1;83pkt 83fpkt"];
1242--2990[label="1;1pkt 1fpkt"];
2025--2990[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="161.107.5.33"/>
      <filter dst_port="6348" src_ip="161.107.5.33"/>
    </slice>
    <from sec="1120712622" usec="0"/>
    <to sec="1120713048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
2000[label="161.99.66.171;d;8pkt 8fpkt", shape=diamond, color=yellow];
2037[label="29.9.56.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 161.99.66.171:2368}[25%]&lt;BR/&gt;{*:80, 161.99.66.171:2389}[25%]&lt;BR/&gt;{194.165.63.47:80, 161.99.66.171:*}[25%]&lt;BR/&gt;{194.13.37.85:80, 161.99.66.171:*}[25%]&lt;BR/&gt;{29.9.56.137:80, 161.99.66.171:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2506: (10%)&lt;BR/&gt; 2502: (10%)&lt;BR/&gt; 2389: (10%)&lt;BR/&gt; 2368: (10%)&gt;];
}
2000--2037[label="1;2pkt 2fpkt"];
2000--2672[label="0.25;2pkt 2fpkt"];
2000--3388[label="0.125;1pkt 1fpkt"];
2037--3388[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.66.171" src_ip="29.9.56.137" src_port="80"/>
      <filter dst_ip="161.99.66.171" src_ip="194.13.37.85" src_port="80"/>
      <filter dst_ip="161.99.66.171" src_ip="194.165.63.47" src_port="80"/>
      <filter dst_ip="161.99.66.171" dst_port="2389" src_port="80"/>
      <filter dst_ip="161.99.66.171" dst_port="2368" src_port="80"/>
    </slice>
    <from sec="1120712475" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
2040[label="210.80.181.182;d;5pkt 5fpkt", shape=diamond, color=yellow];
2041[label="149.177.90.26;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.90.26:3867, 210.80.181.182:554}[20%]&lt;BR/&gt;{149.177.90.26:3868, 210.80.181.182:1755}[20%]&lt;BR/&gt;{149.177.90.26:3871, 210.80.181.182:80}[20%]&lt;BR/&gt;{149.177.90.26:3874, 210.80.181.182:80}[20%]&lt;BR/&gt;{149.177.90.26:3888, 210.80.181.182:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 3888: (10%)&lt;BR/&gt; 3874: (10%)&lt;BR/&gt; 3871: (10%)&lt;BR/&gt; 3868: (10%)&gt;];
}
2040--2041[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="210.80.181.182" dst_port="80" src_ip="149.177.90.26" src_port="3888"/>
      <filter dst_ip="210.80.181.182" dst_port="80" src_ip="149.177.90.26" src_port="3874"/>
      <filter dst_ip="210.80.181.182" dst_port="80" src_ip="149.177.90.26" src_port="3871"/>
      <filter dst_ip="210.80.181.182" dst_port="1755" src_ip="149.177.90.26" src_port="3868"/>
      <filter dst_ip="210.80.181.182" dst_port="554" src_ip="149.177.90.26" src_port="3867"/>
    </slice>
    <from sec="1120712772" usec="0"/>
    <to sec="1120712816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1784[label="201.234.16.104;d;33pkt 33fpkt", shape=diamond, color=yellow];
2047[label="145.223.91.170;s;33pkt 33fpkt", shape=diamond, color=yellow];
5181[label="145.223.91.170;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6943[label="145.223.91.170;32pkt 32fpkt", shape=invtriangle, color=brown];
7916[label="145.223.91.170;33pkt 33fpkt", shape=invhouse, color=bisque];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.91.170:*, 201.234.16.104:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51163: (1.52439%)&lt;BR/&gt; 51162: (1.52439%)&lt;BR/&gt; 51161: (1.52439%)&lt;BR/&gt; 51160: (1.52439%)&gt;];
}
1784--2047[label="1;33pkt 33fpkt"];
1784--5181[label="1;33pkt 33fpkt"];
1784--6943[label="1;32pkt 32fpkt"];
1784--7916[label="1;33pkt 33fpkt"];
2047--5181[label="1;33pkt 33fpkt"];
2047--6943[label="1;32pkt 32fpkt"];
2047--7916[label="1;33pkt 33fpkt"];
5181--6943[label="1;32pkt 32fpkt"];
5181--7916[label="1;33pkt 33fpkt"];
6943--7916[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="201.234.16.104" dst_port="80" src_ip="145.223.91.170"/>
    </slice>
    <from sec="1120712793" usec="0"/>
    <to sec="1120713062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
2265[label="209.234.210.211;d;18pkt 18fpkt", shape=diamond, color=yellow];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.180.199:*, 209.234.210.211:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54545: (2.77778%)&lt;BR/&gt; 54472: (2.77778%)&lt;BR/&gt; 54470: (2.77778%)&lt;BR/&gt; 54144: (2.77778%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="209.234.210.211" dst_port="80" src_ip="212.66.180.199"/>
    </slice>
    <from sec="1120712833" usec="0"/>
    <to sec="1120713038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
1463[label="161.107.109.75;s;455pkt 455fpkt", shape=diamond, color=yellow];
2052[label="201.232.224.95;d;36pkt 36fpkt", shape=diamond, color=yellow];
4238[label="161.107.109.75;455pkt 455fpkt", shape=pentagon, color=darkviolet];
6401[label="161.107.109.75;455pkt 455fpkt", shape=invtriangle, color=brown];
7608[label="161.107.109.75;454pkt 454fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.109.75:4877, *:53}[72.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.248%)&lt;BR/&gt; 4877: (38.4906%)&lt;BR/&gt; 0: (2.80323%)&lt;BR/&gt; 80: (0.916442%)&lt;BR/&gt; 32768: (0.539084%)&gt;];
}
1463--1738[label="0.00892857;1pkt 1fpkt"];
1463--1834[label="0.00934579;1pkt 1fpkt"];
1463--1880[label="0.00900901;1pkt 1fpkt"];
1463--2052[label="0.0277778;1pkt 1fpkt"];
1463--2126[label="0.00925926;1pkt 1fpkt"];
1463--2176[label="0.0102041;1pkt 1fpkt"];
1463--2415[label="0.00990099;1pkt 1fpkt"];
1463--2425[label="0.00909091;1pkt 1fpkt"];
1463--2435[label="0.00961538;1pkt 1fpkt"];
1463--2598[label="0.0153846;1pkt 1fpkt"];
1463--2600[label="0.00961538;1pkt 1fpkt"];
1463--2627[label="0.02;1pkt 1fpkt"];
1463--3318[label="0.00854701;1pkt 1fpkt"];
1463--4238[label="1;455pkt 455fpkt"];
1463--6401[label="1;455pkt 455fpkt"];
1463--7608[label="1;454pkt 454fpkt"];
2052--3843[label="0.944444;34pkt 34fpkt"];
2052--4238[label="0.0277778;1pkt 1fpkt"];
2052--6193[label="0.944444;34pkt 34fpkt"];
2052--6401[label="0.0277778;1pkt 1fpkt"];
2052--7487[label="0.944444;34pkt 34fpkt"];
2052--7608[label="0.0277778;1pkt 1fpkt"];
4238--6401[label="1;455pkt 455fpkt"];
4238--7608[label="1;454pkt 454fpkt"];
6401--7608[label="1;454pkt 454fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="161.107.109.75" src_port="4877"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120713045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.177.132.97"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.222.13.144"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713227" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1891[label="145.223.172.169;d;259pkt 259fpkt", shape=diamond, color=yellow];
2136[label="197.98.95.137;s;109pkt 109fpkt", shape=diamond, color=yellow];
4430[label="212.206.64.95;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4827[label="197.98.95.137;150pkt 150fpkt", shape=pentagon, color=darkviolet];
5412[label="193.140.192.195;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6513[label="212.206.64.95;55pkt 55fpkt", shape=invtriangle, color=brown];
6733[label="197.98.95.137;151pkt 151fpkt", shape=invtriangle, color=brown];
7079[label="193.140.192.195;12pkt 12fpkt", shape=invtriangle, color=brown];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.98.95.137:*, 145.223.172.169:444}[52.9825%]&lt;BR/&gt;{*:80, 145.223.172.169:*}[42.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 444: (34.0399%)&lt;BR/&gt; 80: (14.4015%)&lt;BR/&gt; 25: (1.5586%)&lt;BR/&gt; 3511: (0.623441%)&lt;BR/&gt; 3519: (0.436409%)&gt;];
}
1891--2105[label="0.0662651;11pkt 11fpkt"];
1891--2136[label="1;109pkt 109fpkt"];
1891--3388[label="0.019305;5pkt 5fpkt"];
1891--4430[label="1;54pkt 54fpkt"];
1891--4827[label="0.9;135pkt 135fpkt"];
1891--5399[label="0.142857;1pkt 1fpkt"];
1891--5412[label="0.0833333;1pkt 1fpkt"];
1891--6513[label="1;55pkt 55fpkt"];
1891--6733[label="0.900662;136pkt 136fpkt"];
1891--7079[label="0.0833333;1pkt 1fpkt"];
2136--4827[label="0.990826;108pkt 108fpkt"];
2136--6733[label="1;109pkt 109fpkt"];
4430--6513[label="1;54pkt 54fpkt"];
4827--6733[label="1;150pkt 150fpkt"];
5412--7079[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.172.169" src_port="80"/>
      <filter dst_ip="145.223.172.169" dst_port="444" src_ip="197.98.95.137"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.166.54.202"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713136" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.236.14.101"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
198[label="212.79.192.208;d;4552pkt 4552fpkt", shape=diamond, color=yellow];
200[label="24.165.144.79;s;4pkt 4fpkt", shape=diamond, color=yellow];
206[label="212.79.192.209;d;4401pkt 4401fpkt", shape=diamond, color=yellow];
277[label="194.236.12.183;s;1232pkt 1232fpkt", shape=diamond, color=yellow];
380[label="212.79.194.72;d;1424pkt 1424fpkt", shape=diamond, color=yellow];
446[label="28.153.252.178;s;36pkt 36fpkt", shape=diamond, color=yellow];
568[label="0.150.195.246;s;3pkt 3fpkt", shape=diamond, color=yellow];
590[label="24.194.145.106;s;277pkt 277fpkt", shape=diamond, color=yellow];
639[label="210.80.186.247;s;27pkt 27fpkt", shape=diamond, color=yellow];
703[label="212.66.182.195;d;170pkt 170fpkt", shape=diamond, color=yellow];
706[label="24.1.245.120;s;4pkt 4fpkt", shape=diamond, color=yellow];
774[label="26.132.109.72;s;152pkt 152fpkt", shape=diamond, color=yellow];
820[label="24.194.134.184;s;51pkt 51fpkt", shape=diamond, color=yellow];
832[label="26.132.109.153;s;167pkt 167fpkt", shape=diamond, color=yellow];
905[label="210.80.184.237;s;51pkt 51fpkt", shape=diamond, color=yellow];
906[label="24.194.153.67;s;58pkt 58fpkt", shape=diamond, color=yellow];
920[label="210.80.185.103;s;10pkt 10fpkt", shape=diamond, color=yellow];
1000[label="210.80.185.20;s;5pkt 5fpkt", shape=diamond, color=yellow];
1067[label="194.65.56.77;s;4pkt 4fpkt", shape=diamond, color=yellow];
1100[label="28.153.243.34;s;11pkt 11fpkt", shape=diamond, color=yellow];
1277[label="212.227.5.62;s;90pkt 90fpkt", shape=diamond, color=yellow];
1391[label="161.99.40.173;d;70pkt 70fpkt", shape=diamond, color=yellow];
1409[label="28.153.252.179;s;23pkt 23fpkt", shape=diamond, color=yellow];
1422[label="24.194.135.51;s;11pkt 11fpkt", shape=diamond, color=yellow];
1431[label="26.2.194.60;s;31pkt 31fpkt", shape=diamond, color=yellow];
1434[label="28.153.248.79;s;18pkt 18fpkt", shape=diamond, color=yellow];
1436[label="24.33.166.136;s;40pkt 40fpkt", shape=diamond, color=yellow];
1439[label="24.194.134.185;s;14pkt 14fpkt", shape=diamond, color=yellow];
1448[label="210.80.185.212;s;22pkt 22fpkt", shape=diamond, color=yellow];
1540[label="213.64.144.202;s;2pkt 2fpkt", shape=diamond, color=yellow];
1563[label="211.101.4.59;s;116pkt 116fpkt", shape=diamond, color=yellow];
1602[label="24.194.148.34;s;12pkt 12fpkt", shape=diamond, color=yellow];
1657[label="87.84.140.160;s;67pkt 67fpkt", shape=diamond, color=yellow];
1660[label="210.80.185.83;s;22pkt 22fpkt", shape=diamond, color=yellow];
1704[label="210.80.185.146;s;26pkt 26fpkt", shape=diamond, color=yellow];
1718[label="213.152.186.157;s;88pkt 88fpkt", shape=diamond, color=yellow];
1722[label="28.153.242.71;s;9pkt 9fpkt", shape=diamond, color=yellow];
1749[label="28.153.249.182;s;16pkt 16fpkt", shape=diamond, color=yellow];
1814[label="194.236.12.202;s;87pkt 87fpkt", shape=diamond, color=yellow];
1835[label="87.44.232.149;s;29pkt 29fpkt", shape=diamond, color=yellow];
1911[label="28.153.253.26;s;21pkt 21fpkt", shape=diamond, color=yellow];
1936[label="28.153.249.129;s;17pkt 17fpkt", shape=diamond, color=yellow];
1989[label="28.153.249.172;s;15pkt 15fpkt", shape=diamond, color=yellow];
2003[label="212.133.81.209;s;61pkt 61fpkt", shape=diamond, color=yellow];
2200[label="194.165.63.144;s;69pkt 69fpkt", shape=diamond, color=yellow];
2213[label="28.153.220.117;s;19pkt 19fpkt", shape=diamond, color=yellow];
2223[label="26.32.17.204;s;17pkt 17fpkt", shape=diamond, color=yellow];
2227[label="26.132.104.136;s;19pkt 19fpkt", shape=diamond, color=yellow];
2234[label="28.153.249.162;s;15pkt 15fpkt", shape=diamond, color=yellow];
2252[label="28.153.249.175;s;21pkt 21fpkt", shape=diamond, color=yellow];
2261[label="28.153.211.77;s;3pkt 3fpkt", shape=diamond, color=yellow];
2291[label="26.132.114.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
2298[label="208.96.153.65;s;2pkt 2fpkt", shape=diamond, color=yellow];
2305[label="194.165.63.147;s;53pkt 53fpkt", shape=diamond, color=yellow];
2395[label="28.153.249.151;s;10pkt 10fpkt", shape=diamond, color=yellow];
2436[label="24.1.197.147;s;48pkt 48fpkt", shape=diamond, color=yellow];
2453[label="212.149.76.109;s;22pkt 22fpkt", shape=diamond, color=yellow];
2472[label="68.86.180.118;s;20pkt 20fpkt", shape=diamond, color=yellow];
2511[label="26.132.104.195;s;4pkt 4fpkt", shape=diamond, color=yellow];
2518[label="210.80.184.68;s;14pkt 14fpkt", shape=diamond, color=yellow];
2523[label="210.80.184.17;s;12pkt 12fpkt", shape=diamond, color=yellow];
2664[label="194.165.63.146;s;46pkt 46fpkt", shape=diamond, color=yellow];
2685[label="87.44.232.140;s;41pkt 41fpkt", shape=diamond, color=yellow];
2728[label="28.153.248.73;s;6pkt 6fpkt", shape=diamond, color=yellow];
2737[label="213.39.2.201;s;16pkt 16fpkt", shape=diamond, color=yellow];
2738[label="209.200.27.178;s;45pkt 45fpkt", shape=diamond, color=yellow];
2741[label="221.6.80.24;s;21pkt 21fpkt", shape=diamond, color=yellow];
2750[label="28.153.215.7;s;10pkt 10fpkt", shape=diamond, color=yellow];
2871[label="210.80.186.247;s;24pkt 24fpkt", shape=hexagon, color=black];
2890[label="28.153.252.178;s;9pkt 9fpkt", shape=hexagon, color=black];
2895[label="26.132.109.72;s;38pkt 38fpkt", shape=hexagon, color=black];
2905[label="26.132.109.153;s;167pkt 167fpkt", shape=hexagon, color=black];
2923[label="24.165.144.79;s;2pkt 2fpkt", shape=hexagon, color=black];
3014[label="24.194.135.51;s;10pkt 10fpkt", shape=hexagon, color=black];
3119[label="24.194.148.22;s;19pkt 19fpkt", shape=hexagon, color=black];
3137[label="26.2.194.60;s;31pkt 31fpkt", shape=hexagon, color=black];
3139[label="213.152.186.157;s;88pkt 88fpkt", shape=hexagon, color=black];
3159[label="194.236.12.202;s;57pkt 57fpkt", shape=hexagon, color=black];
3187[label="28.153.248.79;s;16pkt 16fpkt", shape=hexagon, color=black];
3247[label="210.80.185.146;s;25pkt 25fpkt", shape=hexagon, color=black];
3262[label="210.80.184.17;s;12pkt 12fpkt", shape=hexagon, color=black];
3330[label="210.80.184.43;s;9pkt 9fpkt", shape=hexagon, color=black];
3338[label="28.153.249.175;s;21pkt 21fpkt", shape=hexagon, color=black];
3406[label="210.80.185.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3421[label="210.80.184.1;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3477[label="213.39.38.7;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3508[label="196.125.40.9;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3528[label="87.115.50.11;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3540[label="198.3.113.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3545[label="194.96.225.12;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3554[label="194.84.1.14;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3556[label="221.20.35.14;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3622[label="194.84.1.19;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3649[label="210.80.185.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3677[label="213.4.147.23;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3720[label="28.153.253.26;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3724[label="86.146.55.27;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3738[label="26.132.120.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3756[label="24.88.123.30;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3761[label="195.22.194.30;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3781[label="212.148.98.33;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3791[label="194.236.8.34;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3797[label="24.194.148.34;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3822[label="24.136.69.37;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3828[label="210.80.187.37;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3854[label="28.153.215.39;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3881[label="213.39.48.42;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3896[label="68.86.181.43;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3897[label="210.80.184.43;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3981[label="26.132.104.51;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3983[label="24.194.135.51;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4027[label="210.80.185.55;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4077[label="26.132.112.61;71pkt 71fpkt", shape=pentagon, color=darkviolet];
4140[label="26.132.106.67;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4145[label="24.194.153.67;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4169[label="68.198.184.69;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4186[label="29.11.108.71;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4193[label="202.101.23.72;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4195[label="26.132.109.72;162pkt 162fpkt", shape=pentagon, color=darkviolet];
4241[label="212.227.0.76;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4243[label="203.41.14.76;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4271[label="28.153.248.78;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4273[label="24.165.144.79;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4275[label="28.153.248.79;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4303[label="24.194.157.81;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4317[label="2.88.238.82;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4318[label="194.236.2.83;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4353[label="68.86.181.86;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4368[label="221.251.108.88;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4373[label="194.236.14.89;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4445[label="194.84.1.97;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4522[label="26.157.117.104;88pkt 88fpkt", shape=pentagon, color=darkviolet];
4543[label="24.194.145.106;311pkt 311fpkt", shape=pentagon, color=darkviolet];
4554[label="213.90.30.107;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4577[label="212.149.76.109;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4580[label="210.80.184.109;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4598[label="212.20.7.113;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4653[label="68.86.180.118;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4663[label="3.24.145.119;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4721[label="195.75.96.127;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4722[label="194.96.225.127;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4749[label="26.132.104.129;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4753[label="28.153.249.129;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4769[label="68.87.103.131;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4776[label="28.153.249.131;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4812[label="24.242.50.135;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4816[label="210.80.185.135;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4878[label="150.19.252.141;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4891[label="198.1.73.143;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4896[label="194.165.63.144;79pkt 79fpkt", shape=pentagon, color=darkviolet];
4914[label="24.136.70.145;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4932[label="210.80.185.146;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4935[label="24.42.8.147;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4937[label="194.165.63.147;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4943[label="24.1.197.147;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4953[label="25.148.190.148;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4990[label="28.153.249.151;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5000[label="28.153.34.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5002[label="26.132.109.153;178pkt 178fpkt", shape=pentagon, color=darkviolet];
5020[label="28.153.34.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5024[label="24.1.168.155;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5030[label="26.132.114.156;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5034[label="26.144.41.157;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5043[label="84.74.46.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5050[label="87.72.17.159;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5068[label="202.32.236.160;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5079[label="24.166.4.162;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5124[label="68.86.171.165;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5131[label="24.88.114.166;915pkt 915fpkt", shape=pentagon, color=darkviolet];
5135[label="213.39.52.167;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5145[label="28.153.34.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5166[label="204.50.85.169;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5189[label="213.41.56.171;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5227[label="28.153.249.175;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5243[label="26.144.45.177;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5249[label="209.200.27.178;61pkt 61fpkt", shape=pentagon, color=darkviolet];
5251[label="194.165.56.178;200pkt 200fpkt", shape=pentagon, color=darkviolet];
5265[label="28.153.252.179;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5273[label="210.80.188.180;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5275[label="28.153.252.180;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5284[label="202.189.206.181;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5285[label="28.153.252.181;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5295[label="28.153.249.182;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5297[label="194.236.12.183;1330pkt 1330fpkt", shape=pentagon, color=darkviolet];
5308[label="194.165.56.184;211pkt 211fpkt", shape=pentagon, color=darkviolet];
5325[label="24.194.134.185;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5326[label="194.245.136.185;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5343[label="24.194.134.188;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5349[label="28.153.252.188;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5352[label="208.66.72.189;70pkt 70fpkt", shape=pentagon, color=darkviolet];
5353[label="87.72.74.189;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5368[label="213.4.107.191;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5416[label="213.39.39.196;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5418[label="194.165.63.196;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5448[label="209.128.201.198;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5450[label="28.153.245.198;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5453[label="204.50.81.199;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5472[label="28.153.240.200;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5479[label="210.80.186.201;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5483[label="194.236.12.202;99pkt 99fpkt", shape=pentagon, color=darkviolet];
5487[label="213.64.144.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5491[label="29.50.210.202;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5500[label="26.32.17.204;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5508[label="210.80.185.204;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5531[label="194.84.1.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5555[label="212.133.81.209;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5576[label="194.194.250.210;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5591[label="28.153.34.212;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5595[label="210.80.185.212;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5632[label="28.153.240.214;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5633[label="194.236.12.215;418pkt 418fpkt", shape=pentagon, color=darkviolet];
5637[label="210.80.185.215;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5642[label="212.187.40.216;68pkt 68fpkt", shape=pentagon, color=darkviolet];
5678[label="212.24.31.219;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5689[label="28.153.240.220;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5701[label="28.153.208.221;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5724[label="212.187.40.224;63pkt 63fpkt", shape=pentagon, color=darkviolet];
5737[label="212.187.40.225;63pkt 63fpkt", shape=pentagon, color=darkviolet];
5756[label="210.80.184.226;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5815[label="24.107.72.234;53pkt 53fpkt", shape=pentagon, color=darkviolet];
5821[label="26.28.51.235;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5823[label="24.107.72.235;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5836[label="210.80.184.237;64pkt 64fpkt", shape=pentagon, color=darkviolet];
5840[label="213.39.5.238;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5874[label="24.194.138.242;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5898[label="29.117.233.246;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5905[label="210.80.186.247;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5940[label="26.128.88.252;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5964[label="24.194.149.0;67pkt 67fpkt", shape=invtriangle, color=brown];
5966[label="210.80.185.0;1pkt 1fpkt", shape=invtriangle, color=brown];
5976[label="210.80.184.1;15pkt 15fpkt", shape=invtriangle, color=brown];
5997[label="213.39.38.7;9pkt 9fpkt", shape=invtriangle, color=brown];
6021[label="24.242.56.10;11pkt 11fpkt", shape=invtriangle, color=brown];
6027[label="87.115.50.11;12pkt 12fpkt", shape=invtriangle, color=brown];
6038[label="194.96.225.12;5pkt 5fpkt", shape=invtriangle, color=brown];
6127[label="212.133.0.26;4pkt 4fpkt", shape=invtriangle, color=brown];
6141[label="26.132.120.28;7pkt 7fpkt", shape=invtriangle, color=brown];
6149[label="24.88.123.30;22pkt 22fpkt", shape=invtriangle, color=brown];
6151[label="195.22.194.30;19pkt 19fpkt", shape=invtriangle, color=brown];
6182[label="210.80.187.37;20pkt 20fpkt", shape=invtriangle, color=brown];
6214[label="213.39.48.42;20pkt 20fpkt", shape=invtriangle, color=brown];
6221[label="68.86.181.43;16pkt 16fpkt", shape=invtriangle, color=brown];
6265[label="26.132.104.51;13pkt 13fpkt", shape=invtriangle, color=brown];
6266[label="24.194.135.51;27pkt 27fpkt", shape=invtriangle, color=brown];
6366[label="68.198.184.69;37pkt 37fpkt", shape=invtriangle, color=brown];
6376[label="29.11.108.71;3pkt 3fpkt", shape=invtriangle, color=brown];
6403[label="212.227.0.76;21pkt 21fpkt", shape=invtriangle, color=brown];
6405[label="203.41.14.76;4pkt 4fpkt", shape=invtriangle, color=brown];
6421[label="28.153.248.79;17pkt 17fpkt", shape=invtriangle, color=brown];
6447[label="2.88.238.82;31pkt 31fpkt", shape=invtriangle, color=brown];
6464[label="68.86.181.86;18pkt 18fpkt", shape=invtriangle, color=brown];
6479[label="194.236.14.89;7pkt 7fpkt", shape=invtriangle, color=brown];
6564[label="26.157.117.104;88pkt 88fpkt", shape=invtriangle, color=brown];
6595[label="210.80.184.109;6pkt 6fpkt", shape=invtriangle, color=brown];
6603[label="212.20.7.113;7pkt 7fpkt", shape=invtriangle, color=brown];
6637[label="68.86.180.118;19pkt 19fpkt", shape=invtriangle, color=brown];
6645[label="3.24.145.119;42pkt 42fpkt", shape=invtriangle, color=brown];
6676[label="195.75.96.127;20pkt 20fpkt", shape=invtriangle, color=brown];
6677[label="194.96.225.127;6pkt 6fpkt", shape=invtriangle, color=brown];
6692[label="26.132.104.129;20pkt 20fpkt", shape=invtriangle, color=brown];
6709[label="28.153.249.131;16pkt 16fpkt", shape=invtriangle, color=brown];
6760[label="150.19.252.141;3pkt 3fpkt", shape=invtriangle, color=brown];
6782[label="24.136.70.145;49pkt 49fpkt", shape=invtriangle, color=brown];
6795[label="210.80.185.146;27pkt 27fpkt", shape=invtriangle, color=brown];
6799[label="194.165.63.147;56pkt 56fpkt", shape=invtriangle, color=brown];
6843[label="26.132.109.153;177pkt 177fpkt", shape=invtriangle, color=brown];
6856[label="24.1.168.155;27pkt 27fpkt", shape=invtriangle, color=brown];
6860[label="26.144.41.157;32pkt 32fpkt", shape=invtriangle, color=brown];
6869[label="87.72.17.159;31pkt 31fpkt", shape=invtriangle, color=brown];
6883[label="24.166.4.162;8pkt 8fpkt", shape=invtriangle, color=brown];
6920[label="28.153.34.168;3pkt 3fpkt", shape=invtriangle, color=brown];
6940[label="213.4.150.169;1pkt 1fpkt", shape=invtriangle, color=brown];
6952[label="28.153.249.172;15pkt 15fpkt", shape=invtriangle, color=brown];
6967[label="28.153.249.175;25pkt 25fpkt", shape=invtriangle, color=brown];
6978[label="209.200.27.178;61pkt 61fpkt", shape=invtriangle, color=brown];
6980[label="194.165.56.178;199pkt 199fpkt", shape=invtriangle, color=brown];
6993[label="28.153.252.180;1pkt 1fpkt", shape=invtriangle, color=brown];
7000[label="202.189.206.181;23pkt 23fpkt", shape=invtriangle, color=brown];
7001[label="28.153.252.181;5pkt 5fpkt", shape=invtriangle, color=brown];
7006[label="194.236.12.183;1330pkt 1330fpkt", shape=invtriangle, color=brown];
7012[label="194.165.56.184;211pkt 211fpkt", shape=invtriangle, color=brown];
7023[label="194.245.136.185;49pkt 49fpkt", shape=invtriangle, color=brown];
7029[label="212.180.102.186;3pkt 3fpkt", shape=invtriangle, color=brown];
7041[label="208.66.72.189;70pkt 70fpkt", shape=invtriangle, color=brown];
7082[label="213.39.39.196;13pkt 13fpkt", shape=invtriangle, color=brown];
7083[label="194.165.63.196;21pkt 21fpkt", shape=invtriangle, color=brown];
7098[label="209.128.201.198;13pkt 13fpkt", shape=invtriangle, color=brown];
7099[label="28.153.245.198;4pkt 4fpkt", shape=invtriangle, color=brown];
7100[label="204.50.81.199;27pkt 27fpkt", shape=invtriangle, color=brown];
7112[label="210.80.186.201;5pkt 5fpkt", shape=invtriangle, color=brown];
7114[label="194.236.12.202;99pkt 99fpkt", shape=invtriangle, color=brown];
7117[label="213.64.144.202;2pkt 2fpkt", shape=invtriangle, color=brown];
7120[label="29.50.210.202;17pkt 17fpkt", shape=invtriangle, color=brown];
7123[label="26.32.17.204;22pkt 22fpkt", shape=invtriangle, color=brown];
7164[label="28.153.34.212;5pkt 5fpkt", shape=invtriangle, color=brown];
7188[label="210.80.185.215;4pkt 4fpkt", shape=invtriangle, color=brown];
7190[label="212.187.40.216;68pkt 68fpkt", shape=invtriangle, color=brown];
7219[label="28.153.208.221;38pkt 38fpkt", shape=invtriangle, color=brown];
7235[label="212.187.40.225;62pkt 62fpkt", shape=invtriangle, color=brown];
7246[label="210.80.184.226;11pkt 11fpkt", shape=invtriangle, color=brown];
7278[label="24.107.72.234;54pkt 54fpkt", shape=invtriangle, color=brown];
7289[label="210.80.184.237;64pkt 64fpkt", shape=invtriangle, color=brown];
7293[label="213.39.5.238;12pkt 12fpkt", shape=invtriangle, color=brown];
7313[label="24.194.138.242;4pkt 4fpkt", shape=invtriangle, color=brown];
7332[label="210.80.186.247;27pkt 27fpkt", shape=invtriangle, color=brown];
7369[label="210.80.185.0;1pkt 1fpkt", shape=invhouse, color=bisque];
7397[label="194.96.225.12;5pkt 5fpkt", shape=invhouse, color=bisque];
7452[label="26.132.120.28;7pkt 7fpkt", shape=invhouse, color=bisque];
7454[label="210.80.187.28;11pkt 11fpkt", shape=invhouse, color=bisque];
7480[label="210.80.187.37;20pkt 20fpkt", shape=invhouse, color=bisque];
7494[label="213.39.48.42;19pkt 19fpkt", shape=invhouse, color=bisque];
7524[label="26.132.104.51;13pkt 13fpkt", shape=invhouse, color=bisque];
7525[label="24.194.135.51;27pkt 27fpkt", shape=invhouse, color=bisque];
7544[label="201.23.246.57;2pkt 2fpkt", shape=invhouse, color=bisque];
7585[label="68.198.184.69;37pkt 37fpkt", shape=invhouse, color=bisque];
7592[label="29.11.108.71;3pkt 3fpkt", shape=invhouse, color=bisque];
7611[label="203.41.14.76;4pkt 4fpkt", shape=invhouse, color=bisque];
7623[label="28.153.248.79;17pkt 17fpkt", shape=invhouse, color=bisque];
7645[label="68.86.181.86;18pkt 18fpkt", shape=invhouse, color=bisque];
7661[label="194.255.54.90;2pkt 2fpkt", shape=invhouse, color=bisque];
7705[label="26.157.117.104;88pkt 88fpkt", shape=invhouse, color=bisque];
7726[label="212.20.7.113;7pkt 7fpkt", shape=invhouse, color=bisque];
7744[label="68.86.180.118;19pkt 19fpkt", shape=invhouse, color=bisque];
7766[label="194.96.225.127;5pkt 5fpkt", shape=invhouse, color=bisque];
7787[label="28.153.249.131;15pkt 15fpkt", shape=invhouse, color=bisque];
7810[label="150.19.252.141;4pkt 4fpkt", shape=invhouse, color=bisque];
7832[label="210.80.185.146;27pkt 27fpkt", shape=invhouse, color=bisque];
7835[label="194.165.63.147;56pkt 56fpkt", shape=invhouse, color=bisque];
7870[label="87.72.17.159;32pkt 32fpkt", shape=invhouse, color=bisque];
7909[label="210.80.184.168;4pkt 4fpkt", shape=invhouse, color=bisque];
7931[label="28.153.249.175;24pkt 24fpkt", shape=invhouse, color=bisque];
7937[label="209.200.27.178;61pkt 61fpkt", shape=invhouse, color=bisque];
7946[label="28.153.252.180;2pkt 2fpkt", shape=invhouse, color=bisque];
7950[label="202.189.206.181;23pkt 23fpkt", shape=invhouse, color=bisque];
7952[label="194.236.12.183;1330pkt 1330fpkt", shape=invhouse, color=bisque];
7956[label="194.165.56.184;212pkt 212fpkt", shape=invhouse, color=bisque];
7965[label="194.245.136.185;49pkt 49fpkt", shape=invhouse, color=bisque];
7974[label="208.66.72.189;69pkt 69fpkt", shape=invhouse, color=bisque];
8000[label="213.39.39.196;14pkt 14fpkt", shape=invhouse, color=bisque];
8007[label="28.153.245.198;4pkt 4fpkt", shape=invhouse, color=bisque];
8008[label="204.50.81.199;26pkt 26fpkt", shape=invhouse, color=bisque];
8016[label="194.236.12.202;100pkt 100fpkt", shape=invhouse, color=bisque];
8017[label="213.64.144.202;1pkt 1fpkt", shape=invhouse, color=bisque];
8020[label="29.50.210.202;18pkt 18fpkt", shape=invhouse, color=bisque];
8021[label="26.32.17.204;21pkt 21fpkt", shape=invhouse, color=bisque];
8066[label="212.187.40.216;67pkt 67fpkt", shape=invhouse, color=bisque];
8093[label="212.187.40.225;63pkt 63fpkt", shape=invhouse, color=bisque];
8102[label="210.80.184.226;11pkt 11fpkt", shape=invhouse, color=bisque];
8122[label="210.80.184.237;64pkt 64fpkt", shape=invhouse, color=bisque];
8142[label="210.80.186.247;27pkt 27fpkt", shape=invhouse, color=bisque];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.79.192.208:*}[37.1756%]&lt;BR/&gt;{*:80, 212.79.192.209:*}[35.3435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0175%)&lt;BR/&gt; 443: (0.825738%)&lt;BR/&gt; 0: (0.14218%)&lt;BR/&gt; 1166: (0.0273423%)&lt;BR/&gt; 1153: (0.0273423%)&gt;];
}
198--200[label="0.5;2pkt 2fpkt"];
198--277[label="0.271916;335pkt 335fpkt"];
198--446[label="0.444444;16pkt 16fpkt"];
198--550[label="0.125;2pkt 2fpkt"];
198--561[label="0.516285;428pkt 428fpkt"];
198--568[label="0.666667;2pkt 2fpkt"];
198--590[label="0.425993;118pkt 118fpkt"];
198--639[label="0.333333;9pkt 9fpkt"];
198--749[label="0.145985;20pkt 20fpkt"];
198--774[label="0.875;133pkt 133fpkt"];
198--783[label="0.46875;45pkt 45fpkt"];
198--806[label="0.896774;139pkt 139fpkt"];
198--820[label="0.411765;21pkt 21fpkt"];
198--832[label="0.826347;138pkt 138fpkt"];
198--894[label="0.111111;5pkt 5fpkt"];
198--905[label="0.529412;27pkt 27fpkt"];
198--906[label="0.362069;21pkt 21fpkt"];
198--920[label="0.6;6pkt 6fpkt"];
198--939[label="0.0483871;3pkt 3fpkt"];
198--1000[label="0.2;1pkt 1fpkt"];
198--1028[label="0.363636;4pkt 4fpkt"];
198--1067[label="0.75;3pkt 3fpkt"];
198--1086[label="0.317365;53pkt 53fpkt"];
198--1100[label="0.363636;4pkt 4fpkt"];
198--1132[label="0.230769;48pkt 48fpkt"];
198--1277[label="0.455556;41pkt 41fpkt"];
198--1297[label="0.324742;126pkt 126fpkt"];
198--1309[label="0.438202;39pkt 39fpkt"];
198--1342[label="0.578947;11pkt 11fpkt"];
198--1409[label="0.652174;15pkt 15fpkt"];
198--1422[label="0.272727;3pkt 3fpkt"];
198--1431[label="0.677419;21pkt 21fpkt"];
198--1434[label="0.555556;10pkt 10fpkt"];
198--1436[label="0.55;22pkt 22fpkt"];
198--1439[label="0.285714;4pkt 4fpkt"];
198--1448[label="0.272727;6pkt 6fpkt"];
198--1450[label="0.55;11pkt 11fpkt"];
198--1540[label="0.5;1pkt 1fpkt"];
198--1551[label="0.25;5pkt 5fpkt"];
198--1563[label="0.482759;56pkt 56fpkt"];
198--1602[label="0.666667;8pkt 8fpkt"];
198--1657[label="0.373134;25pkt 25fpkt"];
198--1660[label="0.590909;13pkt 13fpkt"];
198--1704[label="0.461538;12pkt 12fpkt"];
198--1722[label="0.222222;2pkt 2fpkt"];
198--1749[label="0.4375;7pkt 7fpkt"];
198--1814[label="0.494253;43pkt 43fpkt"];
198--1911[label="0.380952;8pkt 8fpkt"];
198--1936[label="0.470588;8pkt 8fpkt"];
198--1989[label="0.0666667;1pkt 1fpkt"];
198--2003[label="0.47541;29pkt 29fpkt"];
198--2022[label="1;3pkt 3fpkt"];
198--2132[label="0.794118;27pkt 27fpkt"];
198--2200[label="0.0724638;5pkt 5fpkt"];
198--2223[label="0.529412;9pkt 9fpkt"];
198--2227[label="0.0526316;1pkt 1fpkt"];
198--2234[label="0.266667;4pkt 4fpkt"];
198--2241[label="0.206897;6pkt 6fpkt"];
198--2246[label="0.25;2pkt 2fpkt"];
198--2252[label="0.428571;9pkt 9fpkt"];
198--2261[label="0.333333;1pkt 1fpkt"];
198--2291[label="1;2pkt 2fpkt"];
198--2298[label="0.5;1pkt 1fpkt"];
198--2305[label="0.0566038;3pkt 3fpkt"];
198--2395[label="0.4;4pkt 4fpkt"];
198--2422[label="0.367347;36pkt 36fpkt"];
198--2436[label="0.229167;11pkt 11fpkt"];
198--2451[label="0.0666667;2pkt 2fpkt"];
198--2453[label="0.545455;12pkt 12fpkt"];
198--2472[label="0.15;3pkt 3fpkt"];
198--2511[label="0.75;3pkt 3fpkt"];
198--2518[label="0.214286;3pkt 3fpkt"];
198--2523[label="0.416667;5pkt 5fpkt"];
198--2638[label="0.473684;9pkt 9fpkt"];
198--2664[label="0.0869565;4pkt 4fpkt"];
198--2722[label="0.666667;6pkt 6fpkt"];
198--2728[label="0.333333;2pkt 2fpkt"];
198--2737[label="0.25;4pkt 4fpkt"];
198--2738[label="0.355556;16pkt 16fpkt"];
198--2741[label="0.47619;10pkt 10fpkt"];
198--2871[label="0.291667;7pkt 7fpkt"];
198--2889[label="0.166667;20pkt 20fpkt"];
198--2890[label="0.444444;4pkt 4fpkt"];
198--2895[label="0.947368;36pkt 36fpkt"];
198--2905[label="0.826347;138pkt 138fpkt"];
198--2923[label="0.5;1pkt 1fpkt"];
198--2924[label="0.516285;428pkt 428fpkt"];
198--2976[label="0.1875;12pkt 12fpkt"];
198--2995[label="0.0540541;2pkt 2fpkt"];
198--3001[label="0.285714;18pkt 18fpkt"];
198--3014[label="0.5;5pkt 5fpkt"];
198--3024[label="0.181818;2pkt 2fpkt"];
198--3094[label="0.15625;5pkt 5fpkt"];
198--3111[label="0.428571;3pkt 3fpkt"];
198--3119[label="0.578947;11pkt 11fpkt"];
198--3137[label="0.677419;21pkt 21fpkt"];
198--3159[label="0.578947;33pkt 33fpkt"];
198--3187[label="0.5625;9pkt 9fpkt"];
198--3191[label="0.55;11pkt 11fpkt"];
198--3193[label="0.272727;6pkt 6fpkt"];
198--3247[label="0.48;12pkt 12fpkt"];
198--3256[label="0.2;1pkt 1fpkt"];
198--3257[label="0.25;2pkt 2fpkt"];
198--3262[label="0.416667;5pkt 5fpkt"];
198--3307[label="0.473684;9pkt 9fpkt"];
198--3330[label="0.666667;6pkt 6fpkt"];
198--3332[label="1;3pkt 3fpkt"];
198--3338[label="0.428571;9pkt 9fpkt"];
198--3341[label="0.333333;4pkt 4fpkt"];
198--3388[label="0.0773286;352pkt 352fpkt"];
198--3406[label="0.5;1pkt 1fpkt"];
198--3421[label="0.4;6pkt 6fpkt"];
198--3477[label="0.222222;2pkt 2fpkt"];
198--3528[label="1;12pkt 12fpkt"];
198--3545[label="1;4pkt 4fpkt"];
198--3554[label="0.125;1pkt 1fpkt"];
198--3622[label="0.4375;7pkt 7fpkt"];
198--3670[label="0.461538;12pkt 12fpkt"];
198--3720[label="0.291667;7pkt 7fpkt"];
198--3724[label="0.692308;9pkt 9fpkt"];
198--3738[label="0.833333;5pkt 5fpkt"];
198--3761[label="0.526316;10pkt 10fpkt"];
198--3781[label="0.541667;13pkt 13fpkt"];
198--3791[label="0.375;3pkt 3fpkt"];
198--3797[label="0.636364;7pkt 7fpkt"];
198--3801[label="0.363636;12pkt 12fpkt"];
198--3822[label="0.727273;8pkt 8fpkt"];
198--3828[label="0.428571;9pkt 9fpkt"];
198--3854[label="0.25;2pkt 2fpkt"];
198--3871[label="0.5;6pkt 6fpkt"];
198--3881[label="0.6;12pkt 12fpkt"];
198--3896[label="0.1875;3pkt 3fpkt"];
198--3897[label="0.625;5pkt 5fpkt"];
198--3981[label="0.0769231;1pkt 1fpkt"];
198--3983[label="0.259259;7pkt 7fpkt"];
198--3988[label="0.2;5pkt 5fpkt"];
198--4027[label="0.636364;7pkt 7fpkt"];
198--4041[label="0.214286;6pkt 6fpkt"];
198--4128[label="0.214286;48pkt 48fpkt"];
198--4140[label="0.833333;15pkt 15fpkt"];
198--4145[label="0.362069;21pkt 21fpkt"];
198--4169[label="0.540541;20pkt 20fpkt"];
198--4186[label="0.333333;1pkt 1fpkt"];
198--4195[label="0.820988;133pkt 133fpkt"];
198--4241[label="0.5;10pkt 10fpkt"];
198--4243[label="0.25;1pkt 1fpkt"];
198--4253[label="0.302857;53pkt 53fpkt"];
198--4271[label="0.538462;7pkt 7fpkt"];
198--4273[label="0.333333;1pkt 1fpkt"];
198--4275[label="0.529412;9pkt 9fpkt"];
198--4303[label="0.4;4pkt 4fpkt"];
198--4317[label="0.322581;10pkt 10fpkt"];
198--4318[label="0.4;12pkt 12fpkt"];
198--4353[label="0.0555556;1pkt 1fpkt"];
198--4445[label="0.142857;1pkt 1fpkt"];
198--4468[label="0.188406;13pkt 13fpkt"];
198--4492[label="0.0625;2pkt 2fpkt"];
198--4522[label="0.454545;40pkt 40fpkt"];
198--4543[label="0.379421;118pkt 118fpkt"];
198--4577[label="0.4;12pkt 12fpkt"];
198--4580[label="0.285714;2pkt 2fpkt"];
198--4598[label="0.428571;3pkt 3fpkt"];
198--4653[label="0.15;3pkt 3fpkt"];
198--4663[label="0.309524;13pkt 13fpkt"];
198--4668[label="0.00763359;2pkt 2fpkt"];
198--4721[label="0.2;4pkt 4fpkt"];
198--4722[label="0.833333;5pkt 5fpkt"];
198--4749[label="0.1;2pkt 2fpkt"];
198--4753[label="0.411765;7pkt 7fpkt"];
198--4756[label="0.45;9pkt 9fpkt"];
198--4776[label="0.125;2pkt 2fpkt"];
198--4812[label="0.421053;8pkt 8fpkt"];
198--4816[label="0.0714286;1pkt 1fpkt"];
198--4846[label="0.2;1pkt 1fpkt"];
198--4878[label="0.333333;1pkt 1fpkt"];
198--4884[label="0.362903;45pkt 45fpkt"];
198--4896[label="0.0632911;5pkt 5fpkt"];
198--4914[label="0.0833333;4pkt 4fpkt"];
198--4932[label="0.407407;11pkt 11fpkt"];
198--4937[label="0.0535714;3pkt 3fpkt"];
198--4943[label="0.2;10pkt 10fpkt"];
198--4953[label="0.107143;3pkt 3fpkt"];
198--4983[label="0.827381;139pkt 139fpkt"];
198--4990[label="0.363636;4pkt 4fpkt"];
198--4997[label="0.342857;36pkt 36fpkt"];
198--5002[label="0.775281;138pkt 138fpkt"];
198--5030[label="0.833333;5pkt 5fpkt"];
198--5034[label="0.5;16pkt 16fpkt"];
198--5043[label="1;1pkt 1fpkt"];
198--5050[label="0.25;8pkt 8fpkt"];
198--5068[label="0.875;7pkt 7fpkt"];
198--5079[label="0.125;1pkt 1fpkt"];
198--5131[label="0.46776;428pkt 428fpkt"];
198--5135[label="0.153846;4pkt 4fpkt"];
198--5163[label="0.433333;39pkt 39fpkt"];
198--5166[label="0.384615;5pkt 5fpkt"];
198--5175[label="0.47619;10pkt 10fpkt"];
198--5227[label="0.333333;8pkt 8fpkt"];
198--5249[label="0.360656;22pkt 22fpkt"];
198--5265[label="0.583333;14pkt 14fpkt"];
198--5273[label="1;9pkt 9fpkt"];
198--5275[label="0.5;1pkt 1fpkt"];
198--5285[label="0.25;1pkt 1fpkt"];
198--5295[label="0.375;6pkt 6fpkt"];
198--5297[label="0.25188;335pkt 335fpkt"];
198--5325[label="0.307692;4pkt 4fpkt"];
198--5326[label="0.0612245;3pkt 3fpkt"];
198--5352[label="0.542857;38pkt 38fpkt"];
198--5353[label="0.181818;2pkt 2fpkt"];
198--5362[label="0.105263;2pkt 2fpkt"];
198--5416[label="0.857143;12pkt 12fpkt"];
198--5433[label="0.34;17pkt 17fpkt"];
198--5448[label="0.285714;4pkt 4fpkt"];
198--5453[label="0.481481;13pkt 13fpkt"];
198--5472[label="0.428571;3pkt 3fpkt"];
198--5479[label="0.5;3pkt 3fpkt"];
198--5483[label="0.424242;42pkt 42fpkt"];
198--5487[label="0.5;1pkt 1fpkt"];
198--5491[label="0.111111;2pkt 2fpkt"];
198--5500[label="0.380952;8pkt 8fpkt"];
198--5555[label="0.466667;28pkt 28fpkt"];
198--5576[label="0.789474;15pkt 15fpkt"];
198--5591[label="0.2;1pkt 1fpkt"];
198--5595[label="0.25;6pkt 6fpkt"];
198--5632[label="0.5;3pkt 3fpkt"];
198--5633[label="0.301435;126pkt 126fpkt"];
198--5637[label="0.75;3pkt 3fpkt"];
198--5642[label="0.441176;30pkt 30fpkt"];
198--5658[label="0.446154;29pkt 29fpkt"];
198--5678[label="1;48pkt 48fpkt"];
198--5689[label="0.166667;1pkt 1fpkt"];
198--5701[label="0.216216;8pkt 8fpkt"];
198--5724[label="0.444444;28pkt 28fpkt"];
198--5737[label="0.444444;28pkt 28fpkt"];
198--5756[label="0.0909091;1pkt 1fpkt"];
198--5815[label="0.45283;24pkt 24fpkt"];
198--5821[label="0.521739;12pkt 12fpkt"];
198--5823[label="0.121212;4pkt 4fpkt"];
198--5836[label="0.40625;26pkt 26fpkt"];
198--5840[label="0.545455;6pkt 6fpkt"];
198--5874[label="0.4;2pkt 2fpkt"];
198--5905[label="0.333333;9pkt 9fpkt"];
198--5976[label="0.4;6pkt 6fpkt"];
198--5997[label="0.222222;2pkt 2fpkt"];
198--6027[label="1;12pkt 12fpkt"];
198--6038[label="1;5pkt 5fpkt"];
198--6102[label="0.48;12pkt 12fpkt"];
198--6141[label="0.857143;6pkt 6fpkt"];
198--6151[label="0.526316;10pkt 10fpkt"];
198--6182[label="0.4;8pkt 8fpkt"];
198--6208[label="0.461538;6pkt 6fpkt"];
198--6214[label="0.6;12pkt 12fpkt"];
198--6221[label="0.1875;3pkt 3fpkt"];
198--6265[label="0.0769231;1pkt 1fpkt"];
198--6266[label="0.259259;7pkt 7fpkt"];
198--6366[label="0.540541;20pkt 20fpkt"];
198--6376[label="0.333333;1pkt 1fpkt"];
198--6403[label="0.52381;11pkt 11fpkt"];
198--6405[label="0.25;1pkt 1fpkt"];
198--6421[label="0.529412;9pkt 9fpkt"];
198--6447[label="0.322581;10pkt 10fpkt"];
198--6464[label="0.0555556;1pkt 1fpkt"];
198--6564[label="0.454545;40pkt 40fpkt"];
198--6595[label="0.166667;1pkt 1fpkt"];
198--6603[label="0.428571;3pkt 3fpkt"];
198--6637[label="0.105263;2pkt 2fpkt"];
198--6645[label="0.309524;13pkt 13fpkt"];
198--6648[label="0.00763359;2pkt 2fpkt"];
198--6676[label="0.2;4pkt 4fpkt"];
198--6677[label="0.833333;5pkt 5fpkt"];
198--6692[label="0.1;2pkt 2fpkt"];
198--6696[label="0.45;9pkt 9fpkt"];
198--6709[label="0.125;2pkt 2fpkt"];
198--6760[label="0.333333;1pkt 1fpkt"];
198--6763[label="0.362903;45pkt 45fpkt"];
198--6782[label="0.0816327;4pkt 4fpkt"];
198--6795[label="0.407407;11pkt 11fpkt"];
198--6799[label="0.0535714;3pkt 3fpkt"];
198--6831[label="0.826347;138pkt 138fpkt"];
198--6843[label="0.779661;138pkt 138fpkt"];
198--6860[label="0.5;16pkt 16fpkt"];
198--6869[label="0.258065;8pkt 8fpkt"];
198--6883[label="0.125;1pkt 1fpkt"];
198--6935[label="0.428571;39pkt 39fpkt"];
198--6952[label="0.0666667;1pkt 1fpkt"];
198--6967[label="0.36;9pkt 9fpkt"];
198--6978[label="0.360656;22pkt 22fpkt"];
198--7001[label="0.4;2pkt 2fpkt"];
198--7006[label="0.25188;335pkt 335fpkt"];
198--7023[label="0.0612245;3pkt 3fpkt"];
198--7041[label="0.542857;38pkt 38fpkt"];
198--7082[label="0.846154;11pkt 11fpkt"];
198--7091[label="0.34;17pkt 17fpkt"];
198--7098[label="0.307692;4pkt 4fpkt"];
198--7100[label="0.481481;13pkt 13fpkt"];
198--7112[label="0.4;2pkt 2fpkt"];
198--7114[label="0.424242;42pkt 42fpkt"];
198--7117[label="0.5;1pkt 1fpkt"];
198--7120[label="0.0588235;1pkt 1fpkt"];
198--7123[label="0.409091;9pkt 9fpkt"];
198--7164[label="0.2;1pkt 1fpkt"];
198--7188[label="0.75;3pkt 3fpkt"];
198--7190[label="0.441176;30pkt 30fpkt"];
198--7219[label="0.210526;8pkt 8fpkt"];
198--7235[label="0.435484;27pkt 27fpkt"];
198--7246[label="0.0909091;1pkt 1fpkt"];
198--7278[label="0.444444;24pkt 24fpkt"];
198--7289[label="0.40625;26pkt 26fpkt"];
198--7293[label="0.583333;7pkt 7fpkt"];
198--7313[label="0.25;1pkt 1fpkt"];
198--7332[label="0.333333;9pkt 9fpkt"];
198--7397[label="1;5pkt 5fpkt"];
198--7452[label="0.857143;6pkt 6fpkt"];
198--7454[label="0.181818;2pkt 2fpkt"];
198--7480[label="0.4;8pkt 8fpkt"];
198--7494[label="0.578947;11pkt 11fpkt"];
198--7524[label="0.0769231;1pkt 1fpkt"];
198--7525[label="0.259259;7pkt 7fpkt"];
198--7585[label="0.540541;20pkt 20fpkt"];
198--7592[label="0.333333;1pkt 1fpkt"];
198--7611[label="0.25;1pkt 1fpkt"];
198--7623[label="0.529412;9pkt 9fpkt"];
198--7645[label="0.0555556;1pkt 1fpkt"];
198--7705[label="0.454545;40pkt 40fpkt"];
198--7726[label="0.428571;3pkt 3fpkt"];
198--7744[label="0.105263;2pkt 2fpkt"];
198--7748[label="0.00763359;2pkt 2fpkt"];
198--7766[label="1;5pkt 5fpkt"];
198--7787[label="0.0666667;1pkt 1fpkt"];
198--7810[label="0.5;2pkt 2fpkt"];
198--7812[label="0.36;45pkt 45fpkt"];
198--7832[label="0.407407;11pkt 11fpkt"];
198--7835[label="0.0535714;3pkt 3fpkt"];
198--7870[label="0.25;8pkt 8fpkt"];
198--7931[label="0.333333;8pkt 8fpkt"];
198--7937[label="0.360656;22pkt 22fpkt"];
198--7946[label="0.5;1pkt 1fpkt"];
198--7952[label="0.25188;335pkt 335fpkt"];
198--7965[label="0.0612245;3pkt 3fpkt"];
198--7974[label="0.536232;37pkt 37fpkt"];
198--8000[label="0.857143;12pkt 12fpkt"];
198--8008[label="0.461538;12pkt 12fpkt"];
198--8016[label="0.43;43pkt 43fpkt"];
198--8017[label="1;1pkt 1fpkt"];
198--8020[label="0.111111;2pkt 2fpkt"];
198--8021[label="0.380952;8pkt 8fpkt"];
198--8066[label="0.447761;30pkt 30fpkt"];
198--8093[label="0.444444;28pkt 28fpkt"];
198--8102[label="0.0909091;1pkt 1fpkt"];
198--8122[label="0.40625;26pkt 26fpkt"];
198--8142[label="0.333333;9pkt 9fpkt"];
200--206[label="0.5;2pkt 2fpkt"];
200--2923[label="1;2pkt 2fpkt"];
200--3388[label="0.5;2pkt 2fpkt"];
200--4273[label="1;3pkt 3fpkt"];
206--277[label="0.269481;332pkt 332fpkt"];
206--446[label="0.444444;16pkt 16fpkt"];
206--450[label="0.174074;47pkt 47fpkt"];
206--498[label="0.22381;47pkt 47fpkt"];
206--550[label="0.375;6pkt 6fpkt"];
206--561[label="0.288299;239pkt 239fpkt"];
206--590[label="0.314079;87pkt 87fpkt"];
206--634[label="0.59542;156pkt 156fpkt"];
206--639[label="0.62963;17pkt 17fpkt"];
206--660[label="0.213333;48pkt 48fpkt"];
206--749[label="0.189781;26pkt 26fpkt"];
206--783[label="0.4375;42pkt 42fpkt"];
206--800[label="0.241206;48pkt 48fpkt"];
206--820[label="0.470588;24pkt 24fpkt"];
206--832[label="0.0359281;6pkt 6fpkt"];
206--834[label="0.0985915;21pkt 21fpkt"];
206--894[label="0.0888889;4pkt 4fpkt"];
206--905[label="0.470588;24pkt 24fpkt"];
206--906[label="0.275862;16pkt 16fpkt"];
206--918[label="0.0322581;2pkt 2fpkt"];
206--920[label="0.4;4pkt 4fpkt"];
206--939[label="0.354839;22pkt 22fpkt"];
206--1000[label="0.8;4pkt 4fpkt"];
206--1028[label="0.363636;4pkt 4fpkt"];
206--1067[label="0.25;1pkt 1fpkt"];
206--1086[label="0.185629;31pkt 31fpkt"];
206--1100[label="0.545455;6pkt 6fpkt"];
206--1129[label="0.240838;46pkt 46fpkt"];
206--1132[label="0.139423;29pkt 29fpkt"];
206--1161[label="0.128655;22pkt 22fpkt"];
206--1277[label="0.544444;49pkt 49fpkt"];
206--1297[label="0.35567;138pkt 138fpkt"];
206--1309[label="0.269663;24pkt 24fpkt"];
206--1330[label="0.8;4pkt 4fpkt"];
206--1342[label="0.263158;5pkt 5fpkt"];
206--1409[label="0.26087;6pkt 6fpkt"];
206--1422[label="0.727273;8pkt 8fpkt"];
206--1431[label="0.322581;10pkt 10fpkt"];
206--1434[label="0.388889;7pkt 7fpkt"];
206--1436[label="0.375;15pkt 15fpkt"];
206--1439[label="0.357143;5pkt 5fpkt"];
206--1448[label="0.318182;7pkt 7fpkt"];
206--1502[label="0.498708;193pkt 193fpkt"];
206--1551[label="0.55;11pkt 11fpkt"];
206--1563[label="0.465517;54pkt 54fpkt"];
206--1602[label="0.25;3pkt 3fpkt"];
206--1657[label="0.238806;16pkt 16fpkt"];
206--1660[label="0.409091;9pkt 9fpkt"];
206--1675[label="0.583333;21pkt 21fpkt"];
206--1704[label="0.5;13pkt 13fpkt"];
206--1722[label="0.444444;4pkt 4fpkt"];
206--1749[label="0.3125;5pkt 5fpkt"];
206--1805[label="0.52;26pkt 26fpkt"];
206--1814[label="0.310345;27pkt 27fpkt"];
206--1835[label="0.758621;22pkt 22fpkt"];
206--1911[label="0.571429;12pkt 12fpkt"];
206--1936[label="0.470588;8pkt 8fpkt"];
206--1976[label="0.0117647;1pkt 1fpkt"];
206--1989[label="0.266667;4pkt 4fpkt"];
206--2003[label="0.52459;32pkt 32fpkt"];
206--2032[label="0.666667;4pkt 4fpkt"];
206--2200[label="0.362319;25pkt 25fpkt"];
206--2213[label="0.894737;17pkt 17fpkt"];
206--2223[label="0.470588;8pkt 8fpkt"];
206--2234[label="0.333333;5pkt 5fpkt"];
206--2241[label="0.206897;6pkt 6fpkt"];
206--2246[label="0.375;3pkt 3fpkt"];
206--2252[label="0.47619;10pkt 10fpkt"];
206--2259[label="0.0019305;1pkt 1fpkt"];
206--2261[label="0.333333;1pkt 1fpkt"];
206--2298[label="0.5;1pkt 1fpkt"];
206--2305[label="0.415094;22pkt 22fpkt"];
206--2395[label="0.5;5pkt 5fpkt"];
206--2422[label="0.214286;21pkt 21fpkt"];
206--2436[label="0.291667;14pkt 14fpkt"];
206--2453[label="0.454545;10pkt 10fpkt"];
206--2472[label="0.2;4pkt 4fpkt"];
206--2518[label="0.714286;10pkt 10fpkt"];
206--2523[label="0.416667;5pkt 5fpkt"];
206--2638[label="0.368421;7pkt 7fpkt"];
206--2664[label="0.478261;22pkt 22fpkt"];
206--2672[label="0.0144928;1pkt 1fpkt"];
206--2675[label="0.157895;3pkt 3fpkt"];
206--2685[label="0.365854;15pkt 15fpkt"];
206--2686[label="0.543478;25pkt 25fpkt"];
206--2722[label="0.111111;1pkt 1fpkt"];
206--2728[label="0.5;3pkt 3fpkt"];
206--2737[label="0.4375;7pkt 7fpkt"];
206--2738[label="0.244444;11pkt 11fpkt"];
206--2741[label="0.047619;1pkt 1fpkt"];
206--2750[label="0.4;4pkt 4fpkt"];
206--2869[label="0.488889;22pkt 22fpkt"];
206--2871[label="0.708333;17pkt 17fpkt"];
206--2889[label="0.216667;26pkt 26fpkt"];
206--2890[label="0.555556;5pkt 5fpkt"];
206--2901[label="0.242991;26pkt 26fpkt"];
206--2905[label="0.0359281;6pkt 6fpkt"];
206--2906[label="0.112903;21pkt 21fpkt"];
206--2923[label="0.5;1pkt 1fpkt"];
206--2924[label="0.288299;239pkt 239fpkt"];
206--2964[label="0.286885;35pkt 35fpkt"];
206--2976[label="0.140625;9pkt 9fpkt"];
206--2995[label="0.324324;12pkt 12fpkt"];
206--3001[label="0.380952;24pkt 24fpkt"];
206--3014[label="0.5;5pkt 5fpkt"];
206--3024[label="0.272727;3pkt 3fpkt"];
206--3057[label="0.666667;2pkt 2fpkt"];
206--3094[label="0.125;4pkt 4fpkt"];
206--3111[label="0.571429;4pkt 4fpkt"];
206--3119[label="0.263158;5pkt 5fpkt"];
206--3134[label="0.278107;47pkt 47fpkt"];
206--3137[label="0.322581;10pkt 10fpkt"];
206--3159[label="0.421053;24pkt 24fpkt"];
206--3182[label="0.169643;19pkt 19fpkt"];
206--3187[label="0.4375;7pkt 7fpkt"];
206--3193[label="0.272727;6pkt 6fpkt"];
206--3247[label="0.52;13pkt 13fpkt"];
206--3256[label="0.8;4pkt 4fpkt"];
206--3257[label="0.375;3pkt 3fpkt"];
206--3262[label="0.416667;5pkt 5fpkt"];
206--3307[label="0.368421;7pkt 7fpkt"];
206--3330[label="0.111111;1pkt 1fpkt"];
206--3338[label="0.47619;10pkt 10fpkt"];
206--3341[label="0.5;6pkt 6fpkt"];
206--3388[label="0.0806635;355pkt 355fpkt"];
206--3402[label="0.0149254;1pkt 1fpkt"];
206--3406[label="0.5;1pkt 1fpkt"];
206--3421[label="0.6;9pkt 9fpkt"];
206--3431[label="0.542857;19pkt 19fpkt"];
206--3477[label="0.555556;5pkt 5fpkt"];
206--3554[label="0.75;6pkt 6fpkt"];
206--3556[label="1;9pkt 9fpkt"];
206--3594[label="0.208889;47pkt 47fpkt"];
206--3610[label="0.0909091;21pkt 21fpkt"];
206--3622[label="0.5625;9pkt 9fpkt"];
206--3630[label="0.244444;11pkt 11fpkt"];
206--3649[label="1;4pkt 4fpkt"];
206--3670[label="0.115385;3pkt 3fpkt"];
206--3720[label="0.5;12pkt 12fpkt"];
206--3724[label="0.307692;4pkt 4fpkt"];
206--3747[label="0.11828;22pkt 22fpkt"];
206--3756[label="0.681818;15pkt 15fpkt"];
206--3761[label="0.315789;6pkt 6fpkt"];
206--3781[label="0.416667;10pkt 10fpkt"];
206--3791[label="0.625;5pkt 5fpkt"];
206--3797[label="0.272727;3pkt 3fpkt"];
206--3801[label="0.454545;15pkt 15fpkt"];
206--3828[label="0.571429;12pkt 12fpkt"];
206--3837[label="0.615385;8pkt 8fpkt"];
206--3854[label="0.625;5pkt 5fpkt"];
206--3871[label="0.333333;4pkt 4fpkt"];
206--3881[label="0.15;3pkt 3fpkt"];
206--3896[label="0.0625;1pkt 1fpkt"];
206--3897[label="0.125;1pkt 1fpkt"];
206--3925[label="0.3;3pkt 3fpkt"];
206--3962[label="0.75;3pkt 3fpkt"];
206--3983[label="0.481481;13pkt 13fpkt"];
206--3988[label="0.12;3pkt 3fpkt"];
206--4027[label="0.363636;4pkt 4fpkt"];
206--4041[label="0.214286;6pkt 6fpkt"];
206--4044[label="0.5;1pkt 1fpkt"];
206--4086[label="0.00157978;1pkt 1fpkt"];
206--4128[label="0.129464;29pkt 29fpkt"];
206--4145[label="0.275862;16pkt 16fpkt"];
206--4169[label="0.459459;17pkt 17fpkt"];
206--4178[label="0.0117647;1pkt 1fpkt"];
206--4241[label="0.5;10pkt 10fpkt"];
206--4243[label="0.5;2pkt 2fpkt"];
206--4253[label="0.177143;31pkt 31fpkt"];
206--4271[label="0.461538;6pkt 6fpkt"];
206--4273[label="0.666667;2pkt 2fpkt"];
206--4275[label="0.411765;7pkt 7fpkt"];
206--4303[label="0.5;5pkt 5fpkt"];
206--4317[label="0.483871;15pkt 15fpkt"];
206--4318[label="0.333333;10pkt 10fpkt"];
206--4353[label="0.111111;2pkt 2fpkt"];
206--4368[label="1;3pkt 3fpkt"];
206--4445[label="0.857143;6pkt 6fpkt"];
206--4468[label="0.289855;20pkt 20fpkt"];
206--4492[label="0.03125;1pkt 1fpkt"];
206--4522[label="0.545455;48pkt 48fpkt"];
206--4543[label="0.279743;87pkt 87fpkt"];
206--4577[label="0.333333;10pkt 10fpkt"];
206--4580[label="0.285714;2pkt 2fpkt"];
206--4598[label="0.571429;4pkt 4fpkt"];
206--4653[label="0.2;4pkt 4fpkt"];
206--4663[label="0.380952;16pkt 16fpkt"];
206--4668[label="0.00381679;1pkt 1fpkt"];
206--4721[label="0.2;4pkt 4fpkt"];
206--4749[label="0.05;1pkt 1fpkt"];
206--4753[label="0.470588;8pkt 8fpkt"];
206--4756[label="0.35;7pkt 7fpkt"];
206--4769[label="1;16pkt 16fpkt"];
206--4771[label="0.307692;4pkt 4fpkt"];
206--4776[label="0.4375;7pkt 7fpkt"];
206--4812[label="0.421053;8pkt 8fpkt"];
206--4830[label="0.333333;2pkt 2fpkt"];
206--4872[label="0.333333;15pkt 15fpkt"];
206--4878[label="0.666667;2pkt 2fpkt"];
206--4884[label="0.33871;42pkt 42fpkt"];
206--4888[label="0.509804;26pkt 26fpkt"];
206--4896[label="0.316456;25pkt 25fpkt"];
206--4914[label="0.1875;9pkt 9fpkt"];
206--4932[label="0.481481;13pkt 13fpkt"];
206--4937[label="0.375;21pkt 21fpkt"];
206--4943[label="0.28;14pkt 14fpkt"];
206--4953[label="0.607143;17pkt 17fpkt"];
206--4969[label="0.709677;22pkt 22fpkt"];
206--4980[label="0.520833;25pkt 25fpkt"];
206--4990[label="0.454545;5pkt 5fpkt"];
206--4996[label="0.130435;3pkt 3fpkt"];
206--4997[label="0.2;21pkt 21fpkt"];
206--5000[label="1;1pkt 1fpkt"];
206--5002[label="0.0337079;6pkt 6fpkt"];
206--5007[label="0.333333;1pkt 1fpkt"];
206--5014[label="0.444444;8pkt 8fpkt"];
206--5020[label="0.333333;1pkt 1fpkt"];
206--5024[label="0.892857;25pkt 25fpkt"];
206--5034[label="0.5;16pkt 16fpkt"];
206--5049[label="0.460621;193pkt 193fpkt"];
206--5050[label="0.3125;10pkt 10fpkt"];
206--5068[label="0.125;1pkt 1fpkt"];
206--5073[label="0.534247;156pkt 156fpkt"];
206--5079[label="0.875;7pkt 7fpkt"];
206--5131[label="0.261202;239pkt 239fpkt"];
206--5135[label="0.846154;22pkt 22fpkt"];
206--5145[label="0.333333;1pkt 1fpkt"];
206--5158[label="0.25;1pkt 1fpkt"];
206--5163[label="0.266667;24pkt 24fpkt"];
206--5166[label="0.384615;5pkt 5fpkt"];
206--5175[label="0.047619;1pkt 1fpkt"];
206--5189[label="1;4pkt 4fpkt"];
206--5202[label="0.285714;4pkt 4fpkt"];
206--5211[label="0.333333;1pkt 1fpkt"];
206--5227[label="0.416667;10pkt 10fpkt"];
206--5249[label="0.344262;21pkt 21fpkt"];
206--5251[label="0.23;46pkt 46fpkt"];
206--5265[label="0.25;6pkt 6fpkt"];
206--5275[label="0.5;1pkt 1fpkt"];
206--5284[label="1;24pkt 24fpkt"];
206--5285[label="0.25;1pkt 1fpkt"];
206--5295[label="0.3125;5pkt 5fpkt"];
206--5297[label="0.249624;332pkt 332fpkt"];
206--5308[label="0.227488;48pkt 48fpkt"];
206--5325[label="0.384615;5pkt 5fpkt"];
206--5326[label="0.0204082;1pkt 1fpkt"];
206--5333[label="1;3pkt 3fpkt"];
206--5343[label="0.75;3pkt 3fpkt"];
206--5349[label="0.333333;3pkt 3fpkt"];
206--5352[label="0.328571;23pkt 23fpkt"];
206--5362[label="0.315789;6pkt 6fpkt"];
206--5416[label="0.142857;2pkt 2fpkt"];
206--5418[label="0.272727;6pkt 6fpkt"];
206--5433[label="0.6;30pkt 30fpkt"];
206--5448[label="0.428571;6pkt 6fpkt"];
206--5450[label="0.6;3pkt 3fpkt"];
206--5453[label="0.259259;7pkt 7fpkt"];
206--5472[label="0.285714;2pkt 2fpkt"];
206--5479[label="0.333333;2pkt 2fpkt"];
206--5483[label="0.272727;27pkt 27fpkt"];
206--5491[label="0.111111;2pkt 2fpkt"];
206--5496[label="0.184211;7pkt 7fpkt"];
206--5500[label="0.380952;8pkt 8fpkt"];
206--5531[label="0.5;1pkt 1fpkt"];
206--5555[label="0.533333;32pkt 32fpkt"];
206--5576[label="0.210526;4pkt 4fpkt"];
206--5591[label="0.2;1pkt 1fpkt"];
206--5595[label="0.291667;7pkt 7fpkt"];
206--5632[label="0.166667;1pkt 1fpkt"];
206--5633[label="0.330144;138pkt 138fpkt"];
206--5637[label="0.25;1pkt 1fpkt"];
206--5642[label="0.426471;29pkt 29fpkt"];
206--5658[label="0.430769;28pkt 28fpkt"];
206--5689[label="0.333333;2pkt 2fpkt"];
206--5701[label="0.0810811;3pkt 3fpkt"];
206--5724[label="0.444444;28pkt 28fpkt"];
206--5737[label="0.412698;26pkt 26fpkt"];
206--5751[label="0.198347;48pkt 48fpkt"];
206--5756[label="0.363636;4pkt 4fpkt"];
206--5815[label="0.377358;20pkt 20fpkt"];
206--5823[label="0.272727;9pkt 9fpkt"];
206--5836[label="0.375;24pkt 24fpkt"];
206--5840[label="0.454545;5pkt 5fpkt"];
206--5874[label="0.4;2pkt 2fpkt"];
206--5905[label="0.62963;17pkt 17fpkt"];
206--5964[label="0.0149254;1pkt 1fpkt"];
206--5966[label="1;1pkt 1fpkt"];
206--5976[label="0.6;9pkt 9fpkt"];
206--5981[label="0.542857;19pkt 19fpkt"];
206--5997[label="0.555556;5pkt 5fpkt"];
206--6073[label="0.0913043;21pkt 21fpkt"];
206--6102[label="0.12;3pkt 3fpkt"];
206--6149[label="0.681818;15pkt 15fpkt"];
206--6151[label="0.315789;6pkt 6fpkt"];
206--6182[label="0.6;12pkt 12fpkt"];
206--6188[label="0.642857;9pkt 9fpkt"];
206--6208[label="0.307692;4pkt 4fpkt"];
206--6214[label="0.15;3pkt 3fpkt"];
206--6221[label="0.0625;1pkt 1fpkt"];
206--6256[label="0.8;4pkt 4fpkt"];
206--6266[label="0.481481;13pkt 13fpkt"];
206--6295[label="1;1pkt 1fpkt"];
206--6366[label="0.459459;17pkt 17fpkt"];
206--6371[label="0.0119048;1pkt 1fpkt"];
206--6403[label="0.47619;10pkt 10fpkt"];
206--6405[label="0.5;2pkt 2fpkt"];
206--6421[label="0.411765;7pkt 7fpkt"];
206--6447[label="0.483871;15pkt 15fpkt"];
206--6464[label="0.111111;2pkt 2fpkt"];
206--6564[label="0.545455;48pkt 48fpkt"];
206--6595[label="0.333333;2pkt 2fpkt"];
206--6603[label="0.571429;4pkt 4fpkt"];
206--6637[label="0.210526;4pkt 4fpkt"];
206--6645[label="0.380952;16pkt 16fpkt"];
206--6648[label="0.00381679;1pkt 1fpkt"];
206--6676[label="0.2;4pkt 4fpkt"];
206--6692[label="0.05;1pkt 1fpkt"];
206--6696[label="0.35;7pkt 7fpkt"];
206--6706[label="0.307692;4pkt 4fpkt"];
206--6709[label="0.4375;7pkt 7fpkt"];
206--6737[label="0.333333;2pkt 2fpkt"];
206--6760[label="0.666667;2pkt 2fpkt"];
206--6763[label="0.33871;42pkt 42fpkt"];
206--6767[label="0.5;26pkt 26fpkt"];
206--6782[label="0.183673;9pkt 9fpkt"];
206--6795[label="0.481481;13pkt 13fpkt"];
206--6799[label="0.375;21pkt 21fpkt"];
206--6828[label="0.531915;25pkt 25fpkt"];
206--6840[label="0.130435;3pkt 3fpkt"];
206--6843[label="0.0338983;6pkt 6fpkt"];
206--6847[label="0.333333;1pkt 1fpkt"];
206--6850[label="0.444444;8pkt 8fpkt"];
206--6856[label="0.888889;24pkt 24fpkt"];
206--6860[label="0.5;16pkt 16fpkt"];
206--6868[label="0.460621;193pkt 193fpkt"];
206--6869[label="0.322581;10pkt 10fpkt"];
206--6883[label="0.875;7pkt 7fpkt"];
206--6920[label="0.333333;1pkt 1fpkt"];
206--6931[label="0.25;1pkt 1fpkt"];
206--6935[label="0.263736;24pkt 24fpkt"];
206--6952[label="0.266667;4pkt 4fpkt"];
206--6959[label="0.333333;1pkt 1fpkt"];
206--6967[label="0.4;10pkt 10fpkt"];
206--6978[label="0.344262;21pkt 21fpkt"];
206--6980[label="0.231156;46pkt 46fpkt"];
206--6993[label="1;1pkt 1fpkt"];
206--7000[label="1;23pkt 23fpkt"];
206--7001[label="0.2;1pkt 1fpkt"];
206--7006[label="0.249624;332pkt 332fpkt"];
206--7012[label="0.227488;48pkt 48fpkt"];
206--7023[label="0.0204082;1pkt 1fpkt"];
206--7029[label="1;3pkt 3fpkt"];
206--7041[label="0.328571;23pkt 23fpkt"];
206--7082[label="0.153846;2pkt 2fpkt"];
206--7083[label="0.285714;6pkt 6fpkt"];
206--7091[label="0.6;30pkt 30fpkt"];
206--7098[label="0.461538;6pkt 6fpkt"];
206--7099[label="0.75;3pkt 3fpkt"];
206--7100[label="0.259259;7pkt 7fpkt"];
206--7112[label="0.4;2pkt 2fpkt"];
206--7114[label="0.272727;27pkt 27fpkt"];
206--7120[label="0.117647;2pkt 2fpkt"];
206--7123[label="0.363636;8pkt 8fpkt"];
206--7164[label="0.2;1pkt 1fpkt"];
206--7188[label="0.25;1pkt 1fpkt"];
206--7190[label="0.426471;29pkt 29fpkt"];
206--7219[label="0.0789474;3pkt 3fpkt"];
206--7235[label="0.419355;26pkt 26fpkt"];
206--7246[label="0.363636;4pkt 4fpkt"];
206--7278[label="0.37037;20pkt 20fpkt"];
206--7289[label="0.375;24pkt 24fpkt"];
206--7293[label="0.416667;5pkt 5fpkt"];
206--7313[label="0.5;2pkt 2fpkt"];
206--7332[label="0.62963;17pkt 17fpkt"];
206--7369[label="1;1pkt 1fpkt"];
206--7420[label="0.0909091;21pkt 21fpkt"];
206--7454[label="0.181818;2pkt 2fpkt"];
206--7480[label="0.6;12pkt 12fpkt"];
206--7494[label="0.157895;3pkt 3fpkt"];
206--7522[label="0.8;4pkt 4fpkt"];
206--7525[label="0.481481;13pkt 13fpkt"];
206--7544[label="0.5;1pkt 1fpkt"];
206--7585[label="0.459459;17pkt 17fpkt"];
206--7588[label="0.0117647;1pkt 1fpkt"];
206--7611[label="0.5;2pkt 2fpkt"];
206--7623[label="0.411765;7pkt 7fpkt"];
206--7645[label="0.111111;2pkt 2fpkt"];
206--7705[label="0.545455;48pkt 48fpkt"];
206--7726[label="0.571429;4pkt 4fpkt"];
206--7744[label="0.210526;4pkt 4fpkt"];
206--7748[label="0.00381679;1pkt 1fpkt"];
206--7785[label="0.285714;4pkt 4fpkt"];
206--7787[label="0.466667;7pkt 7fpkt"];
206--7801[label="0.2;1pkt 1fpkt"];
206--7810[label="0.5;2pkt 2fpkt"];
206--7812[label="0.336;42pkt 42fpkt"];
206--7815[label="0.509804;26pkt 26fpkt"];
206--7832[label="0.481481;13pkt 13fpkt"];
206--7835[label="0.375;21pkt 21fpkt"];
206--7851[label="0.520833;25pkt 25fpkt"];
206--7861[label="0.444444;8pkt 8fpkt"];
206--7869[label="0.460621;193pkt 193fpkt"];
206--7870[label="0.3125;10pkt 10fpkt"];
206--7909[label="0.25;1pkt 1fpkt"];
206--7919[label="0.285714;4pkt 4fpkt"];
206--7925[label="0.333333;1pkt 1fpkt"];
206--7931[label="0.416667;10pkt 10fpkt"];
206--7937[label="0.344262;21pkt 21fpkt"];
206--7946[label="0.5;1pkt 1fpkt"];
206--7950[label="1;23pkt 23fpkt"];
206--7952[label="0.249624;332pkt 332fpkt"];
206--7956[label="0.226415;48pkt 48fpkt"];
206--7965[label="0.0204082;1pkt 1fpkt"];
206--7974[label="0.333333;23pkt 23fpkt"];
206--8000[label="0.142857;2pkt 2fpkt"];
206--8007[label="0.75;3pkt 3fpkt"];
206--8008[label="0.269231;7pkt 7fpkt"];
206--8016[label="0.27;27pkt 27fpkt"];
206--8020[label="0.111111;2pkt 2fpkt"];
206--8021[label="0.380952;8pkt 8fpkt"];
206--8066[label="0.432836;29pkt 29fpkt"];
206--8093[label="0.412698;26pkt 26fpkt"];
206--8102[label="0.363636;4pkt 4fpkt"];
206--8122[label="0.375;24pkt 24fpkt"];
206--8142[label="0.62963;17pkt 17fpkt"];
277--380[label="0.00487013;6pkt 6fpkt"];
277--604[label="0.0241071;27pkt 27fpkt"];
277--3388[label="0.0722403;89pkt 89fpkt"];
277--5297[label="0.999188;1231pkt 1231fpkt"];
277--7006[label="0.999188;1231pkt 1231fpkt"];
277--7952[label="0.999188;1231pkt 1231fpkt"];
380--590[label="0.0794224;22pkt 22fpkt"];
380--634[label="0.0572519;15pkt 15fpkt"];
380--706[label="1;4pkt 4fpkt"];
380--939[label="0.016129;1pkt 1fpkt"];
380--1297[label="0.00515464;2pkt 2fpkt"];
380--1381[label="0.0190476;2pkt 2fpkt"];
380--1448[label="0.409091;9pkt 9fpkt"];
380--1502[label="0.178295;69pkt 69fpkt"];
380--1657[label="0.253731;17pkt 17fpkt"];
380--1675[label="0.138889;5pkt 5fpkt"];
380--1718[label="0.147727;13pkt 13fpkt"];
380--1805[label="0.14;7pkt 7fpkt"];
380--1835[label="0.0689655;2pkt 2fpkt"];
380--1857[label="0.0517241;3pkt 3fpkt"];
380--2001[label="1;19pkt 19fpkt"];
380--2200[label="0.0289855;2pkt 2fpkt"];
380--2241[label="0.0344828;1pkt 1fpkt"];
380--2261[label="0.333333;1pkt 1fpkt"];
380--2305[label="0.0377358;2pkt 2fpkt"];
380--2422[label="0.173469;17pkt 17fpkt"];
380--2472[label="0.3;6pkt 6fpkt"];
380--2664[label="0.0434783;2pkt 2fpkt"];
380--2675[label="0.684211;13pkt 13fpkt"];
380--2685[label="0.219512;9pkt 9fpkt"];
380--2686[label="0.130435;6pkt 6fpkt"];
380--2869[label="0.133333;6pkt 6fpkt"];
380--3139[label="0.147727;13pkt 13fpkt"];
380--3193[label="0.0454545;1pkt 1fpkt"];
380--3388[label="0.0414326;59pkt 59fpkt"];
380--3431[label="0.142857;5pkt 5fpkt"];
380--3508[label="0.961538;25pkt 25fpkt"];
380--3540[label="1;1pkt 1fpkt"];
380--3584[label="0.25;1pkt 1fpkt"];
380--3677[label="1;4pkt 4fpkt"];
380--3756[label="0.272727;6pkt 6fpkt"];
380--3896[label="0.375;6pkt 6fpkt"];
380--3969[label="0.0172414;2pkt 2fpkt"];
380--3988[label="0.12;3pkt 3fpkt"];
380--4041[label="0.0357143;1pkt 1fpkt"];
380--4077[label="0.0422535;3pkt 3fpkt"];
380--4193[label="0.921053;35pkt 35fpkt"];
380--4318[label="0.1;3pkt 3fpkt"];
380--4353[label="0.5;9pkt 9fpkt"];
380--4389[label="1;2pkt 2fpkt"];
380--4543[label="0.0707395;22pkt 22fpkt"];
380--4554[label="1;16pkt 16fpkt"];
380--4653[label="0.3;6pkt 6fpkt"];
380--4668[label="0.00763359;2pkt 2fpkt"];
380--4688[label="0.0645161;2pkt 2fpkt"];
380--4872[label="0.177778;8pkt 8fpkt"];
380--4888[label="0.117647;6pkt 6fpkt"];
380--4891[label="1;27pkt 27fpkt"];
380--4896[label="0.0253165;2pkt 2fpkt"];
380--4914[label="0.291667;14pkt 14fpkt"];
380--4935[label="0.857143;6pkt 6fpkt"];
380--4937[label="0.0357143;2pkt 2fpkt"];
380--4969[label="0.0645161;2pkt 2fpkt"];
380--4980[label="0.125;6pkt 6fpkt"];
380--4996[label="0.521739;12pkt 12fpkt"];
380--4997[label="0.161905;17pkt 17fpkt"];
380--5014[label="0.277778;5pkt 5fpkt"];
380--5049[label="0.169451;71pkt 71fpkt"];
380--5073[label="0.0513699;15pkt 15fpkt"];
380--5124[label="0.142857;1pkt 1fpkt"];
380--5170[label="1;2pkt 2fpkt"];
380--5243[label="1;11pkt 11fpkt"];
380--5297[label="0.00451128;6pkt 6fpkt"];
380--5324[label="0.947368;18pkt 18fpkt"];
380--5326[label="0.44898;22pkt 22fpkt"];
380--5368[label="0.714286;20pkt 20fpkt"];
380--5395[label="0.0909091;2pkt 2fpkt"];
380--5418[label="0.0454545;1pkt 1fpkt"];
380--5453[label="0.0740741;2pkt 2fpkt"];
380--5472[label="0.142857;1pkt 1fpkt"];
380--5508[label="1;4pkt 4fpkt"];
380--5595[label="0.375;9pkt 9fpkt"];
380--5633[label="0.00478469;2pkt 2fpkt"];
380--5689[label="0.166667;1pkt 1fpkt"];
380--5701[label="0.243243;9pkt 9fpkt"];
380--5898[label="1;19pkt 19fpkt"];
380--5921[label="0.005;2pkt 2fpkt"];
380--5940[label="1;3pkt 3fpkt"];
380--5981[label="0.142857;5pkt 5fpkt"];
380--6149[label="0.272727;6pkt 6fpkt"];
380--6221[label="0.375;6pkt 6fpkt"];
380--6258[label="0.0172414;2pkt 2fpkt"];
380--6464[label="0.5;9pkt 9fpkt"];
380--6637[label="0.315789;6pkt 6fpkt"];
380--6648[label="0.00763359;2pkt 2fpkt"];
380--6658[label="0.0645161;2pkt 2fpkt"];
380--6767[label="0.134615;7pkt 7fpkt"];
380--6782[label="0.285714;14pkt 14fpkt"];
380--6799[label="0.0357143;2pkt 2fpkt"];
380--6828[label="0.12766;6pkt 6fpkt"];
380--6840[label="0.521739;12pkt 12fpkt"];
380--6850[label="0.277778;5pkt 5fpkt"];
380--6868[label="0.169451;71pkt 71fpkt"];
380--6940[label="1;1pkt 1fpkt"];
380--7006[label="0.00451128;6pkt 6fpkt"];
380--7022[label="0.947368;18pkt 18fpkt"];
380--7023[label="0.44898;22pkt 22fpkt"];
380--7067[label="0.0909091;2pkt 2fpkt"];
380--7083[label="0.047619;1pkt 1fpkt"];
380--7100[label="0.0740741;2pkt 2fpkt"];
380--7219[label="0.236842;9pkt 9fpkt"];
380--7343[label="0.005;2pkt 2fpkt"];
380--7645[label="0.5;9pkt 9fpkt"];
380--7661[label="1;2pkt 2fpkt"];
380--7744[label="0.315789;6pkt 6fpkt"];
380--7748[label="0.00763359;2pkt 2fpkt"];
380--7815[label="0.117647;6pkt 6fpkt"];
380--7835[label="0.0357143;2pkt 2fpkt"];
380--7851[label="0.125;6pkt 6fpkt"];
380--7861[label="0.277778;5pkt 5fpkt"];
380--7869[label="0.169451;71pkt 71fpkt"];
380--7952[label="0.00451128;6pkt 6fpkt"];
380--7964[label="0.947368;18pkt 18fpkt"];
380--7965[label="0.44898;22pkt 22fpkt"];
380--8008[label="0.0769231;2pkt 2fpkt"];
380--8149[label="0.005;2pkt 2fpkt"];
446--2890[label="1;9pkt 9fpkt"];
446--3388[label="0.0555556;2pkt 2fpkt"];
568--604[label="0.333333;1pkt 1fpkt"];
568--3388[label="0.333333;1pkt 1fpkt"];
590--604[label="0.00722022;2pkt 2fpkt"];
590--978[label="0.00403226;1pkt 1fpkt"];
590--3388[label="0.0794224;22pkt 22fpkt"];
590--4543[label="0.99639;276pkt 276fpkt"];
639--2871[label="1;24pkt 24fpkt"];
639--3388[label="0.037037;1pkt 1fpkt"];
639--5905[label="1;27pkt 27fpkt"];
639--7332[label="1;27pkt 27fpkt"];
639--8142[label="1;27pkt 27fpkt"];
703--800[label="0.0647059;11pkt 11fpkt"];
703--834[label="0.170588;29pkt 29fpkt"];
703--1129[label="0.0764706;13pkt 13fpkt"];
703--1161[label="0.176471;30pkt 30fpkt"];
703--2227[label="0.105263;2pkt 2fpkt"];
703--2263[label="0.0235294;4pkt 4fpkt"];
703--2901[label="0.0373832;4pkt 4fpkt"];
703--2906[label="0.141176;24pkt 24fpkt"];
703--2964[label="0.0737705;9pkt 9fpkt"];
703--3134[label="0.0946746;16pkt 16fpkt"];
703--3182[label="0.214286;24pkt 24fpkt"];
703--3388[label="0.111765;19pkt 19fpkt"];
703--3594[label="0.105882;18pkt 18fpkt"];
703--3610[label="0.170588;29pkt 29fpkt"];
703--3630[label="0.0444444;2pkt 2fpkt"];
703--3706[label="1;3pkt 3fpkt"];
703--3747[label="0.176471;30pkt 30fpkt"];
703--3981[label="0.230769;3pkt 3fpkt"];
703--4419[label="0.333333;3pkt 3fpkt"];
703--4749[label="0.15;3pkt 3fpkt"];
703--5251[label="0.0764706;13pkt 13fpkt"];
703--5308[label="0.0647059;11pkt 11fpkt"];
703--5751[label="0.1;17pkt 17fpkt"];
703--6021[label="0.0909091;1pkt 1fpkt"];
703--6073[label="0.170588;29pkt 29fpkt"];
703--6127[label="0.75;3pkt 3fpkt"];
703--6265[label="0.230769;3pkt 3fpkt"];
703--6692[label="0.15;3pkt 3fpkt"];
703--6980[label="0.0764706;13pkt 13fpkt"];
703--7012[label="0.0647059;11pkt 11fpkt"];
703--7420[label="0.170588;29pkt 29fpkt"];
703--7524[label="0.230769;3pkt 3fpkt"];
703--7956[label="0.0647059;11pkt 11fpkt"];
706--3388[label="0.25;1pkt 1fpkt"];
774--2895[label="1;38pkt 38fpkt"];
774--3388[label="0.111842;17pkt 17fpkt"];
774--4195[label="1;152pkt 152fpkt"];
820--3388[label="0.0784314;4pkt 4fpkt"];
832--2905[label="1;167pkt 167fpkt"];
832--3388[label="0.0598802;10pkt 10fpkt"];
832--5002[label="1;167pkt 167fpkt"];
832--6843[label="1;167pkt 167fpkt"];
905--3388[label="0.0392157;2pkt 2fpkt"];
905--5836[label="0.980392;50pkt 50fpkt"];
905--7289[label="0.980392;50pkt 50fpkt"];
905--8122[label="0.980392;50pkt 50fpkt"];
906--1391[label="0.0517241;3pkt 3fpkt"];
906--3388[label="0.0172414;1pkt 1fpkt"];
906--4145[label="1;58pkt 58fpkt"];
1000--3649[label="1;4pkt 4fpkt"];
1100--3341[label="1;11pkt 11fpkt"];
1100--3388[label="0.272727;3pkt 3fpkt"];
1100--3801[label="1;11pkt 11fpkt"];
1277--3388[label="0.0333333;3pkt 3fpkt"];
1391--1502[label="0.142857;10pkt 10fpkt"];
1391--1728[label="1;21pkt 21fpkt"];
1391--4145[label="0.0517241;3pkt 3fpkt"];
1391--4373[label="0.125;1pkt 1fpkt"];
1391--4391[label="1;20pkt 20fpkt"];
1391--5049[label="0.142857;10pkt 10fpkt"];
1391--5633[label="0.442857;31pkt 31fpkt"];
1391--6479[label="0.142857;1pkt 1fpkt"];
1391--6868[label="0.142857;10pkt 10fpkt"];
1391--7869[label="0.142857;10pkt 10fpkt"];
1409--3388[label="0.0434783;1pkt 1fpkt"];
1409--5265[label="0.956522;22pkt 22fpkt"];
1422--3388[label="0.0909091;1pkt 1fpkt"];
1422--3983[label="1;11pkt 11fpkt"];
1422--6266[label="1;11pkt 11fpkt"];
1422--7525[label="1;11pkt 11fpkt"];
1431--3137[label="1;31pkt 31fpkt"];
1434--3187[label="1;16pkt 16fpkt"];
1434--3388[label="0.111111;2pkt 2fpkt"];
1434--4275[label="1;17pkt 17fpkt"];
1434--6421[label="1;17pkt 17fpkt"];
1434--7623[label="1;17pkt 17fpkt"];
1436--3388[label="0.025;1pkt 1fpkt"];
1439--5325[label="1;13pkt 13fpkt"];
1448--5595[label="0.954545;21pkt 21fpkt"];
1540--3388[label="0.5;1pkt 1fpkt"];
1540--5487[label="1;2pkt 2fpkt"];
1540--7117[label="1;2pkt 2fpkt"];
1540--8017[label="1;1pkt 1fpkt"];
1602--3388[label="0.0833333;1pkt 1fpkt"];
1602--3797[label="1;11pkt 11fpkt"];
1657--3388[label="0.119403;8pkt 8fpkt"];
1660--3388[label="0.0909091;2pkt 2fpkt"];
1704--3247[label="1;25pkt 25fpkt"];
1704--3388[label="0.153846;4pkt 4fpkt"];
1704--4932[label="0.961538;25pkt 25fpkt"];
1704--6795[label="0.961538;25pkt 25fpkt"];
1704--7832[label="0.961538;25pkt 25fpkt"];
1718--3139[label="1;88pkt 88fpkt"];
1749--3388[label="0.0625;1pkt 1fpkt"];
1749--5295[label="0.9375;15pkt 15fpkt"];
1814--3159[label="1;57pkt 57fpkt"];
1814--3388[label="0.114943;10pkt 10fpkt"];
1814--5483[label="0.988506;86pkt 86fpkt"];
1814--7114[label="0.988506;86pkt 86fpkt"];
1814--8016[label="1;87pkt 87fpkt"];
1835--3388[label="0.137931;4pkt 4fpkt"];
1835--4969[label="1;29pkt 29fpkt"];
1911--3388[label="0.047619;1pkt 1fpkt"];
1911--3720[label="0.952381;20pkt 20fpkt"];
1936--3388[label="0.235294;4pkt 4fpkt"];
1936--4753[label="0.941176;16pkt 16fpkt"];
1989--3388[label="0.0666667;1pkt 1fpkt"];
1989--5202[label="1;14pkt 14fpkt"];
1989--6952[label="1;15pkt 15fpkt"];
1989--7919[label="1;14pkt 14fpkt"];
2003--3388[label="0.0983607;6pkt 6fpkt"];
2003--5555[label="1;60pkt 60fpkt"];
2200--3388[label="0.188406;13pkt 13fpkt"];
2200--4896[label="0.985507;68pkt 68fpkt"];
2223--3388[label="0.176471;3pkt 3fpkt"];
2223--5500[label="0.941176;16pkt 16fpkt"];
2223--7123[label="1;17pkt 17fpkt"];
2223--8021[label="0.941176;16pkt 16fpkt"];
2227--3388[label="0.263158;5pkt 5fpkt"];
2234--3388[label="0.2;3pkt 3fpkt"];
2252--3338[label="1;21pkt 21fpkt"];
2252--3388[label="0.238095;5pkt 5fpkt"];
2252--5227[label="0.952381;20pkt 20fpkt"];
2252--6967[label="1;21pkt 21fpkt"];
2252--7931[label="0.952381;20pkt 20fpkt"];
2261--3388[label="0.666667;2pkt 2fpkt"];
2291--5030[label="1;2pkt 2fpkt"];
2298--3388[label="1;2pkt 2fpkt"];
2305--3388[label="0.0754717;4pkt 4fpkt"];
2305--4937[label="0.962264;51pkt 51fpkt"];
2305--6799[label="0.962264;51pkt 51fpkt"];
2305--7835[label="0.962264;51pkt 51fpkt"];
2395--3388[label="0.1;1pkt 1fpkt"];
2395--4990[label="1;10pkt 10fpkt"];
2436--3388[label="0.0833333;4pkt 4fpkt"];
2436--4943[label="0.979167;47pkt 47fpkt"];
2453--3388[label="0.181818;4pkt 4fpkt"];
2453--4577[label="1;22pkt 22fpkt"];
2472--4653[label="1;20pkt 20fpkt"];
2472--6637[label="1;19pkt 19fpkt"];
2472--7744[label="1;19pkt 19fpkt"];
2511--3388[label="0.25;1pkt 1fpkt"];
2518--3388[label="0.0714286;1pkt 1fpkt"];
2523--3262[label="1;12pkt 12fpkt"];
2523--3388[label="0.25;3pkt 3fpkt"];
2664--3388[label="0.0652174;3pkt 3fpkt"];
2685--3388[label="0.121951;5pkt 5fpkt"];
2685--4872[label="0.97561;40pkt 40fpkt"];
2728--3388[label="0.333333;2pkt 2fpkt"];
2737--3388[label="0.0625;1pkt 1fpkt"];
2738--3388[label="0.155556;7pkt 7fpkt"];
2738--5249[label="1;45pkt 45fpkt"];
2738--6978[label="1;45pkt 45fpkt"];
2738--7937[label="1;45pkt 45fpkt"];
2741--3388[label="0.238095;5pkt 5fpkt"];
2750--3388[label="0.1;1pkt 1fpkt"];
2871--3388[label="0.0416667;1pkt 1fpkt"];
2871--5905[label="1;24pkt 24fpkt"];
2871--7332[label="1;24pkt 24fpkt"];
2871--8142[label="1;24pkt 24fpkt"];
2890--3388[label="0.111111;1pkt 1fpkt"];
2895--3388[label="0.0263158;1pkt 1fpkt"];
2895--4195[label="1;38pkt 38fpkt"];
2905--3388[label="0.0598802;10pkt 10fpkt"];
2905--5002[label="1;167pkt 167fpkt"];
2905--6843[label="1;167pkt 167fpkt"];
2923--4273[label="0.5;1pkt 1fpkt"];
3014--3983[label="0.9;9pkt 9fpkt"];
3014--6266[label="0.9;9pkt 9fpkt"];
3014--7525[label="0.9;9pkt 9fpkt"];
3119--3388[label="0.0526316;1pkt 1fpkt"];
3159--3388[label="0.105263;6pkt 6fpkt"];
3159--5483[label="0.982456;56pkt 56fpkt"];
3159--7114[label="0.982456;56pkt 56fpkt"];
3159--8016[label="1;57pkt 57fpkt"];
3187--3388[label="0.0625;1pkt 1fpkt"];
3187--4275[label="0.9375;15pkt 15fpkt"];
3187--6421[label="0.9375;15pkt 15fpkt"];
3187--7623[label="0.9375;15pkt 15fpkt"];
3247--3388[label="0.16;4pkt 4fpkt"];
3247--4932[label="0.96;24pkt 24fpkt"];
3247--6795[label="0.96;24pkt 24fpkt"];
3247--7832[label="0.96;24pkt 24fpkt"];
3262--3388[label="0.25;3pkt 3fpkt"];
3330--3388[label="0.111111;1pkt 1fpkt"];
3330--3897[label="1;8pkt 8fpkt"];
3338--3388[label="0.238095;5pkt 5fpkt"];
3338--5227[label="0.952381;20pkt 20fpkt"];
3338--6967[label="1;21pkt 21fpkt"];
3338--7931[label="0.952381;20pkt 20fpkt"];
3406--5966[label="1;1pkt 1fpkt"];
3406--7369[label="1;1pkt 1fpkt"];
3421--5976[label="1;15pkt 15fpkt"];
3477--5997[label="1;9pkt 9fpkt"];
3528--6027[label="1;12pkt 12fpkt"];
3545--6038[label="1;4pkt 4fpkt"];
3545--7397[label="1;4pkt 4fpkt"];
3738--6141[label="1;6pkt 6fpkt"];
3738--7452[label="1;6pkt 6fpkt"];
3756--6149[label="1;22pkt 22fpkt"];
3761--6151[label="1;19pkt 19fpkt"];
3828--6182[label="1;20pkt 20fpkt"];
3828--7480[label="1;20pkt 20fpkt"];
3881--6214[label="1;20pkt 20fpkt"];
3881--7494[label="1;19pkt 19fpkt"];
3896--6221[label="1;16pkt 16fpkt"];
3981--6265[label="1;13pkt 13fpkt"];
3981--7524[label="1;13pkt 13fpkt"];
3983--6266[label="1;27pkt 27fpkt"];
3983--7525[label="1;27pkt 27fpkt"];
4169--6366[label="1;37pkt 37fpkt"];
4169--7585[label="1;37pkt 37fpkt"];
4186--6376[label="1;3pkt 3fpkt"];
4186--7592[label="1;3pkt 3fpkt"];
4241--6403[label="1;20pkt 20fpkt"];
4243--6405[label="1;4pkt 4fpkt"];
4243--7611[label="1;4pkt 4fpkt"];
4275--6421[label="1;17pkt 17fpkt"];
4275--7623[label="1;17pkt 17fpkt"];
4317--6447[label="1;31pkt 31fpkt"];
4353--6464[label="1;18pkt 18fpkt"];
4353--7645[label="1;18pkt 18fpkt"];
4373--6479[label="1;7pkt 7fpkt"];
4522--6564[label="1;88pkt 88fpkt"];
4522--7705[label="1;88pkt 88fpkt"];
4580--6595[label="1;6pkt 6fpkt"];
4598--6603[label="1;7pkt 7fpkt"];
4598--7726[label="1;7pkt 7fpkt"];
4653--6637[label="1;19pkt 19fpkt"];
4653--7744[label="1;19pkt 19fpkt"];
4663--6645[label="1;42pkt 42fpkt"];
4721--6676[label="1;20pkt 20fpkt"];
4722--6677[label="1;6pkt 6fpkt"];
4722--7766[label="1;5pkt 5fpkt"];
4749--6692[label="1;20pkt 20fpkt"];
4776--6709[label="1;16pkt 16fpkt"];
4776--7787[label="1;15pkt 15fpkt"];
4878--6760[label="1;3pkt 3fpkt"];
4878--7810[label="1;3pkt 3fpkt"];
4914--6782[label="1;48pkt 48fpkt"];
4932--6795[label="1;27pkt 27fpkt"];
4932--7832[label="1;27pkt 27fpkt"];
4937--6799[label="1;56pkt 56fpkt"];
4937--7835[label="1;56pkt 56fpkt"];
5002--6843[label="1;177pkt 177fpkt"];
5024--6856[label="1;27pkt 27fpkt"];
5034--6860[label="1;32pkt 32fpkt"];
5050--6869[label="1;31pkt 31fpkt"];
5050--7870[label="1;32pkt 32fpkt"];
5079--6883[label="1;8pkt 8fpkt"];
5145--6920[label="1;3pkt 3fpkt"];
5145--7901[label="1;2pkt 2fpkt"];
5227--6967[label="1;24pkt 24fpkt"];
5227--7931[label="1;24pkt 24fpkt"];
5249--6978[label="1;61pkt 61fpkt"];
5249--7937[label="1;61pkt 61fpkt"];
5251--6980[label="1;199pkt 199fpkt"];
5275--6993[label="1;1pkt 1fpkt"];
5275--7946[label="1;2pkt 2fpkt"];
5284--7000[label="1;23pkt 23fpkt"];
5284--7950[label="1;23pkt 23fpkt"];
5285--7001[label="1;4pkt 4fpkt"];
5297--7006[label="1;1330pkt 1330fpkt"];
5297--7952[label="1;1330pkt 1330fpkt"];
5308--7012[label="1;211pkt 211fpkt"];
5308--7956[label="1;211pkt 211fpkt"];
5326--7023[label="1;49pkt 49fpkt"];
5326--7965[label="1;49pkt 49fpkt"];
5352--7041[label="1;70pkt 70fpkt"];
5352--7974[label="1;69pkt 69fpkt"];
5416--7082[label="1;13pkt 13fpkt"];
5416--8000[label="1;14pkt 14fpkt"];
5418--7083[label="1;21pkt 21fpkt"];
5448--7098[label="1;13pkt 13fpkt"];
5450--7099[label="1;4pkt 4fpkt"];
5450--8007[label="1;4pkt 4fpkt"];
5453--7100[label="1;27pkt 27fpkt"];
5453--8008[label="1;26pkt 26fpkt"];
5479--7112[label="1;5pkt 5fpkt"];
5483--7114[label="1;99pkt 99fpkt"];
5483--8016[label="1;99pkt 99fpkt"];
5487--7117[label="1;2pkt 2fpkt"];
5487--8017[label="1;1pkt 1fpkt"];
5491--7120[label="1;17pkt 17fpkt"];
5491--8020[label="1;18pkt 18fpkt"];
5500--7123[label="1;21pkt 21fpkt"];
5500--8021[label="1;21pkt 21fpkt"];
5591--7164[label="1;5pkt 5fpkt"];
5637--7188[label="1;4pkt 4fpkt"];
5642--7190[label="1;68pkt 68fpkt"];
5642--8066[label="1;67pkt 67fpkt"];
5701--7219[label="1;37pkt 37fpkt"];
5737--7235[label="1;62pkt 62fpkt"];
5737--8093[label="1;63pkt 63fpkt"];
5756--7246[label="1;11pkt 11fpkt"];
5756--8102[label="1;11pkt 11fpkt"];
5815--7278[label="1;53pkt 53fpkt"];
5836--7289[label="1;64pkt 64fpkt"];
5836--8122[label="1;64pkt 64fpkt"];
5840--7293[label="1;11pkt 11fpkt"];
5874--7313[label="1;4pkt 4fpkt"];
5905--7332[label="1;27pkt 27fpkt"];
5905--8142[label="1;27pkt 27fpkt"];
5966--7369[label="1;1pkt 1fpkt"];
6038--7397[label="1;5pkt 5fpkt"];
6141--7452[label="1;7pkt 7fpkt"];
6182--7480[label="1;20pkt 20fpkt"];
6214--7494[label="1;19pkt 19fpkt"];
6265--7524[label="1;13pkt 13fpkt"];
6266--7525[label="1;27pkt 27fpkt"];
6366--7585[label="1;37pkt 37fpkt"];
6376--7592[label="1;3pkt 3fpkt"];
6405--7611[label="1;4pkt 4fpkt"];
6421--7623[label="1;17pkt 17fpkt"];
6464--7645[label="1;18pkt 18fpkt"];
6564--7705[label="1;88pkt 88fpkt"];
6603--7726[label="1;7pkt 7fpkt"];
6637--7744[label="1;19pkt 19fpkt"];
6677--7766[label="1;5pkt 5fpkt"];
6709--7787[label="1;15pkt 15fpkt"];
6760--7810[label="1;3pkt 3fpkt"];
6795--7832[label="1;27pkt 27fpkt"];
6799--7835[label="1;56pkt 56fpkt"];
6869--7870[label="1;31pkt 31fpkt"];
6920--7901[label="1;2pkt 2fpkt"];
6952--7919[label="1;14pkt 14fpkt"];
6967--7931[label="1;24pkt 24fpkt"];
6978--7937[label="1;61pkt 61fpkt"];
6993--7946[label="1;1pkt 1fpkt"];
7000--7950[label="1;23pkt 23fpkt"];
7006--7952[label="1;1330pkt 1330fpkt"];
7012--7956[label="1;211pkt 211fpkt"];
7023--7965[label="1;49pkt 49fpkt"];
7041--7974[label="1;69pkt 69fpkt"];
7082--8000[label="1;13pkt 13fpkt"];
7099--8007[label="1;4pkt 4fpkt"];
7100--8008[label="1;26pkt 26fpkt"];
7114--8016[label="1;99pkt 99fpkt"];
7117--8017[label="1;1pkt 1fpkt"];
7120--8020[label="1;17pkt 17fpkt"];
7123--8021[label="1;21pkt 21fpkt"];
7190--8066[label="1;67pkt 67fpkt"];
7235--8093[label="1;62pkt 62fpkt"];
7246--8102[label="1;11pkt 11fpkt"];
7289--8122[label="1;64pkt 64fpkt"];
7332--8142[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.208" src_port="80"/>
      <filter dst_ip="212.79.192.209" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851288,2.08273,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
2980[label="145.222.176.188;s;71pkt 71fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.176.188:*, 24.205.172.49:80}[54.9296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9577%)&lt;BR/&gt; 1863: (4.22535%)&lt;BR/&gt; 3478: (1.40845%)&lt;BR/&gt; 33728: (0.704225%)&lt;BR/&gt; 33716: (0.704225%)&gt;];
}
2980--5344[label="1;70pkt 70fpkt"];
2980--7036[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="24.205.172.49" dst_port="80" src_ip="145.222.176.188"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.236.14.90"/>
      <from sec="1120712402" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
1983[label="161.99.40.181;s;19pkt 19fpkt", shape=diamond, color=yellow];
2063[label="198.230.7.94;d;2pkt 2fpkt", shape=diamond, color=yellow];
5279[label="161.99.40.181;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6997[label="161.99.40.181;19pkt 19fpkt", shape=invtriangle, color=brown];
7949[label="161.99.40.181;19pkt 19fpkt", shape=invhouse, color=bisque];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.40.181:*, 198.230.21.145:80}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3077%)&lt;BR/&gt; 110: (7.05128%)&lt;BR/&gt; 2827: (3.20513%)&lt;BR/&gt; 2823: (3.20513%)&lt;BR/&gt; 2847: (2.5641%)&gt;];
}
1983--2063[label="1;2pkt 2fpkt"];
1983--2158[label="0.0588235;1pkt 1fpkt"];
1983--5279[label="0.947368;18pkt 18fpkt"];
1983--6997[label="0.947368;18pkt 18fpkt"];
1983--7949[label="0.947368;18pkt 18fpkt"];
2063--5279[label="1;2pkt 2fpkt"];
2063--6997[label="1;2pkt 2fpkt"];
2063--7949[label="1;2pkt 2fpkt"];
5279--6997[label="1;19pkt 19fpkt"];
5279--7949[label="1;19pkt 19fpkt"];
6997--7949[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="198.230.21.145" dst_port="80" src_ip="161.99.40.181"/>
    </slice>
    <from sec="1120712429" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
803[label="209.174.90.246;d;27pkt 27fpkt", shape=diamond, color=yellow];
2175[label="145.223.55.30;s;94pkt 94fpkt", shape=diamond, color=yellow];
4450[label="145.223.61.97;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.55.30:*, *:25}[65.3543%]&lt;BR/&gt;{*:*, 209.174.90.246:80}[21.2598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.8788%)&lt;BR/&gt; 80: (12.1212%)&lt;BR/&gt; 46238: (0.757576%)&lt;BR/&gt; 46237: (0.757576%)&lt;BR/&gt; 35124: (0.757576%)&gt;];
}
803--2162[label="0.777778;21pkt 21fpkt"];
803--2175[label="0.0740741;2pkt 2fpkt"];
803--3175[label="0.777778;21pkt 21fpkt"];
803--3809[label="0.777778;21pkt 21fpkt"];
803--4450[label="0.272727;3pkt 3fpkt"];
803--6175[label="0.777778;21pkt 21fpkt"];
803--7474[label="0.777778;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="145.223.55.30"/>
      <filter dst_ip="209.174.90.246" dst_port="80"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.177.195.231"/>
      <from sec="1120712403" usec="0"/>
      <to sec="1120713227" usec="0"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2171[label="166.59.158.184;d;7pkt 7fpkt", shape=diamond, color=yellow];
2172[label="113.172.74.209;s;7pkt 7fpkt", shape=diamond, color=yellow];
5553[label="113.172.74.209;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7146[label="113.172.74.209;6pkt 6fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{113.172.74.209:*, 166.59.158.184:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2067: (7.69231%)&lt;BR/&gt; 1044: (7.69231%)&lt;BR/&gt; 1042: (7.69231%)&lt;BR/&gt; 1029: (7.69231%)&gt;];
}
2171--2172[label="1;7pkt 7fpkt"];
2171--3384[label="0.714286;5pkt 5fpkt"];
2171--5553[label="1;6pkt 6fpkt"];
2171--7146[label="1;6pkt 6fpkt"];
2172--3384[label="0.714286;5pkt 5fpkt"];
2172--5553[label="1;6pkt 6fpkt"];
2172--7146[label="1;6pkt 6fpkt"];
5553--7146[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.158.184" dst_port="53" src_ip="113.172.74.209"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
915[label="197.16.114.249;d;34pkt 34fpkt", shape=diamond, color=yellow];
2196[label="145.223.32.172;s;64pkt 64fpkt", shape=diamond, color=yellow];
5176[label="145.223.32.170;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.32.172:80, 144.78.19.40:*}[37.6238%]&lt;BR/&gt;{*:80, 197.16.114.249:*}[33.6634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4362: (0.943396%)&lt;BR/&gt; 4361: (0.943396%)&lt;BR/&gt; 4359: (0.943396%)&lt;BR/&gt; 4351: (0.943396%)&gt;];
}
915--2196[label="0.117647;4pkt 4fpkt"];
915--5176[label="0.125;1pkt 1fpkt"];
2196--2540[label="0.1;1pkt 1fpkt"];
2196--3248[label="0.111111;1pkt 1fpkt"];
2196--3388[label="0.078125;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="197.16.114.249" src_port="80"/>
      <filter dst_ip="144.78.19.40" src_ip="145.223.32.172" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
2262[label="194.21.135.24;d;129pkt 129fpkt", shape=diamond, color=yellow];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.109.67:*, 194.21.135.24:80}[89.1473%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5736%)&lt;BR/&gt; 41141: (0.387597%)&lt;BR/&gt; 41140: (0.387597%)&lt;BR/&gt; 41139: (0.387597%)&lt;BR/&gt; 41138: (0.387597%)&gt;];
}
2262--4141[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="194.21.135.24" dst_port="80" src_ip="149.177.109.67"/>
    </slice>
    <from sec="1120712791" usec="0"/>
    <to sec="1120713179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
2074[label="145.223.54.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
2287[label="200.128.45.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
5711[label="145.223.54.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7222[label="145.223.54.223;1pkt 1fpkt", shape=invtriangle, color=brown];
8085[label="145.223.54.223;1pkt 1fpkt", shape=invhouse, color=bisque];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.54.223:2977, 200.128.45.132:80}[50%]&lt;BR/&gt;{145.223.54.223:2978, 200.128.45.132:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2978: (35.7143%)&lt;BR/&gt; 2977: (14.2857%)&gt;];
}
2074--2287[label="1;2pkt 2fpkt"];
2074--5711[label="1;1pkt 1fpkt"];
2074--7222[label="1;1pkt 1fpkt"];
2074--8085[label="1;1pkt 1fpkt"];
2287--5711[label="1;1pkt 1fpkt"];
2287--7222[label="1;1pkt 1fpkt"];
2287--8085[label="1;1pkt 1fpkt"];
5711--7222[label="1;1pkt 1fpkt"];
5711--8085[label="1;1pkt 1fpkt"];
7222--8085[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.128.45.132" dst_port="80" src_ip="145.223.54.223" src_port="2978"/>
      <filter dst_ip="200.128.45.132" dst_port="80" src_ip="145.223.54.223" src_port="2977"/>
    </slice>
    <from sec="1120712951" usec="0"/>
    <to sec="1120712982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.86.166.13"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713228" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
171[label="212.79.192.174;d;699pkt 699fpkt", shape=diamond, color=yellow];
214[label="131.186.132.114;d;4pkt 4fpkt", shape=diamond, color=yellow];
783[label="194.253.146.142;s;96pkt 96fpkt", shape=diamond, color=yellow];
918[label="194.165.63.197;s;62pkt 62fpkt", shape=diamond, color=yellow];
1184[label="212.23.18.124;s;3pkt 3fpkt", shape=diamond, color=yellow];
1309[label="194.84.0.169;s;89pkt 89fpkt", shape=diamond, color=yellow];
1450[label="3.1.162.64;s;20pkt 20fpkt", shape=diamond, color=yellow];
1479[label="29.117.233.134;s;28pkt 28fpkt", shape=diamond, color=yellow];
1502[label="28.153.228.158;s;387pkt 387fpkt", shape=diamond, color=yellow];
1652[label="210.80.182.105;s;137pkt 137fpkt", shape=diamond, color=yellow];
2279[label="26.128.77.202;s;5pkt 5fpkt", shape=diamond, color=yellow];
2308[label="194.236.14.112;s;12pkt 12fpkt", shape=diamond, color=yellow];
2562[label="212.187.224.22;s;11pkt 11fpkt", shape=diamond, color=yellow];
2889[label="24.194.150.48;s;120pkt 120fpkt", shape=hexagon, color=black];
3001[label="194.84.0.169;s;63pkt 63fpkt", shape=hexagon, color=black];
3070[label="210.80.182.105;s;110pkt 110fpkt", shape=hexagon, color=black];
3191[label="3.1.162.64;s;20pkt 20fpkt", shape=hexagon, color=black];
3193[label="28.153.249.174;s;22pkt 22fpkt", shape=hexagon, color=black];
3341[label="28.153.243.34;s;12pkt 12fpkt", shape=hexagon, color=black];
3561[label="208.35.148.14;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3650[label="212.238.194.20;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3670[label="212.187.224.22;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3801[label="28.153.243.34;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3871[label="204.109.18.41;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3951[label="203.54.185.48;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3988[label="24.194.150.52;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4041[label="24.194.150.57;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4107[label="212.17.237.64;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4202[label="212.227.6.73;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4233[label="194.236.14.75;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4429[label="194.236.14.95;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4468[label="194.84.3.99;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4534[label="210.80.182.105;136pkt 136fpkt", shape=pentagon, color=darkviolet];
4545[label="210.80.182.106;134pkt 134fpkt", shape=pentagon, color=darkviolet];
4574[label="194.84.3.109;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4640[label="27.135.31.117;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4688[label="205.33.233.122;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4809[label="29.117.233.134;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4846[label="28.153.34.139;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4884[label="194.253.146.142;124pkt 124fpkt", shape=pentagon, color=darkviolet];
4997[label="28.153.240.152;105pkt 105fpkt", shape=pentagon, color=darkviolet];
5049[label="28.153.228.158;419pkt 419fpkt", shape=pentagon, color=darkviolet];
5163[label="194.84.0.169;90pkt 90fpkt", shape=pentagon, color=darkviolet];
5175[label="194.84.9.170;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5211[label="28.153.34.174;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5362[label="28.153.252.190;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5485[label="26.128.77.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5658[label="212.187.40.217;65pkt 65fpkt", shape=pentagon, color=darkviolet];
5877[label="208.35.149.243;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6102[label="212.187.224.22;25pkt 25fpkt", shape=invtriangle, color=brown];
6208[label="204.109.18.41;13pkt 13fpkt", shape=invtriangle, color=brown];
6250[label="203.54.185.48;9pkt 9fpkt", shape=invtriangle, color=brown];
6385[label="212.227.6.73;34pkt 34fpkt", shape=invtriangle, color=brown];
6576[label="210.80.182.106;133pkt 133fpkt", shape=invtriangle, color=brown];
6631[label="27.135.31.117;26pkt 26fpkt", shape=invtriangle, color=brown];
6658[label="205.33.233.122;31pkt 31fpkt", shape=invtriangle, color=brown];
6763[label="194.253.146.142;124pkt 124fpkt", shape=invtriangle, color=brown];
6868[label="28.153.228.158;419pkt 419fpkt", shape=invtriangle, color=brown];
6935[label="194.84.0.169;91pkt 91fpkt", shape=invtriangle, color=brown];
6959[label="28.153.34.174;3pkt 3fpkt", shape=invtriangle, color=brown];
7045[label="198.219.62.191;1pkt 1fpkt", shape=invtriangle, color=brown];
7115[label="26.128.77.202;4pkt 4fpkt", shape=invtriangle, color=brown];
7316[label="208.35.149.243;3pkt 3fpkt", shape=invtriangle, color=brown];
7518[label="203.54.185.48;9pkt 9fpkt", shape=invhouse, color=bisque];
7713[label="210.80.182.106;134pkt 134fpkt", shape=invhouse, color=bisque];
7740[label="27.135.31.117;27pkt 27fpkt", shape=invhouse, color=bisque];
7812[label="194.253.146.142;125pkt 125fpkt", shape=invhouse, color=bisque];
7869[label="28.153.228.158;419pkt 419fpkt", shape=invhouse, color=bisque];
7925[label="28.153.34.174;3pkt 3fpkt", shape=invhouse, color=bisque];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.79.192.174:*}[33.5357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5013%)&lt;BR/&gt; 443: (4.86917%)&lt;BR/&gt; 5050: (0.245918%)&lt;BR/&gt; 0: (0.118041%)&lt;BR/&gt; 4155: (0.0885304%)&gt;];
}
171--271[label="0.0909091;2pkt 2fpkt"];
171--550[label="0.0625;1pkt 1fpkt"];
171--552[label="0.00143062;1pkt 1fpkt"];
171--749[label="0.0437956;6pkt 6fpkt"];
171--783[label="0.09375;9pkt 9fpkt"];
171--918[label="0.016129;1pkt 1fpkt"];
171--1129[label="0.0052356;1pkt 1fpkt"];
171--1184[label="1;3pkt 3fpkt"];
171--1218[label="1;6pkt 6fpkt"];
171--1297[label="0.00257732;1pkt 1fpkt"];
171--1309[label="0.0337079;3pkt 3fpkt"];
171--1450[label="0.45;9pkt 9fpkt"];
171--1479[label="1;28pkt 28fpkt"];
171--1502[label="0.160207;62pkt 62fpkt"];
171--1652[label="0.218978;30pkt 30fpkt"];
171--2241[label="0.310345;9pkt 9fpkt"];
171--2246[label="0.25;2pkt 2fpkt"];
171--2259[label="0.00579151;3pkt 3fpkt"];
171--2279[label="1;5pkt 5fpkt"];
171--2308[label="0.166667;2pkt 2fpkt"];
171--2422[label="0.0408163;4pkt 4fpkt"];
171--2562[label="0.636364;7pkt 7fpkt"];
171--2889[label="0.05;6pkt 6fpkt"];
171--3001[label="0.015873;1pkt 1fpkt"];
171--3024[label="0.0909091;1pkt 1fpkt"];
171--3070[label="0.172727;19pkt 19fpkt"];
171--3191[label="0.45;9pkt 9fpkt"];
171--3193[label="0.409091;9pkt 9fpkt"];
171--3257[label="0.25;2pkt 2fpkt"];
171--3341[label="0.0833333;1pkt 1fpkt"];
171--3388[label="0.074392;52pkt 52fpkt"];
171--3561[label="0.333333;1pkt 1fpkt"];
171--3598[label="0.0833333;2pkt 2fpkt"];
171--3650[label="0.956522;22pkt 22fpkt"];
171--3670[label="0.269231;7pkt 7fpkt"];
171--3801[label="0.030303;1pkt 1fpkt"];
171--3871[label="0.166667;2pkt 2fpkt"];
171--3951[label="0.111111;1pkt 1fpkt"];
171--3988[label="0.04;1pkt 1fpkt"];
171--4041[label="0.142857;4pkt 4fpkt"];
171--4086[label="0.00473934;3pkt 3fpkt"];
171--4107[label="0.666667;4pkt 4fpkt"];
171--4202[label="0.714286;25pkt 25fpkt"];
171--4233[label="0.0625;1pkt 1fpkt"];
171--4429[label="0.166667;1pkt 1fpkt"];
171--4468[label="0.217391;15pkt 15fpkt"];
171--4534[label="0.220588;30pkt 30fpkt"];
171--4545[label="0.126866;17pkt 17fpkt"];
171--4574[label="0.590909;26pkt 26fpkt"];
171--4592[label="0.00143062;1pkt 1fpkt"];
171--4640[label="0.538462;14pkt 14fpkt"];
171--4688[label="0.935484;29pkt 29fpkt"];
171--4742[label="0.00319489;1pkt 1fpkt"];
171--4809[label="0.966667;29pkt 29fpkt"];
171--4846[label="0.6;3pkt 3fpkt"];
171--4884[label="0.0645161;8pkt 8fpkt"];
171--4997[label="0.0380952;4pkt 4fpkt"];
171--5049[label="0.147971;62pkt 62fpkt"];
171--5163[label="0.0333333;3pkt 3fpkt"];
171--5175[label="0.190476;4pkt 4fpkt"];
171--5211[label="0.333333;1pkt 1fpkt"];
171--5251[label="0.005;1pkt 1fpkt"];
171--5362[label="0.0526316;1pkt 1fpkt"];
171--5419[label="1;7pkt 7fpkt"];
171--5485[label="1;4pkt 4fpkt"];
171--5633[label="0.00239234;1pkt 1fpkt"];
171--5658[label="0.0153846;1pkt 1fpkt"];
171--5877[label="0.666667;2pkt 2fpkt"];
171--6102[label="0.24;6pkt 6fpkt"];
171--6208[label="0.230769;3pkt 3fpkt"];
171--6250[label="0.111111;1pkt 1fpkt"];
171--6385[label="0.705882;24pkt 24fpkt"];
171--6576[label="0.12782;17pkt 17fpkt"];
171--6631[label="0.538462;14pkt 14fpkt"];
171--6658[label="0.935484;29pkt 29fpkt"];
171--6688[label="0.00318471;1pkt 1fpkt"];
171--6763[label="0.0645161;8pkt 8fpkt"];
171--6868[label="0.147971;62pkt 62fpkt"];
171--6935[label="0.032967;3pkt 3fpkt"];
171--6959[label="0.333333;1pkt 1fpkt"];
171--6980[label="0.00502513;1pkt 1fpkt"];
171--7115[label="1;4pkt 4fpkt"];
171--7316[label="0.666667;2pkt 2fpkt"];
171--7518[label="0.111111;1pkt 1fpkt"];
171--7713[label="0.126866;17pkt 17fpkt"];
171--7740[label="0.518519;14pkt 14fpkt"];
171--7773[label="0.00318471;1pkt 1fpkt"];
171--7812[label="0.072;9pkt 9fpkt"];
171--7869[label="0.147971;62pkt 62fpkt"];
171--7925[label="0.333333;1pkt 1fpkt"];
214--215[label="1;1pkt 1fpkt"];
214--2925[label="1;1pkt 1fpkt"];
214--3951[label="0.25;1pkt 1fpkt"];
214--6250[label="0.25;1pkt 1fpkt"];
214--7045[label="1;1pkt 1fpkt"];
214--7518[label="0.25;1pkt 1fpkt"];
783--4884[label="0.989583;95pkt 95fpkt"];
783--6763[label="0.989583;95pkt 95fpkt"];
783--7812[label="1;96pkt 96fpkt"];
918--1635[label="0.0285714;1pkt 1fpkt"];
918--2519[label="0.0952381;2pkt 2fpkt"];
918--3388[label="0.177419;11pkt 11fpkt"];
1309--3001[label="1;63pkt 63fpkt"];
1309--3388[label="0.0561798;5pkt 5fpkt"];
1309--5163[label="0.988764;88pkt 88fpkt"];
1309--6935[label="1;89pkt 89fpkt"];
1450--3191[label="1;20pkt 20fpkt"];
1450--3388[label="0.15;3pkt 3fpkt"];
1479--4809[label="1;28pkt 28fpkt"];
1502--3388[label="0.100775;39pkt 39fpkt"];
1502--5049[label="1;387pkt 387fpkt"];
1502--6868[label="1;387pkt 387fpkt"];
1502--7869[label="1;387pkt 387fpkt"];
1652--3070[label="1;110pkt 110fpkt"];
1652--3388[label="0.080292;11pkt 11fpkt"];
1652--4534[label="1;136pkt 136fpkt"];
2279--5485[label="1;4pkt 4fpkt"];
2279--7115[label="1;4pkt 4fpkt"];
2562--3388[label="0.454545;5pkt 5fpkt"];
2562--3670[label="1;11pkt 11fpkt"];
2562--6102[label="0.909091;10pkt 10fpkt"];
2889--3136[label="0.961538;25pkt 25fpkt"];
2889--3388[label="0.025;3pkt 3fpkt"];
3001--5163[label="0.984127;62pkt 62fpkt"];
3001--6935[label="1;63pkt 63fpkt"];
3070--4534[label="0.990909;109pkt 109fpkt"];
3191--3388[label="0.15;3pkt 3fpkt"];
3193--3388[label="0.136364;3pkt 3fpkt"];
3341--3388[label="0.25;3pkt 3fpkt"];
3341--3801[label="0.916667;11pkt 11fpkt"];
3670--6102[label="1;25pkt 25fpkt"];
3871--6208[label="1;12pkt 12fpkt"];
3951--6250[label="1;9pkt 9fpkt"];
3951--7518[label="1;9pkt 9fpkt"];
4202--6385[label="1;34pkt 34fpkt"];
4545--6576[label="1;133pkt 133fpkt"];
4545--7713[label="1;134pkt 134fpkt"];
4640--6631[label="1;26pkt 26fpkt"];
4640--7740[label="1;26pkt 26fpkt"];
4688--6658[label="1;31pkt 31fpkt"];
4884--6763[label="1;124pkt 124fpkt"];
4884--7812[label="1;124pkt 124fpkt"];
5049--6868[label="1;419pkt 419fpkt"];
5049--7869[label="1;419pkt 419fpkt"];
5163--6935[label="1;90pkt 90fpkt"];
5211--6959[label="1;3pkt 3fpkt"];
5211--7925[label="1;3pkt 3fpkt"];
5485--7115[label="1;4pkt 4fpkt"];
5877--7316[label="1;3pkt 3fpkt"];
6250--7518[label="1;9pkt 9fpkt"];
6576--7713[label="1;133pkt 133fpkt"];
6631--7740[label="1;26pkt 26fpkt"];
6763--7812[label="1;124pkt 124fpkt"];
6868--7869[label="1;419pkt 419fpkt"];
6959--7925[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.174" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
223[label="220.188.86.51;d;28pkt 28fpkt", shape=diamond, color=yellow];
626[label="166.59.132.69;s;31pkt 31fpkt", shape=diamond, color=yellow];
912[label="166.59.145.44;s;4pkt 4fpkt", shape=diamond, color=yellow];
1274[label="166.59.136.228;s;5pkt 5fpkt", shape=diamond, color=yellow];
1318[label="212.79.194.128;s;231pkt 231fpkt", shape=diamond, color=yellow];
1328[label="25.230.54.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1796[label="166.59.133.1;s;5pkt 5fpkt", shape=diamond, color=yellow];
1815[label="194.236.14.76;d;22pkt 22fpkt", shape=diamond, color=yellow];
1896[label="194.236.14.97;d;14pkt 14fpkt", shape=diamond, color=yellow];
2097[label="166.59.205.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
2339[label="166.59.137.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
2362[label="194.236.14.101;d;23pkt 23fpkt", shape=diamond, color=yellow];
2413[label="194.236.14.86;d;13pkt 13fpkt", shape=diamond, color=yellow];
2449[label="194.236.14.115;d;10pkt 10fpkt", shape=diamond, color=yellow];
2602[label="27.145.182.204;d;77pkt 77fpkt", shape=diamond, color=yellow];
2662[label="166.59.48.214;s;75pkt 75fpkt", shape=diamond, color=yellow];
2867[label="166.59.132.69;s;19pkt 19fpkt", shape=hexagon, color=black];
3098[label="166.59.133.1;s;3pkt 3fpkt", shape=hexagon, color=black];
3292[label="27.145.182.204;d;77pkt 77fpkt", shape=hexagon, color=black];
3409[label="166.59.238.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3417[label="166.59.133.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3504[label="166.59.238.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3546[label="166.59.238.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3887[label="166.59.195.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3905[label="166.59.145.44;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4143[label="166.59.137.67;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4152[label="145.222.9.68;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4167[label="166.59.132.69;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4648[label="166.59.130.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4744[label="212.79.194.128;246pkt 246fpkt", shape=pentagon, color=darkviolet];
4886[label="166.59.194.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5143[label="166.59.205.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5200[label="166.59.136.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5771[label="166.59.136.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5969[label="166.59.238.0;8pkt 8fpkt", shape=invtriangle, color=brown];
5973[label="166.59.133.1;4pkt 4fpkt", shape=invtriangle, color=brown];
6013[label="166.59.238.8;6pkt 6fpkt", shape=invtriangle, color=brown];
6226[label="166.59.145.44;4pkt 4fpkt", shape=invtriangle, color=brown];
6351[label="166.59.137.67;3pkt 3fpkt", shape=invtriangle, color=brown];
6364[label="166.59.132.69;31pkt 31fpkt", shape=invtriangle, color=brown];
6765[label="166.59.194.142;2pkt 2fpkt", shape=invtriangle, color=brown];
7255[label="166.59.136.228;5pkt 5fpkt", shape=invtriangle, color=brown];
7371[label="166.59.238.0;7pkt 7fpkt", shape=invhouse, color=bisque];
7372[label="166.59.133.1;4pkt 4fpkt", shape=invhouse, color=bisque];
7500[label="166.59.145.44;3pkt 3fpkt", shape=invhouse, color=bisque];
7574[label="166.59.137.67;3pkt 3fpkt", shape=invhouse, color=bisque];
7583[label="166.59.132.69;31pkt 31fpkt", shape=invhouse, color=bisque];
7813[label="166.59.194.142;2pkt 2fpkt", shape=invhouse, color=bisque];
8104[label="166.59.136.228;4pkt 4fpkt", shape=invhouse, color=bisque];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.194.128:0, *:0}[41.0299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.8191%)&lt;BR/&gt; 21: (9.48582%)&lt;BR/&gt; 5050: (4.74291%)&lt;BR/&gt; 1026: (3.5461%)&lt;BR/&gt; 53: (3.5461%)&gt;];
}
223--548[label="0.0714286;2pkt 2fpkt"];
223--626[label="0.0357143;1pkt 1fpkt"];
223--912[label="0.75;3pkt 3fpkt"];
223--1274[label="0.4;2pkt 2fpkt"];
223--1318[label="0.0357143;1pkt 1fpkt"];
223--1796[label="0.2;1pkt 1fpkt"];
223--2097[label="1;1pkt 1fpkt"];
223--2314[label="1;1pkt 1fpkt"];
223--2339[label="1;1pkt 1fpkt"];
223--2867[label="0.0526316;1pkt 1fpkt"];
223--3098[label="0.333333;1pkt 1fpkt"];
223--3276[label="1;1pkt 1fpkt"];
223--3409[label="0.5;4pkt 4fpkt"];
223--3417[label="0.2;1pkt 1fpkt"];
223--3887[label="1;1pkt 1fpkt"];
223--3905[label="0.75;3pkt 3fpkt"];
223--4143[label="0.333333;1pkt 1fpkt"];
223--4167[label="0.0357143;1pkt 1fpkt"];
223--4648[label="0.5;1pkt 1fpkt"];
223--4744[label="0.0357143;1pkt 1fpkt"];
223--5143[label="0.5;1pkt 1fpkt"];
223--5200[label="1;1pkt 1fpkt"];
223--5771[label="0.5;2pkt 2fpkt"];
223--5969[label="0.5;4pkt 4fpkt"];
223--5973[label="0.25;1pkt 1fpkt"];
223--6226[label="0.75;3pkt 3fpkt"];
223--6351[label="0.333333;1pkt 1fpkt"];
223--6364[label="0.0357143;1pkt 1fpkt"];
223--7255[label="0.4;2pkt 2fpkt"];
223--7371[label="0.571429;4pkt 4fpkt"];
223--7372[label="0.25;1pkt 1fpkt"];
223--7500[label="1;3pkt 3fpkt"];
223--7574[label="0.333333;1pkt 1fpkt"];
223--7583[label="0.0357143;1pkt 1fpkt"];
223--8104[label="0.5;2pkt 2fpkt"];
626--1328[label="1;1pkt 1fpkt"];
626--1380[label="0.0322581;1pkt 1fpkt"];
626--2598[label="0.0322581;1pkt 1fpkt"];
626--2867[label="1;19pkt 19fpkt"];
626--3318[label="0.0322581;1pkt 1fpkt"];
626--4167[label="1;31pkt 31fpkt"];
626--6364[label="0.967742;30pkt 30fpkt"];
626--7583[label="0.967742;30pkt 30fpkt"];
912--3905[label="1;4pkt 4fpkt"];
912--6226[label="1;4pkt 4fpkt"];
912--7500[label="1;3pkt 3fpkt"];
1274--2602[label="0.2;1pkt 1fpkt"];
1274--3292[label="0.2;1pkt 1fpkt"];
1274--5771[label="1;4pkt 4fpkt"];
1274--7255[label="1;5pkt 5fpkt"];
1274--8104[label="1;4pkt 4fpkt"];
1318--1333[label="0.0196078;1pkt 1fpkt"];
1318--1815[label="0.0454545;1pkt 1fpkt"];
1318--1896[label="0.0714286;1pkt 1fpkt"];
1318--1918[label="0.0434783;1pkt 1fpkt"];
1318--1944[label="0.037037;1pkt 1fpkt"];
1318--2055[label="0.5;1pkt 1fpkt"];
1318--2247[label="0.0714286;1pkt 1fpkt"];
1318--2282[label="0.025641;1pkt 1fpkt"];
1318--2323[label="0.0322581;1pkt 1fpkt"];
1318--2349[label="0.05;1pkt 1fpkt"];
1318--2362[label="0.0434783;1pkt 1fpkt"];
1318--2413[label="0.0769231;1pkt 1fpkt"];
1318--2449[label="0.1;1pkt 1fpkt"];
1318--2489[label="0.0181818;1pkt 1fpkt"];
1318--2547[label="0.0263158;1pkt 1fpkt"];
1318--2550[label="0.0263158;1pkt 1fpkt"];
1318--2776[label="0.0294118;1pkt 1fpkt"];
1318--2968[label="0.0120482;1pkt 1fpkt"];
1318--3146[label="0.5;1pkt 1fpkt"];
1318--4744[label="0.995671;230pkt 230fpkt"];
1328--2867[label="1;1pkt 1fpkt"];
1328--4167[label="1;1pkt 1fpkt"];
1328--6364[label="1;1pkt 1fpkt"];
1328--7583[label="1;1pkt 1fpkt"];
1796--2602[label="0.4;2pkt 2fpkt"];
1796--3098[label="1;3pkt 3fpkt"];
1796--3292[label="0.4;2pkt 2fpkt"];
1796--3417[label="1;5pkt 5fpkt"];
1796--5973[label="1;4pkt 4fpkt"];
1796--7372[label="1;4pkt 4fpkt"];
1815--4744[label="0.0454545;1pkt 1fpkt"];
1815--4859[label="0.1;1pkt 1fpkt"];
1815--4886[label="0.5;1pkt 1fpkt"];
1815--6752[label="0.1;1pkt 1fpkt"];
1815--6765[label="0.5;1pkt 1fpkt"];
1815--7808[label="0.1;1pkt 1fpkt"];
1815--7813[label="0.5;1pkt 1fpkt"];
1896--3546[label="0.5;1pkt 1fpkt"];
1896--4744[label="0.0714286;1pkt 1fpkt"];
2339--4143[label="1;1pkt 1fpkt"];
2339--6351[label="1;1pkt 1fpkt"];
2339--7574[label="1;1pkt 1fpkt"];
2362--3645[label="0.5;1pkt 1fpkt"];
2362--4019[label="0.0434783;1pkt 1fpkt"];
2362--4152[label="0.0434783;1pkt 1fpkt"];
2362--4744[label="0.0434783;1pkt 1fpkt"];
2362--6284[label="0.0434783;1pkt 1fpkt"];
2362--7536[label="0.0434783;1pkt 1fpkt"];
2413--3235[label="0.0769231;1pkt 1fpkt"];
2413--3429[label="0.5;1pkt 1fpkt"];
2413--4611[label="0.0769231;1pkt 1fpkt"];
2413--4744[label="0.0769231;1pkt 1fpkt"];
2449--4744[label="0.1;1pkt 1fpkt"];
2449--5143[label="0.5;1pkt 1fpkt"];
2602--2662[label="0.0133333;1pkt 1fpkt"];
2602--3098[label="0.666667;2pkt 2fpkt"];
2602--3292[label="1;77pkt 77fpkt"];
2602--3417[label="0.4;2pkt 2fpkt"];
2602--3504[label="0.5;3pkt 3fpkt"];
2602--3758[label="0.125;2pkt 2fpkt"];
2602--5973[label="0.25;1pkt 1fpkt"];
2602--6013[label="0.5;3pkt 3fpkt"];
2602--7255[label="0.2;1pkt 1fpkt"];
2602--7372[label="0.25;1pkt 1fpkt"];
2662--3292[label="0.0133333;1pkt 1fpkt"];
2867--4167[label="1;19pkt 19fpkt"];
2867--6364[label="0.947368;18pkt 18fpkt"];
2867--7583[label="0.947368;18pkt 18fpkt"];
3098--3292[label="0.666667;2pkt 2fpkt"];
3098--3417[label="1;3pkt 3fpkt"];
3098--5973[label="0.666667;2pkt 2fpkt"];
3098--7372[label="0.666667;2pkt 2fpkt"];
3292--3417[label="0.4;2pkt 2fpkt"];
3292--3504[label="0.5;3pkt 3fpkt"];
3292--3758[label="0.125;2pkt 2fpkt"];
3292--5973[label="0.25;1pkt 1fpkt"];
3292--6013[label="0.5;3pkt 3fpkt"];
3292--7255[label="0.2;1pkt 1fpkt"];
3292--7372[label="0.25;1pkt 1fpkt"];
3409--5969[label="1;8pkt 8fpkt"];
3409--7371[label="1;7pkt 7fpkt"];
3417--5973[label="1;4pkt 4fpkt"];
3417--7372[label="1;4pkt 4fpkt"];
3504--6013[label="1;6pkt 6fpkt"];
3905--6226[label="1;4pkt 4fpkt"];
3905--7500[label="1;3pkt 3fpkt"];
4143--6351[label="1;3pkt 3fpkt"];
4143--7574[label="1;3pkt 3fpkt"];
4167--6364[label="1;31pkt 31fpkt"];
4167--7583[label="1;31pkt 31fpkt"];
4886--6765[label="1;2pkt 2fpkt"];
4886--7813[label="1;2pkt 2fpkt"];
5771--7255[label="1;4pkt 4fpkt"];
5771--8104[label="1;4pkt 4fpkt"];
5969--7371[label="1;7pkt 7fpkt"];
5973--7372[label="1;4pkt 4fpkt"];
6226--7500[label="1;3pkt 3fpkt"];
6351--7574[label="1;3pkt 3fpkt"];
6364--7583[label="1;31pkt 31fpkt"];
6765--7813[label="1;2pkt 2fpkt"];
7255--8104[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="212.79.194.128"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
2320[label="213.17.224.98;s;403pkt 403fpkt", shape=diamond, color=yellow];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.224.98:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2320--2599[label="0.00487805;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.224.98"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
1534[label="145.223.251.200;d;40pkt 40fpkt", shape=diamond, color=yellow];
2322[label="192.247.180.241;s;19pkt 19fpkt", shape=diamond, color=yellow];
5864[label="192.247.180.241;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7309[label="192.247.180.241;20pkt 20fpkt", shape=invtriangle, color=brown];
8130[label="192.247.180.241;20pkt 20fpkt", shape=invhouse, color=bisque];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.247.180.241:80, 145.223.251.200:*}[50%]&lt;BR/&gt;{84.110.41.115:80, 145.223.251.200:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4016: (2.10084%)&lt;BR/&gt; 4013: (2.10084%)&lt;BR/&gt; 4012: (2.10084%)&lt;BR/&gt; 4006: (2.10084%)&gt;];
}
1534--2322[label="1;19pkt 19fpkt"];
1534--3388[label="0.05;2pkt 2fpkt"];
1534--5864[label="1;20pkt 20fpkt"];
1534--7309[label="1;20pkt 20fpkt"];
1534--8130[label="1;20pkt 20fpkt"];
2322--3388[label="0.105263;2pkt 2fpkt"];
2322--5864[label="1;19pkt 19fpkt"];
2322--7309[label="1;19pkt 19fpkt"];
2322--8130[label="1;19pkt 19fpkt"];
5864--7309[label="1;20pkt 20fpkt"];
5864--8130[label="1;20pkt 20fpkt"];
7309--8130[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.251.200" src_ip="192.247.180.241" src_port="80"/>
      <filter dst_ip="145.223.251.200" src_ip="84.110.41.115" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.212.176.214"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.99.130.201"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.236.14.100"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
2342[label="194.236.14.123;s;18pkt 18fpkt", shape=diamond, color=yellow];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.123:5050, *:*}[72.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (36.1111%)&lt;BR/&gt; 23: (5.55556%)&lt;BR/&gt; 20: (5.55556%)&lt;BR/&gt; 63208: (2.77778%)&lt;BR/&gt; 2321: (2.77778%)&gt;];
}
2342--4690[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.123" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
1644[label="145.222.1.39;s;148pkt 148fpkt", shape=diamond, color=yellow];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.1.39:*, 194.236.12.183:80}[96.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59408: (0.337838%)&lt;BR/&gt; 59407: (0.337838%)&lt;BR/&gt; 59405: (0.337838%)&lt;BR/&gt; 59403: (0.337838%)&gt;];
}
1644--2421[label="0.00892857;1pkt 1fpkt"];
1644--2931[label="0.439189;65pkt 65fpkt"];
1644--3845[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.12.183" dst_port="80" src_ip="145.222.1.39"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1320[label="149.177.67.209;d;448pkt 448fpkt", shape=diamond, color=yellow];
1324[label="149.177.67.73;d;95pkt 95fpkt", shape=diamond, color=yellow];
1341[label="145.223.196.154;d;469pkt 469fpkt", shape=diamond, color=yellow];
1649[label="149.177.113.20;d;248pkt 248fpkt", shape=diamond, color=yellow];
2364[label="212.25.197.57;s;103pkt 103fpkt", shape=diamond, color=yellow];
3740[label="84.129.188.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3876[label="193.198.180.41;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4033[label="212.25.197.56;49pkt 49fpkt", shape=pentagon, color=darkviolet];
4043[label="212.25.197.57;105pkt 105fpkt", shape=pentagon, color=darkviolet];
4155[label="222.2.52.68;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4539[label="213.76.32.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5687[label="213.64.153.220;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5699[label="213.64.153.221;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5718[label="213.64.153.223;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5755[label="213.64.153.226;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6292[label="212.25.197.56;49pkt 49fpkt", shape=invtriangle, color=brown];
6294[label="212.25.197.57;105pkt 105fpkt", shape=invtriangle, color=brown];
6358[label="222.2.52.68;26pkt 26fpkt", shape=invtriangle, color=brown];
6574[label="213.76.32.106;4pkt 4fpkt", shape=invtriangle, color=brown];
7245[label="213.64.153.226;35pkt 35fpkt", shape=invtriangle, color=brown];
7543[label="212.25.197.57;105pkt 105fpkt", shape=invhouse, color=bisque];
7560[label="212.25.197.62;47pkt 47fpkt", shape=invhouse, color=bisque];
7711[label="213.76.32.106;4pkt 4fpkt", shape=invhouse, color=bisque];
7831[label="198.248.143.146;20pkt 20fpkt", shape=invhouse, color=bisque];
8101[label="213.64.153.226;35pkt 35fpkt", shape=invhouse, color=bisque];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, *:*}[32.8442%]&lt;BR/&gt;{*:*, 149.177.67.209:*}[31.4465%]&lt;BR/&gt;{*:*, 145.223.196.154:53}[23.1307%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.2742%)&lt;BR/&gt; 9500: (7.64453%)&lt;BR/&gt; 25: (5.25561%)&lt;BR/&gt; 38584: (4.01338%)&lt;BR/&gt; 2410: (3.22504%)&gt;];
}
1320--1646[label="0.0120482;1pkt 1fpkt"];
1320--2364[label="0.126214;13pkt 13fpkt"];
1320--3384[label="0.0513393;23pkt 23fpkt"];
1320--3387[label="0.116071;52pkt 52fpkt"];
1320--3641[label="0.0454545;1pkt 1fpkt"];
1320--3883[label="0.0555556;1pkt 1fpkt"];
1320--4043[label="0.12381;13pkt 13fpkt"];
1320--4155[label="0.037037;1pkt 1fpkt"];
1320--4539[label="0.333333;1pkt 1fpkt"];
1320--5019[label="0.0357143;1pkt 1fpkt"];
1320--5335[label="0.0149254;1pkt 1fpkt"];
1320--5687[label="0.0434783;1pkt 1fpkt"];
1320--5699[label="0.0416667;1pkt 1fpkt"];
1320--5718[label="0.0454545;1pkt 1fpkt"];
1320--5755[label="0.0277778;1pkt 1fpkt"];
1320--6294[label="0.12381;13pkt 13fpkt"];
1320--6358[label="0.0384615;1pkt 1fpkt"];
1320--6574[label="0.25;1pkt 1fpkt"];
1320--6852[label="0.037037;1pkt 1fpkt"];
1320--7245[label="0.0285714;1pkt 1fpkt"];
1320--7543[label="0.12381;13pkt 13fpkt"];
1320--7711[label="0.25;1pkt 1fpkt"];
1320--8101[label="0.0285714;1pkt 1fpkt"];
1324--1456[label="0.0105263;1pkt 1fpkt"];
1324--2364[label="0.126316;12pkt 12fpkt"];
1324--3740[label="0.333333;2pkt 2fpkt"];
1324--4043[label="0.126316;12pkt 12fpkt"];
1324--4930[label="0.2;4pkt 4fpkt"];
1324--6294[label="0.126316;12pkt 12fpkt"];
1324--6793[label="0.2;4pkt 4fpkt"];
1324--7543[label="0.126316;12pkt 12fpkt"];
1324--7831[label="0.2;4pkt 4fpkt"];
1341--1646[label="0.0120482;1pkt 1fpkt"];
1341--2364[label="0.0679612;7pkt 7fpkt"];
1341--3384[label="0.0554371;26pkt 26fpkt"];
1341--3387[label="0.0916844;43pkt 43fpkt"];
1341--3641[label="0.0454545;1pkt 1fpkt"];
1341--3876[label="0.2;1pkt 1fpkt"];
1341--3883[label="0.0555556;1pkt 1fpkt"];
1341--4043[label="0.0666667;7pkt 7fpkt"];
1341--4155[label="0.037037;1pkt 1fpkt"];
1341--5019[label="0.0714286;2pkt 2fpkt"];
1341--5335[label="0.0149254;1pkt 1fpkt"];
1341--5687[label="0.0434783;1pkt 1fpkt"];
1341--5699[label="0.0416667;1pkt 1fpkt"];
1341--5718[label="0.0454545;1pkt 1fpkt"];
1341--5755[label="0.0277778;1pkt 1fpkt"];
1341--6294[label="0.0666667;7pkt 7fpkt"];
1341--6358[label="0.0384615;1pkt 1fpkt"];
1341--6852[label="0.0740741;2pkt 2fpkt"];
1341--7245[label="0.0285714;1pkt 1fpkt"];
1341--7543[label="0.0666667;7pkt 7fpkt"];
1341--8101[label="0.0285714;1pkt 1fpkt"];
1649--2167[label="0.00403226;1pkt 1fpkt"];
1649--2364[label="0.504854;52pkt 52fpkt"];
1649--3384[label="0.00806452;2pkt 2fpkt"];
1649--3387[label="0.016129;4pkt 4fpkt"];
1649--3388[label="0.0120968;3pkt 3fpkt"];
1649--4033[label="0.979592;48pkt 48fpkt"];
1649--4043[label="0.495238;52pkt 52fpkt"];
1649--4088[label="1;48pkt 48fpkt"];
1649--5199[label="0.00403226;1pkt 1fpkt"];
1649--6292[label="0.979592;48pkt 48fpkt"];
1649--6294[label="0.495238;52pkt 52fpkt"];
1649--6323[label="1;47pkt 47fpkt"];
1649--7543[label="0.495238;52pkt 52fpkt"];
1649--7560[label="1;47pkt 47fpkt"];
2364--3384[label="0.0194175;2pkt 2fpkt"];
2364--4043[label="1;103pkt 103fpkt"];
2364--6294[label="1;103pkt 103fpkt"];
2364--7543[label="1;103pkt 103fpkt"];
4033--6292[label="1;49pkt 49fpkt"];
4043--6294[label="1;105pkt 105fpkt"];
4043--7543[label="1;105pkt 105fpkt"];
4155--6358[label="1;26pkt 26fpkt"];
4539--6574[label="1;3pkt 3fpkt"];
4539--7711[label="1;3pkt 3fpkt"];
5755--7245[label="1;35pkt 35fpkt"];
5755--8101[label="1;35pkt 35fpkt"];
6294--7543[label="1;105pkt 105fpkt"];
6574--7711[label="1;4pkt 4fpkt"];
7245--8101[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.67.209"/>
      <filter src_port="53"/>
      <filter dst_ip="145.223.196.154" dst_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
2377[label="201.245.22.45;d;176pkt 176fpkt", shape=diamond, color=yellow];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 201.245.22.45:*}[98.2955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.1477%)&lt;BR/&gt; 0: (1.70455%)&lt;BR/&gt; 4321: (0.568182%)&lt;BR/&gt; 3600: (0.568182%)&lt;BR/&gt; 3333: (0.568182%)&gt;];
}
2377--4616[label="0.00568182;1pkt 1fpkt"];
2377--6614[label="0.00568182;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.245.22.45" src_port="139"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.67.175.69"/>
      <from sec="1120712402" usec="0"/>
      <to sec="1120713228" usec="0"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.153.129.213"/>
      <from sec="1120712403" usec="0"/>
      <to sec="1120713138" usec="0"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1335[label="213.17.225.187;s;369pkt 369fpkt", shape=diamond, color=yellow];
3003[label="213.17.225.187;s;250pkt 250fpkt", shape=hexagon, color=black];
5342[label="213.17.225.187;386pkt 386fpkt", shape=pentagon, color=darkviolet];
7035[label="213.17.225.187;386pkt 386fpkt", shape=invtriangle, color=brown];
7971[label="213.17.225.187;385pkt 385fpkt", shape=invhouse, color=bisque];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.225.187:62722, *:53}[90.4145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.4673%)&lt;BR/&gt; 62722: (45.1295%)&lt;BR/&gt; 0: (9.40315%)&gt;];
}
1335--1380[label="0.00854701;1pkt 1fpkt"];
1335--1834[label="0.00934579;1pkt 1fpkt"];
1335--1880[label="0.00900901;1pkt 1fpkt"];
1335--2126[label="0.00925926;1pkt 1fpkt"];
1335--2176[label="0.0102041;1pkt 1fpkt"];
1335--2415[label="0.00990099;1pkt 1fpkt"];
1335--2423[label="0.125;1pkt 1fpkt"];
1335--2424[label="0.125;1pkt 1fpkt"];
1335--2425[label="0.00909091;1pkt 1fpkt"];
1335--2435[label="0.00961538;1pkt 1fpkt"];
1335--2598[label="0.0153846;1pkt 1fpkt"];
1335--2600[label="0.00961538;1pkt 1fpkt"];
1335--2627[label="0.02;1pkt 1fpkt"];
1335--3003[label="1;250pkt 250fpkt"];
1335--3318[label="0.00854701;1pkt 1fpkt"];
1335--3384[label="0.0894309;33pkt 33fpkt"];
1335--5342[label="1;369pkt 369fpkt"];
1335--7035[label="1;369pkt 369fpkt"];
1335--7971[label="0.99729;368pkt 368fpkt"];
3003--3318[label="0.00854701;1pkt 1fpkt"];
3003--3384[label="0.132;33pkt 33fpkt"];
3003--5342[label="1;250pkt 250fpkt"];
3003--7035[label="1;250pkt 250fpkt"];
3003--7971[label="0.996;249pkt 249fpkt"];
5342--7035[label="1;386pkt 386fpkt"];
5342--7971[label="1;385pkt 385fpkt"];
7035--7971[label="1;385pkt 385fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="213.17.225.187" src_port="62722"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721581,1.96966,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
503[label="145.223.184.198;s;14pkt 14fpkt", shape=diamond, color=yellow];
2766[label="223.132.144.73;d;87pkt 87fpkt", shape=diamond, color=yellow];
3648[label="145.223.167.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7426[label="145.223.167.20;4pkt 4fpkt", shape=invhouse, color=bisque];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.48.161:*, 223.132.144.73:80}[82.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2477%)&lt;BR/&gt; 0: (3.66972%)&lt;BR/&gt; 1164: (0.917431%)&lt;BR/&gt; 1162: (0.917431%)&lt;BR/&gt; 1161: (0.917431%)&gt;];
}
503--2823[label="0.285714;4pkt 4fpkt"];
503--5447[label="1;14pkt 14fpkt"];
503--7097[label="0.928571;13pkt 13fpkt"];
2766--5071[label="1;87pkt 87fpkt"];
3648--6090[label="1;4pkt 4fpkt"];
3648--7426[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="223.132.144.73" dst_port="80" src_ip="145.223.48.161"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
209[label="131.186.176.120;d;2806pkt 2806fpkt", shape=diamond, color=yellow];
2847[label="131.186.176.120;d;1180pkt 1180fpkt", shape=hexagon, color=black];
3535[label="192.61.128.11;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3938[label="192.242.196.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4016[label="131.86.102.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4427[label="84.82.253.94;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4477[label="192.246.17.100;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4597[label="192.254.195.112;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4731[label="198.197.66.128;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5116[label="192.244.37.165;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5121[label="196.80.136.165;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5245[label="84.128.119.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5710[label="196.32.50.223;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6244[label="192.242.196.47;2pkt 2fpkt", shape=invtriangle, color=brown];
6511[label="84.82.253.94;2pkt 2fpkt", shape=invtriangle, color=brown];
6542[label="192.246.17.100;38pkt 38fpkt", shape=invtriangle, color=brown];
6602[label="192.254.195.112;32pkt 32fpkt", shape=invtriangle, color=brown];
7513[label="192.242.196.47;2pkt 2fpkt", shape=invhouse, color=bisque];
7674[label="84.82.253.94;2pkt 2fpkt", shape=invhouse, color=bisque];
7692[label="192.246.17.100;37pkt 37fpkt", shape=invhouse, color=bisque];
7725[label="192.254.195.112;33pkt 33fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 131.186.176.120:3497}[96.6585%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3497: (48.0801%)&lt;BR/&gt; 1113: (1.39312%)&lt;BR/&gt; 443: (0.18731%)&lt;BR/&gt; 0: (0.18731%)&lt;BR/&gt; 80: (0.163896%)&gt;];
}
209--2481[label="0.0434783;1pkt 1fpkt"];
209--2847[label="1;1180pkt 1180fpkt"];
209--3535[label="0.857143;6pkt 6fpkt"];
209--3938[label="1;2pkt 2fpkt"];
209--4016[label="0.5;1pkt 1fpkt"];
209--4427[label="1;2pkt 2fpkt"];
209--4477[label="0.945946;35pkt 35fpkt"];
209--4597[label="0.030303;1pkt 1fpkt"];
209--4731[label="0.214286;6pkt 6fpkt"];
209--5116[label="0.111111;1pkt 1fpkt"];
209--5121[label="1;12pkt 12fpkt"];
209--5245[label="1;1pkt 1fpkt"];
209--5710[label="1;4pkt 4fpkt"];
209--6244[label="1;2pkt 2fpkt"];
209--6511[label="1;2pkt 2fpkt"];
209--6542[label="0.921053;35pkt 35fpkt"];
209--6602[label="0.03125;1pkt 1fpkt"];
209--7513[label="1;2pkt 2fpkt"];
209--7674[label="1;2pkt 2fpkt"];
209--7692[label="0.945946;35pkt 35fpkt"];
209--7725[label="0.030303;1pkt 1fpkt"];
2847--3535[label="0.857143;6pkt 6fpkt"];
2847--4016[label="0.5;1pkt 1fpkt"];
2847--4427[label="1;2pkt 2fpkt"];
2847--4477[label="0.162162;6pkt 6fpkt"];
2847--4731[label="0.0357143;1pkt 1fpkt"];
2847--5121[label="0.916667;11pkt 11fpkt"];
2847--5245[label="1;1pkt 1fpkt"];
2847--5710[label="0.5;2pkt 2fpkt"];
2847--6511[label="1;2pkt 2fpkt"];
2847--6542[label="0.157895;6pkt 6fpkt"];
2847--7674[label="1;2pkt 2fpkt"];
2847--7692[label="0.162162;6pkt 6fpkt"];
3938--6244[label="1;2pkt 2fpkt"];
3938--7513[label="1;2pkt 2fpkt"];
4427--6511[label="1;2pkt 2fpkt"];
4427--7674[label="1;2pkt 2fpkt"];
4477--6542[label="1;37pkt 37fpkt"];
4477--7692[label="1;37pkt 37fpkt"];
4597--6602[label="1;32pkt 32fpkt"];
4597--7725[label="1;33pkt 33fpkt"];
6244--7513[label="1;2pkt 2fpkt"];
6511--7674[label="1;2pkt 2fpkt"];
6542--7692[label="1;37pkt 37fpkt"];
6602--7725[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.176.120" dst_port="3497"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.190.154.207"/>
      <from sec="1120712694" usec="0"/>
      <to sec="1120713226" usec="0"/>
    </slice>
    <from sec="1120712694" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.107.24.149"/>
      <from sec="1120712714" usec="0"/>
      <to sec="1120713223" usec="0"/>
    </slice>
    <from sec="1120712714" usec="0"/>
    <to sec="1120713223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.6.13.92"/>
      <from sec="1120712739" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120712739" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
2538[label="204.64.75.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
2539[label="149.110.193.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
3266[label="149.110.193.200;s;1pkt 1fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.193.200:1503, 204.64.75.204:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1503: (50%)&gt;];
}
2538--2539[label="1;1pkt 1fpkt"];
2538--3266[label="1;1pkt 1fpkt"];
2539--3266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.64.75.204" dst_port="1755" src_ip="149.110.193.200" src_port="1503"/>
    </slice>
    <from sec="1120712923" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
2541[label="161.64.164.7;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.64.164.7:*, 145.223.131.80:25}[55.5556%]&lt;BR/&gt;{161.64.164.7:*, 145.223.131.17:25}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3366: (5.55556%)&lt;BR/&gt; 3364: (5.55556%)&lt;BR/&gt; 3360: (5.55556%)&lt;BR/&gt; 3340: (5.55556%)&gt;];
}
2541--3484[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.131.80" dst_port="25" src_ip="161.64.164.7"/>
      <filter dst_ip="145.223.131.17" dst_port="25" src_ip="161.64.164.7"/>
    </slice>
    <from sec="1120712930" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
2543[label="149.177.244.194;s;9pkt 9fpkt", shape=diamond, color=yellow];
2552[label="155.20.84.243;d;3pkt 3fpkt", shape=diamond, color=yellow];
5405[label="149.177.244.194;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7074[label="149.177.244.194;16pkt 16fpkt", shape=invtriangle, color=brown];
7994[label="149.177.244.194;15pkt 15fpkt", shape=invhouse, color=bisque];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.244.194:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2067: (4.31034%)&lt;BR/&gt; 1984: (4.31034%)&lt;BR/&gt; 1983: (4.31034%)&lt;BR/&gt; 56128: (3.44828%)&gt;];
}
2543--2552[label="1;3pkt 3fpkt"];
2543--3388[label="0.222222;2pkt 2fpkt"];
2543--5405[label="0.888889;8pkt 8fpkt"];
2543--7074[label="1;9pkt 9fpkt"];
2543--7994[label="0.888889;8pkt 8fpkt"];
2552--3388[label="0.333333;1pkt 1fpkt"];
2552--5405[label="1;3pkt 3fpkt"];
2552--7074[label="1;3pkt 3fpkt"];
2552--7994[label="1;3pkt 3fpkt"];
5405--7074[label="1;15pkt 15fpkt"];
5405--7994[label="1;15pkt 15fpkt"];
7074--7994[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.244.194" src_port="80"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
2542[label="149.177.244.194;d;4pkt 4fpkt", shape=diamond, color=yellow];
2553[label="155.20.84.243;s;3pkt 3fpkt", shape=diamond, color=yellow];
5876[label="155.20.84.243;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7315[label="155.20.84.243;3pkt 3fpkt", shape=invtriangle, color=brown];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.173.132.104:1834, 149.177.244.194:80}[25%]&lt;BR/&gt;{155.20.84.243:1983, 149.177.244.194:80}[25%]&lt;BR/&gt;{155.20.84.243:1984, 149.177.244.194:80}[25%]&lt;BR/&gt;{155.20.84.243:2067, 149.177.244.194:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2067: (15.3846%)&lt;BR/&gt; 1984: (15.3846%)&lt;BR/&gt; 1983: (15.3846%)&lt;BR/&gt; 1834: (3.84615%)&gt;];
}
2542--2553[label="1;3pkt 3fpkt"];
2542--5876[label="1;3pkt 3fpkt"];
2542--7315[label="1;3pkt 3fpkt"];
2553--5876[label="1;3pkt 3fpkt"];
2553--7315[label="1;3pkt 3fpkt"];
5876--7315[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.244.194" dst_port="80" src_ip="155.20.84.243" src_port="2067"/>
      <filter dst_ip="149.177.244.194" dst_port="80" src_ip="155.20.84.243" src_port="1984"/>
      <filter dst_ip="149.177.244.194" dst_port="80" src_ip="155.20.84.243" src_port="1983"/>
      <filter dst_ip="149.177.244.194" dst_port="80" src_ip="195.173.132.104" src_port="1834"/>
    </slice>
    <from sec="1120712936" usec="0"/>
    <to sec="1120713197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
2573[label="193.27.130.231;s;60pkt 60fpkt", shape=diamond, color=yellow];
2574[label="145.223.72.146;d;62pkt 62fpkt", shape=diamond, color=yellow];
5787[label="193.27.130.231;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.27.130.231:80, 145.223.72.146:*}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49295: (0.828729%)&lt;BR/&gt; 49294: (0.828729%)&lt;BR/&gt; 49292: (0.828729%)&lt;BR/&gt; 49291: (0.828729%)&gt;];
}
2573--2574[label="1;60pkt 60fpkt"];
2573--3388[label="0.666667;40pkt 40fpkt"];
2573--5787[label="1;59pkt 59fpkt"];
2574--3388[label="0.677419;42pkt 42fpkt"];
2574--5787[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.72.146" src_ip="193.27.130.231" src_port="80"/>
    </slice>
    <from sec="1120713067" usec="0"/>
    <to sec="1120713170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
2557[label="131.186.134.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
2576[label="84.240.179.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.166.144.143:1863, 131.186.134.9:2870}[50%]&lt;BR/&gt;{84.240.179.227:19101, 131.186.134.9:4289}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (33.3333%)&lt;BR/&gt; 4289: (33.3333%)&lt;BR/&gt; 2870: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&gt;];
}
2557--2576[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.134.9" dst_port="4289" src_ip="84.240.179.227" src_port="19101"/>
      <filter dst_ip="131.186.134.9" dst_port="2870" src_ip="211.166.144.143" src_port="1863"/>
    </slice>
    <from sec="1120713011" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
2020[label="145.223.62.85;s;120pkt 120fpkt", shape=diamond, color=yellow];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.62.85:*, 193.201.121.11:80}[79.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3383: (0.416667%)&lt;BR/&gt; 3382: (0.416667%)&lt;BR/&gt; 3381: (0.416667%)&lt;BR/&gt; 3380: (0.416667%)&gt;];
}
2020--2621[label="0.365854;15pkt 15fpkt"];
2020--4338[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_ip="193.201.121.11" dst_port="80" src_ip="145.223.62.85"/>
    </slice>
    <from sec="1120712636" usec="0"/>
    <to sec="1120712798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="29.40.182.229"/>
      <from sec="1120712401" usec="0"/>
      <to sec="1120713227" usec="0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
423[label="213.17.229.89;s;720pkt 720fpkt", shape=diamond, color=yellow];
1322[label="201.138.239.18;d;298pkt 298fpkt", shape=diamond, color=yellow];
1659[label="27.145.167.182;d;124pkt 124fpkt", shape=diamond, color=yellow];
2626[label="204.15.179.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
2827[label="213.17.229.89;s;87pkt 87fpkt", shape=hexagon, color=black];
3071[label="27.145.167.182;d;124pkt 124fpkt", shape=hexagon, color=black];
4385[label="213.17.229.89;757pkt 757fpkt", shape=pentagon, color=darkviolet];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.229.89:80, 201.138.239.18:*}[41.4795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9758%)&lt;BR/&gt; 53: (6.86878%)&lt;BR/&gt; 3168: (4.66604%)&lt;BR/&gt; 0: (1.94221%)&lt;BR/&gt; 25: (0.757935%)&gt;];
}
423--581[label="0.8125;13pkt 13fpkt"];
423--1322[label="1;298pkt 298fpkt"];
423--1380[label="0.00854701;1pkt 1fpkt"];
423--1404[label="0.0188679;1pkt 1fpkt"];
423--1659[label="1;124pkt 124fpkt"];
423--2126[label="0.00925926;1pkt 1fpkt"];
423--2176[label="0.0102041;1pkt 1fpkt"];
423--2435[label="0.00961538;1pkt 1fpkt"];
423--2626[label="1;1pkt 1fpkt"];
423--2627[label="0.02;1pkt 1fpkt"];
423--2827[label="1;87pkt 87fpkt"];
423--3071[label="1;124pkt 124fpkt"];
423--3318[label="0.00854701;1pkt 1fpkt"];
423--3384[label="0.00972222;7pkt 7fpkt"];
423--3387[label="0.00277778;2pkt 2fpkt"];
423--3388[label="0.0513889;37pkt 37fpkt"];
423--4385[label="1;720pkt 720fpkt"];
1322--2827[label="0.574713;50pkt 50fpkt"];
1322--3388[label="0.0671141;20pkt 20fpkt"];
1322--4385[label="1;298pkt 298fpkt"];
1659--2827[label="0.0689655;6pkt 6fpkt"];
1659--3071[label="1;124pkt 124fpkt"];
1659--3388[label="0.0483871;6pkt 6fpkt"];
1659--4385[label="1;124pkt 124fpkt"];
2626--2827[label="1;1pkt 1fpkt"];
2626--4385[label="1;1pkt 1fpkt"];
2827--3071[label="0.0689655;6pkt 6fpkt"];
2827--3384[label="0.0804598;7pkt 7fpkt"];
2827--4385[label="1;87pkt 87fpkt"];
3071--3388[label="0.0483871;6pkt 6fpkt"];
3071--4385[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_ip="201.138.239.18" src_ip="213.17.229.89" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
292[label="84.10.240.145;s;9pkt 9fpkt", shape=diamond, color=yellow];
4921[label="84.10.240.145;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6786[label="84.10.240.145;9pkt 9fpkt", shape=invtriangle, color=brown];
7825[label="84.10.240.145;9pkt 9fpkt", shape=invhouse, color=bisque];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.10.240.145:9548, 161.99.70.129:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9548: (50%)&lt;BR/&gt; 5000: (5.71429%)&lt;BR/&gt; 4994: (5.71429%)&lt;BR/&gt; 4993: (5.71429%)&lt;BR/&gt; 4992: (5.71429%)&gt;];
}
292--4921[label="1;8pkt 8fpkt"];
292--6786[label="1;9pkt 9fpkt"];
292--7825[label="1;9pkt 9fpkt"];
4921--6786[label="1;8pkt 8fpkt"];
4921--7825[label="1;8pkt 8fpkt"];
6786--7825[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.70.129" src_ip="84.10.240.145" src_port="9548"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
2682[label="131.186.134.41;d;379pkt 379fpkt", shape=diamond, color=yellow];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 131.186.134.41:6881}[52.2427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (70.8443%)&lt;BR/&gt; 0: (10.0264%)&lt;BR/&gt; 49152: (1.31926%)&lt;BR/&gt; 6882: (0.923483%)&lt;BR/&gt; 26882: (0.395778%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="131.186.134.41" dst_port="6881" src_port="6881"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1325[label="161.24.24.103;s;307pkt 307fpkt", shape=diamond, color=yellow];
2743[label="205.132.48.219;d;12pkt 12fpkt", shape=diamond, color=yellow];
4509[label="161.24.24.103;318pkt 318fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.24.24.103:0, *:0}[96.6565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1325--1506[label="0.00436681;1pkt 1fpkt"];
1325--1516[label="0.00325733;1pkt 1fpkt"];
1325--2304[label="0.00485437;1pkt 1fpkt"];
1325--2599[label="0.00487805;1pkt 1fpkt"];
1325--2743[label="0.0833333;1pkt 1fpkt"];
1325--4509[label="1;307pkt 307fpkt"];
2743--4509[label="0.0833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="161.24.24.103"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1248[label="211.166.218.224;d;237pkt 237fpkt", shape=diamond, color=yellow];
1701[label="149.177.246.176;s;182pkt 182fpkt", shape=diamond, color=yellow];
3246[label="149.177.246.176;s;173pkt 173fpkt", shape=hexagon, color=black];
3296[label="149.177.67.213;s;134pkt 134fpkt", shape=hexagon, color=black];
3911[label="145.223.5.45;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4231[label="149.177.243.74;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4350[label="145.223.170.86;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4355[label="149.177.244.86;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4465[label="149.177.67.98;65pkt 65fpkt", shape=pentagon, color=darkviolet];
4550[label="149.177.238.106;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5240[label="149.177.246.176;186pkt 186fpkt", shape=pentagon, color=darkviolet];
5609[label="149.177.67.213;147pkt 147fpkt", shape=pentagon, color=darkviolet];
6231[label="145.223.5.45;23pkt 23fpkt", shape=invtriangle, color=brown];
6466[label="149.177.244.86;29pkt 29fpkt", shape=invtriangle, color=brown];
6976[label="149.177.246.176;187pkt 187fpkt", shape=invtriangle, color=brown];
7935[label="149.177.246.176;186pkt 186fpkt", shape=invhouse, color=bisque];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 211.166.218.224:*}[38.4365%]&lt;BR/&gt;{149.177.246.176:*, *:*}[30.456%]&lt;BR/&gt;{149.177.67.213:80, *:*}[23.7785%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.5057%)&lt;BR/&gt; 53: (17.7517%)&lt;BR/&gt; 43377: (15.5817%)&lt;BR/&gt; 25: (2.59192%)&lt;BR/&gt; 0: (0.602773%)&gt;];
}
1248--1701[label="0.0989011;18pkt 18fpkt"];
1248--1862[label="0.0820896;11pkt 11fpkt"];
1248--2679[label="0.588235;10pkt 10fpkt"];
1248--3246[label="0.104046;18pkt 18fpkt"];
1248--3296[label="0.0820896;11pkt 11fpkt"];
1248--3388[label="0.00421941;1pkt 1fpkt"];
1248--3911[label="0.73913;17pkt 17fpkt"];
1248--4231[label="0.103448;3pkt 3fpkt"];
1248--4350[label="0.666667;6pkt 6fpkt"];
1248--4355[label="0.827586;24pkt 24fpkt"];
1248--4465[label="0.584615;38pkt 38fpkt"];
1248--4550[label="0.8;16pkt 16fpkt"];
1248--4582[label="0.588235;10pkt 10fpkt"];
1248--4897[label="0.0666667;7pkt 7fpkt"];
1248--5240[label="0.0967742;18pkt 18fpkt"];
1248--5609[label="0.0748299;11pkt 11fpkt"];
1248--6231[label="0.73913;17pkt 17fpkt"];
1248--6466[label="0.827586;24pkt 24fpkt"];
1248--6772[label="0.0666667;7pkt 7fpkt"];
1248--6976[label="0.0962567;18pkt 18fpkt"];
1248--7935[label="0.0967742;18pkt 18fpkt"];
1701--2415[label="0.00990099;1pkt 1fpkt"];
1701--2425[label="0.00909091;1pkt 1fpkt"];
1701--2600[label="0.00961538;1pkt 1fpkt"];
1701--3246[label="1;173pkt 173fpkt"];
1701--3384[label="0.0384615;7pkt 7fpkt"];
1701--3388[label="0.0164835;3pkt 3fpkt"];
1701--5240[label="0.994505;181pkt 181fpkt"];
1701--6976[label="1;182pkt 182fpkt"];
1701--7935[label="0.994505;181pkt 181fpkt"];
3246--3384[label="0.0404624;7pkt 7fpkt"];
3246--3388[label="0.017341;3pkt 3fpkt"];
3246--5240[label="0.99422;172pkt 172fpkt"];
3246--6976[label="1;173pkt 173fpkt"];
3246--7935[label="0.99422;172pkt 172fpkt"];
3296--3388[label="0.0223881;3pkt 3fpkt"];
3296--5609[label="0.992537;133pkt 133fpkt"];
3911--6231[label="1;23pkt 23fpkt"];
4355--6466[label="1;29pkt 29fpkt"];
5240--6976[label="1;186pkt 186fpkt"];
5240--7935[label="1;186pkt 186fpkt"];
6976--7935[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.246.176"/>
      <filter src_ip="149.177.67.213" src_port="80"/>
      <filter dst_ip="211.166.218.224" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.59.128.144"/>
      <from sec="1120713007" usec="0"/>
      <to sec="1120713229" usec="0"/>
    </slice>
    <from sec="1120713007" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
2788[label="208.35.8.174;s;3pkt 3fpkt", shape=diamond, color=yellow];
2789[label="212.66.52.139;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.35.8.174:80, 212.66.52.139:33318}[33.3333%]&lt;BR/&gt;{208.35.8.174:80, 212.66.52.139:33319}[33.3333%]&lt;BR/&gt;{208.35.8.174:80, 212.66.52.139:33320}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33320: (16.6667%)&lt;BR/&gt; 33319: (16.6667%)&lt;BR/&gt; 33318: (16.6667%)&gt;];
}
2788--2789[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.52.139" dst_port="33320" src_ip="208.35.8.174" src_port="80"/>
      <filter dst_ip="212.66.52.139" dst_port="33319" src_ip="208.35.8.174" src_port="80"/>
      <filter dst_ip="212.66.52.139" dst_port="33318" src_ip="208.35.8.174" src_port="80"/>
    </slice>
    <from sec="1120713210" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
372[label="29.227.0.198;s;11pkt 11fpkt", shape=diamond, color=yellow];
1165[label="113.90.129.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
1315[label="3.57.162.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
1336[label="2.103.24.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
1416[label="29.167.107.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
1593[label="86.32.197.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
1697[label="6.205.159.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
1700[label="2.136.3.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
1702[label="3.41.34.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1940[label="3.210.166.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
1986[label="28.108.97.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
2092[label="2.128.102.23;s;3pkt 3fpkt", shape=diamond, color=yellow];
2169[label="2.67.252.36;s;1pkt 1fpkt", shape=diamond, color=yellow];
2187[label="29.245.40.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
2209[label="6.72.56.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
2336[label="2.189.114.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
2399[label="1.148.89.92;s;6pkt 6fpkt", shape=diamond, color=yellow];
2418[label="130.222.188.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
2485[label="0.196.80.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
2634[label="30.180.182.145;s;2pkt 2fpkt", shape=diamond, color=yellow];
2635[label="204.151.147.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
2649[label="3.210.79.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
2724[label="30.217.177.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.227.0.198:*, 149.68.157.180:38296}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38296: (17.8571%)&lt;BR/&gt; 14828: (4.7619%)&lt;BR/&gt; 12028: (3.57143%)&lt;BR/&gt; 6881: (3.57143%)&lt;BR/&gt; 50189: (2.38095%)&gt;];
}
372--2791[label="1;11pkt 11fpkt"];
1165--2791[label="1;1pkt 1fpkt"];
1315--2791[label="1;1pkt 1fpkt"];
1336--2791[label="1;1pkt 1fpkt"];
1416--2791[label="1;1pkt 1fpkt"];
1593--2791[label="1;1pkt 1fpkt"];
1697--2791[label="1;1pkt 1fpkt"];
1700--2791[label="1;2pkt 2fpkt"];
1702--2791[label="1;1pkt 1fpkt"];
1940--2791[label="1;1pkt 1fpkt"];
1986--2791[label="1;1pkt 1fpkt"];
2092--2791[label="1;3pkt 3fpkt"];
2169--2791[label="1;1pkt 1fpkt"];
2187--2791[label="1;1pkt 1fpkt"];
2209--2791[label="1;1pkt 1fpkt"];
2336--2791[label="1;1pkt 1fpkt"];
2399--2791[label="1;6pkt 6fpkt"];
2418--2791[label="1;1pkt 1fpkt"];
2485--2791[label="1;1pkt 1fpkt"];
2634--2791[label="1;2pkt 2fpkt"];
2635--2791[label="1;1pkt 1fpkt"];
2649--2791[label="1;1pkt 1fpkt"];
2724--2791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="38296" src_ip="29.227.0.198"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
216[label="192.61.11.250;s;2pkt 2fpkt", shape=diamond, color=yellow];
699[label="198.219.79.203;s;2pkt 2fpkt", shape=diamond, color=yellow];
771[label="84.133.7.214;s;7pkt 7fpkt", shape=diamond, color=yellow];
796[label="196.91.80.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
838[label="83.14.209.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
933[label="198.219.137.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1005[label="193.36.147.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
1552[label="197.76.3.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
1609[label="84.16.180.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
1824[label="197.86.172.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
2079[label="197.102.186.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
2606[label="25.133.150.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
5620[label="84.133.7.214;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.133.7.214:16881, 212.66.63.1:*}[30%]&lt;BR/&gt;{*:*, 212.66.63.1:27485}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (23.0769%)&lt;BR/&gt; 27485: (11.5385%)&lt;BR/&gt; 25716: (3.84615%)&lt;BR/&gt; 4572: (3.84615%)&lt;BR/&gt; 4559: (3.84615%)&gt;];
}
216--2800[label="0.5;1pkt 1fpkt"];
699--2800[label="0.5;1pkt 1fpkt"];
771--2800[label="0.142857;1pkt 1fpkt"];
771--5620[label="1;6pkt 6fpkt"];
796--2800[label="1;1pkt 1fpkt"];
838--2800[label="1;1pkt 1fpkt"];
933--2800[label="1;1pkt 1fpkt"];
1005--2800[label="1;1pkt 1fpkt"];
1552--2800[label="1;1pkt 1fpkt"];
1609--2800[label="1;1pkt 1fpkt"];
1824--2800[label="1;1pkt 1fpkt"];
2079--2800[label="1;1pkt 1fpkt"];
2606--2800[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="27485"/>
      <filter dst_ip="212.66.63.1" src_ip="84.133.7.214" src_port="16881"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
245[label="213.17.230.40;s;315pkt 315fpkt", shape=diamond, color=yellow];
588[label="29.195.242.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
592[label="214.195.219.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
598[label="86.194.145.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
616[label="28.20.72.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
661[label="213.113.177.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
700[label="24.128.130.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
705[label="25.195.33.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
765[label="193.233.138.72;d;118pkt 118fpkt", shape=diamond, color=yellow];
772[label="28.76.230.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
814[label="194.75.47.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
881[label="30.11.184.174;d;8pkt 8fpkt", shape=diamond, color=yellow];
886[label="28.122.21.145;d;76pkt 76fpkt", shape=diamond, color=yellow];
982[label="24.44.215.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
998[label="3.109.149.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
1041[label="25.153.17.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
1144[label="31.89.125.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
1168[label="85.116.246.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
1197[label="201.172.129.139;d;15pkt 15fpkt", shape=diamond, color=yellow];
1207[label="25.79.166.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
1298[label="197.66.91.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
1680[label="84.202.65.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1683[label="28.115.99.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
1765[label="29.22.139.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
1971[label="25.94.79.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
1990[label="214.241.116.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
2026[label="197.86.102.93;d;13pkt 13fpkt", shape=diamond, color=yellow];
2331[label="202.169.254.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
2491[label="214.183.120.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
2504[label="143.32.92.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2530[label="25.67.180.224;d;6pkt 6fpkt", shape=diamond, color=yellow];
2558[label="25.65.171.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
2808[label="213.17.230.40;s;140pkt 140fpkt", shape=hexagon, color=black];
2921[label="28.122.21.145;d;13pkt 13fpkt", shape=hexagon, color=black];
3050[label="25.195.33.111;d;1pkt 1fpkt", shape=hexagon, color=black];
3265[label="31.190.128.30;d;1pkt 1fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.230.40:21, 193.233.138.72:*}[35.5556%]&lt;BR/&gt;{213.17.230.40:80, 28.122.21.145:*}[24.127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.3434%)&lt;BR/&gt; 21: (17.9891%)&lt;BR/&gt; 0: (1.91518%)&lt;BR/&gt; 20: (0.410397%)&lt;BR/&gt; 4971: (0.341997%)&gt;];
}
245--588[label="1;1pkt 1fpkt"];
245--592[label="1;1pkt 1fpkt"];
245--598[label="1;1pkt 1fpkt"];
245--616[label="1;1pkt 1fpkt"];
245--661[label="1;1pkt 1fpkt"];
245--700[label="1;1pkt 1fpkt"];
245--705[label="1;1pkt 1fpkt"];
245--765[label="1;118pkt 118fpkt"];
245--772[label="1;1pkt 1fpkt"];
245--814[label="1;1pkt 1fpkt"];
245--881[label="1;8pkt 8fpkt"];
245--886[label="1;76pkt 76fpkt"];
245--982[label="1;1pkt 1fpkt"];
245--998[label="1;1pkt 1fpkt"];
245--1041[label="1;1pkt 1fpkt"];
245--1144[label="1;1pkt 1fpkt"];
245--1168[label="1;1pkt 1fpkt"];
245--1197[label="1;15pkt 15fpkt"];
245--1207[label="1;1pkt 1fpkt"];
245--1298[label="1;1pkt 1fpkt"];
245--1680[label="1;1pkt 1fpkt"];
245--1683[label="1;1pkt 1fpkt"];
245--1765[label="1;1pkt 1fpkt"];
245--1971[label="1;1pkt 1fpkt"];
245--1990[label="1;1pkt 1fpkt"];
245--2026[label="1;13pkt 13fpkt"];
245--2276[label="1;1pkt 1fpkt"];
245--2331[label="1;1pkt 1fpkt"];
245--2491[label="1;1pkt 1fpkt"];
245--2504[label="1;1pkt 1fpkt"];
245--2530[label="1;6pkt 6fpkt"];
245--2558[label="1;1pkt 1fpkt"];
245--2808[label="1;140pkt 140fpkt"];
245--2921[label="1;13pkt 13fpkt"];
245--3050[label="1;1pkt 1fpkt"];
245--3265[label="1;1pkt 1fpkt"];
245--3388[label="0.101587;32pkt 32fpkt"];
588--2808[label="1;1pkt 1fpkt"];
592--2808[label="1;1pkt 1fpkt"];
598--2808[label="1;1pkt 1fpkt"];
616--2808[label="1;1pkt 1fpkt"];
661--2808[label="1;1pkt 1fpkt"];
700--2808[label="1;1pkt 1fpkt"];
705--2808[label="1;1pkt 1fpkt"];
705--3050[label="1;1pkt 1fpkt"];
765--2808[label="0.313559;37pkt 37fpkt"];
772--2808[label="1;1pkt 1fpkt"];
814--2808[label="1;1pkt 1fpkt"];
881--2808[label="1;8pkt 8fpkt"];
886--2808[label="0.289474;22pkt 22fpkt"];
886--2921[label="1;13pkt 13fpkt"];
886--3388[label="0.0263158;2pkt 2fpkt"];
982--2808[label="1;1pkt 1fpkt"];
998--2808[label="1;1pkt 1fpkt"];
998--3388[label="1;1pkt 1fpkt"];
1041--2808[label="1;1pkt 1fpkt"];
1041--3388[label="1;1pkt 1fpkt"];
1144--2808[label="1;1pkt 1fpkt"];
1168--2808[label="1;1pkt 1fpkt"];
1168--3388[label="1;1pkt 1fpkt"];
1197--2808[label="1;15pkt 15fpkt"];
1207--2808[label="1;1pkt 1fpkt"];
1207--3388[label="1;1pkt 1fpkt"];
1298--2808[label="1;1pkt 1fpkt"];
1680--2808[label="1;1pkt 1fpkt"];
1680--3388[label="1;1pkt 1fpkt"];
1683--2808[label="1;1pkt 1fpkt"];
1683--3388[label="1;1pkt 1fpkt"];
1765--3388[label="1;1pkt 1fpkt"];
1971--2808[label="1;1pkt 1fpkt"];
1971--3388[label="1;1pkt 1fpkt"];
1990--2808[label="1;1pkt 1fpkt"];
2026--2808[label="0.461538;6pkt 6fpkt"];
2026--3388[label="0.0769231;1pkt 1fpkt"];
2331--2808[label="1;1pkt 1fpkt"];
2331--3388[label="1;1pkt 1fpkt"];
2491--2808[label="1;1pkt 1fpkt"];
2491--3388[label="1;1pkt 1fpkt"];
2504--3388[label="1;1pkt 1fpkt"];
2530--3388[label="0.5;3pkt 3fpkt"];
2558--3388[label="1;1pkt 1fpkt"];
2808--2921[label="1;13pkt 13fpkt"];
2808--3050[label="1;1pkt 1fpkt"];
2808--3388[label="0.128571;18pkt 18fpkt"];
3265--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.233.138.72" src_ip="213.17.230.40" src_port="21"/>
      <filter dst_ip="28.122.21.145" src_ip="213.17.230.40" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
316[label="200.40.185.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
2811[label="200.40.185.148;s;1pkt 1fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.40.185.148:10561, 213.17.230.40:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10561: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
316--2811[label="1;1pkt 1fpkt"];
316--4952[label="1;1pkt 1fpkt"];
2811--4952[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.230.40" dst_port="80" src_ip="200.40.185.148" src_port="10561"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
358[label="193.239.129.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
656[label="131.186.72.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
2814[label="193.239.129.147;s;1pkt 1fpkt", shape=hexagon, color=black];
4940[label="193.239.129.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.239.129.147:50062, 131.186.72.16:1650}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50062: (50%)&lt;BR/&gt; 1650: (50%)&gt;];
}
358--656[label="1;1pkt 1fpkt"];
358--2814[label="1;1pkt 1fpkt"];
358--4940[label="1;1pkt 1fpkt"];
656--2814[label="1;1pkt 1fpkt"];
656--4940[label="1;1pkt 1fpkt"];
2814--4940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.72.16" dst_port="1650" src_ip="193.239.129.147" src_port="50062"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
482[label="26.36.49.249;d;130pkt 130fpkt", shape=diamond, color=yellow];
2832[label="145.222.0.3;s;105pkt 105fpkt", shape=hexagon, color=black];
2835[label="26.36.49.249;d;130pkt 130fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.0.3:*, 26.36.49.249:80}[99.2366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.863%)&lt;BR/&gt; 1917: (0.410959%)&lt;BR/&gt; 1913: (0.410959%)&lt;BR/&gt; 1911: (0.410959%)&lt;BR/&gt; 1909: (0.410959%)&gt;];
}
482--2832[label="0.990476;104pkt 104fpkt"];
482--2835[label="1;130pkt 130fpkt"];
2832--2835[label="0.990476;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_ip="26.36.49.249" dst_port="80" src_ip="145.222.0.3"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
239[label="161.99.70.129;d;39pkt 39fpkt", shape=diamond, color=yellow];
532[label="84.150.248.212;s;25pkt 25fpkt", shape=diamond, color=yellow];
2841[label="84.150.248.212;s;10pkt 10fpkt", shape=hexagon, color=black];
5601[label="84.150.248.212;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7170[label="84.150.248.212;25pkt 25fpkt", shape=invtriangle, color=brown];
8055[label="84.150.248.212;24pkt 24fpkt", shape=invhouse, color=bisque];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.150.248.212:9548, 161.99.70.129:*}[64.1026%]&lt;BR/&gt;{84.10.240.145:9548, 161.99.70.129:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9548: (49.6622%)&lt;BR/&gt; 1039: (2.02703%)&lt;BR/&gt; 1038: (2.02703%)&lt;BR/&gt; 1037: (2.02703%)&lt;BR/&gt; 1036: (2.02703%)&gt;];
}
239--292[label="1;9pkt 9fpkt"];
239--532[label="1;25pkt 25fpkt"];
239--2672[label="0.025641;1pkt 1fpkt"];
239--2841[label="1;10pkt 10fpkt"];
239--4921[label="1;8pkt 8fpkt"];
239--5601[label="1;25pkt 25fpkt"];
239--6786[label="1;9pkt 9fpkt"];
239--7170[label="1;25pkt 25fpkt"];
239--7825[label="1;9pkt 9fpkt"];
239--8055[label="1;24pkt 24fpkt"];
532--2841[label="1;10pkt 10fpkt"];
532--5601[label="1;25pkt 25fpkt"];
532--7170[label="1;25pkt 25fpkt"];
532--8055[label="1;24pkt 24fpkt"];
2841--5601[label="1;10pkt 10fpkt"];
2841--7170[label="1;10pkt 10fpkt"];
2841--8055[label="0.9;9pkt 9fpkt"];
5601--7170[label="1;25pkt 25fpkt"];
5601--8055[label="1;24pkt 24fpkt"];
7170--8055[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.70.129" src_ip="84.150.248.212" src_port="9548"/>
      <filter dst_ip="161.99.70.129" src_ip="84.10.240.145" src_port="9548"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
544[label="194.128.35.132;s;75pkt 75fpkt", shape=diamond, color=yellow];
2843[label="194.128.35.132;s;75pkt 75fpkt", shape=hexagon, color=black];
4779[label="194.128.35.132;74pkt 74fpkt", shape=pentagon, color=darkviolet];
6711[label="194.128.35.132;75pkt 75fpkt", shape=invtriangle, color=brown];
7789[label="194.128.35.132;74pkt 74fpkt", shape=invhouse, color=bisque];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.128.35.132:80, 212.66.180.59:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27480: (0.670241%)&lt;BR/&gt; 27479: (0.670241%)&lt;BR/&gt; 27478: (0.670241%)&lt;BR/&gt; 27476: (0.670241%)&gt;];
}
544--575[label="1;75pkt 75fpkt"];
544--2843[label="1;75pkt 75fpkt"];
544--4779[label="1;74pkt 74fpkt"];
544--6711[label="1;75pkt 75fpkt"];
544--7789[label="1;74pkt 74fpkt"];
2843--4779[label="1;74pkt 74fpkt"];
2843--6711[label="1;75pkt 75fpkt"];
2843--7789[label="1;74pkt 74fpkt"];
4779--6711[label="1;74pkt 74fpkt"];
4779--7789[label="1;74pkt 74fpkt"];
6711--7789[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.180.59" src_ip="194.128.35.132" src_port="80"/>
    </slice>
    <from sec="1120712481" usec="0"/>
    <to sec="1120712508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
284[label="196.86.244.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
314[label="193.33.52.115;d;2pkt 2fpkt", shape=diamond, color=yellow];
602[label="213.17.234.101;s;30pkt 30fpkt", shape=diamond, color=yellow];
716[label="196.87.47.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
1487[label="200.46.236.236;d;23pkt 23fpkt", shape=diamond, color=yellow];
2860[label="196.86.244.168;d;2pkt 2fpkt", shape=hexagon, color=black];
3154[label="213.17.234.101;s;30pkt 30fpkt", shape=hexagon, color=black];
4498[label="213.17.234.101;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6551[label="213.17.234.101;32pkt 32fpkt", shape=invtriangle, color=brown];
7699[label="213.17.234.101;32pkt 32fpkt", shape=invhouse, color=bisque];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.234.101:1755, 200.46.236.236:*}[71.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (47.5676%)&lt;BR/&gt; 80: (2.43243%)&lt;BR/&gt; 26505: (1.89189%)&lt;BR/&gt; 24532: (1.89189%)&lt;BR/&gt; 55460: (1.62162%)&gt;];
}
284--602[label="1;2pkt 2fpkt"];
284--2860[label="1;2pkt 2fpkt"];
284--3154[label="1;2pkt 2fpkt"];
284--4498[label="1;2pkt 2fpkt"];
284--6551[label="1;2pkt 2fpkt"];
284--7699[label="1;2pkt 2fpkt"];
314--602[label="1;2pkt 2fpkt"];
314--3154[label="1;2pkt 2fpkt"];
314--4498[label="1;2pkt 2fpkt"];
314--6551[label="1;2pkt 2fpkt"];
314--7699[label="1;2pkt 2fpkt"];
602--716[label="1;1pkt 1fpkt"];
602--1487[label="1;23pkt 23fpkt"];
602--2860[label="1;2pkt 2fpkt"];
602--3154[label="1;30pkt 30fpkt"];
602--4498[label="0.966667;29pkt 29fpkt"];
602--6551[label="1;30pkt 30fpkt"];
602--7699[label="1;30pkt 30fpkt"];
716--3154[label="1;1pkt 1fpkt"];
716--4498[label="1;1pkt 1fpkt"];
716--6551[label="1;1pkt 1fpkt"];
716--7699[label="1;1pkt 1fpkt"];
1487--3154[label="1;23pkt 23fpkt"];
1487--4498[label="1;23pkt 23fpkt"];
1487--6551[label="1;23pkt 23fpkt"];
1487--7699[label="1;23pkt 23fpkt"];
2860--3154[label="1;2pkt 2fpkt"];
2860--4498[label="1;2pkt 2fpkt"];
2860--6551[label="1;2pkt 2fpkt"];
2860--7699[label="1;2pkt 2fpkt"];
3154--4498[label="0.966667;29pkt 29fpkt"];
3154--6551[label="1;30pkt 30fpkt"];
3154--7699[label="1;30pkt 30fpkt"];
4498--6551[label="1;31pkt 31fpkt"];
4498--7699[label="1;31pkt 31fpkt"];
6551--7699[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="200.46.236.236" src_ip="213.17.234.101" src_port="1755"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31659,2.08138,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
49[label="149.177.67.10s;7pkt 7fpkt", shape=rectangle, color=red];
1773[label="161.107.226.52;s;104pkt 104fpkt", shape=diamond, color=yellow];
3658[label="149.177.110.21;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3994[label="161.107.226.52;102pkt 102fpkt", shape=pentagon, color=darkviolet];
6095[label="149.177.110.21;10pkt 10fpkt", shape=invtriangle, color=brown];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.226.52:*, 201.234.28.69:80}[34.4262%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 1863: (2.35043%)&lt;BR/&gt; 3852: (0.42735%)&lt;BR/&gt; 3851: (0.42735%)&lt;BR/&gt; 3849: (0.42735%)&gt;];
}
49--405[label="1;7pkt 7fpkt"];
1773--2042[label="0.246753;19pkt 19fpkt"];
1773--2264[label="0.0655738;4pkt 4fpkt"];
1773--3994[label="1;102pkt 102fpkt"];
3658--6095[label="1;10pkt 10fpkt"];
3658--7431[label="1;10pkt 10fpkt"];
6095--7431[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="201.234.28.69" dst_port="80" src_ip="161.107.226.52"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
367[label="86.82.197.91;s;74pkt 74fpkt", shape=diamond, color=yellow];
657[label="161.99.139.103;d;100pkt 100fpkt", shape=diamond, color=yellow];
1496[label="86.82.197.64;s;26pkt 26fpkt", shape=diamond, color=yellow];
2878[label="161.99.139.103;d;38pkt 38fpkt", shape=hexagon, color=black];
2948[label="86.82.197.91;s;53pkt 53fpkt", shape=hexagon, color=black];
3143[label="86.82.197.64;s;23pkt 23fpkt", shape=hexagon, color=black];
4103[label="86.82.197.64;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6331[label="86.82.197.64;25pkt 25fpkt", shape=invtriangle, color=brown];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.82.197.91:80, 161.99.139.103:*}[74%]&lt;BR/&gt;{86.82.197.64:80, 161.99.139.103:*}[26%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2702: (0.684932%)&lt;BR/&gt; 2701: (0.684932%)&lt;BR/&gt; 2700: (0.684932%)&lt;BR/&gt; 2699: (0.684932%)&gt;];
}
367--657[label="1;74pkt 74fpkt"];
367--2878[label="1;38pkt 38fpkt"];
367--2948[label="1;53pkt 53fpkt"];
367--3388[label="0.027027;2pkt 2fpkt"];
657--1496[label="1;26pkt 26fpkt"];
657--2878[label="1;38pkt 38fpkt"];
657--2948[label="1;53pkt 53fpkt"];
657--3143[label="1;23pkt 23fpkt"];
657--3388[label="0.04;4pkt 4fpkt"];
657--4103[label="1;26pkt 26fpkt"];
657--6331[label="1;25pkt 25fpkt"];
1496--3143[label="1;23pkt 23fpkt"];
1496--3388[label="0.0769231;2pkt 2fpkt"];
1496--4103[label="1;26pkt 26fpkt"];
1496--6331[label="1;25pkt 25fpkt"];
2878--2948[label="1;38pkt 38fpkt"];
3143--3388[label="0.0434783;1pkt 1fpkt"];
3143--4103[label="1;23pkt 23fpkt"];
3143--6331[label="0.956522;22pkt 22fpkt"];
4103--6331[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.139.103" src_ip="86.82.197.91" src_port="80"/>
      <filter dst_ip="161.99.139.103" src_ip="86.82.197.64" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.979319,1.99101,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
396[label="198.88.73.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
2881[label="198.88.73.55;s;1pkt 1fpkt", shape=hexagon, color=black];
3029[label="131.186.180.52;d;64pkt 64fpkt", shape=hexagon, color=black];
4024[label="198.88.73.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7539[label="198.88.73.55;1pkt 1fpkt", shape=invhouse, color=bisque];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.197.96.199:*, 131.186.180.52:80}[29.6875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2647%)&lt;BR/&gt; 29916: (3.67647%)&lt;BR/&gt; 65476: (0.735294%)&lt;BR/&gt; 65474: (0.735294%)&lt;BR/&gt; 65437: (0.735294%)&gt;];
}
396--2881[label="1;1pkt 1fpkt"];
396--3029[label="1;1pkt 1fpkt"];
396--4024[label="1;1pkt 1fpkt"];
396--7539[label="1;1pkt 1fpkt"];
2881--3029[label="1;1pkt 1fpkt"];
2881--4024[label="1;1pkt 1fpkt"];
2881--7539[label="1;1pkt 1fpkt"];
3029--3407[label="0.030303;1pkt 1fpkt"];
3029--3640[label="0.0333333;1pkt 1fpkt"];
3029--3715[label="0.0384615;1pkt 1fpkt"];
3029--3813[label="0.0285714;1pkt 1fpkt"];
3029--3910[label="0.027027;1pkt 1fpkt"];
3029--3963[label="0.047619;1pkt 1fpkt"];
3029--4024[label="1;1pkt 1fpkt"];
3029--4034[label="0.0243902;1pkt 1fpkt"];
3029--4119[label="0.0212766;1pkt 1fpkt"];
3029--4148[label="0.0232558;1pkt 1fpkt"];
3029--4270[label="0.0243902;1pkt 1fpkt"];
3029--4292[label="0.0232558;1pkt 1fpkt"];
3029--5454[label="1;19pkt 19fpkt"];
3029--5967[label="0.030303;1pkt 1fpkt"];
3029--6337[label="0.0212766;1pkt 1fpkt"];
3029--6419[label="0.025;1pkt 1fpkt"];
3029--6433[label="0.0232558;1pkt 1fpkt"];
3029--7101[label="1;19pkt 19fpkt"];
3029--7407[label="0.0344828;1pkt 1fpkt"];
3029--7539[label="1;1pkt 1fpkt"];
3029--7630[label="0.0232558;1pkt 1fpkt"];
4024--7539[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.180.52" dst_port="80" src_ip="198.197.96.199"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
414[label="196.133.15.145;s;5pkt 5fpkt", shape=diamond, color=yellow];
2884[label="196.133.15.145;s;3pkt 3fpkt", shape=hexagon, color=black];
4909[label="196.133.15.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6778[label="196.133.15.145;5pkt 5fpkt", shape=invtriangle, color=brown];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.133.15.145:3941, 212.66.63.123:24924}[20%]&lt;BR/&gt;{196.133.15.145:25985, 212.66.63.123:3041}[20%]&lt;BR/&gt;{196.133.15.145:25985, 212.66.63.123:3657}[20%]&lt;BR/&gt;{196.133.15.145:25985, 212.66.63.123:4813}[20%]&lt;BR/&gt;{196.133.15.145:25985, 212.66.63.123:24924}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25985: (41.6667%)&lt;BR/&gt; 24924: (19.4444%)&lt;BR/&gt; 3657: (11.1111%)&lt;BR/&gt; 3041: (11.1111%)&lt;BR/&gt; 4813: (8.33333%)&gt;];
}
414--2795[label="1;5pkt 5fpkt"];
414--2884[label="1;3pkt 3fpkt"];
414--3350[label="1;5pkt 5fpkt"];
414--4909[label="1;5pkt 5fpkt"];
414--6778[label="1;5pkt 5fpkt"];
2884--3350[label="1;3pkt 3fpkt"];
2884--4909[label="1;3pkt 3fpkt"];
2884--6778[label="1;3pkt 3fpkt"];
4909--6778[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.123" dst_port="24924" src_ip="196.133.15.145" src_port="25985"/>
      <filter dst_ip="212.66.63.123" dst_port="4813" src_ip="196.133.15.145" src_port="25985"/>
      <filter dst_ip="212.66.63.123" dst_port="3657" src_ip="196.133.15.145" src_port="25985"/>
      <filter dst_ip="212.66.63.123" dst_port="3041" src_ip="196.133.15.145" src_port="25985"/>
      <filter dst_ip="212.66.63.123" dst_port="24924" src_ip="196.133.15.145" src_port="3941"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
732[label="193.145.198.87;s;4pkt 4fpkt", shape=diamond, color=yellow];
2888[label="193.145.198.87;s;4pkt 4fpkt", shape=hexagon, color=black];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.145.198.87:9988, 131.186.4.237:1102}[25%]&lt;BR/&gt;{193.145.198.87:9987, 131.186.4.237:1285}[25%]&lt;BR/&gt;{193.145.198.87:9987, 131.186.4.237:1494}[25%]&lt;BR/&gt;{193.145.198.87:9987, 131.186.4.237:1506}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9987: (37.5%)&lt;BR/&gt; 9988: (12.5%)&lt;BR/&gt; 1506: (12.5%)&lt;BR/&gt; 1494: (12.5%)&lt;BR/&gt; 1285: (12.5%)&gt;];
}
732--2888[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.4.237" dst_port="1506" src_ip="193.145.198.87" src_port="9987"/>
      <filter dst_ip="131.186.4.237" dst_port="1494" src_ip="193.145.198.87" src_port="9987"/>
      <filter dst_ip="131.186.4.237" dst_port="1285" src_ip="193.145.198.87" src_port="9987"/>
      <filter dst_ip="131.186.4.237" dst_port="1102" src_ip="193.145.198.87" src_port="9988"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
456[label="197.25.25.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.25.25.135:33964, 212.66.63.1:27485}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33964: (50%)&lt;BR/&gt; 27485: (50%)&gt;];
}
456--2800[label="1;1pkt 1fpkt"];
456--2893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="27485" src_ip="197.25.25.135" src_port="33964"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
478[label="68.85.188.16;s;8pkt 8fpkt", shape=diamond, color=yellow];
2900[label="68.85.188.16;s;8pkt 8fpkt", shape=hexagon, color=black];
3583[label="68.85.188.16;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6061[label="68.85.188.16;8pkt 8fpkt", shape=invtriangle, color=brown];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.85.188.16:80, 212.79.237.218:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49627: (6.45161%)&lt;BR/&gt; 49613: (6.45161%)&lt;BR/&gt; 49480: (6.45161%)&lt;BR/&gt; 49466: (6.45161%)&gt;];
}
478--2900[label="1;8pkt 8fpkt"];
478--3583[label="1;7pkt 7fpkt"];
478--6061[label="1;8pkt 8fpkt"];
2900--3583[label="1;7pkt 7fpkt"];
2900--6061[label="1;8pkt 8fpkt"];
3583--6061[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.237.218" src_ip="68.85.188.16" src_port="80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
821[label="161.99.18.71;d;3pkt 3fpkt", shape=diamond, color=yellow];
1216[label="194.165.56.128;s;2pkt 2fpkt", shape=diamond, color=yellow];
2904[label="161.99.18.71;d;2pkt 2fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.107.70.226:80, 161.99.18.71:1654}[33.3333%]&lt;BR/&gt;{194.165.56.128:80, 161.99.18.71:1649}[33.3333%]&lt;BR/&gt;{194.165.56.128:80, 161.99.18.71:1651}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1651: (21.4286%)&lt;BR/&gt; 1649: (21.4286%)&lt;BR/&gt; 1654: (7.14286%)&gt;];
}
821--1216[label="1;2pkt 2fpkt"];
821--2904[label="1;2pkt 2fpkt"];
821--5751[label="0.333333;1pkt 1fpkt"];
1216--2904[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.18.71" dst_port="1651" src_ip="194.165.56.128" src_port="80"/>
      <filter dst_ip="161.99.18.71" dst_port="1649" src_ip="194.165.56.128" src_port="80"/>
      <filter dst_ip="161.99.18.71" dst_port="1654" src_ip="24.107.70.226" src_port="80"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
835[label="208.7.200.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
2907[label="208.7.200.40;d;1pkt 1fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.67.73:25, 208.7.200.40:48416}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48416: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
835--2907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.7.200.40" dst_port="48416" src_ip="149.177.67.73" src_port="25"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120712439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
541[label="145.223.236.118;s;7pkt 7fpkt", shape=diamond, color=yellow];
2914[label="145.223.236.118;s;7pkt 7fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.236.118:*, 27.198.95.213:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1240: (7.14286%)&lt;BR/&gt; 1239: (7.14286%)&lt;BR/&gt; 1238: (7.14286%)&lt;BR/&gt; 1237: (7.14286%)&gt;];
}
541--2914[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="27.198.95.213" dst_port="80" src_ip="145.223.236.118"/>
    </slice>
    <from sec="1120712480" usec="0"/>
    <to sec="1120712510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
215[label="198.219.62.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
2925[label="198.219.62.191;s;1pkt 1fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.219.62.191:12921, 131.186.132.114:58781}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58781: (50%)&lt;BR/&gt; 12921: (50%)&gt;];
}
215--2925[label="1;1pkt 1fpkt"];
215--7045[label="1;1pkt 1fpkt"];
2925--7045[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.132.114" dst_port="58781" src_ip="198.219.62.191" src_port="12921"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
271[label="220.200.127.17;s;22pkt 22fpkt", shape=diamond, color=yellow];
960[label="166.59.183.175;d;4pkt 4fpkt", shape=diamond, color=yellow];
1515[label="166.59.160.128;d;2pkt 2fpkt", shape=diamond, color=yellow];
1528[label="166.59.183.18;d;2pkt 2fpkt", shape=diamond, color=yellow];
2310[label="166.59.153.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
2930[label="220.200.127.17;s;12pkt 12fpkt", shape=hexagon, color=black];
3598[label="220.200.127.17;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4218[label="194.236.14.74;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4600[label="194.236.14.113;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6394[label="194.236.14.74;19pkt 19fpkt", shape=invtriangle, color=brown];
7604[label="194.236.14.74;19pkt 19fpkt", shape=invhouse, color=bisque];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.200.127.17:*, *:*}[42.1053%]&lt;BR/&gt;{194.236.14.74:5050, *:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (24.0741%)&lt;BR/&gt; 113: (7.40741%)&lt;BR/&gt; 6667: (6.2963%)&lt;BR/&gt; 6668: (3.33333%)&lt;BR/&gt; 6665: (3.33333%)&gt;];
}
271--960[label="0.25;1pkt 1fpkt"];
271--1515[label="0.5;1pkt 1fpkt"];
271--1528[label="0.5;1pkt 1fpkt"];
271--2310[label="1;1pkt 1fpkt"];
271--2930[label="1;12pkt 12fpkt"];
271--3598[label="1;22pkt 22fpkt"];
960--2930[label="0.25;1pkt 1fpkt"];
960--3598[label="0.25;1pkt 1fpkt"];
960--4600[label="0.25;1pkt 1fpkt"];
1515--2930[label="0.5;1pkt 1fpkt"];
1515--3598[label="0.5;1pkt 1fpkt"];
1515--4218[label="0.5;1pkt 1fpkt"];
1515--6394[label="0.5;1pkt 1fpkt"];
1515--7604[label="0.5;1pkt 1fpkt"];
1528--2930[label="0.5;1pkt 1fpkt"];
1528--3598[label="0.5;1pkt 1fpkt"];
2310--2930[label="1;1pkt 1fpkt"];
2310--3598[label="1;1pkt 1fpkt"];
2930--3598[label="1;12pkt 12fpkt"];
4218--6394[label="1;19pkt 19fpkt"];
4218--7604[label="1;19pkt 19fpkt"];
6394--7604[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="220.200.127.17"/>
      <filter src_ip="194.236.14.74" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
467[label="211.197.82.194;d;562pkt 562fpkt", shape=diamond, color=yellow];
491[label="145.223.162.139;s;71pkt 71fpkt", shape=diamond, color=yellow];
870[label="145.223.37.178;s;7pkt 7fpkt", shape=diamond, color=yellow];
1072[label="211.166.146.200;d;279pkt 279fpkt", shape=diamond, color=yellow];
1508[label="211.166.144.65;d;22pkt 22fpkt", shape=diamond, color=yellow];
1682[label="161.99.222.77;s;110pkt 110fpkt", shape=diamond, color=yellow];
1899[label="145.223.246.10;s;156pkt 156fpkt", shape=diamond, color=yellow];
2273[label="145.223.62.9;s;76pkt 76fpkt", shape=diamond, color=yellow];
2824[label="149.177.67.10;s;276pkt 276fpkt", shape=hexagon, color=black];
2897[label="211.197.82.194;d;198pkt 198fpkt", shape=hexagon, color=black];
3077[label="27.57.186.67;d;36pkt 36fpkt", shape=hexagon, color=black];
3611[label="212.66.53.18;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3829[label="145.223.193.37;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4076[label="149.177.111.61;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4109[label="145.223.245.64;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4159[label="145.223.131.68;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4240[label="145.223.162.75;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4351[label="145.223.172.86;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4513[label="145.223.141.103;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4558[label="149.177.104.107;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4808[label="161.107.224.134;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4948[label="145.223.131.148;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5107[label="149.177.106.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5128[label="149.177.105.166;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5281[label="161.107.84.181;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5336[label="149.177.111.186;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5424[label="161.107.148.196;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5484[label="212.66.36.202;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5547[label="145.223.254.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5635[label="149.177.109.215;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5816[label="149.177.108.234;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5892[label="145.223.225.245;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6183[label="145.223.193.37;13pkt 13fpkt", shape=invtriangle, color=brown];
6332[label="145.223.245.64;9pkt 9fpkt", shape=invtriangle, color=brown];
6360[label="145.223.131.68;19pkt 19fpkt", shape=invtriangle, color=brown];
7031[label="149.177.111.186;22pkt 22fpkt", shape=invtriangle, color=brown];
7187[label="149.177.109.215;7pkt 7fpkt", shape=invtriangle, color=brown];
7564[label="145.223.245.64;8pkt 8fpkt", shape=invhouse, color=bisque];
8064[label="149.177.109.215;7pkt 7fpkt", shape=invhouse, color=bisque];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.197.82.194:80}[33.0783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.8365%)&lt;BR/&gt; 1863: (2.92541%)&lt;BR/&gt; 62493: (0.96025%)&lt;BR/&gt; 443: (0.893256%)&lt;BR/&gt; 7001: (0.379634%)&gt;];
}
467--491[label="0.0704225;5pkt 5fpkt"];
467--496[label="0.00442478;2pkt 2fpkt"];
467--506[label="0.0943396;10pkt 10fpkt"];
467--553[label="0.00769231;1pkt 1fpkt"];
467--586[label="0.0163043;3pkt 3fpkt"];
467--613[label="0.00355872;2pkt 2fpkt"];
467--617[label="0.00533808;3pkt 3fpkt"];
467--623[label="0.00355872;2pkt 2fpkt"];
467--736[label="0.1;9pkt 9fpkt"];
467--790[label="0.0124555;7pkt 7fpkt"];
467--799[label="0.00634921;2pkt 2fpkt"];
467--802[label="0.0444444;2pkt 2fpkt"];
467--823[label="0.00843882;2pkt 2fpkt"];
467--842[label="0.0235294;2pkt 2fpkt"];
467--954[label="0.00858369;2pkt 2fpkt"];
467--959[label="0.0170455;3pkt 3fpkt"];
467--1008[label="0.00438596;1pkt 1fpkt"];
467--1056[label="0.00390625;1pkt 1fpkt"];
467--1065[label="0.0246305;5pkt 5fpkt"];
467--1099[label="0.0045045;1pkt 1fpkt"];
467--1232[label="0.00177936;1pkt 1fpkt"];
467--1233[label="0.00355872;2pkt 2fpkt"];
467--1234[label="0.00190114;1pkt 1fpkt"];
467--1241[label="0.00694444;1pkt 1fpkt"];
467--1301[label="0.00609756;1pkt 1fpkt"];
467--1314[label="0.0116279;1pkt 1fpkt"];
467--1645[label="0.00465116;1pkt 1fpkt"];
467--1682[label="0.0636364;7pkt 7fpkt"];
467--1685[label="0.114286;8pkt 8fpkt"];
467--1727[label="0.0481928;4pkt 4fpkt"];
467--1737[label="0.078125;5pkt 5fpkt"];
467--1820[label="0.013245;2pkt 2fpkt"];
467--1935[label="0.027027;2pkt 2fpkt"];
467--1946[label="0.0606061;4pkt 4fpkt"];
467--2018[label="0.11;11pkt 11fpkt"];
467--2054[label="0.0561798;5pkt 5fpkt"];
467--2162[label="0.0277778;2pkt 2fpkt"];
467--2243[label="0.0075188;1pkt 1fpkt"];
467--2273[label="0.0657895;5pkt 5fpkt"];
467--2370[label="0.0181818;1pkt 1fpkt"];
467--2384[label="0.00787402;1pkt 1fpkt"];
467--2528[label="0.163265;8pkt 8fpkt"];
467--2531[label="0.0224719;2pkt 2fpkt"];
467--2591[label="0.0151515;1pkt 1fpkt"];
467--2610[label="0.025;1pkt 1fpkt"];
467--2612[label="0.1;1pkt 1fpkt"];
467--2673[label="0.0350877;2pkt 2fpkt"];
467--2753[label="0.0487805;4pkt 4fpkt"];
467--2773[label="0.0253165;2pkt 2fpkt"];
467--2805[label="0.00355872;2pkt 2fpkt"];
467--2809[label="0.00498753;2pkt 2fpkt"];
467--2824[label="0.0724638;20pkt 20fpkt"];
467--2865[label="0.00934579;1pkt 1fpkt"];
467--2877[label="0.00806452;1pkt 1fpkt"];
467--2897[label="1;198pkt 198fpkt"];
467--2932[label="0.0115163;6pkt 6fpkt"];
467--2936[label="0.017094;2pkt 2fpkt"];
467--2961[label="0.1;9pkt 9fpkt"];
467--2981[label="0.0289855;2pkt 2fpkt"];
467--3018[label="0.00355872;2pkt 2fpkt"];
467--3031[label="0.0149254;1pkt 1fpkt"];
467--3065[label="0.00653595;1pkt 1fpkt"];
467--3086[label="0.00177936;1pkt 1fpkt"];
467--3100[label="0.00177936;1pkt 1fpkt"];
467--3103[label="0.0135135;1pkt 1fpkt"];
467--3105[label="0.00177936;1pkt 1fpkt"];
467--3175[label="0.0377358;2pkt 2fpkt"];
467--3207[label="0.00190114;1pkt 1fpkt"];
467--3239[label="0.0615385;4pkt 4fpkt"];
467--3373[label="0.00177936;1pkt 1fpkt"];
467--3378[label="0.00355872;2pkt 2fpkt"];
467--3399[label="0.111111;1pkt 1fpkt"];
467--3410[label="0.0714286;1pkt 1fpkt"];
467--3438[label="0.00187266;1pkt 1fpkt"];
467--3454[label="0.203704;11pkt 11fpkt"];
467--3464[label="0.0571429;2pkt 2fpkt"];
467--3487[label="0.114286;8pkt 8fpkt"];
467--3524[label="0.0377358;2pkt 2fpkt"];
467--3611[label="0.04;2pkt 2fpkt"];
467--3658[label="0.0909091;1pkt 1fpkt"];
467--3661[label="0.00763359;1pkt 1fpkt"];
467--3666[label="0.0666667;2pkt 2fpkt"];
467--3802[label="0.181818;4pkt 4fpkt"];
467--3806[label="0.0454545;1pkt 1fpkt"];
467--3809[label="0.0277778;2pkt 2fpkt"];
467--3829[label="0.0833333;1pkt 1fpkt"];
467--3860[label="0.0909091;1pkt 1fpkt"];
467--3892[label="0.222222;2pkt 2fpkt"];
467--3895[label="0.0645161;2pkt 2fpkt"];
467--3899[label="0.0909091;2pkt 2fpkt"];
467--3923[label="0.133333;2pkt 2fpkt"];
467--4055[label="0.0152284;3pkt 3fpkt"];
467--4063[label="0.00177936;1pkt 1fpkt"];
467--4074[label="0.135593;8pkt 8fpkt"];
467--4076[label="0.210526;4pkt 4fpkt"];
467--4109[label="0.444444;4pkt 4fpkt"];
467--4141[label="0.0046729;1pkt 1fpkt"];
467--4159[label="0.105263;2pkt 2fpkt"];
467--4196[label="0.0625;1pkt 1fpkt"];
467--4199[label="0.00177936;1pkt 1fpkt"];
467--4240[label="0.166667;2pkt 2fpkt"];
467--4301[label="0.00190114;1pkt 1fpkt"];
467--4329[label="0.0666667;3pkt 3fpkt"];
467--4351[label="0.125;1pkt 1fpkt"];
467--4416[label="0.24;12pkt 12fpkt"];
467--4464[label="0.00355872;2pkt 2fpkt"];
467--4470[label="0.00711744;4pkt 4fpkt"];
467--4513[label="0.571429;4pkt 4fpkt"];
467--4514[label="0.00408998;2pkt 2fpkt"];
467--4552[label="0.1;2pkt 2fpkt"];
467--4558[label="0.157895;3pkt 3fpkt"];
467--4697[label="0.00619195;2pkt 2fpkt"];
467--4750[label="0.125;2pkt 2fpkt"];
467--4788[label="0.0106762;6pkt 6fpkt"];
467--4808[label="0.555556;5pkt 5fpkt"];
467--4839[label="0.210526;4pkt 4fpkt"];
467--4849[label="0.0140845;1pkt 1fpkt"];
467--4862[label="0.0555556;1pkt 1fpkt"];
467--4879[label="0.0194175;2pkt 2fpkt"];
467--4900[label="0.00699301;1pkt 1fpkt"];
467--4913[label="0.0606061;2pkt 2fpkt"];
467--4916[label="0.25;1pkt 1fpkt"];
467--4934[label="0.0606061;4pkt 4fpkt"];
467--4947[label="0.125;3pkt 3fpkt"];
467--4948[label="0.0350877;2pkt 2fpkt"];
467--4993[label="0.222222;2pkt 2fpkt"];
467--5006[label="0.357143;5pkt 5fpkt"];
467--5011[label="0.00606061;1pkt 1fpkt"];
467--5016[label="0.153846;2pkt 2fpkt"];
467--5027[label="0.00381679;1pkt 1fpkt"];
467--5029[label="0.0769231;2pkt 2fpkt"];
467--5107[label="0.2;1pkt 1fpkt"];
467--5128[label="0.142857;2pkt 2fpkt"];
467--5133[label="0.00421941;1pkt 1fpkt"];
467--5212[label="0.106796;11pkt 11fpkt"];
467--5226[label="0.0909091;10pkt 10fpkt"];
467--5281[label="0.181818;2pkt 2fpkt"];
467--5317[label="0.0131579;1pkt 1fpkt"];
467--5336[label="0.173913;4pkt 4fpkt"];
467--5359[label="0.0266667;2pkt 2fpkt"];
467--5371[label="0.0106762;6pkt 6fpkt"];
467--5373[label="0.00578035;1pkt 1fpkt"];
467--5406[label="0.078125;5pkt 5fpkt"];
467--5411[label="0.00429185;1pkt 1fpkt"];
467--5428[label="0.05;1pkt 1fpkt"];
467--5484[label="0.3;3pkt 3fpkt"];
467--5492[label="0.25;2pkt 2fpkt"];
467--5501[label="0.3;3pkt 3fpkt"];
467--5518[label="0.0140845;2pkt 2fpkt"];
467--5544[label="0.00533808;3pkt 3fpkt"];
467--5547[label="0.4;2pkt 2fpkt"];
467--5559[label="0.00355872;2pkt 2fpkt"];
467--5574[label="0.020202;2pkt 2fpkt"];
467--5589[label="0.00740741;1pkt 1fpkt"];
467--5606[label="0.0625;1pkt 1fpkt"];
467--5615[label="0.00177936;1pkt 1fpkt"];
467--5635[label="0.333333;2pkt 2fpkt"];
467--5675[label="0.00355872;2pkt 2fpkt"];
467--5708[label="0.0212766;1pkt 1fpkt"];
467--5716[label="0.00177936;1pkt 1fpkt"];
467--5764[label="0.0357143;2pkt 2fpkt"];
467--5777[label="0.016129;1pkt 1fpkt"];
467--5804[label="0.0561798;5pkt 5fpkt"];
467--5816[label="0.111111;2pkt 2fpkt"];
467--5820[label="0.047619;1pkt 1fpkt"];
467--5834[label="0.307692;4pkt 4fpkt"];
467--5866[label="0.0124555;7pkt 7fpkt"];
467--5892[label="0.125;3pkt 3fpkt"];
467--5916[label="0.0813953;7pkt 7fpkt"];
467--5941[label="0.0333333;1pkt 1fpkt"];
467--5961[label="0.111111;1pkt 1fpkt"];
467--5982[label="0.00187266;1pkt 1fpkt"];
467--5987[label="0.207547;11pkt 11fpkt"];
467--6100[label="0.0666667;2pkt 2fpkt"];
467--6173[label="0.181818;4pkt 4fpkt"];
467--6175[label="0.028169;2pkt 2fpkt"];
467--6183[label="0.0769231;1pkt 1fpkt"];
467--6201[label="0.0909091;1pkt 1fpkt"];
467--6218[label="0.3;3pkt 3fpkt"];
467--6332[label="0.444444;4pkt 4fpkt"];
467--6360[label="0.105263;2pkt 2fpkt"];
467--6384[label="0.00177936;1pkt 1fpkt"];
467--6437[label="0.00190114;1pkt 1fpkt"];
467--6453[label="0.0681818;3pkt 3fpkt"];
467--6504[label="0.24;12pkt 12fpkt"];
467--6537[label="0.00355872;2pkt 2fpkt"];
467--6540[label="0.00711744;4pkt 4fpkt"];
467--6558[label="0.00409836;2pkt 2fpkt"];
467--6580[label="0.1;2pkt 2fpkt"];
467--6717[label="0.0106762;6pkt 6fpkt"];
467--6746[label="0.0140845;1pkt 1fpkt"];
467--6753[label="0.0555556;1pkt 1fpkt"];
467--6774[label="0.00694444;1pkt 1fpkt"];
467--6797[label="0.0615385;4pkt 4fpkt"];
467--6805[label="0.12;3pkt 3fpkt"];
467--6846[label="0.357143;5pkt 5fpkt"];
467--6859[label="0.04;1pkt 1fpkt"];
467--6960[label="0.107843;11pkt 11fpkt"];
467--7031[label="0.181818;4pkt 4fpkt"];
467--7049[label="0.0106762;6pkt 6fpkt"];
467--7075[label="0.0793651;5pkt 5fpkt"];
467--7078[label="0.00431034;1pkt 1fpkt"];
467--7089[label="0.047619;1pkt 1fpkt"];
467--7132[label="0.0141844;2pkt 2fpkt"];
467--7143[label="0.00533808;3pkt 3fpkt"];
467--7148[label="0.00355872;2pkt 2fpkt"];
467--7160[label="0.020202;2pkt 2fpkt"];
467--7174[label="0.0625;1pkt 1fpkt"];
467--7177[label="0.00177936;1pkt 1fpkt"];
467--7187[label="0.285714;2pkt 2fpkt"];
467--7221[label="0.0217391;1pkt 1fpkt"];
467--7271[label="0.0561798;5pkt 5fpkt"];
467--7282[label="0.047619;1pkt 1fpkt"];
467--7339[label="0.0823529;7pkt 7fpkt"];
467--7354[label="0.0322581;1pkt 1fpkt"];
467--7472[label="0.181818;4pkt 4fpkt"];
467--7474[label="0.028169;2pkt 2fpkt"];
467--7496[label="0.3;3pkt 3fpkt"];
467--7564[label="0.5;4pkt 4fpkt"];
467--7582[label="0.1;2pkt 2fpkt"];
467--7595[label="0.00177936;1pkt 1fpkt"];
467--7639[label="0.0681818;3pkt 3fpkt"];
467--7669[label="0.24;12pkt 12fpkt"];
467--7702[label="0.00409836;2pkt 2fpkt"];
467--7792[label="0.0106762;6pkt 6fpkt"];
467--7818[label="0.00694444;1pkt 1fpkt"];
467--7859[label="0.384615;5pkt 5fpkt"];
467--7865[label="0.04;1pkt 1fpkt"];
467--7980[label="0.0106762;6pkt 6fpkt"];
467--7995[label="0.0793651;5pkt 5fpkt"];
467--7998[label="0.00429185;1pkt 1fpkt"];
467--8003[label="0.05;1pkt 1fpkt"];
467--8029[label="0.0140845;2pkt 2fpkt"];
467--8047[label="0.020202;2pkt 2fpkt"];
467--8059[label="0.00177936;1pkt 1fpkt"];
467--8064[label="0.285714;2pkt 2fpkt"];
467--8112[label="0.0561798;5pkt 5fpkt"];
467--8157[label="0.0322581;1pkt 1fpkt"];
491--759[label="0.0140845;1pkt 1fpkt"];
491--807[label="0.028169;2pkt 2fpkt"];
491--1623[label="0.15493;11pkt 11fpkt"];
491--2600[label="0.0140845;1pkt 1fpkt"];
491--2897[label="0.056338;4pkt 4fpkt"];
491--3384[label="0.028169;2pkt 2fpkt"];
870--1177[label="0.571429;4pkt 4fpkt"];
870--3077[label="0.571429;4pkt 4fpkt"];
1072--1189[label="0.0128205;1pkt 1fpkt"];
1072--1377[label="0.206573;44pkt 44fpkt"];
1072--1899[label="0.99359;155pkt 155fpkt"];
1072--1961[label="0.0052356;1pkt 1fpkt"];
1072--2273[label="0.0394737;3pkt 3fpkt"];
1072--2824[label="0.0181159;5pkt 5fpkt"];
1072--3127[label="0.167742;26pkt 26fpkt"];
1072--3241[label="0.0052356;1pkt 1fpkt"];
1072--3464[label="0.0285714;1pkt 1fpkt"];
1072--4294[label="0.00526316;1pkt 1fpkt"];
1072--4631[label="0.0128205;1pkt 1fpkt"];
1072--5032[label="0.201835;44pkt 44fpkt"];
1072--5869[label="0.0394265;11pkt 11fpkt"];
1072--6626[label="0.0128205;1pkt 1fpkt"];
1072--7738[label="0.0128205;1pkt 1fpkt"];
1508--1509[label="0.0454545;1pkt 1fpkt"];
1508--4344[label="0.0909091;1pkt 1fpkt"];
1508--4808[label="0.111111;1pkt 1fpkt"];
1508--4900[label="0.0454545;1pkt 1fpkt"];
1508--5336[label="0.0454545;1pkt 1fpkt"];
1508--5424[label="0.0454545;1pkt 1fpkt"];
1508--5783[label="0.0625;1pkt 1fpkt"];
1508--6774[label="0.0454545;1pkt 1fpkt"];
1508--7031[label="0.0454545;1pkt 1fpkt"];
1508--7818[label="0.0454545;1pkt 1fpkt"];
1682--1927[label="0.00909091;1pkt 1fpkt"];
1682--2897[label="0.0636364;7pkt 7fpkt"];
1899--3008[label="0.0120482;1pkt 1fpkt"];
2273--2492[label="0.131579;10pkt 10fpkt"];
2273--3077[label="0.0277778;1pkt 1fpkt"];
2824--2874[label="0.0166667;3pkt 3fpkt"];
2824--2897[label="0.10101;20pkt 20fpkt"];
2824--2954[label="0.00724638;2pkt 2fpkt"];
2824--3032[label="0.0217391;6pkt 6fpkt"];
2824--3096[label="0.0724638;20pkt 20fpkt"];
2897--2932[label="0.0151515;3pkt 3fpkt"];
2897--2936[label="0.00854701;1pkt 1fpkt"];
2897--2961[label="0.0555556;5pkt 5fpkt"];
2897--3031[label="0.0149254;1pkt 1fpkt"];
2897--3065[label="0.00653595;1pkt 1fpkt"];
2897--3175[label="0.0377358;2pkt 2fpkt"];
2897--3207[label="0.00505051;1pkt 1fpkt"];
2897--3378[label="0.00505051;1pkt 1fpkt"];
2897--3399[label="0.111111;1pkt 1fpkt"];
2897--3410[label="0.0714286;1pkt 1fpkt"];
2897--3438[label="0.00505051;1pkt 1fpkt"];
2897--3454[label="0.148148;8pkt 8fpkt"];
2897--3464[label="0.0571429;2pkt 2fpkt"];
2897--3487[label="0.0285714;2pkt 2fpkt"];
2897--3658[label="0.0909091;1pkt 1fpkt"];
2897--3809[label="0.0277778;2pkt 2fpkt"];
2897--3829[label="0.0833333;1pkt 1fpkt"];
2897--3895[label="0.0645161;2pkt 2fpkt"];
2897--4055[label="0.0101523;2pkt 2fpkt"];
2897--4076[label="0.105263;2pkt 2fpkt"];
2897--4109[label="0.444444;4pkt 4fpkt"];
2897--4199[label="0.00505051;1pkt 1fpkt"];
2897--4329[label="0.0666667;3pkt 3fpkt"];
2897--4416[label="0.24;12pkt 12fpkt"];
2897--4464[label="0.010101;2pkt 2fpkt"];
2897--4470[label="0.020202;4pkt 4fpkt"];
2897--4513[label="0.571429;4pkt 4fpkt"];
2897--4514[label="0.00505051;1pkt 1fpkt"];
2897--4558[label="0.157895;3pkt 3fpkt"];
2897--4697[label="0.010101;2pkt 2fpkt"];
2897--4788[label="0.0151515;3pkt 3fpkt"];
2897--4948[label="0.0350877;2pkt 2fpkt"];
2897--4993[label="0.222222;2pkt 2fpkt"];
2897--5128[label="0.142857;2pkt 2fpkt"];
2897--5317[label="0.0131579;1pkt 1fpkt"];
2897--5336[label="0.0869565;2pkt 2fpkt"];
2897--5371[label="0.010101;2pkt 2fpkt"];
2897--5373[label="0.00578035;1pkt 1fpkt"];
2897--5501[label="0.2;2pkt 2fpkt"];
2897--5544[label="0.00505051;1pkt 1fpkt"];
2897--5559[label="0.00505051;1pkt 1fpkt"];
2897--5615[label="0.00505051;1pkt 1fpkt"];
2897--5635[label="0.333333;2pkt 2fpkt"];
2897--5675[label="0.00505051;1pkt 1fpkt"];
2897--5708[label="0.0212766;1pkt 1fpkt"];
2897--5834[label="0.307692;4pkt 4fpkt"];
2897--5866[label="0.0252525;5pkt 5fpkt"];
2897--5961[label="0.111111;1pkt 1fpkt"];
2897--5982[label="0.00505051;1pkt 1fpkt"];
2897--5987[label="0.150943;8pkt 8fpkt"];
2897--6175[label="0.028169;2pkt 2fpkt"];
2897--6183[label="0.0769231;1pkt 1fpkt"];
2897--6332[label="0.444444;4pkt 4fpkt"];
2897--6384[label="0.00505051;1pkt 1fpkt"];
2897--6453[label="0.0681818;3pkt 3fpkt"];
2897--6504[label="0.24;12pkt 12fpkt"];
2897--6537[label="0.010101;2pkt 2fpkt"];
2897--6540[label="0.020202;4pkt 4fpkt"];
2897--6558[label="0.00505051;1pkt 1fpkt"];
2897--6717[label="0.0151515;3pkt 3fpkt"];
2897--7031[label="0.0909091;2pkt 2fpkt"];
2897--7049[label="0.010101;2pkt 2fpkt"];
2897--7143[label="0.00505051;1pkt 1fpkt"];
2897--7148[label="0.00505051;1pkt 1fpkt"];
2897--7177[label="0.00505051;1pkt 1fpkt"];
2897--7187[label="0.285714;2pkt 2fpkt"];
2897--7221[label="0.0217391;1pkt 1fpkt"];
2897--7474[label="0.028169;2pkt 2fpkt"];
2897--7564[label="0.5;4pkt 4fpkt"];
2897--7595[label="0.00505051;1pkt 1fpkt"];
2897--7639[label="0.0681818;3pkt 3fpkt"];
2897--7669[label="0.24;12pkt 12fpkt"];
2897--7702[label="0.00505051;1pkt 1fpkt"];
2897--7792[label="0.0151515;3pkt 3fpkt"];
2897--7980[label="0.010101;2pkt 2fpkt"];
2897--8059[label="0.00505051;1pkt 1fpkt"];
2897--8064[label="0.285714;2pkt 2fpkt"];
3077--4557[label="0.0833333;1pkt 1fpkt"];
3077--4958[label="0.222222;8pkt 8fpkt"];
3077--6813[label="0.222222;8pkt 8fpkt"];
3829--6183[label="1;12pkt 12fpkt"];
4109--6332[label="1;9pkt 9fpkt"];
4109--7564[label="1;8pkt 8fpkt"];
4159--6360[label="1;19pkt 19fpkt"];
4159--7582[label="1;19pkt 19fpkt"];
5336--7031[label="1;22pkt 22fpkt"];
5635--7187[label="1;6pkt 6fpkt"];
5635--8064[label="1;6pkt 6fpkt"];
6332--7564[label="1;8pkt 8fpkt"];
6360--7582[label="1;19pkt 19fpkt"];
7187--8064[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="211.197.82.194" dst_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
324[label="149.110.198.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
956[label="211.66.39.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
2939[label="149.110.198.134;s;1pkt 1fpkt", shape=hexagon, color=black];
4806[label="149.110.198.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.198.134:2101, 211.66.39.167:8020}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8020: (50%)&lt;BR/&gt; 2101: (50%)&gt;];
}
324--956[label="1;1pkt 1fpkt"];
324--2939[label="1;1pkt 1fpkt"];
324--4806[label="1;1pkt 1fpkt"];
956--2939[label="1;1pkt 1fpkt"];
956--4806[label="1;1pkt 1fpkt"];
2939--4806[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.66.39.167" dst_port="8020" src_ip="149.110.198.134" src_port="2101"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
965[label="204.130.79.78;d;31pkt 31fpkt", shape=diamond, color=yellow];
966[label="145.223.51.154;s;39pkt 39fpkt", shape=diamond, color=yellow];
2942[label="145.223.51.154;s;39pkt 39fpkt", shape=hexagon, color=black];
5009[label="145.223.51.154;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6849[label="145.223.51.154;39pkt 39fpkt", shape=invtriangle, color=brown];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.51.154:*, 204.130.79.78:80}[79.4872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2725: (1.34409%)&lt;BR/&gt; 2724: (1.34409%)&lt;BR/&gt; 2723: (1.34409%)&lt;BR/&gt; 2722: (1.34409%)&gt;];
}
965--966[label="1;31pkt 31fpkt"];
965--2942[label="1;31pkt 31fpkt"];
965--5009[label="1;31pkt 31fpkt"];
965--6849[label="1;31pkt 31fpkt"];
966--2942[label="1;39pkt 39fpkt"];
966--5009[label="1;38pkt 38fpkt"];
966--6849[label="1;39pkt 39fpkt"];
2942--5009[label="1;38pkt 38fpkt"];
2942--6849[label="1;39pkt 39fpkt"];
5009--6849[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="204.130.79.78" dst_port="80" src_ip="145.223.51.154"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
654[label="29.80.46.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.80.46.224:2189, 149.68.157.180:19077}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19077: (50%)&lt;BR/&gt; 2189: (50%)&gt;];
}
654--2791[label="1;1pkt 1fpkt"];
654--2943[label="1;1pkt 1fpkt"];
654--5725[label="1;1pkt 1fpkt"];
654--7228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="19077" src_ip="29.80.46.224" src_port="2189"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
365[label="161.99.139.103;s;101pkt 101fpkt", shape=diamond, color=yellow];
366[label="86.82.197.91;d;567pkt 567fpkt", shape=diamond, color=yellow];
697[label="145.223.45.51;s;494pkt 494fpkt", shape=diamond, color=yellow];
1770[label="86.82.197.64;d;26pkt 26fpkt", shape=diamond, color=yellow];
2946[label="161.99.139.103;s;54pkt 54fpkt", shape=hexagon, color=black];
2947[label="86.82.197.91;d;226pkt 226fpkt", shape=hexagon, color=black];
3978[label="145.223.45.51;536pkt 536fpkt", shape=pentagon, color=darkviolet];
6263[label="145.223.45.51;537pkt 537fpkt", shape=invtriangle, color=brown];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.45.51:*, 86.82.197.91:80}[84.0125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9606%)&lt;BR/&gt; 2674: (0.157418%)&lt;BR/&gt; 2673: (0.157418%)&lt;BR/&gt; 2672: (0.157418%)&lt;BR/&gt; 2671: (0.157418%)&gt;];
}
365--366[label="0.732673;74pkt 74fpkt"];
365--1770[label="1;26pkt 26fpkt"];
365--2946[label="1;54pkt 54fpkt"];
365--2947[label="0.524752;53pkt 53fpkt"];
366--697[label="0.997976;493pkt 493fpkt"];
366--2946[label="0.981481;53pkt 53fpkt"];
366--2947[label="1;226pkt 226fpkt"];
366--3978[label="0.91791;492pkt 492fpkt"];
366--6263[label="0.918063;493pkt 493fpkt"];
697--2947[label="0.765487;173pkt 173fpkt"];
697--3978[label="0.997976;493pkt 493fpkt"];
697--6263[label="1;494pkt 494fpkt"];
2946--2947[label="0.981481;53pkt 53fpkt"];
2947--3978[label="0.761062;172pkt 172fpkt"];
2947--6263[label="0.765487;173pkt 173fpkt"];
3978--6263[label="1;536pkt 536fpkt"];
</description>
    <slice>
      <filter dst_ip="86.82.197.91" dst_port="80" src_ip="145.223.45.51"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
678[label="212.205.204.176;s;2307pkt 2307fpkt", shape=diamond, color=yellow];
2951[label="212.205.204.176;s;2307pkt 2307fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.204.176:1293, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1293: (50%)&gt;];
}
678--2951[label="1;2307pkt 2307fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.205.204.176" src_port="1293"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
1022[label="166.59.128.135;d;367pkt 367fpkt", shape=diamond, color=yellow];
2956[label="166.59.128.135;d;132pkt 132fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.59.128.135:25}[89.3733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.0902%)&lt;BR/&gt; 53: (5.61122%)&lt;BR/&gt; 60401: (0.300601%)&lt;BR/&gt; 65474: (0.200401%)&lt;BR/&gt; 64756: (0.200401%)&gt;];
}
1022--2956[label="1;132pkt 132fpkt"];
1022--3384[label="0.00544959;2pkt 2fpkt"];
2956--3384[label="0.0151515;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.128.135" dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1024[label="213.17.228.112;s;347pkt 347fpkt", shape=diamond, color=yellow];
2957[label="213.17.228.112;s;345pkt 345fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.228.112:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1024--2957[label="1;345pkt 345fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.228.112"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
492[label="145.223.209.87;s;35pkt 35fpkt", shape=diamond, color=yellow];
1065[label="145.223.50.16;s;203pkt 203fpkt", shape=diamond, color=yellow];
1531[label="211.166.146.206;d;163pkt 163fpkt", shape=diamond, color=yellow];
5064[label="161.99.160.160;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.50.16:*, *:80}[43.1151%]&lt;BR/&gt;{161.99.236.165:*, 211.166.146.206:80}[25.2822%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5666%)&lt;BR/&gt; 1863: (2.3702%)&lt;BR/&gt; 443: (2.25734%)&lt;BR/&gt; 5190: (1.12867%)&lt;BR/&gt; 53: (0.564334%)&gt;];
}
492--764[label="0.0571429;2pkt 2fpkt"];
492--798[label="0.0285714;1pkt 1fpkt"];
492--1102[label="0.457143;16pkt 16fpkt"];
492--1344[label="0.0571429;2pkt 2fpkt"];
492--1901[label="0.0285714;1pkt 1fpkt"];
492--2460[label="0.09375;3pkt 3fpkt"];
492--2872[label="0.0571429;2pkt 2fpkt"];
492--3242[label="0.09375;3pkt 3fpkt"];
492--4363[label="1;34pkt 34fpkt"];
492--6471[label="1;35pkt 35fpkt"];
492--7649[label="1;34pkt 34fpkt"];
1065--1082[label="0.0267857;3pkt 3fpkt"];
1065--1102[label="0.00985222;2pkt 2fpkt"];
1065--1120[label="0.0173913;2pkt 2fpkt"];
1065--1163[label="0.0342466;5pkt 5fpkt"];
1065--1258[label="0.0246305;5pkt 5fpkt"];
1065--1294[label="0.0197044;4pkt 4fpkt"];
1065--1296[label="0.00492611;1pkt 1fpkt"];
1065--1370[label="0.0462963;5pkt 5fpkt"];
1065--1813[label="0.0482759;7pkt 7fpkt"];
1065--1846[label="0.03125;5pkt 5fpkt"];
1065--2700[label="0.0363636;2pkt 2fpkt"];
1065--2747[label="1;15pkt 15fpkt"];
1065--2872[label="0.0333333;3pkt 3fpkt"];
1065--2897[label="0.00505051;1pkt 1fpkt"];
1065--3096[label="0.0246305;5pkt 5fpkt"];
1065--3342[label="1;15pkt 15fpkt"];
1531--1809[label="0.99115;112pkt 112fpkt"];
1531--2332[label="0.0471698;5pkt 5fpkt"];
1531--3284[label="0.99115;112pkt 112fpkt"];
1531--3464[label="0.0285714;1pkt 1fpkt"];
1531--5027[label="0.202454;33pkt 33fpkt"];
1531--5032[label="0.00613497;1pkt 1fpkt"];
1531--5869[label="0.0245399;4pkt 4fpkt"];
5064--6878[label="1;42pkt 42fpkt"];
5064--7875[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.50.16"/>
      <filter dst_ip="211.166.146.206" dst_port="80" src_ip="161.99.236.165"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1070[label="161.99.62.48;s;327pkt 327fpkt", shape=diamond, color=yellow];
2368[label="24.161.76.16;d;221pkt 221fpkt", shape=diamond, color=yellow];
2966[label="161.99.62.48;s;110pkt 110fpkt", shape=hexagon, color=black];
3946[label="161.99.62.48;364pkt 364fpkt", shape=pentagon, color=darkviolet];
6249[label="161.99.62.48;364pkt 364fpkt", shape=invtriangle, color=brown];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.62.48:*, 24.161.76.16:80}[64.8352%]&lt;BR/&gt;{161.99.62.48:*, 0.147.13.254:80}[23.6264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8557%)&lt;BR/&gt; 2906: (0.180375%)&lt;BR/&gt; 2905: (0.180375%)&lt;BR/&gt; 2902: (0.180375%)&lt;BR/&gt; 2901: (0.180375%)&gt;];
}
1070--2368[label="1;221pkt 221fpkt"];
1070--2966[label="1;110pkt 110fpkt"];
1070--3946[label="1;327pkt 327fpkt"];
1070--6249[label="1;327pkt 327fpkt"];
2368--2966[label="0.754545;83pkt 83fpkt"];
2368--3946[label="1;221pkt 221fpkt"];
2368--6249[label="1;221pkt 221fpkt"];
2966--3946[label="1;110pkt 110fpkt"];
2966--6249[label="1;110pkt 110fpkt"];
3946--6249[label="1;364pkt 364fpkt"];
</description>
    <slice>
      <filter dst_ip="24.161.76.16" dst_port="80" src_ip="161.99.62.48"/>
      <filter dst_ip="0.147.13.254" dst_port="80" src_ip="161.99.62.48"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
1074[label="193.233.138.72;s;122pkt 122fpkt", shape=diamond, color=yellow];
2967[label="193.233.138.72;s;104pkt 104fpkt", shape=hexagon, color=black];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.233.138.72:*, 213.17.230.40:21}[95.082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (47.3451%)&lt;BR/&gt; 59019: (0.442478%)&lt;BR/&gt; 57067: (0.442478%)&lt;BR/&gt; 20902: (0.442478%)&lt;BR/&gt; 13576: (0.442478%)&gt;];
}
1074--2967[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.230.40" dst_port="21" src_ip="193.233.138.72"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
789[label="25.194.127.73;d;3pkt 3fpkt", shape=diamond, color=yellow];
2972[label="25.194.127.73;d;3pkt 3fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.121.82:18000, 25.194.127.73:1496}[33.3333%]&lt;BR/&gt;{149.177.121.82:18000, 25.194.127.73:1497}[33.3333%]&lt;BR/&gt;{149.177.121.82:18000, 25.194.127.73:1498}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18000: (50%)&lt;BR/&gt; 1498: (16.6667%)&lt;BR/&gt; 1497: (16.6667%)&lt;BR/&gt; 1496: (16.6667%)&gt;];
}
789--2972[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="25.194.127.73" dst_port="1498" src_ip="149.177.121.82" src_port="18000"/>
      <filter dst_ip="25.194.127.73" dst_port="1497" src_ip="149.177.121.82" src_port="18000"/>
      <filter dst_ip="25.194.127.73" dst_port="1496" src_ip="149.177.121.82" src_port="18000"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
471[label="131.186.160.143;d;42pkt 42fpkt", shape=diamond, color=yellow];
801[label="27.57.148.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
2971[label="27.57.144.54;s;18pkt 18fpkt", shape=hexagon, color=black];
2975[label="27.57.148.9;s;1pkt 1fpkt", shape=hexagon, color=black];
4018[label="27.57.144.54;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.197.81.44:80, 131.186.160.143:*}[51.6667%]&lt;BR/&gt;{27.57.144.54:80, 131.186.213.100:*}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3827%)&lt;BR/&gt; 1936: (1.85185%)&lt;BR/&gt; 1935: (1.85185%)&lt;BR/&gt; 1934: (1.85185%)&lt;BR/&gt; 1703: (1.23457%)&gt;];
}
471--801[label="1;1pkt 1fpkt"];
471--1103[label="0.1;2pkt 2fpkt"];
471--2971[label="0.111111;2pkt 2fpkt"];
471--2975[label="1;1pkt 1fpkt"];
471--4018[label="0.105263;2pkt 2fpkt"];
471--5349[label="0.666667;6pkt 6fpkt"];
801--2975[label="1;1pkt 1fpkt"];
2971--4018[label="0.944444;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.160.143" src_ip="211.197.81.44" src_port="80"/>
      <filter dst_ip="131.186.213.100" src_ip="27.57.144.54" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
296[label="145.222.238.87;s;182pkt 182fpkt", shape=diamond, color=yellow];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.238.87:7589, *:*}[68.1319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7589: (34.0659%)&lt;BR/&gt; 25: (3.84615%)&lt;BR/&gt; 24337: (1.92308%)&lt;BR/&gt; 9916: (1.37363%)&lt;BR/&gt; 15217: (1.0989%)&gt;];
}
296--2426[label="0.0526316;1pkt 1fpkt"];
296--2439[label="0.0131579;1pkt 1fpkt"];
296--2642[label="0.010989;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.238.87" src_port="7589"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
513[label="145.223.14.141;d;44pkt 44fpkt", shape=diamond, color=yellow];
514[label="193.141.81.28;s;2pkt 2fpkt", shape=diamond, color=yellow];
2985[label="193.141.81.28;s;2pkt 2fpkt", shape=hexagon, color=black];
3732[label="193.141.81.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6138[label="193.141.81.28;2pkt 2fpkt", shape=invtriangle, color=brown];
7449[label="193.141.81.28;2pkt 2fpkt", shape=invhouse, color=bisque];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.74.232.5:80, 145.223.14.141:*}[40.9091%]&lt;BR/&gt;{84.74.232.0:80, 145.223.14.141:*}[34.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1497: (5.66038%)&lt;BR/&gt; 1496: (4.71698%)&lt;BR/&gt; 1537: (0.943396%)&lt;BR/&gt; 1536: (0.943396%)&gt;];
}
513--514[label="1;2pkt 2fpkt"];
513--2985[label="1;2pkt 2fpkt"];
513--3732[label="1;1pkt 1fpkt"];
513--6138[label="1;2pkt 2fpkt"];
513--7449[label="1;2pkt 2fpkt"];
514--2985[label="1;2pkt 2fpkt"];
514--3732[label="1;1pkt 1fpkt"];
514--6138[label="1;2pkt 2fpkt"];
514--7449[label="1;2pkt 2fpkt"];
2985--3732[label="1;1pkt 1fpkt"];
2985--6138[label="1;2pkt 2fpkt"];
2985--7449[label="1;2pkt 2fpkt"];
3732--6138[label="1;1pkt 1fpkt"];
3732--7449[label="1;1pkt 1fpkt"];
6138--7449[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.14.141" src_ip="84.74.232.5" src_port="80"/>
      <filter dst_ip="145.223.14.141" src_ip="84.74.232.0" src_port="80"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120713029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
607[label="161.99.64.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
942[label="29.9.59.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
2996[label="161.99.64.206;s;1pkt 1fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.64.206:52961, 29.9.59.47:8170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52961: (50%)&lt;BR/&gt; 8170: (50%)&gt;];
}
607--942[label="1;1pkt 1fpkt"];
607--2996[label="1;1pkt 1fpkt"];
942--2996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="29.9.59.47" dst_port="8170" src_ip="161.99.64.206" src_port="52961"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1286[label="24.1.242.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
2999[label="24.1.242.115;s;1pkt 1fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.1.242.115:80, 166.59.140.223:57664}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57664: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1286--2999[label="1;1pkt 1fpkt"];
1286--3388[label="1;1pkt 1fpkt"];
2999--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.140.223" dst_port="57664" src_ip="24.1.242.115" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
786[label="149.110.213.47;s;34pkt 34fpkt", shape=diamond, color=yellow];
1626[label="201.38.51.44;d;21pkt 21fpkt", shape=diamond, color=yellow];
3005[label="149.110.213.47;s;34pkt 34fpkt", shape=hexagon, color=black];
3939[label="149.110.213.47;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6245[label="149.110.213.47;33pkt 33fpkt", shape=invtriangle, color=brown];
7514[label="149.110.213.47;33pkt 33fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.213.47:*, 201.38.51.44:80}[61.7647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6772%)&lt;BR/&gt; 2167: (1.5873%)&lt;BR/&gt; 2166: (1.5873%)&lt;BR/&gt; 2157: (1.5873%)&lt;BR/&gt; 2154: (1.5873%)&gt;];
}
786--1626[label="1;21pkt 21fpkt"];
786--3005[label="1;34pkt 34fpkt"];
786--3939[label="1;34pkt 34fpkt"];
786--6245[label="1;33pkt 33fpkt"];
786--7514[label="1;33pkt 33fpkt"];
1626--3005[label="1;21pkt 21fpkt"];
1626--3939[label="1;21pkt 21fpkt"];
1626--6245[label="0.952381;20pkt 20fpkt"];
1626--7514[label="0.952381;20pkt 20fpkt"];
3005--3939[label="1;34pkt 34fpkt"];
3005--6245[label="1;33pkt 33fpkt"];
3005--7514[label="1;33pkt 33fpkt"];
3939--6245[label="1;33pkt 33fpkt"];
3939--7514[label="1;33pkt 33fpkt"];
6245--7514[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="201.38.51.44" dst_port="80" src_ip="149.110.213.47"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1371[label="84.106.95.99;s;3pkt 3fpkt", shape=diamond, color=yellow];
3007[label="84.106.95.99;s;3pkt 3fpkt", shape=hexagon, color=black];
4471[label="84.106.95.99;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.106.95.99:1491, 131.186.4.237:1451}[33.3333%]&lt;BR/&gt;{84.106.95.99:1541, 131.186.4.237:1505}[33.3333%]&lt;BR/&gt;{84.106.95.99:6021, 131.186.4.237:1359}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6021: (16.6667%)&lt;BR/&gt; 1541: (16.6667%)&lt;BR/&gt; 1505: (16.6667%)&lt;BR/&gt; 1491: (16.6667%)&lt;BR/&gt; 1451: (16.6667%)&gt;];
}
1371--3007[label="1;3pkt 3fpkt"];
1371--4471[label="1;3pkt 3fpkt"];
3007--4471[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.4.237" dst_port="1359" src_ip="84.106.95.99" src_port="6021"/>
      <filter dst_ip="131.186.4.237" dst_port="1505" src_ip="84.106.95.99" src_port="1541"/>
      <filter dst_ip="131.186.4.237" dst_port="1451" src_ip="84.106.95.99" src_port="1491"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
605[label="145.223.16.220;d;12pkt 12fpkt", shape=diamond, color=yellow];
891[label="198.230.7.58;s;3pkt 3fpkt", shape=diamond, color=yellow];
1481[label="198.230.7.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
2861[label="145.223.16.220;d;3pkt 3fpkt", shape=hexagon, color=black];
2988[label="198.230.7.58;s;3pkt 3fpkt", shape=hexagon, color=black];
3020[label="198.230.7.39;s;2pkt 2fpkt", shape=hexagon, color=black];
3846[label="198.230.7.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4046[label="198.230.7.58;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6194[label="198.230.7.39;1pkt 1fpkt", shape=invtriangle, color=brown];
6297[label="198.230.7.58;3pkt 3fpkt", shape=invtriangle, color=brown];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.253.87.133:80, 145.223.16.220:*}[41.6667%]&lt;BR/&gt;{198.230.7.58:80, 145.223.16.220:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4333: (9.09091%)&lt;BR/&gt; 4324: (9.09091%)&lt;BR/&gt; 4323: (9.09091%)&lt;BR/&gt; 4362: (7.57576%)&gt;];
}
605--891[label="1;3pkt 3fpkt"];
605--1481[label="1;2pkt 2fpkt"];
605--2861[label="1;3pkt 3fpkt"];
605--2988[label="1;3pkt 3fpkt"];
605--3020[label="1;2pkt 2fpkt"];
605--3846[label="1;1pkt 1fpkt"];
605--4046[label="1;3pkt 3fpkt"];
605--6194[label="1;1pkt 1fpkt"];
605--6297[label="1;3pkt 3fpkt"];
891--2861[label="1;3pkt 3fpkt"];
891--2988[label="1;3pkt 3fpkt"];
891--4046[label="1;3pkt 3fpkt"];
891--6297[label="1;3pkt 3fpkt"];
1481--3020[label="1;2pkt 2fpkt"];
1481--3846[label="1;1pkt 1fpkt"];
1481--6194[label="1;1pkt 1fpkt"];
2861--2988[label="1;3pkt 3fpkt"];
2861--4046[label="1;3pkt 3fpkt"];
2861--6297[label="1;3pkt 3fpkt"];
2988--4046[label="1;3pkt 3fpkt"];
2988--6297[label="1;3pkt 3fpkt"];
3020--3846[label="1;1pkt 1fpkt"];
3020--6194[label="1;1pkt 1fpkt"];
3846--6194[label="1;1pkt 1fpkt"];
4046--6297[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.16.220" src_ip="198.253.87.133" src_port="80"/>
      <filter dst_ip="145.223.16.220" src_ip="198.230.7.58" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
910[label="212.79.192.172;s;557pkt 557fpkt", shape=diamond, color=yellow];
3026[label="212.79.192.172;s;296pkt 296fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.192.172:4672, *:4672}[52.4237%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (64.83%)&lt;BR/&gt; 4662: (8.49941%)&lt;BR/&gt; 0: (1.17233%)&lt;BR/&gt; 5672: (0.820633%)&lt;BR/&gt; 6672: (0.762016%)&gt;];
}
910--3026[label="1;296pkt 296fpkt"];
910--3384[label="0.00179533;1pkt 1fpkt"];
3026--3384[label="0.00337838;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="212.79.192.172" src_port="4672"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
608[label="145.223.42.226;s;261pkt 261fpkt", shape=diamond, color=yellow];
943[label="28.153.34.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
2862[label="145.223.42.226;s;82pkt 82fpkt", shape=hexagon, color=black];
3034[label="28.153.34.207;d;1pkt 1fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.42.226:*, 192.168.254.254:80}[31.8008%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.8986%)&lt;BR/&gt; 443: (3.62319%)&lt;BR/&gt; 29354: (2.02899%)&lt;BR/&gt; 2520: (2.02899%)&lt;BR/&gt; 56262: (1.5942%)&gt;];
}
608--759[label="0.00383142;1pkt 1fpkt"];
608--764[label="0.0350877;2pkt 2fpkt"];
608--943[label="1;1pkt 1fpkt"];
608--992[label="0.0166667;2pkt 2fpkt"];
608--1282[label="0.0205479;3pkt 3fpkt"];
608--1299[label="0.0147059;1pkt 1fpkt"];
608--1556[label="0.00598802;1pkt 1fpkt"];
608--2698[label="0.0111111;1pkt 1fpkt"];
608--2862[label="1;82pkt 82fpkt"];
608--3034[label="1;1pkt 1fpkt"];
608--3206[label="0.0205479;3pkt 3fpkt"];
608--5749[label="1;261pkt 261fpkt"];
608--7242[label="0.996169;260pkt 260fpkt"];
943--2862[label="1;1pkt 1fpkt"];
943--3034[label="1;1pkt 1fpkt"];
943--5749[label="1;1pkt 1fpkt"];
943--7242[label="1;1pkt 1fpkt"];
2862--3034[label="1;1pkt 1fpkt"];
2862--3206[label="0.0121951;1pkt 1fpkt"];
2862--5749[label="1;82pkt 82fpkt"];
2862--7242[label="0.987805;81pkt 81fpkt"];
3034--5749[label="1;1pkt 1fpkt"];
3034--7242[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.254" dst_port="80" src_ip="145.223.42.226"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
432[label="200.11.111.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.11.111.123:2285, 149.68.157.180:38863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38863: (50%)&lt;BR/&gt; 2285: (50%)&gt;];
}
432--2791[label="1;1pkt 1fpkt"];
432--3055[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="38863" src_ip="200.11.111.123" src_port="2285"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
825[label="149.110.141.192;s;9pkt 9fpkt", shape=diamond, color=yellow];
1140[label="223.78.141.120;d;3pkt 3fpkt", shape=diamond, color=yellow];
1432[label="223.78.141.124;d;5pkt 5fpkt", shape=diamond, color=yellow];
3072[label="223.78.141.120;d;2pkt 2fpkt", shape=hexagon, color=black];
5375[label="149.110.141.192;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7052[label="149.110.141.192;9pkt 9fpkt", shape=invtriangle, color=brown];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.141.192:*, 223.78.141.124:554}[55.5556%]&lt;BR/&gt;{149.110.141.192:*, 223.78.141.120:554}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (45.8333%)&lt;BR/&gt; 2169: (6.94444%)&lt;BR/&gt; 2150: (6.94444%)&lt;BR/&gt; 2177: (5.55556%)&lt;BR/&gt; 2175: (5.55556%)&gt;];
}
825--1140[label="1;3pkt 3fpkt"];
825--1432[label="1;5pkt 5fpkt"];
825--3072[label="1;2pkt 2fpkt"];
825--5375[label="1;8pkt 8fpkt"];
825--7052[label="1;9pkt 9fpkt"];
1140--3072[label="1;2pkt 2fpkt"];
1140--5375[label="1;3pkt 3fpkt"];
1140--7052[label="1;3pkt 3fpkt"];
1432--5375[label="0.8;4pkt 4fpkt"];
1432--7052[label="1;5pkt 5fpkt"];
3072--5375[label="1;2pkt 2fpkt"];
3072--7052[label="1;2pkt 2fpkt"];
5375--7052[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="223.78.141.124" dst_port="554" src_ip="149.110.141.192"/>
      <filter dst_ip="223.78.141.120" dst_port="554" src_ip="149.110.141.192"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
1398[label="197.73.181.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.73.181.236:16881, 212.66.63.1:2669}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (50%)&lt;BR/&gt; 2669: (50%)&gt;];
}
1398--2800[label="1;1pkt 1fpkt"];
1398--3074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="2669" src_ip="197.73.181.236" src_port="16881"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1187[label="205.20.188.24;d;321pkt 321fpkt", shape=diamond, color=yellow];
3078[label="205.20.188.24;d;169pkt 169fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.149.181:*, 205.20.188.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63541: (0.204082%)&lt;BR/&gt; 63540: (0.204082%)&lt;BR/&gt; 63539: (0.204082%)&lt;BR/&gt; 63538: (0.204082%)&gt;];
}
1187--3078[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_ip="205.20.188.24" dst_port="80" src_ip="145.222.149.181"/>
    </slice>
    <from sec="1120712447" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1791[label="210.80.181.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
3087[label="161.107.225.111;s;4pkt 4fpkt", shape=hexagon, color=black];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.225.111:1486, 210.80.181.47:554}[25%]&lt;BR/&gt;{161.107.225.111:1416, 211.166.144.73:1863}[25%]&lt;BR/&gt;{161.107.225.111:1427, 211.166.144.76:1863}[25%]&lt;BR/&gt;{161.107.225.111:1028, 211.166.144.132:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (30%)&lt;BR/&gt; 1486: (20%)&lt;BR/&gt; 554: (20%)&lt;BR/&gt; 1427: (10%)&lt;BR/&gt; 1416: (10%)&gt;];
}
1791--3087[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.132" dst_port="1863" src_ip="161.107.225.111" src_port="1028"/>
      <filter dst_ip="211.166.144.76" dst_port="1863" src_ip="161.107.225.111" src_port="1427"/>
      <filter dst_ip="211.166.144.73" dst_port="1863" src_ip="161.107.225.111" src_port="1416"/>
      <filter dst_ip="210.80.181.47" dst_port="554" src_ip="161.107.225.111" src_port="1486"/>
    </slice>
    <from sec="1120712637" usec="0"/>
    <to sec="1120712866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1166[label="149.177.106.116;s;18pkt 18fpkt", shape=diamond, color=yellow];
1482[label="194.174.70.163;d;5pkt 5fpkt", shape=diamond, color=yellow];
1499[label="194.174.70.182;d;2pkt 2fpkt", shape=diamond, color=yellow];
3089[label="194.174.70.163;d;3pkt 3fpkt", shape=hexagon, color=black];
4629[label="149.177.106.116;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6625[label="149.177.106.116;18pkt 18fpkt", shape=invtriangle, color=brown];
7737[label="149.177.106.116;18pkt 18fpkt", shape=invhouse, color=bisque];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.106.116:*, 194.174.70.163:*}[27.7778%]&lt;BR/&gt;{149.177.106.116:*, 194.174.68.122:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.9259%)&lt;BR/&gt; 0: (18.5185%)&lt;BR/&gt; 123: (9.87654%)&lt;BR/&gt; 21: (9.87654%)&lt;BR/&gt; 33086: (3.7037%)&gt;];
}
1166--1388[label="0.111111;2pkt 2fpkt"];
1166--1482[label="1;5pkt 5fpkt"];
1166--1499[label="1;2pkt 2fpkt"];
1166--3089[label="1;3pkt 3fpkt"];
1166--4629[label="1;17pkt 17fpkt"];
1166--6625[label="1;18pkt 18fpkt"];
1166--7737[label="1;18pkt 18fpkt"];
1482--3089[label="1;3pkt 3fpkt"];
1482--4629[label="0.8;4pkt 4fpkt"];
1482--6625[label="1;5pkt 5fpkt"];
1482--7737[label="1;5pkt 5fpkt"];
1499--4629[label="1;2pkt 2fpkt"];
1499--6625[label="1;2pkt 2fpkt"];
1499--7737[label="1;2pkt 2fpkt"];
3089--4629[label="0.666667;2pkt 2fpkt"];
3089--6625[label="1;3pkt 3fpkt"];
3089--7737[label="1;3pkt 3fpkt"];
4629--6625[label="1;17pkt 17fpkt"];
4629--7737[label="1;17pkt 17fpkt"];
6625--7737[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="194.174.70.163" src_ip="149.177.106.116"/>
      <filter dst_ip="194.174.68.122" dst_port="80" src_ip="149.177.106.116"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
894[label="154.248.33.155;s;45pkt 45fpkt", shape=diamond, color=yellow];
1239[label="149.110.156.149;d;31pkt 31fpkt", shape=diamond, color=yellow];
3094[label="154.248.33.155;s;32pkt 32fpkt", shape=hexagon, color=black];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.248.33.155:80, 149.110.156.149:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3323: (1.38889%)&lt;BR/&gt; 3322: (1.38889%)&lt;BR/&gt; 3321: (1.38889%)&lt;BR/&gt; 3320: (1.38889%)&gt;];
}
894--1239[label="1;31pkt 31fpkt"];
894--3094[label="1;32pkt 32fpkt"];
894--3388[label="0.4;18pkt 18fpkt"];
1239--3094[label="0.580645;18pkt 18fpkt"];
1239--3388[label="0.580645;18pkt 18fpkt"];
3094--3388[label="0.1875;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.156.149" src_ip="154.248.33.155" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
270[label="26.72.157.96;d;2pkt 2fpkt", shape=diamond, color=yellow];
272[label="149.177.105.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
2929[label="145.223.172.102;s;2pkt 2fpkt", shape=hexagon, color=black];
3099[label="149.177.105.165;s;1pkt 1fpkt", shape=hexagon, color=black];
4504[label="145.223.172.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.105.165:4512, 26.72.157.96:11986}[33.3333%]&lt;BR/&gt;{145.223.172.102:49266, 120.58.135.6:80}[33.3333%]&lt;BR/&gt;{145.223.172.102:49169, 26.72.157.96:11986}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11986: (42.8571%)&lt;BR/&gt; 49169: (21.4286%)&lt;BR/&gt; 4512: (21.4286%)&lt;BR/&gt; 49266: (7.14286%)&lt;BR/&gt; 80: (7.14286%)&gt;];
}
270--272[label="1;1pkt 1fpkt"];
270--591[label="0.5;1pkt 1fpkt"];
270--2929[label="0.5;1pkt 1fpkt"];
270--3099[label="1;1pkt 1fpkt"];
270--4504[label="1;1pkt 1fpkt"];
272--3099[label="1;1pkt 1fpkt"];
2929--4504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.72.157.96" dst_port="11986" src_ip="145.223.172.102" src_port="49169"/>
      <filter dst_ip="120.58.135.6" dst_port="80" src_ip="145.223.172.102" src_port="49266"/>
      <filter dst_ip="26.72.157.96" dst_port="11986" src_ip="149.177.105.165" src_port="4512"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
299[label="161.99.139.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
621[label="29.9.59.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
3101[label="161.99.139.112;d;1pkt 1fpkt", shape=hexagon, color=black];
3203[label="29.9.59.46;s;1pkt 1fpkt", shape=hexagon, color=black];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.9.59.46:80, 161.99.139.112:4095}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4095: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
299--621[label="1;1pkt 1fpkt"];
299--3101[label="1;1pkt 1fpkt"];
299--3203[label="1;1pkt 1fpkt"];
299--3388[label="1;1pkt 1fpkt"];
621--3101[label="1;1pkt 1fpkt"];
621--3203[label="1;1pkt 1fpkt"];
621--3388[label="1;1pkt 1fpkt"];
3101--3203[label="1;1pkt 1fpkt"];
3101--3388[label="1;1pkt 1fpkt"];
3203--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.139.112" dst_port="4095" src_ip="29.9.59.46" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
672[label="2.192.111.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
3106[label="2.192.111.40;s;1pkt 1fpkt", shape=hexagon, color=black];
3864[label="2.192.111.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.192.111.40:21228, 149.68.157.180:19077}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21228: (50%)&lt;BR/&gt; 19077: (50%)&gt;];
}
672--2791[label="1;1pkt 1fpkt"];
672--3106[label="1;1pkt 1fpkt"];
672--3864[label="1;1pkt 1fpkt"];
672--6204[label="1;1pkt 1fpkt"];
3106--3864[label="1;1pkt 1fpkt"];
3106--6204[label="1;1pkt 1fpkt"];
3864--6204[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="19077" src_ip="2.192.111.40" src_port="21228"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
418[label="193.238.78.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
3108[label="193.238.78.252;s;1pkt 1fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.238.78.252:2040, 131.186.4.237:1148}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2040: (50%)&lt;BR/&gt; 1148: (50%)&gt;];
}
418--3108[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.4.237" dst_port="1148" src_ip="193.238.78.252" src_port="2040"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
2499[label="205.36.226.70;d;106pkt 106fpkt", shape=diamond, color=yellow];
3127[label="145.223.16.157;s;155pkt 155fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.16.157:*, 205.36.226.70:80}[86.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3272: (0.383142%)&lt;BR/&gt; 3271: (0.383142%)&lt;BR/&gt; 3270: (0.383142%)&lt;BR/&gt; 3269: (0.383142%)&gt;];
}
2499--3127[label="0.688679;73pkt 73fpkt"];
2499--5032[label="1;106pkt 106fpkt"];
3127--5032[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_ip="205.36.226.70" dst_port="80" src_ip="145.223.16.157"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1934[label="211.166.150.66;d;16pkt 16fpkt", shape=diamond, color=yellow];
3128[label="211.166.150.66;d;16pkt 16fpkt", shape=hexagon, color=black];
3959[label="149.177.104.49;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4377[label="149.177.110.89;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4792[label="149.177.111.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5713[label="149.177.108.223;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6254[label="149.177.104.49;4pkt 4fpkt", shape=invtriangle, color=brown];
7520[label="149.177.104.49;4pkt 4fpkt", shape=invhouse, color=bisque];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.150.66:1863}[50%]&lt;BR/&gt;{149.177.108.223:*, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (45.8333%)&lt;BR/&gt; 1567: (4.16667%)&lt;BR/&gt; 3752: (2.5%)&lt;BR/&gt; 1614: (2.5%)&lt;BR/&gt; 1531: (2.5%)&gt;];
}
1934--3128[label="1;16pkt 16fpkt"];
1934--3959[label="0.333333;1pkt 1fpkt"];
1934--4159[label="0.0625;1pkt 1fpkt"];
1934--4377[label="0.333333;2pkt 2fpkt"];
1934--4792[label="0.333333;1pkt 1fpkt"];
1934--5107[label="0.2;1pkt 1fpkt"];
1934--5312[label="0.111111;1pkt 1fpkt"];
1934--5713[label="0.125;1pkt 1fpkt"];
1934--6254[label="0.25;1pkt 1fpkt"];
1934--6360[label="0.0625;1pkt 1fpkt"];
1934--7015[label="0.111111;1pkt 1fpkt"];
1934--7520[label="0.25;1pkt 1fpkt"];
1934--7582[label="0.0625;1pkt 1fpkt"];
1934--7959[label="0.125;1pkt 1fpkt"];
3128--3959[label="0.333333;1pkt 1fpkt"];
3128--4159[label="0.0625;1pkt 1fpkt"];
3128--4377[label="0.333333;2pkt 2fpkt"];
3128--4792[label="0.333333;1pkt 1fpkt"];
3128--5107[label="0.2;1pkt 1fpkt"];
3128--5312[label="0.111111;1pkt 1fpkt"];
3128--5713[label="0.125;1pkt 1fpkt"];
3128--6254[label="0.25;1pkt 1fpkt"];
3128--6360[label="0.0625;1pkt 1fpkt"];
3128--7015[label="0.111111;1pkt 1fpkt"];
3128--7520[label="0.25;1pkt 1fpkt"];
3128--7582[label="0.0625;1pkt 1fpkt"];
3128--7959[label="0.125;1pkt 1fpkt"];
3959--6254[label="1;3pkt 3fpkt"];
3959--7520[label="1;3pkt 3fpkt"];
6254--7520[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.108.223"/>
      <filter dst_ip="211.166.150.66" dst_port="1863"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1133[label="212.66.63.22;d;10pkt 10fpkt", shape=diamond, color=yellow];
1428[label="212.206.129.140;s;3pkt 3fpkt", shape=diamond, color=yellow];
3131[label="212.66.63.22;d;10pkt 10fpkt", shape=hexagon, color=black];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 212.66.63.22:4000}[50%]&lt;BR/&gt;{212.206.129.140:1000, 212.66.63.22:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (30.4348%)&lt;BR/&gt; 4000: (21.7391%)&lt;BR/&gt; 1000: (13.0435%)&lt;BR/&gt; 4005: (6.52174%)&lt;BR/&gt; 1385: (6.52174%)&gt;];
}
1133--1428[label="1;3pkt 3fpkt"];
1133--3131[label="1;10pkt 10fpkt"];
1428--3131[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.22" src_ip="212.206.129.140" src_port="1000"/>
      <filter dst_ip="212.66.63.22" dst_port="4000" src_port="8000"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
1142[label="198.80.84.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
3133[label="198.80.84.131;s;1pkt 1fpkt", shape=hexagon, color=black];
4768[label="198.80.84.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.80.84.131:18040, 212.66.63.123:3008}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18040: (50%)&lt;BR/&gt; 3008: (50%)&gt;];
}
1142--2795[label="1;1pkt 1fpkt"];
1142--3133[label="1;1pkt 1fpkt"];
1142--3350[label="1;1pkt 1fpkt"];
1142--4768[label="1;1pkt 1fpkt"];
3133--3350[label="1;1pkt 1fpkt"];
3133--4768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.123" dst_port="3008" src_ip="198.80.84.131" src_port="18040"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
749[label="24.194.150.48;s;137pkt 137fpkt", shape=diamond, color=yellow];
1182[label="131.186.82.152;d;49pkt 49fpkt", shape=diamond, color=yellow];
3136[label="131.186.82.152;d;26pkt 26fpkt", shape=hexagon, color=black];
5445[label="211.166.144.198;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7096[label="211.166.144.198;6pkt 6fpkt", shape=invtriangle, color=brown];
8006[label="211.166.144.198;6pkt 6fpkt", shape=invhouse, color=bisque];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.194.150.48:80, 131.186.82.152:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 1863: (4.54545%)&lt;BR/&gt; 2288: (1.08225%)&lt;BR/&gt; 51461: (0.649351%)&lt;BR/&gt; 4799: (0.649351%)&gt;];
}
749--1182[label="0.979592;48pkt 48fpkt"];
749--2889[label="1;120pkt 120fpkt"];
749--3136[label="0.961538;25pkt 25fpkt"];
749--3388[label="0.0437956;6pkt 6fpkt"];
1182--2889[label="0.673469;33pkt 33fpkt"];
1182--3136[label="1;26pkt 26fpkt"];
1182--3388[label="0.122449;6pkt 6fpkt"];
1182--5445[label="0.142857;1pkt 1fpkt"];
1182--7096[label="0.166667;1pkt 1fpkt"];
1182--8006[label="0.166667;1pkt 1fpkt"];
3136--5445[label="0.142857;1pkt 1fpkt"];
3136--7096[label="0.166667;1pkt 1fpkt"];
3136--8006[label="0.166667;1pkt 1fpkt"];
5445--7096[label="1;6pkt 6fpkt"];
5445--8006[label="1;6pkt 6fpkt"];
7096--8006[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.82.152" src_ip="24.194.150.48" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
628[label="193.33.52.115;s;2pkt 2fpkt", shape=diamond, color=yellow];
3156[label="193.33.52.115;s;2pkt 2fpkt", shape=hexagon, color=black];
4622[label="193.33.52.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6619[label="193.33.52.115;1pkt 1fpkt", shape=invtriangle, color=brown];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.33.52.115:4001, 213.17.234.101:1755}[50%]&lt;BR/&gt;{193.33.52.115:4003, 213.17.234.101:1755}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 4003: (33.3333%)&lt;BR/&gt; 4001: (16.6667%)&gt;];
}
628--3156[label="1;2pkt 2fpkt"];
628--4622[label="1;1pkt 1fpkt"];
628--6619[label="1;1pkt 1fpkt"];
3156--4622[label="1;1pkt 1fpkt"];
3156--6619[label="1;1pkt 1fpkt"];
4622--6619[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.234.101" dst_port="1755" src_ip="193.33.52.115" src_port="4003"/>
      <filter dst_ip="213.17.234.101" dst_port="1755" src_ip="193.33.52.115" src_port="4001"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
2083[label="201.70.20.208;s;338pkt 338fpkt", shape=diamond, color=yellow];
3157[label="201.70.20.208;s;273pkt 273fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.70.20.208:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4762: (0.327332%)&lt;BR/&gt; 4422: (0.327332%)&lt;BR/&gt; 4105: (0.327332%)&lt;BR/&gt; 3904: (0.327332%)&gt;];
}
2083--3157[label="1;273pkt 273fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.70.20.208"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
2095[label="131.186.80.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
2096[label="27.108.66.200;s;2pkt 2fpkt", shape=diamond, color=yellow];
3160[label="27.108.66.200;s;1pkt 1fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.108.66.200:80, 131.186.80.78:35889}[50%]&lt;BR/&gt;{27.108.66.200:80, 131.186.80.78:60815}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60815: (30%)&lt;BR/&gt; 35889: (20%)&gt;];
}
2095--2096[label="1;2pkt 2fpkt"];
2095--3160[label="1;1pkt 1fpkt"];
2095--3388[label="1;2pkt 2fpkt"];
2096--3160[label="1;1pkt 1fpkt"];
2096--3388[label="1;2pkt 2fpkt"];
3160--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.80.78" dst_port="60815" src_ip="27.108.66.200" src_port="80"/>
      <filter dst_ip="131.186.80.78" dst_port="35889" src_ip="27.108.66.200" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
2134[label="212.66.34.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
2365[label="194.136.209.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
3170[label="212.66.34.80;s;1pkt 1fpkt", shape=hexagon, color=black];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.34.80:1068, 194.136.209.52:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1068: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
2134--2365[label="1;1pkt 1fpkt"];
2134--3170[label="1;1pkt 1fpkt"];
2365--3170[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.136.209.52" dst_port="554" src_ip="212.66.34.80" src_port="1068"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
2147[label="196.100.178.59;s;3pkt 3fpkt", shape=diamond, color=yellow];
3173[label="196.100.178.59;s;3pkt 3fpkt", shape=hexagon, color=black];
4064[label="196.100.178.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6307[label="196.100.178.59;3pkt 3fpkt", shape=invtriangle, color=brown];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.100.178.59:3024, 212.66.63.123:24924}[33.3333%]&lt;BR/&gt;{196.100.178.59:9102, 212.66.63.123:2713}[33.3333%]&lt;BR/&gt;{196.100.178.59:9102, 212.66.63.123:24924}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9102: (36.3636%)&lt;BR/&gt; 24924: (31.8182%)&lt;BR/&gt; 2713: (18.1818%)&lt;BR/&gt; 3024: (13.6364%)&gt;];
}
2147--2795[label="1;3pkt 3fpkt"];
2147--3173[label="1;3pkt 3fpkt"];
2147--3350[label="1;3pkt 3fpkt"];
2147--4064[label="1;2pkt 2fpkt"];
2147--6307[label="1;3pkt 3fpkt"];
3173--3350[label="1;3pkt 3fpkt"];
3173--4064[label="1;2pkt 2fpkt"];
3173--6307[label="1;3pkt 3fpkt"];
4064--6307[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.123" dst_port="24924" src_ip="196.100.178.59" src_port="9102"/>
      <filter dst_ip="212.66.63.123" dst_port="2713" src_ip="196.100.178.59" src_port="9102"/>
      <filter dst_ip="212.66.63.123" dst_port="24924" src_ip="196.100.178.59" src_port="3024"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
2151[label="201.82.30.155;s;344pkt 344fpkt", shape=diamond, color=yellow];
3174[label="201.82.30.155;s;262pkt 262fpkt", shape=hexagon, color=black];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.82.30.155:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1134: (0.412541%)&lt;BR/&gt; 3822: (0.330033%)&lt;BR/&gt; 3775: (0.330033%)&lt;BR/&gt; 3685: (0.330033%)&gt;];
}
2151--3174[label="1;262pkt 262fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.82.30.155"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1382[label="26.217.231.180;d;123pkt 123fpkt", shape=diamond, color=yellow];
1383[label="161.99.84.56;s;124pkt 124fpkt", shape=diamond, color=yellow];
3176[label="161.99.84.56;s;97pkt 97fpkt", shape=hexagon, color=black];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.84.56:*, 26.217.231.180:80}[98.4%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7093%)&lt;BR/&gt; 3129: (0.436047%)&lt;BR/&gt; 3128: (0.436047%)&lt;BR/&gt; 3127: (0.436047%)&lt;BR/&gt; 3126: (0.436047%)&gt;];
}
1382--1383[label="1;123pkt 123fpkt"];
1382--3176[label="0.979381;95pkt 95fpkt"];
1383--3176[label="0.989691;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="26.217.231.180" dst_port="80" src_ip="161.99.84.56"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
2189[label="149.177.177.9;s;2032pkt 2032fpkt", shape=diamond, color=yellow];
3180[label="149.177.177.9;s;1162pkt 1162fpkt", shape=hexagon, color=black];
3513[label="149.177.177.9;2042pkt 2042fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.177.9:53, *:1025}[28.8932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.4106%)&lt;BR/&gt; 1025: (14.3335%)&lt;BR/&gt; 32769: (7.64897%)&lt;BR/&gt; 1031: (3.66692%)&lt;BR/&gt; 1027: (1.89076%)&gt;];
}
2189--3180[label="1;1162pkt 1162fpkt"];
2189--3384[label="0.000492126;1pkt 1fpkt"];
2189--3387[label="0.61811;1256pkt 1256fpkt"];
2189--3513[label="1;2032pkt 2032fpkt"];
3180--3384[label="0.000860585;1pkt 1fpkt"];
3180--3387[label="0.796041;925pkt 925fpkt"];
3180--3513[label="1;1162pkt 1162fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="149.177.177.9" src_port="53"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
2256[label="213.17.229.246;s;18pkt 18fpkt", shape=diamond, color=yellow];
2257[label="202.32.140.77;d;18pkt 18fpkt", shape=diamond, color=yellow];
3194[label="202.32.140.77;d;14pkt 14fpkt", shape=hexagon, color=black];
3261[label="213.17.229.246;s;18pkt 18fpkt", shape=hexagon, color=black];
5897[label="213.17.229.246;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7328[label="213.17.229.246;18pkt 18fpkt", shape=invtriangle, color=brown];
8140[label="213.17.229.246;17pkt 17fpkt", shape=invhouse, color=bisque];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.229.246:80, 202.32.140.77:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55006: (2.91667%)&lt;BR/&gt; 55003: (2.91667%)&lt;BR/&gt; 55002: (2.91667%)&lt;BR/&gt; 54992: (2.91667%)&gt;];
}
2256--2257[label="1;18pkt 18fpkt"];
2256--3194[label="1;14pkt 14fpkt"];
2256--3261[label="1;18pkt 18fpkt"];
2256--5897[label="1;17pkt 17fpkt"];
2256--7328[label="1;18pkt 18fpkt"];
2256--8140[label="1;17pkt 17fpkt"];
2257--3194[label="1;14pkt 14fpkt"];
2257--3261[label="1;18pkt 18fpkt"];
2257--5897[label="1;17pkt 17fpkt"];
2257--7328[label="1;18pkt 18fpkt"];
2257--8140[label="1;17pkt 17fpkt"];
3194--3261[label="1;14pkt 14fpkt"];
3194--5897[label="0.928571;13pkt 13fpkt"];
3194--7328[label="1;14pkt 14fpkt"];
3194--8140[label="0.928571;13pkt 13fpkt"];
3261--5897[label="1;17pkt 17fpkt"];
3261--7328[label="1;18pkt 18fpkt"];
3261--8140[label="1;17pkt 17fpkt"];
5897--7328[label="1;17pkt 17fpkt"];
5897--8140[label="1;17pkt 17fpkt"];
7328--8140[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="202.32.140.77" src_ip="213.17.229.246" src_port="80"/>
    </slice>
    <from sec="1120712779" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
185[label="201.2.244.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.2.244.4:19011, 212.66.63.1:27485}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27485: (50%)&lt;BR/&gt; 19011: (50%)&gt;];
}
185--2800[label="1;1pkt 1fpkt"];
185--3199[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="27485" src_ip="201.2.244.4" src_port="19011"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
575[label="212.66.180.59;d;121pkt 121fpkt", shape=diamond, color=yellow];
1343[label="145.223.22.156;d;135pkt 135fpkt", shape=diamond, color=yellow];
3134[label="24.107.70.17;s;169pkt 169fpkt", shape=hexagon, color=black];
5172[label="84.90.181.169;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5858[label="84.128.83.241;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.107.70.17:80, *:*}[37.4429%]&lt;BR/&gt;{*:80, 145.223.22.156:*}[30.8219%]&lt;BR/&gt;{*:80, 212.66.180.59:*}[27.1689%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0942%)&lt;BR/&gt; 443: (0.560538%)&lt;BR/&gt; 27593: (0.224215%)&lt;BR/&gt; 27584: (0.224215%)&lt;BR/&gt; 27524: (0.224215%)&gt;];
}
575--800[label="0.0661157;8pkt 8fpkt"];
575--834[label="0.132231;16pkt 16fpkt"];
575--1161[label="0.0165289;2pkt 2fpkt"];
575--1547[label="0.0465116;2pkt 2fpkt"];
575--2843[label="1;75pkt 75fpkt"];
575--2901[label="0.0280374;3pkt 3fpkt"];
575--2906[label="0.132231;16pkt 16fpkt"];
575--3046[label="0.0465116;2pkt 2fpkt"];
575--3134[label="0.0413223;5pkt 5fpkt"];
575--3182[label="0.0178571;2pkt 2fpkt"];
575--3388[label="0.0578512;7pkt 7fpkt"];
575--3594[label="0.0495868;6pkt 6fpkt"];
575--3610[label="0.132231;16pkt 16fpkt"];
575--3747[label="0.0165289;2pkt 2fpkt"];
575--4313[label="0.047619;2pkt 2fpkt"];
575--4583[label="1;1pkt 1fpkt"];
575--4779[label="1;74pkt 74fpkt"];
575--5077[label="0.04;1pkt 1fpkt"];
575--5308[label="0.0661157;8pkt 8fpkt"];
575--6073[label="0.132231;16pkt 16fpkt"];
575--6445[label="0.0465116;2pkt 2fpkt"];
575--6711[label="1;75pkt 75fpkt"];
575--7012[label="0.0661157;8pkt 8fpkt"];
575--7420[label="0.132231;16pkt 16fpkt"];
575--7789[label="1;74pkt 74fpkt"];
575--7956[label="0.0661157;8pkt 8fpkt"];
1343--2105[label="0.0444444;6pkt 6fpkt"];
1343--3056[label="0.0333333;2pkt 2fpkt"];
1343--3481[label="0.88;22pkt 22fpkt"];
1343--3633[label="0.897059;61pkt 61fpkt"];
1343--4283[label="0.184211;14pkt 14fpkt"];
1343--5172[label="0.25;3pkt 3fpkt"];
1343--5767[label="0.0307692;2pkt 2fpkt"];
1343--6428[label="0.181818;14pkt 14fpkt"];
3134--3204[label="0.106509;18pkt 18fpkt"];
3134--3388[label="0.0118343;2pkt 2fpkt"];
3134--3594[label="0.994083;168pkt 168fpkt"];
5858--7306[label="1;9pkt 9fpkt"];
5858--8129[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="24.107.70.17" src_port="80"/>
      <filter dst_ip="145.223.22.156" src_port="80"/>
      <filter dst_ip="212.66.180.59" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03253,2.04622,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
2185[label="145.222.61.187;s;24pkt 24fpkt", shape=diamond, color=yellow];
2315[label="194.236.14.68;d;8pkt 8fpkt", shape=diamond, color=yellow];
3178[label="145.222.61.187;s;24pkt 24fpkt", shape=hexagon, color=black];
3205[label="194.236.14.68;d;8pkt 8fpkt", shape=hexagon, color=black];
8107[label="166.59.148.230;1pkt 1fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.61.187:*, *:80}[38.7097%]&lt;BR/&gt;{*:*, 194.236.14.68:*}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.4615%)&lt;BR/&gt; 5050: (8.46154%)&lt;BR/&gt; 1863: (6.15385%)&lt;BR/&gt; 119: (4.61538%)&lt;BR/&gt; 28367: (3.07692%)&gt;];
}
2185--2315[label="0.125;1pkt 1fpkt"];
2185--2642[label="0.0833333;2pkt 2fpkt"];
2185--3178[label="1;24pkt 24fpkt"];
2185--3205[label="0.125;1pkt 1fpkt"];
2315--3178[label="0.125;1pkt 1fpkt"];
2315--3205[label="1;8pkt 8fpkt"];
2315--3816[label="0.25;1pkt 1fpkt"];
2315--8107[label="1;1pkt 1fpkt"];
3178--3205[label="0.125;1pkt 1fpkt"];
3205--3816[label="0.25;1pkt 1fpkt"];
3205--8107[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.68"/>
      <filter dst_port="80" src_ip="145.222.61.187"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
400[label="166.59.140.212;s;437pkt 437fpkt", shape=diamond, color=yellow];
644[label="27.57.174.188;d;18pkt 18fpkt", shape=diamond, color=yellow];
648[label="166.59.156.232;s;355pkt 355fpkt", shape=diamond, color=yellow];
744[label="26.21.43.70;d;3pkt 3fpkt", shape=diamond, color=yellow];
775[label="149.177.67.212;s;182pkt 182fpkt", shape=diamond, color=yellow];
1019[label="166.59.174.137;s;12pkt 12fpkt", shape=diamond, color=yellow];
1272[label="145.222.4.12;s;213pkt 213fpkt", shape=diamond, color=yellow];
1337[label="24.179.95.2;d;235pkt 235fpkt", shape=diamond, color=yellow];
1580[label="145.223.137.6;s;80pkt 80fpkt", shape=diamond, color=yellow];
1801[label="24.179.95.18;d;441pkt 441fpkt", shape=diamond, color=yellow];
1876[label="145.223.34.13;s;145pkt 145fpkt", shape=diamond, color=yellow];
1922[label="212.79.237.132;s;76pkt 76fpkt", shape=diamond, color=yellow];
2156[label="166.59.48.229;s;22pkt 22fpkt", shape=diamond, color=yellow];
2282[label="24.88.116.21;d;39pkt 39fpkt", shape=diamond, color=yellow];
2469[label="145.223.253.69;s;84pkt 84fpkt", shape=diamond, color=yellow];
2471[label="166.59.163.43;s;25pkt 25fpkt", shape=diamond, color=yellow];
2489[label="24.88.116.1;d;55pkt 55fpkt", shape=diamond, color=yellow];
2547[label="24.88.116.4;d;38pkt 38fpkt", shape=diamond, color=yellow];
2550[label="24.88.116.11;d;38pkt 38fpkt", shape=diamond, color=yellow];
2701[label="166.59.156.237;s;53pkt 53fpkt", shape=diamond, color=yellow];
2776[label="24.88.116.29;d;34pkt 34fpkt", shape=diamond, color=yellow];
3216[label="145.223.137.6;s;60pkt 60fpkt", shape=hexagon, color=black];
3422[label="212.79.194.1;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3474[label="145.223.137.6;83pkt 83fpkt", shape=pentagon, color=darkviolet];
3716[label="166.59.206.26;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3865[label="166.59.163.40;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4094[label="149.177.67.64;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4137[label="149.177.67.67;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4172[label="145.223.253.69;95pkt 95fpkt", shape=pentagon, color=darkviolet];
4546[label="166.59.195.106;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4875[label="166.59.168.141;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4902[label="145.222.125.144;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5161[label="161.99.210.168;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5471[label="213.17.235.200;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5509[label="166.59.210.204;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5630[label="166.59.140.214;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5798[label="166.59.156.232;367pkt 367fpkt", shape=pentagon, color=darkviolet];
5995[label="145.223.137.6;83pkt 83fpkt", shape=invtriangle, color=brown];
6327[label="149.177.67.64;38pkt 38fpkt", shape=invtriangle, color=brown];
6368[label="145.223.253.69;94pkt 94fpkt", shape=invtriangle, color=brown];
6738[label="166.59.174.137;11pkt 11fpkt", shape=invtriangle, color=brown];
6933[label="161.99.210.168;35pkt 35fpkt", shape=invtriangle, color=brown];
7127[label="166.59.210.204;17pkt 17fpkt", shape=invtriangle, color=brown];
7269[label="166.59.156.232;368pkt 368fpkt", shape=invtriangle, color=brown];
7356[label="166.59.235.252;18pkt 18fpkt", shape=invtriangle, color=brown];
7382[label="145.223.137.6;83pkt 83fpkt", shape=invhouse, color=bisque];
7562[label="149.177.67.64;38pkt 38fpkt", shape=invhouse, color=bisque];
7586[label="145.223.253.69;94pkt 94fpkt", shape=invhouse, color=bisque];
7911[label="161.99.210.168;35pkt 35fpkt", shape=invhouse, color=bisque];
8024[label="166.59.210.204;18pkt 18fpkt", shape=invhouse, color=bisque];
8159[label="166.59.235.252;18pkt 18fpkt", shape=invhouse, color=bisque];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[36.5756%]&lt;BR/&gt;{*:*, *:2703}[30.9887%]&lt;BR/&gt;{*:*, *:25}[22.91%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.4819%)&lt;BR/&gt; 2703: (16.3572%)&lt;BR/&gt; 0: (2.25464%)&lt;BR/&gt; 113: (0.972591%)&lt;BR/&gt; 53: (0.718391%)&gt;];
}
400--644[label="0.0555556;1pkt 1fpkt"];
400--679[label="0.642857;9pkt 9fpkt"];
400--975[label="0.631579;12pkt 12fpkt"];
400--1265[label="0.0588235;1pkt 1fpkt"];
400--2005[label="0.666667;8pkt 8fpkt"];
400--2282[label="0.025641;1pkt 1fpkt"];
400--2489[label="0.0545455;3pkt 3fpkt"];
400--2547[label="0.0526316;2pkt 2fpkt"];
400--2550[label="0.0263158;1pkt 1fpkt"];
400--2719[label="0.52381;11pkt 11fpkt"];
400--2776[label="0.0294118;1pkt 1fpkt"];
400--2882[label="0.75;3pkt 3fpkt"];
644--645[label="0.111111;2pkt 2fpkt"];
644--928[label="0.222222;4pkt 4fpkt"];
644--957[label="0.0555556;1pkt 1fpkt"];
644--1272[label="0.0555556;1pkt 1fpkt"];
644--1580[label="0.0555556;1pkt 1fpkt"];
644--3171[label="0.166667;3pkt 3fpkt"];
644--3216[label="0.0555556;1pkt 1fpkt"];
644--3474[label="0.0555556;1pkt 1fpkt"];
644--5242[label="0.222222;4pkt 4fpkt"];
644--5995[label="0.0555556;1pkt 1fpkt"];
644--7382[label="0.0555556;1pkt 1fpkt"];
648--2247[label="0.5;7pkt 7fpkt"];
648--2282[label="0.282051;11pkt 11fpkt"];
648--2489[label="0.309091;17pkt 17fpkt"];
648--2547[label="0.315789;12pkt 12fpkt"];
648--2550[label="0.289474;11pkt 11fpkt"];
648--2776[label="0.294118;10pkt 10fpkt"];
648--5798[label="0.997183;354pkt 354fpkt"];
648--7269[label="1;355pkt 355fpkt"];
744--745[label="0.666667;2pkt 2fpkt"];
775--1265[label="0.0588235;1pkt 1fpkt"];
775--5592[label="0.994505;181pkt 181fpkt"];
775--7165[label="1;182pkt 182fpkt"];
775--8050[label="0.994505;181pkt 181fpkt"];
1019--2282[label="0.166667;2pkt 2fpkt"];
1019--2489[label="0.166667;2pkt 2fpkt"];
1019--2547[label="0.166667;2pkt 2fpkt"];
1019--2550[label="0.166667;2pkt 2fpkt"];
1019--2776[label="0.166667;2pkt 2fpkt"];
1019--4832[label="1;12pkt 12fpkt"];
1019--6738[label="1;11pkt 11fpkt"];
1272--1337[label="0.211268;45pkt 45fpkt"];
1272--1801[label="0.361502;77pkt 77fpkt"];
1272--2373[label="0.25;1pkt 1fpkt"];
1272--3384[label="0.00469484;1pkt 1fpkt"];
1337--1854[label="0.0163934;2pkt 2fpkt"];
1337--1876[label="0.482759;70pkt 70fpkt"];
1337--2324[label="0.0117647;2pkt 2fpkt"];
1337--2469[label="0.309524;26pkt 26fpkt"];
1337--3918[label="0.333333;18pkt 18fpkt"];
1337--4094[label="0.394737;15pkt 15fpkt"];
1337--4137[label="0.5;11pkt 11fpkt"];
1337--4172[label="0.273684;26pkt 26fpkt"];
1337--4902[label="0.111111;3pkt 3fpkt"];
1337--5161[label="0.4;14pkt 14fpkt"];
1337--5471[label="0.242424;8pkt 8fpkt"];
1337--6234[label="0.327273;18pkt 18fpkt"];
1337--6327[label="0.394737;15pkt 15fpkt"];
1337--6368[label="0.276596;26pkt 26fpkt"];
1337--6933[label="0.4;14pkt 14fpkt"];
1337--7505[label="0.327273;18pkt 18fpkt"];
1337--7562[label="0.394737;15pkt 15fpkt"];
1337--7586[label="0.276596;26pkt 26fpkt"];
1337--7911[label="0.4;14pkt 14fpkt"];
1580--3216[label="1;60pkt 60fpkt"];
1580--3474[label="1;80pkt 80fpkt"];
1580--5995[label="1;80pkt 80fpkt"];
1580--7382[label="1;80pkt 80fpkt"];
1801--1854[label="0.0163934;2pkt 2fpkt"];
1801--1876[label="0.372414;54pkt 54fpkt"];
1801--2324[label="0.0117647;2pkt 2fpkt"];
1801--2469[label="0.309524;26pkt 26fpkt"];
1801--2970[label="0.54878;45pkt 45fpkt"];
1801--3422[label="0.307692;4pkt 4fpkt"];
1801--3918[label="0.296296;16pkt 16fpkt"];
1801--4094[label="0.394737;15pkt 15fpkt"];
1801--4137[label="0.409091;9pkt 9fpkt"];
1801--4172[label="0.273684;26pkt 26fpkt"];
1801--4902[label="0.222222;6pkt 6fpkt"];
1801--5161[label="0.4;14pkt 14fpkt"];
1801--5471[label="0.242424;8pkt 8fpkt"];
1801--6234[label="0.290909;16pkt 16fpkt"];
1801--6327[label="0.394737;15pkt 15fpkt"];
1801--6368[label="0.276596;26pkt 26fpkt"];
1801--6933[label="0.4;14pkt 14fpkt"];
1801--7505[label="0.290909;16pkt 16fpkt"];
1801--7562[label="0.394737;15pkt 15fpkt"];
1801--7586[label="0.276596;26pkt 26fpkt"];
1801--7911[label="0.4;14pkt 14fpkt"];
1922--2719[label="0.047619;1pkt 1fpkt"];
1922--4787[label="0.986842;75pkt 75fpkt"];
1922--6716[label="0.986842;75pkt 75fpkt"];
1922--7791[label="1;76pkt 76fpkt"];
2156--2489[label="0.0909091;2pkt 2fpkt"];
2282--2471[label="0.04;1pkt 1fpkt"];
2282--3865[label="0.125;1pkt 1fpkt"];
2282--3900[label="0.0285714;1pkt 1fpkt"];
2282--4546[label="0.0512821;2pkt 2fpkt"];
2282--4713[label="0.0625;2pkt 2fpkt"];
2282--4744[label="0.025641;1pkt 1fpkt"];
2282--4832[label="0.166667;2pkt 2fpkt"];
2282--4875[label="0.0294118;1pkt 1fpkt"];
2282--5509[label="0.0588235;1pkt 1fpkt"];
2282--5798[label="0.282051;11pkt 11fpkt"];
2282--6671[label="0.0625;2pkt 2fpkt"];
2282--6738[label="0.0909091;1pkt 1fpkt"];
2282--7127[label="0.0588235;1pkt 1fpkt"];
2282--7269[label="0.282051;11pkt 11fpkt"];
2282--7762[label="0.0625;2pkt 2fpkt"];
2282--8024[label="0.111111;2pkt 2fpkt"];
2469--4172[label="1;84pkt 84fpkt"];
2469--6368[label="0.988095;83pkt 83fpkt"];
2469--7586[label="0.988095;83pkt 83fpkt"];
2471--2489[label="0.04;1pkt 1fpkt"];
2471--2547[label="0.04;1pkt 1fpkt"];
2471--2550[label="0.04;1pkt 1fpkt"];
2471--2776[label="0.04;1pkt 1fpkt"];
2489--3716[label="0.2;1pkt 1fpkt"];
2489--3865[label="0.125;1pkt 1fpkt"];
2489--3900[label="0.0285714;1pkt 1fpkt"];
2489--4546[label="0.0363636;2pkt 2fpkt"];
2489--4713[label="0.0625;2pkt 2fpkt"];
2489--4744[label="0.0181818;1pkt 1fpkt"];
2489--4832[label="0.166667;2pkt 2fpkt"];
2489--4875[label="0.0294118;1pkt 1fpkt"];
2489--5201[label="0.05;2pkt 2fpkt"];
2489--5509[label="0.117647;2pkt 2fpkt"];
2489--5630[label="0.0181818;1pkt 1fpkt"];
2489--5798[label="0.309091;17pkt 17fpkt"];
2489--6671[label="0.0625;2pkt 2fpkt"];
2489--6738[label="0.181818;2pkt 2fpkt"];
2489--6951[label="0.0512821;2pkt 2fpkt"];
2489--7127[label="0.117647;2pkt 2fpkt"];
2489--7269[label="0.309091;17pkt 17fpkt"];
2489--7762[label="0.0625;2pkt 2fpkt"];
2489--8024[label="0.111111;2pkt 2fpkt"];
2547--3716[label="0.2;1pkt 1fpkt"];
2547--3865[label="0.125;1pkt 1fpkt"];
2547--4546[label="0.0526316;2pkt 2fpkt"];
2547--4713[label="0.0625;2pkt 2fpkt"];
2547--4744[label="0.0263158;1pkt 1fpkt"];
2547--4832[label="0.166667;2pkt 2fpkt"];
2547--5509[label="0.117647;2pkt 2fpkt"];
2547--5798[label="0.315789;12pkt 12fpkt"];
2547--5943[label="0.0526316;1pkt 1fpkt"];
2547--6671[label="0.0625;2pkt 2fpkt"];
2547--6738[label="0.181818;2pkt 2fpkt"];
2547--7127[label="0.117647;2pkt 2fpkt"];
2547--7269[label="0.315789;12pkt 12fpkt"];
2547--7356[label="0.0555556;1pkt 1fpkt"];
2547--7762[label="0.0625;2pkt 2fpkt"];
2547--8024[label="0.111111;2pkt 2fpkt"];
2547--8159[label="0.0555556;1pkt 1fpkt"];
2550--3716[label="0.2;1pkt 1fpkt"];
2550--3865[label="0.125;1pkt 1fpkt"];
2550--4546[label="0.0526316;2pkt 2fpkt"];
2550--4713[label="0.09375;3pkt 3fpkt"];
2550--4744[label="0.0263158;1pkt 1fpkt"];
2550--4832[label="0.166667;2pkt 2fpkt"];
2550--5509[label="0.117647;2pkt 2fpkt"];
2550--5798[label="0.289474;11pkt 11fpkt"];
2550--6671[label="0.09375;3pkt 3fpkt"];
2550--6738[label="0.181818;2pkt 2fpkt"];
2550--7127[label="0.117647;2pkt 2fpkt"];
2550--7269[label="0.289474;11pkt 11fpkt"];
2550--7762[label="0.09375;3pkt 3fpkt"];
2550--8024[label="0.111111;2pkt 2fpkt"];
2701--2719[label="0.047619;1pkt 1fpkt"];
2776--3716[label="0.2;1pkt 1fpkt"];
2776--3865[label="0.125;1pkt 1fpkt"];
2776--4546[label="0.0588235;2pkt 2fpkt"];
2776--4713[label="0.0625;2pkt 2fpkt"];
2776--4744[label="0.0294118;1pkt 1fpkt"];
2776--4832[label="0.166667;2pkt 2fpkt"];
2776--5509[label="0.117647;2pkt 2fpkt"];
2776--5798[label="0.294118;10pkt 10fpkt"];
2776--6671[label="0.0625;2pkt 2fpkt"];
2776--6738[label="0.181818;2pkt 2fpkt"];
2776--7127[label="0.117647;2pkt 2fpkt"];
2776--7269[label="0.294118;10pkt 10fpkt"];
2776--7762[label="0.0625;2pkt 2fpkt"];
2776--8024[label="0.111111;2pkt 2fpkt"];
3216--3474[label="1;60pkt 60fpkt"];
3216--5995[label="1;60pkt 60fpkt"];
3216--7382[label="1;60pkt 60fpkt"];
3474--5995[label="1;83pkt 83fpkt"];
3474--7382[label="1;83pkt 83fpkt"];
4094--6327[label="1;38pkt 38fpkt"];
4094--7562[label="1;38pkt 38fpkt"];
4172--6368[label="1;94pkt 94fpkt"];
4172--7586[label="1;94pkt 94fpkt"];
5161--6933[label="1;35pkt 35fpkt"];
5161--7911[label="1;35pkt 35fpkt"];
5509--7127[label="1;17pkt 17fpkt"];
5509--8024[label="1;17pkt 17fpkt"];
5798--7269[label="1;367pkt 367fpkt"];
5995--7382[label="1;83pkt 83fpkt"];
6327--7562[label="1;38pkt 38fpkt"];
6368--7586[label="1;94pkt 94fpkt"];
6933--7911[label="1;35pkt 35fpkt"];
7127--8024[label="1;17pkt 17fpkt"];
7356--8159[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="2703"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
2335[label="0.192.7.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
3211[label="0.192.7.41;s;1pkt 1fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.192.7.41:2401, 149.68.157.180:41045}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41045: (50%)&lt;BR/&gt; 2401: (50%)&gt;];
}
2335--2791[label="1;1pkt 1fpkt"];
2335--3211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="41045" src_ip="0.192.7.41" src_port="2401"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2346[label="194.236.14.106;d;13pkt 13fpkt", shape=diamond, color=yellow];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.236.14.106:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 62918: (3.84615%)&lt;BR/&gt; 4391: (3.84615%)&lt;BR/&gt; 3094: (3.84615%)&lt;BR/&gt; 3039: (3.84615%)&gt;];
}
2346--3224[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.106" dst_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1076[label="204.151.242.239;s;3pkt 3fpkt", shape=diamond, color=yellow];
3225[label="204.151.242.239;s;3pkt 3fpkt", shape=hexagon, color=black];
5851[label="204.151.242.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.151.242.239:29682, 149.68.157.180:19077}[33.3333%]&lt;BR/&gt;{204.151.242.239:29804, 149.68.157.180:30347}[33.3333%]&lt;BR/&gt;{204.151.242.239:49555, 149.68.157.180:49357}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30347: (18.75%)&lt;BR/&gt; 29804: (18.75%)&lt;BR/&gt; 29682: (18.75%)&lt;BR/&gt; 19077: (18.75%)&lt;BR/&gt; 49555: (12.5%)&gt;];
}
1076--2791[label="1;3pkt 3fpkt"];
1076--3225[label="1;3pkt 3fpkt"];
1076--5851[label="1;2pkt 2fpkt"];
1076--7300[label="1;2pkt 2fpkt"];
3225--5851[label="1;2pkt 2fpkt"];
3225--7300[label="1;2pkt 2fpkt"];
5851--7300[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="49357" src_ip="204.151.242.239" src_port="49555"/>
      <filter dst_ip="149.68.157.180" dst_port="30347" src_ip="204.151.242.239" src_port="29804"/>
      <filter dst_ip="149.68.157.180" dst_port="19077" src_ip="204.151.242.239" src_port="29682"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1613[label="84.18.74.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.18.74.131:16119, 212.66.63.1:1057}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16119: (50%)&lt;BR/&gt; 1057: (50%)&gt;];
}
1613--2800[label="1;1pkt 1fpkt"];
1613--3228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="1057" src_ip="84.18.74.131" src_port="16119"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
2387[label="202.66.33.230;d;3pkt 3fpkt", shape=diamond, color=yellow];
2388[label="166.59.132.119;s;3pkt 3fpkt", shape=diamond, color=yellow];
3233[label="202.66.33.230;d;3pkt 3fpkt", shape=hexagon, color=black];
3309[label="166.59.132.119;s;3pkt 3fpkt", shape=hexagon, color=black];
4662[label="166.59.132.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6644[label="166.59.132.119;2pkt 2fpkt", shape=invtriangle, color=brown];
7747[label="166.59.132.119;2pkt 2fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.132.119:1080, 202.66.33.230:443}[33.3333%]&lt;BR/&gt;{166.59.132.119:1091, 202.66.33.230:443}[33.3333%]&lt;BR/&gt;{166.59.132.119:1092, 202.66.33.230:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1092: (19.4444%)&lt;BR/&gt; 1091: (19.4444%)&lt;BR/&gt; 1080: (11.1111%)&gt;];
}
2387--2388[label="1;3pkt 3fpkt"];
2387--3233[label="1;3pkt 3fpkt"];
2387--3309[label="1;3pkt 3fpkt"];
2387--4662[label="1;2pkt 2fpkt"];
2387--6644[label="1;2pkt 2fpkt"];
2387--7747[label="1;2pkt 2fpkt"];
2388--3233[label="1;3pkt 3fpkt"];
2388--3309[label="1;3pkt 3fpkt"];
2388--4662[label="1;2pkt 2fpkt"];
2388--6644[label="1;2pkt 2fpkt"];
2388--7747[label="1;2pkt 2fpkt"];
3233--3309[label="1;3pkt 3fpkt"];
3233--4662[label="1;2pkt 2fpkt"];
3233--6644[label="1;2pkt 2fpkt"];
3233--7747[label="1;2pkt 2fpkt"];
3309--4662[label="1;2pkt 2fpkt"];
3309--6644[label="1;2pkt 2fpkt"];
3309--7747[label="1;2pkt 2fpkt"];
4662--6644[label="1;2pkt 2fpkt"];
4662--7747[label="1;2pkt 2fpkt"];
6644--7747[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="202.66.33.230" dst_port="443" src_ip="166.59.132.119" src_port="1092"/>
      <filter dst_ip="202.66.33.230" dst_port="443" src_ip="166.59.132.119" src_port="1091"/>
      <filter dst_ip="202.66.33.230" dst_port="443" src_ip="166.59.132.119" src_port="1080"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1909[label="197.74.31.172;s;1064pkt 1064fpkt", shape=diamond, color=yellow];
3234[label="197.74.31.172;s;952pkt 952fpkt", shape=hexagon, color=black];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.74.31.172:1261, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1261: (50%)&gt;];
}
1909--3234[label="1;952pkt 952fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.74.31.172" src_port="1261"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
2180[label="0.45.185.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.45.185.128:1855, 149.68.157.180:35190}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35190: (50%)&lt;BR/&gt; 1855: (50%)&gt;];
}
2180--2791[label="1;1pkt 1fpkt"];
2180--3237[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="35190" src_ip="0.45.185.128" src_port="1855"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955355,2.03041,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1179[label="149.110.156.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
1425[label="194.174.31.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
3249[label="149.110.156.150;d;1pkt 1fpkt", shape=hexagon, color=black];
6247[label="194.174.31.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.174.31.48:80, 149.110.156.150:1073}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1073: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1179--1425[label="1;1pkt 1fpkt"];
1179--3249[label="1;1pkt 1fpkt"];
1179--3388[label="1;1pkt 1fpkt"];
1179--6247[label="1;1pkt 1fpkt"];
1425--3249[label="1;1pkt 1fpkt"];
1425--3388[label="1;1pkt 1fpkt"];
1425--6247[label="1;1pkt 1fpkt"];
3249--3388[label="1;1pkt 1fpkt"];
3249--6247[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.156.150" dst_port="1073" src_ip="194.174.31.48" src_port="80"/>
    </slice>
    <from sec="1120712436" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851288,2.08273,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.6.13.92"/>
      <from sec="1120712739" usec="0"/>
      <to sec="1120713139" usec="0"/>
    </slice>
    <from sec="1120712739" usec="0"/>
    <to sec="1120713139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
895[label="145.223.8.76;d;37pkt 37fpkt", shape=diamond, color=yellow];
1460[label="197.99.149.6;s;6pkt 6fpkt", shape=diamond, color=yellow];
3271[label="145.223.8.76;d;37pkt 37fpkt", shape=hexagon, color=black];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.36.14.191:80, 145.223.8.76:*}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2718: (1.875%)&lt;BR/&gt; 2717: (1.875%)&lt;BR/&gt; 2716: (1.875%)&lt;BR/&gt; 2715: (1.875%)&gt;];
}
895--1460[label="1;6pkt 6fpkt"];
895--3271[label="1;37pkt 37fpkt"];
895--3388[label="0.0540541;2pkt 2fpkt"];
1460--3271[label="1;6pkt 6fpkt"];
1460--3388[label="0.333333;2pkt 2fpkt"];
3271--3388[label="0.0540541;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.8.76" src_ip="212.36.14.191" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1794[label="145.222.167.175;s;91pkt 91fpkt", shape=diamond, color=yellow];
2306[label="84.254.191.144;d;94pkt 94fpkt", shape=diamond, color=yellow];
3273[label="145.222.167.175;s;91pkt 91fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.167.175:*, 84.254.191.144:80}[88.7755%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14404: (0.543478%)&lt;BR/&gt; 14403: (0.543478%)&lt;BR/&gt; 14402: (0.543478%)&lt;BR/&gt; 14401: (0.543478%)&gt;];
}
1794--2306[label="0.956044;87pkt 87fpkt"];
1794--3273[label="1;91pkt 91fpkt"];
2306--3232[label="0.0106383;1pkt 1fpkt"];
2306--3273[label="0.956044;87pkt 87fpkt"];
2306--4823[label="0.0106383;1pkt 1fpkt"];
2306--4854[label="0.26087;6pkt 6fpkt"];
2306--6732[label="0.0106383;1pkt 1fpkt"];
2306--6749[label="0.26087;6pkt 6fpkt"];
2306--7806[label="0.272727;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="84.254.191.144" dst_port="80" src_ip="145.222.167.175"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
2314[label="166.59.208.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
3276[label="166.59.208.216;s;1pkt 1fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.208.216:1576, 220.188.86.51:6665}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (50%)&lt;BR/&gt; 1576: (50%)&gt;];
}
2314--3276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.188.86.51" dst_port="6665" src_ip="166.59.208.216" src_port="1576"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
1281[label="211.9.237.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.9.237.180:2921, 149.68.157.180:38863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38863: (50%)&lt;BR/&gt; 2921: (50%)&gt;];
}
1281--2791[label="1;1pkt 1fpkt"];
1281--3282[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="38863" src_ip="211.9.237.180" src_port="2921"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1809[label="161.99.236.165;s;113pkt 113fpkt", shape=diamond, color=yellow];
3284[label="161.99.236.165;s;113pkt 113fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.236.165:*, 211.166.146.206:80}[99.115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5575%)&lt;BR/&gt; 2042: (0.442478%)&lt;BR/&gt; 2041: (0.442478%)&lt;BR/&gt; 2027: (0.442478%)&lt;BR/&gt; 2026: (0.442478%)&gt;];
}
1809--3284[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.146.206" dst_port="80" src_ip="161.99.236.165"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
676[label="0.96.111.151;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.96.111.151:43963, 213.17.229.107:873}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43963: (50%)&lt;BR/&gt; 873: (50%)&gt;];
}
676--964[label="1;1pkt 1fpkt"];
676--3290[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.229.107" dst_port="873" src_ip="0.96.111.151" src_port="43963"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
2617[label="213.76.159.32;s;257pkt 257fpkt", shape=diamond, color=yellow];
3295[label="213.76.159.32;s;257pkt 257fpkt", shape=hexagon, color=black];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.76.159.32:*, *:445}[71.9844%]&lt;BR/&gt;{213.76.159.32:*, *:1433}[28.0156%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (35.9922%)&lt;BR/&gt; 1433: (14.0078%)&lt;BR/&gt; 3839: (0.389105%)&lt;BR/&gt; 3826: (0.389105%)&lt;BR/&gt; 3693: (0.389105%)&gt;];
}
2617--3295[label="1;257pkt 257fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="213.76.159.32"/>
      <filter dst_port="1433" src_ip="213.76.159.32"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
2371[label="149.177.108.211;s;24pkt 24fpkt", shape=diamond, color=yellow];
3304[label="149.177.108.211;s;24pkt 24fpkt", shape=hexagon, color=black];
5584[label="149.177.108.211;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7162[label="149.177.108.211;23pkt 23fpkt", shape=invtriangle, color=brown];
8048[label="149.177.108.211;24pkt 24fpkt", shape=invhouse, color=bisque];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.108.211:3479, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3479: (41.5966%)&lt;BR/&gt; 1863: (6.30252%)&lt;BR/&gt; 62633: (2.10084%)&lt;BR/&gt; 60071: (2.10084%)&lt;BR/&gt; 60062: (2.10084%)&gt;];
}
2371--3304[label="1;24pkt 24fpkt"];
2371--5584[label="1;24pkt 24fpkt"];
2371--7162[label="1;23pkt 23fpkt"];
2371--8048[label="1;24pkt 24fpkt"];
3304--5584[label="1;24pkt 24fpkt"];
3304--7162[label="1;23pkt 23fpkt"];
3304--8048[label="1;24pkt 24fpkt"];
5584--7162[label="1;23pkt 23fpkt"];
5584--8048[label="1;24pkt 24fpkt"];
7162--8048[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.108.211" src_port="3479"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1903[label="222.17.48.188;s;167pkt 167fpkt", shape=diamond, color=yellow];
3306[label="222.17.48.188;s;167pkt 167fpkt", shape=hexagon, color=black];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.17.48.188:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.1976%)&lt;BR/&gt; 46164: (0.598802%)&lt;BR/&gt; 1031: (0.598802%)&lt;BR/&gt; 1030: (0.598802%)&lt;BR/&gt; 65487: (0.299401%)&gt;];
}
1903--3306[label="1;167pkt 167fpkt"];
1903--3384[label="0.011976;2pkt 2fpkt"];
1903--3387[label="0.11976;20pkt 20fpkt"];
3306--3384[label="0.011976;2pkt 2fpkt"];
3306--3387[label="0.11976;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="222.17.48.188" src_port="53"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
2650[label="213.79.205.198;s;280pkt 280fpkt", shape=diamond, color=yellow];
3312[label="213.79.205.198;s;280pkt 280fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.79.205.198:*, *:445}[72.5%]&lt;BR/&gt;{213.79.205.198:*, *:1433}[26.7857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (36.25%)&lt;BR/&gt; 1433: (13.3929%)&lt;BR/&gt; 3081: (0.357143%)&lt;BR/&gt; 2626: (0.357143%)&lt;BR/&gt; 2307: (0.357143%)&gt;];
}
2650--3312[label="1;280pkt 280fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="213.79.205.198"/>
      <filter dst_port="1433" src_ip="213.79.205.198"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
1110[label="204.85.210.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
1111[label="145.222.4.0;s;4pkt 4fpkt", shape=diamond, color=yellow];
3316[label="145.222.4.0;s;4pkt 4fpkt", shape=hexagon, color=black];
3395[label="145.222.4.0;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5957[label="145.222.4.0;3pkt 3fpkt", shape=invtriangle, color=brown];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.4.0:80, 28.153.203.146:46121}[25%]&lt;BR/&gt;{145.222.4.0:80, 204.85.210.150:2218}[25%]&lt;BR/&gt;{145.222.4.0:80, 196.102.32.182:50900}[25%]&lt;BR/&gt;{145.222.4.0:80, 222.174.208.184:62327}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62327: (13.3333%)&lt;BR/&gt; 50900: (13.3333%)&lt;BR/&gt; 46121: (13.3333%)&lt;BR/&gt; 2218: (10%)&gt;];
}
1110--1111[label="1;1pkt 1fpkt"];
1110--3316[label="1;1pkt 1fpkt"];
1110--3388[label="1;1pkt 1fpkt"];
1111--3316[label="1;4pkt 4fpkt"];
1111--3388[label="0.25;1pkt 1fpkt"];
1111--3395[label="1;3pkt 3fpkt"];
1111--5957[label="1;3pkt 3fpkt"];
3316--3388[label="0.25;1pkt 1fpkt"];
3316--3395[label="1;3pkt 3fpkt"];
3316--5957[label="1;3pkt 3fpkt"];
3395--5957[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="222.174.208.184" dst_port="62327" src_ip="145.222.4.0" src_port="80"/>
      <filter dst_ip="196.102.32.182" dst_port="50900" src_ip="145.222.4.0" src_port="80"/>
      <filter dst_ip="204.85.210.150" dst_port="2218" src_ip="145.222.4.0" src_port="80"/>
      <filter dst_ip="28.153.203.146" dst_port="46121" src_ip="145.222.4.0" src_port="80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
164[label="145.222.123.17;s;55pkt 55fpkt", shape=diamond, color=yellow];
578[label="145.223.48.143;s;1077pkt 1077fpkt", shape=diamond, color=yellow];
587[label="149.110.10.194;s;370pkt 370fpkt", shape=diamond, color=yellow];
645[label="145.223.242.82;s;175pkt 175fpkt", shape=diamond, color=yellow];
741[label="149.177.67.165;s;732pkt 732fpkt", shape=diamond, color=yellow];
954[label="149.68.157.133;s;233pkt 233fpkt", shape=diamond, color=yellow];
1039[label="27.57.241.27;d;14pkt 14fpkt", shape=diamond, color=yellow];
1605[label="145.222.13.42;s;400pkt 400fpkt", shape=diamond, color=yellow];
1844[label="161.99.130.211;s;483pkt 483fpkt", shape=diamond, color=yellow];
1880[label="222.0.206.17;d;111pkt 111fpkt", shape=diamond, color=yellow];
1916[label="149.110.176.52;s;230pkt 230fpkt", shape=diamond, color=yellow];
2160[label="213.17.230.59;s;293pkt 293fpkt", shape=diamond, color=yellow];
2598[label="194.84.2.196;d;65pkt 65fpkt", shape=diamond, color=yellow];
2859[label="149.110.10.194;s;199pkt 199fpkt", shape=hexagon, color=black];
3314[label="213.17.230.59;s;293pkt 293fpkt", shape=hexagon, color=black];
3318[label="222.23.2.234;d;117pkt 117fpkt", shape=hexagon, color=black];
3992[label="149.110.176.52;234pkt 234fpkt", shape=pentagon, color=darkviolet];
4095[label="145.222.99.64;74pkt 74fpkt", shape=pentagon, color=darkviolet];
4320[label="149.177.24.83;113pkt 113fpkt", shape=pentagon, color=darkviolet];
4848[label="166.59.48.139;243pkt 243fpkt", shape=pentagon, color=darkviolet];
4867[label="166.59.168.140;157pkt 157fpkt", shape=pentagon, color=darkviolet];
4889[label="145.223.48.143;1125pkt 1125fpkt", shape=pentagon, color=darkviolet];
5108[label="166.59.128.164;164pkt 164fpkt", shape=pentagon, color=darkviolet];
5661[label="145.222.123.217;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5810[label="145.223.172.233;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6449[label="149.177.24.83;114pkt 114fpkt", shape=invtriangle, color=brown];
6745[label="166.59.48.139;243pkt 243fpkt", shape=invtriangle, color=brown];
7199[label="145.222.123.217;6pkt 6fpkt", shape=invtriangle, color=brown];
7636[label="149.177.24.83;113pkt 113fpkt", shape=invhouse, color=bisque];
8071[label="145.222.123.217;6pkt 6fpkt", shape=invhouse, color=bisque];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[67.3576%]&lt;BR/&gt;{*:53, *:*}[36.0907%]&lt;BR/&gt;{145.223.48.143:*, *:*}[21.7939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.1488%)&lt;BR/&gt; 1647: (11.7663%)&lt;BR/&gt; 43832: (3.48309%)&lt;BR/&gt; 3459: (2.60062%)&lt;BR/&gt; 1024: (2.22623%)&gt;];
}
164--420[label="0.218182;12pkt 12fpkt"];
164--798[label="0.0545455;3pkt 3fpkt"];
164--981[label="0.0363636;2pkt 2fpkt"];
164--1039[label="0.0714286;1pkt 1fpkt"];
164--1048[label="0.109091;6pkt 6fpkt"];
164--1380[label="0.0181818;1pkt 1fpkt"];
164--1442[label="0.142857;2pkt 2fpkt"];
164--1831[label="0.0363636;2pkt 2fpkt"];
164--1880[label="0.0181818;1pkt 1fpkt"];
164--1927[label="0.0727273;4pkt 4fpkt"];
164--2465[label="0.0363636;2pkt 2fpkt"];
164--2598[label="0.0181818;1pkt 1fpkt"];
164--2711[label="0.0181818;1pkt 1fpkt"];
164--2954[label="0.109091;6pkt 6fpkt"];
164--3095[label="1;39pkt 39fpkt"];
164--3318[label="0.0181818;1pkt 1fpkt"];
164--3387[label="0.109091;6pkt 6fpkt"];
578--1380[label="0.00854701;1pkt 1fpkt"];
578--1834[label="0.00934579;1pkt 1fpkt"];
578--1880[label="0.00900901;1pkt 1fpkt"];
578--2126[label="0.00925926;1pkt 1fpkt"];
578--2176[label="0.0102041;1pkt 1fpkt"];
578--2415[label="0.00990099;1pkt 1fpkt"];
578--2425[label="0.00909091;1pkt 1fpkt"];
578--2435[label="0.00961538;1pkt 1fpkt"];
578--2598[label="0.0153846;1pkt 1fpkt"];
578--2600[label="0.00961538;1pkt 1fpkt"];
578--2627[label="0.02;1pkt 1fpkt"];
578--3318[label="0.00854701;1pkt 1fpkt"];
578--3384[label="0.116992;126pkt 126fpkt"];
578--3387[label="0.00742804;8pkt 8fpkt"];
578--4889[label="1;1077pkt 1077fpkt"];
587--1380[label="0.00854701;1pkt 1fpkt"];
587--1834[label="0.00934579;1pkt 1fpkt"];
587--1880[label="0.00900901;1pkt 1fpkt"];
587--2126[label="0.00925926;1pkt 1fpkt"];
587--2176[label="0.0102041;1pkt 1fpkt"];
587--2415[label="0.00990099;1pkt 1fpkt"];
587--2425[label="0.00909091;1pkt 1fpkt"];
587--2435[label="0.00961538;1pkt 1fpkt"];
587--2598[label="0.0153846;1pkt 1fpkt"];
587--2600[label="0.00961538;1pkt 1fpkt"];
587--2627[label="0.02;1pkt 1fpkt"];
587--2859[label="1;199pkt 199fpkt"];
587--3318[label="0.00854701;1pkt 1fpkt"];
587--3384[label="0.205405;76pkt 76fpkt"];
587--3387[label="0.164865;61pkt 61fpkt"];
645--1834[label="0.00934579;1pkt 1fpkt"];
645--1880[label="0.00900901;1pkt 1fpkt"];
645--2176[label="0.0102041;1pkt 1fpkt"];
645--2415[label="0.00990099;1pkt 1fpkt"];
645--2598[label="0.0153846;1pkt 1fpkt"];
645--2627[label="0.02;1pkt 1fpkt"];
645--3384[label="0.0514286;9pkt 9fpkt"];
741--1380[label="0.00854701;1pkt 1fpkt"];
741--1834[label="0.00934579;1pkt 1fpkt"];
741--1880[label="0.00900901;1pkt 1fpkt"];
741--2126[label="0.00925926;1pkt 1fpkt"];
741--2176[label="0.0102041;1pkt 1fpkt"];
741--2415[label="0.00990099;1pkt 1fpkt"];
741--2425[label="0.00909091;1pkt 1fpkt"];
741--2435[label="0.00961538;1pkt 1fpkt"];
741--2598[label="0.0153846;1pkt 1fpkt"];
741--2600[label="0.00961538;1pkt 1fpkt"];
741--2627[label="0.02;1pkt 1fpkt"];
741--3318[label="0.00854701;1pkt 1fpkt"];
741--3384[label="0.0710383;52pkt 52fpkt"];
741--3387[label="0.010929;8pkt 8fpkt"];
954--1048[label="0.0128755;3pkt 3fpkt"];
954--1344[label="0.00429185;1pkt 1fpkt"];
954--1395[label="0.0128755;3pkt 3fpkt"];
954--1413[label="0.00666667;1pkt 1fpkt"];
954--1556[label="0.00598802;1pkt 1fpkt"];
954--1834[label="0.00934579;1pkt 1fpkt"];
954--1901[label="0.0125;1pkt 1fpkt"];
954--1927[label="0.00680272;1pkt 1fpkt"];
954--2423[label="0.125;1pkt 1fpkt"];
954--2424[label="0.125;1pkt 1fpkt"];
954--2435[label="0.00961538;1pkt 1fpkt"];
954--2695[label="0.0103093;1pkt 1fpkt"];
954--2897[label="0.00505051;1pkt 1fpkt"];
954--2936[label="1;117pkt 117fpkt"];
954--2954[label="0.0214592;5pkt 5fpkt"];
954--3096[label="0.00429185;1pkt 1fpkt"];
954--3384[label="0.0128755;3pkt 3fpkt"];
1039--1739[label="0.0714286;1pkt 1fpkt"];
1039--2433[label="0.0714286;1pkt 1fpkt"];
1039--2681[label="0.0769231;1pkt 1fpkt"];
1039--2688[label="0.0714286;1pkt 1fpkt"];
1039--2712[label="0.0714286;1pkt 1fpkt"];
1039--3095[label="0.0714286;1pkt 1fpkt"];
1039--3171[label="0.214286;3pkt 3fpkt"];
1039--3192[label="0.0714286;1pkt 1fpkt"];
1039--3999[label="0.0714286;1pkt 1fpkt"];
1039--4037[label="0.0714286;1pkt 1fpkt"];
1039--4095[label="0.0714286;1pkt 1fpkt"];
1039--4158[label="0.0714286;1pkt 1fpkt"];
1039--4652[label="0.0714286;1pkt 1fpkt"];
1039--4697[label="0.0714286;1pkt 1fpkt"];
1039--5456[label="0.0714286;1pkt 1fpkt"];
1039--5810[label="0.0714286;1pkt 1fpkt"];
1039--6636[label="0.0714286;1pkt 1fpkt"];
1039--7103[label="0.0714286;1pkt 1fpkt"];
1039--8010[label="0.0714286;1pkt 1fpkt"];
1605--1834[label="0.00934579;1pkt 1fpkt"];
1605--1880[label="0.00900901;1pkt 1fpkt"];
1605--2126[label="0.00925926;1pkt 1fpkt"];
1605--2176[label="0.0102041;1pkt 1fpkt"];
1605--2415[label="0.00990099;1pkt 1fpkt"];
1605--2425[label="0.00909091;1pkt 1fpkt"];
1605--2435[label="0.00961538;1pkt 1fpkt"];
1605--2598[label="0.0153846;1pkt 1fpkt"];
1605--2600[label="0.00961538;1pkt 1fpkt"];
1605--3384[label="0.0275;11pkt 11fpkt"];
1605--3387[label="0.06;24pkt 24fpkt"];
1844--1880[label="0.00900901;1pkt 1fpkt"];
1844--2126[label="0.00925926;1pkt 1fpkt"];
1844--2176[label="0.0102041;1pkt 1fpkt"];
1844--2415[label="0.00990099;1pkt 1fpkt"];
1844--2425[label="0.00909091;1pkt 1fpkt"];
1844--2435[label="0.00961538;1pkt 1fpkt"];
1844--2598[label="0.0153846;1pkt 1fpkt"];
1844--2600[label="0.00961538;1pkt 1fpkt"];
1844--2627[label="0.02;1pkt 1fpkt"];
1844--3318[label="0.00854701;1pkt 1fpkt"];
1844--3384[label="0.0165631;8pkt 8fpkt"];
1844--3387[label="0.0890269;43pkt 43fpkt"];
1880--1886[label="0.00900901;1pkt 1fpkt"];
1880--1916[label="0.00900901;1pkt 1fpkt"];
1880--1921[label="0.00900901;1pkt 1fpkt"];
1880--2086[label="0.0810811;9pkt 9fpkt"];
1880--2146[label="0.00900901;1pkt 1fpkt"];
1880--2160[label="0.00900901;1pkt 1fpkt"];
1880--2214[label="0.00900901;1pkt 1fpkt"];
1880--2324[label="0.00900901;1pkt 1fpkt"];
1880--2500[label="0.00900901;1pkt 1fpkt"];
1880--2666[label="0.0212766;1pkt 1fpkt"];
1880--2859[label="0.00900901;1pkt 1fpkt"];
1880--2938[label="0.00900901;1pkt 1fpkt"];
1880--2960[label="0.00900901;1pkt 1fpkt"];
1880--3003[label="0.00900901;1pkt 1fpkt"];
1880--3017[label="0.016129;1pkt 1fpkt"];
1880--3037[label="0.00900901;1pkt 1fpkt"];
1880--3061[label="0.00900901;1pkt 1fpkt"];
1880--3095[label="0.025641;1pkt 1fpkt"];
1880--3164[label="0.00900901;1pkt 1fpkt"];
1880--3222[label="0.00900901;1pkt 1fpkt"];
1880--3291[label="0.00900901;1pkt 1fpkt"];
1880--3313[label="0.00900901;1pkt 1fpkt"];
1880--3314[label="0.00900901;1pkt 1fpkt"];
1880--3384[label="0.189189;21pkt 21fpkt"];
1880--3387[label="0.045045;5pkt 5fpkt"];
1880--3543[label="0.0119048;1pkt 1fpkt"];
1880--3572[label="0.00900901;1pkt 1fpkt"];
1880--3609[label="0.00900901;1pkt 1fpkt"];
1880--3810[label="0.00900901;1pkt 1fpkt"];
1880--3815[label="0.0185185;1pkt 1fpkt"];
1880--3819[label="0.00900901;1pkt 1fpkt"];
1880--3902[label="0.018018;2pkt 2fpkt"];
1880--3992[label="0.00900901;1pkt 1fpkt"];
1880--3996[label="0.00900901;1pkt 1fpkt"];
1880--4006[label="0.00900901;1pkt 1fpkt"];
1880--4055[label="0.00900901;1pkt 1fpkt"];
1880--4238[label="0.00900901;1pkt 1fpkt"];
1880--4305[label="0.00900901;1pkt 1fpkt"];
1880--4496[label="0.018018;2pkt 2fpkt"];
1880--4537[label="0.025641;1pkt 1fpkt"];
1880--4549[label="0.00900901;1pkt 1fpkt"];
1880--4579[label="0.0188679;1pkt 1fpkt"];
1880--4712[label="0.0810811;9pkt 9fpkt"];
1880--4739[label="0.00900901;1pkt 1fpkt"];
1880--4780[label="0.0227273;1pkt 1fpkt"];
1880--4867[label="0.00900901;1pkt 1fpkt"];
1880--4889[label="0.00900901;1pkt 1fpkt"];
1880--4908[label="0.00900901;1pkt 1fpkt"];
1880--4925[label="0.0263158;1pkt 1fpkt"];
1880--4966[label="0.00900901;1pkt 1fpkt"];
1880--5013[label="0.00900901;1pkt 1fpkt"];
1880--5108[label="0.00900901;1pkt 1fpkt"];
1880--5159[label="0.00900901;1pkt 1fpkt"];
1880--5173[label="0.00900901;1pkt 1fpkt"];
1880--5319[label="0.00900901;1pkt 1fpkt"];
1880--5342[label="0.00900901;1pkt 1fpkt"];
1880--5438[label="0.0114943;1pkt 1fpkt"];
1880--5552[label="0.00900901;1pkt 1fpkt"];
1880--5598[label="0.00900901;1pkt 1fpkt"];
1880--5794[label="0.00900901;1pkt 1fpkt"];
1880--5846[label="0.0188679;1pkt 1fpkt"];
1880--6072[label="0.00900901;1pkt 1fpkt"];
1880--6176[label="0.00900901;1pkt 1fpkt"];
1880--6178[label="0.0185185;1pkt 1fpkt"];
1880--6180[label="0.00900901;1pkt 1fpkt"];
1880--6224[label="0.018018;2pkt 2fpkt"];
1880--6271[label="0.00900901;1pkt 1fpkt"];
1880--6278[label="0.00900901;1pkt 1fpkt"];
1880--6401[label="0.00900901;1pkt 1fpkt"];
1880--6440[label="0.00900901;1pkt 1fpkt"];
1880--6549[label="0.018018;2pkt 2fpkt"];
1880--6578[label="0.00900901;1pkt 1fpkt"];
1880--6686[label="0.00900901;1pkt 1fpkt"];
1880--6712[label="0.0222222;1pkt 1fpkt"];
1880--6790[label="0.0263158;1pkt 1fpkt"];
1880--6819[label="0.00900901;1pkt 1fpkt"];
1880--7019[label="0.00900901;1pkt 1fpkt"];
1880--7035[label="0.00900901;1pkt 1fpkt"];
1880--7145[label="0.00900901;1pkt 1fpkt"];
1880--7266[label="0.00900901;1pkt 1fpkt"];
1880--7296[label="0.0188679;1pkt 1fpkt"];
1880--7476[label="0.0188679;1pkt 1fpkt"];
1880--7478[label="0.00900901;1pkt 1fpkt"];
1880--7530[label="0.00900901;1pkt 1fpkt"];
1880--7608[label="0.00900901;1pkt 1fpkt"];
1880--7632[label="0.00900901;1pkt 1fpkt"];
1880--7698[label="0.018018;2pkt 2fpkt"];
1880--7715[label="0.00900901;1pkt 1fpkt"];
1880--7771[label="0.00900901;1pkt 1fpkt"];
1880--7828[label="0.0263158;1pkt 1fpkt"];
1880--7962[label="0.00900901;1pkt 1fpkt"];
1880--7971[label="0.00900901;1pkt 1fpkt"];
1880--8039[label="0.00900901;1pkt 1fpkt"];
1880--8126[label="0.0185185;1pkt 1fpkt"];
1916--2126[label="0.00925926;1pkt 1fpkt"];
1916--2176[label="0.0102041;1pkt 1fpkt"];
1916--2415[label="0.00990099;1pkt 1fpkt"];
1916--2425[label="0.00909091;1pkt 1fpkt"];
1916--2435[label="0.00961538;1pkt 1fpkt"];
1916--2598[label="0.0153846;1pkt 1fpkt"];
1916--2600[label="0.00961538;1pkt 1fpkt"];
1916--3318[label="0.00854701;1pkt 1fpkt"];
1916--3384[label="0.0826087;19pkt 19fpkt"];
1916--3387[label="0.0217391;5pkt 5fpkt"];
1916--3992[label="0.995652;229pkt 229fpkt"];
2160--2176[label="0.0102041;1pkt 1fpkt"];
2160--2415[label="0.00990099;1pkt 1fpkt"];
2160--2425[label="0.00909091;1pkt 1fpkt"];
2160--2598[label="0.0153846;1pkt 1fpkt"];
2160--2600[label="0.00961538;1pkt 1fpkt"];
2160--3314[label="1;293pkt 293fpkt"];
2160--3318[label="0.00854701;1pkt 1fpkt"];
2160--3384[label="0.112628;33pkt 33fpkt"];
2160--3387[label="0.0204778;6pkt 6fpkt"];
2598--2859[label="0.0153846;1pkt 1fpkt"];
2598--2938[label="0.0153846;1pkt 1fpkt"];
2598--2960[label="0.0153846;1pkt 1fpkt"];
2598--3037[label="0.0153846;1pkt 1fpkt"];
2598--3061[label="0.0153846;1pkt 1fpkt"];
2598--3095[label="0.025641;1pkt 1fpkt"];
2598--3222[label="0.0153846;1pkt 1fpkt"];
2598--3313[label="0.0153846;1pkt 1fpkt"];
2598--3314[label="0.0153846;1pkt 1fpkt"];
2598--3384[label="0.138462;9pkt 9fpkt"];
2598--3387[label="0.0153846;1pkt 1fpkt"];
2598--3572[label="0.0153846;1pkt 1fpkt"];
2598--3609[label="0.0153846;1pkt 1fpkt"];
2598--3810[label="0.0153846;1pkt 1fpkt"];
2598--3819[label="0.0153846;1pkt 1fpkt"];
2598--3900[label="0.0285714;1pkt 1fpkt"];
2598--3992[label="0.0153846;1pkt 1fpkt"];
2598--3996[label="0.0153846;1pkt 1fpkt"];
2598--4004[label="0.0166667;1pkt 1fpkt"];
2598--4167[label="0.03125;1pkt 1fpkt"];
2598--4238[label="0.0153846;1pkt 1fpkt"];
2598--4305[label="0.0153846;1pkt 1fpkt"];
2598--4320[label="0.0153846;1pkt 1fpkt"];
2598--4411[label="0.0153846;1pkt 1fpkt"];
2598--4514[label="0.0153846;1pkt 1fpkt"];
2598--4549[label="0.0153846;1pkt 1fpkt"];
2598--4579[label="0.0188679;1pkt 1fpkt"];
2598--4739[label="0.0153846;1pkt 1fpkt"];
2598--4848[label="0.0153846;1pkt 1fpkt"];
2598--4867[label="0.0153846;1pkt 1fpkt"];
2598--4889[label="0.0153846;1pkt 1fpkt"];
2598--4908[label="0.0153846;1pkt 1fpkt"];
2598--4966[label="0.0153846;1pkt 1fpkt"];
2598--5013[label="0.0153846;1pkt 1fpkt"];
2598--5108[label="0.0153846;1pkt 1fpkt"];
2598--5173[label="0.0153846;1pkt 1fpkt"];
2598--5342[label="0.0153846;1pkt 1fpkt"];
2598--5552[label="0.0153846;1pkt 1fpkt"];
2598--5661[label="0.142857;1pkt 1fpkt"];
2598--5794[label="0.0153846;1pkt 1fpkt"];
2598--6072[label="0.0153846;1pkt 1fpkt"];
2598--6176[label="0.0153846;1pkt 1fpkt"];
2598--6180[label="0.0153846;1pkt 1fpkt"];
2598--6271[label="0.0153846;1pkt 1fpkt"];
2598--6364[label="0.0322581;1pkt 1fpkt"];
2598--6401[label="0.0153846;1pkt 1fpkt"];
2598--6440[label="0.0153846;1pkt 1fpkt"];
2598--6449[label="0.0153846;1pkt 1fpkt"];
2598--6501[label="0.0153846;1pkt 1fpkt"];
2598--6558[label="0.0153846;1pkt 1fpkt"];
2598--6578[label="0.0153846;1pkt 1fpkt"];
2598--6686[label="0.0153846;1pkt 1fpkt"];
2598--6745[label="0.0153846;1pkt 1fpkt"];
2598--6819[label="0.0153846;1pkt 1fpkt"];
2598--7035[label="0.0153846;1pkt 1fpkt"];
2598--7145[label="0.0153846;1pkt 1fpkt"];
2598--7199[label="0.166667;1pkt 1fpkt"];
2598--7266[label="0.0153846;1pkt 1fpkt"];
2598--7478[label="0.0153846;1pkt 1fpkt"];
2598--7530[label="0.0153846;1pkt 1fpkt"];
2598--7583[label="0.0322581;1pkt 1fpkt"];
2598--7608[label="0.0153846;1pkt 1fpkt"];
2598--7632[label="0.0153846;1pkt 1fpkt"];
2598--7636[label="0.0153846;1pkt 1fpkt"];
2598--7667[label="0.0153846;1pkt 1fpkt"];
2598--7702[label="0.0153846;1pkt 1fpkt"];
2598--7715[label="0.0153846;1pkt 1fpkt"];
2598--7771[label="0.0153846;1pkt 1fpkt"];
2598--7971[label="0.0153846;1pkt 1fpkt"];
2598--8039[label="0.0153846;1pkt 1fpkt"];
2598--8071[label="0.166667;1pkt 1fpkt"];
2859--3318[label="0.00854701;1pkt 1fpkt"];
2859--3384[label="0.38191;76pkt 76fpkt"];
2859--3387[label="0.180905;36pkt 36fpkt"];
3314--3318[label="0.00854701;1pkt 1fpkt"];
3314--3384[label="0.112628;33pkt 33fpkt"];
3314--3387[label="0.0204778;6pkt 6fpkt"];
3318--3329[label="0.0227273;1pkt 1fpkt"];
3318--3384[label="0.145299;17pkt 17fpkt"];
3318--3387[label="0.025641;3pkt 3fpkt"];
3318--3525[label="0.0178571;1pkt 1fpkt"];
3318--3543[label="0.0119048;1pkt 1fpkt"];
3318--3572[label="0.00854701;1pkt 1fpkt"];
3318--3609[label="0.00854701;1pkt 1fpkt"];
3318--3757[label="0.0153846;1pkt 1fpkt"];
3318--3810[label="0.00854701;1pkt 1fpkt"];
3318--3819[label="0.00854701;1pkt 1fpkt"];
3318--3902[label="0.00854701;1pkt 1fpkt"];
3318--3992[label="0.00854701;1pkt 1fpkt"];
3318--3996[label="0.00854701;1pkt 1fpkt"];
3318--4004[label="0.0166667;1pkt 1fpkt"];
3318--4006[label="0.00854701;1pkt 1fpkt"];
3318--4019[label="0.0322581;1pkt 1fpkt"];
3318--4055[label="0.00854701;1pkt 1fpkt"];
3318--4121[label="0.0138889;1pkt 1fpkt"];
3318--4167[label="0.03125;1pkt 1fpkt"];
3318--4238[label="0.00854701;1pkt 1fpkt"];
3318--4245[label="0.0263158;1pkt 1fpkt"];
3318--4305[label="0.00854701;1pkt 1fpkt"];
3318--4320[label="0.00884956;1pkt 1fpkt"];
3318--4385[label="0.00854701;1pkt 1fpkt"];
3318--4411[label="0.00854701;1pkt 1fpkt"];
3318--4496[label="0.00854701;1pkt 1fpkt"];
3318--4514[label="0.00854701;1pkt 1fpkt"];
3318--4537[label="0.025641;1pkt 1fpkt"];
3318--4549[label="0.00854701;1pkt 1fpkt"];
3318--4712[label="0.042735;5pkt 5fpkt"];
3318--4780[label="0.0227273;1pkt 1fpkt"];
3318--4867[label="0.00854701;1pkt 1fpkt"];
3318--4889[label="0.00854701;1pkt 1fpkt"];
3318--4908[label="0.00854701;1pkt 1fpkt"];
3318--4966[label="0.00854701;1pkt 1fpkt"];
3318--5013[label="0.00854701;1pkt 1fpkt"];
3318--5048[label="0.015873;1pkt 1fpkt"];
3318--5070[label="0.0185185;1pkt 1fpkt"];
3318--5084[label="0.0208333;1pkt 1fpkt"];
3318--5108[label="0.00854701;1pkt 1fpkt"];
3318--5159[label="0.00854701;1pkt 1fpkt"];
3318--5173[label="0.00854701;1pkt 1fpkt"];
3318--5266[label="0.0128205;1pkt 1fpkt"];
3318--5328[label="0.0454545;1pkt 1fpkt"];
3318--5342[label="0.00854701;1pkt 1fpkt"];
3318--5392[label="0.0204082;1pkt 1fpkt"];
3318--5461[label="0.0434783;1pkt 1fpkt"];
3318--5552[label="0.00854701;1pkt 1fpkt"];
3318--5598[label="0.00854701;1pkt 1fpkt"];
3318--5746[label="0.0232558;1pkt 1fpkt"];
3318--5794[label="0.00854701;1pkt 1fpkt"];
3318--6025[label="0.0181818;1pkt 1fpkt"];
3318--6072[label="0.00854701;1pkt 1fpkt"];
3318--6176[label="0.00854701;1pkt 1fpkt"];
3318--6180[label="0.00854701;1pkt 1fpkt"];
3318--6224[label="0.00854701;1pkt 1fpkt"];
3318--6271[label="0.00854701;1pkt 1fpkt"];
3318--6278[label="0.00854701;1pkt 1fpkt"];
3318--6284[label="0.0333333;1pkt 1fpkt"];
3318--6338[label="0.0138889;1pkt 1fpkt"];
3318--6364[label="0.0322581;1pkt 1fpkt"];
3318--6401[label="0.00854701;1pkt 1fpkt"];
3318--6440[label="0.00854701;1pkt 1fpkt"];
3318--6449[label="0.00877193;1pkt 1fpkt"];
3318--6501[label="0.00854701;1pkt 1fpkt"];
3318--6549[label="0.00854701;1pkt 1fpkt"];
3318--6558[label="0.00854701;1pkt 1fpkt"];
3318--6578[label="0.00854701;1pkt 1fpkt"];
3318--6712[label="0.0222222;1pkt 1fpkt"];
3318--6819[label="0.00854701;1pkt 1fpkt"];
3318--6885[label="0.0212766;1pkt 1fpkt"];
3318--6989[label="0.0126582;1pkt 1fpkt"];
3318--7025[label="0.047619;1pkt 1fpkt"];
3318--7035[label="0.00854701;1pkt 1fpkt"];
3318--7064[label="0.0204082;1pkt 1fpkt"];
3318--7104[label="0.0454545;1pkt 1fpkt"];
3318--7145[label="0.00854701;1pkt 1fpkt"];
3318--7240[label="0.0232558;1pkt 1fpkt"];
3318--7266[label="0.00854701;1pkt 1fpkt"];
3318--7393[label="0.0178571;1pkt 1fpkt"];
3318--7478[label="0.00854701;1pkt 1fpkt"];
3318--7530[label="0.00854701;1pkt 1fpkt"];
3318--7536[label="0.0322581;1pkt 1fpkt"];
3318--7568[label="0.0138889;1pkt 1fpkt"];
3318--7583[label="0.0322581;1pkt 1fpkt"];
3318--7608[label="0.00854701;1pkt 1fpkt"];
3318--7632[label="0.00854701;1pkt 1fpkt"];
3318--7636[label="0.00884956;1pkt 1fpkt"];
3318--7667[label="0.00854701;1pkt 1fpkt"];
3318--7698[label="0.00854701;1pkt 1fpkt"];
3318--7702[label="0.00854701;1pkt 1fpkt"];
3318--7715[label="0.00854701;1pkt 1fpkt"];
3318--7942[label="0.0128205;1pkt 1fpkt"];
3318--7967[label="0.047619;1pkt 1fpkt"];
3318--7971[label="0.00854701;1pkt 1fpkt"];
3318--7987[label="0.0208333;1pkt 1fpkt"];
3318--8011[label="0.0434783;1pkt 1fpkt"];
3318--8039[label="0.00854701;1pkt 1fpkt"];
3318--8097[label="0.0227273;1pkt 1fpkt"];
4320--6449[label="1;113pkt 113fpkt"];
4320--7636[label="1;113pkt 113fpkt"];
4848--6745[label="1;243pkt 243fpkt"];
5661--7199[label="1;6pkt 6fpkt"];
5661--8071[label="1;6pkt 6fpkt"];
6449--7636[label="1;113pkt 113fpkt"];
7199--8071[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.48.143"/>
      <filter src_port="53"/>
      <filter dst_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1668[label="211.166.150.122;d;6pkt 6fpkt", shape=diamond, color=yellow];
3125[label="145.222.53.65;s;37pkt 37fpkt", shape=hexagon, color=black];
3319[label="211.166.144.119;d;16pkt 16fpkt", shape=hexagon, color=black];
3665[label="149.177.109.22;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6099[label="149.177.109.22;3pkt 3fpkt", shape=invtriangle, color=brown];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.53.65:*, *:*}[61.6667%]&lt;BR/&gt;{*:*, 211.166.144.119:1863}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (28.0303%)&lt;BR/&gt; 80: (8.33333%)&lt;BR/&gt; 49504: (6.06061%)&lt;BR/&gt; 38760: (5.30303%)&lt;BR/&gt; 32788: (1.51515%)&gt;];
}
1668--1930[label="0.166667;1pkt 1fpkt"];
1668--2623[label="0.333333;1pkt 1fpkt"];
1668--3125[label="0.166667;1pkt 1fpkt"];
1668--3665[label="0.25;1pkt 1fpkt"];
1668--3987[label="0.5;1pkt 1fpkt"];
1668--4542[label="0.333333;1pkt 1fpkt"];
3125--3319[label="0.0625;1pkt 1fpkt"];
3125--3389[label="0.027027;1pkt 1fpkt"];
3319--3389[label="0.0625;1pkt 1fpkt"];
3319--3658[label="0.0909091;1pkt 1fpkt"];
3319--3964[label="0.166667;1pkt 1fpkt"];
3319--4058[label="0.25;1pkt 1fpkt"];
3319--4808[label="0.111111;1pkt 1fpkt"];
3319--4900[label="0.125;2pkt 2fpkt"];
3319--5424[label="0.0625;1pkt 1fpkt"];
3319--6095[label="0.1;1pkt 1fpkt"];
3319--6302[label="0.25;1pkt 1fpkt"];
3319--6774[label="0.125;2pkt 2fpkt"];
3319--7431[label="0.1;1pkt 1fpkt"];
3319--7547[label="0.2;1pkt 1fpkt"];
3319--7818[label="0.125;2pkt 2fpkt"];
3665--6099[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.53.65"/>
      <filter dst_ip="211.166.144.119" dst_port="1863"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
824[label="149.110.141.192;d;8pkt 8fpkt", shape=diamond, color=yellow];
826[label="223.78.141.120;s;3pkt 3fpkt", shape=diamond, color=yellow];
1433[label="223.78.141.124;s;5pkt 5fpkt", shape=diamond, color=yellow];
3323[label="223.78.141.120;s;3pkt 3fpkt", shape=hexagon, color=black];
4667[label="223.78.141.120;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.78.141.124:554, 149.110.141.192:*}[62.5%]&lt;BR/&gt;{223.78.141.120:554, 149.110.141.192:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 2175: (9.09091%)&lt;BR/&gt; 2169: (9.09091%)&lt;BR/&gt; 2150: (9.09091%)&lt;BR/&gt; 2177: (4.54545%)&gt;];
}
824--826[label="1;3pkt 3fpkt"];
824--1433[label="1;5pkt 5fpkt"];
824--3323[label="1;3pkt 3fpkt"];
824--4667[label="1;3pkt 3fpkt"];
826--3323[label="1;3pkt 3fpkt"];
826--4667[label="1;3pkt 3fpkt"];
3323--4667[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.141.192" src_ip="223.78.141.124" src_port="554"/>
      <filter dst_ip="149.110.141.192" src_ip="223.78.141.120" src_port="554"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
1406[label="161.99.34.241;s;359pkt 359fpkt", shape=diamond, color=yellow];
1468[label="24.32.7.84;d;290pkt 290fpkt", shape=diamond, color=yellow];
3325[label="161.99.34.241;s;359pkt 359fpkt", shape=hexagon, color=black];
5857[label="161.99.34.241;396pkt 396fpkt", shape=pentagon, color=darkviolet];
7305[label="161.99.34.241;396pkt 396fpkt", shape=invtriangle, color=brown];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.34.241:*, 24.32.7.84:80}[79.798%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 1024: (2.22222%)&lt;BR/&gt; 4600: (0.25%)&lt;BR/&gt; 4594: (0.25%)&lt;BR/&gt; 4592: (0.25%)&gt;];
}
1406--1468[label="1;290pkt 290fpkt"];
1406--3325[label="1;359pkt 359fpkt"];
1406--5857[label="1;359pkt 359fpkt"];
1406--7305[label="1;359pkt 359fpkt"];
1468--3325[label="1;290pkt 290fpkt"];
1468--5857[label="1;290pkt 290fpkt"];
1468--7305[label="1;290pkt 290fpkt"];
3325--5857[label="1;359pkt 359fpkt"];
3325--7305[label="1;359pkt 359fpkt"];
5857--7305[label="1;396pkt 396fpkt"];
</description>
    <slice>
      <filter dst_ip="24.32.7.84" dst_port="80" src_ip="161.99.34.241"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1282[label="27.198.95.212;d;146pkt 146fpkt", shape=diamond, color=yellow];
2126[label="222.56.64.128;d;108pkt 108fpkt", shape=diamond, color=yellow];
2415[label="222.52.220.132;d;101pkt 101fpkt", shape=diamond, color=yellow];
2425[label="222.42.222.100;d;110pkt 110fpkt", shape=diamond, color=yellow];
3206[label="27.198.95.212;d;146pkt 146fpkt", shape=hexagon, color=black];
4712[label="145.222.178.125;185pkt 185fpkt", shape=pentagon, color=darkviolet];
4903[label="166.59.128.144;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4906[label="145.223.241.144;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4925[label="149.177.24.146;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5337[label="149.177.114.186;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5392[label="212.79.237.193;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5878[label="145.223.241.243;63pkt 63fpkt", shape=pentagon, color=darkviolet];
6776[label="166.59.128.144;10pkt 10fpkt", shape=invtriangle, color=brown];
6777[label="145.223.241.144;5pkt 5fpkt", shape=invtriangle, color=brown];
6790[label="149.177.24.146;38pkt 38fpkt", shape=invtriangle, color=brown];
7032[label="149.177.114.186;38pkt 38fpkt", shape=invtriangle, color=brown];
7064[label="212.79.237.193;49pkt 49fpkt", shape=invtriangle, color=brown];
7104[label="212.79.237.199;22pkt 22fpkt", shape=invtriangle, color=brown];
7820[label="166.59.128.144;9pkt 9fpkt", shape=invhouse, color=bisque];
7821[label="145.223.241.144;5pkt 5fpkt", shape=invhouse, color=bisque];
7828[label="149.177.24.146;38pkt 38fpkt", shape=invhouse, color=bisque];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[57.006%]&lt;BR/&gt;{*:*, *:80}[31.976%]&lt;BR/&gt;{145.222.178.125:*, *:*}[22.1557%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24.1337%)&lt;BR/&gt; 80: (21.2871%)&lt;BR/&gt; 28964: (2.59901%)&lt;BR/&gt; 54045: (1.73267%)&lt;BR/&gt; 1863: (1.65017%)&gt;];
}
1282--1314[label="0.0697674;6pkt 6fpkt"];
1282--1772[label="0.0454545;1pkt 1fpkt"];
1282--1892[label="0.00684932;1pkt 1fpkt"];
1282--2019[label="0.454545;5pkt 5fpkt"];
1282--2162[label="0.0138889;1pkt 1fpkt"];
1282--2243[label="0.0075188;1pkt 1fpkt"];
1282--2343[label="0.214286;3pkt 3fpkt"];
1282--2372[label="0.0412371;4pkt 4fpkt"];
1282--2384[label="0.00787402;1pkt 1fpkt"];
1282--2430[label="0.08;2pkt 2fpkt"];
1282--2584[label="0.235294;4pkt 4fpkt"];
1282--2610[label="0.05;2pkt 2fpkt"];
1282--2718[label="0.0227273;1pkt 1fpkt"];
1282--2794[label="0.00689655;1pkt 1fpkt"];
1282--2862[label="0.0121951;1pkt 1fpkt"];
1282--2877[label="0.016129;2pkt 2fpkt"];
1282--2932[label="0.00684932;1pkt 1fpkt"];
1282--3100[label="0.0136986;2pkt 2fpkt"];
1282--3117[label="0.00684932;1pkt 1fpkt"];
1282--3144[label="0.0454545;1pkt 1fpkt"];
1282--3175[label="0.0188679;1pkt 1fpkt"];
1282--3206[label="1;146pkt 146fpkt"];
1282--3329[label="0.0227273;1pkt 1fpkt"];
1282--3397[label="0.0232558;1pkt 1fpkt"];
1282--3438[label="0.0479452;7pkt 7fpkt"];
1282--3482[label="0.0769231;2pkt 2fpkt"];
1282--3763[label="0.0212766;1pkt 1fpkt"];
1282--3809[label="0.0138889;1pkt 1fpkt"];
1282--4017[label="0.0232558;1pkt 1fpkt"];
1282--4120[label="0.0178571;1pkt 1fpkt"];
1282--4394[label="0.0416667;1pkt 1fpkt"];
1282--4551[label="0.166667;2pkt 2fpkt"];
1282--4788[label="0.00684932;1pkt 1fpkt"];
1282--4797[label="0.136364;3pkt 3fpkt"];
1282--4834[label="0.0357143;1pkt 1fpkt"];
1282--4906[label="0.8;4pkt 4fpkt"];
1282--4925[label="0.0263158;1pkt 1fpkt"];
1282--5011[label="0.00684932;1pkt 1fpkt"];
1282--5071[label="0.00684932;1pkt 1fpkt"];
1282--5133[label="0.00684932;1pkt 1fpkt"];
1282--5148[label="0.0333333;1pkt 1fpkt"];
1282--5171[label="0.00684932;1pkt 1fpkt"];
1282--5337[label="0.0526316;2pkt 2fpkt"];
1282--5371[label="0.0479452;7pkt 7fpkt"];
1282--5527[label="0.2;1pkt 1fpkt"];
1282--5574[label="0.010101;1pkt 1fpkt"];
1282--5589[label="0.00740741;1pkt 1fpkt"];
1282--5698[label="0.00684932;1pkt 1fpkt"];
1282--5708[label="0.0425532;2pkt 2fpkt"];
1282--5746[label="0.0232558;1pkt 1fpkt"];
1282--5749[label="0.0205479;3pkt 3fpkt"];
1282--5959[label="0.0232558;1pkt 1fpkt"];
1282--5982[label="0.0479452;7pkt 7fpkt"];
1282--6147[label="0.5;1pkt 1fpkt"];
1282--6153[label="0.0212766;1pkt 1fpkt"];
1282--6175[label="0.0140845;1pkt 1fpkt"];
1282--6283[label="0.0232558;1pkt 1fpkt"];
1282--6579[label="0.166667;2pkt 2fpkt"];
1282--6717[label="0.00684932;1pkt 1fpkt"];
1282--6721[label="0.142857;3pkt 3fpkt"];
1282--6777[label="0.8;4pkt 4fpkt"];
1282--6790[label="0.0263158;1pkt 1fpkt"];
1282--6922[label="0.0322581;1pkt 1fpkt"];
1282--7032[label="0.0526316;2pkt 2fpkt"];
1282--7049[label="0.0479452;7pkt 7fpkt"];
1282--7160[label="0.010101;1pkt 1fpkt"];
1282--7218[label="0.00684932;1pkt 1fpkt"];
1282--7221[label="0.0434783;2pkt 2fpkt"];
1282--7240[label="0.0232558;1pkt 1fpkt"];
1282--7242[label="0.0205479;3pkt 3fpkt"];
1282--7474[label="0.0140845;1pkt 1fpkt"];
1282--7792[label="0.00684932;1pkt 1fpkt"];
1282--7821[label="0.8;4pkt 4fpkt"];
1282--7828[label="0.0263158;1pkt 1fpkt"];
1282--7903[label="0.0322581;1pkt 1fpkt"];
1282--7980[label="0.0479452;7pkt 7fpkt"];
1282--8047[label="0.010101;1pkt 1fpkt"];
1282--8097[label="0.0227273;1pkt 1fpkt"];
2126--2146[label="0.00925926;1pkt 1fpkt"];
2126--2160[label="0.00925926;1pkt 1fpkt"];
2126--2214[label="0.00925926;1pkt 1fpkt"];
2126--2403[label="0.0166667;1pkt 1fpkt"];
2126--2687[label="0.0114943;1pkt 1fpkt"];
2126--2859[label="0.00925926;1pkt 1fpkt"];
2126--2938[label="0.00925926;1pkt 1fpkt"];
2126--2960[label="0.00925926;1pkt 1fpkt"];
2126--3003[label="0.00925926;1pkt 1fpkt"];
2126--3017[label="0.016129;1pkt 1fpkt"];
2126--3037[label="0.00925926;1pkt 1fpkt"];
2126--3061[label="0.00925926;1pkt 1fpkt"];
2126--3164[label="0.00925926;1pkt 1fpkt"];
2126--3222[label="0.00925926;1pkt 1fpkt"];
2126--3291[label="0.00925926;1pkt 1fpkt"];
2126--3313[label="0.00925926;1pkt 1fpkt"];
2126--3314[label="0.00925926;1pkt 1fpkt"];
2126--3384[label="0.185185;20pkt 20fpkt"];
2126--3387[label="0.0277778;3pkt 3fpkt"];
2126--3543[label="0.0119048;1pkt 1fpkt"];
2126--3572[label="0.00925926;1pkt 1fpkt"];
2126--3609[label="0.00925926;1pkt 1fpkt"];
2126--3810[label="0.00925926;1pkt 1fpkt"];
2126--3992[label="0.00925926;1pkt 1fpkt"];
2126--3996[label="0.00925926;1pkt 1fpkt"];
2126--4229[label="0.00925926;1pkt 1fpkt"];
2126--4238[label="0.00925926;1pkt 1fpkt"];
2126--4305[label="0.00925926;1pkt 1fpkt"];
2126--4320[label="0.00925926;1pkt 1fpkt"];
2126--4385[label="0.00925926;1pkt 1fpkt"];
2126--4411[label="0.00925926;1pkt 1fpkt"];
2126--4496[label="0.00925926;1pkt 1fpkt"];
2126--4537[label="0.025641;1pkt 1fpkt"];
2126--4549[label="0.00925926;1pkt 1fpkt"];
2126--4579[label="0.0188679;1pkt 1fpkt"];
2126--4712[label="0.0648148;7pkt 7fpkt"];
2126--4739[label="0.00925926;1pkt 1fpkt"];
2126--4789[label="0.0454545;1pkt 1fpkt"];
2126--4867[label="0.00925926;1pkt 1fpkt"];
2126--4889[label="0.00925926;1pkt 1fpkt"];
2126--4908[label="0.00925926;1pkt 1fpkt"];
2126--4925[label="0.0263158;1pkt 1fpkt"];
2126--4966[label="0.00925926;1pkt 1fpkt"];
2126--5013[label="0.00925926;1pkt 1fpkt"];
2126--5108[label="0.00925926;1pkt 1fpkt"];
2126--5159[label="0.00925926;1pkt 1fpkt"];
2126--5173[label="0.00925926;1pkt 1fpkt"];
2126--5319[label="0.00925926;1pkt 1fpkt"];
2126--5342[label="0.00925926;1pkt 1fpkt"];
2126--5461[label="0.0434783;1pkt 1fpkt"];
2126--5552[label="0.00925926;1pkt 1fpkt"];
2126--5598[label="0.00925926;1pkt 1fpkt"];
2126--5794[label="0.00925926;1pkt 1fpkt"];
2126--5878[label="0.015873;1pkt 1fpkt"];
2126--5915[label="0.011236;1pkt 1fpkt"];
2126--6072[label="0.00925926;1pkt 1fpkt"];
2126--6176[label="0.00925926;1pkt 1fpkt"];
2126--6271[label="0.00925926;1pkt 1fpkt"];
2126--6399[label="0.00925926;1pkt 1fpkt"];
2126--6401[label="0.00925926;1pkt 1fpkt"];
2126--6440[label="0.00925926;1pkt 1fpkt"];
2126--6449[label="0.00925926;1pkt 1fpkt"];
2126--6501[label="0.00925926;1pkt 1fpkt"];
2126--6549[label="0.00925926;1pkt 1fpkt"];
2126--6578[label="0.00925926;1pkt 1fpkt"];
2126--6686[label="0.00925926;1pkt 1fpkt"];
2126--6718[label="0.0434783;1pkt 1fpkt"];
2126--6790[label="0.0263158;1pkt 1fpkt"];
2126--6819[label="0.00925926;1pkt 1fpkt"];
2126--7019[label="0.00925926;1pkt 1fpkt"];
2126--7035[label="0.00925926;1pkt 1fpkt"];
2126--7145[label="0.00925926;1pkt 1fpkt"];
2126--7266[label="0.00925926;1pkt 1fpkt"];
2126--7338[label="0.011236;1pkt 1fpkt"];
2126--7530[label="0.00925926;1pkt 1fpkt"];
2126--7607[label="0.00925926;1pkt 1fpkt"];
2126--7608[label="0.00925926;1pkt 1fpkt"];
2126--7632[label="0.00925926;1pkt 1fpkt"];
2126--7636[label="0.00925926;1pkt 1fpkt"];
2126--7667[label="0.00925926;1pkt 1fpkt"];
2126--7698[label="0.00925926;1pkt 1fpkt"];
2126--7715[label="0.00925926;1pkt 1fpkt"];
2126--7771[label="0.00925926;1pkt 1fpkt"];
2126--7793[label="0.0434783;1pkt 1fpkt"];
2126--7828[label="0.0263158;1pkt 1fpkt"];
2126--7962[label="0.00925926;1pkt 1fpkt"];
2126--7971[label="0.00925926;1pkt 1fpkt"];
2126--8011[label="0.0434783;1pkt 1fpkt"];
2126--8039[label="0.00925926;1pkt 1fpkt"];
2126--8146[label="0.011236;1pkt 1fpkt"];
2415--2687[label="0.0114943;1pkt 1fpkt"];
2415--2859[label="0.00990099;1pkt 1fpkt"];
2415--2938[label="0.00990099;1pkt 1fpkt"];
2415--2960[label="0.00990099;1pkt 1fpkt"];
2415--3003[label="0.00990099;1pkt 1fpkt"];
2415--3017[label="0.016129;1pkt 1fpkt"];
2415--3037[label="0.00990099;1pkt 1fpkt"];
2415--3061[label="0.00990099;1pkt 1fpkt"];
2415--3164[label="0.00990099;1pkt 1fpkt"];
2415--3222[label="0.00990099;1pkt 1fpkt"];
2415--3246[label="0.00990099;1pkt 1fpkt"];
2415--3313[label="0.00990099;1pkt 1fpkt"];
2415--3314[label="0.00990099;1pkt 1fpkt"];
2415--3384[label="0.148515;15pkt 15fpkt"];
2415--3387[label="0.029703;3pkt 3fpkt"];
2415--3522[label="0.0357143;1pkt 1fpkt"];
2415--3525[label="0.0178571;1pkt 1fpkt"];
2415--3543[label="0.0119048;1pkt 1fpkt"];
2415--3572[label="0.00990099;1pkt 1fpkt"];
2415--3609[label="0.00990099;1pkt 1fpkt"];
2415--3810[label="0.00990099;1pkt 1fpkt"];
2415--3992[label="0.00990099;1pkt 1fpkt"];
2415--3996[label="0.00990099;1pkt 1fpkt"];
2415--4004[label="0.0166667;1pkt 1fpkt"];
2415--4019[label="0.0322581;1pkt 1fpkt"];
2415--4121[label="0.0138889;1pkt 1fpkt"];
2415--4238[label="0.00990099;1pkt 1fpkt"];
2415--4305[label="0.00990099;1pkt 1fpkt"];
2415--4320[label="0.00990099;1pkt 1fpkt"];
2415--4411[label="0.00990099;1pkt 1fpkt"];
2415--4496[label="0.00990099;1pkt 1fpkt"];
2415--4514[label="0.039604;4pkt 4fpkt"];
2415--4549[label="0.00990099;1pkt 1fpkt"];
2415--4712[label="0.0792079;8pkt 8fpkt"];
2415--4848[label="0.00990099;1pkt 1fpkt"];
2415--4889[label="0.00990099;1pkt 1fpkt"];
2415--4908[label="0.00990099;1pkt 1fpkt"];
2415--4966[label="0.00990099;1pkt 1fpkt"];
2415--5013[label="0.00990099;1pkt 1fpkt"];
2415--5173[label="0.00990099;1pkt 1fpkt"];
2415--5240[label="0.00990099;1pkt 1fpkt"];
2415--5319[label="0.00990099;1pkt 1fpkt"];
2415--5342[label="0.00990099;1pkt 1fpkt"];
2415--5392[label="0.0204082;1pkt 1fpkt"];
2415--5461[label="0.0434783;1pkt 1fpkt"];
2415--5552[label="0.00990099;1pkt 1fpkt"];
2415--5598[label="0.00990099;1pkt 1fpkt"];
2415--5794[label="0.00990099;1pkt 1fpkt"];
2415--5846[label="0.0188679;1pkt 1fpkt"];
2415--5878[label="0.015873;1pkt 1fpkt"];
2415--5904[label="0.0119048;1pkt 1fpkt"];
2415--6025[label="0.0181818;1pkt 1fpkt"];
2415--6072[label="0.00990099;1pkt 1fpkt"];
2415--6176[label="0.00990099;1pkt 1fpkt"];
2415--6271[label="0.00990099;1pkt 1fpkt"];
2415--6284[label="0.0333333;1pkt 1fpkt"];
2415--6338[label="0.0138889;1pkt 1fpkt"];
2415--6401[label="0.00990099;1pkt 1fpkt"];
2415--6440[label="0.00990099;1pkt 1fpkt"];
2415--6449[label="0.00990099;1pkt 1fpkt"];
2415--6501[label="0.00990099;1pkt 1fpkt"];
2415--6549[label="0.00990099;1pkt 1fpkt"];
2415--6558[label="0.039604;4pkt 4fpkt"];
2415--6578[label="0.00990099;1pkt 1fpkt"];
2415--6745[label="0.00990099;1pkt 1fpkt"];
2415--6819[label="0.00990099;1pkt 1fpkt"];
2415--6976[label="0.00990099;1pkt 1fpkt"];
2415--7019[label="0.00990099;1pkt 1fpkt"];
2415--7035[label="0.00990099;1pkt 1fpkt"];
2415--7064[label="0.0204082;1pkt 1fpkt"];
2415--7104[label="0.0454545;1pkt 1fpkt"];
2415--7145[label="0.00990099;1pkt 1fpkt"];
2415--7266[label="0.00990099;1pkt 1fpkt"];
2415--7296[label="0.0188679;1pkt 1fpkt"];
2415--7393[label="0.0178571;1pkt 1fpkt"];
2415--7530[label="0.00990099;1pkt 1fpkt"];
2415--7536[label="0.0322581;1pkt 1fpkt"];
2415--7568[label="0.0138889;1pkt 1fpkt"];
2415--7608[label="0.00990099;1pkt 1fpkt"];
2415--7632[label="0.00990099;1pkt 1fpkt"];
2415--7636[label="0.00990099;1pkt 1fpkt"];
2415--7667[label="0.00990099;1pkt 1fpkt"];
2415--7698[label="0.00990099;1pkt 1fpkt"];
2415--7702[label="0.039604;4pkt 4fpkt"];
2415--7715[label="0.00990099;1pkt 1fpkt"];
2415--7935[label="0.00990099;1pkt 1fpkt"];
2415--7962[label="0.00990099;1pkt 1fpkt"];
2415--7971[label="0.00990099;1pkt 1fpkt"];
2415--7987[label="0.0208333;1pkt 1fpkt"];
2415--8011[label="0.0434783;1pkt 1fpkt"];
2415--8039[label="0.00990099;1pkt 1fpkt"];
2415--8126[label="0.0185185;1pkt 1fpkt"];
2425--2594[label="0.0133333;1pkt 1fpkt"];
2425--2666[label="0.0212766;1pkt 1fpkt"];
2425--2687[label="0.0114943;1pkt 1fpkt"];
2425--2859[label="0.00909091;1pkt 1fpkt"];
2425--2938[label="0.00909091;1pkt 1fpkt"];
2425--2960[label="0.00909091;1pkt 1fpkt"];
2425--3003[label="0.00909091;1pkt 1fpkt"];
2425--3017[label="0.016129;1pkt 1fpkt"];
2425--3037[label="0.00909091;1pkt 1fpkt"];
2425--3061[label="0.00909091;1pkt 1fpkt"];
2425--3164[label="0.00909091;1pkt 1fpkt"];
2425--3222[label="0.00909091;1pkt 1fpkt"];
2425--3246[label="0.00909091;1pkt 1fpkt"];
2425--3313[label="0.00909091;1pkt 1fpkt"];
2425--3314[label="0.00909091;1pkt 1fpkt"];
2425--3384[label="0.127273;14pkt 14fpkt"];
2425--3387[label="0.0272727;3pkt 3fpkt"];
2425--3543[label="0.0119048;1pkt 1fpkt"];
2425--3572[label="0.00909091;1pkt 1fpkt"];
2425--3609[label="0.00909091;1pkt 1fpkt"];
2425--3810[label="0.00909091;1pkt 1fpkt"];
2425--3815[label="0.0185185;1pkt 1fpkt"];
2425--3902[label="0.00909091;1pkt 1fpkt"];
2425--3992[label="0.00909091;1pkt 1fpkt"];
2425--3996[label="0.00909091;1pkt 1fpkt"];
2425--4055[label="0.00909091;1pkt 1fpkt"];
2425--4121[label="0.0138889;1pkt 1fpkt"];
2425--4132[label="0.00909091;1pkt 1fpkt"];
2425--4238[label="0.00909091;1pkt 1fpkt"];
2425--4305[label="0.00909091;1pkt 1fpkt"];
2425--4320[label="0.00909091;1pkt 1fpkt"];
2425--4411[label="0.00909091;1pkt 1fpkt"];
2425--4496[label="0.00909091;1pkt 1fpkt"];
2425--4549[label="0.00909091;1pkt 1fpkt"];
2425--4579[label="0.0188679;1pkt 1fpkt"];
2425--4712[label="0.1;11pkt 11fpkt"];
2425--4739[label="0.00909091;1pkt 1fpkt"];
2425--4867[label="0.00909091;1pkt 1fpkt"];
2425--4889[label="0.00909091;1pkt 1fpkt"];
2425--4903[label="0.111111;1pkt 1fpkt"];
2425--4908[label="0.00909091;1pkt 1fpkt"];
2425--4966[label="0.00909091;1pkt 1fpkt"];
2425--5013[label="0.00909091;1pkt 1fpkt"];
2425--5070[label="0.0185185;1pkt 1fpkt"];
2425--5108[label="0.00909091;1pkt 1fpkt"];
2425--5159[label="0.00909091;1pkt 1fpkt"];
2425--5173[label="0.00909091;1pkt 1fpkt"];
2425--5240[label="0.00909091;1pkt 1fpkt"];
2425--5342[label="0.00909091;1pkt 1fpkt"];
2425--5461[label="0.0434783;1pkt 1fpkt"];
2425--5552[label="0.00909091;1pkt 1fpkt"];
2425--5598[label="0.00909091;1pkt 1fpkt"];
2425--5794[label="0.00909091;1pkt 1fpkt"];
2425--5846[label="0.0188679;1pkt 1fpkt"];
2425--6072[label="0.00909091;1pkt 1fpkt"];
2425--6176[label="0.00909091;1pkt 1fpkt"];
2425--6178[label="0.0185185;1pkt 1fpkt"];
2425--6224[label="0.00909091;1pkt 1fpkt"];
2425--6271[label="0.00909091;1pkt 1fpkt"];
2425--6338[label="0.0138889;1pkt 1fpkt"];
2425--6345[label="0.00909091;1pkt 1fpkt"];
2425--6401[label="0.00909091;1pkt 1fpkt"];
2425--6440[label="0.00909091;1pkt 1fpkt"];
2425--6449[label="0.00909091;1pkt 1fpkt"];
2425--6501[label="0.00909091;1pkt 1fpkt"];
2425--6549[label="0.00909091;1pkt 1fpkt"];
2425--6578[label="0.00909091;1pkt 1fpkt"];
2425--6686[label="0.00909091;1pkt 1fpkt"];
2425--6776[label="0.1;1pkt 1fpkt"];
2425--6819[label="0.00909091;1pkt 1fpkt"];
2425--6976[label="0.00909091;1pkt 1fpkt"];
2425--7035[label="0.00909091;1pkt 1fpkt"];
2425--7104[label="0.0454545;1pkt 1fpkt"];
2425--7145[label="0.00909091;1pkt 1fpkt"];
2425--7266[label="0.00909091;1pkt 1fpkt"];
2425--7296[label="0.0188679;1pkt 1fpkt"];
2425--7476[label="0.0188679;1pkt 1fpkt"];
2425--7530[label="0.00909091;1pkt 1fpkt"];
2425--7568[label="0.0138889;1pkt 1fpkt"];
2425--7608[label="0.00909091;1pkt 1fpkt"];
2425--7632[label="0.00909091;1pkt 1fpkt"];
2425--7636[label="0.00909091;1pkt 1fpkt"];
2425--7667[label="0.00909091;1pkt 1fpkt"];
2425--7698[label="0.00909091;1pkt 1fpkt"];
2425--7715[label="0.00909091;1pkt 1fpkt"];
2425--7771[label="0.00909091;1pkt 1fpkt"];
2425--7820[label="0.111111;1pkt 1fpkt"];
2425--7935[label="0.00909091;1pkt 1fpkt"];
2425--7971[label="0.00909091;1pkt 1fpkt"];
2425--8011[label="0.0434783;1pkt 1fpkt"];
2425--8039[label="0.00909091;1pkt 1fpkt"];
2425--8126[label="0.0185185;1pkt 1fpkt"];
3206--3329[label="0.0227273;1pkt 1fpkt"];
3206--3397[label="0.0232558;1pkt 1fpkt"];
3206--3438[label="0.0479452;7pkt 7fpkt"];
3206--3482[label="0.0769231;2pkt 2fpkt"];
3206--3763[label="0.0212766;1pkt 1fpkt"];
3206--3809[label="0.0138889;1pkt 1fpkt"];
3206--4017[label="0.0232558;1pkt 1fpkt"];
3206--4120[label="0.0178571;1pkt 1fpkt"];
3206--4394[label="0.0416667;1pkt 1fpkt"];
3206--4551[label="0.166667;2pkt 2fpkt"];
3206--4788[label="0.00684932;1pkt 1fpkt"];
3206--4797[label="0.136364;3pkt 3fpkt"];
3206--4834[label="0.0357143;1pkt 1fpkt"];
3206--4906[label="0.8;4pkt 4fpkt"];
3206--4925[label="0.0263158;1pkt 1fpkt"];
3206--5011[label="0.00684932;1pkt 1fpkt"];
3206--5071[label="0.00684932;1pkt 1fpkt"];
3206--5133[label="0.00684932;1pkt 1fpkt"];
3206--5148[label="0.0333333;1pkt 1fpkt"];
3206--5171[label="0.00684932;1pkt 1fpkt"];
3206--5337[label="0.0526316;2pkt 2fpkt"];
3206--5371[label="0.0479452;7pkt 7fpkt"];
3206--5527[label="0.2;1pkt 1fpkt"];
3206--5574[label="0.010101;1pkt 1fpkt"];
3206--5589[label="0.00740741;1pkt 1fpkt"];
3206--5698[label="0.00684932;1pkt 1fpkt"];
3206--5708[label="0.0425532;2pkt 2fpkt"];
3206--5746[label="0.0232558;1pkt 1fpkt"];
3206--5749[label="0.0205479;3pkt 3fpkt"];
3206--5959[label="0.0232558;1pkt 1fpkt"];
3206--5982[label="0.0479452;7pkt 7fpkt"];
3206--6147[label="0.5;1pkt 1fpkt"];
3206--6153[label="0.0212766;1pkt 1fpkt"];
3206--6175[label="0.0140845;1pkt 1fpkt"];
3206--6283[label="0.0232558;1pkt 1fpkt"];
3206--6579[label="0.166667;2pkt 2fpkt"];
3206--6717[label="0.00684932;1pkt 1fpkt"];
3206--6721[label="0.142857;3pkt 3fpkt"];
3206--6777[label="0.8;4pkt 4fpkt"];
3206--6790[label="0.0263158;1pkt 1fpkt"];
3206--6922[label="0.0322581;1pkt 1fpkt"];
3206--7032[label="0.0526316;2pkt 2fpkt"];
3206--7049[label="0.0479452;7pkt 7fpkt"];
3206--7160[label="0.010101;1pkt 1fpkt"];
3206--7218[label="0.00684932;1pkt 1fpkt"];
3206--7221[label="0.0434783;2pkt 2fpkt"];
3206--7240[label="0.0232558;1pkt 1fpkt"];
3206--7242[label="0.0205479;3pkt 3fpkt"];
3206--7474[label="0.0140845;1pkt 1fpkt"];
3206--7792[label="0.00684932;1pkt 1fpkt"];
3206--7821[label="0.8;4pkt 4fpkt"];
3206--7828[label="0.0263158;1pkt 1fpkt"];
3206--7903[label="0.0322581;1pkt 1fpkt"];
3206--7980[label="0.0479452;7pkt 7fpkt"];
3206--8047[label="0.010101;1pkt 1fpkt"];
3206--8097[label="0.0227273;1pkt 1fpkt"];
4903--6776[label="1;9pkt 9fpkt"];
4903--7820[label="1;9pkt 9fpkt"];
4906--6777[label="1;5pkt 5fpkt"];
4906--7821[label="1;5pkt 5fpkt"];
4925--6790[label="1;38pkt 38fpkt"];
4925--7828[label="1;38pkt 38fpkt"];
5337--7032[label="1;38pkt 38fpkt"];
5392--7064[label="1;49pkt 49fpkt"];
5392--7987[label="1;48pkt 48fpkt"];
6776--7820[label="1;9pkt 9fpkt"];
6777--7821[label="1;5pkt 5fpkt"];
6790--7828[label="1;38pkt 38fpkt"];
7064--7987[label="1;48pkt 48fpkt"];
7104--8011[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.178.125"/>
      <filter dst_port="53"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
2022[label="211.132.169.204;s;3pkt 3fpkt", shape=diamond, color=yellow];
3332[label="211.132.169.204;s;3pkt 3fpkt", shape=hexagon, color=black];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.132.169.204:80, 212.79.192.208:58117}[33.3333%]&lt;BR/&gt;{211.132.169.204:80, 212.79.192.208:58186}[33.3333%]&lt;BR/&gt;{211.132.169.204:80, 212.79.192.208:58300}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58300: (16.6667%)&lt;BR/&gt; 58186: (16.6667%)&lt;BR/&gt; 58117: (16.6667%)&gt;];
}
2022--3332[label="1;3pkt 3fpkt"];
2022--3388[label="0.333333;1pkt 1fpkt"];
3332--3388[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.208" dst_port="58300" src_ip="211.132.169.204" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="58186" src_ip="211.132.169.204" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="58117" src_ip="211.132.169.204" src_port="80"/>
    </slice>
    <from sec="1120712647" usec="0"/>
    <to sec="1120713053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1757[label="26.38.146.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
3333[label="26.38.146.232;d;1pkt 1fpkt", shape=hexagon, color=black];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.142.96:4248, 26.38.146.232:43594}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43594: (50%)&lt;BR/&gt; 4248: (50%)&gt;];
}
1757--3333[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.38.146.232" dst_port="43594" src_ip="145.222.142.96" src_port="4248"/>
    </slice>
    <from sec="1120712687" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
523[label="193.19.80.174;d;73pkt 73fpkt", shape=diamond, color=yellow];
526[label="145.223.154.211;s;170pkt 170fpkt", shape=diamond, color=yellow];
3335[label="145.223.154.211;s;170pkt 170fpkt", shape=hexagon, color=black];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.154.211:*, 193.19.80.174:80}[95.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3635: (0.363196%)&lt;BR/&gt; 3634: (0.363196%)&lt;BR/&gt; 3632: (0.363196%)&lt;BR/&gt; 3631: (0.363196%)&gt;];
}
523--526[label="1;73pkt 73fpkt"];
523--3335[label="1;73pkt 73fpkt"];
526--3335[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_ip="193.19.80.174" dst_port="80" src_ip="145.223.154.211"/>
    </slice>
    <from sec="1120712732" usec="0"/>
    <to sec="1120713161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
2520[label="192.61.112.66;s;2pkt 2fpkt", shape=diamond, color=yellow];
3339[label="192.61.112.66;s;2pkt 2fpkt", shape=hexagon, color=black];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.61.112.66:1478, 212.66.63.1:27485}[50%]&lt;BR/&gt;{192.61.112.66:7024, 212.66.63.1:27485}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27485: (50%)&lt;BR/&gt; 7024: (25%)&lt;BR/&gt; 1478: (25%)&gt;];
}
2520--3339[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="27485" src_ip="192.61.112.66" src_port="7024"/>
      <filter dst_ip="212.66.63.1" dst_port="27485" src_ip="192.61.112.66" src_port="1478"/>
    </slice>
    <from sec="1120712803" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
2747[label="148.70.136.96;d;15pkt 15fpkt", shape=diamond, color=yellow];
3342[label="148.70.136.96;d;15pkt 15fpkt", shape=hexagon, color=black];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.50.16:*, 148.70.136.96:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1457: (3.33333%)&lt;BR/&gt; 1388: (3.33333%)&lt;BR/&gt; 1300: (3.33333%)&lt;BR/&gt; 1237: (3.33333%)&gt;];
}
2747--3342[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="148.70.136.96" dst_port="80" src_ip="145.223.50.16"/>
    </slice>
    <from sec="1120712931" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
480[label="145.223.41.175;s;21pkt 21fpkt", shape=diamond, color=yellow];
2767[label="26.180.76.238;d;6pkt 6fpkt", shape=diamond, color=yellow];
3317[label="145.223.41.175;s;21pkt 21fpkt", shape=hexagon, color=black];
3346[label="26.180.76.238;d;6pkt 6fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.41.175:*, 194.229.213.195:80}[38.0952%]&lt;BR/&gt;{145.223.41.175:*, 26.180.76.238:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1522: (3.7037%)&lt;BR/&gt; 1520: (3.7037%)&lt;BR/&gt; 1518: (3.7037%)&lt;BR/&gt; 1517: (3.7037%)&gt;];
}
480--2767[label="1;6pkt 6fpkt"];
480--3317[label="1;21pkt 21fpkt"];
480--3346[label="1;6pkt 6fpkt"];
2767--3317[label="1;6pkt 6fpkt"];
2767--3346[label="1;6pkt 6fpkt"];
3317--3346[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="194.229.213.195" dst_port="80" src_ip="145.223.41.175"/>
      <filter dst_ip="26.180.76.238" dst_port="80" src_ip="145.223.41.175"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
502[label="166.59.151.91;d;19pkt 19fpkt", shape=diamond, color=yellow];
631[label="166.59.141.35;d;1567pkt 1567fpkt", shape=diamond, color=yellow];
3975[label="24.234.201.50;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4560[label="24.194.157.107;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.59.141.35:53}[51.4624%]&lt;BR/&gt;{*:53, 166.59.141.35:52954}[44.6795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8446%)&lt;BR/&gt; 52954: (22.4052%)&lt;BR/&gt; 80: (1.14978%)&lt;BR/&gt; 0: (1.11871%)&lt;BR/&gt; 32768: (0.621504%)&gt;];
}
502--853[label="0.105263;2pkt 2fpkt"];
502--1937[label="0.105263;2pkt 2fpkt"];
502--2529[label="0.230769;3pkt 3fpkt"];
502--2983[label="0.105263;2pkt 2fpkt"];
502--3434[label="0.0526316;1pkt 1fpkt"];
502--3502[label="0.157895;3pkt 3fpkt"];
502--3544[label="0.105263;2pkt 2fpkt"];
502--3597[label="0.0526316;1pkt 1fpkt"];
502--3729[label="0.105263;2pkt 2fpkt"];
502--3975[label="0.0526316;1pkt 1fpkt"];
502--4370[label="0.0526316;1pkt 1fpkt"];
502--4383[label="0.0526316;1pkt 1fpkt"];
502--4506[label="0.105263;2pkt 2fpkt"];
502--6037[label="0.105263;2pkt 2fpkt"];
502--6476[label="0.0526316;1pkt 1fpkt"];
502--6485[label="0.0526316;1pkt 1fpkt"];
502--7396[label="0.105263;2pkt 2fpkt"];
502--7653[label="0.0526316;1pkt 1fpkt"];
502--7658[label="0.0526316;1pkt 1fpkt"];
631--853[label="0.0434783;1pkt 1fpkt"];
631--1646[label="0.0120482;1pkt 1fpkt"];
631--2190[label="0.0212766;1pkt 1fpkt"];
631--2983[label="0.0434783;1pkt 1fpkt"];
631--3384[label="0.0638162;100pkt 100fpkt"];
631--3387[label="0.0925335;145pkt 145fpkt"];
631--3461[label="0.047619;2pkt 2fpkt"];
631--3588[label="0.2;1pkt 1fpkt"];
631--3641[label="0.0454545;1pkt 1fpkt"];
631--3721[label="0.16129;5pkt 5fpkt"];
631--3729[label="0.0333333;1pkt 1fpkt"];
631--3799[label="0.0512821;2pkt 2fpkt"];
631--3820[label="0.2;1pkt 1fpkt"];
631--4034[label="0.0243902;1pkt 1fpkt"];
631--4048[label="0.04;1pkt 1fpkt"];
631--4185[label="0.025641;1pkt 1fpkt"];
631--4309[label="0.027027;1pkt 1fpkt"];
631--4398[label="0.037037;1pkt 1fpkt"];
631--4428[label="0.0833333;1pkt 1fpkt"];
631--4467[label="0.0344828;1pkt 1fpkt"];
631--4560[label="0.25;1pkt 1fpkt"];
631--4578[label="0.0208333;1pkt 1fpkt"];
631--4654[label="0.0277778;1pkt 1fpkt"];
631--4657[label="0.03125;1pkt 1fpkt"];
631--4841[label="0.025;1pkt 1fpkt"];
631--5303[label="0.333333;1pkt 1fpkt"];
631--5335[label="0.0149254;1pkt 1fpkt"];
631--5415[label="0.0232558;1pkt 1fpkt"];
631--5439[label="0.125;1pkt 1fpkt"];
631--5448[label="0.0714286;1pkt 1fpkt"];
631--5649[label="0.03125;1pkt 1fpkt"];
631--5748[label="0.00729927;1pkt 1fpkt"];
631--6375[label="0.0263158;1pkt 1fpkt"];
631--6493[label="0.0384615;1pkt 1fpkt"];
631--6512[label="0.0833333;1pkt 1fpkt"];
631--6594[label="0.0212766;1pkt 1fpkt"];
631--7241[label="0.00735294;1pkt 1fpkt"];
631--7591[label="0.0263158;1pkt 1fpkt"];
631--7721[label="0.0212766;1pkt 1fpkt"];
631--8098[label="0.00735294;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.141.35" dst_port="53"/>
      <filter dst_ip="166.59.141.35" dst_port="52954" src_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
1420[label="86.200.18.146;d;45pkt 45fpkt", shape=diamond, color=yellow];
2484[label="27.161.179.241;d;15pkt 15fpkt", shape=diamond, color=yellow];
2715[label="149.177.113.131;s;17pkt 17fpkt", shape=diamond, color=yellow];
3076[label="86.200.18.146;d;39pkt 39fpkt", shape=hexagon, color=black];
3299[label="27.153.215.17;d;21pkt 21fpkt", shape=hexagon, color=black];
4770[label="149.177.113.131;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6705[label="149.177.113.131;19pkt 19fpkt", shape=invtriangle, color=brown];
7784[label="149.177.113.131;18pkt 18fpkt", shape=invhouse, color=bisque];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.146.123:80, 86.200.18.146:*}[45.3608%]&lt;BR/&gt;{*:80, 27.153.215.17:*}[21.6495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46089: (1.5544%)&lt;BR/&gt; 23395: (1.29534%)&lt;BR/&gt; 8943: (1.29534%)&lt;BR/&gt; 62054: (1.03627%)&gt;];
}
1420--2715[label="0.0588235;1pkt 1fpkt"];
1420--2803[label="0.977778;44pkt 44fpkt"];
1420--3076[label="1;39pkt 39fpkt"];
1420--3354[label="0.977778;44pkt 44fpkt"];
1420--3388[label="0.0666667;3pkt 3fpkt"];
1420--4701[label="0.977778;44pkt 44fpkt"];
1420--4770[label="0.0526316;1pkt 1fpkt"];
1420--6665[label="0.977778;44pkt 44fpkt"];
1420--6705[label="0.0526316;1pkt 1fpkt"];
1420--7760[label="0.977778;44pkt 44fpkt"];
1420--7784[label="0.0555556;1pkt 1fpkt"];
2484--2715[label="0.0666667;1pkt 1fpkt"];
2484--2803[label="0.933333;14pkt 14fpkt"];
2484--3354[label="0.933333;14pkt 14fpkt"];
2484--3388[label="0.0666667;1pkt 1fpkt"];
2484--4701[label="0.933333;14pkt 14fpkt"];
2484--4770[label="0.0666667;1pkt 1fpkt"];
2484--6665[label="0.933333;14pkt 14fpkt"];
2484--6705[label="0.0666667;1pkt 1fpkt"];
2484--7760[label="0.933333;14pkt 14fpkt"];
2484--7784[label="0.0666667;1pkt 1fpkt"];
2715--3076[label="0.0588235;1pkt 1fpkt"];
2715--3299[label="0.0588235;1pkt 1fpkt"];
2715--3388[label="0.176471;3pkt 3fpkt"];
2715--4770[label="1;17pkt 17fpkt"];
2715--6705[label="1;17pkt 17fpkt"];
2715--7784[label="1;17pkt 17fpkt"];
3076--3354[label="0.974359;38pkt 38fpkt"];
3076--3388[label="0.025641;1pkt 1fpkt"];
3076--4701[label="0.974359;38pkt 38fpkt"];
3076--4770[label="0.0526316;1pkt 1fpkt"];
3076--6665[label="0.974359;38pkt 38fpkt"];
3076--6705[label="0.0526316;1pkt 1fpkt"];
3076--7760[label="0.974359;38pkt 38fpkt"];
3076--7784[label="0.0555556;1pkt 1fpkt"];
3299--3354[label="0.904762;19pkt 19fpkt"];
3299--3388[label="0.047619;1pkt 1fpkt"];
3299--4701[label="0.904762;19pkt 19fpkt"];
3299--4770[label="0.0526316;1pkt 1fpkt"];
3299--6665[label="0.904762;19pkt 19fpkt"];
3299--6705[label="0.0526316;1pkt 1fpkt"];
3299--7760[label="0.904762;19pkt 19fpkt"];
3299--7784[label="0.0555556;1pkt 1fpkt"];
4770--6705[label="1;19pkt 19fpkt"];
4770--7784[label="1;18pkt 18fpkt"];
6705--7784[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="27.153.215.17" src_port="80"/>
      <filter dst_ip="86.200.18.146" src_ip="149.177.146.123" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2210[label="212.66.59.184;s;82pkt 82fpkt", shape=diamond, color=yellow];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.59.184:*, 195.42.128.122:80}[54.878%]&lt;BR/&gt;{212.66.59.184:*, 195.42.128.190:80}[23.1707%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3902%)&lt;BR/&gt; 2787: (0.609756%)&lt;BR/&gt; 2786: (0.609756%)&lt;BR/&gt; 2785: (0.609756%)&lt;BR/&gt; 2784: (0.609756%)&gt;];
}
2210--2670[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.42.128.122" dst_port="80" src_ip="212.66.59.184"/>
      <filter dst_ip="195.42.128.190" dst_port="80" src_ip="212.66.59.184"/>
    </slice>
    <from sec="1120712426" usec="0"/>
    <to sec="1120713130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
459[label="27.198.95.213;s;38pkt 38fpkt", shape=diamond, color=yellow];
862[label="161.99.117.84;d;3pkt 3fpkt", shape=diamond, color=yellow];
3140[label="212.66.180.12;d;23pkt 23fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.198.95.213:80, *:*}[64.4068%]&lt;BR/&gt;{*:80, 212.66.180.12:*}[23.7288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.4062%)&lt;BR/&gt; 53: (7.8125%)&lt;BR/&gt; 8153: (3.90625%)&lt;BR/&gt; 4106: (1.5625%)&lt;BR/&gt; 4105: (1.5625%)&gt;];
}
459--547[label="0.0263158;1pkt 1fpkt"];
459--862[label="1;3pkt 3fpkt"];
459--2010[label="0.111111;3pkt 3fpkt"];
459--3140[label="0.0869565;2pkt 2fpkt"];
459--3388[label="0.105263;4pkt 4fpkt"];
3140--3367[label="0.0714286;1pkt 1fpkt"];
3140--3387[label="0.130435;3pkt 3fpkt"];
3140--4185[label="0.0434783;1pkt 1fpkt"];
3140--4398[label="0.0434783;1pkt 1fpkt"];
3140--5335[label="0.0434783;1pkt 1fpkt"];
3140--6375[label="0.0434783;1pkt 1fpkt"];
3140--6493[label="0.0434783;1pkt 1fpkt"];
3140--7591[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="27.198.95.213" src_port="80"/>
      <filter dst_ip="212.66.180.12" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
472[label="149.177.67.145;s;403pkt 403fpkt", shape=diamond, color=yellow];
1014[label="161.99.40.55;s;130pkt 130fpkt", shape=diamond, color=yellow];
2082[label="193.161.108.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
2360[label="131.186.84.224;d;9pkt 9fpkt", shape=diamond, color=yellow];
2464[label="213.17.230.60;s;70pkt 70fpkt", shape=diamond, color=yellow];
2509[label="30.188.92.123;d;10pkt 10fpkt", shape=diamond, color=yellow];
2764[label="203.141.5.64;d;5pkt 5fpkt", shape=diamond, color=yellow];
4071[label="213.17.230.60;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.67.145:80, *:*}[65.0485%]&lt;BR/&gt;{161.99.40.55:80, 24.213.249.89:*}[20.0647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5726%)&lt;BR/&gt; 0: (0.42735%)&lt;BR/&gt; 40165: (0.213675%)&lt;BR/&gt; 4441: (0.213675%)&lt;BR/&gt; 2769: (0.213675%)&gt;];
}
472--1248[label="0.07173;17pkt 17fpkt"];
472--2509[label="1;10pkt 10fpkt"];
472--2755[label="0.2;1pkt 1fpkt"];
472--3388[label="0.057072;23pkt 23fpkt"];
1014--1850[label="1;106pkt 106fpkt"];
1014--3388[label="0.0692308;9pkt 9fpkt"];
2082--4505[label="1;1pkt 1fpkt"];
2360--2361[label="1;1pkt 1fpkt"];
2360--3388[label="0.222222;2pkt 2fpkt"];
2464--2764[label="1;5pkt 5fpkt"];
2464--3388[label="0.185714;13pkt 13fpkt"];
2464--4071[label="0.985714;69pkt 69fpkt"];
2764--3388[label="0.6;3pkt 3fpkt"];
2764--4071[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.67.145" src_port="80"/>
      <filter dst_ip="24.213.249.89" src_ip="161.99.40.55" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
1549[label="211.166.147.169;d;5pkt 5fpkt", shape=diamond, color=yellow];
3398[label="149.177.106.0;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4759[label="149.177.111.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5960[label="149.177.106.0;3pkt 3fpkt", shape=invtriangle, color=brown];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.106.0:*, *:1863}[42.8571%]&lt;BR/&gt;{149.177.111.130:*, 211.166.147.169:1863}[28.5714%]&lt;BR/&gt;{149.177.106.252:*, 211.166.147.169:1863}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2043: (11.5385%)&lt;BR/&gt; 2063: (7.69231%)&lt;BR/&gt; 1911: (7.69231%)&lt;BR/&gt; 1150: (7.69231%)&gt;];
}
1549--3398[label="0.333333;1pkt 1fpkt"];
1549--4759[label="1;2pkt 2fpkt"];
1549--5960[label="0.333333;1pkt 1fpkt"];
3398--5960[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="149.177.106.0"/>
      <filter dst_ip="211.166.147.169" dst_port="1863" src_ip="149.177.106.252"/>
      <filter dst_ip="211.166.147.169" dst_port="1863" src_ip="149.177.111.130"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.133.150.0"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.120.158.0"/>
    </slice>
    <from sec="1120712476" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.11.112.1"/>
    </slice>
    <from sec="1120712699" usec="0"/>
    <to sec="1120712722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.74.116.1"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.113.177.1"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.227.200.2"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.236.35.3"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.36.14.5"/>
    </slice>
    <from sec="1120712900" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.108.64.5"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.33.141.5"/>
    </slice>
    <from sec="1120712433" usec="0"/>
    <to sec="1120713249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.176.5"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
2150[label="28.134.107.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.134.107.6:4665, 149.68.157.180:19077}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19077: (50%)&lt;BR/&gt; 4665: (50%)&gt;];
}
2150--2791[label="1;1pkt 1fpkt"];
2150--3467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="19077" src_ip="28.134.107.6" src_port="4665"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
2118[label="200.133.112.6;s;350pkt 350fpkt", shape=diamond, color=yellow];
3469[label="200.133.112.6;370pkt 370fpkt", shape=pentagon, color=darkviolet];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.133.112.6:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4629: (0.277778%)&lt;BR/&gt; 4608: (0.277778%)&lt;BR/&gt; 4555: (0.277778%)&lt;BR/&gt; 3962: (0.277778%)&gt;];
}
2118--3469[label="0.997143;349pkt 349fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.133.112.6"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.14.115.6"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.136.6"/>
    </slice>
    <from sec="1120712471" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.24.158.7"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
2224[label="145.223.131.17;d;12pkt 12fpkt", shape=diamond, color=yellow];
3484[label="161.64.164.7;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.64.164.7:*, 145.223.131.80:25}[31.5789%]&lt;BR/&gt;{161.64.164.7:*, 145.223.131.17:25}[31.5789%]&lt;BR/&gt;{*:*, 145.223.131.17:53}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.7826%)&lt;BR/&gt; 53: (15.2174%)&lt;BR/&gt; 3364: (4.34783%)&lt;BR/&gt; 3340: (4.34783%)&lt;BR/&gt; 3282: (4.34783%)&gt;];
}
2224--2541[label="0.444444;4pkt 4fpkt"];
2224--3484[label="0.363636;4pkt 4fpkt"];
2224--5019[label="0.0833333;1pkt 1fpkt"];
2224--6852[label="0.0833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.131.17" dst_port="53"/>
      <filter dst_ip="145.223.131.17" dst_port="25" src_ip="161.64.164.7"/>
      <filter dst_ip="145.223.131.80" dst_port="25" src_ip="161.64.164.7"/>
    </slice>
    <from sec="1120712460" usec="0"/>
    <to sec="1120713254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.185.238.7"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.41.34.8"/>
    </slice>
    <from sec="1120712446" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.43.96.8"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.1.142.8"/>
    </slice>
    <from sec="1120712906" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
2163[label="201.76.0.9;s;284pkt 284fpkt", shape=diamond, color=yellow];
3505[label="201.76.0.9;282pkt 282fpkt", shape=pentagon, color=darkviolet];
6014[label="201.76.0.9;283pkt 283fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.76.0.9:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3250: (0.353357%)&lt;BR/&gt; 3005: (0.353357%)&lt;BR/&gt; 2494: (0.353357%)&lt;BR/&gt; 2085: (0.353357%)&gt;];
}
2163--3505[label="1;282pkt 282fpkt"];
2163--6014[label="1;283pkt 283fpkt"];
3505--6014[label="1;282pkt 282fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.76.0.9"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.218.5.9"/>
    </slice>
    <from sec="1120712747" usec="0"/>
    <to sec="1120712751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.233.50.10"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.238.10"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
1038[label="145.223.132.92;s;237pkt 237fpkt", shape=diamond, color=yellow];
2119[label="202.41.97.166;d;14pkt 14fpkt", shape=diamond, color=yellow];
2560[label="221.68.150.226;d;2pkt 2fpkt", shape=diamond, color=yellow];
3517[label="212.66.44.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4406[label="145.223.132.92;263pkt 263fpkt", shape=pentagon, color=darkviolet];
6497[label="145.223.132.92;263pkt 263fpkt", shape=invtriangle, color=brown];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.132.92:*, 192.168.254.254:80}[34.4697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.4744%)&lt;BR/&gt; 20399: (6.47436%)&lt;BR/&gt; 443: (3.58974%)&lt;BR/&gt; 35970: (2.11538%)&lt;BR/&gt; 5431: (1.47436%)&gt;];
}
1038--2119[label="1;14pkt 14fpkt"];
1038--2122[label="0.0526316;1pkt 1fpkt"];
1038--2249[label="0.00952381;1pkt 1fpkt"];
1038--2560[label="1;2pkt 2fpkt"];
1038--3336[label="0.00952381;1pkt 1fpkt"];
1038--4406[label="1;237pkt 237fpkt"];
1038--6497[label="1;237pkt 237fpkt"];
2119--4406[label="1;14pkt 14fpkt"];
2119--6497[label="1;14pkt 14fpkt"];
2560--4406[label="1;2pkt 2fpkt"];
2560--6497[label="1;2pkt 2fpkt"];
3517--6020[label="1;1pkt 1fpkt"];
4406--6497[label="1;263pkt 263fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.254" dst_port="80" src_ip="145.223.132.92"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.169.34.11"/>
    </slice>
    <from sec="1120713150" usec="0"/>
    <to sec="1120713285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.164.79.11"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
746[label="211.166.5.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.104.11:1180, 211.166.5.5:554}[50%]&lt;BR/&gt;{149.177.104.11:1187, 211.166.5.5:554}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 1187: (25%)&lt;BR/&gt; 1180: (25%)&gt;];
}
746--747[label="1;2pkt 2fpkt"];
746--3300[label="1;2pkt 2fpkt"];
746--3532[label="0.5;1pkt 1fpkt"];
746--6030[label="0.5;1pkt 1fpkt"];
746--7394[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.5.5" dst_port="554" src_ip="149.177.104.11" src_port="1187"/>
      <filter dst_ip="211.166.5.5" dst_port="554" src_ip="149.177.104.11" src_port="1180"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24314,2.13245,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
59[label="200.11.46.13s;256pkt 256fpkt", shape=rectangle, color=red];
3549[label="200.11.46.13;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.11.46.13:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
59--111[label="1;256pkt 256fpkt"];
59--3549[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.11.46.13" src_port="1026"/>
    </slice>
    <from sec="1120713152" usec="0"/>
    <to sec="1120713166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.137.72.14"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.224.14"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.100.22.15"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.136.136.15"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.210.166.15"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
218[label="212.79.195.15;s;1652pkt 1652fpkt", shape=diamond, color=yellow];
334[label="213.17.227.70;s;2115pkt 2115fpkt", shape=diamond, color=yellow];
397[label="149.177.146.122;s;3516pkt 3516fpkt", shape=diamond, color=yellow];
444[label="145.223.196.154;s;4528pkt 4528fpkt", shape=diamond, color=yellow];
566[label="212.17.207.5;d;11pkt 11fpkt", shape=diamond, color=yellow];
655[label="212.79.195.83;s;929pkt 929fpkt", shape=diamond, color=yellow];
1829[label="212.79.195.108;s;266pkt 266fpkt", shape=diamond, color=yellow];
1886[label="161.99.200.91;s;416pkt 416fpkt", shape=diamond, color=yellow];
2146[label="212.79.192.169;s;242pkt 242fpkt", shape=diamond, color=yellow];
2848[label="166.59.140.209;s;1097pkt 1097fpkt", shape=hexagon, color=black];
2876[label="212.79.195.83;s;754pkt 754fpkt", shape=hexagon, color=black];
3222[label="145.223.196.154;s;4261pkt 4261fpkt", shape=hexagon, color=black];
3291[label="212.79.195.108;s;266pkt 266fpkt", shape=hexagon, color=black];
3572[label="212.79.195.15;1710pkt 1710fpkt", shape=pentagon, color=darkviolet];
4179[label="213.17.227.70;2532pkt 2532fpkt", shape=pentagon, color=darkviolet];
5013[label="145.223.196.154;4675pkt 4675fpkt", shape=pentagon, color=darkviolet];
5173[label="212.79.192.169;260pkt 260fpkt", shape=pentagon, color=darkviolet];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.196.154:53, *:*}[23.5008%]&lt;BR/&gt;{149.177.146.122:53, *:*}[22.6051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.0783%)&lt;BR/&gt; 2410: (4.97263%)&lt;BR/&gt; 1025: (3.56654%)&lt;BR/&gt; 32769: (2.59665%)&lt;BR/&gt; 32768: (1.974%)&gt;];
}
218--566[label="0.0909091;1pkt 1fpkt"];
218--1380[label="0.00854701;1pkt 1fpkt"];
218--1834[label="0.00934579;1pkt 1fpkt"];
218--1880[label="0.00900901;1pkt 1fpkt"];
218--2126[label="0.00925926;1pkt 1fpkt"];
218--2176[label="0.0102041;1pkt 1fpkt"];
218--2415[label="0.00990099;1pkt 1fpkt"];
218--2425[label="0.00909091;1pkt 1fpkt"];
218--2435[label="0.00961538;1pkt 1fpkt"];
218--2598[label="0.0153846;1pkt 1fpkt"];
218--2600[label="0.00961538;1pkt 1fpkt"];
218--2627[label="0.02;1pkt 1fpkt"];
218--3318[label="0.00854701;1pkt 1fpkt"];
218--3384[label="0.0460048;76pkt 76fpkt"];
218--3387[label="0.104116;172pkt 172fpkt"];
218--3572[label="0.999395;1651pkt 1651fpkt"];
334--566[label="0.0909091;1pkt 1fpkt"];
334--2408[label="0.0238095;1pkt 1fpkt"];
334--3384[label="0.0108747;23pkt 23fpkt"];
334--3387[label="0.137116;290pkt 290fpkt"];
334--4179[label="0.999527;2114pkt 2114fpkt"];
397--566[label="0.0909091;1pkt 1fpkt"];
397--1190[label="0.05;1pkt 1fpkt"];
397--1838[label="0.0117647;1pkt 1fpkt"];
397--3384[label="0.00483504;17pkt 17fpkt"];
397--3387[label="0.235779;829pkt 829fpkt"];
444--566[label="0.0909091;1pkt 1fpkt"];
444--1380[label="0.00854701;1pkt 1fpkt"];
444--1834[label="0.00934579;1pkt 1fpkt"];
444--1880[label="0.00900901;1pkt 1fpkt"];
444--2126[label="0.00925926;1pkt 1fpkt"];
444--2176[label="0.0102041;1pkt 1fpkt"];
444--2415[label="0.00990099;1pkt 1fpkt"];
444--2425[label="0.00909091;1pkt 1fpkt"];
444--2435[label="0.00961538;1pkt 1fpkt"];
444--2598[label="0.0153846;1pkt 1fpkt"];
444--2600[label="0.00961538;1pkt 1fpkt"];
444--2627[label="0.02;1pkt 1fpkt"];
444--3222[label="1;4261pkt 4261fpkt"];
444--3318[label="0.00854701;1pkt 1fpkt"];
444--3384[label="0.0385367;138pkt 138fpkt"];
444--3387[label="0.306095;1386pkt 1386fpkt"];
444--5013[label="0.999779;4527pkt 4527fpkt"];
566--655[label="0.0909091;1pkt 1fpkt"];
566--1829[label="0.0909091;1pkt 1fpkt"];
566--1886[label="0.0909091;1pkt 1fpkt"];
566--2146[label="0.0909091;1pkt 1fpkt"];
566--2848[label="0.0909091;1pkt 1fpkt"];
566--2876[label="0.0909091;1pkt 1fpkt"];
566--3222[label="0.0909091;1pkt 1fpkt"];
566--3291[label="0.0909091;1pkt 1fpkt"];
566--3384[label="0.0909091;1pkt 1fpkt"];
566--3387[label="0.272727;3pkt 3fpkt"];
566--3572[label="0.0909091;1pkt 1fpkt"];
566--4179[label="0.0909091;1pkt 1fpkt"];
566--5013[label="0.0909091;1pkt 1fpkt"];
566--5173[label="0.0909091;1pkt 1fpkt"];
566--5552[label="0.181818;2pkt 2fpkt"];
566--5557[label="0.0909091;1pkt 1fpkt"];
566--7145[label="0.181818;2pkt 2fpkt"];
566--8039[label="0.181818;2pkt 2fpkt"];
655--2876[label="1;754pkt 754fpkt"];
655--3384[label="0.00430571;4pkt 4fpkt"];
655--3387[label="0.160388;149pkt 149fpkt"];
1829--1880[label="0.00900901;1pkt 1fpkt"];
1829--2126[label="0.00925926;1pkt 1fpkt"];
1829--3291[label="1;266pkt 266fpkt"];
1829--3384[label="0.0338346;9pkt 9fpkt"];
1829--3387[label="0.0864662;23pkt 23fpkt"];
1886--2126[label="0.00925926;1pkt 1fpkt"];
1886--2176[label="0.0102041;1pkt 1fpkt"];
1886--2415[label="0.00990099;1pkt 1fpkt"];
1886--2425[label="0.00909091;1pkt 1fpkt"];
1886--2435[label="0.00961538;1pkt 1fpkt"];
1886--2598[label="0.0153846;1pkt 1fpkt"];
1886--2600[label="0.00961538;1pkt 1fpkt"];
1886--2627[label="0.02;1pkt 1fpkt"];
1886--3318[label="0.00854701;1pkt 1fpkt"];
1886--3384[label="0.0889423;37pkt 37fpkt"];
2146--2176[label="0.0102041;1pkt 1fpkt"];
2146--2415[label="0.00990099;1pkt 1fpkt"];
2146--2425[label="0.00909091;1pkt 1fpkt"];
2146--2435[label="0.00961538;1pkt 1fpkt"];
2146--2598[label="0.0153846;1pkt 1fpkt"];
2146--2600[label="0.00961538;1pkt 1fpkt"];
2146--2627[label="0.02;1pkt 1fpkt"];
2146--3318[label="0.00854701;1pkt 1fpkt"];
2146--3384[label="0.115702;28pkt 28fpkt"];
2146--5173[label="0.991736;240pkt 240fpkt"];
2848--3384[label="0.00455789;5pkt 5fpkt"];
2848--3387[label="0.168642;185pkt 185fpkt"];
2848--5557[label="0.999088;1096pkt 1096fpkt"];
2876--3384[label="0.00530504;4pkt 4fpkt"];
2876--3387[label="0.135279;102pkt 102fpkt"];
3222--3318[label="0.00854701;1pkt 1fpkt"];
3222--3384[label="0.0385367;138pkt 138fpkt"];
3222--3387[label="0.325276;1386pkt 1386fpkt"];
3222--5013[label="0.999765;4260pkt 4260fpkt"];
3291--3384[label="0.0338346;9pkt 9fpkt"];
3291--3387[label="0.0864662;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.196.154" src_port="53"/>
      <filter src_ip="149.177.146.122" src_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.69.76.16"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120712789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
2015[label="161.107.224.16;s;62pkt 62fpkt", shape=diamond, color=yellow];
3585[label="161.107.224.16;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6062[label="161.107.224.16;61pkt 61fpkt", shape=invtriangle, color=brown];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.224.16:*, *:6346}[66.129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (40.2174%)&lt;BR/&gt; 6348: (9.78261%)&lt;BR/&gt; 6349: (3.26087%)&lt;BR/&gt; 9001: (1.63043%)&lt;BR/&gt; 62399: (0.815217%)&gt;];
}
2015--3585[label="1;61pkt 61fpkt"];
2015--6062[label="1;61pkt 61fpkt"];
3585--6062[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="161.107.224.16"/>
    </slice>
    <from sec="1120712622" usec="0"/>
    <to sec="1120713042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
2064[label="203.50.26.59;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.9.17:*, 203.50.26.59:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2898: (8.33333%)&lt;BR/&gt; 2897: (8.33333%)&lt;BR/&gt; 2877: (8.33333%)&lt;BR/&gt; 2875: (8.33333%)&gt;];
}
2064--2065[label="1;6pkt 6fpkt"];
2064--3590[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="203.50.26.59" dst_port="80" src_ip="145.223.9.17"/>
    </slice>
    <from sec="1120712877" usec="0"/>
    <to sec="1120713046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.108.17"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
2710[label="145.223.131.17;s;28pkt 28fpkt", shape=diamond, color=yellow];
3599[label="145.223.131.17;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6068[label="145.223.131.17;32pkt 32fpkt", shape=invtriangle, color=brown];
7416[label="145.223.131.17;32pkt 32fpkt", shape=invhouse, color=bisque];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.131.17:53, *:*}[79.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.4%)&lt;BR/&gt; 25: (9.2%)&lt;BR/&gt; 32768: (4.8%)&lt;BR/&gt; 61360: (1.6%)&lt;BR/&gt; 60702: (1.6%)&gt;];
}
2710--3599[label="0.964286;27pkt 27fpkt"];
2710--6068[label="0.928571;26pkt 26fpkt"];
2710--7416[label="0.928571;26pkt 26fpkt"];
3599--6068[label="1;32pkt 32fpkt"];
3599--7416[label="1;32pkt 32fpkt"];
6068--7416[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.131.17" src_port="53"/>
    </slice>
    <from sec="1120712460" usec="0"/>
    <to sec="1120713266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.86.144.17"/>
    </slice>
    <from sec="1120712807" usec="0"/>
    <to sec="1120712871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
477[label="145.223.9.18;s;432pkt 432fpkt", shape=diamond, color=yellow];
819[label="145.223.54.222;s;254pkt 254fpkt", shape=diamond, color=yellow];
1387[label="198.230.88.239;d;41pkt 41fpkt", shape=diamond, color=yellow];
1769[label="196.177.178.114;d;16pkt 16fpkt", shape=diamond, color=yellow];
2225[label="201.234.102.48;d;122pkt 122fpkt", shape=diamond, color=yellow];
2570[label="201.160.184.153;d;5pkt 5fpkt", shape=diamond, color=yellow];
2834[label="145.223.9.18;s;138pkt 138fpkt", shape=hexagon, color=black];
2903[label="145.223.54.222;s;207pkt 207fpkt", shape=hexagon, color=black];
3177[label="198.230.88.239;d;37pkt 37fpkt", shape=hexagon, color=black];
3253[label="201.234.102.48;d;122pkt 122fpkt", shape=hexagon, color=black];
3270[label="201.160.184.153;d;5pkt 5fpkt", shape=hexagon, color=black];
3605[label="145.223.9.18;436pkt 436fpkt", shape=pentagon, color=darkviolet];
5703[label="145.223.54.222;292pkt 292fpkt", shape=pentagon, color=darkviolet];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.9.18:*, *:80}[48.4395%]&lt;BR/&gt;{145.223.54.222:*, *:80}[32.834%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.515%)&lt;BR/&gt; 8080: (3.10869%)&lt;BR/&gt; 21108: (1.37636%)&lt;BR/&gt; 3497: (0.118652%)&lt;BR/&gt; 3495: (0.118652%)&gt;];
}
477--1769[label="1;16pkt 16fpkt"];
477--2225[label="0.139344;17pkt 17fpkt"];
477--2570[label="1;5pkt 5fpkt"];
477--2834[label="1;138pkt 138fpkt"];
477--3253[label="0.139344;17pkt 17fpkt"];
477--3270[label="1;5pkt 5fpkt"];
477--3605[label="1;432pkt 432fpkt"];
819--1387[label="1;41pkt 41fpkt"];
819--2225[label="0.262295;32pkt 32fpkt"];
819--2903[label="1;207pkt 207fpkt"];
819--3177[label="1;37pkt 37fpkt"];
819--3253[label="0.262295;32pkt 32fpkt"];
819--5703[label="1;254pkt 254fpkt"];
1387--2903[label="0.707317;29pkt 29fpkt"];
1387--3177[label="1;37pkt 37fpkt"];
1387--5703[label="1;41pkt 41fpkt"];
1769--3605[label="1;16pkt 16fpkt"];
2225--2834[label="0.0409836;5pkt 5fpkt"];
2225--2903[label="0.262295;32pkt 32fpkt"];
2225--3253[label="1;122pkt 122fpkt"];
2225--3605[label="0.139344;17pkt 17fpkt"];
2225--5703[label="0.262295;32pkt 32fpkt"];
2570--3270[label="1;5pkt 5fpkt"];
2570--3605[label="1;5pkt 5fpkt"];
2834--3253[label="0.0409836;5pkt 5fpkt"];
2834--3605[label="1;138pkt 138fpkt"];
2903--3177[label="0.783784;29pkt 29fpkt"];
2903--3253[label="0.262295;32pkt 32fpkt"];
2903--5703[label="1;207pkt 207fpkt"];
3177--5703[label="1;37pkt 37fpkt"];
3253--3605[label="0.139344;17pkt 17fpkt"];
3253--5703[label="0.262295;32pkt 32fpkt"];
3270--3605[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.9.18"/>
      <filter dst_port="80" src_ip="145.223.54.222"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.195.18"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.116.215.18"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.36354,2.08778,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
77[label="84.118.4.19s;156pkt 156fpkt", shape=rectangle, color=red];
3623[label="84.118.4.19;156pkt 156fpkt", shape=pentagon, color=darkviolet];
6081[label="84.118.4.19;155pkt 155fpkt", shape=invtriangle, color=brown];
7423[label="84.118.4.19;155pkt 155fpkt", shape=invhouse, color=bisque];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.118.4.19:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3615: (0.321543%)&lt;BR/&gt; 3614: (0.321543%)&lt;BR/&gt; 3613: (0.321543%)&lt;BR/&gt; 3612: (0.321543%)&gt;];
}
77--3623[label="1;156pkt 156fpkt"];
77--6081[label="1;155pkt 155fpkt"];
77--7423[label="1;155pkt 155fpkt"];
3623--6081[label="1;155pkt 155fpkt"];
3623--7423[label="1;155pkt 155fpkt"];
6081--7423[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="84.118.4.19"/>
    </slice>
    <from sec="1120713060" usec="0"/>
    <to sec="1120713064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.11.11.19"/>
    </slice>
    <from sec="1120712433" usec="0"/>
    <to sec="1120712809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.84.131.19"/>
    </slice>
    <from sec="1120712878" usec="0"/>
    <to sec="1120713276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.195.19"/>
    </slice>
    <from sec="1120712449" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.85.138.20"/>
    </slice>
    <from sec="1120712829" usec="0"/>
    <to sec="1120712839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.214.8.21"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.108.23.21"/>
    </slice>
    <from sec="1120712444" usec="0"/>
    <to sec="1120712901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
2692[label="149.177.95.27;d;104pkt 104fpkt", shape=diamond, color=yellow];
2781[label="201.214.80.78;s;53pkt 53fpkt", shape=diamond, color=yellow];
3657[label="201.214.81.21;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6094[label="201.214.81.21;22pkt 22fpkt", shape=invtriangle, color=brown];
7430[label="201.214.81.21;22pkt 22fpkt", shape=invhouse, color=bisque];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.214.80.78:80, 149.177.95.27:*}[49.5413%]&lt;BR/&gt;{201.214.81.21:80, 149.177.95.27:*}[20.1835%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2840: (0.900901%)&lt;BR/&gt; 2833: (0.900901%)&lt;BR/&gt; 2815: (0.900901%)&lt;BR/&gt; 2804: (0.900901%)&gt;];
}
2692--2781[label="1;53pkt 53fpkt"];
2692--3657[label="0.761905;16pkt 16fpkt"];
2692--3662[label="0.414634;17pkt 17fpkt"];
2692--6094[label="0.772727;17pkt 17fpkt"];
2692--7430[label="0.772727;17pkt 17fpkt"];
3657--6094[label="1;21pkt 21fpkt"];
3657--7430[label="1;21pkt 21fpkt"];
6094--7430[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.95.27" src_ip="201.214.80.78" src_port="80"/>
      <filter dst_ip="149.177.95.27" src_ip="201.214.81.21" src_port="80"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.158.217.22"/>
    </slice>
    <from sec="1120712820" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.76.3.23"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.109.23"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
2358[label="200.173.167.23;s;305pkt 305fpkt", shape=diamond, color=yellow];
3678[label="200.173.167.23;337pkt 337fpkt", shape=pentagon, color=darkviolet];
6106[label="200.173.167.23;336pkt 336fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.167.23:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4409: (0.306748%)&lt;BR/&gt; 3694: (0.306748%)&lt;BR/&gt; 3079: (0.306748%)&lt;BR/&gt; 3035: (0.306748%)&gt;];
}
2358--3678[label="1;305pkt 305fpkt"];
2358--6106[label="0.996721;304pkt 304fpkt"];
3678--6106[label="1;336pkt 336fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.173.167.23"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
681[label="84.105.35.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.105.35.24:13777, 212.66.63.1:27485}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27485: (50%)&lt;BR/&gt; 13777: (50%)&gt;];
}
681--2800[label="1;1pkt 1fpkt"];
681--3684[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.1" dst_port="27485" src_ip="84.105.35.24" src_port="13777"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.46.165.24"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.178.227.26"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.17.236.26"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.15.27"/>
    </slice>
    <from sec="1120713241" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.228.33.27"/>
    </slice>
    <from sec="1120712457" usec="0"/>
    <to sec="1120712460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.187.27"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.202.83.28"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
892[label="210.78.156.28;s;4pkt 4fpkt", shape=diamond, color=yellow];
3739[label="210.78.156.28;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6142[label="210.78.156.28;3pkt 3fpkt", shape=invtriangle, color=brown];
7453[label="210.78.156.28;3pkt 3fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.78.156.28:80, 131.186.182.177:16739}[25%]&lt;BR/&gt;{210.78.156.28:80, 131.186.182.177:16746}[25%]&lt;BR/&gt;{210.78.156.28:80, 131.186.182.177:16747}[25%]&lt;BR/&gt;{210.78.156.28:80, 131.186.182.177:16749}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16749: (15.3846%)&lt;BR/&gt; 16747: (15.3846%)&lt;BR/&gt; 16746: (15.3846%)&lt;BR/&gt; 16739: (3.84615%)&gt;];
}
892--3739[label="1;3pkt 3fpkt"];
892--6142[label="1;3pkt 3fpkt"];
892--7453[label="1;3pkt 3fpkt"];
3739--6142[label="1;3pkt 3fpkt"];
3739--7453[label="1;3pkt 3fpkt"];
6142--7453[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.177" dst_port="16749" src_ip="210.78.156.28" src_port="80"/>
      <filter dst_ip="131.186.182.177" dst_port="16747" src_ip="210.78.156.28" src_port="80"/>
      <filter dst_ip="131.186.182.177" dst_port="16746" src_ip="210.78.156.28" src_port="80"/>
      <filter dst_ip="131.186.182.177" dst_port="16739" src_ip="210.78.156.28" src_port="80"/>
    </slice>
    <from sec="1120712568" usec="0"/>
    <to sec="1120712596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.203.17.29"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.199.36.29"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
3519[label="24.242.56.10;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3706[label="212.133.0.26;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.242.56.10:80, 212.66.180.199:*}[38.4615%]&lt;BR/&gt;{24.242.56.10:80, 212.66.176.202:*}[38.4615%]&lt;BR/&gt;{212.133.0.26:80, 212.66.182.195:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57355: (3.84615%)&lt;BR/&gt; 57311: (3.84615%)&lt;BR/&gt; 57300: (3.84615%)&lt;BR/&gt; 57293: (3.84615%)&gt;];
}
3519--6021[label="1;10pkt 10fpkt"];
3706--6127[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.176.202" src_ip="24.242.56.10" src_port="80"/>
      <filter dst_ip="212.66.180.199" src_ip="24.242.56.10" src_port="80"/>
      <filter dst_ip="212.66.182.195" src_ip="212.133.0.26" src_port="80"/>
    </slice>
    <from sec="1120712752" usec="0"/>
    <to sec="1120713252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.79.241.29"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
629[label="208.110.174.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
630[label="145.223.43.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
3753[label="145.223.43.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6147[label="145.223.43.30;2pkt 2fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.43.30:8277, 208.110.174.23:8292}[50%]&lt;BR/&gt;{145.223.43.30:2156, 27.198.95.212:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (33.3333%)&lt;BR/&gt; 8277: (33.3333%)&lt;BR/&gt; 2156: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
629--630[label="1;1pkt 1fpkt"];
629--3753[label="1;1pkt 1fpkt"];
629--6147[label="1;1pkt 1fpkt"];
630--1282[label="0.5;1pkt 1fpkt"];
630--3206[label="0.5;1pkt 1fpkt"];
630--3753[label="1;1pkt 1fpkt"];
630--6147[label="1;2pkt 2fpkt"];
3753--6147[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="27.198.95.212" dst_port="80" src_ip="145.223.43.30" src_port="2156"/>
      <filter dst_ip="208.110.174.23" dst_port="8292" src_ip="145.223.43.30" src_port="8277"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.44.9.31"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.225.28.31"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.90.129.31"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
1858[label="145.223.48.32;s;131pkt 131fpkt", shape=diamond, color=yellow];
3769[label="145.223.48.32;139pkt 139fpkt", shape=pentagon, color=darkviolet];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.48.32:25, *:*}[43.8849%]&lt;BR/&gt;{145.223.48.32:*, *:113}[41.0072%]&lt;BR/&gt;{145.223.48.32:*, 28.128.232.21:*}[23.0216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (29.6296%)&lt;BR/&gt; 113: (20.3704%)&lt;BR/&gt; 60084: (0.37037%)&lt;BR/&gt; 54559: (0.37037%)&lt;BR/&gt; 44102: (0.37037%)&gt;];
}
1858--3769[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_ip="28.128.232.21" src_ip="145.223.48.32"/>
      <filter src_ip="145.223.48.32" src_port="25"/>
      <filter dst_port="113" src_ip="145.223.48.32"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.128.98.32"/>
    </slice>
    <from sec="1120712445" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
689[label="145.222.13.33;s;294pkt 294fpkt", shape=diamond, color=yellow];
3779[label="145.222.13.33;305pkt 305fpkt", shape=pentagon, color=darkviolet];
6163[label="145.222.13.33;306pkt 306fpkt", shape=invtriangle, color=brown];
7465[label="145.222.13.33;306pkt 306fpkt", shape=invhouse, color=bisque];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.13.33:25, *:*}[92.8105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6284%)&lt;BR/&gt; 0: (0.495458%)&lt;BR/&gt; 4143: (0.330306%)&lt;BR/&gt; 4047: (0.330306%)&lt;BR/&gt; 3450: (0.330306%)&gt;];
}
689--3779[label="0.996599;293pkt 293fpkt"];
689--6163[label="1;294pkt 294fpkt"];
689--7465[label="1;294pkt 294fpkt"];
3779--6163[label="1;305pkt 305fpkt"];
3779--7465[label="1;305pkt 305fpkt"];
6163--7465[label="1;306pkt 306fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.13.33" src_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.129.102.33"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120712669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.108.33"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.104.113.33"/>
    </slice>
    <from sec="1120712501" usec="0"/>
    <to sec="1120712661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
1056[label="145.223.22.156;s;256pkt 256fpkt", shape=diamond, color=yellow];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.22.156:*, 193.201.121.19:80}[23.8281%]&lt;BR/&gt;{145.223.22.156:*, 27.57.239.67:80}[22.2656%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8047%)&lt;BR/&gt; 3568: (0.390625%)&lt;BR/&gt; 3485: (0.390625%)&lt;BR/&gt; 3484: (0.390625%)&lt;BR/&gt; 3483: (0.390625%)&gt;];
}
1056--1123[label="0.262673;57pkt 57fpkt"];
1056--1344[label="0.0200803;5pkt 5fpkt"];
1056--1379[label="0.0638298;9pkt 9fpkt"];
1056--1531[label="0.184049;30pkt 30fpkt"];
1056--1555[label="0.0234375;6pkt 6fpkt"];
1056--1924[label="0.00943396;1pkt 1fpkt"];
1056--2004[label="0.813333;61pkt 61fpkt"];
1056--2229[label="0.2;22pkt 22fpkt"];
1056--3008[label="0.108434;9pkt 9fpkt"];
1056--5027[label="0.996094;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_ip="193.201.121.19" dst_port="80" src_ip="145.223.22.156"/>
      <filter dst_ip="27.57.239.67" dst_port="80" src_ip="145.223.22.156"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.104.35"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.73.105.35"/>
    </slice>
    <from sec="1120713191" usec="0"/>
    <to sec="1120713242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.67.252.36"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.106.100.37"/>
    </slice>
    <from sec="1120712447" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
1503[label="212.79.192.172;d;317pkt 317fpkt", shape=diamond, color=yellow];
3833[label="223.123.0.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6186[label="223.123.0.38;1pkt 1fpkt", shape=invtriangle, color=brown];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4672, 212.79.192.172:4672}[57.4132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (70.3762%)&lt;BR/&gt; 4662: (6.58307%)&lt;BR/&gt; 5672: (0.470219%)&lt;BR/&gt; 4605: (0.470219%)&lt;BR/&gt; 1026: (0.470219%)&gt;];
}
1503--2259[label="0.00946372;3pkt 3fpkt"];
1503--3388[label="0.00315457;1pkt 1fpkt"];
1503--3833[label="1;1pkt 1fpkt"];
1503--4086[label="0.00946372;3pkt 3fpkt"];
1503--6186[label="1;1pkt 1fpkt"];
3833--6186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.172" dst_port="4672" src_port="4672"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.153.215.38"/>
    </slice>
    <from sec="1120712860" usec="0"/>
    <to sec="1120712883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.86.43.39"/>
    </slice>
    <from sec="1120712776" usec="0"/>
    <to sec="1120712813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.99.39"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.66.5.40"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.94.40"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.183.40"/>
    </slice>
    <from sec="1120713036" usec="0"/>
    <to sec="1120713053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
210[label="131.186.205.194;d;2481pkt 2481fpkt", shape=diamond, color=yellow];
3836[label="201.20.95.38;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3875[label="192.61.178.41;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4007[label="84.106.206.53;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4390[label="85.161.109.90;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4488[label="85.140.18.101;64pkt 64fpkt", shape=pentagon, color=darkviolet];
4868[label="198.192.172.140;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5136[label="192.241.73.167;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6279[label="84.106.206.53;7pkt 7fpkt", shape=invtriangle, color=brown];
6489[label="85.161.109.90;6pkt 6fpkt", shape=invtriangle, color=brown];
6914[label="192.241.73.167;14pkt 14fpkt", shape=invtriangle, color=brown];
7533[label="84.106.206.53;7pkt 7fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 131.186.205.194:44172}[95.5836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44172: (47.8493%)&lt;BR/&gt; 1113: (0.989722%)&lt;BR/&gt; 80: (0.666159%)&lt;BR/&gt; 443: (0.380662%)&lt;BR/&gt; 0: (0.152265%)&gt;];
}
210--435[label="0.0909091;1pkt 1fpkt"];
210--2828[label="0.0909091;1pkt 1fpkt"];
210--3388[label="0.000403063;1pkt 1fpkt"];
210--3836[label="1;7pkt 7fpkt"];
210--3875[label="1;9pkt 9fpkt"];
210--4007[label="1;7pkt 7fpkt"];
210--4390[label="1;6pkt 6fpkt"];
210--4488[label="0.171875;11pkt 11fpkt"];
210--4868[label="1;6pkt 6fpkt"];
210--5136[label="0.923077;12pkt 12fpkt"];
210--5700[label="0.0833333;1pkt 1fpkt"];
210--6279[label="1;7pkt 7fpkt"];
210--6489[label="1;6pkt 6fpkt"];
210--6914[label="0.857143;12pkt 12fpkt"];
210--7533[label="1;7pkt 7fpkt"];
4007--6279[label="1;7pkt 7fpkt"];
4007--7533[label="1;7pkt 7fpkt"];
4390--6489[label="1;6pkt 6fpkt"];
5136--6914[label="1;13pkt 13fpkt"];
6279--7533[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.205.194" dst_port="44172"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1731[label="161.107.5.42;s;10pkt 10fpkt", shape=diamond, color=yellow];
3879[label="161.107.5.42;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6212[label="161.107.5.42;10pkt 10fpkt", shape=invtriangle, color=brown];
7493[label="161.107.5.42;9pkt 9fpkt", shape=invhouse, color=bisque];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.5.42:6346, *:6348}[30%]&lt;BR/&gt;{161.107.5.42:6346, *:6346}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (44.7368%)&lt;BR/&gt; 6348: (18.4211%)&lt;BR/&gt; 6349: (5.26316%)&lt;BR/&gt; 3256: (5.26316%)&lt;BR/&gt; 3085: (5.26316%)&gt;];
}
1731--3879[label="1;9pkt 9fpkt"];
1731--6212[label="1;10pkt 10fpkt"];
1731--7493[label="1;9pkt 9fpkt"];
3879--6212[label="1;9pkt 9fpkt"];
3879--7493[label="1;9pkt 9fpkt"];
6212--7493[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="6348" src_ip="161.107.5.42" src_port="6346"/>
      <filter dst_port="6346" src_ip="161.107.5.42" src_port="6346"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120712967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.26.142.42"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.52.43"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
1897[label="210.7.84.41;d;8pkt 8fpkt", shape=diamond, color=yellow];
3672[label="145.222.0.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3898[label="145.222.0.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 210.7.84.41:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1897--2832[label="0.125;1pkt 1fpkt"];
1897--3672[label="1;1pkt 1fpkt"];
1897--3898[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.7.84.41"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.73.49.45"/>
    </slice>
    <from sec="1120712415" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.32.169.45"/>
    </slice>
    <from sec="1120713059" usec="0"/>
    <to sec="1120713081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.9.59.46"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.46.16.47"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120712745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
1861[label="213.17.228.18;d;175pkt 175fpkt", shape=diamond, color=yellow];
3653[label="209.89.22.21;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3931[label="209.89.23.47;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.17.228.18:0}[85.7843%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1861--3653[label="0.0666667;1pkt 1fpkt"];
1861--3931[label="0.0625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.228.18"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.234.32.47"/>
    </slice>
    <from sec="1120712460" usec="0"/>
    <to sec="1120713241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.9.59.47"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.174.31.48"/>
    </slice>
    <from sec="1120712436" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.31.81.48"/>
    </slice>
    <from sec="1120713278" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.152.48"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
2445[label="195.83.104.49;s;619pkt 619fpkt", shape=diamond, color=yellow];
3958[label="195.83.104.49;667pkt 667fpkt", shape=pentagon, color=darkviolet];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.83.104.49:1592, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1592: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2445--3958[label="0.996769;617pkt 617fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="195.83.104.49" src_port="1592"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.30.50"/>
    </slice>
    <from sec="1120712825" usec="0"/>
    <to sec="1120713076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.34.126.50"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.176.161.50"/>
    </slice>
    <from sec="1120712819" usec="0"/>
    <to sec="1120712913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.42.171.50"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
1491[label="195.167.123.77;s;5pkt 5fpkt", shape=diamond, color=yellow];
4254[label="195.167.123.77;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6411[label="195.167.123.77;5pkt 5fpkt", shape=invtriangle, color=brown];
7617[label="195.167.123.77;4pkt 4fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.167.123.77:0, 149.110.176.59:0}[20%]&lt;BR/&gt;{195.167.123.77:80, 149.110.132.237:3090}[20%]&lt;BR/&gt;{195.167.123.77:80, 149.110.132.237:3094}[20%]&lt;BR/&gt;{195.167.123.77:80, 149.110.132.237:3117}[20%]&lt;BR/&gt;{195.167.123.77:80, 149.110.132.237:3229}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 3229: (11.1111%)&lt;BR/&gt; 3117: (11.1111%)&lt;BR/&gt; 3094: (11.1111%)&lt;BR/&gt; 3090: (11.1111%)&gt;];
}
1491--4254[label="1;4pkt 4fpkt"];
1491--6411[label="1;5pkt 5fpkt"];
1491--7617[label="1;4pkt 4fpkt"];
4254--6411[label="1;4pkt 4fpkt"];
4254--7617[label="1;4pkt 4fpkt"];
6411--7617[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.132.237" dst_port="3229" src_ip="195.167.123.77" src_port="80"/>
      <filter dst_ip="149.110.132.237" dst_port="3117" src_ip="195.167.123.77" src_port="80"/>
      <filter dst_ip="149.110.132.237" dst_port="3094" src_ip="195.167.123.77" src_port="80"/>
      <filter dst_ip="149.110.132.237" dst_port="3090" src_ip="195.167.123.77" src_port="80"/>
      <filter dst_ip="149.110.176.59" src_ip="195.167.123.77"/>
    </slice>
    <from sec="1120712710" usec="0"/>
    <to sec="1120712821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
1426[label="211.166.144.109;d;23pkt 23fpkt", shape=diamond, color=yellow];
2120[label="149.177.105.93;s;26pkt 26fpkt", shape=diamond, color=yellow];
3250[label="211.166.144.109;d;23pkt 23fpkt", shape=hexagon, color=black];
3984[label="161.107.225.51;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4833[label="161.107.225.137;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5460[label="161.107.224.199;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5625[label="149.177.105.214;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7182[label="149.177.105.214;7pkt 7fpkt", shape=invtriangle, color=brown];
8061[label="149.177.105.214;7pkt 7fpkt", shape=invhouse, color=bisque];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.144.109:1863}[37.0968%]&lt;BR/&gt;{149.177.105.93:*, *:80}[24.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (42.3077%)&lt;BR/&gt; 80: (7.21154%)&lt;BR/&gt; 1717: (2.40385%)&lt;BR/&gt; 49295: (1.44231%)&lt;BR/&gt; 1737: (1.44231%)&gt;];
}
1426--2120[label="0.0434783;1pkt 1fpkt"];
1426--3167[label="0.0434783;1pkt 1fpkt"];
1426--3250[label="1;23pkt 23fpkt"];
1426--3984[label="0.333333;1pkt 1fpkt"];
1426--4833[label="0.2;1pkt 1fpkt"];
1426--5460[label="0.333333;1pkt 1fpkt"];
1426--5625[label="0.142857;1pkt 1fpkt"];
1426--7182[label="0.142857;1pkt 1fpkt"];
1426--8061[label="0.142857;1pkt 1fpkt"];
2120--2280[label="0.777778;7pkt 7fpkt"];
2120--2397[label="0.0714286;1pkt 1fpkt"];
2120--3167[label="1;25pkt 25fpkt"];
2120--3250[label="0.0434783;1pkt 1fpkt"];
3250--3984[label="0.333333;1pkt 1fpkt"];
3250--4833[label="0.2;1pkt 1fpkt"];
3250--5460[label="0.333333;1pkt 1fpkt"];
3250--5625[label="0.142857;1pkt 1fpkt"];
3250--7182[label="0.142857;1pkt 1fpkt"];
3250--8061[label="0.142857;1pkt 1fpkt"];
5625--7182[label="1;7pkt 7fpkt"];
5625--8061[label="1;7pkt 7fpkt"];
7182--8061[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.177.105.93"/>
      <filter dst_ip="211.166.144.109" dst_port="1863"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.84.90.52"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
1163[label="202.161.223.194;d;146pkt 146fpkt", shape=diamond, color=yellow];
3989[label="149.110.152.52;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4847[label="145.223.34.139;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4939[label="149.177.128.147;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6744[label="145.223.34.139;27pkt 27fpkt", shape=invtriangle, color=brown];
6801[label="149.177.128.147;28pkt 28fpkt", shape=invtriangle, color=brown];
7805[label="145.223.34.139;28pkt 28fpkt", shape=invhouse, color=bisque];
7837[label="149.177.128.147;28pkt 28fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.211.149:*, 202.161.223.194:443}[30.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.8507%)&lt;BR/&gt; 58051: (0.597015%)&lt;BR/&gt; 58050: (0.597015%)&lt;BR/&gt; 58049: (0.597015%)&lt;BR/&gt; 58048: (0.597015%)&gt;];
}
1163--1961[label="0.00684932;1pkt 1fpkt"];
1163--2896[label="0.00684932;1pkt 1fpkt"];
1163--3075[label="1;75pkt 75fpkt"];
1163--3105[label="0.00684932;1pkt 1fpkt"];
1163--3241[label="0.00684932;1pkt 1fpkt"];
1163--3373[label="0.00684932;1pkt 1fpkt"];
1163--3374[label="0.00684932;1pkt 1fpkt"];
1163--3438[label="0.00684932;1pkt 1fpkt"];
1163--3989[label="1;22pkt 22fpkt"];
1163--4063[label="0.00684932;1pkt 1fpkt"];
1163--4294[label="0.00684932;1pkt 1fpkt"];
1163--4847[label="0.928571;26pkt 26fpkt"];
1163--4939[label="0.928571;26pkt 26fpkt"];
1163--4968[label="0.338235;46pkt 46fpkt"];
1163--5548[label="0.00684932;1pkt 1fpkt"];
1163--5628[label="0.021978;2pkt 2fpkt"];
1163--5835[label="0.00684932;1pkt 1fpkt"];
1163--5982[label="0.00684932;1pkt 1fpkt"];
1163--6744[label="0.925926;25pkt 25fpkt"];
1163--6801[label="0.928571;26pkt 26fpkt"];
1163--6821[label="0.338235;46pkt 46fpkt"];
1163--7144[label="0.00684932;1pkt 1fpkt"];
1163--7185[label="0.0222222;2pkt 2fpkt"];
1163--7288[label="0.00684932;1pkt 1fpkt"];
1163--7805[label="0.928571;26pkt 26fpkt"];
1163--7837[label="0.928571;26pkt 26fpkt"];
1163--8038[label="0.00684932;1pkt 1fpkt"];
1163--8121[label="0.00684932;1pkt 1fpkt"];
4847--6744[label="1;27pkt 27fpkt"];
4847--7805[label="1;28pkt 28fpkt"];
4939--6801[label="1;28pkt 28fpkt"];
4939--7837[label="1;28pkt 28fpkt"];
6744--7805[label="1;27pkt 27fpkt"];
6801--7837[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="202.161.223.194" dst_port="443" src_ip="212.79.211.149"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.108.97.53"/>
    </slice>
    <from sec="1120712462" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28576,2.11155,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
3[label="161.107.109.80s;3pkt 3fpkt", shape=rectangle, color=red];
1231[label="26.241.88.13;d;34pkt 34fpkt", shape=diamond, color=yellow];
1414[label="200.128.177.195;d;101pkt 101fpkt", shape=diamond, color=yellow];
4008[label="161.107.225.53;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.109.80:*, 200.128.177.195:80}[38.2353%]&lt;BR/&gt;{161.107.109.80:*, 26.241.88.13:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3615: (0.675676%)&lt;BR/&gt; 3474: (0.675676%)&lt;BR/&gt; 2523: (0.675676%)&lt;BR/&gt; 2522: (0.675676%)&gt;];
}
3--1231[label="0.333333;1pkt 1fpkt"];
3--1232[label="1;3pkt 3fpkt"];
3--1414[label="0.333333;1pkt 1fpkt"];
3--2058[label="0.333333;1pkt 1fpkt"];
3--3086[label="0.666667;2pkt 2fpkt"];
3--3263[label="0.333333;1pkt 1fpkt"];
1231--1232[label="1;34pkt 34fpkt"];
1231--3086[label="0.852941;29pkt 29fpkt"];
1414--4008[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="200.128.177.195" dst_port="80" src_ip="161.107.109.80"/>
      <filter dst_ip="26.241.88.13" dst_port="80" src_ip="161.107.109.80"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.132.252.53"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
232[label="131.186.208.34;d;1792pkt 1792fpkt", shape=diamond, color=yellow];
435[label="198.203.164.221;s;11pkt 11fpkt", shape=diamond, color=yellow];
2855[label="131.186.208.34;d;703pkt 703fpkt", shape=hexagon, color=black];
4912[label="193.219.44.145;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6444[label="84.17.129.82;1pkt 1fpkt", shape=invtriangle, color=brown];
6708[label="192.61.184.131;1pkt 1fpkt", shape=invtriangle, color=brown];
6781[label="193.219.44.145;11pkt 11fpkt", shape=invtriangle, color=brown];
7824[label="193.219.44.145;11pkt 11fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 131.186.208.34:12126}[98.7187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12126: (49.4687%)&lt;BR/&gt; 443: (0.21645%)&lt;BR/&gt; 80: (0.21645%)&lt;BR/&gt; 0: (0.196773%)&lt;BR/&gt; 1028: (0.157418%)&gt;];
}
232--435[label="0.727273;8pkt 8fpkt"];
232--2828[label="0.727273;8pkt 8fpkt"];
232--2855[label="1;703pkt 703fpkt"];
232--4016[label="0.5;1pkt 1fpkt"];
232--4488[label="0.046875;3pkt 3fpkt"];
232--4731[label="0.0357143;1pkt 1fpkt"];
232--4912[label="1;11pkt 11fpkt"];
232--5700[label="0.666667;8pkt 8fpkt"];
232--6444[label="1;1pkt 1fpkt"];
232--6708[label="1;1pkt 1fpkt"];
232--6781[label="1;11pkt 11fpkt"];
232--7824[label="1;11pkt 11fpkt"];
435--564[label="0.0909091;1pkt 1fpkt"];
435--2795[label="0.0909091;1pkt 1fpkt"];
435--2828[label="1;11pkt 11fpkt"];
435--2855[label="0.727273;8pkt 8fpkt"];
435--3350[label="0.0909091;1pkt 1fpkt"];
435--5700[label="1;11pkt 11fpkt"];
2855--4016[label="0.5;1pkt 1fpkt"];
2855--4488[label="0.03125;2pkt 2fpkt"];
2855--4912[label="0.818182;9pkt 9fpkt"];
2855--5700[label="0.666667;8pkt 8fpkt"];
2855--6444[label="1;1pkt 1fpkt"];
2855--6708[label="1;1pkt 1fpkt"];
2855--6781[label="0.818182;9pkt 9fpkt"];
2855--7824[label="0.818182;9pkt 9fpkt"];
4912--6781[label="1;11pkt 11fpkt"];
4912--7824[label="1;11pkt 11fpkt"];
6781--7824[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.208.34" dst_port="12126"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
1130[label="131.186.212.188;d;72pkt 72fpkt", shape=diamond, color=yellow];
4692[label="192.242.18.123;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4858[label="211.166.144.139;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6660[label="192.242.18.123;9pkt 9fpkt", shape=invtriangle, color=brown];
7756[label="192.242.18.123;9pkt 9fpkt", shape=invhouse, color=bisque];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 131.186.212.188:*}[77.9221%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.4286%)&lt;BR/&gt; 1863: (3.33333%)&lt;BR/&gt; 1694: (1.90476%)&lt;BR/&gt; 1693: (1.90476%)&lt;BR/&gt; 1692: (1.90476%)&gt;];
}
1130--2046[label="0.473684;9pkt 9fpkt"];
1130--2971[label="0.111111;2pkt 2fpkt"];
1130--3602[label="0.4;2pkt 2fpkt"];
1130--3676[label="0.4;2pkt 2fpkt"];
1130--4018[label="0.105263;2pkt 2fpkt"];
1130--4692[label="1;9pkt 9fpkt"];
1130--4858[label="0.166667;1pkt 1fpkt"];
1130--5169[label="0.382353;13pkt 13fpkt"];
1130--6105[label="0.4;2pkt 2fpkt"];
1130--6660[label="1;9pkt 9fpkt"];
1130--6939[label="0.382353;13pkt 13fpkt"];
1130--7756[label="1;9pkt 9fpkt"];
4692--6660[label="1;9pkt 9fpkt"];
4692--7756[label="1;9pkt 9fpkt"];
6660--7756[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.212.188" src_port="80"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.80.55"/>
    </slice>
    <from sec="1120712454" usec="0"/>
    <to sec="1120712637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.86.213.55"/>
    </slice>
    <from sec="1120712484" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.86.56"/>
    </slice>
    <from sec="1120712561" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.149.202.56"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.8.92.57"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.95.57"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
2616[label="145.223.48.32;d;34pkt 34fpkt", shape=diamond, color=yellow];
4930[label="198.248.143.146;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5053[label="198.114.115.159;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6793[label="198.248.143.146;20pkt 20fpkt", shape=invtriangle, color=brown];
6871[label="198.114.115.159;13pkt 13fpkt", shape=invtriangle, color=brown];
7871[label="198.114.115.159;12pkt 12fpkt", shape=invhouse, color=bisque];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.223.48.32:25}[32.7586%]&lt;BR/&gt;{198.248.143.146:*, *:25}[32.7586%]&lt;BR/&gt;{198.114.115.159:*, *:*}[22.4138%]&lt;BR/&gt;{*:113, 145.223.48.32:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.9464%)&lt;BR/&gt; 113: (11.6071%)&lt;BR/&gt; 4922: (1.78571%)&lt;BR/&gt; 4876: (1.78571%)&lt;BR/&gt; 2682: (1.78571%)&gt;];
}
2616--4930[label="0.15;3pkt 3fpkt"];
2616--5053[label="0.461538;6pkt 6fpkt"];
2616--6793[label="0.15;3pkt 3fpkt"];
2616--6871[label="0.461538;6pkt 6fpkt"];
2616--7831[label="0.15;3pkt 3fpkt"];
2616--7871[label="0.5;6pkt 6fpkt"];
4930--6793[label="1;20pkt 20fpkt"];
4930--7831[label="1;20pkt 20fpkt"];
5053--6871[label="1;13pkt 13fpkt"];
5053--7871[label="1;12pkt 12fpkt"];
6793--7831[label="1;20pkt 20fpkt"];
6871--7871[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="198.114.115.159"/>
      <filter dst_port="25" src_ip="198.248.143.146"/>
      <filter dst_ip="145.223.48.32" src_port="113"/>
      <filter dst_ip="145.223.48.32" dst_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
278[label="28.153.203.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
279[label="161.99.4.58;s;16pkt 16fpkt", shape=diamond, color=yellow];
4045[label="161.99.4.58;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6296[label="161.99.4.58;17pkt 17fpkt", shape=invtriangle, color=brown];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.4.58:80, 198.224.154.8:*}[47.0588%]&lt;BR/&gt;{161.99.4.58:80, 28.153.203.228:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40172: (3.92157%)&lt;BR/&gt; 50351: (2.94118%)&lt;BR/&gt; 44593: (2.94118%)&lt;BR/&gt; 40837: (2.94118%)&gt;];
}
278--279[label="1;1pkt 1fpkt"];
278--4045[label="1;1pkt 1fpkt"];
278--6296[label="1;1pkt 1fpkt"];
279--3388[label="0.125;2pkt 2fpkt"];
279--4045[label="1;16pkt 16fpkt"];
279--6296[label="1;16pkt 16fpkt"];
4045--6296[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="198.224.154.8" src_ip="161.99.4.58" src_port="80"/>
      <filter dst_ip="28.153.203.228" src_ip="161.99.4.58" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.149.239.60"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
483[label="149.110.192.90;d;139pkt 139fpkt", shape=diamond, color=yellow];
3067[label="149.110.192.90;d;108pkt 108fpkt", shape=hexagon, color=black];
4081[label="84.69.228.61;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4359[label="212.196.53.87;60pkt 60fpkt", shape=pentagon, color=darkviolet];
6318[label="84.69.228.61;10pkt 10fpkt", shape=invtriangle, color=brown];
6469[label="212.196.53.87;60pkt 60fpkt", shape=invtriangle, color=brown];
7557[label="84.69.228.61;9pkt 9fpkt", shape=invhouse, color=bisque];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.196.53.87:80, 149.110.192.90:*}[36.7347%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6212%)&lt;BR/&gt; 0: (0.757576%)&lt;BR/&gt; 60553: (0.631313%)&lt;BR/&gt; 60520: (0.631313%)&lt;BR/&gt; 60519: (0.631313%)&gt;];
}
483--3067[label="1;108pkt 108fpkt"];
483--3388[label="0.00719424;1pkt 1fpkt"];
483--4081[label="0.9;9pkt 9fpkt"];
483--4359[label="0.883333;53pkt 53fpkt"];
483--6318[label="0.9;9pkt 9fpkt"];
483--6469[label="0.883333;53pkt 53fpkt"];
483--7557[label="0.888889;8pkt 8fpkt"];
3067--4081[label="0.9;9pkt 9fpkt"];
3067--4359[label="0.683333;41pkt 41fpkt"];
3067--6318[label="0.9;9pkt 9fpkt"];
3067--6469[label="0.683333;41pkt 41fpkt"];
3067--7557[label="0.888889;8pkt 8fpkt"];
4081--6318[label="1;10pkt 10fpkt"];
4081--7557[label="1;9pkt 9fpkt"];
4359--6469[label="1;60pkt 60fpkt"];
6318--7557[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.192.90" src_ip="212.196.53.87" src_port="80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.221.102.62"/>
    </slice>
    <from sec="1120712443" usec="0"/>
    <to sec="1120712701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
2259[label="84.25.129.62;s;518pkt 518fpkt", shape=diamond, color=yellow];
4086[label="84.25.129.62;633pkt 633fpkt", shape=pentagon, color=darkviolet];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.25.129.62:*, *:1026}[50.1577%]&lt;BR/&gt;{84.25.129.62:*, *:1027}[49.6845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.2824%)&lt;BR/&gt; 1027: (24.6308%)&lt;BR/&gt; 49638: (0.347524%)&lt;BR/&gt; 49676: (0.260643%)&lt;BR/&gt; 60147: (0.173762%)&gt;];
}
2259--4086[label="0.998069;517pkt 517fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="84.25.129.62"/>
      <filter dst_port="1027" src_ip="84.25.129.62"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
4089[label="197.91.61.63;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.91.61.63:32773, *:1026}[51.4056%]&lt;BR/&gt;{197.91.61.63:32773, *:1027}[48.5944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32773: (50%)&lt;BR/&gt; 1026: (25.7028%)&lt;BR/&gt; 1027: (24.2972%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1026" src_ip="197.91.61.63" src_port="32773"/>
      <filter dst_port="1027" src_ip="197.91.61.63" src_port="32773"/>
    </slice>
    <from sec="1120712485" usec="0"/>
    <to sec="1120712996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.199.109.63"/>
    </slice>
    <from sec="1120712481" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
1002[label="31.80.12.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
1003[label="145.223.193.63;s;6pkt 6fpkt", shape=diamond, color=yellow];
4092[label="145.223.193.63;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6326[label="145.223.193.63;6pkt 6fpkt", shape=invtriangle, color=brown];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.193.63:*, *:25}[66.6667%]&lt;BR/&gt;{145.223.193.63:25, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1520: (11.1111%)&lt;BR/&gt; 3699: (8.33333%)&lt;BR/&gt; 2999: (8.33333%)&lt;BR/&gt; 2998: (8.33333%)&gt;];
}
1002--1003[label="1;1pkt 1fpkt"];
1002--4092[label="1;1pkt 1fpkt"];
1002--6326[label="1;1pkt 1fpkt"];
1003--4092[label="1;5pkt 5fpkt"];
1003--6326[label="1;6pkt 6fpkt"];
4092--6326[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.193.63" src_port="25"/>
      <filter dst_port="25" src_ip="145.223.193.63"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.162.64"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.17.227.64"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
516[label="146.41.200.171;d;10pkt 10fpkt", shape=diamond, color=yellow];
517[label="145.223.8.65;s;2pkt 2fpkt", shape=diamond, color=yellow];
4110[label="145.223.8.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6333[label="145.223.8.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.108.97:*, 146.41.200.171:80}[80%]&lt;BR/&gt;{145.223.8.65:*, 146.41.200.171:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4493: (13.3333%)&lt;BR/&gt; 4492: (10%)&lt;BR/&gt; 3191: (3.33333%)&lt;BR/&gt; 3190: (3.33333%)&gt;];
}
516--517[label="1;2pkt 2fpkt"];
516--4110[label="1;1pkt 1fpkt"];
516--4453[label="0.8;8pkt 8fpkt"];
516--6333[label="1;2pkt 2fpkt"];
516--6529[label="0.8;8pkt 8fpkt"];
516--7682[label="0.8;8pkt 8fpkt"];
517--4110[label="1;1pkt 1fpkt"];
517--6333[label="1;2pkt 2fpkt"];
4110--6333[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="146.41.200.171" dst_port="80" src_ip="149.177.108.97"/>
      <filter dst_ip="146.41.200.171" dst_port="80" src_ip="145.223.8.65"/>
    </slice>
    <from sec="1120712430" usec="0"/>
    <to sec="1120712574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.236.14.65"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.220.55.65"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.169.65"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.218.74.66"/>
    </slice>
    <from sec="1120712992" usec="0"/>
    <to sec="1120713041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.196.80.66"/>
    </slice>
    <from sec="1120712460" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.224.66"/>
    </slice>
    <from sec="1120712452" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
1645[label="149.177.109.67;s;215pkt 215fpkt", shape=diamond, color=yellow];
4141[label="149.177.109.67;214pkt 214fpkt", shape=pentagon, color=darkviolet];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.109.67:*, 194.21.135.24:80}[88.3721%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5221%)&lt;BR/&gt; 1863: (0.582751%)&lt;BR/&gt; 41141: (0.2331%)&lt;BR/&gt; 41140: (0.2331%)&lt;BR/&gt; 41139: (0.2331%)&gt;];
}
1645--2262[label="1;129pkt 129fpkt"];
1645--4141[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_ip="194.21.135.24" dst_port="80" src_ip="149.177.109.67"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.158.67"/>
    </slice>
    <from sec="1120712442" usec="0"/>
    <to sec="1120713194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
1064[label="193.208.67.68;s;2144pkt 2144fpkt", shape=diamond, color=yellow];
4157[label="193.208.67.68;2321pkt 2321fpkt", shape=pentagon, color=darkviolet];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.208.67.68:3241, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3241: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1064--4157[label="1;2144pkt 2144fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="193.208.67.68" src_port="3241"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
1738[label="211.56.108.196;d;112pkt 112fpkt", shape=diamond, color=yellow];
1739[label="161.107.109.68;s;156pkt 156fpkt", shape=diamond, color=yellow];
3192[label="161.107.109.68;s;156pkt 156fpkt", shape=hexagon, color=black];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.109.68:*, 211.56.108.196:25}[69.6203%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.2264%)&lt;BR/&gt; 113: (3.53774%)&lt;BR/&gt; 60991: (0.353774%)&lt;BR/&gt; 60984: (0.353774%)&lt;BR/&gt; 60977: (0.353774%)&gt;];
}
1738--1739[label="0.982143;110pkt 110fpkt"];
1738--2357[label="0.00892857;1pkt 1fpkt"];
1738--3192[label="0.982143;110pkt 110fpkt"];
1738--3387[label="0.00892857;1pkt 1fpkt"];
1738--4158[label="0.982143;110pkt 110fpkt"];
1738--4238[label="0.00892857;1pkt 1fpkt"];
1738--5734[label="0.00892857;1pkt 1fpkt"];
1738--6401[label="0.00892857;1pkt 1fpkt"];
1738--7608[label="0.00892857;1pkt 1fpkt"];
1739--3192[label="1;156pkt 156fpkt"];
1739--4158[label="1;156pkt 156fpkt"];
3192--4158[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="211.56.108.196" dst_port="25" src_ip="161.107.109.68"/>
    </slice>
    <from sec="1120712623" usec="0"/>
    <to sec="1120713036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
731[label="212.205.194.68;s;2020pkt 2020fpkt", shape=diamond, color=yellow];
4161[label="212.205.194.68;2442pkt 2442fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.194.68:1539, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1539: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
731--4161[label="1;2020pkt 2020fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.205.194.68" src_port="1539"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.243.68"/>
    </slice>
    <from sec="1120712509" usec="0"/>
    <to sec="1120713204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
2109[label="145.223.172.69;s;4pkt 4fpkt", shape=diamond, color=yellow];
3165[label="145.223.172.69;s;4pkt 4fpkt", shape=hexagon, color=black];
4168[label="145.223.172.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6365[label="145.223.172.69;3pkt 3fpkt", shape=invtriangle, color=brown];
7584[label="145.223.172.69;3pkt 3fpkt", shape=invhouse, color=bisque];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.172.69:61010, 211.166.147.17:1863}[25%]&lt;BR/&gt;{145.223.172.69:61032, 211.166.150.154:1863}[25%]&lt;BR/&gt;{145.223.172.69:7777, 29.176.195.155:4424}[25%]&lt;BR/&gt;{145.223.172.69:0, 192.168.254.254:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (27.7778%)&lt;BR/&gt; 1863: (22.2222%)&lt;BR/&gt; 61010: (13.8889%)&lt;BR/&gt; 7777: (13.8889%)&lt;BR/&gt; 4424: (13.8889%)&gt;];
}
2109--3165[label="1;4pkt 4fpkt"];
2109--4168[label="1;4pkt 4fpkt"];
2109--6365[label="1;3pkt 3fpkt"];
2109--7584[label="1;3pkt 3fpkt"];
3165--4168[label="1;4pkt 4fpkt"];
3165--6365[label="1;3pkt 3fpkt"];
3165--7584[label="1;3pkt 3fpkt"];
4168--6365[label="1;3pkt 3fpkt"];
4168--7584[label="1;3pkt 3fpkt"];
6365--7584[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.254" src_ip="145.223.172.69"/>
      <filter dst_ip="29.176.195.155" dst_port="4424" src_ip="145.223.172.69" src_port="7777"/>
      <filter dst_ip="211.166.150.154" dst_port="1863" src_ip="145.223.172.69" src_port="61032"/>
      <filter dst_ip="211.166.147.17" dst_port="1863" src_ip="145.223.172.69" src_port="61010"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
2085[label="213.4.19.70;s;269pkt 269fpkt", shape=diamond, color=yellow];
3158[label="213.4.19.70;s;198pkt 198fpkt", shape=hexagon, color=black];
4174[label="213.4.19.70;284pkt 284fpkt", shape=pentagon, color=darkviolet];
6369[label="213.4.19.70;284pkt 284fpkt", shape=invtriangle, color=brown];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.4.19.70:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3615: (0.386473%)&lt;BR/&gt; 3062: (0.386473%)&lt;BR/&gt; 2552: (0.386473%)&lt;BR/&gt; 2485: (0.386473%)&gt;];
}
2085--3158[label="1;198pkt 198fpkt"];
2085--4174[label="0.996283;268pkt 268fpkt"];
2085--6369[label="0.996283;268pkt 268fpkt"];
3158--4174[label="1;198pkt 198fpkt"];
3158--6369[label="1;198pkt 198fpkt"];
4174--6369[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.4.19.70"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.128.97.70"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.172.71"/>
    </slice>
    <from sec="1120712454" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.17.226.71"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.8.73"/>
    </slice>
    <from sec="1120712475" usec="0"/>
    <to sec="1120713221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.236.14.73"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.19.145.73"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
4213[label="212.79.197.73;117pkt 117fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.197.73:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="212.79.197.73"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
4215[label="213.17.227.73;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6392[label="213.17.227.73;107pkt 107fpkt", shape=invtriangle, color=brown];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.227.73:25, *:*}[51.8519%]&lt;BR/&gt;{213.17.227.73:*, *:113}[47.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.814%)&lt;BR/&gt; 113: (23.7209%)&lt;BR/&gt; 64073: (0.465116%)&lt;BR/&gt; 62879: (0.465116%)&lt;BR/&gt; 61208: (0.465116%)&gt;];
}
4215--6392[label="1;107pkt 107fpkt"];
4215--7602[label="1;107pkt 107fpkt"];
6392--7602[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.227.73" src_port="25"/>
      <filter dst_port="113" src_ip="213.17.227.73"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.66.39.74"/>
    </slice>
    <from sec="1120713227" usec="0"/>
    <to sec="1120713250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.43.74"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1732[label="161.107.224.74;s;8pkt 8fpkt", shape=diamond, color=yellow];
4228[label="161.107.224.74;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6398[label="161.107.224.74;7pkt 7fpkt", shape=invtriangle, color=brown];
7606[label="161.107.224.74;8pkt 8fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.224.74:6346, *:6346}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (73.3333%)&lt;BR/&gt; 6348: (6.66667%)&lt;BR/&gt; 1863: (6.66667%)&lt;BR/&gt; 1395: (6.66667%)&lt;BR/&gt; 1029: (6.66667%)&gt;];
}
1732--4228[label="1;7pkt 7fpkt"];
1732--6398[label="1;7pkt 7fpkt"];
1732--7606[label="1;8pkt 8fpkt"];
4228--6398[label="1;7pkt 7fpkt"];
4228--7606[label="1;7pkt 7fpkt"];
6398--7606[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="161.107.224.74" src_port="6346"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120712967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
1963[label="213.17.230.74;s;118pkt 118fpkt", shape=diamond, color=yellow];
4229[label="213.17.230.74;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6399[label="213.17.230.74;123pkt 123fpkt", shape=invtriangle, color=brown];
7607[label="213.17.230.74;124pkt 124fpkt", shape=invhouse, color=bisque];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.230.74:39602, *:53}[48.3871%]&lt;BR/&gt;{213.17.230.74:*, *:25}[30.6452%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (27.3566%)&lt;BR/&gt; 39602: (24.3852%)&lt;BR/&gt; 25: (17.9303%)&lt;BR/&gt; 113: (2.35656%)&lt;BR/&gt; 80: (2.35656%)&gt;];
}
1963--2126[label="0.00925926;1pkt 1fpkt"];
1963--4229[label="0.991525;117pkt 117fpkt"];
1963--6399[label="0.991525;117pkt 117fpkt"];
1963--7607[label="1;118pkt 118fpkt"];
4229--6399[label="1;123pkt 123fpkt"];
4229--7607[label="1;123pkt 123fpkt"];
6399--7607[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="213.17.230.74"/>
      <filter dst_port="53" src_ip="213.17.230.74" src_port="39602"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.80.96.75"/>
    </slice>
    <from sec="1120713075" usec="0"/>
    <to sec="1120713118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.104.77"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.146.176.77"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
520[label="84.90.175.78;s;68pkt 68fpkt", shape=diamond, color=yellow];
729[label="131.186.132.18;d;131pkt 131fpkt", shape=diamond, color=yellow];
2887[label="131.186.132.18;d;130pkt 130fpkt", shape=hexagon, color=black];
3056[label="192.237.45.228;s;60pkt 60fpkt", shape=hexagon, color=black];
3405[label="84.90.181.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4267[label="84.90.175.78;67pkt 67fpkt", shape=pentagon, color=darkviolet];
4931[label="84.90.174.146;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5569[label="84.90.170.210;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6416[label="84.90.175.78;67pkt 67fpkt", shape=invtriangle, color=brown];
6794[label="84.90.174.146;20pkt 20fpkt", shape=invtriangle, color=brown];
7157[label="84.90.170.210;14pkt 14fpkt", shape=invtriangle, color=brown];
7620[label="84.90.175.78;68pkt 68fpkt", shape=invhouse, color=bisque];
8045[label="84.90.170.210;13pkt 13fpkt", shape=invhouse, color=bisque];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.90.175.78:80, 131.186.132.18:*}[34.3434%]&lt;BR/&gt;{192.237.45.228:80, 161.99.222.77:*}[26.2626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1717: (0.445765%)&lt;BR/&gt; 1715: (0.445765%)&lt;BR/&gt; 1714: (0.445765%)&lt;BR/&gt; 1702: (0.445765%)&gt;];
}
520--729[label="1;68pkt 68fpkt"];
520--2887[label="1;68pkt 68fpkt"];
520--4267[label="1;67pkt 67fpkt"];
520--6416[label="1;67pkt 67fpkt"];
520--7620[label="1;68pkt 68fpkt"];
729--1329[label="0.0909091;6pkt 6fpkt"];
729--2887[label="1;130pkt 130fpkt"];
729--3056[label="0.1;6pkt 6fpkt"];
729--3405[label="0.5;1pkt 1fpkt"];
729--4267[label="1;67pkt 67fpkt"];
729--4931[label="0.4;8pkt 8fpkt"];
729--5569[label="1;13pkt 13fpkt"];
729--5767[label="0.0769231;5pkt 5fpkt"];
729--6416[label="1;67pkt 67fpkt"];
729--6794[label="0.4;8pkt 8fpkt"];
729--7157[label="1;14pkt 14fpkt"];
729--7620[label="1;68pkt 68fpkt"];
729--8045[label="1;13pkt 13fpkt"];
2887--3056[label="0.1;6pkt 6fpkt"];
2887--3405[label="0.5;1pkt 1fpkt"];
2887--4267[label="1;67pkt 67fpkt"];
2887--4931[label="0.4;8pkt 8fpkt"];
2887--5569[label="1;13pkt 13fpkt"];
2887--5767[label="0.0769231;5pkt 5fpkt"];
2887--6416[label="1;67pkt 67fpkt"];
2887--6794[label="0.4;8pkt 8fpkt"];
2887--7157[label="1;14pkt 14fpkt"];
2887--7620[label="1;68pkt 68fpkt"];
2887--8045[label="1;13pkt 13fpkt"];
3056--5767[label="0.983333;59pkt 59fpkt"];
4267--6416[label="1;67pkt 67fpkt"];
4267--7620[label="1;67pkt 67fpkt"];
4931--6794[label="1;20pkt 20fpkt"];
5569--7157[label="1;13pkt 13fpkt"];
5569--8045[label="1;13pkt 13fpkt"];
6416--7620[label="1;67pkt 67fpkt"];
7157--8045[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.132.18" src_ip="84.90.175.78" src_port="80"/>
      <filter dst_ip="161.99.222.77" src_ip="192.237.45.228" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.181.78"/>
    </slice>
    <from sec="1120712448" usec="0"/>
    <to sec="1120712903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.34.80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.41.80"/>
    </slice>
    <from sec="1120712440" usec="0"/>
    <to sec="1120712997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
2716[label="211.166.150.16;d;11pkt 11fpkt", shape=diamond, color=yellow];
4286[label="149.177.110.80;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5872[label="149.177.104.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.150.16:1863}[68.75%]&lt;BR/&gt;{149.177.110.80:*, *:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1255: (8.33333%)&lt;BR/&gt; 3444: (5.55556%)&lt;BR/&gt; 4805: (2.77778%)&lt;BR/&gt; 3799: (2.77778%)&gt;];
}
2716--4286[label="0.25;1pkt 1fpkt"];
2716--4798[label="0.333333;1pkt 1fpkt"];
2716--5785[label="0.333333;1pkt 1fpkt"];
2716--5872[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="149.177.110.80"/>
      <filter dst_ip="211.166.150.16" dst_port="1863"/>
    </slice>
    <from sec="1120712430" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.160.80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.200.80"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
581[label="27.57.172.23;d;16pkt 16fpkt", shape=diamond, color=yellow];
582[label="213.17.229.80;s;3pkt 3fpkt", shape=diamond, color=yellow];
2858[label="213.17.229.80;s;3pkt 3fpkt", shape=hexagon, color=black];
4293[label="213.17.229.80;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6434[label="213.17.229.80;4pkt 4fpkt", shape=invtriangle, color=brown];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.229.89:80, 27.57.172.23:*}[72.2222%]&lt;BR/&gt;{213.17.229.80:*, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 61417: (8.33333%)&lt;BR/&gt; 1418: (8.33333%)&lt;BR/&gt; 37858: (6.66667%)&lt;BR/&gt; 25919: (3.33333%)&gt;];
}
581--582[label="0.666667;2pkt 2fpkt"];
581--2827[label="0.125;2pkt 2fpkt"];
581--2858[label="0.666667;2pkt 2fpkt"];
581--4293[label="0.5;2pkt 2fpkt"];
581--4385[label="0.8125;13pkt 13fpkt"];
581--6434[label="0.5;2pkt 2fpkt"];
582--2858[label="1;3pkt 3fpkt"];
582--4293[label="1;3pkt 3fpkt"];
582--6434[label="1;3pkt 3fpkt"];
2858--4293[label="1;3pkt 3fpkt"];
2858--6434[label="1;3pkt 3fpkt"];
4293--6434[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.229.80"/>
      <filter dst_ip="27.57.172.23" src_ip="213.17.229.89" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.236.14.81"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.53.81"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
370[label="145.222.13.25;s;815pkt 815fpkt", shape=diamond, color=yellow];
3695[label="145.222.13.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.13.25:1626, *:53}[99.5092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8162%)&lt;BR/&gt; 1626: (49.7549%)&lt;BR/&gt; 0: (0.367647%)&lt;BR/&gt; 44881: (0.0612745%)&gt;];
}
370--1380[label="0.00854701;1pkt 1fpkt"];
370--1834[label="0.00934579;1pkt 1fpkt"];
370--1880[label="0.00900901;1pkt 1fpkt"];
370--2126[label="0.00925926;1pkt 1fpkt"];
370--2176[label="0.0102041;1pkt 1fpkt"];
370--2373[label="0.25;1pkt 1fpkt"];
370--2415[label="0.00990099;1pkt 1fpkt"];
370--2425[label="0.00909091;1pkt 1fpkt"];
370--2435[label="0.00961538;1pkt 1fpkt"];
370--2598[label="0.0153846;1pkt 1fpkt"];
370--2600[label="0.00961538;1pkt 1fpkt"];
370--3318[label="0.00854701;1pkt 1fpkt"];
370--3384[label="0.115337;94pkt 94fpkt"];
370--3695[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="145.222.13.25" src_port="1626"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.17.129.82"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.192.226.82"/>
    </slice>
    <from sec="1120713178" usec="0"/>
    <to sec="1120713247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.57.162.84"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
2363[label="194.236.14.85;s;9pkt 9fpkt", shape=diamond, color=yellow];
4335[label="194.236.14.85;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.85:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 2675: (5.88235%)&lt;BR/&gt; 1646: (5.88235%)&lt;BR/&gt; 1140: (5.88235%)&lt;BR/&gt; 1053: (5.88235%)&gt;];
}
2363--4335[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.85" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.24.85"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120712984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.133.143.85"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.98.152.85"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.172.85"/>
    </slice>
    <from sec="1120712469" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
2178[label="201.167.14.86;s;348pkt 348fpkt", shape=diamond, color=yellow];
4345[label="201.167.14.86;347pkt 347fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.167.14.86:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1608: (0.431655%)&lt;BR/&gt; 4909: (0.28777%)&lt;BR/&gt; 4369: (0.28777%)&lt;BR/&gt; 3743: (0.28777%)&gt;];
}
2178--4345[label="1;347pkt 347fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.167.14.86"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.129.193.86"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.18.24.87"/>
    </slice>
    <from sec="1120712429" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.34.87"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,502,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
1908[label="166.59.145.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
4361[label="166.59.145.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.145.87:1100, 195.161.150.4:22}[50%]&lt;BR/&gt;{166.59.145.87:1039, 194.236.14.79:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1100: (33.3333%)&lt;BR/&gt; 22: (33.3333%)&lt;BR/&gt; 5050: (16.6667%)&lt;BR/&gt; 1039: (16.6667%)&gt;];
}
1908--4361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.79" dst_port="5050" src_ip="166.59.145.87" src_port="1039"/>
      <filter dst_ip="195.161.150.4" dst_port="22" src_ip="166.59.145.87" src_port="1100"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.151.91.88"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.147.145.89"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.153.89"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
354[label="145.223.10.3;s;524pkt 524fpkt", shape=diamond, color=yellow];
1362[label="120.58.135.108;d;76pkt 76fpkt", shape=diamond, color=yellow];
3066[label="120.58.135.108;d;76pkt 76fpkt", shape=hexagon, color=black];
3438[label="145.223.10.3;534pkt 534fpkt", shape=pentagon, color=darkviolet];
5982[label="145.223.10.3;534pkt 534fpkt", shape=invtriangle, color=brown];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:443}[31.1881%]&lt;BR/&gt;{145.223.10.3:*, 223.109.24.159:80}[23.1023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.9736%)&lt;BR/&gt; 443: (14.3922%)&lt;BR/&gt; 0: (1.20413%)&lt;BR/&gt; 123: (0.430046%)&lt;BR/&gt; 1863: (0.344037%)&gt;];
}
354--403[label="0.101796;17pkt 17fpkt"];
354--420[label="0.00763359;4pkt 4fpkt"];
354--458[label="0.0233918;4pkt 4fpkt"];
354--467[label="0.0019084;1pkt 1fpkt"];
354--757[label="0.012766;6pkt 6fpkt"];
354--759[label="0.002457;1pkt 1fpkt"];
354--798[label="0.00421053;2pkt 2fpkt"];
354--1162[label="0.0189873;3pkt 3fpkt"];
354--1163[label="0.00684932;1pkt 1fpkt"];
354--1200[label="0.0588235;14pkt 14fpkt"];
354--1282[label="0.0479452;7pkt 7fpkt"];
354--1299[label="0.0147059;1pkt 1fpkt"];
354--1317[label="0.00877193;1pkt 1fpkt"];
354--1362[label="0.0526316;4pkt 4fpkt"];
354--1404[label="0.132075;7pkt 7fpkt"];
354--1411[label="1;140pkt 140fpkt"];
354--1413[label="0.00666667;1pkt 1fpkt"];
354--1538[label="0.890625;57pkt 57fpkt"];
354--1568[label="0.0372671;6pkt 6fpkt"];
354--1620[label="0.0825688;9pkt 9fpkt"];
354--1673[label="0.131868;12pkt 12fpkt"];
354--1847[label="1;2pkt 2fpkt"];
354--1947[label="0.0254237;3pkt 3fpkt"];
354--2110[label="0.0214286;3pkt 3fpkt"];
354--2374[label="0.0555556;1pkt 1fpkt"];
354--2823[label="0.15625;5pkt 5fpkt"];
354--2877[label="1;124pkt 124fpkt"];
354--2897[label="0.00505051;1pkt 1fpkt"];
354--3066[label="0.0526316;4pkt 4fpkt"];
354--3075[label="0.0133333;1pkt 1fpkt"];
354--3206[label="0.0479452;7pkt 7fpkt"];
354--3215[label="0.0214286;3pkt 3fpkt"];
354--3226[label="0.0555556;1pkt 1fpkt"];
354--3438[label="1;524pkt 524fpkt"];
354--5982[label="1;524pkt 524fpkt"];
1362--1470[label="0.605263;46pkt 46fpkt"];
1362--3066[label="1;76pkt 76fpkt"];
1362--3255[label="0.605263;46pkt 46fpkt"];
1362--3438[label="0.0526316;4pkt 4fpkt"];
1362--4387[label="0.605263;46pkt 46fpkt"];
1362--4490[label="0.184211;14pkt 14fpkt"];
1362--5982[label="0.0526316;4pkt 4fpkt"];
1362--6487[label="0.605263;46pkt 46fpkt"];
1362--7660[label="0.605263;46pkt 46fpkt"];
3066--3255[label="0.605263;46pkt 46fpkt"];
3066--3438[label="0.0526316;4pkt 4fpkt"];
3066--4387[label="0.605263;46pkt 46fpkt"];
3066--4490[label="0.184211;14pkt 14fpkt"];
3066--5982[label="0.0526316;4pkt 4fpkt"];
3066--6487[label="0.605263;46pkt 46fpkt"];
3066--7660[label="0.605263;46pkt 46fpkt"];
3438--5982[label="1;534pkt 534fpkt"];
</description>
    <slice>
      <filter dst_port="443"/>
      <filter dst_ip="223.109.24.159" dst_port="80" src_ip="145.223.10.3"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1728[label="24.194.148.90;s;21pkt 21fpkt", shape=diamond, color=yellow];
4391[label="24.194.148.90;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.194.148.90:80, 161.99.40.173:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1586: (2.43902%)&lt;BR/&gt; 1518: (2.43902%)&lt;BR/&gt; 1514: (2.43902%)&lt;BR/&gt; 1510: (2.43902%)&gt;];
}
1728--4391[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.40.173" src_ip="24.194.148.90" src_port="80"/>
    </slice>
    <from sec="1120712618" usec="0"/>
    <to sec="1120712794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.151.90"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.53.91"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
533[label="145.223.225.251;d;6pkt 6fpkt", shape=diamond, color=yellow];
536[label="201.74.163.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
3888[label="201.228.33.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4400[label="201.74.163.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6215[label="201.228.33.43;4pkt 4fpkt", shape=invtriangle, color=brown];
6495[label="201.74.163.91;1pkt 1fpkt", shape=invtriangle, color=brown];
7495[label="201.228.33.43;3pkt 3fpkt", shape=invhouse, color=bisque];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.228.33.43:80, 145.223.225.251:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32980: (10%)&lt;BR/&gt; 32979: (10%)&lt;BR/&gt; 32977: (10%)&lt;BR/&gt; 32967: (10%)&gt;];
}
533--536[label="1;1pkt 1fpkt"];
533--3888[label="1;4pkt 4fpkt"];
533--4400[label="1;1pkt 1fpkt"];
533--6215[label="1;4pkt 4fpkt"];
533--6495[label="1;1pkt 1fpkt"];
533--7495[label="1;3pkt 3fpkt"];
536--4400[label="1;1pkt 1fpkt"];
536--6495[label="1;1pkt 1fpkt"];
3888--6215[label="1;4pkt 4fpkt"];
3888--7495[label="1;3pkt 3fpkt"];
4400--6495[label="1;1pkt 1fpkt"];
6215--7495[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.225.251" src_ip="201.228.33.43" src_port="80"/>
    </slice>
    <from sec="1120712457" usec="0"/>
    <to sec="1120712506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.186.225.91"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.158.92"/>
    </slice>
    <from sec="1120712437" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.212.51.94"/>
    </slice>
    <from sec="1120712446" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.177.221.95"/>
    </slice>
    <from sec="1120713058" usec="0"/>
    <to sec="1120713079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.218.10.96"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
968[label="194.236.14.96;s;27pkt 27fpkt", shape=diamond, color=yellow];
4435[label="194.236.14.96;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6517[label="194.236.14.96;26pkt 26fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.96:5050, *:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.375%)&lt;BR/&gt; 1034: (3.75%)&lt;BR/&gt; 23: (3.75%)&lt;BR/&gt; 3660: (1.875%)&lt;BR/&gt; 2457: (1.875%)&gt;];
}
968--4435[label="1;27pkt 27fpkt"];
968--6517[label="1;26pkt 26fpkt"];
4435--6517[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.96" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.133.25.96"/>
    </slice>
    <from sec="1120712686" usec="0"/>
    <to sec="1120713195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.59.96"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.132.73.97"/>
    </slice>
    <from sec="1120712844" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.106.97"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.42.61.98"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
3478[label="145.222.50.7;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4060[label="145.222.67.59;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.50.7:*, *:80}[26.4706%]&lt;BR/&gt;{145.222.67.59:*, 211.166.126.24:80}[23.5294%]&lt;BR/&gt;{*:*, *:1863}[23.5294%]&lt;BR/&gt;{*:*, 211.166.74.227:80}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.2353%)&lt;BR/&gt; 1863: (11.7647%)&lt;BR/&gt; 51732: (1.47059%)&lt;BR/&gt; 51648: (1.47059%)&lt;BR/&gt; 51647: (1.47059%)&gt;];
}
3478--5998[label="1;13pkt 13fpkt"];
3478--7383[label="1;14pkt 14fpkt"];
4060--6304[label="1;20pkt 20fpkt"];
4060--7548[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="1863"/>
      <filter dst_port="80" src_ip="145.222.50.7"/>
      <filter dst_ip="211.166.74.227" dst_port="80"/>
      <filter dst_ip="211.166.126.24" dst_port="80" src_ip="145.222.67.59"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.149.201.99"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.59.100"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.24.75.100"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.152.100"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.86.152.100"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.26.168.100"/>
    </slice>
    <from sec="1120712437" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.134.157.101"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.132.102"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.179.33.104"/>
    </slice>
    <from sec="1120713084" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.193.104"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
1733[label="68.80.13.90;d;34pkt 34fpkt", shape=diamond, color=yellow];
1734[label="161.107.0.105;s;37pkt 37fpkt", shape=diamond, color=yellow];
4528[label="161.107.0.105;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6569[label="161.107.0.105;37pkt 37fpkt", shape=invtriangle, color=brown];
7709[label="161.107.0.105;36pkt 36fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.0.105:*, 68.80.13.90:80}[91.8919%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8889%)&lt;BR/&gt; 1746: (1.38889%)&lt;BR/&gt; 1745: (1.38889%)&lt;BR/&gt; 1735: (1.38889%)&lt;BR/&gt; 1734: (1.38889%)&gt;];
}
1733--1734[label="1;34pkt 34fpkt"];
1733--4528[label="0.970588;33pkt 33fpkt"];
1733--6569[label="1;34pkt 34fpkt"];
1733--7709[label="0.970588;33pkt 33fpkt"];
1734--4528[label="1;36pkt 36fpkt"];
1734--6569[label="1;37pkt 37fpkt"];
1734--7709[label="1;36pkt 36fpkt"];
4528--6569[label="1;36pkt 36fpkt"];
4528--7709[label="1;36pkt 36fpkt"];
6569--7709[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="68.80.13.90" dst_port="80" src_ip="161.107.0.105"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120712913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.193.105"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.23.102.106"/>
    </slice>
    <from sec="1120712513" usec="0"/>
    <to sec="1120713263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.53.232.107"/>
    </slice>
    <from sec="1120712756" usec="0"/>
    <to sec="1120712917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.9.108"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
2102[label="200.177.135.108;s;327pkt 327fpkt", shape=diamond, color=yellow];
3212[label="200.177.135.108;s;294pkt 294fpkt", shape=hexagon, color=black];
4572[label="200.177.135.108;356pkt 356fpkt", shape=pentagon, color=darkviolet];
6592[label="200.177.135.108;356pkt 356fpkt", shape=invtriangle, color=brown];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.177.135.108:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1147: (0.450113%)&lt;BR/&gt; 3503: (0.300075%)&lt;BR/&gt; 3313: (0.300075%)&lt;BR/&gt; 2644: (0.300075%)&gt;];
}
2102--3212[label="1;294pkt 294fpkt"];
2102--4572[label="0.996942;326pkt 326fpkt"];
2102--6592[label="0.996942;326pkt 326fpkt"];
3212--4572[label="0.996599;293pkt 293fpkt"];
3212--6592[label="0.996599;293pkt 293fpkt"];
4572--6592[label="1;356pkt 356fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.177.135.108"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.29.10.109"/>
    </slice>
    <from sec="1120712555" usec="0"/>
    <to sec="1120712581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
304[label="211.101.9.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
4583[label="211.101.9.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.101.9.110:80, 212.66.180.59:26001}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26001: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
304--575[label="1;1pkt 1fpkt"];
304--3388[label="1;1pkt 1fpkt"];
304--4583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.180.59" dst_port="26001" src_ip="211.101.9.110" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.151.109.110"/>
    </slice>
    <from sec="1120713270" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.154.21.111"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.231.84.111"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.185.169.111"/>
    </slice>
    <from sec="1120712448" usec="0"/>
    <to sec="1120712478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
552[label="212.202.33.112;s;2590pkt 2590fpkt", shape=diamond, color=yellow];
4592[label="212.202.33.112;2811pkt 2811fpkt", shape=pentagon, color=darkviolet];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.202.33.112:1038, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1038: (50%)&gt;];
}
552--4592[label="0.999614;2589pkt 2589fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.202.33.112" src_port="1038"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.34.112"/>
    </slice>
    <from sec="1120712468" usec="0"/>
    <to sec="1120712953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.141.112"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.61.106.113"/>
    </slice>
    <from sec="1120713030" usec="0"/>
    <to sec="1120713052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.160.113"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.173.209.113"/>
    </slice>
    <from sec="1120712552" usec="0"/>
    <to sec="1120712563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.245.40.114"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.129.142.114"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
2188[label="194.236.14.115;s;9pkt 9fpkt", shape=diamond, color=yellow];
4621[label="194.236.14.115;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6618[label="194.236.14.115;8pkt 8fpkt", shape=invtriangle, color=brown];
7733[label="194.236.14.115;8pkt 8fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.115:5050, *:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.1176%)&lt;BR/&gt; 55295: (5.88235%)&lt;BR/&gt; 3021: (5.88235%)&lt;BR/&gt; 2566: (5.88235%)&lt;BR/&gt; 1970: (5.88235%)&gt;];
}
2188--4621[label="1;9pkt 9fpkt"];
2188--6618[label="1;8pkt 8fpkt"];
2188--7733[label="1;8pkt 8fpkt"];
4621--6618[label="1;8pkt 8fpkt"];
4621--7733[label="1;8pkt 8fpkt"];
6618--7733[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.115" src_port="5050"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
2390[label="201.76.84.115;s;320pkt 320fpkt", shape=diamond, color=yellow];
4624[label="201.76.84.115;344pkt 344fpkt", shape=pentagon, color=darkviolet];
6621[label="201.76.84.115;344pkt 344fpkt", shape=invtriangle, color=brown];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.76.84.115:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4160: (0.297619%)&lt;BR/&gt; 3766: (0.297619%)&lt;BR/&gt; 3609: (0.297619%)&lt;BR/&gt; 3255: (0.297619%)&gt;];
}
2390--4624[label="1;320pkt 320fpkt"];
2390--6621[label="1;320pkt 320fpkt"];
4624--6621[label="1;344pkt 344fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.76.84.115"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.118.248.115"/>
    </slice>
    <from sec="1120712459" usec="0"/>
    <to sec="1120713266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.97.93.116"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.131.167.116"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.192.116"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.154.210.117"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.194.42.118"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.3.87.118"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.105.118"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.148.153.118"/>
    </slice>
    <from sec="1120712493" usec="0"/>
    <to sec="1120713275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.33.98.119"/>
    </slice>
    <from sec="1120712435" usec="0"/>
    <to sec="1120712943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.168.119"/>
    </slice>
    <from sec="1120712857" usec="0"/>
    <to sec="1120713186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.85.158.120"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.24.71.121"/>
    </slice>
    <from sec="1120713186" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
4677[label="212.79.215.121;88pkt 88fpkt", shape=pentagon, color=darkviolet];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.215.121:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="212.79.215.121"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.230.54.122"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.88.74.122"/>
    </slice>
    <from sec="1120712500" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.33.130.122"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.130.122"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.219.137.122"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.86.172.122"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.77.75.123"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
686[label="193.160.84.123;s;37pkt 37fpkt", shape=diamond, color=yellow];
997[label="149.177.105.80;d;37pkt 37fpkt", shape=diamond, color=yellow];
4696[label="193.160.84.123;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.160.84.123:50105, 149.177.105.80:*}[55%]&lt;BR/&gt;{193.160.84.123:*, 149.177.105.80:44444}[45%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50105: (27.193%)&lt;BR/&gt; 44444: (22.807%)&lt;BR/&gt; 4913: (1.31579%)&lt;BR/&gt; 4896: (1.31579%)&lt;BR/&gt; 4873: (1.31579%)&gt;];
}
686--997[label="1;37pkt 37fpkt"];
686--4696[label="1;37pkt 37fpkt"];
997--4696[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.105.80" src_ip="193.160.84.123" src_port="50105"/>
      <filter dst_ip="149.177.105.80" dst_port="44444" src_ip="193.160.84.123"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.35.124"/>
    </slice>
    <from sec="1120712594" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.190.148.124"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.177.67.125"/>
    </slice>
    <from sec="1120712965" usec="0"/>
    <to sec="1120712976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.203.105.125"/>
    </slice>
    <from sec="1120713138" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
2055[label="210.80.184.202;d;2pkt 2fpkt", shape=diamond, color=yellow];
2211[label="166.59.192.125;s;32pkt 32fpkt", shape=diamond, color=yellow];
3146[label="210.80.184.202;d;2pkt 2fpkt", shape=hexagon, color=black];
4713[label="166.59.192.125;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6671[label="166.59.192.125;32pkt 32fpkt", shape=invtriangle, color=brown];
7762[label="166.59.192.125;32pkt 32fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.192.125:25, *:*}[97.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2424%)&lt;BR/&gt; 23832: (2.27273%)&lt;BR/&gt; 47033: (1.51515%)&lt;BR/&gt; 46722: (1.51515%)&lt;BR/&gt; 46458: (1.51515%)&gt;];
}
2055--2211[label="0.5;1pkt 1fpkt"];
2055--3146[label="1;2pkt 2fpkt"];
2055--4713[label="0.5;1pkt 1fpkt"];
2055--4744[label="0.5;1pkt 1fpkt"];
2055--6671[label="0.5;1pkt 1fpkt"];
2055--7762[label="0.5;1pkt 1fpkt"];
2211--2282[label="0.0625;2pkt 2fpkt"];
2211--2489[label="0.0625;2pkt 2fpkt"];
2211--2547[label="0.0625;2pkt 2fpkt"];
2211--2550[label="0.09375;3pkt 3fpkt"];
2211--2776[label="0.0625;2pkt 2fpkt"];
2211--3146[label="0.5;1pkt 1fpkt"];
2211--4713[label="0.9375;30pkt 30fpkt"];
2211--6671[label="0.9375;30pkt 30fpkt"];
2211--7762[label="0.9375;30pkt 30fpkt"];
3146--4713[label="0.5;1pkt 1fpkt"];
3146--4744[label="0.5;1pkt 1fpkt"];
3146--6671[label="0.5;1pkt 1fpkt"];
3146--7762[label="0.5;1pkt 1fpkt"];
4713--6671[label="1;32pkt 32fpkt"];
4713--7762[label="1;32pkt 32fpkt"];
6671--7762[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="166.59.192.125" src_port="25"/>
    </slice>
    <from sec="1120712429" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.216.174.126"/>
    </slice>
    <from sec="1120713019" usec="0"/>
    <to sec="1120713020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.101.23.128"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.149.128"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
1800[label="166.59.160.128;s;2pkt 2fpkt", shape=diamond, color=yellow];
3155[label="166.59.160.128;s;2pkt 2fpkt", shape=hexagon, color=black];
4740[label="166.59.160.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6687[label="166.59.160.128;2pkt 2fpkt", shape=invtriangle, color=brown];
7772[label="166.59.160.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.160.128:1123, 220.200.127.17:6668}[50%]&lt;BR/&gt;{166.59.160.128:1116, 194.236.14.74:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (27.7778%)&lt;BR/&gt; 1123: (27.7778%)&lt;BR/&gt; 5050: (22.2222%)&lt;BR/&gt; 1116: (22.2222%)&gt;];
}
1800--3155[label="1;2pkt 2fpkt"];
1800--4740[label="1;2pkt 2fpkt"];
1800--6687[label="1;2pkt 2fpkt"];
1800--7772[label="1;1pkt 1fpkt"];
3155--4740[label="1;2pkt 2fpkt"];
3155--6687[label="1;2pkt 2fpkt"];
3155--7772[label="1;1pkt 1fpkt"];
4740--6687[label="1;2pkt 2fpkt"];
4740--7772[label="1;1pkt 1fpkt"];
6687--7772[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.74" dst_port="5050" src_ip="166.59.160.128" src_port="1116"/>
      <filter dst_ip="220.200.127.17" dst_port="6668" src_ip="166.59.160.128" src_port="1123"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.183.128"/>
    </slice>
    <from sec="1120713213" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.108.193.128"/>
    </slice>
    <from sec="1120712990" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.88.129"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.42.92.129"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.107.227.129"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.88.130"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.149.8.131"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.61.184.131"/>
    </slice>
    <from sec="1120712431" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.35.8.132"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120712901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.20.132"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
2173[label="201.85.82.133;s;321pkt 321fpkt", shape=diamond, color=yellow];
4790[label="201.85.82.133;321pkt 321fpkt", shape=pentagon, color=darkviolet];
6719[label="201.85.82.133;320pkt 320fpkt", shape=invtriangle, color=brown];
7794[label="201.85.82.133;321pkt 321fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.85.82.133:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3443: (0.311769%)&lt;BR/&gt; 3235: (0.311769%)&lt;BR/&gt; 3026: (0.311769%)&lt;BR/&gt; 2517: (0.311769%)&gt;];
}
2173--4790[label="1;321pkt 321fpkt"];
2173--6719[label="1;320pkt 320fpkt"];
2173--7794[label="1;321pkt 321fpkt"];
4790--6719[label="1;320pkt 320fpkt"];
4790--7794[label="1;321pkt 321fpkt"];
6719--7794[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.85.82.133"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.144.133"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
1489[label="161.99.210.133;s;864pkt 864fpkt", shape=diamond, color=yellow];
4799[label="161.99.210.133;876pkt 876fpkt", shape=pentagon, color=darkviolet];
6722[label="161.99.210.133;877pkt 877fpkt", shape=invtriangle, color=brown];
7796[label="161.99.210.133;877pkt 877fpkt", shape=invhouse, color=bisque];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.210.133:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (8.29994%)&lt;BR/&gt; 80: (8.2427%)&lt;BR/&gt; 4662: (4.99428%)&lt;BR/&gt; 2251: (0.57241%)&lt;BR/&gt; 63240: (0.343446%)&gt;];
}
1489--2439[label="0.0131579;1pkt 1fpkt"];
1489--2642[label="0.00271739;1pkt 1fpkt"];
1489--3096[label="0.00228311;1pkt 1fpkt"];
1489--4799[label="0.998843;863pkt 863fpkt"];
1489--6722[label="1;864pkt 864fpkt"];
1489--7796[label="1;864pkt 864fpkt"];
4799--6722[label="1;876pkt 876fpkt"];
4799--7796[label="1;876pkt 876fpkt"];
6722--7796[label="1;877pkt 877fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.210.133"/>
    </slice>
    <from sec="1120712708" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
406[label="222.129.13.134;s;1238pkt 1238fpkt", shape=diamond, color=yellow];
4802[label="222.129.13.134;1544pkt 1544fpkt", shape=pentagon, color=darkviolet];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.129.13.134:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1275: (0.215672%)&lt;BR/&gt; 4705: (0.143781%)&lt;BR/&gt; 1210: (0.143781%)&lt;BR/&gt; 1471: (0.125809%)&gt;];
}
406--3387[label="0.0767367;95pkt 95fpkt"];
406--4802[label="1;1238pkt 1238fpkt"];
</description>
    <slice>
      <filter src_ip="222.129.13.134" src_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.205.134"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.25.25.135"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.128.151.135"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.10.111.136"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.164.241.136"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.144.137"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.100.47.138"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
494[label="131.186.134.176;d;85pkt 85fpkt", shape=diamond, color=yellow];
519[label="26.128.75.96;s;16pkt 16fpkt", shape=diamond, color=yellow];
530[label="24.53.236.138;s;17pkt 17fpkt", shape=diamond, color=yellow];
2838[label="131.186.134.176;d;85pkt 85fpkt", shape=hexagon, color=black];
4844[label="24.53.236.138;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.53.236.138:80, 131.186.134.176:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5434%)&lt;BR/&gt; 2635: (0.913242%)&lt;BR/&gt; 2634: (0.913242%)&lt;BR/&gt; 2633: (0.913242%)&lt;BR/&gt; 2632: (0.913242%)&gt;];
}
494--519[label="1;16pkt 16fpkt"];
494--530[label="1;17pkt 17fpkt"];
494--1381[label="0.0117647;1pkt 1fpkt"];
494--2838[label="1;85pkt 85fpkt"];
494--3969[label="0.0117647;1pkt 1fpkt"];
494--4844[label="1;16pkt 16fpkt"];
494--6258[label="0.0117647;1pkt 1fpkt"];
519--2838[label="1;16pkt 16fpkt"];
530--2838[label="1;17pkt 17fpkt"];
530--4844[label="1;16pkt 16fpkt"];
2838--3969[label="0.0117647;1pkt 1fpkt"];
2838--4844[label="1;16pkt 16fpkt"];
2838--6258[label="0.0117647;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.134.176" src_ip="24.53.236.138" src_port="80"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120712495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.245.138"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
2787[label="208.35.8.174;d;3pkt 3fpkt", shape=diamond, color=yellow];
2790[label="212.66.52.139;s;3pkt 3fpkt", shape=diamond, color=yellow];
4850[label="212.66.52.139;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.52.139:33318, 208.35.8.174:80}[33.3333%]&lt;BR/&gt;{212.66.52.139:33319, 208.35.8.174:80}[33.3333%]&lt;BR/&gt;{212.66.52.139:33320, 208.35.8.174:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33320: (16.6667%)&lt;BR/&gt; 33319: (16.6667%)&lt;BR/&gt; 33318: (16.6667%)&gt;];
}
2787--2790[label="1;3pkt 3fpkt"];
2787--4850[label="1;3pkt 3fpkt"];
2790--4850[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.35.8.174" dst_port="80" src_ip="212.66.52.139" src_port="33320"/>
      <filter dst_ip="208.35.8.174" dst_port="80" src_ip="212.66.52.139" src_port="33319"/>
      <filter dst_ip="208.35.8.174" dst_port="80" src_ip="212.66.52.139" src_port="33318"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
2087[label="164.153.123.139;s;364pkt 364fpkt", shape=diamond, color=yellow];
3285[label="164.153.123.139;s;364pkt 364fpkt", shape=hexagon, color=black];
4856[label="164.153.123.139;400pkt 400fpkt", shape=pentagon, color=darkviolet];
6751[label="164.153.123.139;400pkt 400fpkt", shape=invtriangle, color=brown];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.153.123.139:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3898: (0.26178%)&lt;BR/&gt; 3696: (0.26178%)&lt;BR/&gt; 3695: (0.26178%)&lt;BR/&gt; 3532: (0.26178%)&gt;];
}
2087--3285[label="1;364pkt 364fpkt"];
2087--4856[label="0.997253;363pkt 363fpkt"];
2087--6751[label="0.997253;363pkt 363fpkt"];
3285--4856[label="0.997253;363pkt 363fpkt"];
3285--6751[label="0.997253;363pkt 363fpkt"];
4856--6751[label="1;400pkt 400fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="164.153.123.139"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.216.2.140"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
315[label="145.223.44.140;s;3pkt 3fpkt", shape=diamond, color=yellow];
1020[label="203.10.191.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
1283[label="203.10.191.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
1804[label="210.107.158.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
3280[label="145.223.44.140;s;3pkt 3fpkt", shape=hexagon, color=black];
4865[label="145.223.44.140;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6755[label="145.223.44.140;3pkt 3fpkt", shape=invtriangle, color=brown];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.44.140:8277, 203.10.191.8:8292}[33.3333%]&lt;BR/&gt;{145.223.44.140:8202, 203.10.191.39:8195}[33.3333%]&lt;BR/&gt;{145.223.44.140:8203, 210.107.158.207:8195}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8195: (33.3333%)&lt;BR/&gt; 8292: (16.6667%)&lt;BR/&gt; 8277: (16.6667%)&lt;BR/&gt; 8203: (16.6667%)&lt;BR/&gt; 8202: (16.6667%)&gt;];
}
315--1020[label="1;1pkt 1fpkt"];
315--1283[label="1;1pkt 1fpkt"];
315--1804[label="1;1pkt 1fpkt"];
315--3280[label="1;3pkt 3fpkt"];
315--4865[label="1;3pkt 3fpkt"];
315--6755[label="1;3pkt 3fpkt"];
1020--3280[label="1;1pkt 1fpkt"];
1020--4865[label="1;1pkt 1fpkt"];
1020--6755[label="1;1pkt 1fpkt"];
1283--3280[label="1;1pkt 1fpkt"];
1283--4865[label="1;1pkt 1fpkt"];
1283--6755[label="1;1pkt 1fpkt"];
1804--3280[label="1;1pkt 1fpkt"];
1804--4865[label="1;1pkt 1fpkt"];
1804--6755[label="1;1pkt 1fpkt"];
3280--4865[label="1;3pkt 3fpkt"];
3280--6755[label="1;3pkt 3fpkt"];
4865--6755[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="210.107.158.207" dst_port="8195" src_ip="145.223.44.140" src_port="8203"/>
      <filter dst_ip="203.10.191.39" dst_port="8195" src_ip="145.223.44.140" src_port="8202"/>
      <filter dst_ip="203.10.191.8" dst_port="8292" src_ip="145.223.44.140" src_port="8277"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.192.141"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.234.182.142"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.85.188.143"/>
    </slice>
    <from sec="1120712462" usec="0"/>
    <to sec="1120712481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.169.254.144"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
2201[label="145.223.215.219;d;108pkt 108fpkt", shape=diamond, color=yellow];
4918[label="213.204.163.145;128pkt 128fpkt", shape=pentagon, color=darkviolet];
6784[label="213.204.163.145;127pkt 127fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.204.163.145:80, 145.223.215.219:*}[84.7682%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5868%)&lt;BR/&gt; 3534: (0.413223%)&lt;BR/&gt; 3533: (0.413223%)&lt;BR/&gt; 3532: (0.413223%)&lt;BR/&gt; 3531: (0.413223%)&gt;];
}
2201--4918[label="0.787037;85pkt 85fpkt"];
2201--6784[label="0.777778;84pkt 84fpkt"];
4918--6784[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.215.219" src_ip="213.204.163.145" src_port="80"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.93.181.145"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.228.145"/>
    </slice>
    <from sec="1120712477" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
1950[label="211.166.146.204;d;130pkt 130fpkt", shape=diamond, color=yellow];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.20.137:*, 211.166.146.204:80}[27.6923%]&lt;BR/&gt;{161.99.81.27:*, 211.166.146.204:80}[26.9231%]&lt;BR/&gt;{145.223.9.146:*, 211.166.146.204:80}[25.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1610: (0.769231%)&lt;BR/&gt; 3646: (0.384615%)&lt;BR/&gt; 3645: (0.384615%)&lt;BR/&gt; 3644: (0.384615%)&gt;];
}
1950--4100[label="0.0133333;1pkt 1fpkt"];
1950--4631[label="0.0512821;4pkt 4fpkt"];
1950--4824[label="0.777778;35pkt 35fpkt"];
1950--4922[label="0.711111;32pkt 32fpkt"];
1950--5736[label="0.138462;18pkt 18fpkt"];
1950--6626[label="0.0512821;4pkt 4fpkt"];
1950--6787[label="0.711111;32pkt 32fpkt"];
1950--7234[label="0.138462;18pkt 18fpkt"];
1950--7738[label="0.0512821;4pkt 4fpkt"];
1950--7826[label="0.711111;32pkt 32fpkt"];
1950--8092[label="0.138462;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.146.204" dst_port="80" src_ip="145.222.20.137"/>
      <filter dst_ip="211.166.146.204" dst_port="80" src_ip="161.99.81.27"/>
      <filter dst_ip="211.166.146.204" dst_port="80" src_ip="145.223.9.146"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
2194[label="205.157.101.147;s;65pkt 65fpkt", shape=diamond, color=yellow];
3181[label="205.157.101.147;s;56pkt 56fpkt", shape=hexagon, color=black];
4938[label="205.157.101.147;76pkt 76fpkt", shape=pentagon, color=darkviolet];
6800[label="205.157.101.147;75pkt 75fpkt", shape=invtriangle, color=brown];
7836[label="205.157.101.147;75pkt 75fpkt", shape=invhouse, color=bisque];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.157.101.147:*, 149.177.146.123:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65161: (0.720461%)&lt;BR/&gt; 63607: (0.720461%)&lt;BR/&gt; 62880: (0.720461%)&lt;BR/&gt; 59364: (0.720461%)&gt;];
}
2194--3025[label="0.507692;33pkt 33fpkt"];
2194--3181[label="1;56pkt 56fpkt"];
2194--4938[label="1;65pkt 65fpkt"];
2194--6800[label="0.984615;64pkt 64fpkt"];
2194--7836[label="0.984615;64pkt 64fpkt"];
3181--4938[label="1;56pkt 56fpkt"];
3181--6800[label="0.982143;55pkt 55fpkt"];
3181--7836[label="0.982143;55pkt 55fpkt"];
4938--6800[label="1;75pkt 75fpkt"];
4938--7836[label="1;75pkt 75fpkt"];
6800--7836[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.146.123" dst_port="80" src_ip="205.157.101.147"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
2253[label="131.186.134.230;d;45pkt 45fpkt", shape=diamond, color=yellow];
3607[label="197.153.35.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4341[label="192.235.148.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4730[label="198.83.55.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4946[label="84.109.34.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5327[label="197.155.148.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6071[label="197.153.35.18;1pkt 1fpkt", shape=invtriangle, color=brown];
7024[label="197.155.148.185;1pkt 1fpkt", shape=invtriangle, color=brown];
7419[label="197.153.35.18;1pkt 1fpkt", shape=invhouse, color=bisque];
7966[label="197.155.148.185;1pkt 1fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:3077, 131.186.134.230:*}[44.4444%]&lt;BR/&gt;{*:80, 131.186.134.230:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (26.3636%)&lt;BR/&gt; 80: (16.3636%)&lt;BR/&gt; 3104: (3.63636%)&lt;BR/&gt; 3094: (3.63636%)&lt;BR/&gt; 3086: (2.72727%)&gt;];
}
2253--3388[label="0.0444444;2pkt 2fpkt"];
2253--3607[label="1;1pkt 1fpkt"];
2253--3812[label="0.105263;2pkt 2fpkt"];
2253--4283[label="0.111111;5pkt 5fpkt"];
2253--4341[label="1;1pkt 1fpkt"];
2253--4730[label="1;1pkt 1fpkt"];
2253--4946[label="1;2pkt 2fpkt"];
2253--5327[label="1;1pkt 1fpkt"];
2253--6071[label="1;1pkt 1fpkt"];
2253--6428[label="0.111111;5pkt 5fpkt"];
2253--7024[label="1;1pkt 1fpkt"];
2253--7419[label="1;1pkt 1fpkt"];
2253--7966[label="1;1pkt 1fpkt"];
3607--6071[label="1;1pkt 1fpkt"];
3607--7419[label="1;1pkt 1fpkt"];
5327--7024[label="1;1pkt 1fpkt"];
5327--7966[label="1;1pkt 1fpkt"];
6071--7419[label="1;1pkt 1fpkt"];
7024--7966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.134.230" src_port="3077"/>
      <filter dst_ip="131.186.134.230" src_port="80"/>
    </slice>
    <from sec="1120712773" usec="0"/>
    <to sec="1120713221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
1670[label="145.223.131.25;s;126pkt 126fpkt", shape=diamond, color=yellow];
2133[label="211.166.147.102;d;22pkt 22fpkt", shape=diamond, color=yellow];
3704[label="145.223.131.25;141pkt 141fpkt", shape=pentagon, color=darkviolet];
5237[label="145.222.176.176;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6125[label="145.223.131.25;141pkt 141fpkt", shape=invtriangle, color=brown];
6974[label="145.222.176.176;11pkt 11fpkt", shape=invtriangle, color=brown];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.131.25:*, *:80}[64.5349%]&lt;BR/&gt;{*:*, *:1863}[22.093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 1863: (6.98448%)&lt;BR/&gt; 1269: (4.102%)&lt;BR/&gt; 53: (4.102%)&lt;BR/&gt; 443: (0.776053%)&gt;];
}
1670--2133[label="0.0454545;1pkt 1fpkt"];
1670--2374[label="0.0555556;1pkt 1fpkt"];
1670--2486[label="0.234568;19pkt 19fpkt"];
1670--3226[label="0.0555556;1pkt 1fpkt"];
1670--3384[label="0.00793651;1pkt 1fpkt"];
1670--3704[label="1;126pkt 126fpkt"];
1670--6125[label="1;126pkt 126fpkt"];
2133--2162[label="0.0454545;1pkt 1fpkt"];
2133--2673[label="0.0454545;1pkt 1fpkt"];
2133--2674[label="0.0555556;1pkt 1fpkt"];
2133--3175[label="0.0454545;1pkt 1fpkt"];
2133--3704[label="0.0454545;1pkt 1fpkt"];
2133--3809[label="0.0454545;1pkt 1fpkt"];
2133--4487[label="0.0454545;1pkt 1fpkt"];
2133--4513[label="0.142857;1pkt 1fpkt"];
2133--4948[label="0.0454545;1pkt 1fpkt"];
2133--4999[label="0.0454545;1pkt 1fpkt"];
2133--5064[label="0.0454545;1pkt 1fpkt"];
2133--5117[label="0.0588235;1pkt 1fpkt"];
2133--5164[label="0.0454545;1pkt 1fpkt"];
2133--5237[label="0.1;1pkt 1fpkt"];
2133--5457[label="0.0454545;1pkt 1fpkt"];
2133--5484[label="0.1;1pkt 1fpkt"];
2133--6125[label="0.0454545;1pkt 1fpkt"];
2133--6175[label="0.0454545;1pkt 1fpkt"];
2133--6878[label="0.0454545;1pkt 1fpkt"];
2133--6974[label="0.0909091;1pkt 1fpkt"];
2133--7474[label="0.0454545;1pkt 1fpkt"];
2133--7875[label="0.0454545;1pkt 1fpkt"];
3704--6125[label="1;141pkt 141fpkt"];
5237--6974[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="1863"/>
      <filter dst_port="80" src_ip="145.223.131.25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.217.177.148"/>
    </slice>
    <from sec="1120712599" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.165.63.149"/>
    </slice>
    <from sec="1120713003" usec="0"/>
    <to sec="1120713048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.33.77.149"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.205.149"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
2088[label="145.222.13.150;s;111pkt 111fpkt", shape=diamond, color=yellow];
4970[label="145.222.13.150;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6822[label="145.222.13.150;112pkt 112fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.13.150:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2088--4970[label="1;111pkt 111fpkt"];
2088--6822[label="1;111pkt 111fpkt"];
4970--6822[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.13.150"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.218.146.150"/>
    </slice>
    <from sec="1120713073" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.96.111.151"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.40.198.151"/>
    </slice>
    <from sec="1120712482" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.118.159.152"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.157.248.152"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.62.154"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.132.154"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
721[label="213.79.160.155;s;43pkt 43fpkt", shape=diamond, color=yellow];
3166[label="213.79.160.155;s;38pkt 38fpkt", shape=hexagon, color=black];
5023[label="213.79.160.155;47pkt 47fpkt", shape=pentagon, color=darkviolet];
6855[label="213.79.160.155;47pkt 47fpkt", shape=invtriangle, color=brown];
7863[label="213.79.160.155;46pkt 46fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.79.160.155:*, 149.177.146.123:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 12535: (1.13122%)&lt;BR/&gt; 12487: (1.13122%)&lt;BR/&gt; 12335: (1.13122%)&lt;BR/&gt; 12237: (1.13122%)&gt;];
}
721--3025[label="0.581395;25pkt 25fpkt"];
721--3166[label="1;38pkt 38fpkt"];
721--5023[label="1;43pkt 43fpkt"];
721--6855[label="1;43pkt 43fpkt"];
721--7863[label="0.976744;42pkt 42fpkt"];
3166--5023[label="1;38pkt 38fpkt"];
3166--6855[label="1;38pkt 38fpkt"];
3166--7863[label="0.973684;37pkt 37fpkt"];
5023--6855[label="1;47pkt 47fpkt"];
5023--7863[label="1;46pkt 46fpkt"];
6855--7863[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.146.123" dst_port="80" src_ip="213.79.160.155"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.107.233.155"/>
    </slice>
    <from sec="1120712629" usec="0"/>
    <to sec="1120712910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.128.157.156"/>
    </slice>
    <from sec="1120712481" usec="0"/>
    <to sec="1120712633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.84.78.157"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
1559[label="211.166.150.75;d;11pkt 11fpkt", shape=diamond, color=yellow];
1650[label="149.177.49.74;s;5pkt 5fpkt", shape=diamond, color=yellow];
1654[label="149.177.109.157;s;5pkt 5fpkt", shape=diamond, color=yellow];
2345[label="211.166.150.113;d;18pkt 18fpkt", shape=diamond, color=yellow];
3320[label="149.177.49.74;s;5pkt 5fpkt", shape=hexagon, color=black];
4221[label="149.177.49.74;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5037[label="149.177.109.157;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5564[label="149.177.105.210;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5695[label="149.177.108.221;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5785[label="149.177.111.231;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6862[label="149.177.109.157;21pkt 21fpkt", shape=invtriangle, color=brown];
7215[label="149.177.108.221;14pkt 14fpkt", shape=invtriangle, color=brown];
7867[label="149.177.109.157;20pkt 20fpkt", shape=invhouse, color=bisque];
8083[label="149.177.108.221;13pkt 13fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.150.113:1863}[23.3766%]&lt;BR/&gt;{149.177.109.157:*, *:80}[20.7792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (22.7273%)&lt;BR/&gt; 80: (15.4545%)&lt;BR/&gt; 26421: (7.57576%)&lt;BR/&gt; 34898: (2.12121%)&lt;BR/&gt; 443: (2.12121%)&gt;];
}
1559--1650[label="0.2;1pkt 1fpkt"];
1559--1654[label="0.2;1pkt 1fpkt"];
1559--2219[label="0.0909091;1pkt 1fpkt"];
1559--3251[label="0.0909091;1pkt 1fpkt"];
1559--3320[label="0.2;1pkt 1fpkt"];
1559--4221[label="0.2;1pkt 1fpkt"];
1559--4614[label="0.333333;2pkt 2fpkt"];
1559--5037[label="0.0909091;1pkt 1fpkt"];
1559--5151[label="0.0909091;1pkt 1fpkt"];
1559--5268[label="0.25;1pkt 1fpkt"];
1559--5564[label="0.0909091;1pkt 1fpkt"];
1559--5695[label="0.0909091;1pkt 1fpkt"];
1559--6612[label="0.285714;2pkt 2fpkt"];
1559--6862[label="0.0909091;1pkt 1fpkt"];
1559--6925[label="0.0909091;1pkt 1fpkt"];
1559--7215[label="0.0909091;1pkt 1fpkt"];
1559--7730[label="0.333333;2pkt 2fpkt"];
1559--7867[label="0.0909091;1pkt 1fpkt"];
1559--7906[label="0.0909091;1pkt 1fpkt"];
1559--8083[label="0.0909091;1pkt 1fpkt"];
1650--3320[label="1;5pkt 5fpkt"];
1650--4221[label="1;5pkt 5fpkt"];
1654--2345[label="0.2;1pkt 1fpkt"];
1654--5037[label="1;5pkt 5fpkt"];
1654--6862[label="1;5pkt 5fpkt"];
1654--7867[label="1;5pkt 5fpkt"];
2345--3904[label="0.0555556;1pkt 1fpkt"];
2345--4139[label="0.333333;1pkt 1fpkt"];
2345--4377[label="0.166667;1pkt 1fpkt"];
2345--5037[label="0.0555556;1pkt 1fpkt"];
2345--5107[label="0.2;1pkt 1fpkt"];
2345--5785[label="0.333333;1pkt 1fpkt"];
2345--6862[label="0.0555556;1pkt 1fpkt"];
2345--7867[label="0.0555556;1pkt 1fpkt"];
3320--4221[label="1;5pkt 5fpkt"];
5037--6862[label="1;21pkt 21fpkt"];
5037--7867[label="1;20pkt 20fpkt"];
5695--7215[label="1;13pkt 13fpkt"];
5695--8083[label="1;13pkt 13fpkt"];
6862--7867[label="1;20pkt 20fpkt"];
7215--8083[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.177.109.157"/>
      <filter dst_ip="211.166.150.113" dst_port="1863"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
2578[label="212.151.116.157;s;10pkt 10fpkt", shape=diamond, color=yellow];
5038[label="212.151.116.157;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6863[label="212.151.116.157;9pkt 9fpkt", shape=invtriangle, color=brown];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.151.116.157:*, 149.177.146.123:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10896: (5.17241%)&lt;BR/&gt; 10392: (5.17241%)&lt;BR/&gt; 4701: (5.17241%)&lt;BR/&gt; 4369: (5.17241%)&gt;];
}
2578--5038[label="1;10pkt 10fpkt"];
2578--6863[label="1;9pkt 9fpkt"];
5038--6863[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.146.123" dst_port="80" src_ip="212.151.116.157"/>
    </slice>
    <from sec="1120713072" usec="0"/>
    <to sec="1120713171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.132.157"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.32.213.157"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
2130[label="212.66.181.53;s;12pkt 12fpkt", shape=diamond, color=yellow];
2397[label="211.166.147.160;d;14pkt 14fpkt", shape=diamond, color=yellow];
2480[label="211.166.150.21;d;6pkt 6fpkt", shape=diamond, color=yellow];
2643[label="211.166.147.28;d;13pkt 13fpkt", shape=diamond, color=yellow];
4032[label="212.66.181.56;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4568[label="149.177.109.108;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5444[label="149.177.134.198;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6291[label="212.66.181.56;9pkt 9fpkt", shape=invtriangle, color=brown];
6589[label="149.177.109.108;4pkt 4fpkt", shape=invtriangle, color=brown];
7095[label="149.177.134.198;8pkt 8fpkt", shape=invtriangle, color=brown];
7542[label="212.66.181.56;10pkt 10fpkt", shape=invhouse, color=bisque];
8005[label="149.177.134.198;8pkt 8fpkt", shape=invhouse, color=bisque];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.147.160:1863}[22.9508%]&lt;BR/&gt;{*:*, 211.166.147.28:1863}[21.3115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (48.5849%)&lt;BR/&gt; 3216: (1.88679%)&lt;BR/&gt; 1745: (1.88679%)&lt;BR/&gt; 1629: (1.88679%)&lt;BR/&gt; 1074: (1.88679%)&gt;];
}
2130--2397[label="0.0833333;1pkt 1fpkt"];
2130--2439[label="0.0833333;1pkt 1fpkt"];
2130--2480[label="0.166667;1pkt 1fpkt"];
2397--2697[label="0.0714286;1pkt 1fpkt"];
2397--3167[label="0.0714286;1pkt 1fpkt"];
2397--3863[label="0.0909091;1pkt 1fpkt"];
2397--4032[label="0.1;1pkt 1fpkt"];
2397--4351[label="0.125;1pkt 1fpkt"];
2397--5045[label="0.0714286;1pkt 1fpkt"];
2397--5444[label="0.125;1pkt 1fpkt"];
2397--6203[label="0.0833333;1pkt 1fpkt"];
2397--6291[label="0.111111;1pkt 1fpkt"];
2397--7095[label="0.125;1pkt 1fpkt"];
2397--7542[label="0.1;1pkt 1fpkt"];
2397--8005[label="0.125;1pkt 1fpkt"];
2480--3497[label="0.166667;1pkt 1fpkt"];
2480--4568[label="0.25;1pkt 1fpkt"];
2480--5565[label="0.333333;1pkt 1fpkt"];
2480--6011[label="0.166667;1pkt 1fpkt"];
2480--6589[label="0.25;1pkt 1fpkt"];
2480--7153[label="0.5;1pkt 1fpkt"];
2480--7388[label="0.166667;1pkt 1fpkt"];
2643--3482[label="0.0769231;1pkt 1fpkt"];
2643--3816[label="0.25;1pkt 1fpkt"];
2643--4032[label="0.1;1pkt 1fpkt"];
2643--4050[label="0.0769231;1pkt 1fpkt"];
2643--4958[label="0.0769231;1pkt 1fpkt"];
2643--5085[label="0.142857;1pkt 1fpkt"];
2643--6291[label="0.111111;1pkt 1fpkt"];
2643--6298[label="0.0769231;1pkt 1fpkt"];
2643--6813[label="0.0769231;1pkt 1fpkt"];
2643--6886[label="0.142857;1pkt 1fpkt"];
2643--7542[label="0.1;1pkt 1fpkt"];
2643--7545[label="0.0769231;1pkt 1fpkt"];
4032--6291[label="1;9pkt 9fpkt"];
4032--7542[label="1;10pkt 10fpkt"];
4568--6589[label="1;4pkt 4fpkt"];
5444--7095[label="1;8pkt 8fpkt"];
5444--8005[label="1;8pkt 8fpkt"];
6291--7542[label="1;9pkt 9fpkt"];
7095--8005[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.147.160" dst_port="1863"/>
      <filter dst_ip="211.166.147.28" dst_port="1863"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.66.65.158"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.144.158"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.115.100.159"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.0.160"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.32.7.160"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120712462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
5276[label="212.196.6.181;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6994[label="212.196.6.181;15pkt 15fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.196.6.181:80, 131.186.132.121:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36692: (3.33333%)&lt;BR/&gt; 4263: (3.33333%)&lt;BR/&gt; 4262: (3.33333%)&lt;BR/&gt; 4259: (3.33333%)&gt;];
}
5276--6994[label="1;15pkt 15fpkt"];
5276--7947[label="1;15pkt 15fpkt"];
6994--7947[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.132.121" src_ip="212.196.6.181" src_port="80"/>
    </slice>
    <from sec="1120712666" usec="0"/>
    <to sec="1120712994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24314,2.13245,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
65[label="198.83.108.161s;335pkt 335fpkt", shape=rectangle, color=red];
5072[label="198.83.108.161;334pkt 334fpkt", shape=pentagon, color=darkviolet];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.108.161:43405, *:1026}[30.7463%]&lt;BR/&gt;{198.83.108.161:43370, *:1026}[30.1493%]&lt;BR/&gt;{198.83.108.161:43370, *:1027}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (30.4185%)&lt;BR/&gt; 43370: (25.0374%)&lt;BR/&gt; 43405: (24.9626%)&lt;BR/&gt; 1027: (19.5815%)&gt;];
}
65--5072[label="1;334pkt 334fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="198.83.108.161" src_port="43370"/>
      <filter dst_port="1027" src_ip="198.83.108.161" src_port="43370"/>
      <filter dst_port="1026" src_ip="198.83.108.161" src_port="43405"/>
    </slice>
    <from sec="1120712525" usec="0"/>
    <to sec="1120712531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.222.188.161"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.232.69.162"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.218.137.162"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
1635[label="212.66.36.48;d;35pkt 35fpkt", shape=diamond, color=yellow];
1779[label="2.6.2.119;s;2pkt 2fpkt", shape=diamond, color=yellow];
5088[label="29.9.4.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5350[label="29.9.4.189;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7039[label="29.9.4.189;19pkt 19fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.9.4.189:80, 212.66.36.48:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3325: (1.94805%)&lt;BR/&gt; 3323: (1.94805%)&lt;BR/&gt; 3321: (1.94805%)&lt;BR/&gt; 3319: (1.94805%)&gt;];
}
1635--1779[label="1;2pkt 2fpkt"];
1635--5088[label="1;1pkt 1fpkt"];
1635--5350[label="1;20pkt 20fpkt"];
1635--7039[label="1;19pkt 19fpkt"];
5350--7039[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.36.48" src_ip="29.9.4.189" src_port="80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.36354,2.08778,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
89[label="193.129.10.163s;188pkt 188fpkt", shape=rectangle, color=red];
5090[label="193.129.10.163;188pkt 188fpkt", shape=pentagon, color=darkviolet];
6890[label="193.129.10.163;188pkt 188fpkt", shape=invtriangle, color=brown];
7881[label="193.129.10.163;188pkt 188fpkt", shape=invhouse, color=bisque];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.129.10.163:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1441: (0.265957%)&lt;BR/&gt; 1440: (0.265957%)&lt;BR/&gt; 1439: (0.265957%)&lt;BR/&gt; 1438: (0.265957%)&gt;];
}
89--5090[label="1;188pkt 188fpkt"];
89--6890[label="1;188pkt 188fpkt"];
89--7881[label="1;188pkt 188fpkt"];
5090--6890[label="1;188pkt 188fpkt"];
5090--7881[label="1;188pkt 188fpkt"];
6890--7881[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="193.129.10.163"/>
    </slice>
    <from sec="1120713188" usec="0"/>
    <to sec="1120713192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.192.33.163"/>
    </slice>
    <from sec="1120713248" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.147.163"/>
    </slice>
    <from sec="1120712500" usec="0"/>
    <to sec="1120713106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.106.201.163"/>
    </slice>
    <from sec="1120712426" usec="0"/>
    <to sec="1120712940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.179.85.164"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
564[label="149.177.210.138;d;3294pkt 3294fpkt", shape=diamond, color=yellow];
2481[label="212.196.136.24;s;23pkt 23fpkt", shape=diamond, color=yellow];
3735[label="84.39.90.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3760[label="83.86.192.30;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3827[label="192.250.169.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4835[label="197.95.3.138;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5074[label="84.37.174.161;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5420[label="193.140.81.196;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5550[label="193.128.38.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5838[label="201.104.216.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6139[label="84.39.90.28;6pkt 6fpkt", shape=invtriangle, color=brown];
6739[label="197.95.3.138;23pkt 23fpkt", shape=invtriangle, color=brown];
7291[label="201.104.216.237;1pkt 1fpkt", shape=invtriangle, color=brown];
7450[label="84.39.90.28;6pkt 6fpkt", shape=invhouse, color=bisque];
7587[label="84.128.97.70;1pkt 1fpkt", shape=invhouse, color=bisque];
7802[label="197.95.3.138;24pkt 24fpkt", shape=invhouse, color=bisque];
8123[label="201.104.216.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.177.210.138:1113}[97.6541%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1113: (48.805%)&lt;BR/&gt; 80: (0.597493%)&lt;BR/&gt; 443: (0.510055%)&lt;BR/&gt; 0: (0.14573%)&lt;BR/&gt; 1047: (0.0728651%)&gt;];
}
564--2481[label="0.0434783;1pkt 1fpkt"];
564--2828[label="0.0909091;1pkt 1fpkt"];
564--3735[label="1;6pkt 6fpkt"];
564--3760[label="1;5pkt 5fpkt"];
564--3827[label="1;2pkt 2fpkt"];
564--4488[label="0.625;40pkt 40fpkt"];
564--4597[label="0.757576;25pkt 25fpkt"];
564--4731[label="0.714286;20pkt 20fpkt"];
564--4835[label="0.695652;16pkt 16fpkt"];
564--5074[label="1;4pkt 4fpkt"];
564--5116[label="0.888889;8pkt 8fpkt"];
564--5136[label="0.0769231;1pkt 1fpkt"];
564--5420[label="0.8;8pkt 8fpkt"];
564--5535[label="1;9pkt 9fpkt"];
564--5550[label="1;1pkt 1fpkt"];
564--5700[label="0.0833333;1pkt 1fpkt"];
564--5838[label="1;1pkt 1fpkt"];
564--6139[label="1;6pkt 6fpkt"];
564--6602[label="0.75;24pkt 24fpkt"];
564--6739[label="0.695652;16pkt 16fpkt"];
564--6914[label="0.142857;2pkt 2fpkt"];
564--7140[label="1;9pkt 9fpkt"];
564--7291[label="1;1pkt 1fpkt"];
564--7450[label="1;6pkt 6fpkt"];
564--7587[label="1;1pkt 1fpkt"];
564--7725[label="0.757576;25pkt 25fpkt"];
564--7802[label="0.708333;17pkt 17fpkt"];
564--8123[label="1;1pkt 1fpkt"];
2481--2847[label="0.0434783;1pkt 1fpkt"];
2481--3025[label="0.521739;12pkt 12fpkt"];
3735--6139[label="1;6pkt 6fpkt"];
3735--7450[label="1;6pkt 6fpkt"];
4835--6739[label="1;23pkt 23fpkt"];
4835--7802[label="1;23pkt 23fpkt"];
5838--7291[label="1;1pkt 1fpkt"];
5838--8123[label="1;1pkt 1fpkt"];
6139--7450[label="1;6pkt 6fpkt"];
6739--7802[label="1;23pkt 23fpkt"];
7291--8123[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.210.138" dst_port="1113"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.105.165"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.62.157.165"/>
    </slice>
    <from sec="1120713114" usec="0"/>
    <to sec="1120713153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.34.113.166"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.84.1.167"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.54.168"/>
    </slice>
    <from sec="1120713231" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
594[label="220.200.127.17;d;21pkt 21fpkt", shape=diamond, color=yellow];
1280[label="166.59.183.175;s;4pkt 4fpkt", shape=diamond, color=yellow];
1807[label="166.59.183.18;s;2pkt 2fpkt", shape=diamond, color=yellow];
2080[label="166.59.153.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
3275[label="166.59.153.89;s;1pkt 1fpkt", shape=hexagon, color=black];
3429[label="166.59.136.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3449[label="166.59.136.4;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3618[label="166.59.183.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4796[label="166.59.160.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4815[label="166.59.160.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5152[label="166.59.148.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5225[label="166.59.183.175;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5730[label="166.59.136.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6078[label="166.59.183.18;2pkt 2fpkt", shape=invtriangle, color=brown];
6482[label="166.59.153.89;1pkt 1fpkt", shape=invtriangle, color=brown];
6966[label="166.59.183.175;4pkt 4fpkt", shape=invtriangle, color=brown];
7421[label="166.59.183.18;2pkt 2fpkt", shape=invhouse, color=bisque];
7930[label="166.59.183.175;3pkt 3fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 220.200.127.17:*}[65.625%]&lt;BR/&gt;{*:*, *:6667}[31.25%]&lt;BR/&gt;{*:113, *:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.5161%)&lt;BR/&gt; 113: (9.67742%)&lt;BR/&gt; 5050: (5.64516%)&lt;BR/&gt; 6665: (4.83871%)&lt;BR/&gt; 6668: (4.03226%)&gt;];
}
594--1280[label="0.25;1pkt 1fpkt"];
594--1318[label="0.047619;1pkt 1fpkt"];
594--1800[label="0.5;1pkt 1fpkt"];
594--1807[label="0.5;1pkt 1fpkt"];
594--2080[label="1;1pkt 1fpkt"];
594--3155[label="0.5;1pkt 1fpkt"];
594--3275[label="1;1pkt 1fpkt"];
594--3409[label="0.125;1pkt 1fpkt"];
594--3429[label="0.5;1pkt 1fpkt"];
594--3449[label="0.333333;2pkt 2fpkt"];
594--3618[label="0.5;1pkt 1fpkt"];
594--4740[label="0.5;1pkt 1fpkt"];
594--4744[label="0.047619;1pkt 1fpkt"];
594--4796[label="1;2pkt 2fpkt"];
594--4815[label="1;1pkt 1fpkt"];
594--5152[label="0.666667;2pkt 2fpkt"];
594--5225[label="0.333333;1pkt 1fpkt"];
594--5730[label="0.5;1pkt 1fpkt"];
594--5969[label="0.125;1pkt 1fpkt"];
594--6078[label="0.5;1pkt 1fpkt"];
594--6482[label="1;1pkt 1fpkt"];
594--6687[label="0.5;1pkt 1fpkt"];
594--6966[label="0.25;1pkt 1fpkt"];
594--7371[label="0.142857;1pkt 1fpkt"];
594--7421[label="0.5;1pkt 1fpkt"];
594--7772[label="1;1pkt 1fpkt"];
594--7930[label="0.333333;1pkt 1fpkt"];
1280--5225[label="1;3pkt 3fpkt"];
1280--6966[label="1;4pkt 4fpkt"];
1280--7930[label="1;3pkt 3fpkt"];
1807--3618[label="1;2pkt 2fpkt"];
1807--6078[label="1;2pkt 2fpkt"];
1807--7421[label="1;2pkt 2fpkt"];
2080--3275[label="1;1pkt 1fpkt"];
2080--6482[label="1;1pkt 1fpkt"];
3275--6482[label="1;1pkt 1fpkt"];
3618--6078[label="1;2pkt 2fpkt"];
3618--7421[label="1;2pkt 2fpkt"];
5225--6966[label="1;3pkt 3fpkt"];
5225--7930[label="1;3pkt 3fpkt"];
6078--7421[label="1;2pkt 2fpkt"];
6966--7930[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="220.200.127.17"/>
      <filter src_port="113"/>
      <filter dst_port="6667"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.0.208.168"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
285[label="196.86.244.168;s;2pkt 2fpkt", shape=diamond, color=yellow];
5162[label="196.86.244.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6934[label="196.86.244.168;2pkt 2fpkt", shape=invtriangle, color=brown];
7912[label="196.86.244.168;2pkt 2fpkt", shape=invhouse, color=bisque];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.86.244.168:24532, 213.17.234.101:1755}[50%]&lt;BR/&gt;{196.86.244.168:26505, 213.17.234.101:1755}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 26505: (28.5714%)&lt;BR/&gt; 24532: (21.4286%)&gt;];
}
285--5162[label="1;1pkt 1fpkt"];
285--6934[label="1;2pkt 2fpkt"];
285--7912[label="1;2pkt 2fpkt"];
5162--6934[label="1;1pkt 1fpkt"];
5162--7912[label="1;1pkt 1fpkt"];
6934--7912[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.234.101" dst_port="1755" src_ip="196.86.244.168" src_port="26505"/>
      <filter dst_ip="213.17.234.101" dst_port="1755" src_ip="196.86.244.168" src_port="24532"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
1892[label="145.223.172.169;s;214pkt 214fpkt", shape=diamond, color=yellow];
2367[label="197.98.95.137;d;137pkt 137fpkt", shape=diamond, color=yellow];
5171[label="145.223.172.169;313pkt 313fpkt", shape=pentagon, color=darkviolet];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.172.169:*, *:80}[50.1597%]&lt;BR/&gt;{145.223.172.169:444, 197.98.95.137:*}[48.8818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 444: (30.1958%)&lt;BR/&gt; 80: (19.4277%)&lt;BR/&gt; 3511: (0.527108%)&lt;BR/&gt; 3519: (0.376506%)&lt;BR/&gt; 3518: (0.376506%)&gt;];
}
1892--2367[label="0.810219;111pkt 111fpkt"];
1892--2521[label="0.00869565;1pkt 1fpkt"];
1892--2740[label="0.0114943;1pkt 1fpkt"];
1892--3206[label="0.00684932;1pkt 1fpkt"];
1892--5171[label="1;214pkt 214fpkt"];
2367--5171[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.172.169"/>
      <filter dst_ip="197.98.95.137" src_ip="145.223.172.169" src_port="444"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.1.204.170"/>
    </slice>
    <from sec="1120712717" usec="0"/>
    <to sec="1120712725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.205.170"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_720{
style=filled;
color=gray75;
1444[label="161.99.63.84;d;19pkt 19fpkt", shape=diamond, color=yellow];
1965[label="120.58.135.6;s;17pkt 17fpkt", shape=diamond, color=yellow];
5623[label="27.198.95.214;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat720[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 161.99.63.84:*}[52.7778%]&lt;BR/&gt;{120.58.135.6:80, *:*}[47.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7805%)&lt;BR/&gt; 3804: (2.43902%)&lt;BR/&gt; 3801: (2.43902%)&lt;BR/&gt; 3793: (2.43902%)&lt;BR/&gt; 3789: (2.43902%)&gt;];
}
1444--1926[label="0.285714;4pkt 4fpkt"];
1444--1965[label="0.235294;4pkt 4fpkt"];
1444--3124[label="0.285714;4pkt 4fpkt"];
1444--5187[label="0.285714;4pkt 4fpkt"];
1444--5623[label="0.2;1pkt 1fpkt"];
1444--5815[label="0.105263;2pkt 2fpkt"];
1444--5823[label="0.105263;2pkt 2fpkt"];
1444--6945[label="0.230769;3pkt 3fpkt"];
1444--7278[label="0.105263;2pkt 2fpkt"];
1965--3388[label="0.235294;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="120.58.135.6" src_port="80"/>
      <filter dst_ip="161.99.63.84" src_port="80"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.97.34.172"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
2167[label="201.85.91.172;s;340pkt 340fpkt", shape=diamond, color=yellow];
5199[label="201.85.91.172;375pkt 375fpkt", shape=pentagon, color=darkviolet];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.85.91.172:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4442: (0.27972%)&lt;BR/&gt; 3143: (0.27972%)&lt;BR/&gt; 3115: (0.27972%)&lt;BR/&gt; 2798: (0.27972%)&gt;];
}
2167--5199[label="0.997059;339pkt 339fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.85.91.172"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
1196[label="0.39.53.173;s;3pkt 3fpkt", shape=diamond, color=yellow];
5205[label="0.39.53.173;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6955[label="0.39.53.173;3pkt 3fpkt", shape=invtriangle, color=brown];
7921[label="0.39.53.173;2pkt 2fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.39.53.173:80, 131.186.212.177:1908}[33.3333%]&lt;BR/&gt;{0.39.53.173:80, 131.186.212.177:1909}[33.3333%]&lt;BR/&gt;{0.39.53.173:80, 131.186.212.177:1920}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1920: (20%)&lt;BR/&gt; 1909: (20%)&lt;BR/&gt; 1908: (10%)&gt;];
}
1196--2913[label="1;3pkt 3fpkt"];
1196--5205[label="1;2pkt 2fpkt"];
1196--6955[label="1;3pkt 3fpkt"];
1196--7921[label="1;2pkt 2fpkt"];
5205--6955[label="1;2pkt 2fpkt"];
5205--7921[label="1;2pkt 2fpkt"];
6955--7921[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.212.177" dst_port="1920" src_ip="0.39.53.173" src_port="80"/>
      <filter dst_ip="131.186.212.177" dst_port="1909" src_ip="0.39.53.173" src_port="80"/>
      <filter dst_ip="131.186.212.177" dst_port="1908" src_ip="0.39.53.173" src_port="80"/>
    </slice>
    <from sec="1120712480" usec="0"/>
    <to sec="1120712582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
524[label="193.19.80.174;s;73pkt 73fpkt", shape=diamond, color=yellow];
525[label="145.223.154.211;d;166pkt 166fpkt", shape=diamond, color=yellow];
5214[label="193.19.80.174;164pkt 164fpkt", shape=pentagon, color=darkviolet];
6962[label="193.19.80.174;165pkt 165fpkt", shape=invtriangle, color=brown];
7927[label="193.19.80.174;164pkt 164fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.19.80.174:80, 145.223.154.211:*}[97.6331%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3635: (0.34153%)&lt;BR/&gt; 3634: (0.34153%)&lt;BR/&gt; 3632: (0.34153%)&lt;BR/&gt; 3631: (0.34153%)&gt;];
}
524--525[label="1;73pkt 73fpkt"];
524--3388[label="0.0136986;1pkt 1fpkt"];
524--5214[label="1;73pkt 73fpkt"];
524--6962[label="1;73pkt 73fpkt"];
524--7927[label="1;73pkt 73fpkt"];
525--3388[label="0.0060241;1pkt 1fpkt"];
525--5214[label="0.987805;162pkt 162fpkt"];
525--6962[label="0.981818;162pkt 162fpkt"];
525--7927[label="0.987805;162pkt 162fpkt"];
5214--6962[label="1;164pkt 164fpkt"];
5214--7927[label="1;164pkt 164fpkt"];
6962--7927[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.154.211" src_ip="193.19.80.174" src_port="80"/>
    </slice>
    <from sec="1120712441" usec="0"/>
    <to sec="1120713161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.175.174"/>
    </slice>
    <from sec="1120712432" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.109.203.174"/>
    </slice>
    <from sec="1120712478" usec="0"/>
    <to sec="1120713250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.214.119.175"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.140.175"/>
    </slice>
    <from sec="1120713052" usec="0"/>
    <to sec="1120713076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.252.68.176"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.108.176"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.147.176"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.245.198.176"/>
    </slice>
    <from sec="1120712486" usec="0"/>
    <to sec="1120713222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.40.67.177"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.219.128.177"/>
    </slice>
    <from sec="1120712444" usec="0"/>
    <to sec="1120712903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.2.56.178"/>
    </slice>
    <from sec="1120712448" usec="0"/>
    <to sec="1120713264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.204.43.179"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.212.61.179"/>
    </slice>
    <from sec="1120712969" usec="0"/>
    <to sec="1120712984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
794[label="145.223.9.18;d;259pkt 259fpkt", shape=diamond, color=yellow];
861[label="196.177.178.114;s;16pkt 16fpkt", shape=diamond, color=yellow];
2732[label="196.177.178.125;s;10pkt 10fpkt", shape=diamond, color=yellow];
4606[label="196.177.178.113;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4617[label="196.177.178.114;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4634[label="196.177.178.116;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4670[label="196.177.178.120;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4711[label="196.177.178.125;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4910[label="198.230.21.145;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5109[label="201.90.128.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5262[label="201.90.128.179;67pkt 67fpkt", shape=pentagon, color=darkviolet];
6608[label="196.177.178.113;48pkt 48fpkt", shape=invtriangle, color=brown];
6615[label="196.177.178.114;23pkt 23fpkt", shape=invtriangle, color=brown];
6650[label="196.177.178.120;45pkt 45fpkt", shape=invtriangle, color=brown];
6670[label="196.177.178.125;14pkt 14fpkt", shape=invtriangle, color=brown];
6779[label="198.230.21.145;7pkt 7fpkt", shape=invtriangle, color=brown];
6901[label="201.90.128.164;6pkt 6fpkt", shape=invtriangle, color=brown];
6987[label="201.90.128.179;67pkt 67fpkt", shape=invtriangle, color=brown];
7728[label="196.177.178.113;47pkt 47fpkt", shape=invhouse, color=bisque];
7731[label="196.177.178.114;22pkt 22fpkt", shape=invhouse, color=bisque];
7822[label="198.230.21.145;7pkt 7fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.90.128.179:80, 145.223.9.18:*}[25.283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0503%)&lt;BR/&gt; 8080: (11.9497%)&lt;BR/&gt; 3848: (0.314465%)&lt;BR/&gt; 3784: (0.314465%)&lt;BR/&gt; 3783: (0.314465%)&gt;];
}
794--861[label="1;16pkt 16fpkt"];
794--2732[label="1;10pkt 10fpkt"];
794--3388[label="0.0694981;18pkt 18fpkt"];
794--4606[label="1;47pkt 47fpkt"];
794--4617[label="1;23pkt 23fpkt"];
794--4634[label="1;18pkt 18fpkt"];
794--4670[label="1;45pkt 45fpkt"];
794--4711[label="1;13pkt 13fpkt"];
794--4910[label="0.166667;1pkt 1fpkt"];
794--5109[label="1;5pkt 5fpkt"];
794--5262[label="1;67pkt 67fpkt"];
794--6608[label="1;48pkt 48fpkt"];
794--6615[label="1;23pkt 23fpkt"];
794--6650[label="1;45pkt 45fpkt"];
794--6670[label="1;14pkt 14fpkt"];
794--6779[label="0.142857;1pkt 1fpkt"];
794--6901[label="1;6pkt 6fpkt"];
794--6987[label="1;67pkt 67fpkt"];
794--7728[label="1;47pkt 47fpkt"];
794--7731[label="1;22pkt 22fpkt"];
794--7822[label="0.142857;1pkt 1fpkt"];
861--3388[label="0.125;2pkt 2fpkt"];
861--4617[label="1;16pkt 16fpkt"];
861--6615[label="1;16pkt 16fpkt"];
861--7731[label="1;16pkt 16fpkt"];
2732--3388[label="0.1;1pkt 1fpkt"];
2732--4711[label="1;10pkt 10fpkt"];
2732--6670[label="1;10pkt 10fpkt"];
4606--6608[label="1;47pkt 47fpkt"];
4606--7728[label="1;47pkt 47fpkt"];
4617--6615[label="1;23pkt 23fpkt"];
4617--7731[label="1;22pkt 22fpkt"];
4670--6650[label="1;45pkt 45fpkt"];
4711--6670[label="1;13pkt 13fpkt"];
4910--6779[label="1;6pkt 6fpkt"];
4910--7822[label="1;6pkt 6fpkt"];
5109--6901[label="1;5pkt 5fpkt"];
5262--6987[label="1;67pkt 67fpkt"];
6608--7728[label="1;47pkt 47fpkt"];
6615--7731[label="1;22pkt 22fpkt"];
6779--7822[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.9.18" src_ip="201.90.128.179" src_port="80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.251.72.181"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.73.176.181"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.205.181"/>
    </slice>
    <from sec="1120712489" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,502,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
1523[label="166.59.170.182;s;2pkt 2fpkt", shape=diamond, color=yellow];
3038[label="166.59.170.182;s;2pkt 2fpkt", shape=hexagon, color=black];
5292[label="166.59.170.182;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.170.182:1084, 195.161.150.4:22}[50%]&lt;BR/&gt;{166.59.170.182:1072, 194.236.14.70:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25%)&lt;BR/&gt; 1084: (25%)&lt;BR/&gt; 1072: (25%)&lt;BR/&gt; 22: (25%)&gt;];
}
1523--3038[label="1;2pkt 2fpkt"];
1523--5292[label="1;2pkt 2fpkt"];
3038--5292[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.70" dst_port="5050" src_ip="166.59.170.182" src_port="1072"/>
      <filter dst_ip="195.161.150.4" dst_port="22" src_ip="166.59.170.182" src_port="1084"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
1674[label="149.110.198.16;d;65pkt 65fpkt", shape=diamond, color=yellow];
3507[label="26.32.24.9;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3929[label="24.172.15.47;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5534[label="210.197.11.208;37pkt 37fpkt", shape=pentagon, color=darkviolet];
6015[label="26.32.24.9;5pkt 5fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.197.11.208:80, 149.110.198.16:*}[51.5152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7826%)&lt;BR/&gt; 443: (4.34783%)&lt;BR/&gt; 0: (1.73913%)&lt;BR/&gt; 1436: (1.30435%)&lt;BR/&gt; 1434: (1.30435%)&gt;];
}
1674--3388[label="0.0461538;3pkt 3fpkt"];
1674--3507[label="0.8;4pkt 4fpkt"];
1674--3929[label="1;3pkt 3fpkt"];
1674--5294[label="0.2;3pkt 3fpkt"];
1674--5534[label="1;37pkt 37fpkt"];
1674--6015[label="0.8;4pkt 4fpkt"];
1674--8036[label="0.973684;37pkt 37fpkt"];
3507--6015[label="1;5pkt 5fpkt"];
5534--8036[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.198.16" src_ip="210.197.11.208" src_port="80"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.216.5.183"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.79.70.183"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.10.48.184"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.97.65.184"/>
    </slice>
    <from sec="1120712432" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.34.112.184"/>
    </slice>
    <from sec="1120712531" usec="0"/>
    <to sec="1120712532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.222.149.184"/>
    </slice>
    <from sec="1120712501" usec="0"/>
    <to sec="1120712627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.134.159.184"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
1160[label="145.222.176.188;s;71pkt 71fpkt", shape=diamond, color=yellow];
5344[label="145.222.176.188;70pkt 70fpkt", shape=pentagon, color=darkviolet];
7036[label="145.222.176.188;71pkt 71fpkt", shape=invtriangle, color=brown];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.176.188:*, 24.205.172.49:80}[54.9296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9245%)&lt;BR/&gt; 1863: (4.24528%)&lt;BR/&gt; 3478: (1.41509%)&lt;BR/&gt; 33728: (0.707547%)&lt;BR/&gt; 33716: (0.707547%)&gt;];
}
1160--2143[label="0.0344828;1pkt 1fpkt"];
1160--2426[label="0.0526316;1pkt 1fpkt"];
1160--2680[label="0.0625;1pkt 1fpkt"];
1160--2980[label="1;71pkt 71fpkt"];
1160--5344[label="1;70pkt 70fpkt"];
1160--7036[label="1;71pkt 71fpkt"];
5344--7036[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="24.205.172.49" dst_port="80" src_ip="145.222.176.188"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
276[label="203.54.185.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
539[label="68.85.188.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
596[label="161.99.54.225;d;73pkt 73fpkt", shape=diamond, color=yellow];
1203[label="68.85.188.140;s;3pkt 3fpkt", shape=diamond, color=yellow];
1204[label="203.54.185.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
2068[label="68.85.188.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
2777[label="68.85.188.134;s;3pkt 3fpkt", shape=diamond, color=yellow];
4125[label="203.55.75.66;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4783[label="68.85.185.132;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4805[label="68.85.188.134;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4869[label="68.85.188.140;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4876[label="68.85.188.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4904[label="68.85.188.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5318[label="203.54.185.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5329[label="203.54.185.185;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5346[label="203.54.185.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6342[label="203.55.75.66;14pkt 14fpkt", shape=invtriangle, color=brown];
6756[label="68.85.188.140;2pkt 2fpkt", shape=invtriangle, color=brown];
7018[label="203.54.185.184;2pkt 2fpkt", shape=invtriangle, color=brown];
7037[label="203.54.185.188;1pkt 1fpkt", shape=invtriangle, color=brown];
7569[label="203.55.75.66;14pkt 14fpkt", shape=invhouse, color=bisque];
7576[label="203.54.185.67;1pkt 1fpkt", shape=invhouse, color=bisque];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1935, 161.99.54.225:*}[39.7436%]&lt;BR/&gt;{203.54.185.227:80, 161.99.54.225:*}[28.2051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.2548%)&lt;BR/&gt; 1935: (19.7452%)&lt;BR/&gt; 2347: (1.27389%)&lt;BR/&gt; 2343: (1.27389%)&lt;BR/&gt; 2337: (1.27389%)&gt;];
}
276--596[label="1;1pkt 1fpkt"];
276--5346[label="1;1pkt 1fpkt"];
276--7037[label="1;1pkt 1fpkt"];
539--596[label="1;1pkt 1fpkt"];
596--1203[label="1;3pkt 3fpkt"];
596--1204[label="1;1pkt 1fpkt"];
596--2068[label="1;1pkt 1fpkt"];
596--2777[label="0.666667;2pkt 2fpkt"];
596--3388[label="0.0136986;1pkt 1fpkt"];
596--4125[label="0.857143;12pkt 12fpkt"];
596--4783[label="0.888889;8pkt 8fpkt"];
596--4805[label="0.5;1pkt 1fpkt"];
596--4869[label="1;3pkt 3fpkt"];
596--4876[label="1;1pkt 1fpkt"];
596--4904[label="0.5;1pkt 1fpkt"];
596--5318[label="1;2pkt 2fpkt"];
596--5329[label="1;6pkt 6fpkt"];
596--5346[label="1;1pkt 1fpkt"];
596--6342[label="0.857143;12pkt 12fpkt"];
596--6756[label="1;2pkt 2fpkt"];
596--7018[label="1;2pkt 2fpkt"];
596--7037[label="1;1pkt 1fpkt"];
596--7569[label="0.857143;12pkt 12fpkt"];
596--7576[label="1;1pkt 1fpkt"];
1203--4869[label="1;3pkt 3fpkt"];
1203--6756[label="1;2pkt 2fpkt"];
2068--4876[label="1;1pkt 1fpkt"];
2777--4805[label="1;2pkt 2fpkt"];
4125--6342[label="1;14pkt 14fpkt"];
4125--7569[label="1;14pkt 14fpkt"];
4869--6756[label="1;2pkt 2fpkt"];
5318--7018[label="1;2pkt 2fpkt"];
5346--7037[label="1;1pkt 1fpkt"];
6342--7569[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.54.225" src_port="1935"/>
      <filter dst_ip="161.99.54.225" src_ip="203.54.185.227" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.24.199.188"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.79.192.190"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.74.229.190"/>
    </slice>
    <from sec="1120713271" usec="0"/>
    <to sec="1120713272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.219.62.191"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.80.139.191"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.121.168.192"/>
    </slice>
    <from sec="1120712515" usec="0"/>
    <to sec="1120713268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.226.218.192"/>
    </slice>
    <from sec="1120712785" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.199.22.193"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.99.106.193"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.40.170.193"/>
    </slice>
    <from sec="1120712820" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.128.11.194"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.194.147.195"/>
    </slice>
    <from sec="1120712517" usec="0"/>
    <to sec="1120712535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
2784[label="87.120.255.195;s;3pkt 3fpkt", shape=diamond, color=yellow];
5414[label="87.120.255.195;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7081[label="87.120.255.195;6pkt 6fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.120.255.195:80, 131.186.182.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20698: (9.375%)&lt;BR/&gt; 20697: (9.375%)&lt;BR/&gt; 20666: (9.375%)&lt;BR/&gt; 16533: (6.25%)&gt;];
}
2784--5414[label="1;3pkt 3fpkt"];
2784--7081[label="1;3pkt 3fpkt"];
5414--7081[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.177" src_ip="87.120.255.195" src_port="80"/>
    </slice>
    <from sec="1120712536" usec="0"/>
    <to sec="1120713189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
1218[label="26.128.77.196;s;6pkt 6fpkt", shape=diamond, color=yellow];
5419[label="26.128.77.196;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.128.77.196:80, 212.79.192.174:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46270: (7.69231%)&lt;BR/&gt; 46268: (7.69231%)&lt;BR/&gt; 46261: (7.69231%)&lt;BR/&gt; 46078: (7.69231%)&gt;];
}
1218--5419[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.174" src_ip="26.128.77.196" src_port="80"/>
    </slice>
    <from sec="1120712564" usec="0"/>
    <to sec="1120712815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.21.220.196"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.251.46.197"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.199.161.197"/>
    </slice>
    <from sec="1120713146" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.231.197"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
617[label="145.223.81.209;s;902pkt 902fpkt", shape=diamond, color=yellow];
633[label="211.15.66.23;d;600pkt 600fpkt", shape=diamond, color=yellow];
843[label="145.222.134.2;s;40pkt 40fpkt", shape=diamond, color=yellow];
2982[label="145.222.134.2;s;40pkt 40fpkt", shape=hexagon, color=black];
3550[label="149.177.106.13;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3553[label="149.177.193.13;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3683[label="145.223.8.24;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3748[label="149.177.105.29;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3824[label="149.177.108.37;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3906[label="145.222.146.44;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4327[label="161.99.81.84;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4489[label="145.223.62.101;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4795[label="145.223.154.133;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4819[label="145.222.88.136;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4881[label="145.222.88.142;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5085[label="145.222.149.162;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5332[label="145.223.8.186;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5566[label="145.222.120.210;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6040[label="149.177.106.13;15pkt 15fpkt", shape=invtriangle, color=brown];
6043[label="149.177.193.13;32pkt 32fpkt", shape=invtriangle, color=brown];
6110[label="145.223.8.24;11pkt 11fpkt", shape=invtriangle, color=brown];
6227[label="145.222.146.44;35pkt 35fpkt", shape=invtriangle, color=brown];
6730[label="145.222.88.136;25pkt 25fpkt", shape=invtriangle, color=brown];
6762[label="145.222.88.142;43pkt 43fpkt", shape=invtriangle, color=brown];
6886[label="145.222.149.162;7pkt 7fpkt", shape=invtriangle, color=brown];
7028[label="145.223.8.186;27pkt 27fpkt", shape=invtriangle, color=brown];
7154[label="145.222.120.210;8pkt 8fpkt", shape=invtriangle, color=brown];
7398[label="149.177.106.13;15pkt 15fpkt", shape=invhouse, color=bisque];
7436[label="145.223.8.24;12pkt 12fpkt", shape=invhouse, color=bisque];
7501[label="145.222.146.44;34pkt 34fpkt", shape=invhouse, color=bisque];
7811[label="145.222.88.142;43pkt 43fpkt", shape=invhouse, color=bisque];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.81.209:*, *:80}[49.1794%]&lt;BR/&gt;{*:*, 211.15.66.23:80}[34.352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8784%)&lt;BR/&gt; 1863: (1.68919%)&lt;BR/&gt; 443: (1.48649%)&lt;BR/&gt; 0: (0.585586%)&lt;BR/&gt; 7001: (0.202703%)&gt;];
}
617--633[label="0.0166667;10pkt 10fpkt"];
617--759[label="0.022113;9pkt 9fpkt"];
617--778[label="1;288pkt 288fpkt"];
617--798[label="0.0126316;6pkt 6fpkt"];
617--807[label="0.0175824;8pkt 8fpkt"];
617--901[label="0.00439883;3pkt 3fpkt"];
617--931[label="0.0195122;8pkt 8fpkt"];
617--944[label="0.152778;22pkt 22fpkt"];
617--991[label="0.0162866;5pkt 5fpkt"];
617--1048[label="0.00595238;2pkt 2fpkt"];
617--1258[label="0.00793651;5pkt 5fpkt"];
617--1282[label="0.00684932;1pkt 1fpkt"];
617--1294[label="0.016;4pkt 4fpkt"];
617--1296[label="0.00342466;1pkt 1fpkt"];
617--1317[label="0.0175439;2pkt 2fpkt"];
617--1344[label="0.0200803;5pkt 5fpkt"];
617--1388[label="0.0120482;1pkt 1fpkt"];
617--1395[label="0.0203488;7pkt 7fpkt"];
617--1413[label="0.0266667;4pkt 4fpkt"];
617--1520[label="0.0252525;5pkt 5fpkt"];
617--1556[label="0.00598802;1pkt 1fpkt"];
617--1620[label="0.00917431;1pkt 1fpkt"];
617--1813[label="0.0206897;3pkt 3fpkt"];
617--1831[label="0.016;2pkt 2fpkt"];
617--1846[label="0.01875;3pkt 3fpkt"];
617--1924[label="0.00943396;1pkt 1fpkt"];
617--1927[label="0.0136054;2pkt 2fpkt"];
617--1942[label="0.00714286;1pkt 1fpkt"];
617--1957[label="0.0392157;2pkt 2fpkt"];
617--2208[label="0.0242424;4pkt 4fpkt"];
617--2309[label="0.0769231;3pkt 3fpkt"];
617--2329[label="0.0111111;1pkt 1fpkt"];
617--2344[label="0.0333333;5pkt 5fpkt"];
617--2465[label="0.00980392;1pkt 1fpkt"];
617--2698[label="0.0333333;3pkt 3fpkt"];
617--2872[label="0.0222222;2pkt 2fpkt"];
617--2954[label="0.003003;1pkt 1fpkt"];
617--3059[label="0.260274;133pkt 133fpkt"];
617--3096[label="0.0136986;6pkt 6fpkt"];
617--3206[label="0.00684932;1pkt 1fpkt"];
633--779[label="0.0170455;3pkt 3fpkt"];
633--799[label="0.0031746;1pkt 1fpkt"];
633--809[label="0.0795455;14pkt 14fpkt"];
633--823[label="0.00843882;2pkt 2fpkt"];
633--842[label="0.0117647;1pkt 1fpkt"];
633--843[label="0.075;3pkt 3fpkt"];
633--855[label="0.037037;2pkt 2fpkt"];
633--1060[label="0.0740741;2pkt 2fpkt"];
633--1232[label="0.005;3pkt 3fpkt"];
633--1234[label="0.00570342;3pkt 3fpkt"];
633--1241[label="0.0138889;2pkt 2fpkt"];
633--1430[label="0.0315789;3pkt 3fpkt"];
633--1820[label="0.0794702;12pkt 12fpkt"];
633--2086[label="0.00540541;1pkt 1fpkt"];
633--2104[label="0.2;10pkt 10fpkt"];
633--2203[label="0.0533333;4pkt 4fpkt"];
633--2238[label="0.0105263;1pkt 1fpkt"];
633--2370[label="0.0909091;5pkt 5fpkt"];
633--2375[label="0.0724638;5pkt 5fpkt"];
633--2430[label="0.04;1pkt 1fpkt"];
633--2610[label="0.025;1pkt 1fpkt"];
633--2674[label="0.0555556;1pkt 1fpkt"];
633--2809[label="0.00249377;1pkt 1fpkt"];
633--2824[label="0.0253623;7pkt 7fpkt"];
633--2896[label="0.0182927;3pkt 3fpkt"];
633--2902[label="0.089172;14pkt 14fpkt"];
633--2982[label="0.075;3pkt 3fpkt"];
633--3086[label="0.005;3pkt 3fpkt"];
633--3103[label="0.162162;12pkt 12fpkt"];
633--3163[label="0.173913;8pkt 8fpkt"];
633--3227[label="0.0285714;1pkt 1fpkt"];
633--3374[label="0.0182927;3pkt 3fpkt"];
633--3482[label="0.0384615;1pkt 1fpkt"];
633--3553[label="0.0645161;2pkt 2fpkt"];
633--3683[label="0.166667;2pkt 2fpkt"];
633--3748[label="0.647059;11pkt 11fpkt"];
633--3800[label="0.1;1pkt 1fpkt"];
633--3824[label="0.619048;26pkt 26fpkt"];
633--3867[label="0.15;3pkt 3fpkt"];
633--3906[label="0.0882353;3pkt 3fpkt"];
633--3924[label="0.00245098;1pkt 1fpkt"];
633--4118[label="0.136364;3pkt 3fpkt"];
633--4120[label="0.0178571;1pkt 1fpkt"];
633--4272[label="0.441176;15pkt 15fpkt"];
633--4301[label="0.00570342;3pkt 3fpkt"];
633--4327[label="0.151515;5pkt 5fpkt"];
633--4460[label="0.0666667;1pkt 1fpkt"];
633--4470[label="0.005;3pkt 3fpkt"];
633--4476[label="0.0816667;49pkt 49fpkt"];
633--4489[label="0.333333;3pkt 3fpkt"];
633--4500[label="0.0816667;49pkt 49fpkt"];
633--4514[label="0.0593047;29pkt 29fpkt"];
633--4697[label="0.00309598;1pkt 1fpkt"];
633--4712[label="0.00540541;1pkt 1fpkt"];
633--4732[label="0.0666667;5pkt 5fpkt"];
633--4795[label="0.185185;5pkt 5fpkt"];
633--4819[label="0.44;11pkt 11fpkt"];
633--4881[label="0.0227273;1pkt 1fpkt"];
633--4883[label="0.0105263;1pkt 1fpkt"];
633--4900[label="0.013986;2pkt 2fpkt"];
633--4968[label="0.0735294;10pkt 10fpkt"];
633--4974[label="0.0309278;3pkt 3fpkt"];
633--5080[label="0.2;3pkt 3fpkt"];
633--5085[label="0.142857;1pkt 1fpkt"];
633--5115[label="0.05;1pkt 1fpkt"];
633--5311[label="0.0344828;1pkt 1fpkt"];
633--5332[label="0.821429;23pkt 23fpkt"];
633--5371[label="0.00333333;2pkt 2fpkt"];
633--5440[label="0.241379;7pkt 7fpkt"];
633--5451[label="0.0128205;1pkt 1fpkt"];
633--5532[label="0.0297872;7pkt 7fpkt"];
633--5548[label="0.0107527;2pkt 2fpkt"];
633--5566[label="0.125;1pkt 1fpkt"];
633--5574[label="0.010101;1pkt 1fpkt"];
633--5708[label="0.0212766;1pkt 1fpkt"];
633--5777[label="0.0806452;5pkt 5fpkt"];
633--5778[label="0.0555556;1pkt 1fpkt"];
633--5850[label="0.142857;5pkt 5fpkt"];
633--5869[label="0.00802139;3pkt 3fpkt"];
633--6040[label="0.0666667;1pkt 1fpkt"];
633--6043[label="0.09375;3pkt 3fpkt"];
633--6110[label="0.0909091;1pkt 1fpkt"];
633--6227[label="0.0857143;3pkt 3fpkt"];
633--6237[label="0.00245098;1pkt 1fpkt"];
633--6437[label="0.00570342;3pkt 3fpkt"];
633--6540[label="0.005;3pkt 3fpkt"];
633--6553[label="0.0816667;49pkt 49fpkt"];
633--6558[label="0.0594262;29pkt 29fpkt"];
633--6681[label="0.0657895;5pkt 5fpkt"];
633--6730[label="0.44;11pkt 11fpkt"];
633--6762[label="0.0232558;1pkt 1fpkt"];
633--6774[label="0.0138889;2pkt 2fpkt"];
633--6821[label="0.0735294;10pkt 10fpkt"];
633--6886[label="0.142857;1pkt 1fpkt"];
633--7014[label="0.0344828;1pkt 1fpkt"];
633--7028[label="0.814815;22pkt 22fpkt"];
633--7049[label="0.00333333;2pkt 2fpkt"];
633--7144[label="0.0160428;3pkt 3fpkt"];
633--7154[label="0.125;1pkt 1fpkt"];
633--7160[label="0.010101;1pkt 1fpkt"];
633--7221[label="0.0217391;1pkt 1fpkt"];
633--7259[label="0.0555556;1pkt 1fpkt"];
633--7299[label="0.142857;5pkt 5fpkt"];
633--7398[label="0.0666667;1pkt 1fpkt"];
633--7436[label="0.166667;2pkt 2fpkt"];
633--7501[label="0.0882353;3pkt 3fpkt"];
633--7506[label="0.002457;1pkt 1fpkt"];
633--7700[label="0.0816667;49pkt 49fpkt"];
633--7702[label="0.0594262;29pkt 29fpkt"];
633--7768[label="0.0657895;5pkt 5fpkt"];
633--7811[label="0.0232558;1pkt 1fpkt"];
633--7818[label="0.0138889;2pkt 2fpkt"];
633--7958[label="0.0344828;1pkt 1fpkt"];
633--7980[label="0.00333333;2pkt 2fpkt"];
633--8038[label="0.0107527;2pkt 2fpkt"];
633--8047[label="0.010101;1pkt 1fpkt"];
633--8106[label="0.105263;2pkt 2fpkt"];
843--2982[label="1;40pkt 40fpkt"];
3550--6040[label="1;14pkt 14fpkt"];
3550--7398[label="1;14pkt 14fpkt"];
3553--6043[label="1;31pkt 31fpkt"];
3683--6110[label="1;11pkt 11fpkt"];
3683--7436[label="1;12pkt 12fpkt"];
3906--6227[label="1;34pkt 34fpkt"];
3906--7501[label="1;34pkt 34fpkt"];
4819--6730[label="1;25pkt 25fpkt"];
4881--6762[label="1;43pkt 43fpkt"];
4881--7811[label="1;43pkt 43fpkt"];
5085--6886[label="1;7pkt 7fpkt"];
5332--7028[label="1;27pkt 27fpkt"];
5566--7154[label="1;8pkt 8fpkt"];
6040--7398[label="1;15pkt 15fpkt"];
6110--7436[label="1;11pkt 11fpkt"];
6227--7501[label="1;34pkt 34fpkt"];
6762--7811[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.81.209"/>
      <filter dst_ip="211.15.66.23" dst_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
1902[label="213.17.237.198;s;28pkt 28fpkt", shape=diamond, color=yellow];
5449[label="213.17.237.198;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.237.198:*, 210.30.179.110:80}[46.4286%]&lt;BR/&gt;{213.17.237.198:*, 208.7.227.220:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 22: (5.35714%)&lt;BR/&gt; 5190: (1.78571%)&lt;BR/&gt; 4892: (1.78571%)&lt;BR/&gt; 4875: (1.78571%)&gt;];
}
1902--5449[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="210.30.179.110" dst_port="80" src_ip="213.17.237.198"/>
      <filter dst_ip="208.7.227.220" dst_port="80" src_ip="213.17.237.198"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.81.156.199"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.30.186.199"/>
    </slice>
    <from sec="1120712806" usec="0"/>
    <to sec="1120713183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.37.200"/>
    </slice>
    <from sec="1120713235" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.196.1.202"/>
    </slice>
    <from sec="1120712598" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.200.97.202"/>
    </slice>
    <from sec="1120713165" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.137.2.203"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
2443[label="131.186.80.73;d;7pkt 7fpkt", shape=diamond, color=yellow];
3986[label="27.98.95.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5498[label="26.114.140.203;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5666[label="26.10.17.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6268[label="27.98.95.52;2pkt 2fpkt", shape=invtriangle, color=brown];
7527[label="27.98.95.52;2pkt 2fpkt", shape=invhouse, color=bisque];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.114.140.203:80, 131.186.80.73:*}[42.8571%]&lt;BR/&gt;{27.98.95.52:80, 131.186.80.73:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57308: (11.7647%)&lt;BR/&gt; 56923: (11.7647%)&lt;BR/&gt; 60830: (5.88235%)&lt;BR/&gt; 60824: (5.88235%)&gt;];
}
2443--3388[label="0.428571;3pkt 3fpkt"];
2443--3986[label="1;2pkt 2fpkt"];
2443--5498[label="1;3pkt 3fpkt"];
2443--5666[label="1;1pkt 1fpkt"];
2443--6268[label="1;2pkt 2fpkt"];
2443--7527[label="1;2pkt 2fpkt"];
3986--6268[label="1;2pkt 2fpkt"];
3986--7527[label="1;2pkt 2fpkt"];
6268--7527[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.80.73" src_ip="26.114.140.203" src_port="80"/>
      <filter dst_ip="131.186.80.73" src_ip="27.98.95.52" src_port="80"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
985[label="197.66.91.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
5503[label="197.66.91.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.91.204:5002, 213.17.230.40:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5002: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
985--5503[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.230.40" dst_port="20" src_ip="197.66.91.204" src_port="5002"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
2161[label="211.166.147.106;d;20pkt 20fpkt", shape=diamond, color=yellow];
2207[label="212.66.39.25;s;63pkt 63fpkt", shape=diamond, color=yellow];
3696[label="212.66.39.25;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5363[label="161.99.62.191;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6119[label="212.66.39.25;62pkt 62fpkt", shape=invtriangle, color=brown];
7441[label="212.66.39.25;63pkt 63fpkt", shape=invhouse, color=bisque];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.39.25:*, 194.108.45.81:80}[24.7312%]&lt;BR/&gt;{*:*, 211.166.147.106:1863}[21.5054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.4043%)&lt;BR/&gt; 6881: (8.86525%)&lt;BR/&gt; 1863: (4.43262%)&lt;BR/&gt; 16881: (2.12766%)&lt;BR/&gt; 6969: (1.41844%)&gt;];
}
2161--2162[label="0.05;1pkt 1fpkt"];
2161--2207[label="0.05;1pkt 1fpkt"];
2161--2794[label="0.05;1pkt 1fpkt"];
2161--2902[label="0.05;1pkt 1fpkt"];
2161--3175[label="0.05;1pkt 1fpkt"];
2161--3696[label="0.05;1pkt 1fpkt"];
2161--3809[label="0.05;1pkt 1fpkt"];
2161--4834[label="0.05;1pkt 1fpkt"];
2161--5051[label="0.05;1pkt 1fpkt"];
2161--5064[label="0.05;1pkt 1fpkt"];
2161--5363[label="0.0833333;1pkt 1fpkt"];
2161--5507[label="0.05;1pkt 1fpkt"];
2161--5698[label="0.05;1pkt 1fpkt"];
2161--5915[label="0.05;1pkt 1fpkt"];
2161--6119[label="0.05;1pkt 1fpkt"];
2161--6175[label="0.05;1pkt 1fpkt"];
2161--6878[label="0.05;1pkt 1fpkt"];
2161--7218[label="0.05;1pkt 1fpkt"];
2161--7338[label="0.05;1pkt 1fpkt"];
2161--7441[label="0.05;1pkt 1fpkt"];
2161--7474[label="0.05;1pkt 1fpkt"];
2161--7875[label="0.05;1pkt 1fpkt"];
2161--8146[label="0.05;1pkt 1fpkt"];
2207--3696[label="1;62pkt 62fpkt"];
2207--6119[label="1;62pkt 62fpkt"];
2207--7441[label="1;63pkt 63fpkt"];
3696--6119[label="1;62pkt 62fpkt"];
3696--7441[label="1;62pkt 62fpkt"];
6119--7441[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.147.106" dst_port="1863"/>
      <filter dst_ip="194.108.45.81" dst_port="80" src_ip="212.66.39.25"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.53.247.205"/>
    </slice>
    <from sec="1120712793" usec="0"/>
    <to sec="1120712882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.94.254.206"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.17.235.207"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.198.95.208"/>
    </slice>
    <from sec="1120712791" usec="0"/>
    <to sec="1120712818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.24.141.208"/>
    </slice>
    <from sec="1120712522" usec="0"/>
    <to sec="1120712899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.37.152.208"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.41.180.208"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.79.237.208"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.224.117.209"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.17.205.210"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.208.210"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
1977[label="213.17.235.210;s;42pkt 42fpkt", shape=diamond, color=yellow];
3245[label="213.17.235.210;s;42pkt 42fpkt", shape=hexagon, color=black];
5575[label="213.17.235.210;41pkt 41fpkt", shape=pentagon, color=darkviolet];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.235.210:80, *:*}[38.0952%]&lt;BR/&gt;{213.17.235.210:53, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (21.2%)&lt;BR/&gt; 80: (19.2%)&lt;BR/&gt; 113: (6%)&lt;BR/&gt; 25: (6%)&lt;BR/&gt; 3730: (4.8%)&gt;];
}
1977--3245[label="1;42pkt 42fpkt"];
1977--5575[label="1;41pkt 41fpkt"];
3245--5575[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.235.210" src_port="80"/>
      <filter src_ip="213.17.235.210" src_port="53"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.191.48.211"/>
    </slice>
    <from sec="1120712511" usec="0"/>
    <to sec="1120712516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.61.211"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.26.183.211"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.106.212"/>
    </slice>
    <from sec="1120712687" usec="0"/>
    <to sec="1120712941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.9.40.213"/>
    </slice>
    <from sec="1120712929" usec="0"/>
    <to sec="1120712947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.144.213"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.172.213"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
2636[label="84.149.200.213;s;293pkt 293fpkt", shape=diamond, color=yellow];
5616[label="84.149.200.213;325pkt 325fpkt", shape=pentagon, color=darkviolet];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.149.200.213:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4446: (0.485437%)&lt;BR/&gt; 4540: (0.404531%)&lt;BR/&gt; 3555: (0.404531%)&lt;BR/&gt; 4886: (0.323625%)&gt;];
}
2636--5616[label="0.996587;292pkt 292fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="84.149.200.213"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.246.213"/>
    </slice>
    <from sec="1120712433" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
293[label="197.65.249.213;s;4374pkt 4374fpkt", shape=diamond, color=yellow];
3202[label="197.65.249.213;s;3896pkt 3896fpkt", shape=hexagon, color=black];
5619[label="197.65.249.213;4750pkt 4750fpkt", shape=pentagon, color=darkviolet];
7179[label="197.65.249.213;4751pkt 4751fpkt", shape=invtriangle, color=brown];
8060[label="197.65.249.213;4750pkt 4750fpkt", shape=invhouse, color=bisque];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.65.249.213:1262, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1262: (50%)&gt;];
}
293--2103[label="0.0263158;1pkt 1fpkt"];
293--3202[label="1;3896pkt 3896fpkt"];
293--5619[label="0.999771;4373pkt 4373fpkt"];
293--7179[label="1;4374pkt 4374fpkt"];
293--8060[label="0.999771;4373pkt 4373fpkt"];
3202--5619[label="0.999743;3895pkt 3895fpkt"];
3202--7179[label="1;3896pkt 3896fpkt"];
3202--8060[label="0.999743;3895pkt 3895fpkt"];
5619--7179[label="1;4750pkt 4750fpkt"];
5619--8060[label="1;4750pkt 4750fpkt"];
7179--8060[label="1;4750pkt 4750fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.65.249.213" src_port="1262"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.192.99.214"/>
    </slice>
    <from sec="1120712526" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.163.107.214"/>
    </slice>
    <from sec="1120712606" usec="0"/>
    <to sec="1120713035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.168.214"/>
    </slice>
    <from sec="1120712433" usec="0"/>
    <to sec="1120713279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.80.25.216"/>
    </slice>
    <from sec="1120713213" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.20.37.216"/>
    </slice>
    <from sec="1120712516" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.197.54.216"/>
    </slice>
    <from sec="1120712828" usec="0"/>
    <to sec="1120712837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.70.92.216"/>
    </slice>
    <from sec="1120713052" usec="0"/>
    <to sec="1120713112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.208.216"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.233.64.218"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.135.66.218"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120712872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.85.1.219"/>
    </slice>
    <from sec="1120712742" usec="0"/>
    <to sec="1120712764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
1975[label="145.223.215.219;s;169pkt 169fpkt", shape=diamond, color=yellow];
5683[label="145.223.215.219;228pkt 228fpkt", shape=pentagon, color=darkviolet];
7208[label="145.223.215.219;227pkt 227fpkt", shape=invtriangle, color=brown];
8077[label="145.223.215.219;227pkt 227fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.215.219:*, 213.204.163.145:80}[56.1404%]&lt;BR/&gt;{145.223.215.219:*, *:443}[25.4386%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.9577%)&lt;BR/&gt; 443: (13.3373%)&lt;BR/&gt; 62294: (0.235018%)&lt;BR/&gt; 18863: (0.235018%)&lt;BR/&gt; 18860: (0.235018%)&gt;];
}
1975--5683[label="1;169pkt 169fpkt"];
1975--7208[label="0.994083;168pkt 168fpkt"];
1975--8077[label="0.994083;168pkt 168fpkt"];
5683--7208[label="1;227pkt 227fpkt"];
5683--8077[label="1;227pkt 227fpkt"];
7208--8077[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="145.223.215.219"/>
      <filter dst_ip="213.204.163.145" dst_port="80" src_ip="145.223.215.219"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.106.220"/>
    </slice>
    <from sec="1120712772" usec="0"/>
    <to sec="1120712796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
2107[label="161.99.226.220;s;309pkt 309fpkt", shape=diamond, color=yellow];
5688[label="161.99.226.220;326pkt 326fpkt", shape=pentagon, color=darkviolet];
7210[label="161.99.226.220;326pkt 326fpkt", shape=invtriangle, color=brown];
8079[label="161.99.226.220;326pkt 326fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.226.220:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2107--2304[label="0.00485437;1pkt 1fpkt"];
2107--2599[label="0.00487805;1pkt 1fpkt"];
2107--5688[label="0.993528;307pkt 307fpkt"];
2107--7210[label="0.993528;307pkt 307fpkt"];
2107--8079[label="0.993528;307pkt 307fpkt"];
5688--7210[label="1;326pkt 326fpkt"];
5688--8079[label="1;326pkt 326fpkt"];
7210--8079[label="1;326pkt 326fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.226.220"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.40.77.221"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
4360[label="161.99.61.87;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.61.87:*, 202.232.61.105:80}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3158: (2.08333%)&lt;BR/&gt; 3157: (2.08333%)&lt;BR/&gt; 3156: (2.08333%)&lt;BR/&gt; 3155: (2.08333%)&gt;];
}
4360--6470[label="1;24pkt 24fpkt"];
4360--7648[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="202.232.61.105" dst_port="80" src_ip="161.99.61.87"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120712552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.10.85.223"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.16.129.223"/>
    </slice>
    <from sec="1120712415" usec="0"/>
    <to sec="1120712902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.218.145.223"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.116.172.223"/>
    </slice>
    <from sec="1120712981" usec="0"/>
    <to sec="1120713013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.48.244.223"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
1542[label="113.13.31.224;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{113.13.31.224:49152, 149.68.157.180:49348}[50%]&lt;BR/&gt;{113.13.31.224:49155, 149.68.157.180:49408}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49408: (25%)&lt;BR/&gt; 49348: (25%)&lt;BR/&gt; 49155: (25%)&lt;BR/&gt; 49152: (25%)&gt;];
}
1542--2791[label="1;2pkt 2fpkt"];
1542--5723[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="49408" src_ip="113.13.31.224" src_port="49155"/>
      <filter dst_ip="149.68.157.180" dst_port="49348" src_ip="113.13.31.224" src_port="49152"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.37.81.224"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.165.225"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.107.226.225"/>
    </slice>
    <from sec="1120712647" usec="0"/>
    <to sec="1120712885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.246.54.226"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.128.76.226"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
2654[label="200.182.17.227;s;264pkt 264fpkt", shape=diamond, color=yellow];
5761[label="200.182.17.227;293pkt 293fpkt", shape=pentagon, color=darkviolet];
7250[label="200.182.17.227;294pkt 294fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.182.17.227:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3902: (0.52879%)&lt;BR/&gt; 4936: (0.352526%)&lt;BR/&gt; 4715: (0.352526%)&lt;BR/&gt; 4572: (0.352526%)&gt;];
}
2654--5761[label="0.996212;263pkt 263fpkt"];
2654--7250[label="1;264pkt 264fpkt"];
5761--7250[label="1;293pkt 293fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.182.17.227"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.35.68.227"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120712492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.166.74.227"/>
    </slice>
    <from sec="1120712962" usec="0"/>
    <to sec="1120712975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.80.177.227"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.240.179.227"/>
    </slice>
    <from sec="1120713072" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.24.145.228"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.8.208.229"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.108.230"/>
    </slice>
    <from sec="1120712532" usec="0"/>
    <to sec="1120713204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.59.148.230"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.87.79.232"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120712901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
1437[label="149.177.109.232;s;86pkt 86fpkt", shape=diamond, color=yellow];
2748[label="26.128.74.72;d;26pkt 26fpkt", shape=diamond, color=yellow];
3015[label="149.177.109.232;s;45pkt 45fpkt", shape=hexagon, color=black];
5795[label="149.177.109.232;117pkt 117fpkt", shape=pentagon, color=darkviolet];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.109.232:*, 26.128.74.72:80}[35.8974%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3577%)&lt;BR/&gt; 81: (1.64234%)&lt;BR/&gt; 2492: (0.547445%)&lt;BR/&gt; 2490: (0.547445%)&lt;BR/&gt; 2488: (0.547445%)&gt;];
}
1437--2748[label="1;26pkt 26fpkt"];
1437--3015[label="1;45pkt 45fpkt"];
1437--5795[label="1;86pkt 86fpkt"];
2748--5795[label="1;26pkt 26fpkt"];
3015--5795[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="26.128.74.72" dst_port="80" src_ip="149.177.109.232"/>
    </slice>
    <from sec="1120712459" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
2166[label="200.84.189.232;s;336pkt 336fpkt", shape=diamond, color=yellow];
5801[label="200.84.189.232;335pkt 335fpkt", shape=pentagon, color=darkviolet];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.84.189.232:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4767: (0.298063%)&lt;BR/&gt; 3944: (0.298063%)&lt;BR/&gt; 3920: (0.298063%)&lt;BR/&gt; 3610: (0.298063%)&gt;];
}
2166--5801[label="1;335pkt 335fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.84.189.232"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
1017[label="6.3.67.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
5805[label="6.3.67.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7272[label="6.3.67.233;1pkt 1fpkt", shape=invtriangle, color=brown];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.3.67.233:64606, 149.68.157.180:41395}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64606: (50%)&lt;BR/&gt; 41395: (50%)&gt;];
}
1017--2791[label="1;1pkt 1fpkt"];
1017--5805[label="1;1pkt 1fpkt"];
1017--7272[label="1;1pkt 1fpkt"];
5805--7272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="41395" src_ip="6.3.67.233" src_port="64606"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.66.154.233"/>
    </slice>
    <from sec="1120712541" usec="0"/>
    <to sec="1120712587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.58.64.234"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.102.186.234"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.105.235"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.194.166.235"/>
    </slice>
    <from sec="1120712946" usec="0"/>
    <to sec="1120712949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
1967[label="30.185.31.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.185.31.236:37448, 149.68.157.180:39955}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39955: (50%)&lt;BR/&gt; 37448: (50%)&gt;];
}
1967--2791[label="1;1pkt 1fpkt"];
1967--5827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="39955" src_ip="30.185.31.236" src_port="37448"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
2153[label="84.148.125.236;s;307pkt 307fpkt", shape=diamond, color=yellow];
5829[label="84.148.125.236;377pkt 377fpkt", shape=pentagon, color=darkviolet];
7285[label="84.148.125.236;375pkt 375fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.148.125.236:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3467: (0.519358%)&lt;BR/&gt; 3391: (0.519358%)&lt;BR/&gt; 3732: (0.424929%)&lt;BR/&gt; 4457: (0.377715%)&gt;];
}
2153--5829[label="0.996743;306pkt 306fpkt"];
2153--7285[label="1;307pkt 307fpkt"];
5829--7285[label="0.997333;374pkt 374fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="84.148.125.236"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.169.156.236"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.16.180.236"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.69.1.238"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.137.37.238"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.147.38.238"/>
    </slice>
    <from sec="1120712649" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.66.238"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.151.147.238"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.89.10.239"/>
    </slice>
    <from sec="1120712454" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
2630[label="84.65.18.240;s;235pkt 235fpkt", shape=diamond, color=yellow];
5852[label="84.65.18.240;257pkt 257fpkt", shape=pentagon, color=darkviolet];
7301[label="84.65.18.240;255pkt 255fpkt", shape=invtriangle, color=brown];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.65.18.240:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2086: (0.401606%)&lt;BR/&gt; 2053: (0.401606%)&lt;BR/&gt; 2049: (0.401606%)&lt;BR/&gt; 2004: (0.401606%)&gt;];
}
2630--5852[label="0.995745;234pkt 234fpkt"];
2630--7301[label="0.991489;233pkt 233fpkt"];
5852--7301[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="84.65.18.240"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.205.143.240"/>
    </slice>
    <from sec="1120712415" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851717,2.00653,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
222[label="193.141.83.241;s;1811pkt 1811fpkt", shape=diamond, color=yellow];
2849[label="193.141.83.241;s;1411pkt 1411fpkt", shape=hexagon, color=black];
5859[label="193.141.83.241;1949pkt 1949fpkt", shape=pentagon, color=darkviolet];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.141.83.241:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48125: (0.0870238%)&lt;BR/&gt; 37840: (0.0870238%)&lt;BR/&gt; 36068: (0.0870238%)&lt;BR/&gt; 34182: (0.0773545%)&gt;];
}
222--349[label="0.00303951;1pkt 1fpkt"];
222--2849[label="1;1411pkt 1411fpkt"];
222--3040[label="0.00598802;1pkt 1fpkt"];
222--5859[label="0.999448;1810pkt 1810fpkt"];
2849--3040[label="0.00598802;1pkt 1fpkt"];
2849--5859[label="0.999291;1410pkt 1410fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.141.83.241"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
2456[label="84.148.125.241;s;344pkt 344fpkt", shape=diamond, color=yellow];
5862[label="84.148.125.241;372pkt 372fpkt", shape=pentagon, color=darkviolet];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.148.125.241:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3343: (0.418994%)&lt;BR/&gt; 4743: (0.27933%)&lt;BR/&gt; 4323: (0.27933%)&lt;BR/&gt; 4312: (0.27933%)&gt;];
}
2456--5862[label="1;344pkt 344fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="84.148.125.241"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.177.105.244"/>
    </slice>
    <from sec="1120712446" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.110.213.246"/>
    </slice>
    <from sec="1120713257" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.144.234.246"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.90.110.247"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.68.157.247"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.182.2.248"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.179.91.248"/>
    </slice>
    <from sec="1120712787" usec="0"/>
    <to sec="1120712806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.90.188.248"/>
    </slice>
    <from sec="1120712953" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.56.88.250"/>
    </slice>
    <from sec="1120712458" usec="0"/>
    <to sec="1120713268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.133.1.253"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.223.9.253"/>
    </slice>
    <from sec="1120713260" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.129.175.254"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.88.16.255"/>
    </slice>
    <from sec="1120712474" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
3396[label="145.223.15.0;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5958[label="145.223.15.0;13pkt 13fpkt", shape=invtriangle, color=brown];
7368[label="145.223.15.0;12pkt 12fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.15.0:*, 202.177.150.253:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2419: (4.05405%)&lt;BR/&gt; 2418: (4.05405%)&lt;BR/&gt; 2416: (4.05405%)&lt;BR/&gt; 2415: (4.05405%)&gt;];
}
3396--5958[label="1;12pkt 12fpkt"];
3396--7368[label="1;12pkt 12fpkt"];
5958--7368[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="202.177.150.253" dst_port="80" src_ip="145.223.15.0"/>
    </slice>
    <from sec="1120713216" usec="0"/>
    <to sec="1120713271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.133.150.0"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.74.116.1"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
2192[label="149.177.177.1;s;1237pkt 1237fpkt", shape=diamond, color=yellow];
3420[label="149.177.177.1;1241pkt 1241fpkt", shape=pentagon, color=darkviolet];
5975[label="149.177.177.1;1241pkt 1241fpkt", shape=invtriangle, color=brown];
7374[label="149.177.177.1;1240pkt 1240fpkt", shape=invhouse, color=bisque];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.177.1:53, *:1025}[28.9855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.3529%)&lt;BR/&gt; 1025: (14.5191%)&lt;BR/&gt; 32769: (8.18713%)&lt;BR/&gt; 1031: (3.5491%)&lt;BR/&gt; 1028: (1.5729%)&gt;];
}
2192--3387[label="0.626516;775pkt 775fpkt"];
2192--3420[label="0.999192;1236pkt 1236fpkt"];
2192--5975[label="0.999192;1236pkt 1236fpkt"];
2192--7374[label="0.998383;1235pkt 1235fpkt"];
3420--5975[label="1;1241pkt 1241fpkt"];
3420--7374[label="1;1240pkt 1240fpkt"];
5975--7374[label="1;1240pkt 1240fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="149.177.177.1" src_port="53"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
3445[label="161.99.80.4;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5984[label="161.99.80.4;13pkt 13fpkt", shape=invtriangle, color=brown];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.80.4:*, 194.217.207.243:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3873: (3.84615%)&lt;BR/&gt; 3872: (3.84615%)&lt;BR/&gt; 3871: (3.84615%)&lt;BR/&gt; 3856: (3.84615%)&gt;];
}
3445--5984[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="194.217.207.243" dst_port="80" src_ip="161.99.80.4"/>
    </slice>
    <from sec="1120712484" usec="0"/>
    <to sec="1120713008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
3457[label="113.18.121.5;256pkt 256fpkt", shape=pentagon, color=darkviolet];
5988[label="113.18.121.5;256pkt 256fpkt", shape=invtriangle, color=brown];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{113.18.121.5:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 64702: (0.390625%)&lt;BR/&gt; 64375: (0.390625%)&lt;BR/&gt; 64318: (0.390625%)&lt;BR/&gt; 64060: (0.390625%)&gt;];
}
3457--5988[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="113.18.121.5"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
3466[label="161.99.82.6;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5990[label="161.99.82.6;55pkt 55fpkt", shape=invtriangle, color=brown];
7380[label="161.99.82.6;55pkt 55fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.82.6:3827, *:*}[94.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3827: (47.2727%)&lt;BR/&gt; 49247: (1.81818%)&lt;BR/&gt; 8080: (1.81818%)&lt;BR/&gt; 62506: (0.909091%)&lt;BR/&gt; 61252: (0.909091%)&gt;];
}
3466--5990[label="1;55pkt 55fpkt"];
3466--7380[label="1;55pkt 55fpkt"];
5990--7380[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.82.6" src_port="3827"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.134.107.6"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.14.115.6"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
3476[label="83.13.220.6;166pkt 166fpkt", shape=pentagon, color=darkviolet];
5996[label="83.13.220.6;165pkt 165fpkt", shape=invtriangle, color=brown];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.13.220.6:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3476--5996[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="83.13.220.6" src_port="1026"/>
    </slice>
    <from sec="1120712668" usec="0"/>
    <to sec="1120712695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.185.238.7"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.24.17.8"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
3492[label="161.99.63.8;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6006[label="161.99.63.8;20pkt 20fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.63.8:*, 194.229.197.161:80}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5%)&lt;BR/&gt; 2349: (2.5%)&lt;BR/&gt; 2348: (2.5%)&lt;BR/&gt; 2331: (2.5%)&lt;BR/&gt; 2303: (2.5%)&gt;];
}
3492--6006[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="194.229.197.161" dst_port="80" src_ip="161.99.63.8"/>
    </slice>
    <from sec="1120712430" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
2527[label="161.99.81.89;s;37pkt 37fpkt", shape=diamond, color=yellow];
4374[label="161.99.81.89;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5396[label="161.99.66.194;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6480[label="161.99.81.89;37pkt 37fpkt", shape=invtriangle, color=brown];
7654[label="161.99.81.89;36pkt 36fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.81.89:*, 218.3.197.86:80}[37.5%]&lt;BR/&gt;{161.99.66.194:*, 218.3.197.86:80}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2608: (1.20482%)&lt;BR/&gt; 2607: (1.20482%)&lt;BR/&gt; 2606: (1.20482%)&lt;BR/&gt; 2605: (1.20482%)&gt;];
}
2527--4374[label="1;37pkt 37fpkt"];
2527--6480[label="1;37pkt 37fpkt"];
2527--7654[label="1;36pkt 36fpkt"];
4374--6480[label="1;37pkt 37fpkt"];
4374--7654[label="1;36pkt 36fpkt"];
5396--7068[label="1;18pkt 18fpkt"];
5396--7989[label="1;18pkt 18fpkt"];
6480--7654[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="218.3.197.86" dst_port="80" src_ip="161.99.81.89"/>
      <filter dst_ip="218.3.197.86" dst_port="80" src_ip="161.99.66.194"/>
    </slice>
    <from sec="1120712880" usec="0"/>
    <to sec="1120713140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.48.101.9"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.87.169.9"/>
    </slice>
    <from sec="1120712655" usec="0"/>
    <to sec="1120712743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
3516[label="145.223.11.10;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6019[label="145.223.11.10;11pkt 11fpkt", shape=invtriangle, color=brown];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.11.10:*, 211.166.125.251:80}[45.4545%]&lt;BR/&gt;{145.223.11.10:*, 27.57.195.97:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2901: (4.7619%)&lt;BR/&gt; 2900: (4.7619%)&lt;BR/&gt; 2899: (4.7619%)&lt;BR/&gt; 2898: (4.7619%)&gt;];
}
3516--6019[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.125.251" dst_port="80" src_ip="145.223.11.10"/>
      <filter dst_ip="27.57.195.97" dst_port="80" src_ip="145.223.11.10"/>
    </slice>
    <from sec="1120713236" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.238.10"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
3531[label="25.212.92.11;74pkt 74fpkt", shape=pentagon, color=darkviolet];
6029[label="25.212.92.11;75pkt 75fpkt", shape=invtriangle, color=brown];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.212.92.11:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1208: (1.34228%)&lt;BR/&gt; 4904: (0.671141%)&lt;BR/&gt; 4832: (0.671141%)&lt;BR/&gt; 4778: (0.671141%)&gt;];
}
3531--6029[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="25.212.92.11"/>
    </slice>
    <from sec="1120713021" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
3539[label="149.177.106.12;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6035[label="149.177.106.12;15pkt 15fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.106.12:15327, 200.138.160.254:*}[20%]&lt;BR/&gt;{149.177.106.12:*, 193.34.24.12:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15327: (34.4828%)&lt;BR/&gt; 1207: (6.89655%)&lt;BR/&gt; 1863: (5.17241%)&lt;BR/&gt; 64211: (3.44828%)&lt;BR/&gt; 64209: (3.44828%)&gt;];
}
3539--6035[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="193.34.24.12" src_ip="149.177.106.12"/>
      <filter dst_ip="200.138.160.254" src_ip="149.177.106.12" src_port="15327"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
3552[label="202.37.183.13;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6042[label="202.37.183.13;18pkt 18fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.37.183.13:80, 166.59.140.223:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63755: (2.85714%)&lt;BR/&gt; 63341: (2.85714%)&lt;BR/&gt; 61613: (2.85714%)&lt;BR/&gt; 61173: (2.85714%)&gt;];
}
3552--6042[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.140.223" src_ip="202.37.183.13" src_port="80"/>
    </slice>
    <from sec="1120712496" usec="0"/>
    <to sec="1120712676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
3559[label="212.18.73.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6045[label="212.18.73.14;5pkt 5fpkt", shape=invtriangle, color=brown];
7401[label="212.18.73.14;5pkt 5fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.73.14:80, 212.79.192.209:4066}[20%]&lt;BR/&gt;{212.18.73.14:80, 212.79.192.208:53752}[20%]&lt;BR/&gt;{212.18.73.14:80, 212.79.192.208:53753}[20%]&lt;BR/&gt;{212.18.73.14:80, 212.79.192.208:54325}[20%]&lt;BR/&gt;{212.18.73.14:80, 212.79.192.208:54940}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54940: (10%)&lt;BR/&gt; 54325: (10%)&lt;BR/&gt; 53753: (10%)&lt;BR/&gt; 53752: (10%)&gt;];
}
3559--6045[label="1;5pkt 5fpkt"];
3559--7401[label="1;5pkt 5fpkt"];
6045--7401[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.208" dst_port="54940" src_ip="212.18.73.14" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="54325" src_ip="212.18.73.14" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="53753" src_ip="212.18.73.14" src_port="80"/>
      <filter dst_ip="212.79.192.208" dst_port="53752" src_ip="212.18.73.14" src_port="80"/>
      <filter dst_ip="212.79.192.209" dst_port="4066" src_ip="212.18.73.14" src_port="80"/>
    </slice>
    <from sec="1120713159" usec="0"/>
    <to sec="1120713211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.136.136.15"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.210.166.15"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
3576[label="134.33.76.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6055[label="134.33.76.16;5pkt 5fpkt", shape=invtriangle, color=brown];
7408[label="134.33.76.16;5pkt 5fpkt", shape=invhouse, color=bisque];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.33.76.16:80, 145.223.168.25:1070}[20%]&lt;BR/&gt;{134.33.76.16:80, 145.223.168.25:1078}[20%]&lt;BR/&gt;{134.33.76.16:80, 145.223.168.25:1079}[20%]&lt;BR/&gt;{134.33.76.16:80, 145.223.168.25:1085}[20%]&lt;BR/&gt;{134.33.76.16:80, 145.223.168.25:1086}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1086: (10%)&lt;BR/&gt; 1085: (10%)&lt;BR/&gt; 1079: (10%)&lt;BR/&gt; 1078: (10%)&gt;];
}
3576--6055[label="1;5pkt 5fpkt"];
3576--7408[label="1;5pkt 5fpkt"];
6055--7408[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.168.25" dst_port="1086" src_ip="134.33.76.16" src_port="80"/>
      <filter dst_ip="145.223.168.25" dst_port="1085" src_ip="134.33.76.16" src_port="80"/>
      <filter dst_ip="145.223.168.25" dst_port="1079" src_ip="134.33.76.16" src_port="80"/>
      <filter dst_ip="145.223.168.25" dst_port="1078" src_ip="134.33.76.16" src_port="80"/>
      <filter dst_ip="145.223.168.25" dst_port="1070" src_ip="134.33.76.16" src_port="80"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120712462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.69.76.16"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120712789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
3580[label="84.26.146.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6058[label="84.26.146.16;2pkt 2fpkt", shape=invtriangle, color=brown];
7410[label="84.26.146.16;2pkt 2fpkt", shape=invhouse, color=bisque];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.26.146.16:13566, 131.186.182.28:80}[50%]&lt;BR/&gt;{84.26.146.16:13977, 131.186.182.28:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13977: (25%)&lt;BR/&gt; 13566: (25%)&gt;];
}
3580--6058[label="1;2pkt 2fpkt"];
3580--7410[label="1;2pkt 2fpkt"];
6058--7410[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.28" dst_port="80" src_ip="84.26.146.16" src_port="13977"/>
      <filter dst_ip="131.186.182.28" dst_port="80" src_ip="84.26.146.16" src_port="13566"/>
    </slice>
    <from sec="1120713241" usec="0"/>
    <to sec="1120713268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
2073[label="27.52.173.16;s;3pkt 3fpkt", shape=diamond, color=yellow];
3581[label="27.52.173.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6059[label="27.52.173.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.52.173.16:80, 131.186.160.244:2864}[33.3333%]&lt;BR/&gt;{27.52.173.16:80, 131.186.160.244:2865}[33.3333%]&lt;BR/&gt;{27.52.173.16:80, 131.186.160.244:2868}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2868: (21.4286%)&lt;BR/&gt; 2865: (21.4286%)&lt;BR/&gt; 2864: (7.14286%)&gt;];
}
2073--3388[label="0.333333;1pkt 1fpkt"];
2073--3581[label="1;2pkt 2fpkt"];
2073--6059[label="1;2pkt 2fpkt"];
2073--7411[label="1;2pkt 2fpkt"];
3581--6059[label="1;2pkt 2fpkt"];
3581--7411[label="1;2pkt 2fpkt"];
6059--7411[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.160.244" dst_port="2868" src_ip="27.52.173.16" src_port="80"/>
      <filter dst_ip="131.186.160.244" dst_port="2865" src_ip="27.52.173.16" src_port="80"/>
      <filter dst_ip="131.186.160.244" dst_port="2864" src_ip="27.52.173.16" src_port="80"/>
    </slice>
    <from sec="1120712935" usec="0"/>
    <to sec="1120713200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
3593[label="161.99.57.17;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6066[label="161.99.57.17;23pkt 23fpkt", shape=invtriangle, color=brown];
7415[label="161.99.57.17;23pkt 23fpkt", shape=invhouse, color=bisque];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.57.17:*, 26.21.43.13:143}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (50%)&lt;BR/&gt; 3432: (2.14286%)&lt;BR/&gt; 3431: (2.14286%)&lt;BR/&gt; 3430: (2.14286%)&lt;BR/&gt; 3429: (2.14286%)&gt;];
}
3593--6066[label="1;23pkt 23fpkt"];
3593--7415[label="1;23pkt 23fpkt"];
6066--7415[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="26.21.43.13" dst_port="143" src_ip="161.99.57.17"/>
    </slice>
    <from sec="1120712450" usec="0"/>
    <to sec="1120713256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
3595[label="214.182.75.17;106pkt 106fpkt", shape=pentagon, color=darkviolet];
6067[label="214.182.75.17;107pkt 107fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.182.75.17:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3595--6067[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.182.75.17" src_port="1036"/>
    </slice>
    <from sec="1120712832" usec="0"/>
    <to sec="1120712850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
3601[label="166.59.153.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6069[label="166.59.153.17;1pkt 1fpkt", shape=invtriangle, color=brown];
7417[label="166.59.153.17;1pkt 1fpkt", shape=invhouse, color=bisque];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.153.17:1109, 194.236.14.80:5050}[50%]&lt;BR/&gt;{166.59.153.17:1982, 212.245.233.170:6665}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (37.5%)&lt;BR/&gt; 1109: (37.5%)&lt;BR/&gt; 6665: (12.5%)&lt;BR/&gt; 1982: (12.5%)&gt;];
}
3601--6069[label="1;1pkt 1fpkt"];
3601--7417[label="1;1pkt 1fpkt"];
6069--7417[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.245.233.170" dst_port="6665" src_ip="166.59.153.17" src_port="1982"/>
      <filter dst_ip="194.236.14.80" dst_port="5050" src_ip="166.59.153.17" src_port="1109"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
1845[label="212.66.48.18;s;343pkt 343fpkt", shape=diamond, color=yellow];
3164[label="212.66.48.18;s;289pkt 289fpkt", shape=hexagon, color=black];
3609[label="212.66.48.18;366pkt 366fpkt", shape=pentagon, color=darkviolet];
6072[label="212.66.48.18;366pkt 366fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.48.18:2637, *:53}[72.2071%]&lt;BR/&gt;{212.66.48.18:53, *:*}[23.7057%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7801%)&lt;BR/&gt; 2637: (35.9971%)&lt;BR/&gt; 0: (3.59238%)&lt;BR/&gt; 1024: (0.879765%)&lt;BR/&gt; 32769: (0.58651%)&gt;];
}
1845--1880[label="0.00900901;1pkt 1fpkt"];
1845--2126[label="0.00925926;1pkt 1fpkt"];
1845--2176[label="0.0102041;1pkt 1fpkt"];
1845--2415[label="0.00990099;1pkt 1fpkt"];
1845--2425[label="0.00909091;1pkt 1fpkt"];
1845--2435[label="0.00961538;1pkt 1fpkt"];
1845--2598[label="0.0153846;1pkt 1fpkt"];
1845--2600[label="0.00961538;1pkt 1fpkt"];
1845--2627[label="0.02;1pkt 1fpkt"];
1845--3164[label="1;289pkt 289fpkt"];
1845--3318[label="0.00854701;1pkt 1fpkt"];
1845--3384[label="0.0816327;28pkt 28fpkt"];
1845--3385[label="0.00291545;1pkt 1fpkt"];
1845--3387[label="0.0145773;5pkt 5fpkt"];
1845--3391[label="0.00291545;1pkt 1fpkt"];
1845--3394[label="0.00291545;1pkt 1fpkt"];
1845--3609[label="0.997085;342pkt 342fpkt"];
1845--6072[label="0.997085;342pkt 342fpkt"];
3164--3318[label="0.00854701;1pkt 1fpkt"];
3164--3384[label="0.0968858;28pkt 28fpkt"];
3164--3385[label="0.00346021;1pkt 1fpkt"];
3164--3387[label="0.0138408;4pkt 4fpkt"];
3164--3391[label="0.00346021;1pkt 1fpkt"];
3164--3394[label="0.00346021;1pkt 1fpkt"];
3164--3609[label="0.99654;288pkt 288fpkt"];
3164--6072[label="0.99654;288pkt 288fpkt"];
3609--6072[label="1;366pkt 366fpkt"];
</description>
    <slice>
      <filter src_ip="212.66.48.18" src_port="53"/>
      <filter dst_port="53" src_ip="212.66.48.18" src_port="2637"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
3612[label="149.177.108.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6074[label="149.177.108.18;3pkt 3fpkt", shape=invtriangle, color=brown];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.108.18:1444, 211.166.150.103:1863}[33.3333%]&lt;BR/&gt;{149.177.108.18:1331, 211.166.150.110:1863}[33.3333%]&lt;BR/&gt;{149.177.108.18:1047, 211.166.150.129:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1444: (16.6667%)&lt;BR/&gt; 1331: (16.6667%)&lt;BR/&gt; 1047: (16.6667%)&gt;];
}
3612--6074[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.129" dst_port="1863" src_ip="149.177.108.18" src_port="1047"/>
      <filter dst_ip="211.166.150.110" dst_port="1863" src_ip="149.177.108.18" src_port="1331"/>
      <filter dst_ip="211.166.150.103" dst_port="1863" src_ip="149.177.108.18" src_port="1444"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.116.215.18"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
725[label="213.17.228.18;s;385pkt 385fpkt", shape=diamond, color=yellow];
1356[label="222.13.205.50;s;278pkt 278fpkt", shape=diamond, color=yellow];
2220[label="209.89.78.102;d;13pkt 13fpkt", shape=diamond, color=yellow];
3436[label="213.17.229.2;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3586[label="213.17.226.16;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3621[label="213.17.228.18;388pkt 388fpkt", shape=pentagon, color=darkviolet];
4638[label="213.17.224.116;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5286[label="212.157.1.182;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6063[label="213.17.226.16;32pkt 32fpkt", shape=invtriangle, color=brown];
6080[label="213.17.228.18;387pkt 387fpkt", shape=invtriangle, color=brown];
6629[label="213.17.224.116;51pkt 51fpkt", shape=invtriangle, color=brown];
7412[label="213.17.226.16;31pkt 31fpkt", shape=invhouse, color=bisque];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.228.18:0, *:0}[48.805%]&lt;BR/&gt;{222.13.205.50:0, *:0}[34.9686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
725--1949[label="0.0625;1pkt 1fpkt"];
725--2220[label="0.0769231;1pkt 1fpkt"];
725--2734[label="0.0714286;1pkt 1fpkt"];
725--3621[label="1;385pkt 385fpkt"];
725--6080[label="0.997403;384pkt 384fpkt"];
1356--1516[label="0.00359712;1pkt 1fpkt"];
1356--2220[label="0.0769231;1pkt 1fpkt"];
1356--2304[label="0.00485437;1pkt 1fpkt"];
1356--2599[label="0.00487805;1pkt 1fpkt"];
2220--3436[label="0.0769231;1pkt 1fpkt"];
2220--3586[label="0.0769231;1pkt 1fpkt"];
2220--3621[label="0.0769231;1pkt 1fpkt"];
2220--4486[label="0.142857;1pkt 1fpkt"];
2220--4638[label="0.0769231;1pkt 1fpkt"];
2220--4821[label="0.1;1pkt 1fpkt"];
2220--4985[label="0.0769231;1pkt 1fpkt"];
2220--5286[label="0.142857;1pkt 1fpkt"];
2220--5638[label="0.0769231;1pkt 1fpkt"];
2220--6063[label="0.0769231;1pkt 1fpkt"];
2220--6080[label="0.0769231;1pkt 1fpkt"];
2220--6629[label="0.0769231;1pkt 1fpkt"];
2220--6832[label="0.0769231;1pkt 1fpkt"];
2220--7189[label="0.0769231;1pkt 1fpkt"];
2220--7412[label="0.0769231;1pkt 1fpkt"];
2220--8065[label="0.0769231;1pkt 1fpkt"];
3586--6063[label="1;31pkt 31fpkt"];
3586--7412[label="1;31pkt 31fpkt"];
3621--6080[label="1;387pkt 387fpkt"];
4638--6629[label="1;51pkt 51fpkt"];
6063--7412[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.228.18"/>
      <filter src_ip="222.13.205.50"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
249[label="3.32.63.122;d;7pkt 7fpkt", shape=diamond, color=yellow];
250[label="161.99.34.235;s;16pkt 16fpkt", shape=diamond, color=yellow];
3626[label="161.99.34.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6082[label="161.99.34.19;1pkt 1fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.34.235:51570, *:*}[61.9048%]&lt;BR/&gt;{*:*, 3.32.63.122:3713}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51570: (26.9231%)&lt;BR/&gt; 3713: (13.4615%)&lt;BR/&gt; 4719: (5.76923%)&lt;BR/&gt; 1072: (5.76923%)&lt;BR/&gt; 1526: (3.84615%)&gt;];
}
249--250[label="0.285714;2pkt 2fpkt"];
249--3626[label="1;2pkt 2fpkt"];
249--6082[label="1;1pkt 1fpkt"];
250--1826[label="0.0625;1pkt 1fpkt"];
3626--6082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.34.235" src_port="51570"/>
      <filter dst_ip="3.32.63.122" dst_port="3713"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
3629[label="26.25.80.19;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6083[label="26.25.80.19;17pkt 17fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.25.80.19:80, 131.186.182.177:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21555: (2.85714%)&lt;BR/&gt; 21551: (2.85714%)&lt;BR/&gt; 21422: (2.85714%)&lt;BR/&gt; 21395: (2.85714%)&gt;];
}
3629--6083[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.177" src_ip="26.25.80.19" src_port="80"/>
    </slice>
    <from sec="1120712512" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
3632[label="161.107.109.19;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6084[label="161.107.109.19;17pkt 17fpkt", shape=invtriangle, color=brown];
7424[label="161.107.109.19;17pkt 17fpkt", shape=invhouse, color=bisque];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.109.19:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52720: (2.88462%)&lt;BR/&gt; 51578: (2.88462%)&lt;BR/&gt; 49335: (2.88462%)&lt;BR/&gt; 49120: (2.88462%)&gt;];
}
3632--6084[label="1;17pkt 17fpkt"];
3632--7424[label="1;17pkt 17fpkt"];
6084--7424[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="161.107.109.19" src_port="80"/>
    </slice>
    <from sec="1120712627" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.84.131.19"/>
    </slice>
    <from sec="1120712878" usec="0"/>
    <to sec="1120713276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
3643[label="82.214.106.20;228pkt 228fpkt", shape=pentagon, color=darkviolet];
6089[label="82.214.106.20;228pkt 228fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.214.106.20:14462, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14462: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3643--6089[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.214.106.20" src_port="14462"/>
    </slice>
    <from sec="1120713191" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.214.8.21"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
3655[label="145.222.24.21;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6093[label="145.222.24.21;4pkt 4fpkt", shape=invtriangle, color=brown];
7429[label="145.222.24.21;4pkt 4fpkt", shape=invhouse, color=bisque];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.24.21:1047, 211.166.147.70:1863}[25%]&lt;BR/&gt;{145.222.24.21:2059, 24.151.80.212:80}[25%]&lt;BR/&gt;{145.222.24.21:2061, 24.151.80.213:80}[25%]&lt;BR/&gt;{145.222.24.21:2060, 24.151.80.236:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 2061: (12.5%)&lt;BR/&gt; 2060: (12.5%)&lt;BR/&gt; 2059: (12.5%)&lt;BR/&gt; 1863: (12.5%)&gt;];
}
3655--6093[label="1;4pkt 4fpkt"];
3655--7429[label="1;4pkt 4fpkt"];
6093--7429[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="24.151.80.236" dst_port="80" src_ip="145.222.24.21" src_port="2060"/>
      <filter dst_ip="24.151.80.213" dst_port="80" src_ip="145.222.24.21" src_port="2061"/>
      <filter dst_ip="24.151.80.212" dst_port="80" src_ip="145.222.24.21" src_port="2059"/>
      <filter dst_ip="211.166.147.70" dst_port="1863" src_ip="145.222.24.21" src_port="1047"/>
    </slice>
    <from sec="1120712441" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.76.3.23"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
3685[label="145.223.49.24;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6111[label="145.223.49.24;10pkt 10fpkt", shape=invtriangle, color=brown];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.49.24:80, 28.153.200.105:*}[40%]&lt;BR/&gt;{145.223.49.24:80, 222.142.205.15:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57716: (5%)&lt;BR/&gt; 56087: (5%)&lt;BR/&gt; 50759: (5%)&lt;BR/&gt; 46507: (5%)&gt;];
}
3685--6111[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="28.153.200.105" src_ip="145.223.49.24" src_port="80"/>
      <filter dst_ip="222.142.205.15" src_ip="145.223.49.24" src_port="80"/>
    </slice>
    <from sec="1120712475" usec="0"/>
    <to sec="1120713085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.46.165.24"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
3692[label="68.85.188.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6118[label="68.85.188.24;1pkt 1fpkt", shape=invtriangle, color=brown];
7440[label="68.85.188.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.85.188.24:80, 212.79.237.218:22153}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22153: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3692--6118[label="1;1pkt 1fpkt"];
3692--7440[label="1;1pkt 1fpkt"];
6118--7440[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.237.218" dst_port="22153" src_ip="68.85.188.24" src_port="80"/>
    </slice>
    <from sec="1120713301" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
6720[label="145.222.120.133;41pkt 41fpkt", shape=invtriangle, color=brown];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.120.133:*, 222.141.135.197:515}[85.3659%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 515: (42.6829%)&lt;BR/&gt; 1863: (4.87805%)&lt;BR/&gt; 80: (2.43902%)&lt;BR/&gt; 2541: (1.21951%)&lt;BR/&gt; 2369: (1.21951%)&gt;];
}
6720--7795[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="222.141.135.197" dst_port="515" src_ip="145.222.120.133"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.178.227.26"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
3731[label="145.223.69.28;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6137[label="145.223.69.28;6pkt 6fpkt", shape=invtriangle, color=brown];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.69.28:*, 194.173.248.132:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1447: (9.09091%)&lt;BR/&gt; 1446: (9.09091%)&lt;BR/&gt; 1445: (9.09091%)&lt;BR/&gt; 1433: (9.09091%)&gt;];
}
3731--6137[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="194.173.248.132" dst_port="80" src_ip="145.223.69.28"/>
    </slice>
    <from sec="1120712474" usec="0"/>
    <to sec="1120712588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
3745[label="145.222.24.29;60pkt 60fpkt", shape=pentagon, color=darkviolet];
6144[label="145.222.24.29;60pkt 60fpkt", shape=invtriangle, color=brown];
7455[label="145.222.24.29;60pkt 60fpkt", shape=invhouse, color=bisque];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.24.29:*, 212.196.1.155:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4833: (0.833333%)&lt;BR/&gt; 4832: (0.833333%)&lt;BR/&gt; 4829: (0.833333%)&lt;BR/&gt; 4828: (0.833333%)&gt;];
}
3745--6144[label="1;60pkt 60fpkt"];
3745--7455[label="1;60pkt 60fpkt"];
6144--7455[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="212.196.1.155" dst_port="80" src_ip="145.222.24.29"/>
    </slice>
    <from sec="1120713077" usec="0"/>
    <to sec="1120713235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
3755[label="149.177.104.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6148[label="149.177.104.30;2pkt 2fpkt", shape=invtriangle, color=brown];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.104.30:1149, 211.166.147.153:1863}[50%]&lt;BR/&gt;{149.177.104.30:1037, 211.166.150.156:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1149: (25%)&lt;BR/&gt; 1037: (25%)&gt;];
}
3755--6148[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.156" dst_port="1863" src_ip="149.177.104.30" src_port="1037"/>
      <filter dst_ip="211.166.147.153" dst_port="1863" src_ip="149.177.104.30" src_port="1149"/>
    </slice>
    <from sec="1120712427" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
3759[label="212.66.176.30;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6150[label="212.66.176.30;24pkt 24fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.176.30:*, *:25}[33.3333%]&lt;BR/&gt;{212.66.176.30:25, 193.140.192.195:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.9167%)&lt;BR/&gt; 123: (4.16667%)&lt;BR/&gt; 53325: (2.08333%)&lt;BR/&gt; 53308: (2.08333%)&lt;BR/&gt; 53203: (2.08333%)&gt;];
}
3759--6150[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="212.66.176.30"/>
      <filter dst_ip="193.140.192.195" src_ip="212.66.176.30" src_port="25"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
3771[label="149.177.96.32;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6155[label="149.177.96.32;17pkt 17fpkt", shape=invtriangle, color=brown];
7459[label="149.177.96.32;18pkt 18fpkt", shape=invhouse, color=bisque];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.96.32:15083, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15083: (41.3462%)&lt;BR/&gt; 38326: (5.76923%)&lt;BR/&gt; 64077: (2.88462%)&lt;BR/&gt; 56262: (2.88462%)&lt;BR/&gt; 45670: (2.88462%)&gt;];
}
3771--6155[label="1;17pkt 17fpkt"];
3771--7459[label="1;17pkt 17fpkt"];
6155--7459[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.96.32" src_port="15083"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.128.98.32"/>
    </slice>
    <from sec="1120712445" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
3777[label="28.69.228.32;150pkt 150fpkt", shape=pentagon, color=darkviolet];
6161[label="28.69.228.32;151pkt 151fpkt", shape=invtriangle, color=brown];
7464[label="28.69.228.32;150pkt 150fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.69.228.32:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3777--6161[label="1;150pkt 150fpkt"];
3777--7464[label="1;150pkt 150fpkt"];
6161--7464[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="28.69.228.32" src_port="1028"/>
    </slice>
    <from sec="1120713278" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
3778[label="196.117.8.33;93pkt 93fpkt", shape=pentagon, color=darkviolet];
6162[label="196.117.8.33;93pkt 93fpkt", shape=invtriangle, color=brown];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.117.8.33:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3791: (1.07527%)&lt;BR/&gt; 3176: (1.07527%)&lt;BR/&gt; 3059: (1.07527%)&lt;BR/&gt; 4997: (0.537634%)&gt;];
}
3778--6162[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="196.117.8.33"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.129.102.33"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120712669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
3789[label="149.177.245.33;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6167[label="149.177.245.33;28pkt 28fpkt", shape=invtriangle, color=brown];
7468[label="149.177.245.33;28pkt 28fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.245.33:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61403: (1.78571%)&lt;BR/&gt; 58037: (1.78571%)&lt;BR/&gt; 57083: (1.78571%)&lt;BR/&gt; 56910: (1.78571%)&gt;];
}
3789--6167[label="1;28pkt 28fpkt"];
3789--7468[label="1;28pkt 28fpkt"];
6167--7468[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.245.33" src_port="80"/>
    </slice>
    <from sec="1120712437" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
3795[label="161.99.64.34;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6171[label="161.99.64.34;10pkt 10fpkt", shape=invtriangle, color=brown];
7471[label="161.99.64.34;9pkt 9fpkt", shape=invhouse, color=bisque];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.64.34:*, 211.38.96.9:80}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56462: (5.17241%)&lt;BR/&gt; 56461: (5.17241%)&lt;BR/&gt; 56460: (5.17241%)&lt;BR/&gt; 56459: (5.17241%)&gt;];
}
3795--6171[label="1;10pkt 10fpkt"];
3795--7471[label="1;9pkt 9fpkt"];
6171--7471[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="211.38.96.9" dst_port="80" src_ip="161.99.64.34"/>
    </slice>
    <from sec="1120713225" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
3803[label="27.197.28.35;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6174[label="27.197.28.35;23pkt 23fpkt", shape=invtriangle, color=brown];
7473[label="27.197.28.35;22pkt 22fpkt", shape=invhouse, color=bisque];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.197.28.35:80, 161.99.83.32:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3514: (2.20588%)&lt;BR/&gt; 3512: (2.20588%)&lt;BR/&gt; 3510: (2.20588%)&lt;BR/&gt; 3508: (2.20588%)&gt;];
}
3803--6174[label="1;23pkt 23fpkt"];
3803--7473[label="1;22pkt 22fpkt"];
6174--7473[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.83.32" src_ip="27.197.28.35" src_port="80"/>
    </slice>
    <from sec="1120713153" usec="0"/>
    <to sec="1120713168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
2203[label="145.222.216.68;s;75pkt 75fpkt", shape=diamond, color=yellow];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.216.68:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59253: (0.666667%)&lt;BR/&gt; 59250: (0.666667%)&lt;BR/&gt; 59014: (0.666667%)&lt;BR/&gt; 58993: (0.666667%)&gt;];
}
2203--2285[label="1;3pkt 3fpkt"];
2203--2665[label="0.0266667;2pkt 2fpkt"];
2203--2711[label="0.0153846;1pkt 1fpkt"];
2203--3252[label="0.0149254;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.222.216.68"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
3814[label="145.223.50.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6177[label="145.223.50.36;3pkt 3fpkt", shape=invtriangle, color=brown];
7475[label="145.223.50.36;3pkt 3fpkt", shape=invhouse, color=bisque];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.50.36:80, 28.153.202.248:37724}[33.3333%]&lt;BR/&gt;{145.223.50.36:80, 28.153.202.248:37759}[33.3333%]&lt;BR/&gt;{145.223.50.36:80, 28.153.202.248:37802}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37802: (16.6667%)&lt;BR/&gt; 37759: (16.6667%)&lt;BR/&gt; 37724: (16.6667%)&gt;];
}
3814--6177[label="1;3pkt 3fpkt"];
3814--7475[label="1;3pkt 3fpkt"];
6177--7475[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="28.153.202.248" dst_port="37802" src_ip="145.223.50.36" src_port="80"/>
      <filter dst_ip="28.153.202.248" dst_port="37759" src_ip="145.223.50.36" src_port="80"/>
      <filter dst_ip="28.153.202.248" dst_port="37724" src_ip="145.223.50.36" src_port="80"/>
    </slice>
    <from sec="1120712547" usec="0"/>
    <to sec="1120712608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
1596[label="131.194.32.37;s;299pkt 299fpkt", shape=diamond, color=yellow];
3819[label="131.194.32.37;321pkt 321fpkt", shape=pentagon, color=darkviolet];
6180[label="131.194.32.37;320pkt 320fpkt", shape=invtriangle, color=brown];
7478[label="131.194.32.37;321pkt 321fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.194.32.37:32772, *:53}[66.0436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.8628%)&lt;BR/&gt; 32772: (33.1879%)&lt;BR/&gt; 25: (6.34417%)&lt;BR/&gt; 113: (1.42744%)&lt;BR/&gt; 32769: (0.317209%)&gt;];
}
1596--1880[label="0.00900901;1pkt 1fpkt"];
1596--2176[label="0.0102041;1pkt 1fpkt"];
1596--2598[label="0.0153846;1pkt 1fpkt"];
1596--2627[label="0.02;1pkt 1fpkt"];
1596--3318[label="0.00854701;1pkt 1fpkt"];
1596--3384[label="0.0468227;14pkt 14fpkt"];
1596--3387[label="0.0200669;6pkt 6fpkt"];
1596--3819[label="1;299pkt 299fpkt"];
1596--6180[label="0.996656;298pkt 298fpkt"];
1596--7478[label="1;299pkt 299fpkt"];
3819--6180[label="1;320pkt 320fpkt"];
3819--7478[label="1;321pkt 321fpkt"];
6180--7478[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="131.194.32.37" src_port="32772"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.106.100.37"/>
    </slice>
    <from sec="1120712447" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.153.215.38"/>
    </slice>
    <from sec="1120712860" usec="0"/>
    <to sec="1120712883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
1233[label="161.107.109.91;s;718pkt 718fpkt", shape=diamond, color=yellow];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.109.91:*, *:80}[97.2145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6072%)&lt;BR/&gt; 443: (1.25348%)&lt;BR/&gt; 8080: (0.139276%)&lt;BR/&gt; 4770: (0.139276%)&lt;BR/&gt; 4759: (0.139276%)&gt;];
}
1233--1254[label="1;4pkt 4fpkt"];
1233--1294[label="0.012;3pkt 3fpkt"];
1233--1344[label="0.0281124;7pkt 7fpkt"];
1233--1388[label="0.0120482;1pkt 1fpkt"];
1233--1395[label="0.00872093;3pkt 3fpkt"];
1233--1446[label="0.0238095;1pkt 1fpkt"];
1233--1568[label="0.130435;21pkt 21fpkt"];
1233--1610[label="0.0405405;6pkt 6fpkt"];
1233--1643[label="0.0181818;5pkt 5fpkt"];
1233--1651[label="0.0197368;3pkt 3fpkt"];
1233--1684[label="0.016129;1pkt 1fpkt"];
1233--1691[label="0.0253165;2pkt 2fpkt"];
1233--1813[label="0.00689655;1pkt 1fpkt"];
1233--1831[label="0.032;4pkt 4fpkt"];
1233--1846[label="0.00625;1pkt 1fpkt"];
1233--1924[label="0.00943396;1pkt 1fpkt"];
1233--1927[label="0.0272109;4pkt 4fpkt"];
1233--1953[label="0.0151515;1pkt 1fpkt"];
1233--2184[label="0.223214;25pkt 25fpkt"];
1233--2309[label="0.025641;1pkt 1fpkt"];
1233--2329[label="0.0555556;5pkt 5fpkt"];
1233--2954[label="0.015015;5pkt 5fpkt"];
1233--3018[label="1;718pkt 718fpkt"];
1233--3096[label="0.0136986;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.107.109.91"/>
    </slice>
    <from sec="1120712621" usec="0"/>
    <to sec="1120713008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
3866[label="149.110.176.40;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6205[label="149.110.176.40;16pkt 16fpkt", shape=invtriangle, color=brown];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.176.40:80, 195.91.67.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48049: (3.22581%)&lt;BR/&gt; 47636: (3.22581%)&lt;BR/&gt; 46852: (3.22581%)&lt;BR/&gt; 46752: (3.22581%)&gt;];
}
3866--6205[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="195.91.67.84" src_ip="149.110.176.40" src_port="80"/>
    </slice>
    <from sec="1120713155" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
3869[label="213.17.225.40;46pkt 46fpkt", shape=pentagon, color=darkviolet];
6206[label="213.17.225.40;46pkt 46fpkt", shape=invtriangle, color=brown];
7491[label="213.17.225.40;45pkt 45fpkt", shape=invhouse, color=bisque];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.225.40:3092, *:*}[84.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3092: (42.3358%)&lt;BR/&gt; 5190: (3.28467%)&lt;BR/&gt; 1863: (2.18978%)&lt;BR/&gt; 443: (2.18978%)&lt;BR/&gt; 65095: (1.09489%)&gt;];
}
3869--6206[label="1;46pkt 46fpkt"];
3869--7491[label="1;45pkt 45fpkt"];
6206--7491[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.225.40" src_port="3092"/>
    </slice>
    <from sec="1120712448" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
1932[label="213.17.228.41;s;312pkt 312fpkt", shape=diamond, color=yellow];
3877[label="213.17.228.41;323pkt 323fpkt", shape=pentagon, color=darkviolet];
6210[label="213.17.228.41;324pkt 324fpkt", shape=invtriangle, color=brown];
7492[label="213.17.228.41;323pkt 323fpkt", shape=invhouse, color=bisque];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.228.41:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1932--2304[label="0.00485437;1pkt 1fpkt"];
1932--2599[label="0.00487805;1pkt 1fpkt"];
1932--3877[label="0.996795;311pkt 311fpkt"];
1932--6210[label="1;312pkt 312fpkt"];
1932--7492[label="0.996795;311pkt 311fpkt"];
3877--6210[label="1;323pkt 323fpkt"];
3877--7492[label="1;323pkt 323fpkt"];
6210--7492[label="1;323pkt 323fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.228.41"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
3880[label="200.228.12.42;84pkt 84fpkt", shape=pentagon, color=darkviolet];
6213[label="200.228.12.42;85pkt 85fpkt", shape=invtriangle, color=brown];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.228.12.42:*, *:15118}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15118: (50%)&lt;BR/&gt; 35266: (0.591716%)&lt;BR/&gt; 35265: (0.591716%)&lt;BR/&gt; 35230: (0.591716%)&lt;BR/&gt; 35223: (0.591716%)&gt;];
}
3880--6213[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="15118" src_ip="200.228.12.42"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
2274[label="161.99.81.43;s;79pkt 79fpkt", shape=diamond, color=yellow];
3891[label="161.99.81.43;78pkt 78fpkt", shape=pentagon, color=darkviolet];
6217[label="161.99.81.43;78pkt 78fpkt", shape=invtriangle, color=brown];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.81.43:*, 194.160.88.45:80}[89.8734%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2225: (0.638298%)&lt;BR/&gt; 2224: (0.638298%)&lt;BR/&gt; 2223: (0.638298%)&lt;BR/&gt; 2217: (0.638298%)&gt;];
}
2274--3891[label="1;78pkt 78fpkt"];
2274--6217[label="1;78pkt 78fpkt"];
3891--6217[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="194.160.88.45" dst_port="80" src_ip="161.99.81.43"/>
    </slice>
    <from sec="1120712865" usec="0"/>
    <to sec="1120713083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
1621[label="24.88.116.43;s;30pkt 30fpkt", shape=diamond, color=yellow];
1917[label="166.59.48.229;d;13pkt 13fpkt", shape=diamond, color=yellow];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.88.116.43:*, *:25}[71.4286%]&lt;BR/&gt;{*:*, 166.59.48.229:25}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.8372%)&lt;BR/&gt; 43357: (2.32558%)&lt;BR/&gt; 43230: (2.32558%)&lt;BR/&gt; 42504: (2.32558%)&lt;BR/&gt; 42503: (2.32558%)&gt;];
}
1621--1917[label="0.0769231;1pkt 1fpkt"];
1621--1969[label="0.05;1pkt 1fpkt"];
1621--1982[label="0.0333333;1pkt 1fpkt"];
1621--2076[label="0.047619;1pkt 1fpkt"];
1621--3040[label="0.1;3pkt 3fpkt"];
1621--3893[label="1;30pkt 30fpkt"];
1621--6219[label="1;30pkt 30fpkt"];
1917--2490[label="0.0769231;1pkt 1fpkt"];
1917--3229[label="0.153846;2pkt 2fpkt"];
1917--3597[label="0.0769231;1pkt 1fpkt"];
1917--3773[label="0.0769231;1pkt 1fpkt"];
1917--3893[label="0.0769231;1pkt 1fpkt"];
1917--6157[label="0.0769231;1pkt 1fpkt"];
1917--6219[label="0.0769231;1pkt 1fpkt"];
1917--7461[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="24.88.116.43"/>
      <filter dst_ip="166.59.48.229" dst_port="25"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.222.0.44"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
3907[label="27.57.148.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6228[label="27.57.148.44;1pkt 1fpkt", shape=invtriangle, color=brown];
7502[label="27.57.148.44;2pkt 2fpkt", shape=invhouse, color=bisque];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.57.148.44:80, 131.186.213.100:1366}[50%]&lt;BR/&gt;{27.57.148.44:80, 131.186.213.100:1367}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1367: (37.5%)&lt;BR/&gt; 1366: (12.5%)&gt;];
}
3907--6228[label="1;1pkt 1fpkt"];
3907--7502[label="1;1pkt 1fpkt"];
6228--7502[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.213.100" dst_port="1367" src_ip="27.57.148.44" src_port="80"/>
      <filter dst_ip="131.186.213.100" dst_port="1366" src_ip="27.57.148.44" src_port="80"/>
    </slice>
    <from sec="1120712932" usec="0"/>
    <to sec="1120712937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
248[label="26.21.18.211;d;80pkt 80fpkt", shape=diamond, color=yellow];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.110.8:*, 26.21.18.211:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50280: (0.625%)&lt;BR/&gt; 50279: (0.625%)&lt;BR/&gt; 50278: (0.625%)&lt;BR/&gt; 50277: (0.625%)&gt;];
}
248--460[label="0.0625;5pkt 5fpkt"];
248--1071[label="0.0769231;5pkt 5fpkt"];
248--2856[label="1;80pkt 80fpkt"];
248--3919[label="0.0625;5pkt 5fpkt"];
248--6235[label="0.0625;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="26.21.18.211" dst_port="80" src_ip="149.177.110.8"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.66.19.46"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
902[label="149.177.24.88;s;398pkt 398fpkt", shape=diamond, color=yellow];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.24.88:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4681: (0.125628%)&lt;BR/&gt; 4679: (0.125628%)&lt;BR/&gt; 4676: (0.125628%)&lt;BR/&gt; 4661: (0.125628%)&gt;];
}
902--1121[label="0.168033;41pkt 41fpkt"];
902--1258[label="0.00251256;1pkt 1fpkt"];
902--1317[label="0.192982;22pkt 22fpkt"];
902--2414[label="0.0247934;3pkt 3fpkt"];
902--2428[label="0.0353982;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.177.24.88"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
3928[label="149.177.193.46;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6240[label="149.177.193.46;7pkt 7fpkt", shape=invtriangle, color=brown];
7509[label="149.177.193.46;7pkt 7fpkt", shape=invhouse, color=bisque];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.193.46:*, 168.112.113.89:80}[57.1429%]&lt;BR/&gt;{149.177.193.46:*, 168.112.113.89:443}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 443: (21.4286%)&lt;BR/&gt; 2673: (7.14286%)&lt;BR/&gt; 2671: (7.14286%)&lt;BR/&gt; 2622: (7.14286%)&gt;];
}
3928--6240[label="1;7pkt 7fpkt"];
3928--7509[label="1;7pkt 7fpkt"];
6240--7509[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="168.112.113.89" dst_port="80" src_ip="149.177.193.46"/>
      <filter dst_ip="168.112.113.89" dst_port="443" src_ip="149.177.193.46"/>
    </slice>
    <from sec="1120712913" usec="0"/>
    <to sec="1120713249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.9.59.47"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
3937[label="200.220.168.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6243[label="200.220.168.47;2pkt 2fpkt", shape=invtriangle, color=brown];
7512[label="200.220.168.47;1pkt 1fpkt", shape=invhouse, color=bisque];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.220.168.47:60049, 149.177.134.47:37713}[50%]&lt;BR/&gt;{200.220.168.47:60071, 149.177.134.47:37713}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37713: (50%)&lt;BR/&gt; 60049: (37.5%)&lt;BR/&gt; 60071: (12.5%)&gt;];
}
3937--6243[label="1;1pkt 1fpkt"];
3937--7512[label="1;1pkt 1fpkt"];
6243--7512[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.134.47" dst_port="37713" src_ip="200.220.168.47" src_port="60071"/>
      <filter dst_ip="149.177.134.47" dst_port="37713" src_ip="200.220.168.47" src_port="60049"/>
    </slice>
    <from sec="1120712623" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
3940[label="85.4.6.48;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6246[label="85.4.6.48;118pkt 118fpkt", shape=invtriangle, color=brown];
7515[label="85.4.6.48;118pkt 118fpkt", shape=invhouse, color=bisque];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.4.6.48:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4997: (0.424929%)&lt;BR/&gt; 4824: (0.424929%)&lt;BR/&gt; 4807: (0.424929%)&lt;BR/&gt; 4769: (0.424929%)&gt;];
}
3940--6246[label="1;117pkt 117fpkt"];
3940--7515[label="1;117pkt 117fpkt"];
6246--7515[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="85.4.6.48"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
3945[label="212.66.40.48;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6248[label="212.66.40.48;58pkt 58fpkt", shape=invtriangle, color=brown];
7517[label="212.66.40.48;58pkt 58fpkt", shape=invhouse, color=bisque];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.40.48:*, 192.168.0.1:75}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 75: (50%)&lt;BR/&gt; 3790: (0.862069%)&lt;BR/&gt; 3789: (0.862069%)&lt;BR/&gt; 3788: (0.862069%)&lt;BR/&gt; 3786: (0.862069%)&gt;];
}
3945--6248[label="1;58pkt 58fpkt"];
3945--7517[label="1;58pkt 58fpkt"];
6248--7517[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.1" dst_port="75" src_ip="212.66.40.48"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
3953[label="84.74.203.48;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6251[label="84.74.203.48;20pkt 20fpkt", shape=invtriangle, color=brown];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.74.203.48:110, 149.177.236.18:*}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 38030: (2.5641%)&lt;BR/&gt; 37976: (2.5641%)&lt;BR/&gt; 37934: (2.5641%)&lt;BR/&gt; 37931: (2.5641%)&gt;];
}
3953--6251[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.236.18" src_ip="84.74.203.48" src_port="110"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
3955[label="194.173.249.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6252[label="194.173.249.48;2pkt 2fpkt", shape=invtriangle, color=brown];
7519[label="194.173.249.48;1pkt 1fpkt", shape=invhouse, color=bisque];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.249.48:80, 161.99.80.182:1636}[50%]&lt;BR/&gt;{194.173.249.48:80, 161.99.80.182:1637}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1637: (30%)&lt;BR/&gt; 1636: (20%)&gt;];
}
3955--6252[label="1;2pkt 2fpkt"];
3955--7519[label="1;1pkt 1fpkt"];
6252--7519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.80.182" dst_port="1637" src_ip="194.173.249.48" src_port="80"/>
      <filter dst_ip="161.99.80.182" dst_port="1636" src_ip="194.173.249.48" src_port="80"/>
    </slice>
    <from sec="1120712846" usec="0"/>
    <to sec="1120712869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
1330[label="29.38.155.49;s;5pkt 5fpkt", shape=diamond, color=yellow];
3057[label="29.38.155.49;s;3pkt 3fpkt", shape=hexagon, color=black];
3962[label="29.38.155.49;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6256[label="29.38.155.49;5pkt 5fpkt", shape=invtriangle, color=brown];
7522[label="29.38.155.49;5pkt 5fpkt", shape=invhouse, color=bisque];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.38.155.49:80, 166.59.140.223:60279}[20%]&lt;BR/&gt;{29.38.155.49:80, 212.79.192.209:1904}[20%]&lt;BR/&gt;{29.38.155.49:80, 212.79.192.209:2283}[20%]&lt;BR/&gt;{29.38.155.49:80, 212.79.192.209:3875}[20%]&lt;BR/&gt;{29.38.155.49:80, 212.79.192.209:3938}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60279: (11.3636%)&lt;BR/&gt; 3938: (11.3636%)&lt;BR/&gt; 3875: (9.09091%)&lt;BR/&gt; 2283: (9.09091%)&gt;];
}
1330--3057[label="1;3pkt 3fpkt"];
1330--3388[label="0.6;3pkt 3fpkt"];
1330--3962[label="1;4pkt 4fpkt"];
1330--6256[label="1;5pkt 5fpkt"];
1330--7522[label="1;5pkt 5fpkt"];
3057--3388[label="0.333333;1pkt 1fpkt"];
3057--3962[label="0.666667;2pkt 2fpkt"];
3057--6256[label="1;3pkt 3fpkt"];
3057--7522[label="1;3pkt 3fpkt"];
3962--6256[label="1;4pkt 4fpkt"];
3962--7522[label="1;4pkt 4fpkt"];
6256--7522[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.209" dst_port="3938" src_ip="29.38.155.49" src_port="80"/>
      <filter dst_ip="212.79.192.209" dst_port="3875" src_ip="29.38.155.49" src_port="80"/>
      <filter dst_ip="212.79.192.209" dst_port="2283" src_ip="29.38.155.49" src_port="80"/>
      <filter dst_ip="212.79.192.209" dst_port="1904" src_ip="29.38.155.49" src_port="80"/>
      <filter dst_ip="166.59.140.223" dst_port="60279" src_ip="29.38.155.49" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
866[label="131.186.212.177;d;5pkt 5fpkt", shape=diamond, color=yellow];
1381[label="26.132.112.50;s;105pkt 105fpkt", shape=diamond, color=yellow];
1775[label="131.186.34.154;d;21pkt 21fpkt", shape=diamond, color=yellow];
1793[label="212.79.211.149;d;73pkt 73fpkt", shape=diamond, color=yellow];
1857[label="26.132.112.61;s;58pkt 58fpkt", shape=diamond, color=yellow];
2704[label="213.17.225.40;d;21pkt 21fpkt", shape=diamond, color=yellow];
3663[label="212.21.33.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3969[label="26.132.112.50;116pkt 116fpkt", shape=pentagon, color=darkviolet];
5168[label="26.132.109.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6258[label="26.132.112.50;116pkt 116fpkt", shape=invtriangle, color=brown];
6938[label="26.132.109.169;3pkt 3fpkt", shape=invtriangle, color=brown];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.132.112.50:80, *:*}[47.1545%]&lt;BR/&gt;{*:80, 212.79.211.149:*}[28.4553%]&lt;BR/&gt;{26.132.112.61:80, *:*}[25.2033%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0806%)&lt;BR/&gt; 3092: (1.43954%)&lt;BR/&gt; 1284: (0.575816%)&lt;BR/&gt; 54550: (0.383877%)&lt;BR/&gt; 54541: (0.383877%)&gt;];
}
866--1196[label="1;3pkt 3fpkt"];
866--1381[label="0.2;1pkt 1fpkt"];
866--1857[label="0.2;1pkt 1fpkt"];
866--2913[label="1;5pkt 5fpkt"];
866--3969[label="0.2;1pkt 1fpkt"];
866--4077[label="0.2;1pkt 1fpkt"];
866--5205[label="1;2pkt 2fpkt"];
866--6258[label="0.2;1pkt 1fpkt"];
866--6955[label="1;3pkt 3fpkt"];
866--7921[label="1;2pkt 2fpkt"];
1381--1775[label="0.857143;18pkt 18fpkt"];
1381--1793[label="0.232877;17pkt 17fpkt"];
1381--2704[label="0.047619;1pkt 1fpkt"];
1381--2838[label="0.0117647;1pkt 1fpkt"];
1381--2913[label="0.166667;1pkt 1fpkt"];
1381--3388[label="0.114286;12pkt 12fpkt"];
1381--3969[label="1;105pkt 105fpkt"];
1381--6258[label="1;105pkt 105fpkt"];
1775--3388[label="0.0952381;2pkt 2fpkt"];
1775--3969[label="0.857143;18pkt 18fpkt"];
1775--5168[label="1;2pkt 2fpkt"];
1775--6258[label="0.857143;18pkt 18fpkt"];
1775--6938[label="1;3pkt 3fpkt"];
1793--1857[label="0.172414;10pkt 10fpkt"];
1793--2451[label="0.1;3pkt 3fpkt"];
1793--3388[label="0.0958904;7pkt 7fpkt"];
1793--3575[label="0.176471;3pkt 3fpkt"];
1793--3663[label="1;1pkt 1fpkt"];
1793--3969[label="0.232877;17pkt 17fpkt"];
1793--4077[label="0.197183;14pkt 14fpkt"];
1793--5744[label="0.409091;9pkt 9fpkt"];
1793--5815[label="0.0188679;1pkt 1fpkt"];
1793--5823[label="0.030303;1pkt 1fpkt"];
1793--6054[label="0.176471;3pkt 3fpkt"];
1793--6258[label="0.232877;17pkt 17fpkt"];
1793--7239[label="0.428571;9pkt 9fpkt"];
1793--7278[label="0.0185185;1pkt 1fpkt"];
1857--2913[label="0.166667;1pkt 1fpkt"];
1857--3388[label="0.155172;9pkt 9fpkt"];
1857--4077[label="1;58pkt 58fpkt"];
2704--2906[label="0.0952381;2pkt 2fpkt"];
2704--3610[label="0.190476;4pkt 4fpkt"];
2704--3969[label="0.047619;1pkt 1fpkt"];
2704--6073[label="0.190476;4pkt 4fpkt"];
2704--6258[label="0.047619;1pkt 1fpkt"];
2704--7420[label="0.190476;4pkt 4fpkt"];
3969--6258[label="1;116pkt 116fpkt"];
5168--6938[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="26.132.112.50" src_port="80"/>
      <filter src_ip="26.132.112.61" src_port="80"/>
      <filter dst_ip="212.79.211.149" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.34.126.50"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.42.171.50"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
3976[label="200.216.207.50;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6262[label="200.216.207.50;8pkt 8fpkt", shape=invtriangle, color=brown];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.216.207.50:80, 145.223.9.97:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3954: (6.25%)&lt;BR/&gt; 3951: (6.25%)&lt;BR/&gt; 3949: (6.25%)&lt;BR/&gt; 3946: (6.25%)&gt;];
}
3976--6262[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.9.97" src_ip="200.216.207.50" src_port="80"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120712535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
3991[label="161.99.160.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6270[label="161.99.160.52;3pkt 3fpkt", shape=invtriangle, color=brown];
7529[label="161.99.160.52;3pkt 3fpkt", shape=invhouse, color=bisque];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.160.52:1151, 223.78.71.134:80}[33.3333%]&lt;BR/&gt;{161.99.160.52:1145, 223.78.71.76:80}[33.3333%]&lt;BR/&gt;{161.99.160.52:1146, 223.78.71.76:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1151: (16.6667%)&lt;BR/&gt; 1146: (16.6667%)&lt;BR/&gt; 1145: (16.6667%)&gt;];
}
3991--6270[label="1;3pkt 3fpkt"];
3991--7529[label="1;3pkt 3fpkt"];
6270--7529[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="223.78.71.76" dst_port="80" src_ip="161.99.160.52" src_port="1146"/>
      <filter dst_ip="223.78.71.76" dst_port="80" src_ip="161.99.160.52" src_port="1145"/>
      <filter dst_ip="223.78.71.134" dst_port="80" src_ip="161.99.160.52" src_port="1151"/>
    </slice>
    <from sec="1120712807" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
1921[label="145.222.13.53;s;351pkt 351fpkt", shape=diamond, color=yellow];
3313[label="145.222.13.53;s;351pkt 351fpkt", shape=hexagon, color=black];
3996[label="145.222.13.53;382pkt 382fpkt", shape=pentagon, color=darkviolet];
6271[label="145.222.13.53;383pkt 383fpkt", shape=invtriangle, color=brown];
7530[label="145.222.13.53;383pkt 383fpkt", shape=invhouse, color=bisque];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.13.53:53, *:*}[67.624%]&lt;BR/&gt;{145.222.13.53:1029, *:53}[31.3316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.4865%)&lt;BR/&gt; 1029: (15.7297%)&lt;BR/&gt; 32768: (2.10811%)&lt;BR/&gt; 33701: (1.21622%)&lt;BR/&gt; 0: (1.08108%)&gt;];
}
1921--2126[label="0.00925926;1pkt 1fpkt"];
1921--2176[label="0.0102041;1pkt 1fpkt"];
1921--2415[label="0.00990099;1pkt 1fpkt"];
1921--2425[label="0.00909091;1pkt 1fpkt"];
1921--2435[label="0.00961538;1pkt 1fpkt"];
1921--2598[label="0.0153846;1pkt 1fpkt"];
1921--2600[label="0.00961538;1pkt 1fpkt"];
1921--3313[label="1;351pkt 351fpkt"];
1921--3318[label="0.00854701;1pkt 1fpkt"];
1921--3384[label="0.025641;9pkt 9fpkt"];
1921--3387[label="0.045584;16pkt 16fpkt"];
1921--3996[label="0.997151;350pkt 350fpkt"];
1921--6271[label="1;351pkt 351fpkt"];
1921--7530[label="1;351pkt 351fpkt"];
3313--3318[label="0.00854701;1pkt 1fpkt"];
3313--3384[label="0.025641;9pkt 9fpkt"];
3313--3387[label="0.045584;16pkt 16fpkt"];
3313--3996[label="0.997151;350pkt 350fpkt"];
3313--6271[label="1;351pkt 351fpkt"];
3313--7530[label="1;351pkt 351fpkt"];
3996--6271[label="1;382pkt 382fpkt"];
3996--7530[label="1;382pkt 382fpkt"];
6271--7530[label="1;383pkt 383fpkt"];
</description>
    <slice>
      <filter src_ip="145.222.13.53" src_port="53"/>
      <filter dst_port="53" src_ip="145.222.13.53" src_port="1029"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.108.97.53"/>
    </slice>
    <from sec="1120712462" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
4005[label="145.223.171.53;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6277[label="145.223.171.53;21pkt 21fpkt", shape=invtriangle, color=brown];
7532[label="145.223.171.53;21pkt 21fpkt", shape=invhouse, color=bisque];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.171.53:*, 196.98.2.104:25}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.8571%)&lt;BR/&gt; 53: (7.14286%)&lt;BR/&gt; 32772: (2.38095%)&lt;BR/&gt; 32768: (2.38095%)&lt;BR/&gt; 4696: (2.38095%)&gt;];
}
4005--6277[label="1;21pkt 21fpkt"];
4005--7532[label="1;21pkt 21fpkt"];
6277--7532[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="196.98.2.104" dst_port="25" src_ip="145.223.171.53"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.17.87.54"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
2149[label="213.17.230.54;s;46pkt 46fpkt", shape=diamond, color=yellow];
4022[label="213.17.230.54;53pkt 53fpkt", shape=pentagon, color=darkviolet];
6285[label="213.17.230.54;52pkt 52fpkt", shape=invtriangle, color=brown];
7537[label="213.17.230.54;53pkt 53fpkt", shape=invhouse, color=bisque];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.230.54:25, *:*}[69.8113%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.3627%)&lt;BR/&gt; 443: (5.63725%)&lt;BR/&gt; 50068: (0.980392%)&lt;BR/&gt; 50056: (0.980392%)&lt;BR/&gt; 50030: (0.980392%)&gt;];
}
2149--4022[label="1;46pkt 46fpkt"];
2149--6285[label="1;46pkt 46fpkt"];
2149--7537[label="1;46pkt 46fpkt"];
4022--6285[label="1;52pkt 52fpkt"];
4022--7537[label="1;53pkt 53fpkt"];
6285--7537[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.230.54" src_port="25"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
4023[label="25.176.36.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6286[label="25.176.36.55;1pkt 1fpkt", shape=invtriangle, color=brown];
7538[label="25.176.36.55;1pkt 1fpkt", shape=invhouse, color=bisque];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.176.36.55:1325, 149.68.157.180:31441}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31441: (50%)&lt;BR/&gt; 1325: (50%)&gt;];
}
4023--6286[label="1;1pkt 1fpkt"];
4023--7538[label="1;1pkt 1fpkt"];
6286--7538[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="31441" src_ip="25.176.36.55" src_port="1325"/>
    </slice>
    <from sec="1120712433" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.88.73.55"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.85.40.56"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
4088[label="212.25.197.62;48pkt 48fpkt", shape=pentagon, color=darkviolet];
6323[label="212.25.197.62;47pkt 47fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.25.197.62:9500, 149.177.113.20:*}[47.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9500: (24.2105%)&lt;BR/&gt; 3306: (6.31579%)&lt;BR/&gt; 80: (6.31579%)&lt;BR/&gt; 53: (6.31579%)&lt;BR/&gt; 22: (5.78947%)&gt;];
}
4088--6323[label="1;47pkt 47fpkt"];
4088--7560[label="1;47pkt 47fpkt"];
6323--7560[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.113.20" src_ip="212.25.197.62" src_port="9500"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
4054[label="161.99.206.58;40pkt 40fpkt", shape=pentagon, color=darkviolet];
6300[label="161.99.206.58;40pkt 40fpkt", shape=invtriangle, color=brown];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.206.58:21017, *:*}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21017: (48.75%)&lt;BR/&gt; 63732: (1.25%)&lt;BR/&gt; 62108: (1.25%)&lt;BR/&gt; 61525: (1.25%)&lt;BR/&gt; 60805: (1.25%)&gt;];
}
4054--6300[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.206.58" src_port="21017"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.80.195.59"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
2644[label="165.152.192.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
4079[label="165.152.192.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6316[label="165.152.192.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.152.192.61:0, 131.186.155.100:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2644--4079[label="1;1pkt 1fpkt"];
2644--6316[label="1;1pkt 1fpkt"];
4079--6316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.155.100" src_ip="165.152.192.61"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.221.102.62"/>
    </slice>
    <from sec="1120712443" usec="0"/>
    <to sec="1120712701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.162.64"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.218.74.66"/>
    </slice>
    <from sec="1120712992" usec="0"/>
    <to sec="1120713041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
2407[label="145.222.178.66;s;595pkt 595fpkt", shape=diamond, color=yellow];
4132[label="145.222.178.66;637pkt 637fpkt", shape=pentagon, color=darkviolet];
6345[label="145.222.178.66;637pkt 637fpkt", shape=invtriangle, color=brown];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.178.66:*, 194.89.14.112:53}[50.0785%]&lt;BR/&gt;{145.222.178.66:*, 194.89.14.103:53}[49.4505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 13497: (0.0802568%)&lt;BR/&gt; 13496: (0.0802568%)&lt;BR/&gt; 13494: (0.0802568%)&lt;BR/&gt; 13493: (0.0802568%)&gt;];
}
2407--2425[label="0.00909091;1pkt 1fpkt"];
2407--3384[label="0.0571429;34pkt 34fpkt"];
2407--4132[label="1;595pkt 595fpkt"];
2407--6345[label="1;595pkt 595fpkt"];
4132--6345[label="1;637pkt 637fpkt"];
</description>
    <slice>
      <filter dst_ip="194.89.14.112" dst_port="53" src_ip="145.222.178.66"/>
      <filter dst_ip="194.89.14.103" dst_port="53" src_ip="145.222.178.66"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.224.66"/>
    </slice>
    <from sec="1120712452" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.215.137.67"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
4149[label="212.79.225.67;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6353[label="212.79.225.67;4pkt 4fpkt", shape=invtriangle, color=brown];
7577[label="212.79.225.67;5pkt 5fpkt", shape=invhouse, color=bisque];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.225.67:3453, 24.76.74.33:80}[20%]&lt;BR/&gt;{212.79.225.67:3454, 24.76.74.33:80}[20%]&lt;BR/&gt;{212.79.225.67:3456, 24.76.74.33:80}[20%]&lt;BR/&gt;{212.79.225.67:3457, 24.76.74.33:80}[20%]&lt;BR/&gt;{212.79.225.67:3459, 24.76.74.33:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3459: (10.7143%)&lt;BR/&gt; 3457: (10.7143%)&lt;BR/&gt; 3456: (10.7143%)&lt;BR/&gt; 3454: (10.7143%)&gt;];
}
4149--6353[label="1;4pkt 4fpkt"];
4149--7577[label="1;5pkt 5fpkt"];
6353--7577[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="24.76.74.33" dst_port="80" src_ip="212.79.225.67" src_port="3459"/>
      <filter dst_ip="24.76.74.33" dst_port="80" src_ip="212.79.225.67" src_port="3457"/>
      <filter dst_ip="24.76.74.33" dst_port="80" src_ip="212.79.225.67" src_port="3456"/>
      <filter dst_ip="24.76.74.33" dst_port="80" src_ip="212.79.225.67" src_port="3454"/>
      <filter dst_ip="24.76.74.33" dst_port="80" src_ip="212.79.225.67" src_port="3453"/>
    </slice>
    <from sec="1120712765" usec="0"/>
    <to sec="1120712775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
4150[label="84.192.226.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6354[label="84.192.226.67;1pkt 1fpkt", shape=invtriangle, color=brown];
7578[label="84.192.226.67;2pkt 2fpkt", shape=invhouse, color=bisque];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.192.226.67:80, 145.223.243.118:2834}[50%]&lt;BR/&gt;{84.192.226.67:80, 145.223.243.118:2835}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2835: (30%)&lt;BR/&gt; 2834: (20%)&gt;];
}
4150--6354[label="1;1pkt 1fpkt"];
4150--7578[label="1;2pkt 2fpkt"];
6354--7578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.243.118" dst_port="2835" src_ip="84.192.226.67" src_port="80"/>
      <filter dst_ip="145.223.243.118" dst_port="2834" src_ip="84.192.226.67" src_port="80"/>
    </slice>
    <from sec="1120713182" usec="0"/>
    <to sec="1120713187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
1095[label="211.166.126.134;d;13pkt 13fpkt", shape=diamond, color=yellow];
1745[label="161.107.236.67;s;4pkt 4fpkt", shape=diamond, color=yellow];
4151[label="161.107.236.67;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4344[label="161.107.225.85;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6355[label="161.107.236.67;3pkt 3fpkt", shape=invtriangle, color=brown];
7579[label="161.107.236.67;3pkt 3fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.126.134:80}[30.4348%]&lt;BR/&gt;{161.107.225.85:*, *:1863}[30.4348%]&lt;BR/&gt;{*:*, 211.166.126.134:443}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.973%)&lt;BR/&gt; 443: (13.5135%)&lt;BR/&gt; 1863: (9.45946%)&lt;BR/&gt; 1049: (9.45946%)&lt;BR/&gt; 1052: (8.10811%)&gt;];
}
1095--1222[label="0.111111;1pkt 1fpkt"];
1095--1318[label="0.0769231;1pkt 1fpkt"];
1095--1745[label="0.75;3pkt 3fpkt"];
1095--2100[label="0.0769231;1pkt 1fpkt"];
1095--2438[label="0.0769231;1pkt 1fpkt"];
1095--4151[label="1;3pkt 3fpkt"];
1095--4344[label="0.181818;2pkt 2fpkt"];
1095--4737[label="0.0769231;1pkt 1fpkt"];
1095--4744[label="0.0769231;1pkt 1fpkt"];
1095--6355[label="1;3pkt 3fpkt"];
1095--7579[label="1;3pkt 3fpkt"];
1745--4151[label="1;3pkt 3fpkt"];
1745--6355[label="1;3pkt 3fpkt"];
1745--7579[label="1;3pkt 3fpkt"];
4151--6355[label="1;3pkt 3fpkt"];
4151--7579[label="1;3pkt 3fpkt"];
6355--7579[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="161.107.225.85"/>
      <filter dst_ip="211.166.126.134" dst_port="80"/>
      <filter dst_ip="211.166.126.134" dst_port="443"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
2316[label="194.236.14.68;s;5pkt 5fpkt", shape=diamond, color=yellow];
3278[label="194.236.14.68;s;5pkt 5fpkt", shape=hexagon, color=black];
4153[label="194.236.14.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6356[label="194.236.14.68;4pkt 4fpkt", shape=invtriangle, color=brown];
7580[label="194.236.14.68;5pkt 5fpkt", shape=invhouse, color=bisque];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.68:5050, 166.59.195.61:4221}[20%]&lt;BR/&gt;{194.236.14.68:5050, 166.59.170.66:1229}[20%]&lt;BR/&gt;{194.236.14.68:5050, 166.59.160.109:1903}[20%]&lt;BR/&gt;{194.236.14.68:20, 166.59.163.166:3871}[20%]&lt;BR/&gt;{194.236.14.68:5050, 166.59.148.230:1034}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (39.5833%)&lt;BR/&gt; 4221: (10.4167%)&lt;BR/&gt; 3871: (10.4167%)&lt;BR/&gt; 1903: (10.4167%)&lt;BR/&gt; 1034: (10.4167%)&gt;];
}
2316--3278[label="1;5pkt 5fpkt"];
2316--4153[label="1;5pkt 5fpkt"];
2316--6356[label="1;4pkt 4fpkt"];
2316--7580[label="1;5pkt 5fpkt"];
3278--4153[label="1;5pkt 5fpkt"];
3278--6356[label="1;4pkt 4fpkt"];
3278--7580[label="1;5pkt 5fpkt"];
4153--6356[label="1;4pkt 4fpkt"];
4153--7580[label="1;5pkt 5fpkt"];
6356--7580[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.148.230" dst_port="1034" src_ip="194.236.14.68" src_port="5050"/>
      <filter dst_ip="166.59.163.166" dst_port="3871" src_ip="194.236.14.68" src_port="20"/>
      <filter dst_ip="166.59.160.109" dst_port="1903" src_ip="194.236.14.68" src_port="5050"/>
      <filter dst_ip="166.59.170.66" dst_port="1229" src_ip="194.236.14.68" src_port="5050"/>
      <filter dst_ip="166.59.195.61" dst_port="4221" src_ip="194.236.14.68" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
4160[label="211.166.144.68;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6361[label="211.166.144.68;2pkt 2fpkt", shape=invtriangle, color=brown];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.166.144.68:1863, 131.186.218.150:3188}[33.3333%]&lt;BR/&gt;{211.166.144.68:1863, 131.186.134.69:3051}[33.3333%]&lt;BR/&gt;{211.166.144.68:1863, 131.186.134.69:3060}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3060: (20%)&lt;BR/&gt; 3051: (20%)&lt;BR/&gt; 3188: (10%)&gt;];
}
4160--6361[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.134.69" dst_port="3060" src_ip="211.166.144.68" src_port="1863"/>
      <filter dst_ip="131.186.134.69" dst_port="3051" src_ip="211.166.144.68" src_port="1863"/>
      <filter dst_ip="131.186.218.150" dst_port="3188" src_ip="211.166.144.68" src_port="1863"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_996{
style=filled;
color=gray75;
4162[label="166.59.200.68;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6362[label="166.59.200.68;50pkt 50fpkt", shape=invtriangle, color=brown];
stat996[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.200.68:*, 10.0.1.128:6667}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 4032: (0.990099%)&lt;BR/&gt; 4006: (0.990099%)&lt;BR/&gt; 3980: (0.990099%)&lt;BR/&gt; 3978: (0.990099%)&gt;];
}
4162--6362[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.1.128" dst_port="6667" src_ip="166.59.200.68"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.128.97.70"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.195.242.70"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
4182[label="194.236.14.71;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6373[label="194.236.14.71;9pkt 9fpkt", shape=invtriangle, color=brown];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.71:5050, *:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (38.8889%)&lt;BR/&gt; 3250: (5.55556%)&lt;BR/&gt; 3009: (5.55556%)&lt;BR/&gt; 2711: (5.55556%)&lt;BR/&gt; 1302: (5.55556%)&gt;];
}
4182--6373[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.71" src_port="5050"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
4188[label="193.43.142.71;169pkt 169fpkt", shape=pentagon, color=darkviolet];
6378[label="193.43.142.71;169pkt 169fpkt", shape=invtriangle, color=brown];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.43.142.71:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4188--6378[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.43.142.71" src_port="1025"/>
    </slice>
    <from sec="1120712975" usec="0"/>
    <to sec="1120713001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.172.71"/>
    </slice>
    <from sec="1120712454" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
4192[label="194.236.14.72;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6381[label="194.236.14.72;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.72:5050, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.3043%)&lt;BR/&gt; 3565: (4.34783%)&lt;BR/&gt; 3417: (4.34783%)&lt;BR/&gt; 3010: (4.34783%)&lt;BR/&gt; 2814: (4.34783%)&gt;];
}
4192--6381[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.72" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96514,1.98149,503,0 0 0 0 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
2885[label="209.174.90.245;d;12pkt 12fpkt", shape=hexagon, color=black];
3794[label="145.223.45.34;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6170[label="145.223.45.34;8pkt 8fpkt", shape=invtriangle, color=brown];
7470[label="145.223.45.34;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.45.34:*, 209.174.90.245:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1218: (5.55556%)&lt;BR/&gt; 1216: (5.55556%)&lt;BR/&gt; 1214: (5.55556%)&lt;BR/&gt; 1212: (5.55556%)&gt;];
}
2885--3794[label="1;8pkt 8fpkt"];
2885--6170[label="1;8pkt 8fpkt"];
2885--7470[label="1;8pkt 8fpkt"];
3794--6170[label="1;8pkt 8fpkt"];
3794--7470[label="1;8pkt 8fpkt"];
6170--7470[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.174.90.245" dst_port="80" src_ip="145.223.45.34"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
4212[label="161.99.160.73;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6390[label="161.99.160.73;11pkt 11fpkt", shape=invtriangle, color=brown];
7600[label="161.99.160.73;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.160.73:*, 202.203.232.38:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1695: (4.41176%)&lt;BR/&gt; 1694: (4.41176%)&lt;BR/&gt; 1693: (4.41176%)&lt;BR/&gt; 1692: (4.41176%)&gt;];
}
4212--6390[label="1;11pkt 11fpkt"];
4212--7600[label="1;11pkt 11fpkt"];
6390--7600[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="202.203.232.38" dst_port="80" src_ip="161.99.160.73"/>
    </slice>
    <from sec="1120713187" usec="0"/>
    <to sec="1120713191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
1741[label="211.166.144.103;d;17pkt 17fpkt", shape=diamond, color=yellow];
4058[label="161.107.224.58;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4214[label="161.107.225.73;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6302[label="161.107.224.58;4pkt 4fpkt", shape=invtriangle, color=brown];
6391[label="161.107.225.73;5pkt 5fpkt", shape=invtriangle, color=brown];
7547[label="161.107.224.58;5pkt 5fpkt", shape=invhouse, color=bisque];
7601[label="161.107.225.73;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.144.103:1863}[68%]&lt;BR/&gt;{161.107.224.58:*, *:1863}[20%]&lt;BR/&gt;{161.107.225.73:*, *:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1366: (4.44444%)&lt;BR/&gt; 1287: (4.44444%)&lt;BR/&gt; 1526: (3.33333%)&lt;BR/&gt; 1519: (3.33333%)&gt;];
}
1741--4058[label="0.25;1pkt 1fpkt"];
1741--4214[label="0.2;1pkt 1fpkt"];
1741--6302[label="0.25;1pkt 1fpkt"];
1741--6391[label="0.2;1pkt 1fpkt"];
1741--7547[label="0.2;1pkt 1fpkt"];
1741--7601[label="0.2;1pkt 1fpkt"];
4058--6302[label="1;4pkt 4fpkt"];
4058--7547[label="1;4pkt 4fpkt"];
4214--6391[label="1;5pkt 5fpkt"];
4214--7601[label="1;5pkt 5fpkt"];
6302--7547[label="1;4pkt 4fpkt"];
6391--7601[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="161.107.225.73"/>
      <filter dst_port="1863" src_ip="161.107.224.58"/>
      <filter dst_ip="211.166.144.103" dst_port="1863"/>
    </slice>
    <from sec="1120712624" usec="0"/>
    <to sec="1120712914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7923,2.02545,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
2327[label="213.17.227.73;s;102pkt 102fpkt", shape=diamond, color=yellow];
7602[label="213.17.227.73;107pkt 107fpkt", shape=invhouse, color=bisque];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.227.73:25, *:*}[51.8519%]&lt;BR/&gt;{213.17.227.73:*, *:113}[47.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.8373%)&lt;BR/&gt; 113: (23.6842%)&lt;BR/&gt; 64073: (0.478469%)&lt;BR/&gt; 62879: (0.478469%)&lt;BR/&gt; 61208: (0.478469%)&gt;];
}
2327--4215[label="1;102pkt 102fpkt"];
2327--6392[label="0.990196;101pkt 101fpkt"];
2327--7602[label="0.990196;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.227.73" src_port="25"/>
      <filter dst_port="113" src_ip="213.17.227.73"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
531[label="200.128.177.196;d;124pkt 124fpkt", shape=diamond, color=yellow];
2060[label="145.223.51.74;s;113pkt 113fpkt", shape=diamond, color=yellow];
4222[label="145.223.51.74;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6395[label="145.223.51.74;112pkt 112fpkt", shape=invtriangle, color=brown];
7605[label="145.223.51.74;113pkt 113fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.51.74:*, 200.128.177.196:80}[88.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2764: (0.43554%)&lt;BR/&gt; 2763: (0.43554%)&lt;BR/&gt; 2762: (0.43554%)&lt;BR/&gt; 2761: (0.43554%)&gt;];
}
531--623[label="0.0967742;12pkt 12fpkt"];
531--2060[label="0.982301;111pkt 111fpkt"];
531--4222[label="0.991071;111pkt 111fpkt"];
531--6395[label="0.991071;111pkt 111fpkt"];
531--7605[label="0.982301;111pkt 111fpkt"];
2060--2329[label="0.0222222;2pkt 2fpkt"];
2060--4222[label="1;112pkt 112fpkt"];
2060--6395[label="1;112pkt 112fpkt"];
2060--7605[label="1;113pkt 113fpkt"];
4222--6395[label="1;112pkt 112fpkt"];
4222--7605[label="1;112pkt 112fpkt"];
6395--7605[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="200.128.177.196" dst_port="80" src_ip="145.223.51.74"/>
    </slice>
    <from sec="1120712729" usec="0"/>
    <to sec="1120712894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
4223[label="161.99.74.74;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6396[label="161.99.74.74;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.74.74:*, 222.31.81.48:80}[50%]&lt;BR/&gt;{161.99.74.74:*, 129.35.83.210:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1534: (5.26316%)&lt;BR/&gt; 1533: (5.26316%)&lt;BR/&gt; 1532: (5.26316%)&lt;BR/&gt; 1531: (5.26316%)&gt;];
}
4223--6396[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="222.31.81.48" dst_port="80" src_ip="161.99.74.74"/>
      <filter dst_ip="129.35.83.210" dst_port="80" src_ip="161.99.74.74"/>
    </slice>
    <from sec="1120713247" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
4230[label="213.165.234.74;80pkt 80fpkt", shape=pentagon, color=darkviolet];
6400[label="213.165.234.74;80pkt 80fpkt", shape=invtriangle, color=brown];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.165.234.74:*, *:139}[56.25%]&lt;BR/&gt;{213.165.234.74:*, *:445}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (28.125%)&lt;BR/&gt; 445: (21.875%)&lt;BR/&gt; 55921: (0.625%)&lt;BR/&gt; 55517: (0.625%)&lt;BR/&gt; 55264: (0.625%)&gt;];
}
4230--6400[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.165.234.74"/>
      <filter dst_port="445" src_ip="213.165.234.74"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
4239[label="170.234.129.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6402[label="170.234.129.75;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.234.129.75:4237, 166.59.140.209:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4237: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4239--6402[label="1;1pkt 1fpkt"];
4239--7609[label="1;1pkt 1fpkt"];
6402--7609[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.140.209" dst_port="53" src_ip="170.234.129.75" src_port="4237"/>
    </slice>
    <from sec="1120712759" usec="0"/>
    <to sec="1120713010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
4244[label="26.32.30.76;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6406[label="26.32.30.76;19pkt 19fpkt", shape=invtriangle, color=brown];
7612[label="26.32.30.76;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.32.30.76:80, 212.79.192.188:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2677: (2.67857%)&lt;BR/&gt; 2656: (2.67857%)&lt;BR/&gt; 2655: (2.67857%)&lt;BR/&gt; 2653: (2.67857%)&gt;];
}
4244--6406[label="1;18pkt 18fpkt"];
4244--7612[label="1;18pkt 18fpkt"];
6406--7612[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.188" src_ip="26.32.30.76" src_port="80"/>
    </slice>
    <from sec="1120713140" usec="0"/>
    <to sec="1120713230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.177.104.77"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
4258[label="212.209.40.78;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6414[label="212.209.40.78;17pkt 17fpkt", shape=invtriangle, color=brown];
7619[label="212.209.40.78;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.209.40.78:80, 149.177.66.98:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55893: (2.88462%)&lt;BR/&gt; 55803: (2.88462%)&lt;BR/&gt; 55802: (2.88462%)&lt;BR/&gt; 55790: (2.88462%)&gt;];
}
4258--6414[label="1;17pkt 17fpkt"];
4258--7619[label="1;17pkt 17fpkt"];
6414--7619[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.66.98" src_ip="212.209.40.78" src_port="80"/>
    </slice>
    <from sec="1120713088" usec="0"/>
    <to sec="1120713134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.223.181.78"/>
    </slice>
    <from sec="1120712448" usec="0"/>
    <to sec="1120712903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
4269[label="149.110.197.78;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6418[label="149.110.197.78;21pkt 21fpkt", shape=invtriangle, color=brown];
7621[label="149.110.197.78;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.197.78:*, 24.250.162.149:80}[47.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1424: (2.45902%)&lt;BR/&gt; 1423: (2.45902%)&lt;BR/&gt; 1422: (2.45902%)&lt;BR/&gt; 1421: (2.45902%)&gt;];
}
4269--6418[label="1;20pkt 20fpkt"];
4269--7621[label="1;20pkt 20fpkt"];
6418--7621[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="24.250.162.149" dst_port="80" src_ip="149.110.197.78"/>
    </slice>
    <from sec="1120712531" usec="0"/>
    <to sec="1120713086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
4274[label="25.178.229.79;167pkt 167fpkt", shape=pentagon, color=darkviolet];
6420[label="25.178.229.79;168pkt 168fpkt", shape=invtriangle, color=brown];
7622[label="25.178.229.79;168pkt 168fpkt", shape=invhouse, color=bisque];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.178.229.79:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4981: (0.298211%)&lt;BR/&gt; 4938: (0.298211%)&lt;BR/&gt; 4910: (0.298211%)&lt;BR/&gt; 4818: (0.298211%)&gt;];
}
4274--6420[label="1;167pkt 167fpkt"];
4274--7622[label="1;167pkt 167fpkt"];
6420--7622[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="25.178.229.79"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
4276[label="194.236.14.80;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6422[label="194.236.14.80;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.80:5050, *:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34.6154%)&lt;BR/&gt; 3853: (7.69231%)&lt;BR/&gt; 2026: (7.69231%)&lt;BR/&gt; 1612: (7.69231%)&lt;BR/&gt; 1109: (7.69231%)&gt;];
}
4276--6422[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.80" src_port="5050"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.66.34.80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
4288[label="211.166.144.80;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6431[label="211.166.144.80;4pkt 4fpkt", shape=invtriangle, color=brown];
7628[label="211.166.144.80;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.166.144.80:1863, 131.186.8.26:3368}[20%]&lt;BR/&gt;{211.166.144.80:1863, 131.186.37.83:1065}[20%]&lt;BR/&gt;{211.166.144.80:1863, 131.186.236.169:2675}[20%]&lt;BR/&gt;{211.166.144.80:1863, 131.186.247.38:2102}[20%]&lt;BR/&gt;{211.166.144.80:1863, 131.186.247.38:2130}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3368: (11.5385%)&lt;BR/&gt; 2675: (11.5385%)&lt;BR/&gt; 2130: (11.5385%)&lt;BR/&gt; 1065: (11.5385%)&gt;];
}
4288--6431[label="1;4pkt 4fpkt"];
4288--7628[label="1;4pkt 4fpkt"];
6431--7628[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.247.38" dst_port="2130" src_ip="211.166.144.80" src_port="1863"/>
      <filter dst_ip="131.186.247.38" dst_port="2102" src_ip="211.166.144.80" src_port="1863"/>
      <filter dst_ip="131.186.236.169" dst_port="2675" src_ip="211.166.144.80" src_port="1863"/>
      <filter dst_ip="131.186.37.83" dst_port="1065" src_ip="211.166.144.80" src_port="1863"/>
      <filter dst_ip="131.186.8.26" dst_port="3368" src_ip="211.166.144.80" src_port="1863"/>
    </slice>
    <from sec="1120712426" usec="0"/>
    <to sec="1120713246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
1016[label="212.79.195.80;s;1274pkt 1274fpkt", shape=diamond, color=yellow];
4290[label="212.79.195.80;1344pkt 1344fpkt", shape=pentagon, color=darkviolet];
6432[label="212.79.195.80;1345pkt 1345fpkt", shape=invtriangle, color=brown];
7629[label="212.79.195.80;1344pkt 1344fpkt", shape=invhouse, color=bisque];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.195.80:53, *:*}[99.4052%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.097%)&lt;BR/&gt; 32768: (2.86414%)&lt;BR/&gt; 32769: (1.11174%)&lt;BR/&gt; 1024: (0.753721%)&lt;BR/&gt; 33701: (0.678349%)&gt;];
}
1016--3384[label="0.00941915;12pkt 12fpkt"];
1016--3387[label="0.0832025;106pkt 106fpkt"];
1016--4290[label="0.999215;1273pkt 1273fpkt"];
1016--6432[label="1;1274pkt 1274fpkt"];
1016--7629[label="0.999215;1273pkt 1273fpkt"];
4290--6432[label="1;1344pkt 1344fpkt"];
4290--7629[label="1;1344pkt 1344fpkt"];
6432--7629[label="1;1344pkt 1344fpkt"];
</description>
    <slice>
      <filter src_ip="212.79.195.80" src_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
4297[label="194.108.45.81;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6436[label="194.108.45.81;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.108.45.81:80, 212.66.39.25:*}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8723%)&lt;BR/&gt; 3966: (2.12766%)&lt;BR/&gt; 3956: (2.12766%)&lt;BR/&gt; 3954: (2.12766%)&lt;BR/&gt; 3953: (2.12766%)&gt;];
}
4297--6436[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.39.25" src_ip="194.108.45.81" src_port="80"/>
    </slice>
    <from sec="1120712850" usec="0"/>
    <to sec="1120712959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
4304[label="219.151.168.81;98pkt 98fpkt", shape=pentagon, color=darkviolet];
6439[label="219.151.168.81;98pkt 98fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.151.168.81:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2025: (0.510204%)&lt;BR/&gt; 2018: (0.510204%)&lt;BR/&gt; 1999: (0.510204%)&lt;BR/&gt; 1988: (0.510204%)&gt;];
}
4304--6439[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.151.168.81"/>
    </slice>
    <from sec="1120713233" usec="0"/>
    <to sec="1120713250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
440[label="145.222.177.81;s;469pkt 469fpkt", shape=diamond, color=yellow];
2373[label="194.91.20.136;d;4pkt 4fpkt", shape=diamond, color=yellow];
2960[label="145.222.177.81;s;385pkt 385fpkt", shape=hexagon, color=black];
4305[label="145.222.177.81;542pkt 542fpkt", shape=pentagon, color=darkviolet];
6440[label="145.222.177.81;543pkt 543fpkt", shape=invtriangle, color=brown];
7632[label="145.222.177.81;542pkt 542fpkt", shape=invhouse, color=bisque];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.177.81:4896, *:53}[95.7875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1147%)&lt;BR/&gt; 4896: (48.2495%)&lt;BR/&gt; 0: (1.77062%)&lt;BR/&gt; 43757: (0.100604%)&lt;BR/&gt; 35876: (0.100604%)&gt;];
}
440--1380[label="0.00854701;1pkt 1fpkt"];
440--1834[label="0.00934579;1pkt 1fpkt"];
440--1880[label="0.00900901;1pkt 1fpkt"];
440--2126[label="0.00925926;1pkt 1fpkt"];
440--2176[label="0.0102041;1pkt 1fpkt"];
440--2319[label="0.0021322;1pkt 1fpkt"];
440--2373[label="0.25;1pkt 1fpkt"];
440--2415[label="0.00990099;1pkt 1fpkt"];
440--2425[label="0.00909091;1pkt 1fpkt"];
440--2435[label="0.00961538;1pkt 1fpkt"];
440--2598[label="0.0153846;1pkt 1fpkt"];
440--2600[label="0.00961538;1pkt 1fpkt"];
440--2960[label="1;385pkt 385fpkt"];
440--3318[label="0.00854701;1pkt 1fpkt"];
440--3384[label="0.159915;75pkt 75fpkt"];
440--3387[label="0.00426439;2pkt 2fpkt"];
440--4305[label="0.997868;468pkt 468fpkt"];
440--6440[label="1;469pkt 469fpkt"];
440--7632[label="0.997868;468pkt 468fpkt"];
2373--2960[label="0.25;1pkt 1fpkt"];
2373--3384[label="1;4pkt 4fpkt"];
2373--4305[label="0.25;1pkt 1fpkt"];
2373--6440[label="0.25;1pkt 1fpkt"];
2373--7632[label="0.25;1pkt 1fpkt"];
2960--3318[label="0.00854701;1pkt 1fpkt"];
2960--3384[label="0.194805;75pkt 75fpkt"];
2960--4305[label="0.997403;384pkt 384fpkt"];
2960--6440[label="1;385pkt 385fpkt"];
2960--7632[label="0.997403;384pkt 384fpkt"];
4305--6440[label="1;542pkt 542fpkt"];
4305--7632[label="1;542pkt 542fpkt"];
6440--7632[label="1;542pkt 542fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="145.222.177.81" src_port="4896"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
1988[label="218.115.164.113;d;18pkt 18fpkt", shape=diamond, color=yellow];
4059[label="213.17.232.58;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4072[label="213.17.232.60;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4306[label="213.17.226.81;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6303[label="213.17.232.58;6pkt 6fpkt", shape=invtriangle, color=brown];
6313[label="213.17.232.60;5pkt 5fpkt", shape=invtriangle, color=brown];
6441[label="213.17.226.81;5pkt 5fpkt", shape=invtriangle, color=brown];
7553[label="213.17.232.60;5pkt 5fpkt", shape=invhouse, color=bisque];
7633[label="213.17.226.81;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.115.164.113:53}[66.6667%]&lt;BR/&gt;{213.17.232.58:*, *:53}[22.2222%]&lt;BR/&gt;{213.17.232.60:*, *:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.8333%)&lt;BR/&gt; 63962: (10%)&lt;BR/&gt; 62742: (9.16667%)&lt;BR/&gt; 56938: (7.5%)&lt;BR/&gt; 63067: (3.33333%)&gt;];
}
1988--2801[label="0.0555556;1pkt 1fpkt"];
1988--3384[label="0.0555556;1pkt 1fpkt"];
1988--4059[label="0.5;3pkt 3fpkt"];
1988--4072[label="0.5;3pkt 3fpkt"];
1988--4306[label="0.4;2pkt 2fpkt"];
1988--5757[label="0.0555556;1pkt 1fpkt"];
1988--6303[label="0.5;3pkt 3fpkt"];
1988--6313[label="0.6;3pkt 3fpkt"];
1988--6441[label="0.4;2pkt 2fpkt"];
1988--7553[label="0.6;3pkt 3fpkt"];
1988--7633[label="0.5;2pkt 2fpkt"];
4059--6303[label="1;6pkt 6fpkt"];
4072--6313[label="1;5pkt 5fpkt"];
4072--7553[label="1;5pkt 5fpkt"];
4306--6441[label="1;5pkt 5fpkt"];
4306--7633[label="1;4pkt 4fpkt"];
6313--7553[label="1;5pkt 5fpkt"];
6441--7633[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="213.17.232.60"/>
      <filter dst_port="53" src_ip="213.17.232.58"/>
      <filter dst_ip="218.115.164.113" dst_port="53"/>
    </slice>
    <from sec="1120712432" usec="0"/>
    <to sec="1120713240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
4315[label="161.107.225.82;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6446[label="161.107.225.82;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.225.82:1206, 211.166.144.73:1863}[33.3333%]&lt;BR/&gt;{161.107.225.82:1207, 211.166.144.107:1863}[33.3333%]&lt;BR/&gt;{161.107.225.82:1051, 211.166.144.136:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1206: (20%)&lt;BR/&gt; 1051: (20%)&lt;BR/&gt; 1207: (10%)&gt;];
}
4315--6446[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.136" dst_port="1863" src_ip="161.107.225.82" src_port="1051"/>
      <filter dst_ip="211.166.144.107" dst_port="1863" src_ip="161.107.225.82" src_port="1207"/>
      <filter dst_ip="211.166.144.73" dst_port="1863" src_ip="161.107.225.82" src_port="1206"/>
    </slice>
    <from sec="1120712627" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
4319[label="194.236.14.83;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6448[label="194.236.14.83;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.83:5050, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (40.9091%)&lt;BR/&gt; 4823: (9.09091%)&lt;BR/&gt; 3015: (9.09091%)&lt;BR/&gt; 1065: (9.09091%)&lt;BR/&gt; 1051: (9.09091%)&gt;];
}
4319--6448[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.83" src_port="5050"/>
    </slice>
    <from sec="1120712448" usec="0"/>
    <to sec="1120713289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
4326[label="194.236.14.84;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6451[label="194.236.14.84;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.84:5050, 166.59.170.240:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.8571%)&lt;BR/&gt; 3053: (7.14286%)&lt;BR/&gt; 1061: (7.14286%)&lt;BR/&gt; 1058: (7.14286%)&lt;BR/&gt; 1057: (7.14286%)&gt;];
}
4326--6451[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.170.240" src_ip="194.236.14.84" src_port="5050"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.57.162.84"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
2659[label="194.236.14.86;s;12pkt 12fpkt", shape=diamond, color=yellow];
4346[label="194.236.14.86;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6461[label="194.236.14.86;11pkt 11fpkt", shape=invtriangle, color=brown];
7644[label="194.236.14.86;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.86:5050, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.3043%)&lt;BR/&gt; 4735: (4.34783%)&lt;BR/&gt; 3002: (4.34783%)&lt;BR/&gt; 2521: (4.34783%)&lt;BR/&gt; 1525: (4.34783%)&gt;];
}
2659--3388[label="0.0833333;1pkt 1fpkt"];
2659--4346[label="1;12pkt 12fpkt"];
2659--6461[label="1;11pkt 11fpkt"];
2659--7644[label="1;11pkt 11fpkt"];
4346--6461[label="1;11pkt 11fpkt"];
4346--7644[label="1;11pkt 11fpkt"];
6461--7644[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.86" src_port="5050"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.129.193.86"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1031{
style=filled;
color=gray75;
4364[label="194.236.14.88;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6472[label="194.236.14.88;8pkt 8fpkt", shape=invtriangle, color=brown];
7650[label="194.236.14.88;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1031[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.88:5050, *:*}[50%]&lt;BR/&gt;{194.236.14.88:20, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25%)&lt;BR/&gt; 20: (12.5%)&lt;BR/&gt; 3107: (6.25%)&lt;BR/&gt; 3012: (6.25%)&lt;BR/&gt; 1563: (6.25%)&gt;];
}
4364--6472[label="1;8pkt 8fpkt"];
4364--7650[label="1;8pkt 8fpkt"];
6472--7650[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.88" src_port="5050"/>
      <filter src_ip="194.236.14.88" src_port="20"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
4365[label="212.66.35.88;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6473[label="212.66.35.88;2pkt 2fpkt", shape=invtriangle, color=brown];
7651[label="212.66.35.88;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.35.88:49394, 27.57.163.33:80}[50%]&lt;BR/&gt;{212.66.35.88:49393, 27.57.165.51:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49394: (25%)&lt;BR/&gt; 49393: (25%)&gt;];
}
4365--6473[label="1;2pkt 2fpkt"];
4365--7651[label="1;2pkt 2fpkt"];
6473--7651[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="27.57.165.51" dst_port="80" src_ip="212.66.35.88" src_port="49393"/>
      <filter dst_ip="27.57.163.33" dst_port="80" src_ip="212.66.35.88" src_port="49394"/>
    </slice>
    <from sec="1120713301" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.99.118.89"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
4381[label="166.59.158.89;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6483[label="166.59.158.89;11pkt 11fpkt", shape=invtriangle, color=brown];
7656[label="166.59.158.89;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.158.89:80, 212.11.11.19:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 62477: (4.54545%)&lt;BR/&gt; 58565: (4.54545%)&lt;BR/&gt; 52862: (4.54545%)&lt;BR/&gt; 41276: (4.54545%)&gt;];
}
4381--6483[label="1;11pkt 11fpkt"];
4381--7656[label="1;11pkt 11fpkt"];
6483--7656[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="212.11.11.19" src_ip="166.59.158.89" src_port="80"/>
    </slice>
    <from sec="1120712434" usec="0"/>
    <to sec="1120713241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.151.90"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
4396[label="84.163.109.91;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6491[label="84.163.109.91;238pkt 238fpkt", shape=invtriangle, color=brown];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.163.109.91:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50376: (0.630252%)&lt;BR/&gt; 51022: (0.420168%)&lt;BR/&gt; 50951: (0.420168%)&lt;BR/&gt; 50811: (0.420168%)&gt;];
}
4396--6491[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.163.109.91"/>
    </slice>
    <from sec="1120713107" usec="0"/>
    <to sec="1120713143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.158.92"/>
    </slice>
    <from sec="1120712437" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
4410[label="145.223.170.92;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6500[label="145.223.170.92;22pkt 22fpkt", shape=invtriangle, color=brown];
7666[label="145.223.170.92;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.170.92:53, *:*}[54.5455%]&lt;BR/&gt;{145.223.170.92:25, *:*}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.5625%)&lt;BR/&gt; 25: (23.4375%)&lt;BR/&gt; 56485: (2.34375%)&lt;BR/&gt; 52758: (2.34375%)&lt;BR/&gt; 49043: (2.34375%)&gt;];
}
4410--6500[label="1;21pkt 21fpkt"];
4410--7666[label="1;21pkt 21fpkt"];
6500--7666[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.170.92" src_port="53"/>
      <filter src_ip="145.223.170.92" src_port="25"/>
    </slice>
    <from sec="1120712643" usec="0"/>
    <to sec="1120713192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1039{
style=filled;
color=gray75;
579[label="213.17.227.92;s;1202pkt 1202fpkt", shape=diamond, color=yellow];
4411[label="213.17.227.92;1290pkt 1290fpkt", shape=pentagon, color=darkviolet];
6501[label="213.17.227.92;1290pkt 1290fpkt", shape=invtriangle, color=brown];
7667[label="213.17.227.92;1289pkt 1289fpkt", shape=invhouse, color=bisque];
stat1039[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.227.92:53, *:*}[83.6434%]&lt;BR/&gt;{213.17.227.92:*, *:53}[23.7209%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.6975%)&lt;BR/&gt; 57362: (7.69079%)&lt;BR/&gt; 32768: (1.79452%)&lt;BR/&gt; 32769: (0.828239%)&lt;BR/&gt; 0: (0.788799%)&gt;];
}
579--1380[label="0.00854701;1pkt 1fpkt"];
579--2126[label="0.00925926;1pkt 1fpkt"];
579--2415[label="0.00990099;1pkt 1fpkt"];
579--2425[label="0.00909091;1pkt 1fpkt"];
579--2435[label="0.00961538;1pkt 1fpkt"];
579--2598[label="0.0153846;1pkt 1fpkt"];
579--2600[label="0.00961538;1pkt 1fpkt"];
579--3318[label="0.00854701;1pkt 1fpkt"];
579--3384[label="0.015807;19pkt 19fpkt"];
579--3387[label="0.077371;93pkt 93fpkt"];
579--4411[label="1;1202pkt 1202fpkt"];
579--6501[label="1;1202pkt 1202fpkt"];
579--7667[label="0.999168;1201pkt 1201fpkt"];
4411--6501[label="1;1290pkt 1290fpkt"];
4411--7667[label="1;1289pkt 1289fpkt"];
6501--7667[label="1;1289pkt 1289fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.227.92" src_port="53"/>
      <filter dst_port="53" src_ip="213.17.227.92"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
4412[label="194.236.14.93;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6502[label="194.236.14.93;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.93:5050, *:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34.6154%)&lt;BR/&gt; 3700: (7.69231%)&lt;BR/&gt; 2429: (7.69231%)&lt;BR/&gt; 1985: (7.69231%)&lt;BR/&gt; 1471: (7.69231%)&gt;];
}
4412--6502[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.93" src_port="5050"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
4422[label="203.18.105.94;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6507[label="203.18.105.94;7pkt 7fpkt", shape=invtriangle, color=brown];
7671[label="203.18.105.94;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.18.105.94:80, 131.186.134.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55848: (7.5%)&lt;BR/&gt; 55847: (7.5%)&lt;BR/&gt; 55846: (7.5%)&lt;BR/&gt; 55845: (7.5%)&gt;];
}
4422--6507[label="1;7pkt 7fpkt"];
4422--7671[label="1;6pkt 6fpkt"];
6507--7671[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.134.40" src_ip="203.18.105.94" src_port="80"/>
    </slice>
    <from sec="1120712945" usec="0"/>
    <to sec="1120713170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
1686[label="213.17.229.94;s;24pkt 24fpkt", shape=diamond, color=yellow];
4425[label="213.17.229.94;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6509[label="213.17.229.94;25pkt 25fpkt", shape=invtriangle, color=brown];
7672[label="213.17.229.94;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.229.94:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63857: (2%)&lt;BR/&gt; 61983: (2%)&lt;BR/&gt; 51753: (2%)&lt;BR/&gt; 40205: (2%)&gt;];
}
1686--4425[label="1;24pkt 24fpkt"];
1686--6509[label="0.958333;23pkt 23fpkt"];
1686--7672[label="0.958333;23pkt 23fpkt"];
4425--6509[label="1;25pkt 25fpkt"];
4425--7672[label="1;25pkt 25fpkt"];
6509--7672[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.229.94" src_port="25"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120713276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
4426[label="84.93.237.94;675pkt 675fpkt", shape=pentagon, color=darkviolet];
6510[label="84.93.237.94;674pkt 674fpkt", shape=invtriangle, color=brown];
7673[label="84.93.237.94;674pkt 674fpkt", shape=invhouse, color=bisque];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.93.237.94:40519, *:1026}[24%]&lt;BR/&gt;{84.93.237.94:40519, *:1027}[20.7407%]&lt;BR/&gt;{84.93.237.94:40794, *:1027}[20%]&lt;BR/&gt;{84.93.237.94:40794, *:1026}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.9763%)&lt;BR/&gt; 1027: (24.0237%)&lt;BR/&gt; 40519: (22.3925%)&lt;BR/&gt; 40794: (20.0198%)&lt;BR/&gt; 40525: (7.58774%)&gt;];
}
4426--6510[label="1;674pkt 674fpkt"];
4426--7673[label="1;674pkt 674fpkt"];
6510--7673[label="1;674pkt 674fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="84.93.237.94" src_port="40519"/>
      <filter dst_port="1027" src_ip="84.93.237.94" src_port="40519"/>
      <filter dst_port="1026" src_ip="84.93.237.94" src_port="40794"/>
      <filter dst_port="1027" src_ip="84.93.237.94" src_port="40794"/>
    </slice>
    <from sec="1120713191" usec="0"/>
    <to sec="1120713239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
4431[label="24.179.92.95;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6514[label="24.179.92.95;5pkt 5fpkt", shape=invtriangle, color=brown];
7675[label="24.179.92.95;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.179.92.95:80, 149.110.202.175:*}[66.6667%]&lt;BR/&gt;{24.179.92.95:80, 161.99.206.56:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51884: (9.375%)&lt;BR/&gt; 51883: (9.375%)&lt;BR/&gt; 51881: (9.375%)&lt;BR/&gt; 3299: (9.375%)&gt;];
}
4431--6514[label="1;5pkt 5fpkt"];
4431--7675[label="1;5pkt 5fpkt"];
6514--7675[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.202.175" src_ip="24.179.92.95" src_port="80"/>
      <filter dst_ip="161.99.206.56" src_ip="24.179.92.95" src_port="80"/>
    </slice>
    <from sec="1120712652" usec="0"/>
    <to sec="1120712746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.218.10.96"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
4444[label="161.99.245.96;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6523[label="161.99.245.96;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.245.96:80, 214.24.71.121:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59876: (4.34783%)&lt;BR/&gt; 48491: (4.34783%)&lt;BR/&gt; 47231: (4.34783%)&lt;BR/&gt; 45170: (4.34783%)&gt;];
}
4444--6523[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.24.71.121" src_ip="161.99.245.96" src_port="80"/>
    </slice>
    <from sec="1120712652" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="153.144.11.97"/>
    </slice>
    <from sec="1120712630" usec="0"/>
    <to sec="1120712653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
1611[label="194.236.14.97;s;15pkt 15fpkt", shape=diamond, color=yellow];
4448[label="194.236.14.97;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6526[label="194.236.14.97;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.97:5050, *:*}[80%]&lt;BR/&gt;{194.236.14.97:20, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (39.5349%)&lt;BR/&gt; 20: (10.4651%)&lt;BR/&gt; 1054: (6.97674%)&lt;BR/&gt; 63327: (3.48837%)&lt;BR/&gt; 4196: (3.48837%)&gt;];
}
1611--4448[label="1;14pkt 14fpkt"];
1611--6526[label="1;14pkt 14fpkt"];
4448--6526[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.97" src_port="5050"/>
      <filter src_ip="194.236.14.97" src_port="20"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.132.73.97"/>
    </slice>
    <from sec="1120712844" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.195.219.97"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
4458[label="161.107.224.97;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6533[label="161.107.224.97;17pkt 17fpkt", shape=invtriangle, color=brown];
7686[label="161.107.224.97;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.224.97:*, 26.23.55.178:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1537: (3%)&lt;BR/&gt; 1536: (3%)&lt;BR/&gt; 1535: (3%)&lt;BR/&gt; 1534: (3%)&gt;];
}
4458--6533[label="1;16pkt 16fpkt"];
4458--7686[label="1;16pkt 16fpkt"];
6533--7686[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="26.23.55.178" dst_port="80" src_ip="161.107.224.97"/>
    </slice>
    <from sec="1120712894" usec="0"/>
    <to sec="1120712928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.2.16.98"/>
    </slice>
    <from sec="1120713242" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.42.61.98"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1054{
style=filled;
color=gray75;
2641[label="194.236.14.99;s;16pkt 16fpkt", shape=diamond, color=yellow];
3308[label="194.236.14.99;s;16pkt 16fpkt", shape=hexagon, color=black];
4469[label="194.236.14.99;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6539[label="194.236.14.99;16pkt 16fpkt", shape=invtriangle, color=brown];
7690[label="194.236.14.99;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1054[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.99:5050, *:*}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (40.5063%)&lt;BR/&gt; 20: (6.32911%)&lt;BR/&gt; 63446: (3.16456%)&lt;BR/&gt; 42632: (3.16456%)&lt;BR/&gt; 2400: (3.16456%)&gt;];
}
2641--3308[label="1;16pkt 16fpkt"];
2641--4469[label="1;16pkt 16fpkt"];
2641--6539[label="1;16pkt 16fpkt"];
2641--7690[label="1;15pkt 15fpkt"];
3308--4469[label="1;16pkt 16fpkt"];
3308--6539[label="1;16pkt 16fpkt"];
3308--7690[label="1;15pkt 15fpkt"];
4469--6539[label="1;16pkt 16fpkt"];
4469--7690[label="1;15pkt 15fpkt"];
6539--7690[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.99" src_port="5050"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.24.75.100"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.26.168.100"/>
    </slice>
    <from sec="1120712437" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.134.157.101"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.132.102"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
4515[label="0.26.169.103;196pkt 196fpkt", shape=pentagon, color=darkviolet];
6559[label="0.26.169.103;197pkt 197fpkt", shape=invtriangle, color=brown];
7703[label="0.26.169.103;197pkt 197fpkt", shape=invhouse, color=bisque];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.26.169.103:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4515--6559[label="1;196pkt 196fpkt"];
4515--7703[label="1;196pkt 196fpkt"];
6559--7703[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="0.26.169.103" src_port="1028"/>
    </slice>
    <from sec="1120712777" usec="0"/>
    <to sec="1120712817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
481[label="145.222.142.104;s;60pkt 60fpkt", shape=diamond, color=yellow];
2604[label="211.166.147.65;d;16pkt 16fpkt", shape=diamond, color=yellow];
3236[label="145.222.142.104;s;60pkt 60fpkt", shape=hexagon, color=black];
4523[label="145.222.142.104;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6565[label="145.222.142.104;60pkt 60fpkt", shape=invtriangle, color=brown];
7706[label="145.222.142.104;60pkt 60fpkt", shape=invhouse, color=bisque];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.142.104:*, 218.3.197.86:80}[74.6667%]&lt;BR/&gt;{*:*, 211.166.147.65:1863}[21.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0794%)&lt;BR/&gt; 1863: (4.92063%)&lt;BR/&gt; 33386: (0.952381%)&lt;BR/&gt; 33384: (0.952381%)&lt;BR/&gt; 33754: (0.793651%)&gt;];
}
481--1957[label="0.0196078;1pkt 1fpkt"];
481--2604[label="0.0625;1pkt 1fpkt"];
481--3236[label="1;60pkt 60fpkt"];
481--4523[label="1;59pkt 59fpkt"];
481--6565[label="1;60pkt 60fpkt"];
481--7706[label="1;60pkt 60fpkt"];
2604--3236[label="0.0625;1pkt 1fpkt"];
2604--3482[label="0.0625;1pkt 1fpkt"];
2604--4523[label="0.0625;1pkt 1fpkt"];
2604--4819[label="0.0625;1pkt 1fpkt"];
2604--4834[label="0.0625;1pkt 1fpkt"];
2604--4854[label="0.0625;1pkt 1fpkt"];
2604--5473[label="0.5;1pkt 1fpkt"];
2604--5764[label="0.0625;1pkt 1fpkt"];
2604--5866[label="0.0625;1pkt 1fpkt"];
2604--6565[label="0.0625;1pkt 1fpkt"];
2604--6730[label="0.0625;1pkt 1fpkt"];
2604--6749[label="0.0625;1pkt 1fpkt"];
2604--7706[label="0.0625;1pkt 1fpkt"];
2604--7806[label="0.0625;1pkt 1fpkt"];
3236--4523[label="1;59pkt 59fpkt"];
3236--6565[label="1;60pkt 60fpkt"];
3236--7706[label="1;60pkt 60fpkt"];
4523--6565[label="1;59pkt 59fpkt"];
4523--7706[label="1;59pkt 59fpkt"];
6565--7706[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.147.65" dst_port="1863"/>
      <filter dst_ip="218.3.197.86" dst_port="80" src_ip="145.222.142.104"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
2519[label="161.99.59.1;d;21pkt 21fpkt", shape=diamond, color=yellow];
2559[label="203.32.159.104;s;2pkt 2fpkt", shape=diamond, color=yellow];
3267[label="203.32.159.104;s;2pkt 2fpkt", shape=hexagon, color=black];
4524[label="203.32.159.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6566[label="203.32.159.104;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.32.159.105:80, 161.99.59.1:*}[80.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.9286%)&lt;BR/&gt; 2460: (8.92857%)&lt;BR/&gt; 1091: (8.92857%)&lt;BR/&gt; 1755: (7.14286%)&lt;BR/&gt; 1087: (7.14286%)&gt;];
}
2519--2559[label="1;2pkt 2fpkt"];
2519--3267[label="1;2pkt 2fpkt"];
2519--3388[label="0.285714;6pkt 6fpkt"];
2519--4524[label="1;1pkt 1fpkt"];
2519--6566[label="1;2pkt 2fpkt"];
2559--3267[label="1;2pkt 2fpkt"];
2559--4524[label="1;1pkt 1fpkt"];
2559--6566[label="1;2pkt 2fpkt"];
3267--4524[label="1;1pkt 1fpkt"];
3267--6566[label="1;2pkt 2fpkt"];
4524--6566[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.59.1" src_ip="203.32.159.105" src_port="80"/>
    </slice>
    <from sec="1120712796" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.193.104"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
4529[label="26.95.27.105;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6570[label="26.95.27.105;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.95.27.105:80, 149.110.132.237:1077}[33.3333%]&lt;BR/&gt;{26.95.27.105:80, 149.110.132.237:1078}[33.3333%]&lt;BR/&gt;{26.95.27.105:80, 149.110.132.237:1079}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1079: (16.6667%)&lt;BR/&gt; 1078: (16.6667%)&lt;BR/&gt; 1077: (16.6667%)&gt;];
}
4529--6570[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.110.132.237" dst_port="1079" src_ip="26.95.27.105" src_port="80"/>
      <filter dst_ip="149.110.132.237" dst_port="1078" src_ip="26.95.27.105" src_port="80"/>
      <filter dst_ip="149.110.132.237" dst_port="1077" src_ip="26.95.27.105" src_port="80"/>
    </slice>
    <from sec="1120713262" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
769[label="166.59.145.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
2113[label="194.236.14.106;s;13pkt 13fpkt", shape=diamond, color=yellow];
4538[label="194.236.14.106;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6573[label="194.236.14.106;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.106:5050, *:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (48.75%)&lt;BR/&gt; 1031: (5%)&lt;BR/&gt; 62918: (3.75%)&lt;BR/&gt; 4391: (3.75%)&lt;BR/&gt; 3094: (3.75%)&gt;];
}
769--2113[label="0.5;1pkt 1fpkt"];
769--3450[label="0.5;1pkt 1fpkt"];
769--4538[label="0.5;1pkt 1fpkt"];
769--6573[label="0.5;1pkt 1fpkt"];
2113--4538[label="1;13pkt 13fpkt"];
2113--6573[label="1;12pkt 12fpkt"];
4538--6573[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.106" src_port="5050"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
1585[label="26.224.95.106;s;22pkt 22fpkt", shape=diamond, color=yellow];
4540[label="26.224.95.106;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6575[label="26.224.95.106;21pkt 21fpkt", shape=invtriangle, color=brown];
7712[label="26.224.95.106;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.224.95.106:*, 212.66.63.123:24924}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24924: (50%)&lt;BR/&gt; 53211: (2.35294%)&lt;BR/&gt; 52768: (2.35294%)&lt;BR/&gt; 52693: (2.35294%)&lt;BR/&gt; 51807: (2.35294%)&gt;];
}
1585--2795[label="0.909091;20pkt 20fpkt"];
1585--3350[label="0.909091;20pkt 20fpkt"];
1585--4540[label="1;21pkt 21fpkt"];
1585--6575[label="1;21pkt 21fpkt"];
1585--7712[label="1;21pkt 21fpkt"];
4540--6575[label="1;21pkt 21fpkt"];
4540--7712[label="1;21pkt 21fpkt"];
6575--7712[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.63.123" dst_port="24924" src_ip="26.224.95.106"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
1812[label="161.99.201.106;s;341pkt 341fpkt", shape=diamond, color=yellow];
4549[label="161.99.201.106;367pkt 367fpkt", shape=pentagon, color=darkviolet];
6578[label="161.99.201.106;367pkt 367fpkt", shape=invtriangle, color=brown];
7715[label="161.99.201.106;367pkt 367fpkt", shape=invhouse, color=bisque];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.201.106:59809, *:53}[90.4891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59809: (45.1456%)&lt;BR/&gt; 53: (45.1456%)&lt;BR/&gt; 0: (9.70874%)&gt;];
}
1812--1834[label="0.00934579;1pkt 1fpkt"];
1812--1880[label="0.00900901;1pkt 1fpkt"];
1812--2126[label="0.00925926;1pkt 1fpkt"];
1812--2176[label="0.0102041;1pkt 1fpkt"];
1812--2415[label="0.00990099;1pkt 1fpkt"];
1812--2425[label="0.00909091;1pkt 1fpkt"];
1812--2435[label="0.00961538;1pkt 1fpkt"];
1812--2598[label="0.0153846;1pkt 1fpkt"];
1812--2600[label="0.00961538;1pkt 1fpkt"];
1812--2627[label="0.02;1pkt 1fpkt"];
1812--3318[label="0.00854701;1pkt 1fpkt"];
1812--3384[label="0.0762463;26pkt 26fpkt"];
1812--4549[label="0.997067;340pkt 340fpkt"];
1812--6578[label="0.997067;340pkt 340fpkt"];
1812--7715[label="0.997067;340pkt 340fpkt"];
4549--6578[label="1;367pkt 367fpkt"];
4549--7715[label="1;367pkt 367fpkt"];
6578--7715[label="1;367pkt 367fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="161.99.201.106" src_port="59809"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
4553[label="194.236.14.107;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6581[label="194.236.14.107;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.107:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 2237: (6.66667%)&lt;BR/&gt; 1722: (6.66667%)&lt;BR/&gt; 1118: (6.66667%)&lt;BR/&gt; 1067: (6.66667%)&gt;];
}
4553--6581[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.107" src_port="5050"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
1210[label="193.19.36.245;d;355pkt 355fpkt", shape=diamond, color=yellow];
1213[label="145.223.57.107;s;132pkt 132fpkt", shape=diamond, color=yellow];
4556[label="145.223.57.107;132pkt 132fpkt", shape=pentagon, color=darkviolet];
5192[label="145.223.225.171;89pkt 89fpkt", shape=pentagon, color=darkviolet];
6582[label="145.223.57.107;132pkt 132fpkt", shape=invtriangle, color=brown];
6946[label="145.223.225.171;90pkt 90fpkt", shape=invtriangle, color=brown];
7716[label="145.223.57.107;131pkt 131fpkt", shape=invhouse, color=bisque];
7917[label="145.223.225.171;89pkt 89fpkt", shape=invhouse, color=bisque];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.57.107:*, 193.19.36.245:80}[25.3807%]&lt;BR/&gt;{145.223.85.123:*, 193.19.36.245:80}[23.3503%]&lt;BR/&gt;{145.223.225.171:*, 193.19.36.245:80}[21.066%]&lt;BR/&gt;{149.177.111.150:*, 193.19.36.245:80}[20.3046%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6957%)&lt;BR/&gt; 85: (1.30435%)&lt;BR/&gt; 49703: (0.217391%)&lt;BR/&gt; 49702: (0.217391%)&lt;BR/&gt; 49701: (0.217391%)&gt;];
}
1210--1213[label="0.757576;100pkt 100fpkt"];
1210--1430[label="0.842105;80pkt 80fpkt"];
1210--4556[label="0.757576;100pkt 100fpkt"];
1210--4697[label="0.28483;92pkt 92fpkt"];
1210--4974[label="0.824742;80pkt 80fpkt"];
1210--5192[label="0.932584;83pkt 83fpkt"];
1210--6582[label="0.757576;100pkt 100fpkt"];
1210--6946[label="0.922222;83pkt 83fpkt"];
1210--7716[label="0.763359;100pkt 100fpkt"];
1210--7917[label="0.932584;83pkt 83fpkt"];
1213--4556[label="1;132pkt 132fpkt"];
1213--6582[label="1;132pkt 132fpkt"];
1213--7716[label="1;131pkt 131fpkt"];
4556--6582[label="1;132pkt 132fpkt"];
4556--7716[label="1;131pkt 131fpkt"];
5192--6946[label="1;89pkt 89fpkt"];
5192--7917[label="1;89pkt 89fpkt"];
6582--7716[label="1;131pkt 131fpkt"];
6946--7917[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="193.19.36.245" dst_port="80" src_ip="145.223.57.107"/>
      <filter dst_ip="193.19.36.245" dst_port="80" src_ip="145.223.85.123"/>
      <filter dst_ip="193.19.36.245" dst_port="80" src_ip="145.223.225.171"/>
      <filter dst_ip="193.19.36.245" dst_port="80" src_ip="149.177.111.150"/>
    </slice>
    <from sec="1120712532" usec="0"/>
    <to sec="1120712802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
4561[label="161.99.183.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6584[label="161.99.183.107;3pkt 3fpkt", shape=invtriangle, color=brown];
7717[label="161.99.183.107;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.183.107:80, 211.166.218.49:28010}[33.3333%]&lt;BR/&gt;{161.99.183.107:80, 211.166.218.49:40119}[33.3333%]&lt;BR/&gt;{161.99.183.107:80, 211.166.218.49:44671}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44671: (18.75%)&lt;BR/&gt; 40119: (18.75%)&lt;BR/&gt; 28010: (12.5%)&gt;];
}
4561--6584[label="1;3pkt 3fpkt"];
4561--7717[label="1;2pkt 2fpkt"];
6584--7717[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.218.49" dst_port="44671" src_ip="161.99.183.107" src_port="80"/>
      <filter dst_ip="211.166.218.49" dst_port="40119" src_ip="161.99.183.107" src_port="80"/>
      <filter dst_ip="211.166.218.49" dst_port="28010" src_ip="161.99.183.107" src_port="80"/>
    </slice>
    <from sec="1120712626" usec="0"/>
    <to sec="1120713206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
345[label="213.17.229.107;s;9pkt 9fpkt", shape=diamond, color=yellow];
646[label="220.137.66.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
675[label="0.96.111.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
1319[label="147.162.171.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
4563[label="213.17.229.107;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6586[label="213.17.229.107;9pkt 9fpkt", shape=invtriangle, color=brown];
7719[label="213.17.229.107;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.229.107:80, *:*}[55.5556%]&lt;BR/&gt;{213.17.229.107:873, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.3243%)&lt;BR/&gt; 873: (13.5135%)&lt;BR/&gt; 50842: (6.75676%)&lt;BR/&gt; 43963: (6.75676%)&lt;BR/&gt; 7707: (6.75676%)&gt;];
}
345--646[label="1;1pkt 1fpkt"];
345--675[label="1;1pkt 1fpkt"];
345--1319[label="1;1pkt 1fpkt"];
345--4563[label="1;8pkt 8fpkt"];
345--6586[label="1;9pkt 9fpkt"];
345--7719[label="1;8pkt 8fpkt"];
646--4563[label="1;1pkt 1fpkt"];
646--6586[label="1;1pkt 1fpkt"];
646--7719[label="1;1pkt 1fpkt"];
675--4563[label="1;1pkt 1fpkt"];
675--6586[label="1;1pkt 1fpkt"];
675--7719[label="1;1pkt 1fpkt"];
1319--4563[label="1;1pkt 1fpkt"];
1319--6586[label="1;1pkt 1fpkt"];
1319--7719[label="1;1pkt 1fpkt"];
4563--6586[label="1;8pkt 8fpkt"];
4563--7719[label="1;8pkt 8fpkt"];
6586--7719[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.229.107" src_port="80"/>
      <filter src_ip="213.17.229.107" src_port="873"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
1363[label="120.58.135.108;s;50pkt 50fpkt", shape=diamond, color=yellow];
4571[label="120.58.135.108;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6591[label="120.58.135.108;55pkt 55fpkt", shape=invtriangle, color=brown];
7720[label="120.58.135.108;55pkt 55fpkt", shape=invhouse, color=bisque];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.58.135.108:443, 212.66.53.90:*}[82.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49491: (0.930233%)&lt;BR/&gt; 49478: (0.930233%)&lt;BR/&gt; 49465: (0.930233%)&lt;BR/&gt; 49236: (0.930233%)&gt;];
}
1363--1469[label="0.92;46pkt 46fpkt"];
1363--4571[label="0.98;49pkt 49fpkt"];
1363--6591[label="0.98;49pkt 49fpkt"];
1363--7720[label="0.98;49pkt 49fpkt"];
4571--6591[label="1;55pkt 55fpkt"];
4571--7720[label="1;55pkt 55fpkt"];
6591--7720[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.53.90" src_ip="120.58.135.108" src_port="443"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721581,1.96966,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
926[label="149.110.10.194;d;210pkt 210fpkt", shape=diamond, color=yellow];
1500[label="149.110.10.195;d;180pkt 180fpkt", shape=diamond, color=yellow];
1894[label="166.59.128.100;d;330pkt 330fpkt", shape=diamond, color=yellow];
3883[label="212.193.111.42;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8036[label="210.197.11.208;38pkt 38fpkt", shape=invhouse, color=bisque];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, *:53}[41.9146%]&lt;BR/&gt;{*:*, 166.59.128.100:53}[28.4605%]&lt;BR/&gt;{*:*, 149.110.10.194:53}[24.9677%]&lt;BR/&gt;{*:*, 149.110.10.195:53}[21.6041%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (66.5593%)&lt;BR/&gt; 1923: (6.8299%)&lt;BR/&gt; 0: (4.12371%)&lt;BR/&gt; 80: (2.25515%)&lt;BR/&gt; 33701: (1.54639%)&gt;];
}
926--1646[label="0.0120482;1pkt 1fpkt"];
926--2190[label="0.0212766;1pkt 1fpkt"];
926--3384[label="0.190476;40pkt 40fpkt"];
926--3387[label="0.104762;22pkt 22fpkt"];
926--3883[label="0.0555556;1pkt 1fpkt"];
926--4048[label="0.04;1pkt 1fpkt"];
926--4185[label="0.025641;1pkt 1fpkt"];
926--4398[label="0.037037;1pkt 1fpkt"];
926--4467[label="0.0344828;1pkt 1fpkt"];
926--4578[label="0.0208333;1pkt 1fpkt"];
926--5335[label="0.0149254;1pkt 1fpkt"];
926--5415[label="0.0232558;1pkt 1fpkt"];
926--5649[label="0.03125;1pkt 1fpkt"];
926--6375[label="0.0263158;1pkt 1fpkt"];
926--6493[label="0.0384615;1pkt 1fpkt"];
926--6594[label="0.0212766;1pkt 1fpkt"];
926--7591[label="0.0263158;1pkt 1fpkt"];
926--7721[label="0.0212766;1pkt 1fpkt"];
926--8036[label="0.0263158;1pkt 1fpkt"];
1500--1646[label="0.0120482;1pkt 1fpkt"];
1500--2190[label="0.0212766;1pkt 1fpkt"];
1500--3384[label="0.188889;34pkt 34fpkt"];
1500--3387[label="0.183333;33pkt 33fpkt"];
1500--3883[label="0.0555556;1pkt 1fpkt"];
1500--4048[label="0.04;1pkt 1fpkt"];
1500--4185[label="0.025641;1pkt 1fpkt"];
1500--4309[label="0.027027;1pkt 1fpkt"];
1500--4398[label="0.037037;1pkt 1fpkt"];
1500--4578[label="0.0208333;1pkt 1fpkt"];
1500--5335[label="0.0149254;1pkt 1fpkt"];
1500--5649[label="0.03125;1pkt 1fpkt"];
1500--6375[label="0.0263158;1pkt 1fpkt"];
1500--6493[label="0.0384615;1pkt 1fpkt"];
1500--6594[label="0.0212766;1pkt 1fpkt"];
1500--7591[label="0.0263158;1pkt 1fpkt"];
1500--7721[label="0.0212766;1pkt 1fpkt"];
1894--2190[label="0.0212766;1pkt 1fpkt"];
1894--3384[label="0.069697;23pkt 23fpkt"];
1894--3387[label="0.0878788;29pkt 29fpkt"];
1894--3461[label="0.047619;2pkt 2fpkt"];
1894--3721[label="0.16129;5pkt 5fpkt"];
1894--4048[label="0.04;1pkt 1fpkt"];
1894--4170[label="0.0333333;1pkt 1fpkt"];
1894--4185[label="0.025641;1pkt 1fpkt"];
1894--4309[label="0.027027;1pkt 1fpkt"];
1894--4398[label="0.037037;1pkt 1fpkt"];
1894--4428[label="0.0833333;1pkt 1fpkt"];
1894--4467[label="0.0344828;1pkt 1fpkt"];
1894--4578[label="0.0208333;1pkt 1fpkt"];
1894--4657[label="0.03125;1pkt 1fpkt"];
1894--4841[label="0.025;1pkt 1fpkt"];
1894--5335[label="0.0149254;1pkt 1fpkt"];
1894--5415[label="0.0465116;2pkt 2fpkt"];
1894--5649[label="0.03125;1pkt 1fpkt"];
1894--6367[label="0.0344828;1pkt 1fpkt"];
1894--6375[label="0.0263158;1pkt 1fpkt"];
1894--6493[label="0.0384615;1pkt 1fpkt"];
1894--6512[label="0.0833333;1pkt 1fpkt"];
1894--6594[label="0.0212766;1pkt 1fpkt"];
1894--7591[label="0.0263158;1pkt 1fpkt"];
1894--7721[label="0.0212766;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.128.100" dst_port="53"/>
      <filter dst_ip="149.110.10.194" dst_port="53"/>
      <filter dst_ip="149.110.10.195" dst_port="53"/>
      <filter dst_port="53" src_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
4581[label="161.99.205.109;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6596[label="161.99.205.109;29pkt 29fpkt", shape=invtriangle, color=brown];
7722[label="161.99.205.109;29pkt 29fpkt", shape=invhouse, color=bisque];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.205.109:*, 27.198.95.221:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43422: (1.72414%)&lt;BR/&gt; 43417: (1.72414%)&lt;BR/&gt; 43412: (1.72414%)&lt;BR/&gt; 43407: (1.72414%)&gt;];
}
4581--6596[label="1;29pkt 29fpkt"];
4581--7722[label="1;29pkt 29fpkt"];
6596--7722[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="27.198.95.221" dst_port="80" src_ip="161.99.205.109"/>
    </slice>
    <from sec="1120712447" usec="0"/>
    <to sec="1120712670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.151.109.110"/>
    </slice>
    <from sec="1120713270" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.154.21.111"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.231.84.111"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
2589[label="3.53.233.113;s;26pkt 26fpkt", shape=diamond, color=yellow];
4609[label="3.53.233.113;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6610[label="3.53.233.113;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.53.233.113:80, 161.99.68.8:*}[53.8462%]&lt;BR/&gt;{3.53.233.113:80, 161.99.81.89:*}[23.0769%]&lt;BR/&gt;{3.53.233.113:80, 161.99.64.213:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50753: (1.92308%)&lt;BR/&gt; 50745: (1.92308%)&lt;BR/&gt; 50744: (1.92308%)&lt;BR/&gt; 50743: (1.92308%)&gt;];
}
2589--3388[label="0.192308;5pkt 5fpkt"];
2589--4609[label="1;26pkt 26fpkt"];
2589--6610[label="1;26pkt 26fpkt"];
4609--6610[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.68.8" src_ip="3.53.233.113" src_port="80"/>
      <filter dst_ip="161.99.64.213" src_ip="3.53.233.113" src_port="80"/>
      <filter dst_ip="161.99.81.89" src_ip="3.53.233.113" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.245.40.114"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.129.142.114"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
438[label="149.68.156.114;s;804pkt 804fpkt", shape=diamond, color=yellow];
4616[label="149.68.156.114;856pkt 856fpkt", shape=pentagon, color=darkviolet];
6614[label="149.68.156.114;856pkt 856fpkt", shape=invtriangle, color=brown];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.68.156.114:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
438--1506[label="0.00436681;1pkt 1fpkt"];
438--1914[label="0.0046729;1pkt 1fpkt"];
438--1939[label="0.005;1pkt 1fpkt"];
438--2377[label="0.00568182;1pkt 1fpkt"];
438--3130[label="0.00714286;1pkt 1fpkt"];
438--4616[label="1;804pkt 804fpkt"];
438--6614[label="1;804pkt 804fpkt"];
4616--6614[label="1;856pkt 856fpkt"];
</description>
    <slice>
      <filter src_ip="149.68.156.114"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
4620[label="145.223.252.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6617[label="145.223.252.114;3pkt 3fpkt", shape=invtriangle, color=brown];
7732[label="145.223.252.114;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.252.114:59394, 202.98.147.221:6667}[33.3333%]&lt;BR/&gt;{145.223.252.114:59389, 193.141.83.240:6667}[33.3333%]&lt;BR/&gt;{145.223.252.114:59390, 221.85.134.247:6667}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 59390: (18.75%)&lt;BR/&gt; 59389: (18.75%)&lt;BR/&gt; 59394: (12.5%)&gt;];
}
4620--6617[label="1;3pkt 3fpkt"];
4620--7732[label="1;2pkt 2fpkt"];
6617--7732[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="221.85.134.247" dst_port="6667" src_ip="145.223.252.114" src_port="59390"/>
      <filter dst_ip="193.141.83.240" dst_port="6667" src_ip="145.223.252.114" src_port="59389"/>
      <filter dst_ip="202.98.147.221" dst_port="6667" src_ip="145.223.252.114" src_port="59394"/>
    </slice>
    <from sec="1120712426" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
4625[label="29.57.120.115;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6622[label="29.57.120.115;8pkt 8fpkt", shape=invtriangle, color=brown];
7734[label="29.57.120.115;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.57.120.115:80, 212.79.192.208:*}[62.5%]&lt;BR/&gt;{29.57.120.115:80, 212.79.192.209:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55655: (6.25%)&lt;BR/&gt; 54733: (6.25%)&lt;BR/&gt; 54731: (6.25%)&lt;BR/&gt; 54671: (6.25%)&gt;];
}
4625--6622[label="1;8pkt 8fpkt"];
4625--7734[label="1;8pkt 8fpkt"];
6622--7734[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.208" src_ip="29.57.120.115" src_port="80"/>
      <filter dst_ip="212.79.192.209" src_ip="29.57.120.115" src_port="80"/>
    </slice>
    <from sec="1120713182" usec="0"/>
    <to sec="1120713232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.118.248.115"/>
    </slice>
    <from sec="1120712459" usec="0"/>
    <to sec="1120713266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.131.167.116"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.226.227.116"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.194.42.118"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
4650[label="211.166.144.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6635[label="211.166.144.118;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.166.144.118:1863, 131.186.247.38:2129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2129: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
4650--6635[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.247.38" dst_port="2129" src_ip="211.166.144.118" src_port="1863"/>
    </slice>
    <from sec="1120712948" usec="0"/>
    <to sec="1120713246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.33.98.119"/>
    </slice>
    <from sec="1120712435" usec="0"/>
    <to sec="1120712943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
4660[label="200.134.104.119;66pkt 66fpkt", shape=pentagon, color=darkviolet];
6642[label="200.134.104.119;65pkt 65fpkt", shape=invtriangle, color=brown];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.134.104.119:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4949: (0.763359%)&lt;BR/&gt; 4941: (0.763359%)&lt;BR/&gt; 4883: (0.763359%)&lt;BR/&gt; 4848: (0.763359%)&gt;];
}
4660--6642[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.134.104.119"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
4666[label="194.236.14.120;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6647[label="194.236.14.120;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.120:5050, 166.59.209.73:1099}[50%]&lt;BR/&gt;{194.236.14.120:5050, 166.59.210.243:1034}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1099: (25%)&lt;BR/&gt; 1034: (25%)&gt;];
}
4666--6647[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.210.243" dst_port="1034" src_ip="194.236.14.120" src_port="5050"/>
      <filter dst_ip="166.59.209.73" dst_port="1099" src_ip="194.236.14.120" src_port="5050"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
4668[label="198.178.157.120;262pkt 262fpkt", shape=pentagon, color=darkviolet];
6648[label="198.178.157.120;262pkt 262fpkt", shape=invtriangle, color=brown];
7748[label="198.178.157.120;262pkt 262fpkt", shape=invhouse, color=bisque];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.178.157.120:*, *:1026}[51.5267%]&lt;BR/&gt;{198.178.157.120:*, *:1027}[48.4733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.7634%)&lt;BR/&gt; 1027: (24.2366%)&lt;BR/&gt; 65285: (0.381679%)&lt;BR/&gt; 63640: (0.381679%)&lt;BR/&gt; 65386: (0.19084%)&gt;];
}
4668--6648[label="1;262pkt 262fpkt"];
4668--7748[label="1;262pkt 262fpkt"];
6648--7748[label="1;262pkt 262fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="198.178.157.120"/>
      <filter dst_port="1027" src_ip="198.178.157.120"/>
    </slice>
    <from sec="1120712616" usec="0"/>
    <to sec="1120712617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.85.158.120"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1093{
style=filled;
color=gray75;
4673[label="149.177.247.120;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6653[label="149.177.247.120;6pkt 6fpkt", shape=invtriangle, color=brown];
7750[label="149.177.247.120;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1093[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.247.120:*, 26.86.96.131:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53340: (8.33333%)&lt;BR/&gt; 53339: (8.33333%)&lt;BR/&gt; 53325: (8.33333%)&lt;BR/&gt; 53309: (8.33333%)&gt;];
}
4673--6653[label="1;6pkt 6fpkt"];
4673--7750[label="1;6pkt 6fpkt"];
6653--7750[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="26.86.96.131" dst_port="80" src_ip="149.177.247.120"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1094{
style=filled;
color=gray75;
4674[label="84.169.28.121;177pkt 177fpkt", shape=pentagon, color=darkviolet];
6654[label="84.169.28.121;177pkt 177fpkt", shape=invtriangle, color=brown];
7751[label="84.169.28.121;176pkt 176fpkt", shape=invhouse, color=bisque];
stat1094[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.169.28.121:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3968: (0.566038%)&lt;BR/&gt; 2723: (0.566038%)&lt;BR/&gt; 2659: (0.566038%)&lt;BR/&gt; 1614: (0.566038%)&gt;];
}
4674--6654[label="1;177pkt 177fpkt"];
4674--7751[label="1;176pkt 176fpkt"];
6654--7751[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="84.169.28.121"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1095{
style=filled;
color=gray75;
2144[label="194.236.14.122;s;26pkt 26fpkt", shape=diamond, color=yellow];
4678[label="194.236.14.122;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6655[label="194.236.14.122;26pkt 26fpkt", shape=invtriangle, color=brown];
7752[label="194.236.14.122;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1095[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.122:5050, *:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.233%)&lt;BR/&gt; 1054: (5.82524%)&lt;BR/&gt; 1033: (3.8835%)&lt;BR/&gt; 23: (3.8835%)&lt;BR/&gt; 20: (3.8835%)&gt;];
}
2144--4678[label="1;25pkt 25fpkt"];
2144--6655[label="1;26pkt 26fpkt"];
2144--7752[label="1;26pkt 26fpkt"];
4678--6655[label="1;25pkt 25fpkt"];
4678--7752[label="1;25pkt 25fpkt"];
6655--7752[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.122" src_port="5050"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
4693[label="85.132.45.123;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6661[label="85.132.45.123;9pkt 9fpkt", shape=invtriangle, color=brown];
7757[label="85.132.45.123;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.132.45.123:*, 145.223.61.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4434: (5.55556%)&lt;BR/&gt; 4427: (5.55556%)&lt;BR/&gt; 4426: (5.55556%)&lt;BR/&gt; 4409: (5.55556%)&gt;];
}
4693--6661[label="1;9pkt 9fpkt"];
4693--7757[label="1;9pkt 9fpkt"];
6661--7757[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.61.100" dst_port="80" src_ip="85.132.45.123"/>
    </slice>
    <from sec="1120713002" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
4703[label="197.91.219.123;120pkt 120fpkt", shape=pentagon, color=darkviolet];
6666[label="197.91.219.123;120pkt 120fpkt", shape=invtriangle, color=brown];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.91.219.123:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4703--6666[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.91.219.123" src_port="1028"/>
    </slice>
    <from sec="1120712803" usec="0"/>
    <to sec="1120712816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
4705[label="145.223.62.124;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6667[label="145.223.62.124;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.62.124:1256, 86.54.28.78:80}[20%]&lt;BR/&gt;{145.223.62.124:1257, 86.54.28.78:80}[20%]&lt;BR/&gt;{145.223.62.124:1258, 86.54.28.78:80}[20%]&lt;BR/&gt;{145.223.62.124:1259, 86.54.28.78:80}[20%]&lt;BR/&gt;{145.223.62.124:1260, 86.54.28.78:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1260: (10%)&lt;BR/&gt; 1259: (10%)&lt;BR/&gt; 1258: (10%)&lt;BR/&gt; 1257: (10%)&gt;];
}
4705--6667[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="86.54.28.78" dst_port="80" src_ip="145.223.62.124" src_port="1260"/>
      <filter dst_ip="86.54.28.78" dst_port="80" src_ip="145.223.62.124" src_port="1259"/>
      <filter dst_ip="86.54.28.78" dst_port="80" src_ip="145.223.62.124" src_port="1258"/>
      <filter dst_ip="86.54.28.78" dst_port="80" src_ip="145.223.62.124" src_port="1257"/>
      <filter dst_ip="86.54.28.78" dst_port="80" src_ip="145.223.62.124" src_port="1256"/>
    </slice>
    <from sec="1120712924" usec="0"/>
    <to sec="1120712945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1100{
style=filled;
color=gray75;
4706[label="26.25.112.124;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6668[label="26.25.112.124;5pkt 5fpkt", shape=invtriangle, color=brown];
7761[label="26.25.112.124;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1100[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.25.112.124:443, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3073: (8.82353%)&lt;BR/&gt; 2787: (8.82353%)&lt;BR/&gt; 1084: (8.82353%)&lt;BR/&gt; 1060: (8.82353%)&gt;];
}
4706--6668[label="1;5pkt 5fpkt"];
4706--7761[label="1;6pkt 6fpkt"];
6668--7761[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="26.25.112.124" src_port="443"/>
    </slice>
    <from sec="1120712538" usec="0"/>
    <to sec="1120712697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1101{
style=filled;
color=gray75;
4714[label="194.236.14.126;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6672[label="194.236.14.126;6pkt 6fpkt", shape=invtriangle, color=brown];
7763[label="194.236.14.126;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1101[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.236.14.126:5050, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.1765%)&lt;BR/&gt; 2832: (8.82353%)&lt;BR/&gt; 2076: (8.82353%)&lt;BR/&gt; 1254: (8.82353%)&lt;BR/&gt; 1216: (8.82353%)&gt;];
}
4714--6672[label="1;5pkt 5fpkt"];
4714--7763[label="1;5pkt 5fpkt"];
6672--7763[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="194.236.14.126" src_port="5050"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
4719[label="201.159.38.127;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6675[label="201.159.38.127;3pkt 3fpkt", shape=invtriangle, color=brown];
7765[label="201.159.38.127;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.159.38.127:12320, 145.223.166.137:25}[33.3333%]&lt;BR/&gt;{201.159.38.127:12344, 145.223.166.140:25}[33.3333%]&lt;BR/&gt;{201.159.38.127:12354, 145.223.166.140:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 12354: (16.6667%)&lt;BR/&gt; 12344: (16.6667%)&lt;BR/&gt; 12320: (16.6667%)&gt;];
}
4719--6675[label="1;3pkt 3fpkt"];
4719--7765[label="1;3pkt 3fpkt"];
6675--7765[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.223.166.140" dst_port="25" src_ip="201.159.38.127" src_port="12354"/>
      <filter dst_ip="145.223.166.140" dst_port="25" src_ip="201.159.38.127" src_port="12344"/>
      <filter dst_ip="145.223.166.137" dst_port="25" src_ip="201.159.38.127" src_port="12320"/>
    </slice>
    <from sec="1120712741" usec="0"/>
    <to sec="1120712804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.101.23.128"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
2646[label="205.157.101.128;s;56pkt 56fpkt", shape=diamond, color=yellow];
4733[label="205.157.101.128;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6682[label="205.157.101.128;58pkt 58fpkt", shape=invtriangle, color=brown];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.157.101.128:*, 149.177.146.123:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64616: (0.867052%)&lt;BR/&gt; 62940: (0.867052%)&lt;BR/&gt; 60483: (0.867052%)&lt;BR/&gt; 59854: (0.867052%)&gt;];
}
2646--3025[label="0.410714;23pkt 23fpkt"];
2646--4733[label="1;56pkt 56fpkt"];
2646--6682[label="0.982143;55pkt 55fpkt"];
4733--6682[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.146.123" dst_port="80" src_ip="205.157.101.128"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1105{
style=filled;
color=gray75;
615[label="149.68.157.128;s;360pkt 360fpkt", shape=diamond, color=yellow];
2424[label="87.46.77.138;d;8pkt 8fpkt", shape=diamond, color=yellow];
4739[label="149.68.157.128;430pkt 430fpkt", shape=pentagon, color=darkviolet];
6686[label="149.68.157.128;429pkt 429fpkt", shape=invtriangle, color=brown];
7771[label="149.68.157.128;430pkt 430fpkt", shape=invhouse, color=bisque];
stat1105[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.68.157.128:53, *:*}[46.6819%]&lt;BR/&gt;{149.68.157.128:3134, *:53}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.0688%)&lt;BR/&gt; 3134: (21.2734%)&lt;BR/&gt; 25: (4.828%)&lt;BR/&gt; 32768: (0.935425%)&lt;BR/&gt; 32769: (0.3621%)&gt;];
}
615--1880[label="0.00900901;1pkt 1fpkt"];
615--2126[label="0.00925926;1pkt 1fpkt"];
615--2176[label="0.0102041;1pkt 1fpkt"];
615--2423[label="0.125;1pkt 1fpkt"];
615--2424[label="0.125;1pkt 1fpkt"];
615--2425[label="0.00909091;1pkt 1fpkt"];
615--2435[label="0.00961538;1pkt 1fpkt"];
615--2598[label="0.0153846;1pkt 1fpkt"];
615--3384[label="0.0583333;21pkt 21fpkt"];
615--3387[label="0.0555556;20pkt 20fpkt"];
615--4739[label="1;360pkt 360fpkt"];
615--6686[label="1;360pkt 360fpkt"];
615--7771[label="1;360pkt 360fpkt"];
2424--3003[label="0.125;1pkt 1fpkt"];
2424--3384[label="0.125;1pkt 1fpkt"];
2424--4739[label="0.125;1pkt 1fpkt"];
2424--5342[label="0.125;1pkt 1fpkt"];
2424--5392[label="0.125;1pkt 1fpkt"];
2424--5403[label="0.125;1pkt 1fpkt"];
2424--6686[label="0.125;1pkt 1fpkt"];
2424--7035[label="0.125;1pkt 1fpkt"];
2424--7064[label="0.125;1pkt 1fpkt"];
2424--7771[label="0.125;1pkt 1fpkt"];
2424--7971[label="0.125;1pkt 1fpkt"];
2424--7987[label="0.125;1pkt 1fpkt"];
4739--6686[label="1;429pkt 429fpkt"];
4739--7771[label="1;430pkt 430fpkt"];
6686--7771[label="1;429pkt 429fpkt"];
</description>
    <slice>
      <filter src_ip="149.68.157.128" src_port="53"/>
      <filter dst_port="53" src_ip="149.68.157.128" src_port="3134"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
4745[label="166.59.236.128;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6690[label="166.59.236.128;10pkt 10fpkt", shape=invtriangle, color=brown];
7775[label="166.59.236.128;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.236.128:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 40235: (5%)&lt;BR/&gt; 39974: (5%)&lt;BR/&gt; 36801: (5%)&lt;BR/&gt; 35893: (5%)&gt;];
}
4745--6690[label="1;10pkt 10fpkt"];
4745--7775[label="1;10pkt 10fpkt"];
6690--7775[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="166.59.236.128" src_port="25"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.42.92.129"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
4751[label="68.85.188.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6693[label="68.85.188.129;1pkt 1fpkt", shape=invtriangle, color=brown];
7777[label="68.85.188.129;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.85.188.129:1935, 161.99.54.225:2365}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2365: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
4751--6693[label="1;1pkt 1fpkt"];
4751--7777[label="1;1pkt 1fpkt"];
6693--7777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.54.225" dst_port="2365" src_ip="68.85.188.129" src_port="1935"/>
    </slice>
    <from sec="1120712490" usec="0"/>
    <to sec="1120713164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1109{
style=filled;
color=gray75;
2638[label="212.42.70.130;s;19pkt 19fpkt", shape=diamond, color=yellow];
3307[label="212.42.70.130;s;19pkt 19fpkt", shape=hexagon, color=black];
4756[label="212.42.70.130;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6696[label="212.42.70.130;20pkt 20fpkt", shape=invtriangle, color=brown];
stat1109[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.42.70.130:80, 212.79.192.208:*}[50%]&lt;BR/&gt;{212.42.70.130:80, 212.79.192.209:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64622: (2.5641%)&lt;BR/&gt; 64323: (2.5641%)&lt;BR/&gt; 64318: (2.5641%)&lt;BR/&gt; 64030: (2.5641%)&gt;];
}
2638--3307[label="1;19pkt 19fpkt"];
2638--3388[label="0.210526;4pkt 4fpkt"];
2638--4756[label="1;19pkt 19fpkt"];
2638--6696[label="1;19pkt 19fpkt"];
3307--3388[label="0.210526;4pkt 4fpkt"];
3307--4756[label="1;19pkt 19fpkt"];
3307--6696[label="1;19pkt 19fpkt"];
4756--6696[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.192.209" src_ip="212.42.70.130" src_port="80"/>
      <filter dst_ip="212.79.192.208" src_ip="212.42.70.130" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
4758[label="149.177.89.130;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6697[label="149.177.89.130;8pkt 8fpkt", shape=invtriangle, color=brown];
7780[label="149.177.89.130;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.89.130:*, 211.166.150.108:1863}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2228: (6%)&lt;BR/&gt; 2226: (6%)&lt;BR/&gt; 2223: (6%)&lt;BR/&gt; 2220: (6%)&gt;];
}
4758--6697[label="1;8pkt 8fpkt"];
4758--7780[label="1;8pkt 8fpkt"];
6697--7780[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.108" dst_port="1863" src_ip="149.177.89.130"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
4760[label="197.102.141.130;201pkt 201fpkt", shape=pentagon, color=darkviolet];
6698[label="197.102.141.130;202pkt 202fpkt", shape=invtriangle, color=brown];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.102.141.130:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4573: (0.248139%)&lt;BR/&gt; 4572: (0.248139%)&lt;BR/&gt; 4571: (0.248139%)&lt;BR/&gt; 4532: (0.248139%)&gt;];
}
4760--6698[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="197.102.141.130"/>
    </slice>
    <from sec="1120712776" usec="0"/>
    <to sec="1120712778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1112{
style=filled;
color=gray75;
1135[label="145.222.149.181;s;327pkt 327fpkt", shape=diamond, color=yellow];
stat1112[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.149.181:*, 205.20.188.24:80}[98.1651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6942%)&lt;BR/&gt; 1863: (0.30581%)&lt;BR/&gt; 63778: (0.152905%)&lt;BR/&gt; 63777: (0.152905%)&lt;BR/&gt; 63776: (0.152905%)&gt;];
}
1135--1187[label="1;321pkt 321fpkt"];
1135--2428[label="0.0176991;2pkt 2fpkt"];
1135--3078[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_ip="205.20.188.24" dst_port="80" src_ip="145.222.149.181"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1113{
style=filled;
color=gray75;
1676[label="145.222.167.131;s;30pkt 30fpkt", shape=diamond, color=yellow];
stat1113[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.167.131:*, *:80}[43.3333%]&lt;BR/&gt;{145.222.167.131:*, *:1863}[30%]&lt;BR/&gt;{145.222.167.131:*, 220.213.61.64:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.6667%)&lt;BR/&gt; 1863: (15%)&lt;BR/&gt; 63279: (5%)&lt;BR/&gt; 443: (5%)&lt;BR/&gt; 1043: (3.33333%)&gt;];
}
1676--1802[label="0.0333333;1pkt 1fpkt"];
1676--2677[label="0.125;2pkt 2fpkt"];
1676--4774[label="1;29pkt 29fpkt"];
1676--6707[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="220.213.61.64" src_ip="145.222.167.131"/>
      <filter dst_port="80" src_ip="145.222.167.131"/>
      <filter dst_port="1863" src_ip="145.222.167.131"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1114{
style=filled;
color=gray75;
4781[label="149.177.111.132;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6713[label="149.177.111.132;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1114[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.111.132:1521, 211.166.150.68:1863}[20%]&lt;BR/&gt;{149.177.111.132:1679, 211.166.150.98:1863}[20%]&lt;BR/&gt;{149.177.111.132:1512, 211.166.150.110:1863}[20%]&lt;BR/&gt;{149.177.111.132:1522, 211.166.150.121:1863}[20%]&lt;BR/&gt;{149.177.111.132:1214, 211.166.150.206:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1679: (10%)&lt;BR/&gt; 1522: (10%)&lt;BR/&gt; 1521: (10%)&lt;BR/&gt; 1512: (10%)&gt;];
}
4781--6713[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.206" dst_port="1863" src_ip="149.177.111.132" src_port="1214"/>
      <filter dst_ip="211.166.150.121" dst_port="1863" src_ip="149.177.111.132" src_port="1522"/>
      <filter dst_ip="211.166.150.110" dst_port="1863" src_ip="149.177.111.132" src_port="1512"/>
      <filter dst_ip="211.166.150.98" dst_port="1863" src_ip="149.177.111.132" src_port="1679"/>
      <filter dst_ip="211.166.150.68" dst_port="1863" src_ip="149.177.111.132" src_port="1521"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
4784[label="138.201.201.132;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6715[label="138.201.201.132;81pkt 81fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.201.201.132:*, 166.59.136.4:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35612: (1.85185%)&lt;BR/&gt; 30022: (1.85185%)&lt;BR/&gt; 19086: (1.85185%)&lt;BR/&gt; 1027: (1.85185%)&lt;BR/&gt; 53311: (1.23457%)&gt;];
}
4784--6715[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.136.4" src_ip="138.201.201.132"/>
    </slice>
    <from sec="1120712606" usec="0"/>
    <to sec="1120712616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1116{
style=filled;
color=gray75;
557[label="211.166.150.69;d;2pkt 2fpkt", shape=diamond, color=yellow];
4798[label="212.66.176.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat1116[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.123.135:2372, 211.166.150.69:1863}[25%]&lt;BR/&gt;{212.66.176.133:1714, 211.166.150.16:1863}[25%]&lt;BR/&gt;{212.66.176.133:1726, 211.166.147.158:1863}[25%]&lt;BR/&gt;{212.66.176.133:1730, 211.166.150.69:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1730: (20%)&lt;BR/&gt; 2372: (10%)&lt;BR/&gt; 1726: (10%)&lt;BR/&gt; 1714: (10%)&gt;];
}
557--558[label="0.5;1pkt 1fpkt"];
557--2846[label="1;2pkt 2fpkt"];
557--4798[label="0.5;1pkt 1fpkt"];
557--4813[label="0.5;1pkt 1fpkt"];
557--6728[label="0.5;1pkt 1fpkt"];
557--7799[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.69" dst_port="1863" src_ip="212.66.176.133" src_port="1730"/>
      <filter dst_ip="211.166.147.158" dst_port="1863" src_ip="212.66.176.133" src_port="1726"/>
      <filter dst_ip="211.166.150.16" dst_port="1863" src_ip="212.66.176.133" src_port="1714"/>
      <filter dst_ip="211.166.150.69" dst_port="1863" src_ip="145.222.123.135" src_port="2372"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.164.241.136"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423375,2.00755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
5943[label="166.59.235.252;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.235.252:25, 10.0.5.130:*}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61885: (2.63158%)&lt;BR/&gt; 48707: (2.63158%)&lt;BR/&gt; 47829: (2.63158%)&lt;BR/&gt; 40219: (2.63158%)&gt;];
}
5943--7356[label="1;18pkt 18fpkt"];
5943--8159[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.5.130" src_ip="166.59.235.252" src_port="25"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.223.245.138"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.85.188.141"/>
    </slice>
    <from sec="1120712881" usec="0"/>
    <to sec="1120713078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
969[label="26.234.182.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.234.182.142:1224, 149.68.157.180:26119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26119: (50%)&lt;BR/&gt; 1224: (50%)&gt;];
}
969--2791[label="1;1pkt 1fpkt"];
969--6764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="26119" src_ip="26.234.182.142" src_port="1224"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.85.188.143"/>
    </slice>
    <from sec="1120712462" usec="0"/>
    <to sec="1120712481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.224.228.143"/>
    </slice>
    <from sec="1120712789" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
4899[label="149.177.106.144;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6773[label="149.177.106.144;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.106.144:1296, 211.166.150.18:1863}[25%]&lt;BR/&gt;{149.177.106.144:1291, 211.166.150.77:1863}[25%]&lt;BR/&gt;{149.177.106.144:1355, 211.166.149.134:1863}[25%]&lt;BR/&gt;{149.177.106.144:1194, 211.166.150.211:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1355: (14.2857%)&lt;BR/&gt; 1296: (14.2857%)&lt;BR/&gt; 1194: (14.2857%)&lt;BR/&gt; 1291: (7.14286%)&gt;];
}
4899--6773[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.211" dst_port="1863" src_ip="149.177.106.144" src_port="1194"/>
      <filter dst_ip="211.166.149.134" dst_port="1863" src_ip="149.177.106.144" src_port="1355"/>
      <filter dst_ip="211.166.150.77" dst_port="1863" src_ip="149.177.106.144" src_port="1291"/>
      <filter dst_ip="211.166.150.18" dst_port="1863" src_ip="149.177.106.144" src_port="1296"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
1740[label="211.166.144.92;d;20pkt 20fpkt", shape=diamond, color=yellow];
1748[label="161.107.225.111;s;4pkt 4fpkt", shape=diamond, color=yellow];
3861[label="161.107.89.40;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5167[label="161.107.92.169;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6202[label="161.107.89.40;4pkt 4fpkt", shape=invtriangle, color=brown];
6937[label="161.107.92.169;7pkt 7fpkt", shape=invtriangle, color=brown];
7167[label="161.107.225.212;4pkt 4fpkt", shape=invtriangle, color=brown];
7489[label="161.107.89.40;3pkt 3fpkt", shape=invhouse, color=bisque];
7914[label="161.107.92.169;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.144.92:1863}[54.0541%]&lt;BR/&gt;{161.107.92.169:*, *:1863}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (49.1803%)&lt;BR/&gt; 1555: (3.27869%)&lt;BR/&gt; 1588: (2.45902%)&lt;BR/&gt; 1587: (2.45902%)&lt;BR/&gt; 1586: (2.45902%)&gt;];
}
1740--3861[label="0.25;1pkt 1fpkt"];
1740--3964[label="0.166667;1pkt 1fpkt"];
1740--4134[label="0.0555556;1pkt 1fpkt"];
1740--4900[label="0.2;4pkt 4fpkt"];
1740--5167[label="0.142857;1pkt 1fpkt"];
1740--5596[label="0.2;1pkt 1fpkt"];
1740--6202[label="0.25;1pkt 1fpkt"];
1740--6347[label="0.0526316;1pkt 1fpkt"];
1740--6774[label="0.2;4pkt 4fpkt"];
1740--6937[label="0.142857;1pkt 1fpkt"];
1740--6957[label="0.5;1pkt 1fpkt"];
1740--7167[label="0.25;1pkt 1fpkt"];
1740--7818[label="0.2;4pkt 4fpkt"];
1740--7914[label="0.125;1pkt 1fpkt"];
1740--8052[label="0.2;1pkt 1fpkt"];
1748--1791[label="1;1pkt 1fpkt"];
1748--2726[label="0.25;1pkt 1fpkt"];
1748--3087[label="1;4pkt 4fpkt"];
3861--6202[label="1;4pkt 4fpkt"];
3861--7489[label="1;3pkt 3fpkt"];
5167--6937[label="1;7pkt 7fpkt"];
5167--7914[label="1;7pkt 7fpkt"];
6202--7489[label="1;3pkt 3fpkt"];
6937--7914[label="1;7pkt 7fpkt"];
7167--8052[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="161.107.92.169"/>
      <filter dst_ip="211.166.144.92" dst_port="1863"/>
    </slice>
    <from sec="1120712623" usec="0"/>
    <to sec="1120713207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
1920[label="149.177.111.144;s;37pkt 37fpkt", shape=diamond, color=yellow];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.111.144:*, 211.38.96.18:80}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6486%)&lt;BR/&gt; 50361: (1.35135%)&lt;BR/&gt; 50360: (1.35135%)&lt;BR/&gt; 50359: (1.35135%)&lt;BR/&gt; 50357: (1.35135%)&gt;];
}
1920--4901[label="1;37pkt 37fpkt"];
1920--6775[label="1;37pkt 37fpkt"];
1920--7819[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="211.38.96.18" dst_port="80" src_ip="149.177.111.144"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.173.19.146"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.36.21.146"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1129{
style=filled;
color=gray75;
2572[label="193.27.130.231;d;65pkt 65fpkt", shape=diamond, color=yellow];
2575[label="145.223.72.146;s;69pkt 69fpkt", shape=diamond, color=yellow];
4928[label="145.223.72.146;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6791[label="145.223.72.146;68pkt 68fpkt", shape=invtriangle, color=brown];
7829[label="145.223.72.146;68pkt 68fpkt", shape=invhouse, color=bisque];
stat1129[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.72.146:*, 193.27.130.231:80}[94.2029%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.41%)&lt;BR/&gt; 49295: (0.737463%)&lt;BR/&gt; 49294: (0.737463%)&lt;BR/&gt; 49293: (0.737463%)&lt;BR/&gt; 49292: (0.737463%)&gt;];
}
2572--2575[label="1;65pkt 65fpkt"];
2572--4928[label="1;65pkt 65fpkt"];
2572--6791[label="0.984615;64pkt 64fpkt"];
2572--7829[label="0.984615;64pkt 64fpkt"];
2575--4928[label="1;69pkt 69fpkt"];
2575--6791[label="1;68pkt 68fpkt"];
2575--7829[label="1;68pkt 68fpkt"];
4928--6791[label="1;68pkt 68fpkt"];
4928--7829[label="1;68pkt 68fpkt"];
6791--7829[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="193.27.130.231" dst_port="80" src_ip="145.223.72.146"/>
    </slice>
    <from sec="1120712629" usec="0"/>
    <to sec="1120713170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
4933[label="210.30.188.146;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6796[label="210.30.188.146;7pkt 7fpkt", shape=invtriangle, color=brown];
7833[label="210.30.188.146;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.30.188.146:80, 161.99.68.136:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1353: (7.14286%)&lt;BR/&gt; 1352: (7.14286%)&lt;BR/&gt; 1351: (7.14286%)&lt;BR/&gt; 1350: (7.14286%)&gt;];
}
4933--6796[label="1;7pkt 7fpkt"];
4933--7833[label="1;7pkt 7fpkt"];
6796--7833[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.68.136" src_ip="210.30.188.146" src_port="80"/>
    </slice>
    <from sec="1120712595" usec="0"/>
    <to sec="1120712616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897577,1.97475,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
1946[label="145.223.245.146;s;66pkt 66fpkt", shape=diamond, color=yellow];
3239[label="145.223.245.146;s;65pkt 65fpkt", shape=hexagon, color=black];
4934[label="145.223.245.146;66pkt 66fpkt", shape=pentagon, color=darkviolet];
6797[label="145.223.245.146;65pkt 65fpkt", shape=invtriangle, color=brown];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.245.146:*, *:80}[93.9394%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9466%)&lt;BR/&gt; 23291: (1.52672%)&lt;BR/&gt; 1863: (1.52672%)&lt;BR/&gt; 443: (1.52672%)&lt;BR/&gt; 23390: (0.763359%)&gt;];
}
1946--2700[label="0.0181818;1pkt 1fpkt"];
1946--3008[label="0.0151515;1pkt 1fpkt"];
1946--3239[label="1;65pkt 65fpkt"];
1946--4934[label="1;66pkt 66fpkt"];
1946--6797[label="1;65pkt 65fpkt"];
3239--4934[label="1;65pkt 65fpkt"];
3239--6797[label="0.984615;64pkt 64fpkt"];
4934--6797[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.245.146"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1132{
style=filled;
color=gray75;
1935[label="145.223.209.190;s;74pkt 74fpkt", shape=diamond, color=yellow];
stat1132[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.209.190:*, *:80}[86.4865%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.2432%)&lt;BR/&gt; 123: (5.40541%)&lt;BR/&gt; 1863: (2.7027%)&lt;BR/&gt; 3178: (1.35135%)&lt;BR/&gt; 443: (1.35135%)&gt;];
}
1935--2184[label="0.0135135;1pkt 1fpkt"];
1935--2281[label="1;4pkt 4fpkt"];
1935--2663[label="0.0714286;1pkt 1fpkt"];
1935--5359[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.209.190"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.217.177.148"/>
    </slice>
    <from sec="1120712599" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.40.185.148"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.133.224.148"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.165.63.149"/>
    </slice>
    <from sec="1120713003" usec="0"/>
    <to sec="1120713048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.33.77.149"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
4964[label="211.166.150.149;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6818[label="211.166.150.149;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.166.150.149:1863, 131.186.156.105:1080}[50%]&lt;BR/&gt;{211.166.150.149:1863, 131.186.220.108:1106}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1106: (25%)&lt;BR/&gt; 1080: (25%)&gt;];
}
4964--6818[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.220.108" dst_port="1106" src_ip="211.166.150.149" src_port="1863"/>
      <filter dst_ip="131.186.156.105" dst_port="1080" src_ip="211.166.150.149" src_port="1863"/>
    </slice>
    <from sec="1120712617" usec="0"/>
    <to sec="1120713256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1139{
style=filled;
color=gray75;
924[label="145.223.196.149;s;671pkt 671fpkt", shape=diamond, color=yellow];
4966[label="145.223.196.149;702pkt 702fpkt", shape=pentagon, color=darkviolet];
6819[label="145.223.196.149;702pkt 702fpkt", shape=invtriangle, color=brown];
stat1139[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.196.149:2458, *:53}[58.547%]&lt;BR/&gt;{145.223.196.149:53, *:*}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.4578%)&lt;BR/&gt; 2458: (29.3253%)&lt;BR/&gt; 0: (2.45783%)&lt;BR/&gt; 32768: (1.13253%)&lt;BR/&gt; 1026: (0.506024%)&gt;];
}
924--1380[label="0.00854701;1pkt 1fpkt"];
924--1834[label="0.00934579;1pkt 1fpkt"];
924--1880[label="0.00900901;1pkt 1fpkt"];
924--2126[label="0.00925926;1pkt 1fpkt"];
924--2176[label="0.0102041;1pkt 1fpkt"];
924--2415[label="0.00990099;1pkt 1fpkt"];
924--2425[label="0.00909091;1pkt 1fpkt"];
924--2435[label="0.00961538;1pkt 1fpkt"];
924--2598[label="0.0153846;1pkt 1fpkt"];
924--2600[label="0.00961538;1pkt 1fpkt"];
924--2627[label="0.02;1pkt 1fpkt"];
924--3318[label="0.00854701;1pkt 1fpkt"];
924--3384[label="0.0834575;56pkt 56fpkt"];
924--3387[label="0.0223547;15pkt 15fpkt"];
924--4966[label="1;671pkt 671fpkt"];
924--6819[label="1;671pkt 671fpkt"];
4966--6819[label="1;702pkt 702fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.196.149" src_port="53"/>
      <filter dst_port="53" src_ip="145.223.196.149" src_port="2458"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.205.149"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.218.146.150"/>
    </slice>
    <from sec="1120713073" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1142{
style=filled;
color=gray75;
4981[label="212.196.1.151;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6829[label="212.196.1.151;32pkt 32fpkt", shape=invtriangle, color=brown];
stat1142[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.196.1.151:80, 131.186.132.121:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4268: (1.5873%)&lt;BR/&gt; 4267: (1.5873%)&lt;BR/&gt; 4266: (1.5873%)&lt;BR/&gt; 4265: (1.5873%)&gt;];
}
4981--6829[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.132.121" src_ip="212.196.1.151" src_port="80"/>
    </slice>
    <from sec="1120712665" usec="0"/>
    <to sec="1120712767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
4982[label="212.66.54.151;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6830[label="212.66.54.151;20pkt 20fpkt", shape=invtriangle, color=brown];
7852[label="212.66.54.151;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.54.151:*, 26.23.55.181:80}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 21: (5%)&lt;BR/&gt; 1327: (2.5%)&lt;BR/&gt; 1311: (2.5%)&lt;BR/&gt; 1309: (2.5%)&gt;];
}
4982--6830[label="1;20pkt 20fpkt"];
4982--7852[label="1;20pkt 20fpkt"];
6830--7852[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="26.23.55.181" dst_port="80" src_ip="212.66.54.151"/>
    </slice>
    <from sec="1120712632" usec="0"/>
    <to sec="1120713265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.40.198.151"/>
    </slice>
    <from sec="1120712482" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1145{
style=filled;
color=gray75;
4989[label="196.80.237.151;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6836[label="196.80.237.151;254pkt 254fpkt", shape=invtriangle, color=brown];
stat1145[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.80.237.151:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4989--6836[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.80.237.151" src_port="1033"/>
    </slice>
    <from sec="1120712889" usec="0"/>
    <to sec="1120712906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
4994[label="87.18.158.152;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6838[label="87.18.158.152;23pkt 23fpkt", shape=invtriangle, color=brown];
7855[label="87.18.158.152;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.18.158.152:80, 131.186.250.131:*}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4308: (2.23881%)&lt;BR/&gt; 4307: (2.23881%)&lt;BR/&gt; 4306: (2.23881%)&lt;BR/&gt; 4305: (2.23881%)&gt;];
}
4994--6838[label="1;22pkt 22fpkt"];
4994--7855[label="1;22pkt 22fpkt"];
6838--7855[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.250.131" src_ip="87.18.158.152" src_port="80"/>
    </slice>
    <from sec="1120713146" usec="0"/>
    <to sec="1120713241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1147{
style=filled;
color=gray75;
2783[label="28.153.34.154;s;2pkt 2fpkt", shape=diamond, color=yellow];
5007[label="28.153.34.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6847[label="28.153.34.154;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1147[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.153.34.154:80, 212.66.180.184:60530}[33.3333%]&lt;BR/&gt;{28.153.34.154:80, 212.79.192.209:2260}[33.3333%]&lt;BR/&gt;{28.153.34.154:80, 131.186.160.234:1082}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60530: (18.75%)&lt;BR/&gt; 1082: (18.75%)&lt;BR/&gt; 2260: (12.5%)&gt;];
}
2783--5007[label="1;2pkt 2fpkt"];
2783--6847[label="1;2pkt 2fpkt"];
5007--6847[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.160.234" dst_port="1082" src_ip="28.153.34.154" src_port="80"/>
      <filter dst_ip="212.79.192.209" dst_port="2260" src_ip="28.153.34.154" src_port="80"/>
      <filter dst_ip="212.66.180.184" dst_port="60530" src_ip="28.153.34.154" src_port="80"/>
    </slice>
    <from sec="1120712886" usec="0"/>
    <to sec="1120713249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
2191[label="201.76.0.155;s;338pkt 338fpkt", shape=diamond, color=yellow];
5015[label="201.76.0.155;371pkt 371fpkt", shape=pentagon, color=darkviolet];
6851[label="201.76.0.155;371pkt 371fpkt", shape=invtriangle, color=brown];
7862[label="201.76.0.155;371pkt 371fpkt", shape=invhouse, color=bisque];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.76.0.155:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4872: (0.275672%)&lt;BR/&gt; 4471: (0.275672%)&lt;BR/&gt; 4224: (0.275672%)&lt;BR/&gt; 4189: (0.275672%)&gt;];
}
2191--5015[label="1;338pkt 338fpkt"];
2191--6851[label="1;338pkt 338fpkt"];
2191--7862[label="1;338pkt 338fpkt"];
5015--6851[label="1;371pkt 371fpkt"];
5015--7862[label="1;371pkt 371fpkt"];
6851--7862[label="1;371pkt 371fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.76.0.155"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
5022[label="149.177.111.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6854[label="149.177.111.155;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.111.155:1465, 211.166.150.73:1863}[50%]&lt;BR/&gt;{149.177.111.155:1476, 211.166.150.73:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1476: (25%)&lt;BR/&gt; 1465: (25%)&gt;];
}
5022--6854[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.73" dst_port="1863" src_ip="149.177.111.155" src_port="1476"/>
      <filter dst_ip="211.166.150.73" dst_port="1863" src_ip="149.177.111.155" src_port="1465"/>
    </slice>
    <from sec="1120712464" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.32.154.157"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
5041[label="113.216.180.157;65pkt 65fpkt", shape=pentagon, color=darkviolet];
6865[label="113.216.180.157;66pkt 66fpkt", shape=invtriangle, color=brown];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{113.216.180.157:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3389: (1.52672%)&lt;BR/&gt; 4714: (0.763359%)&lt;BR/&gt; 4576: (0.763359%)&lt;BR/&gt; 4417: (0.763359%)&gt;];
}
5041--6865[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="113.216.180.157"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.74.46.158"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.115.100.159"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.32.7.160"/>
    </slice>
    <from sec="1120712420" usec="0"/>
    <to sec="1120712462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
5089[label="84.32.4.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6889[label="84.32.4.163;2pkt 2fpkt", shape=invtriangle, color=brown];
7880[label="84.32.4.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.32.4.163:80, 149.177.104.11:1213}[50%]&lt;BR/&gt;{84.32.4.163:80, 149.177.104.11:1214}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1214: (37.5%)&lt;BR/&gt; 1213: (12.5%)&gt;];
}
5089--6889[label="1;1pkt 1fpkt"];
5089--7880[label="1;1pkt 1fpkt"];
6889--7880[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.104.11" dst_port="1214" src_ip="84.32.4.163" src_port="80"/>
      <filter dst_ip="149.177.104.11" dst_port="1213" src_ip="84.32.4.163" src_port="80"/>
    </slice>
    <from sec="1120712805" usec="0"/>
    <to sec="1120712834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.106.201.163"/>
    </slice>
    <from sec="1120712426" usec="0"/>
    <to sec="1120712940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.161.96.164"/>
    </slice>
    <from sec="1120712436" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1158{
style=filled;
color=gray75;
5111[label="166.59.163.164;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6903[label="166.59.163.164;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1158[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.163.164:*, 24.119.198.142:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4449: (3.57143%)&lt;BR/&gt; 4435: (3.57143%)&lt;BR/&gt; 4417: (3.57143%)&lt;BR/&gt; 4395: (3.57143%)&gt;];
}
5111--6903[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="24.119.198.142" dst_port="443" src_ip="166.59.163.164"/>
    </slice>
    <from sec="1120712430" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.177.105.165"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1160{
style=filled;
color=gray75;
5122[label="145.223.146.165;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6909[label="145.223.146.165;10pkt 10fpkt", shape=invtriangle, color=brown];
7895[label="145.223.146.165;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1160[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.146.165:80, 25.239.97.142:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40463: (5.35714%)&lt;BR/&gt; 2200: (5.35714%)&lt;BR/&gt; 2199: (5.35714%)&lt;BR/&gt; 2198: (5.35714%)&gt;];
}
5122--6909[label="1;9pkt 9fpkt"];
5122--7895[label="1;9pkt 9fpkt"];
6909--7895[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="25.239.97.142" src_ip="145.223.146.165" src_port="80"/>
    </slice>
    <from sec="1120712487" usec="0"/>
    <to sec="1120712975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
5125[label="161.107.224.165;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6910[label="161.107.224.165;14pkt 14fpkt", shape=invtriangle, color=brown];
7896[label="161.107.224.165;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.224.165:*, 26.241.3.128:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3474: (3.57143%)&lt;BR/&gt; 3473: (3.57143%)&lt;BR/&gt; 3470: (3.57143%)&lt;BR/&gt; 3464: (3.57143%)&gt;];
}
5125--6910[label="1;14pkt 14fpkt"];
5125--7896[label="1;14pkt 14fpkt"];
6910--7896[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="26.241.3.128" dst_port="80" src_ip="161.107.224.165"/>
    </slice>
    <from sec="1120712630" usec="0"/>
    <to sec="1120712922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
5127[label="197.151.38.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6911[label="197.151.38.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.151.38.166:3187, 131.186.182.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3187: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5127--6911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.28" dst_port="80" src_ip="197.151.38.166" src_port="3187"/>
    </slice>
    <from sec="1120713301" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.130.148.167"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.203.149.167"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1165{
style=filled;
color=gray75;
5147[label="212.146.79.168;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6921[label="212.146.79.168;58pkt 58fpkt", shape=invtriangle, color=brown];
7902[label="212.146.79.168;57pkt 57fpkt", shape=invhouse, color=bisque];
stat1165[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.146.79.168:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4904: (0.867052%)&lt;BR/&gt; 4872: (0.867052%)&lt;BR/&gt; 4810: (0.867052%)&lt;BR/&gt; 4718: (0.867052%)&gt;];
}
5147--6921[label="1;58pkt 58fpkt"];
5147--7902[label="1;57pkt 57fpkt"];
6921--7902[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="212.146.79.168"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
1753[label="144.14.131.251;d;13pkt 13fpkt", shape=diamond, color=yellow];
2219[label="149.177.108.168;s;35pkt 35fpkt", shape=diamond, color=yellow];
3251[label="149.177.108.168;s;35pkt 35fpkt", shape=hexagon, color=black];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.14.131.251:80}[30.2326%]&lt;BR/&gt;{149.177.108.168:*, 204.240.18.131:80}[27.907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.9518%)&lt;BR/&gt; 1863: (9.63855%)&lt;BR/&gt; 7001: (2.40964%)&lt;BR/&gt; 1253: (1.80723%)&lt;BR/&gt; 1252: (1.80723%)&gt;];
}
1753--1754[label="0.615385;8pkt 8fpkt"];
1753--2219[label="0.384615;5pkt 5fpkt"];
1753--3251[label="0.384615;5pkt 5fpkt"];
1753--5151[label="0.384615;5pkt 5fpkt"];
1753--5529[label="0.615385;8pkt 8fpkt"];
1753--6925[label="0.384615;5pkt 5fpkt"];
1753--7139[label="0.615385;8pkt 8fpkt"];
1753--7906[label="0.384615;5pkt 5fpkt"];
1753--8035[label="0.615385;8pkt 8fpkt"];
2219--2642[label="0.0571429;2pkt 2fpkt"];
2219--3251[label="1;35pkt 35fpkt"];
2219--5151[label="1;34pkt 34fpkt"];
2219--6925[label="1;34pkt 34fpkt"];
2219--7906[label="1;35pkt 35fpkt"];
3251--5151[label="1;34pkt 34fpkt"];
3251--6925[label="1;34pkt 34fpkt"];
3251--7906[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="144.14.131.251" dst_port="80"/>
      <filter dst_ip="204.240.18.131" dst_port="80" src_ip="149.177.108.168"/>
    </slice>
    <from sec="1120712444" usec="0"/>
    <to sec="1120713202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1167{
style=filled;
color=gray75;
5153[label="87.18.158.168;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6926[label="87.18.158.168;57pkt 57fpkt", shape=invtriangle, color=brown];
stat1167[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.18.158.168:80, 131.186.250.131:*}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4359: (0.869565%)&lt;BR/&gt; 4354: (0.869565%)&lt;BR/&gt; 4352: (0.869565%)&lt;BR/&gt; 4349: (0.869565%)&gt;];
}
5153--6926[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.250.131" src_ip="87.18.158.168" src_port="80"/>
    </slice>
    <from sec="1120713147" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.194.165.168"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
5155[label="145.222.167.168;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6928[label="145.222.167.168;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.167.168:*, 26.87.82.111:80}[30.7692%]&lt;BR/&gt;{145.222.167.168:*, *:1863}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 20187: (4%)&lt;BR/&gt; 20113: (4%)&lt;BR/&gt; 20112: (4%)&gt;];
}
5155--6928[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="145.222.167.168"/>
      <filter dst_ip="26.87.82.111" dst_port="80" src_ip="145.222.167.168"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1170{
style=filled;
color=gray75;
5156[label="166.59.170.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6929[label="166.59.170.168;1pkt 1fpkt", shape=invtriangle, color=brown];
7907[label="166.59.170.168;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1170[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.170.168:1360, 194.236.14.65:20}[50%]&lt;BR/&gt;{166.59.170.168:1392, 208.7.6.229:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1360: (37.5%)&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 1392: (12.5%)&lt;BR/&gt; 443: (12.5%)&gt;];
}
5156--6929[label="1;1pkt 1fpkt"];
5156--7907[label="1;1pkt 1fpkt"];
6929--7907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.7.6.229" dst_port="443" src_ip="166.59.170.168" src_port="1392"/>
      <filter dst_ip="194.236.14.65" dst_port="20" src_ip="166.59.170.168" src_port="1360"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120713266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.0.208.168"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
5165[label="27.246.62.169;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6936[label="27.246.62.169;117pkt 117fpkt", shape=invtriangle, color=brown];
7913[label="27.246.62.169;117pkt 117fpkt", shape=invhouse, color=bisque];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.246.62.169:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4959: (0.428571%)&lt;BR/&gt; 4958: (0.428571%)&lt;BR/&gt; 4819: (0.428571%)&lt;BR/&gt; 4759: (0.428571%)&gt;];
}
5165--6936[label="1;116pkt 116fpkt"];
5165--7913[label="1;116pkt 116fpkt"];
6936--7913[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="27.246.62.169"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
5174[label="145.223.8.170;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6941[label="145.223.8.170;9pkt 9fpkt", shape=invtriangle, color=brown];
7915[label="145.223.8.170;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.8.170:*, 24.76.132.61:80}[20%]&lt;BR/&gt;{145.223.8.170:*, 221.179.28.117:80}[20%]&lt;BR/&gt;{145.223.8.170:*, 211.197.83.119:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1258: (5.35714%)&lt;BR/&gt; 1255: (5.35714%)&lt;BR/&gt; 1252: (5.35714%)&lt;BR/&gt; 1186: (5.35714%)&gt;];
}
5174--6941[label="1;9pkt 9fpkt"];
5174--7915[label="1;9pkt 9fpkt"];
6941--7915[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="211.197.83.119" dst_port="80" src_ip="145.223.8.170"/>
      <filter dst_ip="221.179.28.117" dst_port="80" src_ip="145.223.8.170"/>
      <filter dst_ip="24.76.132.61" dst_port="80" src_ip="145.223.8.170"/>
    </slice>
    <from sec="1120712429" usec="0"/>
    <to sec="1120713257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1174{
style=filled;
color=gray75;
5193[label="161.107.226.171;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6947[label="161.107.226.171;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1174[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.226.171:*, 113.62.40.122:1214}[22.2222%]&lt;BR/&gt;{161.107.226.171:*, *:1863}[22.2222%]&lt;BR/&gt;{161.107.226.171:*, *:3531}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3531: (11.7647%)&lt;BR/&gt; 1863: (11.7647%)&lt;BR/&gt; 1214: (11.7647%)&lt;BR/&gt; 2062: (5.88235%)&lt;BR/&gt; 2058: (5.88235%)&gt;];
}
5193--6947[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="3531" src_ip="161.107.226.171"/>
      <filter dst_port="1863" src_ip="161.107.226.171"/>
      <filter dst_ip="113.62.40.122" dst_port="1214" src_ip="161.107.226.171"/>
    </slice>
    <from sec="1120712623" usec="0"/>
    <to sec="1120712910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642565,1.99204,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1175{
style=filled;
color=gray75;
5194[label="215.72.251.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7918[label="215.72.251.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1175[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.72.251.171:3863, 149.68.157.180:38296}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38296: (50%)&lt;BR/&gt; 3863: (50%)&gt;];
}
5194--6948[label="1;1pkt 1fpkt"];
5194--7918[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="38296" src_ip="215.72.251.171" src_port="3863"/>
    </slice>
    <from sec="1120712419" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1176{
style=filled;
color=gray75;
1392[label="161.99.40.173;s;70pkt 70fpkt", shape=diamond, color=yellow];
5203[label="161.99.40.173;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6953[label="161.99.40.173;69pkt 69fpkt", shape=invtriangle, color=brown];
stat1176[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.40.173:*, 194.236.12.215:80}[45.7143%]&lt;BR/&gt;{161.99.40.173:*, 24.194.148.90:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2788%)&lt;BR/&gt; 5050: (0.721154%)&lt;BR/&gt; 1588: (0.721154%)&lt;BR/&gt; 1586: (0.721154%)&lt;BR/&gt; 1584: (0.721154%)&gt;];
}
1392--5203[label="1;69pkt 69fpkt"];
1392--6953[label="1;69pkt 69fpkt"];
5203--6953[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.12.215" dst_port="80" src_ip="161.99.40.173"/>
      <filter dst_ip="24.194.148.90" dst_port="80" src_ip="161.99.40.173"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
6957[label="161.107.92.173;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.92.173:1274, 211.166.144.92:1863}[50%]&lt;BR/&gt;{161.107.92.173:1031, 211.166.144.221:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1274: (25%)&lt;BR/&gt; 1031: (25%)&gt;];
}
6957--7923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.221" dst_port="1863" src_ip="161.107.92.173" src_port="1031"/>
      <filter dst_ip="211.166.144.92" dst_port="1863" src_ip="161.107.92.173" src_port="1274"/>
    </slice>
    <from sec="1120712628" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
5231[label="145.223.54.176;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6971[label="145.223.54.176;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.54.176:*, *:80}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1132%)&lt;BR/&gt; 1081: (1.88679%)&lt;BR/&gt; 1080: (1.88679%)&lt;BR/&gt; 1079: (1.88679%)&lt;BR/&gt; 1078: (1.88679%)&gt;];
}
5231--6971[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.54.176"/>
    </slice>
    <from sec="1120713268" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1179{
style=filled;
color=gray75;
5236[label="208.70.171.176;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6973[label="208.70.171.176;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1179[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.70.171.176:443, 213.17.230.209:*}[66.6667%]&lt;BR/&gt;{208.70.171.176:80, 213.17.230.209:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (33.3333%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 2406: (8.33333%)&lt;BR/&gt; 2405: (8.33333%)&lt;BR/&gt; 2398: (8.33333%)&gt;];
}
5236--6973[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.230.209" src_ip="208.70.171.176" src_port="443"/>
      <filter dst_ip="213.17.230.209" src_ip="208.70.171.176" src_port="80"/>
    </slice>
    <from sec="1120712769" usec="0"/>
    <to sec="1120713017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1180{
style=filled;
color=gray75;
5239[label="145.223.245.176;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6975[label="145.223.245.176;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1180[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.245.176:*, 211.166.125.238:80}[41.1765%]&lt;BR/&gt;{145.223.245.176:*, 211.166.125.237:80}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9697%)&lt;BR/&gt; 1863: (3.0303%)&lt;BR/&gt; 1191: (3.0303%)&lt;BR/&gt; 1190: (3.0303%)&lt;BR/&gt; 1189: (3.0303%)&gt;];
}
5239--6975[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.125.238" dst_port="80" src_ip="145.223.245.176"/>
      <filter dst_ip="211.166.125.237" dst_port="80" src_ip="145.223.245.176"/>
    </slice>
    <from sec="1120712765" usec="0"/>
    <to sec="1120713281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.219.128.177"/>
    </slice>
    <from sec="1120712444" usec="0"/>
    <to sec="1120712903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.37.96.178"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120712900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
2648[label="193.201.102.178;s;510pkt 510fpkt", shape=diamond, color=yellow];
5253[label="193.201.102.178;554pkt 554fpkt", shape=pentagon, color=darkviolet];
6982[label="193.201.102.178;554pkt 554fpkt", shape=invtriangle, color=brown];
7939[label="193.201.102.178;554pkt 554fpkt", shape=invhouse, color=bisque];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.201.102.178:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50556: (0.184162%)&lt;BR/&gt; 48503: (0.184162%)&lt;BR/&gt; 43390: (0.184162%)&lt;BR/&gt; 10041: (0.184162%)&gt;];
}
2648--3388[label="0.0372549;19pkt 19fpkt"];
2648--5253[label="0.998039;509pkt 509fpkt"];
2648--6982[label="0.998039;509pkt 509fpkt"];
2648--7939[label="0.998039;509pkt 509fpkt"];
5253--6982[label="1;554pkt 554fpkt"];
5253--7939[label="1;554pkt 554fpkt"];
6982--7939[label="1;554pkt 554fpkt"];
</description>
    <slice>
      <filter src_ip="193.201.102.178" src_port="80"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1184{
style=filled;
color=gray75;
5254[label="166.59.192.178;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6983[label="166.59.192.178;18pkt 18fpkt", shape=invtriangle, color=brown];
7940[label="166.59.192.178;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1184[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.192.178:0, *:0}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (83.0189%)&lt;BR/&gt; 25: (8.49057%)&lt;BR/&gt; 4141: (2.83019%)&lt;BR/&gt; 3053: (2.83019%)&lt;BR/&gt; 2129: (2.83019%)&gt;];
}
5254--6983[label="1;18pkt 18fpkt"];
5254--7940[label="1;17pkt 17fpkt"];
6983--7940[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="166.59.192.178"/>
    </slice>
    <from sec="1120712433" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
5258[label="145.223.48.179;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6985[label="145.223.48.179;21pkt 21fpkt", shape=invtriangle, color=brown];
7941[label="145.223.48.179;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.48.179:25, 193.35.182.144:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 45432: (2.41935%)&lt;BR/&gt; 19817: (2.41935%)&lt;BR/&gt; 7741: (2.41935%)&lt;BR/&gt; 4363: (2.41935%)&gt;];
}
5258--6985[label="1;21pkt 21fpkt"];
5258--7941[label="1;20pkt 20fpkt"];
6985--7941[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="193.35.182.144" src_ip="145.223.48.179" src_port="25"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1186{
style=filled;
color=gray75;
5264[label="29.70.183.179;207pkt 207fpkt", shape=pentagon, color=darkviolet];
6988[label="29.70.183.179;207pkt 207fpkt", shape=invtriangle, color=brown];
stat1186[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.70.183.179:65392, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65392: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5264--6988[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.70.183.179" src_port="65392"/>
    </slice>
    <from sec="1120712776" usec="0"/>
    <to sec="1120712809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.251.72.181"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.73.176.181"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
5287[label="161.99.80.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7002[label="161.99.80.182;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.80.182:1637, 194.173.249.48:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1637: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5287--7002[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.173.249.48" dst_port="80" src_ip="161.99.80.182" src_port="1637"/>
    </slice>
    <from sec="1120712846" usec="0"/>
    <to sec="1120712889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1190{
style=filled;
color=gray75;
439[label="210.80.185.135;s;13pkt 13fpkt", shape=diamond, color=yellow];
604[label="131.186.182.177;d;1120pkt 1120fpkt", shape=diamond, color=yellow];
1329[label="192.237.45.228;s;66pkt 66fpkt", shape=diamond, color=yellow];
1628[label="193.201.121.0;s;37pkt 37fpkt", shape=diamond, color=yellow];
1714[label="211.166.114.6;s;4pkt 4fpkt", shape=diamond, color=yellow];
2046[label="193.201.122.169;s;19pkt 19fpkt", shape=diamond, color=yellow];
2105[label="193.201.71.26;s;166pkt 166fpkt", shape=diamond, color=yellow];
2300[label="24.115.73.26;s;7pkt 7fpkt", shape=diamond, color=yellow];
2689[label="211.166.120.162;s;12pkt 12fpkt", shape=diamond, color=yellow];
2754[label="24.234.213.38;s;7pkt 7fpkt", shape=diamond, color=yellow];
2924[label="24.88.114.166;s;829pkt 829fpkt", shape=hexagon, color=black];
2959[label="210.80.185.135;s;13pkt 13fpkt", shape=hexagon, color=black];
2964[label="24.107.70.232;s;122pkt 122fpkt", shape=hexagon, color=black];
3189[label="194.96.225.11;s;70pkt 70fpkt", shape=hexagon, color=black];
3401[label="193.201.121.0;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3470[label="211.166.114.6;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3536[label="194.96.225.11;74pkt 74fpkt", shape=pentagon, color=darkviolet];
3602[label="84.90.186.17;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3660[label="24.194.149.21;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3807[label="193.201.121.35;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3932[label="211.166.26.47;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4099[label="211.166.120.64;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4282[label="211.166.73.80;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4456[label="27.57.195.97;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4635[label="84.90.189.116;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4804[label="211.166.126.134;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5082[label="211.166.120.162;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5169[label="193.201.122.169;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5179[label="211.166.72.170;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5220[label="24.166.47.175;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5767[label="192.237.45.228;65pkt 65fpkt", shape=pentagon, color=darkviolet];
5790[label="212.133.21.232;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5848[label="192.229.21.239;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5934[label="84.90.188.251;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5963[label="193.201.121.0;37pkt 37fpkt", shape=invtriangle, color=brown];
5993[label="211.166.114.6;7pkt 7fpkt", shape=invtriangle, color=brown];
6329[label="211.166.120.64;10pkt 10fpkt", shape=invtriangle, color=brown];
6427[label="211.166.73.80;6pkt 6fpkt", shape=invtriangle, color=brown];
6531[label="27.57.195.97;12pkt 12fpkt", shape=invtriangle, color=brown];
6726[label="211.166.126.134;8pkt 8fpkt", shape=invtriangle, color=brown];
6884[label="211.166.120.162;12pkt 12fpkt", shape=invtriangle, color=brown];
6939[label="193.201.122.169;34pkt 34fpkt", shape=invtriangle, color=brown];
6942[label="211.166.72.170;9pkt 9fpkt", shape=invtriangle, color=brown];
7381[label="211.166.114.6;7pkt 7fpkt", shape=invhouse, color=bisque];
7626[label="211.166.73.80;7pkt 7fpkt", shape=invhouse, color=bisque];
7684[label="27.57.195.97;13pkt 13fpkt", shape=invhouse, color=bisque];
7878[label="211.166.120.162;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1190[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 131.186.182.177:*}[45.2088%]&lt;BR/&gt;{24.88.114.166:80, *:*}[33.7838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0437%)&lt;BR/&gt; 443: (1.82589%)&lt;BR/&gt; 20999: (0.0815129%)&lt;BR/&gt; 20832: (0.0815129%)&lt;BR/&gt; 20801: (0.0815129%)&gt;];
}
439--604[label="0.846154;11pkt 11fpkt"];
439--2959[label="1;13pkt 13fpkt"];
439--4816[label="0.923077;12pkt 12fpkt"];
604--749[label="0.167883;23pkt 23fpkt"];
604--800[label="0.0351759;7pkt 7fpkt"];
604--834[label="0.0187793;4pkt 4fpkt"];
604--892[label="1;4pkt 4fpkt"];
604--939[label="0.0322581;2pkt 2fpkt"];
604--1086[label="0.0179641;3pkt 3fpkt"];
604--1103[label="0.05;1pkt 1fpkt"];
604--1129[label="0.0157068;3pkt 3fpkt"];
604--1161[label="0.00584795;1pkt 1fpkt"];
604--1297[label="0.00773196;3pkt 3fpkt"];
604--1326[label="0.00925926;1pkt 1fpkt"];
604--1329[label="0.030303;2pkt 2fpkt"];
604--1502[label="0.00775194;3pkt 3fpkt"];
604--1540[label="0.5;1pkt 1fpkt"];
604--1628[label="0.162162;6pkt 6fpkt"];
604--1657[label="0.0447761;3pkt 3fpkt"];
604--1714[label="0.5;2pkt 2fpkt"];
604--1718[label="0.0454545;4pkt 4fpkt"];
604--1857[label="0.0517241;3pkt 3fpkt"];
604--2046[label="0.526316;10pkt 10fpkt"];
604--2105[label="0.253012;42pkt 42fpkt"];
604--2159[label="0.176471;6pkt 6fpkt"];
604--2200[label="0.0144928;1pkt 1fpkt"];
604--2221[label="0.0857143;6pkt 6fpkt"];
604--2227[label="0.0526316;1pkt 1fpkt"];
604--2300[label="1;7pkt 7fpkt"];
604--2422[label="0.0204082;2pkt 2fpkt"];
604--2689[label="0.666667;8pkt 8fpkt"];
604--2754[label="1;7pkt 7fpkt"];
604--2784[label="1;3pkt 3fpkt"];
604--2889[label="0.191667;23pkt 23fpkt"];
604--2901[label="0.0373832;4pkt 4fpkt"];
604--2906[label="0.0215054;4pkt 4fpkt"];
604--2924[label="0.0180941;15pkt 15fpkt"];
604--2959[label="0.846154;11pkt 11fpkt"];
604--2964[label="0.0245902;3pkt 3fpkt"];
604--2995[label="0.0540541;2pkt 2fpkt"];
604--3139[label="0.0454545;4pkt 4fpkt"];
604--3182[label="0.00892857;1pkt 1fpkt"];
604--3189[label="0.0857143;6pkt 6fpkt"];
604--3388[label="0.075;84pkt 84fpkt"];
604--3401[label="0.162162;6pkt 6fpkt"];
604--3402[label="0.985075;66pkt 66fpkt"];
604--3431[label="0.0285714;1pkt 1fpkt"];
604--3470[label="0.571429;4pkt 4fpkt"];
604--3536[label="0.0810811;6pkt 6fpkt"];
604--3575[label="0.176471;3pkt 3fpkt"];
604--3602[label="0.6;3pkt 3fpkt"];
604--3610[label="0.017316;4pkt 4fpkt"];
604--3633[label="0.0147059;1pkt 1fpkt"];
604--3660[label="0.888889;8pkt 8fpkt"];
604--3739[label="1;3pkt 3fpkt"];
604--3747[label="0.00537634;1pkt 1fpkt"];
604--3774[label="0.837838;31pkt 31fpkt"];
604--3807[label="1;13pkt 13fpkt"];
604--3812[label="0.157895;3pkt 3fpkt"];
604--3932[label="1;7pkt 7fpkt"];
604--3951[label="0.111111;1pkt 1fpkt"];
604--3960[label="0.965517;28pkt 28fpkt"];
604--3981[label="0.153846;2pkt 2fpkt"];
604--3982[label="0.111111;3pkt 3fpkt"];
604--3988[label="0.32;8pkt 8fpkt"];
604--4018[label="0.0526316;1pkt 1fpkt"];
604--4026[label="0.354839;11pkt 11fpkt"];
604--4041[label="0.178571;5pkt 5fpkt"];
604--4053[label="0.333333;9pkt 9fpkt"];
604--4077[label="0.0422535;3pkt 3fpkt"];
604--4089[label="0.00401606;1pkt 1fpkt"];
604--4099[label="0.6;6pkt 6fpkt"];
604--4253[label="0.0171429;3pkt 3fpkt"];
604--4282[label="0.833333;5pkt 5fpkt"];
604--4359[label="0.0833333;5pkt 5fpkt"];
604--4456[label="0.461538;6pkt 6fpkt"];
604--4543[label="0.00643087;2pkt 2fpkt"];
604--4623[label="0.5;7pkt 7fpkt"];
604--4635[label="0.5;1pkt 1fpkt"];
604--4722[label="0.166667;1pkt 1fpkt"];
604--4749[label="0.05;1pkt 1fpkt"];
604--4771[label="0.461538;6pkt 6fpkt"];
604--4804[label="0.285714;2pkt 2fpkt"];
604--4816[label="0.714286;10pkt 10fpkt"];
604--4896[label="0.0126582;1pkt 1fpkt"];
604--4914[label="0.0833333;4pkt 4fpkt"];
604--4997[label="0.0190476;2pkt 2fpkt"];
604--5049[label="0.0119332;5pkt 5fpkt"];
604--5082[label="0.666667;8pkt 8fpkt"];
604--5131[label="0.0163934;15pkt 15fpkt"];
604--5169[label="0.588235;20pkt 20fpkt"];
604--5179[label="1;10pkt 10fpkt"];
604--5220[label="1;11pkt 11fpkt"];
604--5251[label="0.015;3pkt 3fpkt"];
604--5297[label="0.0241071;27pkt 27fpkt"];
604--5308[label="0.0331754;7pkt 7fpkt"];
604--5326[label="0.0408163;2pkt 2fpkt"];
604--5414[label="1;7pkt 7fpkt"];
604--5450[label="0.4;2pkt 2fpkt"];
604--5487[label="0.5;1pkt 1fpkt"];
604--5496[label="0.0263158;1pkt 1fpkt"];
604--5577[label="0.0740741;2pkt 2fpkt"];
604--5583[label="0.25;1pkt 1fpkt"];
604--5633[label="0.00717703;3pkt 3fpkt"];
604--5682[label="0.176471;6pkt 6fpkt"];
604--5767[label="0.0307692;2pkt 2fpkt"];
604--5790[label="1;16pkt 16fpkt"];
604--5833[label="0.1875;3pkt 3fpkt"];
604--5848[label="0.129032;8pkt 8fpkt"];
604--5934[label="1;8pkt 8fpkt"];
604--5963[label="0.162162;6pkt 6fpkt"];
604--5964[label="0.985075;66pkt 66fpkt"];
604--5981[label="0.0285714;1pkt 1fpkt"];
604--5993[label="0.571429;4pkt 4fpkt"];
604--6054[label="0.176471;3pkt 3fpkt"];
604--6073[label="0.0173913;4pkt 4fpkt"];
604--6142[label="1;3pkt 3fpkt"];
604--6158[label="0.815789;31pkt 31fpkt"];
604--6250[label="0.111111;1pkt 1fpkt"];
604--6265[label="0.153846;2pkt 2fpkt"];
604--6288[label="0.333333;10pkt 10fpkt"];
604--6329[label="0.6;6pkt 6fpkt"];
604--6427[label="0.833333;5pkt 5fpkt"];
604--6469[label="0.0833333;5pkt 5fpkt"];
604--6531[label="0.5;6pkt 6fpkt"];
604--6620[label="0.461538;6pkt 6fpkt"];
604--6677[label="0.166667;1pkt 1fpkt"];
604--6692[label="0.05;1pkt 1fpkt"];
604--6706[label="0.461538;6pkt 6fpkt"];
604--6726[label="0.25;2pkt 2fpkt"];
604--6782[label="0.102041;5pkt 5fpkt"];
604--6868[label="0.0119332;5pkt 5fpkt"];
604--6884[label="0.666667;8pkt 8fpkt"];
604--6939[label="0.588235;20pkt 20fpkt"];
604--6942[label="1;9pkt 9fpkt"];
604--6980[label="0.0150754;3pkt 3fpkt"];
604--7006[label="0.0241071;27pkt 27fpkt"];
604--7012[label="0.0331754;7pkt 7fpkt"];
604--7023[label="0.0408163;2pkt 2fpkt"];
604--7081[label="1;6pkt 6fpkt"];
604--7099[label="0.25;1pkt 1fpkt"];
604--7117[label="0.5;1pkt 1fpkt"];
604--7207[label="0.176471;6pkt 6fpkt"];
604--7219[label="0.0263158;1pkt 1fpkt"];
604--7251[label="1;1pkt 1fpkt"];
604--7287[label="0.176471;3pkt 3fpkt"];
604--7381[label="0.571429;4pkt 4fpkt"];
604--7420[label="0.017316;4pkt 4fpkt"];
604--7453[label="1;3pkt 3fpkt"];
604--7518[label="0.111111;1pkt 1fpkt"];
604--7524[label="0.153846;2pkt 2fpkt"];
604--7540[label="0.354839;11pkt 11fpkt"];
604--7626[label="0.714286;5pkt 5fpkt"];
604--7684[label="0.461538;6pkt 6fpkt"];
604--7785[label="0.5;7pkt 7fpkt"];
604--7869[label="0.0119332;5pkt 5fpkt"];
604--7878[label="0.666667;8pkt 8fpkt"];
604--7952[label="0.0241071;27pkt 27fpkt"];
604--7956[label="0.0330189;7pkt 7fpkt"];
604--7965[label="0.0408163;2pkt 2fpkt"];
604--8007[label="0.25;1pkt 1fpkt"];
604--8120[label="0.1875;3pkt 3fpkt"];
1329--1343[label="0.030303;2pkt 2fpkt"];
1329--1681[label="0.787879;52pkt 52fpkt"];
1329--2887[label="0.0909091;6pkt 6fpkt"];
1329--3056[label="1;60pkt 60fpkt"];
1329--5767[label="1;65pkt 65fpkt"];
1628--3388[label="0.108108;4pkt 4fpkt"];
1628--3401[label="0.972973;36pkt 36fpkt"];
1628--5963[label="0.972973;36pkt 36fpkt"];
1714--3470[label="1;4pkt 4fpkt"];
1714--5993[label="1;4pkt 4fpkt"];
1714--7381[label="1;4pkt 4fpkt"];
2046--5169[label="1;19pkt 19fpkt"];
2046--6939[label="1;19pkt 19fpkt"];
2105--2564[label="0.0783133;13pkt 13fpkt"];
2105--3388[label="0.10241;17pkt 17fpkt"];
2300--3388[label="0.285714;2pkt 2fpkt"];
2689--3388[label="0.0833333;1pkt 1fpkt"];
2689--5082[label="1;12pkt 12fpkt"];
2689--6884[label="1;12pkt 12fpkt"];
2689--7878[label="1;12pkt 12fpkt"];
2754--3388[label="0.571429;4pkt 4fpkt"];
2924--3388[label="0.0458384;38pkt 38fpkt"];
2924--5131[label="1;829pkt 829fpkt"];
2959--4816[label="0.923077;12pkt 12fpkt"];
2964--3204[label="0.106557;13pkt 13fpkt"];
2964--3388[label="0.00819672;1pkt 1fpkt"];
3189--3388[label="0.0857143;6pkt 6fpkt"];
3189--3536[label="0.985714;69pkt 69fpkt"];
3401--5963[label="1;37pkt 37fpkt"];
3470--5993[label="1;7pkt 7fpkt"];
3470--7381[label="1;7pkt 7fpkt"];
4099--6329[label="1;10pkt 10fpkt"];
4282--6427[label="1;6pkt 6fpkt"];
4282--7626[label="1;6pkt 6fpkt"];
4456--6531[label="1;12pkt 12fpkt"];
4456--7684[label="1;13pkt 13fpkt"];
4804--6726[label="1;7pkt 7fpkt"];
5082--6884[label="1;12pkt 12fpkt"];
5082--7878[label="1;12pkt 12fpkt"];
5169--6939[label="1;34pkt 34fpkt"];
5179--6942[label="1;9pkt 9fpkt"];
5993--7381[label="1;7pkt 7fpkt"];
6427--7626[label="1;6pkt 6fpkt"];
6531--7684[label="1;12pkt 12fpkt"];
6884--7878[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="24.88.114.166" src_port="80"/>
      <filter dst_ip="131.186.182.177" src_port="80"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1191{
style=filled;
color=gray75;
5298[label="196.134.40.183;244pkt 244fpkt", shape=pentagon, color=darkviolet];
7007[label="196.134.40.183;244pkt 244fpkt", shape=invtriangle, color=brown];
stat1191[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.134.40.183:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5298--7007[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.134.40.183" src_port="1025"/>
    </slice>
    <from sec="1120712750" usec="0"/>
    <to sec="1120712795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.79.70.183"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.10.48.184"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1194{
style=filled;
color=gray75;
5310[label="145.222.90.184;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7013[label="145.222.90.184;6pkt 6fpkt", shape=invtriangle, color=brown];
7957[label="145.222.90.184;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1194[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.90.184:*, 212.196.6.100:110}[42.8571%]&lt;BR/&gt;{145.222.90.184:*, *:1863}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (30%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 1068: (7.5%)&lt;BR/&gt; 1064: (7.5%)&lt;BR/&gt; 1062: (7.5%)&gt;];
}
5310--7013[label="1;6pkt 6fpkt"];
5310--7957[label="1;7pkt 7fpkt"];
7013--7957[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="145.222.90.184"/>
      <filter dst_ip="212.196.6.100" dst_port="110" src_ip="145.222.90.184"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1195{
style=filled;
color=gray75;
5323[label="145.223.8.185;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7021[label="145.223.8.185;26pkt 26fpkt", shape=invtriangle, color=brown];
7963[label="145.223.8.185;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1195[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.8.185:*, 24.37.49.192:443}[53.8462%]&lt;BR/&gt;{145.223.8.185:*, 220.173.114.241:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 2865: (1.94805%)&lt;BR/&gt; 2864: (1.94805%)&lt;BR/&gt; 2861: (1.94805%)&gt;];
}
5323--7021[label="1;26pkt 26fpkt"];
5323--7963[label="1;25pkt 25fpkt"];
7021--7963[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="24.37.49.192" dst_port="443" src_ip="145.223.8.185"/>
      <filter dst_ip="220.173.114.241" dst_port="80" src_ip="145.223.8.185"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120712699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1196{
style=filled;
color=gray75;
1777[label="145.222.1.187;s;112pkt 112fpkt", shape=diamond, color=yellow];
5339[label="145.222.1.187;111pkt 111fpkt", shape=pentagon, color=darkviolet];
7033[label="145.222.1.187;112pkt 112fpkt", shape=invtriangle, color=brown];
7970[label="145.222.1.187;112pkt 112fpkt", shape=invhouse, color=bisque];
stat1196[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.1.187:*, 24.92.28.245:80}[22.3214%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64530: (0.447427%)&lt;BR/&gt; 64528: (0.447427%)&lt;BR/&gt; 64527: (0.447427%)&lt;BR/&gt; 64524: (0.447427%)&gt;];
}
1777--5339[label="1;111pkt 111fpkt"];
1777--7033[label="1;112pkt 112fpkt"];
1777--7970[label="1;112pkt 112fpkt"];
5339--7033[label="1;111pkt 111fpkt"];
5339--7970[label="1;111pkt 111fpkt"];
7033--7970[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="24.92.28.245" dst_port="80" src_ip="145.222.1.187"/>
    </slice>
    <from sec="1120712778" usec="0"/>
    <to sec="1120712858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1197{
style=filled;
color=gray75;
5347[label="204.64.197.188;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7038[label="204.64.197.188;254pkt 254fpkt", shape=invtriangle, color=brown];
7972[label="204.64.197.188;254pkt 254fpkt", shape=invhouse, color=bisque];
stat1197[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.64.197.188:1025, *:137}[50.7874%]&lt;BR/&gt;{204.64.197.188:1031, *:137}[49.2126%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (25.3937%)&lt;BR/&gt; 1031: (24.6063%)&gt;];
}
5347--7038[label="1;254pkt 254fpkt"];
5347--7972[label="1;254pkt 254fpkt"];
7038--7972[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.64.197.188" src_port="1025"/>
      <filter dst_port="137" src_ip="204.64.197.188" src_port="1031"/>
    </slice>
    <from sec="1120712911" usec="0"/>
    <to sec="1120712951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1198{
style=filled;
color=gray75;
5354[label="145.223.134.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7042[label="145.223.134.189;1pkt 1fpkt", shape=invtriangle, color=brown];
7975[label="145.223.134.189;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1198[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.134.189:0, 217.39.17.140:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5354--7042[label="1;1pkt 1fpkt"];
5354--7975[label="1;1pkt 1fpkt"];
7042--7975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.39.17.140" src_ip="145.223.134.189"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912404,2.06132,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
1167[label="145.223.193.189;s;264pkt 264fpkt", shape=diamond, color=yellow];
3011[label="145.223.193.189;s;259pkt 259fpkt", shape=hexagon, color=black];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.193.189:80, 144.78.19.40:*}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6176%)&lt;BR/&gt; 0: (0.764818%)&lt;BR/&gt; 60089: (0.191205%)&lt;BR/&gt; 59698: (0.191205%)&lt;BR/&gt; 54416: (0.191205%)&gt;];
}
1167--1323[label="0.0314961;4pkt 4fpkt"];
1167--3011[label="1;259pkt 259fpkt"];
1167--3388[label="0.00757576;2pkt 2fpkt"];
1167--5355[label="0.996212;263pkt 263fpkt"];
1167--7043[label="1;264pkt 264fpkt"];
1167--7976[label="0.996212;263pkt 263fpkt"];
3011--3388[label="0.003861;1pkt 1fpkt"];
3011--5355[label="1;259pkt 259fpkt"];
3011--7043[label="1;259pkt 259fpkt"];
3011--7976[label="1;259pkt 259fpkt"];
</description>
    <slice>
      <filter dst_ip="144.78.19.40" src_ip="145.223.193.189" src_port="80"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1200{
style=filled;
color=gray75;
5357[label="192.62.25.190;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7044[label="192.62.25.190;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1200[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.25.190:18498, 166.59.172.218:80}[50%]&lt;BR/&gt;{192.62.25.190:19210, 166.59.172.218:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19210: (25%)&lt;BR/&gt; 18498: (25%)&gt;];
}
5357--7044[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.59.172.218" dst_port="80" src_ip="192.62.25.190" src_port="19210"/>
      <filter dst_ip="166.59.172.218" dst_port="80" src_ip="192.62.25.190" src_port="18498"/>
    </slice>
    <from sec="1120712532" usec="0"/>
    <to sec="1120712657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.80.139.191"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1202{
style=filled;
color=gray75;
5370[label="212.205.204.191;247pkt 247fpkt", shape=pentagon, color=darkviolet];
7048[label="212.205.204.191;248pkt 248fpkt", shape=invtriangle, color=brown];
stat1202[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.204.191:1031, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1031: (50%)&gt;];
}
5370--7048[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.205.204.191" src_port="1031"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1203{
style=filled;
color=gray75;
5372[label="192.251.226.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7050[label="192.251.226.191;1pkt 1fpkt", shape=invtriangle, color=brown];
7981[label="192.251.226.191;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1203[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.251.226.191:31958, 131.186.182.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31958: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5372--7050[label="1;1pkt 1fpkt"];
5372--7981[label="1;1pkt 1fpkt"];
7050--7981[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.28" dst_port="80" src_ip="192.251.226.191" src_port="31958"/>
    </slice>
    <from sec="1120713259" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
643[label="222.219.157.192;s;1345pkt 1345fpkt", shape=diamond, color=yellow];
5376[label="222.219.157.192;1439pkt 1439fpkt", shape=pentagon, color=darkviolet];
7053[label="222.219.157.192;1440pkt 1440fpkt", shape=invtriangle, color=brown];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.219.157.192:53, *:*}[99.5833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.6813%)&lt;BR/&gt; 32768: (2.15436%)&lt;BR/&gt; 32769: (1.62169%)&lt;BR/&gt; 1025: (0.745739%)&lt;BR/&gt; 1024: (0.662879%)&gt;];
}
643--3384[label="0.00520446;7pkt 7fpkt"];
643--3387[label="0.0840149;113pkt 113fpkt"];
643--5376[label="0.999257;1344pkt 1344fpkt"];
643--7053[label="1;1345pkt 1345fpkt"];
5376--7053[label="1;1439pkt 1439fpkt"];
</description>
    <slice>
      <filter src_ip="222.219.157.192" src_port="53"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.226.218.192"/>
    </slice>
    <from sec="1120712785" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
5381[label="212.79.220.192;87pkt 87fpkt", shape=pentagon, color=darkviolet];
7056[label="212.79.220.192;86pkt 86fpkt", shape=invtriangle, color=brown];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.220.192:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5381--7056[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="212.79.220.192"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.199.22.193"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
5385[label="145.223.77.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7060[label="145.223.77.193;6pkt 6fpkt", shape=invtriangle, color=brown];
7983[label="145.223.77.193;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.77.193:*, 203.54.205.84:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49247: (8.33333%)&lt;BR/&gt; 49235: (8.33333%)&lt;BR/&gt; 49234: (8.33333%)&lt;BR/&gt; 49233: (8.33333%)&gt;];
}
5385--7060[label="1;6pkt 6fpkt"];
5385--7983[label="1;6pkt 6fpkt"];
7060--7983[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="203.54.205.84" dst_port="80" src_ip="145.223.77.193"/>
    </slice>
    <from sec="1120712539" usec="0"/>
    <to sec="1120713069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1209{
style=filled;
color=gray75;
1751[label="24.53.247.193;s;6pkt 6fpkt", shape=diamond, color=yellow];
5393[label="24.53.247.193;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7065[label="24.53.247.193;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1209[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.53.247.193:80, 212.79.237.218:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58406: (5.76923%)&lt;BR/&gt; 56736: (5.76923%)&lt;BR/&gt; 56714: (5.76923%)&lt;BR/&gt; 56712: (5.76923%)&gt;];
}
1751--5393[label="1;6pkt 6fpkt"];
1751--7065[label="1;6pkt 6fpkt"];
5393--7065[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.237.218" src_ip="24.53.247.193" src_port="80"/>
    </slice>
    <from sec="1120712657" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.128.11.194"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1211{
style=filled;
color=gray75;
5397[label="161.99.130.194;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7069[label="161.99.130.194;14pkt 14fpkt", shape=invtriangle, color=brown];
7990[label="161.99.130.194;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1211[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.130.194:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59379: (3.57143%)&lt;BR/&gt; 58581: (3.57143%)&lt;BR/&gt; 55030: (3.57143%)&lt;BR/&gt; 54928: (3.57143%)&gt;];
}
5397--7069[label="1;14pkt 14fpkt"];
5397--7990[label="1;14pkt 14fpkt"];
7069--7990[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.130.194" src_port="80"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1212{
style=filled;
color=gray75;
5398[label="84.171.144.194;136pkt 136fpkt", shape=pentagon, color=darkviolet];
7070[label="84.171.144.194;135pkt 135fpkt", shape=invtriangle, color=brown];
stat1212[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.171.144.194:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5398--7070[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.171.144.194" src_port="1036"/>
    </slice>
    <from sec="1120712684" usec="0"/>
    <to sec="1120712700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.130.217.194"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1214{
style=filled;
color=gray75;
5454[label="198.197.96.199;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7101[label="198.197.96.199;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1214[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.197.96.199:*, 131.186.180.52:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3003: (2.63158%)&lt;BR/&gt; 2986: (2.63158%)&lt;BR/&gt; 2970: (2.63158%)&lt;BR/&gt; 2783: (2.63158%)&gt;];
}
5454--7101[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.180.52" dst_port="80" src_ip="198.197.96.199"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1215{
style=filled;
color=gray75;
2712[label="161.99.128.199;s;48pkt 48fpkt", shape=diamond, color=yellow];
stat1215[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.128.199:*, *:25}[97.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9583%)&lt;BR/&gt; 62950: (1.04167%)&lt;BR/&gt; 62925: (1.04167%)&lt;BR/&gt; 62921: (1.04167%)&lt;BR/&gt; 62920: (1.04167%)&gt;];
}
2712--5456[label="1;48pkt 48fpkt"];
2712--7103[label="1;48pkt 48fpkt"];
2712--8010[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="161.99.128.199"/>
    </slice>
    <from sec="1120712465" usec="0"/>
    <to sec="1120713090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
5467[label="26.53.135.200;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7107[label="26.53.135.200;19pkt 19fpkt", shape=invtriangle, color=brown];
8014[label="26.53.135.200;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.53.135.200:80, 212.79.194.26:*}[52.6316%]&lt;BR/&gt;{26.53.135.200:80, 212.79.192.184:*}[47.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47873: (2.67857%)&lt;BR/&gt; 47868: (2.67857%)&lt;BR/&gt; 47864: (2.67857%)&lt;BR/&gt; 47855: (2.67857%)&gt;];
}
5467--7107[label="1;18pkt 18fpkt"];
5467--8014[label="1;18pkt 18fpkt"];
7107--8014[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.194.26" src_ip="26.53.135.200" src_port="80"/>
      <filter dst_ip="212.79.192.184" src_ip="26.53.135.200" src_port="80"/>
    </slice>
    <from sec="1120713086" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1217{
style=filled;
color=gray75;
1154[label="213.17.224.200;s;142pkt 142fpkt", shape=diamond, color=yellow];
2755[label="28.153.202.186;d;5pkt 5fpkt", shape=diamond, color=yellow];
5469[label="213.17.224.200;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7108[label="213.17.224.200;162pkt 162fpkt", shape=invtriangle, color=brown];
stat1217[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.17.224.200:80, *:*}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1489%)&lt;BR/&gt; 8888: (0.638298%)&lt;BR/&gt; 42492: (0.425532%)&lt;BR/&gt; 42359: (0.425532%)&lt;BR/&gt; 65135: (0.319149%)&gt;];
}
1154--2755[label="0.6;3pkt 3fpkt"];
1154--3388[label="0.133803;19pkt 19fpkt"];
1154--5469[label="0.985915;140pkt 140fpkt"];
1154--7108[label="0.992958;141pkt 141fpkt"];
2755--3296[label="0.2;1pkt 1fpkt"];
2755--5469[label="0.4;2pkt 2fpkt"];
2755--5609[label="0.2;1pkt 1fpkt"];
2755--7108[label="0.6;3pkt 3fpkt"];
5469--7108[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter src_ip="213.17.224.200" src_port="80"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1218{
style=filled;
color=gray75;
5475[label="149.177.108.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7109[label="149.177.108.201;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1218[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.108.201:2034, 211.166.150.126:1863}[50%]&lt;BR/&gt;{149.177.108.201:1599, 211.166.150.143:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1599: (33.3333%)&lt;BR/&gt; 2034: (16.6667%)&gt;];
}
5475--7109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.143" dst_port="1863" src_ip="149.177.108.201" src_port="1599"/>
      <filter dst_ip="211.166.150.126" dst_port="1863" src_ip="149.177.108.201" src_port="2034"/>
    </slice>
    <from sec="1120712430" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1219{
style=filled;
color=gray75;
1828[label="161.99.130.201;s;131pkt 131fpkt", shape=diamond, color=yellow];
5476[label="161.99.130.201;137pkt 137fpkt", shape=pentagon, color=darkviolet];
7110[label="161.99.130.201;136pkt 136fpkt", shape=invtriangle, color=brown];
stat1219[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.130.201:25, *:*}[96.3504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65491: (0.371287%)&lt;BR/&gt; 65387: (0.371287%)&lt;BR/&gt; 63442: (0.371287%)&lt;BR/&gt; 63259: (0.371287%)&gt;];
}
1828--5476[label="1;131pkt 131fpkt"];
1828--7110[label="0.992366;130pkt 130fpkt"];
5476--7110[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter src_ip="161.99.130.201" src_port="25"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1220{
style=filled;
color=gray75;
5478[label="212.66.177.201;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7111[label="212.66.177.201;8pkt 8fpkt", shape=invtriangle, color=brown];
8015[label="212.66.177.201;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1220[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.177.201:*, 192.254.220.67:554}[33.3333%]&lt;BR/&gt;{212.66.177.201:*, 84.114.230.175:554}[22.2222%]&lt;BR/&gt;{212.66.177.201:*, *:1755}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (32%)&lt;BR/&gt; 1755: (12%)&lt;BR/&gt; 1239: (6%)&lt;BR/&gt; 1235: (6%)&lt;BR/&gt; 1233: (6%)&gt;];
}
5478--7111[label="1;8pkt 8fpkt"];
5478--8015[label="1;8pkt 8fpkt"];
7111--8015[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="1755" src_ip="212.66.177.201"/>
      <filter dst_ip="84.114.230.175" dst_port="554" src_ip="212.66.177.201"/>
      <filter dst_ip="192.254.220.67" dst_port="554" src_ip="212.66.177.201"/>
    </slice>
    <from sec="1120712928" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.200.97.202"/>
    </slice>
    <from sec="1120713165" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1222{
style=filled;
color=gray75;
5497[label="145.223.77.203;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7122[label="145.223.77.203;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1222[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.77.203:49728, 222.174.196.4:80}[20%]&lt;BR/&gt;{145.223.77.203:49724, 218.40.202.245:80}[20%]&lt;BR/&gt;{145.223.77.203:49725, 218.40.202.245:80}[20%]&lt;BR/&gt;{145.223.77.203:49726, 218.40.202.245:80}[20%]&lt;BR/&gt;{145.223.77.203:49727, 218.40.202.245:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49727: (11.1111%)&lt;BR/&gt; 49726: (11.1111%)&lt;BR/&gt; 49725: (11.1111%)&lt;BR/&gt; 49724: (11.1111%)&gt;];
}
5497--7122[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="218.40.202.245" dst_port="80" src_ip="145.223.77.203" src_port="49727"/>
      <filter dst_ip="218.40.202.245" dst_port="80" src_ip="145.223.77.203" src_port="49726"/>
      <filter dst_ip="218.40.202.245" dst_port="80" src_ip="145.223.77.203" src_port="49725"/>
      <filter dst_ip="218.40.202.245" dst_port="80" src_ip="145.223.77.203" src_port="49724"/>
      <filter dst_ip="222.174.196.4" dst_port="80" src_ip="145.223.77.203" src_port="49728"/>
    </slice>
    <from sec="1120712757" usec="0"/>
    <to sec="1120712820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1223{
style=filled;
color=gray75;
5502[label="145.223.51.204;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7124[label="145.223.51.204;33pkt 33fpkt", shape=invtriangle, color=brown];
stat1223[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.51.204:*, *:80}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5075%)&lt;BR/&gt; 2301: (1.49254%)&lt;BR/&gt; 2296: (1.49254%)&lt;BR/&gt; 2292: (1.49254%)&lt;BR/&gt; 2291: (1.49254%)&gt;];
}
5502--7124[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.223.51.204"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1224{
style=filled;
color=gray75;
5504[label="149.177.104.204;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7125[label="149.177.104.204;4pkt 4fpkt", shape=invtriangle, color=brown];
8022[label="149.177.104.204;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1224[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.104.204:1280, 211.166.150.105:1863}[25%]&lt;BR/&gt;{149.177.104.204:1039, 211.166.150.225:1863}[25%]&lt;BR/&gt;{149.177.104.204:1283, 211.166.150.71:1863}[25%]&lt;BR/&gt;{149.177.104.204:1284, 211.166.150.71:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1284: (13.6364%)&lt;BR/&gt; 1280: (13.6364%)&lt;BR/&gt; 1039: (13.6364%)&lt;BR/&gt; 1283: (9.09091%)&gt;];
}
5504--7125[label="1;4pkt 4fpkt"];
5504--8022[label="1;3pkt 3fpkt"];
7125--8022[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.71" dst_port="1863" src_ip="149.177.104.204" src_port="1284"/>
      <filter dst_ip="211.166.150.71" dst_port="1863" src_ip="149.177.104.204" src_port="1283"/>
      <filter dst_ip="211.166.150.225" dst_port="1863" src_ip="149.177.104.204" src_port="1039"/>
      <filter dst_ip="211.166.150.105" dst_port="1863" src_ip="149.177.104.204" src_port="1280"/>
    </slice>
    <from sec="1120712425" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1225{
style=filled;
color=gray75;
5513[label="26.132.97.205;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7129[label="26.132.97.205;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1225[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.132.97.205:995, 131.186.145.16:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 38962: (3.44828%)&lt;BR/&gt; 4658: (3.44828%)&lt;BR/&gt; 4655: (3.44828%)&lt;BR/&gt; 4073: (3.44828%)&gt;];
}
5513--7129[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.145.16" src_ip="26.132.97.205" src_port="995"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.53.247.205"/>
    </slice>
    <from sec="1120712793" usec="0"/>
    <to sec="1120712882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1227{
style=filled;
color=gray75;
5524[label="83.3.130.206;205pkt 205fpkt", shape=pentagon, color=darkviolet];
7136[label="83.3.130.206;204pkt 204fpkt", shape=invtriangle, color=brown];
8032[label="83.3.130.206;205pkt 205fpkt", shape=invhouse, color=bisque];
stat1227[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.3.130.206:61549, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61549: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5524--7136[label="1;204pkt 204fpkt"];
5524--8032[label="1;205pkt 205fpkt"];
7136--8032[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="83.3.130.206" src_port="61549"/>
    </slice>
    <from sec="1120712712" usec="0"/>
    <to sec="1120712745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.161.168.206"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1229{
style=filled;
color=gray75;
1754[label="145.223.136.207;s;103pkt 103fpkt", shape=diamond, color=yellow];
5529[label="145.223.136.207;102pkt 102fpkt", shape=pentagon, color=darkviolet];
7139[label="145.223.136.207;102pkt 102fpkt", shape=invtriangle, color=brown];
8035[label="145.223.136.207;103pkt 103fpkt", shape=invhouse, color=bisque];
stat1229[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.136.207:*, 204.240.18.131:80}[81.5534%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36644: (0.487805%)&lt;BR/&gt; 36643: (0.487805%)&lt;BR/&gt; 36642: (0.487805%)&lt;BR/&gt; 36641: (0.487805%)&gt;];
}
1754--5529[label="1;102pkt 102fpkt"];
1754--7139[label="1;102pkt 102fpkt"];
1754--8035[label="1;103pkt 103fpkt"];
5529--7139[label="1;102pkt 102fpkt"];
5529--8035[label="1;102pkt 102fpkt"];
7139--8035[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="204.240.18.131" dst_port="80" src_ip="145.223.136.207"/>
    </slice>
    <from sec="1120712675" usec="0"/>
    <to sec="1120713011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1230{
style=filled;
color=gray75;
5535[label="84.32.74.208;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7140[label="84.32.74.208;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1230[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.32.74.208:*, 149.177.210.138:1113}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1113: (50%)&lt;BR/&gt; 61921: (5.55556%)&lt;BR/&gt; 59919: (5.55556%)&lt;BR/&gt; 52501: (5.55556%)&lt;BR/&gt; 49309: (5.55556%)&gt;];
}
5535--7140[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.210.138" dst_port="1113" src_ip="84.32.74.208"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1231{
style=filled;
color=gray75;
5542[label="145.223.172.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7142[label="145.223.172.208;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1231[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.172.208:41000, 223.35.140.27:1160}[20%]&lt;BR/&gt;{145.223.172.208:53, 194.204.157.37:53}[20%]&lt;BR/&gt;{145.223.172.208:1469, 223.171.45.171:9000}[20%]&lt;BR/&gt;{145.223.172.208:1989, 223.171.1.93:9119}[20%]&lt;BR/&gt;{145.223.172.208:2000, 223.171.1.93:9119}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9119: (20%)&lt;BR/&gt; 53: (20%)&lt;BR/&gt; 41000: (10%)&lt;BR/&gt; 9000: (10%)&lt;BR/&gt; 2000: (10%)&gt;];
}
5542--7142[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="223.171.1.93" dst_port="9119" src_ip="145.223.172.208" src_port="2000"/>
      <filter dst_ip="223.171.1.93" dst_port="9119" src_ip="145.223.172.208" src_port="1989"/>
      <filter dst_ip="223.171.45.171" dst_port="9000" src_ip="145.223.172.208" src_port="1469"/>
      <filter dst_ip="194.204.157.37" dst_port="53" src_ip="145.223.172.208" src_port="53"/>
      <filter dst_ip="223.35.140.27" dst_port="1160" src_ip="145.223.172.208" src_port="41000"/>
    </slice>
    <from sec="1120712435" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1232{
style=filled;
color=gray75;
421[label="149.177.67.209;s;4607pkt 4607fpkt", shape=diamond, color=yellow];
5552[label="149.177.67.209;4797pkt 4797fpkt", shape=pentagon, color=darkviolet];
7145[label="149.177.67.209;4796pkt 4796fpkt", shape=invtriangle, color=brown];
8039[label="149.177.67.209;4796pkt 4796fpkt", shape=invhouse, color=bisque];
stat1232[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.67.209:53, *:*}[72.733%]&lt;BR/&gt;{149.177.67.209:38584, *:53}[25.8912%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.708%)&lt;BR/&gt; 38584: (12.8527%)&lt;BR/&gt; 1025: (6.22236%)&lt;BR/&gt; 32769: (3.7192%)&lt;BR/&gt; 1031: (1.60034%)&gt;];
}
421--566[label="0.181818;2pkt 2fpkt"];
421--1380[label="0.00854701;1pkt 1fpkt"];
421--1834[label="0.00934579;1pkt 1fpkt"];
421--1880[label="0.00900901;1pkt 1fpkt"];
421--2126[label="0.00925926;1pkt 1fpkt"];
421--2176[label="0.0102041;1pkt 1fpkt"];
421--2415[label="0.00990099;1pkt 1fpkt"];
421--2425[label="0.00909091;1pkt 1fpkt"];
421--2435[label="0.00961538;1pkt 1fpkt"];
421--2598[label="0.0153846;1pkt 1fpkt"];
421--2600[label="0.00961538;1pkt 1fpkt"];
421--2627[label="0.02;1pkt 1fpkt"];
421--3318[label="0.00854701;1pkt 1fpkt"];
421--3384[label="0.0416085;149pkt 149fpkt"];
421--3387[label="0.298025;1373pkt 1373fpkt"];
421--5552[label="1;4607pkt 4607fpkt"];
421--7145[label="0.999783;4606pkt 4606fpkt"];
421--8039[label="0.999783;4606pkt 4606fpkt"];
5552--7145[label="1;4796pkt 4796fpkt"];
5552--8039[label="1;4796pkt 4796fpkt"];
7145--8039[label="1;4796pkt 4796fpkt"];
</description>
    <slice>
      <filter src_ip="149.177.67.209" src_port="53"/>
      <filter dst_port="53" src_ip="149.177.67.209" src_port="38584"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1233{
style=filled;
color=gray75;
5570[label="194.40.188.210;220pkt 220fpkt", shape=pentagon, color=darkviolet];
7158[label="194.40.188.210;220pkt 220fpkt", shape=invtriangle, color=brown];
stat1233[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.40.188.210:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4781: (0.454545%)&lt;BR/&gt; 4189: (0.454545%)&lt;BR/&gt; 3458: (0.454545%)&lt;BR/&gt; 3227: (0.454545%)&gt;];
}
5570--7158[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="194.40.188.210"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.36354,2.08778,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1234{
style=filled;
color=gray75;
25[label="86.48.244.212s;1pkt 1fpkt", shape=rectangle, color=red];
5599[label="86.48.244.212;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7168[label="86.48.244.212;4pkt 4fpkt", shape=invtriangle, color=brown];
8053[label="86.48.244.212;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1234[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.48.244.212:51633, 149.68.157.180:30347}[20%]&lt;BR/&gt;{86.48.244.212:54903, 149.68.157.180:19077}[20%]&lt;BR/&gt;{86.48.244.212:55196, 149.68.157.180:30347}[20%]&lt;BR/&gt;{86.48.244.212:55816, 149.68.157.180:30347}[20%]&lt;BR/&gt;{86.48.244.212:59422, 149.68.157.180:30347}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30347: (35.7143%)&lt;BR/&gt; 54903: (14.2857%)&lt;BR/&gt; 19077: (14.2857%)&lt;BR/&gt; 59422: (10.7143%)&lt;BR/&gt; 55816: (10.7143%)&gt;];
}
25--169[label="1;1pkt 1fpkt"];
25--2791[label="1;1pkt 1fpkt"];
25--5599[label="1;1pkt 1fpkt"];
25--7168[label="1;1pkt 1fpkt"];
25--8053[label="1;1pkt 1fpkt"];
5599--7168[label="1;4pkt 4fpkt"];
5599--8053[label="1;4pkt 4fpkt"];
7168--8053[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.68.157.180" dst_port="30347" src_ip="86.48.244.212" src_port="59422"/>
      <filter dst_ip="149.68.157.180" dst_port="30347" src_ip="86.48.244.212" src_port="55816"/>
      <filter dst_ip="149.68.157.180" dst_port="30347" src_ip="86.48.244.212" src_port="55196"/>
      <filter dst_ip="149.68.157.180" dst_port="19077" src_ip="86.48.244.212" src_port="54903"/>
      <filter dst_ip="149.68.157.180" dst_port="30347" src_ip="86.48.244.212" src_port="51633"/>
    </slice>
    <from sec="1120712508" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1235{
style=filled;
color=gray75;
5603[label="205.150.16.213;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7172[label="205.150.16.213;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1235[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.150.16.213:21, 161.99.132.244:*}[33.3333%]&lt;BR/&gt;{205.150.16.213:20, 212.66.54.151:*}[22.2222%]&lt;BR/&gt;{205.150.16.213:21, 212.66.54.151:*}[22.2222%]&lt;BR/&gt;{205.150.16.213:20, 161.99.132.244:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.7778%)&lt;BR/&gt; 20: (22.2222%)&lt;BR/&gt; 5002: (5.55556%)&lt;BR/&gt; 5001: (5.55556%)&lt;BR/&gt; 1069: (5.55556%)&gt;];
}
5603--7172[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.132.244" src_ip="205.150.16.213" src_port="21"/>
      <filter dst_ip="161.99.132.244" src_ip="205.150.16.213" src_port="20"/>
      <filter dst_ip="212.66.54.151" src_ip="205.150.16.213" src_port="21"/>
      <filter dst_ip="212.66.54.151" src_ip="205.150.16.213" src_port="20"/>
    </slice>
    <from sec="1120712633" usec="0"/>
    <to sec="1120713162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1236{
style=filled;
color=gray75;
5608[label="161.99.64.213;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7175[label="161.99.64.213;21pkt 21fpkt", shape=invtriangle, color=brown];
8057[label="161.99.64.213;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1236[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.64.213:*, 3.53.233.120:80}[38.0952%]&lt;BR/&gt;{161.99.64.213:*, 3.53.233.113:80}[28.5714%]&lt;BR/&gt;{161.99.64.213:*, 3.53.232.107:80}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 123: (3.22581%)&lt;BR/&gt; 50102: (2.41935%)&lt;BR/&gt; 50101: (2.41935%)&lt;BR/&gt; 50100: (2.41935%)&gt;];
}
5608--7175[label="1;20pkt 20fpkt"];
5608--8057[label="1;20pkt 20fpkt"];
7175--8057[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="3.53.233.120" dst_port="80" src_ip="161.99.64.213"/>
      <filter dst_ip="3.53.233.113" dst_port="80" src_ip="161.99.64.213"/>
      <filter dst_ip="3.53.232.107" dst_port="80" src_ip="161.99.64.213"/>
    </slice>
    <from sec="1120712755" usec="0"/>
    <to sec="1120712923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1237{
style=filled;
color=gray75;
5617[label="149.110.210.213;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7178[label="149.110.210.213;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1237[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.110.210.213:*, 211.38.96.20:80}[46.1538%]&lt;BR/&gt;{149.110.210.213:*, 220.224.146.97:1352}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38%)&lt;BR/&gt; 1352: (12%)&lt;BR/&gt; 3198: (4%)&lt;BR/&gt; 1209: (4%)&lt;BR/&gt; 1208: (4%)&gt;];
}
5617--7178[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="211.38.96.20" dst_port="80" src_ip="149.110.210.213"/>
      <filter dst_ip="220.224.146.97" dst_port="1352" src_ip="149.110.210.213"/>
    </slice>
    <from sec="1120713007" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
5622[label="7.82.88.214;120pkt 120fpkt", shape=pentagon, color=darkviolet];
7180[label="7.82.88.214;121pkt 121fpkt", shape=invtriangle, color=brown];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.82.88.214:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3785: (1.24481%)&lt;BR/&gt; 3114: (0.829876%)&lt;BR/&gt; 4994: (0.414938%)&lt;BR/&gt; 4988: (0.414938%)&gt;];
}
5622--7180[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="7.82.88.214"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120712734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.192.99.214"/>
    </slice>
    <from sec="1120712526" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.163.107.214"/>
    </slice>
    <from sec="1120712606" usec="0"/>
    <to sec="1120713035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1241{
style=filled;
color=gray75;
5629[label="192.225.136.214;227pkt 227fpkt", shape=pentagon, color=darkviolet];
7186[label="192.225.136.214;227pkt 227fpkt", shape=invtriangle, color=brown];
stat1241[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.225.136.214:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 65317: (0.220264%)&lt;BR/&gt; 65122: (0.220264%)&lt;BR/&gt; 65033: (0.220264%)&lt;BR/&gt; 64835: (0.220264%)&gt;];
}
5629--7186[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter src_ip="192.225.136.214" src_port="7000"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.70.92.216"/>
    </slice>
    <from sec="1120713052" usec="0"/>
    <to sec="1120713112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.10.17.218"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120712510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1244{
style=filled;
color=gray75;
5671[label="145.223.128.218;48pkt 48fpkt", shape=pentagon, color=darkviolet];
7201[label="145.223.128.218;47pkt 47fpkt", shape=invtriangle, color=brown];
8073[label="145.223.128.218;47pkt 47fpkt", shape=invhouse, color=bisque];
stat1244[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.128.218:*, 29.96.134.169:80}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1184: (1.05634%)&lt;BR/&gt; 1183: (1.05634%)&lt;BR/&gt; 1182: (1.05634%)&lt;BR/&gt; 1181: (1.05634%)&gt;];
}
5671--7201[label="1;47pkt 47fpkt"];
5671--8073[label="1;47pkt 47fpkt"];
7201--8073[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="29.96.134.169" dst_port="80" src_ip="145.223.128.218"/>
    </slice>
    <from sec="1120712514" usec="0"/>
    <to sec="1120712547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.203.95.219"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
5685[label="149.177.105.220;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7209[label="149.177.105.220;4pkt 4fpkt", shape=invtriangle, color=brown];
8078[label="149.177.105.220;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.105.220:1159, 211.166.150.18:1863}[25%]&lt;BR/&gt;{149.177.105.220:1192, 211.166.150.81:1863}[25%]&lt;BR/&gt;{149.177.105.220:1186, 211.166.150.111:1863}[25%]&lt;BR/&gt;{149.177.105.220:1053, 211.166.150.204:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1192: (12.5%)&lt;BR/&gt; 1186: (12.5%)&lt;BR/&gt; 1159: (12.5%)&lt;BR/&gt; 1053: (12.5%)&gt;];
}
5685--7209[label="1;4pkt 4fpkt"];
5685--8078[label="1;4pkt 4fpkt"];
7209--8078[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.204" dst_port="1863" src_ip="149.177.105.220" src_port="1053"/>
      <filter dst_ip="211.166.150.111" dst_port="1863" src_ip="149.177.105.220" src_port="1186"/>
      <filter dst_ip="211.166.150.81" dst_port="1863" src_ip="149.177.105.220" src_port="1192"/>
      <filter dst_ip="211.166.150.18" dst_port="1863" src_ip="149.177.105.220" src_port="1159"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1247{
style=filled;
color=gray75;
5691[label="198.166.22.221;134pkt 134fpkt", shape=pentagon, color=darkviolet];
7212[label="198.166.22.221;134pkt 134fpkt", shape=invtriangle, color=brown];
stat1247[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.166.22.221:*, *:5554}[58.9552%]&lt;BR/&gt;{198.166.22.221:*, *:9898}[41.0448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (29.4776%)&lt;BR/&gt; 9898: (20.5224%)&lt;BR/&gt; 2155: (0.373134%)&lt;BR/&gt; 2152: (0.373134%)&lt;BR/&gt; 2137: (0.373134%)&gt;];
}
5691--7212[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="198.166.22.221"/>
      <filter dst_port="9898" src_ip="198.166.22.221"/>
    </slice>
    <from sec="1120713300" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1248{
style=filled;
color=gray75;
5697[label="84.147.131.221;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7217[label="84.147.131.221;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1248[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.147.131.221:4283, 149.177.72.78:25}[33.3333%]&lt;BR/&gt;{84.147.131.221:113, 213.17.235.99:57361}[33.3333%]&lt;BR/&gt;{84.147.131.221:1626, 213.17.235.99:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 57361: (16.6667%)&lt;BR/&gt; 4283: (16.6667%)&lt;BR/&gt; 1626: (16.6667%)&lt;BR/&gt; 113: (16.6667%)&gt;];
}
5697--7217[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.235.99" dst_port="25" src_ip="84.147.131.221" src_port="1626"/>
      <filter dst_ip="213.17.235.99" dst_port="57361" src_ip="84.147.131.221" src_port="113"/>
      <filter dst_ip="149.177.72.78" dst_port="25" src_ip="84.147.131.221" src_port="4283"/>
    </slice>
    <from sec="1120712990" usec="0"/>
    <to sec="1120713093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.16.129.223"/>
    </slice>
    <from sec="1120712415" usec="0"/>
    <to sec="1120712902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.218.145.223"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1251{
style=filled;
color=gray75;
5726[label="200.103.57.224;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7229[label="200.103.57.224;30pkt 30fpkt", shape=invtriangle, color=brown];
stat1251[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.103.57.224:0, *:0}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.6667%)&lt;BR/&gt; 24943: (1.66667%)&lt;BR/&gt; 179: (1.66667%)&gt;];
}
5726--7229[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="200.103.57.224"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.37.81.224"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1253{
style=filled;
color=gray75;
5732[label="212.79.195.224;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7232[label="212.79.195.224;17pkt 17fpkt", shape=invtriangle, color=brown];
8090[label="212.79.195.224;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1253[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.79.195.224:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5732--7232[label="1;17pkt 17fpkt"];
5732--8090[label="1;17pkt 17fpkt"];
7232--8090[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="212.79.195.224"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
5735[label="145.222.6.225;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7233[label="145.222.6.225;4pkt 4fpkt", shape=invtriangle, color=brown];
8091[label="145.222.6.225;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.6.225:35715, 147.8.108.76:80}[25%]&lt;BR/&gt;{145.222.6.225:35719, 147.8.108.76:80}[25%]&lt;BR/&gt;{145.222.6.225:35717, 194.161.5.226:80}[25%]&lt;BR/&gt;{145.222.6.225:35718, 194.161.5.226:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35719: (13.6364%)&lt;BR/&gt; 35718: (13.6364%)&lt;BR/&gt; 35715: (13.6364%)&lt;BR/&gt; 35717: (9.09091%)&gt;];
}
5735--7233[label="1;3pkt 3fpkt"];
5735--8091[label="1;3pkt 3fpkt"];
7233--8091[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="194.161.5.226" dst_port="80" src_ip="145.222.6.225" src_port="35718"/>
      <filter dst_ip="194.161.5.226" dst_port="80" src_ip="145.222.6.225" src_port="35717"/>
      <filter dst_ip="147.8.108.76" dst_port="80" src_ip="145.222.6.225" src_port="35719"/>
      <filter dst_ip="147.8.108.76" dst_port="80" src_ip="145.222.6.225" src_port="35715"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1255{
style=filled;
color=gray75;
274[label="161.99.54.225;s;83pkt 83fpkt", shape=diamond, color=yellow];
275[label="203.54.185.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
885[label="203.54.185.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
1202[label="68.85.188.140;d;3pkt 3fpkt", shape=diamond, color=yellow];
2067[label="68.85.188.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
5738[label="161.99.54.225;83pkt 83fpkt", shape=pentagon, color=darkviolet];
7236[label="161.99.54.225;82pkt 82fpkt", shape=invtriangle, color=brown];
8094[label="161.99.54.225;82pkt 82fpkt", shape=invhouse, color=bisque];
stat1255[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.99.54.225:*, *:1935}[40.9639%]&lt;BR/&gt;{161.99.54.225:*, 203.54.185.227:80}[28.9157%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.1667%)&lt;BR/&gt; 1935: (20.8333%)&lt;BR/&gt; 2341: (0.744048%)&lt;BR/&gt; 2320: (0.744048%)&lt;BR/&gt; 2314: (0.744048%)&gt;];
}
274--275[label="1;1pkt 1fpkt"];
274--885[label="1;1pkt 1fpkt"];
274--1202[label="1;3pkt 3fpkt"];
274--2067[label="1;1pkt 1fpkt"];
274--5738[label="1;83pkt 83fpkt"];
274--7236[label="1;82pkt 82fpkt"];
274--8094[label="1;82pkt 82fpkt"];
275--5738[label="1;1pkt 1fpkt"];
275--7236[label="1;1pkt 1fpkt"];
275--8094[label="1;1pkt 1fpkt"];
885--5738[label="1;1pkt 1fpkt"];
885--7236[label="1;1pkt 1fpkt"];
885--8094[label="1;1pkt 1fpkt"];
1202--5738[label="1;3pkt 3fpkt"];
1202--7236[label="1;3pkt 3fpkt"];
1202--8094[label="1;3pkt 3fpkt"];
2067--5738[label="1;1pkt 1fpkt"];
2067--7236[label="1;1pkt 1fpkt"];
2067--8094[label="1;1pkt 1fpkt"];
5738--7236[label="1;82pkt 82fpkt"];
5738--8094[label="1;82pkt 82fpkt"];
7236--8094[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="1935" src_ip="161.99.54.225"/>
      <filter dst_ip="203.54.185.227" dst_port="80" src_ip="161.99.54.225"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1257{
style=filled;
color=gray75;
1380[label="222.23.2.234;d;117pkt 117fpkt", shape=diamond, color=yellow];
3525[label="145.223.251.10;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4004[label="166.59.162.53;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4019[label="145.222.170.54;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4121[label="149.177.243.65;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4537[label="213.17.234.105;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5070[label="145.223.254.160;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5084[label="145.223.146.162;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5461[label="212.79.237.199;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6025[label="145.223.251.10;55pkt 55fpkt", shape=invtriangle, color=brown];
6284[label="145.222.170.54;30pkt 30fpkt", shape=invtriangle, color=brown];
6338[label="149.177.243.65;72pkt 72fpkt", shape=invtriangle, color=brown];
6885[label="145.223.146.162;47pkt 47fpkt", shape=invtriangle, color=brown];
7393[label="145.223.251.10;56pkt 56fpkt", shape=invhouse, color=bisque];
7536[label="145.222.170.54;31pkt 31fpkt", shape=invhouse, color=bisque];
7568[label="149.177.243.65;72pkt 72fpkt", shape=invhouse, color=bisque];
7987[label="212.79.237.193;48pkt 48fpkt", shape=invhouse, color=bisque];
8011[label="212.79.237.199;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1257[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 222.23.2.234:53}[21.7069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (35.2784%)&lt;BR/&gt; 57276: (9.36831%)&lt;BR/&gt; 0: (5.99572%)&lt;BR/&gt; 80: (5.03212%)&lt;BR/&gt; 1024: (4.60385%)&gt;];
}
1380--1463[label="0.00854701;1pkt 1fpkt"];
1380--1521[label="0.00854701;1pkt 1fpkt"];
1380--1570[label="0.015873;1pkt 1fpkt"];
1380--1596[label="0.00854701;1pkt 1fpkt"];
1380--1656[label="0.034188;4pkt 4fpkt"];
1380--1810[label="0.00854701;1pkt 1fpkt"];
1380--1812[label="0.00854701;1pkt 1fpkt"];
1380--1844[label="0.00854701;1pkt 1fpkt"];
1380--1845[label="0.00854701;1pkt 1fpkt"];
1380--1853[label="0.00854701;1pkt 1fpkt"];
1380--1886[label="0.00854701;1pkt 1fpkt"];
1380--1916[label="0.00854701;1pkt 1fpkt"];
1380--1921[label="0.00854701;1pkt 1fpkt"];
1380--2086[label="0.042735;5pkt 5fpkt"];
1380--2146[label="0.00854701;1pkt 1fpkt"];
1380--2160[label="0.00854701;1pkt 1fpkt"];
1380--2214[label="0.00854701;1pkt 1fpkt"];
1380--2687[label="0.0114943;1pkt 1fpkt"];
1380--2718[label="0.0227273;1pkt 1fpkt"];
1380--2859[label="0.00854701;1pkt 1fpkt"];
1380--2938[label="0.00854701;1pkt 1fpkt"];
1380--2960[label="0.00854701;1pkt 1fpkt"];
1380--3003[label="0.00854701;1pkt 1fpkt"];
1380--3017[label="0.016129;1pkt 1fpkt"];
1380--3037[label="0.00854701;1pkt 1fpkt"];
1380--3061[label="0.00854701;1pkt 1fpkt"];
1380--3095[label="0.025641;1pkt 1fpkt"];
1380--3164[label="0.00854701;1pkt 1fpkt"];
1380--3222[label="0.00854701;1pkt 1fpkt"];
1380--3313[label="0.00854701;1pkt 1fpkt"];
1380--3314[label="0.00854701;1pkt 1fpkt"];
1380--3318[label="1;117pkt 117fpkt"];
1380--3329[label="0.0227273;1pkt 1fpkt"];
1380--3384[label="0.145299;17pkt 17fpkt"];
1380--3387[label="0.025641;3pkt 3fpkt"];
1380--3525[label="0.0178571;1pkt 1fpkt"];
1380--3543[label="0.0119048;1pkt 1fpkt"];
1380--3572[label="0.00854701;1pkt 1fpkt"];
1380--3609[label="0.00854701;1pkt 1fpkt"];
1380--3757[label="0.0153846;1pkt 1fpkt"];
1380--3810[label="0.00854701;1pkt 1fpkt"];
1380--3819[label="0.00854701;1pkt 1fpkt"];
1380--3902[label="0.00854701;1pkt 1fpkt"];
1380--3992[label="0.00854701;1pkt 1fpkt"];
1380--3996[label="0.00854701;1pkt 1fpkt"];
1380--4004[label="0.0166667;1pkt 1fpkt"];
1380--4006[label="0.00854701;1pkt 1fpkt"];
1380--4019[label="0.0322581;1pkt 1fpkt"];
1380--4055[label="0.00854701;1pkt 1fpkt"];
1380--4121[label="0.0138889;1pkt 1fpkt"];
1380--4167[label="0.03125;1pkt 1fpkt"];
1380--4238[label="0.00854701;1pkt 1fpkt"];
1380--4245[label="0.0263158;1pkt 1fpkt"];
1380--4305[label="0.00854701;1pkt 1fpkt"];
1380--4320[label="0.00884956;1pkt 1fpkt"];
1380--4385[label="0.00854701;1pkt 1fpkt"];
1380--4411[label="0.00854701;1pkt 1fpkt"];
1380--4496[label="0.00854701;1pkt 1fpkt"];
1380--4514[label="0.00854701;1pkt 1fpkt"];
1380--4537[label="0.025641;1pkt 1fpkt"];
1380--4549[label="0.00854701;1pkt 1fpkt"];
1380--4712[label="0.042735;5pkt 5fpkt"];
1380--4780[label="0.0227273;1pkt 1fpkt"];
1380--4867[label="0.00854701;1pkt 1fpkt"];
1380--4889[label="0.00854701;1pkt 1fpkt"];
1380--4908[label="0.00854701;1pkt 1fpkt"];
1380--4966[label="0.00854701;1pkt 1fpkt"];
1380--5013[label="0.00854701;1pkt 1fpkt"];
1380--5048[label="0.015873;1pkt 1fpkt"];
1380--5070[label="0.0185185;1pkt 1fpkt"];
1380--5084[label="0.0208333;1pkt 1fpkt"];
1380--5108[label="0.00854701;1pkt 1fpkt"];
1380--5159[label="0.00854701;1pkt 1fpkt"];
1380--5173[label="0.00854701;1pkt 1fpkt"];
1380--5266[label="0.0128205;1pkt 1fpkt"];
1380--5328[label="0.0454545;1pkt 1fpkt"];
1380--5342[label="0.00854701;1pkt 1fpkt"];
1380--5392[label="0.0204082;1pkt 1fpkt"];
1380--5461[label="0.0434783;1pkt 1fpkt"];
1380--5552[label="0.00854701;1pkt 1fpkt"];
1380--5598[label="0.00854701;1pkt 1fpkt"];
1380--5746[label="0.0232558;1pkt 1fpkt"];
1380--5794[label="0.00854701;1pkt 1fpkt"];
1380--6025[label="0.0181818;1pkt 1fpkt"];
1380--6072[label="0.00854701;1pkt 1fpkt"];
1380--6176[label="0.00854701;1pkt 1fpkt"];
1380--6180[label="0.00854701;1pkt 1fpkt"];
1380--6224[label="0.00854701;1pkt 1fpkt"];
1380--6271[label="0.00854701;1pkt 1fpkt"];
1380--6278[label="0.00854701;1pkt 1fpkt"];
1380--6284[label="0.0333333;1pkt 1fpkt"];
1380--6338[label="0.0138889;1pkt 1fpkt"];
1380--6364[label="0.0322581;1pkt 1fpkt"];
1380--6401[label="0.00854701;1pkt 1fpkt"];
1380--6440[label="0.00854701;1pkt 1fpkt"];
1380--6449[label="0.00877193;1pkt 1fpkt"];
1380--6501[label="0.00854701;1pkt 1fpkt"];
1380--6549[label="0.00854701;1pkt 1fpkt"];
1380--6558[label="0.00854701;1pkt 1fpkt"];
1380--6578[label="0.00854701;1pkt 1fpkt"];
1380--6712[label="0.0222222;1pkt 1fpkt"];
1380--6819[label="0.00854701;1pkt 1fpkt"];
1380--6885[label="0.0212766;1pkt 1fpkt"];
1380--6989[label="0.0126582;1pkt 1fpkt"];
1380--7025[label="0.047619;1pkt 1fpkt"];
1380--7035[label="0.00854701;1pkt 1fpkt"];
1380--7064[label="0.0204082;1pkt 1fpkt"];
1380--7104[label="0.0454545;1pkt 1fpkt"];
1380--7145[label="0.00854701;1pkt 1fpkt"];
1380--7240[label="0.0232558;1pkt 1fpkt"];
1380--7266[label="0.00854701;1pkt 1fpkt"];
1380--7393[label="0.0178571;1pkt 1fpkt"];
1380--7478[label="0.00854701;1pkt 1fpkt"];
1380--7530[label="0.00854701;1pkt 1fpkt"];
1380--7536[label="0.0322581;1pkt 1fpkt"];
1380--7568[label="0.0138889;1pkt 1fpkt"];
1380--7583[label="0.0322581;1pkt 1fpkt"];
1380--7608[label="0.00854701;1pkt 1fpkt"];
1380--7632[label="0.00854701;1pkt 1fpkt"];
1380--7636[label="0.00884956;1pkt 1fpkt"];
1380--7667[label="0.00854701;1pkt 1fpkt"];
1380--7698[label="0.00854701;1pkt 1fpkt"];
1380--7702[label="0.00854701;1pkt 1fpkt"];
1380--7715[label="0.00854701;1pkt 1fpkt"];
1380--7942[label="0.0128205;1pkt 1fpkt"];
1380--7967[label="0.047619;1pkt 1fpkt"];
1380--7971[label="0.00854701;1pkt 1fpkt"];
1380--7987[label="0.0208333;1pkt 1fpkt"];
1380--8011[label="0.0434783;1pkt 1fpkt"];
1380--8039[label="0.00854701;1pkt 1fpkt"];
1380--8097[label="0.0227273;1pkt 1fpkt"];
3525--6025[label="1;55pkt 55fpkt"];
3525--7393[label="1;56pkt 56fpkt"];
4019--6284[label="1;30pkt 30fpkt"];
4019--7536[label="1;31pkt 31fpkt"];
4121--6338[label="1;72pkt 72fpkt"];
4121--7568[label="1;72pkt 72fpkt"];
5084--6885[label="1;47pkt 47fpkt"];
5461--7104[label="1;22pkt 22fpkt"];
5461--8011[label="1;23pkt 23fpkt"];
6025--7393[label="1;55pkt 55fpkt"];
6284--7536[label="1;30pkt 30fpkt"];
6338--7568[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="222.23.2.234" dst_port="53"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.128.76.226"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1259{
style=filled;
color=gray75;
5759[label="161.107.5.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7248[label="161.107.5.227;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1259[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.5.227:1365, 211.166.144.90:1863}[50%]&lt;BR/&gt;{161.107.5.227:1027, 211.166.144.215:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1365: (25%)&lt;BR/&gt; 1027: (25%)&gt;];
}
5759--7248[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.215" dst_port="1863" src_ip="161.107.5.227" src_port="1027"/>
      <filter dst_ip="211.166.144.90" dst_port="1863" src_ip="161.107.5.227" src_port="1365"/>
    </slice>
    <from sec="1120712628" usec="0"/>
    <to sec="1120712914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688708,2.00947,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
504[label="208.35.68.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
7251[label="208.35.68.227;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.35.68.227:80, 131.186.182.177:15029}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15029: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
504--604[label="1;1pkt 1fpkt"];
504--7251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.177" dst_port="15029" src_ip="208.35.68.227" src_port="80"/>
    </slice>
    <from sec="1120712414" usec="0"/>
    <to sec="1120712492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.80.177.227"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.240.179.227"/>
    </slice>
    <from sec="1120713072" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
2392[label="194.236.14.90;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.236.14.90:5050}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.8571%)&lt;BR/&gt; 3943: (7.14286%)&lt;BR/&gt; 3052: (7.14286%)&lt;BR/&gt; 1293: (7.14286%)&lt;BR/&gt; 1072: (7.14286%)&gt;];
}
2392--2662[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.90" dst_port="5050"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.59.148.230"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606019,1.95322,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1265{
style=filled;
color=gray75;
1521[label="145.223.81.232;s;451pkt 451fpkt", shape=diamond, color=yellow];
5794[label="145.223.81.232;478pkt 478fpkt", shape=pentagon, color=darkviolet];
7266[label="145.223.81.232;478pkt 478fpkt", shape=invtriangle, color=brown];
stat1265[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.81.232:1038, *:53}[58.0376%]&lt;BR/&gt;{145.223.81.232:53, *:*}[37.5783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7512%)&lt;BR/&gt; 1038: (29.2822%)&lt;BR/&gt; 0: (4.26439%)&lt;BR/&gt; 32768: (0.817342%)&lt;BR/&gt; 32782: (0.319829%)&gt;];
}
1521--1834[label="0.00934579;1pkt 1fpkt"];
1521--1880[label="0.00900901;1pkt 1fpkt"];
1521--2126[label="0.00925926;1pkt 1fpkt"];
1521--2176[label="0.0102041;1pkt 1fpkt"];
1521--2415[label="0.00990099;1pkt 1fpkt"];
1521--2425[label="0.00909091;1pkt 1fpkt"];
1521--2435[label="0.00961538;1pkt 1fpkt"];
1521--2598[label="0.0153846;1pkt 1fpkt"];
1521--2600[label="0.00961538;1pkt 1fpkt"];
1521--2627[label="0.02;1pkt 1fpkt"];
1521--3318[label="0.00854701;1pkt 1fpkt"];
1521--3384[label="0.0532151;24pkt 24fpkt"];
1521--3387[label="0.0110865;5pkt 5fpkt"];
1521--5794[label="0.997783;450pkt 450fpkt"];
1521--7266[label="0.997783;450pkt 450fpkt"];
5794--7266[label="1;478pkt 478fpkt"];
</description>
    <slice>
      <filter src_ip="145.223.81.232" src_port="53"/>
      <filter dst_port="53" src_ip="145.223.81.232" src_port="1038"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.535758,1.98534,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1266{
style=filled;
color=gray75;
2247[label="24.88.116.6;d;14pkt 14fpkt", shape=diamond, color=yellow];
4687[label="166.59.192.122;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat1266[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.156.232:25, 24.88.116.6:*}[26.9231%]&lt;BR/&gt;{166.59.192.122:*, *:113}[26.9231%]&lt;BR/&gt;{166.59.192.122:25, *:*}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.9286%)&lt;BR/&gt; 113: (14.2857%)&lt;BR/&gt; 42684: (3.57143%)&lt;BR/&gt; 3163: (3.57143%)&lt;BR/&gt; 0: (3.57143%)&gt;];
}
2247--2471[label="0.0714286;1pkt 1fpkt"];
2247--4687[label="0.142857;2pkt 2fpkt"];
2247--4744[label="0.0714286;1pkt 1fpkt"];
2247--5798[label="0.5;7pkt 7fpkt"];
2247--7269[label="0.5;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="166.59.192.122" src_port="25"/>
      <filter dst_port="113" src_ip="166.59.192.122"/>
      <filter dst_ip="24.88.116.6" src_ip="166.59.156.232" src_port="25"/>
    </slice>
    <from sec="1120712573" usec="0"/>
    <to sec="1120713241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1267{
style=filled;
color=gray75;
5813[label="212.66.37.234;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7277[label="212.66.37.234;16pkt 16fpkt", shape=invtriangle, color=brown];
8116[label="212.66.37.234;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1267[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.66.37.234:*, *:80}[56.25%]&lt;BR/&gt;{212.66.37.234:*, *:1863}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.125%)&lt;BR/&gt; 1863: (15.625%)&lt;BR/&gt; 7001: (3.125%)&lt;BR/&gt; 1115: (3.125%)&lt;BR/&gt; 1111: (3.125%)&gt;];
}
5813--7277[label="1;16pkt 16fpkt"];
5813--8116[label="1;16pkt 16fpkt"];
7277--8116[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="212.66.37.234"/>
      <filter dst_port="1863" src_ip="212.66.37.234"/>
    </slice>
    <from sec="1120713243" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.102.186.234"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.69.1.238"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.151.147.238"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.89.10.239"/>
    </slice>
    <from sec="1120712454" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1272{
style=filled;
color=gray75;
5849[label="198.3.102.239;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7298[label="198.3.102.239;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1272[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.3.102.239:0, 212.66.49.53:0}[20%]&lt;BR/&gt;{198.3.102.239:50518, 212.66.49.53:25}[20%]&lt;BR/&gt;{198.3.102.239:50525, 212.66.49.53:25}[20%]&lt;BR/&gt;{198.3.102.239:113, 212.66.49.53:1544}[20%]&lt;BR/&gt;{198.3.102.239:113, 212.66.49.53:1545}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (22.2222%)&lt;BR/&gt; 0: (22.2222%)&lt;BR/&gt; 25: (16.6667%)&lt;BR/&gt; 50525: (11.1111%)&lt;BR/&gt; 1545: (11.1111%)&gt;];
}
5849--7298[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.66.49.53" dst_port="1545" src_ip="198.3.102.239" src_port="113"/>
      <filter dst_ip="212.66.49.53" dst_port="1544" src_ip="198.3.102.239" src_port="113"/>
      <filter dst_ip="212.66.49.53" dst_port="25" src_ip="198.3.102.239" src_port="50525"/>
      <filter dst_ip="212.66.49.53" dst_port="25" src_ip="198.3.102.239" src_port="50518"/>
      <filter dst_ip="212.66.49.53" src_ip="198.3.102.239"/>
    </slice>
    <from sec="1120713133" usec="0"/>
    <to sec="1120713146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.94.154.240"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1274{
style=filled;
color=gray75;
5867[label="194.173.242.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7310[label="194.173.242.241;1pkt 1fpkt", shape=invtriangle, color=brown];
8131[label="194.173.242.241;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1274[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.242.241:80, 161.99.83.233:1695}[50%]&lt;BR/&gt;{194.173.242.241:80, 161.99.83.233:1696}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1696: (37.5%)&lt;BR/&gt; 1695: (12.5%)&gt;];
}
5867--7310[label="1;1pkt 1fpkt"];
5867--8131[label="1;1pkt 1fpkt"];
7310--8131[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.99.83.233" dst_port="1696" src_ip="194.173.242.241" src_port="80"/>
      <filter dst_ip="161.99.83.233" dst_port="1695" src_ip="194.173.242.241" src_port="80"/>
    </slice>
    <from sec="1120713112" usec="0"/>
    <to sec="1120713123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
1211[label="193.19.36.245;s;349pkt 349fpkt", shape=diamond, color=yellow];
1212[label="145.223.57.107;d;125pkt 125fpkt", shape=diamond, color=yellow];
1378[label="145.223.85.123;d;131pkt 131fpkt", shape=diamond, color=yellow];
3912[label="84.36.21.45;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5271[label="197.148.136.180;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5885[label="193.19.36.245;421pkt 421fpkt", shape=pentagon, color=darkviolet];
6232[label="84.36.21.45;9pkt 9fpkt", shape=invtriangle, color=brown];
6990[label="197.148.136.180;1pkt 1fpkt", shape=invtriangle, color=brown];
7321[label="193.19.36.245;421pkt 421fpkt", shape=invtriangle, color=brown];
7943[label="197.148.136.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.19.36.245:80, *:*}[85.5691%]&lt;BR/&gt;{*:80, 145.223.57.107:*}[24.187%]&lt;BR/&gt;{*:80, 145.223.85.123:*}[22.1545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9101%)&lt;BR/&gt; 25: (0.647139%)&lt;BR/&gt; 85: (0.408719%)&lt;BR/&gt; 49703: (0.13624%)&lt;BR/&gt; 49702: (0.13624%)&gt;];
}
1211--1212[label="0.752;94pkt 94fpkt"];
1211--1378[label="0.70229;92pkt 92fpkt"];
1211--5885[label="1;349pkt 349fpkt"];
1211--7321[label="1;349pkt 349fpkt"];
1212--5885[label="0.752;94pkt 94fpkt"];
1212--7321[label="0.752;94pkt 94fpkt"];
1378--3740[label="0.666667;4pkt 4fpkt"];
1378--3912[label="1;8pkt 8fpkt"];
1378--5271[label="0.5;1pkt 1fpkt"];
1378--5885[label="0.70229;92pkt 92fpkt"];
1378--6232[label="1;9pkt 9fpkt"];
1378--7321[label="0.70229;92pkt 92fpkt"];
3912--6232[label="1;8pkt 8fpkt"];
5271--6990[label="1;1pkt 1fpkt"];
5271--7943[label="1;1pkt 1fpkt"];
5885--7321[label="1;421pkt 421fpkt"];
6990--7943[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="193.19.36.245" src_port="80"/>
      <filter dst_ip="145.223.85.123" src_port="80"/>
      <filter dst_ip="145.223.57.107" src_port="80"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1276{
style=filled;
color=gray75;
5886[label="200.131.87.245;76pkt 76fpkt", shape=pentagon, color=darkviolet];
7322[label="200.131.87.245;77pkt 77fpkt", shape=invtriangle, color=brown];
stat1276[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.131.87.245:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2884: (1.30719%)&lt;BR/&gt; 4775: (0.653595%)&lt;BR/&gt; 4631: (0.653595%)&lt;BR/&gt; 4595: (0.653595%)&gt;];
}
5886--7322[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.131.87.245"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27499,2.10258,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1277{
style=filled;
color=gray75;
44[label="149.177.108.245s;1pkt 1fpkt", shape=rectangle, color=red];
5887[label="149.177.108.245;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7323[label="149.177.108.245;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1277[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.108.245:*, *:1863}[42.8571%]&lt;BR/&gt;{149.177.108.245:*, 26.25.103.107:7001}[28.5714%]&lt;BR/&gt;{149.177.108.245:*, *:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (17.8571%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 7001: (14.2857%)&lt;BR/&gt; 1158: (10.7143%)&lt;BR/&gt; 1177: (7.14286%)&gt;];
}
44--5887[label="1;1pkt 1fpkt"];
44--7323[label="1;1pkt 1fpkt"];
5887--7323[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="149.177.108.245"/>
      <filter dst_port="80" src_ip="149.177.108.245"/>
      <filter dst_ip="26.25.103.107" dst_port="7001" src_ip="149.177.108.245"/>
    </slice>
    <from sec="1120713227" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1278{
style=filled;
color=gray75;
5890[label="166.59.206.245;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7325[label="166.59.206.245;1pkt 1fpkt", shape=invtriangle, color=brown];
8137[label="166.59.206.245;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1278[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.59.206.245:1037, 194.236.14.85:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
5890--7325[label="1;1pkt 1fpkt"];
5890--8137[label="1;1pkt 1fpkt"];
7325--8137[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.236.14.85" dst_port="5050" src_ip="166.59.206.245" src_port="1037"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.68.157.247"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.179.91.248"/>
    </slice>
    <from sec="1120712787" usec="0"/>
    <to sec="1120712806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1281{
style=filled;
color=gray75;
5917[label="210.180.86.249;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7340[label="210.180.86.249;44pkt 44fpkt", shape=invtriangle, color=brown];
8147[label="210.180.86.249;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1281[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.180.86.249:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4640: (1.14504%)&lt;BR/&gt; 4532: (1.14504%)&lt;BR/&gt; 4367: (1.14504%)&lt;BR/&gt; 4254: (1.14504%)&gt;];
}
5917--7340[label="1;44pkt 44fpkt"];
5917--8147[label="1;43pkt 43fpkt"];
7340--8147[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="210.180.86.249"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1282{
style=filled;
color=gray75;
5921[label="193.128.2.250;400pkt 400fpkt", shape=pentagon, color=darkviolet];
7343[label="193.128.2.250;400pkt 400fpkt", shape=invtriangle, color=brown];
8149[label="193.128.2.250;400pkt 400fpkt", shape=invhouse, color=bisque];
stat1282[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.128.2.250:32787, *:1026}[52%]&lt;BR/&gt;{193.128.2.250:32787, *:1027}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32787: (50%)&lt;BR/&gt; 1026: (26%)&lt;BR/&gt; 1027: (24%)&gt;];
}
5921--7343[label="1;400pkt 400fpkt"];
5921--8149[label="1;400pkt 400fpkt"];
7343--8149[label="1;400pkt 400fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="193.128.2.250" src_port="32787"/>
      <filter dst_port="1027" src_ip="193.128.2.250" src_port="32787"/>
    </slice>
    <from sec="1120712450" usec="0"/>
    <to sec="1120713064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1283{
style=filled;
color=gray75;
5926[label="149.177.105.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7346[label="149.177.105.250;1pkt 1fpkt", shape=invtriangle, color=brown];
8151[label="149.177.105.250;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1283[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.105.250:1029, 211.166.150.193:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1029: (50%)&gt;];
}
5926--7346[label="1;1pkt 1fpkt"];
5926--8151[label="1;1pkt 1fpkt"];
7346--8151[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.150.193" dst_port="1863" src_ip="149.177.105.250" src_port="1029"/>
    </slice>
    <from sec="1120712434" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1284{
style=filled;
color=gray75;
5928[label="145.223.241.250;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7347[label="145.223.241.250;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1284[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.241.250:1525, 129.35.83.210:80}[20%]&lt;BR/&gt;{145.223.241.250:1513, 129.35.83.221:80}[20%]&lt;BR/&gt;{145.223.241.250:1523, 129.35.83.221:80}[20%]&lt;BR/&gt;{145.223.241.250:1529, 129.35.83.221:80}[20%]&lt;BR/&gt;{145.223.241.250:1531, 129.35.83.221:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1531: (10%)&lt;BR/&gt; 1529: (10%)&lt;BR/&gt; 1525: (10%)&lt;BR/&gt; 1523: (10%)&gt;];
}
5928--7347[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="129.35.83.221" dst_port="80" src_ip="145.223.241.250" src_port="1531"/>
      <filter dst_ip="129.35.83.221" dst_port="80" src_ip="145.223.241.250" src_port="1529"/>
      <filter dst_ip="129.35.83.221" dst_port="80" src_ip="145.223.241.250" src_port="1523"/>
      <filter dst_ip="129.35.83.221" dst_port="80" src_ip="145.223.241.250" src_port="1513"/>
      <filter dst_ip="129.35.83.210" dst_port="80" src_ip="145.223.241.250" src_port="1525"/>
    </slice>
    <from sec="1120713169" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.50938,1.97579,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1285{
style=filled;
color=gray75;
5929[label="193.128.2.251;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7348[label="193.128.2.251;156pkt 156fpkt", shape=invtriangle, color=brown];
stat1285[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.128.2.251:32791, *:1027}[50.641%]&lt;BR/&gt;{193.128.2.251:32791, *:1026}[49.359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32791: (50%)&lt;BR/&gt; 1027: (25.3205%)&lt;BR/&gt; 1026: (24.6795%)&gt;];
}
5929--7348[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="193.128.2.251" src_port="32791"/>
      <filter dst_port="1026" src_ip="193.128.2.251" src_port="32791"/>
    </slice>
    <from sec="1120712609" usec="0"/>
    <to sec="1120713068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
5935[label="197.102.225.251;201pkt 201fpkt", shape=pentagon, color=darkviolet];
7350[label="197.102.225.251;200pkt 200fpkt", shape=invtriangle, color=brown];
8153[label="197.102.225.251;201pkt 201fpkt", shape=invhouse, color=bisque];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.102.225.251:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5935--7350[label="1;200pkt 200fpkt"];
5935--8153[label="1;201pkt 201fpkt"];
7350--8153[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.102.225.251" src_port="1029"/>
    </slice>
    <from sec="1120712890" usec="0"/>
    <to sec="1120712908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605415,2.03142,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.4.21.254"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1288{
style=filled;
color=gray75;
5953[label="222.193.108.254;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7364[label="222.193.108.254;35pkt 35fpkt", shape=invtriangle, color=brown];
8164[label="222.193.108.254;34pkt 34fpkt", shape=invhouse, color=bisque];
stat1288[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.193.108.254:*, 212.146.41.5:*}[22.8571%]&lt;BR/&gt;{222.193.108.254:*, 212.212.47.65:*}[22.8571%]&lt;BR/&gt;{222.193.108.254:*, 212.6.171.145:*}[22.8571%]&lt;BR/&gt;{222.193.108.254:*, 195.90.165.127:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (7.21154%)&lt;BR/&gt; 8080: (5.76923%)&lt;BR/&gt; 8000: (5.76923%)&lt;BR/&gt; 3128: (5.76923%)&lt;BR/&gt; 1080: (5.76923%)&gt;];
}
5953--7364[label="1;35pkt 35fpkt"];
5953--8164[label="1;34pkt 34fpkt"];
7364--8164[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="212.6.171.145" src_ip="222.193.108.254"/>
      <filter dst_ip="212.212.47.65" src_ip="222.193.108.254"/>
      <filter dst_ip="212.146.41.5" src_ip="222.193.108.254"/>
      <filter dst_ip="195.90.165.127" src_ip="222.193.108.254"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.128.232.0"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.194.149.2"/>
    </slice>
    <from sec="1120712762" usec="0"/>
    <to sec="1120712780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.185.238.7"/>
    </slice>
    <from sec="1120712438" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.210.166.15"/>
    </slice>
    <from sec="1120712431" usec="0"/>
    <to sec="1120713276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.116.215.18"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.214.8.21"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.108.23.21"/>
    </slice>
    <from sec="1120712444" usec="0"/>
    <to sec="1120712901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1296{
style=filled;
color=gray75;
1869[label="166.59.154.36;d;13pkt 13fpkt", shape=diamond, color=yellow];
2283[label="24.88.116.21;s;62pkt 62fpkt", shape=diamond, color=yellow];
stat1296[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.88.116.21:*, *:25}[83.7838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48%)&lt;BR/&gt; 47162: (2%)&lt;BR/&gt; 80: (2%)&lt;BR/&gt; 47457: (1.33333%)&lt;BR/&gt; 47280: (1.33333%)&gt;];
}
1869--2283[label="0.0769231;1pkt 1fpkt"];
1869--2286[label="0.0769231;1pkt 1fpkt"];
1869--2293[label="0.0769231;1pkt 1fpkt"];
1869--2490[label="0.153846;2pkt 2fpkt"];
1869--2581[label="0.0769231;1pkt 1fpkt"];
1869--3446[label="0.0769231;1pkt 1fpkt"];
1869--3534[label="0.0769231;1pkt 1fpkt"];
1869--3597[label="0.0769231;1pkt 1fpkt"];
1869--3659[label="0.0769231;1pkt 1fpkt"];
1869--3750[label="0.153846;2pkt 2fpkt"];
1869--6032[label="0.0769231;1pkt 1fpkt"];
1869--6096[label="0.0769231;1pkt 1fpkt"];
1869--6145[label="0.153846;2pkt 2fpkt"];
1869--7432[label="0.0769231;1pkt 1fpkt"];
1869--7456[label="0.153846;2pkt 2fpkt"];
2283--2502[label="0.1;1pkt 1fpkt"];
2283--3659[label="0.983871;61pkt 61fpkt"];
2283--6096[label="1;62pkt 62fpkt"];
2283--7432[label="0.983871;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="24.88.116.21"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1297{
style=filled;
color=gray75;
1357[label="145.222.80.25;s;81pkt 81fpkt", shape=diamond, color=yellow];
stat1297[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.222.80.25:*, *:80}[40.7407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.3704%)&lt;BR/&gt; 1863: (4.32099%)&lt;BR/&gt; 60556: (3.08642%)&lt;BR/&gt; 23368: (2.46914%)&lt;BR/&gt; 6730: (2.46914%)&gt;];
}
1357--1556[label="0.0617284;5pkt 5fpkt"];
1357--2244[label="0.1;2pkt 2fpkt"];
1357--2729[label="0.0983607;6pkt 6fpkt"];
1357--3700[label="0.987654;80pkt 80fpkt"];
1357--6122[label="0.987654;80pkt 80fpkt"];
1357--7443[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.222.80.25"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.128.98.32"/>
    </slice>
    <from sec="1120712445" usec="0"/>
    <to sec="1120713292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1299{
style=filled;
color=gray75;
2162[label="145.223.131.35;s;72pkt 72fpkt", shape=diamond, color=yellow];
stat1299[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.131.35:*, 209.174.90.246:80}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.0278%)&lt;BR/&gt; 1863: (7.63889%)&lt;BR/&gt; 1216: (7.63889%)&lt;BR/&gt; 53: (7.63889%)&lt;BR/&gt; 1087: (1.38889%)&gt;];
}
2162--2442[label="0.0588235;1pkt 1fpkt"];
2162--2665[label="0.0277778;2pkt 2fpkt"];
2162--2678[label="0.0714286;1pkt 1fpkt"];
2162--2897[label="0.0277778;2pkt 2fpkt"];
2162--3175[label="1;53pkt 53fpkt"];
2162--3206[label="0.0138889;1pkt 1fpkt"];
2162--3384[label="0.0277778;2pkt 2fpkt"];
2162--3809[label="1;72pkt 72fpkt"];
2162--6175[label="1;71pkt 71fpkt"];
2162--7474[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="209.174.90.246" dst_port="80" src_ip="145.223.131.35"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.106.100.37"/>
    </slice>
    <from sec="1120712447" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="223.123.0.38"/>
    </slice>
    <from sec="1120712405" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.153.215.38"/>
    </slice>
    <from sec="1120712860" usec="0"/>
    <to sec="1120712883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.192.111.40"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.106.78.44"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.9.59.47"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.174.31.48"/>
    </slice>
    <from sec="1120712436" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702219,1.96003,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1307{
style=filled;
color=gray75;
3987[label="149.177.104.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6269[label="149.177.104.52;1pkt 1fpkt", shape=invtriangle, color=brown];
7528[label="149.177.104.52;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1307[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.177.104.52:49237, 211.166.150.122:1863}[50%]&lt;BR/&gt;{149.177.104.52:49233, 211.166.144.146:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49233: (37.5%)&lt;BR/&gt; 49237: (12.5%)&gt;];
}
3987--6269[label="1;1pkt 1fpkt"];
3987--7528[label="1;1pkt 1fpkt"];
6269--7528[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.146" dst_port="1863" src_ip="149.177.104.52" src_port="49233"/>
      <filter dst_ip="211.166.150.122" dst_port="1863" src_ip="149.177.104.52" src_port="49237"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.59.162.64"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="149.177.104.77"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.66.34.80"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.57.162.84"/>
    </slice>
    <from sec="1120712406" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.133.143.85"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.59.172.85"/>
    </slice>
    <from sec="1120712469" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.129.193.86"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.151.91.88"/>
    </slice>
    <from sec="1120712407" usec="0"/>
    <to sec="1120713046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.99.118.89"/>
    </slice>
    <from sec="1120712411" usec="0"/>
    <to sec="1120713288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.74.163.91"/>
    </slice>
    <from sec="1120712459" usec="0"/>
    <to sec="1120712492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.114.243.93"/>
    </slice>
    <from sec="1120712426" usec="0"/>
    <to sec="1120713287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="153.144.11.97"/>
    </slice>
    <from sec="1120712630" usec="0"/>
    <to sec="1120712653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.132.73.97"/>
    </slice>
    <from sec="1120712844" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642565,1.99204,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
4462[label="83.2.16.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7687[label="83.2.16.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.2.16.98:1311, 131.186.182.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1311: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4462--7687[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.182.28" dst_port="80" src_ip="83.2.16.98" src_port="1311"/>
    </slice>
    <from sec="1120713242" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.42.61.98"/>
    </slice>
    <from sec="1120712418" usec="0"/>
    <to sec="1120713257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.26.168.100"/>
    </slice>
    <from sec="1120712437" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41205,2.14931,999,1 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1324{
style=filled;
color=gray75;
57[label="149.68.157.180d;2pkt 2fpkt", shape=rectangle, color=red];
717[label="196.87.47.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
7697[label="2.134.157.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1324[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.134.157.101:3708, 149.68.157.180:14828}[50%]&lt;BR/&gt;{196.87.47.134:3753, 213.17.234.101:1755}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14828: (25%)&lt;BR/&gt; 3753: (25%)&lt;BR/&gt; 3708: (25%)&lt;BR/&gt; 1755: (25%)&gt;];
}
57--169[label="0.5;1pkt 1fpkt"];
57--283[label="0.5;1pkt 1fpkt"];
57--717[label="1;1pkt 1fpkt"];
57--846[label="1;1pkt 1fpkt"];
57--2791[label="0.5;1pkt 1fpkt"];
57--7697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.234.101" dst_port="1755" src_ip="196.87.47.134" src_port="3753"/>
      <filter dst_ip="149.68.157.180" dst_port="14828" src_ip="2.134.157.101" src_port="3708"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.59.193.104"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.154.21.111"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="146.231.84.111"/>
    </slice>
    <from sec="1120712403" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.245.40.114"/>
    </slice>
    <from sec="1120712413" usec="0"/>
    <to sec="1120713278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.118.248.115"/>
    </slice>
    <from sec="1120712459" usec="0"/>
    <to sec="1120713266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.194.42.118"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.166.144.118"/>
    </slice>
    <from sec="1120712948" usec="0"/>
    <to sec="1120713246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.33.98.119"/>
    </slice>
    <from sec="1120712435" usec="0"/>
    <to sec="1120712943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.230.54.122"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.33.130.122"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.108.193.128"/>
    </slice>
    <from sec="1120712990" usec="0"/>
    <to sec="1120713295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.42.92.129"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.66.199.130"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1338{
style=filled;
color=gray75;
1194[label="145.223.246.130;s;29pkt 29fpkt", shape=diamond, color=yellow];
1472[label="202.89.57.136;d;104pkt 104fpkt", shape=diamond, color=yellow];
4764[label="145.223.246.130;155pkt 155fpkt", shape=pentagon, color=darkviolet];
6702[label="145.223.246.130;156pkt 156fpkt", shape=invtriangle, color=brown];
7782[label="145.223.246.130;156pkt 156fpkt", shape=invhouse, color=bisque];
stat1338[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.223.246.130:*, 202.89.57.136:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4295: (0.333333%)&lt;BR/&gt; 4293: (0.333333%)&lt;BR/&gt; 4291: (0.333333%)&lt;BR/&gt; 4289: (0.333333%)&gt;];
}
1194--4764[label="1;29pkt 29fpkt"];
1194--6702[label="1;29pkt 29fpkt"];
1194--7782[label="1;29pkt 29fpkt"];
1472--4764[label="0.990385;103pkt 103fpkt"];
1472--6702[label="1;104pkt 104fpkt"];
1472--7782[label="1;104pkt 104fpkt"];
4764--6702[label="1;155pkt 155fpkt"];
4764--7782[label="1;155pkt 155fpkt"];
6702--7782[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="202.89.57.136" dst_port="80" src_ip="145.223.246.130"/>
    </slice>
    <from sec="1120712475" usec="0"/>
    <to sec="1120713285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.61.184.131"/>
    </slice>
    <from sec="1120712431" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.35.8.132"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120712901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01945,1.95898,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1341{
style=filled;
color=gray75;
2208[label="211.166.74.226;d;165pkt 165fpkt", shape=diamond, color=yellow];
3241[label="145.222.232.80;s;191pkt 191fpkt", shape=hexagon, color=black];
4801[label="145.222.9.134;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6724[label="145.222.9.134;18pkt 18fpkt", shape=invtriangle, color=brown];
7798[label="145.222.9.134;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1341[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.166.74.226:80}[45.4545%]&lt;BR/&gt;{145.222.232.80:*, *:80}[45.1791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.599%)&lt;BR/&gt; 443: (3.30073%)&lt;BR/&gt; 1863: (1.10024%)&lt;BR/&gt; 1779: (0.488998%)&lt;BR/&gt; 1776: (0.488998%)&gt;];
}
2208--2805[label="0.0121212;2pkt 2fpkt"];
2208--2932[label="0.00606061;1pkt 1fpkt"];
2208--3031[label="0.0149254;1pkt 1fpkt"];
2208--3109[label="0.0070922;1pkt 1fpkt"];
2208--3117[label="0.00606061;1pkt 1fpkt"];
2208--3241[label="0.0424242;7pkt 7fpkt"];
2208--3378[label="0.0121212;2pkt 2fpkt"];
2208--4199[label="0.0121212;2pkt 2fpkt"];
2208--4294[label="0.0424242;7pkt 7fpkt"];
2208--4464[label="0.00606061;1pkt 1fpkt"];
2208--4476[label="0.0787879;13pkt 13fpkt"];
2208--4500[label="0.0666667;11pkt 11fpkt"];
2208--4514[label="0.00606061;1pkt 1fpkt"];
2208--4761[label="0.7;35pkt 35fpkt"];
2208--4788[label="0.00606061;1pkt 1fpkt"];
2208--4801[label="0.235294;4pkt 4fpkt"];
2208--5071[label="0.00606061;1pkt 1fpkt"];
2208--5319[label="0.00680272;1pkt 1fpkt"];
2208--5411[label="0.0181818;3pkt 3fpkt"];
2208--5482[label="0.12;3pkt 3fpkt"];
2208--5544[label="0.0242424;4pkt 4fpkt"];
2208--5559[label="0.0121212;2pkt 2fpkt"];
2208--5561[label="0.0384615;3pkt 3fpkt"];
2208--6384[label="0.0121212;2pkt 2fpkt"];
2208--6537[label="0.00606061;1pkt 1fpkt"];
2208--6553[label="0.0666667;11pkt 11fpkt"];
2208--6558[label="0.00606061;1pkt 1fpkt"];
2208--6699[label="0.7;35pkt 35fpkt"];
2208--6717[label="0.00606061;1pkt 1fpkt"];
2208--6724[label="0.222222;4pkt 4fpkt"];
2208--7019[label="0.00680272;1pkt 1fpkt"];
2208--7078[label="0.0181818;3pkt 3fpkt"];
2208--7143[label="0.0242424;4pkt 4fpkt"];
2208--7148[label="0.0121212;2pkt 2fpkt"];
2208--7150[label="0.038961;3pkt 3fpkt"];
2208--7595[label="0.0121212;2pkt 2fpkt"];
2208--7700[label="0.0666667;11pkt 11fpkt"];
2208--7702[label="0.00606061;1pkt 1fpkt"];
2208--7792[label="0.00606061;1pkt 1fpkt"];
2208--7798[label="0.222222;4pkt 4fpkt"];
2208--7962[label="0.00680272;1pkt 1fpkt"];
2208--7998[label="0.0181818;3pkt 3fpkt"];
2208--8041[label="0.0384615;3pkt 3fpkt"];
3241--3297[label="0.25;28pkt 28fpkt"];
3241--4294[label="1;190pkt 190fpkt"];
4801--6724[label="1;17pkt 17fpkt"];
4801--7798[label="1;17pkt 17fpkt"];
6724--7798[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.222.232.80"/>
      <filter dst_ip="211.166.74.226" dst_port="80"/>
    </slice>
    <from sec="1120712409" usec="0"/>
    <to sec="1120713290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.223.245.138"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.224.228.143"/>
    </slice>
    <from sec="1120712789" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.173.19.146"/>
    </slice>
    <from sec="1120712417" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.217.177.148"/>
    </slice>
    <from sec="1120712599" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.40.185.148"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.133.224.148"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.59.205.149"/>
    </slice>
    <from sec="1120712412" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.218.146.150"/>
    </slice>
    <from sec="1120713073" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.40.198.151"/>
    </slice>
    <from sec="1120712482" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.74.46.158"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.161.96.164"/>
    </slice>
    <from sec="1120712436" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="149.177.105.165"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627771,2.04071,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
674[label="85.29.139.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.29.139.167:21, 131.186.4.237:1139}[50%]&lt;BR/&gt;{85.29.139.167:1669, 131.186.4.237:1470}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1669: (25%)&lt;BR/&gt; 1470: (25%)&lt;BR/&gt; 1139: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
674--5138[label="0.5;1pkt 1fpkt"];
674--6916[label="0.5;1pkt 1fpkt"];
674--7900[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.186.4.237" dst_port="1470" src_ip="85.29.139.167" src_port="1669"/>
      <filter dst_ip="131.186.4.237" dst_port="1139" src_ip="85.29.139.167" src_port="21"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642565,1.99204,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1355{
style=filled;
color=gray75;
5207[label="161.107.92.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7923[label="161.107.92.173;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1355[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.107.92.173:1031, 211.166.144.221:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1031: (50%)&gt;];
}
5207--6957[label="1;1pkt 1fpkt"];
5207--7923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.166.144.221" dst_port="1863" src_ip="161.107.92.173" src_port="1031"/>
    </slice>
    <from sec="1120712628" usec="0"/>
    <to sec="1120712907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="113.219.128.177"/>
    </slice>
    <from sec="1120712444" usec="0"/>
    <to sec="1120712903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.61.186.182"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.79.70.183"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.10.48.184"/>
    </slice>
    <from sec="1120712422" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.134.159.184"/>
    </slice>
    <from sec="1120712423" usec="0"/>
    <to sec="1120713281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775178,1.93728,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1361{
style=filled;
color=gray75;
2001[label="213.4.107.185;s;19pkt 19fpkt", shape=diamond, color=yellow];
5324[label="213.4.107.185;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7022[label="213.4.107.185;19pkt 19fpkt", shape=invtriangle, color=brown];
7964[label="213.4.107.185;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1361[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.4.107.185:80, 212.79.194.72:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 18873: (2.63158%)&lt;BR/&gt; 18869: (2.63158%)&lt;BR/&gt; 18767: (2.63158%)&lt;BR/&gt; 18517: (2.63158%)&gt;];
}
2001--5324[label="0.947368;18pkt 18fpkt"];
2001--7022[label="0.947368;18pkt 18fpkt"];
2001--7964[label="0.947368;18pkt 18fpkt"];
5324--7022[label="1;19pkt 19fpkt"];
5324--7964[label="1;19pkt 19fpkt"];
7022--7964[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.194.72" src_ip="213.4.107.185" src_port="80"/>
    </slice>
    <from sec="1120712483" usec="0"/>
    <to sec="1120713252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.219.62.191"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.80.139.191"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.21.220.196"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.53.247.205"/>
    </slice>
    <from sec="1120712793" usec="0"/>
    <to sec="1120712882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642565,1.99204,020,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1366{
style=filled;
color=gray75;
5664[label="193.212.176.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8072[label="193.212.176.217;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1366[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.212.176.217:0, 149.7.89.106:0}[50%]&lt;BR/&gt;{193.212.176.217:0, 149.7.16.175:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5664--8072[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.7.16.175" src_ip="193.212.176.217"/>
      <filter dst_ip="149.7.89.106" src_ip="193.212.176.217"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.203.95.219"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.218.145.223"/>
    </slice>
    <from sec="1120712404" usec="0"/>
    <to sec="1120713300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.128.76.226"/>
    </slice>
    <from sec="1120712421" usec="0"/>
    <to sec="1120713298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.101.142.226"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.3.67.233"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120713262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.102.186.234"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.151.147.238"/>
    </slice>
    <from sec="1120712408" usec="0"/>
    <to sec="1120713294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.94.154.240"/>
    </slice>
    <from sec="1120712401" usec="0"/>
    <to sec="1120712440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.128.15.248"/>
    </slice>
    <from sec="1120712416" usec="0"/>
    <to sec="1120713301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="113.12.114.249"/>
    </slice>
    <from sec="1120712402" usec="0"/>
    <to sec="1120713284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.133.146.252"/>
    </slice>
    <from sec="1120712424" usec="0"/>
    <to sec="1120713299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721075,2.04723,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.129.175.254"/>
    </slice>
    <from sec="1120712410" usec="0"/>
    <to sec="1120713061" usec="0"/>
  </anomaly>

</admd:annotation>
