<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.129.156.216" dst_port="445" proto="tcp" src_ip="197.158.38.41" src_port="80"/>
      <filter dst_ip="196.129.156.216" dst_port="139" proto="tcp" src_ip="197.158.38.41" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="445" proto="tcp" src_ip="197.158.38.41" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="139" proto="tcp" src_ip="197.158.38.41" src_port="80"/>
      <from sec="1134363709" usec="0"/>
      <to sec="1134363770" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="196.129.156.216" dst_port="445" proto="tcp" src_ip="2.196.66.41" src_port="80"/>
      <filter dst_ip="196.129.156.216" dst_port="139" proto="tcp" src_ip="2.196.66.41" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="445" proto="tcp" src_ip="2.196.66.41" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="139" proto="tcp" src_ip="2.196.66.41" src_port="80"/>
      <from sec="1134363708" usec="0"/>
      <to sec="1134363770" usec="0"/>
    </slice>
    <from sec="1134363708" usec="0"/>
    <to sec="1134363770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.40.74.47" dst_port="80" proto="tcp" src_ip="163.180.8.133" src_port="1054"/>
      <filter dst_ip="194.2.234.83" dst_port="80" proto="tcp" src_ip="163.180.8.133" src_port="1054"/>
      <from sec="1134364429" usec="0"/>
      <to sec="1134364432" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.40.74.47" dst_port="80" proto="tcp" src_ip="196.129.156.135" src_port="1054"/>
      <filter dst_ip="194.2.234.83" dst_port="80" proto="tcp" src_ip="196.129.156.135" src_port="1054"/>
      <from sec="1134364430" usec="0"/>
      <to sec="1134364432" usec="0"/>
    </slice>
    <from sec="1134364429" usec="0"/>
    <to sec="1134364432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.160.151.143" dst_port="445" proto="tcp" src_ip="218.40.84.167"/>
      <filter dst_ip="131.160.151.143" dst_port="139" proto="tcp" src_ip="218.40.84.167"/>
      <from sec="1134363990" usec="0"/>
      <to sec="1134364042" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="131.160.151.143" dst_port="445" proto="tcp" src_ip="4.72.4.167"/>
      <filter dst_ip="131.160.151.143" dst_port="139" proto="tcp" src_ip="4.72.4.167"/>
      <from sec="1134363989" usec="0"/>
      <to sec="1134364043" usec="0"/>
    </slice>
    <from sec="1134363989" usec="0"/>
    <to sec="1134364043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="tcp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="icmp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="tcp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="icmp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="tcp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="icmp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="tcp" src_ip="220.96.40.6" src_port="1025"/>
      <filter dst_ip="220.96.40.6" dst_port="6000" proto="icmp" src_ip="220.96.40.6" src_port="1025"/>
      <from sec="1134364241" usec="0"/>
      <to sec="1134364272" usec="0"/>
    </slice>
    <from sec="1134364241" usec="0"/>
    <to sec="1134364272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="196.129.156.128" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.99.219.101" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="udp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" proto="icmp" src_ip="197.69.91.103" src_port="65534"/>
      <filter dst_ip="196.129.158.119" dst_port="53" src_ip="197.69.91.103" src_port="65534"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364500" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.68.117.1" dst_port="80" proto="tcp" src_ip="133.158.171.217" src_port="2891"/>
      <filter dst_ip="0.68.117.17" dst_port="80" proto="tcp" src_ip="133.158.171.217" src_port="2891"/>
      <filter dst_ip="222.17.227.145" dst_port="80" proto="tcp" src_ip="133.158.171.217" src_port="2891"/>
      <from sec="1134364466" usec="0"/>
      <to sec="1134364469" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="0.68.117.1" dst_port="80" proto="tcp" src_ip="196.129.156.217" src_port="2891"/>
      <filter dst_ip="0.68.117.17" dst_port="80" proto="tcp" src_ip="196.129.156.217" src_port="2891"/>
      <filter dst_ip="222.17.227.145" dst_port="80" proto="tcp" src_ip="196.129.156.217" src_port="2891"/>
      <from sec="1134364466" usec="0"/>
      <to sec="1134364469" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="0.68.117.1" dst_port="80" proto="tcp" src_ip="163.180.74.72" src_port="2891"/>
      <filter dst_ip="0.68.117.17" dst_port="80" proto="tcp" src_ip="163.180.74.72" src_port="2891"/>
      <filter dst_ip="222.17.227.145" dst_port="80" proto="tcp" src_ip="163.180.74.72" src_port="2891"/>
      <from sec="1134364466" usec="0"/>
      <to sec="1134364469" usec="0"/>
    </slice>
    <from sec="1134364466" usec="0"/>
    <to sec="1134364469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="6.192.174.78" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="6.192.174.78" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="6.192.174.78" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="6.192.174.78" src_port="1025"/>
      <from sec="1134363773" usec="0"/>
      <to sec="1134363783" usec="0"/>
    </slice>
    <from sec="1134363773" usec="0"/>
    <to sec="1134363783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="67.248.113.252" src_port="1025"/>
      <from sec="1134364298" usec="0"/>
      <to sec="1134364309" usec="0"/>
    </slice>
    <from sec="1134364298" usec="0"/>
    <to sec="1134364309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="67.200.145.2" src_port="25"/>
      <from sec="1134364290" usec="0"/>
      <to sec="1134364302" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="203.89.209.2" src_port="25"/>
      <from sec="1134364288" usec="0"/>
      <to sec="1134364302" usec="0"/>
    </slice>
    <from sec="1134364288" usec="0"/>
    <to sec="1134364303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="445" proto="tcp" src_ip="197.114.177.4" src_port="80"/>
      <from sec="1134363624" usec="0"/>
      <to sec="1134363645" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="445" proto="tcp" src_ip="218.3.217.4" src_port="80"/>
      <from sec="1134363623" usec="0"/>
      <to sec="1134363639" usec="0"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134363645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="221.227.8.62"/>
      <from sec="1134364342" usec="0"/>
      <to sec="1134364347" usec="0"/>
    </slice>
    <from sec="1134364342" usec="0"/>
    <to sec="1134364347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="216.77.213.74" src_port="80"/>
      <from sec="1134363890" usec="0"/>
      <to sec="1134364024" usec="0"/>
    </slice>
    <from sec="1134363890" usec="0"/>
    <to sec="1134364025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.139.14.9" dst_port="139" proto="tcp" src_ip="222.232.218.83" src_port="80"/>
      <from sec="1134363818" usec="0"/>
      <to sec="1134363821" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="196.139.14.9" dst_port="139" proto="tcp" src_ip="193.1.234.83" src_port="80"/>
      <from sec="1134363819" usec="0"/>
      <to sec="1134363821" usec="0"/>
    </slice>
    <from sec="1134363818" usec="0"/>
    <to sec="1134363821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="217.68.49.173"/>
      <from sec="1134363801" usec="0"/>
      <to sec="1134363803" usec="0"/>
    </slice>
    <from sec="1134363800" usec="0"/>
    <to sec="1134363803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.158.193.122" dst_port="139" proto="tcp" src_ip="217.71.70.211" src_port="443"/>
      <from sec="1134363852" usec="0"/>
      <to sec="1134363963" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="133.158.193.122" dst_port="139" proto="tcp" src_ip="192.66.34.211" src_port="443"/>
      <from sec="1134363851" usec="0"/>
      <to sec="1134363963" usec="0"/>
    </slice>
    <from sec="1134363851" usec="0"/>
    <to sec="1134363963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.45.175.188" proto="icmp"/>
      <filter dst_ip="69.45.175.188" proto="icmp"/>
      <filter dst_ip="69.45.175.188" proto="icmp"/>
      <filter dst_ip="69.45.175.188" proto="icmp"/>
      <from sec="1134363615" usec="0"/>
      <to sec="1134363616" usec="0"/>
    </slice>
    <from sec="1134363615" usec="0"/>
    <to sec="1134363618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.35.146.206" proto="tcp" src_port="139"/>
      <filter dst_ip="21.35.146.206" proto="tcp" src_port="139"/>
      <filter dst_ip="21.35.146.206" proto="tcp" src_port="139"/>
      <filter dst_ip="21.35.146.206" proto="tcp" src_port="139"/>
      <from sec="1134363809" usec="0"/>
      <to sec="1134363810" usec="0"/>
    </slice>
    <from sec="1134363809" usec="0"/>
    <to sec="1134363810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2261,2.30711,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="137" proto="tcp" src_ip="66.15.93.97" src_port="1027"/>
      <filter dst_ip="151.251.47.111" dst_port="137" proto="udp" src_ip="66.15.93.97" src_port="1027"/>
      <filter dst_ip="151.251.47.111" dst_port="80" proto="tcp" src_ip="66.15.93.97" src_port="1027"/>
      <filter dst_ip="151.251.47.111" dst_port="80" proto="udp" src_ip="66.15.93.97" src_port="1027"/>
      <from sec="1134364110" usec="0"/>
      <to sec="1134364115" usec="0"/>
    </slice>
    <from sec="1134364110" usec="0"/>
    <to sec="1134364115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
242[label="200.57.255.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
244[label="197.99.213.188;s;1735pkt 1735fpkt", shape=diamond, color=yellow];
764[label="5.132.5.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
1227[label="66.251.193.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
1674[label="0.139.14.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
2119[label="18.60.102.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
2655[label="199.84.227.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
2746[label="18.182.94.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
3040[label="198.8.57.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
3073[label="212.156.57.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
6378[label="197.99.213.188;1863pkt 1863fpkt", shape=pentagon, color=darkviolet];
8932[label="197.99.213.188;1863pkt 1863fpkt", shape=invtriangle, color=brown];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.213.188:6881, *:*}[97.7992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (49.479%)&lt;BR/&gt; 15001: (0.493601%)&lt;BR/&gt; 80: (0.493601%)&lt;BR/&gt; 32459: (0.301645%)&lt;BR/&gt; 16881: (0.283364%)&gt;];
}
242--244[label="1;1pkt 1fpkt"];
242--6378[label="1;1pkt 1fpkt"];
242--8932[label="1;1pkt 1fpkt"];
244--764[label="1;1pkt 1fpkt"];
244--1227[label="1;1pkt 1fpkt"];
244--1674[label="1;1pkt 1fpkt"];
244--2119[label="1;1pkt 1fpkt"];
244--2655[label="1;1pkt 1fpkt"];
244--2746[label="1;1pkt 1fpkt"];
244--3040[label="1;1pkt 1fpkt"];
244--3073[label="1;1pkt 1fpkt"];
244--3510[label="0.00979827;17pkt 17fpkt"];
244--3520[label="0.00288184;5pkt 5fpkt"];
244--3591[label="0.00979827;17pkt 17fpkt"];
244--3600[label="0.00288184;5pkt 5fpkt"];
244--3668[label="0.00288184;5pkt 5fpkt"];
244--6378[label="1;1735pkt 1735fpkt"];
244--8932[label="1;1735pkt 1735fpkt"];
764--6378[label="1;1pkt 1fpkt"];
764--8932[label="1;1pkt 1fpkt"];
1227--6378[label="1;1pkt 1fpkt"];
1227--8932[label="1;1pkt 1fpkt"];
1674--6378[label="1;1pkt 1fpkt"];
1674--8932[label="1;1pkt 1fpkt"];
2119--6378[label="1;1pkt 1fpkt"];
2119--8932[label="1;1pkt 1fpkt"];
2655--6378[label="1;1pkt 1fpkt"];
2655--8932[label="1;1pkt 1fpkt"];
2746--6378[label="1;1pkt 1fpkt"];
2746--8932[label="1;1pkt 1fpkt"];
3040--6378[label="1;1pkt 1fpkt"];
3040--8932[label="1;1pkt 1fpkt"];
3073--6378[label="1;1pkt 1fpkt"];
3073--8932[label="1;1pkt 1fpkt"];
6378--8932[label="1;1863pkt 1863fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.213.188" src_port="6881"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.231.232.227"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
347[label="209.74.2.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
348[label="131.156.9.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.9.240:57925, 209.74.2.107:8010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57925: (50%)&lt;BR/&gt; 8010: (50%)&gt;];
}
347--348[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.74.2.107" dst_port="8010" src_ip="131.156.9.240" src_port="57925"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
6413[label="133.158.141.192;46pkt 46fpkt", shape=pentagon, color=darkviolet];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.192:*, 203.162.248.234:80}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2804: (1.08696%)&lt;BR/&gt; 2803: (1.08696%)&lt;BR/&gt; 2802: (1.08696%)&lt;BR/&gt; 2801: (1.08696%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="203.162.248.234" dst_port="80" src_ip="133.158.141.192"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
401[label="194.91.0.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
402[label="131.156.96.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
5346[label="131.156.96.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.96.110:1405, 194.91.0.4:8018}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8018: (50%)&lt;BR/&gt; 1405: (50%)&gt;];
}
401--402[label="1;1pkt 1fpkt"];
401--5346[label="1;1pkt 1fpkt"];
402--5346[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.91.0.4" dst_port="8018" src_ip="131.156.96.110" src_port="1405"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
404[label="66.179.5.245;s;6453pkt 6453fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.179.5.245:7607, *:*}[26.3133%]&lt;BR/&gt;{66.179.5.245:19452, *:*}[25.6315%]&lt;BR/&gt;{66.179.5.245:11334, *:*}[20.5021%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7607: (13.1567%)&lt;BR/&gt; 19452: (12.8157%)&lt;BR/&gt; 11334: (10.251%)&lt;BR/&gt; 43582: (6.989%)&lt;BR/&gt; 50223: (6.72555%)&gt;];
}
404--3481[label="0.000185322;1pkt 1fpkt"];
404--3528[label="0.000163185;1pkt 1fpkt"];
404--3565[label="0.000185322;1pkt 1fpkt"];
404--3608[label="0.000163185;1pkt 1fpkt"];
404--3643[label="0.000185322;1pkt 1fpkt"];
404--3675[label="0.000163185;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="66.179.5.245" src_port="7607"/>
      <filter src_ip="66.179.5.245" src_port="19452"/>
      <filter src_ip="66.179.5.245" src_port="11334"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
408[label="17.102.236.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
409[label="131.156.101.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
7121[label="131.156.101.253;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9469[label="131.156.101.253;1pkt 1fpkt", shape=invtriangle, color=brown];
11012[label="131.156.101.253;2pkt 2fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.101.253:1242, 17.102.236.128:12000}[50%]&lt;BR/&gt;{131.156.101.253:1428, 0.163.66.193:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12000: (35.7143%)&lt;BR/&gt; 1242: (35.7143%)&lt;BR/&gt; 1428: (14.2857%)&lt;BR/&gt; 80: (14.2857%)&gt;];
}
408--409[label="1;1pkt 1fpkt"];
408--7121[label="1;1pkt 1fpkt"];
408--9469[label="1;1pkt 1fpkt"];
408--11012[label="1;1pkt 1fpkt"];
409--7121[label="1;1pkt 1fpkt"];
409--9469[label="1;1pkt 1fpkt"];
409--11012[label="1;1pkt 1fpkt"];
7121--9469[label="1;1pkt 1fpkt"];
7121--11012[label="1;2pkt 2fpkt"];
9469--11012[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.163.66.193" dst_port="80" src_ip="131.156.101.253" src_port="1428"/>
      <filter dst_ip="17.102.236.128" dst_port="12000" src_ip="131.156.101.253" src_port="1242"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
430[label="160.137.20.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
431[label="218.5.40.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.5.40.52:21968, 160.137.20.2:1082}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21968: (50%)&lt;BR/&gt; 1082: (50%)&gt;];
}
430--431[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.137.20.2" dst_port="1082" src_ip="218.5.40.52" src_port="21968"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.158.48.42"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35315,2.15598,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
79[label="196.46.114.5s;286pkt 286fpkt", shape=rectangle, color=red];
497[label="196.46.114.5;s;286pkt 286fpkt", shape=diamond, color=yellow];
3813[label="196.46.114.5;285pkt 285fpkt", shape=pentagon, color=darkviolet];
7212[label="196.46.114.5;286pkt 286fpkt", shape=invtriangle, color=brown];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.46.114.5:*, *:445}[55.5944%]&lt;BR/&gt;{196.46.114.5:*, *:139}[44.4056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.7778%)&lt;BR/&gt; 139: (22.2222%)&lt;BR/&gt; 60292: (0.174978%)&lt;BR/&gt; 60291: (0.174978%)&lt;BR/&gt; 60290: (0.174978%)&gt;];
}
79--497[label="1;286pkt 286fpkt"];
79--3813[label="1;285pkt 285fpkt"];
79--7212[label="1;286pkt 286fpkt"];
497--3813[label="1;285pkt 285fpkt"];
497--7212[label="1;286pkt 286fpkt"];
3813--7212[label="1;285pkt 285fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="196.46.114.5"/>
      <filter dst_port="139" src_ip="196.46.114.5"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134363632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.45.180.119"/>
      <from sec="1134363614" usec="0"/>
      <to sec="1134363728" usec="0"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134363728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37138,2.25836,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
118[label="197.168.124.218s;510pkt 510fpkt", shape=rectangle, color=red];
517[label="197.168.124.218;s;510pkt 510fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.168.124.218:*, *:139}[50%]&lt;BR/&gt;{197.168.124.218:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 3366: (0.0980392%)&lt;BR/&gt; 3364: (0.0980392%)&lt;BR/&gt; 3363: (0.0980392%)&gt;];
}
118--517[label="1;510pkt 510fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.168.124.218"/>
      <filter dst_port="139" src_ip="197.168.124.218"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134363672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45547,2.23737,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
311[label="69.100.7.56;d;4pkt 4fpkt", shape=diamond, color=yellow];
440[label="220.169.73.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
481[label="221.233.146.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
548[label="196.139.252.59;s;822pkt 822fpkt", shape=diamond, color=yellow];
581[label="217.24.172.123;d;8pkt 8fpkt", shape=diamond, color=yellow];
645[label="194.22.185.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
675[label="67.146.79.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
803[label="67.145.31.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
977[label="69.96.247.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
1051[label="67.245.83.32;d;2pkt 2fpkt", shape=diamond, color=yellow];
1054[label="222.44.240.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
1223[label="197.104.31.122;d;9pkt 9fpkt", shape=diamond, color=yellow];
1261[label="68.201.66.90;d;2pkt 2fpkt", shape=diamond, color=yellow];
1272[label="222.41.40.198;d;3pkt 3fpkt", shape=diamond, color=yellow];
1311[label="217.67.224.87;d;2pkt 2fpkt", shape=diamond, color=yellow];
1316[label="216.193.82.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
1473[label="69.101.99.72;d;6pkt 6fpkt", shape=diamond, color=yellow];
1547[label="67.173.35.147;d;2pkt 2fpkt", shape=diamond, color=yellow];
1599[label="222.232.53.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1731[label="69.107.63.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
1748[label="67.245.30.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
1781[label="217.82.211.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
1831[label="216.58.31.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
1874[label="221.239.43.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
1892[label="221.203.138.236;d;3pkt 3fpkt", shape=diamond, color=yellow];
1916[label="221.227.175.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
2154[label="66.46.104.31;d;4pkt 4fpkt", shape=diamond, color=yellow];
2471[label="221.159.6.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
2481[label="222.55.20.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2661[label="222.236.16.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
2689[label="222.56.205.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
2831[label="216.50.173.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
2850[label="216.203.106.173;d;16pkt 16fpkt", shape=diamond, color=yellow];
2865[label="217.72.186.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
2906[label="221.238.85.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
2926[label="216.49.109.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
3033[label="68.201.66.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
3057[label="216.83.135.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
3080[label="69.107.38.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
3083[label="217.75.170.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
3100[label="68.14.108.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
3109[label="0.91.37.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
3218[label="67.146.79.74;d;1pkt 1fpkt", shape=hexagon, color=black];
3221[label="67.245.83.32;d;1pkt 1fpkt", shape=hexagon, color=black];
3229[label="197.104.31.122;d;7pkt 7fpkt", shape=hexagon, color=black];
3283[label="220.169.73.204;d;1pkt 1fpkt", shape=hexagon, color=black];
3430[label="217.72.186.91;d;1pkt 1fpkt", shape=hexagon, color=black];
4623[label="196.139.252.59;869pkt 869fpkt", shape=pentagon, color=darkviolet];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.252.59:*, *:*}[99.2018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (4.23634%)&lt;BR/&gt; 42232: (2.81494%)&lt;BR/&gt; 10418: (2.7592%)&lt;BR/&gt; 20431: (1.50502%)&lt;BR/&gt; 12159: (1.33779%)&gt;];
}
311--548[label="1;4pkt 4fpkt"];
311--4623[label="1;4pkt 4fpkt"];
440--548[label="1;1pkt 1fpkt"];
440--3283[label="1;1pkt 1fpkt"];
440--4623[label="1;1pkt 1fpkt"];
481--548[label="1;1pkt 1fpkt"];
481--4623[label="1;1pkt 1fpkt"];
548--571[label="0.00677966;4pkt 4fpkt"];
548--581[label="0.125;1pkt 1fpkt"];
548--645[label="1;1pkt 1fpkt"];
548--675[label="1;1pkt 1fpkt"];
548--803[label="1;1pkt 1fpkt"];
548--977[label="1;1pkt 1fpkt"];
548--1051[label="1;2pkt 2fpkt"];
548--1054[label="1;1pkt 1fpkt"];
548--1223[label="1;9pkt 9fpkt"];
548--1248[label="0.00913242;2pkt 2fpkt"];
548--1261[label="1;2pkt 2fpkt"];
548--1272[label="1;3pkt 3fpkt"];
548--1311[label="1;2pkt 2fpkt"];
548--1316[label="1;1pkt 1fpkt"];
548--1473[label="1;6pkt 6fpkt"];
548--1547[label="1;2pkt 2fpkt"];
548--1599[label="1;1pkt 1fpkt"];
548--1731[label="1;1pkt 1fpkt"];
548--1748[label="1;1pkt 1fpkt"];
548--1781[label="1;1pkt 1fpkt"];
548--1831[label="1;1pkt 1fpkt"];
548--1874[label="1;1pkt 1fpkt"];
548--1892[label="1;3pkt 3fpkt"];
548--1916[label="1;1pkt 1fpkt"];
548--2154[label="1;4pkt 4fpkt"];
548--2471[label="1;1pkt 1fpkt"];
548--2481[label="1;1pkt 1fpkt"];
548--2661[label="1;1pkt 1fpkt"];
548--2689[label="1;1pkt 1fpkt"];
548--2831[label="1;2pkt 2fpkt"];
548--2850[label="1;16pkt 16fpkt"];
548--2853[label="0.326087;15pkt 15fpkt"];
548--2865[label="1;1pkt 1fpkt"];
548--2906[label="1;1pkt 1fpkt"];
548--2926[label="1;1pkt 1fpkt"];
548--3033[label="1;1pkt 1fpkt"];
548--3057[label="1;1pkt 1fpkt"];
548--3077[label="0.214286;9pkt 9fpkt"];
548--3080[label="1;1pkt 1fpkt"];
548--3083[label="1;1pkt 1fpkt"];
548--3100[label="1;1pkt 1fpkt"];
548--3109[label="1;2pkt 2fpkt"];
548--3218[label="1;1pkt 1fpkt"];
548--3221[label="1;1pkt 1fpkt"];
548--3229[label="1;7pkt 7fpkt"];
548--3283[label="1;1pkt 1fpkt"];
548--3302[label="0.00913242;2pkt 2fpkt"];
548--3430[label="1;1pkt 1fpkt"];
548--3488[label="0.00121655;1pkt 1fpkt"];
548--3505[label="0.00486618;4pkt 4fpkt"];
548--3517[label="0.00121655;1pkt 1fpkt"];
548--3522[label="0.00121655;1pkt 1fpkt"];
548--3536[label="0.00121655;1pkt 1fpkt"];
548--3556[label="0.0109489;9pkt 9fpkt"];
548--3573[label="0.00121655;1pkt 1fpkt"];
548--3597[label="0.00121655;1pkt 1fpkt"];
548--3602[label="0.00121655;1pkt 1fpkt"];
548--3616[label="0.00121655;1pkt 1fpkt"];
548--3636[label="0.0109489;9pkt 9fpkt"];
548--3648[label="0.00486618;4pkt 4fpkt"];
548--3654[label="0.00121655;1pkt 1fpkt"];
548--3662[label="0.00486618;4pkt 4fpkt"];
548--3684[label="0.00121655;1pkt 1fpkt"];
548--3703[label="0.0109489;9pkt 9fpkt"];
548--4623[label="0.998783;821pkt 821fpkt"];
581--4623[label="0.125;1pkt 1fpkt"];
645--4623[label="1;1pkt 1fpkt"];
675--3218[label="1;1pkt 1fpkt"];
675--4623[label="1;1pkt 1fpkt"];
803--4623[label="1;1pkt 1fpkt"];
977--4623[label="1;1pkt 1fpkt"];
1051--3221[label="1;1pkt 1fpkt"];
1051--4623[label="1;2pkt 2fpkt"];
1054--4623[label="1;1pkt 1fpkt"];
1223--3229[label="1;7pkt 7fpkt"];
1223--4623[label="1;9pkt 9fpkt"];
1261--4623[label="1;2pkt 2fpkt"];
1272--4623[label="1;3pkt 3fpkt"];
1311--4623[label="1;2pkt 2fpkt"];
1316--4623[label="1;1pkt 1fpkt"];
1473--4623[label="1;6pkt 6fpkt"];
1547--4623[label="1;2pkt 2fpkt"];
1599--4623[label="1;1pkt 1fpkt"];
1731--4623[label="1;1pkt 1fpkt"];
1748--4623[label="1;1pkt 1fpkt"];
1781--4623[label="1;1pkt 1fpkt"];
1831--4623[label="1;1pkt 1fpkt"];
1874--4623[label="1;1pkt 1fpkt"];
1892--4623[label="1;3pkt 3fpkt"];
1916--4623[label="1;1pkt 1fpkt"];
2154--4623[label="1;4pkt 4fpkt"];
2471--4623[label="1;1pkt 1fpkt"];
2481--4623[label="1;1pkt 1fpkt"];
2661--4623[label="1;1pkt 1fpkt"];
2689--4623[label="1;1pkt 1fpkt"];
2831--4623[label="1;2pkt 2fpkt"];
2850--4623[label="1;16pkt 16fpkt"];
2865--3430[label="1;1pkt 1fpkt"];
2865--4623[label="1;1pkt 1fpkt"];
2906--4623[label="1;1pkt 1fpkt"];
2926--4623[label="1;1pkt 1fpkt"];
3033--4623[label="1;1pkt 1fpkt"];
3057--4623[label="1;1pkt 1fpkt"];
3080--4623[label="1;1pkt 1fpkt"];
3083--4623[label="1;1pkt 1fpkt"];
3100--4623[label="1;1pkt 1fpkt"];
3109--4623[label="1;2pkt 2fpkt"];
3218--4623[label="1;1pkt 1fpkt"];
3221--4623[label="1;1pkt 1fpkt"];
3229--4623[label="1;7pkt 7fpkt"];
3283--4623[label="1;1pkt 1fpkt"];
3430--4623[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.139.252.59"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
238[label="163.180.59.28;d;3pkt 3fpkt", shape=diamond, color=yellow];
558[label="0.21.85.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
6510[label="0.21.85.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.21.85.201:59047, 163.180.59.28:80}[33.3333%]&lt;BR/&gt;{0.21.88.0:46650, 163.180.59.28:80}[33.3333%]&lt;BR/&gt;{0.21.88.0:46700, 163.180.59.28:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59047: (30%)&lt;BR/&gt; 46700: (10%)&lt;BR/&gt; 46650: (10%)&gt;];
}
238--558[label="1;1pkt 1fpkt"];
238--3505[label="0.333333;1pkt 1fpkt"];
238--3648[label="0.666667;2pkt 2fpkt"];
238--3662[label="0.333333;1pkt 1fpkt"];
238--6510[label="1;1pkt 1fpkt"];
558--6510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.59.28" dst_port="80" src_ip="0.21.88.0" src_port="46700"/>
      <filter dst_ip="163.180.59.28" dst_port="80" src_ip="0.21.88.0" src_port="46650"/>
      <filter dst_ip="163.180.59.28" dst_port="80" src_ip="0.21.85.201" src_port="59047"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
291[label="218.5.40.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
580[label="133.158.216.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
3274[label="218.5.40.11;s;1pkt 1fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.5.40.11:21970, 133.158.216.73:49164}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49164: (50%)&lt;BR/&gt; 21970: (50%)&gt;];
}
291--580[label="1;1pkt 1fpkt"];
291--3274[label="1;1pkt 1fpkt"];
580--3274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.216.73" dst_port="49164" src_ip="218.5.40.11" src_port="21970"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
367[label="133.159.95.210;s;3pkt 3fpkt", shape=diamond, color=yellow];
639[label="208.206.2.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
6615[label="133.159.95.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9089[label="133.159.95.210;3pkt 3fpkt", shape=invtriangle, color=brown];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.95.210:28410, 16.59.218.6:4469}[33.3333%]&lt;BR/&gt;{133.159.95.210:1523, 208.206.2.134:9112}[33.3333%]&lt;BR/&gt;{133.159.95.210:123, 202.80.80.136:123}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (30%)&lt;BR/&gt; 9112: (20%)&lt;BR/&gt; 1523: (20%)&lt;BR/&gt; 28410: (15%)&lt;BR/&gt; 4469: (15%)&gt;];
}
367--639[label="1;1pkt 1fpkt"];
367--6615[label="1;3pkt 3fpkt"];
367--9089[label="1;3pkt 3fpkt"];
639--6615[label="1;1pkt 1fpkt"];
639--9089[label="1;1pkt 1fpkt"];
6615--9089[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="202.80.80.136" dst_port="123" src_ip="133.159.95.210" src_port="123"/>
      <filter dst_ip="208.206.2.134" dst_port="9112" src_ip="133.159.95.210" src_port="1523"/>
      <filter dst_ip="16.59.218.6" dst_port="4469" src_ip="133.159.95.210" src_port="28410"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
688[label="212.100.234.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
689[label="133.158.150.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
6583[label="133.158.150.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9068[label="133.158.150.207;1pkt 1fpkt", shape=invtriangle, color=brown];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.150.207:8277, 212.100.234.9:8292}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (50%)&lt;BR/&gt; 8277: (50%)&gt;];
}
688--689[label="1;1pkt 1fpkt"];
688--6583[label="1;1pkt 1fpkt"];
688--9068[label="1;1pkt 1fpkt"];
689--6583[label="1;1pkt 1fpkt"];
689--9068[label="1;1pkt 1fpkt"];
6583--9068[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.100.234.9" dst_port="8292" src_ip="133.158.150.207" src_port="8277"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,054,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
710[label="133.158.193.122;d;754pkt 754fpkt", shape=diamond, color=yellow];
711[label="192.66.34.211;s;788pkt 788fpkt", shape=diamond, color=yellow];
6625[label="192.66.34.211;788pkt 788fpkt", shape=pentagon, color=darkviolet];
9096[label="192.66.34.211;788pkt 788fpkt", shape=invtriangle, color=brown];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.66.34.211:443, 133.158.193.122:*}[95.6853%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3090: (0.0641437%)&lt;BR/&gt; 3089: (0.0641437%)&lt;BR/&gt; 3088: (0.0641437%)&lt;BR/&gt; 3087: (0.0641437%)&gt;];
}
710--711[label="1;754pkt 754fpkt"];
710--6625[label="1;754pkt 754fpkt"];
710--9096[label="1;754pkt 754fpkt"];
711--6625[label="1;788pkt 788fpkt"];
711--9096[label="1;788pkt 788fpkt"];
6625--9096[label="1;788pkt 788fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.193.122" src_ip="192.66.34.211" src_port="443"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
728[label="196.139.249.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
729[label="218.5.40.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
3287[label="218.5.40.48;d;1pkt 1fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.249.253:49356, 218.5.40.48:21656}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49356: (50%)&lt;BR/&gt; 21656: (50%)&gt;];
}
728--729[label="1;1pkt 1fpkt"];
728--3287[label="1;1pkt 1fpkt"];
729--3287[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.5.40.48" dst_port="21656" src_ip="196.139.249.253" src_port="49356"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45547,2.23737,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
241[label="196.139.224.96;s;2320pkt 2320fpkt", shape=diamond, color=yellow];
741[label="196.99.102.244;d;2pkt 2fpkt", shape=diamond, color=yellow];
757[label="66.36.68.212;d;7pkt 7fpkt", shape=diamond, color=yellow];
770[label="67.245.168.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
824[label="216.32.54.26;d;2pkt 2fpkt", shape=diamond, color=yellow];
825[label="220.140.85.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
837[label="216.50.144.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
839[label="217.72.17.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
853[label="221.192.85.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
863[label="67.244.72.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
1063[label="69.40.150.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
1095[label="67.88.34.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
1097[label="222.90.206.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
1151[label="67.200.14.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1205[label="216.203.8.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
1298[label="216.58.153.207;d;2pkt 2fpkt", shape=diamond, color=yellow];
1401[label="217.74.110.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
1407[label="222.237.247.88;d;5pkt 5fpkt", shape=diamond, color=yellow];
1416[label="220.132.243.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
1421[label="220.163.68.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
1482[label="220.133.42.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
1512[label="216.32.139.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
1529[label="67.228.189.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1563[label="67.91.76.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
1586[label="69.46.231.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
1605[label="217.83.202.178;d;2pkt 2fpkt", shape=diamond, color=yellow];
1610[label="222.234.145.143;d;3pkt 3fpkt", shape=diamond, color=yellow];
1614[label="221.161.58.18;d;2pkt 2fpkt", shape=diamond, color=yellow];
1635[label="196.195.144.234;d;4pkt 4fpkt", shape=diamond, color=yellow];
1735[label="66.51.160.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
1842[label="222.82.78.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
1859[label="222.33.64.222;d;4pkt 4fpkt", shape=diamond, color=yellow];
1975[label="216.60.44.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
1994[label="67.145.99.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
2042[label="221.206.35.27;d;3pkt 3fpkt", shape=diamond, color=yellow];
2046[label="220.172.95.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
2140[label="216.68.163.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
2201[label="221.166.92.2;d;5pkt 5fpkt", shape=diamond, color=yellow];
2218[label="216.3.145.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
2220[label="66.34.6.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
2223[label="220.156.128.149;d;3pkt 3fpkt", shape=diamond, color=yellow];
2238[label="222.34.235.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
2240[label="216.90.119.75;d;8pkt 8fpkt", shape=diamond, color=yellow];
2245[label="67.89.24.231;d;5pkt 5fpkt", shape=diamond, color=yellow];
2390[label="66.189.183.167;d;2pkt 2fpkt", shape=diamond, color=yellow];
2509[label="5.150.98.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
2617[label="216.68.234.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
2631[label="69.42.237.217;d;4pkt 4fpkt", shape=diamond, color=yellow];
2714[label="220.163.128.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2805[label="66.171.132.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
2826[label="67.230.19.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
2841[label="222.239.53.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
2842[label="69.40.199.232;d;5pkt 5fpkt", shape=diamond, color=yellow];
2867[label="220.152.104.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
3013[label="67.238.33.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
3017[label="68.245.208.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
3089[label="69.37.35.152;d;3pkt 3fpkt", shape=diamond, color=yellow];
3117[label="217.82.171.1;d;4pkt 4fpkt", shape=diamond, color=yellow];
3191[label="69.40.150.221;d;1pkt 1fpkt", shape=hexagon, color=black];
3265[label="222.33.64.222;d;4pkt 4fpkt", shape=hexagon, color=black];
3396[label="67.238.33.192;d;1pkt 1fpkt", shape=hexagon, color=black];
5145[label="196.139.224.96;2811pkt 2811fpkt", shape=pentagon, color=darkviolet];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.224.96:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (7.29246%)&lt;BR/&gt; 16881: (3.71287%)&lt;BR/&gt; 27580: (0.952018%)&lt;BR/&gt; 27671: (0.714014%)&lt;BR/&gt; 17995: (0.609292%)&gt;];
}
241--741[label="1;2pkt 2fpkt"];
241--757[label="0.571429;4pkt 4fpkt"];
241--770[label="1;1pkt 1fpkt"];
241--824[label="1;2pkt 2fpkt"];
241--825[label="1;1pkt 1fpkt"];
241--837[label="1;1pkt 1fpkt"];
241--839[label="1;1pkt 1fpkt"];
241--853[label="1;1pkt 1fpkt"];
241--863[label="1;1pkt 1fpkt"];
241--1063[label="1;1pkt 1fpkt"];
241--1095[label="1;2pkt 2fpkt"];
241--1097[label="1;1pkt 1fpkt"];
241--1151[label="1;1pkt 1fpkt"];
241--1205[label="1;1pkt 1fpkt"];
241--1298[label="1;2pkt 2fpkt"];
241--1401[label="1;1pkt 1fpkt"];
241--1407[label="1;5pkt 5fpkt"];
241--1416[label="1;1pkt 1fpkt"];
241--1421[label="1;1pkt 1fpkt"];
241--1482[label="1;1pkt 1fpkt"];
241--1512[label="1;1pkt 1fpkt"];
241--1529[label="1;1pkt 1fpkt"];
241--1563[label="1;1pkt 1fpkt"];
241--1586[label="1;1pkt 1fpkt"];
241--1605[label="1;2pkt 2fpkt"];
241--1610[label="1;3pkt 3fpkt"];
241--1614[label="1;2pkt 2fpkt"];
241--1635[label="1;4pkt 4fpkt"];
241--1735[label="1;1pkt 1fpkt"];
241--1842[label="1;1pkt 1fpkt"];
241--1859[label="1;4pkt 4fpkt"];
241--1975[label="1;1pkt 1fpkt"];
241--1994[label="1;1pkt 1fpkt"];
241--2042[label="1;3pkt 3fpkt"];
241--2046[label="1;1pkt 1fpkt"];
241--2140[label="1;1pkt 1fpkt"];
241--2201[label="1;5pkt 5fpkt"];
241--2218[label="1;1pkt 1fpkt"];
241--2220[label="1;1pkt 1fpkt"];
241--2223[label="1;3pkt 3fpkt"];
241--2238[label="1;1pkt 1fpkt"];
241--2240[label="1;8pkt 8fpkt"];
241--2245[label="1;5pkt 5fpkt"];
241--2390[label="1;2pkt 2fpkt"];
241--2509[label="1;1pkt 1fpkt"];
241--2617[label="1;1pkt 1fpkt"];
241--2631[label="1;4pkt 4fpkt"];
241--2714[label="1;1pkt 1fpkt"];
241--2805[label="1;1pkt 1fpkt"];
241--2826[label="1;1pkt 1fpkt"];
241--2841[label="1;1pkt 1fpkt"];
241--2842[label="1;5pkt 5fpkt"];
241--2867[label="1;1pkt 1fpkt"];
241--3013[label="1;1pkt 1fpkt"];
241--3017[label="1;3pkt 3fpkt"];
241--3089[label="1;3pkt 3fpkt"];
241--3117[label="1;4pkt 4fpkt"];
241--3191[label="1;1pkt 1fpkt"];
241--3265[label="1;4pkt 4fpkt"];
241--3396[label="1;1pkt 1fpkt"];
241--3567[label="0.000431034;1pkt 1fpkt"];
241--3645[label="0.000431034;1pkt 1fpkt"];
241--5145[label="1;2320pkt 2320fpkt"];
741--5145[label="1;2pkt 2fpkt"];
757--5145[label="1;7pkt 7fpkt"];
770--5145[label="1;1pkt 1fpkt"];
824--5145[label="1;2pkt 2fpkt"];
825--5145[label="1;1pkt 1fpkt"];
837--5145[label="1;1pkt 1fpkt"];
839--5145[label="1;1pkt 1fpkt"];
853--5145[label="1;1pkt 1fpkt"];
863--5145[label="1;1pkt 1fpkt"];
1063--3191[label="1;1pkt 1fpkt"];
1063--5145[label="1;1pkt 1fpkt"];
1095--5145[label="1;2pkt 2fpkt"];
1097--5145[label="1;1pkt 1fpkt"];
1151--5145[label="1;1pkt 1fpkt"];
1205--5145[label="1;1pkt 1fpkt"];
1298--5145[label="1;2pkt 2fpkt"];
1401--5145[label="1;1pkt 1fpkt"];
1407--5145[label="1;5pkt 5fpkt"];
1416--5145[label="1;1pkt 1fpkt"];
1421--5145[label="1;1pkt 1fpkt"];
1482--5145[label="1;1pkt 1fpkt"];
1512--5145[label="1;1pkt 1fpkt"];
1529--5145[label="1;1pkt 1fpkt"];
1563--5145[label="1;1pkt 1fpkt"];
1586--5145[label="1;1pkt 1fpkt"];
1605--5145[label="1;2pkt 2fpkt"];
1610--5145[label="1;3pkt 3fpkt"];
1614--5145[label="1;2pkt 2fpkt"];
1635--5145[label="1;4pkt 4fpkt"];
1735--5145[label="1;1pkt 1fpkt"];
1842--5145[label="1;1pkt 1fpkt"];
1859--3265[label="1;4pkt 4fpkt"];
1859--5145[label="1;4pkt 4fpkt"];
1975--5145[label="1;1pkt 1fpkt"];
1994--5145[label="1;1pkt 1fpkt"];
2042--5145[label="1;3pkt 3fpkt"];
2046--5145[label="1;1pkt 1fpkt"];
2140--5145[label="1;1pkt 1fpkt"];
2201--5145[label="1;5pkt 5fpkt"];
2218--5145[label="1;1pkt 1fpkt"];
2220--5145[label="1;1pkt 1fpkt"];
2223--5145[label="1;3pkt 3fpkt"];
2238--5145[label="1;1pkt 1fpkt"];
2240--5145[label="1;8pkt 8fpkt"];
2245--5145[label="1;5pkt 5fpkt"];
2390--5145[label="1;2pkt 2fpkt"];
2509--5145[label="1;1pkt 1fpkt"];
2617--5145[label="1;1pkt 1fpkt"];
2631--5145[label="1;4pkt 4fpkt"];
2714--5145[label="1;1pkt 1fpkt"];
2805--5145[label="1;1pkt 1fpkt"];
2826--5145[label="1;1pkt 1fpkt"];
2841--5145[label="1;1pkt 1fpkt"];
2842--5145[label="1;5pkt 5fpkt"];
2867--5145[label="1;1pkt 1fpkt"];
3013--3396[label="1;1pkt 1fpkt"];
3013--5145[label="1;1pkt 1fpkt"];
3017--5145[label="1;3pkt 3fpkt"];
3089--5145[label="1;3pkt 3fpkt"];
3117--5145[label="1;4pkt 4fpkt"];
3191--5145[label="1;1pkt 1fpkt"];
3265--5145[label="1;4pkt 4fpkt"];
3396--5145[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.139.224.96"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
794[label="200.139.120.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
795[label="131.156.108.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
3390[label="200.139.120.70;d;1pkt 1fpkt", shape=hexagon, color=black];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.108.218:1267, 200.139.120.70:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1267: (50%)&gt;];
}
794--795[label="1;1pkt 1fpkt"];
794--3390[label="1;1pkt 1fpkt"];
795--3390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.139.120.70" dst_port="8000" src_ip="131.156.108.218" src_port="1267"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
420[label="163.185.28.83;s;63pkt 63fpkt", shape=diamond, color=yellow];
815[label="123.112.54.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
4947[label="163.185.28.83;62pkt 62fpkt", shape=pentagon, color=darkviolet];
7978[label="163.185.28.83;63pkt 63fpkt", shape=invtriangle, color=brown];
10018[label="163.185.28.83;62pkt 62fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.28.83:*, *:6881}[49.2063%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (24.3028%)&lt;BR/&gt; 26914: (1.59363%)&lt;BR/&gt; 17568: (1.59363%)&lt;BR/&gt; 9504: (1.59363%)&lt;BR/&gt; 6882: (1.59363%)&gt;];
}
420--815[label="1;1pkt 1fpkt"];
420--3488[label="0.015873;1pkt 1fpkt"];
420--3573[label="0.015873;1pkt 1fpkt"];
420--3654[label="0.015873;1pkt 1fpkt"];
420--4947[label="1;62pkt 62fpkt"];
420--7978[label="1;63pkt 63fpkt"];
420--10018[label="1;62pkt 62fpkt"];
815--4947[label="1;1pkt 1fpkt"];
815--7978[label="1;1pkt 1fpkt"];
815--10018[label="1;1pkt 1fpkt"];
4947--7978[label="1;62pkt 62fpkt"];
4947--10018[label="1;62pkt 62fpkt"];
7978--10018[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="6881" src_ip="163.185.28.83"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
501[label="196.129.133.57;s;2pkt 2fpkt", shape=diamond, color=yellow];
844[label="213.149.87.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
4585[label="196.129.133.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7730[label="196.129.133.57;2pkt 2fpkt", shape=invtriangle, color=brown];
9867[label="196.129.133.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.133.57:4165, 213.149.87.5:443}[50%]&lt;BR/&gt;{196.129.133.57:4551, 213.149.87.5:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4165: (31.25%)&lt;BR/&gt; 4551: (18.75%)&gt;];
}
501--844[label="1;2pkt 2fpkt"];
501--4585[label="1;1pkt 1fpkt"];
501--7730[label="1;2pkt 2fpkt"];
501--9867[label="1;1pkt 1fpkt"];
844--4585[label="1;1pkt 1fpkt"];
844--7730[label="1;2pkt 2fpkt"];
844--9867[label="1;1pkt 1fpkt"];
4585--7730[label="1;1pkt 1fpkt"];
4585--9867[label="1;1pkt 1fpkt"];
7730--9867[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.149.87.5" dst_port="443" src_ip="196.129.133.57" src_port="4551"/>
      <filter dst_ip="213.149.87.5" dst_port="443" src_ip="196.129.133.57" src_port="4165"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134363681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
819[label="131.68.40.82;s;8pkt 8fpkt", shape=diamond, color=yellow];
878[label="213.67.177.46;d;2pkt 2fpkt", shape=diamond, color=yellow];
2255[label="213.67.177.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
3136[label="213.67.177.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
3231[label="213.67.177.46;d;2pkt 2fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.40.82:*, 213.67.177.141:1755}[50%]&lt;BR/&gt;{131.68.40.82:*, 213.67.177.46:1755}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (46.6667%)&lt;BR/&gt; 4028: (10%)&lt;BR/&gt; 3934: (10%)&lt;BR/&gt; 4085: (6.66667%)&lt;BR/&gt; 4081: (6.66667%)&gt;];
}
819--878[label="1;2pkt 2fpkt"];
819--2255[label="1;2pkt 2fpkt"];
819--3136[label="1;1pkt 1fpkt"];
819--3231[label="1;2pkt 2fpkt"];
878--3231[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.67.177.141" dst_port="1755" src_ip="131.68.40.82"/>
      <filter dst_ip="213.67.177.46" dst_port="1755" src_ip="131.68.40.82"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
900[label="66.194.178.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
978[label="0.26.86.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
979[label="163.185.225.225;s;284pkt 284fpkt", shape=diamond, color=yellow];
1516[label="6.202.84.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
2112[label="123.224.201.215;d;3pkt 3fpkt", shape=diamond, color=yellow];
6805[label="163.185.225.225;284pkt 284fpkt", shape=pentagon, color=darkviolet];
9231[label="163.185.225.225;284pkt 284fpkt", shape=invtriangle, color=brown];
10855[label="163.185.225.225;284pkt 284fpkt", shape=invhouse, color=bisque];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.225.225:*, *:6881}[28.8732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (14.3608%)&lt;BR/&gt; 80: (6.65499%)&lt;BR/&gt; 20670: (1.22592%)&lt;BR/&gt; 17666: (1.22592%)&lt;BR/&gt; 6889: (1.22592%)&gt;];
}
900--979[label="1;1pkt 1fpkt"];
900--6805[label="1;1pkt 1fpkt"];
900--9231[label="1;1pkt 1fpkt"];
900--10855[label="1;1pkt 1fpkt"];
978--979[label="1;1pkt 1fpkt"];
978--6805[label="1;1pkt 1fpkt"];
978--9231[label="1;1pkt 1fpkt"];
978--10855[label="1;1pkt 1fpkt"];
979--1516[label="1;1pkt 1fpkt"];
979--2112[label="1;3pkt 3fpkt"];
979--2632[label="0.0454545;1pkt 1fpkt"];
979--3482[label="0.00352113;1pkt 1fpkt"];
979--3488[label="0.00352113;1pkt 1fpkt"];
979--3505[label="0.0140845;4pkt 4fpkt"];
979--3510[label="0.0140845;4pkt 4fpkt"];
979--3520[label="0.0140845;4pkt 4fpkt"];
979--3566[label="0.00352113;1pkt 1fpkt"];
979--3573[label="0.00352113;1pkt 1fpkt"];
979--3591[label="0.0140845;4pkt 4fpkt"];
979--3600[label="0.0140845;4pkt 4fpkt"];
979--3644[label="0.00352113;1pkt 1fpkt"];
979--3648[label="0.0140845;4pkt 4fpkt"];
979--3654[label="0.00352113;1pkt 1fpkt"];
979--3662[label="0.0140845;4pkt 4fpkt"];
979--3668[label="0.0140845;4pkt 4fpkt"];
979--6805[label="1;284pkt 284fpkt"];
979--9231[label="1;284pkt 284fpkt"];
979--10855[label="1;284pkt 284fpkt"];
1516--6805[label="1;1pkt 1fpkt"];
1516--9231[label="1;1pkt 1fpkt"];
1516--10855[label="1;1pkt 1fpkt"];
2112--6805[label="1;3pkt 3fpkt"];
2112--9231[label="1;3pkt 3fpkt"];
2112--10855[label="1;3pkt 3fpkt"];
6805--9231[label="1;284pkt 284fpkt"];
6805--10855[label="1;284pkt 284fpkt"];
9231--10855[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter dst_port="6881" src_ip="163.185.225.225"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
554[label="221.234.215.160;s;2pkt 2fpkt", shape=diamond, color=yellow];
940[label="151.251.24.0;d;5pkt 5fpkt", shape=diamond, color=yellow];
6015[label="221.234.215.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8682[label="221.234.215.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.119:1863, 151.251.24.0:3018}[20%]&lt;BR/&gt;{221.234.215.160:33705, 151.251.24.0:29912}[20%]&lt;BR/&gt;{221.234.215.160:36357, 151.251.24.0:23232}[20%]&lt;BR/&gt;{192.106.194.233:1863, 151.251.24.0:4662}[20%]&lt;BR/&gt;{192.106.194.233:1863, 151.251.24.0:4663}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33705: (20%)&lt;BR/&gt; 29912: (20%)&lt;BR/&gt; 36357: (15%)&lt;BR/&gt; 23232: (15%)&lt;BR/&gt; 1863: (15%)&gt;];
}
554--940[label="1;2pkt 2fpkt"];
554--6015[label="1;2pkt 2fpkt"];
554--8682[label="1;1pkt 1fpkt"];
940--6015[label="1;2pkt 2fpkt"];
940--8682[label="1;1pkt 1fpkt"];
6015--8682[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.24.0" dst_port="4663" src_ip="192.106.194.233" src_port="1863"/>
      <filter dst_ip="151.251.24.0" dst_port="4662" src_ip="192.106.194.233" src_port="1863"/>
      <filter dst_ip="151.251.24.0" dst_port="23232" src_ip="221.234.215.160" src_port="36357"/>
      <filter dst_ip="151.251.24.0" dst_port="29912" src_ip="221.234.215.160" src_port="33705"/>
      <filter dst_ip="151.251.24.0" dst_port="3018" src_ip="192.106.194.119" src_port="1863"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
560[label="163.180.71.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
946[label="218.5.40.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
4481[label="218.5.40.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.5.40.50:21466, 163.180.71.239:50689}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50689: (50%)&lt;BR/&gt; 21466: (50%)&gt;];
}
560--946[label="1;1pkt 1fpkt"];
560--4481[label="1;1pkt 1fpkt"];
946--4481[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.71.239" dst_port="50689" src_ip="218.5.40.50" src_port="21466"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.834962,2.18111,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
575[label="218.206.162.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
952[label="163.180.157.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
6298[label="163.180.157.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10622[label="163.180.157.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.157.181:1068, 218.206.162.217:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1068: (50%)&gt;];
}
575--952[label="1;1pkt 1fpkt"];
575--6298[label="1;1pkt 1fpkt"];
575--10622[label="1;1pkt 1fpkt"];
952--6298[label="1;1pkt 1fpkt"];
952--10622[label="1;1pkt 1fpkt"];
6298--10622[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.206.162.217" dst_port="8000" src_ip="163.180.157.181" src_port="1068"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
970[label="195.18.80.186;d;257pkt 257fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 195.18.80.186:0}[99.6109%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6109%)&lt;BR/&gt; 10531: (0.194553%)&lt;BR/&gt; 53: (0.194553%)&gt;];
}
970--3157[label="0.00389105;1pkt 1fpkt"];
970--3450[label="0.00389105;1pkt 1fpkt"];
970--5221[label="0.00389105;1pkt 1fpkt"];
970--8166[label="0.00389105;1pkt 1fpkt"];
970--10139[label="0.00389105;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.18.80.186"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89991,2.19428,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
439[label="17.20.218.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
1071[label="133.158.150.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
8636[label="133.158.150.154;1pkt 1fpkt", shape=invtriangle, color=brown];
10451[label="133.158.150.154;1pkt 1fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.150.154:1102, 17.20.218.194:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1102: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
439--1071[label="1;1pkt 1fpkt"];
439--8636[label="1;1pkt 1fpkt"];
439--10451[label="1;1pkt 1fpkt"];
1071--8636[label="1;1pkt 1fpkt"];
1071--10451[label="1;1pkt 1fpkt"];
8636--10451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.20.218.194" dst_port="554" src_ip="133.158.150.154" src_port="1102"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
441[label="133.158.35.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
1075[label="209.23.165.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.35.142:49293, 209.23.165.41:8100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49293: (50%)&lt;BR/&gt; 8100: (50%)&gt;];
}
441--1075[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.23.165.41" dst_port="8100" src_ip="133.158.35.142" src_port="49293"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
734[label="163.180.24.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1099[label="222.17.227.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.24.232:1192, 222.17.227.26:11008}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11008: (50%)&lt;BR/&gt; 1192: (50%)&gt;];
}
734--1099[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.17.227.26" dst_port="11008" src_ip="163.180.24.232" src_port="1192"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
751[label="163.185.53.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
1106[label="222.17.9.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.53.93:62665, 222.17.9.107:6650}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62665: (50%)&lt;BR/&gt; 6650: (50%)&gt;];
}
751--1106[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.17.9.107" dst_port="6650" src_ip="163.185.53.93" src_port="62665"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
469[label="133.159.153.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1108[label="196.81.227.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
3738[label="133.159.153.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7159[label="133.159.153.1;1pkt 1fpkt", shape=invtriangle, color=brown];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.153.1:33476, 196.81.227.131:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33476: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
469--1108[label="1;1pkt 1fpkt"];
469--3738[label="1;1pkt 1fpkt"];
469--7159[label="1;1pkt 1fpkt"];
1108--3738[label="1;1pkt 1fpkt"];
1108--7159[label="1;1pkt 1fpkt"];
3738--7159[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.81.227.131" dst_port="554" src_ip="133.159.153.1" src_port="33476"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.115.137.71"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364240" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
938[label="160.137.29.235;d;6pkt 6fpkt", shape=diamond, color=yellow];
1341[label="65.71.158.25;s;6pkt 6fpkt", shape=diamond, color=yellow];
4134[label="65.71.158.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7422[label="65.71.158.25;2pkt 2fpkt", shape=invtriangle, color=brown];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.71.158.25:*, 160.137.29.235:6970}[50%]&lt;BR/&gt;{65.71.158.25:554, 160.137.29.235:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (26.6667%)&lt;BR/&gt; 554: (23.3333%)&lt;BR/&gt; 13106: (13.3333%)&lt;BR/&gt; 2426: (10%)&lt;BR/&gt; 29288: (6.66667%)&gt;];
}
938--1341[label="1;6pkt 6fpkt"];
938--4134[label="1;1pkt 1fpkt"];
938--7422[label="1;2pkt 2fpkt"];
1341--4134[label="1;1pkt 1fpkt"];
1341--7422[label="1;2pkt 2fpkt"];
4134--7422[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.137.29.235" src_ip="65.71.158.25" src_port="554"/>
      <filter dst_ip="160.137.29.235" dst_port="6970" src_ip="65.71.158.25"/>
    </slice>
    <from sec="1134363783" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
4355[label="163.185.245.40;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.245.40:*, 218.69.148.167:80}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32908: (2.5%)&lt;BR/&gt; 32907: (2.5%)&lt;BR/&gt; 32906: (2.5%)&lt;BR/&gt; 32905: (2.5%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="218.69.148.167" dst_port="80" src_ip="163.185.245.40"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134363821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89991,2.19428,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
473[label="2.41.203.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
1470[label="133.159.162.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
8207[label="133.159.162.105;1pkt 1fpkt", shape=invtriangle, color=brown];
10167[label="133.159.162.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.162.105:53644, 2.41.203.46:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53644: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
473--1470[label="1;1pkt 1fpkt"];
473--8207[label="1;1pkt 1fpkt"];
473--10167[label="1;1pkt 1fpkt"];
1470--8207[label="1;1pkt 1fpkt"];
1470--10167[label="1;1pkt 1fpkt"];
8207--10167[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.41.203.46" dst_port="8080" src_ip="133.159.162.105" src_port="53644"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817503,2.22729,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1219[label="133.159.223.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
1558[label="131.15.153.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
7801[label="133.159.223.65;1pkt 1fpkt", shape=invtriangle, color=brown];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.223.65:514, 131.15.153.240:514}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 514: (100%)&gt;];
}
1219--1558[label="1;1pkt 1fpkt"];
1219--7801[label="1;1pkt 1fpkt"];
1558--7801[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.15.153.240" dst_port="514" src_ip="133.159.223.65" src_port="514"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.99.212.11"/>
      <from sec="1134363623" usec="0"/>
      <to sec="1134363916" usec="0"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134363916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1414[label="163.185.224.88;s;36pkt 36fpkt", shape=diamond, color=yellow];
1647[label="208.160.102.222;d;4pkt 4fpkt", shape=diamond, color=yellow];
5025[label="163.185.224.88;37pkt 37fpkt", shape=pentagon, color=darkviolet];
8027[label="163.185.224.88;36pkt 36fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.224.88:*, 203.176.194.209:80}[59.4595%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6726%)&lt;BR/&gt; 3330: (1.76991%)&lt;BR/&gt; 3328: (1.76991%)&lt;BR/&gt; 3325: (1.76991%)&lt;BR/&gt; 3321: (1.32743%)&gt;];
}
1414--1647[label="1;4pkt 4fpkt"];
1414--3488[label="0.0277778;1pkt 1fpkt"];
1414--3505[label="0.0833333;3pkt 3fpkt"];
1414--3510[label="0.0277778;1pkt 1fpkt"];
1414--3573[label="0.0277778;1pkt 1fpkt"];
1414--3591[label="0.0277778;1pkt 1fpkt"];
1414--3648[label="0.0833333;3pkt 3fpkt"];
1414--3654[label="0.0277778;1pkt 1fpkt"];
1414--3662[label="0.0833333;3pkt 3fpkt"];
1414--5025[label="1;36pkt 36fpkt"];
1414--8027[label="0.972222;35pkt 35fpkt"];
1647--3510[label="0.25;1pkt 1fpkt"];
1647--3591[label="0.25;1pkt 1fpkt"];
1647--5025[label="1;4pkt 4fpkt"];
1647--8027[label="0.75;3pkt 3fpkt"];
5025--8027[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="203.176.194.209" dst_port="80" src_ip="163.185.224.88"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
1686[label="197.99.208.131;d;402pkt 402fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.99.208.131:37602}[96.0199%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37602: (48.01%)&lt;BR/&gt; 443: (1.1194%)&lt;BR/&gt; 80: (0.746269%)&lt;BR/&gt; 16271: (0.248756%)&lt;BR/&gt; 1937: (0.248756%)&gt;];
}
1686--3510[label="0.00248756;1pkt 1fpkt"];
1686--3513[label="0.00248756;1pkt 1fpkt"];
1686--3534[label="0.00248756;1pkt 1fpkt"];
1686--3556[label="0.00497512;2pkt 2fpkt"];
1686--3591[label="0.00248756;1pkt 1fpkt"];
1686--3614[label="0.00248756;1pkt 1fpkt"];
1686--3636[label="0.00497512;2pkt 2fpkt"];
1686--3682[label="0.00248756;1pkt 1fpkt"];
1686--3703[label="0.00497512;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.208.131" dst_port="37602"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
1749[label="214.149.45.109;d;357pkt 357fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 214.149.45.109:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1749--2007[label="0.00454545;1pkt 1fpkt"];
1749--2176[label="0.00549451;1pkt 1fpkt"];
1749--2433[label="0.00636943;1pkt 1fpkt"];
1749--3174[label="0.00515464;1pkt 1fpkt"];
1749--3184[label="0.00423729;1pkt 1fpkt"];
1749--3276[label="0.00411523;1pkt 1fpkt"];
1749--3288[label="0.00280112;1pkt 1fpkt"];
1749--4087[label="0.0105263;1pkt 1fpkt"];
1749--4240[label="0.00833333;1pkt 1fpkt"];
1749--4457[label="0.00280112;1pkt 1fpkt"];
1749--4760[label="0.00423729;1pkt 1fpkt"];
1749--4992[label="0.00485437;1pkt 1fpkt"];
1749--5366[label="0.00502513;1pkt 1fpkt"];
1749--6010[label="0.00595238;1pkt 1fpkt"];
1749--6038[label="0.0031746;1pkt 1fpkt"];
1749--6077[label="0.00330033;1pkt 1fpkt"];
1749--7486[label="0.00840336;1pkt 1fpkt"];
1749--7641[label="0.00280112;1pkt 1fpkt"];
1749--7846[label="0.00425532;1pkt 1fpkt"];
1749--8005[label="0.00485437;1pkt 1fpkt"];
1749--8257[label="0.005;1pkt 1fpkt"];
1749--8679[label="0.00591716;1pkt 1fpkt"];
1749--8722[label="0.00330033;1pkt 1fpkt"];
1749--9715[label="0.00833333;1pkt 1fpkt"];
1749--9811[label="0.00280112;1pkt 1fpkt"];
1749--10198[label="0.00502513;1pkt 1fpkt"];
1749--10515[label="0.00330033;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.149.45.109"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.198.214.203"/>
      <from sec="1134363602" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.99.217.161"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364429" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
1983[label="6.96.83.140;d;308pkt 308fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 6.96.83.140:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1983--2176[label="0.00549451;1pkt 1fpkt"];
1983--2427[label="0.00787402;1pkt 1fpkt"];
1983--2433[label="0.00636943;1pkt 1fpkt"];
1983--3174[label="0.00515464;1pkt 1fpkt"];
1983--3184[label="0.00423729;1pkt 1fpkt"];
1983--3276[label="0.00411523;1pkt 1fpkt"];
1983--3288[label="0.00324675;1pkt 1fpkt"];
1983--4087[label="0.0105263;1pkt 1fpkt"];
1983--4240[label="0.00833333;1pkt 1fpkt"];
1983--4457[label="0.00324675;1pkt 1fpkt"];
1983--4498[label="0.00324675;1pkt 1fpkt"];
1983--4992[label="0.00485437;1pkt 1fpkt"];
1983--5366[label="0.00502513;1pkt 1fpkt"];
1983--6038[label="0.00324675;1pkt 1fpkt"];
1983--6077[label="0.00330033;1pkt 1fpkt"];
1983--6302[label="0.00502513;1pkt 1fpkt"];
1983--7486[label="0.00840336;1pkt 1fpkt"];
1983--7641[label="0.00324675;1pkt 1fpkt"];
1983--8005[label="0.00485437;1pkt 1fpkt"];
1983--8257[label="0.005;1pkt 1fpkt"];
1983--8722[label="0.00330033;1pkt 1fpkt"];
1983--9715[label="0.00833333;1pkt 1fpkt"];
1983--9811[label="0.00324675;1pkt 1fpkt"];
1983--10198[label="0.00502513;1pkt 1fpkt"];
1983--10515[label="0.00330033;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.96.83.140"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.251.140.157"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364429" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
842[label="197.99.218.99;d;5pkt 5fpkt", shape=diamond, color=yellow];
2124[label="215.156.129.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.49.58.73:54724, 197.99.218.99:25}[20%]&lt;BR/&gt;{64.239.61.101:2633, 197.99.218.99:25}[20%]&lt;BR/&gt;{65.74.139.109:3209, 197.99.218.99:25}[20%]&lt;BR/&gt;{209.192.163.144:8181, 197.99.218.99:25}[20%]&lt;BR/&gt;{215.156.129.234:1105, 197.99.218.99:58763}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 58763: (16.6667%)&lt;BR/&gt; 1105: (16.6667%)&lt;BR/&gt; 54724: (8.33333%)&lt;BR/&gt; 8181: (8.33333%)&gt;];
}
842--2124[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.218.99" dst_port="58763" src_ip="215.156.129.234" src_port="1105"/>
      <filter dst_ip="197.99.218.99" dst_port="25" src_ip="209.192.163.144" src_port="8181"/>
      <filter dst_ip="197.99.218.99" dst_port="25" src_ip="65.74.139.109" src_port="3209"/>
      <filter dst_ip="197.99.218.99" dst_port="25" src_ip="64.239.61.101" src_port="2633"/>
      <filter dst_ip="197.99.218.99" dst_port="25" src_ip="154.49.58.73" src_port="54724"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
4181[label="133.158.141.29;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.29:*, 215.14.108.22:80}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1337: (1.72414%)&lt;BR/&gt; 1336: (1.72414%)&lt;BR/&gt; 1335: (1.72414%)&lt;BR/&gt; 1333: (1.72414%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="215.14.108.22" dst_port="80" src_ip="133.158.141.29"/>
    </slice>
    <from sec="1134364324" usec="0"/>
    <to sec="1134364447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.26.42.255"/>
      <from sec="1134363854" usec="0"/>
      <to sec="1134364429" usec="0"/>
    </slice>
    <from sec="1134363854" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.26.42.255"/>
      <from sec="1134363854" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134363854" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34146,2.20123,020,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
132[label="216.77.213.74d;126pkt 126fpkt", shape=rectangle, color=red];
2253[label="216.77.213.74;d;254pkt 254fpkt", shape=diamond, color=yellow];
6469[label="151.133.254.196;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 216.77.213.74:0}[95.4887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9466%)&lt;BR/&gt; 80: (1.52672%)&lt;BR/&gt; 57851: (0.127226%)&lt;BR/&gt; 55161: (0.127226%)&lt;BR/&gt; 51226: (0.127226%)&gt;];
}
132--2253[label="1;126pkt 126fpkt"];
132--2787[label="0.00793651;1pkt 1fpkt"];
2253--2787[label="0.00719424;1pkt 1fpkt"];
2253--6469[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.77.213.74"/>
    </slice>
    <from sec="1134363661" usec="0"/>
    <to sec="1134364456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
2278[label="64.46.36.203;d;6pkt 6fpkt", shape=diamond, color=yellow];
2279[label="197.99.221.90;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.221.90:*, 64.46.36.203:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33577: (8.33333%)&lt;BR/&gt; 33576: (8.33333%)&lt;BR/&gt; 33575: (8.33333%)&lt;BR/&gt; 33574: (8.33333%)&gt;];
}
2278--2279[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="64.46.36.203" dst_port="80" src_ip="197.99.221.90"/>
    </slice>
    <from sec="1134363985" usec="0"/>
    <to sec="1134364208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
1961[label="2.165.3.144;d;79pkt 79fpkt", shape=diamond, color=yellow];
2285[label="133.158.216.24;s;79pkt 79fpkt", shape=diamond, color=yellow];
4124[label="133.158.216.24;79pkt 79fpkt", shape=pentagon, color=darkviolet];
7415[label="133.158.216.24;79pkt 79fpkt", shape=invtriangle, color=brown];
9668[label="133.158.216.24;78pkt 78fpkt", shape=invhouse, color=bisque];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.216.24:*, 2.165.3.144:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49461: (0.634518%)&lt;BR/&gt; 49460: (0.634518%)&lt;BR/&gt; 49459: (0.634518%)&lt;BR/&gt; 49458: (0.634518%)&gt;];
}
1961--2285[label="1;79pkt 79fpkt"];
1961--4124[label="1;79pkt 79fpkt"];
1961--7415[label="1;79pkt 79fpkt"];
1961--9668[label="1;78pkt 78fpkt"];
2285--4124[label="1;79pkt 79fpkt"];
2285--7415[label="1;79pkt 79fpkt"];
2285--9668[label="1;78pkt 78fpkt"];
4124--7415[label="1;79pkt 79fpkt"];
4124--9668[label="1;78pkt 78fpkt"];
7415--9668[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="2.165.3.144" dst_port="80" src_ip="133.158.216.24"/>
    </slice>
    <from sec="1134364018" usec="0"/>
    <to sec="1134364227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34146,2.20123,010,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
85[label="67.147.2.31s;951pkt 951fpkt", shape=rectangle, color=red];
2289[label="67.147.2.31;s;1014pkt 1014fpkt", shape=diamond, color=yellow];
4196[label="67.147.2.31;1014pkt 1014fpkt", shape=pentagon, color=darkviolet];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.147.2.31:*, *:445}[50.0986%]&lt;BR/&gt;{67.147.2.31:*, *:139}[49.9014%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.4783%)&lt;BR/&gt; 445: (24.5217%)&lt;BR/&gt; 2141: (0.134273%)&lt;BR/&gt; 3909: (0.100705%)&lt;BR/&gt; 3903: (0.100705%)&gt;];
}
85--214[label="0.0121951;2pkt 2fpkt"];
85--2289[label="1;951pkt 951fpkt"];
85--4196[label="1;951pkt 951fpkt"];
2289--4196[label="1;1014pkt 1014fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="67.147.2.31"/>
      <filter dst_port="139" src_ip="67.147.2.31"/>
    </slice>
    <from sec="1134364044" usec="0"/>
    <to sec="1134364130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37138,2.25836,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
110[label="67.207.67.175s;124pkt 124fpkt", shape=rectangle, color=red];
2314[label="67.207.67.175;s;647pkt 647fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.207.67.175:*, *:139}[54.2504%]&lt;BR/&gt;{67.207.67.175:*, *:445}[45.7496%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (30.8042%)&lt;BR/&gt; 445: (19.1958%)&lt;BR/&gt; 43023: (0.129702%)&lt;BR/&gt; 43021: (0.129702%)&lt;BR/&gt; 43018: (0.129702%)&gt;];
}
110--2314[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="67.207.67.175"/>
      <filter dst_port="445" src_ip="67.207.67.175"/>
    </slice>
    <from sec="1134364131" usec="0"/>
    <to sec="1134364267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
1980[label="221.60.176.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
2325[label="131.68.198.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
3989[label="131.68.198.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7327[label="131.68.198.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.198.16:1109, 221.60.176.68:12320}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12320: (50%)&lt;BR/&gt; 1109: (50%)&gt;];
}
1980--2325[label="1;1pkt 1fpkt"];
1980--3989[label="1;1pkt 1fpkt"];
1980--7327[label="1;1pkt 1fpkt"];
2325--3989[label="1;1pkt 1fpkt"];
2325--7327[label="1;1pkt 1fpkt"];
3989--7327[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.60.176.68" dst_port="12320" src_ip="131.68.198.16" src_port="1109"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
2334[label="217.91.36.0;d;249pkt 249fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.91.36.0:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2334--2427[label="0.00787402;1pkt 1fpkt"];
2334--2433[label="0.00636943;1pkt 1fpkt"];
2334--3174[label="0.00515464;1pkt 1fpkt"];
2334--3184[label="0.00423729;1pkt 1fpkt"];
2334--3276[label="0.00411523;1pkt 1fpkt"];
2334--4087[label="0.0105263;1pkt 1fpkt"];
2334--4240[label="0.00833333;1pkt 1fpkt"];
2334--4498[label="0.00401606;1pkt 1fpkt"];
2334--4992[label="0.00485437;1pkt 1fpkt"];
2334--5366[label="0.00502513;1pkt 1fpkt"];
2334--6010[label="0.00595238;1pkt 1fpkt"];
2334--6038[label="0.00401606;1pkt 1fpkt"];
2334--6077[label="0.00401606;1pkt 1fpkt"];
2334--6302[label="0.00502513;1pkt 1fpkt"];
2334--7486[label="0.00840336;1pkt 1fpkt"];
2334--8005[label="0.00485437;1pkt 1fpkt"];
2334--8257[label="0.005;1pkt 1fpkt"];
2334--8679[label="0.00591716;1pkt 1fpkt"];
2334--8722[label="0.00401606;1pkt 1fpkt"];
2334--9715[label="0.00833333;1pkt 1fpkt"];
2334--10198[label="0.00502513;1pkt 1fpkt"];
2334--10515[label="0.00401606;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.91.36.0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,004,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1431[label="216.41.35.229;d;259pkt 259fpkt", shape=diamond, color=yellow];
2346[label="197.99.213.201;s;261pkt 261fpkt", shape=diamond, color=yellow];
6516[label="197.99.213.201;260pkt 260fpkt", shape=pentagon, color=darkviolet];
9029[label="197.99.213.201;260pkt 260fpkt", shape=invtriangle, color=brown];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.213.201:139, 216.41.35.229:*}[49.8084%]&lt;BR/&gt;{197.99.213.201:445, 216.41.35.229:*}[49.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 445: (24.7115%)&lt;BR/&gt; 0: (0.576923%)&lt;BR/&gt; 64384: (0.192308%)&lt;BR/&gt; 64226: (0.192308%)&gt;];
}
1431--2346[label="1;259pkt 259fpkt"];
1431--6516[label="0.996139;258pkt 258fpkt"];
1431--9029[label="0.996139;258pkt 258fpkt"];
2346--6516[label="1;260pkt 260fpkt"];
2346--9029[label="1;260pkt 260fpkt"];
6516--9029[label="1;260pkt 260fpkt"];
</description>
    <slice>
      <filter dst_ip="216.41.35.229" src_ip="197.99.213.201" src_port="139"/>
      <filter dst_ip="216.41.35.229" src_ip="197.99.213.201" src_port="445"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="131.68.11.75"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364249" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="222.238.46.23"/>
      <from sec="1134363602" usec="0"/>
      <to sec="1134364428" usec="0"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.72.116.124"/>
      <from sec="1134363602" usec="0"/>
      <to sec="1134364424" usec="0"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
2284[label="133.158.216.24;d;78pkt 78fpkt", shape=diamond, color=yellow];
2568[label="2.165.3.144;s;78pkt 78fpkt", shape=diamond, color=yellow];
5812[label="2.165.3.144;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.165.3.144:80, 133.158.216.24:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49461: (0.641026%)&lt;BR/&gt; 49460: (0.641026%)&lt;BR/&gt; 49459: (0.641026%)&lt;BR/&gt; 49458: (0.641026%)&gt;];
}
2284--2568[label="1;78pkt 78fpkt"];
2284--5812[label="1;78pkt 78fpkt"];
2568--5812[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.216.24" src_ip="2.165.3.144" src_port="80"/>
    </slice>
    <from sec="1134364018" usec="0"/>
    <to sec="1134364227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
2556[label="133.159.170.130;s;23pkt 23fpkt", shape=diamond, color=yellow];
2569[label="208.131.7.107;d;22pkt 22fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.170.130:*, 208.131.7.107:80}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8889%)&lt;BR/&gt; 64080: (2.22222%)&lt;BR/&gt; 64041: (2.22222%)&lt;BR/&gt; 63917: (2.22222%)&lt;BR/&gt; 63780: (2.22222%)&gt;];
}
2556--2569[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="208.131.7.107" dst_port="80" src_ip="133.159.170.130"/>
    </slice>
    <from sec="1134363931" usec="0"/>
    <to sec="1134364232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
2417[label="131.68.40.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
2588[label="5.98.61.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.98.61.252:554, 131.68.40.82:4083}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4083: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
2417--2588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.40.82" dst_port="4083" src_ip="5.98.61.252" src_port="554"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40447,2.12186,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
61[label="220.150.138.164s;904pkt 904fpkt", shape=rectangle, color=red];
2591[label="220.150.138.164;s;537pkt 537fpkt", shape=diamond, color=yellow];
6078[label="220.150.138.164;1062pkt 1062fpkt", shape=pentagon, color=darkviolet];
8723[label="220.150.138.164;1061pkt 1061fpkt", shape=invtriangle, color=brown];
10516[label="220.150.138.164;1062pkt 1062fpkt", shape=invhouse, color=bisque];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.150.138.164:44360, *:1026}[99.9058%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44360: (49.9676%)&lt;BR/&gt; 1026: (49.9676%)&lt;BR/&gt; 0: (0.0648508%)&gt;];
}
61--1154[label="0.004;1pkt 1fpkt"];
61--2591[label="1;537pkt 537fpkt"];
61--2662[label="0.00207469;1pkt 1fpkt"];
61--6078[label="1;904pkt 904fpkt"];
61--8723[label="0.998894;903pkt 903fpkt"];
61--10516[label="1;904pkt 904fpkt"];
2591--6078[label="1;537pkt 537fpkt"];
2591--8723[label="1;537pkt 537fpkt"];
2591--10516[label="1;537pkt 537fpkt"];
6078--8723[label="1;1061pkt 1061fpkt"];
6078--10516[label="1;1062pkt 1062fpkt"];
8723--10516[label="1;1061pkt 1061fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.150.138.164" src_port="44360"/>
    </slice>
    <from sec="1134363767" usec="0"/>
    <to sec="1134364408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40447,2.12186,010,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
106[label="197.151.85.151s;224pkt 224fpkt", shape=rectangle, color=red];
2600[label="197.151.85.151;s;255pkt 255fpkt", shape=diamond, color=yellow];
5913[label="197.151.85.151;255pkt 255fpkt", shape=pentagon, color=darkviolet];
8618[label="197.151.85.151;254pkt 254fpkt", shape=invtriangle, color=brown];
10440[label="197.151.85.151;255pkt 255fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.151.85.151:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4212: (0.201126%)&lt;BR/&gt; 4211: (0.201126%)&lt;BR/&gt; 4210: (0.201126%)&lt;BR/&gt; 4209: (0.201126%)&gt;];
}
106--2600[label="1;224pkt 224fpkt"];
106--5913[label="1;224pkt 224fpkt"];
106--8618[label="0.995536;223pkt 223fpkt"];
106--10440[label="1;224pkt 224fpkt"];
2600--5913[label="1;255pkt 255fpkt"];
2600--8618[label="1;254pkt 254fpkt"];
2600--10440[label="1;255pkt 255fpkt"];
5913--8618[label="1;254pkt 254fpkt"];
5913--10440[label="1;255pkt 255fpkt"];
8618--10440[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="197.151.85.151"/>
    </slice>
    <from sec="1134364141" usec="0"/>
    <to sec="1134364188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
2496[label="151.251.215.177;d;4pkt 4fpkt", shape=diamond, color=yellow];
2605[label="214.58.18.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.117:1863, 151.251.215.177:4752}[25%]&lt;BR/&gt;{214.58.18.123:1935, 151.251.215.177:19101}[25%]&lt;BR/&gt;{192.106.194.139:1863, 151.251.215.177:3886}[25%]&lt;BR/&gt;{192.106.194.145:1863, 151.251.215.177:4094}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (30%)&lt;BR/&gt; 19101: (20%)&lt;BR/&gt; 1935: (20%)&lt;BR/&gt; 4752: (10%)&lt;BR/&gt; 4094: (10%)&gt;];
}
2496--2605[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.215.177" dst_port="4094" src_ip="192.106.194.145" src_port="1863"/>
      <filter dst_ip="151.251.215.177" dst_port="3886" src_ip="192.106.194.139" src_port="1863"/>
      <filter dst_ip="151.251.215.177" dst_port="19101" src_ip="214.58.18.123" src_port="1935"/>
      <filter dst_ip="151.251.215.177" dst_port="4752" src_ip="192.106.194.117" src_port="1863"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.117.9.82"/>
      <from sec="1134363601" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.6.73.31"/>
      <from sec="1134363602" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.137.48.135"/>
      <from sec="1134363619" usec="0"/>
      <to sec="1134364428" usec="0"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="67.159.57.224"/>
      <from sec="1134363903" usec="0"/>
      <to sec="1134364423" usec="0"/>
    </slice>
    <from sec="1134363903" usec="0"/>
    <to sec="1134364423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.70.59.137"/>
      <from sec="1134364109" usec="0"/>
      <to sec="1134364339" usec="0"/>
    </slice>
    <from sec="1134364109" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.15.104.28"/>
      <from sec="1134364292" usec="0"/>
      <to sec="1134364326" usec="0"/>
    </slice>
    <from sec="1134364292" usec="0"/>
    <to sec="1134364326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.70.59.137"/>
      <from sec="1134364109" usec="0"/>
      <to sec="1134364413" usec="0"/>
    </slice>
    <from sec="1134364109" usec="0"/>
    <to sec="1134364413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40447,2.12186,010,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
105[label="222.128.141.149s;123pkt 123fpkt", shape=rectangle, color=red];
3146[label="222.128.141.149;s;462pkt 462fpkt", shape=diamond, color=yellow];
5892[label="222.128.141.149;461pkt 461fpkt", shape=pentagon, color=darkviolet];
8603[label="222.128.141.149;461pkt 461fpkt", shape=invtriangle, color=brown];
10427[label="222.128.141.149;461pkt 461fpkt", shape=invhouse, color=bisque];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.128.141.149:*, *:139}[53.8961%]&lt;BR/&gt;{222.128.141.149:*, *:445}[46.1039%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (28.3537%)&lt;BR/&gt; 445: (21.6463%)&lt;BR/&gt; 3479: (0.228659%)&lt;BR/&gt; 3473: (0.228659%)&lt;BR/&gt; 3467: (0.228659%)&gt;];
}
105--3146[label="1;123pkt 123fpkt"];
105--5892[label="1;123pkt 123fpkt"];
105--8603[label="1;123pkt 123fpkt"];
105--10427[label="1;123pkt 123fpkt"];
3146--5892[label="1;461pkt 461fpkt"];
3146--8603[label="1;461pkt 461fpkt"];
3146--10427[label="1;461pkt 461fpkt"];
5892--8603[label="1;461pkt 461fpkt"];
5892--10427[label="1;461pkt 461fpkt"];
8603--10427[label="1;461pkt 461fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="222.128.141.149"/>
      <filter dst_port="445" src_ip="222.128.141.149"/>
    </slice>
    <from sec="1134364328" usec="0"/>
    <to sec="1134364373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40447,2.12186,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
4[label="133.158.9.12s;1pkt 1fpkt", shape=rectangle, color=red];
3148[label="213.79.223.233;d;6pkt 6fpkt", shape=diamond, color=yellow];
3918[label="133.158.9.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7289[label="133.158.9.12;1pkt 1fpkt", shape=invtriangle, color=brown];
9589[label="133.158.9.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.9.12:*, 213.79.223.233:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1680: (25%)&lt;BR/&gt; 1697: (5%)&lt;BR/&gt; 1678: (5%)&lt;BR/&gt; 1677: (5%)&gt;];
}
4--3148[label="1;1pkt 1fpkt"];
4--3918[label="1;1pkt 1fpkt"];
4--7289[label="1;1pkt 1fpkt"];
4--9589[label="1;1pkt 1fpkt"];
3148--3918[label="1;1pkt 1fpkt"];
3148--7289[label="1;1pkt 1fpkt"];
3148--9589[label="1;1pkt 1fpkt"];
3918--7289[label="1;1pkt 1fpkt"];
3918--9589[label="1;1pkt 1fpkt"];
7289--9589[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.79.223.233" dst_port="80" src_ip="133.158.9.12"/>
    </slice>
    <from sec="1134364357" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45547,2.23737,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
797[label="197.99.219.206;s;410pkt 410fpkt", shape=diamond, color=yellow];
3174[label="197.99.219.206;s;194pkt 194fpkt", shape=hexagon, color=black];
6574[label="197.99.219.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.219.206:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
797--931[label="0.00243902;1pkt 1fpkt"];
797--1676[label="0.0045045;1pkt 1fpkt"];
797--1749[label="0.00280112;1pkt 1fpkt"];
797--1983[label="0.00324675;1pkt 1fpkt"];
797--2321[label="0.00462963;1pkt 1fpkt"];
797--2329[label="0.00425532;1pkt 1fpkt"];
797--2334[label="0.00401606;1pkt 1fpkt"];
797--2362[label="0.00390625;1pkt 1fpkt"];
797--2646[label="0.0027248;1pkt 1fpkt"];
797--2652[label="0.0037594;1pkt 1fpkt"];
797--2973[label="0.00473934;1pkt 1fpkt"];
797--3174[label="1;194pkt 194fpkt"];
797--3182[label="0.00243902;1pkt 1fpkt"];
797--3457[label="0.00243902;1pkt 1fpkt"];
797--6574[label="0.5;1pkt 1fpkt"];
3174--3182[label="0.00515464;1pkt 1fpkt"];
3174--3457[label="0.00515464;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.219.206"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
371[label="216.176.194.55;d;257pkt 257fpkt", shape=diamond, color=yellow];
3213[label="216.176.194.55;d;256pkt 256fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 216.176.194.55:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
371--3213[label="1;256pkt 256fpkt"];
371--4498[label="0.00389105;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.176.194.55"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45547,2.23737,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
1691[label="163.213.23.162;s;298pkt 298fpkt", shape=diamond, color=yellow];
3276[label="163.213.23.162;s;243pkt 243fpkt", shape=hexagon, color=black];
6038[label="163.213.23.162;315pkt 315fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.213.23.162:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1691--1749[label="0.0033557;1pkt 1fpkt"];
1691--1983[label="0.0033557;1pkt 1fpkt"];
1691--2321[label="0.00462963;1pkt 1fpkt"];
1691--2329[label="0.00425532;1pkt 1fpkt"];
1691--2334[label="0.00401606;1pkt 1fpkt"];
1691--2362[label="0.00390625;1pkt 1fpkt"];
1691--2646[label="0.0033557;1pkt 1fpkt"];
1691--2652[label="0.0037594;1pkt 1fpkt"];
1691--2973[label="0.00473934;1pkt 1fpkt"];
1691--3276[label="1;243pkt 243fpkt"];
1691--6038[label="0.996644;297pkt 297fpkt"];
3276--6038[label="0.995885;242pkt 242fpkt"];
</description>
    <slice>
      <filter src_ip="163.213.23.162"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
4464[label="205.219.49.49;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7647[label="205.219.49.49;21pkt 21fpkt", shape=invtriangle, color=brown];
9816[label="205.219.49.49;21pkt 21fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.219.49.49:80, 133.158.142.101:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4810: (2.34375%)&lt;BR/&gt; 4601: (2.34375%)&lt;BR/&gt; 4373: (2.34375%)&lt;BR/&gt; 4274: (2.34375%)&gt;];
}
4464--7647[label="1;21pkt 21fpkt"];
4464--9816[label="1;21pkt 21fpkt"];
7647--9816[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.142.101" src_ip="205.219.49.49" src_port="80"/>
    </slice>
    <from sec="1134364422" usec="0"/>
    <to sec="1134364443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
2616[label="220.96.40.6;d;487pkt 487fpkt", shape=diamond, color=yellow];
3360[label="220.96.40.6;d;487pkt 487fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1025, 220.96.40.6:6000}[98.5626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6000: (49.2813%)&lt;BR/&gt; 1025: (49.2813%)&lt;BR/&gt; 0: (1.43737%)&gt;];
}
2616--3288[label="0.00205339;1pkt 1fpkt"];
2616--3360[label="1;487pkt 487fpkt"];
2616--4457[label="0.00205339;1pkt 1fpkt"];
2616--4498[label="0.00205339;1pkt 1fpkt"];
2616--7641[label="0.00205339;1pkt 1fpkt"];
2616--9811[label="0.00205339;1pkt 1fpkt"];
3360--4457[label="0.00205339;1pkt 1fpkt"];
3360--4498[label="0.00205339;1pkt 1fpkt"];
3360--7641[label="0.00205339;1pkt 1fpkt"];
3360--9811[label="0.00205339;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.96.40.6" dst_port="6000" src_port="1025"/>
    </slice>
    <from sec="1134364241" usec="0"/>
    <to sec="1134364271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
2270[label="163.180.26.95;s;155pkt 155fpkt", shape=diamond, color=yellow];
3435[label="163.180.26.95;s;155pkt 155fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.26.95:*, 196.236.14.34:80}[67.7419%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0968%)&lt;BR/&gt; 1863: (0.967742%)&lt;BR/&gt; 443: (0.967742%)&lt;BR/&gt; 7001: (0.645161%)&lt;BR/&gt; 123: (0.645161%)&gt;];
}
2270--2763[label="0.0129032;2pkt 2fpkt"];
2270--3435[label="1;155pkt 155fpkt"];
2270--3536[label="0.00645161;1pkt 1fpkt"];
2270--3616[label="0.00645161;1pkt 1fpkt"];
2270--3684[label="0.00645161;1pkt 1fpkt"];
3435--3536[label="0.00645161;1pkt 1fpkt"];
3435--3616[label="0.00645161;1pkt 1fpkt"];
3435--3684[label="0.00645161;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.236.14.34" dst_port="80" src_ip="163.180.26.95"/>
    </slice>
    <from sec="1134363964" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48309,2.2936,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
3137[label="204.62.96.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
3444[label="204.62.96.55;s;1pkt 1fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.62.96.55:4264, 197.99.213.188:6881}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4264: (50%)&gt;];
}
3137--3444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.213.188" dst_port="6881" src_ip="204.62.96.55" src_port="4264"/>
    </slice>
    <from sec="1134364283" usec="0"/>
    <to sec="1134364421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
5000[label="163.180.68.86;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.68.86:*, 204.178.249.197:80}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3594: (5.88235%)&lt;BR/&gt; 3598: (2.94118%)&lt;BR/&gt; 3593: (2.94118%)&lt;BR/&gt; 3592: (2.94118%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="204.178.249.197" dst_port="80" src_ip="163.180.68.86"/>
    </slice>
    <from sec="1134364320" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.196.88.0"/>
    </slice>
    <from sec="1134363644" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.163.151.0"/>
    </slice>
    <from sec="1134364416" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.100.1"/>
    </slice>
    <from sec="1134363618" usec="0"/>
    <to sec="1134364388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.37.25.2"/>
    </slice>
    <from sec="1134363888" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.239.176.2"/>
    </slice>
    <from sec="1134363705" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
559[label="196.40.230.2;s;504pkt 504fpkt", shape=diamond, color=yellow];
3769[label="196.40.230.2;568pkt 568fpkt", shape=pentagon, color=darkviolet];
7184[label="196.40.230.2;568pkt 568fpkt", shape=invtriangle, color=brown];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.40.230.2:0, *:0}[44.8944%]&lt;BR/&gt;{196.40.230.2:*, *:42}[30.8099%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (46.6463%)&lt;BR/&gt; 42: (14.8171%)&lt;BR/&gt; 80: (5.57927%)&lt;BR/&gt; 137: (4.57317%)&lt;BR/&gt; 1941: (2.77439%)&gt;];
}
559--3505[label="0.015873;8pkt 8fpkt"];
559--3510[label="0.0138889;7pkt 7fpkt"];
559--3511[label="0.00396825;2pkt 2fpkt"];
559--3520[label="0.00992063;5pkt 5fpkt"];
559--3532[label="0.00793651;4pkt 4fpkt"];
559--3556[label="0.0178571;9pkt 9fpkt"];
559--3591[label="0.0138889;7pkt 7fpkt"];
559--3592[label="0.00396825;2pkt 2fpkt"];
559--3600[label="0.00992063;5pkt 5fpkt"];
559--3612[label="0.00793651;4pkt 4fpkt"];
559--3636[label="0.0178571;9pkt 9fpkt"];
559--3648[label="0.00992063;5pkt 5fpkt"];
559--3662[label="0.015873;8pkt 8fpkt"];
559--3668[label="0.00992063;5pkt 5fpkt"];
559--3680[label="0.00793651;4pkt 4fpkt"];
559--3703[label="0.0178571;9pkt 9fpkt"];
559--3769[label="1;504pkt 504fpkt"];
559--7184[label="1;504pkt 504fpkt"];
3769--7184[label="1;568pkt 568fpkt"];
</description>
    <slice>
      <filter dst_port="42" src_ip="196.40.230.2"/>
      <filter src_ip="196.40.230.2"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.84.193.3"/>
    </slice>
    <from sec="1134364390" usec="0"/>
    <to sec="1134364467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.163.40.4"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.90.161.4"/>
    </slice>
    <from sec="1134364402" usec="0"/>
    <to sec="1134364437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.239.222.4"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.11.226.4"/>
    </slice>
    <from sec="1134364042" usec="0"/>
    <to sec="1134364100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
1124[label="66.179.6.5;s;1288pkt 1288fpkt", shape=diamond, color=yellow];
3808[label="66.179.6.5;1573pkt 1573fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.179.6.5:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 31733: (0.0699056%)&lt;BR/&gt; 28711: (0.0699056%)&lt;BR/&gt; 27113: (0.0699056%)&lt;BR/&gt; 23374: (0.0699056%)&gt;];
}
1124--3808[label="0.999224;1287pkt 1287fpkt"];
</description>
    <slice>
      <filter src_ip="66.179.6.5" src_port="7000"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.8.206.5"/>
    </slice>
    <from sec="1134363630" usec="0"/>
    <to sec="1134363979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.49.21.6"/>
    </slice>
    <from sec="1134363653" usec="0"/>
    <to sec="1134364330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.180.6"/>
    </slice>
    <from sec="1134364122" usec="0"/>
    <to sec="1134364422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.68.234.6"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.28.164.7"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,504,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
3[label="131.68.15.10s;4pkt 4fpkt", shape=rectangle, color=red];
3888[label="131.68.15.10;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7268[label="131.68.15.10;20pkt 20fpkt", shape=invtriangle, color=brown];
9577[label="131.68.15.10;19pkt 19fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.15.10:*, 192.240.149.160:443}[35%]&lt;BR/&gt;{131.68.15.10:*, 192.106.74.181:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.4194%)&lt;BR/&gt; 443: (20.1613%)&lt;BR/&gt; 1362: (3.22581%)&lt;BR/&gt; 1361: (3.22581%)&lt;BR/&gt; 1360: (3.22581%)&gt;];
}
3--3888[label="1;4pkt 4fpkt"];
3--7268[label="1;4pkt 4fpkt"];
3--9577[label="1;4pkt 4fpkt"];
3888--7268[label="1;19pkt 19fpkt"];
3888--9577[label="1;19pkt 19fpkt"];
7268--9577[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="192.240.149.160" dst_port="443" src_ip="131.68.15.10"/>
      <filter dst_ip="192.106.74.181" dst_port="80" src_ip="131.68.15.10"/>
    </slice>
    <from sec="1134363701" usec="0"/>
    <to sec="1134363792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.71.41.10"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.185.134.10"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.5.40.11"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.70.72.11"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.15.131.11"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.228.189.11"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.22.12"/>
    </slice>
    <from sec="1134363956" usec="0"/>
    <to sec="1134363991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20567,2.20699,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
81[label="197.68.113.12s;479pkt 479fpkt", shape=rectangle, color=red];
3923[label="197.68.113.12;508pkt 508fpkt", shape=pentagon, color=darkviolet];
7293[label="197.68.113.12;508pkt 508fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.113.12:*, *:445}[50.0982%]&lt;BR/&gt;{197.68.113.12:*, *:139}[49.9018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.5853%)&lt;BR/&gt; 139: (24.4147%)&lt;BR/&gt; 4999: (0.100334%)&lt;BR/&gt; 4998: (0.100334%)&lt;BR/&gt; 4997: (0.100334%)&gt;];
}
81--3923[label="0.997912;478pkt 478fpkt"];
81--7293[label="0.997912;478pkt 478fpkt"];
3923--7293[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.68.113.12"/>
      <filter dst_port="139" src_ip="197.68.113.12"/>
    </slice>
    <from sec="1134364413" usec="0"/>
    <to sec="1134364475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.160.168.12"/>
    </slice>
    <from sec="1134364395" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.92.180.12"/>
    </slice>
    <from sec="1134364343" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.172.229.12"/>
    </slice>
    <from sec="1134363646" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.205.236.12"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.73.98.13"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.183.14"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.218.195.15"/>
    </slice>
    <from sec="1134363621" usec="0"/>
    <to sec="1134363815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.220.84.16"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.60.85.16"/>
    </slice>
    <from sec="1134363998" usec="0"/>
    <to sec="1134364489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.194.16"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1283[label="133.158.220.16;s;79pkt 79fpkt", shape=diamond, color=yellow];
1289[label="209.60.65.142;d;43pkt 43fpkt", shape=diamond, color=yellow];
3991[label="133.158.220.16;80pkt 80fpkt", shape=pentagon, color=darkviolet];
7328[label="133.158.220.16;79pkt 79fpkt", shape=invtriangle, color=brown];
9616[label="133.158.220.16;79pkt 79fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.220.16:*, 209.60.65.142:80}[53.75%]&lt;BR/&gt;{133.158.220.16:*, 209.60.65.185:80}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1967: (0.694444%)&lt;BR/&gt; 1942: (0.694444%)&lt;BR/&gt; 1938: (0.694444%)&lt;BR/&gt; 1936: (0.694444%)&gt;];
}
1283--1289[label="1;43pkt 43fpkt"];
1283--3648[label="0.0379747;3pkt 3fpkt"];
1283--3991[label="1;79pkt 79fpkt"];
1283--7328[label="1;79pkt 79fpkt"];
1283--9616[label="1;79pkt 79fpkt"];
1289--3648[label="0.0465116;2pkt 2fpkt"];
1289--3991[label="1;43pkt 43fpkt"];
1289--7328[label="1;43pkt 43fpkt"];
1289--9616[label="1;43pkt 43fpkt"];
3991--7328[label="1;79pkt 79fpkt"];
3991--9616[label="1;79pkt 79fpkt"];
7328--9616[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="209.60.65.142" dst_port="80" src_ip="133.158.220.16"/>
      <filter dst_ip="209.60.65.185" dst_port="80" src_ip="133.158.220.16"/>
    </slice>
    <from sec="1134363642" usec="0"/>
    <to sec="1134364161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.173.22.17"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.201.66.17"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.237.198.18"/>
    </slice>
    <from sec="1134363723" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.39.212.18"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.136.47.19"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.196.131.19"/>
    </slice>
    <from sec="1134363878" usec="0"/>
    <to sec="1134363908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
3139[label="2.29.4.20;s;4pkt 4fpkt", shape=diamond, color=yellow];
4044[label="2.29.4.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7364[label="2.29.4.20;1pkt 1fpkt", shape=invtriangle, color=brown];
9638[label="2.29.4.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.29.4.20:80, 131.68.9.24:1868}[25%]&lt;BR/&gt;{2.29.4.20:80, 131.68.9.24:1871}[25%]&lt;BR/&gt;{2.29.4.20:80, 131.68.9.24:1876}[25%]&lt;BR/&gt;{2.29.4.20:80, 131.68.9.24:1877}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1877: (28.5714%)&lt;BR/&gt; 1876: (7.14286%)&lt;BR/&gt; 1871: (7.14286%)&lt;BR/&gt; 1868: (7.14286%)&gt;];
}
3139--4044[label="1;1pkt 1fpkt"];
3139--7364[label="1;1pkt 1fpkt"];
3139--9638[label="1;1pkt 1fpkt"];
4044--7364[label="1;1pkt 1fpkt"];
4044--9638[label="1;1pkt 1fpkt"];
7364--9638[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.9.24" dst_port="1877" src_ip="2.29.4.20" src_port="80"/>
      <filter dst_ip="131.68.9.24" dst_port="1876" src_ip="2.29.4.20" src_port="80"/>
      <filter dst_ip="131.68.9.24" dst_port="1871" src_ip="2.29.4.20" src_port="80"/>
      <filter dst_ip="131.68.9.24" dst_port="1868" src_ip="2.29.4.20" src_port="80"/>
    </slice>
    <from sec="1134364295" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.44.21"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.69.68.21"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134363964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
2306[label="0.26.228.21;s;504pkt 504fpkt", shape=diamond, color=yellow];
4076[label="0.26.228.21;503pkt 503fpkt", shape=pentagon, color=darkviolet];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.26.228.21:*, *:4899}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4899: (50%)&lt;BR/&gt; 1554: (0.0993049%)&lt;BR/&gt; 1553: (0.0993049%)&lt;BR/&gt; 1552: (0.0993049%)&lt;BR/&gt; 1551: (0.0993049%)&gt;];
}
2306--4076[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_port="4899" src_ip="0.26.228.21"/>
    </slice>
    <from sec="1134364093" usec="0"/>
    <to sec="1134364119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.84.25.22"/>
    </slice>
    <from sec="1134363635" usec="0"/>
    <to sec="1134364448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.56.73.22"/>
    </slice>
    <from sec="1134363754" usec="0"/>
    <to sec="1134363879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
4087[label="196.129.132.22;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.132.22:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="196.129.132.22"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1945[label="133.158.141.23;s;93pkt 93fpkt", shape=diamond, color=yellow];
4101[label="133.158.141.23;92pkt 92fpkt", shape=pentagon, color=darkviolet];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.23:*, 196.223.1.234:80}[68.8172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1809: (0.540541%)&lt;BR/&gt; 1808: (0.540541%)&lt;BR/&gt; 1806: (0.540541%)&lt;BR/&gt; 1804: (0.540541%)&gt;];
}
1945--4101[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="196.223.1.234" dst_port="80" src_ip="133.158.141.23"/>
    </slice>
    <from sec="1134363954" usec="0"/>
    <to sec="1134364030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.81.198.23"/>
    </slice>
    <from sec="1134364422" usec="0"/>
    <to sec="1134364432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.242.3.24"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.247.66.24"/>
    </slice>
    <from sec="1134364295" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.146.148.24"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.72.1.25"/>
    </slice>
    <from sec="1134363904" usec="0"/>
    <to sec="1134364002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.185.25"/>
    </slice>
    <from sec="1134364263" usec="0"/>
    <to sec="1134364306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.255.52.26"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
4154[label="220.153.156.26;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.153.156.26:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4220: (1.0101%)&lt;BR/&gt; 3431: (1.0101%)&lt;BR/&gt; 4756: (0.505051%)&lt;BR/&gt; 4708: (0.505051%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1433" src_ip="220.153.156.26"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.8.27"/>
    </slice>
    <from sec="1134363630" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.11.27"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.136.28"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.5.199.29"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
608[label="131.68.11.6;d;10pkt 10fpkt", shape=diamond, color=yellow];
4183[label="214.29.200.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6019[label="4.133.47.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 131.68.11.6:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6348: (12.5%)&lt;BR/&gt; 6349: (8.33333%)&lt;BR/&gt; 3288: (8.33333%)&lt;BR/&gt; 3254: (8.33333%)&lt;BR/&gt; 0: (8.33333%)&gt;];
}
608--4183[label="1;1pkt 1fpkt"];
608--6019[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.11.6"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.116.192.30"/>
    </slice>
    <from sec="1134363885" usec="0"/>
    <to sec="1134363941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.194.30"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.82.134.32"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.71.115.33"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.114.129.33"/>
    </slice>
    <from sec="1134364432" usec="0"/>
    <to sec="1134364456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.253.172.33"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.137.149.34"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.91.49.36"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
640[label="133.159.67.36;s;1553pkt 1553fpkt", shape=diamond, color=yellow];
4283[label="133.159.67.36;2020pkt 2020fpkt", shape=pentagon, color=darkviolet];
7518[label="133.159.67.36;2021pkt 2021fpkt", shape=invtriangle, color=brown];
9735[label="133.159.67.36;2020pkt 2020fpkt", shape=invhouse, color=bisque];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.67.36:12549, *:*}[69.1242%]&lt;BR/&gt;{133.159.67.36:65181, *:*}[29.144%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12549: (34.0951%)&lt;BR/&gt; 65181: (15.0775%)&lt;BR/&gt; 80: (0.525348%)&lt;BR/&gt; 32459: (0.466246%)&lt;BR/&gt; 4662: (0.183872%)&gt;];
}
640--3505[label="0.000643915;1pkt 1fpkt"];
640--3510[label="0.00257566;4pkt 4fpkt"];
640--3556[label="0.000643915;1pkt 1fpkt"];
640--3591[label="0.00257566;4pkt 4fpkt"];
640--3636[label="0.000643915;1pkt 1fpkt"];
640--3648[label="0.000643915;1pkt 1fpkt"];
640--3662[label="0.000643915;1pkt 1fpkt"];
640--3703[label="0.000643915;1pkt 1fpkt"];
640--4283[label="0.999356;1552pkt 1552fpkt"];
640--7518[label="1;1553pkt 1553fpkt"];
640--9735[label="0.999356;1552pkt 1552fpkt"];
4283--7518[label="1;2020pkt 2020fpkt"];
4283--9735[label="1;2020pkt 2020fpkt"];
7518--9735[label="1;2020pkt 2020fpkt"];
</description>
    <slice>
      <filter src_ip="133.159.67.36" src_port="12549"/>
      <filter src_ip="133.159.67.36" src_port="65181"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
49[label="198.11.173.36s;212pkt 212fpkt", shape=rectangle, color=red];
4287[label="198.11.173.36;255pkt 255fpkt", shape=pentagon, color=darkviolet];
7520[label="198.11.173.36;254pkt 254fpkt", shape=invtriangle, color=brown];
9737[label="198.11.173.36;255pkt 255fpkt", shape=invhouse, color=bisque];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.11.173.36:14061, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14061: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
49--4287[label="1;212pkt 212fpkt"];
49--7520[label="0.995283;211pkt 211fpkt"];
49--9737[label="1;212pkt 212fpkt"];
4287--7520[label="1;254pkt 254fpkt"];
4287--9737[label="1;255pkt 255fpkt"];
7520--9737[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.11.173.36" src_port="14061"/>
    </slice>
    <from sec="1134363937" usec="0"/>
    <to sec="1134363952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
2349[label="131.156.113.37;s;98pkt 98fpkt", shape=diamond, color=yellow];
4305[label="131.156.113.37;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.113.37:*, 192.106.195.0:80}[41.5842%]&lt;BR/&gt;{131.156.113.37:*, 67.197.114.129:80}[23.7624%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3575: (0.502513%)&lt;BR/&gt; 3574: (0.502513%)&lt;BR/&gt; 3573: (0.502513%)&lt;BR/&gt; 3572: (0.502513%)&gt;];
}
2349--3505[label="0.0204082;2pkt 2fpkt"];
2349--3510[label="0.0204082;2pkt 2fpkt"];
2349--3520[label="0.0306122;3pkt 3fpkt"];
2349--3556[label="0.0204082;2pkt 2fpkt"];
2349--3591[label="0.0204082;2pkt 2fpkt"];
2349--3600[label="0.0306122;3pkt 3fpkt"];
2349--3636[label="0.0204082;2pkt 2fpkt"];
2349--3648[label="0.142857;14pkt 14fpkt"];
2349--3662[label="0.0204082;2pkt 2fpkt"];
2349--3668[label="0.0306122;3pkt 3fpkt"];
2349--3703[label="0.0204082;2pkt 2fpkt"];
2349--4305[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_ip="192.106.195.0" dst_port="80" src_ip="131.156.113.37"/>
      <filter dst_ip="67.197.114.129" dst_port="80" src_ip="131.156.113.37"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.145.206.37"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.100.131.38"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.23.83.39"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.207.105.40"/>
    </slice>
    <from sec="1134364410" usec="0"/>
    <to sec="1134364436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.99.217.40"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.213.251.40"/>
    </slice>
    <from sec="1134364307" usec="0"/>
    <to sec="1134364330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.48.42"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.152.181.42"/>
    </slice>
    <from sec="1134364237" usec="0"/>
    <to sec="1134364286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.82.119.44"/>
    </slice>
    <from sec="1134364287" usec="0"/>
    <to sec="1134364339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.70.245.44"/>
    </slice>
    <from sec="1134363995" usec="0"/>
    <to sec="1134364473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.170.246.44"/>
    </slice>
    <from sec="1134364020" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.37.35.45"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.4.54.45"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
2340[label="133.158.81.45;s;5pkt 5fpkt", shape=diamond, color=yellow];
4414[label="133.158.81.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7615[label="133.158.81.45;1pkt 1fpkt", shape=invtriangle, color=brown];
9795[label="133.158.81.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.81.45:0, 192.168.0.71:0}[20%]&lt;BR/&gt;{133.158.81.45:0, 192.168.0.78:0}[20%]&lt;BR/&gt;{133.158.81.45:0, 192.168.0.86:0}[20%]&lt;BR/&gt;{133.158.81.45:0, 192.168.0.97:0}[20%]&lt;BR/&gt;{133.158.81.45:0, 192.168.0.100:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2340--4414[label="1;1pkt 1fpkt"];
2340--7615[label="1;1pkt 1fpkt"];
2340--9795[label="1;1pkt 1fpkt"];
4414--7615[label="1;1pkt 1fpkt"];
4414--9795[label="1;1pkt 1fpkt"];
7615--9795[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.100" src_ip="133.158.81.45"/>
      <filter dst_ip="192.168.0.97" src_ip="133.158.81.45"/>
      <filter dst_ip="192.168.0.86" src_ip="133.158.81.45"/>
      <filter dst_ip="192.168.0.78" src_ip="133.158.81.45"/>
      <filter dst_ip="192.168.0.71" src_ip="133.158.81.45"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
845[label="222.10.78.46;s;37pkt 37fpkt", shape=diamond, color=yellow];
4426[label="222.10.78.46;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.10.78.46:*, 131.82.100.57:42}[24.3243%]&lt;BR/&gt;{222.10.78.46:*, 131.82.100.70:42}[24.3243%]&lt;BR/&gt;{222.10.78.46:*, 131.82.100.71:42}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (37.8378%)&lt;BR/&gt; 80: (8.10811%)&lt;BR/&gt; 0: (8.10811%)&lt;BR/&gt; 4402: (1.35135%)&lt;BR/&gt; 4399: (1.35135%)&gt;];
}
845--3505[label="0.027027;1pkt 1fpkt"];
845--3510[label="0.027027;1pkt 1fpkt"];
845--3520[label="0.027027;1pkt 1fpkt"];
845--3591[label="0.027027;1pkt 1fpkt"];
845--3600[label="0.027027;1pkt 1fpkt"];
845--3648[label="0.0540541;2pkt 2fpkt"];
845--3662[label="0.027027;1pkt 1fpkt"];
845--3668[label="0.027027;1pkt 1fpkt"];
845--4426[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="131.82.100.71" dst_port="42" src_ip="222.10.78.46"/>
      <filter dst_ip="131.82.100.70" dst_port="42" src_ip="222.10.78.46"/>
      <filter dst_ip="131.82.100.57" dst_port="42" src_ip="222.10.78.46"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134363918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.108.13.48"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.5.40.48"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.220.107.48"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.68.140.49"/>
    </slice>
    <from sec="1134363618" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.56.205.49"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.34.6.50"/>
    </slice>
    <from sec="1134363656" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.137.34.50"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.154.167.51"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.66.9.52"/>
    </slice>
    <from sec="1134364286" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.9.52"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.93.233.53"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.88.33.54"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.202.85.54"/>
    </slice>
    <from sec="1134363633" usec="0"/>
    <to sec="1134364391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.159.6.55"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.101.28.55"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.97.84.55"/>
    </slice>
    <from sec="1134363971" usec="0"/>
    <to sec="1134363986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.62.96.55"/>
    </slice>
    <from sec="1134364284" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.244.72.56"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.176.99.56"/>
    </slice>
    <from sec="1134363622" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.71.253.56"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.82.100.57"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134363686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.155.64.58"/>
    </slice>
    <from sec="1134363946" usec="0"/>
    <to sec="1134364156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.55.162.58"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.64.179.59"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.109.129.60"/>
    </slice>
    <from sec="1134363616" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.67.61"/>
    </slice>
    <from sec="1134363797" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.217.61"/>
    </slice>
    <from sec="1134364132" usec="0"/>
    <to sec="1134364204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
230[label="163.185.71.219;s;655pkt 655fpkt", shape=diamond, color=yellow];
555[label="216.49.8.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
767[label="216.48.46.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
1485[label="216.205.214.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
1503[label="21.42.91.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
1902[label="6.16.218.193;d;7pkt 7fpkt", shape=diamond, color=yellow];
6716[label="163.185.71.219;655pkt 655fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.71.219:14059, *:*}[30.687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14059: (15.3671%)&lt;BR/&gt; 80: (4.61771%)&lt;BR/&gt; 8000: (3.48221%)&lt;BR/&gt; 6881: (3.25511%)&lt;BR/&gt; 1863: (2.87661%)&gt;];
}
230--343[label="0.0154905;9pkt 9fpkt"];
230--555[label="1;1pkt 1fpkt"];
230--602[label="0.0588235;1pkt 1fpkt"];
230--632[label="0.0243902;2pkt 2fpkt"];
230--767[label="1;1pkt 1fpkt"];
230--816[label="0.0614754;15pkt 15fpkt"];
230--997[label="0.00330579;2pkt 2fpkt"];
230--1174[label="0.125;4pkt 4fpkt"];
230--1182[label="0.00395257;1pkt 1fpkt"];
230--1248[label="0.00913242;2pkt 2fpkt"];
230--1260[label="0.0681818;3pkt 3fpkt"];
230--1378[label="0.00485437;1pkt 1fpkt"];
230--1412[label="0.0689655;2pkt 2fpkt"];
230--1485[label="1;1pkt 1fpkt"];
230--1490[label="0.0083682;2pkt 2fpkt"];
230--1503[label="1;1pkt 1fpkt"];
230--1902[label="1;7pkt 7fpkt"];
230--2020[label="0.0833333;1pkt 1fpkt"];
230--2050[label="0.04;1pkt 1fpkt"];
230--2383[label="0.0434783;1pkt 1fpkt"];
230--2386[label="0.04;1pkt 1fpkt"];
230--2632[label="0.0909091;2pkt 2fpkt"];
230--2673[label="0.04;1pkt 1fpkt"];
230--2749[label="0.037037;1pkt 1fpkt"];
230--2763[label="0.0297297;11pkt 11fpkt"];
230--2982[label="0.037037;1pkt 1fpkt"];
230--3215[label="0.0833333;2pkt 2fpkt"];
230--3302[label="0.00913242;2pkt 2fpkt"];
230--3389[label="0.0434783;1pkt 1fpkt"];
230--3486[label="0.010687;7pkt 7fpkt"];
230--3488[label="0.0152672;10pkt 10fpkt"];
230--3505[label="0.0137405;9pkt 9fpkt"];
230--3510[label="0.00458015;3pkt 3fpkt"];
230--3513[label="0.00152672;1pkt 1fpkt"];
230--3520[label="0.00458015;3pkt 3fpkt"];
230--3571[label="0.010687;7pkt 7fpkt"];
230--3573[label="0.0152672;10pkt 10fpkt"];
230--3591[label="0.00458015;3pkt 3fpkt"];
230--3600[label="0.00458015;3pkt 3fpkt"];
230--3648[label="0.021374;14pkt 14fpkt"];
230--3651[label="0.010687;7pkt 7fpkt"];
230--3654[label="0.0152672;10pkt 10fpkt"];
230--3662[label="0.0137405;9pkt 9fpkt"];
230--3668[label="0.00458015;3pkt 3fpkt"];
230--6716[label="1;655pkt 655fpkt"];
555--6716[label="1;1pkt 1fpkt"];
767--6716[label="1;1pkt 1fpkt"];
1485--6716[label="1;1pkt 1fpkt"];
1503--6716[label="1;1pkt 1fpkt"];
1902--6716[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="163.185.71.219" src_port="14059"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.208.51.64"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1023[label="197.99.223.64;s;367pkt 367fpkt", shape=diamond, color=yellow];
4681[label="197.99.223.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7794[label="197.99.223.64;1pkt 1fpkt", shape=invtriangle, color=brown];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.223.64:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1023--4681[label="1;1pkt 1fpkt"];
1023--7794[label="1;1pkt 1fpkt"];
4681--7794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.223.64"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.223.65"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
52[label="196.38.208.66s;143pkt 143fpkt", shape=rectangle, color=red];
4708[label="196.38.208.66;343pkt 343fpkt", shape=pentagon, color=darkviolet];
7812[label="196.38.208.66;342pkt 342fpkt", shape=invtriangle, color=brown];
9921[label="196.38.208.66;342pkt 342fpkt", shape=invhouse, color=bisque];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.38.208.66:43289, *:*}[29.7376%]&lt;BR/&gt;{196.38.208.66:43294, *:4081}[29.1545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43294: (35.0855%)&lt;BR/&gt; 4081: (24.359%)&lt;BR/&gt; 43289: (14.9145%)&lt;BR/&gt; 1030: (4.10256%)&lt;BR/&gt; 2: (4.10256%)&gt;];
}
52--4708[label="1;143pkt 143fpkt"];
52--7812[label="0.993007;142pkt 142fpkt"];
52--9921[label="0.993007;142pkt 142fpkt"];
4708--7812[label="1;342pkt 342fpkt"];
4708--9921[label="1;342pkt 342fpkt"];
7812--9921[label="1;342pkt 342fpkt"];
</description>
    <slice>
      <filter src_ip="196.38.208.66" src_port="43289"/>
      <filter dst_port="4081" src_ip="196.38.208.66" src_port="43294"/>
    </slice>
    <from sec="1134364357" usec="0"/>
    <to sec="1134364360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.84.227.66"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.244.138.67"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
522[label="163.180.173.67;s;546pkt 546fpkt", shape=diamond, color=yellow];
4724[label="163.180.173.67;545pkt 545fpkt", shape=pentagon, color=darkviolet];
7819[label="163.180.173.67;545pkt 545fpkt", shape=invtriangle, color=brown];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.173.67:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2907: (0.091687%)&lt;BR/&gt; 2906: (0.091687%)&lt;BR/&gt; 2904: (0.091687%)&lt;BR/&gt; 2903: (0.091687%)&gt;];
}
522--3510[label="0.155678;85pkt 85fpkt"];
522--3520[label="0.0622711;34pkt 34fpkt"];
522--3591[label="0.155678;85pkt 85fpkt"];
522--3600[label="0.0622711;34pkt 34fpkt"];
522--3648[label="0.0677656;37pkt 37fpkt"];
522--3668[label="0.0622711;34pkt 34fpkt"];
522--4724[label="1;545pkt 545fpkt"];
522--7819[label="1;545pkt 545fpkt"];
4724--7819[label="1;545pkt 545fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="163.180.173.67"/>
    </slice>
    <from sec="1134363640" usec="0"/>
    <to sec="1134364208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.84.196.67"/>
    </slice>
    <from sec="1134363616" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
2242[label="133.158.52.105;d;45pkt 45fpkt", shape=diamond, color=yellow];
2290[label="0.241.166.142;s;17pkt 17fpkt", shape=diamond, color=yellow];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.241.166.142:80, 133.158.52.105:*}[37.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3036: (1.6129%)&lt;BR/&gt; 3032: (1.6129%)&lt;BR/&gt; 3030: (1.6129%)&lt;BR/&gt; 3028: (1.6129%)&gt;];
}
2242--2290[label="1;17pkt 17fpkt"];
2242--4727[label="0.0444444;2pkt 2fpkt"];
2242--6084[label="0.0222222;1pkt 1fpkt"];
2242--7821[label="0.0444444;2pkt 2fpkt"];
2242--8727[label="0.0222222;1pkt 1fpkt"];
2242--10518[label="0.0222222;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.52.105" src_ip="0.241.166.142" src_port="80"/>
    </slice>
    <from sec="1134363818" usec="0"/>
    <to sec="1134364168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.223.20.68"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.96.68"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.137.8.69"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.17.70"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.17.92.70"/>
    </slice>
    <from sec="1134363690" usec="0"/>
    <to sec="1134363764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.68.129.70"/>
    </slice>
    <from sec="1134363667" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.21.72"/>
    </slice>
    <from sec="1134364000" usec="0"/>
    <to sec="1134364264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.158.120.73"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
579[label="218.5.40.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
4820[label="133.158.216.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7888[label="133.158.216.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.216.73:49164, 218.5.40.11:21970}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49164: (50%)&lt;BR/&gt; 21970: (50%)&gt;];
}
579--4820[label="1;1pkt 1fpkt"];
579--7888[label="1;1pkt 1fpkt"];
4820--7888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.5.40.11" dst_port="21970" src_ip="133.158.216.73" src_port="49164"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.115.229.73"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.186.236.73"/>
    </slice>
    <from sec="1134364343" usec="0"/>
    <to sec="1134364386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.154.24.74"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.64.120.74"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.131.27.76"/>
    </slice>
    <from sec="1134363790" usec="0"/>
    <to sec="1134363837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
5946[label="133.159.8.155;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.8.155:*, 218.11.83.218:80}[47.0588%]&lt;BR/&gt;{133.159.8.155:*, 193.67.9.196:80}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3717: (2.94118%)&lt;BR/&gt; 3716: (2.94118%)&lt;BR/&gt; 3715: (2.94118%)&lt;BR/&gt; 3714: (2.94118%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="218.11.83.218" dst_port="80" src_ip="133.159.8.155"/>
      <filter dst_ip="193.67.9.196" dst_port="80" src_ip="133.159.8.155"/>
    </slice>
    <from sec="1134363629" usec="0"/>
    <to sec="1134364080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.51.160.78"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.194.78"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.28.12.79"/>
    </slice>
    <from sec="1134363995" usec="0"/>
    <to sec="1134364097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.49.109.79"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.50.144.79"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.20.174.79"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.149.84.80"/>
    </slice>
    <from sec="1134363636" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.99.223.80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.137.60.82"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134363862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.39.62.82"/>
    </slice>
    <from sec="1134364386" usec="0"/>
    <to sec="1134364398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.53.144.82"/>
    </slice>
    <from sec="1134363952" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.114.149.82"/>
    </slice>
    <from sec="1134364161" usec="0"/>
    <to sec="1134364443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.234.83"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.76.204.84"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.115.232.84"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.22.90.85"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.115.200.85"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
2176[label="163.180.237.85;s;182pkt 182fpkt", shape=diamond, color=yellow];
4992[label="163.180.237.85;206pkt 206fpkt", shape=pentagon, color=darkviolet];
8005[label="163.180.237.85;206pkt 206fpkt", shape=invtriangle, color=brown];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.237.85:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2176--2321[label="0.00549451;1pkt 1fpkt"];
2176--2329[label="0.00549451;1pkt 1fpkt"];
2176--2334[label="0.00549451;1pkt 1fpkt"];
2176--2362[label="0.00549451;1pkt 1fpkt"];
2176--2646[label="0.00549451;1pkt 1fpkt"];
2176--2652[label="0.00549451;1pkt 1fpkt"];
2176--2973[label="0.00549451;1pkt 1fpkt"];
2176--4992[label="1;182pkt 182fpkt"];
2176--8005[label="1;182pkt 182fpkt"];
4992--8005[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter src_ip="163.180.237.85"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
1979[label="163.180.6.190;d;58pkt 58fpkt", shape=diamond, color=yellow];
4995[label="197.23.21.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 163.180.6.190:56548}[98.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56548: (48.3051%)&lt;BR/&gt; 0: (3.38983%)&lt;BR/&gt; 60011: (1.69492%)&lt;BR/&gt; 65309: (0.847458%)&lt;BR/&gt; 65253: (0.847458%)&gt;];
}
1979--4995[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.6.190" dst_port="56548"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.164.40.88"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.145.99.89"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.48.43.90"/>
    </slice>
    <from sec="1134364344" usec="0"/>
    <to sec="1134364430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
2427[label="197.99.223.90;s;127pkt 127fpkt", shape=diamond, color=yellow];
5064[label="197.99.223.90;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8056[label="197.99.223.90;3pkt 3fpkt", shape=invtriangle, color=brown];
10070[label="197.99.223.90;3pkt 3fpkt", shape=invhouse, color=bisque];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.223.90:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2427--5064[label="1;3pkt 3fpkt"];
2427--8056[label="1;3pkt 3fpkt"];
2427--10070[label="1;3pkt 3fpkt"];
5064--8056[label="1;3pkt 3fpkt"];
5064--10070[label="1;3pkt 3fpkt"];
8056--10070[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.223.90"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
2168[label="151.251.102.123;d;5pkt 5fpkt", shape=diamond, color=yellow];
2533[label="3.48.4.91;s;8pkt 8fpkt", shape=diamond, color=yellow];
5065[label="3.48.4.91;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8057[label="3.48.4.91;7pkt 7fpkt", shape=invtriangle, color=brown];
10071[label="3.48.4.91;7pkt 7fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.48.4.91:80, 151.251.221.54:*}[44.4444%]&lt;BR/&gt;{3.48.4.91:80, 151.251.102.123:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5714%)&lt;BR/&gt; 2110: (7.14286%)&lt;BR/&gt; 2109: (7.14286%)&lt;BR/&gt; 2108: (7.14286%)&lt;BR/&gt; 2107: (7.14286%)&gt;];
}
2168--2533[label="0.8;4pkt 4fpkt"];
2168--5065[label="0.8;4pkt 4fpkt"];
2168--8057[label="0.8;4pkt 4fpkt"];
2168--10071[label="0.8;4pkt 4fpkt"];
2533--5065[label="1;8pkt 8fpkt"];
2533--8057[label="1;7pkt 7fpkt"];
2533--10071[label="1;7pkt 7fpkt"];
5065--8057[label="1;7pkt 7fpkt"];
5065--10071[label="1;7pkt 7fpkt"];
8057--10071[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.102.123" src_ip="3.48.4.91" src_port="80"/>
      <filter dst_ip="151.251.221.54" src_ip="3.48.4.91" src_port="80"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134364326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.155.10.91"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.117.161.91"/>
    </slice>
    <from sec="1134363638" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.72.186.91"/>
    </slice>
    <from sec="1134363703" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.89.195.91"/>
    </slice>
    <from sec="1134363845" usec="0"/>
    <to sec="1134364236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.73.85.93"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.48.171.93"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.214.4.94"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.111.172.94"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
2508[label="133.158.6.95;s;91pkt 91fpkt", shape=diamond, color=yellow];
5115[label="133.158.6.95;163pkt 163fpkt", shape=pentagon, color=darkviolet];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.6.95:*, 0.6.120.206:80}[29.4479%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.2205%)&lt;BR/&gt; 53: (7.87402%)&lt;BR/&gt; 0: (5.51181%)&lt;BR/&gt; 3544: (0.787402%)&lt;BR/&gt; 443: (0.787402%)&gt;];
}
2508--2766[label="0.010989;1pkt 1fpkt"];
2508--3077[label="0.0238095;1pkt 1fpkt"];
2508--3488[label="0.010989;1pkt 1fpkt"];
2508--3509[label="0.010989;1pkt 1fpkt"];
2508--3510[label="0.0549451;5pkt 5fpkt"];
2508--3517[label="0.010989;1pkt 1fpkt"];
2508--3522[label="0.010989;1pkt 1fpkt"];
2508--3536[label="0.010989;1pkt 1fpkt"];
2508--3556[label="0.043956;4pkt 4fpkt"];
2508--3573[label="0.010989;1pkt 1fpkt"];
2508--3590[label="0.010989;1pkt 1fpkt"];
2508--3591[label="0.0549451;5pkt 5fpkt"];
2508--3597[label="0.010989;1pkt 1fpkt"];
2508--3602[label="0.010989;1pkt 1fpkt"];
2508--3616[label="0.010989;1pkt 1fpkt"];
2508--3636[label="0.043956;4pkt 4fpkt"];
2508--3648[label="0.021978;2pkt 2fpkt"];
2508--3654[label="0.010989;1pkt 1fpkt"];
2508--3684[label="0.010989;1pkt 1fpkt"];
2508--3703[label="0.043956;4pkt 4fpkt"];
2508--5115[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="0.6.120.206" dst_port="80" src_ip="133.158.6.95"/>
    </slice>
    <from sec="1134363620" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.255.10.95"/>
    </slice>
    <from sec="1134364313" usec="0"/>
    <to sec="1134364333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.160.167.95"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.149.124.97"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.185.239.97"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.82.117.98"/>
    </slice>
    <from sec="1134363960" usec="0"/>
    <to sec="1134364004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
5178[label="16.134.222.98;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.134.222.98:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 1719: (2.04082%)&lt;BR/&gt; 4968: (1.02041%)&lt;BR/&gt; 4933: (1.02041%)&lt;BR/&gt; 4931: (1.02041%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="16.134.222.98"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.120.122.99"/>
    </slice>
    <from sec="1134363625" usec="0"/>
    <to sec="1134363656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.160.236.99"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.186.31.101"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.239.53.102"/>
    </slice>
    <from sec="1134363674" usec="0"/>
    <to sec="1134364486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.152.104.102"/>
    </slice>
    <from sec="1134363720" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.106.202.102"/>
    </slice>
    <from sec="1134363892" usec="0"/>
    <to sec="1134363964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.227.208.102"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.61.15.103"/>
    </slice>
    <from sec="1134363637" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.194.103"/>
    </slice>
    <from sec="1134363621" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.218.103"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.111.15.104"/>
    </slice>
    <from sec="1134363684" usec="0"/>
    <to sec="1134364030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.60.44.104"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.141.244.104"/>
    </slice>
    <from sec="1134363682" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.72.17.105"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.168.68.105"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.162.105"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.71.169.105"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.94.140.106"/>
    </slice>
    <from sec="1134364451" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.115.170.106"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.220.3.107"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.208.81.107"/>
    </slice>
    <from sec="1134364372" usec="0"/>
    <to sec="1134364459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.8.117.107"/>
    </slice>
    <from sec="1134364240" usec="0"/>
    <to sec="1134364275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.115.210.107"/>
    </slice>
    <from sec="1134364085" usec="0"/>
    <to sec="1134364124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.130.64.108"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.193.82.108"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.145.86.108"/>
    </slice>
    <from sec="1134363890" usec="0"/>
    <to sec="1134364418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.7.8.109"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.133.8.109"/>
    </slice>
    <from sec="1134363694" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.13.72.109"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.152.139.109"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.233.146.109"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.190.192.109"/>
    </slice>
    <from sec="1134363708" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.180.6.110"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.167.32.110"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.34.235.110"/>
    </slice>
    <from sec="1134363774" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.233.40.111"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.48.103.111"/>
    </slice>
    <from sec="1134363701" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.68.147.111"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.115.112"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.149.125.112"/>
    </slice>
    <from sec="1134364035" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
5120[label="133.158.138.95;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.138.95:*, 212.139.216.246:80}[57.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2056: (2.63158%)&lt;BR/&gt; 2055: (2.63158%)&lt;BR/&gt; 2054: (2.63158%)&lt;BR/&gt; 2051: (2.63158%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="212.139.216.246" dst_port="80" src_ip="133.158.138.95"/>
    </slice>
    <from sec="1134364363" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.78.195.112"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.80.186.113"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.201.242.113"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.28.80.114"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.115.102.114"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.82.173.114"/>
    </slice>
    <from sec="1134363767" usec="0"/>
    <to sec="1134364457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.193.114"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.99.216.114"/>
    </slice>
    <from sec="1134364160" usec="0"/>
    <to sec="1134364468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.24.1.115"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.63.89.116"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.83.135.117"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.118.180.117"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
679[label="151.251.149.153;d;9pkt 9fpkt", shape=diamond, color=yellow];
680[label="68.213.74.119;s;8pkt 8fpkt", shape=diamond, color=yellow];
5469[label="68.213.74.119;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8319[label="68.213.74.119;7pkt 7fpkt", shape=invtriangle, color=brown];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.213.74.119:*, 151.251.149.153:8888}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (48.4375%)&lt;BR/&gt; 37798: (6.25%)&lt;BR/&gt; 37542: (6.25%)&lt;BR/&gt; 37030: (6.25%)&lt;BR/&gt; 34982: (6.25%)&gt;];
}
679--680[label="1;8pkt 8fpkt"];
679--5469[label="1;8pkt 8fpkt"];
679--8319[label="1;7pkt 7fpkt"];
680--5469[label="1;8pkt 8fpkt"];
680--8319[label="1;7pkt 7fpkt"];
5469--8319[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.149.153" dst_port="8888" src_ip="68.213.74.119"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.210.166.119"/>
    </slice>
    <from sec="1134364226" usec="0"/>
    <to sec="1134364280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.227.200.119"/>
    </slice>
    <from sec="1134364132" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.236.7.120"/>
    </slice>
    <from sec="1134364014" usec="0"/>
    <to sec="1134364064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
5480[label="163.180.26.120;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.26.120:*, 193.67.9.135:80}[43.75%]&lt;BR/&gt;{163.180.26.120:*, 193.67.9.196:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3892: (3.125%)&lt;BR/&gt; 3891: (3.125%)&lt;BR/&gt; 3890: (3.125%)&lt;BR/&gt; 3889: (3.125%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="193.67.9.135" dst_port="80" src_ip="163.180.26.120"/>
      <filter dst_ip="193.67.9.196" dst_port="80" src_ip="163.180.26.120"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.180.100.120"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.156.133.120"/>
    </slice>
    <from sec="1134364423" usec="0"/>
    <to sec="1134364474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.37.54.122"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
1456[label="222.200.154.122;s;1415pkt 1415fpkt", shape=diamond, color=yellow];
5513[label="222.200.154.122;1533pkt 1533fpkt", shape=pentagon, color=darkviolet];
8349[label="222.200.154.122;1533pkt 1533fpkt", shape=invtriangle, color=brown];
10262[label="222.200.154.122;1532pkt 1532fpkt", shape=invhouse, color=bisque];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.200.154.122:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 30782: (0.0665225%)&lt;BR/&gt; 30467: (0.0665225%)&lt;BR/&gt; 28182: (0.0665225%)&lt;BR/&gt; 27112: (0.0665225%)&gt;];
}
1456--5513[label="1;1415pkt 1415fpkt"];
1456--8349[label="1;1415pkt 1415fpkt"];
1456--10262[label="1;1415pkt 1415fpkt"];
5513--8349[label="1;1533pkt 1533fpkt"];
5513--10262[label="1;1532pkt 1532fpkt"];
8349--10262[label="1;1532pkt 1532fpkt"];
</description>
    <slice>
      <filter src_ip="222.200.154.122" src_port="7000"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.182.12.124"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.32.29.126"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.92.45.127"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.60.102.128"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.34.157.128"/>
    </slice>
    <from sec="1134363733" usec="0"/>
    <to sec="1134364304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,002,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
2286[label="69.91.113.129;s;508pkt 508fpkt", shape=diamond, color=yellow];
5590[label="69.91.113.129;508pkt 508fpkt", shape=pentagon, color=darkviolet];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.91.113.129:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2286--5590[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="69.91.113.129" src_port="1026"/>
    </slice>
    <from sec="1134364038" usec="0"/>
    <to sec="1134364135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.233.129"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.99.128.130"/>
    </slice>
    <from sec="1134364196" usec="0"/>
    <to sec="1134364216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.133.130"/>
    </slice>
    <from sec="1134363879" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.88.140.130"/>
    </slice>
    <from sec="1134364244" usec="0"/>
    <to sec="1134364337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.203.6.131"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19254,2.25122,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
22[label="216.88.160.131s;1pkt 1fpkt", shape=rectangle, color=red];
5636[label="216.88.160.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.88.160.131:80, 131.160.150.50:53265}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53265: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
22--5636[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.160.150.50" dst_port="53265" src_ip="216.88.160.131" src_port="80"/>
    </slice>
    <from sec="1134364442" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
981[label="197.99.208.131;s;540pkt 540fpkt", shape=diamond, color=yellow];
5640[label="197.99.208.131;620pkt 620fpkt", shape=pentagon, color=darkviolet];
8437[label="197.99.208.131;620pkt 620fpkt", shape=invtriangle, color=brown];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.208.131:37602, *:*}[96.9404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37602: (48.427%)&lt;BR/&gt; 443: (0.983146%)&lt;BR/&gt; 80: (0.589888%)&lt;BR/&gt; 64206: (0.168539%)&lt;BR/&gt; 50574: (0.168539%)&gt;];
}
981--3516[label="0.00185185;1pkt 1fpkt"];
981--3528[label="0.00185185;1pkt 1fpkt"];
981--3596[label="0.00185185;1pkt 1fpkt"];
981--3608[label="0.00185185;1pkt 1fpkt"];
981--3648[label="0.00185185;1pkt 1fpkt"];
981--3675[label="0.00185185;1pkt 1fpkt"];
981--5640[label="0.998148;539pkt 539fpkt"];
981--8437[label="0.998148;539pkt 539fpkt"];
5640--8437[label="1;620pkt 620fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.208.131" src_port="37602"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.153.213.131"/>
    </slice>
    <from sec="1134364276" usec="0"/>
    <to sec="1134364283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.49.81.133"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.176.97.133"/>
    </slice>
    <from sec="1134364441" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.70.169.134"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.86.7.135"/>
    </slice>
    <from sec="1134363897" usec="0"/>
    <to sec="1134363919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.169.106.135"/>
    </slice>
    <from sec="1134364401" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
3140[label="215.50.144.136;s;254pkt 254fpkt", shape=diamond, color=yellow];
5707[label="215.50.144.136;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.50.144.136:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3698: (0.19685%)&lt;BR/&gt; 3697: (0.19685%)&lt;BR/&gt; 3696: (0.19685%)&lt;BR/&gt; 3695: (0.19685%)&gt;];
}
3140--5707[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="215.50.144.136"/>
    </slice>
    <from sec="1134364301" usec="0"/>
    <to sec="1134364407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.162.202.136"/>
    </slice>
    <from sec="1134363992" usec="0"/>
    <to sec="1134364083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
2755[label="131.68.14.137;s;100pkt 100fpkt", shape=diamond, color=yellow];
2936[label="0.131.185.41;d;128pkt 128fpkt", shape=diamond, color=yellow];
5719[label="131.68.14.137;140pkt 140fpkt", shape=pentagon, color=darkviolet];
8488[label="131.68.14.137;140pkt 140fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.14.137:*, 0.131.185.41:80}[99.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7047%)&lt;BR/&gt; 1863: (0.590551%)&lt;BR/&gt; 1805: (0.393701%)&lt;BR/&gt; 1803: (0.393701%)&lt;BR/&gt; 1801: (0.393701%)&gt;];
}
2755--2936[label="0.99;99pkt 99fpkt"];
2755--3488[label="0.01;1pkt 1fpkt"];
2755--3517[label="0.01;1pkt 1fpkt"];
2755--3522[label="0.01;1pkt 1fpkt"];
2755--3536[label="0.01;1pkt 1fpkt"];
2755--3556[label="0.11;11pkt 11fpkt"];
2755--3573[label="0.01;1pkt 1fpkt"];
2755--3597[label="0.01;1pkt 1fpkt"];
2755--3602[label="0.01;1pkt 1fpkt"];
2755--3616[label="0.01;1pkt 1fpkt"];
2755--3636[label="0.11;11pkt 11fpkt"];
2755--3654[label="0.01;1pkt 1fpkt"];
2755--3684[label="0.01;1pkt 1fpkt"];
2755--3703[label="0.11;11pkt 11fpkt"];
2755--5719[label="1;100pkt 100fpkt"];
2755--8488[label="1;100pkt 100fpkt"];
2936--3556[label="0.0859375;11pkt 11fpkt"];
2936--3636[label="0.0859375;11pkt 11fpkt"];
2936--3703[label="0.0859375;11pkt 11fpkt"];
2936--5719[label="1;128pkt 128fpkt"];
2936--8488[label="1;128pkt 128fpkt"];
5719--8488[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_ip="0.131.185.41" dst_port="80" src_ip="131.68.14.137"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.70.59.137"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35315,2.15598,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
25[label="133.158.148.137s;1pkt 1fpkt", shape=rectangle, color=red];
319[label="133.158.148.137;s;3577pkt 3577fpkt", shape=diamond, color=yellow];
1974[label="7.105.192.62;d;2506pkt 2506fpkt", shape=diamond, color=yellow];
5731[label="133.158.148.137;3856pkt 3856fpkt", shape=pentagon, color=darkviolet];
8498[label="133.158.148.137;3856pkt 3856fpkt", shape=invtriangle, color=brown];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.148.137:*, 7.105.192.62:80}[31.4618%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.8324%)&lt;BR/&gt; 53: (5.70455%)&lt;BR/&gt; 25: (2.67469%)&lt;BR/&gt; 7700: (1.8846%)&lt;BR/&gt; 1863: (1.37359%)&gt;];
}
25--319[label="1;1pkt 1fpkt"];
25--1974[label="1;1pkt 1fpkt"];
25--5731[label="1;1pkt 1fpkt"];
25--8498[label="1;1pkt 1fpkt"];
319--1974[label="0.996808;2498pkt 2498fpkt"];
319--3480[label="0.00572738;5pkt 5fpkt"];
319--3481[label="0.00894604;32pkt 32fpkt"];
319--3482[label="0.000864304;2pkt 2fpkt"];
319--3483[label="0.000453309;1pkt 1fpkt"];
319--3484[label="0.00816803;7pkt 7fpkt"];
319--3488[label="0.00215363;6pkt 6fpkt"];
319--3489[label="0.000543478;1pkt 1fpkt"];
319--3490[label="0.000809061;1pkt 1fpkt"];
319--3500[label="0.00108342;1pkt 1fpkt"];
319--3501[label="0.0018315;1pkt 1fpkt"];
319--3504[label="0.0103439;37pkt 37fpkt"];
319--3505[label="0.0296338;106pkt 106fpkt"];
319--3506[label="0.00070922;1pkt 1fpkt"];
319--3508[label="0.00101937;1pkt 1fpkt"];
319--3509[label="0.00391389;14pkt 14fpkt"];
319--3510[label="0.0377411;135pkt 135fpkt"];
319--3513[label="0.00123153;1pkt 1fpkt"];
319--3516[label="0.00160979;5pkt 5fpkt"];
319--3517[label="0.00535117;8pkt 8fpkt"];
319--3520[label="0.0369024;132pkt 132fpkt"];
319--3521[label="0.000338639;1pkt 1fpkt"];
319--3522[label="0.0039267;6pkt 6fpkt"];
319--3527[label="0.0070922;7pkt 7fpkt"];
319--3528[label="0.0117417;42pkt 42fpkt"];
319--3529[label="0.00179856;1pkt 1fpkt"];
319--3530[label="0.000352609;1pkt 1fpkt"];
319--3531[label="0.0131723;12pkt 12fpkt"];
319--3534[label="0.00662252;5pkt 5fpkt"];
319--3536[label="0.00389105;6pkt 6fpkt"];
319--3538[label="0.000853971;1pkt 1fpkt"];
319--3555[label="0.00198413;1pkt 1fpkt"];
319--3556[label="0.0276768;99pkt 99fpkt"];
319--3557[label="0.000752729;2pkt 2fpkt"];
319--3558[label="0.00174723;6pkt 6fpkt"];
319--3564[label="0.00572738;5pkt 5fpkt"];
319--3565[label="0.00894604;32pkt 32fpkt"];
319--3566[label="0.000864304;2pkt 2fpkt"];
319--3567[label="0.00112952;3pkt 3fpkt"];
319--3568[label="0.000453309;1pkt 1fpkt"];
319--3569[label="0.00815851;7pkt 7fpkt"];
319--3573[label="0.00215363;6pkt 6fpkt"];
319--3574[label="0.000543478;1pkt 1fpkt"];
319--3575[label="0.000809061;1pkt 1fpkt"];
319--3581[label="0.00108342;1pkt 1fpkt"];
319--3582[label="0.0018315;1pkt 1fpkt"];
319--3585[label="0.0103439;37pkt 37fpkt"];
319--3586[label="0.000709723;1pkt 1fpkt"];
319--3589[label="0.00101937;1pkt 1fpkt"];
319--3590[label="0.00391389;14pkt 14fpkt"];
319--3591[label="0.0377411;135pkt 135fpkt"];
319--3596[label="0.00160979;5pkt 5fpkt"];
319--3597[label="0.00535117;8pkt 8fpkt"];
319--3600[label="0.0369024;132pkt 132fpkt"];
319--3601[label="0.000338639;1pkt 1fpkt"];
319--3602[label="0.0039267;6pkt 6fpkt"];
319--3607[label="0.0070922;7pkt 7fpkt"];
319--3608[label="0.0117417;42pkt 42fpkt"];
319--3609[label="0.00179856;1pkt 1fpkt"];
319--3610[label="0.000352609;1pkt 1fpkt"];
319--3611[label="0.0131723;12pkt 12fpkt"];
319--3614[label="0.00662252;5pkt 5fpkt"];
319--3616[label="0.00389105;6pkt 6fpkt"];
319--3618[label="0.000853971;1pkt 1fpkt"];
319--3635[label="0.00198413;1pkt 1fpkt"];
319--3636[label="0.0276768;99pkt 99fpkt"];
319--3637[label="0.000752729;2pkt 2fpkt"];
319--3638[label="0.00174723;6pkt 6fpkt"];
319--3642[label="0.00572738;5pkt 5fpkt"];
319--3643[label="0.00894604;32pkt 32fpkt"];
319--3644[label="0.000864304;2pkt 2fpkt"];
319--3645[label="0.00112952;3pkt 3fpkt"];
319--3646[label="0.000453309;1pkt 1fpkt"];
319--3647[label="0.00816803;7pkt 7fpkt"];
319--3648[label="0.0279564;100pkt 100fpkt"];
319--3652[label="0.00124378;4pkt 4fpkt"];
319--3654[label="0.00215363;6pkt 6fpkt"];
319--3655[label="0.000543478;1pkt 1fpkt"];
319--3656[label="0.000809061;1pkt 1fpkt"];
319--3657[label="0.00108342;1pkt 1fpkt"];
319--3658[label="0.0018315;1pkt 1fpkt"];
319--3659[label="0.000279564;1pkt 1fpkt"];
319--3661[label="0.0103439;37pkt 37fpkt"];
319--3662[label="0.0296338;106pkt 106fpkt"];
319--3663[label="0.000709723;1pkt 1fpkt"];
319--3666[label="0.00101937;1pkt 1fpkt"];
319--3668[label="0.0369024;132pkt 132fpkt"];
319--3669[label="0.000338639;1pkt 1fpkt"];
319--3674[label="0.0070922;7pkt 7fpkt"];
319--3675[label="0.0117417;42pkt 42fpkt"];
319--3676[label="0.000342114;1pkt 1fpkt"];
319--3677[label="0.00179856;1pkt 1fpkt"];
319--3678[label="0.000352609;1pkt 1fpkt"];
319--3679[label="0.0131723;12pkt 12fpkt"];
319--3682[label="0.00662252;5pkt 5fpkt"];
319--3684[label="0.00389105;6pkt 6fpkt"];
319--3686[label="0.000853971;1pkt 1fpkt"];
319--3698[label="0.00172414;1pkt 1fpkt"];
319--3702[label="0.00198413;1pkt 1fpkt"];
319--3703[label="0.0276768;99pkt 99fpkt"];
319--3704[label="0.000752729;2pkt 2fpkt"];
319--3705[label="0.00174723;6pkt 6fpkt"];
319--5731[label="0.99972;3576pkt 3576fpkt"];
319--8498[label="0.99972;3576pkt 3576fpkt"];
1974--3480[label="0.00572738;5pkt 5fpkt"];
1974--3481[label="0.0127694;32pkt 32fpkt"];
1974--3482[label="0.000864304;2pkt 2fpkt"];
1974--3483[label="0.000453309;1pkt 1fpkt"];
1974--3484[label="0.00816803;7pkt 7fpkt"];
1974--3488[label="0.00239425;6pkt 6fpkt"];
1974--3489[label="0.000543478;1pkt 1fpkt"];
1974--3490[label="0.000809061;1pkt 1fpkt"];
1974--3500[label="0.00108342;1pkt 1fpkt"];
1974--3501[label="0.0018315;1pkt 1fpkt"];
1974--3504[label="0.0147646;37pkt 37fpkt"];
1974--3505[label="0.0422985;106pkt 106fpkt"];
1974--3506[label="0.00070922;1pkt 1fpkt"];
1974--3508[label="0.00101937;1pkt 1fpkt"];
1974--3509[label="0.00558659;14pkt 14fpkt"];
1974--3510[label="0.0538707;135pkt 135fpkt"];
1974--3513[label="0.00123153;1pkt 1fpkt"];
1974--3516[label="0.00199521;5pkt 5fpkt"];
1974--3517[label="0.00535117;8pkt 8fpkt"];
1974--3520[label="0.0526736;132pkt 132fpkt"];
1974--3521[label="0.000399042;1pkt 1fpkt"];
1974--3522[label="0.0039267;6pkt 6fpkt"];
1974--3528[label="0.00558659;14pkt 14fpkt"];
1974--3530[label="0.000399042;1pkt 1fpkt"];
1974--3531[label="0.00219539;2pkt 2fpkt"];
1974--3534[label="0.0013245;1pkt 1fpkt"];
1974--3536[label="0.00129702;2pkt 2fpkt"];
1974--3556[label="0.0155626;39pkt 39fpkt"];
1974--3558[label="0.00159617;4pkt 4fpkt"];
1974--3564[label="0.00572738;5pkt 5fpkt"];
1974--3565[label="0.0127694;32pkt 32fpkt"];
1974--3566[label="0.000864304;2pkt 2fpkt"];
1974--3567[label="0.00119713;3pkt 3fpkt"];
1974--3568[label="0.000453309;1pkt 1fpkt"];
1974--3569[label="0.00815851;7pkt 7fpkt"];
1974--3573[label="0.00239425;6pkt 6fpkt"];
1974--3574[label="0.000543478;1pkt 1fpkt"];
1974--3575[label="0.000809061;1pkt 1fpkt"];
1974--3581[label="0.00108342;1pkt 1fpkt"];
1974--3582[label="0.0018315;1pkt 1fpkt"];
1974--3585[label="0.0147646;37pkt 37fpkt"];
1974--3586[label="0.000709723;1pkt 1fpkt"];
1974--3589[label="0.00101937;1pkt 1fpkt"];
1974--3590[label="0.00558659;14pkt 14fpkt"];
1974--3591[label="0.0538707;135pkt 135fpkt"];
1974--3596[label="0.00199521;5pkt 5fpkt"];
1974--3597[label="0.00535117;8pkt 8fpkt"];
1974--3600[label="0.0526736;132pkt 132fpkt"];
1974--3601[label="0.000399042;1pkt 1fpkt"];
1974--3602[label="0.0039267;6pkt 6fpkt"];
1974--3608[label="0.00558659;14pkt 14fpkt"];
1974--3610[label="0.000399042;1pkt 1fpkt"];
1974--3611[label="0.00219539;2pkt 2fpkt"];
1974--3614[label="0.0013245;1pkt 1fpkt"];
1974--3616[label="0.00129702;2pkt 2fpkt"];
1974--3636[label="0.0155626;39pkt 39fpkt"];
1974--3638[label="0.00159617;4pkt 4fpkt"];
1974--3642[label="0.00572738;5pkt 5fpkt"];
1974--3643[label="0.0127694;32pkt 32fpkt"];
1974--3644[label="0.000864304;2pkt 2fpkt"];
1974--3645[label="0.00119713;3pkt 3fpkt"];
1974--3646[label="0.000453309;1pkt 1fpkt"];
1974--3647[label="0.00816803;7pkt 7fpkt"];
1974--3648[label="0.0399042;100pkt 100fpkt"];
1974--3652[label="0.00159617;4pkt 4fpkt"];
1974--3654[label="0.00239425;6pkt 6fpkt"];
1974--3655[label="0.000543478;1pkt 1fpkt"];
1974--3656[label="0.000809061;1pkt 1fpkt"];
1974--3657[label="0.00108342;1pkt 1fpkt"];
1974--3658[label="0.0018315;1pkt 1fpkt"];
1974--3659[label="0.000399042;1pkt 1fpkt"];
1974--3661[label="0.0147646;37pkt 37fpkt"];
1974--3662[label="0.0422985;106pkt 106fpkt"];
1974--3663[label="0.000709723;1pkt 1fpkt"];
1974--3666[label="0.00101937;1pkt 1fpkt"];
1974--3668[label="0.0526736;132pkt 132fpkt"];
1974--3669[label="0.000399042;1pkt 1fpkt"];
1974--3675[label="0.00558659;14pkt 14fpkt"];
1974--3678[label="0.000399042;1pkt 1fpkt"];
1974--3679[label="0.00219539;2pkt 2fpkt"];
1974--3682[label="0.0013245;1pkt 1fpkt"];
1974--3684[label="0.00129702;2pkt 2fpkt"];
1974--3698[label="0.00172414;1pkt 1fpkt"];
1974--3703[label="0.0155626;39pkt 39fpkt"];
1974--3705[label="0.00159617;4pkt 4fpkt"];
1974--5731[label="0.996409;2497pkt 2497fpkt"];
1974--8498[label="0.996409;2497pkt 2497fpkt"];
5731--8498[label="1;3856pkt 3856fpkt"];
</description>
    <slice>
      <filter dst_ip="7.105.192.62" dst_port="80" src_ip="133.158.148.137"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
2320[label="196.129.159.138;s;72pkt 72fpkt", shape=diamond, color=yellow];
5751[label="196.129.159.138;73pkt 73fpkt", shape=pentagon, color=darkviolet];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.159.138:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2320--5751[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter src_ip="196.129.159.138"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.102.174.138"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.93.109.139"/>
    </slice>
    <from sec="1134364307" usec="0"/>
    <to sec="1134364325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.57.1.140"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
2150[label="151.251.122.99;d;5pkt 5fpkt", shape=diamond, color=yellow];
2151[label="192.106.194.140;s;5pkt 5fpkt", shape=diamond, color=yellow];
5777[label="192.106.194.140;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.140:1863, *:*}[55.5556%]&lt;BR/&gt;{192.106.2.227:80, 151.251.122.99:*}[33.3333%]&lt;BR/&gt;{*:1863, 151.251.122.99:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (39.2857%)&lt;BR/&gt; 80: (10.7143%)&lt;BR/&gt; 3380: (7.14286%)&lt;BR/&gt; 3182: (7.14286%)&lt;BR/&gt; 2996: (7.14286%)&gt;];
}
2150--2151[label="0.2;1pkt 1fpkt"];
2151--5777[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="192.106.194.140" src_port="1863"/>
      <filter dst_ip="151.251.122.99" src_port="1863"/>
      <filter dst_ip="151.251.122.99" src_ip="192.106.2.227" src_port="80"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.154.128.141"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.250.216.141"/>
    </slice>
    <from sec="1134364389" usec="0"/>
    <to sec="1134364403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.80.97.142"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.153.162.142"/>
    </slice>
    <from sec="1134364453" usec="0"/>
    <to sec="1134364461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.105.20.143"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.152.65.145"/>
    </slice>
    <from sec="1134363782" usec="0"/>
    <to sec="1134363861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
5829[label="217.70.100.145;379pkt 379fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.70.100.145:*, *:139}[87.3351%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (43.6675%)&lt;BR/&gt; 80: (6.33245%)&lt;BR/&gt; 2968: (0.395778%)&lt;BR/&gt; 4292: (0.263852%)&lt;BR/&gt; 3841: (0.263852%)&gt;];
}
</description>
    <slice>
      <filter dst_port="139" src_ip="217.70.100.145"/>
    </slice>
    <from sec="1134364207" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
2153[label="133.158.123.145;s;68pkt 68fpkt", shape=diamond, color=yellow];
5830[label="133.158.123.145;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.123.145:*, 135.111.43.231:80}[88.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6599%)&lt;BR/&gt; 5000: (0.680272%)&lt;BR/&gt; 4999: (0.680272%)&lt;BR/&gt; 4998: (0.680272%)&lt;BR/&gt; 4997: (0.680272%)&gt;];
}
2153--3488[label="0.0147059;1pkt 1fpkt"];
2153--3510[label="0.0147059;1pkt 1fpkt"];
2153--3517[label="0.0147059;1pkt 1fpkt"];
2153--3522[label="0.0147059;1pkt 1fpkt"];
2153--3536[label="0.0147059;1pkt 1fpkt"];
2153--3573[label="0.0147059;1pkt 1fpkt"];
2153--3591[label="0.0147059;1pkt 1fpkt"];
2153--3597[label="0.0147059;1pkt 1fpkt"];
2153--3602[label="0.0147059;1pkt 1fpkt"];
2153--3616[label="0.0147059;1pkt 1fpkt"];
2153--3648[label="0.0294118;2pkt 2fpkt"];
2153--3654[label="0.0147059;1pkt 1fpkt"];
2153--3684[label="0.0147059;1pkt 1fpkt"];
2153--5830[label="0.985294;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="135.111.43.231" dst_port="80" src_ip="133.158.123.145"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.21.146"/>
    </slice>
    <from sec="1134363670" usec="0"/>
    <to sec="1134363785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.108.25.146"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.167.86.146"/>
    </slice>
    <from sec="1134363622" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.108.114.146"/>
    </slice>
    <from sec="1134364279" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.144.116.146"/>
    </slice>
    <from sec="1134364021" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2606[label="216.228.99.64;d;36pkt 36fpkt", shape=diamond, color=yellow];
5846[label="131.82.117.146;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5860[label="131.82.117.147;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8569[label="131.82.117.146;12pkt 12fpkt", shape=invtriangle, color=brown];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.82.117.144:42, 216.228.99.64:*}[25%]&lt;BR/&gt;{131.82.117.146:42, 216.228.99.64:*}[25%]&lt;BR/&gt;{131.82.117.147:42, 216.228.99.64:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (37.5%)&lt;BR/&gt; 80: (8.33333%)&lt;BR/&gt; 0: (8.33333%)&lt;BR/&gt; 1902: (2.08333%)&lt;BR/&gt; 1890: (2.08333%)&gt;];
}
2606--3528[label="0.0277778;1pkt 1fpkt"];
2606--3608[label="0.0277778;1pkt 1fpkt"];
2606--3675[label="0.0277778;1pkt 1fpkt"];
2606--5846[label="1;12pkt 12fpkt"];
2606--5860[label="1;12pkt 12fpkt"];
2606--8569[label="1;12pkt 12fpkt"];
5846--8569[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="216.228.99.64" src_ip="131.82.117.147" src_port="42"/>
      <filter dst_ip="216.228.99.64" src_ip="131.82.117.146" src_port="42"/>
      <filter dst_ip="216.228.99.64" src_ip="131.82.117.144" src_port="42"/>
    </slice>
    <from sec="1134364159" usec="0"/>
    <to sec="1134364422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.194.146"/>
    </slice>
    <from sec="1134364022" usec="0"/>
    <to sec="1134364086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.169.152.148"/>
    </slice>
    <from sec="1134363635" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.115.234.148"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.234.52.149"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.152.90.150"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.180.138.150"/>
    </slice>
    <from sec="1134363616" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.33.153.150"/>
    </slice>
    <from sec="1134363682" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.132.100.151"/>
    </slice>
    <from sec="1134364165" usec="0"/>
    <to sec="1134364472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.99.208.151"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
1718[label="197.99.219.152;s;288pkt 288fpkt", shape=diamond, color=yellow];
5922[label="197.99.219.152;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8623[label="197.99.219.152;2pkt 2fpkt", shape=invtriangle, color=brown];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.219.152:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1718--5922[label="1;3pkt 3fpkt"];
1718--8623[label="1;2pkt 2fpkt"];
5922--8623[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.219.152"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
611[label="196.139.253.111;d;282pkt 282fpkt", shape=diamond, color=yellow];
1388[label="221.227.208.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
1451[label="216.163.175.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
1783[label="69.101.28.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
1801[label="221.234.214.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
2035[label="221.204.89.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
2484[label="217.77.80.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
2524[label="214.117.161.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
2548[label="216.205.236.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
2701[label="66.184.250.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2914[label="216.194.26.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
4601[label="220.155.161.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5336[label="66.57.82.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5697[label="220.164.11.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5931[label="221.204.89.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6201[label="216.204.68.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6397[label="221.239.209.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6838[label="216.164.26.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8177[label="221.227.208.102;1pkt 1fpkt", shape=invtriangle, color=brown];
8242[label="66.57.82.109;1pkt 1fpkt", shape=invtriangle, color=brown];
8806[label="216.204.68.173;1pkt 1fpkt", shape=invtriangle, color=brown];
9256[label="216.164.26.228;1pkt 1fpkt", shape=invtriangle, color=brown];
9628[label="221.237.198.18;1pkt 1fpkt", shape=invhouse, color=bisque];
10188[label="66.57.82.109;1pkt 1fpkt", shape=invhouse, color=bisque];
10446[label="221.204.89.153;1pkt 1fpkt", shape=invhouse, color=bisque];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.139.253.111:18551}[38.6525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18551: (17.8105%)&lt;BR/&gt; 6881: (3.26797%)&lt;BR/&gt; 16881: (2.77778%)&lt;BR/&gt; 0: (1.96078%)&lt;BR/&gt; 22000: (0.816993%)&gt;];
}
611--932[label="0.0035461;1pkt 1fpkt"];
611--1388[label="1;1pkt 1fpkt"];
611--1451[label="1;1pkt 1fpkt"];
611--1783[label="1;1pkt 1fpkt"];
611--1801[label="1;1pkt 1fpkt"];
611--2035[label="1;1pkt 1fpkt"];
611--2484[label="1;1pkt 1fpkt"];
611--2524[label="1;1pkt 1fpkt"];
611--2548[label="1;1pkt 1fpkt"];
611--2701[label="1;1pkt 1fpkt"];
611--2914[label="1;1pkt 1fpkt"];
611--3183[label="0.0035461;1pkt 1fpkt"];
611--3458[label="0.0035461;1pkt 1fpkt"];
611--3503[label="0.0035461;1pkt 1fpkt"];
611--3584[label="0.0035461;1pkt 1fpkt"];
611--3659[label="0.0035461;1pkt 1fpkt"];
611--4601[label="1;1pkt 1fpkt"];
611--5336[label="1;1pkt 1fpkt"];
611--5697[label="1;1pkt 1fpkt"];
611--5931[label="1;1pkt 1fpkt"];
611--6201[label="1;1pkt 1fpkt"];
611--6397[label="1;1pkt 1fpkt"];
611--6838[label="1;1pkt 1fpkt"];
611--8177[label="1;1pkt 1fpkt"];
611--8242[label="1;1pkt 1fpkt"];
611--8806[label="1;1pkt 1fpkt"];
611--9256[label="1;1pkt 1fpkt"];
611--9628[label="1;1pkt 1fpkt"];
611--10188[label="1;1pkt 1fpkt"];
611--10446[label="1;1pkt 1fpkt"];
1388--8177[label="1;1pkt 1fpkt"];
2035--5931[label="1;1pkt 1fpkt"];
2035--10446[label="1;1pkt 1fpkt"];
5336--8242[label="1;1pkt 1fpkt"];
5336--10188[label="1;1pkt 1fpkt"];
5931--10446[label="1;1pkt 1fpkt"];
6201--8806[label="1;1pkt 1fpkt"];
6838--9256[label="1;1pkt 1fpkt"];
8242--10188[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.253.111" dst_port="18551"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.150.154"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.194.154"/>
    </slice>
    <from sec="1134363892" usec="0"/>
    <to sec="1134364335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.173.38.155"/>
    </slice>
    <from sec="1134363637" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.72.113.155"/>
    </slice>
    <from sec="1134364287" usec="0"/>
    <to sec="1134364408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.32.139.155"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.142.156"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.161.193.156"/>
    </slice>
    <from sec="1134363888" usec="0"/>
    <to sec="1134363973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.199.157"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.232.53.158"/>
    </slice>
    <from sec="1134363634" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.10.76.158"/>
    </slice>
    <from sec="1134364414" usec="0"/>
    <to sec="1134364442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.134.215.158"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.98.5.159"/>
    </slice>
    <from sec="1134364256" usec="0"/>
    <to sec="1134364412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.6.74.159"/>
    </slice>
    <from sec="1134364107" usec="0"/>
    <to sec="1134364146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.206.129.160"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.239.151.160"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.68.11.161"/>
    </slice>
    <from sec="1134363646" usec="0"/>
    <to sec="1134363694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.61.57.161"/>
    </slice>
    <from sec="1134363622" usec="0"/>
    <to sec="1134364463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.190.173.161"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.56.253.161"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.173.17.162"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
107[label="18.208.110.162s;218pkt 218fpkt", shape=rectangle, color=red];
6043[label="18.208.110.162;218pkt 218fpkt", shape=pentagon, color=darkviolet];
8698[label="18.208.110.162;218pkt 218fpkt", shape=invtriangle, color=brown];
10494[label="18.208.110.162;217pkt 217fpkt", shape=invhouse, color=bisque];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.208.110.162:*, *:9898}[62.3853%]&lt;BR/&gt;{18.208.110.162:*, *:5554}[37.6147%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (31.1711%)&lt;BR/&gt; 5554: (18.8289%)&lt;BR/&gt; 4997: (0.229621%)&lt;BR/&gt; 4984: (0.229621%)&lt;BR/&gt; 4983: (0.229621%)&gt;];
}
107--6043[label="1;218pkt 218fpkt"];
107--8698[label="1;218pkt 218fpkt"];
107--10494[label="1;217pkt 217fpkt"];
6043--8698[label="1;218pkt 218fpkt"];
6043--10494[label="1;217pkt 217fpkt"];
8698--10494[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="18.208.110.162"/>
      <filter dst_port="5554" src_ip="18.208.110.162"/>
    </slice>
    <from sec="1134364178" usec="0"/>
    <to sec="1134364182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.165.156.162"/>
    </slice>
    <from sec="1134364383" usec="0"/>
    <to sec="1134364395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.163.175.162"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
6065[label="197.99.198.163;82pkt 82fpkt", shape=pentagon, color=darkviolet];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.198.163:46174, *:*}[90.2439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46174: (45.122%)&lt;BR/&gt; 80: (2.43902%)&lt;BR/&gt; 21522: (1.21951%)&lt;BR/&gt; 1591: (1.21951%)&lt;BR/&gt; 1412: (1.21951%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.99.198.163" src_port="46174"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
6072[label="160.137.23.164;91pkt 91fpkt", shape=pentagon, color=darkviolet];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.137.23.164:53, *:*}[98.9011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.5934%)&lt;BR/&gt; 32768: (2.74725%)&lt;BR/&gt; 9253: (1.0989%)&lt;BR/&gt; 65152: (0.549451%)&lt;BR/&gt; 64677: (0.549451%)&gt;];
}
</description>
    <slice>
      <filter src_ip="160.137.23.164" src_port="53"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.35.164"/>
    </slice>
    <from sec="1134363664" usec="0"/>
    <to sec="1134364221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
1743[label="133.158.86.164;s;284pkt 284fpkt", shape=diamond, color=yellow];
6077[label="133.158.86.164;303pkt 303fpkt", shape=pentagon, color=darkviolet];
8722[label="133.158.86.164;303pkt 303fpkt", shape=invtriangle, color=brown];
10515[label="133.158.86.164;303pkt 303fpkt", shape=invhouse, color=bisque];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.86.164:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1743--1749[label="0.00352113;1pkt 1fpkt"];
1743--1983[label="0.00352113;1pkt 1fpkt"];
1743--2321[label="0.00462963;1pkt 1fpkt"];
1743--2329[label="0.00425532;1pkt 1fpkt"];
1743--2334[label="0.00401606;1pkt 1fpkt"];
1743--2362[label="0.00390625;1pkt 1fpkt"];
1743--2646[label="0.00352113;1pkt 1fpkt"];
1743--2652[label="0.0037594;1pkt 1fpkt"];
1743--2973[label="0.00473934;1pkt 1fpkt"];
1743--6077[label="1;284pkt 284fpkt"];
1743--8722[label="1;284pkt 284fpkt"];
1743--10515[label="1;284pkt 284fpkt"];
6077--8722[label="1;303pkt 303fpkt"];
6077--10515[label="1;303pkt 303fpkt"];
8722--10515[label="1;303pkt 303fpkt"];
</description>
    <slice>
      <filter src_ip="133.158.86.164"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.139.229.164"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.241.119.165"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.54.252.165"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.77.80.166"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.58.251.166"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
1955[label="218.40.84.167;s;512pkt 512fpkt", shape=diamond, color=yellow];
6123[label="218.40.84.167;511pkt 511fpkt", shape=pentagon, color=darkviolet];
8754[label="218.40.84.167;512pkt 512fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.40.84.167:*, *:139}[50%]&lt;BR/&gt;{218.40.84.167:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0163%)&lt;BR/&gt; 139: (24.9837%)&lt;BR/&gt; 4240: (0.0977199%)&lt;BR/&gt; 4239: (0.0977199%)&lt;BR/&gt; 4238: (0.0977199%)&gt;];
}
1955--6123[label="1;511pkt 511fpkt"];
1955--8754[label="1;512pkt 512fpkt"];
6123--8754[label="1;511pkt 511fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="218.40.84.167"/>
      <filter dst_port="139" src_ip="218.40.84.167"/>
    </slice>
    <from sec="1134363989" usec="0"/>
    <to sec="1134364042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.68.163.167"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.173.117.168"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.74.166.168"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.218.200.168"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35315,2.15598,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
63[label="66.15.151.169s;1pkt 1fpkt", shape=rectangle, color=red];
3069[label="163.180.135.169;s;16pkt 16fpkt", shape=diamond, color=yellow];
6148[label="163.180.135.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8770[label="163.180.135.169;1pkt 1fpkt", shape=invtriangle, color=brown];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.135.169:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1475: (10.5263%)&lt;BR/&gt; 62379: (2.63158%)&lt;BR/&gt; 59722: (2.63158%)&lt;BR/&gt; 51927: (2.63158%)&gt;];
}
63--3069[label="1;1pkt 1fpkt"];
63--6148[label="1;1pkt 1fpkt"];
63--8770[label="1;1pkt 1fpkt"];
3069--3504[label="0.0625;1pkt 1fpkt"];
3069--3528[label="0.125;2pkt 2fpkt"];
3069--3585[label="0.0625;1pkt 1fpkt"];
3069--3608[label="0.125;2pkt 2fpkt"];
3069--3661[label="0.0625;1pkt 1fpkt"];
3069--3675[label="0.125;2pkt 2fpkt"];
3069--6148[label="1;1pkt 1fpkt"];
3069--8770[label="1;1pkt 1fpkt"];
6148--8770[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="163.180.135.169" src_port="80"/>
    </slice>
    <from sec="1134363615" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20567,2.20699,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
62[label="197.68.138.169s;238pkt 238fpkt", shape=rectangle, color=red];
6149[label="197.68.138.169;255pkt 255fpkt", shape=pentagon, color=darkviolet];
8771[label="197.68.138.169;254pkt 254fpkt", shape=invtriangle, color=brown];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.138.169:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
62--6149[label="1;238pkt 238fpkt"];
62--8771[label="0.995798;237pkt 237fpkt"];
6149--8771[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.68.138.169" src_port="1045"/>
    </slice>
    <from sec="1134364112" usec="0"/>
    <to sec="1134364126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.168.188.169"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.180.214.169"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
1353[label="0.253.226.169;s;7pkt 7fpkt", shape=diamond, color=yellow];
6156[label="0.253.226.169;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8778[label="0.253.226.169;6pkt 6fpkt", shape=invtriangle, color=brown];
10559[label="0.253.226.169;7pkt 7fpkt", shape=invhouse, color=bisque];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.253.226.169:80, 131.156.17.138:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3961: (7.40741%)&lt;BR/&gt; 3960: (7.40741%)&lt;BR/&gt; 3959: (7.40741%)&lt;BR/&gt; 3955: (7.40741%)&gt;];
}
1353--6156[label="1;7pkt 7fpkt"];
1353--8778[label="1;6pkt 6fpkt"];
1353--10559[label="1;7pkt 7fpkt"];
6156--8778[label="1;6pkt 6fpkt"];
6156--10559[label="1;7pkt 7fpkt"];
8778--10559[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="131.156.17.138" src_ip="0.253.226.169" src_port="80"/>
    </slice>
    <from sec="1134363840" usec="0"/>
    <to sec="1134363946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.15.70.171"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.89.106.171"/>
    </slice>
    <from sec="1134364330" usec="0"/>
    <to sec="1134364378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.116.171"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
2652[label="3.36.142.247;d;266pkt 266fpkt", shape=diamond, color=yellow];
6188[label="197.99.217.171;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 3.36.142.247:0}[78.2353%]&lt;BR/&gt;{197.99.217.171:0, *:0}[22.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2652--3174[label="0.00515464;1pkt 1fpkt"];
2652--3184[label="0.00423729;1pkt 1fpkt"];
2652--3276[label="0.00411523;1pkt 1fpkt"];
2652--3288[label="0.0037594;1pkt 1fpkt"];
2652--4457[label="0.0037594;1pkt 1fpkt"];
2652--4498[label="0.0037594;1pkt 1fpkt"];
2652--4992[label="0.00485437;1pkt 1fpkt"];
2652--5366[label="0.00502513;1pkt 1fpkt"];
2652--6038[label="0.0037594;1pkt 1fpkt"];
2652--6077[label="0.0037594;1pkt 1fpkt"];
2652--6188[label="0.0133333;1pkt 1fpkt"];
2652--6302[label="0.00502513;1pkt 1fpkt"];
2652--7641[label="0.0037594;1pkt 1fpkt"];
2652--8005[label="0.00485437;1pkt 1fpkt"];
2652--8257[label="0.005;1pkt 1fpkt"];
2652--8722[label="0.0037594;1pkt 1fpkt"];
2652--9811[label="0.0037594;1pkt 1fpkt"];
2652--10198[label="0.00502513;1pkt 1fpkt"];
2652--10515[label="0.0037594;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.217.171"/>
      <filter dst_ip="3.36.142.247"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.142.251.171"/>
    </slice>
    <from sec="1134364184" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.209.200.173"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.207.67.175"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
2562[label="193.67.13.176;s;11pkt 11fpkt", shape=diamond, color=yellow];
6224[label="193.67.13.176;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8823[label="193.67.13.176;11pkt 11fpkt", shape=invtriangle, color=brown];
10589[label="193.67.13.176;10pkt 10fpkt", shape=invhouse, color=bisque];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.67.13.176:80, 131.68.7.42:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2382: (4.65116%)&lt;BR/&gt; 1452: (4.65116%)&lt;BR/&gt; 1450: (4.65116%)&lt;BR/&gt; 1448: (4.65116%)&gt;];
}
2562--6224[label="1;11pkt 11fpkt"];
2562--8823[label="1;11pkt 11fpkt"];
2562--10589[label="1;10pkt 10fpkt"];
6224--8823[label="1;11pkt 11fpkt"];
6224--10589[label="1;10pkt 10fpkt"];
8823--10589[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.7.42" src_ip="193.67.13.176" src_port="80"/>
    </slice>
    <from sec="1134363960" usec="0"/>
    <to sec="1134364214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.214.137.177"/>
    </slice>
    <from sec="1134364135" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.115.146.177"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.239.58.180"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.90.206.180"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
2989[label="197.99.222.180;s;37pkt 37fpkt", shape=diamond, color=yellow];
6290[label="197.99.222.180;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.222.180:1025, *:*}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (47.3333%)&lt;BR/&gt; 1331: (2.66667%)&lt;BR/&gt; 0: (2.66667%)&lt;BR/&gt; 65480: (1.33333%)&lt;BR/&gt; 65043: (1.33333%)&gt;];
}
2989--6290[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.222.180" src_port="1025"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.176.81.181"/>
    </slice>
    <from sec="1134364421" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.43.205.181"/>
    </slice>
    <from sec="1134364418" usec="0"/>
    <to sec="1134364450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
6302[label="197.99.217.181;199pkt 199fpkt", shape=pentagon, color=darkviolet];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.217.181:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.99.217.181"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798004,2.27112,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
666[label="2.21.173.127;d;101pkt 101fpkt", shape=diamond, color=yellow];
2647[label="163.180.24.24;s;103pkt 103fpkt", shape=diamond, color=yellow];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.24.24:*, 2.21.173.127:8080}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (49.2647%)&lt;BR/&gt; 4446: (0.490196%)&lt;BR/&gt; 4444: (0.490196%)&lt;BR/&gt; 4442: (0.490196%)&lt;BR/&gt; 4440: (0.490196%)&gt;];
}
666--724[label="0.0666667;1pkt 1fpkt"];
666--2647[label="0.990099;100pkt 100fpkt"];
666--6309[label="0.0666667;1pkt 1fpkt"];
666--8880[label="0.0666667;1pkt 1fpkt"];
666--10627[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.21.173.127" dst_port="8080" src_ip="163.180.24.24"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.225.128.184"/>
    </slice>
    <from sec="1134363639" usec="0"/>
    <to sec="1134363707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.34.179.184"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
475[label="220.216.6.185;s;256pkt 256fpkt", shape=diamond, color=yellow];
6344[label="220.216.6.185;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.216.6.185:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
475--6344[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter src_ip="220.216.6.185"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.170.185"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.220.138.186"/>
    </slice>
    <from sec="1134364202" usec="0"/>
    <to sec="1134364333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.45.218.186"/>
    </slice>
    <from sec="1134363615" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
64[label="216.41.180.187s;203pkt 203fpkt", shape=rectangle, color=red];
6370[label="216.41.180.187;247pkt 247fpkt", shape=pentagon, color=darkviolet];
8924[label="216.41.180.187;246pkt 246fpkt", shape=invtriangle, color=brown];
10654[label="216.41.180.187;247pkt 247fpkt", shape=invhouse, color=bisque];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.41.180.187:1103, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1103: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
64--6370[label="1;203pkt 203fpkt"];
64--8924[label="1;203pkt 203fpkt"];
64--10654[label="1;203pkt 203fpkt"];
6370--8924[label="1;246pkt 246fpkt"];
6370--10654[label="1;247pkt 247fpkt"];
8924--10654[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.41.180.187" src_port="1103"/>
    </slice>
    <from sec="1134363979" usec="0"/>
    <to sec="1134363993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
65[label="215.156.158.188s;168pkt 168fpkt", shape=rectangle, color=red];
6377[label="215.156.158.188;255pkt 255fpkt", shape=pentagon, color=darkviolet];
8931[label="215.156.158.188;255pkt 255fpkt", shape=invtriangle, color=brown];
10660[label="215.156.158.188;254pkt 254fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.158.188:13613, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13613: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
65--6377[label="1;168pkt 168fpkt"];
65--8931[label="1;168pkt 168fpkt"];
65--10660[label="1;168pkt 168fpkt"];
6377--8931[label="1;255pkt 255fpkt"];
6377--10660[label="1;254pkt 254fpkt"];
8931--10660[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.156.158.188" src_port="13613"/>
    </slice>
    <from sec="1134363783" usec="0"/>
    <to sec="1134363810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.34.237.189"/>
    </slice>
    <from sec="1134363749" usec="0"/>
    <to sec="1134364149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.1.24.191"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.105.196.191"/>
    </slice>
    <from sec="1134363749" usec="0"/>
    <to sec="1134364284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.228.4.192"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.238.33.192"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.154.192"/>
    </slice>
    <from sec="1134364254" usec="0"/>
    <to sec="1134364268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.99.222.194"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.263,2.17367,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
67[label="217.186.129.197s;79pkt 79fpkt", shape=rectangle, color=red];
6472[label="217.186.129.197;256pkt 256fpkt", shape=pentagon, color=darkviolet];
9002[label="217.186.129.197;256pkt 256fpkt", shape=invtriangle, color=brown];
10706[label="217.186.129.197;255pkt 255fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.186.129.197:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
67--6472[label="1;79pkt 79fpkt"];
67--9002[label="1;79pkt 79fpkt"];
67--10706[label="1;79pkt 79fpkt"];
6472--9002[label="1;256pkt 256fpkt"];
6472--10706[label="1;255pkt 255fpkt"];
9002--10706[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.186.129.197" src_port="1027"/>
    </slice>
    <from sec="1134364214" usec="0"/>
    <to sec="1134364228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
279[label="200.12.93.65;s;138pkt 138fpkt", shape=diamond, color=yellow];
1021[label="200.110.162.197;s;134pkt 134fpkt", shape=diamond, color=yellow];
2678[label="166.115.138.199;d;126pkt 126fpkt", shape=diamond, color=yellow];
2707[label="166.115.79.241;d;111pkt 111fpkt", shape=diamond, color=yellow];
4686[label="200.12.93.65;153pkt 153fpkt", shape=pentagon, color=darkviolet];
6476[label="200.110.162.197;144pkt 144fpkt", shape=pentagon, color=darkviolet];
9004[label="200.110.162.197;144pkt 144fpkt", shape=invtriangle, color=brown];
10708[label="200.110.162.197;143pkt 143fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.12.93.65:6667, 166.115.138.199:*}[23.569%]&lt;BR/&gt;{200.12.93.65:6667, 166.115.79.241:*}[22.8956%]&lt;BR/&gt;{200.110.162.197:6667, 166.115.138.199:*}[22.5589%]&lt;BR/&gt;{200.110.162.197:6667, 166.115.79.241:*}[21.5488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (47.4382%)&lt;BR/&gt; 113: (0.777676%)&lt;BR/&gt; 6664: (0.457457%)&lt;BR/&gt; 6666: (0.411711%)&lt;BR/&gt; 2441: (0.411711%)&gt;];
}
279--2678[label="0.492063;62pkt 62fpkt"];
279--2707[label="0.513514;57pkt 57fpkt"];
279--4686[label="1;138pkt 138fpkt"];
1021--2678[label="0.507937;64pkt 64fpkt"];
1021--2707[label="0.486486;54pkt 54fpkt"];
1021--6476[label="1;134pkt 134fpkt"];
1021--9004[label="1;134pkt 134fpkt"];
1021--10708[label="0.992537;133pkt 133fpkt"];
2678--4686[label="0.492063;62pkt 62fpkt"];
2678--6476[label="0.507937;64pkt 64fpkt"];
2678--9004[label="0.507937;64pkt 64fpkt"];
2678--10708[label="0.507937;64pkt 64fpkt"];
2707--4686[label="0.513514;57pkt 57fpkt"];
2707--6476[label="0.486486;54pkt 54fpkt"];
2707--9004[label="0.486486;54pkt 54fpkt"];
2707--10708[label="0.486486;54pkt 54fpkt"];
6476--9004[label="1;144pkt 144fpkt"];
6476--10708[label="1;143pkt 143fpkt"];
9004--10708[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="166.115.138.199" src_ip="200.12.93.65" src_port="6667"/>
      <filter dst_ip="166.115.79.241" src_ip="200.12.93.65" src_port="6667"/>
      <filter dst_ip="166.115.138.199" src_ip="200.110.162.197" src_port="6667"/>
      <filter dst_ip="166.115.79.241" src_ip="200.110.162.197" src_port="6667"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.49.177.197"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.38.111.198"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.138.198"/>
    </slice>
    <from sec="1134364462" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
6496[label="220.132.229.199;171pkt 171fpkt", shape=pentagon, color=darkviolet];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.132.229.199:*, *:1026}[52.0468%]&lt;BR/&gt;{220.132.229.199:*, *:1027}[47.9532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (26.0234%)&lt;BR/&gt; 1027: (23.9766%)&lt;BR/&gt; 53648: (0.877193%)&lt;BR/&gt; 55203: (0.584795%)&lt;BR/&gt; 55170: (0.584795%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.132.229.199"/>
      <filter dst_port="1027" src_ip="220.132.229.199"/>
    </slice>
    <from sec="1134364349" usec="0"/>
    <to sec="1134364350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.91.146.200"/>
    </slice>
    <from sec="1134363784" usec="0"/>
    <to sec="1134363844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.183.229.200"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.137.201"/>
    </slice>
    <from sec="1134364089" usec="0"/>
    <to sec="1134364430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
1011[label="133.158.116.79;d;20pkt 20fpkt", shape=diamond, color=yellow];
2331[label="213.201.177.201;s;19pkt 19fpkt", shape=diamond, color=yellow];
6514[label="213.201.177.201;19pkt 19fpkt", shape=pentagon, color=darkviolet];
9028[label="213.201.177.201;19pkt 19fpkt", shape=invtriangle, color=brown];
10719[label="213.201.177.201;19pkt 19fpkt", shape=invhouse, color=bisque];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.201.177.201:*, 133.158.116.79:80}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60653: (2.60417%)&lt;BR/&gt; 59035: (2.60417%)&lt;BR/&gt; 58553: (2.60417%)&lt;BR/&gt; 55638: (2.60417%)&gt;];
}
1011--2331[label="1;19pkt 19fpkt"];
1011--2789[label="0.05;1pkt 1fpkt"];
1011--3505[label="0.05;1pkt 1fpkt"];
1011--3510[label="0.1;2pkt 2fpkt"];
1011--3520[label="0.1;2pkt 2fpkt"];
1011--3591[label="0.1;2pkt 2fpkt"];
1011--3600[label="0.1;2pkt 2fpkt"];
1011--3648[label="0.1;2pkt 2fpkt"];
1011--3662[label="0.05;1pkt 1fpkt"];
1011--3668[label="0.1;2pkt 2fpkt"];
1011--6514[label="1;19pkt 19fpkt"];
1011--9028[label="1;19pkt 19fpkt"];
1011--10719[label="1;19pkt 19fpkt"];
2331--3505[label="0.0526316;1pkt 1fpkt"];
2331--3510[label="0.105263;2pkt 2fpkt"];
2331--3520[label="0.105263;2pkt 2fpkt"];
2331--3591[label="0.105263;2pkt 2fpkt"];
2331--3600[label="0.105263;2pkt 2fpkt"];
2331--3648[label="0.105263;2pkt 2fpkt"];
2331--3662[label="0.0526316;1pkt 1fpkt"];
2331--3668[label="0.105263;2pkt 2fpkt"];
2331--6514[label="1;19pkt 19fpkt"];
2331--9028[label="1;19pkt 19fpkt"];
2331--10719[label="1;19pkt 19fpkt"];
6514--9028[label="1;19pkt 19fpkt"];
6514--10719[label="1;19pkt 19fpkt"];
9028--10719[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.116.79" dst_port="80" src_ip="213.201.177.201"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40447,2.12186,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
47[label="196.242.77.22s;1pkt 1fpkt", shape=rectangle, color=red];
243[label="197.99.213.188;d;1105pkt 1105fpkt", shape=diamond, color=yellow];
786[label="123.17.52.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
942[label="0.139.14.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
1810[label="18.60.102.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
2105[label="198.26.169.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
2264[label="123.183.216.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2421[label="18.182.94.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
2656[label="199.84.227.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
5349[label="18.180.139.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5559[label="6.134.52.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5571[label="16.170.140.128;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6530[label="123.183.216.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6692[label="123.17.52.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6740[label="213.214.99.220;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6808[label="0.139.14.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6899[label="4.16.35.233;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8382[label="6.134.52.127;2pkt 2fpkt", shape=invtriangle, color=brown];
9037[label="123.183.216.202;1pkt 1fpkt", shape=invtriangle, color=brown];
9150[label="123.17.52.217;1pkt 1fpkt", shape=invtriangle, color=brown];
9184[label="213.214.99.220;3pkt 3fpkt", shape=invtriangle, color=brown];
10278[label="6.134.52.127;1pkt 1fpkt", shape=invhouse, color=bisque];
10857[label="0.139.14.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.99.213.188:6881}[96.477%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (48.5903%)&lt;BR/&gt; 0: (1.5859%)&lt;BR/&gt; 15001: (0.61674%)&lt;BR/&gt; 16881: (0.396476%)&lt;BR/&gt; 80: (0.352423%)&gt;];
}
47--243[label="1;1pkt 1fpkt"];
243--786[label="1;1pkt 1fpkt"];
243--942[label="1;1pkt 1fpkt"];
243--1752[label="0.0545455;3pkt 3fpkt"];
243--1810[label="1;1pkt 1fpkt"];
243--2105[label="1;1pkt 1fpkt"];
243--2264[label="1;1pkt 1fpkt"];
243--2421[label="1;1pkt 1fpkt"];
243--2656[label="1;1pkt 1fpkt"];
243--5349[label="1;1pkt 1fpkt"];
243--5559[label="1;1pkt 1fpkt"];
243--5571[label="1;3pkt 3fpkt"];
243--6530[label="1;1pkt 1fpkt"];
243--6692[label="1;1pkt 1fpkt"];
243--6740[label="0.666667;2pkt 2fpkt"];
243--6808[label="1;1pkt 1fpkt"];
243--6899[label="0.5;1pkt 1fpkt"];
243--8382[label="1;2pkt 2fpkt"];
243--9037[label="1;1pkt 1fpkt"];
243--9150[label="1;1pkt 1fpkt"];
243--9184[label="0.666667;2pkt 2fpkt"];
243--10278[label="1;1pkt 1fpkt"];
243--10857[label="1;1pkt 1fpkt"];
786--6692[label="1;1pkt 1fpkt"];
786--9150[label="1;1pkt 1fpkt"];
942--6808[label="1;1pkt 1fpkt"];
942--10857[label="1;1pkt 1fpkt"];
2264--6530[label="1;1pkt 1fpkt"];
2264--9037[label="1;1pkt 1fpkt"];
5559--8382[label="1;1pkt 1fpkt"];
5559--10278[label="1;1pkt 1fpkt"];
6530--9037[label="1;1pkt 1fpkt"];
6692--9150[label="1;1pkt 1fpkt"];
6740--9184[label="1;3pkt 3fpkt"];
6808--10857[label="1;1pkt 1fpkt"];
8382--10278[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.213.188" dst_port="6881"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.184.250.202"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.139.249.205"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.117.89.207"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.192.149.207"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,012,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
1782[label="194.10.118.210;s;224pkt 224fpkt", shape=diamond, color=yellow];
6617[label="194.10.118.210;267pkt 267fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.10.118.210:*, *:2100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2100: (50%)&lt;BR/&gt; 2341: (0.407332%)&lt;BR/&gt; 1944: (0.407332%)&lt;BR/&gt; 2628: (0.305499%)&lt;BR/&gt; 2609: (0.305499%)&gt;];
}
1782--6617[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="2100" src_ip="194.10.118.210"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.147.100.211"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.118.117.211"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.19.22.212"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.180.116.212"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.32.167.212"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.17.139.213"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
572[label="215.15.119.88;d;3pkt 3fpkt", shape=diamond, color=yellow];
1970[label="197.99.213.198;s;3pkt 3fpkt", shape=diamond, color=yellow];
2047[label="197.99.213.214;s;3pkt 3fpkt", shape=diamond, color=yellow];
6490[label="197.99.213.198;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6666[label="197.99.213.214;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9128[label="197.99.213.214;4pkt 4fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.213.198:0, *:0}[40%]&lt;BR/&gt;{*:0, 215.15.119.88:0}[30%]&lt;BR/&gt;{197.99.213.214:0, *:0}[30%]&lt;BR/&gt;{*:0, 7.154.100.28:0}[20%]&lt;BR/&gt;{197.99.213.214:135, *:*}[20%]&lt;BR/&gt;{197.99.213.214:*, 67.214.70.148:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (81.8182%)&lt;BR/&gt; 135: (9.09091%)&lt;BR/&gt; 4072: (4.54545%)&lt;BR/&gt; 2923: (4.54545%)&gt;];
}
572--1970[label="0.333333;1pkt 1fpkt"];
572--2047[label="0.333333;1pkt 1fpkt"];
572--6490[label="0.333333;1pkt 1fpkt"];
572--6666[label="0.333333;1pkt 1fpkt"];
572--9128[label="0.333333;1pkt 1fpkt"];
1970--6490[label="1;3pkt 3fpkt"];
2047--6666[label="1;3pkt 3fpkt"];
2047--9128[label="0.666667;2pkt 2fpkt"];
6666--9128[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="67.214.70.148" src_ip="197.99.213.214"/>
      <filter src_ip="197.99.213.214" src_port="135"/>
      <filter src_ip="197.99.213.214"/>
      <filter src_ip="197.99.213.198"/>
      <filter dst_ip="215.15.119.88"/>
      <filter dst_ip="7.154.100.28"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
358[label="196.139.254.247;d;130pkt 130fpkt", shape=diamond, color=yellow];
2432[label="218.219.94.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
3900[label="21.173.138.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4060[label="21.240.246.20;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4103[label="21.0.203.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4777[label="5.21.196.70;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4875[label="4.35.17.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6672[label="218.219.94.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6962[label="4.162.183.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7398[label="21.0.203.23;1pkt 1fpkt", shape=invtriangle, color=brown];
7857[label="5.21.196.70;6pkt 6fpkt", shape=invtriangle, color=brown];
9133[label="218.219.94.215;1pkt 1fpkt", shape=invtriangle, color=brown];
9948[label="5.21.196.70;6pkt 6fpkt", shape=invhouse, color=bisque];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.86.35.135:*, 196.139.254.247:17157}[52.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17157: (33.5404%)&lt;BR/&gt; 24495: (3.72671%)&lt;BR/&gt; 22158: (2.17391%)&lt;BR/&gt; 6882: (2.17391%)&lt;BR/&gt; 11966: (1.86335%)&gt;];
}
358--932[label="0.00769231;1pkt 1fpkt"];
358--2432[label="1;1pkt 1fpkt"];
358--3183[label="0.00769231;1pkt 1fpkt"];
358--3458[label="0.00769231;1pkt 1fpkt"];
358--3503[label="0.00769231;1pkt 1fpkt"];
358--3584[label="0.00769231;1pkt 1fpkt"];
358--3659[label="0.00769231;1pkt 1fpkt"];
358--3900[label="1;3pkt 3fpkt"];
358--4060[label="1;2pkt 2fpkt"];
358--4103[label="1;1pkt 1fpkt"];
358--4777[label="1;6pkt 6fpkt"];
358--4875[label="1;2pkt 2fpkt"];
358--6672[label="1;1pkt 1fpkt"];
358--6962[label="1;1pkt 1fpkt"];
358--7398[label="1;1pkt 1fpkt"];
358--7857[label="1;6pkt 6fpkt"];
358--9133[label="1;1pkt 1fpkt"];
358--9948[label="1;6pkt 6fpkt"];
2432--6672[label="1;1pkt 1fpkt"];
2432--9133[label="1;1pkt 1fpkt"];
4103--7398[label="1;1pkt 1fpkt"];
4777--7857[label="1;6pkt 6fpkt"];
4777--9948[label="1;6pkt 6fpkt"];
6672--9133[label="1;1pkt 1fpkt"];
7857--9948[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.254.247" dst_port="17157" src_ip="192.86.35.135"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.71.181.216"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.180.60.217"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.215.102.217"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.156.108.218"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.30.219"/>
    </slice>
    <from sec="1134363974" usec="0"/>
    <to sec="1134364486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.21.197.220"/>
    </slice>
    <from sec="1134363882" usec="0"/>
    <to sec="1134363917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.40.84.222"/>
    </slice>
    <from sec="1134364260" usec="0"/>
    <to sec="1134364282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.52.102.222"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.210.178.222"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.106.111.223"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.158.141.223"/>
    </slice>
    <from sec="1134364477" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.172.83.224"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.58.31.225"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
712[label="196.129.159.225;s;1481pkt 1481fpkt", shape=diamond, color=yellow];
6801[label="196.129.159.225;1815pkt 1815fpkt", shape=pentagon, color=darkviolet];
9228[label="196.129.159.225;1815pkt 1815fpkt", shape=invtriangle, color=brown];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.159.225:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.9251%)&lt;BR/&gt; 32768: (1.47721%)&lt;BR/&gt; 32769: (0.616318%)&lt;BR/&gt; 32770: (0.264136%)&lt;BR/&gt; 1053: (0.264136%)&gt;];
}
712--1809[label="0.0625;1pkt 1fpkt"];
712--2219[label="0.00699301;1pkt 1fpkt"];
712--3500[label="0.0108342;10pkt 10fpkt"];
712--3508[label="0.0142712;14pkt 14fpkt"];
712--3509[label="0.0101283;15pkt 15fpkt"];
712--3538[label="0.00256191;3pkt 3fpkt"];
712--3581[label="0.0108342;10pkt 10fpkt"];
712--3589[label="0.0142712;14pkt 14fpkt"];
712--3590[label="0.0101283;15pkt 15fpkt"];
712--3618[label="0.00256191;3pkt 3fpkt"];
712--3657[label="0.0108342;10pkt 10fpkt"];
712--3666[label="0.0142712;14pkt 14fpkt"];
712--3686[label="0.00256191;3pkt 3fpkt"];
712--6801[label="1;1481pkt 1481fpkt"];
712--9228[label="1;1481pkt 1481fpkt"];
6801--9228[label="1;1815pkt 1815fpkt"];
</description>
    <slice>
      <filter src_ip="196.129.159.225" src_port="53"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.131.164.226"/>
    </slice>
    <from sec="1134364122" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.213.197.226"/>
    </slice>
    <from sec="1134363636" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
323[label="214.231.232.227;s;256pkt 256fpkt", shape=diamond, color=yellow];
6831[label="214.231.232.227;256pkt 256fpkt", shape=pentagon, color=darkviolet];
9251[label="214.231.232.227;256pkt 256fpkt", shape=invtriangle, color=brown];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.231.232.227:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
323--6831[label="1;256pkt 256fpkt"];
323--9251[label="1;256pkt 256fpkt"];
6831--9251[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter src_ip="214.231.232.227"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
1692[label="208.39.253.228;s;834pkt 834fpkt", shape=diamond, color=yellow];
6847[label="208.39.253.228;871pkt 871fpkt", shape=pentagon, color=darkviolet];
9265[label="208.39.253.228;870pkt 870fpkt", shape=invtriangle, color=brown];
10875[label="208.39.253.228;871pkt 871fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.39.253.228:30386, *:1080}[70.9529%]&lt;BR/&gt;{208.39.253.228:13322, *:1080}[29.0471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 30386: (35.3163%)&lt;BR/&gt; 13322: (14.6837%)&gt;];
}
1692--6847[label="1;834pkt 834fpkt"];
1692--9265[label="0.998801;833pkt 833fpkt"];
1692--10875[label="1;834pkt 834fpkt"];
6847--9265[label="1;870pkt 870fpkt"];
6847--10875[label="1;871pkt 871fpkt"];
9265--10875[label="1;870pkt 870fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="208.39.253.228" src_port="30386"/>
      <filter dst_port="1080" src_ip="208.39.253.228" src_port="13322"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.149.143.229"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.37.59.230"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.204.230"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.170.148.231"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.22.153.231"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.180.24.232"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.159.107.232"/>
    </slice>
    <from sec="1134364057" usec="0"/>
    <to sec="1134364084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.117.146.233"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.187.233"/>
    </slice>
    <from sec="1134364405" usec="0"/>
    <to sec="1134364425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.129.234"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.10.191.234"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.200.14.235"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.80.236"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.60.116.237"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.150.98.238"/>
    </slice>
    <from sec="1134363666" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.180.193.240"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.219.244.240"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.112.46.241"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.131.212.241"/>
    </slice>
    <from sec="1134364278" usec="0"/>
    <to sec="1134364303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.203.11.242"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.145.31.242"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.15.75.242"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134363915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.199.170.242"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.195.32.243"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.155.56.243"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.150.32.244"/>
    </slice>
    <from sec="1134364361" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.156.51.244"/>
    </slice>
    <from sec="1134364278" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.89.77.246"/>
    </slice>
    <from sec="1134364111" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.225.236.246"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134363839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.88.12.247"/>
    </slice>
    <from sec="1134363710" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
2532[label="133.158.188.137;s;43pkt 43fpkt", shape=diamond, color=yellow];
2595[label="133.158.218.247;s;55pkt 55fpkt", shape=diamond, color=yellow];
2878[label="216.62.208.10;d;6pkt 6fpkt", shape=diamond, color=yellow];
2917[label="196.98.60.20;d;73pkt 73fpkt", shape=diamond, color=yellow];
5734[label="133.158.188.137;43pkt 43fpkt", shape=pentagon, color=darkviolet];
7077[label="133.158.218.247;55pkt 55fpkt", shape=pentagon, color=darkviolet];
8500[label="133.158.188.137;42pkt 42fpkt", shape=invtriangle, color=brown];
9433[label="133.158.218.247;54pkt 54fpkt", shape=invtriangle, color=brown];
10357[label="133.158.188.137;42pkt 42fpkt", shape=invhouse, color=bisque];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.218.247:*, 196.98.60.20:80}[46.4646%]&lt;BR/&gt;{133.158.188.137:*, 196.98.60.20:80}[26.2626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1585: (0.605327%)&lt;BR/&gt; 1584: (0.605327%)&lt;BR/&gt; 1583: (0.605327%)&lt;BR/&gt; 1582: (0.605327%)&gt;];
}
2532--2878[label="1;6pkt 6fpkt"];
2532--2917[label="0.604651;26pkt 26fpkt"];
2532--3505[label="0.0232558;1pkt 1fpkt"];
2532--3510[label="0.0232558;1pkt 1fpkt"];
2532--3520[label="0.0465116;2pkt 2fpkt"];
2532--3556[label="0.162791;7pkt 7fpkt"];
2532--3591[label="0.0232558;1pkt 1fpkt"];
2532--3600[label="0.0465116;2pkt 2fpkt"];
2532--3636[label="0.162791;7pkt 7fpkt"];
2532--3662[label="0.0232558;1pkt 1fpkt"];
2532--3668[label="0.0465116;2pkt 2fpkt"];
2532--3703[label="0.162791;7pkt 7fpkt"];
2532--5734[label="1;43pkt 43fpkt"];
2532--8500[label="1;42pkt 42fpkt"];
2532--10357[label="1;42pkt 42fpkt"];
2595--2917[label="0.836364;46pkt 46fpkt"];
2595--7077[label="1;55pkt 55fpkt"];
2595--9433[label="1;54pkt 54fpkt"];
2878--3505[label="0.166667;1pkt 1fpkt"];
2878--3510[label="0.166667;1pkt 1fpkt"];
2878--3520[label="0.333333;2pkt 2fpkt"];
2878--3556[label="0.333333;2pkt 2fpkt"];
2878--3591[label="0.166667;1pkt 1fpkt"];
2878--3600[label="0.333333;2pkt 2fpkt"];
2878--3636[label="0.333333;2pkt 2fpkt"];
2878--3662[label="0.166667;1pkt 1fpkt"];
2878--3668[label="0.333333;2pkt 2fpkt"];
2878--3703[label="0.333333;2pkt 2fpkt"];
2878--5734[label="1;6pkt 6fpkt"];
2878--8500[label="1;6pkt 6fpkt"];
2878--10357[label="1;6pkt 6fpkt"];
2917--4046[label="0.0136986;1pkt 1fpkt"];
2917--5734[label="0.604651;26pkt 26fpkt"];
2917--7077[label="0.836364;46pkt 46fpkt"];
2917--7365[label="0.0136986;1pkt 1fpkt"];
2917--8500[label="0.619048;26pkt 26fpkt"];
2917--9433[label="0.833333;45pkt 45fpkt"];
2917--9639[label="0.0136986;1pkt 1fpkt"];
2917--10357[label="0.619048;26pkt 26fpkt"];
5734--8500[label="1;42pkt 42fpkt"];
5734--10357[label="1;42pkt 42fpkt"];
7077--9433[label="1;54pkt 54fpkt"];
8500--10357[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="196.98.60.20" dst_port="80" src_ip="133.158.218.247"/>
      <filter dst_ip="196.98.60.20" dst_port="80" src_ip="133.158.188.137"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.49.68.249"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.32.139.249"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.82.173.251"/>
    </slice>
    <from sec="1134363732" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.178.23.253"/>
    </slice>
    <from sec="1134364115" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.218.39.253"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.26.42.255"/>
    </slice>
    <from sec="1134363855" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.71.45.255"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134364437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.422222,2.26402,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.213.188.255"/>
    </slice>
    <from sec="1134363645" usec="0"/>
    <to sec="1134363706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.196.88.0"/>
    </slice>
    <from sec="1134363644" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
3721[label="19.171.135.0;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7149[label="19.171.135.0;30pkt 30fpkt", shape=invtriangle, color=brown];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.171.135.0:80, 196.129.156.217:*}[56.6667%]&lt;BR/&gt;{19.171.135.0:80, 196.129.156.216:*}[43.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54116: (1.66667%)&lt;BR/&gt; 53753: (1.66667%)&lt;BR/&gt; 53001: (1.66667%)&lt;BR/&gt; 52996: (1.66667%)&gt;];
}
3721--7149[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="19.171.135.0" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="19.171.135.0" src_port="80"/>
    </slice>
    <from sec="1134364357" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
3732[label="209.176.67.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7154[label="209.176.67.1;1pkt 1fpkt", shape=invtriangle, color=brown];
9496[label="209.176.67.1;1pkt 1fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.67.1:80, 131.68.195.112:1088}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1088: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3732--7154[label="1;1pkt 1fpkt"];
3732--9496[label="1;1pkt 1fpkt"];
7154--9496[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.195.112" dst_port="1088" src_ip="209.176.67.1" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
3735[label="131.156.116.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7156[label="131.156.116.1;1pkt 1fpkt", shape=invtriangle, color=brown];
9498[label="131.156.116.1;1pkt 1fpkt", shape=invhouse, color=bisque];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.116.1:1968, 147.164.126.79:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1968: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3735--7156[label="1;1pkt 1fpkt"];
3735--9498[label="1;1pkt 1fpkt"];
7156--9498[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.164.126.79" dst_port="80" src_ip="131.156.116.1" src_port="1968"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
3754[label="176.7.65.2;256pkt 256fpkt", shape=pentagon, color=darkviolet];
7172[label="176.7.65.2;256pkt 256fpkt", shape=invtriangle, color=brown];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.7.65.2:62174, *:137}[45.3125%]&lt;BR/&gt;{176.7.65.2:61584, *:137}[32.4219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 62174: (22.6562%)&lt;BR/&gt; 61584: (16.2109%)&lt;BR/&gt; 62266: (5.66406%)&lt;BR/&gt; 61782: (5.27344%)&gt;];
}
3754--7172[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="176.7.65.2" src_port="62174"/>
      <filter dst_port="137" src_ip="176.7.65.2" src_port="61584"/>
    </slice>
    <from sec="1134363817" usec="0"/>
    <to sec="1134363833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
3761[label="67.200.145.2;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7177[label="67.200.145.2;253pkt 253fpkt", shape=invtriangle, color=brown];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.200.145.2:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2985: (0.197628%)&lt;BR/&gt; 2984: (0.197628%)&lt;BR/&gt; 2983: (0.197628%)&lt;BR/&gt; 2982: (0.197628%)&gt;];
}
3761--7177[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="67.200.145.2"/>
    </slice>
    <from sec="1134364287" usec="0"/>
    <to sec="1134364307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
3764[label="192.106.194.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7179[label="192.106.194.2;2pkt 2fpkt", shape=invtriangle, color=brown];
9512[label="192.106.194.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.2:1863, 151.251.27.6:1040}[50%]&lt;BR/&gt;{192.106.194.2:1863, 151.251.69.153:1063}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1063: (37.5%)&lt;BR/&gt; 1040: (12.5%)&gt;];
}
3764--7179[label="1;1pkt 1fpkt"];
3764--9512[label="1;1pkt 1fpkt"];
7179--9512[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.69.153" dst_port="1063" src_ip="192.106.194.2" src_port="1863"/>
      <filter dst_ip="151.251.27.6" dst_port="1040" src_ip="192.106.194.2" src_port="1863"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
3766[label="133.158.210.2;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7181[label="133.158.210.2;11pkt 11fpkt", shape=invtriangle, color=brown];
9514[label="133.158.210.2;11pkt 11fpkt", shape=invhouse, color=bisque];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.210.2:*, 218.236.4.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1752: (4.54545%)&lt;BR/&gt; 1751: (4.54545%)&lt;BR/&gt; 1750: (4.54545%)&lt;BR/&gt; 1748: (4.54545%)&gt;];
}
3766--7181[label="1;11pkt 11fpkt"];
3766--9514[label="1;11pkt 11fpkt"];
7181--9514[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="218.236.4.55" dst_port="80" src_ip="133.158.210.2"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
3772[label="4.49.21.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7186[label="4.49.21.3;1pkt 1fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.49.21.3:37822, 196.129.162.241:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37822: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3772--7186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.162.241" dst_port="80" src_ip="4.49.21.3" src_port="37822"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
3779[label="19.171.135.3;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7190[label="19.171.135.3;13pkt 13fpkt", shape=invtriangle, color=brown];
9517[label="19.171.135.3;12pkt 12fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.171.135.3:80, 196.129.156.216:*}[53.8462%]&lt;BR/&gt;{19.171.135.3:80, 196.129.156.217:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51717: (4.05405%)&lt;BR/&gt; 51645: (4.05405%)&lt;BR/&gt; 51550: (4.05405%)&lt;BR/&gt; 51510: (4.05405%)&gt;];
}
3779--7190[label="1;12pkt 12fpkt"];
3779--9517[label="1;12pkt 12fpkt"];
7190--9517[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="19.171.135.3" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="19.171.135.3" src_port="80"/>
    </slice>
    <from sec="1134364351" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.19.179.3"/>
    </slice>
    <from sec="1134363662" usec="0"/>
    <to sec="1134363971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
3782[label="65.88.192.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7192[label="65.88.192.3;1pkt 1fpkt", shape=invtriangle, color=brown];
9519[label="65.88.192.3;1pkt 1fpkt", shape=invhouse, color=bisque];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.88.192.3:1098, 160.137.175.105:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1098: (50%)&gt;];
}
3782--7192[label="1;1pkt 1fpkt"];
3782--9519[label="1;1pkt 1fpkt"];
7192--9519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.137.175.105" dst_port="1434" src_ip="65.88.192.3" src_port="1098"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
3784[label="192.106.194.3;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7193[label="192.106.194.3;3pkt 3fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.3:1863, 151.251.220.69:4678}[25%]&lt;BR/&gt;{192.106.194.3:1863, 151.251.101.114:2853}[25%]&lt;BR/&gt;{192.106.194.3:1863, 151.251.208.226:1117}[25%]&lt;BR/&gt;{192.106.194.3:1863, 151.251.81.251:4434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4678: (14.2857%)&lt;BR/&gt; 4434: (14.2857%)&lt;BR/&gt; 2853: (14.2857%)&lt;BR/&gt; 1117: (7.14286%)&gt;];
}
3784--7193[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.81.251" dst_port="4434" src_ip="192.106.194.3" src_port="1863"/>
      <filter dst_ip="151.251.208.226" dst_port="1117" src_ip="192.106.194.3" src_port="1863"/>
      <filter dst_ip="151.251.101.114" dst_port="2853" src_ip="192.106.194.3" src_port="1863"/>
      <filter dst_ip="151.251.220.69" dst_port="4678" src_ip="192.106.194.3" src_port="1863"/>
    </slice>
    <from sec="1134363632" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
3785[label="196.139.236.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7194[label="196.139.236.3;2pkt 2fpkt", shape=invtriangle, color=brown];
9520[label="196.139.236.3;2pkt 2fpkt", shape=invhouse, color=bisque];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.236.3:4967, 194.41.98.152:25}[50%]&lt;BR/&gt;{196.139.236.3:25, 5.173.2.180:2819}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4967: (25%)&lt;BR/&gt; 2819: (25%)&gt;];
}
3785--7194[label="1;2pkt 2fpkt"];
3785--9520[label="1;2pkt 2fpkt"];
7194--9520[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="5.173.2.180" dst_port="2819" src_ip="196.139.236.3" src_port="25"/>
      <filter dst_ip="194.41.98.152" dst_port="25" src_ip="196.139.236.3" src_port="4967"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
3798[label="67.219.144.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7201[label="67.219.144.4;3pkt 3fpkt", shape=invtriangle, color=brown];
9526[label="67.219.144.4;4pkt 4fpkt", shape=invhouse, color=bisque];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.219.144.4:1892, 197.99.208.169:20190}[25%]&lt;BR/&gt;{67.219.144.4:2137, 197.99.208.169:20190}[25%]&lt;BR/&gt;{67.219.144.4:3378, 197.99.208.169:20190}[25%]&lt;BR/&gt;{67.219.144.4:21269, 197.99.208.169:20190}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20190: (50%)&lt;BR/&gt; 21269: (13.6364%)&lt;BR/&gt; 2137: (13.6364%)&lt;BR/&gt; 1892: (13.6364%)&lt;BR/&gt; 3378: (9.09091%)&gt;];
}
3798--7201[label="1;3pkt 3fpkt"];
3798--9526[label="1;4pkt 4fpkt"];
7201--9526[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.208.169" dst_port="20190" src_ip="67.219.144.4" src_port="21269"/>
      <filter dst_ip="197.99.208.169" dst_port="20190" src_ip="67.219.144.4" src_port="3378"/>
      <filter dst_ip="197.99.208.169" dst_port="20190" src_ip="67.219.144.4" src_port="2137"/>
      <filter dst_ip="197.99.208.169" dst_port="20190" src_ip="67.219.144.4" src_port="1892"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.164.158.4"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.90.161.4"/>
    </slice>
    <from sec="1134364402" usec="0"/>
    <to sec="1134364437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
3801[label="197.114.177.4;128pkt 128fpkt", shape=pentagon, color=darkviolet];
7204[label="197.114.177.4;128pkt 128fpkt", shape=invtriangle, color=brown];
9529[label="197.114.177.4;127pkt 127fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.114.177.4:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3403: (0.391645%)&lt;BR/&gt; 3402: (0.391645%)&lt;BR/&gt; 3401: (0.391645%)&lt;BR/&gt; 3400: (0.391645%)&gt;];
}
3801--7204[label="1;128pkt 128fpkt"];
3801--9529[label="1;127pkt 127fpkt"];
7204--9529[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="197.114.177.4"/>
    </slice>
    <from sec="1134363621" usec="0"/>
    <to sec="1134363645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
3807[label="216.90.5.5;275pkt 275fpkt", shape=pentagon, color=darkviolet];
7207[label="216.90.5.5;276pkt 276fpkt", shape=invtriangle, color=brown];
9530[label="216.90.5.5;276pkt 276fpkt", shape=invhouse, color=bisque];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.90.5.5:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (7.0133%)&lt;BR/&gt; 1027: (6.711%)&lt;BR/&gt; 1029: (6.34825%)&lt;BR/&gt; 4257: (6.16687%)&lt;BR/&gt; 1032: (6.16687%)&gt;];
}
3807--7207[label="1;275pkt 275fpkt"];
3807--9530[label="1;275pkt 275fpkt"];
7207--9530[label="1;276pkt 276fpkt"];
</description>
    <slice>
      <filter src_ip="216.90.5.5"/>
    </slice>
    <from sec="1134363641" usec="0"/>
    <to sec="1134363642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
3809[label="131.68.80.5;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7208[label="131.68.80.5;41pkt 41fpkt", shape=invtriangle, color=brown];
9531[label="131.68.80.5;40pkt 40fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.80.5:16182, *:*}[90.2439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16182: (45.0413%)&lt;BR/&gt; 57596: (2.47934%)&lt;BR/&gt; 80: (2.47934%)&lt;BR/&gt; 64163: (1.23967%)&lt;BR/&gt; 57394: (1.23967%)&gt;];
}
3809--7208[label="1;40pkt 40fpkt"];
3809--9531[label="1;40pkt 40fpkt"];
7208--9531[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="131.68.80.5" src_port="16182"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
2526[label="163.180.173.67;d;80pkt 80fpkt", shape=diamond, color=yellow];
3816[label="194.2.177.5;55pkt 55fpkt", shape=pentagon, color=darkviolet];
7215[label="194.2.177.5;56pkt 56fpkt", shape=invtriangle, color=brown];
9534[label="194.2.177.5;56pkt 56fpkt", shape=invhouse, color=bisque];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.2.177.5:80, 163.180.173.67:*}[61.9048%]&lt;BR/&gt;{194.2.177.74:80, 163.180.173.67:*}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7976%)&lt;BR/&gt; 2617: (0.809717%)&lt;BR/&gt; 2609: (0.809717%)&lt;BR/&gt; 2586: (0.809717%)&lt;BR/&gt; 2581: (0.809717%)&gt;];
}
2526--3181[label="0.0125;1pkt 1fpkt"];
2526--3456[label="0.0125;1pkt 1fpkt"];
2526--3481[label="0.0875;7pkt 7fpkt"];
2526--3502[label="0.0125;1pkt 1fpkt"];
2526--3565[label="0.0875;7pkt 7fpkt"];
2526--3583[label="0.0125;1pkt 1fpkt"];
2526--3643[label="0.0875;7pkt 7fpkt"];
2526--3659[label="0.0125;1pkt 1fpkt"];
2526--3816[label="0.927273;51pkt 51fpkt"];
2526--5957[label="0.0125;1pkt 1fpkt"];
2526--7215[label="0.928571;52pkt 52fpkt"];
2526--8644[label="0.0125;1pkt 1fpkt"];
2526--9534[label="0.928571;52pkt 52fpkt"];
2526--10458[label="0.0125;1pkt 1fpkt"];
3816--7215[label="1;55pkt 55fpkt"];
3816--9534[label="1;55pkt 55fpkt"];
7215--9534[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.173.67" src_ip="194.2.177.5" src_port="80"/>
      <filter dst_ip="163.180.173.67" src_ip="194.2.177.74" src_port="80"/>
    </slice>
    <from sec="1134363640" usec="0"/>
    <to sec="1134364232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3820[label="197.99.219.5;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7216[label="197.99.219.5;28pkt 28fpkt", shape=invtriangle, color=brown];
9535[label="197.99.219.5;28pkt 28fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.219.5:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 52501: (1.78571%)&lt;BR/&gt; 52500: (1.78571%)&lt;BR/&gt; 52499: (1.78571%)&lt;BR/&gt; 52498: (1.78571%)&gt;];
}
3820--7216[label="1;28pkt 28fpkt"];
3820--9535[label="1;28pkt 28fpkt"];
7216--9535[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="197.99.219.5"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
329[label="131.68.11.6;s;106pkt 106fpkt", shape=diamond, color=yellow];
656[label="131.68.12.214;s;60pkt 60fpkt", shape=diamond, color=yellow];
1910[label="5.162.64.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
2677[label="1.241.106.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
2705[label="4.241.119.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
2724[label="6.105.114.165;d;3pkt 3fpkt", shape=diamond, color=yellow];
2725[label="4.208.96.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
2790[label="4.195.126.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
2986[label="201.160.236.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
3011[label="0.242.96.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
3055[label="66.230.95.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
3823[label="131.68.11.6;107pkt 107fpkt", shape=pentagon, color=darkviolet];
6659[label="131.68.12.214;62pkt 62fpkt", shape=pentagon, color=darkviolet];
7219[label="131.68.11.6;108pkt 108fpkt", shape=invtriangle, color=brown];
9121[label="131.68.12.214;61pkt 61fpkt", shape=invtriangle, color=brown];
9538[label="131.68.11.6;107pkt 107fpkt", shape=invhouse, color=bisque];
10782[label="131.68.12.214;62pkt 62fpkt", shape=invhouse, color=bisque];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.11.6:*, *:*}[63.5294%]&lt;BR/&gt;{131.68.12.214:6348, *:*}[24.7059%]&lt;BR/&gt;{*:*, *:6346}[24.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6348: (23.4649%)&lt;BR/&gt; 6346: (12.2807%)&lt;BR/&gt; 80: (3.50877%)&lt;BR/&gt; 1863: (2.04678%)&lt;BR/&gt; 6349: (1.75439%)&gt;];
}
329--343[label="0.00943396;1pkt 1fpkt"];
329--571[label="0.00943396;1pkt 1fpkt"];
329--649[label="0.0471698;5pkt 5fpkt"];
329--816[label="0.00943396;1pkt 1fpkt"];
329--997[label="0.00943396;1pkt 1fpkt"];
329--1378[label="0.00943396;1pkt 1fpkt"];
329--2161[label="0.00943396;1pkt 1fpkt"];
329--2383[label="0.0434783;1pkt 1fpkt"];
329--2724[label="0.333333;1pkt 1fpkt"];
329--2763[label="0.0188679;2pkt 2fpkt"];
329--3051[label="0.037037;1pkt 1fpkt"];
329--3389[label="0.0434783;1pkt 1fpkt"];
329--3488[label="0.0188679;2pkt 2fpkt"];
329--3520[label="0.0377358;4pkt 4fpkt"];
329--3522[label="0.0188679;2pkt 2fpkt"];
329--3536[label="0.0188679;2pkt 2fpkt"];
329--3556[label="0.00943396;1pkt 1fpkt"];
329--3573[label="0.0188679;2pkt 2fpkt"];
329--3600[label="0.0377358;4pkt 4fpkt"];
329--3602[label="0.0188679;2pkt 2fpkt"];
329--3616[label="0.0188679;2pkt 2fpkt"];
329--3636[label="0.00943396;1pkt 1fpkt"];
329--3654[label="0.0188679;2pkt 2fpkt"];
329--3668[label="0.0377358;4pkt 4fpkt"];
329--3684[label="0.0188679;2pkt 2fpkt"];
329--3703[label="0.00943396;1pkt 1fpkt"];
329--3823[label="0.990566;105pkt 105fpkt"];
329--7219[label="1;106pkt 106fpkt"];
329--9538[label="0.990566;105pkt 105fpkt"];
656--1434[label="0.0344828;1pkt 1fpkt"];
656--1910[label="1;1pkt 1fpkt"];
656--2677[label="1;1pkt 1fpkt"];
656--2705[label="1;1pkt 1fpkt"];
656--2724[label="0.666667;2pkt 2fpkt"];
656--2725[label="1;1pkt 1fpkt"];
656--2790[label="1;1pkt 1fpkt"];
656--2986[label="1;1pkt 1fpkt"];
656--3011[label="1;1pkt 1fpkt"];
656--3055[label="1;1pkt 1fpkt"];
656--3488[label="0.0166667;1pkt 1fpkt"];
656--3517[label="0.0166667;1pkt 1fpkt"];
656--3522[label="0.0166667;1pkt 1fpkt"];
656--3536[label="0.0166667;1pkt 1fpkt"];
656--3573[label="0.0166667;1pkt 1fpkt"];
656--3597[label="0.0166667;1pkt 1fpkt"];
656--3602[label="0.0166667;1pkt 1fpkt"];
656--3616[label="0.0166667;1pkt 1fpkt"];
656--3654[label="0.0166667;1pkt 1fpkt"];
656--3684[label="0.0166667;1pkt 1fpkt"];
656--6659[label="1;60pkt 60fpkt"];
656--9121[label="0.983333;59pkt 59fpkt"];
656--10782[label="1;60pkt 60fpkt"];
1910--6659[label="1;1pkt 1fpkt"];
1910--9121[label="1;1pkt 1fpkt"];
1910--10782[label="1;1pkt 1fpkt"];
2677--6659[label="1;1pkt 1fpkt"];
2677--9121[label="1;1pkt 1fpkt"];
2677--10782[label="1;1pkt 1fpkt"];
2705--6659[label="1;1pkt 1fpkt"];
2705--9121[label="1;1pkt 1fpkt"];
2705--10782[label="1;1pkt 1fpkt"];
2724--3823[label="0.333333;1pkt 1fpkt"];
2724--6659[label="0.666667;2pkt 2fpkt"];
2724--7219[label="0.333333;1pkt 1fpkt"];
2724--9121[label="0.666667;2pkt 2fpkt"];
2724--9538[label="0.333333;1pkt 1fpkt"];
2724--10782[label="0.666667;2pkt 2fpkt"];
2725--6659[label="1;1pkt 1fpkt"];
2725--9121[label="1;1pkt 1fpkt"];
2725--10782[label="1;1pkt 1fpkt"];
2790--6659[label="1;1pkt 1fpkt"];
2790--9121[label="1;1pkt 1fpkt"];
2790--10782[label="1;1pkt 1fpkt"];
2986--6659[label="1;1pkt 1fpkt"];
2986--9121[label="1;1pkt 1fpkt"];
2986--10782[label="1;1pkt 1fpkt"];
3011--6659[label="1;1pkt 1fpkt"];
3011--9121[label="1;1pkt 1fpkt"];
3011--10782[label="1;1pkt 1fpkt"];
3055--6659[label="1;1pkt 1fpkt"];
3055--9121[label="1;1pkt 1fpkt"];
3055--10782[label="1;1pkt 1fpkt"];
3823--7219[label="1;107pkt 107fpkt"];
3823--9538[label="1;107pkt 107fpkt"];
6659--9121[label="1;61pkt 61fpkt"];
6659--10782[label="1;62pkt 62fpkt"];
7219--9538[label="1;107pkt 107fpkt"];
9121--10782[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="131.68.11.6"/>
      <filter dst_port="6346"/>
      <filter src_ip="131.68.12.214" src_port="6348"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
3830[label="196.252.50.6;187pkt 187fpkt", shape=pentagon, color=darkviolet];
7223[label="196.252.50.6;188pkt 188fpkt", shape=invtriangle, color=brown];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.252.50.6:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4998: (0.266667%)&lt;BR/&gt; 4996: (0.266667%)&lt;BR/&gt; 4995: (0.266667%)&lt;BR/&gt; 4992: (0.266667%)&gt;];
}
3830--7223[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="196.252.50.6"/>
    </slice>
    <from sec="1134364471" usec="0"/>
    <to sec="1134364480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3847[label="67.242.151.7;41pkt 41fpkt", shape=pentagon, color=darkviolet];
7235[label="67.242.151.7;40pkt 40fpkt", shape=invtriangle, color=brown];
9552[label="67.242.151.7;40pkt 40fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.242.151.7:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3847--7235[label="1;40pkt 40fpkt"];
3847--9552[label="1;40pkt 40fpkt"];
7235--9552[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="67.242.151.7"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.28.164.7"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
3849[label="218.3.217.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7237[label="218.3.217.7;2pkt 2fpkt", shape=invtriangle, color=brown];
9554[label="218.3.217.7;2pkt 2fpkt", shape=invhouse, color=bisque];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.3.217.7:80, 196.129.156.216:54197}[50%]&lt;BR/&gt;{218.3.217.7:80, 196.129.156.217:4177}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54197: (25%)&lt;BR/&gt; 4177: (25%)&gt;];
}
3849--7237[label="1;2pkt 2fpkt"];
3849--9554[label="1;2pkt 2fpkt"];
7237--9554[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="4177" src_ip="218.3.217.7" src_port="80"/>
      <filter dst_ip="196.129.156.216" dst_port="54197" src_ip="218.3.217.7" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
3857[label="133.158.37.8;91pkt 91fpkt", shape=pentagon, color=darkviolet];
7242[label="133.158.37.8;92pkt 92fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.37.8:53, *:*}[77.1739%]&lt;BR/&gt;{133.158.37.8:52233, *:53}[20.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.2787%)&lt;BR/&gt; 52233: (10.3825%)&lt;BR/&gt; 32768: (1.63934%)&lt;BR/&gt; 32774: (1.0929%)&lt;BR/&gt; 32773: (1.0929%)&gt;];
}
3857--7242[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="133.158.37.8" src_port="53"/>
      <filter dst_port="53" src_ip="133.158.37.8" src_port="52233"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
3861[label="87.176.108.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7245[label="87.176.108.8;1pkt 1fpkt", shape=invtriangle, color=brown];
9560[label="87.176.108.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.176.108.8:80, 133.158.67.82:49257}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49257: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3861--7245[label="1;1pkt 1fpkt"];
3861--9560[label="1;1pkt 1fpkt"];
7245--9560[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.67.82" dst_port="49257" src_ip="87.176.108.8" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
3863[label="133.159.168.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7247[label="133.159.168.8;6pkt 6fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.168.8:*, 209.76.65.221:80}[50%]&lt;BR/&gt;{133.159.168.8:*, 219.100.158.107:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2845: (8.33333%)&lt;BR/&gt; 2773: (8.33333%)&lt;BR/&gt; 2751: (8.33333%)&lt;BR/&gt; 2699: (8.33333%)&gt;];
}
3863--7247[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.76.65.221" dst_port="80" src_ip="133.159.168.8"/>
      <filter dst_ip="219.100.158.107" dst_port="80" src_ip="133.159.168.8"/>
    </slice>
    <from sec="1134363994" usec="0"/>
    <to sec="1134364468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
3866[label="192.106.194.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7250[label="192.106.194.8;5pkt 5fpkt", shape=invtriangle, color=brown];
9562[label="192.106.194.8;5pkt 5fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.8:1863, 151.251.248.38:1395}[20%]&lt;BR/&gt;{192.106.194.8:1863, 151.251.3.98:1043}[20%]&lt;BR/&gt;{192.106.194.8:1863, 151.251.133.178:2614}[20%]&lt;BR/&gt;{192.106.194.8:1863, 151.251.215.187:4361}[20%]&lt;BR/&gt;{192.106.194.8:1863, 151.251.80.196:1307}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4361: (10.7143%)&lt;BR/&gt; 2614: (10.7143%)&lt;BR/&gt; 1395: (10.7143%)&lt;BR/&gt; 1043: (10.7143%)&gt;];
}
3866--7250[label="1;4pkt 4fpkt"];
3866--9562[label="1;4pkt 4fpkt"];
7250--9562[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.80.196" dst_port="1307" src_ip="192.106.194.8" src_port="1863"/>
      <filter dst_ip="151.251.215.187" dst_port="4361" src_ip="192.106.194.8" src_port="1863"/>
      <filter dst_ip="151.251.133.178" dst_port="2614" src_ip="192.106.194.8" src_port="1863"/>
      <filter dst_ip="151.251.3.98" dst_port="1043" src_ip="192.106.194.8" src_port="1863"/>
      <filter dst_ip="151.251.248.38" dst_port="1395" src_ip="192.106.194.8" src_port="1863"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
3877[label="87.176.108.9;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7261[label="87.176.108.9;3pkt 3fpkt", shape=invtriangle, color=brown];
9572[label="87.176.108.9;3pkt 3fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.176.108.9:80, 151.251.174.209:43818}[33.3333%]&lt;BR/&gt;{87.176.108.9:80, 163.180.120.64:4048}[33.3333%]&lt;BR/&gt;{87.176.108.9:80, 163.180.120.64:4076}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43818: (16.6667%)&lt;BR/&gt; 4076: (16.6667%)&lt;BR/&gt; 4048: (16.6667%)&gt;];
}
3877--7261[label="1;3pkt 3fpkt"];
3877--9572[label="1;3pkt 3fpkt"];
7261--9572[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.120.64" dst_port="4076" src_ip="87.176.108.9" src_port="80"/>
      <filter dst_ip="163.180.120.64" dst_port="4048" src_ip="87.176.108.9" src_port="80"/>
      <filter dst_ip="151.251.174.209" dst_port="43818" src_ip="87.176.108.9" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.71.41.10"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
2501[label="196.139.242.10;s;109pkt 109fpkt", shape=diamond, color=yellow];
3905[label="196.139.242.10;110pkt 110fpkt", shape=pentagon, color=darkviolet];
7280[label="196.139.242.10;111pkt 111fpkt", shape=invtriangle, color=brown];
9583[label="196.139.242.10;111pkt 111fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.242.10:*, 216.224.209.54:80}[30.6306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2902%)&lt;BR/&gt; 9548: (7.25624%)&lt;BR/&gt; 1863: (0.453515%)&lt;BR/&gt; 1732: (0.453515%)&lt;BR/&gt; 1728: (0.453515%)&gt;];
}
2501--3488[label="0.00917431;1pkt 1fpkt"];
2501--3517[label="0.00917431;1pkt 1fpkt"];
2501--3522[label="0.00917431;1pkt 1fpkt"];
2501--3536[label="0.00917431;1pkt 1fpkt"];
2501--3556[label="0.00917431;1pkt 1fpkt"];
2501--3573[label="0.00917431;1pkt 1fpkt"];
2501--3597[label="0.00917431;1pkt 1fpkt"];
2501--3602[label="0.00917431;1pkt 1fpkt"];
2501--3616[label="0.00917431;1pkt 1fpkt"];
2501--3636[label="0.00917431;1pkt 1fpkt"];
2501--3654[label="0.00917431;1pkt 1fpkt"];
2501--3684[label="0.00917431;1pkt 1fpkt"];
2501--3703[label="0.00917431;1pkt 1fpkt"];
2501--3905[label="0.990826;108pkt 108fpkt"];
2501--7280[label="1;109pkt 109fpkt"];
2501--9583[label="1;109pkt 109fpkt"];
3905--7280[label="1;110pkt 110fpkt"];
3905--9583[label="1;110pkt 110fpkt"];
7280--9583[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="216.224.209.54" dst_port="80" src_ip="196.139.242.10"/>
    </slice>
    <from sec="1134363618" usec="0"/>
    <to sec="1134364473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.5.40.11"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.15.131.11"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.228.189.11"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
3917[label="66.179.209.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7288[label="66.179.209.11;3pkt 3fpkt", shape=invtriangle, color=brown];
9588[label="66.179.209.11;3pkt 3fpkt", shape=invhouse, color=bisque];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.179.209.11:1036, 133.158.86.23:1434}[33.3333%]&lt;BR/&gt;{66.179.209.11:1036, 131.68.93.36:1434}[33.3333%]&lt;BR/&gt;{66.179.209.11:1036, 131.162.96.51:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
3917--7288[label="1;3pkt 3fpkt"];
3917--9588[label="1;3pkt 3fpkt"];
7288--9588[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.162.96.51" dst_port="1434" src_ip="66.179.209.11" src_port="1036"/>
      <filter dst_ip="131.68.93.36" dst_port="1434" src_ip="66.179.209.11" src_port="1036"/>
      <filter dst_ip="133.158.86.23" dst_port="1434" src_ip="66.179.209.11" src_port="1036"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.156.22.12"/>
    </slice>
    <from sec="1134363956" usec="0"/>
    <to sec="1134363991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.160.168.12"/>
    </slice>
    <from sec="1134364395" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.73.98.13"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
3947[label="215.12.192.13;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7301[label="215.12.192.13;3pkt 3fpkt", shape=invtriangle, color=brown];
9597[label="215.12.192.13;4pkt 4fpkt", shape=invhouse, color=bisque];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.12.192.13:80, 133.158.197.3:49304}[25%]&lt;BR/&gt;{215.12.192.13:80, 133.158.197.3:49305}[25%]&lt;BR/&gt;{215.12.192.13:80, 133.158.197.3:49307}[25%]&lt;BR/&gt;{215.12.192.13:80, 133.158.197.3:49308}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49308: (15%)&lt;BR/&gt; 49307: (15%)&lt;BR/&gt; 49305: (15%)&lt;BR/&gt; 49304: (5%)&gt;];
}
3947--7301[label="1;3pkt 3fpkt"];
3947--9597[label="1;3pkt 3fpkt"];
7301--9597[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.197.3" dst_port="49308" src_ip="215.12.192.13" src_port="80"/>
      <filter dst_ip="133.158.197.3" dst_port="49307" src_ip="215.12.192.13" src_port="80"/>
      <filter dst_ip="133.158.197.3" dst_port="49305" src_ip="215.12.192.13" src_port="80"/>
      <filter dst_ip="133.158.197.3" dst_port="49304" src_ip="215.12.192.13" src_port="80"/>
    </slice>
    <from sec="1134364113" usec="0"/>
    <to sec="1134364147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
1067[label="196.139.253.13;s;105pkt 105fpkt", shape=diamond, color=yellow];
1885[label="216.207.207.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
2558[label="7.177.20.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
3949[label="196.139.253.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7303[label="196.139.253.13;3pkt 3fpkt", shape=invtriangle, color=brown];
9599[label="196.139.253.13;3pkt 3fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.253.13:6346, *:6346}[77.3585%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (75.2174%)&lt;BR/&gt; 18527: (3.04348%)&lt;BR/&gt; 29897: (2.17391%)&lt;BR/&gt; 10557: (2.17391%)&lt;BR/&gt; 1702: (2.17391%)&gt;];
}
1067--1885[label="1;1pkt 1fpkt"];
1067--2558[label="1;1pkt 1fpkt"];
1067--3949[label="1;2pkt 2fpkt"];
1067--7303[label="0.666667;2pkt 2fpkt"];
1067--9599[label="0.666667;2pkt 2fpkt"];
2558--3949[label="1;1pkt 1fpkt"];
2558--7303[label="1;1pkt 1fpkt"];
2558--9599[label="1;1pkt 1fpkt"];
3949--7303[label="1;2pkt 2fpkt"];
3949--9599[label="1;2pkt 2fpkt"];
7303--9599[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="196.139.253.13" src_port="6346"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
3954[label="119.52.100.14;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7307[label="119.52.100.14;14pkt 14fpkt", shape=invtriangle, color=brown];
9602[label="119.52.100.14;14pkt 14fpkt", shape=invhouse, color=bisque];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{119.52.100.14:443, 131.68.15.183:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 53865: (3.57143%)&lt;BR/&gt; 53864: (3.57143%)&lt;BR/&gt; 53863: (3.57143%)&lt;BR/&gt; 53862: (3.57143%)&gt;];
}
3954--7307[label="1;14pkt 14fpkt"];
3954--9602[label="1;14pkt 14fpkt"];
7307--9602[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.15.183" src_ip="119.52.100.14" src_port="443"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134363726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.218.195.15"/>
    </slice>
    <from sec="1134363621" usec="0"/>
    <to sec="1134363815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
3967[label="197.99.207.15;85pkt 85fpkt", shape=pentagon, color=darkviolet];
7315[label="197.99.207.15;84pkt 84fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.207.15:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3967--7315[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.207.15"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.60.85.16"/>
    </slice>
    <from sec="1134363998" usec="0"/>
    <to sec="1134364489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3984[label="131.156.115.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7324[label="131.156.115.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.115.16:2525, 119.52.102.37:80}[50%]&lt;BR/&gt;{131.156.115.16:2535, 3.218.44.61:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2535: (33.3333%)&lt;BR/&gt; 2525: (16.6667%)&gt;];
}
3984--7324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="3.218.44.61" dst_port="80" src_ip="131.156.115.16" src_port="2535"/>
      <filter dst_ip="119.52.102.37" dst_port="80" src_ip="131.156.115.16" src_port="2525"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
3994[label="220.149.233.16;229pkt 229fpkt", shape=pentagon, color=darkviolet];
7330[label="220.149.233.16;229pkt 229fpkt", shape=invtriangle, color=brown];
9618[label="220.149.233.16;229pkt 229fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.149.233.16:32770, *:1026}[51.5284%]&lt;BR/&gt;{220.149.233.16:32770, *:1027}[48.4716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32770: (50%)&lt;BR/&gt; 1026: (25.7642%)&lt;BR/&gt; 1027: (24.2358%)&gt;];
}
3994--7330[label="1;229pkt 229fpkt"];
3994--9618[label="1;229pkt 229fpkt"];
7330--9618[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.149.233.16" src_port="32770"/>
      <filter dst_port="1027" src_ip="220.149.233.16" src_port="32770"/>
    </slice>
    <from sec="1134364496" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
4012[label="192.106.194.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7341[label="192.106.194.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.17:1863, 151.251.106.39:2081}[50%]&lt;BR/&gt;{192.106.194.17:1863, 151.251.78.42:1203}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2081: (33.3333%)&lt;BR/&gt; 1203: (16.6667%)&gt;];
}
4012--7341[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.78.42" dst_port="1203" src_ip="192.106.194.17" src_port="1863"/>
      <filter dst_ip="151.251.106.39" dst_port="2081" src_ip="192.106.194.17" src_port="1863"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
4018[label="119.49.69.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7343[label="119.49.69.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{119.49.69.18:443, 133.158.28.179:49528}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49528: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4018--7343[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.28.179" dst_port="49528" src_ip="119.49.69.18" src_port="443"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
3076[label="133.158.107.18;s;198pkt 198fpkt", shape=diamond, color=yellow];
4020[label="133.158.107.18;219pkt 219fpkt", shape=pentagon, color=darkviolet];
7345[label="133.158.107.18;219pkt 219fpkt", shape=invtriangle, color=brown];
9625[label="133.158.107.18;218pkt 218fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.107.18:60838, *:53}[50%]&lt;BR/&gt;{133.158.107.18:53, *:*}[20.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.2365%)&lt;BR/&gt; 60838: (25.1171%)&lt;BR/&gt; 25: (6.14754%)&lt;BR/&gt; 113: (5.9719%)&lt;BR/&gt; 0: (1.17096%)&gt;];
}
3076--3387[label="0.00909091;1pkt 1fpkt"];
3076--3508[label="0.00505051;1pkt 1fpkt"];
3076--3509[label="0.0353535;7pkt 7fpkt"];
3076--3520[label="0.00505051;1pkt 1fpkt"];
3076--3589[label="0.00505051;1pkt 1fpkt"];
3076--3590[label="0.0353535;7pkt 7fpkt"];
3076--3600[label="0.00505051;1pkt 1fpkt"];
3076--3666[label="0.00505051;1pkt 1fpkt"];
3076--3668[label="0.00505051;1pkt 1fpkt"];
3076--4020[label="0.994949;197pkt 197fpkt"];
3076--7345[label="0.994949;197pkt 197fpkt"];
3076--9625[label="0.989899;196pkt 196fpkt"];
4020--7345[label="1;219pkt 219fpkt"];
4020--9625[label="1;218pkt 218fpkt"];
7345--9625[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter src_ip="133.158.107.18" src_port="53"/>
      <filter dst_port="53" src_ip="133.158.107.18" src_port="60838"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
4024[label="87.172.184.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7348[label="87.172.184.18;2pkt 2fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.172.184.18:80, 131.68.50.65:34570}[50%]&lt;BR/&gt;{87.172.184.18:80, 131.68.50.65:34575}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34575: (25%)&lt;BR/&gt; 34570: (25%)&gt;];
}
4024--7348[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.50.65" dst_port="34575" src_ip="87.172.184.18" src_port="80"/>
      <filter dst_ip="131.68.50.65" dst_port="34570" src_ip="87.172.184.18" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
4026[label="192.106.194.18;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7350[label="192.106.194.18;5pkt 5fpkt", shape=invtriangle, color=brown];
9627[label="192.106.194.18;6pkt 6fpkt", shape=invhouse, color=bisque];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.18:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49662: (8.82353%)&lt;BR/&gt; 3161: (8.82353%)&lt;BR/&gt; 2633: (8.82353%)&lt;BR/&gt; 1033: (8.82353%)&gt;];
}
4026--7350[label="1;5pkt 5fpkt"];
4026--9627[label="1;6pkt 6fpkt"];
7350--9627[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="192.106.194.18" src_port="1863"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.237.198.18"/>
    </slice>
    <from sec="1134363723" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.39.212.18"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.136.47.19"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
4053[label="131.68.184.20;89pkt 89fpkt", shape=pentagon, color=darkviolet];
7368[label="131.68.184.20;89pkt 89fpkt", shape=invtriangle, color=brown];
9642[label="131.68.184.20;88pkt 88fpkt", shape=invhouse, color=bisque];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.184.20:*, 219.40.171.130:80}[92.1348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1249: (0.56391%)&lt;BR/&gt; 1248: (0.56391%)&lt;BR/&gt; 1247: (0.56391%)&lt;BR/&gt; 1246: (0.56391%)&gt;];
}
4053--7368[label="1;89pkt 89fpkt"];
4053--9642[label="1;88pkt 88fpkt"];
7368--9642[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="219.40.171.130" dst_port="80" src_ip="131.68.184.20"/>
    </slice>
    <from sec="1134363653" usec="0"/>
    <to sec="1134364378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
4054[label="196.43.185.20;125pkt 125fpkt", shape=pentagon, color=darkviolet];
7369[label="196.43.185.20;125pkt 125fpkt", shape=invtriangle, color=brown];
9643[label="196.43.185.20;125pkt 125fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.43.185.20:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3857: (0.4%)&lt;BR/&gt; 3853: (0.4%)&lt;BR/&gt; 3849: (0.4%)&lt;BR/&gt; 3847: (0.4%)&gt;];
}
4054--7369[label="1;125pkt 125fpkt"];
4054--9643[label="1;125pkt 125fpkt"];
7369--9643[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="196.43.185.20"/>
    </slice>
    <from sec="1134364174" usec="0"/>
    <to sec="1134364227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
4057[label="222.233.219.20;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7372[label="222.233.219.20;19pkt 19fpkt", shape=invtriangle, color=brown];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.233.219.20:*, 131.68.51.180:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3730: (2.5641%)&lt;BR/&gt; 3715: (2.5641%)&lt;BR/&gt; 3707: (2.5641%)&lt;BR/&gt; 3705: (2.5641%)&gt;];
}
4057--7372[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.51.180" dst_port="25" src_ip="222.233.219.20"/>
    </slice>
    <from sec="1134364279" usec="0"/>
    <to sec="1134364467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
4058[label="4.10.232.20;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7373[label="4.10.232.20;5pkt 5fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.10.232.20:80, 196.129.156.217:4059}[20%]&lt;BR/&gt;{4.10.232.20:80, 196.129.156.217:4166}[20%]&lt;BR/&gt;{4.10.232.20:80, 196.129.156.217:4203}[20%]&lt;BR/&gt;{4.10.232.20:80, 196.129.156.217:4260}[20%]&lt;BR/&gt;{4.10.232.20:80, 196.129.156.217:4266}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4266: (10%)&lt;BR/&gt; 4260: (10%)&lt;BR/&gt; 4203: (10%)&lt;BR/&gt; 4166: (10%)&gt;];
}
4058--7373[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="4266" src_ip="4.10.232.20" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="4260" src_ip="4.10.232.20" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="4203" src_ip="4.10.232.20" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="4166" src_ip="4.10.232.20" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="4059" src_ip="4.10.232.20" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
4073[label="166.115.194.21;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7380[label="166.115.194.21;8pkt 8fpkt", shape=invtriangle, color=brown];
9647[label="166.115.194.21;8pkt 8fpkt", shape=invhouse, color=bisque];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.194.21:80, 208.239.154.1:*}[25%]&lt;BR/&gt;{166.115.194.21:25, *:*}[25%]&lt;BR/&gt;{166.115.194.21:53, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.913%)&lt;BR/&gt; 53: (13.0435%)&lt;BR/&gt; 25: (13.0435%)&lt;BR/&gt; 52638: (6.52174%)&lt;BR/&gt; 47682: (6.52174%)&gt;];
}
4073--7380[label="1;7pkt 7fpkt"];
4073--9647[label="1;7pkt 7fpkt"];
7380--9647[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="166.115.194.21" src_port="53"/>
      <filter src_ip="166.115.194.21" src_port="25"/>
      <filter dst_ip="208.239.154.1" src_ip="166.115.194.21" src_port="80"/>
    </slice>
    <from sec="1134363618" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.56.73.22"/>
    </slice>
    <from sec="1134363754" usec="0"/>
    <to sec="1134363879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
4082[label="196.242.77.22;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7386[label="196.242.77.22;253pkt 253fpkt", shape=invtriangle, color=brown];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.242.77.22:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4082--7386[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.242.77.22" src_port="1026"/>
    </slice>
    <from sec="1134364085" usec="0"/>
    <to sec="1134364099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.81.198.23"/>
    </slice>
    <from sec="1134364422" usec="0"/>
    <to sec="1134364432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
4104[label="220.149.233.23;349pkt 349fpkt", shape=pentagon, color=darkviolet];
7399[label="220.149.233.23;350pkt 350fpkt", shape=invtriangle, color=brown];
9660[label="220.149.233.23;350pkt 350fpkt", shape=invhouse, color=bisque];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.149.233.23:35011, *:1026}[32.2857%]&lt;BR/&gt;{220.149.233.23:35011, *:1027}[26%]&lt;BR/&gt;{220.149.233.23:35012, *:1026}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35011: (29.1706%)&lt;BR/&gt; 1026: (27.5977%)&lt;BR/&gt; 1027: (22.4023%)&lt;BR/&gt; 35012: (20.8294%)&gt;];
}
4104--7399[label="1;349pkt 349fpkt"];
4104--9660[label="1;349pkt 349fpkt"];
7399--9660[label="1;350pkt 350fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.149.233.23" src_port="35011"/>
      <filter dst_port="1027" src_ip="220.149.233.23" src_port="35011"/>
      <filter dst_port="1026" src_ip="220.149.233.23" src_port="35012"/>
    </slice>
    <from sec="1134363836" usec="0"/>
    <to sec="1134363837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
234[label="219.114.72.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
556[label="151.251.77.107;d;17pkt 17fpkt", shape=diamond, color=yellow];
4116[label="219.114.72.24;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6321[label="219.114.72.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7408[label="219.114.72.24;5pkt 5fpkt", shape=invtriangle, color=brown];
8890[label="219.114.72.183;1pkt 1fpkt", shape=invtriangle, color=brown];
9666[label="219.114.72.24;4pkt 4fpkt", shape=invhouse, color=bisque];
10633[label="219.114.72.183;1pkt 1fpkt", shape=invhouse, color=bisque];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.114.72.7:443, 151.251.77.107:*}[58.8235%]&lt;BR/&gt;{219.114.72.24:80, 151.251.77.107:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.4706%)&lt;BR/&gt; 443: (14.7059%)&lt;BR/&gt; 19214: (7.35294%)&lt;BR/&gt; 8000: (7.35294%)&lt;BR/&gt; 4860: (5.88235%)&gt;];
}
234--556[label="1;1pkt 1fpkt"];
234--6321[label="1;1pkt 1fpkt"];
234--8890[label="1;1pkt 1fpkt"];
234--10633[label="1;1pkt 1fpkt"];
556--4116[label="1;4pkt 4fpkt"];
556--6321[label="1;1pkt 1fpkt"];
556--7408[label="1;5pkt 5fpkt"];
556--8890[label="1;1pkt 1fpkt"];
556--9666[label="1;4pkt 4fpkt"];
556--10633[label="1;1pkt 1fpkt"];
4116--7408[label="1;4pkt 4fpkt"];
4116--9666[label="1;4pkt 4fpkt"];
6321--8890[label="1;1pkt 1fpkt"];
6321--10633[label="1;1pkt 1fpkt"];
7408--9666[label="1;4pkt 4fpkt"];
8890--10633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.77.107" src_ip="219.114.72.7" src_port="443"/>
      <filter dst_ip="151.251.77.107" src_ip="219.114.72.24" src_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
4118[label="220.195.113.24;255pkt 255fpkt", shape=pentagon, color=darkviolet];
7410[label="220.195.113.24;256pkt 256fpkt", shape=invtriangle, color=brown];
9667[label="220.195.113.24;256pkt 256fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.195.113.24:32797, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32797: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4118--7410[label="1;255pkt 255fpkt"];
4118--9667[label="1;255pkt 255fpkt"];
7410--9667[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.195.113.24" src_port="32797"/>
    </slice>
    <from sec="1134364446" usec="0"/>
    <to sec="1134364459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.146.148.24"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
4130[label="163.180.71.25;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7419[label="163.180.71.25;7pkt 7fpkt", shape=invtriangle, color=brown];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.71.25:*, 204.17.55.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2227: (7.14286%)&lt;BR/&gt; 2226: (7.14286%)&lt;BR/&gt; 2225: (7.14286%)&lt;BR/&gt; 2224: (7.14286%)&gt;];
}
4130--7419[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="204.17.55.55" dst_port="80" src_ip="163.180.71.25"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
4135[label="203.182.163.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7423[label="203.182.163.25;2pkt 2fpkt", shape=invtriangle, color=brown];
9673[label="203.182.163.25;2pkt 2fpkt", shape=invhouse, color=bisque];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.182.163.25:2075, 163.180.207.14:139}[50%]&lt;BR/&gt;{203.182.163.25:2041, 163.213.180.140:139}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2075: (25%)&lt;BR/&gt; 2041: (25%)&gt;];
}
4135--7423[label="1;2pkt 2fpkt"];
4135--9673[label="1;2pkt 2fpkt"];
7423--9673[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="163.213.180.140" dst_port="139" src_ip="203.182.163.25" src_port="2041"/>
      <filter dst_ip="163.180.207.14" dst_port="139" src_ip="203.182.163.25" src_port="2075"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.255.52.26"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
695[label="133.159.133.27;s;71pkt 71fpkt", shape=diamond, color=yellow];
1795[label="67.92.138.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
3088[label="18.211.20.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
4163[label="133.159.133.27;76pkt 76fpkt", shape=pentagon, color=darkviolet];
7438[label="133.159.133.27;76pkt 76fpkt", shape=invtriangle, color=brown];
9681[label="133.159.133.27;76pkt 76fpkt", shape=invhouse, color=bisque];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.133.27:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29205: (2.65781%)&lt;BR/&gt; 18236: (2.65781%)&lt;BR/&gt; 9548: (2.49169%)&lt;BR/&gt; 16717: (1.99336%)&lt;BR/&gt; 9993: (1.82724%)&gt;];
}
695--1759[label="0.0140845;1pkt 1fpkt"];
695--1795[label="1;1pkt 1fpkt"];
695--3088[label="1;1pkt 1fpkt"];
695--3509[label="0.0140845;1pkt 1fpkt"];
695--3590[label="0.0140845;1pkt 1fpkt"];
695--4163[label="1;71pkt 71fpkt"];
695--7438[label="1;71pkt 71fpkt"];
695--9681[label="1;71pkt 71fpkt"];
1795--4163[label="1;1pkt 1fpkt"];
1795--7438[label="1;1pkt 1fpkt"];
1795--9681[label="1;1pkt 1fpkt"];
3088--4163[label="1;1pkt 1fpkt"];
3088--7438[label="1;1pkt 1fpkt"];
3088--9681[label="1;1pkt 1fpkt"];
4163--7438[label="1;76pkt 76fpkt"];
4163--9681[label="1;76pkt 76fpkt"];
7438--9681[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter src_ip="133.159.133.27"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
4166[label="7.154.100.28;107pkt 107fpkt", shape=pentagon, color=darkviolet];
7440[label="7.154.100.28;107pkt 107fpkt", shape=invtriangle, color=brown];
9683[label="7.154.100.28;108pkt 108fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.154.100.28:0, *:1026}[51.8519%]&lt;BR/&gt;{7.154.100.28:0, *:1025}[48.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1026: (26.087%)&lt;BR/&gt; 1025: (23.913%)&gt;];
}
4166--7440[label="1;107pkt 107fpkt"];
4166--9683[label="1;107pkt 107fpkt"];
7440--9683[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="7.154.100.28"/>
      <filter dst_port="1025" src_ip="7.154.100.28"/>
    </slice>
    <from sec="1134363794" usec="0"/>
    <to sec="1134363795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
4170[label="19.88.127.28;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7443[label="19.88.127.28;6pkt 6fpkt", shape=invtriangle, color=brown];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.88.127.28:80, 196.129.156.216:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58462: (7.69231%)&lt;BR/&gt; 58461: (7.69231%)&lt;BR/&gt; 56291: (7.69231%)&lt;BR/&gt; 56185: (7.69231%)&gt;];
}
4170--7443[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="19.88.127.28" src_port="80"/>
    </slice>
    <from sec="1134363885" usec="0"/>
    <to sec="1134364044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
2025[label="197.99.219.152;d;184pkt 184fpkt", shape=diamond, color=yellow];
3881[label="195.214.161.9;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4175[label="195.214.213.28;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7263[label="195.214.161.9;3pkt 3fpkt", shape=invtriangle, color=brown];
7445[label="195.214.213.28;14pkt 14fpkt", shape=invtriangle, color=brown];
9574[label="195.214.161.9;3pkt 3fpkt", shape=invhouse, color=bisque];
9687[label="195.214.213.28;14pkt 14fpkt", shape=invhouse, color=bisque];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 197.99.219.152:0}[92.4623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2025--3881[label="0.333333;1pkt 1fpkt"];
2025--4175[label="0.0769231;1pkt 1fpkt"];
2025--7263[label="0.333333;1pkt 1fpkt"];
2025--7445[label="0.0714286;1pkt 1fpkt"];
2025--9574[label="0.333333;1pkt 1fpkt"];
2025--9687[label="0.0714286;1pkt 1fpkt"];
3881--7263[label="1;3pkt 3fpkt"];
3881--9574[label="1;3pkt 3fpkt"];
4175--7445[label="1;13pkt 13fpkt"];
4175--9687[label="1;13pkt 13fpkt"];
7263--9574[label="1;3pkt 3fpkt"];
7445--9687[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.219.152"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
4177[label="220.170.16.29;235pkt 235fpkt", shape=pentagon, color=darkviolet];
7446[label="220.170.16.29;236pkt 236fpkt", shape=invtriangle, color=brown];
9688[label="220.170.16.29;235pkt 235fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.170.16.29:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4177--7446[label="1;235pkt 235fpkt"];
4177--9688[label="1;235pkt 235fpkt"];
7446--9688[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.170.16.29" src_port="1032"/>
    </slice>
    <from sec="1134364204" usec="0"/>
    <to sec="1134364218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.136.47.31"/>
    </slice>
    <from sec="1134363888" usec="0"/>
    <to sec="1134363905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
4207[label="133.158.216.31;67pkt 67fpkt", shape=pentagon, color=darkviolet];
7461[label="133.158.216.31;67pkt 67fpkt", shape=invtriangle, color=brown];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.216.31:*, 205.129.118.160:80}[94.0299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2537%)&lt;BR/&gt; 2186: (0.746269%)&lt;BR/&gt; 2185: (0.746269%)&lt;BR/&gt; 2184: (0.746269%)&lt;BR/&gt; 2183: (0.746269%)&gt;];
}
4207--7461[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="205.129.118.160" dst_port="80" src_ip="133.158.216.31"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.253.57.32"/>
    </slice>
    <from sec="1134364096" usec="0"/>
    <to sec="1134364097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.82.134.32"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
4228[label="163.180.80.33;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7477[label="163.180.80.33;24pkt 24fpkt", shape=invtriangle, color=brown];
9709[label="163.180.80.33;24pkt 24fpkt", shape=invhouse, color=bisque];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.80.33:*, 208.219.132.199:80}[37.5%]&lt;BR/&gt;{163.180.80.33:*, 200.230.43.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1264: (2.08333%)&lt;BR/&gt; 1263: (2.08333%)&lt;BR/&gt; 1262: (2.08333%)&lt;BR/&gt; 1261: (2.08333%)&gt;];
}
4228--7477[label="1;24pkt 24fpkt"];
4228--9709[label="1;24pkt 24fpkt"];
7477--9709[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="208.219.132.199" dst_port="80" src_ip="163.180.80.33"/>
      <filter dst_ip="200.230.43.67" dst_port="80" src_ip="163.180.80.33"/>
    </slice>
    <from sec="1134363683" usec="0"/>
    <to sec="1134363705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.114.129.33"/>
    </slice>
    <from sec="1134364432" usec="0"/>
    <to sec="1134364456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
4240[label="196.129.139.33;120pkt 120fpkt", shape=pentagon, color=darkviolet];
7486[label="196.129.139.33;119pkt 119fpkt", shape=invtriangle, color=brown];
9715[label="196.129.139.33;120pkt 120fpkt", shape=invhouse, color=bisque];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.139.33:0, *:0}[99.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1643%)&lt;BR/&gt; 4864: (0.417827%)&lt;BR/&gt; 80: (0.417827%)&gt;];
}
4240--7486[label="1;119pkt 119fpkt"];
4240--9715[label="1;120pkt 120fpkt"];
7486--9715[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter src_ip="196.129.139.33"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
4255[label="133.158.141.34;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7498[label="133.158.141.34;20pkt 20fpkt", shape=invtriangle, color=brown];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.34:*, 215.14.108.22:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1534: (2.43902%)&lt;BR/&gt; 1517: (2.43902%)&lt;BR/&gt; 1516: (2.43902%)&lt;BR/&gt; 1471: (2.43902%)&gt;];
}
4255--7498[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.108.22" dst_port="80" src_ip="133.158.141.34"/>
    </slice>
    <from sec="1134364400" usec="0"/>
    <to sec="1134364450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
4260[label="133.158.219.34;72pkt 72fpkt", shape=pentagon, color=darkviolet];
7501[label="133.158.219.34;71pkt 71fpkt", shape=invtriangle, color=brown];
9724[label="133.158.219.34;72pkt 72fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.219.34:*, 0.106.26.197:8200}[79.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 2845: (0.697674%)&lt;BR/&gt; 2839: (0.697674%)&lt;BR/&gt; 2838: (0.697674%)&lt;BR/&gt; 2834: (0.697674%)&gt;];
}
4260--7501[label="1;71pkt 71fpkt"];
4260--9724[label="1;72pkt 72fpkt"];
7501--9724[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="0.106.26.197" dst_port="8200" src_ip="133.158.219.34"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
4262[label="69.88.226.34;132pkt 132fpkt", shape=pentagon, color=darkviolet];
7503[label="69.88.226.34;131pkt 131fpkt", shape=invtriangle, color=brown];
9726[label="69.88.226.34;132pkt 132fpkt", shape=invhouse, color=bisque];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.88.226.34:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4262--7503[label="1;131pkt 131fpkt"];
4262--9726[label="1;132pkt 132fpkt"];
7503--9726[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="69.88.226.34" src_port="1026"/>
    </slice>
    <from sec="1134364161" usec="0"/>
    <to sec="1134364182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.91.49.36"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
4291[label="221.196.215.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7524[label="221.196.215.36;1pkt 1fpkt", shape=invtriangle, color=brown];
9740[label="221.196.215.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.196.215.36:22131, 131.68.162.236:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22131: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4291--7524[label="1;1pkt 1fpkt"];
4291--9740[label="1;1pkt 1fpkt"];
7524--9740[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.162.236" dst_port="25" src_ip="221.196.215.36" src_port="22131"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
4295[label="133.158.9.37;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7527[label="133.158.9.37;4pkt 4fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.9.37:1441, 218.11.83.208:80}[20%]&lt;BR/&gt;{133.158.9.37:1442, 218.11.83.208:80}[20%]&lt;BR/&gt;{133.158.9.37:1443, 218.11.83.208:80}[20%]&lt;BR/&gt;{133.158.9.37:1453, 218.11.83.208:80}[20%]&lt;BR/&gt;{133.158.9.37:1454, 218.11.83.208:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1454: (11.1111%)&lt;BR/&gt; 1453: (11.1111%)&lt;BR/&gt; 1443: (11.1111%)&lt;BR/&gt; 1441: (11.1111%)&gt;];
}
4295--7527[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="218.11.83.208" dst_port="80" src_ip="133.158.9.37" src_port="1454"/>
      <filter dst_ip="218.11.83.208" dst_port="80" src_ip="133.158.9.37" src_port="1453"/>
      <filter dst_ip="218.11.83.208" dst_port="80" src_ip="133.158.9.37" src_port="1443"/>
      <filter dst_ip="218.11.83.208" dst_port="80" src_ip="133.158.9.37" src_port="1442"/>
      <filter dst_ip="218.11.83.208" dst_port="80" src_ip="133.158.9.37" src_port="1441"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134363711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
4296[label="131.68.11.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7528[label="131.68.11.37;1pkt 1fpkt", shape=invtriangle, color=brown];
9742[label="131.68.11.37;1pkt 1fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.11.37:1496, 203.178.92.200:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1496: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4296--7528[label="1;1pkt 1fpkt"];
4296--9742[label="1;1pkt 1fpkt"];
7528--9742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.178.92.200" dst_port="80" src_ip="131.68.11.37" src_port="1496"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.167.68.37"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134363650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
4307[label="133.158.129.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7537[label="133.158.129.37;2pkt 2fpkt", shape=invtriangle, color=brown];
9746[label="133.158.129.37;2pkt 2fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.129.37:1558, 197.14.95.250:80}[50%]&lt;BR/&gt;{133.158.129.37:1560, 197.14.95.250:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1560: (25%)&lt;BR/&gt; 1558: (25%)&gt;];
}
4307--7537[label="1;2pkt 2fpkt"];
4307--9746[label="1;2pkt 2fpkt"];
7537--9746[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.14.95.250" dst_port="80" src_ip="133.158.129.37" src_port="1560"/>
      <filter dst_ip="197.14.95.250" dst_port="80" src_ip="133.158.129.37" src_port="1558"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.14.181.37"/>
    </slice>
    <from sec="1134363648" usec="0"/>
    <to sec="1134363854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
4316[label="163.185.3.38;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7545[label="163.185.3.38;37pkt 37fpkt", shape=invtriangle, color=brown];
9749[label="163.185.3.38;38pkt 38fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.3.38:*, 0.68.117.39:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3185: (1.33929%)&lt;BR/&gt; 3184: (1.33929%)&lt;BR/&gt; 3182: (1.33929%)&lt;BR/&gt; 3180: (1.33929%)&gt;];
}
4316--7545[label="1;37pkt 37fpkt"];
4316--9749[label="1;37pkt 37fpkt"];
7545--9749[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="0.68.117.39" dst_port="80" src_ip="163.185.3.38"/>
    </slice>
    <from sec="1134363796" usec="0"/>
    <to sec="1134363861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
4322[label="163.180.61.38;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7549[label="163.180.61.38;6pkt 6fpkt", shape=invtriangle, color=brown];
9752[label="163.180.61.38;7pkt 7fpkt", shape=invhouse, color=bisque];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.61.38:80, 213.182.103.45:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58259: (7.5%)&lt;BR/&gt; 34158: (7.5%)&lt;BR/&gt; 27109: (7.5%)&lt;BR/&gt; 26747: (7.5%)&gt;];
}
4322--7549[label="1;6pkt 6fpkt"];
4322--9752[label="1;7pkt 7fpkt"];
7549--9752[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="213.182.103.45" src_ip="163.180.61.38" src_port="80"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.100.131.38"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
4332[label="68.148.46.39;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7556[label="68.148.46.39;254pkt 254fpkt", shape=invtriangle, color=brown];
9758[label="68.148.46.39;254pkt 254fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.148.46.39:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4332--7556[label="1;254pkt 254fpkt"];
4332--9758[label="1;254pkt 254fpkt"];
7556--9758[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="68.148.46.39" src_port="1029"/>
    </slice>
    <from sec="1134363792" usec="0"/>
    <to sec="1134363806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
1267[label="0.68.117.16;d;47pkt 47fpkt", shape=diamond, color=yellow];
1903[label="196.139.10.137;s;98pkt 98fpkt", shape=diamond, color=yellow];
2191[label="131.68.11.106;s;133pkt 133fpkt", shape=diamond, color=yellow];
2194[label="0.68.117.36;d;95pkt 95fpkt", shape=diamond, color=yellow];
4337[label="133.158.173.39;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5289[label="131.68.11.106;144pkt 144fpkt", shape=pentagon, color=darkviolet];
5716[label="196.139.10.137;151pkt 151fpkt", shape=pentagon, color=darkviolet];
7559[label="133.158.173.39;55pkt 55fpkt", shape=invtriangle, color=brown];
8213[label="131.68.11.106;144pkt 144fpkt", shape=invtriangle, color=brown];
8486[label="196.139.10.137;152pkt 152fpkt", shape=invtriangle, color=brown];
9759[label="133.158.173.39;55pkt 55fpkt", shape=invhouse, color=bisque];
10171[label="131.68.11.106;145pkt 145fpkt", shape=invhouse, color=bisque];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.11.106:*, 0.68.117.36:80}[25.5618%]&lt;BR/&gt;{196.139.10.137:*, 2.148.115.36:80}[20.5056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3516%)&lt;BR/&gt; 1863: (0.549451%)&lt;BR/&gt; 10001: (0.470958%)&lt;BR/&gt; 443: (0.274725%)&lt;BR/&gt; 7001: (0.235479%)&gt;];
}
1267--1903[label="0.0212766;1pkt 1fpkt"];
1267--2191[label="0.765957;36pkt 36fpkt"];
1267--3505[label="0.212766;10pkt 10fpkt"];
1267--3648[label="0.234043;11pkt 11fpkt"];
1267--3662[label="0.212766;10pkt 10fpkt"];
1267--4337[label="0.212766;10pkt 10fpkt"];
1267--5289[label="0.765957;36pkt 36fpkt"];
1267--5716[label="0.0212766;1pkt 1fpkt"];
1267--7559[label="0.212766;10pkt 10fpkt"];
1267--8213[label="0.765957;36pkt 36fpkt"];
1267--8486[label="0.0212766;1pkt 1fpkt"];
1267--9759[label="0.212766;10pkt 10fpkt"];
1267--10171[label="0.765957;36pkt 36fpkt"];
1903--3182[label="0.0102041;1pkt 1fpkt"];
1903--3457[label="0.0102041;1pkt 1fpkt"];
1903--3505[label="0.22449;22pkt 22fpkt"];
1903--3510[label="0.0306122;3pkt 3fpkt"];
1903--3520[label="0.0510204;5pkt 5fpkt"];
1903--3591[label="0.0306122;3pkt 3fpkt"];
1903--3600[label="0.0510204;5pkt 5fpkt"];
1903--3648[label="0.265306;26pkt 26fpkt"];
1903--3662[label="0.22449;22pkt 22fpkt"];
1903--3668[label="0.0510204;5pkt 5fpkt"];
1903--5716[label="0.989796;97pkt 97fpkt"];
1903--8486[label="1;98pkt 98fpkt"];
2191--2194[label="0.957895;91pkt 91fpkt"];
2191--2468[label="0.0075188;1pkt 1fpkt"];
2191--3488[label="0.0075188;1pkt 1fpkt"];
2191--3505[label="0.0977444;13pkt 13fpkt"];
2191--3510[label="0.135338;18pkt 18fpkt"];
2191--3517[label="0.0075188;1pkt 1fpkt"];
2191--3520[label="0.12782;17pkt 17fpkt"];
2191--3522[label="0.0075188;1pkt 1fpkt"];
2191--3573[label="0.0075188;1pkt 1fpkt"];
2191--3591[label="0.135338;18pkt 18fpkt"];
2191--3597[label="0.0075188;1pkt 1fpkt"];
2191--3600[label="0.12782;17pkt 17fpkt"];
2191--3602[label="0.0075188;1pkt 1fpkt"];
2191--3648[label="0.0977444;13pkt 13fpkt"];
2191--3654[label="0.0075188;1pkt 1fpkt"];
2191--3662[label="0.0977444;13pkt 13fpkt"];
2191--3668[label="0.12782;17pkt 17fpkt"];
2191--5289[label="1;133pkt 133fpkt"];
2191--8213[label="1;133pkt 133fpkt"];
2191--10171[label="1;133pkt 133fpkt"];
2194--3505[label="0.0631579;6pkt 6fpkt"];
2194--3510[label="0.189474;18pkt 18fpkt"];
2194--3520[label="0.178947;17pkt 17fpkt"];
2194--3591[label="0.189474;18pkt 18fpkt"];
2194--3600[label="0.178947;17pkt 17fpkt"];
2194--3648[label="0.0210526;2pkt 2fpkt"];
2194--3662[label="0.0631579;6pkt 6fpkt"];
2194--3668[label="0.178947;17pkt 17fpkt"];
2194--5289[label="0.957895;91pkt 91fpkt"];
2194--8213[label="0.957895;91pkt 91fpkt"];
2194--10171[label="0.957895;91pkt 91fpkt"];
4337--7559[label="1;55pkt 55fpkt"];
4337--9759[label="1;55pkt 55fpkt"];
5289--8213[label="1;144pkt 144fpkt"];
5289--10171[label="1;144pkt 144fpkt"];
5716--8486[label="1;151pkt 151fpkt"];
7559--9759[label="1;55pkt 55fpkt"];
8213--10171[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_ip="2.148.115.36" dst_port="80" src_ip="196.139.10.137"/>
      <filter dst_ip="0.68.117.36" dst_port="80" src_ip="131.68.11.106"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.40.230.39"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.207.105.40"/>
    </slice>
    <from sec="1134364410" usec="0"/>
    <to sec="1134364436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.99.217.40"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.213.251.40"/>
    </slice>
    <from sec="1134364307" usec="0"/>
    <to sec="1134364330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
4364[label="197.99.220.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7580[label="197.99.220.41;1pkt 1fpkt", shape=invtriangle, color=brown];
9771[label="197.99.220.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.220.41:44044, 202.112.44.44:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44044: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4364--7580[label="1;1pkt 1fpkt"];
4364--9771[label="1;1pkt 1fpkt"];
7580--9771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.112.44.44" dst_port="25" src_ip="197.99.220.41" src_port="44044"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
2884[label="131.68.7.42;s;17pkt 17fpkt", shape=diamond, color=yellow];
4366[label="131.68.7.42;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7582[label="131.68.7.42;18pkt 18fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.7.42:*, 193.67.13.176:80}[47.3684%]&lt;BR/&gt;{131.68.7.42:*, 193.67.9.135:80}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1473: (2.83019%)&lt;BR/&gt; 1469: (2.83019%)&lt;BR/&gt; 1467: (2.83019%)&lt;BR/&gt; 1465: (2.83019%)&gt;];
}
2884--3520[label="0.0588235;1pkt 1fpkt"];
2884--3556[label="0.0588235;1pkt 1fpkt"];
2884--3600[label="0.0588235;1pkt 1fpkt"];
2884--3636[label="0.0588235;1pkt 1fpkt"];
2884--3668[label="0.0588235;1pkt 1fpkt"];
2884--3703[label="0.0588235;1pkt 1fpkt"];
2884--4366[label="0.941176;16pkt 16fpkt"];
2884--7582[label="0.941176;16pkt 16fpkt"];
4366--7582[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="193.67.13.176" dst_port="80" src_ip="131.68.7.42"/>
      <filter dst_ip="193.67.9.135" dst_port="80" src_ip="131.68.7.42"/>
    </slice>
    <from sec="1134363819" usec="0"/>
    <to sec="1134364477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.158.48.42"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
4380[label="19.10.186.42;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7590[label="19.10.186.42;8pkt 8fpkt", shape=invtriangle, color=brown];
9775[label="19.10.186.42;8pkt 8fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.10.186.42:80, 131.156.26.133:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3079: (6%)&lt;BR/&gt; 3078: (6%)&lt;BR/&gt; 3073: (6%)&lt;BR/&gt; 3072: (6%)&gt;];
}
4380--7590[label="1;8pkt 8fpkt"];
4380--9775[label="1;8pkt 8fpkt"];
7590--9775[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="131.156.26.133" src_ip="19.10.186.42" src_port="80"/>
    </slice>
    <from sec="1134364307" usec="0"/>
    <to sec="1134364314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
4383[label="163.180.209.42;42pkt 42fpkt", shape=pentagon, color=darkviolet];
7592[label="163.180.209.42;42pkt 42fpkt", shape=invtriangle, color=brown];
9777[label="163.180.209.42;42pkt 42fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.209.42:30237, *:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30237: (47.619%)&lt;BR/&gt; 45608: (2.38095%)&lt;BR/&gt; 1371: (2.38095%)&lt;BR/&gt; 65083: (1.19048%)&lt;BR/&gt; 64596: (1.19048%)&gt;];
}
4383--7592[label="1;42pkt 42fpkt"];
4383--9777[label="1;42pkt 42fpkt"];
7592--9777[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="163.180.209.42" src_port="30237"/>
    </slice>
    <from sec="1134363625" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
4388[label="216.89.56.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7597[label="216.89.56.43;2pkt 2fpkt", shape=invtriangle, color=brown];
9782[label="216.89.56.43;1pkt 1fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.89.56.43:7000, 151.251.240.4:22633}[50%]&lt;BR/&gt;{216.89.56.43:7000, 131.68.41.212:30539}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 22633: (37.5%)&lt;BR/&gt; 30539: (12.5%)&gt;];
}
4388--7597[label="1;1pkt 1fpkt"];
4388--9782[label="1;1pkt 1fpkt"];
7597--9782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.41.212" dst_port="30539" src_ip="216.89.56.43" src_port="7000"/>
      <filter dst_ip="151.251.240.4" dst_port="22633" src_ip="216.89.56.43" src_port="7000"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_720{
style=filled;
color=gray75;
4392[label="163.185.134.43;60pkt 60fpkt", shape=pentagon, color=darkviolet];
7600[label="163.185.134.43;60pkt 60fpkt", shape=invtriangle, color=brown];
9784[label="163.185.134.43;61pkt 61fpkt", shape=invhouse, color=bisque];
stat720[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.134.43:4672, *:4672}[60.6557%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (74.8619%)&lt;BR/&gt; 4662: (4.97238%)&lt;BR/&gt; 6672: (2.76243%)&lt;BR/&gt; 63695: (0.828729%)&lt;BR/&gt; 36008: (0.828729%)&gt;];
}
4392--7600[label="1;60pkt 60fpkt"];
4392--9784[label="1;60pkt 60fpkt"];
7600--9784[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="163.185.134.43" src_port="4672"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134364122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
4393[label="133.158.204.43;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7601[label="133.158.204.43;22pkt 22fpkt", shape=invtriangle, color=brown];
9785[label="133.158.204.43;22pkt 22fpkt", shape=invhouse, color=bisque];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.204.43:*, *:113}[50%]&lt;BR/&gt;{133.158.204.43:25, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.3846%)&lt;BR/&gt; 25: (24.6154%)&lt;BR/&gt; 63486: (2.30769%)&lt;BR/&gt; 63475: (2.30769%)&lt;BR/&gt; 57773: (2.30769%)&gt;];
}
4393--7601[label="1;21pkt 21fpkt"];
4393--9785[label="1;21pkt 21fpkt"];
7601--9785[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="133.158.204.43" src_port="25"/>
      <filter dst_port="113" src_ip="133.158.204.43"/>
    </slice>
    <from sec="1134363620" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.67.9.44"/>
    </slice>
    <from sec="1134364345" usec="0"/>
    <to sec="1134364372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.194.21.44"/>
    </slice>
    <from sec="1134363943" usec="0"/>
    <to sec="1134364106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
4406[label="192.106.194.44;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7609[label="192.106.194.44;5pkt 5fpkt", shape=invtriangle, color=brown];
9792[label="192.106.194.44;4pkt 4fpkt", shape=invhouse, color=bisque];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.44:1863, 151.251.72.17:4988}[20%]&lt;BR/&gt;{192.106.194.44:1863, 151.251.228.111:1854}[20%]&lt;BR/&gt;{192.106.194.44:1863, 151.251.55.117:1057}[20%]&lt;BR/&gt;{192.106.194.44:1863, 151.251.104.216:1790}[20%]&lt;BR/&gt;{192.106.194.44:1863, 151.251.168.248:3131}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4988: (11.5385%)&lt;BR/&gt; 1854: (11.5385%)&lt;BR/&gt; 1790: (11.5385%)&lt;BR/&gt; 1057: (11.5385%)&gt;];
}
4406--7609[label="1;4pkt 4fpkt"];
4406--9792[label="1;4pkt 4fpkt"];
7609--9792[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.168.248" dst_port="3131" src_ip="192.106.194.44" src_port="1863"/>
      <filter dst_ip="151.251.104.216" dst_port="1790" src_ip="192.106.194.44" src_port="1863"/>
      <filter dst_ip="151.251.55.117" dst_port="1057" src_ip="192.106.194.44" src_port="1863"/>
      <filter dst_ip="151.251.228.111" dst_port="1854" src_ip="192.106.194.44" src_port="1863"/>
      <filter dst_ip="151.251.72.17" dst_port="4988" src_ip="192.106.194.44" src_port="1863"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.70.245.44"/>
    </slice>
    <from sec="1134363995" usec="0"/>
    <to sec="1134364473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.8.189.45"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
3115[label="133.158.134.46;s;42pkt 42fpkt", shape=diamond, color=yellow];
4429[label="133.158.134.46;62pkt 62fpkt", shape=pentagon, color=darkviolet];
7623[label="133.158.134.46;63pkt 63fpkt", shape=invtriangle, color=brown];
9801[label="133.158.134.46;62pkt 62fpkt", shape=invhouse, color=bisque];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.134.46:*, 2.195.105.33:80}[47.619%]&lt;BR/&gt;{133.158.134.46:*, 2.1.86.126:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2338: (0.873362%)&lt;BR/&gt; 2337: (0.873362%)&lt;BR/&gt; 2336: (0.873362%)&lt;BR/&gt; 2335: (0.873362%)&gt;];
}
3115--3556[label="0.214286;9pkt 9fpkt"];
3115--3636[label="0.214286;9pkt 9fpkt"];
3115--3703[label="0.214286;9pkt 9fpkt"];
3115--4429[label="0.97619;41pkt 41fpkt"];
3115--7623[label="1;42pkt 42fpkt"];
3115--9801[label="0.97619;41pkt 41fpkt"];
4429--7623[label="1;62pkt 62fpkt"];
4429--9801[label="1;62pkt 62fpkt"];
7623--9801[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="2.195.105.33" dst_port="80" src_ip="133.158.134.46"/>
      <filter dst_ip="2.1.86.126" dst_port="80" src_ip="133.158.134.46"/>
    </slice>
    <from sec="1134363659" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
4432[label="133.158.172.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7624[label="133.158.172.46;1pkt 1fpkt", shape=invtriangle, color=brown];
9802[label="133.158.172.46;1pkt 1fpkt", shape=invhouse, color=bisque];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.172.46:1792, 216.73.85.93:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1792: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4432--7624[label="1;1pkt 1fpkt"];
4432--9802[label="1;1pkt 1fpkt"];
7624--9802[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.73.85.93" dst_port="80" src_ip="133.158.172.46" src_port="1792"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
4435[label="17.101.255.46;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7626[label="17.101.255.46;18pkt 18fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.101.255.46:80, 163.180.83.52:*}[42.1053%]&lt;BR/&gt;{17.101.255.46:80, 133.158.40.77:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65494: (2.7027%)&lt;BR/&gt; 65491: (2.7027%)&lt;BR/&gt; 36712: (2.7027%)&lt;BR/&gt; 36699: (2.7027%)&gt;];
}
4435--7626[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.83.52" src_ip="17.101.255.46" src_port="80"/>
      <filter dst_ip="133.158.40.77" src_ip="17.101.255.46" src_port="80"/>
    </slice>
    <from sec="1134363732" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
4436[label="67.232.78.47;296pkt 296fpkt", shape=pentagon, color=darkviolet];
7627[label="67.232.78.47;296pkt 296fpkt", shape=invtriangle, color=brown];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.232.78.47:*, *:139}[85.8108%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (42.9054%)&lt;BR/&gt; 445: (7.09459%)&lt;BR/&gt; 4505: (0.168919%)&lt;BR/&gt; 4496: (0.168919%)&lt;BR/&gt; 4490: (0.168919%)&gt;];
}
4436--7627[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="67.232.78.47"/>
    </slice>
    <from sec="1134364413" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.220.107.48"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
4458[label="166.115.203.48;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7642[label="166.115.203.48;13pkt 13fpkt", shape=invtriangle, color=brown];
9812[label="166.115.203.48;13pkt 13fpkt", shape=invhouse, color=bisque];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.203.48:*, 2.9.158.84:443}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 51184: (3.84615%)&lt;BR/&gt; 51183: (3.84615%)&lt;BR/&gt; 51182: (3.84615%)&lt;BR/&gt; 51181: (3.84615%)&gt;];
}
4458--7642[label="1;13pkt 13fpkt"];
4458--9812[label="1;13pkt 13fpkt"];
7642--9812[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="2.9.158.84" dst_port="443" src_ip="166.115.203.48"/>
    </slice>
    <from sec="1134364291" usec="0"/>
    <to sec="1134364475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
4469[label="5.74.141.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7652[label="5.74.141.49;1pkt 1fpkt", shape=invtriangle, color=brown];
9820[label="5.74.141.49;1pkt 1fpkt", shape=invhouse, color=bisque];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.74.141.49:80, 196.129.156.216:54100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54100: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4469--7652[label="1;1pkt 1fpkt"];
4469--9820[label="1;1pkt 1fpkt"];
7652--9820[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" dst_port="54100" src_ip="5.74.141.49" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
4470[label="163.185.150.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7653[label="163.185.150.49;2pkt 2fpkt", shape=invtriangle, color=brown];
9821[label="163.185.150.49;1pkt 1fpkt", shape=invhouse, color=bisque];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.150.49:8864, 192.168.11.2:8864}[50%]&lt;BR/&gt;{163.185.150.49:8864, 192.168.0.3:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (100%)&gt;];
}
4470--7653[label="1;2pkt 2fpkt"];
4470--9821[label="1;1pkt 1fpkt"];
7653--9821[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.3" dst_port="8864" src_ip="163.185.150.49" src_port="8864"/>
      <filter dst_ip="192.168.11.2" dst_port="8864" src_ip="163.185.150.49" src_port="8864"/>
    </slice>
    <from sec="1134364325" usec="0"/>
    <to sec="1134364335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
4473[label="221.192.180.49;134pkt 134fpkt", shape=pentagon, color=darkviolet];
7655[label="221.192.180.49;135pkt 135fpkt", shape=invtriangle, color=brown];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.192.180.49:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63532: (1.85874%)&lt;BR/&gt; 63469: (1.85874%)&lt;BR/&gt; 64370: (1.48699%)&lt;BR/&gt; 64292: (1.48699%)&gt;];
}
4473--7655[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.192.180.49"/>
    </slice>
    <from sec="1134364018" usec="0"/>
    <to sec="1134364040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.210.3.50"/>
    </slice>
    <from sec="1134363630" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.5.40.50"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
4495[label="1.249.24.51;493pkt 493fpkt", shape=pentagon, color=darkviolet];
7670[label="1.249.24.51;493pkt 493fpkt", shape=invtriangle, color=brown];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.249.24.51:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4495--7670[label="1;493pkt 493fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.249.24.51" src_port="1026"/>
    </slice>
    <from sec="1134363720" usec="0"/>
    <to sec="1134363806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.154.167.51"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
4507[label="163.180.83.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7675[label="163.180.83.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.83.52:1949, 17.101.254.175:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1949: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4507--7675[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.101.254.175" dst_port="80" src_ip="163.180.83.52" src_port="1949"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
4511[label="67.215.142.52;182pkt 182fpkt", shape=pentagon, color=darkviolet];
7679[label="67.215.142.52;182pkt 182fpkt", shape=invtriangle, color=brown];
9836[label="67.215.142.52;183pkt 183fpkt", shape=invhouse, color=bisque];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.215.142.52:*, *:1026}[54.6448%]&lt;BR/&gt;{67.215.142.52:*, *:1027}[45.3552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (27.4223%)&lt;BR/&gt; 1027: (22.5777%)&lt;BR/&gt; 35772: (1.09689%)&lt;BR/&gt; 35922: (0.822669%)&lt;BR/&gt; 35858: (0.822669%)&gt;];
}
4511--7679[label="1;182pkt 182fpkt"];
4511--9836[label="1;182pkt 182fpkt"];
7679--9836[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="67.215.142.52"/>
      <filter dst_port="1027" src_ip="67.215.142.52"/>
    </slice>
    <from sec="1134364257" usec="0"/>
    <to sec="1134364258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
4519[label="166.115.226.52;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7684[label="166.115.226.52;5pkt 5fpkt", shape=invtriangle, color=brown];
9839[label="166.115.226.52;5pkt 5fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.226.52:2182, 166.112.134.132:443}[20%]&lt;BR/&gt;{166.115.226.52:2193, 166.112.134.135:443}[20%]&lt;BR/&gt;{166.115.226.52:2140, 166.112.134.148:443}[20%]&lt;BR/&gt;{166.115.226.52:2190, 166.112.134.134:443}[20%]&lt;BR/&gt;{166.115.226.52:2194, 166.112.134.134:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2194: (10%)&lt;BR/&gt; 2193: (10%)&lt;BR/&gt; 2190: (10%)&lt;BR/&gt; 2182: (10%)&gt;];
}
4519--7684[label="1;5pkt 5fpkt"];
4519--9839[label="1;5pkt 5fpkt"];
7684--9839[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="166.112.134.134" dst_port="443" src_ip="166.115.226.52" src_port="2194"/>
      <filter dst_ip="166.112.134.134" dst_port="443" src_ip="166.115.226.52" src_port="2190"/>
      <filter dst_ip="166.112.134.148" dst_port="443" src_ip="166.115.226.52" src_port="2140"/>
      <filter dst_ip="166.112.134.135" dst_port="443" src_ip="166.115.226.52" src_port="2193"/>
      <filter dst_ip="166.112.134.132" dst_port="443" src_ip="166.115.226.52" src_port="2182"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
4520[label="131.68.8.53;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7685[label="131.68.8.53;10pkt 10fpkt", shape=invtriangle, color=brown];
9840[label="131.68.8.53;10pkt 10fpkt", shape=invhouse, color=bisque];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.8.53:*, *:80}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.0323%)&lt;BR/&gt; 7001: (9.67742%)&lt;BR/&gt; 1863: (6.45161%)&lt;BR/&gt; 1105: (4.83871%)&lt;BR/&gt; 1101: (4.83871%)&gt;];
}
4520--7685[label="1;10pkt 10fpkt"];
4520--9840[label="1;10pkt 10fpkt"];
7685--9840[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="131.68.8.53"/>
    </slice>
    <from sec="1134364447" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.93.233.53"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.202.85.54"/>
    </slice>
    <from sec="1134363633" usec="0"/>
    <to sec="1134364391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.159.6.55"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.101.28.55"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.62.96.55"/>
    </slice>
    <from sec="1134364284" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
552[label="197.99.220.55;s;40pkt 40fpkt", shape=diamond, color=yellow];
726[label="196.112.18.23;d;2pkt 2fpkt", shape=diamond, color=yellow];
2102[label="222.236.166.17;d;14pkt 14fpkt", shape=diamond, color=yellow];
4563[label="197.99.220.55;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7715[label="197.99.220.55;1pkt 1fpkt", shape=invtriangle, color=brown];
9859[label="197.99.220.55;1pkt 1fpkt", shape=invhouse, color=bisque];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.220.55:21, 222.236.166.17:*}[48.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (35%)&lt;BR/&gt; 80: (6.66667%)&lt;BR/&gt; 1928: (2.5%)&lt;BR/&gt; 1403: (2.5%)&lt;BR/&gt; 55973: (1.66667%)&gt;];
}
552--726[label="1;2pkt 2fpkt"];
552--2102[label="1;14pkt 14fpkt"];
552--3481[label="0.025;1pkt 1fpkt"];
552--3504[label="0.025;1pkt 1fpkt"];
552--3565[label="0.025;1pkt 1fpkt"];
552--3585[label="0.025;1pkt 1fpkt"];
552--3643[label="0.025;1pkt 1fpkt"];
552--3661[label="0.025;1pkt 1fpkt"];
552--4563[label="0.5;1pkt 1fpkt"];
2102--4563[label="0.5;1pkt 1fpkt"];
4563--7715[label="1;1pkt 1fpkt"];
4563--9859[label="1;1pkt 1fpkt"];
7715--9859[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.236.166.17" src_ip="197.99.220.55" src_port="21"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.244.72.56"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
4571[label="197.177.76.56;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7722[label="197.177.76.56;8pkt 8fpkt", shape=invtriangle, color=brown];
9864[label="197.177.76.56;7pkt 7fpkt", shape=invhouse, color=bisque];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.177.76.56:80, 151.251.146.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1788: (6.52174%)&lt;BR/&gt; 1787: (6.52174%)&lt;BR/&gt; 1786: (6.52174%)&lt;BR/&gt; 1785: (6.52174%)&gt;];
}
4571--7722[label="1;8pkt 8fpkt"];
4571--9864[label="1;7pkt 7fpkt"];
7722--9864[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.146.43" src_ip="197.177.76.56" src_port="80"/>
    </slice>
    <from sec="1134363663" usec="0"/>
    <to sec="1134363687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
4579[label="133.158.8.57;33pkt 33fpkt", shape=pentagon, color=darkviolet];
7727[label="133.158.8.57;34pkt 34fpkt", shape=invtriangle, color=brown];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.8.57:*, 215.14.110.78:80}[58.8235%]&lt;BR/&gt;{133.158.8.57:*, 215.14.108.22:80}[32.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2377: (1.49254%)&lt;BR/&gt; 2376: (1.49254%)&lt;BR/&gt; 2375: (1.49254%)&lt;BR/&gt; 2374: (1.49254%)&gt;];
}
4579--7727[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.110.78" dst_port="80" src_ip="133.158.8.57"/>
      <filter dst_ip="215.14.108.22" dst_port="80" src_ip="133.158.8.57"/>
    </slice>
    <from sec="1134364455" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
4581[label="208.202.90.57;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7728[label="208.202.90.57;30pkt 30fpkt", shape=invtriangle, color=brown];
9866[label="208.202.90.57;30pkt 30fpkt", shape=invhouse, color=bisque];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.202.90.57:80, 131.156.26.217:*}[53.3333%]&lt;BR/&gt;{208.202.90.57:80, 196.129.156.217:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65226: (1.66667%)&lt;BR/&gt; 65178: (1.66667%)&lt;BR/&gt; 65009: (1.66667%)&lt;BR/&gt; 64875: (1.66667%)&gt;];
}
4581--7728[label="1;30pkt 30fpkt"];
4581--9866[label="1;30pkt 30fpkt"];
7728--9866[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="131.156.26.217" src_ip="208.202.90.57" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="208.202.90.57" src_port="80"/>
    </slice>
    <from sec="1134363666" usec="0"/>
    <to sec="1134364416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.155.161.58"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.64.179.59"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
4625[label="200.112.23.60;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7758[label="200.112.23.60;8pkt 8fpkt", shape=invtriangle, color=brown];
9885[label="200.112.23.60;8pkt 8fpkt", shape=invhouse, color=bisque];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.112.23.60:80, 151.251.227.10:*}[50%]&lt;BR/&gt;{200.112.23.60:443, 151.251.227.10:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 3945: (6.25%)&lt;BR/&gt; 3944: (6.25%)&lt;BR/&gt; 3941: (6.25%)&gt;];
}
4625--7758[label="1;8pkt 8fpkt"];
4625--9885[label="1;8pkt 8fpkt"];
7758--9885[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.227.10" src_ip="200.112.23.60" src_port="443"/>
      <filter dst_ip="151.251.227.10" src_ip="200.112.23.60" src_port="80"/>
    </slice>
    <from sec="1134363892" usec="0"/>
    <to sec="1134364476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.109.129.60"/>
    </slice>
    <from sec="1134363616" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
4632[label="0.22.170.60;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7762[label="0.22.170.60;35pkt 35fpkt", shape=invtriangle, color=brown];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.22.170.60:80, 196.129.156.135:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37097: (1.42857%)&lt;BR/&gt; 37077: (1.42857%)&lt;BR/&gt; 36982: (1.42857%)&lt;BR/&gt; 36925: (1.42857%)&gt;];
}
4632--7762[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.135" src_ip="0.22.170.60" src_port="80"/>
    </slice>
    <from sec="1134364329" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
4634[label="197.99.220.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7763[label="197.99.220.60;1pkt 1fpkt", shape=invtriangle, color=brown];
9888[label="197.99.220.60;1pkt 1fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.220.60:13929, 209.244.226.165:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13929: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4634--7763[label="1;1pkt 1fpkt"];
4634--9888[label="1;1pkt 1fpkt"];
7763--9888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.244.226.165" dst_port="25" src_ip="197.99.220.60" src_port="13929"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
1540[label="151.251.108.161;d;24pkt 24fpkt", shape=diamond, color=yellow];
2254[label="67.94.98.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
4644[label="215.108.33.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6363[label="221.232.9.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7769[label="215.108.33.62;2pkt 2fpkt", shape=invtriangle, color=brown];
9892[label="215.108.33.62;1pkt 1fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.251.108.161:12126}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12126: (43.5484%)&lt;BR/&gt; 31066: (6.45161%)&lt;BR/&gt; 53207: (3.22581%)&lt;BR/&gt; 47309: (3.22581%)&lt;BR/&gt; 13436: (3.22581%)&gt;];
}
1540--2254[label="1;2pkt 2fpkt"];
1540--4119[label="0.0833333;2pkt 2fpkt"];
1540--4153[label="0.125;3pkt 3fpkt"];
1540--4425[label="0.0833333;2pkt 2fpkt"];
1540--4644[label="1;1pkt 1fpkt"];
1540--6363[label="1;1pkt 1fpkt"];
1540--7769[label="1;2pkt 2fpkt"];
1540--9892[label="1;1pkt 1fpkt"];
4644--7769[label="1;1pkt 1fpkt"];
4644--9892[label="1;1pkt 1fpkt"];
7769--9892[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.108.161" dst_port="12126"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
4656[label="5.189.21.63;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7776[label="5.189.21.63;3pkt 3fpkt", shape=invtriangle, color=brown];
9896[label="5.189.21.63;3pkt 3fpkt", shape=invhouse, color=bisque];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.189.21.63:3662, 163.180.242.162:3128}[33.3333%]&lt;BR/&gt;{5.189.21.63:3668, 163.180.242.168:3124}[33.3333%]&lt;BR/&gt;{5.189.21.63:3669, 163.180.242.169:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (33.3333%)&lt;BR/&gt; 3669: (16.6667%)&lt;BR/&gt; 3668: (16.6667%)&lt;BR/&gt; 3662: (16.6667%)&lt;BR/&gt; 3124: (16.6667%)&gt;];
}
4656--7776[label="1;3pkt 3fpkt"];
4656--9896[label="1;3pkt 3fpkt"];
7776--9896[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.242.169" dst_port="3128" src_ip="5.189.21.63" src_port="3669"/>
      <filter dst_ip="163.180.242.168" dst_port="3124" src_ip="5.189.21.63" src_port="3668"/>
      <filter dst_ip="163.180.242.162" dst_port="3128" src_ip="5.189.21.63" src_port="3662"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.97.54.63"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
4659[label="133.158.180.63;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7779[label="133.158.180.63;2pkt 2fpkt", shape=invtriangle, color=brown];
9899[label="133.158.180.63;3pkt 3fpkt", shape=invhouse, color=bisque];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.180.63:4832, 192.106.4.99:80}[33.3333%]&lt;BR/&gt;{133.158.180.63:4837, 3.48.65.138:80}[33.3333%]&lt;BR/&gt;{133.158.180.63:4838, 3.48.65.138:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4838: (21.4286%)&lt;BR/&gt; 4837: (21.4286%)&lt;BR/&gt; 4832: (7.14286%)&gt;];
}
4659--7779[label="1;2pkt 2fpkt"];
4659--9899[label="1;2pkt 2fpkt"];
7779--9899[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="3.48.65.138" dst_port="80" src_ip="133.158.180.63" src_port="4838"/>
      <filter dst_ip="3.48.65.138" dst_port="80" src_ip="133.158.180.63" src_port="4837"/>
      <filter dst_ip="192.106.4.99" dst_port="80" src_ip="133.158.180.63" src_port="4832"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
4669[label="163.180.120.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7786[label="163.180.120.64;3pkt 3fpkt", shape=invtriangle, color=brown];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.120.64:4048, 87.176.108.9:80}[33.3333%]&lt;BR/&gt;{163.180.120.64:4076, 87.176.108.9:80}[33.3333%]&lt;BR/&gt;{163.180.120.64:4085, 87.176.108.9:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4085: (16.6667%)&lt;BR/&gt; 4076: (16.6667%)&lt;BR/&gt; 4048: (16.6667%)&gt;];
}
4669--7786[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="87.176.108.9" dst_port="80" src_ip="163.180.120.64" src_port="4085"/>
      <filter dst_ip="87.176.108.9" dst_port="80" src_ip="163.180.120.64" src_port="4076"/>
      <filter dst_ip="87.176.108.9" dst_port="80" src_ip="163.180.120.64" src_port="4048"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.115.170.64"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
4683[label="131.68.50.65;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7795[label="131.68.50.65;3pkt 3fpkt", shape=invtriangle, color=brown];
9908[label="131.68.50.65;3pkt 3fpkt", shape=invhouse, color=bisque];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.50.65:34574, 87.176.195.131:80}[33.3333%]&lt;BR/&gt;{131.68.50.65:34570, 87.172.184.18:80}[33.3333%]&lt;BR/&gt;{131.68.50.65:34575, 87.172.184.18:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34575: (16.6667%)&lt;BR/&gt; 34574: (16.6667%)&lt;BR/&gt; 34570: (16.6667%)&gt;];
}
4683--7795[label="1;3pkt 3fpkt"];
4683--9908[label="1;3pkt 3fpkt"];
7795--9908[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="87.172.184.18" dst_port="80" src_ip="131.68.50.65" src_port="34575"/>
      <filter dst_ip="87.172.184.18" dst_port="80" src_ip="131.68.50.65" src_port="34570"/>
      <filter dst_ip="87.176.195.131" dst_port="80" src_ip="131.68.50.65" src_port="34574"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
538[label="133.158.209.84;s;75pkt 75fpkt", shape=diamond, color=yellow];
703[label="218.82.39.31;d;132pkt 132fpkt", shape=diamond, color=yellow];
787[label="204.178.249.197;d;394pkt 394fpkt", shape=diamond, color=yellow];
802[label="218.209.87.145;d;411pkt 411fpkt", shape=diamond, color=yellow];
899[label="3.218.44.56;d;27pkt 27fpkt", shape=diamond, color=yellow];
983[label="133.158.18.129;s;9pkt 9fpkt", shape=diamond, color=yellow];
1125[label="218.209.87.153;d;316pkt 316fpkt", shape=diamond, color=yellow];
1266[label="133.158.40.68;s;47pkt 47fpkt", shape=diamond, color=yellow];
1295[label="163.180.68.65;s;39pkt 39fpkt", shape=diamond, color=yellow];
1328[label="2.239.124.163;d;92pkt 92fpkt", shape=diamond, color=yellow];
1394[label="133.158.50.7;s;78pkt 78fpkt", shape=diamond, color=yellow];
1871[label="133.158.121.192;s;80pkt 80fpkt", shape=diamond, color=yellow];
2084[label="131.68.12.176;s;175pkt 175fpkt", shape=diamond, color=yellow];
2735[label="131.68.12.178;s;51pkt 51fpkt", shape=diamond, color=yellow];
3786[label="131.68.9.4;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3841[label="133.158.50.7;90pkt 90fpkt", shape=pentagon, color=darkviolet];
3876[label="163.180.83.9;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4140[label="133.158.216.25;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4409[label="131.68.11.45;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4518[label="133.158.209.52;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4684[label="163.180.68.65;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4735[label="133.158.40.68;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4767[label="163.180.88.70;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4970[label="133.158.209.84;75pkt 75fpkt", shape=pentagon, color=darkviolet];
5067[label="131.68.11.91;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5070[label="133.158.40.91;99pkt 99fpkt", shape=pentagon, color=darkviolet];
5093[label="131.68.14.93;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5160[label="196.139.224.97;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5585[label="133.158.18.129;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5901[label="133.158.141.150;67pkt 67fpkt", shape=pentagon, color=darkviolet];
6223[label="131.68.12.176;177pkt 177fpkt", shape=pentagon, color=darkviolet];
6255[label="131.68.12.178;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6382[label="163.180.24.189;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6410[label="133.158.121.192;80pkt 80fpkt", shape=pentagon, color=darkviolet];
6416[label="163.180.157.192;49pkt 49fpkt", shape=pentagon, color=darkviolet];
6460[label="133.158.56.196;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6554[label="163.180.86.204;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7230[label="133.158.50.7;90pkt 90fpkt", shape=invtriangle, color=brown];
7260[label="163.180.83.9;75pkt 75fpkt", shape=invtriangle, color=brown];
7425[label="133.158.216.25;40pkt 40fpkt", shape=invtriangle, color=brown];
7612[label="131.68.11.45;29pkt 29fpkt", shape=invtriangle, color=brown];
7683[label="133.158.209.52;19pkt 19fpkt", shape=invtriangle, color=brown];
7796[label="163.180.68.65;50pkt 50fpkt", shape=invtriangle, color=brown];
7852[label="163.180.88.70;12pkt 12fpkt", shape=invtriangle, color=brown];
8061[label="133.158.40.91;99pkt 99fpkt", shape=invtriangle, color=brown];
8075[label="131.68.14.93;15pkt 15fpkt", shape=invtriangle, color=brown];
8122[label="196.139.224.97;38pkt 38fpkt", shape=invtriangle, color=brown];
8403[label="133.158.18.129;8pkt 8fpkt", shape=invtriangle, color=brown];
8822[label="131.68.12.176;177pkt 177fpkt", shape=invtriangle, color=brown];
8844[label="131.68.12.178;51pkt 51fpkt", shape=invtriangle, color=brown];
8956[label="133.158.121.192;80pkt 80fpkt", shape=invtriangle, color=brown];
8960[label="163.180.157.192;48pkt 48fpkt", shape=invtriangle, color=brown];
8992[label="133.158.56.196;30pkt 30fpkt", shape=invtriangle, color=brown];
9547[label="133.158.50.7;90pkt 90fpkt", shape=invhouse, color=bisque];
9571[label="163.180.83.9;75pkt 75fpkt", shape=invhouse, color=bisque];
9838[label="133.158.209.52;20pkt 20fpkt", shape=invhouse, color=bisque];
9909[label="163.180.68.65;49pkt 49fpkt", shape=invhouse, color=bisque];
9943[label="163.180.88.70;13pkt 13fpkt", shape=invhouse, color=bisque];
10085[label="131.68.14.93;14pkt 14fpkt", shape=invhouse, color=bisque];
10114[label="196.139.224.97;39pkt 39fpkt", shape=invhouse, color=bisque];
10588[label="131.68.12.176;176pkt 176fpkt", shape=invhouse, color=bisque];
10698[label="133.158.56.196;30pkt 30fpkt", shape=invhouse, color=bisque];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.209.87.145:80}[26.7769%]&lt;BR/&gt;{*:*, 204.178.249.197:80}[23.0303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4096%)&lt;BR/&gt; 443: (1.37338%)&lt;BR/&gt; 1863: (0.424297%)&lt;BR/&gt; 110: (0.256811%)&lt;BR/&gt; 4402: (0.200983%)&gt;];
}
538--787[label="0.626667;47pkt 47fpkt"];
538--899[label="0.888889;24pkt 24fpkt"];
538--3505[label="0.146667;11pkt 11fpkt"];
538--3510[label="0.0266667;2pkt 2fpkt"];
538--3520[label="0.213333;16pkt 16fpkt"];
538--3556[label="0.0133333;1pkt 1fpkt"];
538--3591[label="0.0266667;2pkt 2fpkt"];
538--3600[label="0.213333;16pkt 16fpkt"];
538--3636[label="0.0133333;1pkt 1fpkt"];
538--3648[label="0.0666667;5pkt 5fpkt"];
538--3662[label="0.146667;11pkt 11fpkt"];
538--3668[label="0.213333;16pkt 16fpkt"];
538--3703[label="0.0133333;1pkt 1fpkt"];
538--4970[label="1;75pkt 75fpkt"];
703--1212[label="0.0984848;13pkt 13fpkt"];
703--1295[label="0.358974;14pkt 14fpkt"];
703--3505[label="0.0606061;8pkt 8fpkt"];
703--3510[label="0.0227273;3pkt 3fpkt"];
703--3520[label="0.0378788;5pkt 5fpkt"];
703--3556[label="0.0454545;6pkt 6fpkt"];
703--3591[label="0.0227273;3pkt 3fpkt"];
703--3600[label="0.0378788;5pkt 5fpkt"];
703--3636[label="0.0454545;6pkt 6fpkt"];
703--3648[label="0.416667;55pkt 55fpkt"];
703--3662[label="0.0606061;8pkt 8fpkt"];
703--3668[label="0.0378788;5pkt 5fpkt"];
703--3703[label="0.0454545;6pkt 6fpkt"];
703--3876[label="0.946667;71pkt 71fpkt"];
703--4684[label="0.28;14pkt 14fpkt"];
703--6554[label="0.375;3pkt 3fpkt"];
703--6639[label="0.0984848;13pkt 13fpkt"];
703--6938[label="0.0227273;3pkt 3fpkt"];
703--7260[label="0.946667;71pkt 71fpkt"];
703--7796[label="0.28;14pkt 14fpkt"];
703--9108[label="0.0984848;13pkt 13fpkt"];
703--9334[label="0.0227273;3pkt 3fpkt"];
703--9571[label="0.946667;71pkt 71fpkt"];
703--9909[label="0.285714;14pkt 14fpkt"];
703--10774[label="0.0984848;13pkt 13fpkt"];
787--983[label="0.444444;4pkt 4fpkt"];
787--1212[label="0.0860927;13pkt 13fpkt"];
787--1266[label="0.446809;21pkt 21fpkt"];
787--1295[label="0.615385;24pkt 24fpkt"];
787--1394[label="0.282051;22pkt 22fpkt"];
787--1871[label="0.5875;47pkt 47fpkt"];
787--3505[label="0.0659898;26pkt 26fpkt"];
787--3510[label="0.162437;64pkt 64fpkt"];
787--3520[label="0.121827;48pkt 48fpkt"];
787--3556[label="0.00761421;3pkt 3fpkt"];
787--3591[label="0.162437;64pkt 64fpkt"];
787--3600[label="0.121827;48pkt 48fpkt"];
787--3636[label="0.00761421;3pkt 3fpkt"];
787--3648[label="0.0152284;6pkt 6fpkt"];
787--3662[label="0.0659898;26pkt 26fpkt"];
787--3668[label="0.121827;48pkt 48fpkt"];
787--3703[label="0.00761421;3pkt 3fpkt"];
787--3841[label="0.244444;22pkt 22fpkt"];
787--4684[label="0.7;35pkt 35fpkt"];
787--4735[label="0.362069;21pkt 21fpkt"];
787--4767[label="0.538462;7pkt 7fpkt"];
787--4921[label="0.75;18pkt 18fpkt"];
787--4970[label="0.626667;47pkt 47fpkt"];
787--5570[label="0.590909;13pkt 13fpkt"];
787--5585[label="0.5;4pkt 4fpkt"];
787--5901[label="0.477612;32pkt 32fpkt"];
787--6410[label="0.5875;47pkt 47fpkt"];
787--6416[label="0.0204082;1pkt 1fpkt"];
787--6639[label="0.0751445;13pkt 13fpkt"];
787--6938[label="0.164975;65pkt 65fpkt"];
787--7230[label="0.244444;22pkt 22fpkt"];
787--7796[label="0.7;35pkt 35fpkt"];
787--7852[label="0.583333;7pkt 7fpkt"];
787--7956[label="0.75;18pkt 18fpkt"];
787--8392[label="0.590909;13pkt 13fpkt"];
787--8403[label="0.5;4pkt 4fpkt"];
787--8956[label="0.5875;47pkt 47fpkt"];
787--8960[label="0.0208333;1pkt 1fpkt"];
787--9108[label="0.0751445;13pkt 13fpkt"];
787--9334[label="0.164975;65pkt 65fpkt"];
787--9547[label="0.244444;22pkt 22fpkt"];
787--9909[label="0.714286;35pkt 35fpkt"];
787--9943[label="0.538462;7pkt 7fpkt"];
787--10009[label="0.75;18pkt 18fpkt"];
787--10774[label="0.0755814;13pkt 13fpkt"];
802--992[label="0.00973236;4pkt 4fpkt"];
802--1266[label="0.297872;14pkt 14fpkt"];
802--1712[label="0.0132159;3pkt 3fpkt"];
802--2084[label="0.0628571;11pkt 11fpkt"];
802--2735[label="0.372549;19pkt 19fpkt"];
802--3505[label="0.0754258;31pkt 31fpkt"];
802--3510[label="0.0340633;14pkt 14fpkt"];
802--3520[label="0.0389294;16pkt 16fpkt"];
802--3556[label="0.0389294;16pkt 16fpkt"];
802--3591[label="0.0340633;14pkt 14fpkt"];
802--3600[label="0.0389294;16pkt 16fpkt"];
802--3636[label="0.0389294;16pkt 16fpkt"];
802--3648[label="0.0705596;29pkt 29fpkt"];
802--3662[label="0.0754258;31pkt 31fpkt"];
802--3668[label="0.0389294;16pkt 16fpkt"];
802--3703[label="0.0389294;16pkt 16fpkt"];
802--3786[label="0.388889;14pkt 14fpkt"];
802--4140[label="0.4;16pkt 16fpkt"];
802--4409[label="0.413793;12pkt 12fpkt"];
802--4518[label="0.6;12pkt 12fpkt"];
802--4663[label="0.00973236;4pkt 4fpkt"];
802--4735[label="0.241379;14pkt 14fpkt"];
802--4805[label="0.0145985;6pkt 6fpkt"];
802--4984[label="0.0194647;8pkt 8fpkt"];
802--5067[label="0.470588;24pkt 24fpkt"];
802--5070[label="0.242424;24pkt 24fpkt"];
802--5093[label="0.4;6pkt 6fpkt"];
802--5160[label="0.358974;14pkt 14fpkt"];
802--5688[label="0.0437956;18pkt 18fpkt"];
802--6223[label="0.0621469;11pkt 11fpkt"];
802--6255[label="0.372549;19pkt 19fpkt"];
802--6411[label="0.00486618;2pkt 2fpkt"];
802--6416[label="0.285714;14pkt 14fpkt"];
802--6460[label="0.333333;10pkt 10fpkt"];
802--6938[label="0.0608273;25pkt 25fpkt"];
802--7050[label="0.25;12pkt 12fpkt"];
802--7425[label="0.4;16pkt 16fpkt"];
802--7612[label="0.413793;12pkt 12fpkt"];
802--7683[label="0.631579;12pkt 12fpkt"];
802--7782[label="0.00973236;4pkt 4fpkt"];
802--7880[label="0.0145985;6pkt 6fpkt"];
802--8000[label="0.0194647;8pkt 8fpkt"];
802--8061[label="0.242424;24pkt 24fpkt"];
802--8075[label="0.4;6pkt 6fpkt"];
802--8122[label="0.368421;14pkt 14fpkt"];
802--8822[label="0.0621469;11pkt 11fpkt"];
802--8844[label="0.372549;19pkt 19fpkt"];
802--8957[label="0.00486618;2pkt 2fpkt"];
802--8960[label="0.291667;14pkt 14fpkt"];
802--8992[label="0.333333;10pkt 10fpkt"];
802--9334[label="0.0608273;25pkt 25fpkt"];
802--9838[label="0.6;12pkt 12fpkt"];
802--9901[label="0.00973236;4pkt 4fpkt"];
802--9964[label="0.0145985;6pkt 6fpkt"];
802--10085[label="0.428571;6pkt 6fpkt"];
802--10114[label="0.358974;14pkt 14fpkt"];
802--10588[label="0.0625;11pkt 11fpkt"];
802--10698[label="0.333333;10pkt 10fpkt"];
899--1981[label="0.037037;1pkt 1fpkt"];
899--3505[label="0.037037;1pkt 1fpkt"];
899--3648[label="0.185185;5pkt 5fpkt"];
899--3662[label="0.037037;1pkt 1fpkt"];
899--4970[label="0.888889;24pkt 24fpkt"];
899--5854[label="0.037037;1pkt 1fpkt"];
899--6579[label="0.0909091;2pkt 2fpkt"];
899--8575[label="0.037037;1pkt 1fpkt"];
899--9066[label="0.047619;1pkt 1fpkt"];
899--10409[label="0.037037;1pkt 1fpkt"];
899--10744[label="0.047619;1pkt 1fpkt"];
983--3513[label="0.111111;1pkt 1fpkt"];
983--5585[label="1;8pkt 8fpkt"];
983--8403[label="1;8pkt 8fpkt"];
1125--1266[label="0.170213;8pkt 8fpkt"];
1125--2084[label="0.0342857;6pkt 6fpkt"];
1125--2735[label="0.235294;12pkt 12fpkt"];
1125--2803[label="0.125;2pkt 2fpkt"];
1125--3505[label="0.0537975;17pkt 17fpkt"];
1125--3510[label="0.0632911;20pkt 20fpkt"];
1125--3520[label="0.0443038;14pkt 14fpkt"];
1125--3556[label="0.0189873;6pkt 6fpkt"];
1125--3591[label="0.0632911;20pkt 20fpkt"];
1125--3600[label="0.0443038;14pkt 14fpkt"];
1125--3636[label="0.0189873;6pkt 6fpkt"];
1125--3648[label="0.0379747;12pkt 12fpkt"];
1125--3662[label="0.0537975;17pkt 17fpkt"];
1125--3668[label="0.0443038;14pkt 14fpkt"];
1125--3703[label="0.0189873;6pkt 6fpkt"];
1125--3786[label="0.222222;8pkt 8fpkt"];
1125--4140[label="0.375;15pkt 15fpkt"];
1125--4409[label="0.37931;11pkt 11fpkt"];
1125--4663[label="0.0411392;13pkt 13fpkt"];
1125--4735[label="0.206897;12pkt 12fpkt"];
1125--5067[label="0.27451;14pkt 14fpkt"];
1125--5070[label="0.151515;15pkt 15fpkt"];
1125--5093[label="0.266667;4pkt 4fpkt"];
1125--5160[label="0.307692;12pkt 12fpkt"];
1125--6223[label="0.0338983;6pkt 6fpkt"];
1125--6255[label="0.235294;12pkt 12fpkt"];
1125--6382[label="0.28;7pkt 7fpkt"];
1125--6416[label="0.244898;12pkt 12fpkt"];
1125--6460[label="0.166667;5pkt 5fpkt"];
1125--6938[label="0.0727848;23pkt 23fpkt"];
1125--7050[label="0.166667;8pkt 8fpkt"];
1125--7425[label="0.375;15pkt 15fpkt"];
1125--7612[label="0.37931;11pkt 11fpkt"];
1125--7782[label="0.0411392;13pkt 13fpkt"];
1125--8061[label="0.151515;15pkt 15fpkt"];
1125--8075[label="0.266667;4pkt 4fpkt"];
1125--8122[label="0.315789;12pkt 12fpkt"];
1125--8822[label="0.0338983;6pkt 6fpkt"];
1125--8844[label="0.235294;12pkt 12fpkt"];
1125--8960[label="0.25;12pkt 12fpkt"];
1125--8992[label="0.166667;5pkt 5fpkt"];
1125--9334[label="0.0727848;23pkt 23fpkt"];
1125--9901[label="0.0411392;13pkt 13fpkt"];
1125--10085[label="0.285714;4pkt 4fpkt"];
1125--10114[label="0.307692;12pkt 12fpkt"];
1125--10588[label="0.0340909;6pkt 6fpkt"];
1125--10698[label="0.166667;5pkt 5fpkt"];
1266--1819[label="0.0869565;2pkt 2fpkt"];
1266--3488[label="0.0425532;2pkt 2fpkt"];
1266--3505[label="0.106383;5pkt 5fpkt"];
1266--3510[label="0.106383;5pkt 5fpkt"];
1266--3517[label="0.0425532;2pkt 2fpkt"];
1266--3522[label="0.0425532;2pkt 2fpkt"];
1266--3536[label="0.0425532;2pkt 2fpkt"];
1266--3573[label="0.0425532;2pkt 2fpkt"];
1266--3591[label="0.106383;5pkt 5fpkt"];
1266--3597[label="0.0425532;2pkt 2fpkt"];
1266--3602[label="0.0425532;2pkt 2fpkt"];
1266--3616[label="0.0425532;2pkt 2fpkt"];
1266--3654[label="0.0425532;2pkt 2fpkt"];
1266--3662[label="0.106383;5pkt 5fpkt"];
1266--3684[label="0.0425532;2pkt 2fpkt"];
1266--4735[label="1;47pkt 47fpkt"];
1295--3505[label="0.333333;13pkt 13fpkt"];
1295--3648[label="0.025641;1pkt 1fpkt"];
1295--3662[label="0.333333;13pkt 13fpkt"];
1295--4684[label="1;39pkt 39fpkt"];
1295--7796[label="1;39pkt 39fpkt"];
1295--9909[label="0.974359;38pkt 38fpkt"];
1328--2084[label="1;92pkt 92fpkt"];
1328--3505[label="0.456522;42pkt 42fpkt"];
1328--3510[label="0.0652174;6pkt 6fpkt"];
1328--3520[label="0.0217391;2pkt 2fpkt"];
1328--3591[label="0.0652174;6pkt 6fpkt"];
1328--3600[label="0.0217391;2pkt 2fpkt"];
1328--3662[label="0.456522;42pkt 42fpkt"];
1328--3668[label="0.0217391;2pkt 2fpkt"];
1328--6223[label="1;92pkt 92fpkt"];
1328--8822[label="1;92pkt 92fpkt"];
1328--10588[label="1;92pkt 92fpkt"];
1394--2491[label="0.08;6pkt 6fpkt"];
1394--2623[label="0.0128205;1pkt 1fpkt"];
1394--3365[label="0.0128205;1pkt 1fpkt"];
1394--3488[label="0.025641;2pkt 2fpkt"];
1394--3505[label="0.025641;2pkt 2fpkt"];
1394--3510[label="0.0384615;3pkt 3fpkt"];
1394--3517[label="0.025641;2pkt 2fpkt"];
1394--3520[label="0.0128205;1pkt 1fpkt"];
1394--3522[label="0.025641;2pkt 2fpkt"];
1394--3536[label="0.025641;2pkt 2fpkt"];
1394--3556[label="0.0128205;1pkt 1fpkt"];
1394--3573[label="0.025641;2pkt 2fpkt"];
1394--3591[label="0.0384615;3pkt 3fpkt"];
1394--3597[label="0.025641;2pkt 2fpkt"];
1394--3600[label="0.0128205;1pkt 1fpkt"];
1394--3602[label="0.025641;2pkt 2fpkt"];
1394--3616[label="0.025641;2pkt 2fpkt"];
1394--3636[label="0.0128205;1pkt 1fpkt"];
1394--3648[label="0.025641;2pkt 2fpkt"];
1394--3654[label="0.025641;2pkt 2fpkt"];
1394--3662[label="0.025641;2pkt 2fpkt"];
1394--3668[label="0.0128205;1pkt 1fpkt"];
1394--3684[label="0.025641;2pkt 2fpkt"];
1394--3703[label="0.0128205;1pkt 1fpkt"];
1394--3841[label="1;78pkt 78fpkt"];
1394--7230[label="1;78pkt 78fpkt"];
1394--9547[label="1;78pkt 78fpkt"];
1871--3510[label="0.3125;25pkt 25fpkt"];
1871--3520[label="0.15;12pkt 12fpkt"];
1871--3556[label="0.0625;5pkt 5fpkt"];
1871--3591[label="0.3125;25pkt 25fpkt"];
1871--3600[label="0.15;12pkt 12fpkt"];
1871--3636[label="0.0625;5pkt 5fpkt"];
1871--3648[label="0.025;2pkt 2fpkt"];
1871--3668[label="0.15;12pkt 12fpkt"];
1871--3703[label="0.0625;5pkt 5fpkt"];
1871--6410[label="1;80pkt 80fpkt"];
1871--8956[label="1;80pkt 80fpkt"];
2084--2096[label="0.0416667;1pkt 1fpkt"];
2084--3488[label="0.00571429;1pkt 1fpkt"];
2084--3505[label="0.285714;50pkt 50fpkt"];
2084--3510[label="0.08;14pkt 14fpkt"];
2084--3517[label="0.0114286;2pkt 2fpkt"];
2084--3520[label="0.0571429;10pkt 10fpkt"];
2084--3522[label="0.00571429;1pkt 1fpkt"];
2084--3536[label="0.00571429;1pkt 1fpkt"];
2084--3573[label="0.00571429;1pkt 1fpkt"];
2084--3591[label="0.08;14pkt 14fpkt"];
2084--3597[label="0.0114286;2pkt 2fpkt"];
2084--3600[label="0.0571429;10pkt 10fpkt"];
2084--3602[label="0.00571429;1pkt 1fpkt"];
2084--3616[label="0.00571429;1pkt 1fpkt"];
2084--3648[label="0.182857;32pkt 32fpkt"];
2084--3654[label="0.00571429;1pkt 1fpkt"];
2084--3662[label="0.285714;50pkt 50fpkt"];
2084--3668[label="0.0571429;10pkt 10fpkt"];
2084--3684[label="0.00571429;1pkt 1fpkt"];
2084--6223[label="1;175pkt 175fpkt"];
2084--8822[label="1;175pkt 175fpkt"];
2084--10588[label="0.994286;174pkt 174fpkt"];
2735--3031[label="0.0196078;1pkt 1fpkt"];
2735--3056[label="0.0196078;1pkt 1fpkt"];
2735--3401[label="0.0196078;1pkt 1fpkt"];
2735--3486[label="0.0196078;1pkt 1fpkt"];
2735--3505[label="0.294118;15pkt 15fpkt"];
2735--3510[label="0.0392157;2pkt 2fpkt"];
2735--3520[label="0.0392157;2pkt 2fpkt"];
2735--3571[label="0.0196078;1pkt 1fpkt"];
2735--3591[label="0.0392157;2pkt 2fpkt"];
2735--3600[label="0.0392157;2pkt 2fpkt"];
2735--3648[label="0.156863;8pkt 8fpkt"];
2735--3651[label="0.0196078;1pkt 1fpkt"];
2735--3662[label="0.294118;15pkt 15fpkt"];
2735--3668[label="0.0392157;2pkt 2fpkt"];
2735--6255[label="1;51pkt 51fpkt"];
2735--8844[label="1;51pkt 51fpkt"];
3841--7230[label="1;90pkt 90fpkt"];
3841--9547[label="1;90pkt 90fpkt"];
3876--7260[label="1;75pkt 75fpkt"];
3876--9571[label="1;75pkt 75fpkt"];
4140--7425[label="1;40pkt 40fpkt"];
4409--7612[label="1;29pkt 29fpkt"];
4518--7683[label="1;19pkt 19fpkt"];
4518--9838[label="1;20pkt 20fpkt"];
4684--7796[label="1;50pkt 50fpkt"];
4684--9909[label="1;49pkt 49fpkt"];
4767--7852[label="1;12pkt 12fpkt"];
4767--9943[label="1;13pkt 13fpkt"];
5070--8061[label="1;99pkt 99fpkt"];
5093--8075[label="1;15pkt 15fpkt"];
5093--10085[label="1;14pkt 14fpkt"];
5160--8122[label="1;38pkt 38fpkt"];
5160--10114[label="1;39pkt 39fpkt"];
5585--8403[label="1;8pkt 8fpkt"];
6223--8822[label="1;177pkt 177fpkt"];
6223--10588[label="1;176pkt 176fpkt"];
6255--8844[label="1;51pkt 51fpkt"];
6410--8956[label="1;80pkt 80fpkt"];
6416--8960[label="1;48pkt 48fpkt"];
6460--8992[label="1;30pkt 30fpkt"];
6460--10698[label="1;30pkt 30fpkt"];
7230--9547[label="1;90pkt 90fpkt"];
7260--9571[label="1;75pkt 75fpkt"];
7683--9838[label="1;19pkt 19fpkt"];
7796--9909[label="1;49pkt 49fpkt"];
7852--9943[label="1;12pkt 12fpkt"];
8075--10085[label="1;14pkt 14fpkt"];
8122--10114[label="1;38pkt 38fpkt"];
8822--10588[label="1;176pkt 176fpkt"];
8992--10698[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="218.209.87.145" dst_port="80"/>
      <filter dst_ip="204.178.249.197" dst_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.165.208.65"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
4691[label="166.115.226.65;48pkt 48fpkt", shape=pentagon, color=darkviolet];
7802[label="166.115.226.65;49pkt 49fpkt", shape=invtriangle, color=brown];
9913[label="166.115.226.65;48pkt 48fpkt", shape=invhouse, color=bisque];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.226.65:*, 10.0.1.128:6667}[30.6122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1334: (1.03448%)&lt;BR/&gt; 1333: (1.03448%)&lt;BR/&gt; 1329: (1.03448%)&lt;BR/&gt; 1328: (1.03448%)&gt;];
}
4691--7802[label="1;48pkt 48fpkt"];
4691--9913[label="1;48pkt 48fpkt"];
7802--9913[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.1.128" dst_port="6667" src_ip="166.115.226.65"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
1962[label="197.99.217.66;d;392pkt 392fpkt", shape=diamond, color=yellow];
4191[label="64.229.172.30;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4539[label="3.218.44.54;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4652[label="16.99.184.62;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4698[label="201.205.96.66;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5390[label="16.58.34.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7453[label="64.229.172.30;3pkt 3fpkt", shape=invtriangle, color=brown];
7700[label="3.218.44.54;32pkt 32fpkt", shape=invtriangle, color=brown];
7806[label="201.205.96.66;37pkt 37fpkt", shape=invtriangle, color=brown];
8269[label="16.58.34.113;1pkt 1fpkt", shape=invtriangle, color=brown];
9851[label="3.218.44.54;31pkt 31fpkt", shape=invhouse, color=bisque];
9916[label="201.205.96.66;37pkt 37fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.99.217.66:8431}[49.4033%]&lt;BR/&gt;{*:80, *:*}[25.7757%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.8525%)&lt;BR/&gt; 8431: (16.9672%)&lt;BR/&gt; 0: (3.27869%)&lt;BR/&gt; 7407: (3.03279%)&lt;BR/&gt; 53: (1.80328%)&gt;];
}
1962--3505[label="0.00255102;1pkt 1fpkt"];
1962--3520[label="0.00510204;2pkt 2fpkt"];
1962--3528[label="0.0153061;6pkt 6fpkt"];
1962--3600[label="0.00510204;2pkt 2fpkt"];
1962--3608[label="0.0153061;6pkt 6fpkt"];
1962--3648[label="0.00255102;1pkt 1fpkt"];
1962--3662[label="0.00255102;1pkt 1fpkt"];
1962--3668[label="0.00510204;2pkt 2fpkt"];
1962--3675[label="0.0153061;6pkt 6fpkt"];
1962--3964[label="0.015625;1pkt 1fpkt"];
1962--4191[label="1;3pkt 3fpkt"];
1962--4231[label="0.0277778;1pkt 1fpkt"];
1962--4531[label="0.0163934;1pkt 1fpkt"];
1962--4539[label="0.15625;5pkt 5fpkt"];
1962--4652[label="1;4pkt 4fpkt"];
1962--4698[label="1;37pkt 37fpkt"];
1962--4727[label="0.00255102;1pkt 1fpkt"];
1962--5318[label="0.0454545;1pkt 1fpkt"];
1962--5390[label="1;1pkt 1fpkt"];
1962--6626[label="0.00510204;2pkt 2fpkt"];
1962--7313[label="0.015873;1pkt 1fpkt"];
1962--7453[label="1;3pkt 3fpkt"];
1962--7479[label="0.0277778;1pkt 1fpkt"];
1962--7695[label="0.0166667;1pkt 1fpkt"];
1962--7700[label="0.15625;5pkt 5fpkt"];
1962--7806[label="1;37pkt 37fpkt"];
1962--7821[label="0.00255102;1pkt 1fpkt"];
1962--8269[label="1;1pkt 1fpkt"];
1962--9097[label="0.00510204;2pkt 2fpkt"];
1962--9711[label="0.0277778;1pkt 1fpkt"];
1962--9848[label="0.0166667;1pkt 1fpkt"];
1962--9851[label="0.16129;5pkt 5fpkt"];
1962--9916[label="1;37pkt 37fpkt"];
1962--10766[label="0.00510204;2pkt 2fpkt"];
4191--7453[label="1;3pkt 3fpkt"];
4539--7700[label="1;32pkt 32fpkt"];
4539--9851[label="1;31pkt 31fpkt"];
4698--7806[label="1;37pkt 37fpkt"];
4698--9916[label="1;37pkt 37fpkt"];
5390--8269[label="1;1pkt 1fpkt"];
7700--9851[label="1;31pkt 31fpkt"];
7806--9916[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="197.99.217.66" dst_port="8431"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
4715[label="133.159.9.67;112pkt 112fpkt", shape=pentagon, color=darkviolet];
7815[label="133.159.9.67;111pkt 111fpkt", shape=invtriangle, color=brown];
9923[label="133.159.9.67;111pkt 111fpkt", shape=invhouse, color=bisque];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.9.67:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.8383%)&lt;BR/&gt; 9253: (4.49102%)&lt;BR/&gt; 32768: (1.79641%)&lt;BR/&gt; 32772: (1.34731%)&lt;BR/&gt; 32769: (1.34731%)&gt;];
}
4715--7815[label="1;111pkt 111fpkt"];
4715--9923[label="1;111pkt 111fpkt"];
7815--9923[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="133.159.9.67" src_port="53"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
4717[label="222.137.51.67;80pkt 80fpkt", shape=pentagon, color=darkviolet];
7816[label="222.137.51.67;80pkt 80fpkt", shape=invtriangle, color=brown];
9924[label="222.137.51.67;79pkt 79fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.137.51.67:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 10038: (1.25523%)&lt;BR/&gt; 31374: (0.627615%)&lt;BR/&gt; 31332: (0.627615%)&lt;BR/&gt; 30425: (0.627615%)&gt;];
}
4717--7816[label="1;80pkt 80fpkt"];
4717--9924[label="1;79pkt 79fpkt"];
7816--9924[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="222.137.51.67" src_port="7000"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
4723[label="17.132.141.67;217pkt 217fpkt", shape=pentagon, color=darkviolet];
7818[label="17.132.141.67;218pkt 218fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.132.141.67:10000, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4723--7818[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.132.141.67" src_port="10000"/>
    </slice>
    <from sec="1134364136" usec="0"/>
    <to sec="1134364170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.223.20.68"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.159.96.68"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
4743[label="133.158.144.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7834[label="133.158.144.68;2pkt 2fpkt", shape=invtriangle, color=brown];
9933[label="133.158.144.68;2pkt 2fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.144.68:8285, 5.109.214.25:80}[50%]&lt;BR/&gt;{133.158.144.68:8289, 5.109.214.25:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 8289: (25%)&lt;BR/&gt; 8285: (25%)&gt;];
}
4743--7834[label="1;2pkt 2fpkt"];
4743--9933[label="1;2pkt 2fpkt"];
7834--9933[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="5.109.214.25" dst_port="80" src_ip="133.158.144.68" src_port="8289"/>
      <filter dst_ip="5.109.214.25" dst_port="80" src_ip="133.158.144.68" src_port="8285"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.137.8.69"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
4757[label="221.2.150.69;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7843[label="221.2.150.69;10pkt 10fpkt", shape=invtriangle, color=brown];
9937[label="221.2.150.69;9pkt 9fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.2.150.69:*, 131.82.119.45:42}[60%]&lt;BR/&gt;{221.2.150.69:*, 131.82.119.44:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (33.9286%)&lt;BR/&gt; 80: (10.7143%)&lt;BR/&gt; 0: (10.7143%)&lt;BR/&gt; 4924: (5.35714%)&lt;BR/&gt; 4522: (5.35714%)&gt;];
}
4757--7843[label="1;9pkt 9fpkt"];
4757--9937[label="1;9pkt 9fpkt"];
7843--9937[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="131.82.119.45" dst_port="42" src_ip="221.2.150.69"/>
      <filter dst_ip="131.82.119.44" dst_port="80" src_ip="221.2.150.69"/>
    </slice>
    <from sec="1134363633" usec="0"/>
    <to sec="1134364381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
4758[label="166.115.161.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7844[label="166.115.161.69;1pkt 1fpkt", shape=invtriangle, color=brown];
9938[label="166.115.161.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.161.69:1080, 218.72.116.93:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1080: (50%)&gt;];
}
4758--7844[label="1;1pkt 1fpkt"];
4758--9938[label="1;1pkt 1fpkt"];
7844--9938[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.72.116.93" dst_port="5050" src_ip="166.115.161.69" src_port="1080"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.199.32.70"/>
    </slice>
    <from sec="1134364001" usec="0"/>
    <to sec="1134364010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.17.92.70"/>
    </slice>
    <from sec="1134363690" usec="0"/>
    <to sec="1134363764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
4793[label="133.158.9.72;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7869[label="133.158.9.72;13pkt 13fpkt", shape=invtriangle, color=brown];
9956[label="133.158.9.72;13pkt 13fpkt", shape=invhouse, color=bisque];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.9.72:*, 214.81.72.17:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2485: (3.84615%)&lt;BR/&gt; 2484: (3.84615%)&lt;BR/&gt; 2483: (3.84615%)&lt;BR/&gt; 2482: (3.84615%)&gt;];
}
4793--7869[label="1;13pkt 13fpkt"];
4793--9956[label="1;13pkt 13fpkt"];
7869--9956[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="214.81.72.17" dst_port="80" src_ip="133.158.9.72"/>
    </slice>
    <from sec="1134364332" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
568[label="213.201.187.72;s;23pkt 23fpkt", shape=diamond, color=yellow];
4804[label="213.201.187.72;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7879[label="213.201.187.72;24pkt 24fpkt", shape=invtriangle, color=brown];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.201.187.72:80, 163.180.150.64:*}[41.6667%]&lt;BR/&gt;{213.201.187.72:80, 196.129.156.216:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8571%)&lt;BR/&gt; 65139: (2.14286%)&lt;BR/&gt; 64873: (2.14286%)&lt;BR/&gt; 60757: (2.14286%)&lt;BR/&gt; 51885: (2.14286%)&gt;];
}
568--3156[label="0.0434783;1pkt 1fpkt"];
568--3449[label="0.0434783;1pkt 1fpkt"];
568--4804[label="0.956522;22pkt 22fpkt"];
568--7879[label="1;23pkt 23fpkt"];
4804--7879[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="213.201.187.72" src_port="80"/>
      <filter dst_ip="163.180.150.64" src_ip="213.201.187.72" src_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
4808[label="193.67.1.73;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7881[label="193.67.1.73;22pkt 22fpkt", shape=invtriangle, color=brown];
9965[label="193.67.1.73;21pkt 21fpkt", shape=invhouse, color=bisque];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.67.1.73:80, 133.158.100.23:*}[77.2727%]&lt;BR/&gt;{193.67.1.73:80, 151.251.117.87:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13774: (2.30769%)&lt;BR/&gt; 13773: (2.30769%)&lt;BR/&gt; 13772: (2.30769%)&lt;BR/&gt; 13771: (2.30769%)&gt;];
}
4808--7881[label="1;22pkt 22fpkt"];
4808--9965[label="1;21pkt 21fpkt"];
7881--9965[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.100.23" src_ip="193.67.1.73" src_port="80"/>
      <filter dst_ip="151.251.117.87" src_ip="193.67.1.73" src_port="80"/>
    </slice>
    <from sec="1134364105" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
4812[label="119.49.69.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7884[label="119.49.69.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{119.49.69.73:443, 133.158.28.179:49527}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49527: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4812--7884[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.28.179" dst_port="49527" src_ip="119.49.69.73" src_port="443"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
4813[label="158.105.87.73;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7885[label="158.105.87.73;5pkt 5fpkt", shape=invtriangle, color=brown];
9967[label="158.105.87.73;5pkt 5fpkt", shape=invhouse, color=bisque];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.105.87.73:80, 196.129.156.216:*}[66.6667%]&lt;BR/&gt;{158.105.87.73:80, 196.129.156.217:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50829: (9.375%)&lt;BR/&gt; 50084: (9.375%)&lt;BR/&gt; 49980: (9.375%)&lt;BR/&gt; 2818: (9.375%)&gt;];
}
4813--7885[label="1;5pkt 5fpkt"];
4813--9967[label="1;5pkt 5fpkt"];
7885--9967[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="158.105.87.73" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="158.105.87.73" src_port="80"/>
    </slice>
    <from sec="1134364340" usec="0"/>
    <to sec="1134364390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
4818[label="69.106.169.73;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7886[label="69.106.169.73;2pkt 2fpkt", shape=invtriangle, color=brown];
9968[label="69.106.169.73;2pkt 2fpkt", shape=invhouse, color=bisque];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.106.169.73:32202, 197.99.208.128:4006}[33.3333%]&lt;BR/&gt;{69.106.169.73:32243, 197.99.208.128:4006}[33.3333%]&lt;BR/&gt;{69.106.169.73:32245, 197.99.208.128:4006}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4006: (50%)&lt;BR/&gt; 32245: (21.4286%)&lt;BR/&gt; 32243: (21.4286%)&lt;BR/&gt; 32202: (7.14286%)&gt;];
}
4818--7886[label="1;2pkt 2fpkt"];
4818--9968[label="1;2pkt 2fpkt"];
7886--9968[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.208.128" dst_port="4006" src_ip="69.106.169.73" src_port="32245"/>
      <filter dst_ip="197.99.208.128" dst_port="4006" src_ip="69.106.169.73" src_port="32243"/>
      <filter dst_ip="197.99.208.128" dst_port="4006" src_ip="69.106.169.73" src_port="32202"/>
    </slice>
    <from sec="1134363844" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.154.24.74"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.64.120.74"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
4835[label="163.185.132.74;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7897[label="163.185.132.74;21pkt 21fpkt", shape=invtriangle, color=brown];
9976[label="163.185.132.74;21pkt 21fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.132.74:*, 197.212.127.39:8080}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (47.619%)&lt;BR/&gt; 3389: (2.38095%)&lt;BR/&gt; 3388: (2.38095%)&lt;BR/&gt; 3387: (2.38095%)&lt;BR/&gt; 3386: (2.38095%)&gt;];
}
4835--7897[label="1;21pkt 21fpkt"];
4835--9976[label="1;21pkt 21fpkt"];
7897--9976[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="197.212.127.39" dst_port="8080" src_ip="163.185.132.74"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134363838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.131.27.76"/>
    </slice>
    <from sec="1134363790" usec="0"/>
    <to sec="1134363837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.201.96.76"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
4856[label="133.158.138.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7912[label="133.158.138.76;1pkt 1fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.138.76:1880, 192.106.36.117:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1880: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4856--7912[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.106.36.117" dst_port="80" src_ip="133.158.138.76" src_port="1880"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
4871[label="196.240.209.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7923[label="196.240.209.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.240.209.77:46357, 151.251.47.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46357: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4871--7923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="196.240.209.77" src_port="46357"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
4874[label="196.88.15.78;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7924[label="196.88.15.78;32pkt 32fpkt", shape=invtriangle, color=brown];
9990[label="196.88.15.78;31pkt 31fpkt", shape=invhouse, color=bisque];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.88.15.78:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4874--7924[label="1;31pkt 31fpkt"];
4874--9990[label="1;31pkt 31fpkt"];
7924--9990[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="196.88.15.78"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
4878[label="131.68.131.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7926[label="131.68.131.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.131.78:53, 0.251.97.58:32786}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32786: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4878--7926[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.251.97.58" dst_port="32786" src_ip="131.68.131.78" src_port="53"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.51.160.78"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.28.12.79"/>
    </slice>
    <from sec="1134363995" usec="0"/>
    <to sec="1134364097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
2738[label="66.178.175.163;s;669pkt 669fpkt", shape=diamond, color=yellow];
2828[label="133.158.26.240;d;58pkt 58fpkt", shape=diamond, color=yellow];
4523[label="67.194.17.53;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6062[label="66.178.175.163;722pkt 722fpkt", shape=pentagon, color=darkviolet];
6560[label="222.238.69.205;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7687[label="67.194.17.53;31pkt 31fpkt", shape=invtriangle, color=brown];
9842[label="67.194.17.53;30pkt 30fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.178.175.163:7000, *:*}[87.2135%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (44.1344%)&lt;BR/&gt; 80: (5.86557%)&lt;BR/&gt; 2085: (0.190235%)&lt;BR/&gt; 4670: (0.158529%)&lt;BR/&gt; 3528: (0.158529%)&gt;];
}
2738--2828[label="0.0172414;1pkt 1fpkt"];
2738--6062[label="0.998505;668pkt 668fpkt"];
2828--3046[label="0.0172414;1pkt 1fpkt"];
2828--3505[label="0.0344828;2pkt 2fpkt"];
2828--3510[label="0.0172414;1pkt 1fpkt"];
2828--3520[label="0.0689655;4pkt 4fpkt"];
2828--3556[label="0.189655;11pkt 11fpkt"];
2828--3591[label="0.0172414;1pkt 1fpkt"];
2828--3600[label="0.0689655;4pkt 4fpkt"];
2828--3636[label="0.189655;11pkt 11fpkt"];
2828--3648[label="0.0689655;4pkt 4fpkt"];
2828--3662[label="0.0344828;2pkt 2fpkt"];
2828--3668[label="0.0689655;4pkt 4fpkt"];
2828--3703[label="0.189655;11pkt 11fpkt"];
2828--3858[label="0.0344828;2pkt 2fpkt"];
2828--4005[label="0.0517241;3pkt 3fpkt"];
2828--4048[label="0.0172414;1pkt 1fpkt"];
2828--4213[label="0.0172414;1pkt 1fpkt"];
2828--4254[label="0.0344828;2pkt 2fpkt"];
2828--4335[label="0.0172414;1pkt 1fpkt"];
2828--4371[label="0.0172414;1pkt 1fpkt"];
2828--4400[label="0.0172414;1pkt 1fpkt"];
2828--4427[label="0.0172414;1pkt 1fpkt"];
2828--4501[label="0.0344828;2pkt 2fpkt"];
2828--4523[label="0.366667;11pkt 11fpkt"];
2828--4572[label="0.0172414;1pkt 1fpkt"];
2828--4885[label="0.0454545;1pkt 1fpkt"];
2828--6062[label="0.0172414;1pkt 1fpkt"];
2828--6560[label="0.189189;7pkt 7fpkt"];
2828--7337[label="0.0517241;3pkt 3fpkt"];
2828--7465[label="0.0172414;1pkt 1fpkt"];
2828--7497[label="0.0344828;2pkt 2fpkt"];
2828--7558[label="0.0172414;1pkt 1fpkt"];
2828--7585[label="0.0172414;1pkt 1fpkt"];
2828--7604[label="0.0172414;1pkt 1fpkt"];
2828--7622[label="0.0172414;1pkt 1fpkt"];
2828--7672[label="0.0344828;2pkt 2fpkt"];
2828--7687[label="0.387097;12pkt 12fpkt"];
2828--7930[label="0.0454545;1pkt 1fpkt"];
2828--9701[label="0.0172414;1pkt 1fpkt"];
2828--9773[label="0.0172414;1pkt 1fpkt"];
2828--9788[label="0.0172414;1pkt 1fpkt"];
2828--9800[label="0.0172414;1pkt 1fpkt"];
2828--9842[label="0.366667;11pkt 11fpkt"];
4523--7687[label="1;30pkt 30fpkt"];
4523--9842[label="1;30pkt 30fpkt"];
7687--9842[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="66.178.175.163" src_port="7000"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
4887[label="222.137.51.79;94pkt 94fpkt", shape=pentagon, color=darkviolet];
7931[label="222.137.51.79;94pkt 94fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.137.51.79:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 32757: (0.531915%)&lt;BR/&gt; 32659: (0.531915%)&lt;BR/&gt; 32426: (0.531915%)&lt;BR/&gt; 31968: (0.531915%)&gt;];
}
4887--7931[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="222.137.51.79" src_port="7000"/>
    </slice>
    <from sec="1134363609" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.49.109.79"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.50.144.79"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.20.174.79"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.149.84.80"/>
    </slice>
    <from sec="1134363636" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
4908[label="196.129.159.80;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7947[label="196.129.159.80;30pkt 30fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.159.80:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4908--7947[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="196.129.159.80"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.137.60.82"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134363862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
4945[label="163.180.17.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7976[label="163.180.17.83;3pkt 3fpkt", shape=invtriangle, color=brown];
10017[label="163.180.17.83;2pkt 2fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.17.83:2184, 3.48.73.43:80}[33.3333%]&lt;BR/&gt;{163.180.17.83:2274, 5.20.141.127:80}[33.3333%]&lt;BR/&gt;{163.180.17.83:2276, 5.20.141.127:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2276: (21.4286%)&lt;BR/&gt; 2274: (21.4286%)&lt;BR/&gt; 2184: (7.14286%)&gt;];
}
4945--7976[label="1;2pkt 2fpkt"];
4945--10017[label="1;2pkt 2fpkt"];
7976--10017[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="5.20.141.127" dst_port="80" src_ip="163.180.17.83" src_port="2276"/>
      <filter dst_ip="5.20.141.127" dst_port="80" src_ip="163.180.17.83" src_port="2274"/>
      <filter dst_ip="3.48.73.43" dst_port="80" src_ip="163.180.17.83" src_port="2184"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.107.129.83"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
4953[label="131.68.194.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7983[label="131.68.194.83;1pkt 1fpkt", shape=invtriangle, color=brown];
10023[label="131.68.194.83;1pkt 1fpkt", shape=invhouse, color=bisque];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.194.83:49282, 119.49.69.120:143}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49282: (50%)&lt;BR/&gt; 143: (50%)&gt;];
}
4953--7983[label="1;1pkt 1fpkt"];
4953--10023[label="1;1pkt 1fpkt"];
7983--10023[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="119.49.69.120" dst_port="143" src_ip="131.68.194.83" src_port="49282"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
4966[label="133.158.144.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7991[label="133.158.144.84;2pkt 2fpkt", shape=invtriangle, color=brown];
10027[label="133.158.144.84;2pkt 2fpkt", shape=invhouse, color=bisque];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.144.84:13504, 169.141.155.147:25}[50%]&lt;BR/&gt;{133.158.144.84:13503, 196.106.122.218:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 13504: (25%)&lt;BR/&gt; 13503: (25%)&gt;];
}
4966--7991[label="1;2pkt 2fpkt"];
4966--10027[label="1;2pkt 2fpkt"];
7991--10027[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.106.122.218" dst_port="25" src_ip="133.158.144.84" src_port="13503"/>
      <filter dst_ip="169.141.155.147" dst_port="25" src_ip="133.158.144.84" src_port="13504"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.115.232.84"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
5007[label="133.158.45.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8014[label="133.158.45.87;1pkt 1fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.45.87:1460, 214.19.33.136:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1460: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5007--8014[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.19.33.136" dst_port="25" src_ip="133.158.45.87" src_port="1460"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
5010[label="133.158.174.87;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8017[label="133.158.174.87;36pkt 36fpkt", shape=invtriangle, color=brown];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.174.87:*, *:80}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 8080: (2.77778%)&lt;BR/&gt; 4357: (1.38889%)&lt;BR/&gt; 3312: (1.38889%)&lt;BR/&gt; 2241: (1.38889%)&gt;];
}
5010--8017[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.158.174.87"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
5011[label="0.193.176.87;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8018[label="0.193.176.87;31pkt 31fpkt", shape=invtriangle, color=brown];
10042[label="0.193.176.87;31pkt 31fpkt", shape=invhouse, color=bisque];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.193.176.87:80, 196.129.156.217:*}[58.0645%]&lt;BR/&gt;{0.193.176.87:80, 196.129.156.216:*}[41.9355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65507: (1.63043%)&lt;BR/&gt; 65466: (1.63043%)&lt;BR/&gt; 65419: (1.63043%)&lt;BR/&gt; 50373: (1.63043%)&gt;];
}
5011--8018[label="1;30pkt 30fpkt"];
5011--10042[label="1;30pkt 30fpkt"];
8018--10042[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="0.193.176.87" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="0.193.176.87" src_port="80"/>
    </slice>
    <from sec="1134364125" usec="0"/>
    <to sec="1134364390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
5034[label="0.21.93.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8034[label="0.21.93.89;2pkt 2fpkt", shape=invtriangle, color=brown];
10054[label="0.21.93.89;2pkt 2fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.21.93.89:36204, 133.158.153.114:80}[50%]&lt;BR/&gt;{0.21.93.89:64780, 131.68.51.192:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64780: (30%)&lt;BR/&gt; 36204: (20%)&gt;];
}
5034--8034[label="1;1pkt 1fpkt"];
5034--10054[label="1;1pkt 1fpkt"];
8034--10054[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.51.192" dst_port="80" src_ip="0.21.93.89" src_port="64780"/>
      <filter dst_ip="133.158.153.114" dst_port="80" src_ip="0.21.93.89" src_port="36204"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.145.99.89"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
5049[label="69.45.0.90;245pkt 245fpkt", shape=pentagon, color=darkviolet];
8044[label="69.45.0.90;246pkt 246fpkt", shape=invtriangle, color=brown];
10062[label="69.45.0.90;246pkt 246fpkt", shape=invhouse, color=bisque];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.45.0.90:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 25355: (0.203528%)&lt;BR/&gt; 25352: (0.203528%)&lt;BR/&gt; 25348: (0.203528%)&lt;BR/&gt; 25343: (0.203528%)&gt;];
}
5049--8044[label="1;245pkt 245fpkt"];
5049--10062[label="1;245pkt 245fpkt"];
8044--10062[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="69.45.0.90"/>
    </slice>
    <from sec="1134364398" usec="0"/>
    <to sec="1134364425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
5054[label="217.29.18.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8047[label="217.29.18.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.29.18.90:2131, 151.251.47.111:60668}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60668: (50%)&lt;BR/&gt; 2131: (50%)&gt;];
}
5054--8047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="60668" src_ip="217.29.18.90" src_port="2131"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.48.43.90"/>
    </slice>
    <from sec="1134364344" usec="0"/>
    <to sec="1134364430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.155.10.91"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.117.161.91"/>
    </slice>
    <from sec="1134363638" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.28.14.92"/>
    </slice>
    <from sec="1134363616" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
5084[label="67.254.85.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8070[label="67.254.85.92;2pkt 2fpkt", shape=invtriangle, color=brown];
10080[label="67.254.85.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.254.85.92:7000, 196.124.9.32:63518}[50%]&lt;BR/&gt;{67.254.85.92:7000, 196.124.4.129:43038}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 63518: (25%)&lt;BR/&gt; 43038: (25%)&gt;];
}
5084--8070[label="1;2pkt 2fpkt"];
5084--10080[label="1;2pkt 2fpkt"];
8070--10080[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.124.4.129" dst_port="43038" src_ip="67.254.85.92" src_port="7000"/>
      <filter dst_ip="196.124.9.32" dst_port="63518" src_ip="67.254.85.92" src_port="7000"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
5088[label="160.53.207.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8072[label="160.53.207.92;2pkt 2fpkt", shape=invtriangle, color=brown];
10082[label="160.53.207.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.53.207.92:80, 196.129.156.217:3177}[50%]&lt;BR/&gt;{160.53.207.92:80, 196.129.156.217:3793}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3793: (25%)&lt;BR/&gt; 3177: (25%)&gt;];
}
5088--8072[label="1;2pkt 2fpkt"];
5088--10082[label="1;2pkt 2fpkt"];
8072--10082[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="3793" src_ip="160.53.207.92" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="3177" src_ip="160.53.207.92" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,054,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
5096[label="196.98.42.93;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8077[label="196.98.42.93;27pkt 27fpkt", shape=invtriangle, color=brown];
10087[label="196.98.42.93;27pkt 27fpkt", shape=invhouse, color=bisque];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.98.42.93:443, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4554: (1.85185%)&lt;BR/&gt; 3841: (1.85185%)&lt;BR/&gt; 3323: (1.85185%)&lt;BR/&gt; 3189: (1.85185%)&gt;];
}
5096--8077[label="1;27pkt 27fpkt"];
5096--10087[label="1;27pkt 27fpkt"];
8077--10087[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="196.98.42.93" src_port="443"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.73.85.93"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.214.4.94"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
5114[label="221.232.234.94;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8091[label="221.232.234.94;3pkt 3fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.232.234.94:63457, 151.251.117.73:35598}[33.3333%]&lt;BR/&gt;{221.232.234.94:63645, 151.251.117.73:35598}[33.3333%]&lt;BR/&gt;{221.232.234.94:63805, 151.251.117.73:35598}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35598: (50%)&lt;BR/&gt; 63805: (16.6667%)&lt;BR/&gt; 63645: (16.6667%)&lt;BR/&gt; 63457: (16.6667%)&gt;];
}
5114--8091[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.117.73" dst_port="35598" src_ip="221.232.234.94" src_port="63805"/>
      <filter dst_ip="151.251.117.73" dst_port="35598" src_ip="221.232.234.94" src_port="63645"/>
      <filter dst_ip="151.251.117.73" dst_port="35598" src_ip="221.232.234.94" src_port="63457"/>
    </slice>
    <from sec="1134364026" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.255.10.95"/>
    </slice>
    <from sec="1134364313" usec="0"/>
    <to sec="1134364333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
2697[label="151.251.97.116;d;239pkt 239fpkt", shape=diamond, color=yellow];
5137[label="220.134.129.96;66pkt 66fpkt", shape=pentagon, color=darkviolet];
8107[label="220.134.129.96;66pkt 66fpkt", shape=invtriangle, color=brown];
10106[label="220.134.129.96;67pkt 67fpkt", shape=invhouse, color=bisque];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.134.129.96:*, 151.251.97.116:21}[26.6932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.8858%)&lt;BR/&gt; 1593: (0.684932%)&lt;BR/&gt; 3691: (0.570776%)&lt;BR/&gt; 3479: (0.570776%)&lt;BR/&gt; 2955: (0.570776%)&gt;];
}
2697--4559[label="0.0041841;1pkt 1fpkt"];
2697--5137[label="0.818182;54pkt 54fpkt"];
2697--7712[label="0.0041841;1pkt 1fpkt"];
2697--8107[label="0.818182;54pkt 54fpkt"];
2697--9858[label="0.0041841;1pkt 1fpkt"];
2697--10106[label="0.820896;55pkt 55fpkt"];
5137--8107[label="1;66pkt 66fpkt"];
5137--10106[label="1;66pkt 66fpkt"];
8107--10106[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.97.116" dst_port="21" src_ip="220.134.129.96"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
5142[label="218.112.196.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8110[label="218.112.196.96;3pkt 3fpkt", shape=invtriangle, color=brown];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.112.196.96:80, 133.158.16.164:36598}[33.3333%]&lt;BR/&gt;{218.112.196.96:80, 133.158.16.164:36599}[33.3333%]&lt;BR/&gt;{218.112.196.96:80, 133.158.16.164:36600}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36600: (16.6667%)&lt;BR/&gt; 36599: (16.6667%)&lt;BR/&gt; 36598: (16.6667%)&gt;];
}
5142--8110[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.16.164" dst_port="36600" src_ip="218.112.196.96" src_port="80"/>
      <filter dst_ip="133.158.16.164" dst_port="36599" src_ip="218.112.196.96" src_port="80"/>
      <filter dst_ip="133.158.16.164" dst_port="36598" src_ip="218.112.196.96" src_port="80"/>
    </slice>
    <from sec="1134364089" usec="0"/>
    <to sec="1134364099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
5150[label="66.15.93.97;254pkt 254fpkt", shape=pentagon, color=darkviolet];
8116[label="66.15.93.97;253pkt 253fpkt", shape=invtriangle, color=brown];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.15.93.97:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5150--8116[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="66.15.93.97" src_port="1027"/>
    </slice>
    <from sec="1134364102" usec="0"/>
    <to sec="1134364116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817503,2.22729,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
597[label="17.95.148.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
8123[label="163.185.239.97;1pkt 1fpkt", shape=invtriangle, color=brown];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.239.97:2470, 17.95.148.139:9050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9050: (50%)&lt;BR/&gt; 2470: (50%)&gt;];
}
597--8123[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.95.148.139" dst_port="9050" src_ip="163.185.239.97" src_port="2470"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
5165[label="133.158.21.98;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8125[label="133.158.21.98;4pkt 4fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.21.98:2412, 17.101.252.146:80}[25%]&lt;BR/&gt;{133.158.21.98:2414, 17.101.252.146:80}[25%]&lt;BR/&gt;{133.158.21.98:2415, 17.101.252.146:80}[25%]&lt;BR/&gt;{133.158.21.98:2417, 17.101.252.146:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2417: (12.5%)&lt;BR/&gt; 2415: (12.5%)&lt;BR/&gt; 2414: (12.5%)&lt;BR/&gt; 2412: (12.5%)&gt;];
}
5165--8125[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="17.101.252.146" dst_port="80" src_ip="133.158.21.98" src_port="2417"/>
      <filter dst_ip="17.101.252.146" dst_port="80" src_ip="133.158.21.98" src_port="2415"/>
      <filter dst_ip="17.101.252.146" dst_port="80" src_ip="133.158.21.98" src_port="2414"/>
      <filter dst_ip="17.101.252.146" dst_port="80" src_ip="133.158.21.98" src_port="2412"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
5175[label="216.68.163.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8132[label="216.68.163.98;1pkt 1fpkt", shape=invtriangle, color=brown];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.68.163.98:1881, 196.139.224.96:4718}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4718: (50%)&lt;BR/&gt; 1881: (50%)&gt;];
}
5175--8132[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.224.96" dst_port="4718" src_ip="216.68.163.98" src_port="1881"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.160.236.99"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
5205[label="3.117.15.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8155[label="3.117.15.101;1pkt 1fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.117.15.101:54131, 131.160.151.143:7700}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54131: (50%)&lt;BR/&gt; 7700: (50%)&gt;];
}
5205--8155[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.160.151.143" dst_port="7700" src_ip="3.117.15.101" src_port="54131"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.186.31.101"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
285[label="202.176.199.11;s;1220pkt 1220fpkt", shape=diamond, color=yellow];
381[label="202.176.199.42;s;1380pkt 1380fpkt", shape=diamond, color=yellow];
627[label="202.176.199.13;s;1504pkt 1504fpkt", shape=diamond, color=yellow];
1279[label="163.185.132.10;s;4pkt 4fpkt", shape=diamond, color=yellow];
1627[label="192.168.3.2;d;3pkt 3fpkt", shape=diamond, color=yellow];
2380[label="192.168.0.2;d;50pkt 50fpkt", shape=diamond, color=yellow];
3898[label="163.185.132.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3916[label="202.176.199.11;1504pkt 1504fpkt", shape=pentagon, color=darkviolet];
3986[label="163.185.150.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4382[label="202.176.199.42;1495pkt 1495fpkt", shape=pentagon, color=darkviolet];
5220[label="197.99.216.101;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7276[label="163.185.132.10;3pkt 3fpkt", shape=invtriangle, color=brown];
7287[label="202.176.199.11;1504pkt 1504fpkt", shape=invtriangle, color=brown];
7326[label="163.185.150.16;5pkt 5fpkt", shape=invtriangle, color=brown];
8165[label="197.99.216.101;38pkt 38fpkt", shape=invtriangle, color=brown];
9582[label="163.185.132.10;3pkt 3fpkt", shape=invhouse, color=bisque];
9614[label="163.185.150.16;5pkt 5fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.176.199.11:53, *:*}[32.961%]&lt;BR/&gt;{202.176.199.13:53, *:*}[32.9391%]&lt;BR/&gt;{202.176.199.42:53, *:*}[32.7639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1841%)&lt;BR/&gt; 515: (0.581992%)&lt;BR/&gt; 8864: (0.114116%)&lt;BR/&gt; 1290: (0.0969987%)&lt;BR/&gt; 9583: (0.0798813%)&gt;];
}
285--2380[label="0.02;1pkt 1fpkt"];
285--3916[label="0.99918;1219pkt 1219fpkt"];
285--7287[label="0.99918;1219pkt 1219fpkt"];
381--2380[label="0.02;1pkt 1fpkt"];
381--3517[label="0.000724638;1pkt 1fpkt"];
381--3597[label="0.000724638;1pkt 1fpkt"];
381--4382[label="0.999275;1379pkt 1379fpkt"];
627--2380[label="0.02;1pkt 1fpkt"];
1279--1627[label="0.333333;1pkt 1fpkt"];
1279--2380[label="0.25;1pkt 1fpkt"];
1279--3488[label="0.25;1pkt 1fpkt"];
1279--3573[label="0.25;1pkt 1fpkt"];
1279--3654[label="0.25;1pkt 1fpkt"];
1279--3898[label="1;3pkt 3fpkt"];
1279--7276[label="1;3pkt 3fpkt"];
1279--9582[label="1;3pkt 3fpkt"];
1627--1889[label="0.333333;1pkt 1fpkt"];
1627--3898[label="0.333333;1pkt 1fpkt"];
1627--7276[label="0.333333;1pkt 1fpkt"];
1627--9582[label="0.333333;1pkt 1fpkt"];
2380--3241[label="0.14;7pkt 7fpkt"];
2380--3463[label="0.14;7pkt 7fpkt"];
2380--3491[label="0.08;4pkt 4fpkt"];
2380--3540[label="0.12;6pkt 6fpkt"];
2380--3620[label="0.12;6pkt 6fpkt"];
2380--3687[label="0.12;6pkt 6fpkt"];
2380--3898[label="0.333333;1pkt 1fpkt"];
2380--3916[label="0.02;1pkt 1fpkt"];
2380--3986[label="0.2;1pkt 1fpkt"];
2380--4382[label="0.02;1pkt 1fpkt"];
2380--4433[label="0.04;2pkt 2fpkt"];
2380--4637[label="0.16;8pkt 8fpkt"];
2380--5220[label="0.891892;33pkt 33fpkt"];
2380--7276[label="0.333333;1pkt 1fpkt"];
2380--7287[label="0.02;1pkt 1fpkt"];
2380--7326[label="0.2;1pkt 1fpkt"];
2380--7765[label="0.16;8pkt 8fpkt"];
2380--8165[label="0.868421;33pkt 33fpkt"];
2380--9582[label="0.333333;1pkt 1fpkt"];
2380--9614[label="0.2;1pkt 1fpkt"];
2380--9890[label="0.16;8pkt 8fpkt"];
3898--7276[label="1;3pkt 3fpkt"];
3898--9582[label="1;3pkt 3fpkt"];
3916--7287[label="1;1504pkt 1504fpkt"];
3986--7326[label="1;5pkt 5fpkt"];
3986--9614[label="1;5pkt 5fpkt"];
5220--8165[label="1;37pkt 37fpkt"];
7276--9582[label="1;3pkt 3fpkt"];
7326--9614[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="202.176.199.11" src_port="53"/>
      <filter src_ip="202.176.199.13" src_port="53"/>
      <filter src_ip="202.176.199.42" src_port="53"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
5222[label="133.159.222.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8167[label="133.159.222.101;2pkt 2fpkt", shape=invtriangle, color=brown];
10140[label="133.159.222.101;2pkt 2fpkt", shape=invhouse, color=bisque];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.222.101:48656, 164.10.54.140:80}[50%]&lt;BR/&gt;{133.159.222.101:48666, 164.10.54.140:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48666: (25%)&lt;BR/&gt; 48656: (25%)&gt;];
}
5222--8167[label="1;2pkt 2fpkt"];
5222--10140[label="1;2pkt 2fpkt"];
8167--10140[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.10.54.140" dst_port="80" src_ip="133.159.222.101" src_port="48666"/>
      <filter dst_ip="164.10.54.140" dst_port="80" src_ip="133.159.222.101" src_port="48656"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.239.53.102"/>
    </slice>
    <from sec="1134363674" usec="0"/>
    <to sec="1134364486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
5230[label="133.159.94.102;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8173[label="133.159.94.102;4pkt 4fpkt", shape=invtriangle, color=brown];
10145[label="133.159.94.102;4pkt 4fpkt", shape=invhouse, color=bisque];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.94.102:1740, 204.140.67.236:80}[25%]&lt;BR/&gt;{133.159.94.102:1741, 204.140.67.236:80}[25%]&lt;BR/&gt;{133.159.94.102:1743, 204.140.67.236:80}[25%]&lt;BR/&gt;{133.159.94.102:1744, 204.140.67.236:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1744: (12.5%)&lt;BR/&gt; 1743: (12.5%)&lt;BR/&gt; 1741: (12.5%)&lt;BR/&gt; 1740: (12.5%)&gt;];
}
5230--8173[label="1;4pkt 4fpkt"];
5230--10145[label="1;4pkt 4fpkt"];
8173--10145[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="204.140.67.236" dst_port="80" src_ip="133.159.94.102" src_port="1744"/>
      <filter dst_ip="204.140.67.236" dst_port="80" src_ip="133.159.94.102" src_port="1743"/>
      <filter dst_ip="204.140.67.236" dst_port="80" src_ip="133.159.94.102" src_port="1741"/>
      <filter dst_ip="204.140.67.236" dst_port="80" src_ip="133.159.94.102" src_port="1740"/>
    </slice>
    <from sec="1134363686" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
5232[label="133.158.126.102;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8174[label="133.158.126.102;7pkt 7fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.126.102:*, 193.67.8.215:80}[28.5714%]&lt;BR/&gt;{133.158.126.102:*, 2.9.109.30:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 1054: (7.14286%)&lt;BR/&gt; 1053: (7.14286%)&lt;BR/&gt; 1052: (7.14286%)&lt;BR/&gt; 1051: (7.14286%)&gt;];
}
5232--8174[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="2.9.109.30" src_ip="133.158.126.102"/>
      <filter dst_ip="193.67.8.215" dst_port="80" src_ip="133.158.126.102"/>
    </slice>
    <from sec="1134364369" usec="0"/>
    <to sec="1134364445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.111.15.104"/>
    </slice>
    <from sec="1134363684" usec="0"/>
    <to sec="1134364030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
5260[label="133.158.124.104;28pkt 28fpkt", shape=pentagon, color=darkviolet];
8190[label="133.158.124.104;28pkt 28fpkt", shape=invtriangle, color=brown];
10155[label="133.158.124.104;29pkt 29fpkt", shape=invhouse, color=bisque];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.124.104:*, 0.124.166.125:80}[41.3793%]&lt;BR/&gt;{133.158.124.104:*, 218.212.204.247:80}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4252: (1.76471%)&lt;BR/&gt; 4246: (1.76471%)&lt;BR/&gt; 4244: (1.76471%)&lt;BR/&gt; 4242: (1.76471%)&gt;];
}
5260--8190[label="1;28pkt 28fpkt"];
5260--10155[label="1;28pkt 28fpkt"];
8190--10155[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="0.124.166.125" dst_port="80" src_ip="133.158.124.104"/>
      <filter dst_ip="218.212.204.247" dst_port="80" src_ip="133.158.124.104"/>
    </slice>
    <from sec="1134364358" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
5263[label="215.157.224.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8192[label="215.157.224.104;1pkt 1fpkt", shape=invtriangle, color=brown];
10156[label="215.157.224.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.157.224.104:2421, 131.68.162.236:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2421: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5263--8192[label="1;1pkt 1fpkt"];
5263--10156[label="1;1pkt 1fpkt"];
8192--10156[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.162.236" dst_port="25" src_ip="215.157.224.104" src_port="2421"/>
    </slice>
    <from sec="1134364463" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
5282[label="87.168.152.105;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8206[label="87.168.152.105;13pkt 13fpkt", shape=invtriangle, color=brown];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.168.152.105:80, 151.251.55.205:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1487: (3.84615%)&lt;BR/&gt; 1486: (3.84615%)&lt;BR/&gt; 1485: (3.84615%)&lt;BR/&gt; 1484: (3.84615%)&gt;];
}
5282--8206[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.55.205" src_ip="87.168.152.105" src_port="80"/>
    </slice>
    <from sec="1134363818" usec="0"/>
    <to sec="1134363828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.71.169.105"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
5285[label="192.106.194.105;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8209[label="192.106.194.105;4pkt 4fpkt", shape=invtriangle, color=brown];
10169[label="192.106.194.105;4pkt 4fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.105:1863, 151.251.99.68:4243}[25%]&lt;BR/&gt;{192.106.194.105:1863, 151.251.213.116:2679}[25%]&lt;BR/&gt;{192.106.194.105:1863, 151.251.149.146:2006}[25%]&lt;BR/&gt;{192.106.194.105:1863, 151.251.133.181:54028}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 54028: (12.5%)&lt;BR/&gt; 4243: (12.5%)&lt;BR/&gt; 2679: (12.5%)&lt;BR/&gt; 2006: (12.5%)&gt;];
}
5285--8209[label="1;4pkt 4fpkt"];
5285--10169[label="1;4pkt 4fpkt"];
8209--10169[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.133.181" dst_port="54028" src_ip="192.106.194.105" src_port="1863"/>
      <filter dst_ip="151.251.149.146" dst_port="2006" src_ip="192.106.194.105" src_port="1863"/>
      <filter dst_ip="151.251.213.116" dst_port="2679" src_ip="192.106.194.105" src_port="1863"/>
      <filter dst_ip="151.251.99.68" dst_port="4243" src_ip="192.106.194.105" src_port="1863"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
5286[label="0.130.196.105;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8210[label="0.130.196.105;4pkt 4fpkt", shape=invtriangle, color=brown];
10170[label="0.130.196.105;3pkt 3fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.130.196.105:80, 196.129.156.216:49559}[25%]&lt;BR/&gt;{0.130.196.105:80, 196.129.156.216:49834}[25%]&lt;BR/&gt;{0.130.196.105:80, 196.129.156.217:1999}[25%]&lt;BR/&gt;{0.130.196.105:80, 196.129.156.217:2660}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49834: (13.6364%)&lt;BR/&gt; 2660: (13.6364%)&lt;BR/&gt; 1999: (13.6364%)&lt;BR/&gt; 49559: (9.09091%)&gt;];
}
5286--8210[label="1;4pkt 4fpkt"];
5286--10170[label="1;3pkt 3fpkt"];
8210--10170[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="2660" src_ip="0.130.196.105" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="1999" src_ip="0.130.196.105" src_port="80"/>
      <filter dst_ip="196.129.156.216" dst_port="49834" src_ip="0.130.196.105" src_port="80"/>
      <filter dst_ip="196.129.156.216" dst_port="49559" src_ip="0.130.196.105" src_port="80"/>
    </slice>
    <from sec="1134364327" usec="0"/>
    <to sec="1134364353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.159.28.106"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.220.3.107"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.8.117.107"/>
    </slice>
    <from sec="1134364240" usec="0"/>
    <to sec="1134364275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.130.64.108"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.32.66.108"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.193.82.108"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.145.86.108"/>
    </slice>
    <from sec="1134363890" usec="0"/>
    <to sec="1134364418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.154.136.108"/>
    </slice>
    <from sec="1134363664" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
5327[label="193.1.229.108;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8237[label="193.1.229.108;11pkt 11fpkt", shape=invtriangle, color=brown];
10183[label="193.1.229.108;11pkt 11fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.229.108:80, 196.129.156.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64999: (4.54545%)&lt;BR/&gt; 62327: (4.54545%)&lt;BR/&gt; 60676: (4.54545%)&lt;BR/&gt; 59482: (4.54545%)&gt;];
}
5327--8237[label="1;11pkt 11fpkt"];
5327--10183[label="1;11pkt 11fpkt"];
8237--10183[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="193.1.229.108" src_port="80"/>
    </slice>
    <from sec="1134363739" usec="0"/>
    <to sec="1134364472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.233.146.109"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.190.192.109"/>
    </slice>
    <from sec="1134363708" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.167.32.110"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.48.103.111"/>
    </slice>
    <from sec="1134363701" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
5358[label="65.105.113.111;33pkt 33fpkt", shape=pentagon, color=darkviolet];
8253[label="65.105.113.111;34pkt 34fpkt", shape=invtriangle, color=brown];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.105.113.111:80, 133.158.197.128:*}[44.1176%]&lt;BR/&gt;{65.105.113.111:80, 133.158.199.154:*}[44.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4197: (1.49254%)&lt;BR/&gt; 4196: (1.49254%)&lt;BR/&gt; 4195: (1.49254%)&lt;BR/&gt; 4194: (1.49254%)&gt;];
}
5358--8253[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.199.154" src_ip="65.105.113.111" src_port="80"/>
      <filter dst_ip="133.158.197.128" src_ip="65.105.113.111" src_port="80"/>
    </slice>
    <from sec="1134363850" usec="0"/>
    <to sec="1134364051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
5363[label="68.152.172.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8254[label="68.152.172.111;1pkt 1fpkt", shape=invtriangle, color=brown];
10196[label="68.152.172.111;1pkt 1fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.152.172.111:17395, 151.251.47.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17395: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5363--8254[label="1;1pkt 1fpkt"];
5363--10196[label="1;1pkt 1fpkt"];
8254--10196[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="68.152.172.111" src_port="17395"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
2433[label="197.99.223.111;s;157pkt 157fpkt", shape=diamond, color=yellow];
5366[label="197.99.223.111;199pkt 199fpkt", shape=pentagon, color=darkviolet];
8257[label="197.99.223.111;200pkt 200fpkt", shape=invtriangle, color=brown];
10198[label="197.99.223.111;199pkt 199fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.223.111:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2433--2646[label="0.00636943;1pkt 1fpkt"];
2433--2652[label="0.00636943;1pkt 1fpkt"];
2433--2973[label="0.00636943;1pkt 1fpkt"];
2433--5366[label="0.993631;156pkt 156fpkt"];
2433--8257[label="1;157pkt 157fpkt"];
2433--10198[label="0.993631;156pkt 156fpkt"];
5366--8257[label="1;199pkt 199fpkt"];
5366--10198[label="1;199pkt 199fpkt"];
8257--10198[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.223.111"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.90.167.112"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.78.195.112"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
5400[label="197.181.181.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8275[label="197.181.181.113;3pkt 3fpkt", shape=invtriangle, color=brown];
10211[label="197.181.181.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.181.181.113:0, 151.133.129.219:0}[33.3333%]&lt;BR/&gt;{197.181.181.113:0, 151.133.129.229:0}[33.3333%]&lt;BR/&gt;{197.181.181.113:0, 151.133.129.241:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5400--8275[label="1;2pkt 2fpkt"];
5400--10211[label="1;2pkt 2fpkt"];
8275--10211[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.133.129.241" src_ip="197.181.181.113"/>
      <filter dst_ip="151.133.129.229" src_ip="197.181.181.113"/>
      <filter dst_ip="151.133.129.219" src_ip="197.181.181.113"/>
    </slice>
    <from sec="1134363652" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.80.186.113"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
5403[label="196.139.225.113;44pkt 44fpkt", shape=pentagon, color=darkviolet];
8278[label="196.139.225.113;44pkt 44fpkt", shape=invtriangle, color=brown];
10213[label="196.139.225.113;44pkt 44fpkt", shape=invhouse, color=bisque];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.225.113:*, 10.66.1.141:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 4577: (1.13636%)&lt;BR/&gt; 4575: (1.13636%)&lt;BR/&gt; 4574: (1.13636%)&lt;BR/&gt; 4573: (1.13636%)&gt;];
}
5403--8278[label="1;44pkt 44fpkt"];
5403--10213[label="1;44pkt 44fpkt"];
8278--10213[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="10.66.1.141" dst_port="1080" src_ip="196.139.225.113"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.201.242.113"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
5408[label="0.33.17.114;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8282[label="0.33.17.114;4pkt 4fpkt", shape=invtriangle, color=brown];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.33.17.114:80, 131.68.51.70:39202}[25%]&lt;BR/&gt;{0.33.17.114:80, 131.68.51.70:39685}[25%]&lt;BR/&gt;{0.33.17.114:80, 196.139.13.159:1779}[25%]&lt;BR/&gt;{0.33.17.114:80, 196.139.13.159:1794}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39685: (12.5%)&lt;BR/&gt; 39202: (12.5%)&lt;BR/&gt; 1794: (12.5%)&lt;BR/&gt; 1779: (12.5%)&gt;];
}
5408--8282[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.13.159" dst_port="1794" src_ip="0.33.17.114" src_port="80"/>
      <filter dst_ip="196.139.13.159" dst_port="1779" src_ip="0.33.17.114" src_port="80"/>
      <filter dst_ip="131.68.51.70" dst_port="39685" src_ip="0.33.17.114" src_port="80"/>
      <filter dst_ip="131.68.51.70" dst_port="39202" src_ip="0.33.17.114" src_port="80"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
5410[label="5.35.50.114;44pkt 44fpkt", shape=pentagon, color=darkviolet];
8283[label="5.35.50.114;44pkt 44fpkt", shape=invtriangle, color=brown];
10216[label="5.35.50.114;44pkt 44fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.35.50.114:80, 151.251.255.45:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50568: (1.13636%)&lt;BR/&gt; 50567: (1.13636%)&lt;BR/&gt; 50566: (1.13636%)&lt;BR/&gt; 50556: (1.13636%)&gt;];
}
5410--8283[label="1;44pkt 44fpkt"];
5410--10216[label="1;44pkt 44fpkt"];
8283--10216[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.255.45" src_ip="5.35.50.114" src_port="80"/>
    </slice>
    <from sec="1134363818" usec="0"/>
    <to sec="1134363831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
326[label="196.129.156.137;s;9pkt 9fpkt", shape=diamond, color=yellow];
332[label="197.69.91.103;s;3pkt 3fpkt", shape=diamond, color=yellow];
606[label="196.129.156.128;s;5pkt 5fpkt", shape=diamond, color=yellow];
785[label="192.161.211.211;s;984pkt 984fpkt", shape=diamond, color=yellow];
939[label="196.129.158.119;d;10pkt 10fpkt", shape=diamond, color=yellow];
1132[label="192.161.211.211;d;54pkt 54fpkt", shape=diamond, color=yellow];
1262[label="196.129.159.64;s;28pkt 28fpkt", shape=diamond, color=yellow];
1369[label="197.99.217.161;s;351pkt 351fpkt", shape=diamond, color=yellow];
1963[label="196.221.35.240;s;7pkt 7fpkt", shape=diamond, color=yellow];
2087[label="197.4.144.200;s;5pkt 5fpkt", shape=diamond, color=yellow];
2765[label="196.129.158.216;d;58pkt 58fpkt", shape=diamond, color=yellow];
3131[label="217.174.222.85;s;7pkt 7fpkt", shape=diamond, color=yellow];
4086[label="218.173.126.22;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4267[label="0.232.75.35;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4361[label="222.172.89.41;326pkt 326fpkt", shape=pentagon, color=darkviolet];
4672[label="196.129.159.64;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4991[label="217.174.222.85;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5244[label="197.69.91.103;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5574[label="196.129.156.128;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5732[label="196.129.156.137;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6010[label="196.129.154.160;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6031[label="197.99.217.161;364pkt 364fpkt", shape=pentagon, color=darkviolet];
6172[label="67.211.218.170;235pkt 235fpkt", shape=pentagon, color=darkviolet];
6213[label="0.232.72.174;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6501[label="197.4.144.200;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6975[label="196.221.35.240;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7388[label="218.173.126.22;12pkt 12fpkt", shape=invtriangle, color=brown];
7578[label="222.172.89.41;326pkt 326fpkt", shape=invtriangle, color=brown];
8180[label="197.69.91.103;6pkt 6fpkt", shape=invtriangle, color=brown];
8285[label="196.115.102.114;1pkt 1fpkt", shape=invtriangle, color=brown];
8395[label="196.129.156.128;8pkt 8fpkt", shape=invtriangle, color=brown];
8679[label="196.129.154.160;169pkt 169fpkt", shape=invtriangle, color=brown];
8690[label="197.99.217.161;363pkt 363fpkt", shape=invtriangle, color=brown];
8788[label="67.211.218.170;234pkt 234fpkt", shape=invtriangle, color=brown];
8814[label="0.232.72.174;14pkt 14fpkt", shape=invtriangle, color=brown];
9018[label="197.4.144.200;4pkt 4fpkt", shape=invtriangle, color=brown];
9361[label="196.221.35.240;8pkt 8fpkt", shape=invtriangle, color=brown];
9652[label="218.173.126.22;12pkt 12fpkt", shape=invhouse, color=bisque];
9770[label="222.172.89.41;325pkt 325fpkt", shape=invhouse, color=bisque];
10286[label="196.129.156.128;8pkt 8fpkt", shape=invhouse, color=bisque];
10486[label="197.99.217.161;363pkt 363fpkt", shape=invhouse, color=bisque];
10581[label="0.232.72.174;13pkt 13fpkt", shape=invhouse, color=bisque];
10714[label="197.4.144.200;5pkt 5fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.161.211.211:0, *:0}[38.2378%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (61.9862%)&lt;BR/&gt; 33683: (10.6015%)&lt;BR/&gt; 1028: (4.66248%)&lt;BR/&gt; 1029: (3.15881%)&lt;BR/&gt; 1030: (3.00736%)&gt;];
}
326--939[label="0.111111;1pkt 1fpkt"];
326--1132[label="0.111111;1pkt 1fpkt"];
326--5732[label="1;9pkt 9fpkt"];
332--939[label="0.333333;1pkt 1fpkt"];
332--5244[label="1;3pkt 3fpkt"];
332--8180[label="1;3pkt 3fpkt"];
606--939[label="0.2;1pkt 1fpkt"];
606--1132[label="0.2;1pkt 1fpkt"];
606--5574[label="1;5pkt 5fpkt"];
606--8395[label="0.8;4pkt 4fpkt"];
606--10286[label="0.8;4pkt 4fpkt"];
785--939[label="0.1;1pkt 1fpkt"];
785--2627[label="0.00534759;1pkt 1fpkt"];
785--3485[label="0.0111789;11pkt 11fpkt"];
785--3506[label="0.00711382;7pkt 7fpkt"];
785--3557[label="0.00101626;1pkt 1fpkt"];
785--3570[label="0.0111789;11pkt 11fpkt"];
785--3586[label="0.00711382;7pkt 7fpkt"];
785--3637[label="0.00101626;1pkt 1fpkt"];
785--3650[label="0.0111789;11pkt 11fpkt"];
785--3652[label="0.0111789;11pkt 11fpkt"];
785--3663[label="0.00711382;7pkt 7fpkt"];
785--3704[label="0.00101626;1pkt 1fpkt"];
939--1963[label="0.142857;1pkt 1fpkt"];
939--2087[label="0.2;1pkt 1fpkt"];
939--3514[label="0.1;1pkt 1fpkt"];
939--3515[label="0.1;1pkt 1fpkt"];
939--3594[label="0.1;1pkt 1fpkt"];
939--3595[label="0.1;1pkt 1fpkt"];
939--3904[label="0.2;2pkt 2fpkt"];
939--4361[label="0.1;1pkt 1fpkt"];
939--5244[label="0.166667;1pkt 1fpkt"];
939--5574[label="0.111111;1pkt 1fpkt"];
939--5732[label="0.1;1pkt 1fpkt"];
939--6501[label="0.2;1pkt 1fpkt"];
939--6975[label="0.125;1pkt 1fpkt"];
939--7279[label="0.2;2pkt 2fpkt"];
939--7578[label="0.1;1pkt 1fpkt"];
939--8180[label="0.166667;1pkt 1fpkt"];
939--8285[label="1;1pkt 1fpkt"];
939--8395[label="0.125;1pkt 1fpkt"];
939--9361[label="0.125;1pkt 1fpkt"];
939--9770[label="0.1;1pkt 1fpkt"];
939--10286[label="0.125;1pkt 1fpkt"];
939--10714[label="0.2;1pkt 1fpkt"];
1132--1262[label="0.0357143;1pkt 1fpkt"];
1132--1369[label="0.0185185;1pkt 1fpkt"];
1132--2413[label="0.0185185;1pkt 1fpkt"];
1132--2422[label="0.0185185;1pkt 1fpkt"];
1132--3152[label="0.0185185;1pkt 1fpkt"];
1132--3363[label="0.0185185;1pkt 1fpkt"];
1132--3445[label="0.0185185;1pkt 1fpkt"];
1132--4672[label="0.02;1pkt 1fpkt"];
1132--5416[label="0.0185185;1pkt 1fpkt"];
1132--5574[label="0.111111;1pkt 1fpkt"];
1132--5688[label="0.0185185;1pkt 1fpkt"];
1132--5732[label="0.1;1pkt 1fpkt"];
1132--5863[label="0.0185185;1pkt 1fpkt"];
1132--5876[label="0.0185185;1pkt 1fpkt"];
1132--6010[label="0.0185185;1pkt 1fpkt"];
1132--6031[label="0.0185185;1pkt 1fpkt"];
1132--6682[label="0.0185185;1pkt 1fpkt"];
1132--6696[label="0.0185185;1pkt 1fpkt"];
1132--6707[label="0.04;1pkt 1fpkt"];
1132--8286[label="0.0185185;1pkt 1fpkt"];
1132--8395[label="0.125;1pkt 1fpkt"];
1132--8582[label="0.0185185;1pkt 1fpkt"];
1132--8593[label="0.0185185;1pkt 1fpkt"];
1132--8679[label="0.0185185;1pkt 1fpkt"];
1132--8690[label="0.0185185;1pkt 1fpkt"];
1132--9140[label="0.0185185;1pkt 1fpkt"];
1132--9153[label="0.0185185;1pkt 1fpkt"];
1132--9160[label="0.04;1pkt 1fpkt"];
1132--10286[label="0.125;1pkt 1fpkt"];
1132--10421[label="0.0185185;1pkt 1fpkt"];
1132--10486[label="0.0185185;1pkt 1fpkt"];
1132--10795[label="0.0185185;1pkt 1fpkt"];
1132--10805[label="0.0185185;1pkt 1fpkt"];
1132--10810[label="0.0416667;1pkt 1fpkt"];
1262--2818[label="0.0357143;1pkt 1fpkt"];
1262--4672[label="1;28pkt 28fpkt"];
1369--1676[label="0.0045045;1pkt 1fpkt"];
1369--6031[label="1;351pkt 351fpkt"];
1369--8690[label="0.997151;350pkt 350fpkt"];
1369--10486[label="0.997151;350pkt 350fpkt"];
1963--6975[label="1;7pkt 7fpkt"];
1963--9361[label="1;7pkt 7fpkt"];
2087--6501[label="1;5pkt 5fpkt"];
2087--9018[label="1;4pkt 4fpkt"];
2087--10714[label="1;5pkt 5fpkt"];
2765--3131[label="0.571429;4pkt 4fpkt"];
2765--3164[label="0.025641;1pkt 1fpkt"];
2765--3481[label="0.0172414;1pkt 1fpkt"];
2765--3504[label="0.0517241;3pkt 3fpkt"];
2765--3515[label="0.0172414;1pkt 1fpkt"];
2765--3528[label="0.103448;6pkt 6fpkt"];
2765--3565[label="0.0172414;1pkt 1fpkt"];
2765--3585[label="0.0517241;3pkt 3fpkt"];
2765--3595[label="0.0172414;1pkt 1fpkt"];
2765--3608[label="0.103448;6pkt 6fpkt"];
2765--3643[label="0.0172414;1pkt 1fpkt"];
2765--3661[label="0.0517241;3pkt 3fpkt"];
2765--3675[label="0.103448;6pkt 6fpkt"];
2765--3904[label="0.0172414;1pkt 1fpkt"];
2765--4086[label="1;12pkt 12fpkt"];
2765--4267[label="0.0625;1pkt 1fpkt"];
2765--4361[label="0.0344828;2pkt 2fpkt"];
2765--4416[label="0.0172414;1pkt 1fpkt"];
2765--4727[label="0.0172414;1pkt 1fpkt"];
2765--4991[label="0.571429;4pkt 4fpkt"];
2765--5755[label="0.0172414;1pkt 1fpkt"];
2765--5865[label="0.0833333;1pkt 1fpkt"];
2765--5938[label="0.0517241;3pkt 3fpkt"];
2765--6172[label="0.0172414;1pkt 1fpkt"];
2765--6195[label="0.105263;2pkt 2fpkt"];
2765--6202[label="0.0454545;1pkt 1fpkt"];
2765--6213[label="0.0714286;1pkt 1fpkt"];
2765--6626[label="0.0517241;3pkt 3fpkt"];
2765--6694[label="0.0172414;1pkt 1fpkt"];
2765--7279[label="0.0172414;1pkt 1fpkt"];
2765--7388[label="1;12pkt 12fpkt"];
2765--7578[label="0.0344828;2pkt 2fpkt"];
2765--7617[label="0.0172414;1pkt 1fpkt"];
2765--7821[label="0.0172414;1pkt 1fpkt"];
2765--8514[label="0.0172414;1pkt 1fpkt"];
2765--8633[label="0.0517241;3pkt 3fpkt"];
2765--8788[label="0.0172414;1pkt 1fpkt"];
2765--8802[label="0.1;2pkt 2fpkt"];
2765--8814[label="0.0714286;1pkt 1fpkt"];
2765--9097[label="0.0517241;3pkt 3fpkt"];
2765--9151[label="0.0172414;1pkt 1fpkt"];
2765--9652[label="1;12pkt 12fpkt"];
2765--9770[label="0.0344828;2pkt 2fpkt"];
2765--10368[label="0.0172414;1pkt 1fpkt"];
2765--10448[label="0.0517241;3pkt 3fpkt"];
2765--10581[label="0.0769231;1pkt 1fpkt"];
2765--10766[label="0.0517241;3pkt 3fpkt"];
3131--3528[label="0.285714;2pkt 2fpkt"];
3131--3608[label="0.285714;2pkt 2fpkt"];
3131--3675[label="0.285714;2pkt 2fpkt"];
3131--4991[label="1;7pkt 7fpkt"];
4086--7388[label="1;12pkt 12fpkt"];
4086--9652[label="1;12pkt 12fpkt"];
4361--7578[label="1;326pkt 326fpkt"];
4361--9770[label="1;325pkt 325fpkt"];
5244--8180[label="1;6pkt 6fpkt"];
5574--8395[label="1;8pkt 8fpkt"];
5574--10286[label="1;8pkt 8fpkt"];
6010--8679[label="1;168pkt 168fpkt"];
6031--8690[label="1;363pkt 363fpkt"];
6031--10486[label="1;363pkt 363fpkt"];
6172--8788[label="1;234pkt 234fpkt"];
6213--8814[label="1;14pkt 14fpkt"];
6213--10581[label="1;13pkt 13fpkt"];
6501--9018[label="1;4pkt 4fpkt"];
6501--10714[label="1;5pkt 5fpkt"];
6975--9361[label="1;8pkt 8fpkt"];
7388--9652[label="1;12pkt 12fpkt"];
7578--9770[label="1;325pkt 325fpkt"];
8395--10286[label="1;8pkt 8fpkt"];
8690--10486[label="1;363pkt 363fpkt"];
8814--10581[label="1;13pkt 13fpkt"];
9018--10714[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="192.161.211.211"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
5419[label="0.115.183.114;222pkt 222fpkt", shape=pentagon, color=darkviolet];
8288[label="0.115.183.114;221pkt 221fpkt", shape=invtriangle, color=brown];
10218[label="0.115.183.114;221pkt 221fpkt", shape=invhouse, color=bisque];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.115.183.114:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5419--8288[label="1;221pkt 221fpkt"];
5419--10218[label="1;221pkt 221fpkt"];
8288--10218[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="0.115.183.114" src_port="1030"/>
    </slice>
    <from sec="1134364321" usec="0"/>
    <to sec="1134364355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.63.89.116"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
5434[label="131.156.103.116;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8296[label="131.156.103.116;13pkt 13fpkt", shape=invtriangle, color=brown];
10224[label="131.156.103.116;14pkt 14fpkt", shape=invhouse, color=bisque];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.103.116:*, 213.150.85.82:80}[57.1429%]&lt;BR/&gt;{131.156.103.116:*, 0.51.108.166:80}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.25%)&lt;BR/&gt; 33182: (3.75%)&lt;BR/&gt; 33181: (3.75%)&lt;BR/&gt; 33180: (3.75%)&lt;BR/&gt; 33179: (3.75%)&gt;];
}
5434--8296[label="1;13pkt 13fpkt"];
5434--10224[label="1;13pkt 13fpkt"];
8296--10224[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="213.150.85.82" dst_port="80" src_ip="131.156.103.116"/>
      <filter dst_ip="0.51.108.166" dst_port="80" src_ip="131.156.103.116"/>
    </slice>
    <from sec="1134363823" usec="0"/>
    <to sec="1134364454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
984[label="197.218.171.255;d;56pkt 56fpkt", shape=diamond, color=yellow];
985[label="163.185.132.73;s;34pkt 34fpkt", shape=diamond, color=yellow];
4816[label="163.185.132.73;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5436[label="163.185.132.116;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8298[label="163.185.132.116;25pkt 25fpkt", shape=invtriangle, color=brown];
10226[label="163.185.132.116;25pkt 25fpkt", shape=invhouse, color=bisque];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.132.73:*, 197.218.171.255:8080}[52.5424%]&lt;BR/&gt;{163.185.132.116:*, 197.218.171.255:8080}[42.3729%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (48.4925%)&lt;BR/&gt; 1863: (1.00503%)&lt;BR/&gt; 1643: (1.00503%)&lt;BR/&gt; 1642: (1.00503%)&lt;BR/&gt; 1641: (1.00503%)&gt;];
}
984--985[label="0.911765;31pkt 31fpkt"];
984--4816[label="0.911765;31pkt 31fpkt"];
984--5436[label="1;25pkt 25fpkt"];
984--8298[label="1;25pkt 25fpkt"];
984--10226[label="1;25pkt 25fpkt"];
985--1411[label="0.0294118;1pkt 1fpkt"];
985--3488[label="0.0294118;1pkt 1fpkt"];
985--3573[label="0.0294118;1pkt 1fpkt"];
985--3654[label="0.0294118;1pkt 1fpkt"];
985--4816[label="1;34pkt 34fpkt"];
5436--8298[label="1;25pkt 25fpkt"];
5436--10226[label="1;25pkt 25fpkt"];
8298--10226[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="197.218.171.255" dst_port="8080" src_ip="163.185.132.73"/>
      <filter dst_ip="197.218.171.255" dst_port="8080" src_ip="163.185.132.116"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
5437[label="133.158.138.116;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8299[label="133.158.138.116;14pkt 14fpkt", shape=invtriangle, color=brown];
10227[label="133.158.138.116;14pkt 14fpkt", shape=invhouse, color=bisque];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.138.116:*, 0.193.101.168:80}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4286%)&lt;BR/&gt; 0: (7.14286%)&lt;BR/&gt; 2645: (3.57143%)&lt;BR/&gt; 2644: (3.57143%)&lt;BR/&gt; 2643: (3.57143%)&gt;];
}
5437--8299[label="1;14pkt 14fpkt"];
5437--10227[label="1;14pkt 14fpkt"];
8299--10227[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="0.193.101.168" dst_port="80" src_ip="133.158.138.116"/>
    </slice>
    <from sec="1134364061" usec="0"/>
    <to sec="1134364433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
5439[label="166.115.154.116;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8301[label="166.115.154.116;19pkt 19fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.154.116:*, *:25}[57.8947%]&lt;BR/&gt;{166.115.154.116:25, *:*}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63679: (2.63158%)&lt;BR/&gt; 63181: (2.63158%)&lt;BR/&gt; 63180: (2.63158%)&lt;BR/&gt; 63175: (2.63158%)&gt;];
}
5439--8301[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="166.115.154.116" src_port="25"/>
      <filter dst_port="25" src_ip="166.115.154.116"/>
    </slice>
    <from sec="1134363757" usec="0"/>
    <to sec="1134364483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
5444[label="166.115.229.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8305[label="166.115.229.116;2pkt 2fpkt", shape=invtriangle, color=brown];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.229.116:123, 192.106.74.191:123}[50%]&lt;BR/&gt;{166.115.229.116:2441, 200.110.162.197:6665}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (33.3333%)&lt;BR/&gt; 2441: (33.3333%)&lt;BR/&gt; 123: (33.3333%)&gt;];
}
5444--8305[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.110.162.197" dst_port="6665" src_ip="166.115.229.116" src_port="2441"/>
      <filter dst_ip="192.106.74.191" dst_port="123" src_ip="166.115.229.116" src_port="123"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.83.135.117"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.118.180.117"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
5472[label="221.192.157.119;290pkt 290fpkt", shape=pentagon, color=darkviolet];
8322[label="221.192.157.119;290pkt 290fpkt", shape=invtriangle, color=brown];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.192.157.119:0, *:0}[95.8621%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.8621%)&lt;BR/&gt; 80: (1.55172%)&lt;BR/&gt; 135: (0.517241%)&lt;BR/&gt; 4678: (0.172414%)&lt;BR/&gt; 4596: (0.172414%)&gt;];
}
5472--8322[label="1;290pkt 290fpkt"];
</description>
    <slice>
      <filter src_ip="221.192.157.119"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.210.166.119"/>
    </slice>
    <from sec="1134364226" usec="0"/>
    <to sec="1134364280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.227.200.119"/>
    </slice>
    <from sec="1134364132" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.236.7.120"/>
    </slice>
    <from sec="1134364014" usec="0"/>
    <to sec="1134364064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
5482[label="5.35.50.120;50pkt 50fpkt", shape=pentagon, color=darkviolet];
8331[label="5.35.50.120;50pkt 50fpkt", shape=invtriangle, color=brown];
10249[label="5.35.50.120;50pkt 50fpkt", shape=invhouse, color=bisque];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.35.50.120:80, 151.251.255.45:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50642: (1%)&lt;BR/&gt; 50641: (1%)&lt;BR/&gt; 50640: (1%)&lt;BR/&gt; 50639: (1%)&gt;];
}
5482--8331[label="1;50pkt 50fpkt"];
5482--10249[label="1;50pkt 50fpkt"];
8331--10249[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.255.45" src_ip="5.35.50.120" src_port="80"/>
    </slice>
    <from sec="1134363845" usec="0"/>
    <to sec="1134363857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
5491[label="196.139.224.120;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8333[label="196.139.224.120;19pkt 19fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.224.120:*, *:135}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (47.3684%)&lt;BR/&gt; 5555: (2.63158%)&lt;BR/&gt; 3497: (2.63158%)&lt;BR/&gt; 3496: (2.63158%)&lt;BR/&gt; 3495: (2.63158%)&gt;];
}
5491--8333[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="196.139.224.120"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
1836[label="0.24.238.120;s;35pkt 35fpkt", shape=diamond, color=yellow];
5492[label="0.24.238.120;38pkt 38fpkt", shape=pentagon, color=darkviolet];
8334[label="0.24.238.120;39pkt 39fpkt", shape=invtriangle, color=brown];
10251[label="0.24.238.120;38pkt 38fpkt", shape=invhouse, color=bisque];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.24.238.120:80, 196.129.156.217:*}[66.6667%]&lt;BR/&gt;{0.24.238.120:80, 196.129.156.216:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64575: (1.33333%)&lt;BR/&gt; 59300: (1.33333%)&lt;BR/&gt; 58646: (1.33333%)&lt;BR/&gt; 58645: (1.33333%)&gt;];
}
1836--3481[label="0.0285714;1pkt 1fpkt"];
1836--3504[label="0.0285714;1pkt 1fpkt"];
1836--3528[label="0.0285714;1pkt 1fpkt"];
1836--3565[label="0.0285714;1pkt 1fpkt"];
1836--3585[label="0.0285714;1pkt 1fpkt"];
1836--3608[label="0.0285714;1pkt 1fpkt"];
1836--3643[label="0.0285714;1pkt 1fpkt"];
1836--3661[label="0.0285714;1pkt 1fpkt"];
1836--3675[label="0.0285714;1pkt 1fpkt"];
1836--5492[label="0.971429;34pkt 34fpkt"];
1836--8334[label="1;35pkt 35fpkt"];
1836--10251[label="0.971429;34pkt 34fpkt"];
5492--8334[label="1;38pkt 38fpkt"];
5492--10251[label="1;38pkt 38fpkt"];
8334--10251[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="0.24.238.120" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="0.24.238.120" src_port="80"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
5494[label="195.76.71.121;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8336[label="195.76.71.121;18pkt 18fpkt", shape=invtriangle, color=brown];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.71.121:80, 131.156.116.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49356: (2.85714%)&lt;BR/&gt; 49355: (2.85714%)&lt;BR/&gt; 49354: (2.85714%)&lt;BR/&gt; 49353: (2.85714%)&gt;];
}
5494--8336[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="131.156.116.210" src_ip="195.76.71.121" src_port="80"/>
    </slice>
    <from sec="1134363851" usec="0"/>
    <to sec="1134363922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
5508[label="217.74.89.122;126pkt 126fpkt", shape=pentagon, color=darkviolet];
8345[label="217.74.89.122;125pkt 125fpkt", shape=invtriangle, color=brown];
10259[label="217.74.89.122;126pkt 126fpkt", shape=invhouse, color=bisque];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.74.89.122:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63057: (1.59151%)&lt;BR/&gt; 63071: (1.19363%)&lt;BR/&gt; 63112: (0.795756%)&lt;BR/&gt; 63102: (0.795756%)&gt;];
}
5508--8345[label="1;125pkt 125fpkt"];
5508--10259[label="1;126pkt 126fpkt"];
8345--10259[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.74.89.122"/>
    </slice>
    <from sec="1134363974" usec="0"/>
    <to sec="1134363996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
5509[label="5.181.97.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8346[label="5.181.97.122;2pkt 2fpkt", shape=invtriangle, color=brown];
10260[label="5.181.97.122;1pkt 1fpkt", shape=invhouse, color=bisque];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.181.97.122:1253, 131.68.11.6:6348}[50%]&lt;BR/&gt;{5.181.97.122:6346, 131.68.11.6:6348}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6348: (50%)&lt;BR/&gt; 1253: (30%)&lt;BR/&gt; 6346: (20%)&gt;];
}
5509--8346[label="1;2pkt 2fpkt"];
5509--10260[label="1;1pkt 1fpkt"];
8346--10260[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.11.6" dst_port="6348" src_ip="5.181.97.122" src_port="6346"/>
      <filter dst_ip="131.68.11.6" dst_port="6348" src_ip="5.181.97.122" src_port="1253"/>
    </slice>
    <from sec="1134364150" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.92.105.122"/>
    </slice>
    <from sec="1134364072" usec="0"/>
    <to sec="1134364245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
5512[label="69.96.153.122;309pkt 309fpkt", shape=pentagon, color=darkviolet];
8348[label="69.96.153.122;308pkt 308fpkt", shape=invtriangle, color=brown];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.96.153.122:*, *:139}[51.1327%]&lt;BR/&gt;{69.96.153.122:*, *:445}[48.8673%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.5267%)&lt;BR/&gt; 445: (24.4733%)&lt;BR/&gt; 4498: (0.162075%)&lt;BR/&gt; 4497: (0.162075%)&lt;BR/&gt; 4460: (0.162075%)&gt;];
}
5512--8348[label="1;308pkt 308fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="69.96.153.122"/>
      <filter dst_port="445" src_ip="69.96.153.122"/>
    </slice>
    <from sec="1134364035" usec="0"/>
    <to sec="1134364080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
5530[label="66.186.30.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8361[label="66.186.30.124;1pkt 1fpkt", shape=invtriangle, color=brown];
10265[label="66.186.30.124;2pkt 2fpkt", shape=invhouse, color=bisque];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.186.30.124:1062, 151.133.104.80:1434}[50%]&lt;BR/&gt;{66.186.30.124:1062, 163.213.196.254:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1062: (50%)&gt;];
}
5530--8361[label="1;1pkt 1fpkt"];
5530--10265[label="1;1pkt 1fpkt"];
8361--10265[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.213.196.254" dst_port="1434" src_ip="66.186.30.124" src_port="1062"/>
      <filter dst_ip="151.133.104.80" dst_port="1434" src_ip="66.186.30.124" src_port="1062"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.145.37.125"/>
    </slice>
    <from sec="1134363687" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
5538[label="2.10.65.125;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8369[label="2.10.65.125;5pkt 5fpkt", shape=invtriangle, color=brown];
10270[label="2.10.65.125;5pkt 5fpkt", shape=invhouse, color=bisque];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.10.65.125:20, 166.115.134.137:1563}[20%]&lt;BR/&gt;{2.10.65.125:20, 166.115.134.137:1566}[20%]&lt;BR/&gt;{2.10.65.125:21, 166.115.134.137:1482}[20%]&lt;BR/&gt;{2.10.65.125:21, 166.115.134.137:1535}[20%]&lt;BR/&gt;{2.10.65.125:21, 166.115.134.137:1562}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (30%)&lt;BR/&gt; 20: (20%)&lt;BR/&gt; 1566: (10%)&lt;BR/&gt; 1563: (10%)&lt;BR/&gt; 1562: (10%)&gt;];
}
5538--8369[label="1;5pkt 5fpkt"];
5538--10270[label="1;5pkt 5fpkt"];
8369--10270[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="166.115.134.137" dst_port="1562" src_ip="2.10.65.125" src_port="21"/>
      <filter dst_ip="166.115.134.137" dst_port="1535" src_ip="2.10.65.125" src_port="21"/>
      <filter dst_ip="166.115.134.137" dst_port="1482" src_ip="2.10.65.125" src_port="21"/>
      <filter dst_ip="166.115.134.137" dst_port="1566" src_ip="2.10.65.125" src_port="20"/>
      <filter dst_ip="166.115.134.137" dst_port="1563" src_ip="2.10.65.125" src_port="20"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134363802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.131.93.125"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.32.29.126"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
5549[label="216.37.33.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8376[label="216.37.33.126;1pkt 1fpkt", shape=invtriangle, color=brown];
10274[label="216.37.33.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.37.33.126:2172, 163.180.242.168:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2172: (50%)&gt;];
}
5549--8376[label="1;1pkt 1fpkt"];
5549--10274[label="1;1pkt 1fpkt"];
8376--10274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.242.168" dst_port="3127" src_ip="216.37.33.126" src_port="2172"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.92.45.127"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.69.109.127"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.22.185.127"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.60.102.128"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
5572[label="68.248.140.128;243pkt 243fpkt", shape=pentagon, color=darkviolet];
8393[label="68.248.140.128;242pkt 242fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.248.140.128:33047, *:1026}[51.4403%]&lt;BR/&gt;{68.248.140.128:33047, *:1027}[48.5597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33047: (50%)&lt;BR/&gt; 1026: (25.6701%)&lt;BR/&gt; 1027: (24.3299%)&gt;];
}
5572--8393[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="68.248.140.128" src_port="33047"/>
      <filter dst_port="1027" src_ip="68.248.140.128" src_port="33047"/>
    </slice>
    <from sec="1134364396" usec="0"/>
    <to sec="1134364440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
5573[label="133.158.148.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8394[label="133.158.148.128;1pkt 1fpkt", shape=invtriangle, color=brown];
10285[label="133.158.148.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.148.128:110, 7.105.192.62:1586}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1586: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
5573--8394[label="1;1pkt 1fpkt"];
5573--10285[label="1;1pkt 1fpkt"];
8394--10285[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="7.105.192.62" dst_port="1586" src_ip="133.158.148.128" src_port="110"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
5582[label="197.99.208.128;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8400[label="197.99.208.128;44pkt 44fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.208.128:4006, *:*}[79.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4006: (39.6552%)&lt;BR/&gt; 80: (6.89655%)&lt;BR/&gt; 64957: (1.14943%)&lt;BR/&gt; 64089: (1.14943%)&lt;BR/&gt; 63799: (1.14943%)&gt;];
}
5582--8400[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.208.128" src_port="4006"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.817503,2.22729,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
1408[label="131.68.233.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
8413[label="131.68.233.129;1pkt 1fpkt", shape=invtriangle, color=brown];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.233.129:3780, 16.25.184.204:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3780: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1408--8413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.25.184.204" dst_port="554" src_ip="131.68.233.129" src_port="3780"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
5620[label="133.159.170.130;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8424[label="133.159.170.130;4pkt 4fpkt", shape=invtriangle, color=brown];
10309[label="133.159.170.130;4pkt 4fpkt", shape=invhouse, color=bisque];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.170.130:60600, 208.131.7.107:80}[25%]&lt;BR/&gt;{133.159.170.130:61759, 208.131.7.107:80}[25%]&lt;BR/&gt;{133.159.170.130:62759, 208.131.7.107:80}[25%]&lt;BR/&gt;{133.159.170.130:63202, 208.131.7.107:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63202: (12.5%)&lt;BR/&gt; 62759: (12.5%)&lt;BR/&gt; 61759: (12.5%)&lt;BR/&gt; 60600: (12.5%)&gt;];
}
5620--8424[label="1;4pkt 4fpkt"];
5620--10309[label="1;4pkt 4fpkt"];
8424--10309[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.131.7.107" dst_port="80" src_ip="133.159.170.130" src_port="63202"/>
      <filter dst_ip="208.131.7.107" dst_port="80" src_ip="133.159.170.130" src_port="62759"/>
      <filter dst_ip="208.131.7.107" dst_port="80" src_ip="133.159.170.130" src_port="61759"/>
      <filter dst_ip="208.131.7.107" dst_port="80" src_ip="133.159.170.130" src_port="60600"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20567,2.20699,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
100[label="216.10.16.131s;197pkt 197fpkt", shape=rectangle, color=red];
5632[label="216.10.16.131;253pkt 253fpkt", shape=pentagon, color=darkviolet];
8432[label="216.10.16.131;253pkt 253fpkt", shape=invtriangle, color=brown];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.10.16.131:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50625: (0.426743%)&lt;BR/&gt; 50618: (0.426743%)&lt;BR/&gt; 50461: (0.426743%)&lt;BR/&gt; 50455: (0.426743%)&gt;];
}
100--5632[label="0.994924;196pkt 196fpkt"];
100--8432[label="0.994924;196pkt 196fpkt"];
5632--8432[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.10.16.131"/>
    </slice>
    <from sec="1134364436" usec="0"/>
    <to sec="1134364450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.88.160.131"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
5646[label="215.200.68.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8441[label="215.200.68.132;1pkt 1fpkt", shape=invtriangle, color=brown];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.200.68.132:63271, 151.251.47.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5646--8441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="215.200.68.132" src_port="63271"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
5654[label="220.108.212.132;427pkt 427fpkt", shape=pentagon, color=darkviolet];
8446[label="220.108.212.132;426pkt 426fpkt", shape=invtriangle, color=brown];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.108.212.132:58468, *:*}[50.3513%]&lt;BR/&gt;{220.108.212.132:59811, *:*}[49.6487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58468: (25.1465%)&lt;BR/&gt; 59811: (24.8535%)&lt;BR/&gt; 1028: (7.15123%)&lt;BR/&gt; 1029: (6.6823%)&lt;BR/&gt; 1033: (6.56506%)&gt;];
}
5654--8446[label="1;426pkt 426fpkt"];
</description>
    <slice>
      <filter src_ip="220.108.212.132" src_port="58468"/>
      <filter src_ip="220.108.212.132" src_port="59811"/>
    </slice>
    <from sec="1134364217" usec="0"/>
    <to sec="1134364443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
5667[label="196.129.162.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8454[label="196.129.162.133;2pkt 2fpkt", shape=invtriangle, color=brown];
10329[label="196.129.162.133;2pkt 2fpkt", shape=invhouse, color=bisque];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.162.133:25, 216.215.89.7:35173}[50%]&lt;BR/&gt;{196.129.162.133:45396, 3.48.99.53:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 45396: (25%)&lt;BR/&gt; 35173: (25%)&gt;];
}
5667--8454[label="1;2pkt 2fpkt"];
5667--10329[label="1;2pkt 2fpkt"];
8454--10329[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="3.48.99.53" dst_port="25" src_ip="196.129.162.133" src_port="45396"/>
      <filter dst_ip="216.215.89.7" dst_port="35173" src_ip="196.129.162.133" src_port="25"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
1964[label="196.40.230.2;d;442pkt 442fpkt", shape=diamond, color=yellow];
3741[label="131.82.173.1;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5668[label="131.82.173.133;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5878[label="131.82.173.148;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6906[label="131.82.173.233;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7162[label="131.82.173.1;11pkt 11fpkt", shape=invtriangle, color=brown];
8455[label="131.82.173.133;11pkt 11fpkt", shape=invtriangle, color=brown];
8595[label="131.82.173.148;11pkt 11fpkt", shape=invtriangle, color=brown];
9309[label="131.82.173.233;12pkt 12fpkt", shape=invtriangle, color=brown];
9504[label="131.82.173.1;11pkt 11fpkt", shape=invhouse, color=bisque];
10330[label="131.82.173.133;11pkt 11fpkt", shape=invhouse, color=bisque];
10423[label="131.82.173.148;11pkt 11fpkt", shape=invhouse, color=bisque];
10908[label="131.82.173.233;12pkt 12fpkt", shape=invhouse, color=bisque];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 196.40.230.2:0}[57.6923%]&lt;BR/&gt;{*:42, 196.40.230.2:*}[30.9955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (44.6181%)&lt;BR/&gt; 42: (21.2674%)&lt;BR/&gt; 80: (3.99306%)&lt;BR/&gt; 135: (2.43056%)&lt;BR/&gt; 1814: (0.347222%)&gt;];
}
1964--3481[label="0.00904977;4pkt 4fpkt"];
1964--3504[label="0.00904977;4pkt 4fpkt"];
1964--3528[label="0.00678733;3pkt 3fpkt"];
1964--3565[label="0.00904977;4pkt 4fpkt"];
1964--3585[label="0.00904977;4pkt 4fpkt"];
1964--3608[label="0.00678733;3pkt 3fpkt"];
1964--3643[label="0.00904977;4pkt 4fpkt"];
1964--3661[label="0.00904977;4pkt 4fpkt"];
1964--3675[label="0.00678733;3pkt 3fpkt"];
1964--3741[label="1;11pkt 11fpkt"];
1964--5668[label="1;11pkt 11fpkt"];
1964--5878[label="1;11pkt 11fpkt"];
1964--6906[label="1;11pkt 11fpkt"];
1964--7162[label="1;11pkt 11fpkt"];
1964--8455[label="1;11pkt 11fpkt"];
1964--8595[label="1;11pkt 11fpkt"];
1964--9309[label="1;12pkt 12fpkt"];
1964--9504[label="1;11pkt 11fpkt"];
1964--10330[label="1;11pkt 11fpkt"];
1964--10423[label="1;11pkt 11fpkt"];
1964--10908[label="1;12pkt 12fpkt"];
3741--7162[label="1;11pkt 11fpkt"];
3741--9504[label="1;11pkt 11fpkt"];
5668--8455[label="1;11pkt 11fpkt"];
5668--10330[label="1;11pkt 11fpkt"];
5878--8595[label="1;11pkt 11fpkt"];
5878--10423[label="1;11pkt 11fpkt"];
6906--9309[label="1;11pkt 11fpkt"];
6906--10908[label="1;11pkt 11fpkt"];
7162--9504[label="1;11pkt 11fpkt"];
8455--10330[label="1;11pkt 11fpkt"];
8595--10423[label="1;11pkt 11fpkt"];
9309--10908[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.40.230.2" src_port="42"/>
      <filter dst_ip="196.40.230.2"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,502,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
386[label="67.114.245.254;d;222pkt 222fpkt", shape=diamond, color=yellow];
1017[label="196.139.235.132;s;111pkt 111fpkt", shape=diamond, color=yellow];
1146[label="196.139.12.31;s;88pkt 88fpkt", shape=diamond, color=yellow];
5660[label="196.139.235.132;113pkt 113fpkt", shape=pentagon, color=darkviolet];
5670[label="196.139.235.133;23pkt 23fpkt", shape=pentagon, color=darkviolet];
8451[label="196.139.235.132;113pkt 113fpkt", shape=invtriangle, color=brown];
8457[label="196.139.235.133;24pkt 24fpkt", shape=invtriangle, color=brown];
10332[label="196.139.235.133;24pkt 24fpkt", shape=invhouse, color=bisque];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.235.132:22, 67.114.245.254:*}[49.115%]&lt;BR/&gt;{196.139.12.31:22, 67.114.245.254:*}[38.4956%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.5125%)&lt;BR/&gt; 0: (0.835655%)&lt;BR/&gt; 60937: (0.278552%)&lt;BR/&gt; 60888: (0.278552%)&lt;BR/&gt; 60469: (0.278552%)&gt;];
}
386--1017[label="1;111pkt 111fpkt"];
386--1146[label="0.988636;87pkt 87fpkt"];
386--5660[label="0.982301;111pkt 111fpkt"];
386--5670[label="1;23pkt 23fpkt"];
386--8451[label="0.982301;111pkt 111fpkt"];
386--8457[label="0.958333;23pkt 23fpkt"];
386--10332[label="0.958333;23pkt 23fpkt"];
1017--5660[label="1;111pkt 111fpkt"];
1017--8451[label="1;111pkt 111fpkt"];
1146--3182[label="0.0113636;1pkt 1fpkt"];
1146--3457[label="0.0113636;1pkt 1fpkt"];
5660--8451[label="1;113pkt 113fpkt"];
5670--8457[label="1;23pkt 23fpkt"];
5670--10332[label="1;23pkt 23fpkt"];
8457--10332[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="67.114.245.254" src_ip="196.139.235.132" src_port="22"/>
      <filter dst_ip="67.114.245.254" src_ip="196.139.12.31" src_port="22"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.70.169.134"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.169.106.135"/>
    </slice>
    <from sec="1134364401" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
5692[label="197.99.193.135;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8472[label="197.99.193.135;12pkt 12fpkt", shape=invtriangle, color=brown];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.193.135:80, 3.192.77.62:*}[38.4615%]&lt;BR/&gt;{197.99.193.135:80, 2.183.133.214:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52621: (4%)&lt;BR/&gt; 52453: (4%)&lt;BR/&gt; 52394: (4%)&lt;BR/&gt; 52331: (4%)&gt;];
}
5692--8472[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="2.183.133.214" src_ip="197.99.193.135" src_port="80"/>
      <filter dst_ip="3.192.77.62" src_ip="197.99.193.135" src_port="80"/>
    </slice>
    <from sec="1134363822" usec="0"/>
    <to sec="1134364436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.164.11.136"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
5703[label="201.173.99.136;101pkt 101fpkt", shape=pentagon, color=darkviolet];
8478[label="201.173.99.136;101pkt 101fpkt", shape=invtriangle, color=brown];
10348[label="201.173.99.136;101pkt 101fpkt", shape=invhouse, color=bisque];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.173.99.136:11451, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11451: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5703--8478[label="1;101pkt 101fpkt"];
5703--10348[label="1;101pkt 101fpkt"];
8478--10348[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.173.99.136" src_port="11451"/>
    </slice>
    <from sec="1134364064" usec="0"/>
    <to sec="1134364080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40447,2.12186,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
71[label="131.68.23.52s;1pkt 1fpkt", shape=rectangle, color=red];
2560[label="133.158.179.162;s;78pkt 78fpkt", shape=diamond, color=yellow];
6049[label="133.158.179.162;83pkt 83fpkt", shape=pentagon, color=darkviolet];
8703[label="133.158.179.162;83pkt 83fpkt", shape=invtriangle, color=brown];
10498[label="133.158.179.162;83pkt 83fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.179.162:*, 208.143.141.84:80}[77.1084%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1297: (0.762195%)&lt;BR/&gt; 1366: (0.609756%)&lt;BR/&gt; 1365: (0.609756%)&lt;BR/&gt; 1364: (0.609756%)&gt;];
}
71--2560[label="1;1pkt 1fpkt"];
71--6049[label="1;1pkt 1fpkt"];
71--8703[label="1;1pkt 1fpkt"];
71--10498[label="1;1pkt 1fpkt"];
2560--3063[label="0.0512821;4pkt 4fpkt"];
2560--3520[label="0.0384615;3pkt 3fpkt"];
2560--3600[label="0.0384615;3pkt 3fpkt"];
2560--3668[label="0.0384615;3pkt 3fpkt"];
2560--6049[label="1;78pkt 78fpkt"];
2560--8703[label="1;78pkt 78fpkt"];
2560--10498[label="1;78pkt 78fpkt"];
6049--8703[label="1;83pkt 83fpkt"];
6049--10498[label="1;83pkt 83fpkt"];
8703--10498[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="208.143.141.84" dst_port="80" src_ip="133.158.179.162"/>
    </slice>
    <from sec="1134363665" usec="0"/>
    <to sec="1134364297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
495[label="131.68.222.22;d;72pkt 72fpkt", shape=diamond, color=yellow];
532[label="131.68.11.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
693[label="67.194.94.55;s;7752pkt 7752fpkt", shape=diamond, color=yellow];
914[label="0.21.90.171;s;8pkt 8fpkt", shape=diamond, color=yellow];
1287[label="3.218.44.55;s;10pkt 10fpkt", shape=diamond, color=yellow];
1337[label="133.158.129.35;d;4pkt 4fpkt", shape=diamond, color=yellow];
4555[label="3.218.44.55;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4559[label="67.194.94.55;9522pkt 9522fpkt", shape=pentagon, color=darkviolet];
6180[label="0.21.90.171;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6310[label="222.40.118.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6358[label="23.136.158.186;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7712[label="67.194.94.55;9522pkt 9522fpkt", shape=invtriangle, color=brown];
8793[label="0.21.90.171;8pkt 8fpkt", shape=invtriangle, color=brown];
8916[label="23.136.158.186;4pkt 4fpkt", shape=invtriangle, color=brown];
9858[label="67.194.94.55;9521pkt 9521fpkt", shape=invhouse, color=bisque];
10649[label="23.136.158.186;3pkt 3fpkt", shape=invhouse, color=bisque];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.194.94.55:7607, *:*}[44.4364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7607: (22.3601%)&lt;BR/&gt; 11334: (3.15688%)&lt;BR/&gt; 65347: (3.15003%)&lt;BR/&gt; 13459: (3.12123%)&lt;BR/&gt; 22678: (3.04443%)&gt;];
}
495--693[label="0.0277778;2pkt 2fpkt"];
495--914[label="1;8pkt 8fpkt"];
495--3505[label="0.0833333;6pkt 6fpkt"];
495--3510[label="0.0555556;4pkt 4fpkt"];
495--3520[label="0.0277778;2pkt 2fpkt"];
495--3556[label="0.0694444;5pkt 5fpkt"];
495--3591[label="0.0555556;4pkt 4fpkt"];
495--3600[label="0.0277778;2pkt 2fpkt"];
495--3636[label="0.0694444;5pkt 5fpkt"];
495--3648[label="0.138889;10pkt 10fpkt"];
495--3662[label="0.0833333;6pkt 6fpkt"];
495--3668[label="0.0277778;2pkt 2fpkt"];
495--3703[label="0.0694444;5pkt 5fpkt"];
495--4235[label="0.117647;2pkt 2fpkt"];
495--4559[label="0.0277778;2pkt 2fpkt"];
495--4680[label="0.166667;1pkt 1fpkt"];
495--6180[label="1;8pkt 8fpkt"];
495--6184[label="0.03125;1pkt 1fpkt"];
495--6260[label="0.133333;2pkt 2fpkt"];
495--6310[label="0.25;1pkt 1fpkt"];
495--6358[label="0.25;1pkt 1fpkt"];
495--6407[label="0.111111;1pkt 1fpkt"];
495--7127[label="0.0454545;2pkt 2fpkt"];
495--7482[label="0.125;2pkt 2fpkt"];
495--7712[label="0.0277778;2pkt 2fpkt"];
495--8793[label="1;8pkt 8fpkt"];
495--8848[label="0.133333;2pkt 2fpkt"];
495--8916[label="0.25;1pkt 1fpkt"];
495--8953[label="0.111111;1pkt 1fpkt"];
495--9474[label="0.0465116;2pkt 2fpkt"];
495--9858[label="0.0277778;2pkt 2fpkt"];
532--1287[label="1;1pkt 1fpkt"];
532--4555[label="1;1pkt 1fpkt"];
693--1337[label="0.25;1pkt 1fpkt"];
693--2697[label="0.0041841;1pkt 1fpkt"];
693--4559[label="1;7752pkt 7752fpkt"];
693--7712[label="1;7752pkt 7752fpkt"];
693--9858[label="1;7752pkt 7752fpkt"];
914--3510[label="0.125;1pkt 1fpkt"];
914--3556[label="0.125;1pkt 1fpkt"];
914--3591[label="0.125;1pkt 1fpkt"];
914--3636[label="0.125;1pkt 1fpkt"];
914--3648[label="0.125;1pkt 1fpkt"];
914--3703[label="0.125;1pkt 1fpkt"];
914--6180[label="1;8pkt 8fpkt"];
914--8793[label="1;8pkt 8fpkt"];
1287--1337[label="0.75;3pkt 3fpkt"];
1287--3377[label="0.1;1pkt 1fpkt"];
1287--3481[label="0.1;1pkt 1fpkt"];
1287--3504[label="0.3;3pkt 3fpkt"];
1287--3565[label="0.1;1pkt 1fpkt"];
1287--3585[label="0.3;3pkt 3fpkt"];
1287--3643[label="0.1;1pkt 1fpkt"];
1287--3661[label="0.3;3pkt 3fpkt"];
1287--4555[label="0.9;9pkt 9fpkt"];
1337--4555[label="0.5;2pkt 2fpkt"];
1337--4559[label="0.25;1pkt 1fpkt"];
1337--7712[label="0.25;1pkt 1fpkt"];
1337--9858[label="0.25;1pkt 1fpkt"];
4559--7712[label="1;9522pkt 9522fpkt"];
4559--9858[label="1;9521pkt 9521fpkt"];
6180--8793[label="1;8pkt 8fpkt"];
6358--8916[label="1;4pkt 4fpkt"];
6358--10649[label="1;3pkt 3fpkt"];
7712--9858[label="1;9521pkt 9521fpkt"];
8916--10649[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="67.194.94.55" src_port="7607"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
5722[label="66.189.45.137;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8491[label="66.189.45.137;30pkt 30fpkt", shape=invtriangle, color=brown];
10354[label="66.189.45.137;29pkt 29fpkt", shape=invhouse, color=bisque];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.189.45.137:*, 133.158.112.79:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4973: (1.70455%)&lt;BR/&gt; 4850: (1.70455%)&lt;BR/&gt; 4737: (1.70455%)&lt;BR/&gt; 4638: (1.70455%)&gt;];
}
5722--8491[label="1;29pkt 29fpkt"];
5722--10354[label="1;29pkt 29fpkt"];
8491--10354[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.112.79" dst_port="80" src_ip="66.189.45.137"/>
    </slice>
    <from sec="1134363880" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.90.74.137"/>
    </slice>
    <from sec="1134364176" usec="0"/>
    <to sec="1134364187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
5727[label="133.158.103.137;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8495[label="133.158.103.137;6pkt 6fpkt", shape=invtriangle, color=brown];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.103.137:*, 193.91.1.35:80}[66.6667%]&lt;BR/&gt;{133.158.103.137:*, 193.91.1.42:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2568: (8.33333%)&lt;BR/&gt; 2567: (8.33333%)&lt;BR/&gt; 2563: (8.33333%)&lt;BR/&gt; 2562: (8.33333%)&gt;];
}
5727--8495[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="193.91.1.35" dst_port="80" src_ip="133.158.103.137"/>
      <filter dst_ip="193.91.1.42" dst_port="80" src_ip="133.158.103.137"/>
    </slice>
    <from sec="1134364109" usec="0"/>
    <to sec="1134364179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
5740[label="198.104.7.138;139pkt 139fpkt", shape=pentagon, color=darkviolet];
8506[label="198.104.7.138;139pkt 139fpkt", shape=invtriangle, color=brown];
10361[label="198.104.7.138;140pkt 140fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.104.7.138:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65283: (0.358852%)&lt;BR/&gt; 65281: (0.358852%)&lt;BR/&gt; 65279: (0.358852%)&lt;BR/&gt; 65277: (0.358852%)&gt;];
}
5740--8506[label="1;139pkt 139fpkt"];
5740--10361[label="1;139pkt 139fpkt"];
8506--10361[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.104.7.138"/>
    </slice>
    <from sec="1134364093" usec="0"/>
    <to sec="1134364114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
5749[label="6.30.145.138;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8510[label="6.30.145.138;8pkt 8fpkt", shape=invtriangle, color=brown];
10364[label="6.30.145.138;8pkt 8fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.30.145.138:80, 196.129.156.217:*}[55.5556%]&lt;BR/&gt;{6.30.145.138:80, 196.129.156.216:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59408: (6%)&lt;BR/&gt; 59113: (6%)&lt;BR/&gt; 58657: (6%)&lt;BR/&gt; 3350: (6%)&gt;];
}
5749--8510[label="1;8pkt 8fpkt"];
5749--10364[label="1;8pkt 8fpkt"];
8510--10364[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="6.30.145.138" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="6.30.145.138" src_port="80"/>
    </slice>
    <from sec="1134364017" usec="0"/>
    <to sec="1134364210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
5765[label="220.149.233.139;104pkt 104fpkt", shape=pentagon, color=darkviolet];
8521[label="220.149.233.139;103pkt 103fpkt", shape=invtriangle, color=brown];
10373[label="220.149.233.139;103pkt 103fpkt", shape=invhouse, color=bisque];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.149.233.139:38834, *:1026}[63.4615%]&lt;BR/&gt;{220.149.233.139:38834, *:1027}[36.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38834: (50%)&lt;BR/&gt; 1026: (31.6129%)&lt;BR/&gt; 1027: (18.3871%)&gt;];
}
5765--8521[label="1;103pkt 103fpkt"];
5765--10373[label="1;103pkt 103fpkt"];
8521--10373[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.149.233.139" src_port="38834"/>
      <filter dst_port="1027" src_ip="220.149.233.139" src_port="38834"/>
    </slice>
    <from sec="1134364495" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
5780[label="0.217.56.141;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8528[label="0.217.56.141;23pkt 23fpkt", shape=invtriangle, color=brown];
10378[label="0.217.56.141;24pkt 24fpkt", shape=invhouse, color=bisque];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.217.56.141:80, 133.158.9.0:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1657: (2.11268%)&lt;BR/&gt; 1656: (2.11268%)&lt;BR/&gt; 1655: (2.11268%)&lt;BR/&gt; 1654: (2.11268%)&gt;];
}
5780--8528[label="1;23pkt 23fpkt"];
5780--10378[label="1;24pkt 24fpkt"];
8528--10378[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.9.0" src_ip="0.217.56.141" src_port="80"/>
    </slice>
    <from sec="1134363650" usec="0"/>
    <to sec="1134364381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
5782[label="131.156.108.141;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8530[label="131.156.108.141;57pkt 57fpkt", shape=invtriangle, color=brown];
10380[label="131.156.108.141;58pkt 58fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.108.141:*, 7.212.202.177:80}[31.0345%]&lt;BR/&gt;{131.156.108.141:*, 7.212.202.182:80}[31.0345%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2815: (0.872093%)&lt;BR/&gt; 2814: (0.872093%)&lt;BR/&gt; 2813: (0.872093%)&lt;BR/&gt; 2812: (0.872093%)&gt;];
}
5782--8530[label="1;57pkt 57fpkt"];
5782--10380[label="1;57pkt 57fpkt"];
8530--10380[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="7.212.202.182" dst_port="80" src_ip="131.156.108.141"/>
      <filter dst_ip="7.212.202.177" dst_port="80" src_ip="131.156.108.141"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.154.128.141"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
5789[label="166.115.234.141;263pkt 263fpkt", shape=pentagon, color=darkviolet];
8533[label="166.115.234.141;263pkt 263fpkt", shape=invtriangle, color=brown];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.234.141:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.6122%)&lt;BR/&gt; 32768: (1.90114%)&lt;BR/&gt; 9253: (1.71103%)&lt;BR/&gt; 33701: (1.14068%)&lt;BR/&gt; 32769: (0.95057%)&gt;];
}
5789--8533[label="1;263pkt 263fpkt"];
</description>
    <slice>
      <filter src_ip="166.115.234.141" src_port="53"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
1837[label="133.159.96.142;s;99pkt 99fpkt", shape=diamond, color=yellow];
2271[label="202.117.161.234;d;49pkt 49fpkt", shape=diamond, color=yellow];
5794[label="133.159.96.142;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8537[label="133.159.96.142;2pkt 2fpkt", shape=invtriangle, color=brown];
10383[label="133.159.96.142;2pkt 2fpkt", shape=invhouse, color=bisque];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.96.142:*, 202.117.161.234:80}[48.5149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7419%)&lt;BR/&gt; 1230: (1.29032%)&lt;BR/&gt; 40818: (0.967742%)&lt;BR/&gt; 37092: (0.967742%)&lt;BR/&gt; 119: (0.967742%)&gt;];
}
1837--2271[label="1;49pkt 49fpkt"];
1837--3505[label="0.030303;3pkt 3fpkt"];
1837--3510[label="0.010101;1pkt 1fpkt"];
1837--3520[label="0.020202;2pkt 2fpkt"];
1837--3556[label="0.020202;2pkt 2fpkt"];
1837--3591[label="0.010101;1pkt 1fpkt"];
1837--3600[label="0.020202;2pkt 2fpkt"];
1837--3636[label="0.020202;2pkt 2fpkt"];
1837--3648[label="0.010101;1pkt 1fpkt"];
1837--3662[label="0.030303;3pkt 3fpkt"];
1837--3668[label="0.020202;2pkt 2fpkt"];
1837--3703[label="0.020202;2pkt 2fpkt"];
1837--5794[label="0.333333;1pkt 1fpkt"];
5794--8537[label="1;2pkt 2fpkt"];
5794--10383[label="1;2pkt 2fpkt"];
8537--10383[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="202.117.161.234" dst_port="80" src_ip="133.159.96.142"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.80.97.142"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
5800[label="197.161.182.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8540[label="197.161.182.142;1pkt 1fpkt", shape=invtriangle, color=brown];
10384[label="197.161.182.142;1pkt 1fpkt", shape=invhouse, color=bisque];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.161.182.142:80, 196.129.156.216:54190}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54190: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5800--8540[label="1;1pkt 1fpkt"];
5800--10384[label="1;1pkt 1fpkt"];
8540--10384[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" dst_port="54190" src_ip="197.161.182.142" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
5810[label="192.106.194.143;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8546[label="192.106.194.143;5pkt 5fpkt", shape=invtriangle, color=brown];
10389[label="192.106.194.143;5pkt 5fpkt", shape=invhouse, color=bisque];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.194.143:1863, 151.251.26.130:1090}[20%]&lt;BR/&gt;{192.106.194.143:1863, 151.251.133.178:3394}[20%]&lt;BR/&gt;{192.106.194.143:1863, 151.251.26.217:2854}[20%]&lt;BR/&gt;{192.106.194.143:1863, 151.251.28.128:4025}[20%]&lt;BR/&gt;{192.106.194.143:1863, 151.251.28.128:4029}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4029: (10.7143%)&lt;BR/&gt; 3394: (10.7143%)&lt;BR/&gt; 2854: (10.7143%)&lt;BR/&gt; 1090: (10.7143%)&gt;];
}
5810--8546[label="1;4pkt 4fpkt"];
5810--10389[label="1;4pkt 4fpkt"];
8546--10389[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.28.128" dst_port="4029" src_ip="192.106.194.143" src_port="1863"/>
      <filter dst_ip="151.251.28.128" dst_port="4025" src_ip="192.106.194.143" src_port="1863"/>
      <filter dst_ip="151.251.26.217" dst_port="2854" src_ip="192.106.194.143" src_port="1863"/>
      <filter dst_ip="151.251.133.178" dst_port="3394" src_ip="192.106.194.143" src_port="1863"/>
      <filter dst_ip="151.251.26.130" dst_port="1090" src_ip="192.106.194.143" src_port="1863"/>
    </slice>
    <from sec="1134363668" usec="0"/>
    <to sec="1134364272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
5811[label="193.1.229.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8547[label="193.1.229.143;2pkt 2fpkt", shape=invtriangle, color=brown];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.229.143:80, 196.129.156.217:2530}[50%]&lt;BR/&gt;{193.1.229.143:80, 196.129.156.217:4163}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4163: (25%)&lt;BR/&gt; 2530: (25%)&gt;];
}
5811--8547[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="4163" src_ip="193.1.229.143" src_port="80"/>
      <filter dst_ip="196.129.156.217" dst_port="2530" src_ip="193.1.229.143" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
5819[label="133.158.141.144;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8553[label="133.158.141.144;20pkt 20fpkt", shape=invtriangle, color=brown];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.144:*, 2.3.2.133:80}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8718%)&lt;BR/&gt; 443: (5.12821%)&lt;BR/&gt; 2515: (2.5641%)&lt;BR/&gt; 2514: (2.5641%)&lt;BR/&gt; 2513: (2.5641%)&gt;];
}
5819--8553[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="2.3.2.133" dst_port="80" src_ip="133.158.141.144"/>
    </slice>
    <from sec="1134363820" usec="0"/>
    <to sec="1134364427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
5822[label="197.99.219.144;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8555[label="197.99.219.144;27pkt 27fpkt", shape=invtriangle, color=brown];
10394[label="197.99.219.144;26pkt 26fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.219.144:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5822--8555[label="1;26pkt 26fpkt"];
5822--10394[label="1;26pkt 26fpkt"];
8555--10394[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.219.144"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
5827[label="222.159.77.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8558[label="222.159.77.145;2pkt 2fpkt", shape=invtriangle, color=brown];
10395[label="222.159.77.145;3pkt 3fpkt", shape=invhouse, color=bisque];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.159.77.145:21, 131.222.151.54:45558}[33.3333%]&lt;BR/&gt;{222.159.77.145:23, 160.137.247.80:19962}[33.3333%]&lt;BR/&gt;{222.159.77.145:21, 131.156.243.245:37771}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (42.8571%)&lt;BR/&gt; 45558: (21.4286%)&lt;BR/&gt; 37771: (21.4286%)&lt;BR/&gt; 19962: (7.14286%)&lt;BR/&gt; 23: (7.14286%)&gt;];
}
5827--8558[label="1;2pkt 2fpkt"];
5827--10395[label="1;2pkt 2fpkt"];
8558--10395[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.156.243.245" dst_port="37771" src_ip="222.159.77.145" src_port="21"/>
      <filter dst_ip="160.137.247.80" dst_port="19962" src_ip="222.159.77.145" src_port="23"/>
      <filter dst_ip="131.222.151.54" dst_port="45558" src_ip="222.159.77.145" src_port="21"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
5831[label="133.158.166.145;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8560[label="133.158.166.145;13pkt 13fpkt", shape=invtriangle, color=brown];
10397[label="133.158.166.145;14pkt 14fpkt", shape=invhouse, color=bisque];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.166.145:*, 192.106.4.99:80}[35.7143%]&lt;BR/&gt;{133.158.166.145:*, 192.106.28.158:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1083: (3.75%)&lt;BR/&gt; 1081: (3.75%)&lt;BR/&gt; 1079: (3.75%)&lt;BR/&gt; 1078: (3.75%)&gt;];
}
5831--8560[label="1;13pkt 13fpkt"];
5831--10397[label="1;13pkt 13fpkt"];
8560--10397[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="192.106.4.99" dst_port="80" src_ip="133.158.166.145"/>
      <filter dst_ip="192.106.28.158" dst_port="80" src_ip="133.158.166.145"/>
    </slice>
    <from sec="1134364209" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.21.146"/>
    </slice>
    <from sec="1134363670" usec="0"/>
    <to sec="1134363785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.167.86.146"/>
    </slice>
    <from sec="1134363622" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.108.114.146"/>
    </slice>
    <from sec="1134364279" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.144.116.146"/>
    </slice>
    <from sec="1134364021" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
4315[label="220.99.221.37;134pkt 134fpkt", shape=pentagon, color=darkviolet];
7544[label="220.99.221.37;133pkt 133fpkt", shape=invtriangle, color=brown];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.99.221.37:*, *:1026}[50.7463%]&lt;BR/&gt;{220.99.221.37:*, *:1027}[49.2537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (25.2809%)&lt;BR/&gt; 1027: (24.7191%)&lt;BR/&gt; 50307: (1.49813%)&lt;BR/&gt; 50342: (1.1236%)&lt;BR/&gt; 50336: (1.1236%)&gt;];
}
4315--7544[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.99.221.37"/>
      <filter dst_port="1027" src_ip="220.99.221.37"/>
    </slice>
    <from sec="1134363821" usec="0"/>
    <to sec="1134363822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
5852[label="21.186.219.146;215pkt 215fpkt", shape=pentagon, color=darkviolet];
8573[label="21.186.219.146;215pkt 215fpkt", shape=invtriangle, color=brown];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.186.219.146:0, *:0}[97.2093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2093%)&lt;BR/&gt; 1433: (1.39535%)&lt;BR/&gt; 28337: (0.232558%)&lt;BR/&gt; 28205: (0.232558%)&lt;BR/&gt; 27670: (0.232558%)&gt;];
}
5852--8573[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter src_ip="21.186.219.146"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
5853[label="17.101.252.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8574[label="17.101.252.146;4pkt 4fpkt", shape=invtriangle, color=brown];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.101.252.146:80, 133.158.21.98:2412}[25%]&lt;BR/&gt;{17.101.252.146:80, 133.158.21.98:2414}[25%]&lt;BR/&gt;{17.101.252.146:80, 133.158.21.98:2415}[25%]&lt;BR/&gt;{17.101.252.146:80, 133.158.21.98:2417}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2417: (12.5%)&lt;BR/&gt; 2415: (12.5%)&lt;BR/&gt; 2414: (12.5%)&lt;BR/&gt; 2412: (12.5%)&gt;];
}
5853--8574[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.21.98" dst_port="2417" src_ip="17.101.252.146" src_port="80"/>
      <filter dst_ip="133.158.21.98" dst_port="2415" src_ip="17.101.252.146" src_port="80"/>
      <filter dst_ip="133.158.21.98" dst_port="2414" src_ip="17.101.252.146" src_port="80"/>
      <filter dst_ip="133.158.21.98" dst_port="2412" src_ip="17.101.252.146" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
5862[label="133.158.141.147;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8581[label="133.158.141.147;2pkt 2fpkt", shape=invtriangle, color=brown];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.147:3801, 0.68.117.9:80}[50%]&lt;BR/&gt;{133.158.141.147:3807, 0.68.117.9:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3807: (25%)&lt;BR/&gt; 3801: (25%)&gt;];
}
5862--8581[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="0.68.117.9" dst_port="80" src_ip="133.158.141.147" src_port="3807"/>
      <filter dst_ip="0.68.117.9" dst_port="80" src_ip="133.158.141.147" src_port="3801"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
5864[label="133.158.170.147;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8583[label="133.158.170.147;21pkt 21fpkt", shape=invtriangle, color=brown];
10414[label="133.158.170.147;21pkt 21fpkt", shape=invhouse, color=bisque];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.170.147:*, 215.14.108.22:80}[80.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2311: (2.38095%)&lt;BR/&gt; 2300: (2.38095%)&lt;BR/&gt; 2299: (2.38095%)&lt;BR/&gt; 2298: (2.38095%)&gt;];
}
5864--8583[label="1;21pkt 21fpkt"];
5864--10414[label="1;21pkt 21fpkt"];
8583--10414[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.108.22" dst_port="80" src_ip="133.158.170.147"/>
    </slice>
    <from sec="1134364100" usec="0"/>
    <to sec="1134364431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.169.152.148"/>
    </slice>
    <from sec="1134363635" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,502,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
284[label="219.100.245.160;d;30pkt 30fpkt", shape=diamond, color=yellow];
2622[label="166.115.150.123;s;2pkt 2fpkt", shape=diamond, color=yellow];
2715[label="218.72.116.126;d;31pkt 31fpkt", shape=diamond, color=yellow];
2995[label="218.72.116.125;d;27pkt 27fpkt", shape=diamond, color=yellow];
3739[label="166.115.167.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3962[label="166.115.145.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4514[label="166.115.167.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5197[label="166.115.150.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5523[label="166.115.150.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5542[label="166.115.150.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5877[label="166.115.167.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5891[label="166.115.129.149;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6632[label="166.115.192.211;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7160[label="166.115.167.1;2pkt 2fpkt", shape=invtriangle, color=brown];
7312[label="166.115.145.15;1pkt 1fpkt", shape=invtriangle, color=brown];
8147[label="166.115.150.100;3pkt 3fpkt", shape=invtriangle, color=brown];
8358[label="166.115.150.123;1pkt 1fpkt", shape=invtriangle, color=brown];
8594[label="166.115.167.148;6pkt 6fpkt", shape=invtriangle, color=brown];
9502[label="166.115.167.1;2pkt 2fpkt", shape=invhouse, color=bisque];
9606[label="166.115.145.15;2pkt 2fpkt", shape=invhouse, color=bisque];
10128[label="166.115.150.100;3pkt 3fpkt", shape=invhouse, color=bisque];
10422[label="166.115.167.148;6pkt 6fpkt", shape=invhouse, color=bisque];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 219.100.245.160:22}[25.2101%]&lt;BR/&gt;{*:*, 218.72.116.126:5050}[23.5294%]&lt;BR/&gt;{*:*, 218.72.116.125:5050}[21.0084%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (24.6835%)&lt;BR/&gt; 22: (15.5063%)&lt;BR/&gt; 20: (3.48101%)&lt;BR/&gt; 443: (1.58228%)&lt;BR/&gt; 110: (1.58228%)&gt;];
}
284--2622[label="0.5;1pkt 1fpkt"];
284--3739[label="0.5;1pkt 1fpkt"];
284--4514[label="0.666667;2pkt 2fpkt"];
284--5542[label="0.5;1pkt 1fpkt"];
284--5877[label="0.428571;3pkt 3fpkt"];
284--7160[label="0.5;1pkt 1fpkt"];
284--8147[label="0.333333;1pkt 1fpkt"];
284--8594[label="0.5;3pkt 3fpkt"];
284--9502[label="0.5;1pkt 1fpkt"];
284--9606[label="0.5;1pkt 1fpkt"];
284--10128[label="0.333333;1pkt 1fpkt"];
284--10422[label="0.5;3pkt 3fpkt"];
2622--5523[label="1;1pkt 1fpkt"];
2622--8358[label="1;1pkt 1fpkt"];
2715--5891[label="0.0714286;1pkt 1fpkt"];
2715--6632[label="0.1;1pkt 1fpkt"];
2995--3962[label="1;1pkt 1fpkt"];
2995--4050[label="0.111111;3pkt 3fpkt"];
2995--5040[label="0.148148;4pkt 4fpkt"];
2995--5891[label="0.0714286;1pkt 1fpkt"];
2995--7312[label="1;1pkt 1fpkt"];
2995--8038[label="0.148148;4pkt 4fpkt"];
2995--9606[label="0.5;1pkt 1fpkt"];
2995--10057[label="0.148148;4pkt 4fpkt"];
3739--7160[label="1;2pkt 2fpkt"];
3739--9502[label="1;2pkt 2fpkt"];
3962--7312[label="1;1pkt 1fpkt"];
3962--9606[label="1;1pkt 1fpkt"];
5197--8147[label="1;2pkt 2fpkt"];
5197--10128[label="1;2pkt 2fpkt"];
5523--8358[label="1;1pkt 1fpkt"];
5877--8594[label="1;6pkt 6fpkt"];
5877--10422[label="1;6pkt 6fpkt"];
7160--9502[label="1;2pkt 2fpkt"];
7312--9606[label="1;1pkt 1fpkt"];
8147--10128[label="1;3pkt 3fpkt"];
8594--10422[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="218.72.116.126" dst_port="5050"/>
      <filter dst_ip="219.100.245.160" dst_port="22"/>
      <filter dst_ip="218.72.116.125" dst_port="5050"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
5880[label="221.196.215.148;254pkt 254fpkt", shape=pentagon, color=darkviolet];
8597[label="221.196.215.148;253pkt 253fpkt", shape=invtriangle, color=brown];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.196.215.148:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4517: (0.197239%)&lt;BR/&gt; 4514: (0.197239%)&lt;BR/&gt; 4511: (0.197239%)&lt;BR/&gt; 4506: (0.197239%)&gt;];
}
5880--8597[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="221.196.215.148"/>
    </slice>
    <from sec="1134364306" usec="0"/>
    <to sec="1134364460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
5887[label="216.204.87.149;127pkt 127fpkt", shape=pentagon, color=darkviolet];
8600[label="216.204.87.149;128pkt 128fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.204.87.149:*, *:139}[50%]&lt;BR/&gt;{216.204.87.149:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.098%)&lt;BR/&gt; 139: (24.902%)&lt;BR/&gt; 4998: (0.392157%)&lt;BR/&gt; 4995: (0.392157%)&lt;BR/&gt; 4983: (0.392157%)&gt;];
}
5887--8600[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="216.204.87.149"/>
      <filter dst_port="139" src_ip="216.204.87.149"/>
    </slice>
    <from sec="1134364010" usec="0"/>
    <to sec="1134364054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.33.153.150"/>
    </slice>
    <from sec="1134363682" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
5911[label="0.232.69.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8617[label="0.232.69.151;1pkt 1fpkt", shape=invtriangle, color=brown];
10439[label="0.232.69.151;1pkt 1fpkt", shape=invhouse, color=bisque];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.232.69.151:42593, 133.158.113.169:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42593: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5911--8617[label="1;1pkt 1fpkt"];
5911--10439[label="1;1pkt 1fpkt"];
8617--10439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.113.169" dst_port="25" src_ip="0.232.69.151" src_port="42593"/>
    </slice>
    <from sec="1134364432" usec="0"/>
    <to sec="1134364443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
5920[label="217.65.180.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8621[label="217.65.180.152;1pkt 1fpkt", shape=invtriangle, color=brown];
10441[label="217.65.180.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.65.180.152:4298, 163.180.242.168:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4298: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
5920--8621[label="1;1pkt 1fpkt"];
5920--10441[label="1;1pkt 1fpkt"];
8621--10441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.242.168" dst_port="3127" src_ip="217.65.180.152" src_port="4298"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.204.89.153"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
5941[label="133.159.144.154;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8635[label="133.159.144.154;36pkt 36fpkt", shape=invtriangle, color=brown];
10450[label="133.159.144.154;36pkt 36fpkt", shape=invhouse, color=bisque];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.144.154:*, 192.240.143.149:80}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 33731: (2.77778%)&lt;BR/&gt; 8080: (2.77778%)&lt;BR/&gt; 7070: (2.77778%)&lt;BR/&gt; 554: (2.77778%)&gt;];
}
5941--8635[label="1;36pkt 36fpkt"];
5941--10450[label="1;36pkt 36fpkt"];
8635--10450[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="192.240.143.149" dst_port="80" src_ip="133.159.144.154"/>
    </slice>
    <from sec="1134363688" usec="0"/>
    <to sec="1134364469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.32.139.155"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.176.97.156"/>
    </slice>
    <from sec="1134364005" usec="0"/>
    <to sec="1134364008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.161.193.156"/>
    </slice>
    <from sec="1134363888" usec="0"/>
    <to sec="1134363973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
5989[label="216.196.97.158;245pkt 245fpkt", shape=pentagon, color=darkviolet];
8662[label="216.196.97.158;245pkt 245fpkt", shape=invtriangle, color=brown];
10470[label="216.196.97.158;246pkt 246fpkt", shape=invhouse, color=bisque];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.196.97.158:62657, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62657: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5989--8662[label="1;245pkt 245fpkt"];
5989--10470[label="1;245pkt 245fpkt"];
8662--10470[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.196.97.158" src_port="62657"/>
    </slice>
    <from sec="1134364429" usec="0"/>
    <to sec="1134364467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.134.215.158"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.239.151.160"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
6016[label="0.33.10.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8683[label="0.33.10.161;1pkt 1fpkt", shape=invtriangle, color=brown];
10480[label="0.33.10.161;1pkt 1fpkt", shape=invhouse, color=bisque];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.33.10.161:80, 196.129.156.216:53883}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53883: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6016--8683[label="1;1pkt 1fpkt"];
6016--10480[label="1;1pkt 1fpkt"];
8683--10480[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" dst_port="53883" src_ip="0.33.10.161" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
6028[label="3.89.194.161;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8687[label="3.89.194.161;3pkt 3fpkt", shape=invtriangle, color=brown];
10483[label="3.89.194.161;4pkt 4fpkt", shape=invhouse, color=bisque];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.89.194.161:80, 133.158.217.92:61707}[25%]&lt;BR/&gt;{3.89.194.161:80, 133.158.217.92:61708}[25%]&lt;BR/&gt;{3.89.194.161:80, 133.158.217.92:61714}[25%]&lt;BR/&gt;{3.89.194.161:80, 133.158.217.92:61715}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61715: (15%)&lt;BR/&gt; 61714: (15%)&lt;BR/&gt; 61708: (15%)&lt;BR/&gt; 61707: (5%)&gt;];
}
6028--8687[label="1;3pkt 3fpkt"];
6028--10483[label="1;3pkt 3fpkt"];
8687--10483[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.217.92" dst_port="61715" src_ip="3.89.194.161" src_port="80"/>
      <filter dst_ip="133.158.217.92" dst_port="61714" src_ip="3.89.194.161" src_port="80"/>
      <filter dst_ip="133.158.217.92" dst_port="61708" src_ip="3.89.194.161" src_port="80"/>
      <filter dst_ip="133.158.217.92" dst_port="61707" src_ip="3.89.194.161" src_port="80"/>
    </slice>
    <from sec="1134364344" usec="0"/>
    <to sec="1134364371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
6030[label="197.99.213.161;38pkt 38fpkt", shape=pentagon, color=darkviolet];
8689[label="197.99.213.161;38pkt 38fpkt", shape=invtriangle, color=brown];
10485[label="197.99.213.161;38pkt 38fpkt", shape=invhouse, color=bisque];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.213.161:15839, *:*}[60.5263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15839: (30.2632%)&lt;BR/&gt; 61663: (5.26316%)&lt;BR/&gt; 61662: (5.26316%)&lt;BR/&gt; 61661: (5.26316%)&lt;BR/&gt; 33444: (3.94737%)&gt;];
}
6030--8689[label="1;38pkt 38fpkt"];
6030--10485[label="1;38pkt 38fpkt"];
8689--10485[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.213.161" src_port="15839"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.56.253.161"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.165.156.162"/>
    </slice>
    <from sec="1134364383" usec="0"/>
    <to sec="1134364395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.163.175.162"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
6067[label="197.99.222.163;67pkt 67fpkt", shape=pentagon, color=darkviolet];
8716[label="197.99.222.163;67pkt 67fpkt", shape=invtriangle, color=brown];
10510[label="197.99.222.163;68pkt 68fpkt", shape=invhouse, color=bisque];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.222.163:80, 213.182.103.5:*}[55.8824%]&lt;BR/&gt;{197.99.222.163:80, 0.125.141.32:*}[33.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.297%)&lt;BR/&gt; 53: (3.9604%)&lt;BR/&gt; 54192: (0.742574%)&lt;BR/&gt; 50580: (0.742574%)&lt;BR/&gt; 50579: (0.742574%)&gt;];
}
6067--8716[label="1;67pkt 67fpkt"];
6067--10510[label="1;67pkt 67fpkt"];
8716--10510[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="213.182.103.5" src_ip="197.99.222.163" src_port="80"/>
      <filter dst_ip="0.125.141.32" src_ip="197.99.222.163" src_port="80"/>
    </slice>
    <from sec="1134363618" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
6073[label="163.180.24.164;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8719[label="163.180.24.164;18pkt 18fpkt", shape=invtriangle, color=brown];
10513[label="163.180.24.164;19pkt 19fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.24.164:46432, *:*}[78.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46432: (39.2857%)&lt;BR/&gt; 64292: (2.67857%)&lt;BR/&gt; 62655: (2.67857%)&lt;BR/&gt; 55785: (2.67857%)&lt;BR/&gt; 52509: (2.67857%)&gt;];
}
6073--8719[label="1;18pkt 18fpkt"];
6073--10513[label="1;19pkt 19fpkt"];
8719--10513[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="163.180.24.164" src_port="46432"/>
    </slice>
    <from sec="1134363614" usec="0"/>
    <to sec="1134364457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.137.35.164"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.139.229.164"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.241.119.165"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
6093[label="220.150.138.165;107pkt 107fpkt", shape=pentagon, color=darkviolet];
8735[label="220.150.138.165;108pkt 108fpkt", shape=invtriangle, color=brown];
10524[label="220.150.138.165;108pkt 108fpkt", shape=invhouse, color=bisque];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.150.138.165:58910, *:1026}[50%]&lt;BR/&gt;{220.150.138.165:58910, *:1027}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58910: (50%)&lt;BR/&gt; 1027: (25.0774%)&lt;BR/&gt; 1026: (24.9226%)&gt;];
}
6093--8735[label="1;107pkt 107fpkt"];
6093--10524[label="1;107pkt 107fpkt"];
8735--10524[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="220.150.138.165" src_port="58910"/>
      <filter dst_port="1026" src_ip="220.150.138.165" src_port="58910"/>
    </slice>
    <from sec="1134363775" usec="0"/>
    <to sec="1134363776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.54.252.165"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.77.80.166"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
6115[label="220.150.138.166;147pkt 147fpkt", shape=pentagon, color=darkviolet];
8747[label="220.150.138.166;146pkt 146fpkt", shape=invtriangle, color=brown];
10536[label="220.150.138.166;147pkt 147fpkt", shape=invhouse, color=bisque];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.150.138.166:37688, *:1026}[63.9456%]&lt;BR/&gt;{220.150.138.166:37688, *:1027}[36.0544%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37688: (50%)&lt;BR/&gt; 1026: (31.9318%)&lt;BR/&gt; 1027: (18.0682%)&gt;];
}
6115--8747[label="1;146pkt 146fpkt"];
6115--10536[label="1;147pkt 147fpkt"];
8747--10536[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.150.138.166" src_port="37688"/>
      <filter dst_port="1027" src_ip="220.150.138.166" src_port="37688"/>
    </slice>
    <from sec="1134364374" usec="0"/>
    <to sec="1134364375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.143.198.166"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.58.251.166"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
6125[label="131.156.96.167;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8755[label="131.156.96.167;48pkt 48fpkt", shape=invtriangle, color=brown];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.96.167:*, 204.178.249.197:80}[39.5833%]&lt;BR/&gt;{131.156.96.167:*, 216.238.32.171:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9583%)&lt;BR/&gt; 2272: (1.04167%)&lt;BR/&gt; 2271: (1.04167%)&lt;BR/&gt; 2264: (1.04167%)&lt;BR/&gt; 2263: (1.04167%)&gt;];
}
6125--8755[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="204.178.249.197" dst_port="80" src_ip="131.156.96.167"/>
      <filter dst_ip="216.238.32.171" dst_port="80" src_ip="131.156.96.167"/>
    </slice>
    <from sec="1134363839" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
6129[label="218.128.192.167;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8758[label="218.128.192.167;15pkt 15fpkt", shape=invtriangle, color=brown];
10545[label="218.128.192.167;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.128.192.167:80, 133.158.72.212:*}[46.6667%]&lt;BR/&gt;{218.128.192.167:80, 196.129.156.216:*}[26.6667%]&lt;BR/&gt;{218.128.192.167:80, 196.129.156.217:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58718: (3.33333%)&lt;BR/&gt; 50599: (3.33333%)&lt;BR/&gt; 49892: (3.33333%)&lt;BR/&gt; 49698: (3.33333%)&gt;];
}
6129--8758[label="1;15pkt 15fpkt"];
6129--10545[label="1;15pkt 15fpkt"];
8758--10545[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.72.212" src_ip="218.128.192.167" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="218.128.192.167" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="218.128.192.167" src_port="80"/>
    </slice>
    <from sec="1134363960" usec="0"/>
    <to sec="1134364489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
3091[label="131.68.11.37;d;31pkt 31fpkt", shape=diamond, color=yellow];
6139[label="202.123.160.168;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8764[label="202.123.160.168;27pkt 27fpkt", shape=invtriangle, color=brown];
10549[label="202.123.160.168;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.123.160.168:80, 131.68.11.37:*}[68.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1494: (1.76991%)&lt;BR/&gt; 1493: (1.76991%)&lt;BR/&gt; 1492: (1.76991%)&lt;BR/&gt; 1491: (1.76991%)&gt;];
}
3091--3903[label="0.0645161;2pkt 2fpkt"];
3091--4416[label="0.0322581;1pkt 1fpkt"];
3091--6139[label="0.851852;23pkt 23fpkt"];
3091--7617[label="0.0322581;1pkt 1fpkt"];
3091--8764[label="0.851852;23pkt 23fpkt"];
3091--10549[label="0.857143;24pkt 24fpkt"];
6139--8764[label="1;27pkt 27fpkt"];
6139--10549[label="1;27pkt 27fpkt"];
8764--10549[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.11.37" src_ip="202.123.160.168" src_port="80"/>
    </slice>
    <from sec="1134363696" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.218.200.168"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.168.188.169"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
2337[label="197.99.208.169;s;84pkt 84fpkt", shape=diamond, color=yellow];
6154[label="197.99.208.169;105pkt 105fpkt", shape=pentagon, color=darkviolet];
8776[label="197.99.208.169;105pkt 105fpkt", shape=invtriangle, color=brown];
10558[label="197.99.208.169;105pkt 105fpkt", shape=invhouse, color=bisque];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.208.169:20190, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20190: (50%)&lt;BR/&gt; 25503: (1.00251%)&lt;BR/&gt; 1547: (1.00251%)&lt;BR/&gt; 64517: (0.501253%)&lt;BR/&gt; 63809: (0.501253%)&gt;];
}
2337--6154[label="0.988095;83pkt 83fpkt"];
2337--8776[label="0.988095;83pkt 83fpkt"];
2337--10558[label="0.988095;83pkt 83fpkt"];
6154--8776[label="1;105pkt 105fpkt"];
6154--10558[label="1;105pkt 105fpkt"];
8776--10558[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.208.169" src_port="20190"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.180.214.169"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
6159[label="2.37.30.170;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8780[label="2.37.30.170;14pkt 14fpkt", shape=invtriangle, color=brown];
10561[label="2.37.30.170;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.37.30.170:80, 196.129.156.217:*}[57.1429%]&lt;BR/&gt;{2.37.30.170:80, 196.129.156.216:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56935: (3.65854%)&lt;BR/&gt; 52396: (3.65854%)&lt;BR/&gt; 51290: (3.65854%)&lt;BR/&gt; 51125: (3.65854%)&gt;];
}
6159--8780[label="1;13pkt 13fpkt"];
6159--10561[label="1;13pkt 13fpkt"];
8780--10561[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="2.37.30.170" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="2.37.30.170" src_port="80"/>
    </slice>
    <from sec="1134363956" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
6169[label="0.193.174.170;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8785[label="0.193.174.170;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.193.174.170:80, 196.129.156.216:*}[60%]&lt;BR/&gt;{0.193.174.170:80, 196.129.156.217:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62107: (2%)&lt;BR/&gt; 62038: (2%)&lt;BR/&gt; 61911: (2%)&lt;BR/&gt; 61910: (2%)&gt;];
}
6169--8785[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="0.193.174.170" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="0.193.174.170" src_port="80"/>
    </slice>
    <from sec="1134364123" usec="0"/>
    <to sec="1134364209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
6171[label="197.4.204.170;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8787[label="197.4.204.170;7pkt 7fpkt", shape=invtriangle, color=brown];
10564[label="197.4.204.170;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.4.204.170:80, 131.68.11.186:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49944: (6.52174%)&lt;BR/&gt; 49943: (6.52174%)&lt;BR/&gt; 49940: (6.52174%)&lt;BR/&gt; 49928: (6.52174%)&gt;];
}
6171--8787[label="1;7pkt 7fpkt"];
6171--10564[label="1;8pkt 8fpkt"];
8787--10564[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.11.186" src_ip="197.4.204.170" src_port="80"/>
    </slice>
    <from sec="1134364001" usec="0"/>
    <to sec="1134364076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
6179[label="197.177.76.171;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8792[label="197.177.76.171;1pkt 1fpkt", shape=invtriangle, color=brown];
10568[label="197.177.76.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.177.76.171:80, 197.99.220.138:1531}[50%]&lt;BR/&gt;{197.177.76.171:80, 197.99.220.138:1532}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1532: (37.5%)&lt;BR/&gt; 1531: (12.5%)&gt;];
}
6179--8792[label="1;1pkt 1fpkt"];
6179--10568[label="1;1pkt 1fpkt"];
8792--10568[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.220.138" dst_port="1532" src_ip="197.177.76.171" src_port="80"/>
      <filter dst_ip="197.99.220.138" dst_port="1531" src_ip="197.177.76.171" src_port="80"/>
    </slice>
    <from sec="1134363812" usec="0"/>
    <to sec="1134363833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.142.251.171"/>
    </slice>
    <from sec="1134364184" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
1363[label="133.158.130.99;d;241pkt 241fpkt", shape=diamond, color=yellow];
1796[label="67.218.175.40;s;92pkt 92fpkt", shape=diamond, color=yellow];
1880[label="67.211.43.188;s;69pkt 69fpkt", shape=diamond, color=yellow];
3143[label="67.211.43.189;s;33pkt 33fpkt", shape=diamond, color=yellow];
4352[label="67.218.175.40;91pkt 91fpkt", shape=pentagon, color=darkviolet];
6196[label="67.210.117.172;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6375[label="67.211.43.188;69pkt 69fpkt", shape=pentagon, color=darkviolet];
8803[label="67.210.117.172;54pkt 54fpkt", shape=invtriangle, color=brown];
8929[label="67.211.43.188;68pkt 68fpkt", shape=invtriangle, color=brown];
10574[label="67.210.117.172;55pkt 55fpkt", shape=invhouse, color=bisque];
10659[label="67.211.43.188;69pkt 69fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.218.175.40:80, 133.158.130.99:*}[29.021%]&lt;BR/&gt;{67.211.43.189:80, 133.158.130.99:*}[24.4755%]&lt;BR/&gt;{67.211.43.188:80, 133.158.130.99:*}[24.1259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6049%)&lt;BR/&gt; 8081: (1.22768%)&lt;BR/&gt; 0: (0.334821%)&lt;BR/&gt; 2566: (0.279018%)&lt;BR/&gt; 2564: (0.279018%)&gt;];
}
1363--1796[label="0.793478;73pkt 73fpkt"];
1363--1880[label="1;69pkt 69fpkt"];
1363--3143[label="0.424242;14pkt 14fpkt"];
1363--3481[label="0.0539419;13pkt 13fpkt"];
1363--3504[label="0.0788382;19pkt 19fpkt"];
1363--3528[label="0.0207469;5pkt 5fpkt"];
1363--3565[label="0.0539419;13pkt 13fpkt"];
1363--3585[label="0.0788382;19pkt 19fpkt"];
1363--3608[label="0.0207469;5pkt 5fpkt"];
1363--3643[label="0.0539419;13pkt 13fpkt"];
1363--3661[label="0.0788382;19pkt 19fpkt"];
1363--3675[label="0.0207469;5pkt 5fpkt"];
1363--4352[label="0.791209;72pkt 72fpkt"];
1363--6196[label="0.872727;48pkt 48fpkt"];
1363--6375[label="1;69pkt 69fpkt"];
1363--8803[label="0.87037;47pkt 47fpkt"];
1363--8929[label="1;68pkt 68fpkt"];
1363--10574[label="0.872727;48pkt 48fpkt"];
1363--10659[label="1;69pkt 69fpkt"];
1796--3481[label="0.0652174;6pkt 6fpkt"];
1796--3504[label="0.108696;10pkt 10fpkt"];
1796--3528[label="0.0217391;2pkt 2fpkt"];
1796--3565[label="0.0652174;6pkt 6fpkt"];
1796--3585[label="0.108696;10pkt 10fpkt"];
1796--3608[label="0.0217391;2pkt 2fpkt"];
1796--3643[label="0.0652174;6pkt 6fpkt"];
1796--3661[label="0.108696;10pkt 10fpkt"];
1796--3675[label="0.0217391;2pkt 2fpkt"];
1796--4352[label="1;91pkt 91fpkt"];
1880--3481[label="0.0434783;3pkt 3fpkt"];
1880--3504[label="0.0869565;6pkt 6fpkt"];
1880--3565[label="0.0434783;3pkt 3fpkt"];
1880--3585[label="0.0869565;6pkt 6fpkt"];
1880--3643[label="0.0434783;3pkt 3fpkt"];
1880--3661[label="0.0869565;6pkt 6fpkt"];
1880--6375[label="1;69pkt 69fpkt"];
1880--8929[label="1;68pkt 68fpkt"];
1880--10659[label="1;69pkt 69fpkt"];
6196--8803[label="1;54pkt 54fpkt"];
6196--10574[label="1;55pkt 55fpkt"];
6375--8929[label="1;68pkt 68fpkt"];
6375--10659[label="1;69pkt 69fpkt"];
8803--10574[label="1;54pkt 54fpkt"];
8929--10659[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.130.99" src_ip="67.218.175.40" src_port="80"/>
      <filter dst_ip="133.158.130.99" src_ip="67.211.43.189" src_port="80"/>
      <filter dst_ip="133.158.130.99" src_ip="67.211.43.188" src_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
6198[label="163.180.196.172;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8805[label="163.180.196.172;13pkt 13fpkt", shape=invtriangle, color=brown];
10575[label="163.180.196.172;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.196.172:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59031: (3.84615%)&lt;BR/&gt; 53694: (3.84615%)&lt;BR/&gt; 52027: (3.84615%)&lt;BR/&gt; 51721: (3.84615%)&gt;];
}
6198--8805[label="1;13pkt 13fpkt"];
6198--10575[label="1;13pkt 13fpkt"];
8805--10575[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="163.180.196.172" src_port="80"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
6207[label="133.158.171.173;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8811[label="133.158.171.173;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.171.173:*, 3.48.30.76:80}[26.3158%]&lt;BR/&gt;{133.158.171.173:*, 192.4.115.166:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3684%)&lt;BR/&gt; 1608: (2.63158%)&lt;BR/&gt; 1607: (2.63158%)&lt;BR/&gt; 1606: (2.63158%)&lt;BR/&gt; 1605: (2.63158%)&gt;];
}
6207--8811[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="3.48.30.76" dst_port="80" src_ip="133.158.171.173"/>
      <filter dst_ip="192.4.115.166" dst_port="80" src_ip="133.158.171.173"/>
    </slice>
    <from sec="1134364472" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
6229[label="0.232.72.176;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8826[label="0.232.72.176;8pkt 8fpkt", shape=invtriangle, color=brown];
10591[label="0.232.72.176;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.232.72.176:80, 196.129.156.216:*}[50%]&lt;BR/&gt;{0.232.72.176:80, 196.129.156.217:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57952: (6.25%)&lt;BR/&gt; 57246: (6.25%)&lt;BR/&gt; 57084: (6.25%)&lt;BR/&gt; 54920: (6.25%)&gt;];
}
6229--8826[label="1;8pkt 8fpkt"];
6229--10591[label="1;8pkt 8fpkt"];
8826--10591[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="0.232.72.176" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="0.232.72.176" src_port="80"/>
    </slice>
    <from sec="1134363673" usec="0"/>
    <to sec="1134364434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
4341[label="196.139.235.39;47pkt 47fpkt", shape=pentagon, color=darkviolet];
7563[label="196.139.235.39;46pkt 46fpkt", shape=invtriangle, color=brown];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.235.39:29228, *:*}[74.4681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29228: (37.0968%)&lt;BR/&gt; 443: (4.30108%)&lt;BR/&gt; 80: (4.30108%)&lt;BR/&gt; 12350: (3.22581%)&lt;BR/&gt; 22591: (2.15054%)&gt;];
}
4341--7563[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="196.139.235.39" src_port="29228"/>
    </slice>
    <from sec="1134363842" usec="0"/>
    <to sec="1134364480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.71.18.177"/>
    </slice>
    <from sec="1134363750" usec="0"/>
    <to sec="1134363804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
6243[label="214.139.116.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8834[label="214.139.116.177;1pkt 1fpkt", shape=invtriangle, color=brown];
10596[label="214.139.116.177;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.139.116.177:80, 196.139.14.9:44295}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44295: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6243--8834[label="1;1pkt 1fpkt"];
6243--10596[label="1;1pkt 1fpkt"];
8834--10596[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.14.9" dst_port="44295" src_ip="214.139.116.177" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.214.137.177"/>
    </slice>
    <from sec="1134364135" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.115.146.177"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
6250[label="197.99.217.177;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8840[label="197.99.217.177;5pkt 5fpkt", shape=invtriangle, color=brown];
10600[label="197.99.217.177;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.217.177:0, 195.214.160.113:0}[20%]&lt;BR/&gt;{197.99.217.177:0, 195.214.179.128:0}[20%]&lt;BR/&gt;{197.99.217.177:139, 4.130.135.144:61753}[20%]&lt;BR/&gt;{197.99.217.177:0, 220.105.36.215:0}[20%]&lt;BR/&gt;{197.99.217.177:0, 195.214.212.242:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (78.5714%)&lt;BR/&gt; 61753: (10.7143%)&lt;BR/&gt; 139: (10.7143%)&gt;];
}
6250--8840[label="1;5pkt 5fpkt"];
6250--10600[label="1;4pkt 4fpkt"];
8840--10600[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="195.214.212.242" src_ip="197.99.217.177"/>
      <filter dst_ip="220.105.36.215" src_ip="197.99.217.177"/>
      <filter dst_ip="4.130.135.144" dst_port="61753" src_ip="197.99.217.177" src_port="139"/>
      <filter dst_ip="195.214.179.128" src_ip="197.99.217.177"/>
      <filter dst_ip="195.214.160.113" src_ip="197.99.217.177"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
6253[label="131.68.8.178;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8842[label="131.68.8.178;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.8.178:*, *:80}[44.4444%]&lt;BR/&gt;{131.68.8.178:*, *:1863}[33.3333%]&lt;BR/&gt;{131.68.8.178:*, 3.48.25.112:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 7001: (5.55556%)&lt;BR/&gt; 443: (5.55556%)&lt;BR/&gt; 1101: (1.85185%)&gt;];
}
6253--8842[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="3.48.25.112" src_ip="131.68.8.178"/>
      <filter dst_port="80" src_ip="131.68.8.178"/>
      <filter dst_port="1863" src_ip="131.68.8.178"/>
    </slice>
    <from sec="1134364411" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
6254[label="203.18.9.178;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8843[label="203.18.9.178;12pkt 12fpkt", shape=invtriangle, color=brown];
10602[label="203.18.9.178;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.18.9.178:80, 196.129.156.135:*}[50%]&lt;BR/&gt;{203.18.9.178:80, 196.129.156.217:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54035: (4.16667%)&lt;BR/&gt; 54034: (4.16667%)&lt;BR/&gt; 36556: (4.16667%)&lt;BR/&gt; 36423: (4.16667%)&gt;];
}
6254--8843[label="1;12pkt 12fpkt"];
6254--10602[label="1;12pkt 12fpkt"];
8843--10602[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.135" src_ip="203.18.9.178" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="203.18.9.178" src_port="80"/>
    </slice>
    <from sec="1134363769" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
6263[label="133.159.146.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8851[label="133.159.146.178;1pkt 1fpkt", shape=invtriangle, color=brown];
10606[label="133.159.146.178;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.146.178:55090, 6.28.40.23:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55090: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6263--8851[label="1;1pkt 1fpkt"];
6263--10606[label="1;1pkt 1fpkt"];
8851--10606[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.28.40.23" dst_port="80" src_ip="133.159.146.178" src_port="55090"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
6268[label="133.158.221.178;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8855[label="133.158.221.178;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.221.178:*, 193.160.104.42:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49617: (2.7027%)&lt;BR/&gt; 49616: (2.7027%)&lt;BR/&gt; 49615: (2.7027%)&lt;BR/&gt; 49614: (2.7027%)&gt;];
}
6268--8855[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="193.160.104.42" dst_port="80" src_ip="133.158.221.178"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
6269[label="133.158.28.179;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8856[label="133.158.28.179;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.28.179:49523, 2.1.180.4:5190}[25%]&lt;BR/&gt;{133.158.28.179:49528, 119.49.69.18:443}[25%]&lt;BR/&gt;{133.158.28.179:49527, 119.49.69.73:443}[25%]&lt;BR/&gt;{133.158.28.179:49525, 2.1.177.153:5190}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 49528: (12.5%)&lt;BR/&gt; 49527: (12.5%)&lt;BR/&gt; 49525: (12.5%)&gt;];
}
6269--8856[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="2.1.177.153" dst_port="5190" src_ip="133.158.28.179" src_port="49525"/>
      <filter dst_ip="119.49.69.73" dst_port="443" src_ip="133.158.28.179" src_port="49527"/>
      <filter dst_ip="119.49.69.18" dst_port="443" src_ip="133.158.28.179" src_port="49528"/>
      <filter dst_ip="2.1.180.4" dst_port="5190" src_ip="133.158.28.179" src_port="49523"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.239.58.180"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
6287[label="221.59.177.180;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8871[label="221.59.177.180;24pkt 24fpkt", shape=invtriangle, color=brown];
10620[label="221.59.177.180;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.59.177.180:*, 133.158.100.117:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2026: (2.05479%)&lt;BR/&gt; 1975: (2.05479%)&lt;BR/&gt; 1851: (2.05479%)&lt;BR/&gt; 1763: (2.05479%)&gt;];
}
6287--8871[label="1;24pkt 24fpkt"];
6287--10620[label="1;24pkt 24fpkt"];
8871--10620[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.100.117" dst_port="80" src_ip="221.59.177.180"/>
    </slice>
    <from sec="1134364390" usec="0"/>
    <to sec="1134364467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="163.180.157.181"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
1699[label="151.251.232.76;d;1162pkt 1162fpkt", shape=diamond, color=yellow];
5029[label="221.229.10.89;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5662[label="68.35.30.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5858[label="221.140.72.147;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6316[label="215.108.8.183;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7012[label="67.247.98.242;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8030[label="221.229.10.89;6pkt 6fpkt", shape=invtriangle, color=brown];
8578[label="221.140.72.147;6pkt 6fpkt", shape=invtriangle, color=brown];
8885[label="215.108.8.183;13pkt 13fpkt", shape=invtriangle, color=brown];
10051[label="221.229.10.89;6pkt 6fpkt", shape=invhouse, color=bisque];
10411[label="221.140.72.147;6pkt 6fpkt", shape=invhouse, color=bisque];
10630[label="215.108.8.183;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.251.232.76:58051}[99.4867%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58051: (49.7592%)&lt;BR/&gt; 1920: (0.200642%)&lt;BR/&gt; 1088: (0.200642%)&lt;BR/&gt; 1069: (0.200642%)&lt;BR/&gt; 64843: (0.160514%)&gt;];
}
1699--3510[label="0.000860585;1pkt 1fpkt"];
1699--3513[label="0.00123153;1pkt 1fpkt"];
1699--3520[label="0.000860585;1pkt 1fpkt"];
1699--3591[label="0.000860585;1pkt 1fpkt"];
1699--3600[label="0.000860585;1pkt 1fpkt"];
1699--3668[label="0.000860585;1pkt 1fpkt"];
1699--4288[label="0.5;1pkt 1fpkt"];
1699--4597[label="0.025;1pkt 1fpkt"];
1699--5029[label="0.833333;5pkt 5fpkt"];
1699--5662[label="1;2pkt 2fpkt"];
1699--5858[label="0.666667;4pkt 4fpkt"];
1699--6316[label="0.785714;11pkt 11fpkt"];
1699--7012[label="0.833333;5pkt 5fpkt"];
1699--7521[label="1;1pkt 1fpkt"];
1699--7739[label="0.0243902;1pkt 1fpkt"];
1699--8030[label="0.833333;5pkt 5fpkt"];
1699--8578[label="0.666667;4pkt 4fpkt"];
1699--8885[label="0.769231;10pkt 10fpkt"];
1699--9738[label="0.5;1pkt 1fpkt"];
1699--9873[label="0.025;1pkt 1fpkt"];
1699--10051[label="0.833333;5pkt 5fpkt"];
1699--10411[label="0.666667;4pkt 4fpkt"];
1699--10630[label="0.769231;10pkt 10fpkt"];
5029--8030[label="1;6pkt 6fpkt"];
5029--10051[label="1;6pkt 6fpkt"];
5858--8578[label="1;6pkt 6fpkt"];
5858--10411[label="1;6pkt 6fpkt"];
6316--8885[label="1;13pkt 13fpkt"];
6316--10630[label="1;13pkt 13fpkt"];
8030--10051[label="1;6pkt 6fpkt"];
8578--10411[label="1;6pkt 6fpkt"];
8885--10630[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.232.76" dst_port="58051"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.114.128.183"/>
    </slice>
    <from sec="1134364420" usec="0"/>
    <to sec="1134364430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
6331[label="133.159.9.184;44pkt 44fpkt", shape=pentagon, color=darkviolet];
8897[label="133.159.9.184;43pkt 43fpkt", shape=invtriangle, color=brown];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.9.184:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6331--8897[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="133.159.9.184"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
6335[label="131.68.117.184;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8900[label="131.68.117.184;3pkt 3fpkt", shape=invtriangle, color=brown];
10640[label="131.68.117.184;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.117.184:3747, 192.4.115.166:80}[33.3333%]&lt;BR/&gt;{131.68.117.184:3832, 213.24.178.88:80}[33.3333%]&lt;BR/&gt;{131.68.117.184:3845, 213.24.178.88:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3845: (16.6667%)&lt;BR/&gt; 3832: (16.6667%)&lt;BR/&gt; 3747: (16.6667%)&gt;];
}
6335--8900[label="1;3pkt 3fpkt"];
6335--10640[label="1;3pkt 3fpkt"];
8900--10640[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.24.178.88" dst_port="80" src_ip="131.68.117.184" src_port="3845"/>
      <filter dst_ip="213.24.178.88" dst_port="80" src_ip="131.68.117.184" src_port="3832"/>
      <filter dst_ip="192.4.115.166" dst_port="80" src_ip="131.68.117.184" src_port="3747"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.225.128.184"/>
    </slice>
    <from sec="1134363639" usec="0"/>
    <to sec="1134363707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.34.179.184"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
6348[label="217.92.200.185;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8908[label="217.92.200.185;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.92.200.185:*, 151.251.47.111:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4526: (3.7037%)&lt;BR/&gt; 2569: (3.7037%)&lt;BR/&gt; 2567: (3.7037%)&lt;BR/&gt; 2501: (3.7037%)&gt;];
}
6348--8908[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="217.92.200.185"/>
    </slice>
    <from sec="1134363845" usec="0"/>
    <to sec="1134364471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.220.138.186"/>
    </slice>
    <from sec="1134364202" usec="0"/>
    <to sec="1134364333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
259[label="131.156.108.178;s;42pkt 42fpkt", shape=diamond, color=yellow];
260[label="119.49.69.112;d;267pkt 267fpkt", shape=diamond, color=yellow];
265[label="133.158.213.198;s;12pkt 12fpkt", shape=diamond, color=yellow];
735[label="119.49.69.120;d;90pkt 90fpkt", shape=diamond, color=yellow];
1371[label="208.143.141.14;d;2pkt 2fpkt", shape=diamond, color=yellow];
1706[label="133.158.162.102;s;116pkt 116fpkt", shape=diamond, color=yellow];
4619[label="133.158.212.59;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6083[label="133.158.198.164;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6212[label="131.68.9.174;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6261[label="131.156.108.178;45pkt 45fpkt", shape=pentagon, color=darkviolet];
6360[label="131.68.189.186;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6491[label="133.158.213.198;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6677[label="163.180.68.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6746[label="196.139.240.220;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7756[label="133.158.212.59;16pkt 16fpkt", shape=invtriangle, color=brown];
8726[label="133.158.198.164;9pkt 9fpkt", shape=invtriangle, color=brown];
8849[label="131.156.108.178;45pkt 45fpkt", shape=invtriangle, color=brown];
8918[label="131.68.189.186;19pkt 19fpkt", shape=invtriangle, color=brown];
9011[label="133.158.213.198;38pkt 38fpkt", shape=invtriangle, color=brown];
9189[label="196.139.240.220;30pkt 30fpkt", shape=invtriangle, color=brown];
10604[label="131.156.108.178;44pkt 44fpkt", shape=invhouse, color=bisque];
10650[label="131.68.189.186;20pkt 20fpkt", shape=invhouse, color=bisque];
10711[label="133.158.213.198;37pkt 37fpkt", shape=invhouse, color=bisque];
10829[label="196.139.240.220;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 119.49.69.112:80}[56.71%]&lt;BR/&gt;{133.158.162.102:*, *:80}[22.2944%]&lt;BR/&gt;{*:*, 119.49.69.120:*}[21.8615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.1717%)&lt;BR/&gt; 143: (3.9899%)&lt;BR/&gt; 53: (3.48485%)&lt;BR/&gt; 110: (1.16162%)&lt;BR/&gt; 993: (1.11111%)&gt;];
}
259--260[label="1;42pkt 42fpkt"];
259--3505[label="0.047619;2pkt 2fpkt"];
259--3510[label="0.0952381;4pkt 4fpkt"];
259--3520[label="0.0952381;4pkt 4fpkt"];
259--3556[label="0.0952381;4pkt 4fpkt"];
259--3591[label="0.0952381;4pkt 4fpkt"];
259--3600[label="0.0952381;4pkt 4fpkt"];
259--3636[label="0.0952381;4pkt 4fpkt"];
259--3648[label="0.0952381;4pkt 4fpkt"];
259--3662[label="0.047619;2pkt 2fpkt"];
259--3668[label="0.0952381;4pkt 4fpkt"];
259--3703[label="0.0952381;4pkt 4fpkt"];
259--6261[label="1;42pkt 42fpkt"];
259--8849[label="1;42pkt 42fpkt"];
259--10604[label="0.97619;41pkt 41fpkt"];
260--477[label="0.011236;3pkt 3fpkt"];
260--583[label="0.0187266;5pkt 5fpkt"];
260--615[label="0.0277778;4pkt 4fpkt"];
260--1477[label="0.0535714;6pkt 6fpkt"];
260--1706[label="0.577586;67pkt 67fpkt"];
260--2395[label="0.0243902;2pkt 2fpkt"];
260--3152[label="0.0749064;20pkt 20fpkt"];
260--3445[label="0.0749064;20pkt 20fpkt"];
260--3505[label="0.0374532;10pkt 10fpkt"];
260--3510[label="0.0337079;9pkt 9fpkt"];
260--3520[label="0.0636704;17pkt 17fpkt"];
260--3534[label="0.011236;3pkt 3fpkt"];
260--3556[label="0.0973783;26pkt 26fpkt"];
260--3591[label="0.0337079;9pkt 9fpkt"];
260--3600[label="0.0636704;17pkt 17fpkt"];
260--3614[label="0.011236;3pkt 3fpkt"];
260--3636[label="0.0973783;26pkt 26fpkt"];
260--3648[label="0.0374532;10pkt 10fpkt"];
260--3662[label="0.0374532;10pkt 10fpkt"];
260--3668[label="0.0636704;17pkt 17fpkt"];
260--3682[label="0.011236;3pkt 3fpkt"];
260--3703[label="0.0973783;26pkt 26fpkt"];
260--4619[label="0.3125;5pkt 5fpkt"];
260--4697[label="0.05;1pkt 1fpkt"];
260--5023[label="0.0194175;2pkt 2fpkt"];
260--6083[label="0.111111;1pkt 1fpkt"];
260--6212[label="0.846154;11pkt 11fpkt"];
260--6261[label="0.933333;42pkt 42fpkt"];
260--6319[label="0.0645161;2pkt 2fpkt"];
260--6360[label="0.95;19pkt 19fpkt"];
260--6696[label="0.0749064;20pkt 20fpkt"];
260--6701[label="0.0185185;4pkt 4fpkt"];
260--6746[label="0.833333;25pkt 25fpkt"];
260--6938[label="0.0561798;15pkt 15fpkt"];
260--7756[label="0.3125;5pkt 5fpkt"];
260--8726[label="0.111111;1pkt 1fpkt"];
260--8849[label="0.933333;42pkt 42fpkt"];
260--8888[label="0.0666667;2pkt 2fpkt"];
260--8918[label="0.947368;18pkt 18fpkt"];
260--9153[label="0.0749064;20pkt 20fpkt"];
260--9189[label="0.833333;25pkt 25fpkt"];
260--9334[label="0.0561798;15pkt 15fpkt"];
260--10604[label="0.931818;41pkt 41fpkt"];
260--10650[label="0.95;19pkt 19fpkt"];
260--10805[label="0.0749064;20pkt 20fpkt"];
260--10829[label="0.833333;25pkt 25fpkt"];
265--735[label="0.25;3pkt 3fpkt"];
265--1371[label="1;2pkt 2fpkt"];
265--3509[label="0.0833333;1pkt 1fpkt"];
265--3590[label="0.0833333;1pkt 1fpkt"];
265--6491[label="1;12pkt 12fpkt"];
265--9011[label="1;12pkt 12fpkt"];
265--10711[label="1;12pkt 12fpkt"];
735--840[label="0.0222222;2pkt 2fpkt"];
735--1477[label="0.0222222;2pkt 2fpkt"];
735--1706[label="0.0666667;6pkt 6fpkt"];
735--2395[label="0.0121951;1pkt 1fpkt"];
735--2735[label="0.0196078;1pkt 1fpkt"];
735--3053[label="0.02;1pkt 1fpkt"];
735--3913[label="0.0222222;2pkt 2fpkt"];
735--4592[label="0.0222222;2pkt 2fpkt"];
735--4697[label="0.1;2pkt 2fpkt"];
735--4932[label="0.0444444;4pkt 4fpkt"];
735--5023[label="0.0111111;1pkt 1fpkt"];
735--6083[label="0.333333;3pkt 3fpkt"];
735--6255[label="0.0196078;1pkt 1fpkt"];
735--6319[label="0.0645161;2pkt 2fpkt"];
735--6491[label="0.0789474;3pkt 3fpkt"];
735--6622[label="0.0181818;1pkt 1fpkt"];
735--6677[label="1;2pkt 2fpkt"];
735--6701[label="0.0222222;2pkt 2fpkt"];
735--6938[label="0.133333;12pkt 12fpkt"];
735--7284[label="0.0222222;2pkt 2fpkt"];
735--7736[label="0.0222222;2pkt 2fpkt"];
735--7967[label="0.0444444;4pkt 4fpkt"];
735--8726[label="0.333333;3pkt 3fpkt"];
735--8844[label="0.0196078;1pkt 1fpkt"];
735--8888[label="0.0666667;2pkt 2fpkt"];
735--9011[label="0.0789474;3pkt 3fpkt"];
735--9334[label="0.133333;12pkt 12fpkt"];
735--9586[label="0.0222222;2pkt 2fpkt"];
735--9871[label="0.0222222;2pkt 2fpkt"];
735--10711[label="0.0810811;3pkt 3fpkt"];
1371--6491[label="1;2pkt 2fpkt"];
1371--9011[label="1;2pkt 2fpkt"];
1371--10711[label="1;2pkt 2fpkt"];
1706--3505[label="0.0172414;2pkt 2fpkt"];
1706--3510[label="0.0172414;2pkt 2fpkt"];
1706--3520[label="0.0172414;2pkt 2fpkt"];
1706--3556[label="0.189655;22pkt 22fpkt"];
1706--3591[label="0.0172414;2pkt 2fpkt"];
1706--3600[label="0.0172414;2pkt 2fpkt"];
1706--3636[label="0.189655;22pkt 22fpkt"];
1706--3648[label="0.0172414;2pkt 2fpkt"];
1706--3662[label="0.0172414;2pkt 2fpkt"];
1706--3668[label="0.0172414;2pkt 2fpkt"];
1706--3703[label="0.189655;22pkt 22fpkt"];
4619--7756[label="1;16pkt 16fpkt"];
6083--8726[label="1;9pkt 9fpkt"];
6261--8849[label="1;45pkt 45fpkt"];
6261--10604[label="1;44pkt 44fpkt"];
6360--8918[label="1;19pkt 19fpkt"];
6360--10650[label="1;20pkt 20fpkt"];
6491--9011[label="1;38pkt 38fpkt"];
6491--10711[label="1;37pkt 37fpkt"];
6746--9189[label="1;30pkt 30fpkt"];
6746--10829[label="1;30pkt 30fpkt"];
8849--10604[label="1;44pkt 44fpkt"];
8918--10650[label="1;19pkt 19fpkt"];
9011--10711[label="1;37pkt 37fpkt"];
9189--10829[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="119.49.69.120"/>
      <filter dst_port="80" src_ip="133.158.162.102"/>
      <filter dst_ip="119.49.69.112" dst_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.766247,2.16934,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
3084[label="192.168.11.3;d;10pkt 10fpkt", shape=diamond, color=yellow];
6365[label="163.185.20.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8920[label="163.185.20.187;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.134.95:*, 192.168.11.3:9220}[72.7273%]&lt;BR/&gt;{*:8864, *:8864}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (38.4615%)&lt;BR/&gt; 9220: (30.7692%)&lt;BR/&gt; 1122: (3.84615%)&lt;BR/&gt; 1121: (3.84615%)&lt;BR/&gt; 1120: (3.84615%)&gt;];
}
3084--6365[label="0.5;1pkt 1fpkt"];
3084--8920[label="1;1pkt 1fpkt"];
6365--8920[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8864" src_port="8864"/>
      <filter dst_ip="192.168.11.3" dst_port="9220" src_ip="163.185.134.95"/>
    </slice>
    <from sec="1134363647" usec="0"/>
    <to sec="1134364355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
6381[label="133.159.9.189;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8934[label="133.159.9.189;42pkt 42fpkt", shape=invtriangle, color=brown];
10661[label="133.159.9.189;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.9.189:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6381--8934[label="1;42pkt 42fpkt"];
6381--10661[label="1;43pkt 43fpkt"];
8934--10661[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="133.159.9.189"/>
    </slice>
    <from sec="1134363618" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.34.237.189"/>
    </slice>
    <from sec="1134363749" usec="0"/>
    <to sec="1134364149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
1385[label="163.180.6.190;s;112pkt 112fpkt", shape=diamond, color=yellow];
2756[label="1.37.190.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
6388[label="163.180.6.190;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8940[label="163.180.6.190;2pkt 2fpkt", shape=invtriangle, color=brown];
10666[label="163.180.6.190;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.6.190:56548, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56548: (50%)&lt;BR/&gt; 3544: (2.94118%)&lt;BR/&gt; 20935: (1.2605%)&lt;BR/&gt; 58472: (0.840336%)&lt;BR/&gt; 65319: (0.420168%)&gt;];
}
1385--2756[label="1;1pkt 1fpkt"];
1385--6388[label="0.5;1pkt 1fpkt"];
1385--8940[label="0.5;1pkt 1fpkt"];
1385--10666[label="0.5;1pkt 1fpkt"];
6388--8940[label="1;2pkt 2fpkt"];
6388--10666[label="1;2pkt 2fpkt"];
8940--10666[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="163.180.6.190" src_port="56548"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.72.25.190"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.238.33.192"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
6412[label="133.158.134.192;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8958[label="133.158.134.192;16pkt 16fpkt", shape=invtriangle, color=brown];
10677[label="133.158.134.192;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.134.192:*, 87.176.108.2:80}[47.0588%]&lt;BR/&gt;{133.158.134.192:*, 0.106.115.199:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1284: (3.06122%)&lt;BR/&gt; 1276: (3.06122%)&lt;BR/&gt; 1275: (3.06122%)&lt;BR/&gt; 1274: (3.06122%)&gt;];
}
6412--8958[label="1;16pkt 16fpkt"];
6412--10677[label="1;16pkt 16fpkt"];
8958--10677[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="87.176.108.2" dst_port="80" src_ip="133.158.134.192"/>
      <filter dst_ip="0.106.115.199" dst_port="80" src_ip="133.158.134.192"/>
    </slice>
    <from sec="1134364373" usec="0"/>
    <to sec="1134364468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
6414[label="7.210.152.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8959[label="7.210.152.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.210.152.192:23485, 131.68.51.192:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23485: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6414--8959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.51.192" dst_port="80" src_ip="7.210.152.192" src_port="23485"/>
    </slice>
    <from sec="1134364093" usec="0"/>
    <to sec="1134364177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
6430[label="133.158.141.193;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8972[label="133.158.141.193;8pkt 8fpkt", shape=invtriangle, color=brown];
10686[label="133.158.141.193;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.193:*, 215.15.223.244:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4747: (6.25%)&lt;BR/&gt; 4743: (6.25%)&lt;BR/&gt; 4734: (6.25%)&lt;BR/&gt; 4699: (6.25%)&gt;];
}
6430--8972[label="1;8pkt 8fpkt"];
6430--10686[label="1;8pkt 8fpkt"];
8972--10686[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="215.15.223.244" dst_port="80" src_ip="133.158.141.193"/>
    </slice>
    <from sec="1134363994" usec="0"/>
    <to sec="1134364212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
1129[label="213.230.173.223;d;7pkt 7fpkt", shape=diamond, color=yellow];
1130[label="163.185.134.194;s;6pkt 6fpkt", shape=diamond, color=yellow];
6440[label="163.185.134.194;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8980[label="163.185.134.194;5pkt 5fpkt", shape=invtriangle, color=brown];
10692[label="163.185.134.194;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.134.194:*, 213.230.173.223:8090}[62.5%]&lt;BR/&gt;{163.185.134.248:*, 213.230.173.223:8090}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (46.5517%)&lt;BR/&gt; 1543: (8.62069%)&lt;BR/&gt; 1542: (8.62069%)&lt;BR/&gt; 1541: (8.62069%)&lt;BR/&gt; 1540: (8.62069%)&gt;];
}
1129--1130[label="0.833333;5pkt 5fpkt"];
1129--6440[label="0.833333;5pkt 5fpkt"];
1129--8980[label="1;5pkt 5fpkt"];
1129--10692[label="1;5pkt 5fpkt"];
1130--3488[label="0.166667;1pkt 1fpkt"];
1130--3573[label="0.166667;1pkt 1fpkt"];
1130--3654[label="0.166667;1pkt 1fpkt"];
1130--6440[label="1;6pkt 6fpkt"];
1130--8980[label="1;5pkt 5fpkt"];
1130--10692[label="1;5pkt 5fpkt"];
6440--8980[label="1;5pkt 5fpkt"];
6440--10692[label="1;5pkt 5fpkt"];
8980--10692[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="213.230.173.223" dst_port="8090" src_ip="163.185.134.194"/>
      <filter dst_ip="213.230.173.223" dst_port="8090" src_ip="163.185.134.248"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.195.215.194"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
6452[label="220.105.205.195;114pkt 114fpkt", shape=pentagon, color=darkviolet];
8987[label="220.105.205.195;113pkt 113fpkt", shape=invtriangle, color=brown];
10696[label="220.105.205.195;113pkt 113fpkt", shape=invhouse, color=bisque];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.105.205.195:35237, *:1026}[57.8947%]&lt;BR/&gt;{220.105.205.195:35237, *:1027}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35237: (50%)&lt;BR/&gt; 1026: (28.8235%)&lt;BR/&gt; 1027: (21.1765%)&gt;];
}
6452--8987[label="1;113pkt 113fpkt"];
6452--10696[label="1;113pkt 113fpkt"];
8987--10696[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="220.105.205.195" src_port="35237"/>
      <filter dst_port="1027" src_ip="220.105.205.195" src_port="35237"/>
    </slice>
    <from sec="1134364168" usec="0"/>
    <to sec="1134364169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
6457[label="197.6.10.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8991[label="197.6.10.196;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.6.10.196:1135, 131.68.8.93:19992}[33.3333%]&lt;BR/&gt;{197.6.10.196:1148, 131.68.8.93:19992}[33.3333%]&lt;BR/&gt;{197.6.10.196:12273, 131.68.8.93:19992}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19992: (50%)&lt;BR/&gt; 1148: (20%)&lt;BR/&gt; 1135: (20%)&lt;BR/&gt; 12273: (10%)&gt;];
}
6457--8991[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.8.93" dst_port="19992" src_ip="197.6.10.196" src_port="12273"/>
      <filter dst_ip="131.68.8.93" dst_port="19992" src_ip="197.6.10.196" src_port="1148"/>
      <filter dst_ip="131.68.8.93" dst_port="19992" src_ip="197.6.10.196" src_port="1135"/>
    </slice>
    <from sec="1134363621" usec="0"/>
    <to sec="1134364131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.197.103.196"/>
    </slice>
    <from sec="1134364390" usec="0"/>
    <to sec="1134364403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
6465[label="69.91.120.196;199pkt 199fpkt", shape=pentagon, color=darkviolet];
8996[label="69.91.120.196;198pkt 198fpkt", shape=invtriangle, color=brown];
10701[label="69.91.120.196;199pkt 199fpkt", shape=invhouse, color=bisque];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.91.120.196:1214, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6465--8996[label="1;198pkt 198fpkt"];
6465--10701[label="1;199pkt 199fpkt"];
8996--10701[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="69.91.120.196" src_port="1214"/>
    </slice>
    <from sec="1134364067" usec="0"/>
    <to sec="1134364103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.38.111.198"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
6494[label="216.14.177.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9013[label="216.14.177.199;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.14.177.199:19533, 131.68.51.192:80}[50%]&lt;BR/&gt;{216.14.177.199:19536, 131.68.51.192:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19536: (33.3333%)&lt;BR/&gt; 19533: (16.6667%)&gt;];
}
6494--9013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.51.192" dst_port="80" src_ip="216.14.177.199" src_port="19536"/>
      <filter dst_ip="131.68.51.192" dst_port="80" src_ip="216.14.177.199" src_port="19533"/>
    </slice>
    <from sec="1134363827" usec="0"/>
    <to sec="1134363851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.91.146.200"/>
    </slice>
    <from sec="1134363784" usec="0"/>
    <to sec="1134363844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.183.229.200"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
6511[label="215.156.136.201;214pkt 214fpkt", shape=pentagon, color=darkviolet];
9026[label="215.156.136.201;213pkt 213fpkt", shape=invtriangle, color=brown];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.136.201:58779, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58779: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6511--9026[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.156.136.201" src_port="58779"/>
    </slice>
    <from sec="1134364156" usec="0"/>
    <to sec="1134364182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.237.103.202"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
6528[label="213.201.177.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9035[label="213.201.177.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.201.177.202:51016, 151.251.47.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51016: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6528--9035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="213.201.177.202" src_port="51016"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.139.249.205"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
6571[label="166.115.128.206;36pkt 36fpkt", shape=pentagon, color=darkviolet];
9062[label="166.115.128.206;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.128.206:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6571--9062[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="166.115.128.206"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.44.240.207"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
6589[label="131.68.14.208;24pkt 24fpkt", shape=pentagon, color=darkviolet];
9072[label="131.68.14.208;24pkt 24fpkt", shape=invtriangle, color=brown];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.14.208:11765, *:*}[58.3333%]&lt;BR/&gt;{131.68.14.208:*, 0.68.116.91:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11765: (29.1667%)&lt;BR/&gt; 80: (14.5833%)&lt;BR/&gt; 14821: (4.16667%)&lt;BR/&gt; 64581: (2.08333%)&lt;BR/&gt; 58391: (2.08333%)&gt;];
}
6589--9072[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="131.68.14.208" src_port="11765"/>
      <filter dst_ip="0.68.116.91" dst_port="80" src_ip="131.68.14.208"/>
    </slice>
    <from sec="1134363648" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.194.64.208"/>
    </slice>
    <from sec="1134364217" usec="0"/>
    <to sec="1134364325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
6594[label="201.224.146.208;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9077[label="201.224.146.208;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.224.146.208:80, 196.129.156.216:*}[63.6364%]&lt;BR/&gt;{201.224.146.208:80, 196.129.156.217:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50511: (4.54545%)&lt;BR/&gt; 50299: (4.54545%)&lt;BR/&gt; 50208: (4.54545%)&lt;BR/&gt; 50149: (4.54545%)&gt;];
}
6594--9077[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="201.224.146.208" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="201.224.146.208" src_port="80"/>
    </slice>
    <from sec="1134364339" usec="0"/>
    <to sec="1134364397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
6596[label="196.129.159.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9078[label="196.129.159.208;1pkt 1fpkt", shape=invtriangle, color=brown];
10753[label="196.129.159.208;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.159.208:1906, 2.68.87.71:25}[50%]&lt;BR/&gt;{196.129.159.208:25, 20.230.219.140:2992}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2992: (37.5%)&lt;BR/&gt; 1906: (12.5%)&gt;];
}
6596--9078[label="1;1pkt 1fpkt"];
6596--10753[label="1;1pkt 1fpkt"];
9078--10753[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.230.219.140" dst_port="2992" src_ip="196.129.159.208" src_port="25"/>
      <filter dst_ip="2.68.87.71" dst_port="25" src_ip="196.129.159.208" src_port="1906"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
6599[label="5.98.4.209;23pkt 23fpkt", shape=pentagon, color=darkviolet];
9080[label="5.98.4.209;22pkt 22fpkt", shape=invtriangle, color=brown];
10755[label="5.98.4.209;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.98.4.209:80, 196.129.156.216:*}[52.1739%]&lt;BR/&gt;{5.98.4.209:80, 196.129.156.217:*}[47.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65503: (2.20588%)&lt;BR/&gt; 50694: (2.20588%)&lt;BR/&gt; 50654: (2.20588%)&lt;BR/&gt; 50546: (2.20588%)&gt;];
}
6599--9080[label="1;22pkt 22fpkt"];
6599--10755[label="1;23pkt 23fpkt"];
9080--10755[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.216" src_ip="5.98.4.209" src_port="80"/>
      <filter dst_ip="196.129.156.217" src_ip="5.98.4.209" src_port="80"/>
    </slice>
    <from sec="1134364298" usec="0"/>
    <to sec="1134364403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
6601[label="4.128.25.209;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9082[label="4.128.25.209;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.128.25.209:*, 131.68.162.138:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4094: (7.69231%)&lt;BR/&gt; 4093: (7.69231%)&lt;BR/&gt; 4092: (7.69231%)&lt;BR/&gt; 4091: (7.69231%)&gt;];
}
6601--9082[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.162.138" dst_port="80" src_ip="4.128.25.209"/>
    </slice>
    <from sec="1134364413" usec="0"/>
    <to sec="1134364466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
6606[label="163.180.123.209;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9084[label="163.180.123.209;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.123.209:*, 119.49.69.16:80}[33.3333%]&lt;BR/&gt;{163.180.123.209:*, 1.235.200.161:80}[33.3333%]&lt;BR/&gt;{163.180.123.209:*, 2.162.134.32:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3472: (4.34783%)&lt;BR/&gt; 3468: (4.34783%)&lt;BR/&gt; 3466: (4.34783%)&lt;BR/&gt; 3458: (4.34783%)&gt;];
}
6606--9084[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="1.235.200.161" dst_port="80" src_ip="163.180.123.209"/>
      <filter dst_ip="119.49.69.16" dst_port="80" src_ip="163.180.123.209"/>
      <filter dst_ip="2.162.134.32" dst_port="80" src_ip="163.180.123.209"/>
    </slice>
    <from sec="1134364037" usec="0"/>
    <to sec="1134364125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
6610[label="197.99.208.209;57pkt 57fpkt", shape=pentagon, color=darkviolet];
9086[label="197.99.208.209;56pkt 56fpkt", shape=invtriangle, color=brown];
10758[label="197.99.208.209;56pkt 56fpkt", shape=invhouse, color=bisque];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.208.209:2411, *:*}[50.8772%]&lt;BR/&gt;{197.99.208.209:443, *:*}[22.807%]&lt;BR/&gt;{197.99.208.209:*, 197.52.178.227:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2411: (25.7396%)&lt;BR/&gt; 443: (11.5385%)&lt;BR/&gt; 135: (4.43787%)&lt;BR/&gt; 5000: (1.77515%)&lt;BR/&gt; 4797: (1.77515%)&gt;];
}
6610--9086[label="1;56pkt 56fpkt"];
6610--10758[label="1;56pkt 56fpkt"];
9086--10758[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="197.52.178.227" src_ip="197.99.208.209"/>
      <filter src_ip="197.99.208.209" src_port="2411"/>
      <filter src_ip="197.99.208.209" src_port="443"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
6620[label="133.158.172.210;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9093[label="133.158.172.210;7pkt 7fpkt", shape=invtriangle, color=brown];
10764[label="133.158.172.210;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.172.210:*, 215.14.111.112:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2766: (6.52174%)&lt;BR/&gt; 2764: (6.52174%)&lt;BR/&gt; 2762: (6.52174%)&lt;BR/&gt; 2756: (6.52174%)&gt;];
}
6620--9093[label="1;7pkt 7fpkt"];
6620--10764[label="1;8pkt 8fpkt"];
9093--10764[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.111.112" dst_port="80" src_ip="133.158.172.210"/>
    </slice>
    <from sec="1134364002" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
1056[label="133.158.153.113;d;145pkt 145fpkt", shape=diamond, color=yellow];
2625[label="133.158.153.127;d;78pkt 78fpkt", shape=diamond, color=yellow];
5164[label="67.240.12.98;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6060[label="4.119.142.163;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6539[label="215.9.90.203;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6621[label="220.132.183.210;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8124[label="67.240.12.98;8pkt 8fpkt", shape=invtriangle, color=brown];
8712[label="4.119.142.163;9pkt 9fpkt", shape=invtriangle, color=brown];
9039[label="215.9.90.203;50pkt 50fpkt", shape=invtriangle, color=brown];
9094[label="220.132.183.210;6pkt 6fpkt", shape=invtriangle, color=brown];
10506[label="4.119.142.163;10pkt 10fpkt", shape=invhouse, color=bisque];
10727[label="215.9.90.203;50pkt 50fpkt", shape=invhouse, color=bisque];
10765[label="220.132.183.210;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.158.153.113:80}[62.5%]&lt;BR/&gt;{*:*, 133.158.153.127:80}[33.6207%]&lt;BR/&gt;{215.9.90.203:*, *:80}[21.9828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57101: (0.455581%)&lt;BR/&gt; 57086: (0.455581%)&lt;BR/&gt; 57032: (0.455581%)&lt;BR/&gt; 56986: (0.455581%)&gt;];
}
1056--1713[label="0.181818;2pkt 2fpkt"];
1056--2064[label="0.0108696;1pkt 1fpkt"];
1056--2086[label="0.05;4pkt 4fpkt"];
1056--2182[label="0.030303;3pkt 3fpkt"];
1056--2190[label="0.038835;4pkt 4fpkt"];
1056--2323[label="0.0253165;2pkt 2fpkt"];
1056--2391[label="0.0119048;1pkt 1fpkt"];
1056--2428[label="0.03125;3pkt 3fpkt"];
1056--2450[label="0.0373832;4pkt 4fpkt"];
1056--2476[label="0.031746;2pkt 2fpkt"];
1056--2503[label="0.0128205;1pkt 1fpkt"];
1056--2775[label="0.0136986;1pkt 1fpkt"];
1056--2779[label="0.0128205;1pkt 1fpkt"];
1056--2789[label="0.0306122;3pkt 3fpkt"];
1056--2798[label="0.0217391;2pkt 2fpkt"];
1056--2993[label="0.0410959;3pkt 3fpkt"];
1056--3046[label="0.027027;2pkt 2fpkt"];
1056--3061[label="0.025974;2pkt 2fpkt"];
1056--3400[label="0.03125;3pkt 3fpkt"];
1056--3417[label="0.025974;2pkt 2fpkt"];
1056--3505[label="0.0206897;3pkt 3fpkt"];
1056--3510[label="0.0482759;7pkt 7fpkt"];
1056--3520[label="0.062069;9pkt 9fpkt"];
1056--3556[label="0.0206897;3pkt 3fpkt"];
1056--3591[label="0.0482759;7pkt 7fpkt"];
1056--3600[label="0.062069;9pkt 9fpkt"];
1056--3636[label="0.0206897;3pkt 3fpkt"];
1056--3648[label="0.0413793;6pkt 6fpkt"];
1056--3662[label="0.0206897;3pkt 3fpkt"];
1056--3668[label="0.062069;9pkt 9fpkt"];
1056--3703[label="0.0206897;3pkt 3fpkt"];
1056--3756[label="0.0392157;4pkt 4fpkt"];
1056--3858[label="0.0121951;1pkt 1fpkt"];
1056--4048[label="0.0128205;1pkt 1fpkt"];
1056--4067[label="0.0128205;1pkt 1fpkt"];
1056--4213[label="0.0125;1pkt 1fpkt"];
1056--4254[label="0.0322581;2pkt 2fpkt"];
1056--4335[label="0.0114943;1pkt 1fpkt"];
1056--4346[label="0.0232558;2pkt 2fpkt"];
1056--4400[label="0.0106383;1pkt 1fpkt"];
1056--4427[label="0.0263158;2pkt 2fpkt"];
1056--4484[label="0.0253165;2pkt 2fpkt"];
1056--4485[label="0.0227273;2pkt 2fpkt"];
1056--4501[label="0.0325203;4pkt 4fpkt"];
1056--4572[label="0.0285714;3pkt 3fpkt"];
1056--5164[label="0.333333;3pkt 3fpkt"];
1056--5170[label="0.125;1pkt 1fpkt"];
1056--5193[label="0.181818;2pkt 2fpkt"];
1056--6060[label="0.2;2pkt 2fpkt"];
1056--6539[label="0.901961;46pkt 46fpkt"];
1056--6621[label="1;7pkt 7fpkt"];
1056--7173[label="0.0392157;4pkt 4fpkt"];
1056--7465[label="0.0125;1pkt 1fpkt"];
1056--7497[label="0.0327869;2pkt 2fpkt"];
1056--7558[label="0.0113636;1pkt 1fpkt"];
1056--7604[label="0.0107527;1pkt 1fpkt"];
1056--7622[label="0.0266667;2pkt 2fpkt"];
1056--7662[label="0.025641;2pkt 2fpkt"];
1056--7663[label="0.0227273;2pkt 2fpkt"];
1056--7672[label="0.0322581;4pkt 4fpkt"];
1056--8124[label="0.25;2pkt 2fpkt"];
1056--8129[label="0.125;1pkt 1fpkt"];
1056--8145[label="0.2;2pkt 2fpkt"];
1056--8712[label="0.222222;2pkt 2fpkt"];
1056--9039[label="0.92;46pkt 46fpkt"];
1056--9094[label="1;6pkt 6fpkt"];
1056--9509[label="0.038835;4pkt 4fpkt"];
1056--9701[label="0.0125;1pkt 1fpkt"];
1056--9788[label="0.0106383;1pkt 1fpkt"];
1056--9800[label="0.0266667;2pkt 2fpkt"];
1056--9826[label="0.0224719;2pkt 2fpkt"];
1056--10126[label="0.2;2pkt 2fpkt"];
1056--10506[label="0.2;2pkt 2fpkt"];
1056--10727[label="0.92;46pkt 46fpkt"];
1056--10765[label="1;6pkt 6fpkt"];
2625--2734[label="0.0138889;1pkt 1fpkt"];
2625--2775[label="0.0136986;1pkt 1fpkt"];
2625--2779[label="0.025641;2pkt 2fpkt"];
2625--2789[label="0.025641;2pkt 2fpkt"];
2625--2798[label="0.0641026;5pkt 5fpkt"];
2625--2993[label="0.0684932;5pkt 5fpkt"];
2625--3046[label="0.0135135;1pkt 1fpkt"];
2625--3061[label="0.012987;1pkt 1fpkt"];
2625--3400[label="0.0384615;3pkt 3fpkt"];
2625--3417[label="0.012987;1pkt 1fpkt"];
2625--3505[label="0.025641;2pkt 2fpkt"];
2625--3510[label="0.0512821;4pkt 4fpkt"];
2625--3520[label="0.025641;2pkt 2fpkt"];
2625--3556[label="0.0769231;6pkt 6fpkt"];
2625--3591[label="0.0512821;4pkt 4fpkt"];
2625--3600[label="0.025641;2pkt 2fpkt"];
2625--3636[label="0.0769231;6pkt 6fpkt"];
2625--3648[label="0.0384615;3pkt 3fpkt"];
2625--3662[label="0.025641;2pkt 2fpkt"];
2625--3668[label="0.025641;2pkt 2fpkt"];
2625--3703[label="0.0769231;6pkt 6fpkt"];
2625--3756[label="0.025641;2pkt 2fpkt"];
2625--3858[label="0.025641;2pkt 2fpkt"];
2625--4005[label="0.0333333;2pkt 2fpkt"];
2625--4019[label="0.0142857;1pkt 1fpkt"];
2625--4067[label="0.0128205;1pkt 1fpkt"];
2625--4213[label="0.025641;2pkt 2fpkt"];
2625--4254[label="0.0322581;2pkt 2fpkt"];
2625--4335[label="0.0384615;3pkt 3fpkt"];
2625--4346[label="0.0641026;5pkt 5fpkt"];
2625--4371[label="0.0151515;1pkt 1fpkt"];
2625--4400[label="0.0512821;4pkt 4fpkt"];
2625--4427[label="0.0131579;1pkt 1fpkt"];
2625--4484[label="0.0128205;1pkt 1fpkt"];
2625--4485[label="0.0128205;1pkt 1fpkt"];
2625--4572[label="0.0384615;3pkt 3fpkt"];
2625--5164[label="0.666667;6pkt 6fpkt"];
2625--5170[label="0.125;1pkt 1fpkt"];
2625--6060[label="0.4;4pkt 4fpkt"];
2625--7173[label="0.025641;2pkt 2fpkt"];
2625--7337[label="0.0333333;2pkt 2fpkt"];
2625--7344[label="0.0142857;1pkt 1fpkt"];
2625--7465[label="0.025641;2pkt 2fpkt"];
2625--7497[label="0.0327869;2pkt 2fpkt"];
2625--7558[label="0.0384615;3pkt 3fpkt"];
2625--7585[label="0.0151515;1pkt 1fpkt"];
2625--7604[label="0.0512821;4pkt 4fpkt"];
2625--7622[label="0.0133333;1pkt 1fpkt"];
2625--7662[label="0.0128205;1pkt 1fpkt"];
2625--7663[label="0.0128205;1pkt 1fpkt"];
2625--8124[label="0.75;6pkt 6fpkt"];
2625--8129[label="0.125;1pkt 1fpkt"];
2625--8712[label="0.444444;4pkt 4fpkt"];
2625--9509[label="0.025641;2pkt 2fpkt"];
2625--9624[label="0.0144928;1pkt 1fpkt"];
2625--9701[label="0.025641;2pkt 2fpkt"];
2625--9773[label="0.0151515;1pkt 1fpkt"];
2625--9788[label="0.0512821;4pkt 4fpkt"];
2625--9800[label="0.0133333;1pkt 1fpkt"];
2625--9826[label="0.0128205;1pkt 1fpkt"];
2625--10506[label="0.4;4pkt 4fpkt"];
5164--8124[label="1;8pkt 8fpkt"];
6060--8712[label="1;9pkt 9fpkt"];
6060--10506[label="1;10pkt 10fpkt"];
6539--9039[label="1;50pkt 50fpkt"];
6539--10727[label="1;50pkt 50fpkt"];
6621--9094[label="1;6pkt 6fpkt"];
6621--10765[label="1;6pkt 6fpkt"];
8712--10506[label="1;9pkt 9fpkt"];
9039--10727[label="1;50pkt 50fpkt"];
9094--10765[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="215.9.90.203"/>
      <filter dst_ip="133.158.153.113" dst_port="80"/>
      <filter dst_ip="133.158.153.127" dst_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.100.28.211"/>
    </slice>
    <from sec="1134363921" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.147.100.211"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.118.117.211"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
6633[label="197.99.193.211;27pkt 27fpkt", shape=pentagon, color=darkviolet];
9103[label="197.99.193.211;27pkt 27fpkt", shape=invtriangle, color=brown];
10771[label="197.99.193.211;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.193.211:53, *:*}[59.2593%]&lt;BR/&gt;{197.99.193.211:25, *:*}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (31.25%)&lt;BR/&gt; 25: (15%)&lt;BR/&gt; 32769: (3.75%)&lt;BR/&gt; 80: (3.75%)&lt;BR/&gt; 63567: (1.875%)&gt;];
}
6633--9103[label="1;27pkt 27fpkt"];
6633--10771[label="1;26pkt 26fpkt"];
9103--10771[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.193.211" src_port="53"/>
      <filter src_ip="197.99.193.211" src_port="25"/>
    </slice>
    <from sec="1134363723" usec="0"/>
    <to sec="1134364396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.19.22.212"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745409,2.21432,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
3038[label="128.94.15.111;d;12pkt 12fpkt", shape=diamond, color=yellow];
4158[label="133.158.40.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.94.15.111:210}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (50%)&lt;BR/&gt; 1245: (7.69231%)&lt;BR/&gt; 49686: (3.84615%)&lt;BR/&gt; 37717: (3.84615%)&lt;BR/&gt; 37716: (3.84615%)&gt;];
}
3038--4158[label="1;1pkt 1fpkt"];
3038--6639[label="0.166667;2pkt 2fpkt"];
3038--9108[label="0.166667;2pkt 2fpkt"];
3038--10774[label="0.166667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.94.15.111" dst_port="210"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.17.139.213"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
6663[label="214.168.160.214;201pkt 201fpkt", shape=pentagon, color=darkviolet];
9125[label="214.168.160.214;201pkt 201fpkt", shape=invtriangle, color=brown];
10785[label="214.168.160.214;201pkt 201fpkt", shape=invhouse, color=bisque];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.168.160.214:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4237: (0.497512%)&lt;BR/&gt; 3781: (0.497512%)&lt;BR/&gt; 3391: (0.497512%)&lt;BR/&gt; 2260: (0.497512%)&gt;];
}
6663--9125[label="1;201pkt 201fpkt"];
6663--10785[label="1;201pkt 201fpkt"];
9125--10785[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="214.168.160.214"/>
    </slice>
    <from sec="1134364336" usec="0"/>
    <to sec="1134364367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
6671[label="133.158.82.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9132[label="133.158.82.215;1pkt 1fpkt", shape=invtriangle, color=brown];
10790[label="133.158.82.215;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.82.215:37195, 204.178.249.197:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37195: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6671--9132[label="1;1pkt 1fpkt"];
6671--10790[label="1;1pkt 1fpkt"];
9132--10790[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.178.249.197" dst_port="80" src_ip="133.158.82.215" src_port="37195"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1093{
style=filled;
color=gray75;
1192[label="196.129.158.216;s;175pkt 175fpkt", shape=diamond, color=yellow];
6683[label="196.129.158.216;253pkt 253fpkt", shape=pentagon, color=darkviolet];
9141[label="196.129.158.216;252pkt 252fpkt", shape=invtriangle, color=brown];
10796[label="196.129.158.216;252pkt 252fpkt", shape=invhouse, color=bisque];
stat1093[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.158.216:*, 2.19.17.123:80}[29.6443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3562%)&lt;BR/&gt; 0: (1.28755%)&lt;BR/&gt; 2370: (0.214592%)&lt;BR/&gt; 2368: (0.214592%)&lt;BR/&gt; 2367: (0.214592%)&gt;];
}
1192--1728[label="0.028777;4pkt 4fpkt"];
1192--3505[label="0.142857;25pkt 25fpkt"];
1192--3510[label="0.0114286;2pkt 2fpkt"];
1192--3520[label="0.0571429;10pkt 10fpkt"];
1192--3556[label="0.108571;19pkt 19fpkt"];
1192--3591[label="0.0114286;2pkt 2fpkt"];
1192--3600[label="0.0571429;10pkt 10fpkt"];
1192--3636[label="0.108571;19pkt 19fpkt"];
1192--3648[label="0.0571429;10pkt 10fpkt"];
1192--3662[label="0.142857;25pkt 25fpkt"];
1192--3668[label="0.0571429;10pkt 10fpkt"];
1192--3703[label="0.108571;19pkt 19fpkt"];
1192--6683[label="1;175pkt 175fpkt"];
1192--9141[label="0.994286;174pkt 174fpkt"];
1192--10796[label="0.994286;174pkt 174fpkt"];
6683--9141[label="1;252pkt 252fpkt"];
6683--10796[label="1;252pkt 252fpkt"];
9141--10796[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_ip="2.19.17.123" dst_port="80" src_ip="196.129.158.216"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.71.181.216"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1095{
style=filled;
color=gray75;
6691[label="0.217.48.217;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9149[label="0.217.48.217;6pkt 6fpkt", shape=invtriangle, color=brown];
10803[label="0.217.48.217;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1095[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.217.48.217:80, 131.68.8.128:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1566: (7.89474%)&lt;BR/&gt; 1558: (7.89474%)&lt;BR/&gt; 1557: (7.89474%)&lt;BR/&gt; 1550: (7.89474%)&gt;];
}
6691--9149[label="1;6pkt 6fpkt"];
6691--10803[label="1;6pkt 6fpkt"];
9149--10803[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.8.128" src_ip="0.217.48.217" src_port="80"/>
    </slice>
    <from sec="1134363824" usec="0"/>
    <to sec="1134363959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.215.102.217"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.30.219"/>
    </slice>
    <from sec="1134363974" usec="0"/>
    <to sec="1134364486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
6729[label="218.3.18.220;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9176[label="218.3.18.220;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.3.18.220:80, 133.158.180.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2131: (3.84615%)&lt;BR/&gt; 2130: (3.84615%)&lt;BR/&gt; 2129: (3.84615%)&lt;BR/&gt; 2128: (3.84615%)&gt;];
}
6729--9176[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.180.88" src_ip="218.3.18.220" src_port="80"/>
    </slice>
    <from sec="1134364020" usec="0"/>
    <to sec="1134364027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.159.20.220"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1101{
style=filled;
color=gray75;
6736[label="218.11.83.220;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9181[label="218.11.83.220;7pkt 7fpkt", shape=invtriangle, color=brown];
10824[label="218.11.83.220;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1101[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.11.83.220:80, 163.180.64.253:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2941: (6.52174%)&lt;BR/&gt; 2940: (6.52174%)&lt;BR/&gt; 2938: (6.52174%)&lt;BR/&gt; 2937: (6.52174%)&gt;];
}
6736--9181[label="1;7pkt 7fpkt"];
6736--10824[label="1;8pkt 8fpkt"];
9181--10824[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.64.253" src_ip="218.11.83.220" src_port="80"/>
    </slice>
    <from sec="1134363793" usec="0"/>
    <to sec="1134364469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
6739[label="133.159.96.220;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9183[label="133.159.96.220;14pkt 14fpkt", shape=invtriangle, color=brown];
10825[label="133.159.96.220;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.96.220:*, 198.254.61.128:80}[50%]&lt;BR/&gt;{133.159.96.220:*, 192.138.43.204:80}[21.4286%]&lt;BR/&gt;{133.159.96.220:*, 208.195.55.249:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63607: (3.65854%)&lt;BR/&gt; 62016: (3.65854%)&lt;BR/&gt; 61747: (3.65854%)&lt;BR/&gt; 61385: (3.65854%)&gt;];
}
6739--9183[label="1;14pkt 14fpkt"];
6739--10825[label="1;13pkt 13fpkt"];
9183--10825[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="198.254.61.128" dst_port="80" src_ip="133.159.96.220"/>
      <filter dst_ip="208.195.55.249" dst_port="80" src_ip="133.159.96.220"/>
      <filter dst_ip="192.138.43.204" dst_port="80" src_ip="133.159.96.220"/>
    </slice>
    <from sec="1134363750" usec="0"/>
    <to sec="1134364429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.21.197.220"/>
    </slice>
    <from sec="1134363882" usec="0"/>
    <to sec="1134363917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
6759[label="67.194.2.222;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9198[label="67.194.2.222;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.194.2.222:80, 196.129.156.135:35990}[25%]&lt;BR/&gt;{67.194.2.222:80, 196.129.156.135:36442}[25%]&lt;BR/&gt;{67.194.2.222:80, 196.129.156.135:36840}[25%]&lt;BR/&gt;{67.194.2.222:80, 196.129.156.135:36842}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36842: (12.5%)&lt;BR/&gt; 36840: (12.5%)&lt;BR/&gt; 36442: (12.5%)&lt;BR/&gt; 35990: (12.5%)&gt;];
}
6759--9198[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.135" dst_port="36842" src_ip="67.194.2.222" src_port="80"/>
      <filter dst_ip="196.129.156.135" dst_port="36840" src_ip="67.194.2.222" src_port="80"/>
      <filter dst_ip="196.129.156.135" dst_port="36442" src_ip="67.194.2.222" src_port="80"/>
      <filter dst_ip="196.129.156.135" dst_port="35990" src_ip="67.194.2.222" src_port="80"/>
    </slice>
    <from sec="1134364356" usec="0"/>
    <to sec="1134364462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.40.84.222"/>
    </slice>
    <from sec="1134364260" usec="0"/>
    <to sec="1134364282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.210.178.222"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
6795[label="163.180.217.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9222[label="163.180.217.224;3pkt 3fpkt", shape=invtriangle, color=brown];
10848[label="163.180.217.224;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.217.224:49252, 0.106.115.45:80}[33.3333%]&lt;BR/&gt;{163.180.217.224:49214, 201.164.9.156:80}[33.3333%]&lt;BR/&gt;{163.180.217.224:49249, 2.1.134.178:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49252: (21.4286%)&lt;BR/&gt; 49214: (21.4286%)&lt;BR/&gt; 49249: (7.14286%)&gt;];
}
6795--9222[label="1;2pkt 2fpkt"];
6795--10848[label="1;2pkt 2fpkt"];
9222--10848[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.1.134.178" dst_port="80" src_ip="163.180.217.224" src_port="49249"/>
      <filter dst_ip="201.164.9.156" dst_port="80" src_ip="163.180.217.224" src_port="49214"/>
      <filter dst_ip="0.106.115.45" dst_port="80" src_ip="163.180.217.224" src_port="49252"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.58.31.225"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
6803[label="133.159.216.225;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9230[label="133.159.216.225;4pkt 4fpkt", shape=invtriangle, color=brown];
10854[label="133.159.216.225;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.216.225:22292, 18.24.180.154:1060}[25%]&lt;BR/&gt;{133.159.216.225:22070, 2.239.140.14:80}[25%]&lt;BR/&gt;{133.159.216.225:22087, 2.239.140.14:80}[25%]&lt;BR/&gt;{133.159.216.225:22088, 2.239.140.14:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 22292: (12.5%)&lt;BR/&gt; 22088: (12.5%)&lt;BR/&gt; 22087: (12.5%)&lt;BR/&gt; 22070: (12.5%)&gt;];
}
6803--9230[label="1;4pkt 4fpkt"];
6803--10854[label="1;4pkt 4fpkt"];
9230--10854[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="2.239.140.14" dst_port="80" src_ip="133.159.216.225" src_port="22088"/>
      <filter dst_ip="2.239.140.14" dst_port="80" src_ip="133.159.216.225" src_port="22087"/>
      <filter dst_ip="2.239.140.14" dst_port="80" src_ip="133.159.216.225" src_port="22070"/>
      <filter dst_ip="18.24.180.154" dst_port="1060" src_ip="133.159.216.225" src_port="22292"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
6806[label="133.159.0.226;45pkt 45fpkt", shape=pentagon, color=darkviolet];
9232[label="133.159.0.226;44pkt 44fpkt", shape=invtriangle, color=brown];
10856[label="133.159.0.226;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.0.226:*, 217.78.107.20:80}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3668: (1.1194%)&lt;BR/&gt; 2766: (1.1194%)&lt;BR/&gt; 2765: (1.1194%)&lt;BR/&gt; 2761: (1.1194%)&gt;];
}
6806--9232[label="1;44pkt 44fpkt"];
6806--10856[label="1;45pkt 45fpkt"];
9232--10856[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="217.78.107.20" dst_port="80" src_ip="133.159.0.226"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.139.14.226"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1113{
style=filled;
color=gray75;
6809[label="163.185.30.226;19pkt 19fpkt", shape=pentagon, color=darkviolet];
9235[label="163.185.30.226;18pkt 18fpkt", shape=invtriangle, color=brown];
10858[label="163.185.30.226;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1113[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.185.30.226:*, 213.7.142.222:80}[57.8947%]&lt;BR/&gt;{163.185.30.226:*, 105.84.71.200:80}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3214%)&lt;BR/&gt; 1863: (2.67857%)&lt;BR/&gt; 1294: (2.67857%)&lt;BR/&gt; 1293: (2.67857%)&lt;BR/&gt; 1292: (2.67857%)&gt;];
}
6809--9235[label="1;18pkt 18fpkt"];
6809--10858[label="1;19pkt 19fpkt"];
9235--10858[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.142.222" dst_port="80" src_ip="163.185.30.226"/>
      <filter dst_ip="105.84.71.200" dst_port="80" src_ip="163.185.30.226"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134363826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1114{
style=filled;
color=gray75;
6813[label="131.156.108.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9237[label="131.156.108.226;2pkt 2fpkt", shape=invtriangle, color=brown];
10860[label="131.156.108.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1114[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.156.108.226:4742, 5.112.149.122:80}[50%]&lt;BR/&gt;{131.156.108.226:4743, 5.112.149.122:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4743: (30%)&lt;BR/&gt; 4742: (20%)&gt;];
}
6813--9237[label="1;2pkt 2fpkt"];
6813--10860[label="1;1pkt 1fpkt"];
9237--10860[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="5.112.149.122" dst_port="80" src_ip="131.156.108.226" src_port="4743"/>
      <filter dst_ip="5.112.149.122" dst_port="80" src_ip="131.156.108.226" src_port="4742"/>
    </slice>
    <from sec="1134363825" usec="0"/>
    <to sec="1134363841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.131.164.226"/>
    </slice>
    <from sec="1134364122" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1116{
style=filled;
color=gray75;
6817[label="220.18.170.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9241[label="220.18.170.226;2pkt 2fpkt", shape=invtriangle, color=brown];
10863[label="220.18.170.226;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1116[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.18.170.226:22185, 151.251.47.111:80}[33.3333%]&lt;BR/&gt;{220.18.170.226:23286, 151.251.47.111:80}[33.3333%]&lt;BR/&gt;{220.18.170.226:23474, 151.251.47.111:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23474: (21.4286%)&lt;BR/&gt; 23286: (21.4286%)&lt;BR/&gt; 22185: (7.14286%)&gt;];
}
6817--9241[label="1;2pkt 2fpkt"];
6817--10863[label="1;2pkt 2fpkt"];
9241--10863[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="220.18.170.226" src_port="23474"/>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="220.18.170.226" src_port="23286"/>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="220.18.170.226" src_port="22185"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.152.170.226"/>
    </slice>
    <from sec="1134364266" usec="0"/>
    <to sec="1134364319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.213.197.226"/>
    </slice>
    <from sec="1134363636" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
6822[label="217.71.0.227;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9246[label="217.71.0.227;14pkt 14fpkt", shape=invtriangle, color=brown];
10866[label="217.71.0.227;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.71.0.227:80, 196.129.156.130:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2424: (3.65854%)&lt;BR/&gt; 2413: (3.65854%)&lt;BR/&gt; 2373: (3.65854%)&lt;BR/&gt; 2287: (3.65854%)&gt;];
}
6822--9246[label="1;14pkt 14fpkt"];
6822--10866[label="1;13pkt 13fpkt"];
9246--10866[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.130" src_ip="217.71.0.227" src_port="80"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
6832[label="19.20.252.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9252[label="19.20.252.227;1pkt 1fpkt", shape=invtriangle, color=brown];
10869[label="19.20.252.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.20.252.227:53, 166.115.137.18:1059}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1059: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
6832--9252[label="1;1pkt 1fpkt"];
6832--10869[label="1;1pkt 1fpkt"];
9252--10869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.115.137.18" dst_port="1059" src_ip="19.20.252.227" src_port="53"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
6834[label="133.159.10.228;42pkt 42fpkt", shape=pentagon, color=darkviolet];
9253[label="133.159.10.228;42pkt 42fpkt", shape=invtriangle, color=brown];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.10.228:*, 5.38.156.99:80}[61.9048%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 59254: (8.33333%)&lt;BR/&gt; 53: (8.33333%)&lt;BR/&gt; 2163: (1.19048%)&lt;BR/&gt; 2162: (1.19048%)&gt;];
}
6834--9253[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="5.38.156.99" dst_port="80" src_ip="133.159.10.228"/>
    </slice>
    <from sec="1134364342" usec="0"/>
    <to sec="1134364445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1122{
style=filled;
color=gray75;
6841[label="133.158.150.228;95pkt 95fpkt", shape=pentagon, color=darkviolet];
9259[label="133.158.150.228;95pkt 95fpkt", shape=invtriangle, color=brown];
10870[label="133.158.150.228;94pkt 94fpkt", shape=invhouse, color=bisque];
stat1122[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.150.228:40903, *:*}[97.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40903: (48.9437%)&lt;BR/&gt; 64323: (0.528169%)&lt;BR/&gt; 64165: (0.528169%)&lt;BR/&gt; 63835: (0.528169%)&lt;BR/&gt; 63593: (0.528169%)&gt;];
}
6841--9259[label="1;95pkt 95fpkt"];
6841--10870[label="1;94pkt 94fpkt"];
9259--10870[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="133.158.150.228" src_port="40903"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
6843[label="133.158.172.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9261[label="133.158.172.228;1pkt 1fpkt", shape=invtriangle, color=brown];
10872[label="133.158.172.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.172.228:2115, 196.0.39.133:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2115: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6843--9261[label="1;1pkt 1fpkt"];
6843--10872[label="1;1pkt 1fpkt"];
9261--10872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.0.39.133" dst_port="80" src_ip="133.158.172.228" src_port="2115"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
6846[label="195.233.236.228;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9264[label="195.233.236.228;4pkt 4fpkt", shape=invtriangle, color=brown];
10874[label="195.233.236.228;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.233.236.228:0, 208.251.245.228:0}[20%]&lt;BR/&gt;{195.233.236.228:113, 193.64.1.166:36550}[20%]&lt;BR/&gt;{195.233.236.228:39609, 193.64.1.166:22}[20%]&lt;BR/&gt;{195.233.236.228:39613, 193.64.1.166:25}[20%]&lt;BR/&gt;{195.233.236.228:0, 193.64.1.166:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (30.7692%)&lt;BR/&gt; 39613: (11.5385%)&lt;BR/&gt; 39609: (11.5385%)&lt;BR/&gt; 36550: (11.5385%)&lt;BR/&gt; 113: (11.5385%)&gt;];
}
6846--9264[label="1;4pkt 4fpkt"];
6846--10874[label="1;4pkt 4fpkt"];
9264--10874[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="193.64.1.166" src_ip="195.233.236.228"/>
      <filter dst_ip="193.64.1.166" dst_port="25" src_ip="195.233.236.228" src_port="39613"/>
      <filter dst_ip="193.64.1.166" dst_port="22" src_ip="195.233.236.228" src_port="39609"/>
      <filter dst_ip="193.64.1.166" dst_port="36550" src_ip="195.233.236.228" src_port="113"/>
      <filter dst_ip="208.251.245.228" src_ip="195.233.236.228"/>
    </slice>
    <from sec="1134363752" usec="0"/>
    <to sec="1134364372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
6851[label="163.180.91.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9269[label="163.180.91.229;1pkt 1fpkt", shape=invtriangle, color=brown];
10878[label="163.180.91.229;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.91.229:80, 4.49.20.126:60142}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60142: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6851--9269[label="1;1pkt 1fpkt"];
6851--10878[label="1;1pkt 1fpkt"];
9269--10878[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="4.49.20.126" dst_port="60142" src_ip="163.180.91.229" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.149.143.229"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.170.148.231"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.22.153.231"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
6883[label="214.29.16.232;168pkt 168fpkt", shape=pentagon, color=darkviolet];
9292[label="214.29.16.232;168pkt 168fpkt", shape=invtriangle, color=brown];
10896[label="214.29.16.232;168pkt 168fpkt", shape=invhouse, color=bisque];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.29.16.232:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6883--9292[label="1;168pkt 168fpkt"];
6883--10896[label="1;168pkt 168fpkt"];
9292--10896[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.29.16.232" src_port="1026"/>
    </slice>
    <from sec="1134363810" usec="0"/>
    <to sec="1134363838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="163.180.24.232"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
6911[label="163.180.28.234;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9313[label="163.180.28.234;21pkt 21fpkt", shape=invtriangle, color=brown];
10910[label="163.180.28.234;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.28.234:*, 195.216.178.132:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2541: (2.41935%)&lt;BR/&gt; 2540: (2.41935%)&lt;BR/&gt; 2535: (2.41935%)&lt;BR/&gt; 2534: (2.41935%)&gt;];
}
6911--9313[label="1;21pkt 21fpkt"];
6911--10910[label="1;20pkt 20fpkt"];
9313--10910[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="195.216.178.132" dst_port="80" src_ip="163.180.28.234"/>
    </slice>
    <from sec="1134363882" usec="0"/>
    <to sec="1134364397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.156.129.234"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
4439[label="196.129.159.47;80pkt 80fpkt", shape=pentagon, color=darkviolet];
7630[label="196.129.159.47;80pkt 80fpkt", shape=invtriangle, color=brown];
9804[label="196.129.159.47;79pkt 79fpkt", shape=invhouse, color=bisque];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.159.47:*, 196.23.83.39:80}[66.25%]&lt;BR/&gt;{196.129.159.47:*, 144.101.156.245:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0711%)&lt;BR/&gt; 1863: (1.88285%)&lt;BR/&gt; 0: (0.83682%)&lt;BR/&gt; 5101: (0.627615%)&lt;BR/&gt; 5050: (0.627615%)&gt;];
}
4439--7630[label="1;80pkt 80fpkt"];
4439--9804[label="1;79pkt 79fpkt"];
7630--9804[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="196.23.83.39" dst_port="80" src_ip="196.129.159.47"/>
      <filter dst_ip="144.101.156.245" dst_port="80" src_ip="196.129.159.47"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
6924[label="133.159.6.235;31pkt 31fpkt", shape=pentagon, color=darkviolet];
9322[label="133.159.6.235;31pkt 31fpkt", shape=invtriangle, color=brown];
10917[label="133.159.6.235;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.159.6.235:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1954: (1.6129%)&lt;BR/&gt; 1953: (1.6129%)&lt;BR/&gt; 1951: (1.6129%)&lt;BR/&gt; 1950: (1.6129%)&gt;];
}
6924--9322[label="1;31pkt 31fpkt"];
6924--10917[label="1;31pkt 31fpkt"];
9322--10917[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.159.6.235"/>
    </slice>
    <from sec="1134364006" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1137{
style=filled;
color=gray75;
6930[label="192.104.195.235;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9328[label="192.104.195.235;2pkt 2fpkt", shape=invtriangle, color=brown];
10920[label="192.104.195.235;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1137[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.104.195.235:80, 196.129.156.216:54191}[50%]&lt;BR/&gt;{192.104.195.235:80, 196.129.156.217:3927}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54191: (25%)&lt;BR/&gt; 3927: (25%)&gt;];
}
6930--9328[label="1;2pkt 2fpkt"];
6930--10920[label="1;2pkt 2fpkt"];
9328--10920[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" dst_port="3927" src_ip="192.104.195.235" src_port="80"/>
      <filter dst_ip="196.129.156.216" dst_port="54191" src_ip="192.104.195.235" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
6933[label="216.38.45.236;154pkt 154fpkt", shape=pentagon, color=darkviolet];
9330[label="216.38.45.236;154pkt 154fpkt", shape=invtriangle, color=brown];
10921[label="216.38.45.236;154pkt 154fpkt", shape=invhouse, color=bisque];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.45.236:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6933--9330[label="1;154pkt 154fpkt"];
6933--10921[label="1;154pkt 154fpkt"];
9330--10921[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="216.38.45.236"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.156.80.236"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
1368[label="197.99.219.112;s;592pkt 592fpkt", shape=diamond, color=yellow];
5387[label="197.99.219.112;820pkt 820fpkt", shape=pentagon, color=darkviolet];
8268[label="197.99.219.112;820pkt 820fpkt", shape=invtriangle, color=brown];
10208[label="197.99.219.112;820pkt 820fpkt", shape=invhouse, color=bisque];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.99.219.112:53, *:*}[99.7564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.1278%)&lt;BR/&gt; 32768: (2.78506%)&lt;BR/&gt; 32772: (1.03211%)&lt;BR/&gt; 33701: (0.8519%)&lt;BR/&gt; 32769: (0.671691%)&gt;];
}
1368--3500[label="0.00506757;3pkt 3fpkt"];
1368--3508[label="0.00675676;4pkt 4fpkt"];
1368--3509[label="0.0202703;12pkt 12fpkt"];
1368--3581[label="0.00506757;3pkt 3fpkt"];
1368--3589[label="0.00675676;4pkt 4fpkt"];
1368--3590[label="0.0202703;12pkt 12fpkt"];
1368--3657[label="0.00506757;3pkt 3fpkt"];
1368--3666[label="0.00675676;4pkt 4fpkt"];
1368--5387[label="0.998311;591pkt 591fpkt"];
1368--8268[label="0.998311;591pkt 591fpkt"];
1368--10208[label="0.998311;591pkt 591fpkt"];
5387--8268[label="1;820pkt 820fpkt"];
5387--10208[label="1;820pkt 820fpkt"];
8268--10208[label="1;820pkt 820fpkt"];
</description>
    <slice>
      <filter src_ip="197.99.219.112" src_port="53"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
2988[label="20.78.225.57;d;20pkt 20fpkt", shape=diamond, color=yellow];
4059[label="166.115.233.20;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6939[label="166.115.168.236;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7374[label="166.115.233.20;16pkt 16fpkt", shape=invtriangle, color=brown];
9335[label="166.115.168.236;3pkt 3fpkt", shape=invtriangle, color=brown];
9645[label="166.115.233.20;16pkt 16fpkt", shape=invhouse, color=bisque];
10924[label="166.115.168.236;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.233.20:*, 20.78.225.57:21}[68.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (42.8571%)&lt;BR/&gt; 20: (6.49351%)&lt;BR/&gt; 59547: (2.5974%)&lt;BR/&gt; 44018: (2.5974%)&lt;BR/&gt; 34347: (2.5974%)&gt;];
}
2988--4059[label="0.875;14pkt 14fpkt"];
2988--5416[label="0.05;1pkt 1fpkt"];
2988--6939[label="1;3pkt 3fpkt"];
2988--7374[label="0.875;14pkt 14fpkt"];
2988--8286[label="0.05;1pkt 1fpkt"];
2988--9335[label="1;3pkt 3fpkt"];
2988--9645[label="0.875;14pkt 14fpkt"];
2988--10924[label="1;3pkt 3fpkt"];
4059--7374[label="1;16pkt 16fpkt"];
4059--9645[label="1;16pkt 16fpkt"];
6939--9335[label="1;3pkt 3fpkt"];
6939--10924[label="1;3pkt 3fpkt"];
7374--9645[label="1;16pkt 16fpkt"];
9335--10924[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="20.78.225.57" dst_port="21" src_ip="166.115.233.20"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1142{
style=filled;
color=gray75;
6941[label="221.233.175.236;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9337[label="221.233.175.236;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1142[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.233.175.236:19101, 163.180.25.111:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (50%)&lt;BR/&gt; 2708: (4.54545%)&lt;BR/&gt; 2704: (4.54545%)&lt;BR/&gt; 2698: (4.54545%)&lt;BR/&gt; 2697: (4.54545%)&gt;];
}
6941--9337[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.25.111" src_ip="221.233.175.236" src_port="19101"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
5577[label="166.115.172.128;177pkt 177fpkt", shape=pentagon, color=darkviolet];
8397[label="166.115.172.128;177pkt 177fpkt", shape=invtriangle, color=brown];
10288[label="166.115.172.128;177pkt 177fpkt", shape=invhouse, color=bisque];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.172.128:*, *:443}[99.435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.7175%)&lt;BR/&gt; 5050: (0.282486%)&lt;BR/&gt; 4544: (0.282486%)&lt;BR/&gt; 4472: (0.282486%)&lt;BR/&gt; 3914: (0.282486%)&gt;];
}
5577--8397[label="1;177pkt 177fpkt"];
5577--10288[label="1;177pkt 177fpkt"];
8397--10288[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="166.115.172.128"/>
    </slice>
    <from sec="1134363639" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.60.116.237"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
6957[label="216.97.60.238;52pkt 52fpkt", shape=pentagon, color=darkviolet];
9348[label="216.97.60.238;52pkt 52fpkt", shape=invtriangle, color=brown];
10929[label="216.97.60.238;52pkt 52fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.97.60.238:*, 196.129.156.130:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 65251: (0.961538%)&lt;BR/&gt; 64778: (0.961538%)&lt;BR/&gt; 64384: (0.961538%)&lt;BR/&gt; 63869: (0.961538%)&gt;];
}
6957--9348[label="1;52pkt 52fpkt"];
6957--10929[label="1;52pkt 52fpkt"];
9348--10929[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.130" dst_port="8080" src_ip="216.97.60.238"/>
    </slice>
    <from sec="1134363958" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.150.98.238"/>
    </slice>
    <from sec="1134363666" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
6978[label="67.197.103.240;36pkt 36fpkt", shape=pentagon, color=darkviolet];
9363[label="67.197.103.240;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.197.103.240:80, 151.251.61.85:*}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54535: (1.38889%)&lt;BR/&gt; 1286: (1.38889%)&lt;BR/&gt; 1281: (1.38889%)&lt;BR/&gt; 1280: (1.38889%)&gt;];
}
6978--9363[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.61.85" src_ip="67.197.103.240" src_port="80"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
6985[label="69.89.234.240;230pkt 230fpkt", shape=pentagon, color=darkviolet];
9366[label="69.89.234.240;230pkt 230fpkt", shape=invtriangle, color=brown];
10939[label="69.89.234.240;230pkt 230fpkt", shape=invhouse, color=bisque];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.89.234.240:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6985--9366[label="1;230pkt 230fpkt"];
6985--10939[label="1;230pkt 230fpkt"];
9366--10939[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="69.89.234.240" src_port="1039"/>
    </slice>
    <from sec="1134363873" usec="0"/>
    <to sec="1134363929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1150{
style=filled;
color=gray75;
6986[label="149.69.240.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9367[label="149.69.240.240;1pkt 1fpkt", shape=invtriangle, color=brown];
10940[label="149.69.240.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1150[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.69.240.240:80, 163.180.84.92:2208}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2208: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6986--9367[label="1;1pkt 1fpkt"];
6986--10940[label="1;1pkt 1fpkt"];
9367--10940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.180.84.92" dst_port="2208" src_ip="149.69.240.240" src_port="80"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134363623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
6988[label="131.68.10.241;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9368[label="131.68.10.241;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.10.241:*, 215.14.110.78:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 64315: (5.55556%)&lt;BR/&gt; 64314: (5.55556%)&lt;BR/&gt; 64313: (5.55556%)&lt;BR/&gt; 64312: (5.55556%)&gt;];
}
6988--9368[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.110.78" dst_port="80" src_ip="131.68.10.241"/>
    </slice>
    <from sec="1134364433" usec="0"/>
    <to sec="1134364489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.112.46.241"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
278[label="200.12.93.65;d;137pkt 137fpkt", shape=diamond, color=yellow];
661[label="200.110.162.197;d;124pkt 124fpkt", shape=diamond, color=yellow];
1110[label="166.115.79.241;s;194pkt 194fpkt", shape=diamond, color=yellow];
1734[label="166.115.138.199;s;110pkt 110fpkt", shape=diamond, color=yellow];
1771[label="218.72.116.109;d;30pkt 30fpkt", shape=diamond, color=yellow];
2685[label="218.72.116.75;d;15pkt 15fpkt", shape=diamond, color=yellow];
2987[label="218.72.116.113;d;29pkt 29fpkt", shape=diamond, color=yellow];
4936[label="166.115.160.82;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4983[label="166.115.167.85;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5042[label="166.115.152.89;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5109[label="166.115.152.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5156[label="166.115.170.97;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6330[label="166.115.226.183;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6994[label="166.115.79.241;212pkt 212fpkt", shape=pentagon, color=darkviolet];
7890[label="166.115.229.73;1pkt 1fpkt", shape=invtriangle, color=brown];
7969[label="166.115.160.82;9pkt 9fpkt", shape=invtriangle, color=brown];
7999[label="166.115.167.85;7pkt 7fpkt", shape=invtriangle, color=brown];
8039[label="166.115.152.89;2pkt 2fpkt", shape=invtriangle, color=brown];
8088[label="166.115.152.94;1pkt 1fpkt", shape=invtriangle, color=brown];
8118[label="166.115.170.97;6pkt 6fpkt", shape=invtriangle, color=brown];
8896[label="166.115.226.183;3pkt 3fpkt", shape=invtriangle, color=brown];
9373[label="166.115.79.241;211pkt 211fpkt", shape=invtriangle, color=brown];
10030[label="166.115.167.85;6pkt 6fpkt", shape=invhouse, color=bisque];
10058[label="166.115.152.89;2pkt 2fpkt", shape=invhouse, color=bisque];
10111[label="166.115.170.97;6pkt 6fpkt", shape=invhouse, color=bisque];
10944[label="166.115.79.241;212pkt 212fpkt", shape=invhouse, color=bisque];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.115.79.241:*, *:6667}[34.0426%]&lt;BR/&gt;{166.115.138.199:*, *:6667}[29.3617%]&lt;BR/&gt;{*:*, 200.12.93.65:6667}[28.9362%]&lt;BR/&gt;{*:*, 200.110.162.197:6667}[26.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (36.7385%)&lt;BR/&gt; 443: (4.71768%)&lt;BR/&gt; 5050: (4.53195%)&lt;BR/&gt; 25: (0.817236%)&lt;BR/&gt; 80: (0.631501%)&gt;];
}
278--362[label="0.0145985;2pkt 2fpkt"];
278--1110[label="0.445255;61pkt 61fpkt"];
278--1734[label="0.4;44pkt 44fpkt"];
278--2698[label="0.0322581;1pkt 1fpkt"];
278--4050[label="0.03125;1pkt 1fpkt"];
278--4936[label="0.125;1pkt 1fpkt"];
278--5863[label="0.0145985;2pkt 2fpkt"];
278--6994[label="0.445255;61pkt 61fpkt"];
278--7890[label="1;1pkt 1fpkt"];
278--7969[label="0.111111;1pkt 1fpkt"];
278--8582[label="0.0145985;2pkt 2fpkt"];
278--9373[label="0.445255;61pkt 61fpkt"];
278--10944[label="0.445255;61pkt 61fpkt"];
661--1110[label="0.435484;54pkt 54fpkt"];
661--1734[label="0.4;44pkt 44fpkt"];
661--4936[label="0.125;1pkt 1fpkt"];
661--5156[label="0.142857;1pkt 1fpkt"];
661--5863[label="0.0403226;5pkt 5fpkt"];
661--6946[label="0.142857;1pkt 1fpkt"];
661--6994[label="0.435484;54pkt 54fpkt"];
661--7969[label="0.111111;1pkt 1fpkt"];
661--8118[label="0.166667;1pkt 1fpkt"];
661--8582[label="0.0403226;5pkt 5fpkt"];
661--9341[label="0.166667;1pkt 1fpkt"];
661--9373[label="0.435484;54pkt 54fpkt"];
661--10111[label="0.166667;1pkt 1fpkt"];
661--10944[label="0.435484;54pkt 54fpkt"];
1110--1771[label="0.0333333;1pkt 1fpkt"];
1110--2987[label="0.0689655;2pkt 2fpkt"];
1110--3486[label="0.0257732;5pkt 5fpkt"];
1110--3513[label="0.0412371;8pkt 8fpkt"];
1110--3534[label="0.0309278;6pkt 6fpkt"];
1110--3571[label="0.0257732;5pkt 5fpkt"];
1110--3614[label="0.0309278;6pkt 6fpkt"];
1110--3651[label="0.0257732;5pkt 5fpkt"];
1110--3682[label="0.0309278;6pkt 6fpkt"];
1110--6994[label="1;194pkt 194fpkt"];
1110--9373[label="0.994845;193pkt 193fpkt"];
1110--10944[label="1;194pkt 194fpkt"];
1771--5042[label="0.333333;1pkt 1fpkt"];
1771--6330[label="1;3pkt 3fpkt"];
1771--6994[label="0.0333333;1pkt 1fpkt"];
1771--8896[label="1;3pkt 3fpkt"];
1771--9373[label="0.0333333;1pkt 1fpkt"];
1771--10944[label="0.0333333;1pkt 1fpkt"];
2685--4983[label="0.142857;1pkt 1fpkt"];
2685--5042[label="0.666667;2pkt 2fpkt"];
2685--7999[label="0.142857;1pkt 1fpkt"];
2685--8039[label="1;2pkt 2fpkt"];
2685--10030[label="0.166667;1pkt 1fpkt"];
2685--10058[label="1;2pkt 2fpkt"];
2987--4050[label="0.0344828;1pkt 1fpkt"];
2987--4932[label="0.0344828;1pkt 1fpkt"];
2987--5109[label="1;1pkt 1fpkt"];
2987--6994[label="0.0689655;2pkt 2fpkt"];
2987--7967[label="0.0344828;1pkt 1fpkt"];
2987--8088[label="1;1pkt 1fpkt"];
2987--9373[label="0.0689655;2pkt 2fpkt"];
2987--10944[label="0.0689655;2pkt 2fpkt"];
4936--7969[label="1;8pkt 8fpkt"];
4983--7999[label="1;7pkt 7fpkt"];
4983--10030[label="1;6pkt 6fpkt"];
5042--8039[label="1;2pkt 2fpkt"];
5042--10058[label="1;2pkt 2fpkt"];
5109--8088[label="1;1pkt 1fpkt"];
5156--8118[label="1;6pkt 6fpkt"];
5156--10111[label="1;6pkt 6fpkt"];
6330--8896[label="1;3pkt 3fpkt"];
6994--9373[label="1;211pkt 211fpkt"];
6994--10944[label="1;212pkt 212fpkt"];
7999--10030[label="1;6pkt 6fpkt"];
8039--10058[label="1;2pkt 2fpkt"];
8118--10111[label="1;6pkt 6fpkt"];
9373--10944[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="6667" src_ip="166.115.79.241"/>
      <filter dst_port="6667" src_ip="166.115.138.199"/>
      <filter dst_ip="200.12.93.65" dst_port="6667"/>
      <filter dst_ip="200.110.162.197" dst_port="6667"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
6999[label="217.163.208.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9376[label="217.163.208.241;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.163.208.241:16503, 131.68.3.46:4151}[50%]&lt;BR/&gt;{217.163.208.241:21420, 131.68.3.46:4151}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4151: (50%)&lt;BR/&gt; 21420: (25%)&lt;BR/&gt; 16503: (25%)&gt;];
}
6999--9376[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.3.46" dst_port="4151" src_ip="217.163.208.241" src_port="21420"/>
      <filter dst_ip="131.68.3.46" dst_port="4151" src_ip="217.163.208.241" src_port="16503"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
7002[label="131.68.10.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9378[label="131.68.10.242;2pkt 2fpkt", shape=invtriangle, color=brown];
10948[label="131.68.10.242;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.10.242:3551, 2.1.4.195:80}[50%]&lt;BR/&gt;{131.68.10.242:3552, 2.1.4.195:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3552: (25%)&lt;BR/&gt; 3551: (25%)&gt;];
}
7002--9378[label="1;2pkt 2fpkt"];
7002--10948[label="1;2pkt 2fpkt"];
9378--10948[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.1.4.195" dst_port="80" src_ip="131.68.10.242" src_port="3552"/>
      <filter dst_ip="2.1.4.195" dst_port="80" src_ip="131.68.10.242" src_port="3551"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.203.11.242"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.145.31.242"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1159{
style=filled;
color=gray75;
7014[label="133.158.141.242;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9387[label="133.158.141.242;4pkt 4fpkt", shape=invtriangle, color=brown];
10956[label="133.158.141.242;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1159[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.141.242:1050, 215.14.110.78:80}[25%]&lt;BR/&gt;{133.158.141.242:1052, 215.14.110.78:80}[25%]&lt;BR/&gt;{133.158.141.242:1058, 215.14.110.78:80}[25%]&lt;BR/&gt;{133.158.141.242:1059, 215.14.110.78:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1059: (12.5%)&lt;BR/&gt; 1058: (12.5%)&lt;BR/&gt; 1052: (12.5%)&lt;BR/&gt; 1050: (12.5%)&gt;];
}
7014--9387[label="1;4pkt 4fpkt"];
7014--10956[label="1;4pkt 4fpkt"];
9387--10956[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.110.78" dst_port="80" src_ip="133.158.141.242" src_port="1059"/>
      <filter dst_ip="215.14.110.78" dst_port="80" src_ip="133.158.141.242" src_port="1058"/>
      <filter dst_ip="215.14.110.78" dst_port="80" src_ip="133.158.141.242" src_port="1052"/>
      <filter dst_ip="215.14.110.78" dst_port="80" src_ip="133.158.141.242" src_port="1050"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.199.170.242"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
7018[label="195.214.212.242;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9390[label="195.214.212.242;14pkt 14fpkt", shape=invtriangle, color=brown];
10958[label="195.214.212.242;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.214.212.242:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7018--9390[label="1;14pkt 14fpkt"];
7018--10958[label="1;15pkt 15fpkt"];
9390--10958[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="195.214.212.242"/>
    </slice>
    <from sec="1134364357" usec="0"/>
    <to sec="1134364393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
663[label="133.158.100.117;d;1157pkt 1157fpkt", shape=diamond, color=yellow];
2071[label="66.210.24.243;s;157pkt 157fpkt", shape=diamond, color=yellow];
4381[label="216.89.186.42;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4665[label="216.91.59.64;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4675[label="67.255.172.64;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4905[label="222.230.137.80;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5209[label="222.156.68.101;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5449[label="222.84.89.117;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5889[label="220.145.128.149;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5975[label="220.165.1.157;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6057[label="222.238.85.163;77pkt 77fpkt", shape=pentagon, color=darkviolet];
6738[label="217.88.92.220;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7023[label="66.210.24.243;168pkt 168fpkt", shape=pentagon, color=darkviolet];
7591[label="216.89.186.42;24pkt 24fpkt", shape=invtriangle, color=brown];
7944[label="222.230.137.80;49pkt 49fpkt", shape=invtriangle, color=brown];
8158[label="222.156.68.101;41pkt 41fpkt", shape=invtriangle, color=brown];
8307[label="222.84.89.117;38pkt 38fpkt", shape=invtriangle, color=brown];
8601[label="220.145.128.149;33pkt 33fpkt", shape=invtriangle, color=brown];
8709[label="222.238.85.163;77pkt 77fpkt", shape=invtriangle, color=brown];
9394[label="66.210.24.243;168pkt 168fpkt", shape=invtriangle, color=brown];
9776[label="216.89.186.42;24pkt 24fpkt", shape=invhouse, color=bisque];
10003[label="222.230.137.80;49pkt 49fpkt", shape=invhouse, color=bisque];
10232[label="222.84.89.117;38pkt 38fpkt", shape=invhouse, color=bisque];
10426[label="220.145.128.149;34pkt 34fpkt", shape=invhouse, color=bisque];
10503[label="222.238.85.163;77pkt 77fpkt", shape=invhouse, color=bisque];
10961[label="66.210.24.243;167pkt 167fpkt", shape=invhouse, color=bisque];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.158.100.117:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3802: (0.184162%)&lt;BR/&gt; 3936: (0.165746%)&lt;BR/&gt; 3920: (0.165746%)&lt;BR/&gt; 3815: (0.165746%)&gt;];
}
663--2071[label="1;157pkt 157fpkt"];
663--3505[label="0.0872947;101pkt 101fpkt"];
663--3510[label="0.048401;56pkt 56fpkt"];
663--3520[label="0.0630942;73pkt 73fpkt"];
663--3556[label="0.06828;79pkt 79fpkt"];
663--3591[label="0.048401;56pkt 56fpkt"];
663--3600[label="0.0630942;73pkt 73fpkt"];
663--3636[label="0.06828;79pkt 79fpkt"];
663--3648[label="0.114952;133pkt 133fpkt"];
663--3662[label="0.0872947;101pkt 101fpkt"];
663--3668[label="0.0630942;73pkt 73fpkt"];
663--3703[label="0.06828;79pkt 79fpkt"];
663--4381[label="1;24pkt 24fpkt"];
663--4665[label="1;28pkt 28fpkt"];
663--4675[label="1;44pkt 44fpkt"];
663--4905[label="1;49pkt 49fpkt"];
663--5209[label="1;42pkt 42fpkt"];
663--5449[label="1;38pkt 38fpkt"];
663--5889[label="1;34pkt 34fpkt"];
663--5975[label="1;44pkt 44fpkt"];
663--6057[label="0.883117;68pkt 68fpkt"];
663--6551[label="1;48pkt 48fpkt"];
663--6733[label="1;25pkt 25fpkt"];
663--6738[label="1;34pkt 34fpkt"];
663--7023[label="0.934524;157pkt 157fpkt"];
663--7591[label="1;24pkt 24fpkt"];
663--7944[label="1;49pkt 49fpkt"];
663--8158[label="1;41pkt 41fpkt"];
663--8307[label="1;38pkt 38fpkt"];
663--8601[label="1;33pkt 33fpkt"];
663--8709[label="0.883117;68pkt 68fpkt"];
663--9180[label="1;25pkt 25fpkt"];
663--9394[label="0.934524;157pkt 157fpkt"];
663--9776[label="1;24pkt 24fpkt"];
663--10003[label="1;49pkt 49fpkt"];
663--10232[label="1;38pkt 38fpkt"];
663--10426[label="1;34pkt 34fpkt"];
663--10503[label="0.883117;68pkt 68fpkt"];
663--10823[label="1;25pkt 25fpkt"];
663--10961[label="0.934132;156pkt 156fpkt"];
2071--3505[label="0.0700637;11pkt 11fpkt"];
2071--3510[label="0.044586;7pkt 7fpkt"];
2071--3520[label="0.0191083;3pkt 3fpkt"];
2071--3556[label="0.0700637;11pkt 11fpkt"];
2071--3591[label="0.044586;7pkt 7fpkt"];
2071--3600[label="0.0191083;3pkt 3fpkt"];
2071--3636[label="0.0700637;11pkt 11fpkt"];
2071--3648[label="0.0955414;15pkt 15fpkt"];
2071--3662[label="0.0700637;11pkt 11fpkt"];
2071--3668[label="0.0191083;3pkt 3fpkt"];
2071--3703[label="0.0700637;11pkt 11fpkt"];
2071--7023[label="1;157pkt 157fpkt"];
2071--9394[label="1;157pkt 157fpkt"];
2071--10961[label="0.993631;156pkt 156fpkt"];
4381--7591[label="1;24pkt 24fpkt"];
4381--9776[label="1;24pkt 24fpkt"];
4905--7944[label="1;49pkt 49fpkt"];
4905--10003[label="1;49pkt 49fpkt"];
5209--8158[label="1;41pkt 41fpkt"];
5449--8307[label="1;38pkt 38fpkt"];
5449--10232[label="1;38pkt 38fpkt"];
5889--8601[label="1;33pkt 33fpkt"];
5889--10426[label="1;34pkt 34fpkt"];
6057--8709[label="1;77pkt 77fpkt"];
6057--10503[label="1;77pkt 77fpkt"];
7023--9394[label="1;168pkt 168fpkt"];
7023--10961[label="1;167pkt 167fpkt"];
7591--9776[label="1;24pkt 24fpkt"];
7944--10003[label="1;49pkt 49fpkt"];
8307--10232[label="1;38pkt 38fpkt"];
8601--10426[label="1;33pkt 33fpkt"];
8709--10503[label="1;77pkt 77fpkt"];
9394--10961[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.100.117" dst_port="80"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.195.32.243"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.155.56.243"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.53.198.243"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134363828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
7035[label="222.156.10.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9403[label="222.156.10.244;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.156.10.244:62570, 166.115.216.206:445}[50%]&lt;BR/&gt;{222.156.10.244:62571, 166.115.216.206:139}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62571: (25%)&lt;BR/&gt; 62570: (25%)&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&gt;];
}
7035--9403[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.115.216.206" dst_port="139" src_ip="222.156.10.244" src_port="62571"/>
      <filter dst_ip="166.115.216.206" dst_port="445" src_ip="222.156.10.244" src_port="62570"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.150.32.244"/>
    </slice>
    <from sec="1134364361" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
7052[label="163.180.67.245;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9415[label="163.180.67.245;1pkt 1fpkt", shape=invtriangle, color=brown];
10977[label="163.180.67.245;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.67.245:49973, 204.178.249.197:80}[50%]&lt;BR/&gt;{163.180.67.245:49974, 204.178.249.197:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49974: (37.5%)&lt;BR/&gt; 49973: (12.5%)&gt;];
}
7052--9415[label="1;1pkt 1fpkt"];
7052--10977[label="1;1pkt 1fpkt"];
9415--10977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.178.249.197" dst_port="80" src_ip="163.180.67.245" src_port="49974"/>
      <filter dst_ip="204.178.249.197" dst_port="80" src_ip="163.180.67.245" src_port="49973"/>
    </slice>
    <from sec="1134364405" usec="0"/>
    <to sec="1134364467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.89.77.246"/>
    </slice>
    <from sec="1134364111" usec="0"/>
    <to sec="1134364498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
7061[label="192.104.185.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9421[label="192.104.185.246;1pkt 1fpkt", shape=invtriangle, color=brown];
10981[label="192.104.185.246;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.104.185.246:80, 133.158.131.210:1544}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1544: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7061--9421[label="1;1pkt 1fpkt"];
7061--10981[label="1;1pkt 1fpkt"];
9421--10981[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.131.210" dst_port="1544" src_ip="192.104.185.246" src_port="80"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
7062[label="133.158.199.246;17pkt 17fpkt", shape=pentagon, color=darkviolet];
9422[label="133.158.199.246;17pkt 17fpkt", shape=invtriangle, color=brown];
10982[label="133.158.199.246;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.158.199.246:*, 218.209.87.145:80}[47.0588%]&lt;BR/&gt;{133.158.199.246:*, 218.209.87.153:80}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47%)&lt;BR/&gt; 1051: (3%)&lt;BR/&gt; 1048: (3%)&lt;BR/&gt; 1047: (3%)&lt;BR/&gt; 1045: (3%)&gt;];
}
7062--9422[label="1;17pkt 17fpkt"];
7062--10982[label="1;16pkt 16fpkt"];
9422--10982[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="218.209.87.145" dst_port="80" src_ip="133.158.199.246"/>
      <filter dst_ip="218.209.87.153" dst_port="80" src_ip="133.158.199.246"/>
    </slice>
    <from sec="1134364456" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.88.12.247"/>
    </slice>
    <from sec="1134363710" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.239.43.247"/>
    </slice>
    <from sec="1134363627" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.107.63.247"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
7081[label="3.38.49.248;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9436[label="3.38.49.248;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.38.49.248:80, 196.129.156.217:*}[64.2857%]&lt;BR/&gt;{3.38.49.248:80, 196.129.156.216:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59576: (3.57143%)&lt;BR/&gt; 55702: (3.57143%)&lt;BR/&gt; 54344: (3.57143%)&lt;BR/&gt; 52621: (3.57143%)&gt;];
}
7081--9436[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.156.217" src_ip="3.38.49.248" src_port="80"/>
      <filter dst_ip="196.129.156.216" src_ip="3.38.49.248" src_port="80"/>
    </slice>
    <from sec="1134363706" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
7083[label="163.180.69.248;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9437[label="163.180.69.248;15pkt 15fpkt", shape=invtriangle, color=brown];
10990[label="163.180.69.248;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.180.69.248:*, 213.7.4.25:443}[33.3333%]&lt;BR/&gt;{163.180.69.248:*, 204.180.0.5:443}[20%]&lt;BR/&gt;{163.180.69.248:*, 150.156.133.120:443}[20%]&lt;BR/&gt;{163.180.69.248:*, 213.7.4.25:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (39.7727%)&lt;BR/&gt; 80: (10.2273%)&lt;BR/&gt; 49561: (3.40909%)&lt;BR/&gt; 49560: (3.40909%)&lt;BR/&gt; 49559: (3.40909%)&gt;];
}
7083--9437[label="1;15pkt 15fpkt"];
7083--10990[label="1;14pkt 14fpkt"];
9437--10990[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.4.25" dst_port="443" src_ip="163.180.69.248"/>
      <filter dst_ip="213.7.4.25" dst_port="80" src_ip="163.180.69.248"/>
      <filter dst_ip="150.156.133.120" dst_port="443" src_ip="163.180.69.248"/>
      <filter dst_ip="204.180.0.5" dst_port="443" src_ip="163.180.69.248"/>
    </slice>
    <from sec="1134364277" usec="0"/>
    <to sec="1134364432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1179{
style=filled;
color=gray75;
1565[label="196.139.248.110;d;406pkt 406fpkt", shape=diamond, color=yellow];
1927[label="222.86.215.253;s;8pkt 8fpkt", shape=diamond, color=yellow];
2870[label="222.86.215.248;s;18pkt 18fpkt", shape=diamond, color=yellow];
3108[label="222.86.215.249;s;7pkt 7fpkt", shape=diamond, color=yellow];
4718[label="217.68.81.67;183pkt 183fpkt", shape=pentagon, color=darkviolet];
5836[label="67.232.8.146;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6609[label="67.211.168.209;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6656[label="67.211.168.213;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6826[label="67.228.118.227;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7089[label="222.86.215.248;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7098[label="222.86.215.249;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7123[label="222.86.215.253;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8562[label="67.232.8.146;10pkt 10fpkt", shape=invtriangle, color=brown];
9085[label="67.211.168.209;6pkt 6fpkt", shape=invtriangle, color=brown];
9442[label="222.86.215.248;20pkt 20fpkt", shape=invtriangle, color=brown];
9449[label="222.86.215.249;11pkt 11fpkt", shape=invtriangle, color=brown];
9471[label="222.86.215.253;9pkt 9fpkt", shape=invtriangle, color=brown];
10399[label="67.232.8.146;11pkt 11fpkt", shape=invhouse, color=bisque];
10994[label="222.86.215.248;21pkt 21fpkt", shape=invhouse, color=bisque];
11014[label="222.86.215.253;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1179[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.68.81.67:80, 196.139.248.110:*}[41.8764%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3857%)&lt;BR/&gt; 4995: (0.307125%)&lt;BR/&gt; 4972: (0.307125%)&lt;BR/&gt; 4960: (0.307125%)&lt;BR/&gt; 4941: (0.307125%)&gt;];
}
1565--1927[label="1;8pkt 8fpkt"];
1565--2870[label="1;18pkt 18fpkt"];
1565--3108[label="1;7pkt 7fpkt"];
1565--3183[label="0.00246305;1pkt 1fpkt"];
1565--3256[label="0.00492611;2pkt 2fpkt"];
1565--3458[label="0.00246305;1pkt 1fpkt"];
1565--3481[label="0.0738916;30pkt 30fpkt"];
1565--3503[label="0.00246305;1pkt 1fpkt"];
1565--3504[label="0.08867;36pkt 36fpkt"];
1565--3528[label="0.0615764;25pkt 25fpkt"];
1565--3565[label="0.0738916;30pkt 30fpkt"];
1565--3584[label="0.00246305;1pkt 1fpkt"];
1565--3585[label="0.08867;36pkt 36fpkt"];
1565--3608[label="0.0615764;25pkt 25fpkt"];
1565--3643[label="0.0738916;30pkt 30fpkt"];
1565--3659[label="0.00246305;1pkt 1fpkt"];
1565--3661[label="0.08867;36pkt 36fpkt"];
1565--3675[label="0.0615764;25pkt 25fpkt"];
1565--4266[label="0.00492611;2pkt 2fpkt"];
1565--4718[label="0.896175;164pkt 164fpkt"];
1565--4727[label="0.00492611;2pkt 2fpkt"];
1565--5350[label="0.0625;1pkt 1fpkt"];
1565--5836[label="0.909091;10pkt 10fpkt"];
1565--6609[label="1;7pkt 7fpkt"];
1565--6656[label="0.785714;11pkt 11fpkt"];
1565--6826[label="0.782609;18pkt 18fpkt"];
1565--7089[label="0.857143;18pkt 18fpkt"];
1565--7098[label="1;11pkt 11fpkt"];
1565--7123[label="1;9pkt 9fpkt"];
1565--7506[label="0.00492611;2pkt 2fpkt"];
1565--7821[label="0.00492611;2pkt 2fpkt"];
1565--8249[label="0.0588235;1pkt 1fpkt"];
1565--8562[label="0.9;9pkt 9fpkt"];
1565--9085[label="1;6pkt 6fpkt"];
1565--9442[label="0.85;17pkt 17fpkt"];
1565--9449[label="1;11pkt 11fpkt"];
1565--9471[label="1;9pkt 9fpkt"];
1565--10399[label="0.909091;10pkt 10fpkt"];
1565--10994[label="0.857143;18pkt 18fpkt"];
1565--11014[label="1;8pkt 8fpkt"];
1927--7123[label="1;8pkt 8fpkt"];
1927--9471[label="1;8pkt 8fpkt"];
1927--11014[label="0.875;7pkt 7fpkt"];
2870--3481[label="0.111111;2pkt 2fpkt"];
2870--3504[label="0.111111;2pkt 2fpkt"];
2870--3528[label="0.0555556;1pkt 1fpkt"];
2870--3565[label="0.111111;2pkt 2fpkt"];
2870--3585[label="0.111111;2pkt 2fpkt"];
2870--3608[label="0.0555556;1pkt 1fpkt"];
2870--3643[label="0.111111;2pkt 2fpkt"];
2870--3661[label="0.111111;2pkt 2fpkt"];
2870--3675[label="0.0555556;1pkt 1fpkt"];
2870--7089[label="1;18pkt 18fpkt"];
2870--9442[label="0.944444;17pkt 17fpkt"];
2870--10994[label="1;18pkt 18fpkt"];
3108--3528[label="0.142857;1pkt 1fpkt"];
3108--3608[label="0.142857;1pkt 1fpkt"];
3108--3675[label="0.142857;1pkt 1fpkt"];
3108--7098[label="1;7pkt 7fpkt"];
3108--9449[label="1;7pkt 7fpkt"];
5836--8562[label="1;10pkt 10fpkt"];
5836--10399[label="1;11pkt 11fpkt"];
6609--9085[label="1;6pkt 6fpkt"];
7089--9442[label="1;20pkt 20fpkt"];
7089--10994[label="1;21pkt 21fpkt"];
7098--9449[label="1;11pkt 11fpkt"];
7123--9471[label="1;9pkt 9fpkt"];
7123--11014[label="1;8pkt 8fpkt"];
8562--10399[label="1;10pkt 10fpkt"];
9442--10994[label="1;20pkt 20fpkt"];
9471--11014[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.248.110" src_ip="217.68.81.67" src_port="80"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1181{
style=filled;
color=gray75;
7092[label="68.194.67.249;241pkt 241fpkt", shape=pentagon, color=darkviolet];
9445[label="68.194.67.249;241pkt 241fpkt", shape=invtriangle, color=brown];
stat1181[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.194.67.249:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
7092--9445[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="68.194.67.249" src_port="1029"/>
    </slice>
    <from sec="1134364339" usec="0"/>
    <to sec="1134364354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.32.139.249"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
7099[label="196.139.249.249;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9450[label="196.139.249.249;12pkt 12fpkt", shape=invtriangle, color=brown];
10999[label="196.139.249.249;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.249.249:*, 221.5.10.1:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1535: (3.94737%)&lt;BR/&gt; 1533: (3.94737%)&lt;BR/&gt; 1531: (3.94737%)&lt;BR/&gt; 1529: (3.94737%)&gt;];
}
7099--9450[label="1;12pkt 12fpkt"];
7099--10999[label="1;13pkt 13fpkt"];
9450--10999[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="221.5.10.1" dst_port="80" src_ip="196.139.249.249"/>
    </slice>
    <from sec="1134364446" usec="0"/>
    <to sec="1134364460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458008,2.22005,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1184{
style=filled;
color=gray75;
7103[label="68.201.70.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9454[label="68.201.70.250;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1184[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.201.70.250:2420, 151.251.47.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2420: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7103--9454[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.251.47.111" dst_port="80" src_ip="68.201.70.250" src_port="2420"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592705,2.18693,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
7110[label="5.98.61.252;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9459[label="5.98.61.252;1pkt 1fpkt", shape=invtriangle, color=brown];
11005[label="5.98.61.252;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.98.61.252:554, 131.68.40.82:4100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4100: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
7110--9459[label="1;1pkt 1fpkt"];
7110--11005[label="1;1pkt 1fpkt"];
9459--11005[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.68.40.82" dst_port="4100" src_ip="5.98.61.252" src_port="554"/>
    </slice>
    <from sec="1134364094" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.235.84.252"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.178.23.253"/>
    </slice>
    <from sec="1134364115" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.26.42.255"/>
    </slice>
    <from sec="1134363855" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.71.45.255"/>
    </slice>
    <from sec="1134363623" usec="0"/>
    <to sec="1134364437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.213.188.255"/>
    </slice>
    <from sec="1134363645" usec="0"/>
    <to sec="1134363706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539396,2.27671,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.198.190.255"/>
    </slice>
    <from sec="1134363663" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.159.153.1"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.239.176.2"/>
    </slice>
    <from sec="1134363705" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.49.21.3"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.19.179.3"/>
    </slice>
    <from sec="1134363662" usec="0"/>
    <to sec="1134363971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.90.161.4"/>
    </slice>
    <from sec="1134364402" usec="0"/>
    <to sec="1134364437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.44.240.5"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.28.164.7"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.5.40.11"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.15.131.11"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.160.168.12"/>
    </slice>
    <from sec="1134364395" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.218.195.15"/>
    </slice>
    <from sec="1134363621" usec="0"/>
    <to sec="1134363815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="131.68.198.16"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.136.47.19"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.56.73.22"/>
    </slice>
    <from sec="1134363754" usec="0"/>
    <to sec="1134363879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565508,2.23155,020,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
4210[label="219.253.57.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9699[label="219.253.57.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.253.57.32:0, 160.137.46.54:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4210--9699[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.137.46.54" src_ip="219.253.57.32"/>
    </slice>
    <from sec="1134364096" usec="0"/>
    <to sec="1134364097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.82.134.32"/>
    </slice>
    <from sec="1134363612" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.114.129.33"/>
    </slice>
    <from sec="1134364432" usec="0"/>
    <to sec="1134364456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.204.119.42"/>
    </slice>
    <from sec="1134364325" usec="0"/>
    <to sec="1134364406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.96.247.42"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.67.9.44"/>
    </slice>
    <from sec="1134364345" usec="0"/>
    <to sec="1134364372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.194.21.44"/>
    </slice>
    <from sec="1134363943" usec="0"/>
    <to sec="1134364106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.220.107.48"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.210.3.50"/>
    </slice>
    <from sec="1134363630" usec="0"/>
    <to sec="1134364481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.5.40.50"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.154.167.51"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.159.6.55"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.73.69.59"/>
    </slice>
    <from sec="1134363681" usec="0"/>
    <to sec="1134363773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.64.179.59"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.109.129.60"/>
    </slice>
    <from sec="1134363616" usec="0"/>
    <to sec="1134364490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.97.54.63"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.208.51.64"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.159.223.65"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1226{
style=filled;
color=gray75;
530[label="133.158.131.210;d;17pkt 17fpkt", shape=diamond, color=yellow];
4759[label="87.175.184.69;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7845[label="87.175.184.69;10pkt 10fpkt", shape=invtriangle, color=brown];
9939[label="87.175.184.69;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1226[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.175.184.69:80, 133.158.131.210:*}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1524: (4.34783%)&lt;BR/&gt; 1523: (4.34783%)&lt;BR/&gt; 1494: (4.34783%)&lt;BR/&gt; 1493: (4.34783%)&gt;];
}
530--4117[label="0.235294;4pkt 4fpkt"];
530--4759[label="0.4;4pkt 4fpkt"];
530--7409[label="0.235294;4pkt 4fpkt"];
530--7845[label="0.4;4pkt 4fpkt"];
530--9939[label="0.444444;4pkt 4fpkt"];
4759--7845[label="1;10pkt 10fpkt"];
4759--9939[label="1;9pkt 9fpkt"];
7845--9939[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.131.210" src_ip="87.175.184.69" src_port="80"/>
    </slice>
    <from sec="1134363677" usec="0"/>
    <to sec="1134364424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.115.229.73"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.64.120.74"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.131.27.76"/>
    </slice>
    <from sec="1134363790" usec="0"/>
    <to sec="1134363837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.201.96.76"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.51.160.78"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.28.12.79"/>
    </slice>
    <from sec="1134363995" usec="0"/>
    <to sec="1134364097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.49.109.79"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.50.144.79"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.149.84.80"/>
    </slice>
    <from sec="1134363636" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.53.144.82"/>
    </slice>
    <from sec="1134363952" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.107.129.83"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.145.99.89"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.155.10.91"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.117.161.91"/>
    </slice>
    <from sec="1134363638" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="163.185.239.97"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.160.236.99"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.238.61.100"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.186.31.101"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.227.208.102"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.158.218.103"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.111.15.104"/>
    </slice>
    <from sec="1134363684" usec="0"/>
    <to sec="1134364030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.141.244.104"/>
    </slice>
    <from sec="1134363682" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.71.169.105"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.220.3.107"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="165.8.117.107"/>
    </slice>
    <from sec="1134364240" usec="0"/>
    <to sec="1134364275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.130.64.108"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.32.66.108"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.145.86.108"/>
    </slice>
    <from sec="1134363890" usec="0"/>
    <to sec="1134364418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.154.136.108"/>
    </slice>
    <from sec="1134363664" usec="0"/>
    <to sec="1134364485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.13.72.109"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.233.146.109"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.190.192.109"/>
    </slice>
    <from sec="1134363708" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.167.32.110"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.34.235.110"/>
    </slice>
    <from sec="1134363774" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.115.102.114"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.83.135.117"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.118.180.117"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.138.85.119"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.227.200.119"/>
    </slice>
    <from sec="1134364132" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.236.7.120"/>
    </slice>
    <from sec="1134364014" usec="0"/>
    <to sec="1134364064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.92.105.122"/>
    </slice>
    <from sec="1134364072" usec="0"/>
    <to sec="1134364245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.32.29.126"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.92.45.127"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.22.185.127"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.60.102.128"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="131.68.233.129"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.88.140.130"/>
    </slice>
    <from sec="1134364244" usec="0"/>
    <to sec="1134364337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.203.6.131"/>
    </slice>
    <from sec="1134363605" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.88.160.131"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.201.163.135"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853617,2.13544,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1277{
style=filled;
color=gray75;
1213[label="17.119.93.77;d;103pkt 103fpkt", shape=diamond, color=yellow];
1725[label="134.143.4.119;d;3pkt 3fpkt", shape=diamond, color=yellow];
1789[label="219.229.172.244;d;28pkt 28fpkt", shape=diamond, color=yellow];
1934[label="218.179.204.18;d;117pkt 117fpkt", shape=diamond, color=yellow];
1937[label="218.179.21.115;d;70pkt 70fpkt", shape=diamond, color=yellow];
1971[label="131.68.162.138;s;2114pkt 2114fpkt", shape=diamond, color=yellow];
2148[label="208.109.136.181;d;73pkt 73fpkt", shape=diamond, color=yellow];
2260[label="213.235.245.5;d;57pkt 57fpkt", shape=diamond, color=yellow];
2261[label="213.235.240.178;d;75pkt 75fpkt", shape=diamond, color=yellow];
2267[label="218.179.105.253;d;26pkt 26fpkt", shape=diamond, color=yellow];
2895[label="213.29.80.241;d;540pkt 540fpkt", shape=diamond, color=yellow];
5752[label="131.68.162.138;3352pkt 3352fpkt", shape=pentagon, color=darkviolet];
8512[label="131.68.162.138;3351pkt 3351fpkt", shape=invtriangle, color=brown];
10366[label="131.68.162.138;3351pkt 3351fpkt", shape=invhouse, color=bisque];
stat1277[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.68.162.138:80, *:*}[68.8095%]&lt;BR/&gt;{131.68.162.138:*, *:80}[30.506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7436%)&lt;BR/&gt; 0: (0.165913%)&lt;BR/&gt; 443: (0.113122%)&lt;BR/&gt; 2545: (0.0603318%)&lt;BR/&gt; 2544: (0.0565611%)&gt;];
}
1213--1971[label="0.669903;69pkt 69fpkt"];
1213--3505[label="0.0679612;7pkt 7fpkt"];
1213--3510[label="0.0582524;6pkt 6fpkt"];
1213--3520[label="0.0679612;7pkt 7fpkt"];
1213--3556[label="0.0582524;6pkt 6fpkt"];
1213--3591[label="0.0582524;6pkt 6fpkt"];
1213--3600[label="0.0679612;7pkt 7fpkt"];
1213--3636[label="0.0582524;6pkt 6fpkt"];
1213--3648[label="0.0485437;5pkt 5fpkt"];
1213--3662[label="0.0679612;7pkt 7fpkt"];
1213--3668[label="0.0679612;7pkt 7fpkt"];
1213--3703[label="0.0582524;6pkt 6fpkt"];
1213--5752[label="1;103pkt 103fpkt"];
1213--8512[label="1;103pkt 103fpkt"];
1213--10366[label="1;103pkt 103fpkt"];
1725--1971[label="0.666667;2pkt 2fpkt"];
1725--3481[label="0.333333;1pkt 1fpkt"];
1725--3504[label="0.333333;1pkt 1fpkt"];
1725--3528[label="0.666667;2pkt 2fpkt"];
1725--3565[label="0.333333;1pkt 1fpkt"];
1725--3585[label="0.333333;1pkt 1fpkt"];
1725--3608[label="0.666667;2pkt 2fpkt"];
1725--3643[label="0.333333;1pkt 1fpkt"];
1725--3661[label="0.333333;1pkt 1fpkt"];
1725--3675[label="0.666667;2pkt 2fpkt"];
1725--5752[label="1;3pkt 3fpkt"];
1725--8512[label="1;3pkt 3fpkt"];
1725--10366[label="1;3pkt 3fpkt"];
1789--1971[label="0.857143;24pkt 24fpkt"];
1789--3481[label="0.0357143;1pkt 1fpkt"];
1789--3504[label="0.0357143;1pkt 1fpkt"];
1789--3505[label="0.0357143;1pkt 1fpkt"];
1789--3510[label="0.0714286;2pkt 2fpkt"];
1789--3513[label="0.0357143;1pkt 1fpkt"];
1789--3556[label="0.0357143;1pkt 1fpkt"];
1789--3565[label="0.0357143;1pkt 1fpkt"];
1789--3585[label="0.0357143;1pkt 1fpkt"];
1789--3591[label="0.0714286;2pkt 2fpkt"];
1789--3636[label="0.0357143;1pkt 1fpkt"];
1789--3643[label="0.0357143;1pkt 1fpkt"];
1789--3648[label="0.0357143;1pkt 1fpkt"];
1789--3661[label="0.0357143;1pkt 1fpkt"];
1789--3662[label="0.0357143;1pkt 1fpkt"];
1789--3703[label="0.0357143;1pkt 1fpkt"];
1789--5752[label="1;28pkt 28fpkt"];
1789--8512[label="1;28pkt 28fpkt"];
1789--10366[label="1;28pkt 28fpkt"];
1934--1971[label="0.675214;79pkt 79fpkt"];
1934--3510[label="0.017094;2pkt 2fpkt"];
1934--3520[label="0.0854701;10pkt 10fpkt"];
1934--3556[label="0.0598291;7pkt 7fpkt"];
1934--3591[label="0.017094;2pkt 2fpkt"];
1934--3600[label="0.0854701;10pkt 10fpkt"];
1934--3636[label="0.0598291;7pkt 7fpkt"];
1934--3668[label="0.0854701;10pkt 10fpkt"];
1934--3703[label="0.0598291;7pkt 7fpkt"];
1934--5752[label="1;117pkt 117fpkt"];
1934--8512[label="1;117pkt 117fpkt"];
1934--10366[label="1;117pkt 117fpkt"];
1937--1971[label="0.585714;41pkt 41fpkt"];
1937--3510[label="0.0142857;1pkt 1fpkt"];
1937--3520[label="0.171429;12pkt 12fpkt"];
1937--3556[label="0.128571;9pkt 9fpkt"];
1937--3591[label="0.0142857;1pkt 1fpkt"];
1937--3600[label="0.171429;12pkt 12fpkt"];
1937--3636[label="0.128571;9pkt 9fpkt"];
1937--3668[label="0.171429;12pkt 12fpkt"];
1937--3703[label="0.128571;9pkt 9fpkt"];
1937--5752[label="1;70pkt 70fpkt"];
1937--8512[label="1;70pkt 70fpkt"];
1937--10366[label="1;70pkt 70fpkt"];
1971--2148[label="1;73pkt 73fpkt"];
1971--2260[label="0.561404;32pkt 32fpkt"];
1971--2261[label="0.466667;35pkt 35fpkt"];
1971--2267[label="1;26pkt 26fpkt"];
1971--2895[label="0.662963;358pkt 358fpkt"];
1971--3481[label="0.0662252;140pkt 140fpkt"];
1971--3504[label="0.0728477;154pkt 154fpkt"];
1971--3505[label="0.0141911;30pkt 30fpkt"];
1971--3510[label="0.0175024;37pkt 37fpkt"];
1971--3513[label="0.00123153;1pkt 1fpkt"];
1971--3520[label="0.0454115;96pkt 96fpkt"];
1971--3528[label="0.0108798;23pkt 23fpkt"];
1971--3565[label="0.0662252;140pkt 140fpkt"];
1971--3585[label="0.0728477;154pkt 154fpkt"];
1971--3591[label="0.0175024;37pkt 37fpkt"];
1971--3600[label="0.0454115;96pkt 96fpkt"];
1971--3608[label="0.0108798;23pkt 23fpkt"];
1971--3643[label="0.0662252;140pkt 140fpkt"];
1971--3648[label="0.0170293;36pkt 36fpkt"];
1971--3661[label="0.0728477;154pkt 154fpkt"];
1971--3662[label="0.0141911;30pkt 30fpkt"];
1971--3668[label="0.0454115;96pkt 96fpkt"];
1971--3675[label="0.0108798;23pkt 23fpkt"];
1971--5752[label="1;2114pkt 2114fpkt"];
1971--8512[label="0.999527;2113pkt 2113fpkt"];
1971--10366[label="0.999527;2113pkt 2113fpkt"];
2148--3504[label="0.0958904;7pkt 7fpkt"];
2148--3505[label="0.0136986;1pkt 1fpkt"];
2148--3520[label="0.0136986;1pkt 1fpkt"];
2148--3585[label="0.0958904;7pkt 7fpkt"];
2148--3600[label="0.0136986;1pkt 1fpkt"];
2148--3661[label="0.0958904;7pkt 7fpkt"];
2148--3662[label="0.0136986;1pkt 1fpkt"];
2148--3668[label="0.0136986;1pkt 1fpkt"];
2148--5752[label="1;73pkt 73fpkt"];
2148--8512[label="1;73pkt 73fpkt"];
2148--10366[label="1;73pkt 73fpkt"];
2260--3510[label="0.0175439;1pkt 1fpkt"];
2260--3520[label="0.105263;6pkt 6fpkt"];
2260--3556[label="0.105263;6pkt 6fpkt"];
2260--3591[label="0.0175439;1pkt 1fpkt"];
2260--3600[label="0.105263;6pkt 6fpkt"];
2260--3636[label="0.105263;6pkt 6fpkt"];
2260--3668[label="0.105263;6pkt 6fpkt"];
2260--3703[label="0.105263;6pkt 6fpkt"];
2260--5752[label="1;57pkt 57fpkt"];
2260--8512[label="1;57pkt 57fpkt"];
2260--10366[label="1;57pkt 57fpkt"];
2261--3510[label="0.0133333;1pkt 1fpkt"];
2261--3520[label="0.106667;8pkt 8fpkt"];
2261--3556[label="0.08;6pkt 6fpkt"];
2261--3591[label="0.0133333;1pkt 1fpkt"];
2261--3600[label="0.106667;8pkt 8fpkt"];
2261--3636[label="0.08;6pkt 6fpkt"];
2261--3668[label="0.106667;8pkt 8fpkt"];
2261--3703[label="0.08;6pkt 6fpkt"];
2261--5752[label="1;75pkt 75fpkt"];
2261--8512[label="1;75pkt 75fpkt"];
2261--10366[label="1;75pkt 75fpkt"];
2267--3520[label="0.153846;4pkt 4fpkt"];
2267--3600[label="0.153846;4pkt 4fpkt"];
2267--3668[label="0.153846;4pkt 4fpkt"];
2267--5752[label="1;26pkt 26fpkt"];
2267--8512[label="1;26pkt 26fpkt"];
2267--10366[label="1;26pkt 26fpkt"];
2895--3509[label="0.00185185;1pkt 1fpkt"];
2895--3528[label="0.125926;68pkt 68fpkt"];
2895--3590[label="0.00185185;1pkt 1fpkt"];
2895--3608[label="0.125926;68pkt 68fpkt"];
2895--3675[label="0.125926;68pkt 68fpkt"];
2895--4344[label="0.00185185;1pkt 1fpkt"];
2895--5414[label="0.00854701;1pkt 1fpkt"];
2895--5422[label="0.00185185;1pkt 1fpkt"];
2895--5752[label="0.985185;532pkt 532fpkt"];
2895--6937[label="0.00555556;3pkt 3fpkt"];
2895--7566[label="0.00185185;1pkt 1fpkt"];
2895--8289[label="0.00185185;1pkt 1fpkt"];
2895--8512[label="0.985185;532pkt 532fpkt"];
2895--9333[label="0.00555556;3pkt 3fpkt"];
2895--9762[label="0.00185185;1pkt 1fpkt"];
2895--10219[label="0.00185185;1pkt 1fpkt"];
2895--10366[label="0.985185;532pkt 532fpkt"];
5752--8512[label="1;3351pkt 3351fpkt"];
5752--10366[label="1;3351pkt 3351fpkt"];
8512--10366[label="1;3351pkt 3351fpkt"];
</description>
    <slice>
      <filter src_ip="131.68.162.138" src_port="80"/>
      <filter dst_port="80" src_ip="131.68.162.138"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.21.146"/>
    </slice>
    <from sec="1134363670" usec="0"/>
    <to sec="1134363785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.167.86.146"/>
    </slice>
    <from sec="1134363622" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.108.114.146"/>
    </slice>
    <from sec="1134364279" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.144.116.146"/>
    </slice>
    <from sec="1134364021" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.169.152.148"/>
    </slice>
    <from sec="1134363635" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.33.153.150"/>
    </slice>
    <from sec="1134363682" usec="0"/>
    <to sec="1134364479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.57.127.155"/>
    </slice>
    <from sec="1134363604" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.158.199.157"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.239.151.160"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.56.253.161"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.165.156.162"/>
    </slice>
    <from sec="1134364383" usec="0"/>
    <to sec="1134364395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.54.252.165"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.77.80.166"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.143.198.166"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.58.251.166"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.218.200.168"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.168.188.169"/>
    </slice>
    <from sec="1134363611" usec="0"/>
    <to sec="1134364495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.142.251.171"/>
    </slice>
    <from sec="1134364184" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.214.137.177"/>
    </slice>
    <from sec="1134364135" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.115.146.177"/>
    </slice>
    <from sec="1134363619" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.834962,2.18111,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1298{
style=filled;
color=gray75;
3130[label="133.158.124.156;d;29pkt 29fpkt", shape=diamond, color=yellow];
4336[label="2.114.129.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5337[label="2.114.129.109;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6323[label="2.114.128.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10634[label="2.114.128.183;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1298[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.241.166.231:80, 133.158.124.156:*}[68.9655%]&lt;BR/&gt;{*:1935, 133.158.124.156:*}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.1667%)&lt;BR/&gt; 1935: (20.8333%)&lt;BR/&gt; 49159: (4.16667%)&lt;BR/&gt; 49158: (2.77778%)&lt;BR/&gt; 49157: (2.77778%)&gt;];
}
3130--3528[label="0.0344828;1pkt 1fpkt"];
3130--3608[label="0.0344828;1pkt 1fpkt"];
3130--3675[label="0.0344828;1pkt 1fpkt"];
3130--4336[label="1;1pkt 1fpkt"];
3130--5337[label="1;4pkt 4fpkt"];
3130--6323[label="1;1pkt 1fpkt"];
3130--10634[label="1;1pkt 1fpkt"];
6323--10634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.158.124.156" src_port="1935"/>
      <filter dst_ip="133.158.124.156" src_ip="0.241.166.231" src_port="80"/>
    </slice>
    <from sec="1134364253" usec="0"/>
    <to sec="1134364430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.225.128.184"/>
    </slice>
    <from sec="1134363639" usec="0"/>
    <to sec="1134363707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.34.179.184"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.220.138.186"/>
    </slice>
    <from sec="1134364202" usec="0"/>
    <to sec="1134364333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.32.32.188"/>
    </slice>
    <from sec="1134363633" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.34.237.189"/>
    </slice>
    <from sec="1134363749" usec="0"/>
    <to sec="1134364149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.238.33.192"/>
    </slice>
    <from sec="1134363607" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="123.195.215.194"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.158.112.195"/>
    </slice>
    <from sec="1134363722" usec="0"/>
    <to sec="1134363730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.91.146.200"/>
    </slice>
    <from sec="1134363784" usec="0"/>
    <to sec="1134363844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.158.150.207"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.147.100.211"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.118.117.211"/>
    </slice>
    <from sec="1134363631" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.19.22.212"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.51.38.214"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134363616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.40.43.215"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.215.102.217"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.111.24.220"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.21.197.220"/>
    </slice>
    <from sec="1134363882" usec="0"/>
    <to sec="1134363917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.40.84.222"/>
    </slice>
    <from sec="1134364260" usec="0"/>
    <to sec="1134364282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.201.11.225"/>
    </slice>
    <from sec="1134363601" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.58.31.225"/>
    </slice>
    <from sec="1134363608" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.140.64.229"/>
    </slice>
    <from sec="1134363668" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.149.143.229"/>
    </slice>
    <from sec="1134363610" usec="0"/>
    <to sec="1134364494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.170.148.231"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.22.153.231"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="163.180.24.232"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.156.129.234"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.200.14.235"/>
    </slice>
    <from sec="1134363603" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.156.80.236"/>
    </slice>
    <from sec="1134363624" usec="0"/>
    <to sec="1134364478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.60.116.237"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.150.98.238"/>
    </slice>
    <from sec="1134363666" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.112.46.241"/>
    </slice>
    <from sec="1134364500" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.203.11.242"/>
    </slice>
    <from sec="1134363617" usec="0"/>
    <to sec="1134364499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.199.170.242"/>
    </slice>
    <from sec="1134363606" usec="0"/>
    <to sec="1134364492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.155.56.243"/>
    </slice>
    <from sec="1134363613" usec="0"/>
    <to sec="1134364001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.57.144.243"/>
    </slice>
    <from sec="1134363859" usec="0"/>
    <to sec="1134363883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.53.198.243"/>
    </slice>
    <from sec="1134363628" usec="0"/>
    <to sec="1134363828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.150.32.244"/>
    </slice>
    <from sec="1134364361" usec="0"/>
    <to sec="1134364446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.239.43.247"/>
    </slice>
    <from sec="1134363627" usec="0"/>
    <to sec="1134364491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.107.63.247"/>
    </slice>
    <from sec="1134363602" usec="0"/>
    <to sec="1134364501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.178.23.253"/>
    </slice>
    <from sec="1134364115" usec="0"/>
    <to sec="1134364500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.633226,2.28792,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.26.42.255"/>
    </slice>
    <from sec="1134363855" usec="0"/>
    <to sec="1134364493" usec="0"/>
  </anomaly>

</admd:annotation>
