<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.970711,1.95274,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.107.22.173" dst_port="3306" proto="tcp" src_ip="219.3.226.139" src_port="80"/>
      <filter dst_ip="207.107.22.173" dst_port="3306" proto="tcp" src_ip="219.3.226.139" src_port="80"/>
      <filter dst_ip="207.107.22.173" dst_port="3306" proto="tcp" src_ip="219.3.226.139" src_port="80"/>
      <filter dst_ip="207.107.22.173" dst_port="3306" proto="tcp" src_ip="219.3.226.139" src_port="80"/>
      <from sec="1128920468" usec="0"/>
      <to sec="1128920474" usec="0"/>
    </slice>
    <from sec="1128920468" usec="0"/>
    <to sec="1128920475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="204.189.137.24" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="204.189.137.24" src_port="1028"/>
      <filter dst_port="3127" proto="tcp" src_ip="204.189.137.24" src_port="1028"/>
      <filter dst_port="3127" proto="udp" src_ip="204.189.137.24" src_port="1028"/>
      <from sec="1128920596" usec="0"/>
      <to sec="1128920601" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="218.56.217.24" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="218.56.217.24" src_port="1028"/>
      <filter dst_port="3127" proto="tcp" src_ip="218.56.217.24" src_port="1028"/>
      <filter dst_port="3127" proto="udp" src_ip="218.56.217.24" src_port="1028"/>
      <from sec="1128920597" usec="0"/>
      <to sec="1128920601" usec="0"/>
    </slice>
    <from sec="1128920596" usec="0"/>
    <to sec="1128920601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="221.230.213.76" src_port="1036"/>
      <filter dst_port="137" proto="udp" src_ip="221.230.213.76" src_port="1036"/>
      <filter dst_port="1434" proto="tcp" src_ip="221.230.213.76" src_port="1036"/>
      <filter dst_port="1434" proto="udp" src_ip="221.230.213.76" src_port="1036"/>
      <from sec="1128920747" usec="0"/>
      <to sec="1128920791" usec="0"/>
    </slice>
    <from sec="1128920747" usec="0"/>
    <to sec="1128920794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="81.185.234.157" src_port="61183"/>
      <from sec="1128920788" usec="0"/>
      <to sec="1128920802" usec="0"/>
    </slice>
    <from sec="1128920788" usec="0"/>
    <to sec="1128920802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="205.101.68.213" src_port="1150"/>
      <from sec="1128921295" usec="0"/>
      <to sec="1128921300" usec="0"/>
    </slice>
    <from sec="1128921295" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="221.227.149.240" src_port="7000"/>
      <filter dst_port="139" proto="tcp" src_ip="221.227.149.240" src_port="7000"/>
      <from sec="1128921032" usec="0"/>
      <to sec="1128921094" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="40.112.129.240" src_port="7000"/>
      <filter dst_port="139" proto="tcp" src_ip="40.112.129.240" src_port="7000"/>
      <from sec="1128921032" usec="0"/>
      <to sec="1128921095" usec="0"/>
    </slice>
    <from sec="1128921032" usec="0"/>
    <to sec="1128921099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.99.12.115" dst_port="139" proto="tcp" src_ip="41.214.70.24"/>
      <from sec="1128921291" usec="0"/>
      <to sec="1128921299" usec="0"/>
    </slice>
    <from sec="1128921291" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="146.250.12.150" dst_port="445" proto="tcp" src_ip="66.46.172.55"/>
      <filter dst_ip="146.250.12.150" dst_port="139" proto="tcp" src_ip="66.46.172.55"/>
      <filter dst_ip="146.250.12.150" dst_port="80" proto="tcp" src_ip="66.46.172.55"/>
      <from sec="1128920629" usec="0"/>
      <to sec="1128920839" usec="0"/>
    </slice>
    <from sec="1128920629" usec="0"/>
    <to sec="1128920839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.135.197.252" dst_port="443" proto="tcp" src_ip="166.18.141.80" src_port="1066"/>
      <filter dst_ip="201.135.197.252" dst_port="445" proto="tcp" src_ip="166.18.141.80" src_port="1066"/>
      <from sec="1128920993" usec="0"/>
      <to sec="1128921219" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.135.197.252" dst_port="443" proto="tcp" src_ip="132.176.226.129" src_port="1066"/>
      <filter dst_ip="201.135.197.252" dst_port="445" proto="tcp" src_ip="132.176.226.129" src_port="1066"/>
      <from sec="1128920991" usec="0"/>
      <to sec="1128920999" usec="0"/>
    </slice>
    <from sec="1128920991" usec="0"/>
    <to sec="1128921219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="218.34.72.128" src_port="32778"/>
      <filter dst_port="139" proto="udp" src_ip="218.34.72.128" src_port="32778"/>
      <filter dst_port="53" proto="tcp" src_ip="218.34.72.128" src_port="32778"/>
      <filter dst_port="53" proto="udp" src_ip="218.34.72.128" src_port="32778"/>
      <from sec="1128920543" usec="0"/>
      <to sec="1128920547" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="132.176.184.128" src_port="32778"/>
      <filter dst_port="139" proto="udp" src_ip="132.176.184.128" src_port="32778"/>
      <filter dst_port="53" proto="tcp" src_ip="132.176.184.128" src_port="32778"/>
      <filter dst_port="53" proto="udp" src_ip="132.176.184.128" src_port="32778"/>
      <from sec="1128920544" usec="0"/>
      <to sec="1128920548" usec="0"/>
    </slice>
    <from sec="1128920543" usec="0"/>
    <to sec="1128920548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="206.100.167.128"/>
      <from sec="1128920460" usec="0"/>
      <to sec="1128920485" usec="0"/>
    </slice>
    <from sec="1128920460" usec="0"/>
    <to sec="1128920485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="218.47.36.251"/>
      <from sec="1128920853" usec="0"/>
      <to sec="1128920858" usec="0"/>
    </slice>
    <from sec="1128920853" usec="0"/>
    <to sec="1128920858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="tcp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="icmp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="tcp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="icmp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="tcp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="icmp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="tcp"/>
      <filter dst_ip="216.210.146.229" dst_port="80" proto="icmp"/>
      <from sec="1128920669" usec="0"/>
      <to sec="1128920674" usec="0"/>
    </slice>
    <from sec="1128920669" usec="0"/>
    <to sec="1128920674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970711,1.95274,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.14.247.185" proto="icmp"/>
      <filter dst_ip="194.14.247.185" proto="icmp"/>
      <filter dst_ip="194.14.247.185" proto="icmp"/>
      <filter dst_ip="194.14.247.185" proto="icmp"/>
      <from sec="1128921156" usec="0"/>
      <to sec="1128921160" usec="0"/>
    </slice>
    <from sec="1128921155" usec="0"/>
    <to sec="1128921160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34081,2.04491,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="221.227.149.240" src_port="7000"/>
      <filter dst_port="139" proto="tcp" src_ip="221.227.149.240" src_port="7000"/>
      <from sec="1128921040" usec="0"/>
      <to sec="1128921094" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="40.112.129.240" src_port="7000"/>
      <filter dst_port="139" proto="tcp" src_ip="40.112.129.240" src_port="7000"/>
      <from sec="1128921040" usec="0"/>
      <to sec="1128921095" usec="0"/>
    </slice>
    <from sec="1128921040" usec="0"/>
    <to sec="1128921095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34081,2.04491,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="146.250.12.150" dst_port="445" proto="tcp" src_ip="66.46.172.55"/>
      <filter dst_ip="146.250.12.150" dst_port="139" proto="tcp" src_ip="66.46.172.55"/>
      <filter dst_ip="146.250.12.150" dst_port="80" proto="tcp" src_ip="66.46.172.55"/>
      <from sec="1128920629" usec="0"/>
      <to sec="1128920810" usec="0"/>
    </slice>
    <from sec="1128920629" usec="0"/>
    <to sec="1128920810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
204[label="194.40.181.103;d;7pkt 7fpkt", shape=diamond, color=yellow];
205[label="132.176.186.227;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.186.227:*, 194.40.181.103:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 1613: (6.25%)&lt;BR/&gt; 1611: (6.25%)&lt;BR/&gt; 1609: (6.25%)&lt;BR/&gt; 1607: (6.25%)&gt;];
}
204--205[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="194.40.181.103" dst_port="80" src_ip="132.176.186.227"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128920547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
266[label="207.99.18.221;s;54pkt 54fpkt", shape=diamond, color=yellow];
267[label="54.5.135.212;d;19pkt 19fpkt", shape=diamond, color=yellow];
3961[label="207.99.18.221;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4841[label="207.99.18.221;54pkt 54fpkt", shape=invtriangle, color=brown];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.18.221:*, 201.39.105.183:80}[40.7407%]&lt;BR/&gt;{207.99.18.221:*, 54.5.135.212:80}[35.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2595: (1.10497%)&lt;BR/&gt; 2593: (1.10497%)&lt;BR/&gt; 2591: (1.10497%)&lt;BR/&gt; 2589: (1.10497%)&gt;];
}
266--267[label="1;19pkt 19fpkt"];
266--2625[label="0.222222;12pkt 12fpkt"];
266--3961[label="1;54pkt 54fpkt"];
266--4841[label="1;54pkt 54fpkt"];
267--3961[label="1;19pkt 19fpkt"];
267--4841[label="1;19pkt 19fpkt"];
3961--4841[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="201.39.105.183" dst_port="80" src_ip="207.99.18.221"/>
      <filter dst_ip="54.5.135.212" dst_port="80" src_ip="207.99.18.221"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01558,1.84845,010,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
92[label="219.3.226.139s;1735pkt 1735fpkt", shape=rectangle, color=red];
312[label="219.3.226.139;s;2104pkt 2104fpkt", shape=diamond, color=yellow];
3557[label="219.3.226.139;2104pkt 2104fpkt", shape=pentagon, color=darkviolet];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.3.226.139:*, *:3306}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3306: (50%)&lt;BR/&gt; 3643: (0.0504796%)&lt;BR/&gt; 3642: (0.0504796%)&lt;BR/&gt; 3641: (0.0504796%)&lt;BR/&gt; 3640: (0.0504796%)&gt;];
}
92--312[label="1;1735pkt 1735fpkt"];
92--3557[label="1;1735pkt 1735fpkt"];
312--3557[label="1;2104pkt 2104fpkt"];
</description>
    <slice>
      <filter dst_port="3306" src_ip="219.3.226.139"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128920671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
327[label="80.173.240.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
328[label="161.253.34.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
2208[label="80.173.240.78;d;1pkt 1fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.34.204:1055, 80.173.240.78:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1055: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
327--328[label="1;1pkt 1fpkt"];
327--2208[label="1;1pkt 1fpkt"];
328--2208[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.173.240.78" dst_port="554" src_ip="161.253.34.204" src_port="1055"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128920700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="219.93.41.172"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921138" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
453[label="146.250.167.177;d;11pkt 11fpkt", shape=diamond, color=yellow];
454[label="218.52.43.206;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.52.43.206:27, 146.250.167.177:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27: (35%)&lt;BR/&gt; 9027: (5%)&lt;BR/&gt; 9008: (5%)&lt;BR/&gt; 8000: (5%)&lt;BR/&gt; 4000: (5%)&gt;];
}
453--454[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.167.177" src_ip="218.52.43.206" src_port="27"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06022,1.91028,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
99[label="69.10.79.240s;255pkt 255fpkt", shape=rectangle, color=red];
458[label="69.10.79.240;s;6330pkt 6330fpkt", shape=diamond, color=yellow];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.10.79.240:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 63441: (0.0303721%)&lt;BR/&gt; 63438: (0.0303721%)&lt;BR/&gt; 63435: (0.0303721%)&lt;BR/&gt; 63432: (0.0303721%)&gt;];
}
99--458[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="69.10.79.240"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.176.0.17"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921138" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
479[label="86.211.47.144;d;7pkt 7fpkt", shape=diamond, color=yellow];
480[label="128.165.227.70;s;5pkt 5fpkt", shape=diamond, color=yellow];
2994[label="128.165.209.51;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.209.51:47204, *:53}[56.25%]&lt;BR/&gt;{128.165.209.51:53, *:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.6863%)&lt;BR/&gt; 47204: (26.4706%)&lt;BR/&gt; 110: (2.94118%)&lt;BR/&gt; 25: (1.96078%)&lt;BR/&gt; 57889: (0.980392%)&gt;];
}
479--480[label="0.6;3pkt 3fpkt"];
479--2994[label="0.428571;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.209.51" src_port="53"/>
      <filter dst_port="53" src_ip="128.165.209.51" src_port="47204"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.73.245.30"/>
      <from sec="1128920856" usec="0"/>
      <to sec="1128921138" usec="0"/>
    </slice>
    <from sec="1128920856" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
305[label="132.176.91.152;s;1421pkt 1421fpkt", shape=diamond, color=yellow];
525[label="201.161.157.47;d;1423pkt 1423fpkt", shape=diamond, color=yellow];
2160[label="201.161.157.47;d;330pkt 330fpkt", shape=hexagon, color=black];
3620[label="132.176.91.152;1551pkt 1551fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.91.152:*, 201.161.157.47:443}[99.8712%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4574: (0.042328%)&lt;BR/&gt; 4573: (0.042328%)&lt;BR/&gt; 4572: (0.042328%)&lt;BR/&gt; 4571: (0.042328%)&gt;];
}
305--525[label="1;1421pkt 1421fpkt"];
305--2160[label="1;330pkt 330fpkt"];
305--3620[label="1;1421pkt 1421fpkt"];
525--2160[label="1;330pkt 330fpkt"];
525--3620[label="0.998595;1421pkt 1421fpkt"];
2160--3620[label="1;330pkt 330fpkt"];
</description>
    <slice>
      <filter dst_ip="201.161.157.47" dst_port="443" src_ip="132.176.91.152"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13396,1.85104,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
557[label="146.250.45.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
558[label="80.239.156.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
2166[label="80.239.156.74;s;1pkt 1fpkt", shape=hexagon, color=black];
2206[label="146.250.45.83;d;1pkt 1fpkt", shape=hexagon, color=black];
4384[label="80.239.156.74;1pkt 1fpkt", shape=invtriangle, color=brown];
5088[label="80.239.156.74;1pkt 1fpkt", shape=invhouse, color=bisque];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.239.156.74:554, 146.250.45.83:2112}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2112: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
557--558[label="1;1pkt 1fpkt"];
557--2166[label="1;1pkt 1fpkt"];
557--2206[label="1;1pkt 1fpkt"];
557--4384[label="1;1pkt 1fpkt"];
557--5088[label="1;1pkt 1fpkt"];
558--2166[label="1;1pkt 1fpkt"];
558--2206[label="1;1pkt 1fpkt"];
558--4384[label="1;1pkt 1fpkt"];
558--5088[label="1;1pkt 1fpkt"];
2166--2206[label="1;1pkt 1fpkt"];
2166--4384[label="1;1pkt 1fpkt"];
2166--5088[label="1;1pkt 1fpkt"];
2206--4384[label="1;1pkt 1fpkt"];
2206--5088[label="1;1pkt 1fpkt"];
4384--5088[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.45.83" dst_port="2112" src_ip="80.239.156.74" src_port="554"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
400[label="221.37.8.81;s;3pkt 3fpkt", shape=diamond, color=yellow];
564[label="132.176.189.165;d;3pkt 3fpkt", shape=diamond, color=yellow];
3201[label="221.37.8.81;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.37.8.81:80, 132.176.189.165:1784}[33.3333%]&lt;BR/&gt;{221.37.8.81:3778, 132.176.189.165:1782}[33.3333%]&lt;BR/&gt;{221.37.8.81:15367, 132.176.189.165:37211}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37211: (16.6667%)&lt;BR/&gt; 15367: (16.6667%)&lt;BR/&gt; 3778: (16.6667%)&lt;BR/&gt; 1784: (16.6667%)&lt;BR/&gt; 1782: (16.6667%)&gt;];
}
400--564[label="1;3pkt 3fpkt"];
400--3201[label="1;3pkt 3fpkt"];
564--3201[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.189.165" dst_port="37211" src_ip="221.37.8.81" src_port="15367"/>
      <filter dst_ip="132.176.189.165" dst_port="1782" src_ip="221.37.8.81" src_port="3778"/>
      <filter dst_ip="132.176.189.165" dst_port="1784" src_ip="221.37.8.81" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.177.96.149"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.62.92.241"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
594[label="146.250.167.184;d;4pkt 4fpkt", shape=diamond, color=yellow];
595[label="219.28.99.158;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.248.107.28:58120, 146.250.167.184:1161}[25%]&lt;BR/&gt;{81.187.201.134:2575, 146.250.167.184:1161}[25%]&lt;BR/&gt;{219.28.99.158:82, 146.250.167.184:1080}[25%]&lt;BR/&gt;{219.28.99.158:8965, 146.250.167.184:1081}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8965: (16.6667%)&lt;BR/&gt; 1161: (16.6667%)&lt;BR/&gt; 1081: (16.6667%)&lt;BR/&gt; 1080: (16.6667%)&lt;BR/&gt; 82: (16.6667%)&gt;];
}
594--595[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.167.184" dst_port="1081" src_ip="219.28.99.158" src_port="8965"/>
      <filter dst_ip="146.250.167.184" dst_port="1080" src_ip="219.28.99.158" src_port="82"/>
      <filter dst_ip="146.250.167.184" dst_port="1161" src_ip="81.187.201.134" src_port="2575"/>
      <filter dst_ip="146.250.167.184" dst_port="1161" src_ip="80.248.107.28" src_port="58120"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128920906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
352[label="128.34.148.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
617[label="210.175.191.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
2129[label="128.34.148.78;s;1pkt 1fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.34.148.78:2344, 210.175.191.239:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2344: (50%)&gt;];
}
352--617[label="1;1pkt 1fpkt"];
352--2129[label="1;1pkt 1fpkt"];
617--2129[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.175.191.239" dst_port="8080" src_ip="128.34.148.78" src_port="2344"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
635[label="146.250.184.56;d;9pkt 9fpkt", shape=diamond, color=yellow];
636[label="44.37.38.72;s;8pkt 8fpkt", shape=diamond, color=yellow];
745[label="45.69.208.226;s;448pkt 448fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.69.208.226:*, *:139}[53.5088%]&lt;BR/&gt;{45.69.208.226:*, *:445}[44.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (26.3441%)&lt;BR/&gt; 445: (21.9355%)&lt;BR/&gt; 8888: (1.72043%)&lt;BR/&gt; 37285: (0.215054%)&lt;BR/&gt; 37029: (0.215054%)&gt;];
}
635--636[label="1;8pkt 8fpkt"];
635--745[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="45.69.208.226"/>
      <filter dst_port="445" src_ip="45.69.208.226"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
302[label="222.230.99.160;s;1186pkt 1186fpkt", shape=diamond, color=yellow];
517[label="128.3.181.37;d;1642pkt 1642fpkt", shape=diamond, color=yellow];
607[label="128.67.66.45;d;1660pkt 1660fpkt", shape=diamond, color=yellow];
632[label="161.132.41.3;d;1708pkt 1708fpkt", shape=diamond, color=yellow];
640[label="128.67.53.124;d;1456pkt 1456fpkt", shape=diamond, color=yellow];
642[label="40.112.129.240;s;4706pkt 4706fpkt", shape=diamond, color=yellow];
4049[label="40.112.129.240;5100pkt 5100fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.112.129.240:7000, *:*}[73.0654%]&lt;BR/&gt;{*:*, 161.132.41.3:*}[25.8904%]&lt;BR/&gt;{*:*, 128.67.66.45:*}[25.2324%]&lt;BR/&gt;{*:*, 128.3.181.37:*}[24.8462%]&lt;BR/&gt;{*:*, 128.67.53.124:*}[24.0309%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (41.2991%)&lt;BR/&gt; 80: (7.35766%)&lt;BR/&gt; 8200: (1.19429%)&lt;BR/&gt; 7200: (0.0859205%)&lt;BR/&gt; 7100: (0.0572803%)&gt;];
}
302--517[label="0.266442;316pkt 316fpkt"];
302--607[label="0.24199;287pkt 287fpkt"];
302--632[label="0.267285;317pkt 317fpkt"];
302--640[label="0.224283;266pkt 266fpkt"];
517--642[label="0.699147;1148pkt 1148fpkt"];
517--4049[label="0.697929;1146pkt 1146fpkt"];
607--642[label="0.718072;1192pkt 1192fpkt"];
607--4049[label="0.71747;1191pkt 1191fpkt"];
632--642[label="0.703162;1201pkt 1201fpkt"];
632--4049[label="0.701991;1199pkt 1199fpkt"];
640--642[label="0.715659;1042pkt 1042fpkt"];
640--4049[label="0.713599;1039pkt 1039fpkt"];
642--4049[label="0.9983;4698pkt 4698fpkt"];
</description>
    <slice>
      <filter dst_ip="161.132.41.3"/>
      <filter dst_ip="128.67.66.45"/>
      <filter dst_ip="128.3.181.37"/>
      <filter dst_ip="128.67.53.124"/>
      <filter src_ip="40.112.129.240" src_port="7000"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
688[label="212.73.124.36;d;2pkt 2fpkt", shape=diamond, color=yellow];
689[label="207.107.9.238;s;2pkt 2fpkt", shape=diamond, color=yellow];
4037[label="207.107.9.238;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4890[label="207.107.9.238;2pkt 2fpkt", shape=invtriangle, color=brown];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.9.238:3319, 212.73.124.36:443}[50%]&lt;BR/&gt;{207.107.9.238:4183, 212.73.124.36:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4183: (25%)&lt;BR/&gt; 3319: (25%)&gt;];
}
688--689[label="1;2pkt 2fpkt"];
688--4037[label="1;2pkt 2fpkt"];
688--4890[label="1;2pkt 2fpkt"];
689--4037[label="1;2pkt 2fpkt"];
689--4890[label="1;2pkt 2fpkt"];
4037--4890[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.73.124.36" dst_port="443" src_ip="207.107.9.238" src_port="4183"/>
      <filter dst_ip="212.73.124.36" dst_port="443" src_ip="207.107.9.238" src_port="3319"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128920481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
468[label="128.165.174.105;d;182pkt 182fpkt", shape=diamond, color=yellow];
700[label="206.57.26.160;s;181pkt 181fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.57.26.160:*, 128.165.174.105:80}[99.4505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60997: (0.275482%)&lt;BR/&gt; 60989: (0.275482%)&lt;BR/&gt; 60968: (0.275482%)&lt;BR/&gt; 60967: (0.275482%)&gt;];
}
468--700[label="1;181pkt 181fpkt"];
468--2625[label="0.0934066;17pkt 17fpkt"];
700--2625[label="0.0939227;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.174.105" dst_port="80" src_ip="206.57.26.160"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.213.36.68"/>
      <from sec="1128921195" usec="0"/>
      <to sec="1128921227" usec="0"/>
    </slice>
    <from sec="1128921195" usec="0"/>
    <to sec="1128921227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01558,1.84845,010,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
77[label="221.230.236.54s;508pkt 508fpkt", shape=rectangle, color=red];
736[label="221.230.236.54;s;508pkt 508fpkt", shape=diamond, color=yellow];
3020[label="221.230.236.54;508pkt 508fpkt", shape=pentagon, color=darkviolet];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.230.236.54:*, *:139}[50%]&lt;BR/&gt;{221.230.236.54:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 4967: (0.0984252%)&lt;BR/&gt; 4961: (0.0984252%)&lt;BR/&gt; 4943: (0.0984252%)&gt;];
}
77--736[label="1;508pkt 508fpkt"];
77--3020[label="1;508pkt 508fpkt"];
736--3020[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="221.230.236.54"/>
      <filter dst_port="139" src_ip="221.230.236.54"/>
    </slice>
    <from sec="1128920483" usec="0"/>
    <to sec="1128920525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="219.37.168.248"/>
      <from sec="1128920537" usec="0"/>
      <to sec="1128920590" usec="0"/>
    </slice>
    <from sec="1128920537" usec="0"/>
    <to sec="1128920590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
744[label="161.253.34.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
746[label="144.67.65.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
3603[label="161.253.34.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.34.148:52409, 216.67.112.129:80}[50%]&lt;BR/&gt;{161.253.34.148:52418, 144.67.65.181:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52418: (30%)&lt;BR/&gt; 52409: (20%)&gt;];
}
744--746[label="1;1pkt 1fpkt"];
744--3603[label="1;2pkt 2fpkt"];
746--3603[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.67.65.181" dst_port="80" src_ip="161.253.34.148" src_port="52418"/>
      <filter dst_ip="216.67.112.129" dst_port="80" src_ip="161.253.34.148" src_port="52409"/>
    </slice>
    <from sec="1128920544" usec="0"/>
    <to sec="1128920619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.72.53.44"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
561[label="207.99.19.29;d;16pkt 16fpkt", shape=diamond, color=yellow];
818[label="3.66.34.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
2207[label="207.99.19.29;d;1pkt 1fpkt", shape=hexagon, color=black];
3260[label="3.66.34.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 207.99.19.29:6349}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (23.6842%)&lt;BR/&gt; 6349: (21.0526%)&lt;BR/&gt; 1247: (10.5263%)&lt;BR/&gt; 6348: (7.89474%)&lt;BR/&gt; 1337: (7.89474%)&gt;];
}
561--818[label="1;1pkt 1fpkt"];
561--2207[label="1;1pkt 1fpkt"];
561--3260[label="1;1pkt 1fpkt"];
818--2207[label="1;1pkt 1fpkt"];
818--3260[label="1;1pkt 1fpkt"];
2207--3260[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.99.19.29" dst_port="6349" src_port="6346"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
829[label="128.210.10.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
830[label="132.177.216.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.216.84:514, 128.210.10.241:514}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 514: (100%)&gt;];
}
829--830[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.210.10.241" dst_port="514" src_ip="132.177.216.84" src_port="514"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
257[label="128.165.174.105;s;365pkt 365fpkt", shape=diamond, color=yellow];
843[label="217.186.206.162;d;35pkt 35fpkt", shape=diamond, color=yellow];
947[label="206.57.26.160;d;181pkt 181fpkt", shape=diamond, color=yellow];
1370[label="64.78.124.195;d;55pkt 55fpkt", shape=diamond, color=yellow];
3361[label="128.165.174.105;383pkt 383fpkt", shape=pentagon, color=darkviolet];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.174.105:80, 206.57.26.160:*}[50.9138%]&lt;BR/&gt;{128.165.174.105:80, 64.78.124.195:*}[22.4543%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1168%)&lt;BR/&gt; 0: (1.76644%)&lt;BR/&gt; 34998: (0.245339%)&lt;BR/&gt; 65535: (0.147203%)&lt;BR/&gt; 65534: (0.147203%)&gt;];
}
257--843[label="1;35pkt 35fpkt"];
257--947[label="1;181pkt 181fpkt"];
257--1370[label="1;55pkt 55fpkt"];
257--3361[label="1;365pkt 365fpkt"];
843--3361[label="1;35pkt 35fpkt"];
947--3361[label="1;181pkt 181fpkt"];
1370--3361[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="206.57.26.160" src_ip="128.165.174.105" src_port="80"/>
      <filter dst_ip="64.78.124.195" src_ip="128.165.174.105" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
893[label="222.228.51.103;s;1529pkt 1529fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.228.51.103:7200, *:*}[99.9346%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7200: (50%)&lt;BR/&gt; 57886: (0.0654022%)&lt;BR/&gt; 55826: (0.0654022%)&lt;BR/&gt; 50792: (0.0654022%)&lt;BR/&gt; 50041: (0.0654022%)&gt;];
}
</description>
    <slice>
      <filter src_ip="222.228.51.103" src_port="7200"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
943[label="206.29.247.22;d;383pkt 383fpkt", shape=diamond, color=yellow];
944[label="206.125.217.23;s;386pkt 386fpkt", shape=diamond, color=yellow];
2841[label="206.125.217.23;417pkt 417fpkt", shape=pentagon, color=darkviolet];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.217.23:1433, 206.29.247.22:*}[99.2823%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.7892%)&lt;BR/&gt; 135: (0.210793%)&lt;BR/&gt; 4992: (0.126476%)&lt;BR/&gt; 4975: (0.126476%)&lt;BR/&gt; 4971: (0.126476%)&gt;];
}
943--944[label="1;383pkt 383fpkt"];
943--2841[label="1;383pkt 383fpkt"];
944--1768[label="0.00259067;1pkt 1fpkt"];
944--1966[label="0.00259067;1pkt 1fpkt"];
944--2577[label="0.00259067;1pkt 1fpkt"];
944--2628[label="0.00259067;1pkt 1fpkt"];
944--2644[label="0.00259067;1pkt 1fpkt"];
944--2659[label="0.00259067;1pkt 1fpkt"];
944--2841[label="0.997409;385pkt 385fpkt"];
</description>
    <slice>
      <filter dst_ip="206.29.247.22" src_ip="206.125.217.23" src_port="1433"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06483,1.81449,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
41[label="69.10.79.240d;1pkt 1fpkt", shape=rectangle, color=red];
956[label="128.34.148.136;s;93pkt 93fpkt", shape=diamond, color=yellow];
992[label="21.197.236.67;d;49pkt 49fpkt", shape=diamond, color=yellow];
3534[label="128.34.148.136;93pkt 93fpkt", shape=pentagon, color=darkviolet];
4606[label="128.34.148.136;90pkt 90fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.34.148.136:*, 21.197.236.67:80}[52.6882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1417: (0.766871%)&lt;BR/&gt; 1623: (0.613497%)&lt;BR/&gt; 1622: (0.613497%)&lt;BR/&gt; 1621: (0.613497%)&gt;];
}
41--956[label="1;1pkt 1fpkt"];
41--992[label="1;1pkt 1fpkt"];
41--3534[label="1;1pkt 1fpkt"];
41--4606[label="1;1pkt 1fpkt"];
956--992[label="1;49pkt 49fpkt"];
956--1335[label="0.182796;17pkt 17fpkt"];
956--3534[label="1;93pkt 93fpkt"];
956--4606[label="1;90pkt 90fpkt"];
992--3534[label="1;49pkt 49fpkt"];
992--4606[label="1;49pkt 49fpkt"];
3534--4606[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="21.197.236.67" dst_port="80" src_ip="128.34.148.136"/>
    </slice>
    <from sec="1128920413" usec="0"/>
    <to sec="1128921085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06483,1.81449,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
96[label="221.230.2.170s;238pkt 238fpkt", shape=rectangle, color=red];
1007[label="221.230.2.170;s;316pkt 316fpkt", shape=diamond, color=yellow];
3714[label="221.230.2.170;316pkt 316fpkt", shape=pentagon, color=darkviolet];
4706[label="221.230.2.170;316pkt 316fpkt", shape=invtriangle, color=brown];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.230.2.170:*, *:139}[54.1139%]&lt;BR/&gt;{221.230.2.170:*, *:445}[45.8861%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.5481%)&lt;BR/&gt; 445: (24.4519%)&lt;BR/&gt; 4995: (0.168634%)&lt;BR/&gt; 4994: (0.168634%)&lt;BR/&gt; 4993: (0.168634%)&gt;];
}
96--1007[label="1;238pkt 238fpkt"];
96--3714[label="1;238pkt 238fpkt"];
96--4706[label="1;238pkt 238fpkt"];
1007--3714[label="1;316pkt 316fpkt"];
1007--4706[label="1;316pkt 316fpkt"];
3714--4706[label="1;316pkt 316fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="221.230.2.170"/>
      <filter dst_port="445" src_ip="221.230.2.170"/>
    </slice>
    <from sec="1128920633" usec="0"/>
    <to sec="1128920682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
306[label="128.3.30.30;s;670pkt 670fpkt", shape=diamond, color=yellow];
1041[label="222.230.99.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
2341[label="128.3.30.30;s;629pkt 629fpkt", shape=hexagon, color=black];
2866[label="128.3.30.30;718pkt 718fpkt", shape=pentagon, color=darkviolet];
4227[label="128.3.30.30;717pkt 717fpkt", shape=invtriangle, color=brown];
4989[label="128.3.30.30;717pkt 717fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.3.30.30:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
306--1041[label="1;1pkt 1fpkt"];
306--1260[label="0.00324675;1pkt 1fpkt"];
306--1265[label="0.00310559;1pkt 1fpkt"];
306--1266[label="0.00282486;1pkt 1fpkt"];
306--1644[label="0.00473934;1pkt 1fpkt"];
306--1647[label="0.00438596;1pkt 1fpkt"];
306--1671[label="0.00409836;1pkt 1fpkt"];
306--1817[label="0.0046729;1pkt 1fpkt"];
306--1825[label="0.00490196;1pkt 1fpkt"];
306--1826[label="0.0047619;1pkt 1fpkt"];
306--1834[label="0.00492611;1pkt 1fpkt"];
306--2341[label="1;629pkt 629fpkt"];
306--2463[label="0.0049505;1pkt 1fpkt"];
306--2531[label="0.00282486;1pkt 1fpkt"];
306--2866[label="1;670pkt 670fpkt"];
306--4227[label="0.998507;669pkt 669fpkt"];
306--4989[label="1;670pkt 670fpkt"];
1041--2341[label="1;1pkt 1fpkt"];
1041--2866[label="1;1pkt 1fpkt"];
1041--4227[label="1;1pkt 1fpkt"];
1041--4989[label="1;1pkt 1fpkt"];
2341--2463[label="0.0049505;1pkt 1fpkt"];
2341--2531[label="0.00282486;1pkt 1fpkt"];
2341--2866[label="1;629pkt 629fpkt"];
2341--4227[label="0.99841;628pkt 628fpkt"];
2341--4989[label="1;629pkt 629fpkt"];
2866--4227[label="1;717pkt 717fpkt"];
2866--4989[label="1;717pkt 717fpkt"];
4227--4989[label="0.998605;716pkt 716fpkt"];
</description>
    <slice>
      <filter src_ip="128.3.30.30"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.176.238.170"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921132" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
1060[label="213.106.250.8;s;253pkt 253fpkt", shape=diamond, color=yellow];
1061[label="166.18.137.27;d;253pkt 253fpkt", shape=diamond, color=yellow];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.106.250.8:6667, 166.18.137.27:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 5000: (0.197628%)&lt;BR/&gt; 4999: (0.197628%)&lt;BR/&gt; 4998: (0.197628%)&lt;BR/&gt; 4997: (0.197628%)&gt;];
}
1060--1061[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_ip="166.18.137.27" src_ip="213.106.250.8" src_port="6667"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="146.250.12.23"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921202" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
1133[label="132.176.85.249;s;159pkt 159fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.85.249:25, *:*}[72.956%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.7673%)&lt;BR/&gt; 53: (7.86164%)&lt;BR/&gt; 64173: (0.314465%)&lt;BR/&gt; 63857: (0.314465%)&lt;BR/&gt; 61582: (0.314465%)&gt;];
}
1133--2612[label="0.00628931;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.85.249" src_port="25"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
917[label="193.9.120.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
1141[label="132.177.49.217;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.49.217:80, 87.25.212.170:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 15831: (14.2857%)&lt;BR/&gt; 0: (14.2857%)&lt;BR/&gt; 55251: (7.14286%)&lt;BR/&gt; 50420: (7.14286%)&gt;];
}
917--1141[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="87.25.212.170" src_ip="132.177.49.217" src_port="80"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.176.203.27"/>
      <from sec="1128920719" usec="0"/>
      <to sec="1128920844" usec="0"/>
    </slice>
    <from sec="1128920719" usec="0"/>
    <to sec="1128920844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
1260[label="220.145.76.217;d;308pkt 308fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 220.145.76.217:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1260--1713[label="0.00341297;1pkt 1fpkt"];
1260--1728[label="0.004329;1pkt 1fpkt"];
1260--1868[label="0.00332226;1pkt 1fpkt"];
1260--2218[label="0.00362319;1pkt 1fpkt"];
1260--2267[label="0.0049505;1pkt 1fpkt"];
1260--2341[label="0.00324675;1pkt 1fpkt"];
1260--2497[label="0.00378788;1pkt 1fpkt"];
1260--2866[label="0.00324675;1pkt 1fpkt"];
1260--3091[label="0.0111111;1pkt 1fpkt"];
1260--3106[label="0.00653595;1pkt 1fpkt"];
1260--3556[label="0.00406504;1pkt 1fpkt"];
1260--4227[label="0.00324675;1pkt 1fpkt"];
1260--4344[label="0.0111111;1pkt 1fpkt"];
1260--4989[label="0.00324675;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.145.76.217"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1265[label="219.206.35.51;d;322pkt 322fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 219.206.35.51:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1265--1431[label="0.00740741;1pkt 1fpkt"];
1265--1713[label="0.00341297;1pkt 1fpkt"];
1265--1728[label="0.004329;1pkt 1fpkt"];
1265--1868[label="0.00332226;1pkt 1fpkt"];
1265--2218[label="0.00362319;1pkt 1fpkt"];
1265--2267[label="0.0049505;1pkt 1fpkt"];
1265--2341[label="0.00310559;1pkt 1fpkt"];
1265--2342[label="0.00847458;1pkt 1fpkt"];
1265--2497[label="0.00378788;1pkt 1fpkt"];
1265--2866[label="0.00310559;1pkt 1fpkt"];
1265--3091[label="0.0111111;1pkt 1fpkt"];
1265--3106[label="0.00653595;1pkt 1fpkt"];
1265--3487[label="0.00900901;1pkt 1fpkt"];
1265--3556[label="0.00406504;1pkt 1fpkt"];
1265--4227[label="0.00310559;1pkt 1fpkt"];
1265--4344[label="0.0111111;1pkt 1fpkt"];
1265--4580[label="0.00900901;1pkt 1fpkt"];
1265--4989[label="0.00310559;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.206.35.51"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
2998[label="128.165.29.52;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4300[label="128.165.29.52;42pkt 42fpkt", shape=invtriangle, color=brown];
5037[label="128.165.29.52;42pkt 42fpkt", shape=invhouse, color=bisque];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.29.52:1024, *:53}[59.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.1429%)&lt;BR/&gt; 1024: (29.7619%)&lt;BR/&gt; 0: (11.9048%)&lt;BR/&gt; 25: (8.33333%)&lt;BR/&gt; 113: (3.57143%)&gt;];
}
2998--4300[label="1;42pkt 42fpkt"];
2998--5037[label="1;42pkt 42fpkt"];
4300--5037[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="128.165.29.52" src_port="1024"/>
    </slice>
    <from sec="1128920433" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
1307[label="80.216.182.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
1308[label="166.18.212.23;s;3pkt 3fpkt", shape=diamond, color=yellow];
2361[label="80.216.182.73;d;1pkt 1fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.212.23:3473, 80.216.182.73:5190}[33.3333%]&lt;BR/&gt;{166.18.212.23:3043, 80.216.209.227:5190}[33.3333%]&lt;BR/&gt;{166.18.212.23:3038, 203.65.185.240:5190}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 3473: (30%)&lt;BR/&gt; 3043: (10%)&lt;BR/&gt; 3038: (10%)&gt;];
}
1307--1308[label="1;1pkt 1fpkt"];
1307--2361[label="1;1pkt 1fpkt"];
1308--2361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.65.185.240" dst_port="5190" src_ip="166.18.212.23" src_port="3038"/>
      <filter dst_ip="80.216.209.227" dst_port="5190" src_ip="166.18.212.23" src_port="3043"/>
      <filter dst_ip="80.216.182.73" dst_port="5190" src_ip="166.18.212.23" src_port="3473"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
492[label="206.125.216.102;s;33pkt 33fpkt", shape=diamond, color=yellow];
1352[label="218.47.12.2;d;20pkt 20fpkt", shape=diamond, color=yellow];
2400[label="206.125.216.102;s;33pkt 33fpkt", shape=hexagon, color=black];
2495[label="218.47.12.2;d;20pkt 20fpkt", shape=hexagon, color=black];
3339[label="206.125.216.102;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4492[label="206.125.216.102;44pkt 44fpkt", shape=invtriangle, color=brown];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.216.102:21, 218.47.12.2:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (29.3814%)&lt;BR/&gt; 80: (8.24742%)&lt;BR/&gt; 0: (3.09278%)&lt;BR/&gt; 59731: (1.54639%)&lt;BR/&gt; 59694: (1.54639%)&gt;];
}
492--1352[label="1;20pkt 20fpkt"];
492--2400[label="1;33pkt 33fpkt"];
492--2495[label="1;20pkt 20fpkt"];
492--3339[label="1;33pkt 33fpkt"];
492--4492[label="1;33pkt 33fpkt"];
1352--2400[label="1;20pkt 20fpkt"];
1352--2495[label="1;20pkt 20fpkt"];
1352--3339[label="1;20pkt 20fpkt"];
1352--4492[label="1;20pkt 20fpkt"];
2400--2495[label="1;20pkt 20fpkt"];
2400--3339[label="1;33pkt 33fpkt"];
2400--4492[label="1;33pkt 33fpkt"];
2495--3339[label="1;20pkt 20fpkt"];
2495--4492[label="1;20pkt 20fpkt"];
3339--4492[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="218.47.12.2" src_ip="206.125.216.102" src_port="21"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
236[label="128.165.101.212;s;4773pkt 4773fpkt", shape=diamond, color=yellow];
1354[label="157.149.158.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
2311[label="157.149.158.194;d;1pkt 1fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.101.212:1698, *:*}[98.1982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1698: (49.0785%)&lt;BR/&gt; 443: (0.502618%)&lt;BR/&gt; 80: (0.439791%)&lt;BR/&gt; 1038: (0.115183%)&lt;BR/&gt; 54045: (0.0942408%)&gt;];
}
236--1354[label="1;1pkt 1fpkt"];
236--2311[label="1;1pkt 1fpkt"];
1354--2311[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.101.212" src_port="1698"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
1415[label="40.80.9.182;d;350pkt 350fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 40.80.9.182:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1415--1431[label="0.00740741;1pkt 1fpkt"];
1415--1713[label="0.00341297;1pkt 1fpkt"];
1415--1728[label="0.004329;1pkt 1fpkt"];
1415--1868[label="0.00332226;1pkt 1fpkt"];
1415--2267[label="0.0049505;1pkt 1fpkt"];
1415--2342[label="0.00847458;1pkt 1fpkt"];
1415--2497[label="0.00378788;1pkt 1fpkt"];
1415--3106[label="0.00653595;1pkt 1fpkt"];
1415--3487[label="0.00900901;1pkt 1fpkt"];
1415--3556[label="0.00406504;1pkt 1fpkt"];
1415--4580[label="0.00900901;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.80.9.182"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="132.176.45.35"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="67.192.180.50"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921138" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
1480[label="128.165.92.179;d;86pkt 86fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.165.92.179:25}[61.6279%]&lt;BR/&gt;{*:25, 128.165.92.179:*}[37.2093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.4186%)&lt;BR/&gt; 55737: (0.581395%)&lt;BR/&gt; 53447: (0.581395%)&lt;BR/&gt; 49567: (0.581395%)&lt;BR/&gt; 45285: (0.581395%)&gt;];
}
1480--3104[label="0.0116279;1pkt 1fpkt"];
1480--4354[label="0.0116279;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.92.179" src_port="25"/>
      <filter dst_ip="128.165.92.179" dst_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
1525[label="172.20.34.236;s;275pkt 275fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.34.236:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (8.36364%)&lt;BR/&gt; 80: (8.36364%)&lt;BR/&gt; 1585: (1.81818%)&lt;BR/&gt; 4838: (0.545455%)&lt;BR/&gt; 4743: (0.545455%)&gt;];
}
1525--2625[label="0.0109091;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="172.20.34.236"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1363[label="166.18.157.32;s;218pkt 218fpkt", shape=diamond, color=yellow];
1571[label="211.208.146.47;d;218pkt 218fpkt", shape=diamond, color=yellow];
2565[label="211.208.146.47;d;218pkt 218fpkt", shape=hexagon, color=black];
2887[label="166.18.157.32;225pkt 225fpkt", shape=pentagon, color=darkviolet];
4239[label="166.18.157.32;225pkt 225fpkt", shape=invtriangle, color=brown];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.157.32:*, 211.208.146.47:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1952: (0.226449%)&lt;BR/&gt; 1951: (0.226449%)&lt;BR/&gt; 1950: (0.226449%)&lt;BR/&gt; 1949: (0.226449%)&gt;];
}
1363--1571[label="1;218pkt 218fpkt"];
1363--2565[label="1;218pkt 218fpkt"];
1363--2887[label="0.995413;217pkt 217fpkt"];
1363--4239[label="0.995413;217pkt 217fpkt"];
1571--2565[label="1;218pkt 218fpkt"];
1571--2887[label="0.995413;217pkt 217fpkt"];
1571--4239[label="0.995413;217pkt 217fpkt"];
2565--2887[label="0.995413;217pkt 217fpkt"];
2565--4239[label="0.995413;217pkt 217fpkt"];
2887--4239[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_ip="211.208.146.47" dst_port="6667" src_ip="166.18.157.32"/>
    </slice>
    <from sec="1128920422" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
976[label="132.177.27.49;s;42pkt 42fpkt", shape=diamond, color=yellow];
983[label="217.39.129.58;d;6pkt 6fpkt", shape=diamond, color=yellow];
1602[label="211.217.28.81;d;4pkt 4fpkt", shape=diamond, color=yellow];
2243[label="217.39.129.58;d;6pkt 6fpkt", shape=hexagon, color=black];
2983[label="132.177.27.49;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4294[label="132.177.27.49;44pkt 44fpkt", shape=invtriangle, color=brown];
5032[label="132.177.27.49;44pkt 44fpkt", shape=invhouse, color=bisque];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.27.49:80, *:*}[97.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9474%)&lt;BR/&gt; 48560: (1.57895%)&lt;BR/&gt; 48559: (1.57895%)&lt;BR/&gt; 48080: (1.57895%)&lt;BR/&gt; 48042: (1.57895%)&gt;];
}
976--983[label="1;6pkt 6fpkt"];
976--1602[label="1;4pkt 4fpkt"];
976--2243[label="1;6pkt 6fpkt"];
976--2983[label="1;42pkt 42fpkt"];
976--4294[label="1;42pkt 42fpkt"];
976--5032[label="1;42pkt 42fpkt"];
983--2243[label="1;6pkt 6fpkt"];
983--2983[label="1;6pkt 6fpkt"];
983--4294[label="1;6pkt 6fpkt"];
983--5032[label="1;6pkt 6fpkt"];
1602--2983[label="1;4pkt 4fpkt"];
1602--4294[label="1;4pkt 4fpkt"];
1602--5032[label="1;4pkt 4fpkt"];
2243--2983[label="1;6pkt 6fpkt"];
2243--4294[label="1;6pkt 6fpkt"];
2243--5032[label="1;6pkt 6fpkt"];
2983--4294[label="1;44pkt 44fpkt"];
2983--5032[label="1;44pkt 44fpkt"];
4294--5032[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.27.49" src_port="80"/>
    </slice>
    <from sec="1128920457" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="132.176.0.17"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1644[label="216.21.111.68;d;211pkt 211fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 216.21.111.68:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1644--1713[label="0.00473934;1pkt 1fpkt"];
1644--1728[label="0.00473934;1pkt 1fpkt"];
1644--1868[label="0.00473934;1pkt 1fpkt"];
1644--2218[label="0.00473934;1pkt 1fpkt"];
1644--2267[label="0.0049505;1pkt 1fpkt"];
1644--2341[label="0.00473934;1pkt 1fpkt"];
1644--2497[label="0.00473934;1pkt 1fpkt"];
1644--2866[label="0.00473934;1pkt 1fpkt"];
1644--3091[label="0.0111111;1pkt 1fpkt"];
1644--3487[label="0.00900901;1pkt 1fpkt"];
1644--3556[label="0.00473934;1pkt 1fpkt"];
1644--4227[label="0.00473934;1pkt 1fpkt"];
1644--4344[label="0.0111111;1pkt 1fpkt"];
1644--4580[label="0.00900901;1pkt 1fpkt"];
1644--4989[label="0.00473934;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.21.111.68"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1062[label="166.18.137.27;s;253pkt 253fpkt", shape=diamond, color=yellow];
1651[label="213.106.250.8;d;189pkt 189fpkt", shape=diamond, color=yellow];
2407[label="166.18.137.27;s;189pkt 189fpkt", shape=hexagon, color=black];
2856[label="166.18.137.27;265pkt 265fpkt", shape=pentagon, color=darkviolet];
4220[label="166.18.137.27;266pkt 266fpkt", shape=invtriangle, color=brown];
4984[label="166.18.137.27;264pkt 264fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.137.27:*, 213.106.250.8:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 5000: (0.210379%)&lt;BR/&gt; 4999: (0.210379%)&lt;BR/&gt; 4998: (0.210379%)&lt;BR/&gt; 4997: (0.210379%)&gt;];
}
1062--1651[label="1;189pkt 189fpkt"];
1062--2407[label="1;189pkt 189fpkt"];
1062--2856[label="0.996047;252pkt 252fpkt"];
1062--4220[label="1;253pkt 253fpkt"];
1062--4984[label="0.996047;252pkt 252fpkt"];
1651--2407[label="1;189pkt 189fpkt"];
1651--2856[label="0.994709;188pkt 188fpkt"];
1651--4220[label="1;189pkt 189fpkt"];
1651--4984[label="0.994709;188pkt 188fpkt"];
2407--2856[label="0.994709;188pkt 188fpkt"];
2407--4220[label="1;189pkt 189fpkt"];
2407--4984[label="0.994709;188pkt 188fpkt"];
2856--4220[label="1;265pkt 265fpkt"];
2856--4984[label="1;264pkt 264fpkt"];
4220--4984[label="1;264pkt 264fpkt"];
</description>
    <slice>
      <filter dst_ip="213.106.250.8" dst_port="6667" src_ip="166.18.137.27"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
1671[label="219.85.162.123;d;244pkt 244fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 219.85.162.123:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1671--1713[label="0.00409836;1pkt 1fpkt"];
1671--1728[label="0.004329;1pkt 1fpkt"];
1671--1868[label="0.00409836;1pkt 1fpkt"];
1671--2218[label="0.00409836;1pkt 1fpkt"];
1671--2267[label="0.0049505;1pkt 1fpkt"];
1671--2341[label="0.00409836;1pkt 1fpkt"];
1671--2342[label="0.00847458;1pkt 1fpkt"];
1671--2497[label="0.00409836;1pkt 1fpkt"];
1671--2866[label="0.00409836;1pkt 1fpkt"];
1671--3091[label="0.0111111;1pkt 1fpkt"];
1671--3106[label="0.00653595;1pkt 1fpkt"];
1671--3487[label="0.00900901;1pkt 1fpkt"];
1671--3556[label="0.00409836;1pkt 1fpkt"];
1671--4227[label="0.00409836;1pkt 1fpkt"];
1671--4344[label="0.0111111;1pkt 1fpkt"];
1671--4580[label="0.00900901;1pkt 1fpkt"];
1671--4989[label="0.00409836;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.85.162.123"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.112.208.251"/>
      <from sec="1128920401" usec="0"/>
      <to sec="1128921179" usec="0"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.42.201.99"/>
      <from sec="1128920401" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.176.192.176"/>
      <from sec="1128920428" usec="0"/>
      <to sec="1128921222" usec="0"/>
    </slice>
    <from sec="1128920428" usec="0"/>
    <to sec="1128921222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="219.73.245.30"/>
      <from sec="1128920856" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920856" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1732[label="162.255.222.93;d;17pkt 17fpkt", shape=diamond, color=yellow];
1801[label="82.137.202.177;s;16pkt 16fpkt", shape=diamond, color=yellow];
3755[label="82.137.202.177;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4729[label="82.137.202.177;17pkt 17fpkt", shape=invtriangle, color=brown];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.137.202.177:*, 162.255.222.93:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.2836%)&lt;BR/&gt; 28000: (5.97015%)&lt;BR/&gt; 45060: (2.98507%)&lt;BR/&gt; 44869: (2.98507%)&lt;BR/&gt; 44705: (2.98507%)&gt;];
}
1732--1801[label="1;16pkt 16fpkt"];
1732--3755[label="0.941176;16pkt 16fpkt"];
1732--4729[label="0.941176;16pkt 16fpkt"];
1801--3755[label="1;16pkt 16fpkt"];
1801--4729[label="1;16pkt 16fpkt"];
3755--4729[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="162.255.222.93" dst_port="80" src_ip="82.137.202.177"/>
    </slice>
    <from sec="1128920420" usec="0"/>
    <to sec="1128921282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
1817[label="218.59.228.195;d;214pkt 214fpkt", shape=diamond, color=yellow];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 218.59.228.195:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1817--2218[label="0.0046729;1pkt 1fpkt"];
1817--2267[label="0.0049505;1pkt 1fpkt"];
1817--2341[label="0.0046729;1pkt 1fpkt"];
1817--2497[label="0.0046729;1pkt 1fpkt"];
1817--2866[label="0.0046729;1pkt 1fpkt"];
1817--3091[label="0.0111111;1pkt 1fpkt"];
1817--3106[label="0.00653595;1pkt 1fpkt"];
1817--3556[label="0.0046729;1pkt 1fpkt"];
1817--4227[label="0.0046729;1pkt 1fpkt"];
1817--4344[label="0.0111111;1pkt 1fpkt"];
1817--4989[label="0.0046729;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.59.228.195"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
1826[label="41.153.37.68;d;210pkt 210fpkt", shape=diamond, color=yellow];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 41.153.37.68:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1826--2218[label="0.0047619;1pkt 1fpkt"];
1826--2267[label="0.0049505;1pkt 1fpkt"];
1826--2341[label="0.0047619;1pkt 1fpkt"];
1826--2342[label="0.00847458;1pkt 1fpkt"];
1826--2497[label="0.0047619;1pkt 1fpkt"];
1826--2866[label="0.0047619;1pkt 1fpkt"];
1826--3106[label="0.00653595;1pkt 1fpkt"];
1826--3487[label="0.00900901;1pkt 1fpkt"];
1826--3556[label="0.0047619;1pkt 1fpkt"];
1826--4227[label="0.0047619;1pkt 1fpkt"];
1826--4580[label="0.00900901;1pkt 1fpkt"];
1826--4747[label="0.0047619;1pkt 1fpkt"];
1826--4989[label="0.0047619;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.153.37.68"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
1834[label="83.93.29.244;d;203pkt 203fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 83.93.29.244:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1834--1868[label="0.00492611;1pkt 1fpkt"];
1834--2218[label="0.00492611;1pkt 1fpkt"];
1834--2267[label="0.0049505;1pkt 1fpkt"];
1834--2341[label="0.00492611;1pkt 1fpkt"];
1834--2497[label="0.00492611;1pkt 1fpkt"];
1834--2866[label="0.00492611;1pkt 1fpkt"];
1834--3091[label="0.0111111;1pkt 1fpkt"];
1834--3106[label="0.00653595;1pkt 1fpkt"];
1834--3487[label="0.00900901;1pkt 1fpkt"];
1834--3556[label="0.00492611;1pkt 1fpkt"];
1834--4227[label="0.00492611;1pkt 1fpkt"];
1834--4344[label="0.0111111;1pkt 1fpkt"];
1834--4580[label="0.00900901;1pkt 1fpkt"];
1834--4989[label="0.00492611;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="83.93.29.244"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.18.148.32"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921223" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="68.10.64.95"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921226" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.177.3.2"/>
      <from sec="1128920401" usec="0"/>
      <to sec="1128921093" usec="0"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="132.176.192.176"/>
      <from sec="1128920428" usec="0"/>
      <to sec="1128921222" usec="0"/>
    </slice>
    <from sec="1128920428" usec="0"/>
    <to sec="1128921222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1371[label="132.177.26.207;s;32pkt 32fpkt", shape=diamond, color=yellow];
1928[label="207.154.180.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
3903[label="132.177.26.207;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4809[label="132.177.26.207;32pkt 32fpkt", shape=invtriangle, color=brown];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.26.207:80, 206.64.78.77:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4694%)&lt;BR/&gt; 0: (3.06122%)&lt;BR/&gt; 3239: (2.04082%)&lt;BR/&gt; 1610: (2.04082%)&lt;BR/&gt; 61763: (1.53061%)&gt;];
}
1371--1928[label="1;2pkt 2fpkt"];
1371--3903[label="1;32pkt 32fpkt"];
1371--4809[label="1;32pkt 32fpkt"];
1928--3903[label="1;2pkt 2fpkt"];
1928--4809[label="1;2pkt 2fpkt"];
3903--4809[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="206.64.78.77" src_ip="132.177.26.207" src_port="80"/>
    </slice>
    <from sec="1128920455" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
1649[label="216.248.70.194;d;26pkt 26fpkt", shape=diamond, color=yellow];
3914[label="166.18.158.209;41pkt 41fpkt", shape=pentagon, color=darkviolet];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.158.209:*, 66.203.73.181:6663}[57.5758%]&lt;BR/&gt;{*:*, 216.248.70.194:5050}[37.8788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6663: (28.3582%)&lt;BR/&gt; 5050: (19.403%)&lt;BR/&gt; 1036: (1.49254%)&lt;BR/&gt; 1034: (1.49254%)&lt;BR/&gt; 4505: (0.746269%)&gt;];
}
1649--3914[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.248.70.194" dst_port="5050"/>
      <filter dst_ip="66.203.73.181" dst_port="6663" src_ip="166.18.158.209"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1954[label="206.125.209.32;d;4pkt 4fpkt", shape=diamond, color=yellow];
1957[label="40.37.25.49;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.37.25.49:4519, 206.125.209.32:554}[25%]&lt;BR/&gt;{40.37.25.49:4520, 206.125.209.32:1755}[25%]&lt;BR/&gt;{40.37.25.49:4524, 206.125.209.32:1755}[25%]&lt;BR/&gt;{40.37.25.49:4571, 206.125.209.32:1755}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (37.5%)&lt;BR/&gt; 4571: (12.5%)&lt;BR/&gt; 4524: (12.5%)&lt;BR/&gt; 4520: (12.5%)&lt;BR/&gt; 4519: (12.5%)&gt;];
}
1954--1957[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.209.32" dst_port="1755" src_ip="40.37.25.49" src_port="4571"/>
      <filter dst_ip="206.125.209.32" dst_port="1755" src_ip="40.37.25.49" src_port="4524"/>
      <filter dst_ip="206.125.209.32" dst_port="1755" src_ip="40.37.25.49" src_port="4520"/>
      <filter dst_ip="206.125.209.32" dst_port="554" src_ip="40.37.25.49" src_port="4519"/>
    </slice>
    <from sec="1128920965" usec="0"/>
    <to sec="1128921134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.227.149.240"/>
      <from sec="1128921030" usec="0"/>
      <to sec="1128921094" usec="0"/>
    </slice>
    <from sec="1128921030" usec="0"/>
    <to sec="1128921094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="43.138.210.134"/>
      <from sec="1128921083" usec="0"/>
      <to sec="1128921224" usec="0"/>
    </slice>
    <from sec="1128921083" usec="0"/>
    <to sec="1128921224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16354,1.79488,010,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
101[label="128.144.2.254s;62pkt 62fpkt", shape=rectangle, color=red];
1975[label="128.144.2.254;s;377pkt 377fpkt", shape=diamond, color=yellow];
4106[label="128.144.2.254;377pkt 377fpkt", shape=pentagon, color=darkviolet];
4924[label="128.144.2.254;377pkt 377fpkt", shape=invtriangle, color=brown];
5429[label="128.144.2.254;377pkt 377fpkt", shape=invhouse, color=bisque];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.144.2.254:*, *:139}[66.5782%]&lt;BR/&gt;{128.144.2.254:*, *:445}[33.4218%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (33.949%)&lt;BR/&gt; 445: (16.051%)&lt;BR/&gt; 3155: (0.159236%)&lt;BR/&gt; 3154: (0.159236%)&lt;BR/&gt; 3153: (0.159236%)&gt;];
}
101--1975[label="1;62pkt 62fpkt"];
101--4106[label="1;62pkt 62fpkt"];
101--4924[label="1;62pkt 62fpkt"];
101--5429[label="1;62pkt 62fpkt"];
1975--4106[label="1;377pkt 377fpkt"];
1975--4924[label="1;377pkt 377fpkt"];
1975--5429[label="1;377pkt 377fpkt"];
4106--4924[label="1;377pkt 377fpkt"];
4106--5429[label="1;377pkt 377fpkt"];
4924--5429[label="1;377pkt 377fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="128.144.2.254"/>
      <filter dst_port="445" src_ip="128.144.2.254"/>
    </slice>
    <from sec="1128921087" usec="0"/>
    <to sec="1128921132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
742[label="128.165.181.87;d;4pkt 4fpkt", shape=diamond, color=yellow];
1977[label="219.37.168.129;s;3pkt 3fpkt", shape=diamond, color=yellow];
2524[label="219.37.168.129;s;3pkt 3fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.37.168.252:80, 128.165.181.87:3673}[25%]&lt;BR/&gt;{219.37.168.129:80, 128.165.181.87:3674}[25%]&lt;BR/&gt;{219.37.168.129:80, 128.165.181.87:3675}[25%]&lt;BR/&gt;{219.37.168.129:80, 128.165.181.87:3676}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3676: (15%)&lt;BR/&gt; 3675: (15%)&lt;BR/&gt; 3674: (15%)&lt;BR/&gt; 3673: (5%)&gt;];
}
742--1977[label="1;3pkt 3fpkt"];
742--2524[label="1;3pkt 3fpkt"];
1977--2524[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.181.87" dst_port="3676" src_ip="219.37.168.129" src_port="80"/>
      <filter dst_ip="128.165.181.87" dst_port="3675" src_ip="219.37.168.129" src_port="80"/>
      <filter dst_ip="128.165.181.87" dst_port="3674" src_ip="219.37.168.129" src_port="80"/>
      <filter dst_ip="128.165.181.87" dst_port="3673" src_ip="219.37.168.252" src_port="80"/>
    </slice>
    <from sec="1128921049" usec="0"/>
    <to sec="1128921144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="207.99.19.29"/>
      <from sec="1128920400" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.56.217.24"/>
      <from sec="1128920402" usec="0"/>
      <to sec="1128921226" usec="0"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.112.149.152"/>
      <from sec="1128920419" usec="0"/>
      <to sec="1128921226" usec="0"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
811[label="132.177.180.85;s;233pkt 233fpkt", shape=diamond, color=yellow];
2046[label="219.196.215.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
3237[label="132.177.180.85;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4436[label="132.177.180.85;254pkt 254fpkt", shape=invtriangle, color=brown];
5117[label="132.177.180.85;254pkt 254fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.180.85:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (4.61847%)&lt;BR/&gt; 21451: (4.01606%)&lt;BR/&gt; 14490: (3.66466%)&lt;BR/&gt; 80: (3.51406%)&lt;BR/&gt; 9058: (2.91165%)&gt;];
}
811--2046[label="1;1pkt 1fpkt"];
811--2625[label="0.00858369;2pkt 2fpkt"];
811--2629[label="0.00429185;1pkt 1fpkt"];
811--3237[label="1;233pkt 233fpkt"];
811--4436[label="1;233pkt 233fpkt"];
811--5117[label="1;233pkt 233fpkt"];
2046--3237[label="1;1pkt 1fpkt"];
2046--4436[label="1;1pkt 1fpkt"];
2046--5117[label="1;1pkt 1fpkt"];
3237--4436[label="1;254pkt 254fpkt"];
3237--5117[label="1;254pkt 254fpkt"];
4436--5117[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.180.85"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.253.150.53"/>
      <from sec="1128920478" usec="0"/>
      <to sec="1128921228" usec="0"/>
    </slice>
    <from sec="1128920478" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1969[label="210.175.184.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2080[label="132.176.78.157;s;13pkt 13fpkt", shape=diamond, color=yellow];
3642[label="132.176.78.157;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.78.157:*, 3.208.242.149:80}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.2051%)&lt;BR/&gt; 5788: (7.69231%)&lt;BR/&gt; 7070: (5.12821%)&lt;BR/&gt; 0: (5.12821%)&lt;BR/&gt; 1063: (3.84615%)&gt;];
}
1969--2080[label="1;1pkt 1fpkt"];
1969--3642[label="1;1pkt 1fpkt"];
2080--3642[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="3.208.242.149" dst_port="80" src_ip="132.176.78.157"/>
    </slice>
    <from sec="1128920571" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
2082[label="146.250.47.138;d;25pkt 25fpkt", shape=diamond, color=yellow];
2083[label="85.81.99.90;s;25pkt 25fpkt", shape=diamond, color=yellow];
2578[label="146.250.47.138;d;25pkt 25fpkt", shape=hexagon, color=black];
3266[label="85.81.99.90;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4449[label="85.81.99.90;44pkt 44fpkt", shape=invtriangle, color=brown];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.81.99.90:80, 146.250.47.138:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2009: (1.53374%)&lt;BR/&gt; 2007: (1.53374%)&lt;BR/&gt; 2006: (1.53374%)&lt;BR/&gt; 2003: (1.53374%)&gt;];
}
2082--2083[label="1;25pkt 25fpkt"];
2082--2578[label="1;25pkt 25fpkt"];
2082--3266[label="1;25pkt 25fpkt"];
2082--4449[label="1;25pkt 25fpkt"];
2083--2578[label="1;25pkt 25fpkt"];
2083--3266[label="1;25pkt 25fpkt"];
2083--4449[label="1;25pkt 25fpkt"];
2578--3266[label="1;25pkt 25fpkt"];
2578--4449[label="1;25pkt 25fpkt"];
3266--4449[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.47.138" src_ip="85.81.99.90" src_port="80"/>
    </slice>
    <from sec="1128920894" usec="0"/>
    <to sec="1128921193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663466,1.93549,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="222.211.137.198"/>
      <from sec="1128921055" usec="0"/>
      <to sec="1128921207" usec="0"/>
    </slice>
    <from sec="1128921055" usec="0"/>
    <to sec="1128921207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
2100[label="207.99.146.195;s;15pkt 15fpkt", shape=diamond, color=yellow];
2104[label="80.121.101.83;d;2pkt 2fpkt", shape=diamond, color=yellow];
3826[label="207.99.146.195;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.146.195:*, 148.64.2.131:80}[26.6667%]&lt;BR/&gt;{207.99.146.195:*, 85.78.56.156:80}[26.6667%]&lt;BR/&gt;{207.99.146.195:*, 82.110.76.37:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37637: (4.6875%)&lt;BR/&gt; 37635: (4.6875%)&lt;BR/&gt; 37643: (3.125%)&lt;BR/&gt; 37641: (3.125%)&gt;];
}
2100--2104[label="1;2pkt 2fpkt"];
2100--3826[label="1;15pkt 15fpkt"];
2104--3826[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.78.56.156" dst_port="80" src_ip="207.99.146.195"/>
      <filter dst_ip="148.64.2.131" dst_port="80" src_ip="207.99.146.195"/>
      <filter dst_ip="82.110.76.37" dst_port="80" src_ip="207.99.146.195"/>
    </slice>
    <from sec="1128921132" usec="0"/>
    <to sec="1128921216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
210[label="206.125.208.160;s;153pkt 153fpkt", shape=diamond, color=yellow];
757[label="80.29.190.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
964[label="68.131.25.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
965[label="65.2.221.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1603[label="45.10.141.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1924[label="210.175.48.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
1945[label="217.69.57.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
2090[label="65.99.210.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2118[label="206.125.208.160;s;48pkt 48fpkt", shape=hexagon, color=black];
2516[label="217.69.57.15;d;1pkt 1fpkt", shape=hexagon, color=black];
3662[label="206.125.208.160;156pkt 156fpkt", shape=pentagon, color=darkviolet];
4677[label="206.125.208.160;156pkt 156fpkt", shape=invtriangle, color=brown];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.208.160:4665, *:*}[62.1795%]&lt;BR/&gt;{206.125.208.160:4662, *:*}[30.1282%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4665: (37.2361%)&lt;BR/&gt; 4662: (16.6987%)&lt;BR/&gt; 3004: (3.26296%)&lt;BR/&gt; 4246: (2.39923%)&lt;BR/&gt; 5825: (2.01536%)&gt;];
}
210--757[label="1;1pkt 1fpkt"];
210--964[label="1;1pkt 1fpkt"];
210--965[label="1;1pkt 1fpkt"];
210--1603[label="1;1pkt 1fpkt"];
210--1605[label="0.00653595;1pkt 1fpkt"];
210--1768[label="0.00653595;1pkt 1fpkt"];
210--1863[label="0.0102041;1pkt 1fpkt"];
210--1924[label="1;1pkt 1fpkt"];
210--1945[label="1;1pkt 1fpkt"];
210--1966[label="0.00653595;1pkt 1fpkt"];
210--2090[label="1;1pkt 1fpkt"];
210--2118[label="1;48pkt 48fpkt"];
210--2516[label="1;1pkt 1fpkt"];
210--2577[label="0.00653595;1pkt 1fpkt"];
210--2628[label="0.00653595;1pkt 1fpkt"];
210--2644[label="0.00653595;1pkt 1fpkt"];
210--2659[label="0.00653595;1pkt 1fpkt"];
210--3662[label="1;153pkt 153fpkt"];
210--4677[label="1;153pkt 153fpkt"];
757--2118[label="1;1pkt 1fpkt"];
757--3662[label="1;1pkt 1fpkt"];
757--4677[label="1;1pkt 1fpkt"];
964--2118[label="1;1pkt 1fpkt"];
964--3662[label="1;1pkt 1fpkt"];
964--4677[label="1;1pkt 1fpkt"];
965--2118[label="1;1pkt 1fpkt"];
965--3662[label="1;1pkt 1fpkt"];
965--4677[label="1;1pkt 1fpkt"];
1603--3662[label="1;1pkt 1fpkt"];
1603--4677[label="1;1pkt 1fpkt"];
1924--3662[label="1;1pkt 1fpkt"];
1924--4677[label="1;1pkt 1fpkt"];
1945--2516[label="1;1pkt 1fpkt"];
1945--3662[label="1;1pkt 1fpkt"];
1945--4677[label="1;1pkt 1fpkt"];
2090--3662[label="1;1pkt 1fpkt"];
2090--4677[label="1;1pkt 1fpkt"];
2118--3662[label="1;48pkt 48fpkt"];
2118--4677[label="1;48pkt 48fpkt"];
2516--3662[label="1;1pkt 1fpkt"];
2516--4677[label="1;1pkt 1fpkt"];
3662--4677[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.208.160" src_port="4665"/>
      <filter src_ip="206.125.208.160" src_port="4662"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
408[label="132.176.35.22;s;3074pkt 3074fpkt", shape=diamond, color=yellow];
2140[label="132.176.35.22;s;1144pkt 1144fpkt", shape=hexagon, color=black];
2832[label="132.176.35.22;3284pkt 3284fpkt", shape=pentagon, color=darkviolet];
4205[label="132.176.35.22;3283pkt 3283fpkt", shape=invtriangle, color=brown];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.35.22:1374, *:*}[98.6906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1374: (49.3%)&lt;BR/&gt; 443: (0.500695%)&lt;BR/&gt; 80: (0.227167%)&lt;BR/&gt; 1054: (0.125174%)&lt;BR/&gt; 1047: (0.10663%)&gt;];
}
408--2140[label="1;1144pkt 1144fpkt"];
408--2625[label="0.000325309;1pkt 1fpkt"];
408--2832[label="1;3074pkt 3074fpkt"];
408--4205[label="0.999675;3073pkt 3073fpkt"];
2140--2625[label="0.000874126;1pkt 1fpkt"];
2140--2832[label="1;1144pkt 1144fpkt"];
2140--4205[label="0.999126;1143pkt 1143fpkt"];
2832--4205[label="1;3283pkt 3283fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.35.22" src_port="1374"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
428[label="132.176.48.84;s;973pkt 973fpkt", shape=diamond, color=yellow];
2143[label="132.176.48.84;s;973pkt 973fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.48.84:25, *:*}[49.6403%]&lt;BR/&gt;{132.176.48.84:*, *:113}[48.7153%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.6423%)&lt;BR/&gt; 113: (24.3577%)&lt;BR/&gt; 54184: (0.102775%)&lt;BR/&gt; 4805: (0.102775%)&lt;BR/&gt; 4517: (0.102775%)&gt;];
}
428--2143[label="1;973pkt 973fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.48.84" src_port="25"/>
      <filter dst_port="113" src_ip="132.176.48.84"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
226[label="206.125.208.223;d;278pkt 278fpkt", shape=diamond, color=yellow];
227[label="219.151.218.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
252[label="218.61.24.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
332[label="44.129.105.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
449[label="219.80.57.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
530[label="218.35.82.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
590[label="40.39.39.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
593[label="221.202.16.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
687[label="222.29.246.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
772[label="219.149.59.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
787[label="84.83.150.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
826[label="219.148.211.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
847[label="65.180.117.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
950[label="193.218.18.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
952[label="201.112.255.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
1071[label="40.97.137.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
1256[label="40.101.183.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
1270[label="220.33.211.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
1414[label="80.28.105.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
2089[label="222.140.89.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
2094[label="3.154.34.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
2168[label="40.39.39.219;s;1pkt 1fpkt", shape=hexagon, color=black];
2201[label="84.83.150.76;s;1pkt 1fpkt", shape=hexagon, color=black];
2211[label="65.180.117.27;s;1pkt 1fpkt", shape=hexagon, color=black];
2230[label="222.29.246.61;s;1pkt 1fpkt", shape=hexagon, color=black];
2340[label="40.101.183.204;s;1pkt 1fpkt", shape=hexagon, color=black];
2351[label="221.202.16.70;s;1pkt 1fpkt", shape=hexagon, color=black];
2401[label="219.149.59.250;s;1pkt 1fpkt", shape=hexagon, color=black];
2740[label="44.132.90.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2885[label="44.129.105.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3023[label="3.154.34.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3065[label="222.29.246.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3379[label="222.140.89.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3408[label="219.77.108.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4040[label="40.87.8.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4157[label="44.132.90.10;1pkt 1fpkt", shape=invtriangle, color=brown];
4314[label="3.154.34.55;1pkt 1fpkt", shape=invtriangle, color=brown];
4330[label="222.29.246.61;1pkt 1fpkt", shape=invtriangle, color=brown];
4533[label="219.77.108.113;1pkt 1fpkt", shape=invtriangle, color=brown];
4947[label="44.132.90.10;1pkt 1fpkt", shape=invhouse, color=bisque];
5060[label="222.29.246.61;1pkt 1fpkt", shape=invhouse, color=bisque];
5176[label="219.77.108.113;1pkt 1fpkt", shape=invhouse, color=bisque];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 206.125.208.223:*}[70.1439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (36.0502%)&lt;BR/&gt; 0: (2.50784%)&lt;BR/&gt; 1593: (1.5674%)&lt;BR/&gt; 4661: (0.940439%)&lt;BR/&gt; 1105: (0.940439%)&gt;];
}
226--227[label="1;1pkt 1fpkt"];
226--252[label="1;1pkt 1fpkt"];
226--332[label="1;1pkt 1fpkt"];
226--449[label="1;1pkt 1fpkt"];
226--530[label="1;1pkt 1fpkt"];
226--590[label="1;1pkt 1fpkt"];
226--593[label="1;1pkt 1fpkt"];
226--687[label="1;1pkt 1fpkt"];
226--772[label="1;1pkt 1fpkt"];
226--787[label="1;1pkt 1fpkt"];
226--826[label="1;1pkt 1fpkt"];
226--847[label="1;1pkt 1fpkt"];
226--950[label="1;1pkt 1fpkt"];
226--952[label="1;1pkt 1fpkt"];
226--1071[label="1;1pkt 1fpkt"];
226--1256[label="1;1pkt 1fpkt"];
226--1270[label="1;1pkt 1fpkt"];
226--1414[label="1;1pkt 1fpkt"];
226--2089[label="1;1pkt 1fpkt"];
226--2094[label="1;1pkt 1fpkt"];
226--2168[label="1;1pkt 1fpkt"];
226--2201[label="1;1pkt 1fpkt"];
226--2211[label="1;1pkt 1fpkt"];
226--2230[label="1;1pkt 1fpkt"];
226--2340[label="1;1pkt 1fpkt"];
226--2351[label="1;1pkt 1fpkt"];
226--2401[label="1;1pkt 1fpkt"];
226--2627[label="0.00359712;1pkt 1fpkt"];
226--2643[label="0.00359712;1pkt 1fpkt"];
226--2658[label="0.00359712;1pkt 1fpkt"];
226--2740[label="1;1pkt 1fpkt"];
226--2885[label="1;1pkt 1fpkt"];
226--3023[label="1;1pkt 1fpkt"];
226--3065[label="1;1pkt 1fpkt"];
226--3379[label="1;1pkt 1fpkt"];
226--3408[label="1;1pkt 1fpkt"];
226--4040[label="1;1pkt 1fpkt"];
226--4157[label="1;1pkt 1fpkt"];
226--4314[label="1;1pkt 1fpkt"];
226--4330[label="1;1pkt 1fpkt"];
226--4533[label="1;1pkt 1fpkt"];
226--4947[label="1;1pkt 1fpkt"];
226--5060[label="1;1pkt 1fpkt"];
226--5176[label="1;1pkt 1fpkt"];
332--2885[label="1;1pkt 1fpkt"];
590--2168[label="1;1pkt 1fpkt"];
593--2351[label="1;1pkt 1fpkt"];
687--2230[label="1;1pkt 1fpkt"];
687--3065[label="1;1pkt 1fpkt"];
687--4330[label="1;1pkt 1fpkt"];
687--5060[label="1;1pkt 1fpkt"];
772--2401[label="1;1pkt 1fpkt"];
787--2201[label="1;1pkt 1fpkt"];
847--2211[label="1;1pkt 1fpkt"];
1256--2340[label="1;1pkt 1fpkt"];
2089--3379[label="1;1pkt 1fpkt"];
2094--3023[label="1;1pkt 1fpkt"];
2094--4314[label="1;1pkt 1fpkt"];
2230--3065[label="1;1pkt 1fpkt"];
2230--4330[label="1;1pkt 1fpkt"];
2230--5060[label="1;1pkt 1fpkt"];
2740--4157[label="1;1pkt 1fpkt"];
2740--4947[label="1;1pkt 1fpkt"];
3023--4314[label="1;1pkt 1fpkt"];
3065--4330[label="1;1pkt 1fpkt"];
3065--5060[label="1;1pkt 1fpkt"];
3408--4533[label="1;1pkt 1fpkt"];
3408--5176[label="1;1pkt 1fpkt"];
4157--4947[label="1;1pkt 1fpkt"];
4330--5060[label="1;1pkt 1fpkt"];
4533--5176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.208.223" src_port="4662"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
730[label="217.249.172.20;d;281pkt 281fpkt", shape=diamond, color=yellow];
731[label="132.176.43.230;s;241pkt 241fpkt", shape=diamond, color=yellow];
2238[label="217.249.172.20;d;152pkt 152fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.43.230:80, 217.249.172.20:*}[96.5636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4807%)&lt;BR/&gt; 25: (0.519288%)&lt;BR/&gt; 60704: (0.222552%)&lt;BR/&gt; 60685: (0.222552%)&lt;BR/&gt; 60607: (0.222552%)&gt;];
}
730--731[label="0.958506;231pkt 231fpkt"];
730--2238[label="1;152pkt 152fpkt"];
731--2238[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_ip="217.249.172.20" src_ip="132.176.43.230" src_port="80"/>
    </slice>
    <from sec="1128920460" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
854[label="161.253.219.20;s;156pkt 156fpkt", shape=diamond, color=yellow];
2261[label="161.253.219.20;s;145pkt 145fpkt", shape=hexagon, color=black];
2821[label="161.253.219.20;161pkt 161fpkt", shape=pentagon, color=darkviolet];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.219.20:25, *:*}[96.8944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4422: (0.649351%)&lt;BR/&gt; 3729: (0.649351%)&lt;BR/&gt; 64191: (0.324675%)&lt;BR/&gt; 62861: (0.324675%)&gt;];
}
854--2261[label="1;145pkt 145fpkt"];
854--2821[label="1;156pkt 156fpkt"];
2261--2821[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="161.253.219.20" src_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1105[label="132.176.131.106;s;221pkt 221fpkt", shape=diamond, color=yellow];
2267[label="132.176.131.106;s;202pkt 202fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.131.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1105--1260[label="0.00452489;1pkt 1fpkt"];
1105--1265[label="0.00452489;1pkt 1fpkt"];
1105--1266[label="0.00452489;1pkt 1fpkt"];
1105--1415[label="0.00452489;1pkt 1fpkt"];
1105--1417[label="0.00452489;1pkt 1fpkt"];
1105--1644[label="0.00473934;1pkt 1fpkt"];
1105--1647[label="0.00452489;1pkt 1fpkt"];
1105--1671[label="0.00452489;1pkt 1fpkt"];
1105--1817[label="0.0046729;1pkt 1fpkt"];
1105--1825[label="0.00490196;1pkt 1fpkt"];
1105--1826[label="0.0047619;1pkt 1fpkt"];
1105--1834[label="0.00492611;1pkt 1fpkt"];
1105--2267[label="1;202pkt 202fpkt"];
1105--2463[label="0.0049505;1pkt 1fpkt"];
1105--2531[label="0.00452489;1pkt 1fpkt"];
2267--2463[label="0.0049505;1pkt 1fpkt"];
2267--2531[label="0.0049505;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.131.106"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
899[label="128.165.92.65;d;101pkt 101fpkt", shape=diamond, color=yellow];
1590[label="219.67.97.232;s;96pkt 96fpkt", shape=diamond, color=yellow];
2269[label="128.165.92.65;d;101pkt 101fpkt", shape=hexagon, color=black];
4012[label="219.67.97.232;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.67.97.232:*, 128.165.92.65:80}[67.7966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0964%)&lt;BR/&gt; 20040: (1.26904%)&lt;BR/&gt; 110: (0.634518%)&lt;BR/&gt; 30004: (0.507614%)&lt;BR/&gt; 30003: (0.507614%)&gt;];
}
899--1590[label="0.833333;80pkt 80fpkt"];
899--2269[label="1;101pkt 101fpkt"];
899--2625[label="0.019802;2pkt 2fpkt"];
899--4012[label="0.822917;79pkt 79fpkt"];
1590--2269[label="0.833333;80pkt 80fpkt"];
1590--2625[label="0.0833333;8pkt 8fpkt"];
1590--4012[label="0.989583;95pkt 95fpkt"];
2269--2625[label="0.019802;2pkt 2fpkt"];
2269--4012[label="0.822917;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.92.65" dst_port="80" src_ip="219.67.97.232"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
232[label="207.107.44.228;s;538pkt 538fpkt", shape=diamond, color=yellow];
345[label="86.169.37.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
375[label="132.176.75.178;s;58pkt 58fpkt", shape=diamond, color=yellow];
397[label="81.94.123.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
438[label="214.170.246.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
588[label="132.176.160.223;s;1147pkt 1147fpkt", shape=diamond, color=yellow];
702[label="86.169.36.100;d;3pkt 3fpkt", shape=diamond, color=yellow];
756[label="81.94.123.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
911[label="201.39.109.158;d;71pkt 71fpkt", shape=diamond, color=yellow];
960[label="146.130.249.67;s;48pkt 48fpkt", shape=diamond, color=yellow];
975[label="206.85.27.113;d;12pkt 12fpkt", shape=diamond, color=yellow];
999[label="86.169.238.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1169[label="132.176.93.35;s;59pkt 59fpkt", shape=diamond, color=yellow];
1231[label="221.186.146.37;d;22pkt 22fpkt", shape=diamond, color=yellow];
1400[label="215.54.187.44;d;38pkt 38fpkt", shape=diamond, color=yellow];
1863[label="3.208.241.8;d;98pkt 98fpkt", shape=diamond, color=yellow];
1905[label="82.9.86.163;d;10pkt 10fpkt", shape=diamond, color=yellow];
1927[label="203.96.230.147;d;3pkt 3fpkt", shape=diamond, color=yellow];
2011[label="216.248.70.254;d;22pkt 22fpkt", shape=diamond, color=yellow];
2096[label="216.233.65.167;d;63pkt 63fpkt", shape=diamond, color=yellow];
2122[label="207.107.44.228;s;167pkt 167fpkt", shape=hexagon, color=black];
2270[label="201.39.109.158;d;61pkt 61fpkt", shape=hexagon, color=black];
2280[label="221.186.146.37;d;22pkt 22fpkt", shape=hexagon, color=black];
3105[label="146.130.249.67;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3413[label="161.253.32.115;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3480[label="128.165.74.128;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3756[label="132.176.75.178;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3999[label="207.107.44.228;576pkt 576fpkt", shape=pentagon, color=darkviolet];
4538[label="161.253.32.115;36pkt 36fpkt", shape=invtriangle, color=brown];
4869[label="207.107.44.228;576pkt 576fpkt", shape=invtriangle, color=brown];
5391[label="207.107.44.228;576pkt 576fpkt", shape=invhouse, color=bisque];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.160.223:*, *:80}[51.8812%]&lt;BR/&gt;{207.107.44.228:*, *:*}[28.5149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.2623%)&lt;BR/&gt; 53: (10.8775%)&lt;BR/&gt; 6346: (4.45612%)&lt;BR/&gt; 0: (1.71389%)&lt;BR/&gt; 123: (0.834095%)&gt;];
}
232--438[label="1;1pkt 1fpkt"];
232--911[label="0.0985915;7pkt 7fpkt"];
232--1128[label="0.0121212;2pkt 2fpkt"];
232--1345[label="0.00625;1pkt 1fpkt"];
232--1508[label="0.0169492;2pkt 2fpkt"];
232--1521[label="0.00740741;1pkt 1fpkt"];
232--1524[label="0.0895522;6pkt 6fpkt"];
232--1531[label="0.0280374;3pkt 3fpkt"];
232--1655[label="0.0134228;2pkt 2fpkt"];
232--1709[label="0.025641;2pkt 2fpkt"];
232--1818[label="0.0833333;6pkt 6fpkt"];
232--1863[label="0.0714286;7pkt 7fpkt"];
232--1873[label="0.00769231;1pkt 1fpkt"];
232--2010[label="0.01;1pkt 1fpkt"];
232--2011[label="0.0454545;1pkt 1fpkt"];
232--2012[label="0.0138889;1pkt 1fpkt"];
232--2122[label="1;167pkt 167fpkt"];
232--2270[label="0.0819672;5pkt 5fpkt"];
232--2491[label="0.00684932;1pkt 1fpkt"];
232--2558[label="0.025641;2pkt 2fpkt"];
232--2625[label="0.0130112;7pkt 7fpkt"];
232--2647[label="0.0446097;24pkt 24fpkt"];
232--3999[label="1;538pkt 538fpkt"];
232--4869[label="1;538pkt 538fpkt"];
232--5391[label="1;538pkt 538fpkt"];
345--588[label="1;2pkt 2fpkt"];
375--397[label="1;1pkt 1fpkt"];
375--756[label="1;1pkt 1fpkt"];
375--1863[label="0.534483;31pkt 31fpkt"];
375--3756[label="1;58pkt 58fpkt"];
397--3756[label="1;1pkt 1fpkt"];
438--2122[label="1;1pkt 1fpkt"];
438--3999[label="1;1pkt 1fpkt"];
438--4869[label="1;1pkt 1fpkt"];
438--5391[label="1;1pkt 1fpkt"];
588--702[label="0.666667;2pkt 2fpkt"];
588--911[label="0.028169;2pkt 2fpkt"];
588--929[label="0.0169492;3pkt 3fpkt"];
588--975[label="1;12pkt 12fpkt"];
588--1144[label="0.0677966;8pkt 8fpkt"];
588--1231[label="1;22pkt 22fpkt"];
588--1400[label="1;38pkt 38fpkt"];
588--1493[label="0.0307692;2pkt 2fpkt"];
588--1535[label="0.405405;15pkt 15fpkt"];
588--1575[label="0.0163934;1pkt 1fpkt"];
588--1863[label="0.0714286;7pkt 7fpkt"];
588--1905[label="0.8;8pkt 8fpkt"];
588--1927[label="1;3pkt 3fpkt"];
588--2096[label="1;63pkt 63fpkt"];
588--2270[label="0.0327869;2pkt 2fpkt"];
588--2280[label="1;22pkt 22fpkt"];
588--2625[label="0.0549259;63pkt 63fpkt"];
588--2629[label="0.00261552;3pkt 3fpkt"];
702--960[label="0.333333;1pkt 1fpkt"];
702--3105[label="0.333333;1pkt 1fpkt"];
756--3756[label="1;1pkt 1fpkt"];
911--1130[label="0.0140845;1pkt 1fpkt"];
911--1169[label="1;59pkt 59fpkt"];
911--2270[label="1;61pkt 61fpkt"];
911--2625[label="0.0704225;5pkt 5fpkt"];
911--3413[label="0.0277778;1pkt 1fpkt"];
911--3999[label="0.0985915;7pkt 7fpkt"];
911--4538[label="0.0277778;1pkt 1fpkt"];
911--4869[label="0.0985915;7pkt 7fpkt"];
911--5391[label="0.0985915;7pkt 7fpkt"];
960--999[label="1;1pkt 1fpkt"];
960--1905[label="0.2;2pkt 2fpkt"];
960--2625[label="0.0416667;2pkt 2fpkt"];
960--3105[label="1;48pkt 48fpkt"];
999--3105[label="1;1pkt 1fpkt"];
1169--2270[label="0.864407;51pkt 51fpkt"];
1169--2625[label="0.0169492;1pkt 1fpkt"];
1231--2280[label="1;22pkt 22fpkt"];
1400--2625[label="0.184211;7pkt 7fpkt"];
1863--2118[label="0.0208333;1pkt 1fpkt"];
1863--2120[label="0.0204082;2pkt 2fpkt"];
1863--2122[label="0.0102041;1pkt 1fpkt"];
1863--2188[label="0.0816327;8pkt 8fpkt"];
1863--2246[label="0.0102041;1pkt 1fpkt"];
1863--2352[label="0.0136986;1pkt 1fpkt"];
1863--2384[label="0.0294118;1pkt 1fpkt"];
1863--2599[label="0.0408163;4pkt 4fpkt"];
1863--2625[label="0.112245;11pkt 11fpkt"];
1863--2957[label="0.0306122;3pkt 3fpkt"];
1863--3233[label="0.0102041;1pkt 1fpkt"];
1863--3480[label="0.0952381;2pkt 2fpkt"];
1863--3502[label="0.0102041;1pkt 1fpkt"];
1863--3662[label="0.0102041;1pkt 1fpkt"];
1863--3722[label="0.0816327;8pkt 8fpkt"];
1863--3729[label="0.0816327;8pkt 8fpkt"];
1863--3756[label="0.525424;31pkt 31fpkt"];
1863--3783[label="0.0102041;1pkt 1fpkt"];
1863--3999[label="0.0714286;7pkt 7fpkt"];
1863--4677[label="0.0102041;1pkt 1fpkt"];
1863--4713[label="0.0816327;8pkt 8fpkt"];
1863--4869[label="0.0714286;7pkt 7fpkt"];
1863--5022[label="0.0306122;3pkt 3fpkt"];
1863--5311[label="0.0102041;1pkt 1fpkt"];
1863--5391[label="0.0714286;7pkt 7fpkt"];
1905--2625[label="0.2;2pkt 2fpkt"];
1905--3105[label="0.2;2pkt 2fpkt"];
1927--2625[label="0.333333;1pkt 1fpkt"];
1927--2629[label="0.333333;1pkt 1fpkt"];
2011--2122[label="0.0454545;1pkt 1fpkt"];
2011--3999[label="0.0454545;1pkt 1fpkt"];
2011--4869[label="0.0454545;1pkt 1fpkt"];
2011--5391[label="0.0454545;1pkt 1fpkt"];
2122--2491[label="0.00684932;1pkt 1fpkt"];
2122--3999[label="1;167pkt 167fpkt"];
2122--4869[label="1;167pkt 167fpkt"];
2122--5391[label="1;167pkt 167fpkt"];
2270--2625[label="0.0819672;5pkt 5fpkt"];
2270--3413[label="0.0277778;1pkt 1fpkt"];
2270--3999[label="0.0819672;5pkt 5fpkt"];
2270--4538[label="0.0277778;1pkt 1fpkt"];
2270--4869[label="0.0819672;5pkt 5fpkt"];
2270--5391[label="0.0819672;5pkt 5fpkt"];
3413--4538[label="1;36pkt 36fpkt"];
3999--4869[label="1;576pkt 576fpkt"];
3999--5391[label="1;576pkt 576fpkt"];
4869--5391[label="1;576pkt 576fpkt"];
</description>
    <slice>
      <filter src_ip="207.107.44.228"/>
      <filter dst_port="80" src_ip="132.176.160.223"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1407[label="222.34.248.222;s;3pkt 3fpkt", shape=diamond, color=yellow];
2324[label="222.34.248.222;s;3pkt 3fpkt", shape=hexagon, color=black];
3972[label="222.34.248.222;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4847[label="222.34.248.222;3pkt 3fpkt", shape=invtriangle, color=brown];
5375[label="222.34.248.222;3pkt 3fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.34.248.222:80, 128.165.181.87:3615}[33.3333%]&lt;BR/&gt;{222.34.248.222:80, 128.165.181.87:3616}[33.3333%]&lt;BR/&gt;{222.34.248.222:80, 128.165.181.87:3622}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3622: (16.6667%)&lt;BR/&gt; 3616: (16.6667%)&lt;BR/&gt; 3615: (16.6667%)&gt;];
}
1407--2324[label="1;3pkt 3fpkt"];
1407--3972[label="1;3pkt 3fpkt"];
1407--4847[label="1;3pkt 3fpkt"];
1407--5375[label="1;3pkt 3fpkt"];
2324--3972[label="1;3pkt 3fpkt"];
2324--4847[label="1;3pkt 3fpkt"];
2324--5375[label="1;3pkt 3fpkt"];
3972--4847[label="1;3pkt 3fpkt"];
3972--5375[label="1;3pkt 3fpkt"];
4847--5375[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.181.87" dst_port="3622" src_ip="222.34.248.222" src_port="80"/>
      <filter dst_ip="128.165.181.87" dst_port="3616" src_ip="222.34.248.222" src_port="80"/>
      <filter dst_ip="128.165.181.87" dst_port="3615" src_ip="222.34.248.222" src_port="80"/>
    </slice>
    <from sec="1128920818" usec="0"/>
    <to sec="1128920856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
474[label="132.177.96.146;s;179pkt 179fpkt", shape=diamond, color=yellow];
2332[label="132.177.96.146;s;131pkt 131fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.96.146:25, *:*}[88.8268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4063: (0.483871%)&lt;BR/&gt; 62495: (0.322581%)&lt;BR/&gt; 59271: (0.322581%)&lt;BR/&gt; 55780: (0.322581%)&gt;];
}
474--2332[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.96.146" src_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
1431[label="206.125.219.183;s;135pkt 135fpkt", shape=diamond, color=yellow];
2342[label="206.125.219.183;s;118pkt 118fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.219.183:0, *:0}[98.5185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.419%)&lt;BR/&gt; 135: (0.790514%)&lt;BR/&gt; 4298: (0.395257%)&lt;BR/&gt; 2052: (0.395257%)&gt;];
}
1431--1644[label="0.00740741;1pkt 1fpkt"];
1431--1647[label="0.00740741;1pkt 1fpkt"];
1431--1671[label="0.00740741;1pkt 1fpkt"];
1431--1768[label="0.00740741;1pkt 1fpkt"];
1431--1826[label="0.00740741;1pkt 1fpkt"];
1431--2342[label="1;118pkt 118fpkt"];
1431--2463[label="0.00740741;1pkt 1fpkt"];
1431--2531[label="0.00740741;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.219.183"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
490[label="206.125.222.157;d;286pkt 286fpkt", shape=diamond, color=yellow];
1275[label="3.139.14.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
1420[label="87.70.229.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1478[label="84.177.108.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="3.132.219.173;s;2pkt 2fpkt", shape=diamond, color=yellow];
1832[label="212.148.102.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
2153[label="206.125.222.157;d;71pkt 71fpkt", shape=hexagon, color=black];
2350[label="3.139.14.41;s;1pkt 1fpkt", shape=hexagon, color=black];
2412[label="84.177.108.0;s;1pkt 1fpkt", shape=hexagon, color=black];
3736[label="3.132.219.173;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3805[label="212.148.102.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 206.125.222.157:49312}[99.3007%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49312: (49.7283%)&lt;BR/&gt; 6348: (1.7663%)&lt;BR/&gt; 6346: (1.7663%)&lt;BR/&gt; 52351: (0.543478%)&lt;BR/&gt; 4056: (0.543478%)&gt;];
}
490--1275[label="1;1pkt 1fpkt"];
490--1420[label="1;1pkt 1fpkt"];
490--1478[label="1;1pkt 1fpkt"];
490--1490[label="1;2pkt 2fpkt"];
490--1832[label="1;1pkt 1fpkt"];
490--2153[label="1;71pkt 71fpkt"];
490--2350[label="1;1pkt 1fpkt"];
490--2412[label="1;1pkt 1fpkt"];
490--2614[label="0.0034965;1pkt 1fpkt"];
490--2632[label="0.0034965;1pkt 1fpkt"];
490--2648[label="0.0034965;1pkt 1fpkt"];
490--3736[label="1;2pkt 2fpkt"];
490--3805[label="1;1pkt 1fpkt"];
1275--2153[label="1;1pkt 1fpkt"];
1275--2350[label="1;1pkt 1fpkt"];
1420--2153[label="1;1pkt 1fpkt"];
1478--2153[label="1;1pkt 1fpkt"];
1478--2412[label="1;1pkt 1fpkt"];
1490--2153[label="0.5;1pkt 1fpkt"];
1490--3736[label="1;2pkt 2fpkt"];
1832--2153[label="1;1pkt 1fpkt"];
1832--3805[label="1;1pkt 1fpkt"];
2153--2350[label="1;1pkt 1fpkt"];
2153--2412[label="1;1pkt 1fpkt"];
2153--3736[label="0.5;1pkt 1fpkt"];
2153--3805[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.222.157" dst_port="49312"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
713[label="161.253.32.235;s;53pkt 53fpkt", shape=diamond, color=yellow];
966[label="202.0.143.83;d;46pkt 46fpkt", shape=diamond, color=yellow];
2385[label="202.0.143.83;d;39pkt 39fpkt", shape=hexagon, color=black];
2431[label="161.253.32.235;s;45pkt 45fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.32.235:*, 202.0.143.83:80}[86.7925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3191: (1.0929%)&lt;BR/&gt; 3189: (1.0929%)&lt;BR/&gt; 3187: (1.0929%)&lt;BR/&gt; 3185: (1.0929%)&gt;];
}
713--966[label="1;46pkt 46fpkt"];
713--2385[label="1;39pkt 39fpkt"];
713--2431[label="1;45pkt 45fpkt"];
713--2625[label="0.0754717;4pkt 4fpkt"];
713--2629[label="0.0377358;2pkt 2fpkt"];
966--2385[label="1;39pkt 39fpkt"];
966--2431[label="0.866667;39pkt 39fpkt"];
966--2625[label="0.0652174;3pkt 3fpkt"];
966--2629[label="0.0217391;1pkt 1fpkt"];
2385--2431[label="1;39pkt 39fpkt"];
2385--2625[label="0.0769231;3pkt 3fpkt"];
2431--2625[label="0.0888889;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="202.0.143.83" dst_port="80" src_ip="161.253.32.235"/>
    </slice>
    <from sec="1128920423" usec="0"/>
    <to sec="1128921220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
985[label="132.176.182.189;d;87pkt 87fpkt", shape=diamond, color=yellow];
2387[label="132.176.182.189;d;87pkt 87fpkt", shape=hexagon, color=black];
3963[label="219.168.105.221;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.168.105.221:80, 132.176.182.189:*}[80.2198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8048%)&lt;BR/&gt; 85: (1.19522%)&lt;BR/&gt; 37352: (0.59761%)&lt;BR/&gt; 37351: (0.59761%)&lt;BR/&gt; 37350: (0.59761%)&gt;];
}
985--2387[label="1;87pkt 87fpkt"];
985--3963[label="0.948052;73pkt 73fpkt"];
2387--3963[label="0.948052;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.182.189" src_ip="219.168.105.221" src_port="80"/>
    </slice>
    <from sec="1128920437" usec="0"/>
    <to sec="1128921227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1595[label="161.253.245.166;s;21pkt 21fpkt", shape=diamond, color=yellow];
1619[label="211.71.47.84;d;4pkt 4fpkt", shape=diamond, color=yellow];
2389[label="161.253.245.166;s;21pkt 21fpkt", shape=hexagon, color=black];
2394[label="211.71.47.84;d;4pkt 4fpkt", shape=hexagon, color=black];
3694[label="161.253.245.166;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4696[label="161.253.245.166;33pkt 33fpkt", shape=invtriangle, color=brown];
5283[label="161.253.245.166;33pkt 33fpkt", shape=invhouse, color=bisque];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.245.166:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1822: (2.34899%)&lt;BR/&gt; 1821: (2.34899%)&lt;BR/&gt; 1806: (2.34899%)&lt;BR/&gt; 1774: (2.34899%)&gt;];
}
1595--1619[label="1;4pkt 4fpkt"];
1595--2389[label="1;21pkt 21fpkt"];
1595--2394[label="1;4pkt 4fpkt"];
1595--2625[label="0.047619;1pkt 1fpkt"];
1595--3694[label="1;21pkt 21fpkt"];
1595--4696[label="1;21pkt 21fpkt"];
1595--5283[label="1;21pkt 21fpkt"];
1619--2389[label="1;4pkt 4fpkt"];
1619--2394[label="1;4pkt 4fpkt"];
1619--3694[label="1;4pkt 4fpkt"];
1619--4696[label="1;4pkt 4fpkt"];
1619--5283[label="1;4pkt 4fpkt"];
2389--2394[label="1;4pkt 4fpkt"];
2389--2625[label="0.047619;1pkt 1fpkt"];
2389--3694[label="1;21pkt 21fpkt"];
2389--4696[label="1;21pkt 21fpkt"];
2389--5283[label="1;21pkt 21fpkt"];
2394--3694[label="1;4pkt 4fpkt"];
2394--4696[label="1;4pkt 4fpkt"];
2394--5283[label="1;4pkt 4fpkt"];
3694--4696[label="1;33pkt 33fpkt"];
3694--5283[label="1;33pkt 33fpkt"];
4696--5283[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.253.245.166"/>
    </slice>
    <from sec="1128920464" usec="0"/>
    <to sec="1128921290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
502[label="146.250.46.60;d;247pkt 247fpkt", shape=diamond, color=yellow];
2402[label="146.250.46.60;d;242pkt 242fpkt", shape=hexagon, color=black];
3079[label="45.73.126.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5100, 146.250.46.60:5100}[39.2713%]&lt;BR/&gt;{*:7884, 146.250.46.60:*}[22.6721%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5100: (60.7724%)&lt;BR/&gt; 7884: (11.687%)&lt;BR/&gt; 7890: (6.91057%)&lt;BR/&gt; 0: (1.62602%)&lt;BR/&gt; 1062: (0.609756%)&gt;];
}
502--2402[label="1;242pkt 242fpkt"];
502--3079[label="1;3pkt 3fpkt"];
2402--3079[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.46.60" src_port="7884"/>
      <filter dst_ip="146.250.46.60" dst_port="5100" src_port="5100"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
435[label="193.131.106.174;d;11pkt 11fpkt", shape=diamond, color=yellow];
1410[label="166.18.172.217;s;4pkt 4fpkt", shape=diamond, color=yellow];
1648[label="166.18.249.127;s;2pkt 2fpkt", shape=diamond, color=yellow];
1661[label="166.18.159.79;s;2pkt 2fpkt", shape=diamond, color=yellow];
1833[label="166.18.158.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
1891[label="166.18.150.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
2409[label="166.18.159.79;s;2pkt 2fpkt", shape=hexagon, color=black];
2952[label="166.18.218.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.131.106.174:6665}[23.5294%]&lt;BR/&gt;{*:*, 193.131.106.174:6667}[23.5294%]&lt;BR/&gt;{166.18.172.217:*, *:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20%)&lt;BR/&gt; 6665: (12%)&lt;BR/&gt; 4844: (6%)&lt;BR/&gt; 6664: (4%)&lt;BR/&gt; 5050: (4%)&gt;];
}
435--437[label="0.181818;2pkt 2fpkt"];
435--1410[label="0.25;1pkt 1fpkt"];
435--1648[label="0.5;1pkt 1fpkt"];
435--1661[label="0.5;1pkt 1fpkt"];
435--1833[label="1;1pkt 1fpkt"];
435--1891[label="1;1pkt 1fpkt"];
435--2409[label="0.5;1pkt 1fpkt"];
435--2952[label="0.5;1pkt 1fpkt"];
435--3907[label="0.181818;2pkt 2fpkt"];
435--4810[label="0.181818;2pkt 2fpkt"];
435--5357[label="0.181818;2pkt 2fpkt"];
1661--2409[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="166.18.172.217"/>
      <filter dst_ip="193.131.106.174" dst_port="6667"/>
      <filter dst_ip="193.131.106.174" dst_port="6665"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1697[label="166.18.129.209;s;84pkt 84fpkt", shape=diamond, color=yellow];
2419[label="166.18.129.209;s;68pkt 68fpkt", shape=hexagon, color=black];
3913[label="166.18.129.209;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4816[label="166.18.129.209;94pkt 94fpkt", shape=invtriangle, color=brown];
5359[label="166.18.129.209;94pkt 94fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.129.209:7348, *:*}[39.3617%]&lt;BR/&gt;{166.18.129.209:*, 221.133.131.12:*}[23.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7348: (19.3548%)&lt;BR/&gt; 49152: (7.94931%)&lt;BR/&gt; 6881: (6.45161%)&lt;BR/&gt; 12692: (5.87558%)&lt;BR/&gt; 16892: (4.95392%)&gt;];
}
1697--2419[label="1;68pkt 68fpkt"];
1697--3913[label="1;84pkt 84fpkt"];
1697--4816[label="1;84pkt 84fpkt"];
1697--5359[label="1;84pkt 84fpkt"];
2419--3913[label="1;68pkt 68fpkt"];
2419--4816[label="1;68pkt 68fpkt"];
2419--5359[label="1;68pkt 68fpkt"];
3913--4816[label="1;94pkt 94fpkt"];
3913--5359[label="1;94pkt 94fpkt"];
4816--5359[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="221.133.131.12" src_ip="166.18.129.209"/>
      <filter src_ip="166.18.129.209" src_port="7348"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
1707[label="220.138.161.118;s;223pkt 223fpkt", shape=diamond, color=yellow];
2423[label="220.138.161.118;s;220pkt 220fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.138.161.118:*, *:445}[99.5516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (49.7743%)&lt;BR/&gt; 4041: (0.451467%)&lt;BR/&gt; 3982: (0.451467%)&lt;BR/&gt; 3862: (0.451467%)&lt;BR/&gt; 3767: (0.451467%)&gt;];
}
1707--2423[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="220.138.161.118"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
1174[label="132.176.184.142;s;111pkt 111fpkt", shape=diamond, color=yellow];
2425[label="132.176.184.142;s;85pkt 85fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.184.142:25, *:*}[90.991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62733: (0.510204%)&lt;BR/&gt; 60933: (0.510204%)&lt;BR/&gt; 60811: (0.510204%)&lt;BR/&gt; 60787: (0.510204%)&gt;];
}
1174--2425[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.184.142" src_port="25"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
356[label="128.34.216.229;s;22pkt 22fpkt", shape=diamond, color=yellow];
707[label="204.122.218.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
1177[label="205.42.58.25;d;3pkt 3fpkt", shape=diamond, color=yellow];
1894[label="205.101.75.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
2426[label="205.42.58.25;d;3pkt 3fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.34.216.229:80, *:*}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3333%)&lt;BR/&gt; 1741: (5%)&lt;BR/&gt; 1740: (5%)&lt;BR/&gt; 1739: (5%)&lt;BR/&gt; 3664: (3.33333%)&gt;];
}
356--707[label="1;1pkt 1fpkt"];
356--1177[label="1;3pkt 3fpkt"];
356--1894[label="1;1pkt 1fpkt"];
356--2426[label="1;3pkt 3fpkt"];
1177--2426[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="128.34.216.229" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
749[label="82.209.103.235;d;2pkt 2fpkt", shape=diamond, color=yellow];
987[label="128.165.226.190;s;304pkt 304fpkt", shape=diamond, color=yellow];
1214[label="54.5.150.4;d;5pkt 5fpkt", shape=diamond, color=yellow];
1604[label="201.59.98.213;d;8pkt 8fpkt", shape=diamond, color=yellow];
1607[label="216.48.1.251;d;74pkt 74fpkt", shape=diamond, color=yellow];
1616[label="82.143.161.89;d;2pkt 2fpkt", shape=diamond, color=yellow];
1802[label="82.110.13.174;d;2pkt 2fpkt", shape=diamond, color=yellow];
1810[label="80.22.110.3;d;16pkt 16fpkt", shape=diamond, color=yellow];
1970[label="82.110.13.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
2098[label="85.91.163.50;d;4pkt 4fpkt", shape=diamond, color=yellow];
2106[label="201.80.182.22;d;5pkt 5fpkt", shape=diamond, color=yellow];
2185[label="82.209.103.235;d;3pkt 3fpkt", shape=hexagon, color=black];
2439[label="82.143.161.89;d;2pkt 2fpkt", shape=hexagon, color=black];
2520[label="80.22.110.3;d;16pkt 16fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.226.190:*, 216.48.1.251:80}[24.3421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5506%)&lt;BR/&gt; 63851: (0.337079%)&lt;BR/&gt; 63850: (0.337079%)&lt;BR/&gt; 63837: (0.337079%)&lt;BR/&gt; 63836: (0.337079%)&gt;];
}
749--987[label="1;2pkt 2fpkt"];
749--2185[label="1;2pkt 2fpkt"];
987--1214[label="1;5pkt 5fpkt"];
987--1604[label="1;8pkt 8fpkt"];
987--1607[label="1;74pkt 74fpkt"];
987--1616[label="1;2pkt 2fpkt"];
987--1802[label="1;2pkt 2fpkt"];
987--1810[label="1;16pkt 16fpkt"];
987--1970[label="1;2pkt 2fpkt"];
987--2098[label="1;4pkt 4fpkt"];
987--2106[label="1;5pkt 5fpkt"];
987--2185[label="1;3pkt 3fpkt"];
987--2439[label="1;2pkt 2fpkt"];
987--2520[label="1;16pkt 16fpkt"];
987--2625[label="0.131579;40pkt 40fpkt"];
987--2629[label="0.00657895;2pkt 2fpkt"];
1607--2625[label="0.189189;14pkt 14fpkt"];
1616--2439[label="1;2pkt 2fpkt"];
1810--2520[label="1;16pkt 16fpkt"];
2098--2629[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.48.1.251" dst_port="80" src_ip="128.165.226.190"/>
    </slice>
    <from sec="1128920506" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
462[label="218.68.175.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
463[label="132.177.10.105;s;304pkt 304fpkt", shape=diamond, color=yellow];
599[label="89.180.169.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
684[label="86.224.215.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
1288[label="82.37.177.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
1576[label="219.196.167.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
2468[label="89.180.169.44;d;1pkt 1fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.10.105:15235, *:*}[67.4342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15235: (33.3871%)&lt;BR/&gt; 16881: (2.25806%)&lt;BR/&gt; 9505: (2.25806%)&lt;BR/&gt; 65279: (0.806452%)&lt;BR/&gt; 25295: (0.645161%)&gt;];
}
462--463[label="1;1pkt 1fpkt"];
463--599[label="1;1pkt 1fpkt"];
463--684[label="1;1pkt 1fpkt"];
463--1288[label="1;1pkt 1fpkt"];
463--1576[label="1;1pkt 1fpkt"];
463--2468[label="1;1pkt 1fpkt"];
599--2468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.10.105" src_port="15235"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
922[label="161.253.173.192;s;74pkt 74fpkt", shape=diamond, color=yellow];
2487[label="161.253.173.192;s;74pkt 74fpkt", shape=hexagon, color=black];
3812[label="161.253.173.192;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.173.192:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3189: (0.607287%)&lt;BR/&gt; 3182: (0.607287%)&lt;BR/&gt; 3181: (0.607287%)&lt;BR/&gt; 3180: (0.607287%)&gt;];
}
922--2487[label="1;74pkt 74fpkt"];
922--2625[label="0.0405405;3pkt 3fpkt"];
922--3812[label="0.986486;73pkt 73fpkt"];
2487--2625[label="0.0405405;3pkt 3fpkt"];
2487--3812[label="0.986486;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.253.173.192"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
357[label="128.165.92.179;s;431pkt 431fpkt", shape=diamond, color=yellow];
1175[label="128.165.92.70;s;49pkt 49fpkt", shape=diamond, color=yellow];
1342[label="132.176.34.82;s;85pkt 85fpkt", shape=diamond, color=yellow];
1920[label="81.201.193.188;d;7pkt 7fpkt", shape=diamond, color=yellow];
2130[label="128.165.92.179;s;200pkt 200fpkt", shape=hexagon, color=black];
2488[label="132.176.34.82;s;83pkt 83fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.92.179:*, *:25}[43.0088%]&lt;BR/&gt;{128.165.92.179:25, *:*}[32.0354%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.4912%)&lt;BR/&gt; 113: (3.39181%)&lt;BR/&gt; 2370: (0.350877%)&lt;BR/&gt; 42265: (0.233918%)&lt;BR/&gt; 2427: (0.233918%)&gt;];
}
357--679[label="0.0204082;1pkt 1fpkt"];
357--1920[label="0.142857;1pkt 1fpkt"];
357--2130[label="1;200pkt 200fpkt"];
1175--1920[label="0.571429;4pkt 4fpkt"];
1342--1492[label="0.1;1pkt 1fpkt"];
1342--1920[label="0.285714;2pkt 2fpkt"];
1342--2488[label="1;83pkt 83fpkt"];
1920--2130[label="0.142857;1pkt 1fpkt"];
1920--2488[label="0.285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.92.179" src_port="25"/>
      <filter dst_port="25" src_ip="128.165.92.179"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
3719[label="207.107.32.171;62pkt 62fpkt", shape=pentagon, color=darkviolet];
4707[label="207.107.32.171;62pkt 62fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.32.171:53, *:*}[48.3871%]&lt;BR/&gt;{207.107.32.171:51631, *:53}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.7419%)&lt;BR/&gt; 51631: (16.129%)&lt;BR/&gt; 25: (4.83871%)&lt;BR/&gt; 0: (4.83871%)&lt;BR/&gt; 80: (2.41935%)&gt;];
}
3719--4707[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_ip="207.107.32.171" src_port="53"/>
      <filter dst_port="53" src_ip="207.107.32.171" src_port="51631"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
1713[label="161.253.155.33;s;293pkt 293fpkt", shape=diamond, color=yellow];
2497[label="161.253.155.33;s;264pkt 264fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.155.33:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1713--1817[label="0.0046729;1pkt 1fpkt"];
1713--1825[label="0.00490196;1pkt 1fpkt"];
1713--1826[label="0.0047619;1pkt 1fpkt"];
1713--1834[label="0.00492611;1pkt 1fpkt"];
1713--2463[label="0.0049505;1pkt 1fpkt"];
1713--2497[label="1;264pkt 264fpkt"];
1713--2531[label="0.00341297;1pkt 1fpkt"];
2497--2531[label="0.00378788;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="161.253.155.33"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
337[label="128.165.92.35;d;41pkt 41fpkt", shape=diamond, color=yellow];
373[label="206.183.124.245;s;3pkt 3fpkt", shape=diamond, color=yellow];
412[label="128.165.92.34;d;119pkt 119fpkt", shape=diamond, color=yellow];
1209[label="206.173.212.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
2225[label="206.183.124.245;s;3pkt 3fpkt", shape=hexagon, color=black];
2509[label="206.173.212.163;s;2pkt 2fpkt", shape=hexagon, color=black];
2902[label="219.21.205.34;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2981[label="219.66.196.48;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3004[label="219.48.202.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3022[label="206.158.16.55;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3200[label="222.62.239.80;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3212[label="221.46.230.81;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3355[label="206.96.6.105;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3438[label="215.225.40.120;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3448[label="222.61.111.121;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3679[label="206.173.212.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4020[label="213.214.49.234;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4077[label="218.132.194.245;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4303[label="219.48.202.52;2pkt 2fpkt", shape=invtriangle, color=brown];
4313[label="206.158.16.55;4pkt 4fpkt", shape=invtriangle, color=brown];
4412[label="222.62.239.80;7pkt 7fpkt", shape=invtriangle, color=brown];
4499[label="206.96.6.105;22pkt 22fpkt", shape=invtriangle, color=brown];
4550[label="215.225.40.120;3pkt 3fpkt", shape=invtriangle, color=brown];
4557[label="222.61.111.121;7pkt 7fpkt", shape=invtriangle, color=brown];
4880[label="213.214.49.234;3pkt 3fpkt", shape=invtriangle, color=brown];
5040[label="219.48.202.52;1pkt 1fpkt", shape=invhouse, color=bisque];
5047[label="206.158.16.55;4pkt 4fpkt", shape=invhouse, color=bisque];
5399[label="213.214.49.234;3pkt 3fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.165.92.34:80}[53.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8304%)&lt;BR/&gt; 1039: (0.877193%)&lt;BR/&gt; 53: (0.877193%)&lt;BR/&gt; 60239: (0.584795%)&lt;BR/&gt; 25542: (0.584795%)&gt;];
}
337--373[label="1;3pkt 3fpkt"];
337--1209[label="1;2pkt 2fpkt"];
337--2225[label="1;3pkt 3fpkt"];
337--2509[label="1;2pkt 2fpkt"];
337--2625[label="0.170732;7pkt 7fpkt"];
337--2981[label="0.0555556;1pkt 1fpkt"];
337--3004[label="0.5;1pkt 1fpkt"];
337--3212[label="0.166667;1pkt 1fpkt"];
337--3438[label="0.333333;1pkt 1fpkt"];
337--3448[label="0.142857;1pkt 1fpkt"];
337--3679[label="0.5;1pkt 1fpkt"];
337--4020[label="0.333333;1pkt 1fpkt"];
337--4077[label="0.416667;5pkt 5fpkt"];
337--4303[label="0.5;1pkt 1fpkt"];
337--4550[label="0.333333;1pkt 1fpkt"];
337--4557[label="0.142857;1pkt 1fpkt"];
337--4880[label="0.333333;1pkt 1fpkt"];
337--5040[label="1;1pkt 1fpkt"];
337--5399[label="0.333333;1pkt 1fpkt"];
373--2225[label="1;3pkt 3fpkt"];
373--2625[label="0.333333;1pkt 1fpkt"];
412--1025[label="0.00840336;1pkt 1fpkt"];
412--2625[label="0.0420168;5pkt 5fpkt"];
412--2902[label="0.0666667;2pkt 2fpkt"];
412--2981[label="0.277778;5pkt 5fpkt"];
412--3004[label="0.5;1pkt 1fpkt"];
412--3022[label="0.5;2pkt 2fpkt"];
412--3200[label="0.428571;3pkt 3fpkt"];
412--3212[label="0.666667;4pkt 4fpkt"];
412--3355[label="1;22pkt 22fpkt"];
412--3438[label="0.333333;1pkt 1fpkt"];
412--3448[label="0.285714;2pkt 2fpkt"];
412--4020[label="0.333333;1pkt 1fpkt"];
412--4077[label="0.0833333;1pkt 1fpkt"];
412--4303[label="0.5;1pkt 1fpkt"];
412--4313[label="0.5;2pkt 2fpkt"];
412--4412[label="0.428571;3pkt 3fpkt"];
412--4499[label="1;22pkt 22fpkt"];
412--4550[label="0.333333;1pkt 1fpkt"];
412--4557[label="0.285714;2pkt 2fpkt"];
412--4880[label="0.333333;1pkt 1fpkt"];
412--5047[label="0.5;2pkt 2fpkt"];
412--5399[label="0.333333;1pkt 1fpkt"];
1209--2509[label="1;2pkt 2fpkt"];
1209--2625[label="0.5;1pkt 1fpkt"];
1209--3679[label="0.5;1pkt 1fpkt"];
2225--2625[label="0.333333;1pkt 1fpkt"];
2509--2625[label="0.5;1pkt 1fpkt"];
2509--3679[label="0.5;1pkt 1fpkt"];
3004--4303[label="1;2pkt 2fpkt"];
3004--5040[label="1;1pkt 1fpkt"];
3022--4313[label="1;4pkt 4fpkt"];
3022--5047[label="1;4pkt 4fpkt"];
3200--4412[label="1;7pkt 7fpkt"];
3355--4499[label="1;22pkt 22fpkt"];
3438--4550[label="1;3pkt 3fpkt"];
3448--4557[label="1;7pkt 7fpkt"];
4020--4880[label="1;3pkt 3fpkt"];
4020--5399[label="1;3pkt 3fpkt"];
4303--5040[label="1;1pkt 1fpkt"];
4313--5047[label="1;4pkt 4fpkt"];
4880--5399[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.92.34" dst_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1387[label="222.222.4.5;s;2191pkt 2191fpkt", shape=diamond, color=yellow];
2513[label="222.222.4.5;s;1766pkt 1766fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.222.4.5:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 64624: (0.0505433%)&lt;BR/&gt; 63566: (0.0505433%)&lt;BR/&gt; 61546: (0.0505433%)&lt;BR/&gt; 57694: (0.0505433%)&gt;];
}
1387--2513[label="1;1766pkt 1766fpkt"];
</description>
    <slice>
      <filter src_ip="222.222.4.5" src_port="7000"/>
    </slice>
    <from sec="1128920665" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
533[label="207.107.22.209;d;665pkt 665fpkt", shape=diamond, color=yellow];
1058[label="40.38.164.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
1262[label="192.130.51.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
1642[label="205.150.58.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
2405[label="192.130.51.33;s;1pkt 1fpkt", shape=hexagon, color=black];
2528[label="205.150.58.127;s;1pkt 1fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4672, 207.107.22.209:4672}[67.8195%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (78.4328%)&lt;BR/&gt; 4662: (3.20896%)&lt;BR/&gt; 0: (1.19403%)&lt;BR/&gt; 1042: (0.522388%)&lt;BR/&gt; 4665: (0.373134%)&gt;];
}
533--1058[label="1;1pkt 1fpkt"];
533--1262[label="1;1pkt 1fpkt"];
533--1642[label="1;1pkt 1fpkt"];
533--2405[label="1;1pkt 1fpkt"];
533--2528[label="1;1pkt 1fpkt"];
533--2612[label="0.00451128;3pkt 3fpkt"];
533--2627[label="0.00601504;4pkt 4fpkt"];
533--2643[label="0.00601504;4pkt 4fpkt"];
533--2658[label="0.00601504;4pkt 4fpkt"];
533--3229[label="0.00534759;2pkt 2fpkt"];
533--4109[label="0.00970874;2pkt 2fpkt"];
533--4432[label="0.00534759;2pkt 2fpkt"];
533--4925[label="0.00970874;2pkt 2fpkt"];
533--5114[label="0.00534759;2pkt 2fpkt"];
1262--2405[label="1;1pkt 1fpkt"];
1642--2528[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.107.22.209" dst_port="4672" src_port="4672"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1266[label="220.146.109.200;d;354pkt 354fpkt", shape=diamond, color=yellow];
2531[label="220.146.109.200;d;354pkt 354fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 220.146.109.200:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1266--1431[label="0.00740741;1pkt 1fpkt"];
1266--1474[label="0.00282486;1pkt 1fpkt"];
1266--1713[label="0.00341297;1pkt 1fpkt"];
1266--1728[label="0.004329;1pkt 1fpkt"];
1266--1868[label="0.00332226;1pkt 1fpkt"];
1266--2218[label="0.00362319;1pkt 1fpkt"];
1266--2267[label="0.0049505;1pkt 1fpkt"];
1266--2341[label="0.00282486;1pkt 1fpkt"];
1266--2497[label="0.00378788;1pkt 1fpkt"];
1266--2531[label="1;354pkt 354fpkt"];
1266--2866[label="0.00282486;1pkt 1fpkt"];
1266--3091[label="0.0111111;1pkt 1fpkt"];
1266--3106[label="0.00653595;1pkt 1fpkt"];
1266--3487[label="0.00900901;1pkt 1fpkt"];
1266--3556[label="0.00406504;1pkt 1fpkt"];
1266--4227[label="0.00282486;1pkt 1fpkt"];
1266--4344[label="0.0111111;1pkt 1fpkt"];
1266--4580[label="0.00900901;1pkt 1fpkt"];
1266--4989[label="0.00282486;1pkt 1fpkt"];
2531--2866[label="0.00282486;1pkt 1fpkt"];
2531--3091[label="0.0111111;1pkt 1fpkt"];
2531--3106[label="0.00653595;1pkt 1fpkt"];
2531--3487[label="0.00900901;1pkt 1fpkt"];
2531--3556[label="0.00406504;1pkt 1fpkt"];
2531--4227[label="0.00282486;1pkt 1fpkt"];
2531--4344[label="0.0111111;1pkt 1fpkt"];
2531--4580[label="0.00900901;1pkt 1fpkt"];
2531--4989[label="0.00282486;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.146.109.200"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
230[label="206.125.218.34;s;645pkt 645fpkt", shape=diamond, color=yellow];
432[label="80.150.117.59;d;83pkt 83fpkt", shape=diamond, color=yellow];
555[label="82.168.210.0;d;299pkt 299fpkt", shape=diamond, color=yellow];
677[label="206.125.216.16;s;463pkt 463fpkt", shape=diamond, color=yellow];
797[label="206.237.45.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
822[label="81.201.172.165;d;37pkt 37fpkt", shape=diamond, color=yellow];
823[label="206.125.218.43;s;19pkt 19fpkt", shape=diamond, color=yellow];
1254[label="81.16.53.35;d;50pkt 50fpkt", shape=diamond, color=yellow];
1825[label="41.41.73.162;d;204pkt 204fpkt", shape=diamond, color=yellow];
2290[label="81.201.172.165;d;37pkt 37fpkt", shape=hexagon, color=black];
2327[label="206.125.218.34;s;413pkt 413fpkt", shape=hexagon, color=black];
2343[label="206.237.45.202;d;1pkt 1fpkt", shape=hexagon, color=black];
2370[label="206.125.216.16;s;311pkt 311fpkt", shape=hexagon, color=black];
2787[label="206.125.216.16;485pkt 485fpkt", shape=pentagon, color=darkviolet];
2904[label="206.125.218.34;699pkt 699fpkt", shape=pentagon, color=darkviolet];
4186[label="206.125.216.16;485pkt 485fpkt", shape=invtriangle, color=brown];
4966[label="206.125.216.16;486pkt 486fpkt", shape=invhouse, color=bisque];
5000[label="206.125.218.34;691pkt 691fpkt", shape=invhouse, color=bisque];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.216.16:*, *:*}[34.4437%]&lt;BR/&gt;{206.125.218.34:80, *:*}[34.231%]&lt;BR/&gt;{*:80, 82.168.210.0:*}[22.9624%]&lt;BR/&gt;{*:*, *:53}[21.6159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.6543%)&lt;BR/&gt; 53: (13.9212%)&lt;BR/&gt; 33758: (6.60011%)&lt;BR/&gt; 0: (4.97319%)&lt;BR/&gt; 2909: (4.26142%)&gt;];
}
230--432[label="1;83pkt 83fpkt"];
230--555[label="0.548495;164pkt 164fpkt"];
230--797[label="1;1pkt 1fpkt"];
230--822[label="0.810811;30pkt 30fpkt"];
230--1128[label="0.00606061;1pkt 1fpkt"];
230--1254[label="0.96;48pkt 48fpkt"];
230--1345[label="0.00625;1pkt 1fpkt"];
230--1521[label="0.00740741;1pkt 1fpkt"];
230--1524[label="0.0149254;1pkt 1fpkt"];
230--1818[label="0.0138889;1pkt 1fpkt"];
230--1873[label="0.00769231;1pkt 1fpkt"];
230--1966[label="0.00155039;1pkt 1fpkt"];
230--2290[label="0.810811;30pkt 30fpkt"];
230--2327[label="1;413pkt 413fpkt"];
230--2343[label="1;1pkt 1fpkt"];
230--2491[label="0.00684932;1pkt 1fpkt"];
230--2577[label="0.00155039;1pkt 1fpkt"];
230--2612[label="0.00155039;1pkt 1fpkt"];
230--2627[label="0.00310078;2pkt 2fpkt"];
230--2628[label="0.00169779;1pkt 1fpkt"];
230--2643[label="0.00310078;2pkt 2fpkt"];
230--2644[label="0.00169779;1pkt 1fpkt"];
230--2647[label="0.0263566;17pkt 17fpkt"];
230--2658[label="0.00310078;2pkt 2fpkt"];
230--2659[label="0.00169492;1pkt 1fpkt"];
230--2904[label="1;645pkt 645fpkt"];
230--5000[label="0.992248;640pkt 640fpkt"];
432--2327[label="0.722892;60pkt 60fpkt"];
432--2904[label="1;83pkt 83fpkt"];
432--5000[label="0.951807;79pkt 79fpkt"];
555--677[label="0.451505;135pkt 135fpkt"];
555--2327[label="0.371237;111pkt 111fpkt"];
555--2370[label="0.264214;79pkt 79fpkt"];
555--2787[label="0.451505;135pkt 135fpkt"];
555--2904[label="0.548495;164pkt 164fpkt"];
555--4186[label="0.451505;135pkt 135fpkt"];
555--4966[label="0.451505;135pkt 135fpkt"];
555--5000[label="0.548495;164pkt 164fpkt"];
677--1128[label="0.00606061;1pkt 1fpkt"];
677--1345[label="0.00625;1pkt 1fpkt"];
677--1521[label="0.00740741;1pkt 1fpkt"];
677--1531[label="0.00934579;1pkt 1fpkt"];
677--1655[label="0.00671141;1pkt 1fpkt"];
677--1768[label="0.00215983;1pkt 1fpkt"];
677--1818[label="0.0138889;1pkt 1fpkt"];
677--1966[label="0.00215983;1pkt 1fpkt"];
677--2012[label="0.0138889;1pkt 1fpkt"];
677--2022[label="0.00746269;1pkt 1fpkt"];
677--2370[label="1;311pkt 311fpkt"];
677--2491[label="0.00684932;1pkt 1fpkt"];
677--2577[label="0.00215983;1pkt 1fpkt"];
677--2612[label="0.00431965;2pkt 2fpkt"];
677--2628[label="0.00215983;1pkt 1fpkt"];
677--2644[label="0.00215983;1pkt 1fpkt"];
677--2647[label="0.0280778;13pkt 13fpkt"];
677--2659[label="0.00215983;1pkt 1fpkt"];
677--2787[label="0.99784;462pkt 462fpkt"];
677--4186[label="0.99784;462pkt 462fpkt"];
677--4966[label="1;463pkt 463fpkt"];
797--2327[label="1;1pkt 1fpkt"];
797--2343[label="1;1pkt 1fpkt"];
797--2904[label="1;1pkt 1fpkt"];
797--5000[label="1;1pkt 1fpkt"];
822--823[label="0.263158;5pkt 5fpkt"];
822--2290[label="1;37pkt 37fpkt"];
822--2327[label="0.702703;26pkt 26fpkt"];
822--2904[label="0.810811;30pkt 30fpkt"];
822--5000[label="0.810811;30pkt 30fpkt"];
823--1463[label="0.0526316;1pkt 1fpkt"];
823--1524[label="0.0526316;1pkt 1fpkt"];
823--1605[label="0.0526316;1pkt 1fpkt"];
823--1768[label="0.0526316;1pkt 1fpkt"];
823--1825[label="0.0526316;1pkt 1fpkt"];
823--1966[label="0.0526316;1pkt 1fpkt"];
823--2290[label="0.263158;5pkt 5fpkt"];
823--2577[label="0.0526316;1pkt 1fpkt"];
823--2628[label="0.0526316;1pkt 1fpkt"];
823--2644[label="0.0526316;1pkt 1fpkt"];
823--2647[label="0.105263;2pkt 2fpkt"];
823--2659[label="0.0526316;1pkt 1fpkt"];
1254--2327[label="0.6;30pkt 30fpkt"];
1254--2904[label="0.96;48pkt 48fpkt"];
1254--5000[label="0.96;48pkt 48fpkt"];
1825--2218[label="0.00490196;1pkt 1fpkt"];
1825--2267[label="0.0049505;1pkt 1fpkt"];
1825--2341[label="0.00490196;1pkt 1fpkt"];
1825--2497[label="0.00490196;1pkt 1fpkt"];
1825--2536[label="0.0138889;1pkt 1fpkt"];
1825--2866[label="0.00490196;1pkt 1fpkt"];
1825--3106[label="0.00653595;1pkt 1fpkt"];
1825--3556[label="0.00490196;1pkt 1fpkt"];
1825--4227[label="0.00490196;1pkt 1fpkt"];
1825--4989[label="0.00490196;1pkt 1fpkt"];
2290--2327[label="0.702703;26pkt 26fpkt"];
2290--2904[label="0.810811;30pkt 30fpkt"];
2290--5000[label="0.810811;30pkt 30fpkt"];
2327--2343[label="1;1pkt 1fpkt"];
2327--2612[label="0.00242131;1pkt 1fpkt"];
2327--2647[label="0.0411622;17pkt 17fpkt"];
2327--2904[label="1;413pkt 413fpkt"];
2327--5000[label="0.987893;408pkt 408fpkt"];
2343--2904[label="1;1pkt 1fpkt"];
2343--5000[label="1;1pkt 1fpkt"];
2370--2491[label="0.00684932;1pkt 1fpkt"];
2370--2612[label="0.00643087;2pkt 2fpkt"];
2370--2647[label="0.0418006;13pkt 13fpkt"];
2370--2787[label="0.996785;310pkt 310fpkt"];
2370--4186[label="0.996785;310pkt 310fpkt"];
2370--4966[label="1;311pkt 311fpkt"];
2787--4186[label="1;485pkt 485fpkt"];
2787--4966[label="1;485pkt 485fpkt"];
2904--5000[label="1;691pkt 691fpkt"];
4186--4966[label="1;485pkt 485fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.216.16"/>
      <filter dst_port="53"/>
      <filter src_ip="206.125.218.34" src_port="80"/>
      <filter dst_ip="82.168.210.0" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1548[label="172.20.32.245;s;328pkt 328fpkt", shape=diamond, color=yellow];
2560[label="172.20.32.245;s;328pkt 328fpkt", shape=hexagon, color=black];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.32.245:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (8.23171%)&lt;BR/&gt; 80: (8.23171%)&lt;BR/&gt; 3208: (1.82927%)&lt;BR/&gt; 1722: (0.609756%)&lt;BR/&gt; 1088: (0.609756%)&gt;];
}
1548--2560[label="1;328pkt 328fpkt"];
1548--2625[label="0.0152439;5pkt 5fpkt"];
2560--2625[label="0.0152439;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="172.20.32.245"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
534[label="207.107.22.209;s;1342pkt 1342fpkt", shape=diamond, color=yellow];
1433[label="205.150.58.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
1437[label="192.130.51.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
1440[label="40.38.164.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
2061[label="68.118.68.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
2571[label="68.118.68.164;d;1pkt 1fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.22.209:4672, *:4672}[61.5041%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (72.7003%)&lt;BR/&gt; 1042: (4.6365%)&lt;BR/&gt; 4662: (2.67062%)&lt;BR/&gt; 4665: (1.07567%)&lt;BR/&gt; 6672: (0.964392%)&gt;];
}
534--1433[label="1;1pkt 1fpkt"];
534--1437[label="0.5;1pkt 1fpkt"];
534--1440[label="1;1pkt 1fpkt"];
534--2061[label="1;1pkt 1fpkt"];
534--2571[label="1;1pkt 1fpkt"];
534--2647[label="0.00298063;4pkt 4fpkt"];
2061--2571[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="207.107.22.209" src_port="4672"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1961[label="132.177.43.0;s;32pkt 32fpkt", shape=diamond, color=yellow];
2093[label="212.120.52.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
2575[label="132.177.43.0;s;32pkt 32fpkt", shape=hexagon, color=black];
2664[label="132.177.43.0;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4115[label="132.177.43.0;37pkt 37fpkt", shape=invtriangle, color=brown];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.43.0:*, 85.99.225.2:80}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3822: (1.78571%)&lt;BR/&gt; 3821: (1.78571%)&lt;BR/&gt; 4844: (1.42857%)&lt;BR/&gt; 4211: (1.42857%)&gt;];
}
1961--2093[label="1;2pkt 2fpkt"];
1961--2575[label="1;32pkt 32fpkt"];
1961--2664[label="0.96875;31pkt 31fpkt"];
1961--4115[label="0.96875;31pkt 31fpkt"];
2093--2575[label="1;2pkt 2fpkt"];
2093--2664[label="1;2pkt 2fpkt"];
2093--4115[label="1;2pkt 2fpkt"];
2575--2664[label="0.96875;31pkt 31fpkt"];
2575--4115[label="0.96875;31pkt 31fpkt"];
2664--4115[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="85.99.225.2" dst_port="80" src_ip="132.177.43.0"/>
    </slice>
    <from sec="1128920981" usec="0"/>
    <to sec="1128921287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1962[label="43.98.235.55;s;9pkt 9fpkt", shape=diamond, color=yellow];
2576[label="43.98.235.55;s;9pkt 9fpkt", shape=hexagon, color=black];
3028[label="43.98.235.55;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.98.235.55:80, 161.253.119.164:*}[30.7692%]&lt;BR/&gt;{43.98.235.55:80, 161.253.86.180:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4035: (4.83871%)&lt;BR/&gt; 4034: (4.83871%)&lt;BR/&gt; 4033: (4.83871%)&lt;BR/&gt; 4032: (4.83871%)&gt;];
}
1962--2576[label="1;9pkt 9fpkt"];
1962--3028[label="1;9pkt 9fpkt"];
2576--3028[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.86.180" src_ip="43.98.235.55" src_port="80"/>
      <filter dst_ip="161.253.119.164" src_ip="43.98.235.55" src_port="80"/>
    </slice>
    <from sec="1128920539" usec="0"/>
    <to sec="1128921111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981548,1.90303,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
2109[label="221.224.8.166;s;379pkt 379fpkt", shape=diamond, color=yellow];
2580[label="221.224.8.166;s;379pkt 379fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.224.8.166:*, *:139}[57.2559%]&lt;BR/&gt;{221.224.8.166:*, *:445}[42.7441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (28.628%)&lt;BR/&gt; 445: (21.372%)&lt;BR/&gt; 2406: (0.263852%)&lt;BR/&gt; 2188: (0.263852%)&lt;BR/&gt; 2153: (0.263852%)&gt;];
}
2109--2580[label="1;379pkt 379fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="221.224.8.166"/>
      <filter dst_port="445" src_ip="221.224.8.166"/>
    </slice>
    <from sec="1128921184" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
3354[label="146.130.251.104;186pkt 186fpkt", shape=pentagon, color=darkviolet];
3423[label="128.165.104.117;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3718[label="166.18.246.170;150pkt 150fpkt", shape=pentagon, color=darkviolet];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.246.170:*, 192.157.200.111:53}[40.107%]&lt;BR/&gt;{146.130.251.104:32772, *:53}[26.738%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.6417%)&lt;BR/&gt; 32772: (13.369%)&lt;BR/&gt; 25: (8.28877%)&lt;BR/&gt; 34526: (2.00535%)&lt;BR/&gt; 113: (1.3369%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="146.130.251.104" src_port="32772"/>
      <filter dst_ip="192.157.200.111" dst_port="53" src_ip="166.18.246.170"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1727[label="207.99.3.0;s;85pkt 85fpkt", shape=diamond, color=yellow];
2660[label="207.99.3.0;91pkt 91fpkt", shape=pentagon, color=darkviolet];
4111[label="207.99.3.0;90pkt 90fpkt", shape=invtriangle, color=brown];
4926[label="207.99.3.0;91pkt 91fpkt", shape=invhouse, color=bisque];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.3.0:25, *:*}[42.8571%]&lt;BR/&gt;{207.99.3.0:*, *:113}[37.3626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.591%)&lt;BR/&gt; 113: (18.7675%)&lt;BR/&gt; 53: (3.64146%)&lt;BR/&gt; 2499: (1.12045%)&lt;BR/&gt; 60150: (0.560224%)&gt;];
}
1727--2627[label="0.0117647;1pkt 1fpkt"];
1727--2643[label="0.0117647;1pkt 1fpkt"];
1727--2658[label="0.0117647;1pkt 1fpkt"];
1727--2660[label="1;85pkt 85fpkt"];
1727--4111[label="0.988235;84pkt 84fpkt"];
1727--4926[label="1;85pkt 85fpkt"];
2660--4111[label="1;90pkt 90fpkt"];
2660--4926[label="1;91pkt 91fpkt"];
4111--4926[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="207.99.3.0" src_port="25"/>
      <filter dst_port="113" src_ip="207.99.3.0"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.10.154.0"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.179.0"/>
    </slice>
    <from sec="1128920903" usec="0"/>
    <to sec="1128921283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.180.0"/>
    </slice>
    <from sec="1128920962" usec="0"/>
    <to sec="1128921001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.24.35.2"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1509[label="207.169.205.2;s;27pkt 27fpkt", shape=diamond, color=yellow];
2680[label="207.169.205.2;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4128[label="207.169.205.2;38pkt 38fpkt", shape=invtriangle, color=brown];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.169.205.2:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1509--2680[label="1;27pkt 27fpkt"];
1509--4128[label="0.962963;26pkt 26fpkt"];
2680--4128[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="207.169.205.2"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.56.20.3"/>
    </slice>
    <from sec="1128920521" usec="0"/>
    <to sec="1128920703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.185.3"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.51.199.3"/>
    </slice>
    <from sec="1128920769" usec="0"/>
    <to sec="1128920793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.99.145.4"/>
    </slice>
    <from sec="1128921091" usec="0"/>
    <to sec="1128921110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.5.129.5"/>
    </slice>
    <from sec="1128920418" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.125.212.5"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.181.8"/>
    </slice>
    <from sec="1128920425" usec="0"/>
    <to sec="1128921283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.129.44.9"/>
    </slice>
    <from sec="1128920506" usec="0"/>
    <to sec="1128921162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.220.122.9"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.24.212.9"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.34.101.11"/>
    </slice>
    <from sec="1128921119" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.102.116.12"/>
    </slice>
    <from sec="1128920885" usec="0"/>
    <to sec="1128921260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
247[label="161.253.139.233;d;306pkt 306fpkt", shape=diamond, color=yellow];
363[label="140.100.32.219;s;33pkt 33fpkt", shape=diamond, color=yellow];
366[label="194.22.132.45;s;45pkt 45fpkt", shape=diamond, color=yellow];
413[label="161.253.139.228;d;274pkt 274fpkt", shape=diamond, color=yellow];
613[label="140.100.32.212;s;30pkt 30fpkt", shape=diamond, color=yellow];
662[label="207.226.6.32;s;38pkt 38fpkt", shape=diamond, color=yellow];
676[label="192.81.219.201;s;22pkt 22fpkt", shape=diamond, color=yellow];
685[label="207.226.6.33;s;46pkt 46fpkt", shape=diamond, color=yellow];
869[label="161.253.139.232;d;293pkt 293fpkt", shape=diamond, color=yellow];
938[label="192.81.219.209;s;28pkt 28fpkt", shape=diamond, color=yellow];
1501[label="207.226.6.35;s;46pkt 46fpkt", shape=diamond, color=yellow];
1959[label="65.70.212.12;s;3pkt 3fpkt", shape=diamond, color=yellow];
2132[label="194.22.132.45;s;36pkt 36fpkt", shape=hexagon, color=black];
2303[label="140.100.32.219;s;25pkt 25fpkt", shape=hexagon, color=black];
2475[label="140.100.32.212;s;30pkt 30fpkt", shape=hexagon, color=black];
2736[label="207.38.9.10;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2746[label="207.38.9.11;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2757[label="65.70.212.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2762[label="200.182.178.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2882[label="207.226.6.32;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2906[label="207.226.6.35;54pkt 54fpkt", shape=pentagon, color=darkviolet];
2956[label="194.22.132.45;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3063[label="68.52.216.61;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3125[label="207.209.227.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3161[label="84.198.16.77;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3625[label="219.73.232.153;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3637[label="214.81.69.156;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3657[label="222.219.16.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3707[label="206.0.24.169;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3738[label="206.0.24.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3840[label="82.68.57.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3870[label="192.81.219.201;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3916[label="192.81.219.209;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3925[label="140.100.32.212;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3930[label="193.236.246.212;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4162[label="207.38.9.11;13pkt 13fpkt", shape=invtriangle, color=brown];
4238[label="207.226.6.32;41pkt 41fpkt", shape=invtriangle, color=brown];
4251[label="207.226.6.35;54pkt 54fpkt", shape=invtriangle, color=brown];
4278[label="194.22.132.45;45pkt 45fpkt", shape=invtriangle, color=brown];
4329[label="68.52.216.61;22pkt 22fpkt", shape=invtriangle, color=brown];
4659[label="219.73.232.153;27pkt 27fpkt", shape=invtriangle, color=brown];
4665[label="214.81.69.156;32pkt 32fpkt", shape=invtriangle, color=brown];
4720[label="206.0.24.174;1pkt 1fpkt", shape=invtriangle, color=brown];
4793[label="192.81.219.201;22pkt 22fpkt", shape=invtriangle, color=brown];
4817[label="192.81.219.209;28pkt 28fpkt", shape=invtriangle, color=brown];
4995[label="207.226.6.32;41pkt 41fpkt", shape=invhouse, color=bisque];
5001[label="207.226.6.35;54pkt 54fpkt", shape=invhouse, color=bisque];
5059[label="68.52.216.61;21pkt 21fpkt", shape=invhouse, color=bisque];
5257[label="219.73.232.153;27pkt 27fpkt", shape=invhouse, color=bisque];
5263[label="214.81.69.156;32pkt 32fpkt", shape=invhouse, color=bisque];
5349[label="192.81.219.201;22pkt 22fpkt", shape=invhouse, color=bisque];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.253.139.232:*}[33.3692%]&lt;BR/&gt;{*:*, 161.253.139.233:*}[33.1539%]&lt;BR/&gt;{*:*, 161.253.139.228:*}[30.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (15.1103%)&lt;BR/&gt; 2122: (10.7461%)&lt;BR/&gt; 23127: (7.17973%)&lt;BR/&gt; 3128: (6.66354%)&lt;BR/&gt; 2128: (6.47583%)&gt;];
}
247--363[label="0.30303;10pkt 10fpkt"];
247--366[label="0.333333;15pkt 15fpkt"];
247--503[label="0.00377358;1pkt 1fpkt"];
247--613[label="0.3;9pkt 9fpkt"];
247--662[label="0.342105;13pkt 13fpkt"];
247--676[label="0.318182;7pkt 7fpkt"];
247--685[label="0.326087;15pkt 15fpkt"];
247--938[label="0.321429;9pkt 9fpkt"];
247--1501[label="0.391304;18pkt 18fpkt"];
247--2132[label="0.333333;12pkt 12fpkt"];
247--2303[label="0.32;8pkt 8fpkt"];
247--2475[label="0.3;9pkt 9fpkt"];
247--2736[label="0.25;3pkt 3fpkt"];
247--2746[label="0.307692;4pkt 4fpkt"];
247--2882[label="0.3;12pkt 12fpkt"];
247--2906[label="0.351852;19pkt 19fpkt"];
247--2956[label="0.333333;15pkt 15fpkt"];
247--3063[label="0.318182;7pkt 7fpkt"];
247--3161[label="0.785714;11pkt 11fpkt"];
247--3625[label="0.518519;14pkt 14fpkt"];
247--3637[label="0.03125;1pkt 1fpkt"];
247--3707[label="0.304348;7pkt 7fpkt"];
247--3870[label="0.318182;7pkt 7fpkt"];
247--3916[label="0.321429;9pkt 9fpkt"];
247--3925[label="0.264706;9pkt 9fpkt"];
247--3930[label="0.3;6pkt 6fpkt"];
247--4092[label="0.00352113;1pkt 1fpkt"];
247--4162[label="0.307692;4pkt 4fpkt"];
247--4238[label="0.317073;13pkt 13fpkt"];
247--4251[label="0.351852;19pkt 19fpkt"];
247--4278[label="0.333333;15pkt 15fpkt"];
247--4329[label="0.318182;7pkt 7fpkt"];
247--4659[label="0.518519;14pkt 14fpkt"];
247--4665[label="0.03125;1pkt 1fpkt"];
247--4793[label="0.318182;7pkt 7fpkt"];
247--4817[label="0.321429;9pkt 9fpkt"];
247--4914[label="0.00352113;1pkt 1fpkt"];
247--4995[label="0.317073;13pkt 13fpkt"];
247--5001[label="0.351852;19pkt 19fpkt"];
247--5059[label="0.285714;6pkt 6fpkt"];
247--5257[label="0.518519;14pkt 14fpkt"];
247--5263[label="0.03125;1pkt 1fpkt"];
247--5349[label="0.318182;7pkt 7fpkt"];
247--5424[label="0.00352113;1pkt 1fpkt"];
363--413[label="0.333333;11pkt 11fpkt"];
363--869[label="0.363636;12pkt 12fpkt"];
363--2303[label="1;25pkt 25fpkt"];
366--413[label="0.355556;16pkt 16fpkt"];
366--869[label="0.288889;13pkt 13fpkt"];
366--2132[label="1;36pkt 36fpkt"];
366--2956[label="1;45pkt 45fpkt"];
366--4278[label="1;45pkt 45fpkt"];
413--613[label="0.333333;10pkt 10fpkt"];
413--662[label="0.342105;13pkt 13fpkt"];
413--676[label="0.318182;7pkt 7fpkt"];
413--685[label="0.369565;17pkt 17fpkt"];
413--938[label="0.357143;10pkt 10fpkt"];
413--1501[label="0.326087;15pkt 15fpkt"];
413--2132[label="0.361111;13pkt 13fpkt"];
413--2303[label="0.32;8pkt 8fpkt"];
413--2475[label="0.333333;10pkt 10fpkt"];
413--2736[label="0.5;6pkt 6fpkt"];
413--2746[label="0.384615;5pkt 5fpkt"];
413--2882[label="0.325;13pkt 13fpkt"];
413--2906[label="0.296296;16pkt 16fpkt"];
413--2956[label="0.355556;16pkt 16fpkt"];
413--3063[label="0.318182;7pkt 7fpkt"];
413--3125[label="1;1pkt 1fpkt"];
413--3435[label="0.0350877;2pkt 2fpkt"];
413--3637[label="0.03125;1pkt 1fpkt"];
413--3707[label="0.304348;7pkt 7fpkt"];
413--3738[label="1;1pkt 1fpkt"];
413--3870[label="0.318182;7pkt 7fpkt"];
413--3916[label="0.357143;10pkt 10fpkt"];
413--3925[label="0.294118;10pkt 10fpkt"];
413--3930[label="0.3;6pkt 6fpkt"];
413--4162[label="0.384615;5pkt 5fpkt"];
413--4238[label="0.317073;13pkt 13fpkt"];
413--4251[label="0.296296;16pkt 16fpkt"];
413--4278[label="0.355556;16pkt 16fpkt"];
413--4329[label="0.318182;7pkt 7fpkt"];
413--4665[label="0.03125;1pkt 1fpkt"];
413--4720[label="1;1pkt 1fpkt"];
413--4793[label="0.318182;7pkt 7fpkt"];
413--4817[label="0.357143;10pkt 10fpkt"];
413--4995[label="0.317073;13pkt 13fpkt"];
413--5001[label="0.296296;16pkt 16fpkt"];
413--5059[label="0.333333;7pkt 7fpkt"];
413--5263[label="0.03125;1pkt 1fpkt"];
413--5349[label="0.318182;7pkt 7fpkt"];
613--869[label="0.366667;11pkt 11fpkt"];
613--2475[label="1;30pkt 30fpkt"];
613--3925[label="1;30pkt 30fpkt"];
662--869[label="0.315789;12pkt 12fpkt"];
662--2882[label="0.973684;37pkt 37fpkt"];
662--4238[label="1;38pkt 38fpkt"];
662--4995[label="1;38pkt 38fpkt"];
676--869[label="0.363636;8pkt 8fpkt"];
676--3870[label="1;22pkt 22fpkt"];
676--4793[label="1;22pkt 22fpkt"];
676--5349[label="1;22pkt 22fpkt"];
685--869[label="0.282609;13pkt 13fpkt"];
869--938[label="0.25;7pkt 7fpkt"];
869--1501[label="0.282609;13pkt 13fpkt"];
869--1959[label="1;3pkt 3fpkt"];
869--2132[label="0.305556;11pkt 11fpkt"];
869--2303[label="0.36;9pkt 9fpkt"];
869--2475[label="0.366667;11pkt 11fpkt"];
869--2736[label="0.25;3pkt 3fpkt"];
869--2746[label="0.307692;4pkt 4fpkt"];
869--2757[label="1;2pkt 2fpkt"];
869--2762[label="1;2pkt 2fpkt"];
869--2882[label="0.3;12pkt 12fpkt"];
869--2906[label="0.240741;13pkt 13fpkt"];
869--2956[label="0.288889;13pkt 13fpkt"];
869--3063[label="0.318182;7pkt 7fpkt"];
869--3625[label="0.444444;12pkt 12fpkt"];
869--3637[label="0.03125;1pkt 1fpkt"];
869--3657[label="1;1pkt 1fpkt"];
869--3707[label="0.304348;7pkt 7fpkt"];
869--3840[label="1;1pkt 1fpkt"];
869--3870[label="0.363636;8pkt 8fpkt"];
869--3916[label="0.25;7pkt 7fpkt"];
869--3925[label="0.323529;11pkt 11fpkt"];
869--3930[label="0.25;5pkt 5fpkt"];
869--4162[label="0.307692;4pkt 4fpkt"];
869--4238[label="0.292683;12pkt 12fpkt"];
869--4251[label="0.240741;13pkt 13fpkt"];
869--4278[label="0.288889;13pkt 13fpkt"];
869--4329[label="0.318182;7pkt 7fpkt"];
869--4659[label="0.444444;12pkt 12fpkt"];
869--4665[label="0.03125;1pkt 1fpkt"];
869--4793[label="0.363636;8pkt 8fpkt"];
869--4817[label="0.25;7pkt 7fpkt"];
869--4995[label="0.292683;12pkt 12fpkt"];
869--5001[label="0.240741;13pkt 13fpkt"];
869--5059[label="0.333333;7pkt 7fpkt"];
869--5257[label="0.444444;12pkt 12fpkt"];
869--5263[label="0.03125;1pkt 1fpkt"];
869--5349[label="0.363636;8pkt 8fpkt"];
938--3916[label="1;28pkt 28fpkt"];
938--4817[label="1;28pkt 28fpkt"];
1501--2906[label="1;46pkt 46fpkt"];
1501--4251[label="1;46pkt 46fpkt"];
1501--5001[label="1;46pkt 46fpkt"];
1959--2757[label="1;2pkt 2fpkt"];
2132--2956[label="1;36pkt 36fpkt"];
2132--4278[label="1;36pkt 36fpkt"];
2475--3925[label="1;30pkt 30fpkt"];
2746--4162[label="1;13pkt 13fpkt"];
2882--4238[label="1;40pkt 40fpkt"];
2882--4995[label="1;40pkt 40fpkt"];
2906--4251[label="1;54pkt 54fpkt"];
2906--5001[label="1;54pkt 54fpkt"];
2956--4278[label="1;45pkt 45fpkt"];
3063--4329[label="1;22pkt 22fpkt"];
3063--5059[label="1;21pkt 21fpkt"];
3625--4659[label="1;27pkt 27fpkt"];
3625--5257[label="1;27pkt 27fpkt"];
3637--4665[label="1;32pkt 32fpkt"];
3637--5263[label="1;32pkt 32fpkt"];
3738--4720[label="1;1pkt 1fpkt"];
3870--4793[label="1;22pkt 22fpkt"];
3870--5349[label="1;22pkt 22fpkt"];
3916--4817[label="1;28pkt 28fpkt"];
4238--4995[label="1;41pkt 41fpkt"];
4251--5001[label="1;54pkt 54fpkt"];
4329--5059[label="1;21pkt 21fpkt"];
4659--5257[label="1;27pkt 27fpkt"];
4665--5263[label="1;32pkt 32fpkt"];
4793--5349[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.139.232"/>
      <filter dst_ip="161.253.139.233"/>
      <filter dst_ip="161.253.139.228"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.32.146.14"/>
    </slice>
    <from sec="1128921186" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.69.57.15"/>
    </slice>
    <from sec="1128920856" usec="0"/>
    <to sec="1128921260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.200.229.15"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.253.15"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.144.140.16"/>
    </slice>
    <from sec="1128921267" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.3.147.17"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.200.217.17"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.59.18"/>
    </slice>
    <from sec="1128921249" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.123.74.18"/>
    </slice>
    <from sec="1128921134" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,003,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1867[label="83.68.131.18;s;103pkt 103fpkt", shape=diamond, color=yellow];
2797[label="83.68.131.18;104pkt 104fpkt", shape=pentagon, color=darkviolet];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.68.131.18:*, *:135}[66.0377%]&lt;BR/&gt;{83.68.131.18:*, *:4444}[33.9623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (33.5749%)&lt;BR/&gt; 4444: (16.4251%)&lt;BR/&gt; 64961: (0.483092%)&lt;BR/&gt; 64119: (0.483092%)&lt;BR/&gt; 63278: (0.483092%)&gt;];
}
1867--2797[label="0.980583;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="83.68.131.18"/>
      <filter dst_port="4444" src_ip="83.68.131.18"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.192.18"/>
    </slice>
    <from sec="1128920422" usec="0"/>
    <to sec="1128921283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.4.40.20"/>
    </slice>
    <from sec="1128921058" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.87.9.21"/>
    </slice>
    <from sec="1128921255" usec="0"/>
    <to sec="1128921287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.0.67.21"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.173.21"/>
    </slice>
    <from sec="1128920691" usec="0"/>
    <to sec="1128921287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.176.184.21"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.223.107.24"/>
    </slice>
    <from sec="1128921247" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.201.151.25"/>
    </slice>
    <from sec="1128920413" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.170.89.27"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.921743,1.8923,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
54[label="64.62.56.28s;131pkt 131fpkt", shape=rectangle, color=red];
2860[label="64.62.56.28;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.62.56.28:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
54--2860[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="64.62.56.28" src_port="1026"/>
    </slice>
    <from sec="1128921087" usec="0"/>
    <to sec="1128921117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.27.172.29"/>
    </slice>
    <from sec="1128920826" usec="0"/>
    <to sec="1128920834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.113.30"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16354,1.79488,010,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
75[label="69.46.160.30s;347pkt 347fpkt", shape=rectangle, color=red];
2105[label="69.46.160.30;s;314pkt 314fpkt", shape=diamond, color=yellow];
2869[label="69.46.160.30;503pkt 503fpkt", shape=pentagon, color=darkviolet];
4229[label="69.46.160.30;502pkt 502fpkt", shape=invtriangle, color=brown];
4991[label="69.46.160.30;503pkt 503fpkt", shape=invhouse, color=bisque];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.46.160.30:*, *:139}[50.2982%]&lt;BR/&gt;{69.46.160.30:*, *:445}[49.7018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (28.4232%)&lt;BR/&gt; 445: (21.5768%)&lt;BR/&gt; 1899: (0.207469%)&lt;BR/&gt; 3278: (0.184417%)&lt;BR/&gt; 3271: (0.184417%)&gt;];
}
75--2105[label="0.901274;283pkt 283fpkt"];
75--2869[label="1;347pkt 347fpkt"];
75--4229[label="0.997118;346pkt 346fpkt"];
75--4991[label="1;347pkt 347fpkt"];
2105--2869[label="1;314pkt 314fpkt"];
2105--4229[label="0.996815;313pkt 313fpkt"];
2105--4991[label="1;314pkt 314fpkt"];
2869--4229[label="1;502pkt 502fpkt"];
2869--4991[label="1;503pkt 503fpkt"];
4229--4991[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="69.46.160.30"/>
      <filter dst_port="445" src_ip="69.46.160.30"/>
    </slice>
    <from sec="1128921174" usec="0"/>
    <to sec="1128921282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.97.217.31"/>
    </slice>
    <from sec="1128920416" usec="0"/>
    <to sec="1128920444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
2886[label="161.253.114.32;67pkt 67fpkt", shape=pentagon, color=darkviolet];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.114.32:31383, *:*}[46.2687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31383: (23.1343%)&lt;BR/&gt; 443: (7.46269%)&lt;BR/&gt; 80: (7.46269%)&lt;BR/&gt; 63430: (1.49254%)&lt;BR/&gt; 41733: (1.49254%)&gt;];
}
</description>
    <slice>
      <filter src_ip="161.253.114.32" src_port="31383"/>
    </slice>
    <from sec="1128920497" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
313[label="132.176.45.35;s;592pkt 592fpkt", shape=diamond, color=yellow];
2907[label="132.176.45.35;623pkt 623fpkt", shape=pentagon, color=darkviolet];
4252[label="132.176.45.35;624pkt 624fpkt", shape=invtriangle, color=brown];
5002[label="132.176.45.35;622pkt 622fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.45.35:25, *:*}[53.5256%]&lt;BR/&gt;{132.176.45.35:*, *:25}[41.8269%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.6839%)&lt;BR/&gt; 53: (1.97074%)&lt;BR/&gt; 113: (0.487607%)&lt;BR/&gt; 48821: (0.162536%)&lt;BR/&gt; 32768: (0.162536%)&gt;];
}
313--2612[label="0.00168919;1pkt 1fpkt"];
313--2627[label="0.00337838;2pkt 2fpkt"];
313--2643[label="0.00337838;2pkt 2fpkt"];
313--2658[label="0.00337838;2pkt 2fpkt"];
313--2907[label="0.998311;591pkt 591fpkt"];
313--4252[label="1;592pkt 592fpkt"];
313--5002[label="0.998311;591pkt 591fpkt"];
2907--4252[label="1;623pkt 623fpkt"];
2907--5002[label="0.998392;621pkt 621fpkt"];
4252--5002[label="1;622pkt 622fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.45.35" src_port="25"/>
      <filter dst_port="25" src_ip="132.176.45.35"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.199.124.35"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1198[label="161.253.32.33;d;7pkt 7fpkt", shape=diamond, color=yellow];
1221[label="86.168.160.35;s;5pkt 5fpkt", shape=diamond, color=yellow];
2564[label="161.253.32.33;d;7pkt 7fpkt", shape=hexagon, color=black];
2910[label="86.168.160.35;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4254[label="86.168.160.35;4pkt 4fpkt", shape=invtriangle, color=brown];
5005[label="86.168.160.35;5pkt 5fpkt", shape=invhouse, color=bisque];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.168.160.35:80, 161.253.32.33:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 2658: (9.375%)&lt;BR/&gt; 2656: (9.375%)&lt;BR/&gt; 2654: (9.375%)&lt;BR/&gt; 2652: (9.375%)&gt;];
}
1198--1221[label="1;5pkt 5fpkt"];
1198--1421[label="0.142857;1pkt 1fpkt"];
1198--2564[label="1;7pkt 7fpkt"];
1198--2910[label="1;4pkt 4fpkt"];
1198--4254[label="1;4pkt 4fpkt"];
1198--5005[label="1;5pkt 5fpkt"];
1221--2564[label="1;5pkt 5fpkt"];
1221--2910[label="1;4pkt 4fpkt"];
1221--4254[label="1;4pkt 4fpkt"];
1221--5005[label="1;5pkt 5fpkt"];
2564--2910[label="1;4pkt 4fpkt"];
2564--4254[label="1;4pkt 4fpkt"];
2564--5005[label="1;5pkt 5fpkt"];
2910--4254[label="1;4pkt 4fpkt"];
2910--5005[label="1;4pkt 4fpkt"];
4254--5005[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.32.33" src_ip="86.168.160.35" src_port="80"/>
    </slice>
    <from sec="1128920421" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.59.47.36"/>
    </slice>
    <from sec="1128920996" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.119.58.37"/>
    </slice>
    <from sec="1128921273" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
2919[label="132.177.108.37;63pkt 63fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.108.37:*, 210.34.43.216:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4206: (0.793651%)&lt;BR/&gt; 4205: (0.793651%)&lt;BR/&gt; 4204: (0.793651%)&lt;BR/&gt; 4203: (0.793651%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="210.34.43.216" dst_port="80" src_ip="132.177.108.37"/>
    </slice>
    <from sec="1128920871" usec="0"/>
    <to sec="1128921169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.44.164.37"/>
    </slice>
    <from sec="1128920416" usec="0"/>
    <to sec="1128920854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.86.38"/>
    </slice>
    <from sec="1128920411" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.921743,1.8923,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
76[label="221.216.53.40s;59pkt 59fpkt", shape=rectangle, color=red];
2930[label="221.216.53.40;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.216.53.40:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3875: (0.320513%)&lt;BR/&gt; 3873: (0.320513%)&lt;BR/&gt; 3871: (0.320513%)&lt;BR/&gt; 3869: (0.320513%)&gt;];
}
76--2930[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="221.216.53.40"/>
    </slice>
    <from sec="1128921187" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.40.211.40"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.34.41.41"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128920639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,004,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.199.93.41"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.65.144.41"/>
    </slice>
    <from sec="1128920416" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
1523[label="128.3.31.45;s;280pkt 280fpkt", shape=diamond, color=yellow];
2371[label="128.3.31.45;s;263pkt 263fpkt", shape=hexagon, color=black];
2954[label="128.3.31.45;304pkt 304fpkt", shape=pentagon, color=darkviolet];
4276[label="128.3.31.45;304pkt 304fpkt", shape=invtriangle, color=brown];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.3.31.45:2731, *:53}[44.0789%]&lt;BR/&gt;{128.3.31.45:53, *:*}[44.0789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.1772%)&lt;BR/&gt; 2731: (22.3719%)&lt;BR/&gt; 25: (5.64726%)&lt;BR/&gt; 32768: (1.12945%)&lt;BR/&gt; 9253: (0.695048%)&gt;];
}
1523--1524[label="0.0149254;1pkt 1fpkt"];
1523--1531[label="0.00934579;1pkt 1fpkt"];
1523--1655[label="0.00671141;1pkt 1fpkt"];
1523--2010[label="0.01;1pkt 1fpkt"];
1523--2012[label="0.0138889;1pkt 1fpkt"];
1523--2371[label="1;263pkt 263fpkt"];
1523--2612[label="0.0178571;5pkt 5fpkt"];
1523--2627[label="0.0142857;4pkt 4fpkt"];
1523--2643[label="0.0142857;4pkt 4fpkt"];
1523--2647[label="0.0392857;11pkt 11fpkt"];
1523--2658[label="0.0142857;4pkt 4fpkt"];
1523--2954[label="1;280pkt 280fpkt"];
1523--4276[label="1;280pkt 280fpkt"];
2371--2612[label="0.0190114;5pkt 5fpkt"];
2371--2627[label="0.0152091;4pkt 4fpkt"];
2371--2643[label="0.0152091;4pkt 4fpkt"];
2371--2647[label="0.0418251;11pkt 11fpkt"];
2371--2658[label="0.0152091;4pkt 4fpkt"];
2371--2954[label="1;263pkt 263fpkt"];
2371--4276[label="1;263pkt 263fpkt"];
2954--4276[label="1;304pkt 304fpkt"];
</description>
    <slice>
      <filter src_ip="128.3.31.45" src_port="53"/>
      <filter dst_port="53" src_ip="128.3.31.45" src_port="2731"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.247.89.46"/>
    </slice>
    <from sec="1128921151" usec="0"/>
    <to sec="1128921168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.130.49"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.229.184.49"/>
    </slice>
    <from sec="1128920767" usec="0"/>
    <to sec="1128921282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
501[label="146.250.206.155;d;1107pkt 1107fpkt", shape=diamond, color=yellow];
2986[label="219.95.223.49;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3661[label="220.166.129.160;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 146.250.206.155:4895}[99.2793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4895: (49.6525%)&lt;BR/&gt; 54045: (0.217202%)&lt;BR/&gt; 443: (0.217202%)&lt;BR/&gt; 49523: (0.130321%)&lt;BR/&gt; 2993: (0.130321%)&gt;];
}
501--2986[label="1;8pkt 8fpkt"];
501--3661[label="0.916667;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.206.155" dst_port="4895"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.192.180.50"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1874[label="206.125.221.50;s;81pkt 81fpkt", shape=diamond, color=yellow];
2990[label="206.125.221.50;86pkt 86fpkt", shape=pentagon, color=darkviolet];
4296[label="206.125.221.50;86pkt 86fpkt", shape=invtriangle, color=brown];
5035[label="206.125.221.50;86pkt 86fpkt", shape=invhouse, color=bisque];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.221.50:25, *:*}[55.814%]&lt;BR/&gt;{206.125.221.50:*, *:113}[43.0233%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.8761%)&lt;BR/&gt; 113: (21.5339%)&lt;BR/&gt; 57487: (0.589971%)&lt;BR/&gt; 56587: (0.589971%)&lt;BR/&gt; 56582: (0.589971%)&gt;];
}
1874--1966[label="0.0123457;1pkt 1fpkt"];
1874--2577[label="0.0123457;1pkt 1fpkt"];
1874--2628[label="0.0123457;1pkt 1fpkt"];
1874--2644[label="0.0123457;1pkt 1fpkt"];
1874--2659[label="0.0123457;1pkt 1fpkt"];
1874--2990[label="1;81pkt 81fpkt"];
1874--4296[label="1;81pkt 81fpkt"];
1874--5035[label="1;81pkt 81fpkt"];
2990--4296[label="1;86pkt 86fpkt"];
2990--5035[label="1;86pkt 86fpkt"];
4296--5035[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.221.50" src_port="25"/>
      <filter dst_port="113" src_ip="206.125.221.50"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.165.217.52"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.49.53"/>
    </slice>
    <from sec="1128920425" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1496[label="161.253.32.57;d;64pkt 64fpkt", shape=diamond, color=yellow];
3013[label="219.154.208.53;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4309[label="219.154.208.53;3pkt 3fpkt", shape=invtriangle, color=brown];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.227.65.255:*, 161.253.32.57:19101}[43.75%]&lt;BR/&gt;{40.36.16.178:*, 161.253.32.57:18379}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (31.4286%)&lt;BR/&gt; 18379: (15.7143%)&lt;BR/&gt; 55704: (2.14286%)&lt;BR/&gt; 1242: (2.14286%)&lt;BR/&gt; 1238: (2.14286%)&gt;];
}
1496--3013[label="1;3pkt 3fpkt"];
1496--4309[label="1;3pkt 3fpkt"];
3013--4309[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.32.57" dst_port="19101" src_ip="221.227.65.255"/>
      <filter dst_ip="161.253.32.57" dst_port="18379" src_ip="40.36.16.178"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.140.54"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.65.105.55"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128920603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1215[label="66.46.172.55;s;508pkt 508fpkt", shape=diamond, color=yellow];
3027[label="66.46.172.55;508pkt 508fpkt", shape=pentagon, color=darkviolet];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.46.172.55:*, *:139}[50%]&lt;BR/&gt;{66.46.172.55:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 4283: (0.19685%)&lt;BR/&gt; 4185: (0.19685%)&lt;BR/&gt; 4121: (0.19685%)&gt;];
}
1215--3027[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="66.46.172.55"/>
      <filter dst_port="139" src_ip="66.46.172.55"/>
    </slice>
    <from sec="1128920621" usec="0"/>
    <to sec="1128920845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.69.56"/>
    </slice>
    <from sec="1128920933" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.216.56"/>
    </slice>
    <from sec="1128920447" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.185.194.57"/>
    </slice>
    <from sec="1128920512" usec="0"/>
    <to sec="1128920525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.207.98.58"/>
    </slice>
    <from sec="1128920442" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.146.170.58"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.203.71.59"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.246.138.59"/>
    </slice>
    <from sec="1128920465" usec="0"/>
    <to sec="1128921247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.96.60"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.91.169.62"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.108.216.63"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
885[label="128.165.92.64;s;146pkt 146fpkt", shape=diamond, color=yellow];
3078[label="128.165.92.64;179pkt 179fpkt", shape=pentagon, color=darkviolet];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.92.64:*, *:25}[59.2179%]&lt;BR/&gt;{128.165.92.64:25, *:*}[39.6648%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.3846%)&lt;BR/&gt; 4890: (0.615385%)&lt;BR/&gt; 113: (0.615385%)&lt;BR/&gt; 64913: (0.307692%)&lt;BR/&gt; 58789: (0.307692%)&gt;];
}
885--3078[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.92.64" src_port="25"/>
      <filter dst_port="25" src_ip="128.165.92.64"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.166.18.65"/>
    </slice>
    <from sec="1128920458" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.75.16.69"/>
    </slice>
    <from sec="1128920925" usec="0"/>
    <to sec="1128920972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.50.70"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.49.206.70"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.93.19.71"/>
    </slice>
    <from sec="1128921038" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.41.101.71"/>
    </slice>
    <from sec="1128920756" usec="0"/>
    <to sec="1128920920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.236.156.71"/>
    </slice>
    <from sec="1128920783" usec="0"/>
    <to sec="1128920801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.63.9.72"/>
    </slice>
    <from sec="1128920462" usec="0"/>
    <to sec="1128920601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.158.72"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.1.20.73"/>
    </slice>
    <from sec="1128920618" usec="0"/>
    <to sec="1128920669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.77.73"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0826,1.84,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
59[label="220.40.204.74s;241pkt 241fpkt", shape=rectangle, color=red];
3152[label="220.40.204.74;241pkt 241fpkt", shape=pentagon, color=darkviolet];
4386[label="220.40.204.74;241pkt 241fpkt", shape=invtriangle, color=brown];
5089[label="220.40.204.74;241pkt 241fpkt", shape=invhouse, color=bisque];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.40.204.74:32926, *:1026}[51.4523%]&lt;BR/&gt;{220.40.204.74:32926, *:1027}[48.5477%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32926: (50%)&lt;BR/&gt; 1026: (25.7261%)&lt;BR/&gt; 1027: (24.2739%)&gt;];
}
59--188[label="0.00414938;1pkt 1fpkt"];
59--271[label="0.00414938;1pkt 1fpkt"];
59--418[label="0.00414938;1pkt 1fpkt"];
59--1933[label="0.0108696;1pkt 1fpkt"];
59--3152[label="1;241pkt 241fpkt"];
59--4386[label="1;241pkt 241fpkt"];
59--5089[label="1;241pkt 241fpkt"];
3152--4386[label="1;241pkt 241fpkt"];
3152--5089[label="1;241pkt 241fpkt"];
4386--5089[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.40.204.74" src_port="32926"/>
      <filter dst_port="1027" src_ip="220.40.204.74" src_port="32926"/>
    </slice>
    <from sec="1128920780" usec="0"/>
    <to sec="1128920785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.61.19.77"/>
    </slice>
    <from sec="1128921054" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.22.114.77"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
274[label="85.85.159.223;d;104pkt 104fpkt", shape=diamond, color=yellow];
506[label="85.85.159.209;d;114pkt 114fpkt", shape=diamond, color=yellow];
770[label="161.253.183.77;s;235pkt 235fpkt", shape=diamond, color=yellow];
3170[label="161.253.183.77;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4393[label="161.253.183.77;255pkt 255fpkt", shape=invtriangle, color=brown];
5092[label="161.253.183.77;255pkt 255fpkt", shape=invhouse, color=bisque];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.183.77:*, 85.85.159.223:80}[49.4118%]&lt;BR/&gt;{161.253.183.77:*, 85.85.159.209:80}[48.6275%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.179%)&lt;BR/&gt; 110: (0.656814%)&lt;BR/&gt; 2945: (0.205255%)&lt;BR/&gt; 2942: (0.205255%)&lt;BR/&gt; 2940: (0.205255%)&gt;];
}
274--770[label="1;104pkt 104fpkt"];
274--2625[label="0.0673077;7pkt 7fpkt"];
274--2629[label="0.00961538;1pkt 1fpkt"];
274--3170[label="1;104pkt 104fpkt"];
274--4393[label="1;104pkt 104fpkt"];
274--5092[label="1;104pkt 104fpkt"];
506--770[label="1;114pkt 114fpkt"];
506--2625[label="0.0614035;7pkt 7fpkt"];
506--2629[label="0.00877193;1pkt 1fpkt"];
506--3170[label="1;114pkt 114fpkt"];
506--4393[label="1;114pkt 114fpkt"];
506--5092[label="1;114pkt 114fpkt"];
770--2625[label="0.0595745;14pkt 14fpkt"];
770--2629[label="0.00851064;2pkt 2fpkt"];
770--3170[label="1;235pkt 235fpkt"];
770--4393[label="1;235pkt 235fpkt"];
770--5092[label="1;235pkt 235fpkt"];
3170--4393[label="1;255pkt 255fpkt"];
3170--5092[label="1;255pkt 255fpkt"];
4393--5092[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_ip="85.85.159.223" dst_port="80" src_ip="161.253.183.77"/>
      <filter dst_ip="85.85.159.209" dst_port="80" src_ip="161.253.183.77"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06483,1.81449,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
11[label="161.253.33.78s;1pkt 1fpkt", shape=rectangle, color=red];
516[label="161.253.33.78;s;83pkt 83fpkt", shape=diamond, color=yellow];
1608[label="216.231.104.13;d;3pkt 3fpkt", shape=diamond, color=yellow];
3175[label="161.253.33.78;89pkt 89fpkt", shape=pentagon, color=darkviolet];
4396[label="161.253.33.78;89pkt 89fpkt", shape=invtriangle, color=brown];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.33.78:*, 86.169.142.192:80}[46.0674%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6038%)&lt;BR/&gt; 1863: (3.39623%)&lt;BR/&gt; 52297: (0.943396%)&lt;BR/&gt; 52296: (0.754717%)&lt;BR/&gt; 52295: (0.754717%)&gt;];
}
11--516[label="1;1pkt 1fpkt"];
11--1608[label="1;1pkt 1fpkt"];
11--2625[label="1;1pkt 1fpkt"];
11--3175[label="1;1pkt 1fpkt"];
11--4396[label="1;1pkt 1fpkt"];
516--1483[label="0.0909091;1pkt 1fpkt"];
516--1608[label="1;3pkt 3fpkt"];
516--2625[label="0.0120482;1pkt 1fpkt"];
516--3175[label="1;83pkt 83fpkt"];
516--4396[label="1;83pkt 83fpkt"];
1608--2625[label="0.333333;1pkt 1fpkt"];
1608--3175[label="1;3pkt 3fpkt"];
1608--4396[label="1;3pkt 3fpkt"];
3175--4396[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="86.169.142.192" dst_port="80" src_ip="161.253.33.78"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.34.148.78"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.237.15.79"/>
    </slice>
    <from sec="1128920500" usec="0"/>
    <to sec="1128921275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.47.90.79"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.130.154.80"/>
    </slice>
    <from sec="1128920424" usec="0"/>
    <to sec="1128921230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.170.85.81"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1755[label="132.177.109.81;s;84pkt 84fpkt", shape=diamond, color=yellow];
3205[label="132.177.109.81;87pkt 87fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.109.81:*, 192.51.202.67:80}[35.6322%]&lt;BR/&gt;{132.177.109.81:*, 211.120.74.68:80}[29.8851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7836%)&lt;BR/&gt; 29898: (2.63158%)&lt;BR/&gt; 4310: (1.16959%)&lt;BR/&gt; 4965: (0.584795%)&lt;BR/&gt; 4894: (0.584795%)&gt;];
}
1755--2625[label="0.0357143;3pkt 3fpkt"];
1755--3205[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="192.51.202.67" dst_port="80" src_ip="132.177.109.81"/>
      <filter dst_ip="211.120.74.68" dst_port="80" src_ip="132.177.109.81"/>
    </slice>
    <from sec="1128920564" usec="0"/>
    <to sec="1128921266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.156.38.82"/>
    </slice>
    <from sec="1128921074" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.152.242.82"/>
    </slice>
    <from sec="1128920426" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.158.85"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.32.164.86"/>
    </slice>
    <from sec="1128920544" usec="0"/>
    <to sec="1128920623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.209.86"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.99.24.87"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.6.175.87"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.249.87"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.130.211.91"/>
    </slice>
    <from sec="1128920429" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.37.5.92"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.138.92"/>
    </slice>
    <from sec="1128920524" usec="0"/>
    <to sec="1128921275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.60.93"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.192.93"/>
    </slice>
    <from sec="1128920435" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.243.93"/>
    </slice>
    <from sec="1128920782" usec="0"/>
    <to sec="1128920808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.129.74.99"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.46.113.99"/>
    </slice>
    <from sec="1128920874" usec="0"/>
    <to sec="1128920900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
509[label="206.125.223.99;s;419pkt 419fpkt", shape=diamond, color=yellow];
990[label="206.125.221.57;s;9pkt 9fpkt", shape=diamond, color=yellow];
1038[label="81.201.172.67;d;171pkt 171fpkt", shape=diamond, color=yellow];
2004[label="81.16.53.181;d;90pkt 90fpkt", shape=diamond, color=yellow];
2277[label="206.125.221.57;s;8pkt 8fpkt", shape=hexagon, color=black];
3039[label="206.125.221.57;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3316[label="206.125.223.99;458pkt 458fpkt", shape=pentagon, color=darkviolet];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.223.99:80, 81.201.172.67:*}[37.0293%]&lt;BR/&gt;{206.125.223.99:80, 81.16.53.181:*}[20.0837%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5734%)&lt;BR/&gt; 0: (0.341297%)&lt;BR/&gt; 58172: (0.213311%)&lt;BR/&gt; 58952: (0.170648%)&lt;BR/&gt; 58422: (0.170648%)&gt;];
}
509--1038[label="0.982456;168pkt 168fpkt"];
509--1605[label="0.00409836;1pkt 1fpkt"];
509--1966[label="0.00238663;1pkt 1fpkt"];
509--2004[label="0.977778;88pkt 88fpkt"];
509--2577[label="0.00238663;1pkt 1fpkt"];
509--2628[label="0.00238663;1pkt 1fpkt"];
509--2644[label="0.00238663;1pkt 1fpkt"];
509--2659[label="0.00238663;1pkt 1fpkt"];
509--3316[label="1;419pkt 419fpkt"];
990--1038[label="0.222222;2pkt 2fpkt"];
990--2277[label="1;8pkt 8fpkt"];
990--3039[label="1;9pkt 9fpkt"];
1038--2277[label="0.25;2pkt 2fpkt"];
1038--3039[label="0.117647;2pkt 2fpkt"];
1038--3316[label="0.982456;168pkt 168fpkt"];
2004--3316[label="0.977778;88pkt 88fpkt"];
2277--3039[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="81.201.172.67" src_ip="206.125.223.99" src_port="80"/>
      <filter dst_ip="81.16.53.181" src_ip="206.125.223.99" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.181.100"/>
    </slice>
    <from sec="1128920413" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.38.178.101"/>
    </slice>
    <from sec="1128921089" usec="0"/>
    <to sec="1128921241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.50.212.101"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.59.13.102"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.148.21.102"/>
    </slice>
    <from sec="1128920591" usec="0"/>
    <to sec="1128920634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.152.102"/>
    </slice>
    <from sec="1128920418" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.182.102"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.230.104.103"/>
    </slice>
    <from sec="1128920554" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.9.244.103"/>
    </slice>
    <from sec="1128921088" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.71.80.105"/>
    </slice>
    <from sec="1128920554" usec="0"/>
    <to sec="1128920568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.173.115.105"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.16.126.105"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128920433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.196.216.106"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128920806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.8.71.108"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1880[label="206.125.216.108;s;48pkt 48fpkt", shape=diamond, color=yellow];
3384[label="206.125.216.108;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4517[label="206.125.216.108;53pkt 53fpkt", shape=invtriangle, color=brown];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.216.108:25, *:*}[75.4717%]&lt;BR/&gt;{206.125.216.108:*, *:25}[24.5283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64269: (0.974026%)&lt;BR/&gt; 57322: (0.974026%)&lt;BR/&gt; 54721: (0.974026%)&lt;BR/&gt; 45968: (0.974026%)&gt;];
}
1880--3384[label="1;48pkt 48fpkt"];
1880--4517[label="1;48pkt 48fpkt"];
3384--4517[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.216.108" src_port="25"/>
      <filter dst_port="25" src_ip="206.125.216.108"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.15.129.109"/>
    </slice>
    <from sec="1128920471" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.216.6.110"/>
    </slice>
    <from sec="1128920543" usec="0"/>
    <to sec="1128921282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.158.21.111"/>
    </slice>
    <from sec="1128920628" usec="0"/>
    <to sec="1128920638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.170.182.111"/>
    </slice>
    <from sec="1128920869" usec="0"/>
    <to sec="1128920908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1734[label="207.99.8.112;s;41pkt 41fpkt", shape=diamond, color=yellow];
3397[label="207.99.8.112;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4525[label="207.99.8.112;41pkt 41fpkt", shape=invtriangle, color=brown];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.8.112:*, *:80}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7805%)&lt;BR/&gt; 2355: (1.21951%)&lt;BR/&gt; 2349: (1.21951%)&lt;BR/&gt; 2347: (1.21951%)&lt;BR/&gt; 2345: (1.21951%)&gt;];
}
1734--3397[label="1;41pkt 41fpkt"];
1734--4525[label="1;41pkt 41fpkt"];
3397--4525[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="207.99.8.112"/>
    </slice>
    <from sec="1128920420" usec="0"/>
    <to sec="1128921263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.229.74.116"/>
    </slice>
    <from sec="1128920676" usec="0"/>
    <to sec="1128920701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.53.119.120"/>
    </slice>
    <from sec="1128921035" usec="0"/>
    <to sec="1128921081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.146.145.120"/>
    </slice>
    <from sec="1128920427" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.135.35.121"/>
    </slice>
    <from sec="1128920536" usec="0"/>
    <to sec="1128920824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01558,1.84845,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
18[label="219.169.201.95s;1pkt 1fpkt", shape=rectangle, color=red];
958[label="132.176.189.181;d;198pkt 198fpkt", shape=diamond, color=yellow];
1224[label="219.168.22.118;s;50pkt 50fpkt", shape=diamond, color=yellow];
1225[label="219.168.109.128;s;22pkt 22fpkt", shape=diamond, color=yellow];
1227[label="215.244.50.121;s;4pkt 4fpkt", shape=diamond, color=yellow];
1963[label="215.106.15.88;s;3pkt 3fpkt", shape=diamond, color=yellow];
1979[label="219.169.201.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
3177[label="221.37.118.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3446[label="215.244.50.121;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.168.22.118:80, 132.176.189.181:*}[25.2525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4386%)&lt;BR/&gt; 9575: (1.75439%)&lt;BR/&gt; 8080: (1.40351%)&lt;BR/&gt; 7879: (0.701754%)&lt;BR/&gt; 18413: (0.526316%)&gt;];
}
18--958[label="1;1pkt 1fpkt"];
18--1979[label="1;1pkt 1fpkt"];
958--1025[label="0.00505051;1pkt 1fpkt"];
958--1224[label="1;50pkt 50fpkt"];
958--1225[label="1;22pkt 22fpkt"];
958--1227[label="1;4pkt 4fpkt"];
958--1963[label="1;3pkt 3fpkt"];
958--1979[label="1;1pkt 1fpkt"];
958--2623[label="0.00505051;1pkt 1fpkt"];
958--2641[label="0.00505051;1pkt 1fpkt"];
958--2657[label="0.00505051;1pkt 1fpkt"];
958--3177[label="1;2pkt 2fpkt"];
958--3446[label="1;4pkt 4fpkt"];
1227--3446[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.189.181" src_ip="219.168.22.118" src_port="80"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.51.51.124"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.74.86.125"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.29.192.127"/>
    </slice>
    <from sec="1128920556" usec="0"/>
    <to sec="1128920678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.14.212.127"/>
    </slice>
    <from sec="1128920622" usec="0"/>
    <to sec="1128920696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.78.58.128"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.245.128"/>
    </slice>
    <from sec="1128920440" usec="0"/>
    <to sec="1128921267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.116.221.129"/>
    </slice>
    <from sec="1128921236" usec="0"/>
    <to sec="1128921268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.56.112.131"/>
    </slice>
    <from sec="1128921272" usec="0"/>
    <to sec="1128921281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.34.132"/>
    </slice>
    <from sec="1128920427" usec="0"/>
    <to sec="1128921261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.99.146.132"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
3521[label="206.20.252.133;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.20.252.133:*, 207.107.20.219:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49946: (2.63158%)&lt;BR/&gt; 49944: (2.63158%)&lt;BR/&gt; 49943: (2.63158%)&lt;BR/&gt; 49933: (2.63158%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="207.107.20.219" dst_port="80" src_ip="206.20.252.133"/>
    </slice>
    <from sec="1128920455" usec="0"/>
    <to sec="1128921189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.73.146.134"/>
    </slice>
    <from sec="1128921236" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.133.158.134"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.75.28.136"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.171.97.136"/>
    </slice>
    <from sec="1128920892" usec="0"/>
    <to sec="1128920922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.140.37.138"/>
    </slice>
    <from sec="1128921251" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.37.96.138"/>
    </slice>
    <from sec="1128920697" usec="0"/>
    <to sec="1128920771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.67.152.138"/>
    </slice>
    <from sec="1128920417" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.89.107.139"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933149,1.84096,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
209[label="161.253.139.228;s;689pkt 689fpkt", shape=diamond, color=yellow];
246[label="144.238.223.204;d;29pkt 29fpkt", shape=diamond, color=yellow];
248[label="161.253.139.233;s;685pkt 685fpkt", shape=diamond, color=yellow];
348[label="140.100.32.212;d;67pkt 67fpkt", shape=diamond, color=yellow];
349[label="161.253.139.232;s;824pkt 824fpkt", shape=diamond, color=yellow];
362[label="140.100.32.219;d;63pkt 63fpkt", shape=diamond, color=yellow];
365[label="194.22.132.45;d;45pkt 45fpkt", shape=diamond, color=yellow];
374[label="165.159.98.9;d;94pkt 94fpkt", shape=diamond, color=yellow];
387[label="197.182.82.170;d;28pkt 28fpkt", shape=diamond, color=yellow];
388[label="207.38.52.170;d;19pkt 19fpkt", shape=diamond, color=yellow];
389[label="165.159.98.8;d;30pkt 30fpkt", shape=diamond, color=yellow];
648[label="207.38.52.171;d;11pkt 11fpkt", shape=diamond, color=yellow];
667[label="207.38.9.11;d;19pkt 19fpkt", shape=diamond, color=yellow];
682[label="197.182.82.168;d;35pkt 35fpkt", shape=diamond, color=yellow];
695[label="192.81.219.209;d;29pkt 29fpkt", shape=diamond, color=yellow];
696[label="207.38.9.10;d;18pkt 18fpkt", shape=diamond, color=yellow];
712[label="216.202.187.39;d;27pkt 27fpkt", shape=diamond, color=yellow];
714[label="194.183.218.216;d;36pkt 36fpkt", shape=diamond, color=yellow];
715[label="194.183.218.217;d;37pkt 37fpkt", shape=diamond, color=yellow];
716[label="192.163.31.132;d;27pkt 27fpkt", shape=diamond, color=yellow];
723[label="212.196.147.18;d;15pkt 15fpkt", shape=diamond, color=yellow];
923[label="192.81.219.201;d;22pkt 22fpkt", shape=diamond, color=yellow];
926[label="192.163.31.135;d;34pkt 34fpkt", shape=diamond, color=yellow];
927[label="136.55.241.10;d;10pkt 10fpkt", shape=diamond, color=yellow];
1018[label="136.55.241.11;d;8pkt 8fpkt", shape=diamond, color=yellow];
1204[label="144.238.223.200;d;23pkt 23fpkt", shape=diamond, color=yellow];
1217[label="221.137.197.107;d;29pkt 29fpkt", shape=diamond, color=yellow];
1282[label="206.126.203.30;d;30pkt 30fpkt", shape=diamond, color=yellow];
1386[label="221.137.197.106;d;9pkt 9fpkt", shape=diamond, color=yellow];
1663[label="206.0.24.174;d;94pkt 94fpkt", shape=diamond, color=yellow];
1728[label="206.125.219.139;s;231pkt 231fpkt", shape=diamond, color=yellow];
1958[label="65.70.212.12;d;3pkt 3fpkt", shape=diamond, color=yellow];
2131[label="140.100.32.219;d;39pkt 39fpkt", shape=hexagon, color=black];
2147[label="161.253.139.233;s;570pkt 570fpkt", shape=hexagon, color=black];
2177[label="192.81.219.209;d;14pkt 14fpkt", shape=hexagon, color=black];
2179[label="194.183.218.217;d;10pkt 10fpkt", shape=hexagon, color=black];
2180[label="192.163.31.132;d;24pkt 24fpkt", shape=hexagon, color=black];
2222[label="194.22.132.45;d;45pkt 45fpkt", shape=hexagon, color=black];
2226[label="192.81.219.201;d;8pkt 8fpkt", shape=hexagon, color=black];
2263[label="161.253.139.232;s;473pkt 473fpkt", shape=hexagon, color=black];
2275[label="212.196.147.18;d;8pkt 8fpkt", shape=hexagon, color=black];
2326[label="161.253.139.228;s;600pkt 600fpkt", shape=hexagon, color=black];
2471[label="206.0.24.174;d;92pkt 92fpkt", shape=hexagon, color=black];
3556[label="206.125.219.139;246pkt 246fpkt", shape=pentagon, color=darkviolet];
4001[label="161.253.139.228;707pkt 707fpkt", shape=pentagon, color=darkviolet];
4013[label="161.253.139.232;856pkt 856fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.139.232:*, *:*}[34.2263%]&lt;BR/&gt;{161.253.139.228:*, *:*}[28.2687%]&lt;BR/&gt;{161.253.139.233:*, *:*}[27.389%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (13.591%)&lt;BR/&gt; 2122: (12.1149%)&lt;BR/&gt; 2121: (6.63149%)&lt;BR/&gt; 4121: (6.60297%)&lt;BR/&gt; 23127: (6.13234%)&gt;];
}
209--246[label="0.344828;10pkt 10fpkt"];
209--348[label="0.298507;20pkt 20fpkt"];
209--362[label="0.333333;21pkt 21fpkt"];
209--365[label="0.355556;16pkt 16fpkt"];
209--374[label="0.255319;24pkt 24fpkt"];
209--387[label="0.357143;10pkt 10fpkt"];
209--388[label="0.315789;6pkt 6fpkt"];
209--389[label="0.3;9pkt 9fpkt"];
209--648[label="0.363636;4pkt 4fpkt"];
209--667[label="0.368421;7pkt 7fpkt"];
209--682[label="0.342857;12pkt 12fpkt"];
209--695[label="0.37931;11pkt 11fpkt"];
209--696[label="0.388889;7pkt 7fpkt"];
209--712[label="0.333333;9pkt 9fpkt"];
209--714[label="0.333333;12pkt 12fpkt"];
209--715[label="0.135135;5pkt 5fpkt"];
209--716[label="0.37037;10pkt 10fpkt"];
209--723[label="0.266667;4pkt 4fpkt"];
209--923[label="0.318182;7pkt 7fpkt"];
209--926[label="0.294118;10pkt 10fpkt"];
209--927[label="0.4;4pkt 4fpkt"];
209--1018[label="0.375;3pkt 3fpkt"];
209--1204[label="0.304348;7pkt 7fpkt"];
209--1217[label="0.310345;9pkt 9fpkt"];
209--1282[label="0.3;9pkt 9fpkt"];
209--1335[label="0.00689655;1pkt 1fpkt"];
209--1386[label="0.333333;3pkt 3fpkt"];
209--1663[label="0.308511;29pkt 29fpkt"];
209--2131[label="0.435897;17pkt 17fpkt"];
209--2177[label="0.357143;5pkt 5fpkt"];
209--2179[label="0.4;4pkt 4fpkt"];
209--2180[label="0.375;9pkt 9fpkt"];
209--2222[label="0.355556;16pkt 16fpkt"];
209--2226[label="0.375;3pkt 3fpkt"];
209--2275[label="0.25;2pkt 2fpkt"];
209--2326[label="1;600pkt 600fpkt"];
209--2471[label="0.315217;29pkt 29fpkt"];
209--2625[label="0.00290276;2pkt 2fpkt"];
209--2629[label="0.00290276;2pkt 2fpkt"];
209--4001[label="1;689pkt 689fpkt"];
246--248[label="0.344828;10pkt 10fpkt"];
246--349[label="0.310345;9pkt 9fpkt"];
246--2147[label="0.275862;8pkt 8fpkt"];
246--2263[label="0.103448;3pkt 3fpkt"];
246--2326[label="0.310345;9pkt 9fpkt"];
246--4001[label="0.344828;10pkt 10fpkt"];
246--4013[label="0.310345;9pkt 9fpkt"];
248--348[label="0.253731;17pkt 17fpkt"];
248--362[label="0.31746;20pkt 20fpkt"];
248--365[label="0.333333;15pkt 15fpkt"];
248--374[label="0.489362;46pkt 46fpkt"];
248--387[label="0.357143;10pkt 10fpkt"];
248--388[label="0.315789;6pkt 6fpkt"];
248--389[label="0.333333;10pkt 10fpkt"];
248--648[label="0.181818;2pkt 2fpkt"];
248--667[label="0.368421;7pkt 7fpkt"];
248--682[label="0.314286;11pkt 11fpkt"];
248--695[label="0.310345;9pkt 9fpkt"];
248--696[label="0.388889;7pkt 7fpkt"];
248--712[label="0.333333;9pkt 9fpkt"];
248--714[label="0.277778;10pkt 10fpkt"];
248--715[label="0.135135;5pkt 5fpkt"];
248--716[label="0.333333;9pkt 9fpkt"];
248--723[label="0.4;6pkt 6fpkt"];
248--923[label="0.318182;7pkt 7fpkt"];
248--926[label="0.294118;10pkt 10fpkt"];
248--927[label="0.4;4pkt 4fpkt"];
248--1018[label="0.375;3pkt 3fpkt"];
248--1204[label="0.304348;7pkt 7fpkt"];
248--1217[label="0.310345;9pkt 9fpkt"];
248--1282[label="0.3;9pkt 9fpkt"];
248--1386[label="0.333333;3pkt 3fpkt"];
248--1663[label="0.12766;12pkt 12fpkt"];
248--2131[label="0.410256;16pkt 16fpkt"];
248--2147[label="1;570pkt 570fpkt"];
248--2177[label="0.357143;5pkt 5fpkt"];
248--2179[label="0.3;3pkt 3fpkt"];
248--2180[label="0.333333;8pkt 8fpkt"];
248--2222[label="0.333333;15pkt 15fpkt"];
248--2226[label="0.375;3pkt 3fpkt"];
248--2275[label="0.375;3pkt 3fpkt"];
248--2471[label="0.130435;12pkt 12fpkt"];
248--2629[label="0.00145985;1pkt 1fpkt"];
348--349[label="0.447761;30pkt 30fpkt"];
348--2147[label="0.238806;16pkt 16fpkt"];
348--2263[label="0.253731;17pkt 17fpkt"];
348--2326[label="0.149254;10pkt 10fpkt"];
348--4001[label="0.298507;20pkt 20fpkt"];
348--4013[label="0.447761;30pkt 30fpkt"];
349--362[label="0.349206;22pkt 22fpkt"];
349--365[label="0.311111;14pkt 14fpkt"];
349--374[label="0.255319;24pkt 24fpkt"];
349--387[label="0.285714;8pkt 8fpkt"];
349--388[label="0.368421;7pkt 7fpkt"];
349--389[label="0.366667;11pkt 11fpkt"];
349--648[label="0.454545;5pkt 5fpkt"];
349--667[label="0.263158;5pkt 5fpkt"];
349--682[label="0.342857;12pkt 12fpkt"];
349--695[label="0.310345;9pkt 9fpkt"];
349--696[label="0.222222;4pkt 4fpkt"];
349--712[label="0.333333;9pkt 9fpkt"];
349--714[label="0.388889;14pkt 14fpkt"];
349--715[label="0.72973;27pkt 27fpkt"];
349--716[label="0.296296;8pkt 8fpkt"];
349--723[label="0.333333;5pkt 5fpkt"];
349--923[label="0.363636;8pkt 8fpkt"];
349--926[label="0.264706;9pkt 9fpkt"];
349--927[label="0.2;2pkt 2fpkt"];
349--1018[label="0.25;2pkt 2fpkt"];
349--1204[label="0.304348;7pkt 7fpkt"];
349--1217[label="0.37931;11pkt 11fpkt"];
349--1282[label="0.333333;10pkt 10fpkt"];
349--1386[label="0.333333;3pkt 3fpkt"];
349--1663[label="0.56383;53pkt 53fpkt"];
349--1958[label="1;3pkt 3fpkt"];
349--2131[label="0.153846;6pkt 6fpkt"];
349--2177[label="0.285714;4pkt 4fpkt"];
349--2179[label="0.3;3pkt 3fpkt"];
349--2180[label="0.291667;7pkt 7fpkt"];
349--2222[label="0.311111;14pkt 14fpkt"];
349--2226[label="0.25;2pkt 2fpkt"];
349--2263[label="1;473pkt 473fpkt"];
349--2275[label="0.375;3pkt 3fpkt"];
349--2471[label="0.554348;51pkt 51fpkt"];
349--2625[label="0.0109223;9pkt 9fpkt"];
349--4013[label="1;824pkt 824fpkt"];
362--2131[label="1;39pkt 39fpkt"];
362--2147[label="0.285714;18pkt 18fpkt"];
362--2263[label="0.111111;7pkt 7fpkt"];
362--2326[label="0.31746;20pkt 20fpkt"];
362--4001[label="0.333333;21pkt 21fpkt"];
362--4013[label="0.349206;22pkt 22fpkt"];
365--2147[label="0.288889;13pkt 13fpkt"];
365--2222[label="1;45pkt 45fpkt"];
365--2263[label="0.177778;8pkt 8fpkt"];
365--2326[label="0.311111;14pkt 14fpkt"];
365--4001[label="0.355556;16pkt 16fpkt"];
365--4013[label="0.311111;14pkt 14fpkt"];
374--2147[label="0.489362;46pkt 46fpkt"];
374--2326[label="0.255319;24pkt 24fpkt"];
374--4001[label="0.255319;24pkt 24fpkt"];
374--4013[label="0.255319;24pkt 24fpkt"];
387--2147[label="0.321429;9pkt 9fpkt"];
387--2263[label="0.214286;6pkt 6fpkt"];
387--2326[label="0.321429;9pkt 9fpkt"];
387--4001[label="0.357143;10pkt 10fpkt"];
387--4013[label="0.285714;8pkt 8fpkt"];
388--2147[label="0.315789;6pkt 6fpkt"];
388--2263[label="0.0526316;1pkt 1fpkt"];
388--2326[label="0.315789;6pkt 6fpkt"];
388--4001[label="0.315789;6pkt 6fpkt"];
388--4013[label="0.368421;7pkt 7fpkt"];
389--2147[label="0.3;9pkt 9fpkt"];
389--2263[label="0.133333;4pkt 4fpkt"];
389--2326[label="0.266667;8pkt 8fpkt"];
389--4001[label="0.3;9pkt 9fpkt"];
389--4013[label="0.366667;11pkt 11fpkt"];
648--2147[label="0.181818;2pkt 2fpkt"];
648--2263[label="0.0909091;1pkt 1fpkt"];
648--2326[label="0.363636;4pkt 4fpkt"];
648--4001[label="0.363636;4pkt 4fpkt"];
648--4013[label="0.454545;5pkt 5fpkt"];
667--2147[label="0.315789;6pkt 6fpkt"];
667--2263[label="0.157895;3pkt 3fpkt"];
667--2326[label="0.315789;6pkt 6fpkt"];
667--4001[label="0.368421;7pkt 7fpkt"];
667--4013[label="0.263158;5pkt 5fpkt"];
682--2147[label="0.285714;10pkt 10fpkt"];
682--2263[label="0.228571;8pkt 8fpkt"];
682--2326[label="0.342857;12pkt 12fpkt"];
682--4001[label="0.342857;12pkt 12fpkt"];
682--4013[label="0.342857;12pkt 12fpkt"];
695--2147[label="0.241379;7pkt 7fpkt"];
695--2177[label="1;14pkt 14fpkt"];
695--2263[label="0.172414;5pkt 5fpkt"];
695--2326[label="0.241379;7pkt 7fpkt"];
695--4001[label="0.37931;11pkt 11fpkt"];
695--4013[label="0.310345;9pkt 9fpkt"];
696--2147[label="0.333333;6pkt 6fpkt"];
696--2263[label="0.166667;3pkt 3fpkt"];
696--2326[label="0.388889;7pkt 7fpkt"];
696--4001[label="0.388889;7pkt 7fpkt"];
696--4013[label="0.222222;4pkt 4fpkt"];
712--2147[label="0.296296;8pkt 8fpkt"];
712--2263[label="0.296296;8pkt 8fpkt"];
712--2326[label="0.296296;8pkt 8fpkt"];
712--4001[label="0.333333;9pkt 9fpkt"];
712--4013[label="0.333333;9pkt 9fpkt"];
714--2147[label="0.194444;7pkt 7fpkt"];
714--2263[label="0.194444;7pkt 7fpkt"];
714--2326[label="0.25;9pkt 9fpkt"];
714--4001[label="0.333333;12pkt 12fpkt"];
714--4013[label="0.388889;14pkt 14fpkt"];
715--2147[label="0.135135;5pkt 5fpkt"];
715--2179[label="1;10pkt 10fpkt"];
715--2263[label="0.702703;26pkt 26fpkt"];
715--2326[label="0.135135;5pkt 5fpkt"];
715--4001[label="0.135135;5pkt 5fpkt"];
715--4013[label="0.72973;27pkt 27fpkt"];
716--2147[label="0.296296;8pkt 8fpkt"];
716--2180[label="1;24pkt 24fpkt"];
716--2263[label="0.185185;5pkt 5fpkt"];
716--2326[label="0.333333;9pkt 9fpkt"];
716--4001[label="0.37037;10pkt 10fpkt"];
716--4013[label="0.296296;8pkt 8fpkt"];
723--2147[label="0.333333;5pkt 5fpkt"];
723--2263[label="0.2;3pkt 3fpkt"];
723--2275[label="1;8pkt 8fpkt"];
723--2326[label="0.2;3pkt 3fpkt"];
723--4001[label="0.266667;4pkt 4fpkt"];
723--4013[label="0.333333;5pkt 5fpkt"];
923--2147[label="0.272727;6pkt 6fpkt"];
923--2226[label="1;8pkt 8fpkt"];
923--2263[label="0.181818;4pkt 4fpkt"];
923--2326[label="0.272727;6pkt 6fpkt"];
923--4001[label="0.318182;7pkt 7fpkt"];
923--4013[label="0.363636;8pkt 8fpkt"];
926--1017[label="0.0294118;1pkt 1fpkt"];
926--1694[label="0.0294118;1pkt 1fpkt"];
926--2147[label="0.235294;8pkt 8fpkt"];
926--2263[label="0.176471;6pkt 6fpkt"];
926--2326[label="0.264706;9pkt 9fpkt"];
926--3666[label="0.0294118;1pkt 1fpkt"];
926--4001[label="0.294118;10pkt 10fpkt"];
926--4013[label="0.264706;9pkt 9fpkt"];
927--2147[label="0.4;4pkt 4fpkt"];
927--2263[label="0.2;2pkt 2fpkt"];
927--2326[label="0.4;4pkt 4fpkt"];
927--4001[label="0.4;4pkt 4fpkt"];
927--4013[label="0.2;2pkt 2fpkt"];
1018--2147[label="0.375;3pkt 3fpkt"];
1018--2263[label="0.25;2pkt 2fpkt"];
1018--2326[label="0.375;3pkt 3fpkt"];
1018--4001[label="0.375;3pkt 3fpkt"];
1018--4013[label="0.25;2pkt 2fpkt"];
1204--1728[label="0.0869565;2pkt 2fpkt"];
1204--2147[label="0.26087;6pkt 6fpkt"];
1204--2263[label="0.173913;4pkt 4fpkt"];
1204--2326[label="0.26087;6pkt 6fpkt"];
1204--3556[label="0.0869565;2pkt 2fpkt"];
1204--4001[label="0.304348;7pkt 7fpkt"];
1204--4013[label="0.304348;7pkt 7fpkt"];
1217--2147[label="0.172414;5pkt 5fpkt"];
1217--2263[label="0.103448;3pkt 3fpkt"];
1217--2326[label="0.172414;5pkt 5fpkt"];
1217--4001[label="0.310345;9pkt 9fpkt"];
1217--4013[label="0.37931;11pkt 11fpkt"];
1282--2120[label="0.0666667;2pkt 2fpkt"];
1282--2147[label="0.266667;8pkt 8fpkt"];
1282--2263[label="0.2;6pkt 6fpkt"];
1282--2326[label="0.266667;8pkt 8fpkt"];
1282--3722[label="0.0666667;2pkt 2fpkt"];
1282--4001[label="0.3;9pkt 9fpkt"];
1282--4013[label="0.333333;10pkt 10fpkt"];
1386--2147[label="0.333333;3pkt 3fpkt"];
1386--2263[label="0.222222;2pkt 2fpkt"];
1386--2326[label="0.333333;3pkt 3fpkt"];
1386--4001[label="0.333333;3pkt 3fpkt"];
1386--4013[label="0.333333;3pkt 3fpkt"];
1663--2147[label="0.117021;11pkt 11fpkt"];
1663--2263[label="0.287234;27pkt 27fpkt"];
1663--2326[label="0.297872;28pkt 28fpkt"];
1663--2471[label="1;92pkt 92fpkt"];
1663--4001[label="0.308511;29pkt 29fpkt"];
1663--4013[label="0.56383;53pkt 53fpkt"];
1728--1817[label="0.0046729;1pkt 1fpkt"];
1728--1825[label="0.00490196;1pkt 1fpkt"];
1728--1826[label="0.0047619;1pkt 1fpkt"];
1728--1834[label="0.00492611;1pkt 1fpkt"];
1728--1992[label="0.0285714;1pkt 1fpkt"];
1728--2463[label="0.0049505;1pkt 1fpkt"];
1728--2531[label="0.004329;1pkt 1fpkt"];
1728--3556[label="1;231pkt 231fpkt"];
1958--4013[label="1;3pkt 3fpkt"];
2131--2147[label="0.410256;16pkt 16fpkt"];
2131--2263[label="0.153846;6pkt 6fpkt"];
2131--2326[label="0.435897;17pkt 17fpkt"];
2131--4001[label="0.435897;17pkt 17fpkt"];
2131--4013[label="0.153846;6pkt 6fpkt"];
2147--2177[label="0.357143;5pkt 5fpkt"];
2147--2179[label="0.3;3pkt 3fpkt"];
2147--2180[label="0.333333;8pkt 8fpkt"];
2147--2222[label="0.288889;13pkt 13fpkt"];
2147--2226[label="0.375;3pkt 3fpkt"];
2147--2275[label="0.375;3pkt 3fpkt"];
2147--2471[label="0.119565;11pkt 11fpkt"];
2177--2263[label="0.285714;4pkt 4fpkt"];
2177--2326[label="0.357143;5pkt 5fpkt"];
2177--4001[label="0.357143;5pkt 5fpkt"];
2177--4013[label="0.285714;4pkt 4fpkt"];
2179--2263[label="0.3;3pkt 3fpkt"];
2179--2326[label="0.4;4pkt 4fpkt"];
2179--4001[label="0.4;4pkt 4fpkt"];
2179--4013[label="0.3;3pkt 3fpkt"];
2180--2263[label="0.208333;5pkt 5fpkt"];
2180--2326[label="0.375;9pkt 9fpkt"];
2180--4001[label="0.375;9pkt 9fpkt"];
2180--4013[label="0.291667;7pkt 7fpkt"];
2222--2263[label="0.177778;8pkt 8fpkt"];
2222--2326[label="0.311111;14pkt 14fpkt"];
2222--4001[label="0.355556;16pkt 16fpkt"];
2222--4013[label="0.311111;14pkt 14fpkt"];
2226--2263[label="0.25;2pkt 2fpkt"];
2226--2326[label="0.375;3pkt 3fpkt"];
2226--4001[label="0.375;3pkt 3fpkt"];
2226--4013[label="0.25;2pkt 2fpkt"];
2263--2275[label="0.375;3pkt 3fpkt"];
2263--2471[label="0.293478;27pkt 27fpkt"];
2263--4013[label="1;473pkt 473fpkt"];
2275--2326[label="0.25;2pkt 2fpkt"];
2275--4001[label="0.25;2pkt 2fpkt"];
2275--4013[label="0.375;3pkt 3fpkt"];
2326--2471[label="0.304348;28pkt 28fpkt"];
2326--2625[label="0.00333333;2pkt 2fpkt"];
2326--4001[label="1;600pkt 600fpkt"];
2471--4001[label="0.315217;29pkt 29fpkt"];
2471--4013[label="0.554348;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="161.253.139.232"/>
      <filter src_ip="161.253.139.228"/>
      <filter src_ip="161.253.139.233"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
1104[label="132.176.49.41;s;250pkt 250fpkt", shape=diamond, color=yellow];
1587[label="207.107.44.140;s;34pkt 34fpkt", shape=diamond, color=yellow];
1597[label="81.201.181.57;d;5pkt 5fpkt", shape=diamond, color=yellow];
2937[label="132.176.49.41;292pkt 292fpkt", shape=pentagon, color=darkviolet];
3560[label="207.107.44.140;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.49.41:*, *:25}[67.5%]&lt;BR/&gt;{207.107.44.140:*, *:*}[26.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6356%)&lt;BR/&gt; 113: (0.364431%)&lt;BR/&gt; 60999: (0.218659%)&lt;BR/&gt; 34871: (0.218659%)&lt;BR/&gt; 34814: (0.218659%)&gt;];
}
1104--1597[label="0.2;1pkt 1fpkt"];
1104--2937[label="0.996;249pkt 249fpkt"];
1587--1597[label="0.4;2pkt 2fpkt"];
1587--3560[label="1;34pkt 34fpkt"];
1597--2937[label="0.2;1pkt 1fpkt"];
1597--3560[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="207.107.44.140"/>
      <filter dst_port="25" src_ip="132.176.49.41"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.84.150.140"/>
    </slice>
    <from sec="1128920578" usec="0"/>
    <to sec="1128920647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.188.48.141"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.147.249.141"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
217[label="132.176.160.155;d;814pkt 814fpkt", shape=diamond, color=yellow];
310[label="41.33.161.221;s;153pkt 153fpkt", shape=diamond, color=yellow];
311[label="44.4.178.7;s;134pkt 134fpkt", shape=diamond, color=yellow];
549[label="219.48.155.163;s;225pkt 225fpkt", shape=diamond, color=yellow];
978[label="215.2.75.233;s;166pkt 166fpkt", shape=diamond, color=yellow];
1779[label="218.59.99.121;s;71pkt 71fpkt", shape=diamond, color=yellow];
1796[label="41.33.162.143;s;48pkt 48fpkt", shape=diamond, color=yellow];
2142[label="132.176.160.155;d;284pkt 284fpkt", shape=hexagon, color=black];
2259[label="44.4.178.7;s;133pkt 133fpkt", shape=hexagon, color=black];
2434[label="215.2.75.233;s;166pkt 166fpkt", shape=hexagon, color=black];
3578[label="41.33.162.143;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4018[label="215.2.75.233;177pkt 177fpkt", shape=pentagon, color=darkviolet];
4556[label="218.59.99.121;101pkt 101fpkt", shape=invtriangle, color=brown];
4630[label="41.33.162.143;47pkt 47fpkt", shape=invtriangle, color=brown];
5193[label="218.59.99.121;101pkt 101fpkt", shape=invhouse, color=bisque];
5242[label="41.33.162.143;47pkt 47fpkt", shape=invhouse, color=bisque];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.48.155.163:*, 132.176.160.155:80}[26.5873%]&lt;BR/&gt;{44.4.178.7:*, 132.176.160.155:80}[25.496%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1219: (0.110538%)&lt;BR/&gt; 1218: (0.110538%)&lt;BR/&gt; 1217: (0.110538%)&lt;BR/&gt; 1210: (0.110538%)&gt;];
}
217--310[label="1;153pkt 153fpkt"];
217--311[label="0.313433;42pkt 42fpkt"];
217--549[label="1;225pkt 225fpkt"];
217--978[label="0.710843;118pkt 118fpkt"];
217--1779[label="0.774648;55pkt 55fpkt"];
217--1796[label="0.895833;43pkt 43fpkt"];
217--2142[label="1;284pkt 284fpkt"];
217--2259[label="1;133pkt 133fpkt"];
217--2434[label="0.710843;118pkt 118fpkt"];
217--2625[label="0.0737101;60pkt 60fpkt"];
217--2629[label="0.00859951;7pkt 7fpkt"];
217--3578[label="0.893617;42pkt 42fpkt"];
217--4018[label="0.661017;117pkt 117fpkt"];
217--4556[label="0.633663;64pkt 64fpkt"];
217--4630[label="0.893617;42pkt 42fpkt"];
217--5193[label="0.633663;64pkt 64fpkt"];
217--5242[label="0.893617;42pkt 42fpkt"];
310--2142[label="0.444444;68pkt 68fpkt"];
311--2142[label="0.0447761;6pkt 6fpkt"];
311--2259[label="0.075188;10pkt 10fpkt"];
311--2625[label="0.0746269;10pkt 10fpkt"];
311--2629[label="0.0447761;6pkt 6fpkt"];
549--2142[label="0.524444;118pkt 118fpkt"];
549--2625[label="0.168889;38pkt 38fpkt"];
549--2629[label="0.00444444;1pkt 1fpkt"];
978--2142[label="0.114458;19pkt 19fpkt"];
978--2434[label="1;166pkt 166fpkt"];
978--2625[label="0.0481928;8pkt 8fpkt"];
978--2629[label="0.0120482;2pkt 2fpkt"];
978--4018[label="0.993976;165pkt 165fpkt"];
1779--2625[label="0.056338;4pkt 4fpkt"];
1779--4556[label="1;71pkt 71fpkt"];
1779--5193[label="1;71pkt 71fpkt"];
1796--3578[label="1;47pkt 47fpkt"];
1796--4630[label="1;47pkt 47fpkt"];
1796--5242[label="1;47pkt 47fpkt"];
2142--2259[label="0.526316;70pkt 70fpkt"];
2142--2434[label="0.114458;19pkt 19fpkt"];
2142--2625[label="0.0211268;6pkt 6fpkt"];
2142--2629[label="0.0211268;6pkt 6fpkt"];
2142--4018[label="0.101695;18pkt 18fpkt"];
2142--4556[label="0.0891089;9pkt 9fpkt"];
2142--5193[label="0.0891089;9pkt 9fpkt"];
2259--2625[label="0.075188;10pkt 10fpkt"];
2259--2629[label="0.0451128;6pkt 6fpkt"];
2434--2625[label="0.0481928;8pkt 8fpkt"];
2434--2629[label="0.0120482;2pkt 2fpkt"];
2434--4018[label="0.993976;165pkt 165fpkt"];
3578--4630[label="1;47pkt 47fpkt"];
3578--5242[label="1;47pkt 47fpkt"];
4556--5193[label="1;101pkt 101fpkt"];
4630--5242[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.160.155" dst_port="80" src_ip="219.48.155.163"/>
      <filter dst_ip="132.176.160.155" dst_port="80" src_ip="44.4.178.7"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.183.195.143"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.99.5.144"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.50.145"/>
    </slice>
    <from sec="1128920682" usec="0"/>
    <to sec="1128920769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.228.15.146"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.96.149"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.13.130.154"/>
    </slice>
    <from sec="1128920434" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.32.39.155"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.3.32.156"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.150.156"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.194.140.157"/>
    </slice>
    <from sec="1128920998" usec="0"/>
    <to sec="1128921025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.26.213.158"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
1186[label="132.176.240.158;s;144pkt 144fpkt", shape=diamond, color=yellow];
3651[label="132.176.240.158;170pkt 170fpkt", shape=pentagon, color=darkviolet];
4673[label="132.176.240.158;170pkt 170fpkt", shape=invtriangle, color=brown];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.240.158:25, *:*}[74.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.4215%)&lt;BR/&gt; 53: (5.88843%)&lt;BR/&gt; 9253: (0.826446%)&lt;BR/&gt; 3070: (0.619835%)&lt;BR/&gt; 64170: (0.309917%)&gt;];
}
1186--2612[label="0.0138889;2pkt 2fpkt"];
1186--3651[label="1;144pkt 144fpkt"];
1186--4673[label="1;144pkt 144fpkt"];
3651--4673[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.240.158" src_port="25"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.84.67.159"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.68.108.159"/>
    </slice>
    <from sec="1128920749" usec="0"/>
    <to sec="1128921034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.0.155.162"/>
    </slice>
    <from sec="1128920485" usec="0"/>
    <to sec="1128921268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
385[label="86.169.36.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
390[label="146.130.249.67;d;11pkt 11fpkt", shape=diamond, color=yellow];
1000[label="86.169.238.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
1572[label="82.9.86.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
2236[label="146.130.249.67;d;2pkt 2fpkt", shape=hexagon, color=black];
3404[label="86.169.238.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3676[label="82.9.86.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4530[label="86.169.238.112;1pkt 1fpkt", shape=invtriangle, color=brown];
4685[label="82.9.86.163;2pkt 2fpkt", shape=invtriangle, color=brown];
5275[label="82.9.86.163;2pkt 2fpkt", shape=invhouse, color=bisque];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.169.36.96:80, 146.130.249.67:*}[36.3636%]&lt;BR/&gt;{40.121.3.76:80, 146.130.249.67:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19687: (10%)&lt;BR/&gt; 19686: (10%)&lt;BR/&gt; 19654: (10%)&lt;BR/&gt; 19637: (6%)&gt;];
}
385--390[label="1;1pkt 1fpkt"];
385--2236[label="1;1pkt 1fpkt"];
390--1000[label="1;1pkt 1fpkt"];
390--1572[label="1;2pkt 2fpkt"];
390--2236[label="1;2pkt 2fpkt"];
390--3404[label="1;1pkt 1fpkt"];
390--3676[label="1;2pkt 2fpkt"];
390--4530[label="1;1pkt 1fpkt"];
390--4685[label="1;2pkt 2fpkt"];
390--5275[label="1;2pkt 2fpkt"];
1000--2236[label="1;1pkt 1fpkt"];
1000--3404[label="1;1pkt 1fpkt"];
1000--4530[label="1;1pkt 1fpkt"];
1572--3676[label="1;2pkt 2fpkt"];
1572--4685[label="1;2pkt 2fpkt"];
1572--5275[label="1;2pkt 2fpkt"];
2236--3404[label="1;1pkt 1fpkt"];
2236--4530[label="1;1pkt 1fpkt"];
3404--4530[label="1;1pkt 1fpkt"];
3676--4685[label="1;2pkt 2fpkt"];
3676--5275[label="1;2pkt 2fpkt"];
4685--5275[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="146.130.249.67" src_ip="86.169.36.96" src_port="80"/>
      <filter dst_ip="146.130.249.67" src_ip="40.121.3.76" src_port="80"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.8.164"/>
    </slice>
    <from sec="1128920421" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
946[label="132.177.96.165;s;133pkt 133fpkt", shape=diamond, color=yellow];
3686[label="132.177.96.165;137pkt 137fpkt", shape=pentagon, color=darkviolet];
4691[label="132.177.96.165;137pkt 137fpkt", shape=invtriangle, color=brown];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.96.165:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63494: (0.36855%)&lt;BR/&gt; 60623: (0.36855%)&lt;BR/&gt; 60247: (0.36855%)&lt;BR/&gt; 60138: (0.36855%)&gt;];
}
946--3686[label="1;133pkt 133fpkt"];
946--4691[label="1;133pkt 133fpkt"];
3686--4691[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.96.165" src_port="80"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
1996[label="146.250.45.31;d;20pkt 20fpkt", shape=diamond, color=yellow];
2102[label="216.157.250.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
3312[label="193.14.83.99;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3688[label="216.157.250.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4693[label="216.157.250.165;1pkt 1fpkt", shape=invtriangle, color=brown];
5280[label="216.157.250.165;1pkt 1fpkt", shape=invhouse, color=bisque];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.14.83.99:80, 146.250.45.31:*}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5556%)&lt;BR/&gt; 1190: (5.55556%)&lt;BR/&gt; 1230: (2.22222%)&lt;BR/&gt; 1227: (2.22222%)&lt;BR/&gt; 1222: (2.22222%)&gt;];
}
1996--2102[label="1;1pkt 1fpkt"];
1996--3312[label="0.65;13pkt 13fpkt"];
1996--3670[label="0.05;1pkt 1fpkt"];
1996--3688[label="1;1pkt 1fpkt"];
1996--4693[label="1;1pkt 1fpkt"];
1996--5280[label="1;1pkt 1fpkt"];
2102--3688[label="1;1pkt 1fpkt"];
2102--4693[label="1;1pkt 1fpkt"];
2102--5280[label="1;1pkt 1fpkt"];
3688--4693[label="1;1pkt 1fpkt"];
3688--5280[label="1;1pkt 1fpkt"];
4693--5280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.45.31" src_ip="193.14.83.99" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.36.82.166"/>
    </slice>
    <from sec="1128921083" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.36.25.167"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.35.45.167"/>
    </slice>
    <from sec="1128920411" usec="0"/>
    <to sec="1128920561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
621[label="222.221.69.167;s;2673pkt 2673fpkt", shape=diamond, color=yellow];
3698[label="222.221.69.167;2916pkt 2916fpkt", shape=pentagon, color=darkviolet];
4697[label="222.221.69.167;2916pkt 2916fpkt", shape=invtriangle, color=brown];
5284[label="222.221.69.167;2916pkt 2916fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.221.69.167:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39483: (0.0525348%)&lt;BR/&gt; 14145: (0.0525348%)&lt;BR/&gt; 3395: (0.0525348%)&lt;BR/&gt; 45828: (0.0481569%)&gt;];
}
621--3698[label="1;2673pkt 2673fpkt"];
621--4697[label="1;2673pkt 2673fpkt"];
621--5284[label="1;2673pkt 2673fpkt"];
3698--4697[label="1;2916pkt 2916fpkt"];
3698--5284[label="1;2916pkt 2916fpkt"];
4697--5284[label="1;2916pkt 2916fpkt"];
</description>
    <slice>
      <filter src_ip="222.221.69.167" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.236.51.168"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.201.77.168"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
1981[label="166.18.132.168;s;69pkt 69fpkt", shape=diamond, color=yellow];
3704[label="166.18.132.168;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4700[label="166.18.132.168;70pkt 70fpkt", shape=invtriangle, color=brown];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.132.168:*, 85.40.8.31:6667}[38.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2927: (0.717703%)&lt;BR/&gt; 2926: (0.717703%)&lt;BR/&gt; 2925: (0.717703%)&lt;BR/&gt; 2924: (0.717703%)&gt;];
}
1981--3704[label="1;69pkt 69fpkt"];
1981--4700[label="1;69pkt 69fpkt"];
3704--4700[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="85.40.8.31" dst_port="6667" src_ip="166.18.132.168"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.75.169"/>
    </slice>
    <from sec="1128920413" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.130.132.170"/>
    </slice>
    <from sec="1128921174" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.190.170"/>
    </slice>
    <from sec="1128920411" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
934[label="166.18.190.171;s;5pkt 5fpkt", shape=diamond, color=yellow];
1164[label="42.120.44.255;d;5pkt 5fpkt", shape=diamond, color=yellow];
3721[label="166.18.190.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4709[label="166.18.190.171;1pkt 1fpkt", shape=invtriangle, color=brown];
5291[label="166.18.190.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.190.171:*, 42.120.44.255:20}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (34.6154%)&lt;BR/&gt; 1540: (19.2308%)&lt;BR/&gt; 1528: (7.69231%)&lt;BR/&gt; 1477: (7.69231%)&lt;BR/&gt; 1474: (7.69231%)&gt;];
}
934--1164[label="0.8;4pkt 4fpkt"];
934--3721[label="1;1pkt 1fpkt"];
934--4709[label="1;1pkt 1fpkt"];
934--5291[label="1;1pkt 1fpkt"];
1164--3721[label="1;1pkt 1fpkt"];
1164--4709[label="1;1pkt 1fpkt"];
1164--5291[label="1;1pkt 1fpkt"];
3721--4709[label="1;1pkt 1fpkt"];
3721--5291[label="1;1pkt 1fpkt"];
4709--5291[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.120.44.255" dst_port="20" src_ip="166.18.190.171"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
3725[label="132.177.109.172;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.109.172:*, 200.85.146.35:80}[35%]&lt;BR/&gt;{132.177.109.172:*, 200.85.152.130:80}[35%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1809: (2.5%)&lt;BR/&gt; 1808: (2.5%)&lt;BR/&gt; 1806: (2.5%)&lt;BR/&gt; 1805: (2.5%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="200.85.152.130" dst_port="80" src_ip="132.177.109.172"/>
      <filter dst_ip="200.85.146.35" dst_port="80" src_ip="132.177.109.172"/>
    </slice>
    <from sec="1128920423" usec="0"/>
    <to sec="1128921184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
1034[label="161.253.32.173;s;106pkt 106fpkt", shape=diamond, color=yellow];
3730[label="161.253.32.173;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.32.173:*, *:80}[98.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0826%)&lt;BR/&gt; 5061: (0.458716%)&lt;BR/&gt; 5050: (0.458716%)&lt;BR/&gt; 4624: (0.458716%)&lt;BR/&gt; 4622: (0.458716%)&gt;];
}
1034--2625[label="0.0188679;2pkt 2fpkt"];
1034--2629[label="0.00943396;1pkt 1fpkt"];
1034--3730[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.253.32.173"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
2099[label="207.99.146.195;d;23pkt 23fpkt", shape=diamond, color=yellow];
3737[label="43.28.230.173;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.28.230.173:80, 207.99.146.195:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37655: (2.77778%)&lt;BR/&gt; 37654: (2.77778%)&lt;BR/&gt; 37653: (2.77778%)&lt;BR/&gt; 37652: (2.77778%)&gt;];
}
2099--3737[label="0.769231;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="207.99.146.195" src_ip="43.28.230.173" src_port="80"/>
    </slice>
    <from sec="1128921132" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.46.192.175"/>
    </slice>
    <from sec="1128920800" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.226.138.176"/>
    </slice>
    <from sec="1128920572" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.27.216.178"/>
    </slice>
    <from sec="1128921045" usec="0"/>
    <to sec="1128921168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.99.13.179"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.97.180"/>
    </slice>
    <from sec="1128920600" usec="0"/>
    <to sec="1128921078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.146.180"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
959[label="132.176.189.181;s;284pkt 284fpkt", shape=diamond, color=yellow];
1010[label="215.136.49.109;d;36pkt 36fpkt", shape=diamond, color=yellow];
1223[label="219.168.22.118;d;50pkt 50fpkt", shape=diamond, color=yellow];
1388[label="219.168.109.128;d;22pkt 22fpkt", shape=diamond, color=yellow];
1978[label="219.169.201.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
2248[label="215.136.49.109;d;26pkt 26fpkt", shape=hexagon, color=black];
3775[label="132.176.189.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4737[label="132.176.189.181;2pkt 2fpkt", shape=invtriangle, color=brown];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.189.181:*, *:80}[80.9859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.026%)&lt;BR/&gt; 8081: (3.6643%)&lt;BR/&gt; 9575: (0.945626%)&lt;BR/&gt; 8080: (0.827423%)&lt;BR/&gt; 18413: (0.70922%)&gt;];
}
959--1010[label="1;36pkt 36fpkt"];
959--1223[label="1;50pkt 50fpkt"];
959--1388[label="1;22pkt 22fpkt"];
959--1417[label="0.00352113;1pkt 1fpkt"];
959--1978[label="1;1pkt 1fpkt"];
959--2248[label="1;26pkt 26fpkt"];
959--2625[label="0.0105634;3pkt 3fpkt"];
959--3775[label="1;2pkt 2fpkt"];
959--4737[label="1;2pkt 2fpkt"];
1010--2248[label="1;26pkt 26fpkt"];
1978--3775[label="1;1pkt 1fpkt"];
1978--4737[label="1;1pkt 1fpkt"];
3775--4737[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.176.189.181"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
3784[label="128.165.226.184;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.226.184:*, 200.85.144.88:80}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3783: (2.5%)&lt;BR/&gt; 3782: (2.5%)&lt;BR/&gt; 3781: (2.5%)&lt;BR/&gt; 3776: (2.5%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="200.85.144.88" dst_port="80" src_ip="128.165.226.184"/>
    </slice>
    <from sec="1128920497" usec="0"/>
    <to sec="1128921063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.131.63.185"/>
    </slice>
    <from sec="1128921086" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.99.13.186"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.170.246.187"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.120.200.188"/>
    </slice>
    <from sec="1128920447" usec="0"/>
    <to sec="1128921118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
986[label="132.176.182.189;s;118pkt 118fpkt", shape=diamond, color=yellow];
3797[label="132.176.182.189;118pkt 118fpkt", shape=pentagon, color=darkviolet];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.182.189:*, 219.168.105.221:80}[61.8644%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.5254%)&lt;BR/&gt; 5190: (2.11864%)&lt;BR/&gt; 443: (1.27119%)&lt;BR/&gt; 85: (1.27119%)&lt;BR/&gt; 1863: (0.847458%)&gt;];
}
986--3797[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_ip="219.168.105.221" dst_port="80" src_ip="132.176.182.189"/>
    </slice>
    <from sec="1128920496" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.38.191"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.101.75.191"/>
    </slice>
    <from sec="1128920448" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
3807[label="222.176.13.192;204pkt 204fpkt", shape=pentagon, color=darkviolet];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.176.13.192:*, *:1028}[42.6471%]&lt;BR/&gt;{222.176.13.192:*, *:1029}[42.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (21.3235%)&lt;BR/&gt; 1028: (21.3235%)&lt;BR/&gt; 1030: (7.35294%)&lt;BR/&gt; 56564: (0.490196%)&lt;BR/&gt; 56510: (0.490196%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1029" src_ip="222.176.13.192"/>
      <filter dst_port="1028" src_ip="222.176.13.192"/>
    </slice>
    <from sec="1128920990" usec="0"/>
    <to sec="1128921140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.18.130.192"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.90.201.194"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.99.134.195"/>
    </slice>
    <from sec="1128920928" usec="0"/>
    <to sec="1128920974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.212.145.196"/>
    </slice>
    <from sec="1128920466" usec="0"/>
    <to sec="1128921210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.130.21.197"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.144.153.197"/>
    </slice>
    <from sec="1128921153" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
3838[label="132.176.160.197;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.160.197:*, *:80}[45.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.9167%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 37930: (6.25%)&lt;BR/&gt; 7001: (6.25%)&lt;BR/&gt; 443: (6.25%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="132.176.160.197"/>
    </slice>
    <from sec="1128920484" usec="0"/>
    <to sec="1128921279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.8.84.198"/>
    </slice>
    <from sec="1128920450" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.78.17.199"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0826,1.84,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
67[label="220.142.153.199s;138pkt 138fpkt", shape=rectangle, color=red];
3853[label="220.142.153.199;394pkt 394fpkt", shape=pentagon, color=darkviolet];
4782[label="220.142.153.199;394pkt 394fpkt", shape=invtriangle, color=brown];
5342[label="220.142.153.199;394pkt 394fpkt", shape=invhouse, color=bisque];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.142.153.199:34193, *:1026}[55.5838%]&lt;BR/&gt;{220.142.153.199:34193, *:1027}[44.4162%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34193: (50%)&lt;BR/&gt; 1026: (27.803%)&lt;BR/&gt; 1027: (22.197%)&gt;];
}
67--807[label="0.00724638;1pkt 1fpkt"];
67--2204[label="0.00724638;1pkt 1fpkt"];
67--3853[label="1;138pkt 138fpkt"];
67--4782[label="1;138pkt 138fpkt"];
67--5342[label="1;138pkt 138fpkt"];
3853--4782[label="1;394pkt 394fpkt"];
3853--5342[label="1;394pkt 394fpkt"];
4782--5342[label="1;394pkt 394fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.142.153.199" src_port="34193"/>
      <filter dst_port="1027" src_ip="220.142.153.199" src_port="34193"/>
    </slice>
    <from sec="1128920460" usec="0"/>
    <to sec="1128920986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.107.22.200"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.146.109.200"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.85.153.200"/>
    </slice>
    <from sec="1128921025" usec="0"/>
    <to sec="1128921058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.168.205.200"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128920449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.104.202"/>
    </slice>
    <from sec="1128920422" usec="0"/>
    <to sec="1128921264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.105.4.203"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.157.244.203"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.96.49.204"/>
    </slice>
    <from sec="1128920962" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.38.137.205"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.220.194.205"/>
    </slice>
    <from sec="1128921196" usec="0"/>
    <to sec="1128921205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
223[label="128.165.174.77;d;1630pkt 1630fpkt", shape=diamond, color=yellow];
446[label="218.135.178.101;s;2pkt 2fpkt", shape=diamond, color=yellow];
753[label="215.154.87.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
1006[label="215.210.196.53;s;2pkt 2fpkt", shape=diamond, color=yellow];
1462[label="161.253.219.20;d;73pkt 73fpkt", shape=diamond, color=yellow];
1715[label="40.153.171.89;s;20pkt 20fpkt", shape=diamond, color=yellow];
1762[label="219.16.126.110;s;2pkt 2fpkt", shape=diamond, color=yellow];
2435[label="219.16.126.110;s;2pkt 2fpkt", shape=hexagon, color=black];
2470[label="161.253.219.20;d;70pkt 70fpkt", shape=hexagon, color=black];
2699[label="40.182.100.4;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2741[label="41.236.156.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2808[label="219.55.35.19;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2890[label="207.37.28.33;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2918[label="40.135.68.37;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2949[label="44.20.90.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2953[label="206.9.234.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2996[label="207.2.213.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3119[label="222.186.33.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3172[label="66.46.208.77;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3189[label="206.17.187.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3265[label="40.153.171.89;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3300[label="219.231.134.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3360[label="41.236.156.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3364[label="207.172.97.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3365[label="219.16.126.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3381[label="219.16.126.108;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3386[label="219.16.126.109;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3417[label="214.29.70.116;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3430[label="207.151.41.118;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3431[label="40.211.66.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3478[label="217.208.70.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3567[label="194.36.18.141;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3587[label="214.223.197.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3776[label="40.135.47.182;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3785[label="220.228.16.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3820[label="68.115.76.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3876[label="220.133.91.203;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3897[label="215.154.87.206;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3949[label="40.180.3.219;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3967[label="207.46.225.221;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3980[label="219.60.129.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4004[label="206.158.33.230;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4008[label="214.27.208.230;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4061[label="206.183.77.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4083[label="40.47.65.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4084[label="219.96.155.247;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4141[label="40.182.100.4;67pkt 67fpkt", shape=invtriangle, color=brown];
4275[label="206.9.234.44;2pkt 2fpkt", shape=invtriangle, color=brown];
4286[label="194.247.89.46;1pkt 1fpkt", shape=invtriangle, color=brown];
4299[label="207.2.213.51;2pkt 2fpkt", shape=invtriangle, color=brown];
4361[label="214.27.232.68;7pkt 7fpkt", shape=invtriangle, color=brown];
4403[label="206.17.187.79;1pkt 1fpkt", shape=invtriangle, color=brown];
4448[label="40.153.171.89;25pkt 25fpkt", shape=invtriangle, color=brown];
4471[label="219.231.134.97;1pkt 1fpkt", shape=invtriangle, color=brown];
4501[label="41.236.156.105;1pkt 1fpkt", shape=invtriangle, color=brown];
4504[label="207.172.97.106;1pkt 1fpkt", shape=invtriangle, color=brown];
4516[label="219.16.126.108;2pkt 2fpkt", shape=invtriangle, color=brown];
4519[label="219.16.126.109;2pkt 2fpkt", shape=invtriangle, color=brown];
4546[label="40.211.66.118;2pkt 2fpkt", shape=invtriangle, color=brown];
4575[label="217.208.70.128;1pkt 1fpkt", shape=invtriangle, color=brown];
4622[label="194.36.18.141;121pkt 121fpkt", shape=invtriangle, color=brown];
4637[label="214.223.197.144;1pkt 1fpkt", shape=invtriangle, color=brown];
4738[label="40.135.47.182;2pkt 2fpkt", shape=invtriangle, color=brown];
4796[label="220.133.91.203;10pkt 10fpkt", shape=invtriangle, color=brown];
4805[label="215.154.87.206;5pkt 5fpkt", shape=invtriangle, color=brown];
4821[label="45.123.173.211;5pkt 5fpkt", shape=invtriangle, color=brown];
4835[label="40.180.3.219;3pkt 3fpkt", shape=invtriangle, color=brown];
4851[label="219.60.129.224;2pkt 2fpkt", shape=invtriangle, color=brown];
4874[label="214.27.208.230;8pkt 8fpkt", shape=invtriangle, color=brown];
4897[label="206.183.77.243;1pkt 1fpkt", shape=invtriangle, color=brown];
4909[label="219.96.155.247;2pkt 2fpkt", shape=invtriangle, color=brown];
4938[label="40.182.100.4;66pkt 66fpkt", shape=invhouse, color=bisque];
5026[label="194.247.89.46;1pkt 1fpkt", shape=invhouse, color=bisque];
5128[label="40.153.171.89;25pkt 25fpkt", shape=invhouse, color=bisque];
5159[label="41.236.156.105;1pkt 1fpkt", shape=invhouse, color=bisque];
5162[label="207.172.97.106;1pkt 1fpkt", shape=invhouse, color=bisque];
5170[label="219.16.126.108;2pkt 2fpkt", shape=invhouse, color=bisque];
5185[label="40.211.66.118;2pkt 2fpkt", shape=invhouse, color=bisque];
5205[label="217.208.70.128;1pkt 1fpkt", shape=invhouse, color=bisque];
5350[label="220.133.91.203;10pkt 10fpkt", shape=invhouse, color=bisque];
5354[label="215.154.87.206;5pkt 5fpkt", shape=invhouse, color=bisque];
5361[label="45.123.173.211;5pkt 5fpkt", shape=invhouse, color=bisque];
5367[label="40.180.3.219;3pkt 3fpkt", shape=invhouse, color=bisque];
5376[label="219.60.129.224;2pkt 2fpkt", shape=invhouse, color=bisque];
5420[label="219.96.155.247;2pkt 2fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 128.165.174.77:*}[46.3014%]&lt;BR/&gt;{*:*, 128.165.174.77:25}[41.3699%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.9305%)&lt;BR/&gt; 53: (21.715%)&lt;BR/&gt; 0: (6.23263%)&lt;BR/&gt; 80: (0.297737%)&lt;BR/&gt; 4083: (0.178642%)&gt;];
}
223--446[label="1;2pkt 2fpkt"];
223--753[label="1;1pkt 1fpkt"];
223--1006[label="1;2pkt 2fpkt"];
223--1715[label="1;20pkt 20fpkt"];
223--1762[label="1;2pkt 2fpkt"];
223--2435[label="1;2pkt 2fpkt"];
223--2612[label="0.0361963;59pkt 59fpkt"];
223--2627[label="0.0245399;40pkt 40fpkt"];
223--2643[label="0.0245399;40pkt 40fpkt"];
223--2658[label="0.0245399;40pkt 40fpkt"];
223--2699[label="0.134328;9pkt 9fpkt"];
223--2741[label="1;1pkt 1fpkt"];
223--2808[label="0.5;2pkt 2fpkt"];
223--2890[label="1;3pkt 3fpkt"];
223--2918[label="1;4pkt 4fpkt"];
223--2949[label="1;2pkt 2fpkt"];
223--2953[label="1;2pkt 2fpkt"];
223--2996[label="1;2pkt 2fpkt"];
223--3119[label="1;1pkt 1fpkt"];
223--3172[label="1;7pkt 7fpkt"];
223--3189[label="1;1pkt 1fpkt"];
223--3265[label="0.88;22pkt 22fpkt"];
223--3300[label="1;1pkt 1fpkt"];
223--3360[label="1;1pkt 1fpkt"];
223--3364[label="1;1pkt 1fpkt"];
223--3365[label="1;3pkt 3fpkt"];
223--3381[label="1;2pkt 2fpkt"];
223--3386[label="1;2pkt 2fpkt"];
223--3417[label="0.8;4pkt 4fpkt"];
223--3430[label="1;7pkt 7fpkt"];
223--3431[label="1;2pkt 2fpkt"];
223--3478[label="1;1pkt 1fpkt"];
223--3567[label="0.53719;65pkt 65fpkt"];
223--3587[label="1;1pkt 1fpkt"];
223--3776[label="1;2pkt 2fpkt"];
223--3785[label="1;1pkt 1fpkt"];
223--3800[label="0.166667;10pkt 10fpkt"];
223--3801[label="0.125;4pkt 4fpkt"];
223--3820[label="1;2pkt 2fpkt"];
223--3876[label="1;10pkt 10fpkt"];
223--3897[label="1;5pkt 5fpkt"];
223--3949[label="1;3pkt 3fpkt"];
223--3967[label="0.5;2pkt 2fpkt"];
223--3980[label="1;2pkt 2fpkt"];
223--4004[label="1;9pkt 9fpkt"];
223--4008[label="1;8pkt 8fpkt"];
223--4061[label="1;1pkt 1fpkt"];
223--4083[label="1;1pkt 1fpkt"];
223--4084[label="1;2pkt 2fpkt"];
223--4141[label="0.134328;9pkt 9fpkt"];
223--4275[label="1;2pkt 2fpkt"];
223--4286[label="1;1pkt 1fpkt"];
223--4299[label="1;2pkt 2fpkt"];
223--4361[label="1;7pkt 7fpkt"];
223--4403[label="1;1pkt 1fpkt"];
223--4448[label="0.88;22pkt 22fpkt"];
223--4471[label="1;1pkt 1fpkt"];
223--4501[label="1;1pkt 1fpkt"];
223--4504[label="1;1pkt 1fpkt"];
223--4516[label="1;2pkt 2fpkt"];
223--4519[label="1;2pkt 2fpkt"];
223--4546[label="1;2pkt 2fpkt"];
223--4575[label="1;1pkt 1fpkt"];
223--4622[label="0.53719;65pkt 65fpkt"];
223--4637[label="1;1pkt 1fpkt"];
223--4738[label="1;2pkt 2fpkt"];
223--4749[label="0.166667;10pkt 10fpkt"];
223--4796[label="1;10pkt 10fpkt"];
223--4805[label="1;5pkt 5fpkt"];
223--4821[label="0.8;4pkt 4fpkt"];
223--4835[label="1;3pkt 3fpkt"];
223--4851[label="1;2pkt 2fpkt"];
223--4874[label="1;8pkt 8fpkt"];
223--4897[label="1;1pkt 1fpkt"];
223--4909[label="1;2pkt 2fpkt"];
223--4938[label="0.136364;9pkt 9fpkt"];
223--5026[label="1;1pkt 1fpkt"];
223--5128[label="0.88;22pkt 22fpkt"];
223--5159[label="1;1pkt 1fpkt"];
223--5162[label="1;1pkt 1fpkt"];
223--5170[label="1;2pkt 2fpkt"];
223--5185[label="1;2pkt 2fpkt"];
223--5205[label="1;1pkt 1fpkt"];
223--5316[label="0.166667;10pkt 10fpkt"];
223--5350[label="1;10pkt 10fpkt"];
223--5354[label="1;5pkt 5fpkt"];
223--5361[label="0.8;4pkt 4fpkt"];
223--5367[label="1;3pkt 3fpkt"];
223--5376[label="1;2pkt 2fpkt"];
223--5420[label="1;2pkt 2fpkt"];
753--3897[label="1;1pkt 1fpkt"];
753--4805[label="1;1pkt 1fpkt"];
753--5354[label="1;1pkt 1fpkt"];
1462--2470[label="1;70pkt 70fpkt"];
1462--3967[label="0.25;1pkt 1fpkt"];
1715--3265[label="1;20pkt 20fpkt"];
1715--4448[label="1;20pkt 20fpkt"];
1715--5128[label="1;20pkt 20fpkt"];
1762--2435[label="1;2pkt 2fpkt"];
2470--3967[label="0.25;1pkt 1fpkt"];
2699--4141[label="1;67pkt 67fpkt"];
2699--4938[label="1;66pkt 66fpkt"];
2953--4275[label="1;2pkt 2fpkt"];
2996--4299[label="1;2pkt 2fpkt"];
3189--4403[label="1;1pkt 1fpkt"];
3265--4448[label="1;25pkt 25fpkt"];
3265--5128[label="1;25pkt 25fpkt"];
3300--4471[label="1;1pkt 1fpkt"];
3360--4501[label="1;1pkt 1fpkt"];
3360--5159[label="1;1pkt 1fpkt"];
3364--4504[label="1;1pkt 1fpkt"];
3364--5162[label="1;1pkt 1fpkt"];
3381--4516[label="1;2pkt 2fpkt"];
3381--5170[label="1;2pkt 2fpkt"];
3386--4519[label="1;2pkt 2fpkt"];
3431--4546[label="1;2pkt 2fpkt"];
3431--5185[label="1;2pkt 2fpkt"];
3478--4575[label="1;1pkt 1fpkt"];
3478--5205[label="1;1pkt 1fpkt"];
3567--4622[label="1;121pkt 121fpkt"];
3587--4637[label="1;1pkt 1fpkt"];
3776--4738[label="1;2pkt 2fpkt"];
3876--4796[label="1;10pkt 10fpkt"];
3876--5350[label="1;10pkt 10fpkt"];
3897--4805[label="1;5pkt 5fpkt"];
3897--5354[label="1;5pkt 5fpkt"];
3949--4835[label="1;3pkt 3fpkt"];
3949--5367[label="1;3pkt 3fpkt"];
3980--4851[label="1;2pkt 2fpkt"];
3980--5376[label="1;2pkt 2fpkt"];
4008--4874[label="1;8pkt 8fpkt"];
4061--4897[label="1;1pkt 1fpkt"];
4084--4909[label="1;2pkt 2fpkt"];
4084--5420[label="1;2pkt 2fpkt"];
4141--4938[label="1;66pkt 66fpkt"];
4286--5026[label="1;1pkt 1fpkt"];
4448--5128[label="1;25pkt 25fpkt"];
4501--5159[label="1;1pkt 1fpkt"];
4504--5162[label="1;1pkt 1fpkt"];
4516--5170[label="1;2pkt 2fpkt"];
4546--5185[label="1;2pkt 2fpkt"];
4575--5205[label="1;1pkt 1fpkt"];
4796--5350[label="1;10pkt 10fpkt"];
4805--5354[label="1;5pkt 5fpkt"];
4821--5361[label="1;5pkt 5fpkt"];
4835--5367[label="1;3pkt 3fpkt"];
4851--5376[label="1;2pkt 2fpkt"];
4909--5420[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.174.77" src_port="53"/>
      <filter dst_ip="128.165.174.77" dst_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.68.192.207"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.214.34.211"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.94.8.212"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.28.133.212"/>
    </slice>
    <from sec="1128921094" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.101.68.213"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.52.13.214"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.37.217"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.130.121.217"/>
    </slice>
    <from sec="1128921067" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.224.217"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753315,1.85551,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
213[label="68.64.224.217;d;5239pkt 5239fpkt", shape=diamond, color=yellow];
214[label="68.64.224.217;s;5777pkt 5777fpkt", shape=diamond, color=yellow];
3944[label="68.64.224.217;6217pkt 6217fpkt", shape=pentagon, color=darkviolet];
5365[label="68.64.224.217;6207pkt 6207fpkt", shape=invhouse, color=bisque];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.64.224.217:80, 68.64.224.217:*}[39.7724%]&lt;BR/&gt;{68.64.224.217:21840, 68.64.224.217:*}[26.4187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.2978%)&lt;BR/&gt; 21840: (13.2828%)&lt;BR/&gt; 21845: (3.53669%)&lt;BR/&gt; 25: (0.966297%)&lt;BR/&gt; 7700: (0.930034%)&gt;];
}
213--214[label="0.995992;5218pkt 5218fpkt"];
213--2615[label="0.00985389;29pkt 29fpkt"];
213--2625[label="0.0125978;66pkt 66fpkt"];
213--2627[label="0.000763504;4pkt 4fpkt"];
213--2628[label="0.00169779;1pkt 1fpkt"];
213--2629[label="0.00102062;5pkt 5fpkt"];
213--2633[label="0.00985389;29pkt 29fpkt"];
213--2643[label="0.000763504;4pkt 4fpkt"];
213--2644[label="0.00169779;1pkt 1fpkt"];
213--2647[label="0.000763504;4pkt 4fpkt"];
213--2649[label="0.00985389;29pkt 29fpkt"];
213--2658[label="0.000763504;4pkt 4fpkt"];
213--2659[label="0.00169492;1pkt 1fpkt"];
213--3944[label="0.995992;5218pkt 5218fpkt"];
213--5365[label="0.994274;5209pkt 5209fpkt"];
214--2615[label="0.00985389;29pkt 29fpkt"];
214--2625[label="0.0117307;65pkt 65fpkt"];
214--2627[label="0.000692401;4pkt 4fpkt"];
214--2628[label="0.00169779;1pkt 1fpkt"];
214--2629[label="0.00122474;6pkt 6fpkt"];
214--2633[label="0.00985389;29pkt 29fpkt"];
214--2643[label="0.000692401;4pkt 4fpkt"];
214--2644[label="0.00169779;1pkt 1fpkt"];
214--2647[label="0.000692401;4pkt 4fpkt"];
214--2649[label="0.00985389;29pkt 29fpkt"];
214--2658[label="0.000692401;4pkt 4fpkt"];
214--2659[label="0.00169492;1pkt 1fpkt"];
214--3944[label="1;5777pkt 5777fpkt"];
214--5365[label="0.998442;5768pkt 5768fpkt"];
3944--5365[label="1;6207pkt 6207fpkt"];
</description>
    <slice>
      <filter dst_ip="68.64.224.217" src_ip="68.64.224.217" src_port="80"/>
      <filter dst_ip="68.64.224.217" src_ip="68.64.224.217" src_port="21840"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.120.140.218"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.97.150.219"/>
    </slice>
    <from sec="1128920866" usec="0"/>
    <to sec="1128920889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.112.255.219"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.70.119.221"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
273[label="161.253.183.77;d;234pkt 234fpkt", shape=diamond, color=yellow];
275[label="85.85.159.223;s;116pkt 116fpkt", shape=diamond, color=yellow];
291[label="85.85.159.209;s;114pkt 114fpkt", shape=diamond, color=yellow];
3973[label="85.85.159.223;126pkt 126fpkt", shape=pentagon, color=darkviolet];
4848[label="85.85.159.223;126pkt 126fpkt", shape=invtriangle, color=brown];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.85.159.223:80, 161.253.183.77:*}[51.6393%]&lt;BR/&gt;{85.85.159.209:80, 161.253.183.77:*}[46.7213%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7207%)&lt;BR/&gt; 2944: (0.27933%)&lt;BR/&gt; 2941: (0.27933%)&lt;BR/&gt; 2939: (0.27933%)&lt;BR/&gt; 2932: (0.27933%)&gt;];
}
273--275[label="1;116pkt 116fpkt"];
273--291[label="1;114pkt 114fpkt"];
273--3973[label="0.920635;116pkt 116fpkt"];
273--4848[label="0.920635;116pkt 116fpkt"];
275--3973[label="1;116pkt 116fpkt"];
275--4848[label="1;116pkt 116fpkt"];
3973--4848[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.183.77" src_ip="85.85.159.223" src_port="80"/>
      <filter dst_ip="161.253.183.77" src_ip="85.85.159.209" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.2.113.225"/>
    </slice>
    <from sec="1128920789" usec="0"/>
    <to sec="1128921286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.98.120.227"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.236.38.228"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.127.114.228"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.58.229"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.33.230"/>
    </slice>
    <from sec="1128920447" usec="0"/>
    <to sec="1128921273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.176.43.230"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.145.61.231"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.21.252.234"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
968[label="3.214.34.211;s;90pkt 90fpkt", shape=diamond, color=yellow];
996[label="207.99.4.131;d;106pkt 106fpkt", shape=diamond, color=yellow];
1189[label="3.214.34.235;s;81pkt 81fpkt", shape=diamond, color=yellow];
4026[label="3.214.34.235;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.214.34.211:443, 207.99.4.131:*}[26.5625%]&lt;BR/&gt;{3.214.34.235:443, 207.99.4.131:*}[26.0417%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.7394%)&lt;BR/&gt; 80: (2.26064%)&lt;BR/&gt; 53679: (0.398936%)&lt;BR/&gt; 53678: (0.398936%)&lt;BR/&gt; 53677: (0.398936%)&gt;];
}
968--996[label="0.588889;53pkt 53fpkt"];
996--1189[label="0.617284;50pkt 50fpkt"];
996--4026[label="0.505051;50pkt 50fpkt"];
1189--4026[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="207.99.4.131" src_ip="3.214.34.235" src_port="443"/>
      <filter dst_ip="207.99.4.131" src_ip="3.214.34.211" src_port="443"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.204.161.235"/>
    </slice>
    <from sec="1128920429" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
1394[label="161.253.33.59;d;103pkt 103fpkt", shape=diamond, color=yellow];
4035[label="218.46.202.237;65pkt 65fpkt", shape=pentagon, color=darkviolet];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.46.202.237:80, 161.253.33.59:*}[63.1068%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1548%)&lt;BR/&gt; 8000: (5.95238%)&lt;BR/&gt; 1735: (5.35714%)&lt;BR/&gt; 3383: (0.595238%)&lt;BR/&gt; 3382: (0.595238%)&gt;];
}
1394--3808[label="0.00970874;1pkt 1fpkt"];
1394--4035[label="1;65pkt 65fpkt"];
1394--4753[label="0.00970874;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.33.59" src_ip="218.46.202.237" src_port="80"/>
    </slice>
    <from sec="1128920736" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.18.9.238"/>
    </slice>
    <from sec="1128920635" usec="0"/>
    <to sec="1128921075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.177.49.239"/>
    </slice>
    <from sec="1128920445" usec="0"/>
    <to sec="1128921231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.177.178.239"/>
    </slice>
    <from sec="1128921117" usec="0"/>
    <to sec="1128921198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
663[label="162.255.128.240;s;333pkt 333fpkt", shape=diamond, color=yellow];
4048[label="162.255.128.240;338pkt 338fpkt", shape=pentagon, color=darkviolet];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.255.128.240:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
663--4048[label="1;333pkt 333fpkt"];
</description>
    <slice>
      <filter src_ip="162.255.128.240"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.166.52.241"/>
    </slice>
    <from sec="1128920428" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.205.21.242"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.589506,1.87449,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
1329[label="132.176.54.244;s;87pkt 87fpkt", shape=diamond, color=yellow];
4064[label="132.176.54.244;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.54.244:*, 87.128.159.128:25}[32.5203%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0476%)&lt;BR/&gt; 80: (0.952381%)&lt;BR/&gt; 45892: (0.47619%)&lt;BR/&gt; 42098: (0.47619%)&lt;BR/&gt; 42097: (0.47619%)&gt;];
}
1329--4064[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="87.128.159.128" dst_port="25" src_ip="132.176.54.244"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.81.138.245"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.172.155.245"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.253.232.247"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.24.124.248"/>
    </slice>
    <from sec="1128920421" usec="0"/>
    <to sec="1128921286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.125.196.249"/>
    </slice>
    <from sec="1128920429" usec="0"/>
    <to sec="1128921290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.149.59.250"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.51.197.251"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128920416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407096,1.91775,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.213.160.255"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
2661[label="132.177.21.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4112[label="132.177.21.0;2pkt 2fpkt", shape=invtriangle, color=brown];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.21.0:54115, 207.58.80.6:32795}[50%]&lt;BR/&gt;{132.177.21.0:53, 207.58.89.180:32771}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54115: (25%)&lt;BR/&gt; 32795: (25%)&lt;BR/&gt; 32771: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
2661--4112[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="207.58.89.180" dst_port="32771" src_ip="132.177.21.0" src_port="53"/>
      <filter dst_ip="207.58.80.6" dst_port="32795" src_ip="132.177.21.0" src_port="54115"/>
    </slice>
    <from sec="1128920977" usec="0"/>
    <to sec="1128921094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
2663[label="161.253.33.0;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4114[label="161.253.33.0;5pkt 5fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.33.0:3677, 201.135.157.168:28805}[20%]&lt;BR/&gt;{161.253.33.0:3678, 201.135.157.132:80}[20%]&lt;BR/&gt;{161.253.33.0:3692, 201.135.157.132:80}[20%]&lt;BR/&gt;{161.253.33.0:3679, 212.230.36.188:80}[20%]&lt;BR/&gt;{161.253.33.0:3693, 212.230.36.188:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 28805: (10%)&lt;BR/&gt; 3693: (10%)&lt;BR/&gt; 3692: (10%)&lt;BR/&gt; 3679: (10%)&gt;];
}
2663--4114[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.230.36.188" dst_port="80" src_ip="161.253.33.0" src_port="3693"/>
      <filter dst_ip="212.230.36.188" dst_port="80" src_ip="161.253.33.0" src_port="3679"/>
      <filter dst_ip="201.135.157.132" dst_port="80" src_ip="161.253.33.0" src_port="3692"/>
      <filter dst_ip="201.135.157.132" dst_port="80" src_ip="161.253.33.0" src_port="3678"/>
      <filter dst_ip="201.135.157.168" dst_port="28805" src_ip="161.253.33.0" src_port="3677"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.10.154.0"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.253.180.0"/>
    </slice>
    <from sec="1128920962" usec="0"/>
    <to sec="1128921001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
2672[label="166.18.190.0;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4121[label="166.18.190.0;10pkt 10fpkt", shape=invtriangle, color=brown];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.190.0:*, 200.53.86.20:443}[40%]&lt;BR/&gt;{166.18.190.0:*, 206.130.211.81:443}[20%]&lt;BR/&gt;{166.18.190.0:*, 216.248.70.226:5050}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (35%)&lt;BR/&gt; 5050: (15%)&lt;BR/&gt; 1361: (5%)&lt;BR/&gt; 1360: (5%)&lt;BR/&gt; 1347: (5%)&gt;];
}
2672--4121[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="200.53.86.20" dst_port="443" src_ip="166.18.190.0"/>
      <filter dst_ip="216.248.70.226" dst_port="5050" src_ip="166.18.190.0"/>
      <filter dst_ip="206.130.211.81" dst_port="443" src_ip="166.18.190.0"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.73.128.2"/>
    </slice>
    <from sec="1128920463" usec="0"/>
    <to sec="1128921279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
2690[label="218.35.136.3;143pkt 143fpkt", shape=pentagon, color=darkviolet];
4135[label="218.35.136.3;143pkt 143fpkt", shape=invtriangle, color=brown];
4934[label="218.35.136.3;142pkt 142fpkt", shape=invhouse, color=bisque];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.35.136.3:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 23513: (0.700935%)&lt;BR/&gt; 28234: (0.350467%)&lt;BR/&gt; 27830: (0.350467%)&lt;BR/&gt; 27768: (0.350467%)&gt;];
}
2690--4135[label="1;143pkt 143fpkt"];
2690--4934[label="1;142pkt 142fpkt"];
4135--4934[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="218.35.136.3"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128920472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
2691[label="161.253.174.3;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4136[label="161.253.174.3;11pkt 11fpkt", shape=invtriangle, color=brown];
4935[label="161.253.174.3;10pkt 10fpkt", shape=invhouse, color=bisque];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.174.3:*, 80.244.86.33:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3125%)&lt;BR/&gt; 2079: (4.6875%)&lt;BR/&gt; 2078: (4.6875%)&lt;BR/&gt; 2067: (4.6875%)&lt;BR/&gt; 2061: (4.6875%)&gt;];
}
2691--4136[label="1;11pkt 11fpkt"];
2691--4935[label="1;10pkt 10fpkt"];
4136--4935[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="80.244.86.33" dst_port="80" src_ip="161.253.174.3"/>
    </slice>
    <from sec="1128920430" usec="0"/>
    <to sec="1128921275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
2704[label="219.15.164.4;152pkt 152fpkt", shape=pentagon, color=darkviolet];
4143[label="219.15.164.4;152pkt 152fpkt", shape=invtriangle, color=brown];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.15.164.4:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2704--4143[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.15.164.4" src_port="1027"/>
    </slice>
    <from sec="1128921277" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
2708[label="128.165.100.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4144[label="128.165.100.5;1pkt 1fpkt", shape=invtriangle, color=brown];
4939[label="128.165.100.5;1pkt 1fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.100.5:1297, 44.37.73.27:33914}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33914: (50%)&lt;BR/&gt; 1297: (50%)&gt;];
}
2708--4144[label="1;1pkt 1fpkt"];
2708--4939[label="1;1pkt 1fpkt"];
4144--4939[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.37.73.27" dst_port="33914" src_ip="128.165.100.5" src_port="1297"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.5.129.5"/>
    </slice>
    <from sec="1128920418" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
2720[label="161.253.86.7;57pkt 57fpkt", shape=pentagon, color=darkviolet];
4149[label="161.253.86.7;58pkt 58fpkt", shape=invtriangle, color=brown];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.86.7:*, 193.124.153.244:80}[70.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1304%)&lt;BR/&gt; 4388: (0.869565%)&lt;BR/&gt; 4386: (0.869565%)&lt;BR/&gt; 4385: (0.869565%)&lt;BR/&gt; 4384: (0.869565%)&gt;];
}
2720--4149[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="193.124.153.244" dst_port="80" src_ip="161.253.86.7"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
2730[label="206.140.9.9;96pkt 96fpkt", shape=pentagon, color=darkviolet];
4153[label="206.140.9.9;96pkt 96fpkt", shape=invtriangle, color=brown];
4943[label="206.140.9.9;96pkt 96fpkt", shape=invhouse, color=bisque];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.140.9.9:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4436: (1.04167%)&lt;BR/&gt; 4921: (0.520833%)&lt;BR/&gt; 4792: (0.520833%)&lt;BR/&gt; 4751: (0.520833%)&gt;];
}
2730--4153[label="1;96pkt 96fpkt"];
2730--4943[label="1;96pkt 96fpkt"];
4153--4943[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="206.140.9.9"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.24.212.9"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
2739[label="128.165.70.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4156[label="128.165.70.10;3pkt 3fpkt", shape=invtriangle, color=brown];
4946[label="128.165.70.10;2pkt 2fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.70.10:62391, 67.142.160.122:6667}[33.3333%]&lt;BR/&gt;{128.165.70.10:55404, 192.179.43.3:6667}[33.3333%]&lt;BR/&gt;{128.165.70.10:62390, 192.179.43.3:6667}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 62390: (18.75%)&lt;BR/&gt; 55404: (18.75%)&lt;BR/&gt; 62391: (12.5%)&gt;];
}
2739--4156[label="1;3pkt 3fpkt"];
2739--4946[label="1;2pkt 2fpkt"];
4156--4946[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.179.43.3" dst_port="6667" src_ip="128.165.70.10" src_port="62390"/>
      <filter dst_ip="192.179.43.3" dst_port="6667" src_ip="128.165.70.10" src_port="55404"/>
      <filter dst_ip="67.142.160.122" dst_port="6667" src_ip="128.165.70.10" src_port="62391"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.236.156.10"/>
    </slice>
    <from sec="1128921224" usec="0"/>
    <to sec="1128921250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
1929[label="146.250.102.76;d;85pkt 85fpkt", shape=diamond, color=yellow];
2752[label="40.116.196.11;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4166[label="40.116.196.11;7pkt 7fpkt", shape=invtriangle, color=brown];
4953[label="40.116.196.11;7pkt 7fpkt", shape=invhouse, color=bisque];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 146.250.102.76:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1794: (1.86916%)&lt;BR/&gt; 1792: (1.86916%)&lt;BR/&gt; 1778: (1.86916%)&lt;BR/&gt; 1774: (1.86916%)&gt;];
}
1929--2752[label="0.5;4pkt 4fpkt"];
1929--4166[label="0.571429;4pkt 4fpkt"];
1929--4953[label="0.571429;4pkt 4fpkt"];
2752--4166[label="1;7pkt 7fpkt"];
2752--4953[label="1;7pkt 7fpkt"];
4166--4953[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.102.76" src_port="80"/>
    </slice>
    <from sec="1128920482" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
2764[label="132.176.222.13;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4173[label="132.176.222.13;16pkt 16fpkt", shape=invtriangle, color=brown];
4958[label="132.176.222.13;15pkt 15fpkt", shape=invhouse, color=bisque];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.222.13:*, 150.144.190.41:80}[62.5%]&lt;BR/&gt;{132.176.222.13:*, 150.144.185.29:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8085%)&lt;BR/&gt; 0: (6.38298%)&lt;BR/&gt; 1127: (3.19149%)&lt;BR/&gt; 1126: (3.19149%)&lt;BR/&gt; 1125: (3.19149%)&gt;];
}
2764--4173[label="1;16pkt 16fpkt"];
2764--4958[label="1;15pkt 15fpkt"];
4173--4958[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="150.144.190.41" dst_port="80" src_ip="132.176.222.13"/>
      <filter dst_ip="150.144.185.29" dst_port="80" src_ip="132.176.222.13"/>
    </slice>
    <from sec="1128920645" usec="0"/>
    <to sec="1128921238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
2765[label="132.177.24.14;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4174[label="132.177.24.14;22pkt 22fpkt", shape=invtriangle, color=brown];
4959[label="132.177.24.14;22pkt 22fpkt", shape=invhouse, color=bisque];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.24.14:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55240: (4.54545%)&lt;BR/&gt; 51556: (2.27273%)&lt;BR/&gt; 46192: (2.27273%)&lt;BR/&gt; 41450: (2.27273%)&lt;BR/&gt; 39871: (2.27273%)&gt;];
}
2765--4174[label="1;22pkt 22fpkt"];
2765--4959[label="1;22pkt 22fpkt"];
4174--4959[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.24.14"/>
    </slice>
    <from sec="1128920467" usec="0"/>
    <to sec="1128921290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
2769[label="84.89.217.14;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4176[label="84.89.217.14;7pkt 7fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.89.217.14:*, 128.34.216.155:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 62140: (7.69231%)&lt;BR/&gt; 62139: (7.69231%)&lt;BR/&gt; 62138: (7.69231%)&lt;BR/&gt; 62137: (7.69231%)&gt;];
}
2769--4176[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.34.216.155" dst_port="80" src_ip="84.89.217.14"/>
    </slice>
    <from sec="1128920680" usec="0"/>
    <to sec="1128920762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
2770[label="40.108.1.15;296pkt 296fpkt", shape=pentagon, color=darkviolet];
4177[label="40.108.1.15;297pkt 297fpkt", shape=invtriangle, color=brown];
4961[label="40.108.1.15;297pkt 297fpkt", shape=invhouse, color=bisque];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.108.1.15:1025, *:137}[99.6633%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50.1685%)&lt;BR/&gt; 1025: (49.8315%)&gt;];
}
2770--4177[label="1;296pkt 296fpkt"];
2770--4961[label="1;296pkt 296fpkt"];
4177--4961[label="1;297pkt 297fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="40.108.1.15" src_port="1025"/>
    </slice>
    <from sec="1128920917" usec="0"/>
    <to sec="1128921152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.200.229.15"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2779[label="132.176.44.16;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4181[label="132.176.44.16;24pkt 24fpkt", shape=invtriangle, color=brown];
4964[label="132.176.44.16;23pkt 23fpkt", shape=invhouse, color=bisque];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.44.16:*, 203.91.222.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2890: (2.11268%)&lt;BR/&gt; 2888: (2.11268%)&lt;BR/&gt; 2886: (2.11268%)&lt;BR/&gt; 2884: (2.11268%)&gt;];
}
2779--4181[label="1;24pkt 24fpkt"];
2779--4964[label="1;23pkt 23fpkt"];
4181--4964[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="203.91.222.98" dst_port="80" src_ip="132.176.44.16"/>
    </slice>
    <from sec="1128920430" usec="0"/>
    <to sec="1128920453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
2781[label="132.176.80.16;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4182[label="132.176.80.16;29pkt 29fpkt", shape=invtriangle, color=brown];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.80.16:52663, *:53}[86.2069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52663: (43.1034%)&lt;BR/&gt; 53: (43.1034%)&lt;BR/&gt; 0: (13.7931%)&gt;];
}
2781--4182[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="132.176.80.16" src_port="52663"/>
    </slice>
    <from sec="1128920517" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
1657[label="216.248.70.242;d;24pkt 24fpkt", shape=diamond, color=yellow];
2785[label="166.18.190.16;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4184[label="166.18.190.16;6pkt 6fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.190.16:*, *:*}[25%]&lt;BR/&gt;{166.18.190.234:*, 216.248.70.242:5050}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34.7222%)&lt;BR/&gt; 443: (11.1111%)&lt;BR/&gt; 1454: (4.16667%)&lt;BR/&gt; 1453: (4.16667%)&lt;BR/&gt; 1470: (2.77778%)&gt;];
}
1657--2785[label="0.333333;2pkt 2fpkt"];
1657--4184[label="0.333333;2pkt 2fpkt"];
2785--4184[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="166.18.190.16"/>
      <filter dst_ip="216.248.70.242" dst_port="5050" src_ip="166.18.190.234"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
955[label="128.165.80.17;s;138pkt 138fpkt", shape=diamond, color=yellow];
2788[label="128.165.80.17;152pkt 152fpkt", shape=pentagon, color=darkviolet];
4187[label="128.165.80.17;153pkt 153fpkt", shape=invtriangle, color=brown];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.80.17:25, *:*}[74.5098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.2596%)&lt;BR/&gt; 53: (5.19187%)&lt;BR/&gt; 64177: (0.3386%)&lt;BR/&gt; 63840: (0.3386%)&lt;BR/&gt; 61582: (0.3386%)&gt;];
}
955--2627[label="0.00724638;1pkt 1fpkt"];
955--2643[label="0.00724638;1pkt 1fpkt"];
955--2658[label="0.00724638;1pkt 1fpkt"];
955--2788[label="0.992754;137pkt 137fpkt"];
955--4187[label="1;138pkt 138fpkt"];
2788--4187[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.80.17" src_port="25"/>
    </slice>
    <from sec="1128920413" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.200.217.17"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
2798[label="207.215.136.18;158pkt 158fpkt", shape=pentagon, color=darkviolet];
4192[label="207.215.136.18;158pkt 158fpkt", shape=invtriangle, color=brown];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.215.136.18:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 65325: (0.316456%)&lt;BR/&gt; 65039: (0.316456%)&lt;BR/&gt; 64573: (0.316456%)&lt;BR/&gt; 64072: (0.316456%)&gt;];
}
2798--4192[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter src_ip="207.215.136.18" src_port="7000"/>
    </slice>
    <from sec="1128920988" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2806[label="161.253.12.19;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4196[label="161.253.12.19;61pkt 61fpkt", shape=invtriangle, color=brown];
4969[label="161.253.12.19;61pkt 61fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.12.19:*, 80.212.94.66:80}[24.5902%]&lt;BR/&gt;{161.253.12.19:*, 81.201.165.152:80}[24.5902%]&lt;BR/&gt;{161.253.12.19:*, *:443}[24.5902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.8852%)&lt;BR/&gt; 443: (12.2951%)&lt;BR/&gt; 3648: (0.819672%)&lt;BR/&gt; 3647: (0.819672%)&lt;BR/&gt; 3646: (0.819672%)&gt;];
}
2806--4196[label="1;61pkt 61fpkt"];
2806--4969[label="1;61pkt 61fpkt"];
4196--4969[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="161.253.12.19"/>
      <filter dst_ip="81.201.165.152" dst_port="80" src_ip="161.253.12.19"/>
      <filter dst_ip="80.212.94.66" dst_port="80" src_ip="161.253.12.19"/>
    </slice>
    <from sec="1128920444" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.4.40.20"/>
    </slice>
    <from sec="1128921058" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
2818[label="132.177.183.20;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4202[label="132.177.183.20;23pkt 23fpkt", shape=invtriangle, color=brown];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.183.20:*, 195.86.186.27:80}[73.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1837: (2.17391%)&lt;BR/&gt; 1836: (2.17391%)&lt;BR/&gt; 1814: (2.17391%)&lt;BR/&gt; 1812: (2.17391%)&gt;];
}
2818--4202[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="195.86.186.27" dst_port="80" src_ip="132.177.183.20"/>
    </slice>
    <from sec="1128920514" usec="0"/>
    <to sec="1128921127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
2828[label="219.21.174.21;112pkt 112fpkt", shape=pentagon, color=darkviolet];
4203[label="219.21.174.21;112pkt 112fpkt", shape=invtriangle, color=brown];
4974[label="219.21.174.21;112pkt 112fpkt", shape=invhouse, color=bisque];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.21.174.21:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2828--4203[label="1;112pkt 112fpkt"];
2828--4974[label="1;112pkt 112fpkt"];
4203--4974[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.21.174.21" src_port="1026"/>
    </slice>
    <from sec="1128920999" usec="0"/>
    <to sec="1128921018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
2839[label="132.176.163.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4210[label="132.176.163.23;3pkt 3fpkt", shape=invtriangle, color=brown];
4977[label="132.176.163.23;3pkt 3fpkt", shape=invhouse, color=bisque];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.163.23:32825, 201.135.30.179:1863}[33.3333%]&lt;BR/&gt;{132.176.163.23:32828, 201.135.172.64:80}[33.3333%]&lt;BR/&gt;{132.176.163.23:32829, 201.135.172.64:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32829: (18.75%)&lt;BR/&gt; 32825: (18.75%)&lt;BR/&gt; 1863: (18.75%)&lt;BR/&gt; 443: (18.75%)&lt;BR/&gt; 32828: (12.5%)&gt;];
}
2839--4210[label="1;2pkt 2fpkt"];
2839--4977[label="1;2pkt 2fpkt"];
4210--4977[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.135.172.64" dst_port="443" src_ip="132.176.163.23" src_port="32829"/>
      <filter dst_ip="201.135.172.64" dst_port="80" src_ip="132.176.163.23" src_port="32828"/>
      <filter dst_ip="201.135.30.179" dst_port="1863" src_ip="132.176.163.23" src_port="32825"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
587[label="132.176.160.223;d;207pkt 207fpkt", shape=diamond, color=yellow];
726[label="206.85.27.113;s;12pkt 12fpkt", shape=diamond, color=yellow];
1232[label="221.186.146.37;s;22pkt 22fpkt", shape=diamond, color=yellow];
1241[label="215.54.187.44;s;38pkt 38fpkt", shape=diamond, color=yellow];
2209[label="132.176.160.223;d;201pkt 201fpkt", shape=hexagon, color=black];
2392[label="215.54.187.44;s;20pkt 20fpkt", shape=hexagon, color=black];
2850[label="207.193.60.26;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2920[label="221.186.146.37;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2951[label="215.54.187.44;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3049[label="222.34.60.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3067[label="207.213.10.63;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4095[label="214.138.198.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4217[label="207.193.60.26;7pkt 7fpkt", shape=invtriangle, color=brown];
4916[label="214.138.198.249;1pkt 1fpkt", shape=invtriangle, color=brown];
4983[label="207.193.60.26;7pkt 7fpkt", shape=invhouse, color=bisque];
5425[label="214.138.198.249;1pkt 1fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 132.176.160.223:*}[90.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7005%)&lt;BR/&gt; 8080: (2.79188%)&lt;BR/&gt; 58660: (0.423012%)&lt;BR/&gt; 58659: (0.423012%)&lt;BR/&gt; 58657: (0.423012%)&gt;];
}
587--726[label="1;12pkt 12fpkt"];
587--1232[label="1;22pkt 22fpkt"];
587--1241[label="1;38pkt 38fpkt"];
587--1914[label="0.0277778;1pkt 1fpkt"];
587--2209[label="1;201pkt 201fpkt"];
587--2392[label="1;20pkt 20fpkt"];
587--2506[label="0.03125;1pkt 1fpkt"];
587--2850[label="1;7pkt 7fpkt"];
587--2920[label="1;21pkt 21fpkt"];
587--2951[label="1;37pkt 37fpkt"];
587--3049[label="1;2pkt 2fpkt"];
587--3067[label="0.857143;6pkt 6fpkt"];
587--3637[label="0.03125;1pkt 1fpkt"];
587--4095[label="1;1pkt 1fpkt"];
587--4217[label="1;7pkt 7fpkt"];
587--4665[label="0.03125;1pkt 1fpkt"];
587--4916[label="1;1pkt 1fpkt"];
587--4983[label="1;7pkt 7fpkt"];
587--5263[label="0.03125;1pkt 1fpkt"];
587--5425[label="1;1pkt 1fpkt"];
726--2209[label="1;12pkt 12fpkt"];
1232--2209[label="1;22pkt 22fpkt"];
1232--2920[label="1;21pkt 21fpkt"];
1241--2209[label="1;38pkt 38fpkt"];
1241--2392[label="1;20pkt 20fpkt"];
1241--2951[label="1;37pkt 37fpkt"];
2209--2392[label="1;20pkt 20fpkt"];
2209--2506[label="0.03125;1pkt 1fpkt"];
2209--2850[label="1;7pkt 7fpkt"];
2209--2920[label="1;21pkt 21fpkt"];
2209--2951[label="1;37pkt 37fpkt"];
2209--3049[label="1;2pkt 2fpkt"];
2209--3067[label="0.714286;5pkt 5fpkt"];
2209--3637[label="0.03125;1pkt 1fpkt"];
2209--4095[label="1;1pkt 1fpkt"];
2209--4217[label="1;7pkt 7fpkt"];
2209--4665[label="0.03125;1pkt 1fpkt"];
2209--4916[label="1;1pkt 1fpkt"];
2209--4983[label="1;7pkt 7fpkt"];
2209--5263[label="0.03125;1pkt 1fpkt"];
2209--5425[label="1;1pkt 1fpkt"];
2392--2951[label="0.95;19pkt 19fpkt"];
2850--4217[label="1;7pkt 7fpkt"];
2850--4983[label="1;7pkt 7fpkt"];
4095--4916[label="1;1pkt 1fpkt"];
4095--5425[label="1;1pkt 1fpkt"];
4217--4983[label="1;7pkt 7fpkt"];
4916--5425[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.160.223" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.27.172.29"/>
    </slice>
    <from sec="1128920826" usec="0"/>
    <to sec="1128920834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
2872[label="206.44.234.30;131pkt 131fpkt", shape=pentagon, color=darkviolet];
4232[label="206.44.234.30;131pkt 131fpkt", shape=invtriangle, color=brown];
4993[label="206.44.234.30;131pkt 131fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.44.234.30:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 2923: (0.763359%)&lt;BR/&gt; 1601: (0.763359%)&lt;BR/&gt; 1535: (0.763359%)&lt;BR/&gt; 4996: (0.381679%)&gt;];
}
2872--4232[label="1;131pkt 131fpkt"];
2872--4993[label="1;131pkt 131fpkt"];
4232--4993[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="206.44.234.30"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
2875[label="221.202.145.31;427pkt 427fpkt", shape=pentagon, color=darkviolet];
4235[label="221.202.145.31;427pkt 427fpkt", shape=invtriangle, color=brown];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.202.145.31:*, *:1028}[45.6674%]&lt;BR/&gt;{221.202.145.31:*, *:1029}[45.1991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (22.8337%)&lt;BR/&gt; 1029: (22.5995%)&lt;BR/&gt; 1027: (2.9274%)&lt;BR/&gt; 1026: (1.52225%)&lt;BR/&gt; 41489: (0.468384%)&gt;];
}
2875--4235[label="1;427pkt 427fpkt"];
</description>
    <slice>
      <filter dst_port="1028" src_ip="221.202.145.31"/>
      <filter dst_port="1029" src_ip="221.202.145.31"/>
    </slice>
    <from sec="1128920503" usec="0"/>
    <to sec="1128921275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.38.6.32"/>
    </slice>
    <from sec="1128921063" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
2891[label="40.104.32.33;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4241[label="40.104.32.33;36pkt 36fpkt", shape=invtriangle, color=brown];
4997[label="40.104.32.33;36pkt 36fpkt", shape=invhouse, color=bisque];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.104.32.33:80, 146.250.46.36:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3499: (1.38889%)&lt;BR/&gt; 3498: (1.38889%)&lt;BR/&gt; 3497: (1.38889%)&lt;BR/&gt; 3496: (1.38889%)&gt;];
}
2891--4241[label="1;36pkt 36fpkt"];
2891--4997[label="1;36pkt 36fpkt"];
4241--4997[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.46.36" src_ip="40.104.32.33" src_port="80"/>
    </slice>
    <from sec="1128921245" usec="0"/>
    <to sec="1128921269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.199.124.35"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
2927[label="161.253.8.39;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4263[label="161.253.8.39;3pkt 3fpkt", shape=invtriangle, color=brown];
5011[label="161.253.8.39;3pkt 3fpkt", shape=invhouse, color=bisque];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.8.39:4130, 201.135.25.33:1863}[33.3333%]&lt;BR/&gt;{161.253.8.39:1759, 201.135.25.182:1863}[33.3333%]&lt;BR/&gt;{161.253.8.39:1771, 201.135.25.205:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4130: (16.6667%)&lt;BR/&gt; 1771: (16.6667%)&lt;BR/&gt; 1759: (16.6667%)&gt;];
}
2927--4263[label="1;3pkt 3fpkt"];
2927--5011[label="1;3pkt 3fpkt"];
4263--5011[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.135.25.205" dst_port="1863" src_ip="161.253.8.39" src_port="1771"/>
      <filter dst_ip="201.135.25.182" dst_port="1863" src_ip="161.253.8.39" src_port="1759"/>
      <filter dst_ip="201.135.25.33" dst_port="1863" src_ip="161.253.8.39" src_port="4130"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
2940[label="128.165.178.41;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4268[label="128.165.178.41;9pkt 9fpkt", shape=invtriangle, color=brown];
5016[label="128.165.178.41;9pkt 9fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.178.41:33098, *:53}[33.3333%]&lt;BR/&gt;{128.165.178.41:80, *:*}[33.3333%]&lt;BR/&gt;{128.165.178.41:*, 216.213.111.133:25}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (21.1538%)&lt;BR/&gt; 80: (17.3077%)&lt;BR/&gt; 33098: (15.3846%)&lt;BR/&gt; 25: (11.5385%)&lt;BR/&gt; 46767: (5.76923%)&gt;];
}
2940--4268[label="1;8pkt 8fpkt"];
2940--5016[label="1;8pkt 8fpkt"];
4268--5016[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.178.41" src_port="80"/>
      <filter dst_ip="216.213.111.133" dst_port="25" src_ip="128.165.178.41"/>
      <filter dst_port="53" src_ip="128.165.178.41" src_port="33098"/>
    </slice>
    <from sec="1128920545" usec="0"/>
    <to sec="1128921203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
2944[label="166.18.253.42;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4271[label="166.18.253.42;7pkt 7fpkt", shape=invtriangle, color=brown];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.253.42:25, *:*}[28.5714%]&lt;BR/&gt;{166.18.253.42:80, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.3846%)&lt;BR/&gt; 25: (11.5385%)&lt;BR/&gt; 59446: (7.69231%)&lt;BR/&gt; 59064: (7.69231%)&lt;BR/&gt; 5050: (7.69231%)&gt;];
}
2944--4271[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="166.18.253.42" src_port="80"/>
      <filter src_ip="166.18.253.42" src_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
2958[label="128.34.158.45;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4279[label="128.34.158.45;52pkt 52fpkt", shape=invtriangle, color=brown];
5023[label="128.34.158.45;52pkt 52fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.34.158.45:*, 172.219.177.170:80}[82.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33201: (0.967742%)&lt;BR/&gt; 33199: (0.967742%)&lt;BR/&gt; 33193: (0.967742%)&lt;BR/&gt; 33192: (0.967742%)&gt;];
}
2958--4279[label="1;51pkt 51fpkt"];
2958--5023[label="1;51pkt 51fpkt"];
4279--5023[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="172.219.177.170" dst_port="80" src_ip="128.34.158.45"/>
    </slice>
    <from sec="1128920457" usec="0"/>
    <to sec="1128920790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
1055[label="206.125.221.131;d;197pkt 197fpkt", shape=diamond, color=yellow];
1102[label="206.125.223.187;d;195pkt 195fpkt", shape=diamond, color=yellow];
2266[label="206.125.223.187;d;195pkt 195fpkt", shape=hexagon, color=black];
2961[label="202.206.197.45;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4280[label="202.206.197.45;19pkt 19fpkt", shape=invtriangle, color=brown];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 206.125.221.131:0}[48.1663%]&lt;BR/&gt;{*:0, 206.125.223.187:0}[47.6773%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1055--2961[label="0.0526316;1pkt 1fpkt"];
1055--4280[label="0.0526316;1pkt 1fpkt"];
1102--2266[label="1;195pkt 195fpkt"];
1102--2961[label="0.0526316;1pkt 1fpkt"];
1102--4280[label="0.0526316;1pkt 1fpkt"];
2266--2961[label="0.0526316;1pkt 1fpkt"];
2266--4280[label="0.0526316;1pkt 1fpkt"];
2961--4280[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.221.131"/>
      <filter dst_ip="206.125.223.187"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
2969[label="83.142.100.46;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4287[label="83.142.100.46;5pkt 5fpkt", shape=invtriangle, color=brown];
5027[label="83.142.100.46;4pkt 4fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.142.100.46:80, 146.250.236.20:2049}[20%]&lt;BR/&gt;{83.142.100.46:80, 146.250.236.20:2050}[20%]&lt;BR/&gt;{83.142.100.46:80, 146.250.236.20:2052}[20%]&lt;BR/&gt;{83.142.100.46:80, 146.250.236.20:2055}[20%]&lt;BR/&gt;{83.142.100.46:80, 146.250.236.20:2056}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2056: (11.5385%)&lt;BR/&gt; 2055: (11.5385%)&lt;BR/&gt; 2052: (11.5385%)&lt;BR/&gt; 2050: (11.5385%)&gt;];
}
2969--4287[label="1;4pkt 4fpkt"];
2969--5027[label="1;4pkt 4fpkt"];
4287--5027[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.236.20" dst_port="2056" src_ip="83.142.100.46" src_port="80"/>
      <filter dst_ip="146.250.236.20" dst_port="2055" src_ip="83.142.100.46" src_port="80"/>
      <filter dst_ip="146.250.236.20" dst_port="2052" src_ip="83.142.100.46" src_port="80"/>
      <filter dst_ip="146.250.236.20" dst_port="2050" src_ip="83.142.100.46" src_port="80"/>
      <filter dst_ip="146.250.236.20" dst_port="2049" src_ip="83.142.100.46" src_port="80"/>
    </slice>
    <from sec="1128921208" usec="0"/>
    <to sec="1128921221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
3002[label="132.176.181.52;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4302[label="132.176.181.52;39pkt 39fpkt", shape=invtriangle, color=brown];
5038[label="132.176.181.52;39pkt 39fpkt", shape=invhouse, color=bisque];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.181.52:*, 80.39.68.38:80}[94.8718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4359%)&lt;BR/&gt; 3544: (2.5641%)&lt;BR/&gt; 1975: (2.5641%)&lt;BR/&gt; 1891: (1.28205%)&lt;BR/&gt; 1889: (1.28205%)&gt;];
}
3002--4302[label="1;39pkt 39fpkt"];
3002--5038[label="1;39pkt 39fpkt"];
4302--5038[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="80.39.68.38" dst_port="80" src_ip="132.176.181.52"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
3009[label="166.18.248.52;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4307[label="166.18.248.52;14pkt 14fpkt", shape=invtriangle, color=brown];
5044[label="166.18.248.52;14pkt 14fpkt", shape=invhouse, color=bisque];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.248.52:*, 192.170.106.175:20}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (46.4286%)&lt;BR/&gt; 1137: (3.57143%)&lt;BR/&gt; 1130: (3.57143%)&lt;BR/&gt; 1126: (3.57143%)&lt;BR/&gt; 1124: (3.57143%)&gt;];
}
3009--4307[label="1;14pkt 14fpkt"];
3009--5044[label="1;14pkt 14fpkt"];
4307--5044[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="192.170.106.175" dst_port="20" src_ip="166.18.248.52"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128920906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
3012[label="206.182.182.53;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4308[label="206.182.182.53;75pkt 75fpkt", shape=invtriangle, color=brown];
5045[label="206.182.182.53;75pkt 75fpkt", shape=invhouse, color=bisque];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.182.182.53:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4979: (0.666667%)&lt;BR/&gt; 4867: (0.666667%)&lt;BR/&gt; 4717: (0.666667%)&lt;BR/&gt; 4565: (0.666667%)&gt;];
}
3012--4308[label="1;75pkt 75fpkt"];
3012--5045[label="1;75pkt 75fpkt"];
4308--5045[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="206.182.182.53"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.65.105.55"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128920603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
251[label="192.168.254.254;d;2250pkt 2250fpkt", shape=diamond, color=yellow];
347[label="132.176.186.39;s;864pkt 864fpkt", shape=diamond, color=yellow];
701[label="132.176.26.172;s;262pkt 262fpkt", shape=diamond, color=yellow];
948[label="161.253.60.167;s;332pkt 332fpkt", shape=diamond, color=yellow];
1002[label="214.224.157.249;d;96pkt 96fpkt", shape=diamond, color=yellow];
1244[label="132.176.222.58;s;200pkt 200fpkt", shape=diamond, color=yellow];
1289[label="132.176.186.38;s;415pkt 415fpkt", shape=diamond, color=yellow];
1389[label="40.202.68.99;d;9pkt 9fpkt", shape=diamond, color=yellow];
1486[label="201.216.237.105;d;106pkt 106fpkt", shape=diamond, color=yellow];
1683[label="161.253.32.57;s;29pkt 29fpkt", shape=diamond, color=yellow];
1751[label="201.135.2.83;d;16pkt 16fpkt", shape=diamond, color=yellow];
1879[label="212.230.36.179;d;133pkt 133fpkt", shape=diamond, color=yellow];
2019[label="207.99.4.235;s;167pkt 167fpkt", shape=diamond, color=yellow];
2023[label="201.216.238.78;d;94pkt 94fpkt", shape=diamond, color=yellow];
2128[label="132.176.186.39;s;563pkt 563fpkt", shape=hexagon, color=black];
2148[label="192.168.254.254;d;593pkt 593fpkt", shape=hexagon, color=black];
2233[label="161.253.60.167;s;40pkt 40fpkt", shape=hexagon, color=black];
2330[label="132.176.222.58;s;120pkt 120fpkt", shape=hexagon, color=black];
2551[label="207.99.4.235;s;167pkt 167fpkt", shape=hexagon, color=black];
2776[label="206.125.217.15;134pkt 134fpkt", shape=pentagon, color=darkviolet];
2858[label="207.99.24.28;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2884[label="161.241.38.32;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2895[label="206.125.217.33;179pkt 179fpkt", shape=pentagon, color=darkviolet];
2928[label="132.176.186.39;908pkt 908fpkt", shape=pentagon, color=darkviolet];
3047[label="132.176.222.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3148[label="132.176.190.73;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3235[label="207.99.146.85;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3257[label="132.176.194.87;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3261[label="132.176.148.88;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3508[label="207.99.13.132;97pkt 97fpkt", shape=pentagon, color=darkviolet];
3538[label="206.125.217.137;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3553[label="132.176.174.139;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3558[label="132.176.229.139;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3723[label="132.176.26.172;272pkt 272fpkt", shape=pentagon, color=darkviolet];
3761[label="161.253.32.180;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3828[label="161.253.34.196;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3991[label="161.241.38.227;88pkt 88fpkt", shape=pentagon, color=darkviolet];
4046[label="132.176.226.239;90pkt 90fpkt", shape=pentagon, color=darkviolet];
4097[label="161.241.251.250;89pkt 89fpkt", shape=pentagon, color=darkviolet];
4179[label="206.125.217.15;135pkt 135fpkt", shape=invtriangle, color=brown];
4244[label="206.125.217.33;180pkt 180fpkt", shape=invtriangle, color=brown];
4322[label="132.176.222.58;1pkt 1fpkt", shape=invtriangle, color=brown];
4381[label="132.176.190.73;40pkt 40fpkt", shape=invtriangle, color=brown];
4442[label="132.176.194.87;3pkt 3fpkt", shape=invtriangle, color=brown];
4444[label="132.176.148.88;58pkt 58fpkt", shape=invtriangle, color=brown];
4609[label="206.125.217.137;59pkt 59fpkt", shape=invtriangle, color=brown];
4731[label="161.253.32.180;8pkt 8fpkt", shape=invtriangle, color=brown];
4861[label="161.241.38.227;88pkt 88fpkt", shape=invtriangle, color=brown];
4962[label="206.125.217.15;133pkt 133fpkt", shape=invhouse, color=bisque];
5054[label="132.176.222.58;247pkt 247fpkt", shape=invhouse, color=bisque];
5086[label="132.176.190.73;40pkt 40fpkt", shape=invhouse, color=bisque];
5124[label="132.176.148.88;58pkt 58fpkt", shape=invhouse, color=bisque];
5385[label="161.241.38.227;88pkt 88fpkt", shape=invhouse, color=bisque];
5426[label="161.241.251.250;89pkt 89fpkt", shape=invhouse, color=bisque];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.168.254.254:80}[57.3624%]&lt;BR/&gt;{132.176.186.39:*, *:80}[22.1368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.47%)&lt;BR/&gt; 25: (2.21382%)&lt;BR/&gt; 0: (0.474029%)&lt;BR/&gt; 53: (0.3177%)&lt;BR/&gt; 443: (0.181543%)&gt;];
}
251--281[label="0.0330579;12pkt 12fpkt"];
251--347[label="0.524306;453pkt 453fpkt"];
251--1244[label="0.415;83pkt 83fpkt"];
251--1289[label="1;415pkt 415fpkt"];
251--2019[label="0.994012;166pkt 166fpkt"];
251--2128[label="0.291297;164pkt 164fpkt"];
251--2148[label="1;593pkt 593fpkt"];
251--2330[label="0.466667;56pkt 56fpkt"];
251--2551[label="0.994012;166pkt 166fpkt"];
251--2625[label="0.140889;317pkt 317fpkt"];
251--2629[label="0.0155556;35pkt 35fpkt"];
251--2776[label="0.91791;123pkt 123fpkt"];
251--2884[label="0.928571;39pkt 39fpkt"];
251--2895[label="0.921788;165pkt 165fpkt"];
251--2928[label="0.498899;453pkt 453fpkt"];
251--2957[label="0.0310881;12pkt 12fpkt"];
251--3257[label="0.333333;1pkt 1fpkt"];
251--3538[label="0.949153;56pkt 56fpkt"];
251--3558[label="0.125;1pkt 1fpkt"];
251--3991[label="0.920455;81pkt 81fpkt"];
251--4046[label="0.922222;83pkt 83fpkt"];
251--4097[label="0.921348;82pkt 82fpkt"];
251--4179[label="0.911111;123pkt 123fpkt"];
251--4244[label="0.922222;166pkt 166fpkt"];
251--4442[label="0.333333;1pkt 1fpkt"];
251--4609[label="0.949153;56pkt 56fpkt"];
251--4861[label="0.920455;81pkt 81fpkt"];
251--4962[label="0.917293;122pkt 122fpkt"];
251--5022[label="0.0313316;12pkt 12fpkt"];
251--5054[label="0.336032;83pkt 83fpkt"];
251--5385[label="0.920455;81pkt 81fpkt"];
251--5426[label="0.921348;82pkt 82fpkt"];
347--1002[label="1;96pkt 96fpkt"];
347--2128[label="1;563pkt 563fpkt"];
347--2148[label="0.198988;118pkt 118fpkt"];
347--2625[label="0.141204;122pkt 122fpkt"];
347--2629[label="0.0185185;16pkt 16fpkt"];
347--2928[label="1;864pkt 864fpkt"];
701--1450[label="0.046875;6pkt 6fpkt"];
701--1457[label="0.0131579;1pkt 1fpkt"];
701--1486[label="0.0283019;3pkt 3fpkt"];
701--1709[label="0.025641;2pkt 2fpkt"];
701--2023[label="0.0319149;3pkt 3fpkt"];
701--2558[label="0.025641;2pkt 2fpkt"];
701--2627[label="0.00763359;2pkt 2fpkt"];
701--2643[label="0.00763359;2pkt 2fpkt"];
701--2658[label="0.00763359;2pkt 2fpkt"];
701--3723[label="1;262pkt 262fpkt"];
948--1389[label="1;9pkt 9fpkt"];
948--1486[label="0.0377358;4pkt 4fpkt"];
948--2233[label="1;40pkt 40fpkt"];
948--2625[label="0.0240964;8pkt 8fpkt"];
1002--2128[label="1;96pkt 96fpkt"];
1002--2928[label="1;96pkt 96fpkt"];
1244--1486[label="0.264151;28pkt 28fpkt"];
1244--1879[label="0.308271;41pkt 41fpkt"];
1244--2023[label="0.308511;29pkt 29fpkt"];
1244--2148[label="0.105;21pkt 21fpkt"];
1244--2330[label="1;120pkt 120fpkt"];
1244--2625[label="0.165;33pkt 33fpkt"];
1244--2629[label="0.01;2pkt 2fpkt"];
1244--5054[label="0.99;198pkt 198fpkt"];
1289--2148[label="0.274699;114pkt 114fpkt"];
1289--2625[label="0.240964;100pkt 100fpkt"];
1289--2629[label="0.0361446;15pkt 15fpkt"];
1389--2233[label="0.111111;1pkt 1fpkt"];
1389--2625[label="0.111111;1pkt 1fpkt"];
1486--1683[label="0.0344828;1pkt 1fpkt"];
1486--1775[label="0.00943396;1pkt 1fpkt"];
1486--2120[label="0.00943396;1pkt 1fpkt"];
1486--2150[label="0.00943396;1pkt 1fpkt"];
1486--2188[label="0.0188679;2pkt 2fpkt"];
1486--2233[label="0.025;1pkt 1fpkt"];
1486--2330[label="0.150943;16pkt 16fpkt"];
1486--2599[label="0.0188679;2pkt 2fpkt"];
1486--2622[label="0.00943396;1pkt 1fpkt"];
1486--2625[label="0.207547;22pkt 22fpkt"];
1486--2629[label="0.0283019;3pkt 3fpkt"];
1486--2640[label="0.00943396;1pkt 1fpkt"];
1486--2656[label="0.00943396;1pkt 1fpkt"];
1486--2807[label="0.00943396;1pkt 1fpkt"];
1486--2858[label="0.170732;7pkt 7fpkt"];
1486--2976[label="0.025641;1pkt 1fpkt"];
1486--3233[label="0.0471698;5pkt 5fpkt"];
1486--3235[label="0.0769231;1pkt 1fpkt"];
1486--3261[label="0.0172414;1pkt 1fpkt"];
1486--3508[label="0.123711;12pkt 12fpkt"];
1486--3553[label="0.0677966;4pkt 4fpkt"];
1486--3706[label="0.00943396;1pkt 1fpkt"];
1486--3722[label="0.0188679;2pkt 2fpkt"];
1486--3723[label="0.0283019;3pkt 3fpkt"];
1486--3729[label="0.0188679;2pkt 2fpkt"];
1486--4066[label="0.0166667;1pkt 1fpkt"];
1486--4197[label="0.00943396;1pkt 1fpkt"];
1486--4291[label="0.025641;1pkt 1fpkt"];
1486--4444[label="0.0172414;1pkt 1fpkt"];
1486--4713[label="0.0188679;2pkt 2fpkt"];
1486--4970[label="0.00943396;1pkt 1fpkt"];
1486--5054[label="0.254717;27pkt 27fpkt"];
1486--5124[label="0.0172414;1pkt 1fpkt"];
1751--2625[label="0.0625;1pkt 1fpkt"];
1751--3257[label="0.666667;2pkt 2fpkt"];
1751--3761[label="0.25;2pkt 2fpkt"];
1751--4442[label="0.666667;2pkt 2fpkt"];
1751--4731[label="0.25;2pkt 2fpkt"];
1879--2330[label="0.183333;22pkt 22fpkt"];
1879--2625[label="0.157895;21pkt 21fpkt"];
1879--2858[label="0.146341;6pkt 6fpkt"];
1879--2957[label="0.037594;5pkt 5fpkt"];
1879--3148[label="0.725;29pkt 29fpkt"];
1879--3261[label="0.103448;6pkt 6fpkt"];
1879--3508[label="0.28866;28pkt 28fpkt"];
1879--3828[label="0.0232558;1pkt 1fpkt"];
1879--4381[label="0.725;29pkt 29fpkt"];
1879--4444[label="0.103448;6pkt 6fpkt"];
1879--5022[label="0.037594;5pkt 5fpkt"];
1879--5054[label="0.308271;41pkt 41fpkt"];
1879--5086[label="0.725;29pkt 29fpkt"];
1879--5124[label="0.103448;6pkt 6fpkt"];
2019--2148[label="0.251497;42pkt 42fpkt"];
2019--2551[label="1;167pkt 167fpkt"];
2019--2625[label="0.0598802;10pkt 10fpkt"];
2023--2120[label="0.0319149;3pkt 3fpkt"];
2023--2150[label="0.0106383;1pkt 1fpkt"];
2023--2188[label="0.0531915;5pkt 5fpkt"];
2023--2330[label="0.148936;14pkt 14fpkt"];
2023--2599[label="0.0212766;2pkt 2fpkt"];
2023--2625[label="0.170213;16pkt 16fpkt"];
2023--2807[label="0.0106383;1pkt 1fpkt"];
2023--2858[label="0.170732;7pkt 7fpkt"];
2023--2957[label="0.0212766;2pkt 2fpkt"];
2023--3233[label="0.0425532;4pkt 4fpkt"];
2023--3261[label="0.0344828;2pkt 2fpkt"];
2023--3508[label="0.223404;21pkt 21fpkt"];
2023--3722[label="0.0531915;5pkt 5fpkt"];
2023--3723[label="0.0319149;3pkt 3fpkt"];
2023--3729[label="0.0531915;5pkt 5fpkt"];
2023--3828[label="0.0697674;3pkt 3fpkt"];
2023--4197[label="0.0106383;1pkt 1fpkt"];
2023--4444[label="0.0344828;2pkt 2fpkt"];
2023--4713[label="0.0531915;5pkt 5fpkt"];
2023--4970[label="0.0106383;1pkt 1fpkt"];
2023--5022[label="0.0212766;2pkt 2fpkt"];
2023--5054[label="0.308511;29pkt 29fpkt"];
2023--5124[label="0.0344828;2pkt 2fpkt"];
2128--2148[label="0.209591;118pkt 118fpkt"];
2128--2625[label="0.150977;85pkt 85fpkt"];
2128--2629[label="0.0284192;16pkt 16fpkt"];
2128--2928[label="1;563pkt 563fpkt"];
2148--2330[label="0.175;21pkt 21fpkt"];
2148--2551[label="0.251497;42pkt 42fpkt"];
2148--2625[label="0.197302;117pkt 117fpkt"];
2148--2629[label="0.00674536;4pkt 4fpkt"];
2148--2776[label="0.231343;31pkt 31fpkt"];
2148--2884[label="0.214286;9pkt 9fpkt"];
2148--2895[label="0.223464;40pkt 40fpkt"];
2148--2928[label="0.198988;118pkt 118fpkt"];
2148--2957[label="0.0259067;10pkt 10fpkt"];
2148--3257[label="0.333333;1pkt 1fpkt"];
2148--3538[label="0.237288;14pkt 14fpkt"];
2148--3558[label="0.125;1pkt 1fpkt"];
2148--3991[label="0.215909;19pkt 19fpkt"];
2148--4046[label="0.233333;21pkt 21fpkt"];
2148--4097[label="0.224719;20pkt 20fpkt"];
2148--4179[label="0.22963;31pkt 31fpkt"];
2148--4244[label="0.227778;41pkt 41fpkt"];
2148--4442[label="0.333333;1pkt 1fpkt"];
2148--4609[label="0.237288;14pkt 14fpkt"];
2148--4861[label="0.215909;19pkt 19fpkt"];
2148--4962[label="0.225564;30pkt 30fpkt"];
2148--5022[label="0.0261097;10pkt 10fpkt"];
2148--5054[label="0.0850202;21pkt 21fpkt"];
2148--5385[label="0.215909;19pkt 19fpkt"];
2148--5426[label="0.224719;20pkt 20fpkt"];
2233--2625[label="0.025;1pkt 1fpkt"];
2330--2625[label="0.275;33pkt 33fpkt"];
2330--5054[label="0.983333;118pkt 118fpkt"];
2551--2625[label="0.0598802;10pkt 10fpkt"];
2776--4179[label="1;134pkt 134fpkt"];
2776--4962[label="1;133pkt 133fpkt"];
2895--4244[label="1;179pkt 179fpkt"];
3047--4322[label="1;1pkt 1fpkt"];
3047--5054[label="1;1pkt 1fpkt"];
3148--4381[label="1;40pkt 40fpkt"];
3148--5086[label="1;40pkt 40fpkt"];
3257--4442[label="1;3pkt 3fpkt"];
3261--4444[label="1;58pkt 58fpkt"];
3261--5124[label="1;58pkt 58fpkt"];
3538--4609[label="1;59pkt 59fpkt"];
3761--4731[label="1;8pkt 8fpkt"];
3991--4861[label="1;88pkt 88fpkt"];
3991--5385[label="1;88pkt 88fpkt"];
4097--5426[label="1;89pkt 89fpkt"];
4179--4962[label="1;133pkt 133fpkt"];
4322--5054[label="1;1pkt 1fpkt"];
4381--5086[label="1;40pkt 40fpkt"];
4444--5124[label="1;58pkt 58fpkt"];
4861--5385[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.176.186.39"/>
      <filter dst_ip="192.168.254.254" dst_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.246.138.59"/>
    </slice>
    <from sec="1128920465" usec="0"/>
    <to sec="1128921247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
3058[label="207.99.3.61;57pkt 57fpkt", shape=pentagon, color=darkviolet];
4328[label="207.99.3.61;57pkt 57fpkt", shape=invtriangle, color=brown];
5058[label="207.99.3.61;56pkt 56fpkt", shape=invhouse, color=bisque];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.3.61:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64701: (0.882353%)&lt;BR/&gt; 64297: (0.882353%)&lt;BR/&gt; 60839: (0.882353%)&lt;BR/&gt; 60429: (0.882353%)&gt;];
}
3058--4328[label="1;57pkt 57fpkt"];
3058--5058[label="1;56pkt 56fpkt"];
4328--5058[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="207.99.3.61" src_port="80"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.91.169.62"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
3071[label="220.32.170.63;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4335[label="220.32.170.63;255pkt 255fpkt", shape=invtriangle, color=brown];
5064[label="220.32.170.63;255pkt 255fpkt", shape=invhouse, color=bisque];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.32.170.63:50421, *:1026}[50.9804%]&lt;BR/&gt;{220.32.170.63:50421, *:1027}[49.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50421: (50%)&lt;BR/&gt; 1026: (25.4902%)&lt;BR/&gt; 1027: (24.5098%)&gt;];
}
3071--4335[label="1;255pkt 255fpkt"];
3071--5064[label="1;255pkt 255fpkt"];
4335--5064[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.32.170.63" src_port="50421"/>
      <filter dst_port="1027" src_ip="220.32.170.63" src_port="50421"/>
    </slice>
    <from sec="1128920638" usec="0"/>
    <to sec="1128920640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
575[label="161.253.33.147;d;300pkt 300fpkt", shape=diamond, color=yellow];
2845[label="219.18.164.24;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2921[label="219.18.154.37;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3080[label="219.18.154.64;72pkt 72fpkt", shape=pentagon, color=darkviolet];
3093[label="219.18.154.66;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3136[label="219.18.154.72;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3209[label="219.18.154.81;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3400[label="219.18.154.112;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3695[label="40.72.4.167;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4213[label="219.18.164.24;76pkt 76fpkt", shape=invtriangle, color=brown];
4260[label="219.18.154.37;4pkt 4fpkt", shape=invtriangle, color=brown];
4339[label="219.18.154.64;72pkt 72fpkt", shape=invtriangle, color=brown];
4346[label="219.18.154.66;15pkt 15fpkt", shape=invtriangle, color=brown];
4373[label="219.18.154.72;11pkt 11fpkt", shape=invtriangle, color=brown];
4417[label="219.18.154.81;31pkt 31fpkt", shape=invtriangle, color=brown];
4979[label="219.18.164.24;76pkt 76fpkt", shape=invhouse, color=bisque];
5066[label="219.18.154.64;71pkt 71fpkt", shape=invhouse, color=bisque];
5069[label="219.18.154.66;14pkt 14fpkt", shape=invhouse, color=bisque];
5083[label="219.18.154.72;11pkt 11fpkt", shape=invhouse, color=bisque];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.164.24:80, *:*}[22.1574%]&lt;BR/&gt;{219.18.154.64:80, 161.253.33.147:*}[20.9913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5556%)&lt;BR/&gt; 443: (0.388889%)&lt;BR/&gt; 2567: (0.222222%)&lt;BR/&gt; 2564: (0.222222%)&lt;BR/&gt; 2563: (0.222222%)&gt;];
}
575--871[label="0.0319149;3pkt 3fpkt"];
575--1134[label="0.0359712;5pkt 5fpkt"];
575--1154[label="0.00854701;1pkt 1fpkt"];
575--2367[label="0.0319149;3pkt 3fpkt"];
575--2673[label="0.0328947;5pkt 5fpkt"];
575--2696[label="0.00819672;1pkt 1fpkt"];
575--2845[label="0.586667;44pkt 44fpkt"];
575--2921[label="0.666667;2pkt 2fpkt"];
575--3080[label="1;72pkt 72fpkt"];
575--3093[label="1;15pkt 15fpkt"];
575--3136[label="0.727273;8pkt 8fpkt"];
575--3209[label="0.870968;27pkt 27fpkt"];
575--3400[label="0.777778;7pkt 7fpkt"];
575--3695[label="0.333333;1pkt 1fpkt"];
575--3808[label="0.00334448;1pkt 1fpkt"];
575--4139[label="0.00819672;1pkt 1fpkt"];
575--4213[label="0.592105;45pkt 45fpkt"];
575--4260[label="0.75;3pkt 3fpkt"];
575--4339[label="1;72pkt 72fpkt"];
575--4346[label="1;15pkt 15fpkt"];
575--4373[label="0.727273;8pkt 8fpkt"];
575--4417[label="0.870968;27pkt 27fpkt"];
575--4753[label="0.00334448;1pkt 1fpkt"];
575--4979[label="0.592105;45pkt 45fpkt"];
575--5066[label="1;71pkt 71fpkt"];
575--5069[label="1;14pkt 14fpkt"];
575--5083[label="0.727273;8pkt 8fpkt"];
2845--4213[label="1;75pkt 75fpkt"];
2845--4979[label="1;75pkt 75fpkt"];
2921--4260[label="1;3pkt 3fpkt"];
3080--4339[label="1;72pkt 72fpkt"];
3080--5066[label="1;71pkt 71fpkt"];
3093--4346[label="1;15pkt 15fpkt"];
3093--5069[label="1;14pkt 14fpkt"];
3136--4373[label="1;11pkt 11fpkt"];
3136--5083[label="1;11pkt 11fpkt"];
3209--4417[label="1;31pkt 31fpkt"];
4213--4979[label="1;76pkt 76fpkt"];
4339--5066[label="1;71pkt 71fpkt"];
4346--5069[label="1;14pkt 14fpkt"];
4373--5083[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="219.18.164.24" src_port="80"/>
      <filter dst_ip="161.253.33.147" src_ip="219.18.154.64" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
3082[label="80.16.221.64;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4341[label="80.16.221.64;15pkt 15fpkt", shape=invtriangle, color=brown];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.16.221.64:995, 206.125.222.68:*}[26.6667%]&lt;BR/&gt;{80.16.221.64:995, 206.125.217.180:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 53264: (3.33333%)&lt;BR/&gt; 53262: (3.33333%)&lt;BR/&gt; 49215: (3.33333%)&lt;BR/&gt; 49213: (3.33333%)&gt;];
}
3082--4341[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.222.68" src_ip="80.16.221.64" src_port="995"/>
      <filter dst_ip="206.125.217.180" src_ip="80.16.221.64" src_port="995"/>
    </slice>
    <from sec="1128920421" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
3091[label="207.107.8.66;90pkt 90fpkt", shape=pentagon, color=darkviolet];
4344[label="207.107.8.66;90pkt 90fpkt", shape=invtriangle, color=brown];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.8.66:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3091--4344[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="207.107.8.66"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
3092[label="132.176.133.66;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4345[label="132.176.133.66;10pkt 10fpkt", shape=invtriangle, color=brown];
5068[label="132.176.133.66;10pkt 10fpkt", shape=invhouse, color=bisque];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.133.66:*, *:25}[60%]&lt;BR/&gt;{132.176.133.66:25, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4723: (5%)&lt;BR/&gt; 4091: (5%)&lt;BR/&gt; 1812: (5%)&lt;BR/&gt; 1684: (5%)&gt;];
}
3092--4345[label="1;10pkt 10fpkt"];
3092--5068[label="1;10pkt 10fpkt"];
4345--5068[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.133.66" src_port="25"/>
      <filter dst_port="25" src_ip="132.176.133.66"/>
    </slice>
    <from sec="1128920723" usec="0"/>
    <to sec="1128921284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
3098[label="80.16.221.66;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4349[label="80.16.221.66;17pkt 17fpkt", shape=invtriangle, color=brown];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.16.221.66:995, 128.34.128.7:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 43107: (2.94118%)&lt;BR/&gt; 43106: (2.94118%)&lt;BR/&gt; 4887: (2.94118%)&lt;BR/&gt; 4880: (2.94118%)&gt;];
}
3098--4349[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="128.34.128.7" src_ip="80.16.221.66" src_port="995"/>
    </slice>
    <from sec="1128920559" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
3100[label="161.253.76.67;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4351[label="161.253.76.67;58pkt 58fpkt", shape=invtriangle, color=brown];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.76.67:*, 82.216.8.196:8200}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 4068: (0.862069%)&lt;BR/&gt; 4067: (0.862069%)&lt;BR/&gt; 4062: (0.862069%)&lt;BR/&gt; 4061: (0.862069%)&gt;];
}
3100--4351[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="82.216.8.196" dst_port="8200" src_ip="161.253.76.67"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
3104[label="220.38.212.67;268pkt 268fpkt", shape=pentagon, color=darkviolet];
4354[label="220.38.212.67;268pkt 268fpkt", shape=invtriangle, color=brown];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.38.212.67:32773, *:1026}[50.7463%]&lt;BR/&gt;{220.38.212.67:32773, *:1027}[49.2537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32773: (50%)&lt;BR/&gt; 1026: (25.3731%)&lt;BR/&gt; 1027: (24.6269%)&gt;];
}
3104--4354[label="1;268pkt 268fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.38.212.67" src_port="32773"/>
      <filter dst_port="1027" src_ip="220.38.212.67" src_port="32773"/>
    </slice>
    <from sec="1128920743" usec="0"/>
    <to sec="1128921089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
3109[label="41.153.37.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4356[label="41.153.37.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.153.37.68:1061, 161.132.14.214:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1061: (50%)&gt;];
}
3109--4356[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.132.14.214" dst_port="1434" src_ip="41.153.37.68" src_port="1061"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.93.19.71"/>
    </slice>
    <from sec="1128921038" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.236.156.71"/>
    </slice>
    <from sec="1128920783" usec="0"/>
    <to sec="1128920801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.63.9.72"/>
    </slice>
    <from sec="1128920462" usec="0"/>
    <to sec="1128920601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.18.158.72"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.736643,1.90309,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
1305[label="132.177.165.72;s;63pkt 63fpkt", shape=diamond, color=yellow];
4375[label="132.177.165.72;69pkt 69fpkt", shape=invtriangle, color=brown];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.165.72:25, *:*}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 58893: (0.757576%)&lt;BR/&gt; 55971: (0.757576%)&lt;BR/&gt; 55959: (0.757576%)&lt;BR/&gt; 55958: (0.757576%)&gt;];
}
1305--4375[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter src_ip="132.177.165.72" src_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.22.114.77"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.30.131.80"/>
    </slice>
    <from sec="1128921005" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.170.85.81"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
465[label="128.3.30.29;s;579pkt 579fpkt", shape=diamond, color=yellow];
638[label="128.34.216.234;s;618pkt 618fpkt", shape=diamond, color=yellow];
747[label="221.53.56.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
795[label="128.34.218.43;s;454pkt 454fpkt", shape=diamond, color=yellow];
839[label="206.125.221.160;s;515pkt 515fpkt", shape=diamond, color=yellow];
892[label="219.242.26.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
1056[label="161.132.10.157;s;380pkt 380fpkt", shape=diamond, color=yellow];
1111[label="40.112.129.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
1264[label="128.34.216.241;s;73pkt 73fpkt", shape=diamond, color=yellow];
1384[label="66.46.172.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
1611[label="65.162.2.223;d;2pkt 2fpkt", shape=diamond, color=yellow];
1645[label="207.107.21.8;s;87pkt 87fpkt", shape=diamond, color=yellow];
1770[label="81.201.172.69;d;27pkt 27fpkt", shape=diamond, color=yellow];
1811[label="207.227.35.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
1868[label="206.125.223.164;s;301pkt 301fpkt", shape=diamond, color=yellow];
1992[label="218.62.92.241;d;35pkt 35fpkt", shape=diamond, color=yellow];
2184[label="221.53.56.224;d;1pkt 1fpkt", shape=hexagon, color=black];
2218[label="128.34.216.234;s;276pkt 276fpkt", shape=hexagon, color=black];
2530[label="207.107.21.8;s;87pkt 87fpkt", shape=hexagon, color=black];
2723[label="207.107.21.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2760[label="161.253.132.13;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3106[label="207.107.17.68;153pkt 153fpkt", shape=pentagon, color=darkviolet];
3211[label="132.176.197.81;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3487[label="207.107.2.129;111pkt 111fpkt", shape=pentagon, color=darkviolet];
3555[label="128.34.216.139;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4054[label="128.34.216.241;91pkt 91fpkt", shape=pentagon, color=darkviolet];
4171[label="161.253.132.13;111pkt 111fpkt", shape=invtriangle, color=brown];
4419[label="132.176.197.81;13pkt 13fpkt", shape=invtriangle, color=brown];
4580[label="207.107.2.129;111pkt 111fpkt", shape=invtriangle, color=brown];
4618[label="128.34.216.139;22pkt 22fpkt", shape=invtriangle, color=brown];
4941[label="207.107.21.8;85pkt 85fpkt", shape=invhouse, color=bisque];
4956[label="161.253.132.13;112pkt 112fpkt", shape=invhouse, color=bisque];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[95.0546%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.2469%)&lt;BR/&gt; 80: (2.89905%)&lt;BR/&gt; 53: (0.318327%)&lt;BR/&gt; 1863: (0.0682128%)&lt;BR/&gt; 135: (0.0454752%)&gt;];
}
465--892[label="1;1pkt 1fpkt"];
465--1111[label="1;1pkt 1fpkt"];
465--1260[label="0.00324675;1pkt 1fpkt"];
465--1265[label="0.00310559;1pkt 1fpkt"];
465--1266[label="0.00282486;1pkt 1fpkt"];
465--1415[label="0.00285714;1pkt 1fpkt"];
465--1644[label="0.00473934;1pkt 1fpkt"];
465--1671[label="0.00409836;1pkt 1fpkt"];
465--1817[label="0.0046729;1pkt 1fpkt"];
465--1826[label="0.0047619;1pkt 1fpkt"];
465--1992[label="0.0285714;1pkt 1fpkt"];
465--2531[label="0.00282486;1pkt 1fpkt"];
638--747[label="1;1pkt 1fpkt"];
638--1260[label="0.00324675;1pkt 1fpkt"];
638--1265[label="0.00310559;1pkt 1fpkt"];
638--1266[label="0.00282486;1pkt 1fpkt"];
638--1358[label="0.0111111;1pkt 1fpkt"];
638--1384[label="0.5;1pkt 1fpkt"];
638--1415[label="0.00285714;1pkt 1fpkt"];
638--1611[label="0.5;1pkt 1fpkt"];
638--1644[label="0.00473934;1pkt 1fpkt"];
638--1647[label="0.00438596;1pkt 1fpkt"];
638--1671[label="0.00409836;1pkt 1fpkt"];
638--1749[label="0.0333333;1pkt 1fpkt"];
638--1770[label="0.037037;1pkt 1fpkt"];
638--1817[label="0.0046729;1pkt 1fpkt"];
638--1825[label="0.00490196;1pkt 1fpkt"];
638--1826[label="0.0047619;1pkt 1fpkt"];
638--1834[label="0.00492611;1pkt 1fpkt"];
638--1992[label="0.0285714;1pkt 1fpkt"];
638--2184[label="1;1pkt 1fpkt"];
638--2218[label="1;276pkt 276fpkt"];
638--2463[label="0.0049505;1pkt 1fpkt"];
638--2531[label="0.00282486;1pkt 1fpkt"];
638--2612[label="0.00323625;2pkt 2fpkt"];
638--2627[label="0.00970874;6pkt 6fpkt"];
638--2643[label="0.00970874;6pkt 6fpkt"];
638--2658[label="0.00970874;6pkt 6fpkt"];
747--2184[label="1;1pkt 1fpkt"];
747--2218[label="1;1pkt 1fpkt"];
795--1260[label="0.00324675;1pkt 1fpkt"];
795--1265[label="0.00310559;1pkt 1fpkt"];
795--1266[label="0.00282486;1pkt 1fpkt"];
795--1384[label="0.5;1pkt 1fpkt"];
795--1415[label="0.00285714;1pkt 1fpkt"];
795--1611[label="0.5;1pkt 1fpkt"];
795--1644[label="0.00473934;1pkt 1fpkt"];
795--1671[label="0.00409836;1pkt 1fpkt"];
795--1817[label="0.0046729;1pkt 1fpkt"];
795--1826[label="0.0047619;1pkt 1fpkt"];
795--1992[label="0.0285714;1pkt 1fpkt"];
795--2531[label="0.00282486;1pkt 1fpkt"];
839--1260[label="0.00324675;1pkt 1fpkt"];
839--1265[label="0.00310559;1pkt 1fpkt"];
839--1266[label="0.00282486;1pkt 1fpkt"];
839--1415[label="0.00285714;1pkt 1fpkt"];
839--1605[label="0.00819672;2pkt 2fpkt"];
839--1644[label="0.00473934;1pkt 1fpkt"];
839--1647[label="0.00438596;1pkt 1fpkt"];
839--1671[label="0.00409836;1pkt 1fpkt"];
839--1768[label="0.0038835;2pkt 2fpkt"];
839--1811[label="1;1pkt 1fpkt"];
839--1817[label="0.0046729;1pkt 1fpkt"];
839--1825[label="0.00490196;1pkt 1fpkt"];
839--1826[label="0.0047619;1pkt 1fpkt"];
839--1834[label="0.00492611;1pkt 1fpkt"];
839--1966[label="0.0038835;2pkt 2fpkt"];
839--1992[label="0.0285714;1pkt 1fpkt"];
839--2463[label="0.0049505;1pkt 1fpkt"];
839--2531[label="0.00282486;1pkt 1fpkt"];
839--2577[label="0.0038835;2pkt 2fpkt"];
839--2628[label="0.00194175;1pkt 1fpkt"];
839--2644[label="0.00194175;1pkt 1fpkt"];
839--2659[label="0.00194175;1pkt 1fpkt"];
1056--1260[label="0.00324675;1pkt 1fpkt"];
1056--1265[label="0.00310559;1pkt 1fpkt"];
1056--1266[label="0.00282486;1pkt 1fpkt"];
1056--1415[label="0.00285714;1pkt 1fpkt"];
1056--1644[label="0.00473934;1pkt 1fpkt"];
1056--1647[label="0.00438596;1pkt 1fpkt"];
1056--1671[label="0.00409836;1pkt 1fpkt"];
1056--1817[label="0.0046729;1pkt 1fpkt"];
1056--1825[label="0.00490196;1pkt 1fpkt"];
1056--1826[label="0.0047619;1pkt 1fpkt"];
1056--1834[label="0.00492611;1pkt 1fpkt"];
1056--1992[label="0.0285714;1pkt 1fpkt"];
1056--2463[label="0.0049505;1pkt 1fpkt"];
1056--2531[label="0.00282486;1pkt 1fpkt"];
1264--1770[label="0.111111;3pkt 3fpkt"];
1264--4054[label="1;73pkt 73fpkt"];
1384--2218[label="0.5;1pkt 1fpkt"];
1645--1992[label="0.0285714;1pkt 1fpkt"];
1645--2530[label="1;87pkt 87fpkt"];
1645--2723[label="1;1pkt 1fpkt"];
1645--4941[label="1;85pkt 85fpkt"];
1770--3555[label="0.136364;3pkt 3fpkt"];
1770--4054[label="0.185185;5pkt 5fpkt"];
1770--4618[label="0.136364;3pkt 3fpkt"];
1868--1966[label="0.00664452;2pkt 2fpkt"];
1868--1992[label="0.0285714;1pkt 1fpkt"];
1868--2531[label="0.00332226;1pkt 1fpkt"];
1868--2577[label="0.00664452;2pkt 2fpkt"];
1868--2628[label="0.00332226;1pkt 1fpkt"];
1868--2644[label="0.00332226;1pkt 1fpkt"];
1868--2659[label="0.00332226;1pkt 1fpkt"];
1992--2218[label="0.0285714;1pkt 1fpkt"];
1992--2530[label="0.0285714;1pkt 1fpkt"];
1992--2760[label="0.0285714;1pkt 1fpkt"];
1992--3106[label="0.0285714;1pkt 1fpkt"];
1992--3211[label="0.0769231;1pkt 1fpkt"];
1992--3487[label="0.0285714;1pkt 1fpkt"];
1992--3556[label="0.0285714;1pkt 1fpkt"];
1992--4171[label="0.0285714;1pkt 1fpkt"];
1992--4419[label="0.0769231;1pkt 1fpkt"];
1992--4580[label="0.0285714;1pkt 1fpkt"];
1992--4941[label="0.0285714;1pkt 1fpkt"];
1992--4956[label="0.0285714;1pkt 1fpkt"];
2184--2218[label="1;1pkt 1fpkt"];
2218--2463[label="0.0049505;1pkt 1fpkt"];
2218--2531[label="0.00362319;1pkt 1fpkt"];
2218--2612[label="0.00724638;2pkt 2fpkt"];
2218--2627[label="0.00362319;1pkt 1fpkt"];
2218--2643[label="0.00362319;1pkt 1fpkt"];
2218--2658[label="0.00362319;1pkt 1fpkt"];
2530--2723[label="1;1pkt 1fpkt"];
2530--4941[label="1;85pkt 85fpkt"];
2723--4941[label="1;1pkt 1fpkt"];
2760--4171[label="1;111pkt 111fpkt"];
2760--4956[label="1;112pkt 112fpkt"];
3211--4419[label="1;13pkt 13fpkt"];
3487--4580[label="1;111pkt 111fpkt"];
3555--4618[label="1;22pkt 22fpkt"];
4171--4956[label="1;111pkt 111fpkt"];
</description>
    <slice/>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.152.242.82"/>
    </slice>
    <from sec="1128920426" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
3221[label="132.176.148.83;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4427[label="132.176.148.83;53pkt 53fpkt", shape=invtriangle, color=brown];
5110[label="132.176.148.83;53pkt 53fpkt", shape=invhouse, color=bisque];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.148.83:*, 201.135.27.93:80}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1132%)&lt;BR/&gt; 443: (1.88679%)&lt;BR/&gt; 13207: (0.943396%)&lt;BR/&gt; 13206: (0.943396%)&lt;BR/&gt; 4878: (0.943396%)&gt;];
}
3221--4427[label="1;53pkt 53fpkt"];
3221--5110[label="1;53pkt 53fpkt"];
4427--5110[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="201.135.27.93" dst_port="80" src_ip="132.176.148.83"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
3225[label="132.176.190.83;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4430[label="132.176.190.83;48pkt 48fpkt", shape=invtriangle, color=brown];
5113[label="132.176.190.83;48pkt 48fpkt", shape=invhouse, color=bisque];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.190.83:*, *:25}[60.4167%]&lt;BR/&gt;{132.176.190.83:0, *:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.4583%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 41419: (1.04167%)&lt;BR/&gt; 41412: (1.04167%)&lt;BR/&gt; 41409: (1.04167%)&gt;];
}
3225--4430[label="1;48pkt 48fpkt"];
3225--5113[label="1;48pkt 48fpkt"];
4430--5113[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="132.176.190.83"/>
      <filter src_ip="132.176.190.83"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
3229[label="220.140.160.84;374pkt 374fpkt", shape=pentagon, color=darkviolet];
4432[label="220.140.160.84;374pkt 374fpkt", shape=invtriangle, color=brown];
5114[label="220.140.160.84;374pkt 374fpkt", shape=invhouse, color=bisque];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.140.160.84:33071, *:1026}[53.2086%]&lt;BR/&gt;{220.140.160.84:33071, *:1027}[46.7914%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33071: (50%)&lt;BR/&gt; 1026: (26.6043%)&lt;BR/&gt; 1027: (23.3957%)&gt;];
}
3229--4432[label="1;374pkt 374fpkt"];
3229--5114[label="1;374pkt 374fpkt"];
4432--5114[label="1;374pkt 374fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.140.160.84" src_port="33071"/>
      <filter dst_port="1027" src_ip="220.140.160.84" src_port="33071"/>
    </slice>
    <from sec="1128921025" usec="0"/>
    <to sec="1128921026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
3251[label="207.172.67.87;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4440[label="207.172.67.87;54pkt 54fpkt", shape=invtriangle, color=brown];
5121[label="207.172.67.87;54pkt 54fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.172.67.87:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4867: (0.925926%)&lt;BR/&gt; 4785: (0.925926%)&lt;BR/&gt; 4761: (0.925926%)&lt;BR/&gt; 4541: (0.925926%)&gt;];
}
3251--4440[label="1;54pkt 54fpkt"];
3251--5121[label="1;54pkt 54fpkt"];
4440--5121[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="207.172.67.87"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
457[label="69.10.79.240;d;6331pkt 6331fpkt", shape=diamond, color=yellow];
2671[label="128.176.184.0;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2675[label="128.176.184.1;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2693[label="128.176.188.3;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2705[label="128.176.184.4;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2706[label="128.176.188.4;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2716[label="128.176.184.6;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2721[label="128.176.184.7;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2728[label="128.176.184.8;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2734[label="128.176.188.9;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2744[label="128.176.184.10;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2751[label="128.176.189.11;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2763[label="128.176.188.13;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2774[label="128.176.188.15;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2784[label="128.176.188.16;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2792[label="128.176.188.17;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2801[label="128.176.184.18;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2802[label="128.176.188.18;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2803[label="128.176.189.18;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2819[label="128.176.189.20;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2840[label="128.176.184.23;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2846[label="128.176.184.24;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2863[label="128.176.189.28;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2878[label="128.176.189.31;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2888[label="128.176.188.32;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2912[label="128.176.189.35;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2915[label="128.176.188.36;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2923[label="128.176.184.37;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2933[label="128.176.189.40;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2943[label="128.176.188.42;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2960[label="128.176.189.45;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2992[label="128.176.188.51;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2993[label="128.176.189.51;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3034[label="128.176.188.56;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3052[label="128.176.188.59;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3088[label="128.176.184.65;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3094[label="128.176.184.66;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3095[label="128.176.188.66;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3102[label="128.176.188.67;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3111[label="128.176.188.68;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3122[label="128.176.188.70;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3138[label="128.176.184.72;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3197[label="128.176.184.80;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3210[label="128.176.184.81;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3224[label="128.176.184.83;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3238[label="128.176.184.85;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3245[label="128.176.184.86;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3256[label="128.176.184.87;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3262[label="128.176.184.88;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3268[label="128.176.184.90;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3297[label="128.176.184.96;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3301[label="128.176.184.97;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3338[label="128.176.184.102;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3347[label="128.176.184.103;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3351[label="128.176.184.104;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3362[label="128.176.184.105;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3376[label="128.176.184.107;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3383[label="128.176.184.108;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3394[label="128.176.184.110;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3402[label="128.176.184.112;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3411[label="128.176.188.114;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3414[label="128.176.184.115;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3443[label="128.176.184.120;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3449[label="128.176.184.121;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3450[label="128.176.188.121;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3463[label="128.176.184.125;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3468[label="128.176.184.126;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3483[label="128.176.189.128;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3529[label="128.176.189.135;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3545[label="128.176.189.138;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3554[label="128.176.189.139;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3563[label="128.176.189.140;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3572[label="128.176.189.141;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3579[label="128.176.189.143;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3614[label="128.176.189.150;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3619[label="128.176.189.151;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3622[label="128.176.189.152;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3640[label="128.176.189.156;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3684[label="128.176.189.164;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3705[label="128.176.189.168;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3712[label="128.176.189.169;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3734[label="128.176.189.173;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3751[label="128.176.189.176;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3769[label="128.176.189.180;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3774[label="128.176.189.181;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3781[label="128.176.189.183;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3791[label="128.176.189.186;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3819[label="128.176.189.193;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3834[label="128.176.189.196;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3839[label="128.176.189.197;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3847[label="128.176.189.198;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3855[label="128.176.189.199;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3874[label="128.176.189.202;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3880[label="128.176.189.203;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3887[label="128.176.189.204;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3893[label="128.176.189.205;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3905[label="128.176.189.207;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3918[label="128.176.189.210;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3929[label="128.176.189.212;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3933[label="128.176.189.213;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3954[label="128.176.189.219;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3970[label="128.176.189.222;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3974[label="128.176.189.223;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4034[label="128.176.189.237;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4052[label="128.176.189.240;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4065[label="128.176.189.244;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4081[label="128.176.189.246;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4120[label="128.176.184.0;29pkt 29fpkt", shape=invtriangle, color=brown];
4123[label="128.176.184.1;27pkt 27fpkt", shape=invtriangle, color=brown];
4137[label="128.176.188.3;34pkt 34fpkt", shape=invtriangle, color=brown];
4152[label="128.176.184.8;31pkt 31fpkt", shape=invtriangle, color=brown];
4165[label="128.176.189.11;34pkt 34fpkt", shape=invtriangle, color=brown];
4172[label="128.176.188.13;35pkt 35fpkt", shape=invtriangle, color=brown];
4183[label="128.176.188.16;35pkt 35fpkt", shape=invtriangle, color=brown];
4195[label="128.176.189.18;35pkt 35fpkt", shape=invtriangle, color=brown];
4214[label="128.176.184.24;27pkt 27fpkt", shape=invtriangle, color=brown];
4224[label="128.176.189.28;37pkt 37fpkt", shape=invtriangle, color=brown];
4240[label="128.176.188.32;35pkt 35fpkt", shape=invtriangle, color=brown];
4256[label="128.176.189.35;34pkt 34fpkt", shape=invtriangle, color=brown];
4258[label="128.176.188.36;33pkt 33fpkt", shape=invtriangle, color=brown];
4261[label="128.176.184.37;27pkt 27fpkt", shape=invtriangle, color=brown];
4266[label="128.176.189.40;32pkt 32fpkt", shape=invtriangle, color=brown];
4324[label="128.176.188.59;35pkt 35fpkt", shape=invtriangle, color=brown];
4347[label="128.176.184.66;28pkt 28fpkt", shape=invtriangle, color=brown];
4359[label="128.176.188.68;34pkt 34fpkt", shape=invtriangle, color=brown];
4365[label="128.176.188.70;33pkt 33fpkt", shape=invtriangle, color=brown];
4376[label="128.176.184.72;28pkt 28fpkt", shape=invtriangle, color=brown];
4418[label="128.176.184.81;27pkt 27fpkt", shape=invtriangle, color=brown];
4437[label="128.176.184.85;27pkt 27fpkt", shape=invtriangle, color=brown];
4441[label="128.176.184.87;26pkt 26fpkt", shape=invtriangle, color=brown];
4445[label="128.176.184.88;28pkt 28fpkt", shape=invtriangle, color=brown];
4472[label="128.176.184.97;28pkt 28fpkt", shape=invtriangle, color=brown];
4502[label="128.176.184.105;28pkt 28fpkt", shape=invtriangle, color=brown];
4512[label="128.176.184.107;27pkt 27fpkt", shape=invtriangle, color=brown];
4528[label="128.176.184.112;37pkt 37fpkt", shape=invtriangle, color=brown];
4536[label="128.176.188.114;33pkt 33fpkt", shape=invtriangle, color=brown];
4553[label="128.176.184.120;29pkt 29fpkt", shape=invtriangle, color=brown];
4567[label="128.176.184.125;28pkt 28fpkt", shape=invtriangle, color=brown];
4605[label="128.176.189.135;35pkt 35fpkt", shape=invtriangle, color=brown];
4617[label="128.176.189.139;34pkt 34fpkt", shape=invtriangle, color=brown];
4626[label="128.176.189.141;32pkt 32fpkt", shape=invtriangle, color=brown];
4655[label="128.176.189.151;41pkt 41fpkt", shape=invtriangle, color=brown];
4656[label="128.176.189.152;33pkt 33fpkt", shape=invtriangle, color=brown];
4690[label="128.176.189.164;37pkt 37fpkt", shape=invtriangle, color=brown];
4701[label="128.176.189.168;35pkt 35fpkt", shape=invtriangle, color=brown];
4704[label="128.176.189.169;33pkt 33fpkt", shape=invtriangle, color=brown];
4718[label="128.176.189.173;35pkt 35fpkt", shape=invtriangle, color=brown];
4734[label="128.176.189.180;34pkt 34fpkt", shape=invtriangle, color=brown];
4761[label="128.176.189.193;33pkt 33fpkt", shape=invtriangle, color=brown];
4784[label="128.176.189.199;34pkt 34fpkt", shape=invtriangle, color=brown];
4795[label="128.176.189.202;35pkt 35fpkt", shape=invtriangle, color=brown];
4802[label="128.176.189.204;34pkt 34fpkt", shape=invtriangle, color=brown];
4804[label="128.176.189.205;35pkt 35fpkt", shape=invtriangle, color=brown];
4819[label="128.176.189.210;33pkt 33fpkt", shape=invtriangle, color=brown];
4823[label="128.176.189.212;39pkt 39fpkt", shape=invtriangle, color=brown];
4824[label="128.176.189.213;38pkt 38fpkt", shape=invtriangle, color=brown];
4837[label="128.176.189.219;35pkt 35fpkt", shape=invtriangle, color=brown];
4846[label="128.176.189.222;34pkt 34fpkt", shape=invtriangle, color=brown];
4889[label="128.176.189.237;35pkt 35fpkt", shape=invtriangle, color=brown];
4907[label="128.176.189.246;32pkt 32fpkt", shape=invtriangle, color=brown];
4930[label="128.176.184.1;27pkt 27fpkt", shape=invhouse, color=bisque];
4952[label="128.176.189.11;35pkt 35fpkt", shape=invhouse, color=bisque];
4957[label="128.176.188.13;35pkt 35fpkt", shape=invhouse, color=bisque];
4965[label="128.176.188.16;35pkt 35fpkt", shape=invhouse, color=bisque];
4980[label="128.176.184.24;28pkt 28fpkt", shape=invhouse, color=bisque];
4987[label="128.176.189.28;37pkt 37fpkt", shape=invhouse, color=bisque];
5007[label="128.176.189.35;34pkt 34fpkt", shape=invhouse, color=bisque];
5008[label="128.176.188.36;34pkt 34fpkt", shape=invhouse, color=bisque];
5014[label="128.176.189.40;32pkt 32fpkt", shape=invhouse, color=bisque];
5070[label="128.176.184.66;28pkt 28fpkt", shape=invhouse, color=bisque];
5078[label="128.176.188.70;33pkt 33fpkt", shape=invhouse, color=bisque];
5084[label="128.176.184.72;28pkt 28fpkt", shape=invhouse, color=bisque];
5118[label="128.176.184.85;27pkt 27fpkt", shape=invhouse, color=bisque];
5122[label="128.176.184.87;26pkt 26fpkt", shape=invhouse, color=bisque];
5125[label="128.176.184.88;28pkt 28fpkt", shape=invhouse, color=bisque];
5160[label="128.176.184.105;28pkt 28fpkt", shape=invhouse, color=bisque];
5168[label="128.176.184.107;27pkt 27fpkt", shape=invhouse, color=bisque];
5173[label="128.176.184.112;37pkt 37fpkt", shape=invhouse, color=bisque];
5177[label="128.176.188.114;33pkt 33fpkt", shape=invhouse, color=bisque];
5191[label="128.176.184.120;29pkt 29fpkt", shape=invhouse, color=bisque];
5229[label="128.176.189.135;34pkt 34fpkt", shape=invhouse, color=bisque];
5236[label="128.176.189.139;34pkt 34fpkt", shape=invhouse, color=bisque];
5278[label="128.176.189.164;37pkt 37fpkt", shape=invhouse, color=bisque];
5288[label="128.176.189.168;35pkt 35fpkt", shape=invhouse, color=bisque];
5296[label="128.176.189.173;35pkt 35fpkt", shape=invhouse, color=bisque];
5306[label="128.176.189.180;34pkt 34fpkt", shape=invhouse, color=bisque];
5324[label="128.176.189.193;33pkt 33fpkt", shape=invhouse, color=bisque];
5343[label="128.176.189.199;34pkt 34fpkt", shape=invhouse, color=bisque];
5353[label="128.176.189.205;35pkt 35fpkt", shape=invhouse, color=bisque];
5368[label="128.176.189.219;35pkt 35fpkt", shape=invhouse, color=bisque];
5374[label="128.176.189.222;34pkt 34fpkt", shape=invhouse, color=bisque];
5406[label="128.176.189.237;35pkt 35fpkt", shape=invhouse, color=bisque];
5418[label="128.176.189.246;32pkt 32fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1433, 69.10.79.240:*}[99.6085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.7972%)&lt;BR/&gt; 445: (0.0874891%)&lt;BR/&gt; 135: (0.0516981%)&lt;BR/&gt; 61793: (0.0477213%)&lt;BR/&gt; 61599: (0.0477213%)&gt;];
}
457--2671[label="0.928571;26pkt 26fpkt"];
457--2675[label="0.928571;26pkt 26fpkt"];
457--2693[label="0.914286;32pkt 32fpkt"];
457--2705[label="0.928571;26pkt 26fpkt"];
457--2706[label="0.918919;34pkt 34fpkt"];
457--2716[label="0.896552;26pkt 26fpkt"];
457--2721[label="0.928571;26pkt 26fpkt"];
457--2728[label="0.9375;30pkt 30fpkt"];
457--2734[label="0.918919;34pkt 34fpkt"];
457--2744[label="0.925926;25pkt 25fpkt"];
457--2751[label="0.911765;31pkt 31fpkt"];
457--2763[label="0.885714;31pkt 31fpkt"];
457--2774[label="0.944444;34pkt 34fpkt"];
457--2784[label="0.911765;31pkt 31fpkt"];
457--2792[label="0.911765;31pkt 31fpkt"];
457--2801[label="0.90625;29pkt 29fpkt"];
457--2802[label="0.939394;31pkt 31fpkt"];
457--2803[label="0.914286;32pkt 32fpkt"];
457--2819[label="0.861111;31pkt 31fpkt"];
457--2840[label="0.888889;24pkt 24fpkt"];
457--2846[label="0.888889;24pkt 24fpkt"];
457--2863[label="0.944444;34pkt 34fpkt"];
457--2878[label="0.909091;30pkt 30fpkt"];
457--2888[label="0.914286;32pkt 32fpkt"];
457--2912[label="0.911765;31pkt 31fpkt"];
457--2915[label="0.909091;30pkt 30fpkt"];
457--2923[label="0.925926;25pkt 25fpkt"];
457--2933[label="0.90625;29pkt 29fpkt"];
457--2943[label="0.911765;31pkt 31fpkt"];
457--2960[label="0.911765;31pkt 31fpkt"];
457--2992[label="0.909091;30pkt 30fpkt"];
457--2993[label="0.911765;31pkt 31fpkt"];
457--3034[label="0.942857;33pkt 33fpkt"];
457--3052[label="0.914286;32pkt 32fpkt"];
457--3088[label="0.862069;25pkt 25fpkt"];
457--3094[label="0.892857;25pkt 25fpkt"];
457--3095[label="0.909091;30pkt 30fpkt"];
457--3102[label="0.911765;31pkt 31fpkt"];
457--3111[label="0.941176;32pkt 32fpkt"];
457--3122[label="0.909091;30pkt 30fpkt"];
457--3138[label="0.928571;26pkt 26fpkt"];
457--3197[label="0.931034;27pkt 27fpkt"];
457--3210[label="0.888889;24pkt 24fpkt"];
457--3224[label="0.892857;25pkt 25fpkt"];
457--3238[label="0.925926;25pkt 25fpkt"];
457--3245[label="0.928571;26pkt 26fpkt"];
457--3256[label="0.961538;25pkt 25fpkt"];
457--3262[label="0.928571;26pkt 26fpkt"];
457--3268[label="0.935484;29pkt 29fpkt"];
457--3297[label="0.892857;25pkt 25fpkt"];
457--3301[label="0.892857;25pkt 25fpkt"];
457--3338[label="0.933333;28pkt 28fpkt"];
457--3347[label="0.928571;26pkt 26fpkt"];
457--3351[label="0.888889;24pkt 24fpkt"];
457--3362[label="0.928571;26pkt 26fpkt"];
457--3376[label="0.925926;25pkt 25fpkt"];
457--3383[label="0.896552;26pkt 26fpkt"];
457--3394[label="0.925926;25pkt 25fpkt"];
457--3402[label="0.756757;28pkt 28fpkt"];
457--3411[label="0.909091;30pkt 30fpkt"];
457--3414[label="0.931034;27pkt 27fpkt"];
457--3443[label="0.931034;27pkt 27fpkt"];
457--3449[label="0.931034;27pkt 27fpkt"];
457--3450[label="0.914286;32pkt 32fpkt"];
457--3463[label="0.928571;26pkt 26fpkt"];
457--3468[label="0.892857;25pkt 25fpkt"];
457--3483[label="0.916667;33pkt 33fpkt"];
457--3529[label="0.914286;32pkt 32fpkt"];
457--3545[label="0.909091;30pkt 30fpkt"];
457--3554[label="0.911765;31pkt 31fpkt"];
457--3563[label="0.914286;32pkt 32fpkt"];
457--3572[label="0.90625;29pkt 29fpkt"];
457--3579[label="0.911765;31pkt 31fpkt"];
457--3614[label="0.914286;32pkt 32fpkt"];
457--3619[label="0.756098;31pkt 31fpkt"];
457--3622[label="0.909091;30pkt 30fpkt"];
457--3640[label="0.911765;31pkt 31fpkt"];
457--3684[label="0.918919;34pkt 34fpkt"];
457--3705[label="0.914286;32pkt 32fpkt"];
457--3712[label="0.909091;30pkt 30fpkt"];
457--3734[label="0.885714;31pkt 31fpkt"];
457--3751[label="0.911765;31pkt 31fpkt"];
457--3769[label="0.911765;31pkt 31fpkt"];
457--3774[label="0.916667;33pkt 33fpkt"];
457--3781[label="0.916667;33pkt 33fpkt"];
457--3791[label="0.9375;30pkt 30fpkt"];
457--3819[label="0.939394;31pkt 31fpkt"];
457--3834[label="0.916667;33pkt 33fpkt"];
457--3839[label="0.916667;33pkt 33fpkt"];
457--3847[label="0.944444;34pkt 34fpkt"];
457--3855[label="0.911765;31pkt 31fpkt"];
457--3874[label="0.914286;32pkt 32fpkt"];
457--3880[label="0.914286;32pkt 32fpkt"];
457--3887[label="0.941176;32pkt 32fpkt"];
457--3893[label="0.914286;32pkt 32fpkt"];
457--3905[label="0.911765;31pkt 31fpkt"];
457--3918[label="0.909091;30pkt 30fpkt"];
457--3929[label="0.923077;36pkt 36fpkt"];
457--3933[label="0.921053;35pkt 35fpkt"];
457--3954[label="0.914286;32pkt 32fpkt"];
457--3970[label="0.911765;31pkt 31fpkt"];
457--3974[label="0.756098;31pkt 31fpkt"];
457--4034[label="0.914286;32pkt 32fpkt"];
457--4052[label="0.914286;32pkt 32fpkt"];
457--4065[label="0.909091;30pkt 30fpkt"];
457--4081[label="0.90625;29pkt 29fpkt"];
457--4120[label="0.931034;27pkt 27fpkt"];
457--4123[label="0.925926;25pkt 25fpkt"];
457--4137[label="0.911765;31pkt 31fpkt"];
457--4152[label="0.935484;29pkt 29fpkt"];
457--4165[label="0.911765;31pkt 31fpkt"];
457--4172[label="0.885714;31pkt 31fpkt"];
457--4183[label="0.914286;32pkt 32fpkt"];
457--4195[label="0.914286;32pkt 32fpkt"];
457--4214[label="0.888889;24pkt 24fpkt"];
457--4224[label="0.945946;35pkt 35fpkt"];
457--4240[label="0.914286;32pkt 32fpkt"];
457--4256[label="0.911765;31pkt 31fpkt"];
457--4258[label="0.909091;30pkt 30fpkt"];
457--4261[label="0.925926;25pkt 25fpkt"];
457--4266[label="0.90625;29pkt 29fpkt"];
457--4324[label="0.914286;32pkt 32fpkt"];
457--4347[label="0.892857;25pkt 25fpkt"];
457--4359[label="0.941176;32pkt 32fpkt"];
457--4365[label="0.909091;30pkt 30fpkt"];
457--4376[label="0.928571;26pkt 26fpkt"];
457--4418[label="0.888889;24pkt 24fpkt"];
457--4437[label="0.925926;25pkt 25fpkt"];
457--4441[label="0.961538;25pkt 25fpkt"];
457--4445[label="0.928571;26pkt 26fpkt"];
457--4472[label="0.892857;25pkt 25fpkt"];
457--4502[label="0.928571;26pkt 26fpkt"];
457--4512[label="0.925926;25pkt 25fpkt"];
457--4528[label="0.756757;28pkt 28fpkt"];
457--4536[label="0.909091;30pkt 30fpkt"];
457--4553[label="0.931034;27pkt 27fpkt"];
457--4567[label="0.928571;26pkt 26fpkt"];
457--4605[label="0.914286;32pkt 32fpkt"];
457--4617[label="0.911765;31pkt 31fpkt"];
457--4626[label="0.90625;29pkt 29fpkt"];
457--4655[label="0.756098;31pkt 31fpkt"];
457--4656[label="0.909091;30pkt 30fpkt"];
457--4690[label="0.918919;34pkt 34fpkt"];
457--4701[label="0.914286;32pkt 32fpkt"];
457--4704[label="0.909091;30pkt 30fpkt"];
457--4718[label="0.885714;31pkt 31fpkt"];
457--4734[label="0.911765;31pkt 31fpkt"];
457--4761[label="0.939394;31pkt 31fpkt"];
457--4784[label="0.911765;31pkt 31fpkt"];
457--4795[label="0.914286;32pkt 32fpkt"];
457--4802[label="0.941176;32pkt 32fpkt"];
457--4804[label="0.914286;32pkt 32fpkt"];
457--4819[label="0.909091;30pkt 30fpkt"];
457--4823[label="0.923077;36pkt 36fpkt"];
457--4824[label="0.921053;35pkt 35fpkt"];
457--4837[label="0.914286;32pkt 32fpkt"];
457--4846[label="0.911765;31pkt 31fpkt"];
457--4889[label="0.914286;32pkt 32fpkt"];
457--4907[label="0.90625;29pkt 29fpkt"];
457--4930[label="0.925926;25pkt 25fpkt"];
457--4952[label="0.914286;32pkt 32fpkt"];
457--4957[label="0.885714;31pkt 31fpkt"];
457--4965[label="0.914286;32pkt 32fpkt"];
457--4980[label="0.892857;25pkt 25fpkt"];
457--4987[label="0.945946;35pkt 35fpkt"];
457--5007[label="0.911765;31pkt 31fpkt"];
457--5008[label="0.911765;31pkt 31fpkt"];
457--5014[label="0.90625;29pkt 29fpkt"];
457--5070[label="0.892857;25pkt 25fpkt"];
457--5078[label="0.909091;30pkt 30fpkt"];
457--5084[label="0.928571;26pkt 26fpkt"];
457--5118[label="0.925926;25pkt 25fpkt"];
457--5122[label="0.961538;25pkt 25fpkt"];
457--5125[label="0.928571;26pkt 26fpkt"];
457--5160[label="0.928571;26pkt 26fpkt"];
457--5168[label="0.925926;25pkt 25fpkt"];
457--5173[label="0.756757;28pkt 28fpkt"];
457--5177[label="0.909091;30pkt 30fpkt"];
457--5191[label="0.931034;27pkt 27fpkt"];
457--5229[label="0.911765;31pkt 31fpkt"];
457--5236[label="0.911765;31pkt 31fpkt"];
457--5278[label="0.918919;34pkt 34fpkt"];
457--5288[label="0.914286;32pkt 32fpkt"];
457--5296[label="0.885714;31pkt 31fpkt"];
457--5306[label="0.911765;31pkt 31fpkt"];
457--5324[label="0.939394;31pkt 31fpkt"];
457--5343[label="0.911765;31pkt 31fpkt"];
457--5353[label="0.914286;32pkt 32fpkt"];
457--5368[label="0.914286;32pkt 32fpkt"];
457--5374[label="0.911765;31pkt 31fpkt"];
457--5406[label="0.914286;32pkt 32fpkt"];
457--5418[label="0.90625;29pkt 29fpkt"];
2671--4120[label="1;28pkt 28fpkt"];
2675--4123[label="1;27pkt 27fpkt"];
2675--4930[label="1;27pkt 27fpkt"];
2693--4137[label="1;34pkt 34fpkt"];
2728--4152[label="1;31pkt 31fpkt"];
2751--4165[label="1;34pkt 34fpkt"];
2751--4952[label="1;34pkt 34fpkt"];
2763--4172[label="1;35pkt 35fpkt"];
2763--4957[label="1;35pkt 35fpkt"];
2784--4183[label="1;34pkt 34fpkt"];
2784--4965[label="1;34pkt 34fpkt"];
2803--4195[label="1;35pkt 35fpkt"];
2846--4214[label="1;27pkt 27fpkt"];
2846--4980[label="1;27pkt 27fpkt"];
2863--4224[label="1;36pkt 36fpkt"];
2863--4987[label="1;36pkt 36fpkt"];
2888--4240[label="1;35pkt 35fpkt"];
2912--4256[label="1;34pkt 34fpkt"];
2912--5007[label="1;34pkt 34fpkt"];
2915--4258[label="1;33pkt 33fpkt"];
2915--5008[label="1;33pkt 33fpkt"];
2923--4261[label="1;27pkt 27fpkt"];
2933--4266[label="1;32pkt 32fpkt"];
2933--5014[label="1;32pkt 32fpkt"];
3052--4324[label="1;35pkt 35fpkt"];
3094--4347[label="1;28pkt 28fpkt"];
3094--5070[label="1;28pkt 28fpkt"];
3111--4359[label="1;34pkt 34fpkt"];
3122--4365[label="1;33pkt 33fpkt"];
3122--5078[label="1;33pkt 33fpkt"];
3138--4376[label="1;28pkt 28fpkt"];
3138--5084[label="1;28pkt 28fpkt"];
3210--4418[label="1;27pkt 27fpkt"];
3238--4437[label="1;27pkt 27fpkt"];
3238--5118[label="1;27pkt 27fpkt"];
3256--4441[label="1;26pkt 26fpkt"];
3256--5122[label="1;26pkt 26fpkt"];
3262--4445[label="1;28pkt 28fpkt"];
3262--5125[label="1;28pkt 28fpkt"];
3301--4472[label="1;28pkt 28fpkt"];
3362--4502[label="1;28pkt 28fpkt"];
3362--5160[label="1;28pkt 28fpkt"];
3376--4512[label="1;27pkt 27fpkt"];
3376--5168[label="1;27pkt 27fpkt"];
3402--4528[label="1;37pkt 37fpkt"];
3402--5173[label="1;37pkt 37fpkt"];
3411--4536[label="1;33pkt 33fpkt"];
3411--5177[label="1;33pkt 33fpkt"];
3443--4553[label="1;29pkt 29fpkt"];
3443--5191[label="1;29pkt 29fpkt"];
3463--4567[label="1;28pkt 28fpkt"];
3529--4605[label="1;35pkt 35fpkt"];
3529--5229[label="1;34pkt 34fpkt"];
3554--4617[label="1;34pkt 34fpkt"];
3554--5236[label="1;34pkt 34fpkt"];
3572--4626[label="1;32pkt 32fpkt"];
3619--4655[label="1;41pkt 41fpkt"];
3622--4656[label="1;33pkt 33fpkt"];
3684--4690[label="1;37pkt 37fpkt"];
3684--5278[label="1;37pkt 37fpkt"];
3705--4701[label="1;35pkt 35fpkt"];
3705--5288[label="1;35pkt 35fpkt"];
3712--4704[label="1;33pkt 33fpkt"];
3734--4718[label="1;35pkt 35fpkt"];
3734--5296[label="1;35pkt 35fpkt"];
3769--4734[label="1;34pkt 34fpkt"];
3769--5306[label="1;34pkt 34fpkt"];
3819--4761[label="1;33pkt 33fpkt"];
3819--5324[label="1;33pkt 33fpkt"];
3855--4784[label="1;34pkt 34fpkt"];
3855--5343[label="1;34pkt 34fpkt"];
3874--4795[label="1;35pkt 35fpkt"];
3887--4802[label="1;34pkt 34fpkt"];
3893--4804[label="1;35pkt 35fpkt"];
3893--5353[label="1;35pkt 35fpkt"];
3918--4819[label="1;33pkt 33fpkt"];
3929--4823[label="1;39pkt 39fpkt"];
3933--4824[label="1;38pkt 38fpkt"];
3954--4837[label="1;35pkt 35fpkt"];
3954--5368[label="1;35pkt 35fpkt"];
3970--4846[label="1;34pkt 34fpkt"];
3970--5374[label="1;34pkt 34fpkt"];
4034--4889[label="1;35pkt 35fpkt"];
4034--5406[label="1;35pkt 35fpkt"];
4081--4907[label="1;32pkt 32fpkt"];
4081--5418[label="1;32pkt 32fpkt"];
4123--4930[label="1;27pkt 27fpkt"];
4165--4952[label="1;34pkt 34fpkt"];
4172--4957[label="1;35pkt 35fpkt"];
4183--4965[label="1;35pkt 35fpkt"];
4214--4980[label="1;27pkt 27fpkt"];
4224--4987[label="1;37pkt 37fpkt"];
4256--5007[label="1;34pkt 34fpkt"];
4258--5008[label="1;33pkt 33fpkt"];
4266--5014[label="1;32pkt 32fpkt"];
4347--5070[label="1;28pkt 28fpkt"];
4365--5078[label="1;33pkt 33fpkt"];
4376--5084[label="1;28pkt 28fpkt"];
4437--5118[label="1;27pkt 27fpkt"];
4441--5122[label="1;26pkt 26fpkt"];
4445--5125[label="1;28pkt 28fpkt"];
4502--5160[label="1;28pkt 28fpkt"];
4512--5168[label="1;27pkt 27fpkt"];
4528--5173[label="1;37pkt 37fpkt"];
4536--5177[label="1;33pkt 33fpkt"];
4553--5191[label="1;29pkt 29fpkt"];
4605--5229[label="1;34pkt 34fpkt"];
4617--5236[label="1;34pkt 34fpkt"];
4690--5278[label="1;37pkt 37fpkt"];
4701--5288[label="1;35pkt 35fpkt"];
4718--5296[label="1;35pkt 35fpkt"];
4734--5306[label="1;34pkt 34fpkt"];
4761--5324[label="1;33pkt 33fpkt"];
4784--5343[label="1;34pkt 34fpkt"];
4804--5353[label="1;35pkt 35fpkt"];
4837--5368[label="1;35pkt 35fpkt"];
4846--5374[label="1;34pkt 34fpkt"];
4889--5406[label="1;35pkt 35fpkt"];
4907--5418[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="69.10.79.240" src_port="1433"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
414[label="206.125.208.160;d;101pkt 101fpkt", shape=diamond, color=yellow];
1012[label="80.29.190.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
2068[label="217.69.57.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
3272[label="65.99.210.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3990[label="80.29.190.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4452[label="65.99.210.90;1pkt 1fpkt", shape=invtriangle, color=brown];
4860[label="80.29.190.226;1pkt 1fpkt", shape=invtriangle, color=brown];
5131[label="65.99.210.90;1pkt 1fpkt", shape=invhouse, color=bisque];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 206.125.208.160:4665}[67.3267%]&lt;BR/&gt;{*:*, 206.125.208.160:4662}[27.7228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4665: (37.037%)&lt;BR/&gt; 4662: (18.0556%)&lt;BR/&gt; 3004: (4.62963%)&lt;BR/&gt; 5825: (2.77778%)&lt;BR/&gt; 5665: (2.77778%)&gt;];
}
414--1012[label="1;1pkt 1fpkt"];
414--2068[label="1;1pkt 1fpkt"];
414--3272[label="1;1pkt 1fpkt"];
414--3990[label="1;1pkt 1fpkt"];
414--4452[label="1;1pkt 1fpkt"];
414--4860[label="1;1pkt 1fpkt"];
414--5131[label="1;1pkt 1fpkt"];
1012--3990[label="1;1pkt 1fpkt"];
1012--4860[label="1;1pkt 1fpkt"];
3272--4452[label="1;1pkt 1fpkt"];
3272--5131[label="1;1pkt 1fpkt"];
3990--4860[label="1;1pkt 1fpkt"];
4452--5131[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.208.160" dst_port="4665"/>
      <filter dst_ip="206.125.208.160" dst_port="4662"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
3274[label="219.158.23.91;256pkt 256fpkt", shape=pentagon, color=darkviolet];
4454[label="219.158.23.91;256pkt 256fpkt", shape=invtriangle, color=brown];
5132[label="219.158.23.91;256pkt 256fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.158.23.91:61391, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61391: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3274--4454[label="1;256pkt 256fpkt"];
3274--5132[label="1;256pkt 256fpkt"];
4454--5132[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.158.23.91" src_port="61391"/>
    </slice>
    <from sec="1128920988" usec="0"/>
    <to sec="1128921003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
1760[label="161.253.216.5;d;22pkt 22fpkt", shape=diamond, color=yellow];
1763[label="80.16.221.2;s;14pkt 14fpkt", shape=diamond, color=yellow];
2512[label="80.16.221.2;s;14pkt 14fpkt", shape=hexagon, color=black];
2683[label="80.16.221.2;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3291[label="80.16.221.94;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4463[label="80.16.221.94;28pkt 28fpkt", shape=invtriangle, color=brown];
5138[label="80.16.221.94;28pkt 28fpkt", shape=invhouse, color=bisque];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.16.221.94:25, *:*}[53.8462%]&lt;BR/&gt;{*:25, 161.253.216.5:*}[42.3077%]&lt;BR/&gt;{80.16.221.2:25, *:*}[34.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6711%)&lt;BR/&gt; 38746: (1.31579%)&lt;BR/&gt; 38736: (1.31579%)&lt;BR/&gt; 38723: (1.31579%)&lt;BR/&gt; 38697: (1.31579%)&gt;];
}
1760--1763[label="0.642857;9pkt 9fpkt"];
1760--2512[label="0.642857;9pkt 9fpkt"];
1760--2683[label="0.5;9pkt 9fpkt"];
1760--3291[label="0.318182;7pkt 7fpkt"];
1760--4463[label="0.318182;7pkt 7fpkt"];
1760--5138[label="0.318182;7pkt 7fpkt"];
1763--2512[label="1;14pkt 14fpkt"];
1763--2683[label="1;14pkt 14fpkt"];
2512--2683[label="1;14pkt 14fpkt"];
3291--4463[label="1;28pkt 28fpkt"];
3291--5138[label="1;28pkt 28fpkt"];
4463--5138[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="80.16.221.94" src_port="25"/>
      <filter src_ip="80.16.221.2" src_port="25"/>
      <filter dst_ip="161.253.216.5" src_port="25"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
3295[label="132.176.0.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4466[label="132.176.0.96;2pkt 2fpkt", shape=invtriangle, color=brown];
5140[label="132.176.0.96;2pkt 2fpkt", shape=invhouse, color=bisque];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.0.96:995, 84.35.49.230:2021}[50%]&lt;BR/&gt;{132.176.0.96:995, 84.35.49.230:2025}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 2025: (25%)&lt;BR/&gt; 2021: (25%)&gt;];
}
3295--4466[label="1;2pkt 2fpkt"];
3295--5140[label="1;2pkt 2fpkt"];
4466--5140[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="84.35.49.230" dst_port="2025" src_ip="132.176.0.96" src_port="995"/>
      <filter dst_ip="84.35.49.230" dst_port="2021" src_ip="132.176.0.96" src_port="995"/>
    </slice>
    <from sec="1128920728" usec="0"/>
    <to sec="1128920859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
3298[label="216.22.215.96;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4468[label="216.22.215.96;24pkt 24fpkt", shape=invtriangle, color=brown];
5142[label="216.22.215.96;24pkt 24fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.22.215.96:80, 146.250.204.24:*}[70.8333%]&lt;BR/&gt;{216.22.215.96:80, 146.250.46.8:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4194: (2.08333%)&lt;BR/&gt; 4147: (2.08333%)&lt;BR/&gt; 3210: (2.08333%)&lt;BR/&gt; 3205: (2.08333%)&gt;];
}
3298--4468[label="1;24pkt 24fpkt"];
3298--5142[label="1;24pkt 24fpkt"];
4468--5142[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.204.24" src_ip="216.22.215.96" src_port="80"/>
      <filter dst_ip="146.250.46.8" src_ip="216.22.215.96" src_port="80"/>
    </slice>
    <from sec="1128920564" usec="0"/>
    <to sec="1128921265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
3299[label="161.253.93.97;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4469[label="161.253.93.97;3pkt 3fpkt", shape=invtriangle, color=brown];
5143[label="161.253.93.97;3pkt 3fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.93.97:80, 84.198.137.121:41486}[33.3333%]&lt;BR/&gt;{161.253.93.97:80, 81.201.172.35:15803}[33.3333%]&lt;BR/&gt;{161.253.93.97:80, 81.201.172.35:24775}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41486: (16.6667%)&lt;BR/&gt; 24775: (16.6667%)&lt;BR/&gt; 15803: (16.6667%)&gt;];
}
3299--4469[label="1;3pkt 3fpkt"];
3299--5143[label="1;3pkt 3fpkt"];
4469--5143[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="81.201.172.35" dst_port="24775" src_ip="161.253.93.97" src_port="80"/>
      <filter dst_ip="81.201.172.35" dst_port="15803" src_ip="161.253.93.97" src_port="80"/>
      <filter dst_ip="84.198.137.121" dst_port="41486" src_ip="161.253.93.97" src_port="80"/>
    </slice>
    <from sec="1128920533" usec="0"/>
    <to sec="1128921256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.102.128.97"/>
    </slice>
    <from sec="1128921094" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.107.8.98"/>
    </slice>
    <from sec="1128920430" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
3310[label="214.27.59.99;394pkt 394fpkt", shape=pentagon, color=darkviolet];
4478[label="214.27.59.99;394pkt 394fpkt", shape=invtriangle, color=brown];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.27.59.99:1026, *:137}[91.6244%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (45.8122%)&lt;BR/&gt; 1029: (4.18782%)&gt;];
}
3310--4478[label="1;394pkt 394fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.27.59.99" src_port="1026"/>
    </slice>
    <from sec="1128920767" usec="0"/>
    <to sec="1128921252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.129.74.99"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
3324[label="166.18.244.100;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4485[label="166.18.244.100;56pkt 56fpkt", shape=invtriangle, color=brown];
5152[label="166.18.244.100;56pkt 56fpkt", shape=invhouse, color=bisque];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.244.100:*, 10.0.1.128:6667}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 4910: (0.892857%)&lt;BR/&gt; 4867: (0.892857%)&lt;BR/&gt; 4767: (0.892857%)&lt;BR/&gt; 4752: (0.892857%)&gt;];
}
3324--4485[label="1;56pkt 56fpkt"];
3324--5152[label="1;56pkt 56fpkt"];
4485--5152[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.1.128" dst_port="6667" src_ip="166.18.244.100"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.38.178.101"/>
    </slice>
    <from sec="1128921089" usec="0"/>
    <to sec="1128921241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.50.212.101"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.59.13.102"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
3341[label="83.119.22.103;230pkt 230fpkt", shape=pentagon, color=darkviolet];
4493[label="83.119.22.103;230pkt 230fpkt", shape=invtriangle, color=brown];
5156[label="83.119.22.103;230pkt 230fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.119.22.103:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4662: (0.434783%)&lt;BR/&gt; 3378: (0.434783%)&lt;BR/&gt; 2153: (0.434783%)&lt;BR/&gt; 4989: (0.217391%)&gt;];
}
3341--4493[label="1;230pkt 230fpkt"];
3341--5156[label="1;230pkt 230fpkt"];
4493--5156[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="83.119.22.103"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
3344[label="166.18.152.103;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4494[label="166.18.152.103;15pkt 15fpkt", shape=invtriangle, color=brown];
5157[label="166.18.152.103;15pkt 15fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.152.103:80, 81.201.172.181:*}[40%]&lt;BR/&gt;{166.18.152.103:80, 210.214.175.193:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65146: (3.33333%)&lt;BR/&gt; 63908: (3.33333%)&lt;BR/&gt; 63214: (3.33333%)&lt;BR/&gt; 59454: (3.33333%)&gt;];
}
3344--4494[label="1;15pkt 15fpkt"];
3344--5157[label="1;15pkt 15fpkt"];
4494--5157[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="81.201.172.181" src_ip="166.18.152.103" src_port="80"/>
      <filter dst_ip="210.214.175.193" src_ip="166.18.152.103" src_port="80"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.9.244.103"/>
    </slice>
    <from sec="1128921088" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.173.115.105"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
3363[label="207.152.43.106;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4503[label="207.152.43.106;72pkt 72fpkt", shape=invtriangle, color=brown];
5161[label="207.152.43.106;72pkt 72fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.152.43.106:32778, *:53}[55.5556%]&lt;BR/&gt;{207.152.43.106:53, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.1389%)&lt;BR/&gt; 32778: (27.7778%)&lt;BR/&gt; 25: (4.86111%)&lt;BR/&gt; 32785: (1.38889%)&lt;BR/&gt; 0: (1.38889%)&gt;];
}
3363--4503[label="1;72pkt 72fpkt"];
3363--5161[label="1;72pkt 72fpkt"];
4503--5161[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter src_ip="207.152.43.106" src_port="53"/>
      <filter dst_port="53" src_ip="207.152.43.106" src_port="32778"/>
    </slice>
    <from sec="1128920468" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
3368[label="128.165.208.106;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4506[label="128.165.208.106;5pkt 5fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.208.106:80, 84.198.138.44:52168}[20%]&lt;BR/&gt;{128.165.208.106:62569, 216.229.184.50:80}[20%]&lt;BR/&gt;{128.165.208.106:80, 84.198.138.78:42840}[20%]&lt;BR/&gt;{128.165.208.106:80, 84.198.136.185:38637}[20%]&lt;BR/&gt;{128.165.208.106:80, 84.198.137.200:45086}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62569: (10%)&lt;BR/&gt; 52168: (10%)&lt;BR/&gt; 45086: (10%)&lt;BR/&gt; 42840: (10%)&gt;];
}
3368--4506[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="84.198.137.200" dst_port="45086" src_ip="128.165.208.106" src_port="80"/>
      <filter dst_ip="84.198.136.185" dst_port="38637" src_ip="128.165.208.106" src_port="80"/>
      <filter dst_ip="84.198.138.78" dst_port="42840" src_ip="128.165.208.106" src_port="80"/>
      <filter dst_ip="216.229.184.50" dst_port="80" src_ip="128.165.208.106" src_port="62569"/>
      <filter dst_ip="84.198.138.44" dst_port="52168" src_ip="128.165.208.106" src_port="80"/>
    </slice>
    <from sec="1128920441" usec="0"/>
    <to sec="1128920994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.196.216.106"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128920806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
3371[label="132.176.226.106;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4509[label="132.176.226.106;18pkt 18fpkt", shape=invtriangle, color=brown];
5166[label="132.176.226.106;18pkt 18fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.226.106:*, *:1863}[50%]&lt;BR/&gt;{132.176.226.106:*, *:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 33428: (5.55556%)&lt;BR/&gt; 7001: (5.55556%)&lt;BR/&gt; 33730: (2.77778%)&gt;];
}
3371--4509[label="1;18pkt 18fpkt"];
3371--5166[label="1;18pkt 18fpkt"];
4509--5166[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="132.176.226.106"/>
      <filter dst_port="80" src_ip="132.176.226.106"/>
    </slice>
    <from sec="1128920426" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
3373[label="132.176.38.107;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4510[label="132.176.38.107;19pkt 19fpkt", shape=invtriangle, color=brown];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.38.107:*, *:25}[63.1579%]&lt;BR/&gt;{132.176.38.107:25, *:*}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 53960: (2.63158%)&lt;BR/&gt; 53958: (2.63158%)&lt;BR/&gt; 53953: (2.63158%)&lt;BR/&gt; 53952: (2.63158%)&gt;];
}
3373--4510[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="132.176.38.107" src_port="25"/>
      <filter dst_port="25" src_ip="132.176.38.107"/>
    </slice>
    <from sec="1128920507" usec="0"/>
    <to sec="1128921247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
3377[label="64.46.10.108;89pkt 89fpkt", shape=pentagon, color=darkviolet];
4513[label="64.46.10.108;89pkt 89fpkt", shape=invtriangle, color=brown];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.46.10.108:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4919: (0.561798%)&lt;BR/&gt; 4894: (0.561798%)&lt;BR/&gt; 4824: (0.561798%)&lt;BR/&gt; 4749: (0.561798%)&gt;];
}
3377--4513[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="64.46.10.108"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.8.71.108"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
3380[label="85.74.118.108;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4515[label="85.74.118.108;5pkt 5fpkt", shape=invtriangle, color=brown];
5169[label="85.74.118.108;5pkt 5fpkt", shape=invhouse, color=bisque];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.74.118.108:27035, 146.250.46.46:1035}[20%]&lt;BR/&gt;{85.74.118.108:27035, 146.250.46.46:1042}[20%]&lt;BR/&gt;{85.74.118.108:27035, 146.250.46.46:1043}[20%]&lt;BR/&gt;{85.74.118.108:27035, 146.250.46.46:1044}[20%]&lt;BR/&gt;{85.74.118.108:27035, 146.250.46.46:1051}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27035: (50%)&lt;BR/&gt; 1051: (10%)&lt;BR/&gt; 1044: (10%)&lt;BR/&gt; 1043: (10%)&lt;BR/&gt; 1042: (10%)&gt;];
}
3380--4515[label="1;5pkt 5fpkt"];
3380--5169[label="1;5pkt 5fpkt"];
4515--5169[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.46.46" dst_port="1051" src_ip="85.74.118.108" src_port="27035"/>
      <filter dst_ip="146.250.46.46" dst_port="1044" src_ip="85.74.118.108" src_port="27035"/>
      <filter dst_ip="146.250.46.46" dst_port="1043" src_ip="85.74.118.108" src_port="27035"/>
      <filter dst_ip="146.250.46.46" dst_port="1042" src_ip="85.74.118.108" src_port="27035"/>
      <filter dst_ip="146.250.46.46" dst_port="1035" src_ip="85.74.118.108" src_port="27035"/>
    </slice>
    <from sec="1128920819" usec="0"/>
    <to sec="1128920895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="147.15.129.109"/>
    </slice>
    <from sec="1128920471" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
3393[label="132.177.164.110;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4522[label="132.177.164.110;17pkt 17fpkt", shape=invtriangle, color=brown];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.164.110:*, 211.145.117.231:80}[41.1765%]&lt;BR/&gt;{132.177.164.110:*, 65.7.186.252:80}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3131: (2.94118%)&lt;BR/&gt; 3127: (2.94118%)&lt;BR/&gt; 3093: (2.94118%)&lt;BR/&gt; 3078: (2.94118%)&gt;];
}
3393--4522[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="65.7.186.252" dst_port="80" src_ip="132.177.164.110"/>
      <filter dst_ip="211.145.117.231" dst_port="80" src_ip="132.177.164.110"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128920736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.158.21.111"/>
    </slice>
    <from sec="1128920628" usec="0"/>
    <to sec="1128920638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.170.182.111"/>
    </slice>
    <from sec="1128920869" usec="0"/>
    <to sec="1128920891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
3399[label="219.65.91.112;63pkt 63fpkt", shape=pentagon, color=darkviolet];
4526[label="219.65.91.112;63pkt 63fpkt", shape=invtriangle, color=brown];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.65.91.112:*, *:1433}[98.4127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.2063%)&lt;BR/&gt; 4189: (1.5873%)&lt;BR/&gt; 3093: (1.5873%)&lt;BR/&gt; 1059: (1.5873%)&lt;BR/&gt; 20189: (0.793651%)&gt;];
}
3399--4526[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="219.65.91.112"/>
    </slice>
    <from sec="1128920428" usec="0"/>
    <to sec="1128921268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
1054[label="166.18.138.212;s;32pkt 32fpkt", shape=diamond, color=yellow];
1314[label="80.97.88.28;d;121pkt 121fpkt", shape=diamond, color=yellow];
1522[label="216.248.70.235;d;31pkt 31fpkt", shape=diamond, color=yellow];
1622[label="213.177.140.97;d;99pkt 99fpkt", shape=diamond, color=yellow];
1654[label="216.248.70.198;d;34pkt 34fpkt", shape=diamond, color=yellow];
1659[label="216.248.70.234;d;26pkt 26fpkt", shape=diamond, color=yellow];
1930[label="81.16.38.179;d;93pkt 93fpkt", shape=diamond, color=yellow];
1984[label="166.18.129.89;s;5pkt 5fpkt", shape=diamond, color=yellow];
1993[label="166.18.141.80;s;215pkt 215fpkt", shape=diamond, color=yellow];
3194[label="166.18.141.80;215pkt 215fpkt", shape=pentagon, color=darkviolet];
3264[label="166.18.129.89;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3349[label="166.18.244.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3401[label="166.18.183.112;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3493[label="166.18.246.129;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3927[label="166.18.138.212;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4409[label="166.18.141.80;215pkt 215fpkt", shape=invtriangle, color=brown];
4447[label="166.18.129.89;5pkt 5fpkt", shape=invtriangle, color=brown];
4527[label="166.18.183.112;11pkt 11fpkt", shape=invtriangle, color=brown];
4583[label="166.18.246.129;7pkt 7fpkt", shape=invtriangle, color=brown];
5101[label="166.18.141.80;215pkt 215fpkt", shape=invhouse, color=bisque];
5127[label="166.18.129.89;5pkt 5fpkt", shape=invhouse, color=bisque];
5212[label="166.18.246.129;7pkt 7fpkt", shape=invhouse, color=bisque];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:21}[49.0881%]&lt;BR/&gt;{166.18.141.80:*, *:443}[29.7872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (28.9549%)&lt;BR/&gt; 21: (14.388%)&lt;BR/&gt; 5050: (4.72441%)&lt;BR/&gt; 123: (0.858984%)&lt;BR/&gt; 2401: (0.572656%)&gt;];
}
1054--1099[label="0.03125;1pkt 1fpkt"];
1054--1314[label="0.09375;3pkt 3fpkt"];
1054--1622[label="0.03125;1pkt 1fpkt"];
1054--1659[label="0.0384615;1pkt 1fpkt"];
1054--3927[label="0.96875;31pkt 31fpkt"];
1314--1984[label="0.8;4pkt 4fpkt"];
1314--1993[label="0.0165289;2pkt 2fpkt"];
1314--3194[label="0.0165289;2pkt 2fpkt"];
1314--3264[label="0.8;4pkt 4fpkt"];
1314--3927[label="0.0810811;3pkt 3fpkt"];
1314--4409[label="0.0165289;2pkt 2fpkt"];
1314--4447[label="0.8;4pkt 4fpkt"];
1314--5101[label="0.0165289;2pkt 2fpkt"];
1314--5127[label="0.8;4pkt 4fpkt"];
1522--1993[label="0.0322581;1pkt 1fpkt"];
1522--3194[label="0.0322581;1pkt 1fpkt"];
1522--4409[label="0.0322581;1pkt 1fpkt"];
1522--5101[label="0.0322581;1pkt 1fpkt"];
1622--3927[label="0.027027;1pkt 1fpkt"];
1654--1899[label="0.0294118;1pkt 1fpkt"];
1654--1993[label="0.0882353;3pkt 3fpkt"];
1654--3194[label="0.0882353;3pkt 3fpkt"];
1654--4409[label="0.0882353;3pkt 3fpkt"];
1654--5101[label="0.0882353;3pkt 3fpkt"];
1659--3349[label="1;1pkt 1fpkt"];
1659--3401[label="0.0909091;1pkt 1fpkt"];
1659--3927[label="0.0384615;1pkt 1fpkt"];
1659--4527[label="0.0909091;1pkt 1fpkt"];
1930--1993[label="0.0322581;3pkt 3fpkt"];
1930--3194[label="0.0322581;3pkt 3fpkt"];
1930--3493[label="0.428571;3pkt 3fpkt"];
1930--4409[label="0.0322581;3pkt 3fpkt"];
1930--4583[label="0.428571;3pkt 3fpkt"];
1930--5101[label="0.0322581;3pkt 3fpkt"];
1930--5212[label="0.428571;3pkt 3fpkt"];
1984--3264[label="1;5pkt 5fpkt"];
1984--4447[label="1;5pkt 5fpkt"];
1984--5127[label="1;5pkt 5fpkt"];
1993--3194[label="1;215pkt 215fpkt"];
1993--4409[label="1;215pkt 215fpkt"];
1993--5101[label="1;215pkt 215fpkt"];
3194--4409[label="1;215pkt 215fpkt"];
3194--5101[label="1;215pkt 215fpkt"];
3264--4447[label="1;5pkt 5fpkt"];
3264--5127[label="1;5pkt 5fpkt"];
3401--4527[label="1;11pkt 11fpkt"];
3493--4583[label="1;7pkt 7fpkt"];
3493--5212[label="1;7pkt 7fpkt"];
4409--5101[label="1;215pkt 215fpkt"];
4447--5127[label="1;5pkt 5fpkt"];
4583--5212[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="21"/>
      <filter dst_port="443" src_ip="166.18.141.80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
3405[label="161.253.33.113;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4531[label="161.253.33.113;6pkt 6fpkt", shape=invtriangle, color=brown];
5175[label="161.253.33.113;6pkt 6fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.33.113:*, 221.37.85.219:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1767: (8.33333%)&lt;BR/&gt; 1765: (8.33333%)&lt;BR/&gt; 1736: (8.33333%)&lt;BR/&gt; 1734: (8.33333%)&gt;];
}
3405--4531[label="1;6pkt 6fpkt"];
3405--5175[label="1;6pkt 6fpkt"];
4531--5175[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="221.37.85.219" dst_port="80" src_ip="161.253.33.113"/>
    </slice>
    <from sec="1128920681" usec="0"/>
    <to sec="1128921028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.21.61.114"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.229.74.116"/>
    </slice>
    <from sec="1128920676" usec="0"/>
    <to sec="1128920701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
1650[label="166.18.183.117;s;57pkt 57fpkt", shape=diamond, color=yellow];
1991[label="211.145.117.215;d;27pkt 27fpkt", shape=diamond, color=yellow];
3424[label="166.18.183.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4542[label="166.18.183.117;1pkt 1fpkt", shape=invtriangle, color=brown];
5180[label="166.18.183.117;63pkt 63fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.183.117:*, 211.145.117.215:20}[46.0317%]&lt;BR/&gt;{166.18.183.117:*, 217.52.253.179:110}[20.6349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (26.5101%)&lt;BR/&gt; 110: (13.7584%)&lt;BR/&gt; 443: (5.7047%)&lt;BR/&gt; 21: (2.01342%)&lt;BR/&gt; 5190: (1.34228%)&gt;];
}
1650--1991[label="1;27pkt 27fpkt"];
1650--3424[label="1;1pkt 1fpkt"];
1650--4542[label="1;1pkt 1fpkt"];
1650--5180[label="1;57pkt 57fpkt"];
1991--5180[label="1;27pkt 27fpkt"];
3424--4542[label="1;1pkt 1fpkt"];
3424--5180[label="1;1pkt 1fpkt"];
4542--5180[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.145.117.215" dst_port="20" src_ip="166.18.183.117"/>
      <filter dst_ip="217.52.253.179" dst_port="110" src_ip="166.18.183.117"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.135.35.121"/>
    </slice>
    <from sec="1128920536" usec="0"/>
    <to sec="1128920824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
198[label="193.239.75.204;d;20pkt 20fpkt", shape=diamond, color=yellow];
1447[label="166.18.141.79;s;2pkt 2fpkt", shape=diamond, color=yellow];
1638[label="166.18.210.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1656[label="166.18.190.210;s;3pkt 3fpkt", shape=diamond, color=yellow];
1703[label="166.18.158.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
1823[label="166.18.152.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1875[label="166.18.224.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
2002[label="216.248.70.249;d;20pkt 20fpkt", shape=diamond, color=yellow];
2008[label="216.248.70.213;d;14pkt 14fpkt", shape=diamond, color=yellow];
3187[label="166.18.141.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3919[label="166.18.190.210;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4401[label="166.18.141.79;1pkt 1fpkt", shape=invtriangle, color=brown];
4559[label="166.18.152.122;1pkt 1fpkt", shape=invtriangle, color=brown];
5096[label="166.18.141.79;1pkt 1fpkt", shape=invhouse, color=bisque];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.239.75.204:*}[36.3636%]&lt;BR/&gt;{*:*, 216.248.70.249:5050}[29.0909%]&lt;BR/&gt;{*:*, 216.248.70.213:5050}[25.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (26.087%)&lt;BR/&gt; 6661: (5.7971%)&lt;BR/&gt; 6667: (4.34783%)&lt;BR/&gt; 1126: (3.62319%)&lt;BR/&gt; 6664: (2.89855%)&gt;];
}
198--437[label="0.25;5pkt 5fpkt"];
198--1054[label="0.05;1pkt 1fpkt"];
198--1447[label="0.5;1pkt 1fpkt"];
198--1638[label="1;1pkt 1fpkt"];
198--1656[label="0.333333;1pkt 1fpkt"];
198--1703[label="1;1pkt 1fpkt"];
198--1823[label="1;1pkt 1fpkt"];
198--1875[label="1;1pkt 1fpkt"];
198--3907[label="0.25;5pkt 5fpkt"];
198--4559[label="1;1pkt 1fpkt"];
198--4810[label="0.25;5pkt 5fpkt"];
198--5357[label="0.25;5pkt 5fpkt"];
1447--2008[label="0.5;1pkt 1fpkt"];
1447--3187[label="1;1pkt 1fpkt"];
1447--4401[label="1;1pkt 1fpkt"];
1447--5096[label="1;1pkt 1fpkt"];
1656--2002[label="0.333333;1pkt 1fpkt"];
1656--3919[label="1;2pkt 2fpkt"];
1823--4559[label="1;1pkt 1fpkt"];
2002--3919[label="0.5;1pkt 1fpkt"];
2008--3187[label="1;1pkt 1fpkt"];
2008--4401[label="1;1pkt 1fpkt"];
2008--5096[label="1;1pkt 1fpkt"];
3187--4401[label="1;1pkt 1fpkt"];
3187--5096[label="1;1pkt 1fpkt"];
4401--5096[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.239.75.204"/>
      <filter dst_ip="216.248.70.249" dst_port="5050"/>
      <filter dst_ip="216.248.70.213" dst_port="5050"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
3455[label="207.99.8.123;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4561[label="207.99.8.123;15pkt 15fpkt", shape=invtriangle, color=brown];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.8.123:*, 201.39.106.40:80}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3333%)&lt;BR/&gt; 6346: (3.33333%)&lt;BR/&gt; 3963: (3.33333%)&lt;BR/&gt; 3669: (3.33333%)&lt;BR/&gt; 3656: (3.33333%)&gt;];
}
3455--4561[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="201.39.106.40" dst_port="80" src_ip="207.99.8.123"/>
    </slice>
    <from sec="1128920426" usec="0"/>
    <to sec="1128921291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
3458[label="206.125.216.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4563[label="206.125.216.123;1pkt 1fpkt", shape=invtriangle, color=brown];
5198[label="206.125.216.123;1pkt 1fpkt", shape=invhouse, color=bisque];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.216.123:3459, 216.53.96.104:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3459: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
3458--4563[label="1;1pkt 1fpkt"];
3458--5198[label="1;1pkt 1fpkt"];
4563--5198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.53.96.104" dst_port="53" src_ip="206.125.216.123" src_port="3459"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="152.51.51.124"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.74.86.125"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.14.212.127"/>
    </slice>
    <from sec="1128920622" usec="0"/>
    <to sec="1128920696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
3477[label="200.53.70.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4574[label="200.53.70.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.53.70.128:80, 207.107.22.172:2555}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2555: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3477--4574[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.107.22.172" dst_port="2555" src_ip="200.53.70.128" src_port="80"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
3479[label="218.34.72.128;252pkt 252fpkt", shape=pentagon, color=darkviolet];
4576[label="218.34.72.128;252pkt 252fpkt", shape=invtriangle, color=brown];
5206[label="218.34.72.128;252pkt 252fpkt", shape=invhouse, color=bisque];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.34.72.128:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4150: (0.198413%)&lt;BR/&gt; 4149: (0.198413%)&lt;BR/&gt; 4148: (0.198413%)&lt;BR/&gt; 4147: (0.198413%)&gt;];
}
3479--4576[label="1;252pkt 252fpkt"];
3479--5206[label="1;252pkt 252fpkt"];
4576--5206[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="218.34.72.128"/>
    </slice>
    <from sec="1128920540" usec="0"/>
    <to sec="1128920564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
3481[label="220.38.89.128;440pkt 440fpkt", shape=pentagon, color=darkviolet];
4577[label="220.38.89.128;440pkt 440fpkt", shape=invtriangle, color=brown];
5207[label="220.38.89.128;440pkt 440fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.38.89.128:32790, *:1026}[61.3636%]&lt;BR/&gt;{220.38.89.128:32790, *:1027}[38.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32790: (50%)&lt;BR/&gt; 1026: (30.6818%)&lt;BR/&gt; 1027: (19.3182%)&gt;];
}
3481--4577[label="1;440pkt 440fpkt"];
3481--5207[label="1;440pkt 440fpkt"];
4577--5207[label="1;440pkt 440fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.38.89.128" src_port="32790"/>
      <filter dst_port="1027" src_ip="220.38.89.128" src_port="32790"/>
    </slice>
    <from sec="1128920499" usec="0"/>
    <to sec="1128921237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
3500[label="128.165.227.130;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4587[label="128.165.227.130;19pkt 19fpkt", shape=invtriangle, color=brown];
5214[label="128.165.227.130;19pkt 19fpkt", shape=invhouse, color=bisque];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.227.130:*, 80.212.77.181:80}[73.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4333: (2.63158%)&lt;BR/&gt; 4332: (2.63158%)&lt;BR/&gt; 4331: (2.63158%)&lt;BR/&gt; 4330: (2.63158%)&gt;];
}
3500--4587[label="1;19pkt 19fpkt"];
3500--5214[label="1;19pkt 19fpkt"];
4587--5214[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="80.212.77.181" dst_port="80" src_ip="128.165.227.130"/>
    </slice>
    <from sec="1128920449" usec="0"/>
    <to sec="1128921250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
3501[label="166.18.240.130;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4588[label="166.18.240.130;10pkt 10fpkt", shape=invtriangle, color=brown];
5215[label="166.18.240.130;10pkt 10fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.240.130:80, 81.16.53.66:*}[20%]&lt;BR/&gt;{166.18.240.130:*, 54.3.38.68:110}[20%]&lt;BR/&gt;{166.18.240.130:*, 54.3.38.70:110}[20%]&lt;BR/&gt;{166.18.240.130:*, 85.118.24.210:110}[20%]&lt;BR/&gt;{166.18.240.130:*, 83.60.205.244:110}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (40%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 41038: (5%)&lt;BR/&gt; 41036: (5%)&lt;BR/&gt; 41031: (5%)&gt;];
}
3501--4588[label="1;10pkt 10fpkt"];
3501--5215[label="1;10pkt 10fpkt"];
4588--5215[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="83.60.205.244" dst_port="110" src_ip="166.18.240.130"/>
      <filter dst_ip="85.118.24.210" dst_port="110" src_ip="166.18.240.130"/>
      <filter dst_ip="54.3.38.70" dst_port="110" src_ip="166.18.240.130"/>
      <filter dst_ip="54.3.38.68" dst_port="110" src_ip="166.18.240.130"/>
      <filter dst_ip="81.16.53.66" src_ip="166.18.240.130" src_port="80"/>
    </slice>
    <from sec="1128920611" usec="0"/>
    <to sec="1128921235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
3507[label="132.177.202.131;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4591[label="132.177.202.131;53pkt 53fpkt", shape=invtriangle, color=brown];
5218[label="132.177.202.131;53pkt 53fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.202.131:*, 83.60.129.115:80}[71.6981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1648: (0.943396%)&lt;BR/&gt; 1613: (0.943396%)&lt;BR/&gt; 1612: (0.943396%)&lt;BR/&gt; 1611: (0.943396%)&gt;];
}
3507--4591[label="1;53pkt 53fpkt"];
3507--5218[label="1;53pkt 53fpkt"];
4591--5218[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="83.60.129.115" dst_port="80" src_ip="132.177.202.131"/>
    </slice>
    <from sec="1128920633" usec="0"/>
    <to sec="1128921255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
3520[label="166.18.251.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4599[label="166.18.251.133;3pkt 3fpkt", shape=invtriangle, color=brown];
5225[label="166.18.251.133;3pkt 3fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.251.133:25, 137.144.153.0:51164}[33.3333%]&lt;BR/&gt;{166.18.251.133:25, 82.33.172.101:33211}[33.3333%]&lt;BR/&gt;{166.18.251.133:25, 82.33.172.115:38639}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 51164: (16.6667%)&lt;BR/&gt; 38639: (16.6667%)&lt;BR/&gt; 33211: (16.6667%)&gt;];
}
3520--4599[label="1;3pkt 3fpkt"];
3520--5225[label="1;3pkt 3fpkt"];
4599--5225[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="82.33.172.115" dst_port="38639" src_ip="166.18.251.133" src_port="25"/>
      <filter dst_ip="82.33.172.101" dst_port="33211" src_ip="166.18.251.133" src_port="25"/>
      <filter dst_ip="137.144.153.0" dst_port="51164" src_ip="166.18.251.133" src_port="25"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
3522[label="161.253.38.134;91pkt 91fpkt", shape=pentagon, color=darkviolet];
4600[label="161.253.38.134;91pkt 91fpkt", shape=invtriangle, color=brown];
5226[label="161.253.38.134;91pkt 91fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.38.134:1358, *:*}[98.9011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1358: (49.4505%)&lt;BR/&gt; 10000: (1.0989%)&lt;BR/&gt; 1914: (1.0989%)&lt;BR/&gt; 62947: (0.549451%)&lt;BR/&gt; 62397: (0.549451%)&gt;];
}
3522--4600[label="1;91pkt 91fpkt"];
3522--5226[label="1;91pkt 91fpkt"];
4600--5226[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="161.253.38.134" src_port="1358"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.8.42.134"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
3528[label="128.165.180.135;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4604[label="128.165.180.135;31pkt 31fpkt", shape=invtriangle, color=brown];
5228[label="128.165.180.135;31pkt 31fpkt", shape=invhouse, color=bisque];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.180.135:*, 215.19.226.131:80}[29.0323%]&lt;BR/&gt;{128.165.180.135:*, 201.135.171.10:80}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 1863: (1.6129%)&lt;BR/&gt; 1217: (1.6129%)&lt;BR/&gt; 1216: (1.6129%)&lt;BR/&gt; 1215: (1.6129%)&gt;];
}
3528--4604[label="1;31pkt 31fpkt"];
3528--5228[label="1;31pkt 31fpkt"];
4604--5228[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="215.19.226.131" dst_port="80" src_ip="128.165.180.135"/>
      <filter dst_ip="201.135.171.10" dst_port="80" src_ip="128.165.180.135"/>
    </slice>
    <from sec="1128920442" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
3537[label="128.165.113.137;57pkt 57fpkt", shape=pentagon, color=darkviolet];
4608[label="128.165.113.137;57pkt 57fpkt", shape=invtriangle, color=brown];
5230[label="128.165.113.137;57pkt 57fpkt", shape=invhouse, color=bisque];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.113.137:*, 210.72.233.4:80}[54.386%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1228%)&lt;BR/&gt; 3169: (0.877193%)&lt;BR/&gt; 3168: (0.877193%)&lt;BR/&gt; 3167: (0.877193%)&lt;BR/&gt; 3165: (0.877193%)&gt;];
}
3537--4608[label="1;57pkt 57fpkt"];
3537--5230[label="1;57pkt 57fpkt"];
4608--5230[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="210.72.233.4" dst_port="80" src_ip="128.165.113.137"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.37.96.138"/>
    </slice>
    <from sec="1128920697" usec="0"/>
    <to sec="1128920771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
3569[label="128.165.116.141;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4623[label="128.165.116.141;51pkt 51fpkt", shape=invtriangle, color=brown];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.116.141:10938, *:*}[68.6275%]&lt;BR/&gt;{128.165.116.141:*, *:1863}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10938: (34.3137%)&lt;BR/&gt; 1863: (10.7843%)&lt;BR/&gt; 14242: (1.96078%)&lt;BR/&gt; 3985: (1.96078%)&lt;BR/&gt; 63382: (0.980392%)&gt;];
}
3569--4623[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.116.141" src_port="10938"/>
      <filter dst_port="1863" src_ip="128.165.116.141"/>
    </slice>
    <from sec="1128920435" usec="0"/>
    <to sec="1128921284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.147.249.141"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.183.195.143"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.99.5.144"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
407[label="132.176.35.22;d;726pkt 726fpkt", shape=diamond, color=yellow];
419[label="206.125.192.175;d;3777pkt 3777fpkt", shape=diamond, color=yellow];
442[label="128.165.101.212;d;1152pkt 1152fpkt", shape=diamond, color=yellow];
513[label="146.250.160.206;d;3042pkt 3042fpkt", shape=diamond, color=yellow];
566[label="146.250.248.24;d;1009pkt 1009fpkt", shape=diamond, color=yellow];
762[label="128.165.198.28;d;755pkt 755fpkt", shape=diamond, color=yellow];
1067[label="220.168.37.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
1815[label="207.159.90.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
2348[label="146.250.248.24;d;730pkt 730fpkt", shape=hexagon, color=black];
2443[label="207.159.90.99;s;1pkt 1fpkt", shape=hexagon, color=black];
2534[label="220.168.37.83;s;2pkt 2fpkt", shape=hexagon, color=black];
2719[label="206.181.85.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2820[label="219.96.212.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3164[label="207.221.85.77;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3218[label="220.168.37.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3305[label="40.97.75.98;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3313[label="219.133.103.99;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3407[label="207.20.71.113;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3564[label="214.27.200.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3585[label="207.159.147.144;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3586[label="206.182.168.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3596[label="207.213.35.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3748[label="221.217.112.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3859[label="222.37.32.200;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3909[label="218.44.34.209;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3947[label="40.176.91.218;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4058[label="45.184.128.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4424[label="220.168.37.83;1pkt 1fpkt", shape=invtriangle, color=brown];
4480[label="219.133.103.99;14pkt 14fpkt", shape=invtriangle, color=brown];
4532[label="207.20.71.113;8pkt 8fpkt", shape=invtriangle, color=brown];
4635[label="207.159.147.144;13pkt 13fpkt", shape=invtriangle, color=brown];
4636[label="206.182.168.144;2pkt 2fpkt", shape=invtriangle, color=brown];
4786[label="222.37.32.200;10pkt 10fpkt", shape=invtriangle, color=brown];
4811[label="218.44.34.209;50pkt 50fpkt", shape=invtriangle, color=brown];
5148[label="219.133.103.99;14pkt 14fpkt", shape=invhouse, color=bisque];
5246[label="207.159.147.144;13pkt 13fpkt", shape=invhouse, color=bisque];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 206.125.192.175:46174}[35.3638%]&lt;BR/&gt;{*:*, 146.250.160.206:1088}[28.8906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46174: (16.655%)&lt;BR/&gt; 1088: (13.4216%)&lt;BR/&gt; 3860: (7.59108%)&lt;BR/&gt; 1698: (5.06798%)&lt;BR/&gt; 2309: (3.39463%)&gt;];
}
407--2625[label="0.00137741;1pkt 1fpkt"];
407--2629[label="0.00137741;1pkt 1fpkt"];
407--2820[label="1;4pkt 4fpkt"];
407--3586[label="0.5;1pkt 1fpkt"];
407--3947[label="0.176471;3pkt 3fpkt"];
407--4636[label="0.5;1pkt 1fpkt"];
419--512[label="0.25;1pkt 1fpkt"];
419--1067[label="0.5;1pkt 1fpkt"];
419--1815[label="1;1pkt 1fpkt"];
419--2199[label="0.25;1pkt 1fpkt"];
419--2443[label="1;1pkt 1fpkt"];
419--2534[label="0.5;1pkt 1fpkt"];
419--2625[label="0.000794281;3pkt 3fpkt"];
419--2629[label="0.000529521;2pkt 2fpkt"];
419--2719[label="1;1pkt 1fpkt"];
419--3164[label="1;8pkt 8fpkt"];
419--3218[label="1;1pkt 1fpkt"];
419--3407[label="0.875;7pkt 7fpkt"];
419--3596[label="0.5;1pkt 1fpkt"];
419--3637[label="0.03125;1pkt 1fpkt"];
419--3643[label="1;1pkt 1fpkt"];
419--3909[label="0.88;44pkt 44fpkt"];
419--4424[label="1;1pkt 1fpkt"];
419--4532[label="0.875;7pkt 7fpkt"];
419--4665[label="0.03125;1pkt 1fpkt"];
419--4667[label="1;1pkt 1fpkt"];
419--4811[label="0.88;44pkt 44fpkt"];
419--5263[label="0.03125;1pkt 1fpkt"];
419--5264[label="1;1pkt 1fpkt"];
442--2625[label="0.000868056;1pkt 1fpkt"];
442--2629[label="0.000868056;1pkt 1fpkt"];
442--3110[label="0.00395257;1pkt 1fpkt"];
442--3859[label="1;10pkt 10fpkt"];
442--3947[label="0.823529;14pkt 14fpkt"];
442--4358[label="0.00395257;1pkt 1fpkt"];
442--4786[label="1;10pkt 10fpkt"];
513--893[label="0.000654022;1pkt 1fpkt"];
513--1405[label="0.000328731;1pkt 1fpkt"];
513--2323[label="0.000328731;1pkt 1fpkt"];
513--2604[label="0.000328731;1pkt 1fpkt"];
513--2619[label="0.000328731;1pkt 1fpkt"];
513--2637[label="0.000328731;1pkt 1fpkt"];
513--2653[label="0.000328731;1pkt 1fpkt"];
513--3305[label="0.882353;15pkt 15fpkt"];
513--3313[label="0.571429;8pkt 8fpkt"];
513--3585[label="0.153846;2pkt 2fpkt"];
513--3586[label="0.5;1pkt 1fpkt"];
513--3608[label="0.000328731;1pkt 1fpkt"];
513--3748[label="1;1pkt 1fpkt"];
513--4480[label="0.571429;8pkt 8fpkt"];
513--4635[label="0.153846;2pkt 2fpkt"];
513--4636[label="0.5;1pkt 1fpkt"];
513--4652[label="0.000328731;1pkt 1fpkt"];
513--5148[label="0.571429;8pkt 8fpkt"];
513--5246[label="0.153846;2pkt 2fpkt"];
513--5254[label="0.000328731;1pkt 1fpkt"];
566--2348[label="1;730pkt 730fpkt"];
566--3313[label="0.428571;6pkt 6fpkt"];
566--3564[label="1;1pkt 1fpkt"];
566--3596[label="0.5;1pkt 1fpkt"];
566--4480[label="0.428571;6pkt 6fpkt"];
566--5148[label="0.428571;6pkt 6fpkt"];
762--3585[label="0.692308;9pkt 9fpkt"];
762--4058[label="0.666667;2pkt 2fpkt"];
762--4635[label="0.692308;9pkt 9fpkt"];
762--5246[label="0.692308;9pkt 9fpkt"];
1067--2534[label="1;2pkt 2fpkt"];
1067--2625[label="0.5;1pkt 1fpkt"];
1067--2629[label="0.5;1pkt 1fpkt"];
1067--3218[label="1;1pkt 1fpkt"];
1067--4424[label="1;1pkt 1fpkt"];
1815--2443[label="1;1pkt 1fpkt"];
2348--3313[label="0.428571;6pkt 6fpkt"];
2348--3564[label="1;1pkt 1fpkt"];
2348--3596[label="0.5;1pkt 1fpkt"];
2348--4480[label="0.428571;6pkt 6fpkt"];
2348--5148[label="0.428571;6pkt 6fpkt"];
2534--2625[label="0.5;1pkt 1fpkt"];
2534--2629[label="0.5;1pkt 1fpkt"];
2534--3218[label="1;1pkt 1fpkt"];
2534--4424[label="1;1pkt 1fpkt"];
3218--4424[label="1;1pkt 1fpkt"];
3313--4480[label="1;14pkt 14fpkt"];
3313--5148[label="1;14pkt 14fpkt"];
3407--4532[label="1;8pkt 8fpkt"];
3585--4635[label="1;13pkt 13fpkt"];
3585--5246[label="1;13pkt 13fpkt"];
3586--4636[label="1;2pkt 2fpkt"];
3859--4786[label="1;10pkt 10fpkt"];
3909--4811[label="1;50pkt 50fpkt"];
4480--5148[label="1;14pkt 14fpkt"];
4635--5246[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.192.175" dst_port="46174"/>
      <filter dst_ip="146.250.160.206" dst_port="1088"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
433[label="206.125.218.34;d;93pkt 93fpkt", shape=diamond, color=yellow];
1045[label="206.237.45.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
1520[label="161.253.173.192;d;36pkt 36fpkt", shape=diamond, color=yellow];
2486[label="161.253.173.192;d;36pkt 36fpkt", shape=hexagon, color=black];
3589[label="80.241.218.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3671[label="82.216.4.162;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4639[label="80.241.218.144;2pkt 2fpkt", shape=invtriangle, color=brown];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 206.125.218.34:2909}[44.0299%]&lt;BR/&gt;{*:80, 161.253.173.192:*}[26.8657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.2222%)&lt;BR/&gt; 53: (20.5556%)&lt;BR/&gt; 2909: (16.9444%)&lt;BR/&gt; 0: (2.77778%)&lt;BR/&gt; 3251: (0.833333%)&gt;];
}
433--1045[label="1;1pkt 1fpkt"];
433--2612[label="0.0322581;3pkt 3fpkt"];
433--2627[label="0.129032;12pkt 12fpkt"];
433--2643[label="0.129032;12pkt 12fpkt"];
433--2658[label="0.129032;12pkt 12fpkt"];
433--3567[label="0.0107527;1pkt 1fpkt"];
433--3589[label="1;2pkt 2fpkt"];
433--3671[label="0.4;4pkt 4fpkt"];
433--3844[label="0.0526316;1pkt 1fpkt"];
433--4622[label="0.0107527;1pkt 1fpkt"];
433--4639[label="1;2pkt 2fpkt"];
433--4777[label="0.0526316;1pkt 1fpkt"];
1520--2486[label="1;36pkt 36fpkt"];
1520--3671[label="0.1;1pkt 1fpkt"];
2486--3671[label="0.1;1pkt 1fpkt"];
3589--4639[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.173.192" src_port="80"/>
      <filter dst_ip="206.125.218.34" dst_port="2909" src_port="53"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
1941[label="161.253.117.169;d;52pkt 52fpkt", shape=diamond, color=yellow];
2079[label="219.79.157.136;s;4pkt 4fpkt", shape=diamond, color=yellow];
3591[label="40.104.32.145;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4641[label="40.104.32.145;16pkt 16fpkt", shape=invtriangle, color=brown];
5248[label="40.104.32.145;16pkt 16fpkt", shape=invhouse, color=bisque];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.38.40.225:80, 161.253.117.169:*}[32.6923%]&lt;BR/&gt;{40.104.32.145:80, 161.253.117.169:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1333: (1.92308%)&lt;BR/&gt; 1332: (1.92308%)&lt;BR/&gt; 1331: (1.92308%)&lt;BR/&gt; 1330: (1.92308%)&gt;];
}
1941--2079[label="1;4pkt 4fpkt"];
1941--3591[label="1;16pkt 16fpkt"];
1941--4641[label="1;16pkt 16fpkt"];
1941--5248[label="1;16pkt 16fpkt"];
3591--4641[label="1;16pkt 16fpkt"];
3591--5248[label="1;16pkt 16fpkt"];
4641--5248[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.117.169" src_ip="41.38.40.225" src_port="80"/>
      <filter dst_ip="161.253.117.169" src_ip="40.104.32.145" src_port="80"/>
    </slice>
    <from sec="1128920832" usec="0"/>
    <to sec="1128921205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="132.176.50.145"/>
    </slice>
    <from sec="1128920682" usec="0"/>
    <to sec="1128920769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.228.15.146"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.13.130.154"/>
    </slice>
    <from sec="1128920434" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
3630[label="132.176.78.155;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4662[label="132.176.78.155;9pkt 9fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.78.155:*, 201.135.196.81:80}[55.5556%]&lt;BR/&gt;{132.176.78.155:*, 80.212.68.18:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1193: (5.55556%)&lt;BR/&gt; 1192: (5.55556%)&lt;BR/&gt; 1191: (5.55556%)&lt;BR/&gt; 1190: (5.55556%)&gt;];
}
3630--4662[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="201.135.196.81" dst_port="80" src_ip="132.176.78.155"/>
      <filter dst_ip="80.212.68.18" dst_port="80" src_ip="132.176.78.155"/>
    </slice>
    <from sec="1128920512" usec="0"/>
    <to sec="1128920681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3633[label="166.18.155.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4663[label="166.18.155.155;1pkt 1fpkt", shape=invtriangle, color=brown];
5261[label="166.18.155.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.155.155:1728, 192.157.239.193:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1728: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
3633--4663[label="1;1pkt 1fpkt"];
3633--5261[label="1;1pkt 1fpkt"];
4663--5261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.157.239.193" dst_port="110" src_ip="166.18.155.155" src_port="1728"/>
    </slice>
    <from sec="1128920609" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.194.140.157"/>
    </slice>
    <from sec="1128920998" usec="0"/>
    <to sec="1128921025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
280[label="132.176.148.45;d;230pkt 230fpkt", shape=diamond, color=yellow];
295[label="45.17.185.212;s;4pkt 4fpkt", shape=diamond, color=yellow];
342[label="219.59.143.191;s;14pkt 14fpkt", shape=diamond, color=yellow];
523[label="44.230.245.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
538[label="215.123.136.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
812[label="219.37.136.137;s;137pkt 137fpkt", shape=diamond, color=yellow];
1031[label="40.49.68.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
2457[label="44.230.245.230;s;1pkt 1fpkt", shape=hexagon, color=black];
3168[label="215.123.136.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3647[label="205.106.238.157;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3720[label="206.85.145.171;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3923[label="220.217.219.211;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3928[label="45.17.185.212;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4105[label="40.48.213.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4670[label="205.106.238.157;7pkt 7fpkt", shape=invtriangle, color=brown];
4708[label="206.85.145.171;8pkt 8fpkt", shape=invtriangle, color=brown];
4822[label="45.17.185.212;7pkt 7fpkt", shape=invtriangle, color=brown];
4923[label="40.48.213.253;1pkt 1fpkt", shape=invtriangle, color=brown];
5266[label="205.106.238.157;7pkt 7fpkt", shape=invhouse, color=bisque];
5362[label="45.17.185.212;7pkt 7fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.37.136.137:19101, 132.176.148.45:*}[58.547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (35.5088%)&lt;BR/&gt; 80: (5.0885%)&lt;BR/&gt; 18239: (3.09735%)&lt;BR/&gt; 18217: (3.09735%)&lt;BR/&gt; 18075: (0.884956%)&gt;];
}
280--295[label="0.5;2pkt 2fpkt"];
280--342[label="1;14pkt 14fpkt"];
280--523[label="1;1pkt 1fpkt"];
280--538[label="1;1pkt 1fpkt"];
280--812[label="0.992701;136pkt 136fpkt"];
280--1031[label="1;1pkt 1fpkt"];
280--2457[label="1;1pkt 1fpkt"];
280--3168[label="1;1pkt 1fpkt"];
280--3547[label="0.00434783;1pkt 1fpkt"];
280--3637[label="0.03125;1pkt 1fpkt"];
280--3647[label="1;7pkt 7fpkt"];
280--3720[label="1;8pkt 8fpkt"];
280--3923[label="0.5;1pkt 1fpkt"];
280--3928[label="0.714286;5pkt 5fpkt"];
280--4105[label="1;1pkt 1fpkt"];
280--4665[label="0.03125;1pkt 1fpkt"];
280--4670[label="1;7pkt 7fpkt"];
280--4708[label="1;8pkt 8fpkt"];
280--4822[label="0.714286;5pkt 5fpkt"];
280--4923[label="1;1pkt 1fpkt"];
280--5240[label="0.00434783;1pkt 1fpkt"];
280--5263[label="0.03125;1pkt 1fpkt"];
280--5266[label="1;7pkt 7fpkt"];
280--5362[label="0.714286;5pkt 5fpkt"];
295--3928[label="1;4pkt 4fpkt"];
295--4822[label="1;4pkt 4fpkt"];
295--5362[label="1;4pkt 4fpkt"];
523--2457[label="1;1pkt 1fpkt"];
538--3168[label="1;1pkt 1fpkt"];
3647--4670[label="1;7pkt 7fpkt"];
3647--5266[label="1;7pkt 7fpkt"];
3720--4708[label="1;8pkt 8fpkt"];
3928--4822[label="1;7pkt 7fpkt"];
3928--5362[label="1;7pkt 7fpkt"];
4105--4923[label="1;1pkt 1fpkt"];
4670--5266[label="1;7pkt 7fpkt"];
4822--5362[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.148.45" src_ip="219.37.136.137" src_port="19101"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3650[label="206.125.220.158;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4672[label="206.125.220.158;101pkt 101fpkt", shape=invtriangle, color=brown];
5267[label="206.125.220.158;101pkt 101fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.220.158:51301, *:53}[91.0891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.5248%)&lt;BR/&gt; 51301: (45.5446%)&lt;BR/&gt; 0: (3.9604%)&lt;BR/&gt; 123: (1.9802%)&lt;BR/&gt; 3893: (0.49505%)&gt;];
}
3650--4672[label="1;101pkt 101fpkt"];
3650--5267[label="1;101pkt 101fpkt"];
4672--5267[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="206.125.220.158" src_port="51301"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
369[label="128.165.196.195;s;240pkt 240fpkt", shape=diamond, color=yellow];
734[label="217.124.122.214;d;52pkt 52fpkt", shape=diamond, color=yellow];
1974[label="80.32.82.29;d;5pkt 5fpkt", shape=diamond, color=yellow];
3659[label="128.165.72.160;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4675[label="128.165.72.160;46pkt 46fpkt", shape=invtriangle, color=brown];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.196.195:*, *:80}[68.5315%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.8303%)&lt;BR/&gt; 1863: (4.24165%)&lt;BR/&gt; 57169: (0.771208%)&lt;BR/&gt; 53: (0.514139%)&lt;BR/&gt; 48934: (0.385604%)&gt;];
}
369--734[label="1;52pkt 52fpkt"];
369--1457[label="0.0263158;2pkt 2fpkt"];
369--1974[label="0.8;4pkt 4fpkt"];
369--2625[label="0.0666667;16pkt 16fpkt"];
1974--3659[label="0.2;1pkt 1fpkt"];
1974--4675[label="0.2;1pkt 1fpkt"];
3659--4675[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.165.196.195"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
3665[label="207.107.48.161;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4678[label="207.107.48.161;60pkt 60fpkt", shape=invtriangle, color=brown];
5270[label="207.107.48.161;60pkt 60fpkt", shape=invhouse, color=bisque];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.48.161:*, 27.67.177.45:2010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2010: (50%)&lt;BR/&gt; 4588: (0.833333%)&lt;BR/&gt; 4587: (0.833333%)&lt;BR/&gt; 4586: (0.833333%)&lt;BR/&gt; 4585: (0.833333%)&gt;];
}
3665--4678[label="1;60pkt 60fpkt"];
3665--5270[label="1;60pkt 60fpkt"];
4678--5270[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="27.67.177.45" dst_port="2010" src_ip="207.107.48.161"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
1228[label="146.250.45.35;d;141pkt 141fpkt", shape=diamond, color=yellow];
1791[label="218.62.88.161;s;13pkt 13fpkt", shape=diamond, color=yellow];
3112[label="40.116.193.68;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3668[label="218.62.88.161;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3735[label="207.213.196.173;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3743[label="207.213.196.174;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3793[label="41.37.166.187;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3966[label="219.18.160.221;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4360[label="40.116.193.68;13pkt 13fpkt", shape=invtriangle, color=brown];
4680[label="218.62.88.161;22pkt 22fpkt", shape=invtriangle, color=brown];
4719[label="207.213.196.173;7pkt 7fpkt", shape=invtriangle, color=brown];
4746[label="41.37.166.187;3pkt 3fpkt", shape=invtriangle, color=brown];
5075[label="40.116.193.68;13pkt 13fpkt", shape=invhouse, color=bisque];
5271[label="218.62.88.161;22pkt 22fpkt", shape=invhouse, color=bisque];
5314[label="41.37.166.187;3pkt 3fpkt", shape=invhouse, color=bisque];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 146.250.45.35:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1648: (0.833333%)&lt;BR/&gt; 1647: (0.833333%)&lt;BR/&gt; 1643: (0.833333%)&lt;BR/&gt; 1642: (0.833333%)&gt;];
}
1228--1791[label="1;13pkt 13fpkt"];
1228--3112[label="1;13pkt 13fpkt"];
1228--3668[label="0.909091;20pkt 20fpkt"];
1228--3735[label="0.857143;6pkt 6fpkt"];
1228--3743[label="0.846154;11pkt 11fpkt"];
1228--3793[label="0.666667;2pkt 2fpkt"];
1228--3966[label="1;5pkt 5fpkt"];
1228--4360[label="1;13pkt 13fpkt"];
1228--4680[label="0.909091;20pkt 20fpkt"];
1228--4719[label="0.857143;6pkt 6fpkt"];
1228--4746[label="0.666667;2pkt 2fpkt"];
1228--5075[label="1;13pkt 13fpkt"];
1228--5271[label="0.909091;20pkt 20fpkt"];
1228--5314[label="0.666667;2pkt 2fpkt"];
1791--3668[label="1;13pkt 13fpkt"];
1791--4680[label="1;13pkt 13fpkt"];
1791--5271[label="1;13pkt 13fpkt"];
3112--4360[label="1;13pkt 13fpkt"];
3112--5075[label="1;13pkt 13fpkt"];
3668--4680[label="1;22pkt 22fpkt"];
3668--5271[label="1;22pkt 22fpkt"];
3735--4719[label="1;7pkt 7fpkt"];
3793--4746[label="1;3pkt 3fpkt"];
3793--5314[label="1;3pkt 3fpkt"];
4360--5075[label="1;13pkt 13fpkt"];
4680--5271[label="1;22pkt 22fpkt"];
4746--5314[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.45.35" src_port="80"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
3674[label="218.46.216.162;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4683[label="218.46.216.162;23pkt 23fpkt", shape=invtriangle, color=brown];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.46.216.162:80, 146.250.46.36:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3454: (2.17391%)&lt;BR/&gt; 3453: (2.17391%)&lt;BR/&gt; 3452: (2.17391%)&lt;BR/&gt; 3451: (2.17391%)&gt;];
}
3674--4683[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.46.36" src_ip="218.46.216.162" src_port="80"/>
    </slice>
    <from sec="1128921216" usec="0"/>
    <to sec="1128921234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
3683[label="132.176.164.164;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4689[label="132.176.164.164;8pkt 8fpkt", shape=invtriangle, color=brown];
5277[label="132.176.164.164;8pkt 8fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.164.164:0, *:0}[50%]&lt;BR/&gt;{132.176.164.164:*, *:1863}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1863: (18.75%)&lt;BR/&gt; 26860: (6.25%)&lt;BR/&gt; 26598: (6.25%)&lt;BR/&gt; 26429: (6.25%)&gt;];
}
3683--4689[label="1;8pkt 8fpkt"];
3683--5277[label="1;8pkt 8fpkt"];
4689--5277[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="132.176.164.164"/>
      <filter src_ip="132.176.164.164"/>
    </slice>
    <from sec="1128920418" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
1131[label="162.255.128.240;d;184pkt 184fpkt", shape=diamond, color=yellow];
3687[label="202.206.128.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4692[label="202.206.128.165;2pkt 2fpkt", shape=invtriangle, color=brown];
5279[label="202.206.128.165;11pkt 11fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 162.255.128.240:0}[94.8454%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1131--5279[label="0.0909091;1pkt 1fpkt"];
3687--4692[label="1;2pkt 2fpkt"];
3687--5279[label="1;2pkt 2fpkt"];
4692--5279[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.255.128.240"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.36.82.166"/>
    </slice>
    <from sec="1128921083" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.236.51.168"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
3713[label="67.112.0.170;202pkt 202fpkt", shape=pentagon, color=darkviolet];
4705[label="67.112.0.170;202pkt 202fpkt", shape=invtriangle, color=brown];
5290[label="67.112.0.170;202pkt 202fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.112.0.170:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 7973: (0.247525%)&lt;BR/&gt; 4664: (0.247525%)&lt;BR/&gt; 4663: (0.247525%)&lt;BR/&gt; 4662: (0.247525%)&gt;];
}
3713--4705[label="1;202pkt 202fpkt"];
3713--5290[label="1;202pkt 202fpkt"];
4705--5290[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="67.112.0.170"/>
    </slice>
    <from sec="1128920809" usec="0"/>
    <to sec="1128920857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.38.164.172"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0826,1.84,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
30[label="214.138.218.172s;7pkt 7fpkt", shape=rectangle, color=red];
3728[label="214.138.218.172;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4712[label="214.138.218.172;8pkt 8fpkt", shape=invtriangle, color=brown];
5292[label="214.138.218.172;8pkt 8fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.138.218.172:80, 146.250.167.181:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2943: (6.45161%)&lt;BR/&gt; 2941: (6.45161%)&lt;BR/&gt; 2940: (6.45161%)&lt;BR/&gt; 2939: (6.45161%)&gt;];
}
30--3728[label="0.857143;6pkt 6fpkt"];
30--4712[label="0.857143;6pkt 6fpkt"];
30--5292[label="0.857143;6pkt 6fpkt"];
3728--4712[label="1;8pkt 8fpkt"];
3728--5292[label="1;8pkt 8fpkt"];
4712--5292[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.167.181" src_ip="214.138.218.172" src_port="80"/>
    </slice>
    <from sec="1128921250" usec="0"/>
    <to sec="1128921270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3741[label="166.18.128.174;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4722[label="166.18.128.174;50pkt 50fpkt", shape=invtriangle, color=brown];
5298[label="166.18.128.174;50pkt 50fpkt", shape=invhouse, color=bisque];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.128.174:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3741--4722[label="1;50pkt 50fpkt"];
3741--5298[label="1;50pkt 50fpkt"];
4722--5298[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="166.18.128.174"/>
    </slice>
    <from sec="1128920428" usec="0"/>
    <to sec="1128921291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.46.192.175"/>
    </slice>
    <from sec="1128920800" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
3746[label="128.3.31.176;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4725[label="128.3.31.176;56pkt 56fpkt", shape=invtriangle, color=brown];
5301[label="128.3.31.176;56pkt 56fpkt", shape=invhouse, color=bisque];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.3.31.176:80, *:*}[41.0714%]&lt;BR/&gt;{128.3.31.176:1024, *:53}[32.1429%]&lt;BR/&gt;{128.3.31.176:53, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30.3571%)&lt;BR/&gt; 80: (20.5357%)&lt;BR/&gt; 1024: (16.0714%)&lt;BR/&gt; 64229: (0.892857%)&lt;BR/&gt; 64005: (0.892857%)&gt;];
}
3746--4725[label="1;56pkt 56fpkt"];
3746--5301[label="1;56pkt 56fpkt"];
4725--5301[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="128.3.31.176" src_port="80"/>
      <filter src_ip="128.3.31.176" src_port="53"/>
      <filter dst_port="53" src_ip="128.3.31.176" src_port="1024"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
3759[label="128.165.92.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4730[label="128.165.92.179;1pkt 1fpkt", shape=invtriangle, color=brown];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.92.179:25, 197.197.188.23:28725}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28725: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3759--4730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.197.188.23" dst_port="28725" src_ip="128.165.92.179" src_port="25"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
3765[label="166.18.140.180;172pkt 172fpkt", shape=pentagon, color=darkviolet];
4733[label="166.18.140.180;172pkt 172fpkt", shape=invtriangle, color=brown];
5305[label="166.18.140.180;171pkt 171fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.140.180:53, *:*}[95.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.9417%)&lt;BR/&gt; 49972: (1.45631%)&lt;BR/&gt; 32769: (1.45631%)&lt;BR/&gt; 32768: (0.873786%)&lt;BR/&gt; 32770: (0.582524%)&gt;];
}
3765--4733[label="1;172pkt 172fpkt"];
3765--5305[label="1;171pkt 171fpkt"];
4733--5305[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter src_ip="166.18.140.180" src_port="53"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
3770[label="207.107.21.181;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4735[label="207.107.21.181;30pkt 30fpkt", shape=invtriangle, color=brown];
5307[label="207.107.21.181;30pkt 30fpkt", shape=invhouse, color=bisque];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.21.181:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3770--4735[label="1;30pkt 30fpkt"];
3770--5307[label="1;30pkt 30fpkt"];
4735--5307[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="207.107.21.181"/>
    </slice>
    <from sec="1128920431" usec="0"/>
    <to sec="1128921291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
269[label="207.99.148.34;s;84pkt 84fpkt", shape=diamond, color=yellow];
668[label="81.16.53.177;d;53pkt 53fpkt", shape=diamond, color=yellow];
669[label="161.253.139.149;s;23pkt 23fpkt", shape=diamond, color=yellow];
719[label="84.198.138.21;d;2pkt 2fpkt", shape=diamond, color=yellow];
980[label="161.253.187.9;s;10pkt 10fpkt", shape=diamond, color=yellow];
2065[label="81.201.172.13;d;50pkt 50fpkt", shape=diamond, color=yellow];
2241[label="161.253.187.9;s;10pkt 10fpkt", shape=hexagon, color=black];
2724[label="161.253.52.8;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2811[label="128.165.0.20;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2857[label="161.253.219.27;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3118[label="161.253.12.70;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3202[label="161.253.18.81;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3609[label="161.253.139.149;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3771[label="161.253.39.181;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3813[label="161.253.245.192;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4150[label="161.253.52.8;15pkt 15fpkt", shape=invtriangle, color=brown];
4221[label="161.253.219.27;5pkt 5fpkt", shape=invtriangle, color=brown];
4653[label="161.253.139.149;27pkt 27fpkt", shape=invtriangle, color=brown];
4736[label="161.253.39.181;11pkt 11fpkt", shape=invtriangle, color=brown];
4942[label="161.253.52.8;14pkt 14fpkt", shape=invhouse, color=bisque];
5308[label="161.253.39.181;11pkt 11fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.148.34:80, *:*}[34.1667%]&lt;BR/&gt;{*:80, 81.16.53.177:*}[27.0833%]&lt;BR/&gt;{*:80, 81.201.172.13:*}[25.4167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9888%)&lt;BR/&gt; 53: (0.674157%)&lt;BR/&gt; 63247: (0.449438%)&lt;BR/&gt; 61793: (0.449438%)&lt;BR/&gt; 60615: (0.449438%)&gt;];
}
269--719[label="0.5;1pkt 1fpkt"];
269--2065[label="0.7;35pkt 35fpkt"];
668--669[label="0.826087;19pkt 19fpkt"];
668--980[label="0.8;8pkt 8fpkt"];
668--2241[label="0.8;8pkt 8fpkt"];
668--2253[label="0.0188679;1pkt 1fpkt"];
668--2627[label="0.0188679;1pkt 1fpkt"];
668--2643[label="0.0188679;1pkt 1fpkt"];
668--2658[label="0.0188679;1pkt 1fpkt"];
668--2724[label="0.133333;2pkt 2fpkt"];
668--2857[label="0.25;1pkt 1fpkt"];
668--3075[label="0.0188679;1pkt 1fpkt"];
668--3118[label="0.333333;2pkt 2fpkt"];
668--3202[label="0.111111;1pkt 1fpkt"];
668--3609[label="0.703704;19pkt 19fpkt"];
668--3813[label="0.4;14pkt 14fpkt"];
668--4150[label="0.133333;2pkt 2fpkt"];
668--4221[label="0.2;1pkt 1fpkt"];
668--4653[label="0.703704;19pkt 19fpkt"];
668--4942[label="0.142857;2pkt 2fpkt"];
669--3609[label="1;23pkt 23fpkt"];
669--4653[label="1;23pkt 23fpkt"];
719--2811[label="0.5;1pkt 1fpkt"];
980--2241[label="1;10pkt 10fpkt"];
2065--2724[label="0.0666667;1pkt 1fpkt"];
2065--3771[label="0.454545;5pkt 5fpkt"];
2065--4150[label="0.0666667;1pkt 1fpkt"];
2065--4736[label="0.454545;5pkt 5fpkt"];
2065--4942[label="0.0714286;1pkt 1fpkt"];
2065--5308[label="0.454545;5pkt 5fpkt"];
2724--4150[label="1;15pkt 15fpkt"];
2724--4942[label="1;14pkt 14fpkt"];
2857--4221[label="1;4pkt 4fpkt"];
3609--4653[label="1;27pkt 27fpkt"];
3771--4736[label="1;11pkt 11fpkt"];
3771--5308[label="1;11pkt 11fpkt"];
4150--4942[label="1;14pkt 14fpkt"];
4736--5308[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="207.99.148.34" src_port="80"/>
      <filter dst_ip="81.16.53.177" src_port="80"/>
      <filter dst_ip="81.201.172.13" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
1733[label="207.99.8.112;d;21pkt 21fpkt", shape=diamond, color=yellow];
1813[label="82.110.9.67;s;2pkt 2fpkt", shape=diamond, color=yellow];
3099[label="82.110.9.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4350[label="82.110.9.67;2pkt 2fpkt", shape=invtriangle, color=brown];
5071[label="82.110.9.67;2pkt 2fpkt", shape=invhouse, color=bisque];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.157.240.186:80, 207.99.8.112:*}[23.8095%]&lt;BR/&gt;{201.146.25.205:80, 207.99.8.112:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2186: (8.62069%)&lt;BR/&gt; 2185: (8.62069%)&lt;BR/&gt; 2349: (1.72414%)&lt;BR/&gt; 2243: (1.72414%)&gt;];
}
1733--1813[label="1;2pkt 2fpkt"];
1733--3099[label="1;2pkt 2fpkt"];
1733--3470[label="0.0833333;1pkt 1fpkt"];
1733--3792[label="0.238095;5pkt 5fpkt"];
1733--4350[label="1;2pkt 2fpkt"];
1733--4745[label="0.238095;5pkt 5fpkt"];
1733--5071[label="1;2pkt 2fpkt"];
1733--5313[label="0.238095;5pkt 5fpkt"];
1813--3099[label="1;2pkt 2fpkt"];
1813--4350[label="1;2pkt 2fpkt"];
1813--5071[label="1;2pkt 2fpkt"];
3099--4350[label="1;2pkt 2fpkt"];
3099--5071[label="1;2pkt 2fpkt"];
4350--5071[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="207.99.8.112" src_ip="201.146.25.205" src_port="80"/>
      <filter dst_ip="207.99.8.112" src_ip="216.157.240.186" src_port="80"/>
    </slice>
    <from sec="1128920420" usec="0"/>
    <to sec="1128921219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
3802[label="132.177.24.191;67pkt 67fpkt", shape=pentagon, color=darkviolet];
4750[label="132.177.24.191;67pkt 67fpkt", shape=invtriangle, color=brown];
5317[label="132.177.24.191;67pkt 67fpkt", shape=invhouse, color=bisque];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.24.191:*, 194.17.60.57:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42711: (0.746269%)&lt;BR/&gt; 42710: (0.746269%)&lt;BR/&gt; 42709: (0.746269%)&lt;BR/&gt; 42708: (0.746269%)&gt;];
}
3802--4750[label="1;67pkt 67fpkt"];
3802--5317[label="1;67pkt 67fpkt"];
4750--5317[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="194.17.60.57" dst_port="80" src_ip="132.177.24.191"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.101.75.191"/>
    </slice>
    <from sec="1128920448" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.18.130.192"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3811[label="218.52.156.192;142pkt 142fpkt", shape=pentagon, color=darkviolet];
4756[label="218.52.156.192;142pkt 142fpkt", shape=invtriangle, color=brown];
5319[label="218.52.156.192;142pkt 142fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.52.156.192:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62330: (0.352113%)&lt;BR/&gt; 56408: (0.352113%)&lt;BR/&gt; 55776: (0.352113%)&lt;BR/&gt; 55611: (0.352113%)&gt;];
}
3811--4756[label="1;142pkt 142fpkt"];
3811--5319[label="1;142pkt 142fpkt"];
4756--5319[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter src_ip="218.52.156.192" src_port="80"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
3821[label="80.204.134.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4762[label="80.204.134.194;1pkt 1fpkt", shape=invtriangle, color=brown];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.204.134.194:80, 166.18.128.164:57039}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57039: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3821--4762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.18.128.164" dst_port="57039" src_ip="80.204.134.194" src_port="80"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.90.201.194"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
3823[label="206.125.217.194;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4764[label="206.125.217.194;17pkt 17fpkt", shape=invtriangle, color=brown];
5326[label="206.125.217.194;17pkt 17fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.217.194:*, 82.217.234.69:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4398: (2.94118%)&lt;BR/&gt; 4397: (2.94118%)&lt;BR/&gt; 4396: (2.94118%)&lt;BR/&gt; 4395: (2.94118%)&gt;];
}
3823--4764[label="1;17pkt 17fpkt"];
3823--5326[label="1;17pkt 17fpkt"];
4764--5326[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="82.217.234.69" dst_port="80" src_ip="206.125.217.194"/>
    </slice>
    <from sec="1128920530" usec="0"/>
    <to sec="1128920550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
3827[label="82.216.8.196;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4766[label="82.216.8.196;47pkt 47fpkt", shape=invtriangle, color=brown];
5328[label="82.216.8.196;47pkt 47fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.216.8.196:8200, 161.253.76.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 4068: (1.06383%)&lt;BR/&gt; 4067: (1.06383%)&lt;BR/&gt; 4062: (1.06383%)&lt;BR/&gt; 4061: (1.06383%)&gt;];
}
3827--4766[label="1;47pkt 47fpkt"];
3827--5328[label="1;47pkt 47fpkt"];
4766--5328[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="161.253.76.67" src_ip="82.216.8.196" src_port="8200"/>
    </slice>
    <from sec="1128920413" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
3829[label="132.176.62.196;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4767[label="132.176.62.196;3pkt 3fpkt", shape=invtriangle, color=brown];
5329[label="132.176.62.196;3pkt 3fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.62.196:80, 84.198.136.46:44656}[33.3333%]&lt;BR/&gt;{132.176.62.196:80, 172.2.67.233:35885}[33.3333%]&lt;BR/&gt;{132.176.62.196:80, 172.2.67.233:35889}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44656: (16.6667%)&lt;BR/&gt; 35889: (16.6667%)&lt;BR/&gt; 35885: (16.6667%)&gt;];
}
3829--4767[label="1;3pkt 3fpkt"];
3829--5329[label="1;3pkt 3fpkt"];
4767--5329[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.2.67.233" dst_port="35889" src_ip="132.176.62.196" src_port="80"/>
      <filter dst_ip="172.2.67.233" dst_port="35885" src_ip="132.176.62.196" src_port="80"/>
      <filter dst_ip="84.198.136.46" dst_port="44656" src_ip="132.176.62.196" src_port="80"/>
    </slice>
    <from sec="1128920412" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.130.21.197"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="137.144.153.197"/>
    </slice>
    <from sec="1128921153" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.8.84.198"/>
    </slice>
    <from sec="1128920450" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3843[label="166.18.138.198;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4776[label="166.18.138.198;16pkt 16fpkt", shape=invtriangle, color=brown];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.138.198:*, 200.53.86.49:443}[56.25%]&lt;BR/&gt;{166.18.138.198:*, *:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (34.375%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 4329: (3.125%)&lt;BR/&gt; 4327: (3.125%)&lt;BR/&gt; 4312: (3.125%)&gt;];
}
3843--4776[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="166.18.138.198"/>
      <filter dst_ip="200.53.86.49" dst_port="443" src_ip="166.18.138.198"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
3845[label="200.85.153.198;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4778[label="200.85.153.198;12pkt 12fpkt", shape=invtriangle, color=brown];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.85.153.198:80, 207.99.17.44:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3751: (4.16667%)&lt;BR/&gt; 2939: (4.16667%)&lt;BR/&gt; 2493: (4.16667%)&lt;BR/&gt; 1949: (4.16667%)&gt;];
}
3845--4778[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="207.99.17.44" src_ip="200.85.153.198" src_port="80"/>
    </slice>
    <from sec="1128920571" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
3848[label="221.230.216.198;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4779[label="221.230.216.198;10pkt 10fpkt", shape=invtriangle, color=brown];
5339[label="221.230.216.198;10pkt 10fpkt", shape=invhouse, color=bisque];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.230.216.198:*, 206.125.209.32:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1285: (5%)&lt;BR/&gt; 1284: (5%)&lt;BR/&gt; 1283: (5%)&lt;BR/&gt; 1282: (5%)&gt;];
}
3848--4779[label="1;10pkt 10fpkt"];
3848--5339[label="1;10pkt 10fpkt"];
4779--5339[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="206.125.209.32" dst_port="1755" src_ip="221.230.216.198"/>
    </slice>
    <from sec="1128921221" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_672{
style=filled;
color=gray75;
3860[label="161.253.97.200;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4787[label="161.253.97.200;20pkt 20fpkt", shape=invtriangle, color=brown];
5346[label="161.253.97.200;20pkt 20fpkt", shape=invhouse, color=bisque];
stat672[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.97.200:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60923: (2.5%)&lt;BR/&gt; 59779: (2.5%)&lt;BR/&gt; 57993: (2.5%)&lt;BR/&gt; 57974: (2.5%)&gt;];
}
3860--4787[label="1;20pkt 20fpkt"];
3860--5346[label="1;20pkt 20fpkt"];
4787--5346[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="161.253.97.200" src_port="80"/>
    </slice>
    <from sec="1128920455" usec="0"/>
    <to sec="1128921059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.98652,1.80686,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
720[label="128.165.119.64;s;473pkt 473fpkt", shape=diamond, color=yellow];
972[label="84.198.181.74;d;352pkt 352fpkt", shape=diamond, color=yellow];
2316[label="128.165.119.64;s;263pkt 263fpkt", shape=hexagon, color=black];
3877[label="128.165.92.203;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4797[label="128.165.92.203;44pkt 44fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.119.64:*, 84.198.181.74:80}[89.3617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.915%)&lt;BR/&gt; 50825: (0.127551%)&lt;BR/&gt; 50824: (0.127551%)&lt;BR/&gt; 50823: (0.127551%)&lt;BR/&gt; 50822: (0.127551%)&gt;];
}
720--972[label="0.911932;321pkt 321fpkt"];
720--2316[label="1;263pkt 263fpkt"];
720--2625[label="0.0761099;36pkt 36fpkt"];
972--2316[label="0.422053;111pkt 111fpkt"];
972--2625[label="0.122159;43pkt 43fpkt"];
972--3877[label="0.704545;31pkt 31fpkt"];
972--4797[label="0.704545;31pkt 31fpkt"];
2316--2625[label="0.136882;36pkt 36fpkt"];
3877--4797[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="84.198.181.74" dst_port="80" src_ip="128.165.119.64"/>
    </slice>
    <from sec="1128920424" usec="0"/>
    <to sec="1128921266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.96.49.204"/>
    </slice>
    <from sec="1128920962" usec="0"/>
    <to sec="1128921288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
3920[label="128.165.209.210;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4820[label="128.165.209.210;53pkt 53fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.209.210:13370, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13370: (50%)&lt;BR/&gt; 65229: (0.943396%)&lt;BR/&gt; 65171: (0.943396%)&lt;BR/&gt; 65111: (0.943396%)&lt;BR/&gt; 64992: (0.943396%)&gt;];
}
3920--4820[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="128.165.209.210" src_port="13370"/>
    </slice>
    <from sec="1128920445" usec="0"/>
    <to sec="1128921286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.52.13.214"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
3939[label="201.184.178.215;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4829[label="201.184.178.215;4pkt 4fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.184.178.215:80, 128.34.233.15:1125}[25%]&lt;BR/&gt;{201.184.178.215:80, 128.34.233.15:1249}[25%]&lt;BR/&gt;{201.184.178.215:80, 128.34.233.15:1250}[25%]&lt;BR/&gt;{201.184.178.215:80, 128.34.233.15:1265}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1265: (12.5%)&lt;BR/&gt; 1250: (12.5%)&lt;BR/&gt; 1249: (12.5%)&lt;BR/&gt; 1125: (12.5%)&gt;];
}
3939--4829[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.34.233.15" dst_port="1265" src_ip="201.184.178.215" src_port="80"/>
      <filter dst_ip="128.34.233.15" dst_port="1250" src_ip="201.184.178.215" src_port="80"/>
      <filter dst_ip="128.34.233.15" dst_port="1249" src_ip="201.184.178.215" src_port="80"/>
      <filter dst_ip="128.34.233.15" dst_port="1125" src_ip="201.184.178.215" src_port="80"/>
    </slice>
    <from sec="1128920515" usec="0"/>
    <to sec="1128921169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
3940[label="85.85.159.216;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4830[label="85.85.159.216;19pkt 19fpkt", shape=invtriangle, color=brown];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.85.159.216:80, 146.250.236.20:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1962: (2.63158%)&lt;BR/&gt; 1961: (2.63158%)&lt;BR/&gt; 1960: (2.63158%)&lt;BR/&gt; 1959: (2.63158%)&gt;];
}
3940--4830[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.236.20" src_ip="85.85.159.216" src_port="80"/>
    </slice>
    <from sec="1128920463" usec="0"/>
    <to sec="1128920471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.130.121.217"/>
    </slice>
    <from sec="1128921067" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.18.224.217"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
3945[label="221.217.228.217;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4833[label="221.217.228.217;4pkt 4fpkt", shape=invtriangle, color=brown];
5366[label="221.217.228.217;4pkt 4fpkt", shape=invhouse, color=bisque];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.217.228.217:4799, 161.132.254.148:139}[25%]&lt;BR/&gt;{221.217.228.217:4789, 161.132.254.150:139}[25%]&lt;BR/&gt;{221.217.228.217:4795, 161.132.254.151:139}[25%]&lt;BR/&gt;{221.217.228.217:4786, 161.132.254.153:139}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4799: (12.5%)&lt;BR/&gt; 4795: (12.5%)&lt;BR/&gt; 4789: (12.5%)&lt;BR/&gt; 4786: (12.5%)&gt;];
}
3945--4833[label="1;4pkt 4fpkt"];
3945--5366[label="1;4pkt 4fpkt"];
4833--5366[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="161.132.254.153" dst_port="139" src_ip="221.217.228.217" src_port="4786"/>
      <filter dst_ip="161.132.254.151" dst_port="139" src_ip="221.217.228.217" src_port="4795"/>
      <filter dst_ip="161.132.254.150" dst_port="139" src_ip="221.217.228.217" src_port="4789"/>
      <filter dst_ip="161.132.254.148" dst_port="139" src_ip="221.217.228.217" src_port="4799"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.120.140.218"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
3958[label="216.248.70.220;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4839[label="216.248.70.220;3pkt 3fpkt", shape=invtriangle, color=brown];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.248.70.220:5050, 146.250.45.3:1038}[33.3333%]&lt;BR/&gt;{216.248.70.220:23, 146.250.81.28:2627}[33.3333%]&lt;BR/&gt;{216.248.70.220:5050, 146.250.58.233:3111}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (33.3333%)&lt;BR/&gt; 3111: (16.6667%)&lt;BR/&gt; 2627: (16.6667%)&lt;BR/&gt; 1038: (16.6667%)&lt;BR/&gt; 23: (16.6667%)&gt;];
}
3958--4839[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="146.250.58.233" dst_port="3111" src_ip="216.248.70.220" src_port="5050"/>
      <filter dst_ip="146.250.81.28" dst_port="2627" src_ip="216.248.70.220" src_port="23"/>
      <filter dst_ip="146.250.45.3" dst_port="1038" src_ip="216.248.70.220" src_port="5050"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818498,1.82169,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
471[label="128.165.174.3;d;545pkt 545fpkt", shape=diamond, color=yellow];
2768[label="40.217.201.14;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3000[label="18.227.121.52;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3045[label="40.220.198.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3056[label="206.113.98.60;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3188[label="221.150.166.79;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3660[label="215.116.73.160;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3968[label="220.208.8.222;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4321[label="40.220.198.58;10pkt 10fpkt", shape=invtriangle, color=brown];
4326[label="206.113.98.60;12pkt 12fpkt", shape=invtriangle, color=brown];
4402[label="221.150.166.79;13pkt 13fpkt", shape=invtriangle, color=brown];
4676[label="215.116.73.160;50pkt 50fpkt", shape=invtriangle, color=brown];
4844[label="220.208.8.222;10pkt 10fpkt", shape=invtriangle, color=brown];
5053[label="40.220.198.58;11pkt 11fpkt", shape=invhouse, color=bisque];
5269[label="215.116.73.160;50pkt 50fpkt", shape=invhouse, color=bisque];
5373[label="220.208.8.222;10pkt 10fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.165.174.3:80}[90.8127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1303%)&lt;BR/&gt; 57569: (1.62847%)&lt;BR/&gt; 0: (0.361882%)&lt;BR/&gt; 12679: (0.241255%)&lt;BR/&gt; 12676: (0.241255%)&gt;];
}
471--2625[label="0.124771;68pkt 68fpkt"];
471--2768[label="0.461538;6pkt 6fpkt"];
471--3000[label="0.9;9pkt 9fpkt"];
471--3045[label="0.5;5pkt 5fpkt"];
471--3056[label="1;12pkt 12fpkt"];
471--3188[label="1;13pkt 13fpkt"];
471--3304[label="0.375;3pkt 3fpkt"];
471--3660[label="0.84;42pkt 42fpkt"];
471--3968[label="1;10pkt 10fpkt"];
471--4321[label="0.5;5pkt 5fpkt"];
471--4326[label="1;12pkt 12fpkt"];
471--4402[label="1;13pkt 13fpkt"];
471--4676[label="0.84;42pkt 42fpkt"];
471--4844[label="1;10pkt 10fpkt"];
471--5053[label="0.545455;6pkt 6fpkt"];
471--5269[label="0.84;42pkt 42fpkt"];
471--5373[label="1;10pkt 10fpkt"];
3045--4321[label="1;10pkt 10fpkt"];
3045--5053[label="1;10pkt 10fpkt"];
3056--4326[label="1;12pkt 12fpkt"];
3188--4402[label="1;13pkt 13fpkt"];
3660--4676[label="1;50pkt 50fpkt"];
3660--5269[label="1;50pkt 50fpkt"];
3968--4844[label="1;10pkt 10fpkt"];
3968--5373[label="1;10pkt 10fpkt"];
4321--5053[label="1;10pkt 10fpkt"];
4676--5269[label="1;50pkt 50fpkt"];
4844--5373[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.174.3" dst_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
1688[label="207.107.44.245;s;60pkt 60fpkt", shape=diamond, color=yellow];
1937[label="207.0.17.234;d;5pkt 5fpkt", shape=diamond, color=yellow];
3969[label="161.253.174.222;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4068[label="207.107.44.245;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4845[label="161.253.174.222;29pkt 29fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.44.245:36299, *:53}[33.6957%]&lt;BR/&gt;{207.107.44.245:80, *:*}[32.6087%]&lt;BR/&gt;{161.253.174.222:80, *:*}[31.5217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 36299: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 60651: (0.819672%)&lt;BR/&gt; 57142: (0.819672%)&gt;];
}
1688--1873[label="0.0166667;1pkt 1fpkt"];
1688--1937[label="0.2;1pkt 1fpkt"];
1688--2022[label="0.0166667;1pkt 1fpkt"];
1688--2491[label="0.0166667;1pkt 1fpkt"];
1688--2647[label="0.15;9pkt 9fpkt"];
1688--4068[label="0.983333;59pkt 59fpkt"];
1937--3969[label="0.4;2pkt 2fpkt"];
1937--4068[label="0.2;1pkt 1fpkt"];
1937--4845[label="0.4;2pkt 2fpkt"];
3969--4845[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="207.107.44.245" src_port="80"/>
      <filter src_ip="161.253.174.222" src_port="80"/>
      <filter dst_port="53" src_ip="207.107.44.245" src_port="36299"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="147.2.113.225"/>
    </slice>
    <from sec="1128920789" usec="0"/>
    <to sec="1128921286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
3986[label="132.176.197.225;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4857[label="132.176.197.225;6pkt 6fpkt", shape=invtriangle, color=brown];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.197.225:*, *:80}[50%]&lt;BR/&gt;{132.176.197.225:*, *:1863}[33.3333%]&lt;BR/&gt;{132.176.197.225:1040, *:*}[33.3333%]&lt;BR/&gt;{132.176.197.225:*, 201.135.168.35:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1040: (16.6667%)&lt;BR/&gt; 1075: (8.33333%)&lt;BR/&gt; 1060: (8.33333%)&gt;];
}
3986--4857[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="201.135.168.35" src_ip="132.176.197.225"/>
      <filter src_ip="132.176.197.225" src_port="1040"/>
      <filter dst_port="80" src_ip="132.176.197.225"/>
      <filter dst_port="1863" src_ip="132.176.197.225"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.98.120.227"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
3995[label="206.100.160.227;109pkt 109fpkt", shape=pentagon, color=darkviolet];
4865[label="206.100.160.227;109pkt 109fpkt", shape=invtriangle, color=brown];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.100.160.227:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 1514: (0.917431%)&lt;BR/&gt; 1208: (0.917431%)&lt;BR/&gt; 4972: (0.458716%)&lt;BR/&gt; 4944: (0.458716%)&gt;];
}
3995--4865[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="206.100.160.227"/>
    </slice>
    <from sec="1128920610" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
3996[label="161.253.187.227;102pkt 102fpkt", shape=pentagon, color=darkviolet];
4866[label="161.253.187.227;102pkt 102fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.187.227:47665, *:*}[98.0392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47665: (49.0196%)&lt;BR/&gt; 60687: (0.980392%)&lt;BR/&gt; 40439: (0.980392%)&lt;BR/&gt; 65387: (0.490196%)&lt;BR/&gt; 64662: (0.490196%)&gt;];
}
3996--4866[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="161.253.187.227" src_port="47665"/>
    </slice>
    <from sec="1128920422" usec="0"/>
    <to sec="1128921284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
3997[label="161.253.33.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4867[label="161.253.33.228;4pkt 4fpkt", shape=invtriangle, color=brown];
5389[label="161.253.33.228;4pkt 4fpkt", shape=invhouse, color=bisque];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.33.228:3322, 201.39.96.134:80}[25%]&lt;BR/&gt;{161.253.33.228:3325, 201.39.96.134:80}[25%]&lt;BR/&gt;{161.253.33.228:3542, 82.242.74.235:80}[25%]&lt;BR/&gt;{161.253.33.228:3543, 82.242.74.235:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3543: (12.5%)&lt;BR/&gt; 3542: (12.5%)&lt;BR/&gt; 3325: (12.5%)&lt;BR/&gt; 3322: (12.5%)&gt;];
}
3997--4867[label="1;4pkt 4fpkt"];
3997--5389[label="1;4pkt 4fpkt"];
4867--5389[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="82.242.74.235" dst_port="80" src_ip="161.253.33.228" src_port="3543"/>
      <filter dst_ip="82.242.74.235" dst_port="80" src_ip="161.253.33.228" src_port="3542"/>
      <filter dst_ip="201.39.96.134" dst_port="80" src_ip="161.253.33.228" src_port="3325"/>
      <filter dst_ip="201.39.96.134" dst_port="80" src_ip="161.253.33.228" src_port="3322"/>
    </slice>
    <from sec="1128920449" usec="0"/>
    <to sec="1128921202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.236.38.228"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.127.114.228"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.145.61.231"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.21.252.234"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.204.161.235"/>
    </slice>
    <from sec="1128920429" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
4031[label="207.107.44.237;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4887[label="207.107.44.237;16pkt 16fpkt", shape=invtriangle, color=brown];
5404[label="207.107.44.237;16pkt 16fpkt", shape=invhouse, color=bisque];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.107.44.237:*, 221.37.56.175:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63632: (3.125%)&lt;BR/&gt; 63413: (3.125%)&lt;BR/&gt; 61846: (3.125%)&lt;BR/&gt; 61635: (3.125%)&gt;];
}
4031--4887[label="1;16pkt 16fpkt"];
4031--5404[label="1;16pkt 16fpkt"];
4887--5404[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="221.37.56.175" dst_port="80" src_ip="207.107.44.237"/>
    </slice>
    <from sec="1128920496" usec="0"/>
    <to sec="1128921291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
4043[label="206.36.164.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4891[label="206.36.164.239;2pkt 2fpkt", shape=invtriangle, color=brown];
5407[label="206.36.164.239;1pkt 1fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.36.164.239:0, 132.176.178.140:0}[50%]&lt;BR/&gt;{206.36.164.239:0, 132.176.178.190:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4043--4891[label="1;2pkt 2fpkt"];
4043--5407[label="1;1pkt 1fpkt"];
4891--5407[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.178.190" src_ip="206.36.164.239"/>
      <filter dst_ip="132.176.178.140" src_ip="206.36.164.239"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.205.21.242"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
4057[label="222.202.99.242;342pkt 342fpkt", shape=pentagon, color=darkviolet];
4895[label="222.202.99.242;342pkt 342fpkt", shape=invtriangle, color=brown];
5410[label="222.202.99.242;342pkt 342fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.202.99.242:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 42296: (0.292398%)&lt;BR/&gt; 33799: (0.292398%)&lt;BR/&gt; 65330: (0.146199%)&lt;BR/&gt; 65049: (0.146199%)&gt;];
}
4057--4895[label="1;342pkt 342fpkt"];
4057--5410[label="1;342pkt 342fpkt"];
4895--5410[label="1;342pkt 342fpkt"];
</description>
    <slice>
      <filter src_ip="222.202.99.242" src_port="7000"/>
    </slice>
    <from sec="1128920517" usec="0"/>
    <to sec="1128920764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.81.138.245"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
346[label="132.176.186.39;d;389pkt 389fpkt", shape=diamond, color=yellow];
401[label="214.224.157.243;s;81pkt 81fpkt", shape=diamond, color=yellow];
1003[label="214.224.157.249;s;96pkt 96fpkt", shape=diamond, color=yellow];
2138[label="214.224.157.243;s;81pkt 81fpkt", shape=hexagon, color=black];
3768[label="206.36.171.180;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4051[label="214.224.157.240;82pkt 82fpkt", shape=pentagon, color=darkviolet];
4062[label="214.224.157.243;163pkt 163fpkt", shape=pentagon, color=darkviolet];
4075[label="214.224.157.245;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4898[label="214.224.157.243;163pkt 163fpkt", shape=invtriangle, color=brown];
4902[label="214.224.157.245;14pkt 14fpkt", shape=invtriangle, color=brown];
5411[label="214.224.157.243;163pkt 163fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.224.157.243:80, 132.176.186.39:*}[39.5887%]&lt;BR/&gt;{214.224.157.249:80, 132.176.186.39:*}[26.2211%]&lt;BR/&gt;{214.224.157.240:80, 132.176.186.39:*}[21.0797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2057%)&lt;BR/&gt; 8080: (1.75439%)&lt;BR/&gt; 33766: (0.239234%)&lt;BR/&gt; 33762: (0.239234%)&lt;BR/&gt; 33761: (0.239234%)&gt;];
}
346--401[label="1;81pkt 81fpkt"];
346--1003[label="1;96pkt 96fpkt"];
346--2138[label="1;81pkt 81fpkt"];
346--3637[label="0.03125;1pkt 1fpkt"];
346--3768[label="1;8pkt 8fpkt"];
346--4051[label="1;82pkt 82fpkt"];
346--4062[label="1;163pkt 163fpkt"];
346--4075[label="1;14pkt 14fpkt"];
346--4665[label="0.03125;1pkt 1fpkt"];
346--4898[label="1;163pkt 163fpkt"];
346--4902[label="1;14pkt 14fpkt"];
346--5263[label="0.03125;1pkt 1fpkt"];
346--5411[label="1;163pkt 163fpkt"];
401--2138[label="1;81pkt 81fpkt"];
401--4062[label="0.987654;80pkt 80fpkt"];
401--4898[label="0.987654;80pkt 80fpkt"];
401--5411[label="0.987654;80pkt 80fpkt"];
2138--4062[label="0.987654;80pkt 80fpkt"];
2138--4898[label="0.987654;80pkt 80fpkt"];
2138--5411[label="0.987654;80pkt 80fpkt"];
4062--4898[label="1;163pkt 163fpkt"];
4062--5411[label="1;163pkt 163fpkt"];
4075--4902[label="1;14pkt 14fpkt"];
4898--5411[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter dst_ip="132.176.186.39" src_ip="214.224.157.243" src_port="80"/>
      <filter dst_ip="132.176.186.39" src_ip="214.224.157.249" src_port="80"/>
      <filter dst_ip="132.176.186.39" src_ip="214.224.157.240" src_port="80"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6708,1.84102,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
1030[label="216.248.70.228;d;40pkt 40fpkt", shape=diamond, color=yellow];
2975[label="166.18.132.47;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4290[label="166.18.132.47;9pkt 9fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.248.70.228:5050}[70.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (37.931%)&lt;BR/&gt; 443: (3.44828%)&lt;BR/&gt; 23: (3.44828%)&lt;BR/&gt; 21: (3.44828%)&lt;BR/&gt; 2981: (2.58621%)&gt;];
}
1030--2975[label="0.111111;1pkt 1fpkt"];
1030--2982[label="0.025;1pkt 1fpkt"];
1030--4290[label="0.111111;1pkt 1fpkt"];
2975--4290[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.248.70.228" dst_port="5050"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.253.232.247"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698676,1.86617,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
4091[label="132.177.70.249;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4913[label="132.177.70.249;7pkt 7fpkt", shape=invtriangle, color=brown];
5423[label="132.177.70.249;7pkt 7fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.177.70.249:*, 201.172.83.191:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1691: (7.14286%)&lt;BR/&gt; 1690: (7.14286%)&lt;BR/&gt; 1689: (7.14286%)&lt;BR/&gt; 1688: (7.14286%)&gt;];
}
4091--4913[label="1;7pkt 7fpkt"];
4091--5423[label="1;7pkt 7fpkt"];
4913--5423[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="201.172.83.191" dst_port="80" src_ip="132.177.70.249"/>
    </slice>
    <from sec="1128920520" usec="0"/>
    <to sec="1128920640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.60071,1.94571,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.149.59.250"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517864,1.88504,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
4104[label="40.45.131.253;337pkt 337fpkt", shape=pentagon, color=darkviolet];
4922[label="40.45.131.253;337pkt 337fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.45.131.253:*, *:1029}[45.4006%]&lt;BR/&gt;{40.45.131.253:55376, *:*}[29.0801%]&lt;BR/&gt;{40.45.131.253:55398, *:1028}[22.8487%]&lt;BR/&gt;{40.45.131.253:55230, *:*}[22.8487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (27.2997%)&lt;BR/&gt; 1029: (22.7003%)&lt;BR/&gt; 55398: (20.9199%)&lt;BR/&gt; 55376: (14.5401%)&lt;BR/&gt; 55230: (11.4243%)&gt;];
}
4104--4922[label="1;337pkt 337fpkt"];
</description>
    <slice>
      <filter src_ip="40.45.131.253" src_port="55376"/>
      <filter src_ip="40.45.131.253" src_port="55230"/>
      <filter dst_port="1029" src_ip="40.45.131.253"/>
      <filter dst_port="1028" src_ip="40.45.131.253" src_port="55398"/>
    </slice>
    <from sec="1128921150" usec="0"/>
    <to sec="1128921172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.253.180.0"/>
    </slice>
    <from sec="1128920962" usec="0"/>
    <to sec="1128921001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.73.128.2"/>
    </slice>
    <from sec="1128920463" usec="0"/>
    <to sec="1128921279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.762114,1.92743,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
4132[label="206.45.63.3;118pkt 118fpkt", shape=invtriangle, color=brown];
4932[label="206.45.63.3;119pkt 119fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.45.63.3:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4951: (0.421941%)&lt;BR/&gt; 4919: (0.421941%)&lt;BR/&gt; 4821: (0.421941%)&lt;BR/&gt; 4701: (0.421941%)&gt;];
}
4132--4932[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="206.45.63.3"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.5.129.5"/>
    </slice>
    <from sec="1128920418" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.24.212.9"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.236.156.10"/>
    </slice>
    <from sec="1128921224" usec="0"/>
    <to sec="1128921250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.200.229.15"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.4.40.20"/>
    </slice>
    <from sec="1128921058" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621042,1.8992,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
2972[label="43.85.253.46;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5029[label="43.85.253.46;12pkt 12fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.85.253.46:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4311: (4.16667%)&lt;BR/&gt; 4092: (4.16667%)&lt;BR/&gt; 3890: (4.16667%)&lt;BR/&gt; 1964: (4.16667%)&gt;];
}
2972--5029[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="43.85.253.46" src_port="1863"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621042,1.8992,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
2987[label="132.176.33.50;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5033[label="132.176.33.50;22pkt 22fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.176.33.50:80, 44.93.91.99:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 53: (6.81818%)&lt;BR/&gt; 55969: (2.27273%)&lt;BR/&gt; 46133: (2.27273%)&lt;BR/&gt; 45849: (2.27273%)&gt;];
}
2987--5033[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="44.93.91.99" src_ip="132.176.33.50" src_port="80"/>
    </slice>
    <from sec="1128920401" usec="0"/>
    <to sec="1128921282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.201.192.52"/>
    </slice>
    <from sec="1128920448" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.207.98.58"/>
    </slice>
    <from sec="1128920452" usec="0"/>
    <to sec="1128921294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.246.138.59"/>
    </slice>
    <from sec="1128920512" usec="0"/>
    <to sec="1128921247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.91.169.62"/>
    </slice>
    <from sec="1128920414" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
341[label="166.18.148.35;s;573pkt 573fpkt", shape=diamond, color=yellow];
484[label="140.95.60.217;d;5pkt 5fpkt", shape=diamond, color=yellow];
485[label="166.18.128.168;s;168pkt 168fpkt", shape=diamond, color=yellow];
644[label="166.18.251.133;s;123pkt 123fpkt", shape=diamond, color=yellow];
679[label="82.33.172.118;d;49pkt 49fpkt", shape=diamond, color=yellow];
766[label="82.33.172.121;d;35pkt 35fpkt", shape=diamond, color=yellow];
767[label="166.18.148.46;s;62pkt 62fpkt", shape=diamond, color=yellow];
780[label="166.18.251.45;s;118pkt 118fpkt", shape=diamond, color=yellow];
808[label="82.33.172.101;d;59pkt 59fpkt", shape=diamond, color=yellow];
1082[label="82.33.172.96;d;53pkt 53fpkt", shape=diamond, color=yellow];
1107[label="201.135.66.68;d;107pkt 107fpkt", shape=diamond, color=yellow];
1114[label="140.95.60.2;d;3pkt 3fpkt", shape=diamond, color=yellow];
1122[label="166.18.146.102;s;252pkt 252fpkt", shape=diamond, color=yellow];
1143[label="166.18.208.133;s;195pkt 195fpkt", shape=diamond, color=yellow];
1179[label="81.16.53.66;d;70pkt 70fpkt", shape=diamond, color=yellow];
1271[label="82.33.172.114;d;49pkt 49fpkt", shape=diamond, color=yellow];
1323[label="82.33.172.112;d;35pkt 35fpkt", shape=diamond, color=yellow];
1351[label="166.18.184.174;s;46pkt 46fpkt", shape=diamond, color=yellow];
1423[label="216.248.74.146;d;49pkt 49fpkt", shape=diamond, color=yellow];
1442[label="166.18.189.31;s;28pkt 28fpkt", shape=diamond, color=yellow];
1498[label="166.18.8.95;s;43pkt 43fpkt", shape=diamond, color=yellow];
1514[label="166.18.182.57;s;39pkt 39fpkt", shape=diamond, color=yellow];
1580[label="82.33.172.117;d;35pkt 35fpkt", shape=diamond, color=yellow];
1583[label="82.33.172.123;d;18pkt 18fpkt", shape=diamond, color=yellow];
1641[label="166.18.210.51;s;36pkt 36fpkt", shape=diamond, color=yellow];
1679[label="82.33.172.116;d;37pkt 37fpkt", shape=diamond, color=yellow];
1723[label="166.18.180.58;s;32pkt 32fpkt", shape=diamond, color=yellow];
1866[label="216.248.74.193;d;45pkt 45fpkt", shape=diamond, color=yellow];
1886[label="216.248.74.194;d;30pkt 30fpkt", shape=diamond, color=yellow];
1890[label="166.18.212.73;s;32pkt 32fpkt", shape=diamond, color=yellow];
1895[label="166.18.249.51;s;23pkt 23fpkt", shape=diamond, color=yellow];
1896[label="82.33.172.103;d;30pkt 30fpkt", shape=diamond, color=yellow];
2006[label="166.18.148.37;s;68pkt 68fpkt", shape=diamond, color=yellow];
2031[label="82.33.172.100;d;32pkt 32fpkt", shape=diamond, color=yellow];
2053[label="216.248.74.195;d;28pkt 28fpkt", shape=diamond, color=yellow];
2060[label="82.183.0.224;d;2pkt 2fpkt", shape=diamond, color=yellow];
2067[label="132.177.19.65;s;17pkt 17fpkt", shape=diamond, color=yellow];
2071[label="137.144.153.197;d;13pkt 13fpkt", shape=diamond, color=yellow];
2175[label="166.18.251.133;s;64pkt 64fpkt", shape=hexagon, color=black];
2205[label="82.33.172.101;d;28pkt 28fpkt", shape=hexagon, color=black];
2335[label="166.18.251.45;s;89pkt 89fpkt", shape=hexagon, color=black];
2369[label="166.18.182.57;s;31pkt 31fpkt", shape=hexagon, color=black];
2372[label="82.33.172.118;d;38pkt 38fpkt", shape=hexagon, color=black];
2415[label="82.33.172.116;d;35pkt 35fpkt", shape=hexagon, color=black];
2501[label="82.33.172.103;d;29pkt 29fpkt", shape=hexagon, color=black];
2570[label="82.183.0.224;d;2pkt 2fpkt", shape=hexagon, color=black];
2745[label="166.18.221.10;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2761[label="166.18.176.13;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2817[label="166.18.176.20;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2830[label="166.18.189.21;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2837[label="166.18.189.22;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2877[label="166.18.189.31;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2929[label="166.18.216.39;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2942[label="166.18.248.41;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2964[label="166.18.251.45;128pkt 128fpkt", shape=pentagon, color=darkviolet];
2970[label="166.18.148.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2982[label="166.18.9.49;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2995[label="166.18.210.51;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2997[label="166.18.249.51;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3061[label="166.18.180.61;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3084[label="132.177.19.65;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3139[label="166.18.185.72;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3149[label="166.18.212.73;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3485[label="166.18.242.128;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3490[label="166.18.150.129;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3539[label="166.18.251.137;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3550[label="166.18.145.139;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3565[label="166.18.240.140;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3703[label="166.18.128.168;174pkt 174fpkt", shape=pentagon, color=darkviolet];
3742[label="166.18.184.174;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3864[label="166.18.9.201;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3908[label="166.18.140.208;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3934[label="166.18.244.213;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4082[label="166.18.214.246;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4089[label="166.18.248.248;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4161[label="166.18.221.10;23pkt 23fpkt", shape=invtriangle, color=brown];
4204[label="166.18.189.21;8pkt 8fpkt", shape=invtriangle, color=brown];
4208[label="166.18.189.22;27pkt 27fpkt", shape=invtriangle, color=brown];
4270[label="166.18.248.41;11pkt 11fpkt", shape=invtriangle, color=brown];
4283[label="166.18.251.45;129pkt 129fpkt", shape=invtriangle, color=brown];
4288[label="166.18.148.46;1pkt 1fpkt", shape=invtriangle, color=brown];
4298[label="166.18.210.51;41pkt 41fpkt", shape=invtriangle, color=brown];
4363[label="166.18.185.69;14pkt 14fpkt", shape=invtriangle, color=brown];
4377[label="166.18.185.72;16pkt 16fpkt", shape=invtriangle, color=brown];
4382[label="166.18.212.73;32pkt 32fpkt", shape=invtriangle, color=brown];
4579[label="166.18.242.128;20pkt 20fpkt", shape=invtriangle, color=brown];
4582[label="166.18.150.129;16pkt 16fpkt", shape=invtriangle, color=brown];
4610[label="166.18.251.137;25pkt 25fpkt", shape=invtriangle, color=brown];
4620[label="166.18.240.140;11pkt 11fpkt", shape=invtriangle, color=brown];
4699[label="166.18.128.168;174pkt 174fpkt", shape=invtriangle, color=brown];
4825[label="166.18.244.213;25pkt 25fpkt", shape=invtriangle, color=brown];
4908[label="166.18.214.246;4pkt 4fpkt", shape=invtriangle, color=brown];
4912[label="166.18.248.248;14pkt 14fpkt", shape=invtriangle, color=brown];
5009[label="166.18.148.37;80pkt 80fpkt", shape=invhouse, color=bisque];
5017[label="166.18.248.41;11pkt 11fpkt", shape=invhouse, color=bisque];
5024[label="166.18.251.45;128pkt 128fpkt", shape=invhouse, color=bisque];
5028[label="166.18.148.46;67pkt 67fpkt", shape=invhouse, color=bisque];
5076[label="166.18.185.69;13pkt 13fpkt", shape=invhouse, color=bisque];
5087[label="166.18.212.73;32pkt 32fpkt", shape=invhouse, color=bisque];
5209[label="166.18.242.128;20pkt 20fpkt", shape=invhouse, color=bisque];
5211[label="166.18.150.129;16pkt 16fpkt", shape=invhouse, color=bisque];
5237[label="166.18.240.140;11pkt 11fpkt", shape=invhouse, color=bisque];
5287[label="166.18.128.168;174pkt 174fpkt", shape=invhouse, color=bisque];
5419[label="166.18.214.246;4pkt 4fpkt", shape=invhouse, color=bisque];
5422[label="166.18.248.248;14pkt 14fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.18.148.35:25, *:*}[22.9936%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.906%)&lt;BR/&gt; 80: (5.76808%)&lt;BR/&gt; 53: (3.55649%)&lt;BR/&gt; 49152: (1.87288%)&lt;BR/&gt; 6667: (0.996214%)&gt;];
}
341--679[label="0.22449;11pkt 11fpkt"];
341--766[label="0.342857;12pkt 12fpkt"];
341--808[label="0.305085;18pkt 18fpkt"];
341--1082[label="0.377358;20pkt 20fpkt"];
341--1271[label="0.285714;14pkt 14fpkt"];
341--1323[label="0.542857;19pkt 19fpkt"];
341--1423[label="0.306122;15pkt 15fpkt"];
341--1580[label="0.257143;9pkt 9fpkt"];
341--1583[label="0.333333;6pkt 6fpkt"];
341--1679[label="0.27027;10pkt 10fpkt"];
341--1866[label="0.266667;12pkt 12fpkt"];
341--1886[label="0.3;9pkt 9fpkt"];
341--1896[label="0.333333;10pkt 10fpkt"];
341--2031[label="0.375;12pkt 12fpkt"];
341--2053[label="0.25;7pkt 7fpkt"];
341--2205[label="0.25;7pkt 7fpkt"];
341--2372[label="0.184211;7pkt 7fpkt"];
341--2415[label="0.257143;9pkt 9fpkt"];
341--2501[label="0.310345;9pkt 9fpkt"];
484--485[label="1;5pkt 5fpkt"];
484--3703[label="1;5pkt 5fpkt"];
484--4699[label="1;5pkt 5fpkt"];
484--5287[label="1;5pkt 5fpkt"];
485--679[label="0.122449;6pkt 6fpkt"];
485--766[label="0.0571429;2pkt 2fpkt"];
485--808[label="0.0508475;3pkt 3fpkt"];
485--1082[label="0.0377358;2pkt 2fpkt"];
485--1114[label="1;3pkt 3fpkt"];
485--1123[label="0.105263;2pkt 2fpkt"];
485--1179[label="0.0142857;1pkt 1fpkt"];
485--1271[label="0.0408163;2pkt 2fpkt"];
485--1323[label="0.0285714;1pkt 1fpkt"];
485--1580[label="0.0285714;1pkt 1fpkt"];
485--1583[label="0.0555556;1pkt 1fpkt"];
485--1866[label="0.0444444;2pkt 2fpkt"];
485--1896[label="0.0333333;1pkt 1fpkt"];
485--2071[label="0.0769231;1pkt 1fpkt"];
485--2205[label="0.0714286;2pkt 2fpkt"];
485--2372[label="0.157895;6pkt 6fpkt"];
485--2501[label="0.0344828;1pkt 1fpkt"];
485--3703[label="1;168pkt 168fpkt"];
485--4699[label="1;168pkt 168fpkt"];
485--5287[label="1;168pkt 168fpkt"];
644--679[label="0.0408163;2pkt 2fpkt"];
644--766[label="0.114286;4pkt 4fpkt"];
644--808[label="0.0338983;2pkt 2fpkt"];
644--1082[label="0.0188679;1pkt 1fpkt"];
644--1271[label="0.0612245;3pkt 3fpkt"];
644--1323[label="0.114286;4pkt 4fpkt"];
644--1423[label="0.0816327;4pkt 4fpkt"];
644--1580[label="0.142857;5pkt 5fpkt"];
644--1583[label="0.222222;4pkt 4fpkt"];
644--1679[label="0.0540541;2pkt 2fpkt"];
644--1866[label="0.0888889;4pkt 4fpkt"];
644--1886[label="0.1;3pkt 3fpkt"];
644--1896[label="0.0666667;2pkt 2fpkt"];
644--2053[label="0.25;7pkt 7fpkt"];
644--2175[label="1;64pkt 64fpkt"];
644--2205[label="0.0714286;2pkt 2fpkt"];
644--2372[label="0.0263158;1pkt 1fpkt"];
644--2415[label="0.0571429;2pkt 2fpkt"];
644--2501[label="0.0689655;2pkt 2fpkt"];
679--780[label="0.0612245;3pkt 3fpkt"];
679--1143[label="0.0408163;2pkt 2fpkt"];
679--1498[label="0.0232558;1pkt 1fpkt"];
679--1514[label="0.0512821;2pkt 2fpkt"];
679--1723[label="0.125;4pkt 4fpkt"];
679--1890[label="0.03125;1pkt 1fpkt"];
679--2006[label="0.0204082;1pkt 1fpkt"];
679--2175[label="0.0204082;1pkt 1fpkt"];
679--2335[label="0.0408163;2pkt 2fpkt"];
679--2369[label="0.0645161;2pkt 2fpkt"];
679--2372[label="1;38pkt 38fpkt"];
679--2817[label="0.0714286;1pkt 1fpkt"];
679--2964[label="0.0612245;3pkt 3fpkt"];
679--3139[label="0.125;2pkt 2fpkt"];
679--3149[label="0.03125;1pkt 1fpkt"];
679--3703[label="0.122449;6pkt 6fpkt"];
679--3864[label="0.235294;4pkt 4fpkt"];
679--4283[label="0.0612245;3pkt 3fpkt"];
679--4377[label="0.125;2pkt 2fpkt"];
679--4382[label="0.03125;1pkt 1fpkt"];
679--4699[label="0.122449;6pkt 6fpkt"];
679--5009[label="0.0204082;1pkt 1fpkt"];
679--5024[label="0.0612245;3pkt 3fpkt"];
679--5087[label="0.03125;1pkt 1fpkt"];
679--5287[label="0.122449;6pkt 6fpkt"];
766--767[label="0.0571429;2pkt 2fpkt"];
766--780[label="0.0571429;2pkt 2fpkt"];
766--1351[label="0.0571429;2pkt 2fpkt"];
766--1498[label="0.0571429;2pkt 2fpkt"];
766--1514[label="0.0285714;1pkt 1fpkt"];
766--1723[label="0.0625;2pkt 2fpkt"];
766--1890[label="0.03125;1pkt 1fpkt"];
766--2006[label="0.0285714;1pkt 1fpkt"];
766--2335[label="0.0571429;2pkt 2fpkt"];
766--2369[label="0.0322581;1pkt 1fpkt"];
766--2964[label="0.0571429;2pkt 2fpkt"];
766--2982[label="0.0285714;1pkt 1fpkt"];
766--3149[label="0.03125;1pkt 1fpkt"];
766--3703[label="0.0571429;2pkt 2fpkt"];
766--3742[label="0.0571429;2pkt 2fpkt"];
766--4283[label="0.0571429;2pkt 2fpkt"];
766--4382[label="0.03125;1pkt 1fpkt"];
766--4699[label="0.0571429;2pkt 2fpkt"];
766--5009[label="0.0285714;1pkt 1fpkt"];
766--5024[label="0.0571429;2pkt 2fpkt"];
766--5028[label="0.0571429;2pkt 2fpkt"];
766--5087[label="0.03125;1pkt 1fpkt"];
766--5287[label="0.0571429;2pkt 2fpkt"];
767--808[label="0.0338983;2pkt 2fpkt"];
767--1082[label="0.0188679;1pkt 1fpkt"];
767--1323[label="0.0285714;1pkt 1fpkt"];
767--1423[label="0.0408163;2pkt 2fpkt"];
767--1580[label="0.0285714;1pkt 1fpkt"];
767--1866[label="0.0444444;2pkt 2fpkt"];
767--1886[label="0.0666667;2pkt 2fpkt"];
767--1896[label="0.0666667;2pkt 2fpkt"];
767--2031[label="0.03125;1pkt 1fpkt"];
767--2060[label="1;2pkt 2fpkt"];
767--2205[label="0.0357143;1pkt 1fpkt"];
767--2501[label="0.0689655;2pkt 2fpkt"];
767--2570[label="1;2pkt 2fpkt"];
767--2970[label="1;1pkt 1fpkt"];
767--4288[label="1;1pkt 1fpkt"];
767--5028[label="0.983871;61pkt 61fpkt"];
780--808[label="0.0338983;2pkt 2fpkt"];
780--1082[label="0.0566038;3pkt 3fpkt"];
780--1271[label="0.102041;5pkt 5fpkt"];
780--1323[label="0.0285714;1pkt 1fpkt"];
780--1423[label="0.142857;7pkt 7fpkt"];
780--1580[label="0.142857;5pkt 5fpkt"];
780--1583[label="0.222222;4pkt 4fpkt"];
780--1679[label="0.108108;4pkt 4fpkt"];
780--1886[label="0.1;3pkt 3fpkt"];
780--1896[label="0.233333;7pkt 7fpkt"];
780--2031[label="0.0625;2pkt 2fpkt"];
780--2053[label="0.0357143;1pkt 1fpkt"];
780--2205[label="0.0357143;1pkt 1fpkt"];
780--2335[label="1;89pkt 89fpkt"];
780--2372[label="0.0526316;2pkt 2fpkt"];
780--2415[label="0.114286;4pkt 4fpkt"];
780--2501[label="0.241379;7pkt 7fpkt"];
780--2964[label="0.991525;117pkt 117fpkt"];
780--4283[label="1;118pkt 118fpkt"];
780--5024[label="0.991525;117pkt 117fpkt"];
808--1126[label="0.05;1pkt 1fpkt"];
808--1143[label="0.0169492;1pkt 1fpkt"];
808--1351[label="0.0434783;2pkt 2fpkt"];
808--1498[label="0.0697674;3pkt 3fpkt"];
808--1514[label="0.0512821;2pkt 2fpkt"];
808--1723[label="0.03125;1pkt 1fpkt"];
808--2006[label="0.0169492;1pkt 1fpkt"];
808--2175[label="0.0338983;2pkt 2fpkt"];
808--2205[label="1;28pkt 28fpkt"];
808--2335[label="0.0338983;2pkt 2fpkt"];
808--2369[label="0.0645161;2pkt 2fpkt"];
808--2745[label="0.0434783;1pkt 1fpkt"];
808--2964[label="0.0338983;2pkt 2fpkt"];
808--2982[label="0.0350877;2pkt 2fpkt"];
808--3485[label="0.05;1pkt 1fpkt"];
808--3539[label="0.04;1pkt 1fpkt"];
808--3703[label="0.0508475;3pkt 3fpkt"];
808--3742[label="0.0363636;2pkt 2fpkt"];
808--3934[label="0.04;1pkt 1fpkt"];
808--4067[label="0.0392157;2pkt 2fpkt"];
808--4082[label="0.5;2pkt 2fpkt"];
808--4161[label="0.0434783;1pkt 1fpkt"];
808--4283[label="0.0338983;2pkt 2fpkt"];
808--4579[label="0.05;1pkt 1fpkt"];
808--4610[label="0.04;1pkt 1fpkt"];
808--4699[label="0.0508475;3pkt 3fpkt"];
808--4825[label="0.04;1pkt 1fpkt"];
808--4908[label="0.5;2pkt 2fpkt"];
808--5009[label="0.0169492;1pkt 1fpkt"];
808--5024[label="0.0338983;2pkt 2fpkt"];
808--5028[label="0.0338983;2pkt 2fpkt"];
808--5209[label="0.05;1pkt 1fpkt"];
808--5287[label="0.0508475;3pkt 3fpkt"];
808--5419[label="0.5;2pkt 2fpkt"];
1082--1126[label="0.05;1pkt 1fpkt"];
1082--1143[label="0.0188679;1pkt 1fpkt"];
1082--1442[label="0.0357143;1pkt 1fpkt"];
1082--1498[label="0.0232558;1pkt 1fpkt"];
1082--1514[label="0.025641;1pkt 1fpkt"];
1082--1641[label="0.0277778;1pkt 1fpkt"];
1082--1890[label="0.03125;1pkt 1fpkt"];
1082--2006[label="0.0377358;2pkt 2fpkt"];
1082--2175[label="0.0188679;1pkt 1fpkt"];
1082--2335[label="0.0566038;3pkt 3fpkt"];
1082--2369[label="0.0322581;1pkt 1fpkt"];
1082--2745[label="0.0434783;1pkt 1fpkt"];
1082--2877[label="0.0333333;1pkt 1fpkt"];
1082--2929[label="0.1;1pkt 1fpkt"];
1082--2942[label="0.1;1pkt 1fpkt"];
1082--2964[label="0.0566038;3pkt 3fpkt"];
1082--2995[label="0.0243902;1pkt 1fpkt"];
1082--3149[label="0.03125;1pkt 1fpkt"];
1082--3485[label="0.05;1pkt 1fpkt"];
1082--3539[label="0.04;1pkt 1fpkt"];
1082--3703[label="0.0377358;2pkt 2fpkt"];
1082--3864[label="0.117647;2pkt 2fpkt"];
1082--3934[label="0.04;1pkt 1fpkt"];
1082--4161[label="0.0434783;1pkt 1fpkt"];
1082--4270[label="0.0909091;1pkt 1fpkt"];
1082--4283[label="0.0566038;3pkt 3fpkt"];
1082--4298[label="0.0243902;1pkt 1fpkt"];
1082--4382[label="0.03125;1pkt 1fpkt"];
1082--4579[label="0.05;1pkt 1fpkt"];
1082--4610[label="0.04;1pkt 1fpkt"];
1082--4699[label="0.0377358;2pkt 2fpkt"];
1082--4825[label="0.04;1pkt 1fpkt"];
1082--5009[label="0.0377358;2pkt 2fpkt"];
1082--5017[label="0.0909091;1pkt 1fpkt"];
1082--5024[label="0.0566038;3pkt 3fpkt"];
1082--5028[label="0.0188679;1pkt 1fpkt"];
1082--5087[label="0.03125;1pkt 1fpkt"];
1082--5209[label="0.05;1pkt 1fpkt"];
1082--5287[label="0.0377358;2pkt 2fpkt"];
1107--1122[label="0.130841;14pkt 14fpkt"];
1107--1126[label="0.15;3pkt 3fpkt"];
1107--1645[label="0.0114943;1pkt 1fpkt"];
1107--1895[label="0.478261;11pkt 11fpkt"];
1107--2530[label="0.0114943;1pkt 1fpkt"];
1107--2745[label="0.173913;4pkt 4fpkt"];
1107--2761[label="0.0833333;1pkt 1fpkt"];
1107--2817[label="0.357143;5pkt 5fpkt"];
1107--2830[label="0.555556;5pkt 5fpkt"];
1107--2837[label="0.37037;10pkt 10fpkt"];
1107--2997[label="0.44;11pkt 11fpkt"];
1107--3061[label="0.166667;6pkt 6fpkt"];
1107--3490[label="0.125;2pkt 2fpkt"];
1107--3550[label="0.241379;7pkt 7fpkt"];
1107--4161[label="0.173913;4pkt 4fpkt"];
1107--4204[label="0.625;5pkt 5fpkt"];
1107--4208[label="0.37037;10pkt 10fpkt"];
1107--4363[label="0.5;7pkt 7fpkt"];
1107--4582[label="0.125;2pkt 2fpkt"];
1107--4941[label="0.0117647;1pkt 1fpkt"];
1107--5076[label="0.538462;7pkt 7fpkt"];
1107--5211[label="0.125;2pkt 2fpkt"];
1114--3703[label="1;3pkt 3fpkt"];
1114--4699[label="1;3pkt 3fpkt"];
1114--5287[label="1;3pkt 3fpkt"];
1122--1128[label="0.00606061;1pkt 1fpkt"];
1122--1179[label="0.171429;12pkt 12fpkt"];
1122--1345[label="0.00625;1pkt 1fpkt"];
1122--1463[label="0.00680272;1pkt 1fpkt"];
1122--1508[label="0.00847458;1pkt 1fpkt"];
1122--1521[label="0.00740741;1pkt 1fpkt"];
1122--1524[label="0.0149254;1pkt 1fpkt"];
1122--1655[label="0.00671141;1pkt 1fpkt"];
1122--1873[label="0.00769231;1pkt 1fpkt"];
1122--2010[label="0.01;1pkt 1fpkt"];
1122--2012[label="0.0138889;1pkt 1fpkt"];
1122--2022[label="0.00746269;1pkt 1fpkt"];
1122--2491[label="0.00684932;1pkt 1fpkt"];
1122--2647[label="0.142857;36pkt 36fpkt"];
1143--1271[label="0.0204082;1pkt 1fpkt"];
1143--2031[label="0.0625;2pkt 2fpkt"];
1143--2205[label="0.0357143;1pkt 1fpkt"];
1143--2372[label="0.0526316;2pkt 2fpkt"];
1179--1645[label="0.0142857;1pkt 1fpkt"];
1179--1895[label="0.130435;3pkt 3fpkt"];
1179--2146[label="0.0142857;1pkt 1fpkt"];
1179--2530[label="0.0142857;1pkt 1fpkt"];
1179--2761[label="0.0833333;1pkt 1fpkt"];
1179--2830[label="0.222222;2pkt 2fpkt"];
1179--2997[label="0.12;3pkt 3fpkt"];
1179--3490[label="0.0625;1pkt 1fpkt"];
1179--3550[label="0.0344828;1pkt 1fpkt"];
1179--3565[label="0.0909091;1pkt 1fpkt"];
1179--3703[label="0.0142857;1pkt 1fpkt"];
1179--3908[label="0.0416667;1pkt 1fpkt"];
1179--4204[label="0.125;1pkt 1fpkt"];
1179--4363[label="0.214286;3pkt 3fpkt"];
1179--4582[label="0.0625;1pkt 1fpkt"];
1179--4620[label="0.0909091;1pkt 1fpkt"];
1179--4699[label="0.0142857;1pkt 1fpkt"];
1179--4941[label="0.0142857;1pkt 1fpkt"];
1179--5076[label="0.153846;2pkt 2fpkt"];
1179--5211[label="0.0625;1pkt 1fpkt"];
1179--5237[label="0.0909091;1pkt 1fpkt"];
1179--5287[label="0.0142857;1pkt 1fpkt"];
1271--1442[label="0.107143;3pkt 3fpkt"];
1271--1514[label="0.025641;1pkt 1fpkt"];
1271--1641[label="0.0277778;1pkt 1fpkt"];
1271--1723[label="0.0625;2pkt 2fpkt"];
1271--1890[label="0.09375;3pkt 3fpkt"];
1271--1917[label="0.0588235;1pkt 1fpkt"];
1271--2006[label="0.0204082;1pkt 1fpkt"];
1271--2175[label="0.0408163;2pkt 2fpkt"];
1271--2335[label="0.0612245;3pkt 3fpkt"];
1271--2369[label="0.0322581;1pkt 1fpkt"];
1271--2508[label="0.0588235;1pkt 1fpkt"];
1271--2877[label="0.1;3pkt 3fpkt"];
1271--2964[label="0.102041;5pkt 5fpkt"];
1271--2995[label="0.0243902;1pkt 1fpkt"];
1271--3139[label="0.125;2pkt 2fpkt"];
1271--3149[label="0.09375;3pkt 3fpkt"];
1271--3539[label="0.08;2pkt 2fpkt"];
1271--3632[label="0.0555556;1pkt 1fpkt"];
1271--3703[label="0.0408163;2pkt 2fpkt"];
1271--3864[label="0.117647;2pkt 2fpkt"];
1271--4283[label="0.102041;5pkt 5fpkt"];
1271--4298[label="0.0243902;1pkt 1fpkt"];
1271--4377[label="0.125;2pkt 2fpkt"];
1271--4382[label="0.09375;3pkt 3fpkt"];
1271--4610[label="0.08;2pkt 2fpkt"];
1271--4699[label="0.0408163;2pkt 2fpkt"];
1271--5009[label="0.0204082;1pkt 1fpkt"];
1271--5024[label="0.102041;5pkt 5fpkt"];
1271--5087[label="0.09375;3pkt 3fpkt"];
1271--5287[label="0.0408163;2pkt 2fpkt"];
1323--1442[label="0.0357143;1pkt 1fpkt"];
1323--1498[label="0.0285714;1pkt 1fpkt"];
1323--1723[label="0.03125;1pkt 1fpkt"];
1323--2006[label="0.0285714;1pkt 1fpkt"];
1323--2175[label="0.0571429;2pkt 2fpkt"];
1323--2335[label="0.0285714;1pkt 1fpkt"];
1323--2745[label="0.0434783;1pkt 1fpkt"];
1323--2877[label="0.0333333;1pkt 1fpkt"];
1323--2929[label="0.1;1pkt 1fpkt"];
1323--2942[label="0.1;1pkt 1fpkt"];
1323--2964[label="0.0285714;1pkt 1fpkt"];
1323--3703[label="0.0285714;1pkt 1fpkt"];
1323--4161[label="0.0434783;1pkt 1fpkt"];
1323--4270[label="0.0909091;1pkt 1fpkt"];
1323--4283[label="0.0285714;1pkt 1fpkt"];
1323--4699[label="0.0285714;1pkt 1fpkt"];
1323--5009[label="0.0285714;1pkt 1fpkt"];
1323--5017[label="0.0909091;1pkt 1fpkt"];
1323--5024[label="0.0285714;1pkt 1fpkt"];
1323--5028[label="0.0285714;1pkt 1fpkt"];
1323--5287[label="0.0285714;1pkt 1fpkt"];
1351--1521[label="0.0217391;1pkt 1fpkt"];
1351--1524[label="0.0217391;1pkt 1fpkt"];
1351--1818[label="0.0217391;1pkt 1fpkt"];
1351--2010[label="0.0217391;1pkt 1fpkt"];
1351--2012[label="0.0217391;1pkt 1fpkt"];
1351--2053[label="0.0357143;1pkt 1fpkt"];
1351--2205[label="0.0357143;1pkt 1fpkt"];
1351--2491[label="0.0217391;1pkt 1fpkt"];
1351--2647[label="0.195652;9pkt 9fpkt"];
1351--3742[label="1;46pkt 46fpkt"];
1423--1442[label="0.0714286;2pkt 2fpkt"];
1423--1498[label="0.0697674;3pkt 3fpkt"];
1423--2006[label="0.0204082;1pkt 1fpkt"];
1423--2175[label="0.0612245;3pkt 3fpkt"];
1423--2335[label="0.122449;6pkt 6fpkt"];
1423--2877[label="0.0666667;2pkt 2fpkt"];
1423--2964[label="0.142857;7pkt 7fpkt"];
1423--3485[label="0.1;2pkt 2fpkt"];
1423--4089[label="0.142857;2pkt 2fpkt"];
1423--4283[label="0.142857;7pkt 7fpkt"];
1423--4579[label="0.1;2pkt 2fpkt"];
1423--4912[label="0.142857;2pkt 2fpkt"];
1423--5009[label="0.0204082;1pkt 1fpkt"];
1423--5024[label="0.142857;7pkt 7fpkt"];
1423--5028[label="0.0408163;2pkt 2fpkt"];
1423--5209[label="0.1;2pkt 2fpkt"];
1423--5422[label="0.142857;2pkt 2fpkt"];
1442--1679[label="0.107143;3pkt 3fpkt"];
1442--1866[label="0.0714286;2pkt 2fpkt"];
1442--1896[label="0.0714286;2pkt 2fpkt"];
1442--2031[label="0.0714286;2pkt 2fpkt"];
1442--2415[label="0.107143;3pkt 3fpkt"];
1442--2501[label="0.0714286;2pkt 2fpkt"];
1442--2877[label="0.964286;27pkt 27fpkt"];
1498--1580[label="0.0285714;1pkt 1fpkt"];
1498--1679[label="0.027027;1pkt 1fpkt"];
1498--1866[label="0.0232558;1pkt 1fpkt"];
1498--1896[label="0.0333333;1pkt 1fpkt"];
1498--2031[label="0.09375;3pkt 3fpkt"];
1498--2053[label="0.0714286;2pkt 2fpkt"];
1498--2205[label="0.107143;3pkt 3fpkt"];
1498--2372[label="0.0263158;1pkt 1fpkt"];
1498--2415[label="0.0285714;1pkt 1fpkt"];
1498--2501[label="0.0344828;1pkt 1fpkt"];
1498--2647[label="0.0930233;4pkt 4fpkt"];
1514--1679[label="0.027027;1pkt 1fpkt"];
1514--1866[label="0.0512821;2pkt 2fpkt"];
1514--1886[label="0.0666667;2pkt 2fpkt"];
1514--1896[label="0.0333333;1pkt 1fpkt"];
1514--2031[label="0.03125;1pkt 1fpkt"];
1514--2205[label="0.0357143;1pkt 1fpkt"];
1514--2369[label="1;31pkt 31fpkt"];
1514--2372[label="0.0526316;2pkt 2fpkt"];
1514--2415[label="0.0285714;1pkt 1fpkt"];
1514--2501[label="0.0344828;1pkt 1fpkt"];
1580--1723[label="0.03125;1pkt 1fpkt"];
1580--2006[label="0.0285714;1pkt 1fpkt"];
1580--2175[label="0.0857143;3pkt 3fpkt"];
1580--2335[label="0.0857143;3pkt 3fpkt"];
1580--2942[label="0.1;1pkt 1fpkt"];
1580--2964[label="0.142857;5pkt 5fpkt"];
1580--3139[label="0.0625;1pkt 1fpkt"];
1580--3485[label="0.05;1pkt 1fpkt"];
1580--3490[label="0.0625;1pkt 1fpkt"];
1580--3539[label="0.04;1pkt 1fpkt"];
1580--3703[label="0.0285714;1pkt 1fpkt"];
1580--4089[label="0.0714286;1pkt 1fpkt"];
1580--4270[label="0.0909091;1pkt 1fpkt"];
1580--4283[label="0.142857;5pkt 5fpkt"];
1580--4377[label="0.0625;1pkt 1fpkt"];
1580--4579[label="0.05;1pkt 1fpkt"];
1580--4582[label="0.0625;1pkt 1fpkt"];
1580--4610[label="0.04;1pkt 1fpkt"];
1580--4699[label="0.0285714;1pkt 1fpkt"];
1580--4912[label="0.0714286;1pkt 1fpkt"];
1580--5009[label="0.0285714;1pkt 1fpkt"];
1580--5017[label="0.0909091;1pkt 1fpkt"];
1580--5024[label="0.142857;5pkt 5fpkt"];
1580--5028[label="0.0285714;1pkt 1fpkt"];
1580--5209[label="0.05;1pkt 1fpkt"];
1580--5211[label="0.0625;1pkt 1fpkt"];
1580--5287[label="0.0285714;1pkt 1fpkt"];
1580--5422[label="0.0714286;1pkt 1fpkt"];
1583--1723[label="0.0555556;1pkt 1fpkt"];
1583--2006[label="0.0555556;1pkt 1fpkt"];
1583--2175[label="0.166667;3pkt 3fpkt"];
1583--2335[label="0.111111;2pkt 2fpkt"];
1583--2964[label="0.222222;4pkt 4fpkt"];
1583--3539[label="0.0555556;1pkt 1fpkt"];
1583--3703[label="0.0555556;1pkt 1fpkt"];
1583--4283[label="0.222222;4pkt 4fpkt"];
1583--4610[label="0.0555556;1pkt 1fpkt"];
1583--4699[label="0.0555556;1pkt 1fpkt"];
1583--5009[label="0.0555556;1pkt 1fpkt"];
1583--5024[label="0.222222;4pkt 4fpkt"];
1583--5287[label="0.0555556;1pkt 1fpkt"];
1641--1866[label="0.0277778;1pkt 1fpkt"];
1641--1886[label="0.0333333;1pkt 1fpkt"];
1641--2031[label="0.03125;1pkt 1fpkt"];
1641--2995[label="1;36pkt 36fpkt"];
1641--4298[label="1;36pkt 36fpkt"];
1679--1723[label="0.0625;2pkt 2fpkt"];
1679--2006[label="0.0540541;2pkt 2fpkt"];
1679--2175[label="0.0540541;2pkt 2fpkt"];
1679--2335[label="0.108108;4pkt 4fpkt"];
1679--2415[label="1;35pkt 35fpkt"];
1679--2745[label="0.0434783;1pkt 1fpkt"];
1679--2877[label="0.1;3pkt 3fpkt"];
1679--2964[label="0.108108;4pkt 4fpkt"];
1679--3485[label="0.1;2pkt 2fpkt"];
1679--4082[label="0.25;1pkt 1fpkt"];
1679--4089[label="0.0714286;1pkt 1fpkt"];
1679--4161[label="0.0434783;1pkt 1fpkt"];
1679--4283[label="0.108108;4pkt 4fpkt"];
1679--4579[label="0.1;2pkt 2fpkt"];
1679--4908[label="0.25;1pkt 1fpkt"];
1679--4912[label="0.0714286;1pkt 1fpkt"];
1679--5009[label="0.0540541;2pkt 2fpkt"];
1679--5024[label="0.108108;4pkt 4fpkt"];
1679--5209[label="0.1;2pkt 2fpkt"];
1679--5419[label="0.25;1pkt 1fpkt"];
1679--5422[label="0.0714286;1pkt 1fpkt"];
1723--1866[label="0.0625;2pkt 2fpkt"];
1723--2031[label="0.03125;1pkt 1fpkt"];
1723--2053[label="0.0357143;1pkt 1fpkt"];
1723--2372[label="0.125;4pkt 4fpkt"];
1723--2415[label="0.0625;2pkt 2fpkt"];
1866--1890[label="0.03125;1pkt 1fpkt"];
1866--1917[label="0.0588235;1pkt 1fpkt"];
1866--2006[label="0.0444444;2pkt 2fpkt"];
1866--2175[label="0.0444444;2pkt 2fpkt"];
1866--2369[label="0.0322581;1pkt 1fpkt"];
1866--2508[label="0.0588235;1pkt 1fpkt"];
1866--2877[label="0.0666667;2pkt 2fpkt"];
1866--2929[label="0.1;1pkt 1fpkt"];
1866--2995[label="0.0243902;1pkt 1fpkt"];
1866--3139[label="0.0625;1pkt 1fpkt"];
1866--3149[label="0.03125;1pkt 1fpkt"];
1866--3485[label="0.05;1pkt 1fpkt"];
1866--3632[label="0.0555556;1pkt 1fpkt"];
1866--3703[label="0.0444444;2pkt 2fpkt"];
1866--4067[label="0.0222222;1pkt 1fpkt"];
1866--4089[label="0.0714286;1pkt 1fpkt"];
1866--4298[label="0.0243902;1pkt 1fpkt"];
1866--4377[label="0.0625;1pkt 1fpkt"];
1866--4382[label="0.03125;1pkt 1fpkt"];
1866--4579[label="0.05;1pkt 1fpkt"];
1866--4699[label="0.0444444;2pkt 2fpkt"];
1866--4912[label="0.0714286;1pkt 1fpkt"];
1866--5009[label="0.0444444;2pkt 2fpkt"];
1866--5028[label="0.0444444;2pkt 2fpkt"];
1866--5087[label="0.03125;1pkt 1fpkt"];
1866--5209[label="0.05;1pkt 1fpkt"];
1866--5287[label="0.0444444;2pkt 2fpkt"];
1866--5422[label="0.0714286;1pkt 1fpkt"];
1886--2006[label="0.1;3pkt 3fpkt"];
1886--2175[label="0.0666667;2pkt 2fpkt"];
1886--2335[label="0.1;3pkt 3fpkt"];
1886--2369[label="0.0666667;2pkt 2fpkt"];
1886--2745[label="0.0434783;1pkt 1fpkt"];
1886--2964[label="0.1;3pkt 3fpkt"];
1886--2995[label="0.0333333;1pkt 1fpkt"];
1886--3139[label="0.125;2pkt 2fpkt"];
1886--3539[label="0.04;1pkt 1fpkt"];
1886--4161[label="0.0434783;1pkt 1fpkt"];
1886--4283[label="0.1;3pkt 3fpkt"];
1886--4298[label="0.0333333;1pkt 1fpkt"];
1886--4377[label="0.125;2pkt 2fpkt"];
1886--4610[label="0.04;1pkt 1fpkt"];
1886--5009[label="0.1;3pkt 3fpkt"];
1886--5024[label="0.1;3pkt 3fpkt"];
1886--5028[label="0.0666667;2pkt 2fpkt"];
1890--2053[label="0.0357143;1pkt 1fpkt"];
1890--2372[label="0.03125;1pkt 1fpkt"];
1890--3149[label="1;32pkt 32fpkt"];
1890--4382[label="1;32pkt 32fpkt"];
1890--5087[label="1;32pkt 32fpkt"];
1895--2997[label="1;23pkt 23fpkt"];
1896--2006[label="0.0333333;1pkt 1fpkt"];
1896--2335[label="0.2;6pkt 6fpkt"];
1896--2369[label="0.0333333;1pkt 1fpkt"];
1896--2501[label="1;29pkt 29fpkt"];
1896--2877[label="0.0666667;2pkt 2fpkt"];
1896--2964[label="0.233333;7pkt 7fpkt"];
1896--3539[label="0.08;2pkt 2fpkt"];
1896--3703[label="0.0333333;1pkt 1fpkt"];
1896--4283[label="0.233333;7pkt 7fpkt"];
1896--4610[label="0.08;2pkt 2fpkt"];
1896--4699[label="0.0333333;1pkt 1fpkt"];
1896--5009[label="0.0333333;1pkt 1fpkt"];
1896--5024[label="0.233333;7pkt 7fpkt"];
1896--5028[label="0.0666667;2pkt 2fpkt"];
1896--5287[label="0.0333333;1pkt 1fpkt"];
2006--2031[label="0.03125;1pkt 1fpkt"];
2006--2205[label="0.0357143;1pkt 1fpkt"];
2006--2372[label="0.0263158;1pkt 1fpkt"];
2006--2415[label="0.0571429;2pkt 2fpkt"];
2006--2501[label="0.0344828;1pkt 1fpkt"];
2006--5009[label="0.985294;67pkt 67fpkt"];
2031--2335[label="0.0625;2pkt 2fpkt"];
2031--2369[label="0.0322581;1pkt 1fpkt"];
2031--2877[label="0.0333333;1pkt 1fpkt"];
2031--2964[label="0.03125;1pkt 1fpkt"];
2031--2995[label="0.03125;1pkt 1fpkt"];
2031--3485[label="0.05;1pkt 1fpkt"];
2031--3864[label="0.117647;2pkt 2fpkt"];
2031--3934[label="0.04;1pkt 1fpkt"];
2031--4283[label="0.0625;2pkt 2fpkt"];
2031--4298[label="0.03125;1pkt 1fpkt"];
2031--4579[label="0.05;1pkt 1fpkt"];
2031--4825[label="0.04;1pkt 1fpkt"];
2031--5009[label="0.03125;1pkt 1fpkt"];
2031--5024[label="0.03125;1pkt 1fpkt"];
2031--5028[label="0.03125;1pkt 1fpkt"];
2031--5209[label="0.05;1pkt 1fpkt"];
2053--2175[label="0.142857;4pkt 4fpkt"];
2053--2335[label="0.0357143;1pkt 1fpkt"];
2053--2929[label="0.1;1pkt 1fpkt"];
2053--2964[label="0.0357143;1pkt 1fpkt"];
2053--2995[label="0.0357143;1pkt 1fpkt"];
2053--3139[label="0.0625;1pkt 1fpkt"];
2053--3149[label="0.0357143;1pkt 1fpkt"];
2053--3485[label="0.05;1pkt 1fpkt"];
2053--3742[label="0.0357143;1pkt 1fpkt"];
2053--4089[label="0.0714286;1pkt 1fpkt"];
2053--4283[label="0.0357143;1pkt 1fpkt"];
2053--4298[label="0.0357143;1pkt 1fpkt"];
2053--4377[label="0.0625;1pkt 1fpkt"];
2053--4382[label="0.0357143;1pkt 1fpkt"];
2053--4579[label="0.05;1pkt 1fpkt"];
2053--4912[label="0.0714286;1pkt 1fpkt"];
2053--5024[label="0.0357143;1pkt 1fpkt"];
2053--5087[label="0.0357143;1pkt 1fpkt"];
2053--5209[label="0.05;1pkt 1fpkt"];
2053--5422[label="0.0714286;1pkt 1fpkt"];
2060--2570[label="1;2pkt 2fpkt"];
2060--5028[label="1;2pkt 2fpkt"];
2067--2071[label="0.923077;12pkt 12fpkt"];
2067--2625[label="0.235294;4pkt 4fpkt"];
2067--3084[label="0.941176;16pkt 16fpkt"];
2071--3084[label="0.923077;12pkt 12fpkt"];
2071--3703[label="0.0769231;1pkt 1fpkt"];
2071--4699[label="0.0769231;1pkt 1fpkt"];
2071--5287[label="0.0769231;1pkt 1fpkt"];
2175--2205[label="0.0714286;2pkt 2fpkt"];
2175--2372[label="0.0263158;1pkt 1fpkt"];
2175--2415[label="0.0571429;2pkt 2fpkt"];
2205--2335[label="0.0357143;1pkt 1fpkt"];
2205--2369[label="0.0357143;1pkt 1fpkt"];
2205--2964[label="0.0357143;1pkt 1fpkt"];
2205--2982[label="0.0357143;1pkt 1fpkt"];
2205--3703[label="0.0714286;2pkt 2fpkt"];
2205--3742[label="0.0357143;1pkt 1fpkt"];
2205--4082[label="0.5;2pkt 2fpkt"];
2205--4283[label="0.0357143;1pkt 1fpkt"];
2205--4699[label="0.0714286;2pkt 2fpkt"];
2205--4908[label="0.5;2pkt 2fpkt"];
2205--5009[label="0.0357143;1pkt 1fpkt"];
2205--5024[label="0.0357143;1pkt 1fpkt"];
2205--5028[label="0.0357143;1pkt 1fpkt"];
2205--5287[label="0.0714286;2pkt 2fpkt"];
2205--5419[label="0.5;2pkt 2fpkt"];
2335--2372[label="0.0526316;2pkt 2fpkt"];
2335--2415[label="0.114286;4pkt 4fpkt"];
2335--2501[label="0.206897;6pkt 6fpkt"];
2335--2964[label="0.988764;88pkt 88fpkt"];
2335--4283[label="1;89pkt 89fpkt"];
2335--5024[label="0.988764;88pkt 88fpkt"];
2369--2372[label="0.0645161;2pkt 2fpkt"];
2369--2501[label="0.0344828;1pkt 1fpkt"];
2372--2817[label="0.0714286;1pkt 1fpkt"];
2372--2964[label="0.0526316;2pkt 2fpkt"];
2372--3139[label="0.125;2pkt 2fpkt"];
2372--3149[label="0.03125;1pkt 1fpkt"];
2372--3703[label="0.157895;6pkt 6fpkt"];
2372--3864[label="0.117647;2pkt 2fpkt"];
2372--4283[label="0.0526316;2pkt 2fpkt"];
2372--4377[label="0.125;2pkt 2fpkt"];
2372--4382[label="0.03125;1pkt 1fpkt"];
2372--4699[label="0.157895;6pkt 6fpkt"];
2372--5009[label="0.0263158;1pkt 1fpkt"];
2372--5024[label="0.0526316;2pkt 2fpkt"];
2372--5087[label="0.03125;1pkt 1fpkt"];
2372--5287[label="0.157895;6pkt 6fpkt"];
2415--2745[label="0.0434783;1pkt 1fpkt"];
2415--2877[label="0.1;3pkt 3fpkt"];
2415--2964[label="0.114286;4pkt 4fpkt"];
2415--3485[label="0.1;2pkt 2fpkt"];
2415--4082[label="0.25;1pkt 1fpkt"];
2415--4089[label="0.0714286;1pkt 1fpkt"];
2415--4161[label="0.0434783;1pkt 1fpkt"];
2415--4283[label="0.114286;4pkt 4fpkt"];
2415--4579[label="0.1;2pkt 2fpkt"];
2415--4908[label="0.25;1pkt 1fpkt"];
2415--4912[label="0.0714286;1pkt 1fpkt"];
2415--5009[label="0.0571429;2pkt 2fpkt"];
2415--5024[label="0.114286;4pkt 4fpkt"];
2415--5209[label="0.1;2pkt 2fpkt"];
2415--5419[label="0.25;1pkt 1fpkt"];
2415--5422[label="0.0714286;1pkt 1fpkt"];
2501--2877[label="0.0689655;2pkt 2fpkt"];
2501--2964[label="0.241379;7pkt 7fpkt"];
2501--3539[label="0.08;2pkt 2fpkt"];
2501--3703[label="0.0344828;1pkt 1fpkt"];
2501--4283[label="0.241379;7pkt 7fpkt"];
2501--4610[label="0.08;2pkt 2fpkt"];
2501--4699[label="0.0344828;1pkt 1fpkt"];
2501--5009[label="0.0344828;1pkt 1fpkt"];
2501--5024[label="0.241379;7pkt 7fpkt"];
2501--5028[label="0.0689655;2pkt 2fpkt"];
2501--5287[label="0.0344828;1pkt 1fpkt"];
2570--5028[label="1;2pkt 2fpkt"];
2745--4161[label="1;23pkt 23fpkt"];
2830--4204[label="1;8pkt 8fpkt"];
2837--4208[label="1;27pkt 27fpkt"];
2942--4270[label="1;10pkt 10fpkt"];
2942--5017[label="1;10pkt 10fpkt"];
2964--4283[label="1;128pkt 128fpkt"];
2964--5024[label="1;128pkt 128fpkt"];
2970--4288[label="1;1pkt 1fpkt"];
2970--5028[label="1;1pkt 1fpkt"];
2995--4298[label="1;41pkt 41fpkt"];
3139--4377[label="1;16pkt 16fpkt"];
3149--4382[label="1;32pkt 32fpkt"];
3149--5087[label="1;32pkt 32fpkt"];
3485--4579[label="1;20pkt 20fpkt"];
3485--5209[label="1;20pkt 20fpkt"];
3490--4582[label="1;16pkt 16fpkt"];
3490--5211[label="1;16pkt 16fpkt"];
3539--4610[label="1;25pkt 25fpkt"];
3565--4620[label="1;11pkt 11fpkt"];
3565--5237[label="1;11pkt 11fpkt"];
3703--4699[label="1;174pkt 174fpkt"];
3703--5287[label="1;174pkt 174fpkt"];
3934--4825[label="1;25pkt 25fpkt"];
4082--4908[label="1;4pkt 4fpkt"];
4082--5419[label="1;4pkt 4fpkt"];
4089--4912[label="1;14pkt 14fpkt"];
4089--5422[label="1;14pkt 14fpkt"];
4270--5017[label="1;11pkt 11fpkt"];
4283--5024[label="1;128pkt 128fpkt"];
4288--5028[label="1;1pkt 1fpkt"];
4363--5076[label="1;13pkt 13fpkt"];
4382--5087[label="1;32pkt 32fpkt"];
4579--5209[label="1;20pkt 20fpkt"];
4582--5211[label="1;16pkt 16fpkt"];
4620--5237[label="1;11pkt 11fpkt"];
4699--5287[label="1;174pkt 174fpkt"];
4908--5419[label="1;4pkt 4fpkt"];
4912--5422[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="166.18.148.35" src_port="25"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.93.19.71"/>
    </slice>
    <from sec="1128921038" usec="0"/>
    <to sec="1128921297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621042,1.8992,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
3163[label="219.20.41.77;69pkt 69fpkt", shape=pentagon, color=darkviolet];
5091[label="219.20.41.77;68pkt 68fpkt", shape=invhouse, color=bisque];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.20.41.77:*, 128.0.160.26:9100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9100: (50%)&lt;BR/&gt; 2018: (0.729927%)&lt;BR/&gt; 2017: (0.729927%)&lt;BR/&gt; 2015: (0.729927%)&lt;BR/&gt; 2014: (0.729927%)&gt;];
}
3163--5091[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="128.0.160.26" dst_port="9100" src_ip="219.20.41.77"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.30.131.80"/>
    </slice>
    <from sec="1128921005" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,010,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.182.155.80"/>
    </slice>
    <from sec="1128920409" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.170.85.81"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.152.242.82"/>
    </slice>
    <from sec="1128920426" usec="0"/>
    <to sec="1128921289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.176.112.91"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.38.178.101"/>
    </slice>
    <from sec="1128921089" usec="0"/>
    <to sec="1128921241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.50.212.101"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.196.216.106"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128920806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.158.21.111"/>
    </slice>
    <from sec="1128920628" usec="0"/>
    <to sec="1128920638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.170.182.111"/>
    </slice>
    <from sec="1128920869" usec="0"/>
    <to sec="1128920891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.229.74.116"/>
    </slice>
    <from sec="1128920676" usec="0"/>
    <to sec="1128920701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.74.86.125"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09233,1.78716,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
329[label="161.253.33.147;s;294pkt 294fpkt", shape=diamond, color=yellow];
1072[label="132.176.145.184;s;89pkt 89fpkt", shape=diamond, color=yellow];
1457[label="201.216.237.71;d;76pkt 76fpkt", shape=diamond, color=yellow];
1797[label="219.18.154.64;d;72pkt 72fpkt", shape=diamond, color=yellow];
1862[label="132.176.58.129;s;26pkt 26fpkt", shape=diamond, color=yellow];
2352[label="132.176.145.184;s;73pkt 73fpkt", shape=hexagon, color=black];
2847[label="161.253.194.24;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3488[label="132.176.58.129;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3601[label="161.253.33.147;328pkt 328fpkt", shape=pentagon, color=darkviolet];
3783[label="132.176.145.184;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3852[label="132.176.145.199;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4215[label="161.253.194.24;22pkt 22fpkt", shape=invtriangle, color=brown];
4648[label="161.253.33.147;328pkt 328fpkt", shape=invtriangle, color=brown];
4981[label="161.253.194.24;21pkt 21fpkt", shape=invhouse, color=bisque];
5210[label="132.176.58.129;28pkt 28fpkt", shape=invhouse, color=bisque];
5311[label="132.176.145.184;98pkt 98fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.253.33.147:*, *:80}[57.3192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.5315%)&lt;BR/&gt; 1863: (3.08491%)&lt;BR/&gt; 0: (2.38241%)&lt;BR/&gt; 53: (2.32132%)&lt;BR/&gt; 1026: (1.00794%)&gt;];
}
329--1457[label="0.0263158;2pkt 2fpkt"];
329--1797[label="1;72pkt 72fpkt"];
329--2629[label="0.00340136;1pkt 1fpkt"];
329--3601[label="1;294pkt 294fpkt"];
329--4648[label="1;294pkt 294fpkt"];
1072--1345[label="0.011236;1pkt 1fpkt"];
1072--1457[label="0.0263158;2pkt 2fpkt"];
1072--1463[label="0.011236;1pkt 1fpkt"];
1072--1863[label="0.011236;1pkt 1fpkt"];
1072--1873[label="0.011236;1pkt 1fpkt"];
1072--2352[label="1;73pkt 73fpkt"];
1072--2491[label="0.011236;1pkt 1fpkt"];
1072--3783[label="1;89pkt 89fpkt"];
1072--5311[label="1;89pkt 89fpkt"];
1457--1775[label="0.0131579;1pkt 1fpkt"];
1457--1862[label="0.192308;5pkt 5fpkt"];
1457--1942[label="0.016129;1pkt 1fpkt"];
1457--2120[label="0.0263158;2pkt 2fpkt"];
1457--2150[label="0.0263158;2pkt 2fpkt"];
1457--2188[label="0.0131579;1pkt 1fpkt"];
1457--2352[label="0.0273973;2pkt 2fpkt"];
1457--2621[label="0.0131579;1pkt 1fpkt"];
1457--2625[label="0.289474;22pkt 22fpkt"];
1457--2629[label="0.0263158;2pkt 2fpkt"];
1457--2639[label="0.0131579;1pkt 1fpkt"];
1457--2655[label="0.0131579;1pkt 1fpkt"];
1457--2807[label="0.0263158;2pkt 2fpkt"];
1457--2847[label="0.238095;5pkt 5fpkt"];
1457--2957[label="0.0263158;2pkt 2fpkt"];
1457--3233[label="0.0526316;4pkt 4fpkt"];
1457--3488[label="0.214286;6pkt 6fpkt"];
1457--3601[label="0.0263158;2pkt 2fpkt"];
1457--3706[label="0.0131579;1pkt 1fpkt"];
1457--3722[label="0.0263158;2pkt 2fpkt"];
1457--3723[label="0.0131579;1pkt 1fpkt"];
1457--3729[label="0.0131579;1pkt 1fpkt"];
1457--3783[label="0.0263158;2pkt 2fpkt"];
1457--3828[label="0.0465116;2pkt 2fpkt"];
1457--3852[label="0.171429;6pkt 6fpkt"];
1457--4197[label="0.0263158;2pkt 2fpkt"];
1457--4215[label="0.227273;5pkt 5fpkt"];
1457--4648[label="0.0263158;2pkt 2fpkt"];
1457--4713[label="0.0131579;1pkt 1fpkt"];
1457--4970[label="0.0263158;2pkt 2fpkt"];
1457--4981[label="0.238095;5pkt 5fpkt"];
1457--5022[label="0.0263158;2pkt 2fpkt"];
1457--5210[label="0.214286;6pkt 6fpkt"];
1457--5311[label="0.0263158;2pkt 2fpkt"];
1797--3601[label="1;72pkt 72fpkt"];
1797--4648[label="1;72pkt 72fpkt"];
1862--2625[label="0.0769231;2pkt 2fpkt"];
1862--3488[label="0.961538;25pkt 25fpkt"];
1862--5210[label="0.961538;25pkt 25fpkt"];
2352--3783[label="1;73pkt 73fpkt"];
2352--5311[label="1;73pkt 73fpkt"];
2847--4215[label="1;21pkt 21fpkt"];
2847--4981[label="1;21pkt 21fpkt"];
3488--5210[label="1;28pkt 28fpkt"];
3601--4648[label="1;328pkt 328fpkt"];
3783--5311[label="1;98pkt 98fpkt"];
4215--4981[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.253.33.147"/>
    </slice>
    <from sec="1128920400" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.89.107.139"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
5240[label="220.140.196.141;751pkt 751fpkt", shape=invhouse, color=bisque];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.140.196.141:3877, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3877: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.140.196.141" src_port="3877"/>
    </slice>
    <from sec="1128920852" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.147.249.141"/>
    </slice>
    <from sec="1128920408" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.183.195.143"/>
    </slice>
    <from sec="1128920407" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="132.176.50.145"/>
    </slice>
    <from sec="1128920682" usec="0"/>
    <to sec="1128920769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.762114,1.92743,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
4644[label="206.125.222.145;62pkt 62fpkt", shape=invtriangle, color=brown];
5251[label="206.125.222.145;62pkt 62fpkt", shape=invhouse, color=bisque];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.222.145:29237, *:*}[85.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29237: (42.7419%)&lt;BR/&gt; 80: (4.83871%)&lt;BR/&gt; 0: (1.6129%)&lt;BR/&gt; 63561: (0.806452%)&lt;BR/&gt; 57593: (0.806452%)&gt;];
}
4644--5251[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.222.145" src_port="29237"/>
    </slice>
    <from sec="1128920406" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.13.130.154"/>
    </slice>
    <from sec="1128920434" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.32.39.155"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.66.41.156"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.194.140.157"/>
    </slice>
    <from sec="1128920998" usec="0"/>
    <to sec="1128921025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.36.82.166"/>
    </slice>
    <from sec="1128921083" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.236.51.168"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.201.77.168"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.46.192.175"/>
    </slice>
    <from sec="1128920800" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.101.75.191"/>
    </slice>
    <from sec="1128920448" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.52.107.193"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.90.201.194"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.130.21.197"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="137.144.153.197"/>
    </slice>
    <from sec="1128921153" usec="0"/>
    <to sec="1128921293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.8.84.198"/>
    </slice>
    <from sec="1128920451" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.183.153.198"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.52.13.214"/>
    </slice>
    <from sec="1128920402" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.18.224.217"/>
    </slice>
    <from sec="1128920404" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.70.119.221"/>
    </slice>
    <from sec="1128920456" usec="0"/>
    <to sec="1128921287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.11.52.225"/>
    </slice>
    <from sec="1128920415" usec="0"/>
    <to sec="1128921291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="147.2.113.225"/>
    </slice>
    <from sec="1128920789" usec="0"/>
    <to sec="1128921286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.29.190.226"/>
    </slice>
    <from sec="1128920403" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.98.120.227"/>
    </slice>
    <from sec="1128920405" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.236.38.228"/>
    </slice>
    <from sec="1128921301" usec="0"/>
    <to sec="1128921302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.127.114.228"/>
    </slice>
    <from sec="1128920419" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.21.252.234"/>
    </slice>
    <from sec="1128920410" usec="0"/>
    <to sec="1128921298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691638,1.95943,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.204.161.235"/>
    </slice>
    <from sec="1128920429" usec="0"/>
    <to sec="1128921300" usec="0"/>
  </anomaly>

</admd:annotation>
