<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.995188,1.76726,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.52.21.14" proto="icmp" src_ip="209.52.21.14"/>
      <filter dst_ip="209.52.21.14" proto="icmp" src_ip="209.52.21.14"/>
      <filter dst_ip="209.52.21.14" proto="icmp" src_ip="209.52.21.14"/>
      <filter dst_ip="209.52.21.14" proto="icmp" src_ip="209.52.21.14"/>
      <from sec="1136092140" usec="0"/>
      <to sec="1136092142" usec="0"/>
    </slice>
    <from sec="1136092139" usec="0"/>
    <to sec="1136092143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="tcp" src_ip="214.132.69.128" src_port="32863"/>
      <filter dst_port="1026" proto="udp" src_ip="214.132.69.128" src_port="32863"/>
      <from sec="1136091652" usec="0"/>
      <to sec="1136091653" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="1026" proto="tcp" src_ip="57.4.217.128" src_port="32863"/>
      <filter dst_port="1026" proto="udp" src_ip="57.4.217.128" src_port="32863"/>
      <from sec="1136091650" usec="0"/>
      <to sec="1136091654" usec="0"/>
    </slice>
    <from sec="1136091650" usec="0"/>
    <to sec="1136091654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="36.156.64.161" src_port="64657"/>
      <filter dst_port="137" proto="udp" src_ip="36.156.64.161" src_port="64657"/>
      <from sec="1136092103" usec="0"/>
      <to sec="1136092118" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="56.159.188.161" src_port="64657"/>
      <filter dst_port="137" proto="udp" src_ip="56.159.188.161" src_port="64657"/>
      <from sec="1136092102" usec="0"/>
      <to sec="1136092118" usec="0"/>
    </slice>
    <from sec="1136092102" usec="0"/>
    <to sec="1136092118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_4{
style=filled;
color=gray75;
37[label="214.131.220.161s;137pkt 137fpkt", shape=rectangle, color=red];
stat4[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.131.220.161:34084, *:1026}[51.0949%]&lt;BR/&gt;{214.131.220.161:34084, *:1027}[48.9051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34084: (50%)&lt;BR/&gt; 1026: (25.5474%)&lt;BR/&gt; 1027: (24.4526%)&gt;];
}
37--176[label="0.00729927;1pkt 1fpkt"];
37--204[label="0.00729927;1pkt 1fpkt"];
37--281[label="0.00729927;1pkt 1fpkt"];
37--465[label="0.00729927;1pkt 1fpkt"];
37--989[label="0.0113636;1pkt 1fpkt"];
37--1650[label="0.00729927;1pkt 1fpkt"];
37--1687[label="0.00729927;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="214.131.220.161" src_port="34084"/>
      <filter dst_port="1027" src_ip="214.131.220.161" src_port="34084"/>
    </slice>
    <from sec="1136091866" usec="0"/>
    <to sec="1136091871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.180.152.204" src_port="1030"/>
      <from sec="1136091991" usec="0"/>
      <to sec="1136092009" usec="0"/>
    </slice>
    <from sec="1136091991" usec="0"/>
    <to sec="1136092009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="85.16.144.197"/>
      <from sec="1136092074" usec="0"/>
      <to sec="1136092079" usec="0"/>
    </slice>
    <from sec="1136092074" usec="0"/>
    <to sec="1136092079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5900" proto="tcp" src_ip="199.128.168.227"/>
      <filter dst_port="4899" proto="tcp" src_ip="199.128.168.227"/>
      <filter dst_port="6101" proto="tcp" src_ip="199.128.168.227"/>
      <filter dst_port="42" proto="tcp" src_ip="199.128.168.227"/>
      <from sec="1136092487" usec="0"/>
      <to sec="1136092495" usec="0"/>
    </slice>
    <from sec="1136092487" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995188,1.76726,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.94.235.219" proto="icmp"/>
      <filter dst_ip="208.94.235.219" proto="icmp"/>
      <filter dst_ip="208.94.235.219" proto="icmp"/>
      <filter dst_ip="208.94.235.219" proto="icmp"/>
      <from sec="1136092345" usec="0"/>
      <to sec="1136092350" usec="0"/>
    </slice>
    <from sec="1136092345" usec="0"/>
    <to sec="1136092350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
309[label="204.216.93.92;d;57pkt 57fpkt", shape=diamond, color=yellow];
310[label="192.242.22.209;s;66pkt 66fpkt", shape=diamond, color=yellow];
1731[label="192.242.22.209;s;66pkt 66fpkt", shape=hexagon, color=black];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.22.209:57070, 204.216.93.92:*}[25.7576%]&lt;BR/&gt;{192.242.22.209:57098, 204.216.93.92:*}[25.7576%]&lt;BR/&gt;{192.242.22.209:57110, 204.216.93.92:*}[25.7576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57110: (13.4921%)&lt;BR/&gt; 57098: (13.4921%)&lt;BR/&gt; 57070: (13.4921%)&lt;BR/&gt; 24121: (4.2328%)&lt;BR/&gt; 56961: (3.1746%)&gt;];
}
309--310[label="1;57pkt 57fpkt"];
309--1731[label="1;57pkt 57fpkt"];
310--1731[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="204.216.93.92" src_ip="192.242.22.209" src_port="57110"/>
      <filter dst_ip="204.216.93.92" src_ip="192.242.22.209" src_port="57098"/>
      <filter dst_ip="204.216.93.92" src_ip="192.242.22.209" src_port="57070"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136091759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
353[label="80.147.212.135;s;3484pkt 3484fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.147.212.135:8888, *:*}[51.0907%]&lt;BR/&gt;{80.147.212.135:80, *:*}[48.9093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (25.5454%)&lt;BR/&gt; 80: (24.4546%)&lt;BR/&gt; 2656: (0.0717566%)&lt;BR/&gt; 2333: (0.0717566%)&lt;BR/&gt; 6539: (0.0574053%)&gt;];
}
353--375[label="0.00127065;1pkt 1fpkt"];
353--422[label="0.00242131;1pkt 1fpkt"];
353--960[label="0.0106383;1pkt 1fpkt"];
353--1399[label="0.00119332;1pkt 1fpkt"];
353--1991[label="0.0023753;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="80.147.212.135" src_port="8888"/>
      <filter src_ip="80.147.212.135" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
451[label="80.89.0.19;d;24pkt 24fpkt", shape=diamond, color=yellow];
452[label="193.114.37.165;s;155pkt 155fpkt", shape=diamond, color=yellow];
1684[label="80.89.0.19;d;12pkt 12fpkt", shape=hexagon, color=black];
2028[label="193.114.37.165;s;121pkt 121fpkt", shape=hexagon, color=black];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.37.165:80, *:*}[78.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.9744%)&lt;BR/&gt; 554: (15.0641%)&lt;BR/&gt; 52259: (0.641026%)&lt;BR/&gt; 6970: (0.641026%)&lt;BR/&gt; 2236: (0.641026%)&gt;];
}
451--452[label="1;24pkt 24fpkt"];
451--1684[label="1;12pkt 12fpkt"];
451--2028[label="1;24pkt 24fpkt"];
452--820[label="0.00645161;1pkt 1fpkt"];
452--1684[label="1;12pkt 12fpkt"];
452--2028[label="1;121pkt 121fpkt"];
1684--2028[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.37.165" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="113.151.19.168"/>
      <from sec="1136091987" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091987" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
497[label="58.13.83.78;d;778pkt 778fpkt", shape=diamond, color=yellow];
498[label="166.28.61.13;s;810pkt 810fpkt", shape=diamond, color=yellow];
2230[label="166.28.61.13;874pkt 874fpkt", shape=pentagon, color=darkviolet];
3335[label="166.28.61.13;874pkt 874fpkt", shape=invtriangle, color=brown];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.61.13:25, 58.13.83.78:*}[96.3387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.955%)&lt;BR/&gt; 31947: (0.059952%)&lt;BR/&gt; 31943: (0.059952%)&lt;BR/&gt; 31941: (0.059952%)&lt;BR/&gt; 31931: (0.059952%)&gt;];
}
497--498[label="1;778pkt 778fpkt"];
497--2230[label="1;778pkt 778fpkt"];
497--3335[label="1;778pkt 778fpkt"];
498--2230[label="1;810pkt 810fpkt"];
498--3335[label="1;810pkt 810fpkt"];
2230--3335[label="1;874pkt 874fpkt"];
</description>
    <slice>
      <filter dst_ip="58.13.83.78" src_ip="166.28.61.13" src_port="25"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
505[label="219.81.200.227;d;2pkt 2fpkt", shape=diamond, color=yellow];
506[label="192.242.43.0;s;2pkt 2fpkt", shape=diamond, color=yellow];
2142[label="192.242.43.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3276[label="192.242.43.0;1pkt 1fpkt", shape=invtriangle, color=brown];
4051[label="192.242.43.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.43.0:1199, 219.81.200.227:443}[50%]&lt;BR/&gt;{192.242.43.0:1504, 219.81.200.227:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1504: (35.7143%)&lt;BR/&gt; 1199: (14.2857%)&gt;];
}
505--506[label="1;2pkt 2fpkt"];
505--2142[label="1;1pkt 1fpkt"];
505--3276[label="1;1pkt 1fpkt"];
505--4051[label="1;1pkt 1fpkt"];
506--2142[label="1;1pkt 1fpkt"];
506--3276[label="1;1pkt 1fpkt"];
506--4051[label="1;1pkt 1fpkt"];
2142--3276[label="1;1pkt 1fpkt"];
2142--4051[label="1;1pkt 1fpkt"];
3276--4051[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.81.200.227" dst_port="443" src_ip="192.242.43.0" src_port="1504"/>
      <filter dst_ip="219.81.200.227" dst_port="443" src_ip="192.242.43.0" src_port="1199"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136091680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00869,1.65695,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
48[label="80.150.1.23s;184pkt 184fpkt", shape=rectangle, color=red];
530[label="80.150.1.23;s;449pkt 449fpkt", shape=diamond, color=yellow];
2271[label="80.150.1.23;449pkt 449fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.150.1.23:*, *:139}[56.3474%]&lt;BR/&gt;{80.150.1.23:*, *:445}[43.6526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (31.8854%)&lt;BR/&gt; 445: (18.1146%)&lt;BR/&gt; 3723: (0.231054%)&lt;BR/&gt; 3594: (0.231054%)&lt;BR/&gt; 3586: (0.231054%)&gt;];
}
48--530[label="1;184pkt 184fpkt"];
48--2271[label="1;184pkt 184fpkt"];
530--2271[label="1;449pkt 449fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="80.150.1.23"/>
      <filter dst_port="445" src_ip="80.150.1.23"/>
    </slice>
    <from sec="1136091662" usec="0"/>
    <to sec="1136091756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
488[label="215.11.180.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
538[label="192.248.176.119;s;599pkt 599fpkt", shape=diamond, color=yellow];
543[label="193.166.223.165;d;6pkt 6fpkt", shape=diamond, color=yellow];
602[label="209.104.40.85;d;2pkt 2fpkt", shape=diamond, color=yellow];
649[label="208.72.251.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
716[label="208.189.193.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
784[label="84.223.65.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
949[label="215.36.129.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
976[label="80.132.54.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1024[label="193.169.120.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
1025[label="215.52.78.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1038[label="213.213.101.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
1170[label="208.176.26.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
1248[label="215.103.18.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
1260[label="80.156.41.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
1385[label="214.98.194.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1422[label="81.10.38.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
1858[label="80.132.54.184;d;1pkt 1fpkt", shape=hexagon, color=black];
1862[label="193.169.120.47;d;1pkt 1fpkt", shape=hexagon, color=black];
2743[label="192.248.176.119;746pkt 746fpkt", shape=pentagon, color=darkviolet];
3682[label="192.248.176.119;745pkt 745fpkt", shape=invtriangle, color=brown];
4236[label="192.248.176.119;743pkt 743fpkt", shape=invhouse, color=bisque];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.248.176.119:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (18.8309%)&lt;BR/&gt; 12914: (4.21771%)&lt;BR/&gt; 18176: (3.34267%)&lt;BR/&gt; 16831: (2.18761%)&lt;BR/&gt; 8610: (2.13511%)&gt;];
}
488--538[label="1;1pkt 1fpkt"];
488--2743[label="1;1pkt 1fpkt"];
488--3682[label="1;1pkt 1fpkt"];
488--4236[label="1;1pkt 1fpkt"];
538--543[label="0.833333;5pkt 5fpkt"];
538--602[label="0.5;1pkt 1fpkt"];
538--649[label="1;1pkt 1fpkt"];
538--716[label="1;1pkt 1fpkt"];
538--784[label="1;1pkt 1fpkt"];
538--949[label="1;1pkt 1fpkt"];
538--976[label="1;1pkt 1fpkt"];
538--1024[label="1;1pkt 1fpkt"];
538--1025[label="1;1pkt 1fpkt"];
538--1038[label="1;1pkt 1fpkt"];
538--1170[label="1;1pkt 1fpkt"];
538--1248[label="1;1pkt 1fpkt"];
538--1260[label="1;1pkt 1fpkt"];
538--1385[label="1;1pkt 1fpkt"];
538--1422[label="1;1pkt 1fpkt"];
538--1858[label="1;1pkt 1fpkt"];
538--1862[label="1;1pkt 1fpkt"];
538--2743[label="1;599pkt 599fpkt"];
538--3682[label="0.998331;598pkt 598fpkt"];
538--4236[label="0.994992;596pkt 596fpkt"];
543--2743[label="1;6pkt 6fpkt"];
543--3682[label="1;6pkt 6fpkt"];
543--4236[label="1;6pkt 6fpkt"];
602--2743[label="1;2pkt 2fpkt"];
602--3682[label="1;2pkt 2fpkt"];
602--4236[label="1;2pkt 2fpkt"];
649--2743[label="1;1pkt 1fpkt"];
649--3682[label="1;1pkt 1fpkt"];
649--4236[label="1;1pkt 1fpkt"];
716--2743[label="1;1pkt 1fpkt"];
716--3682[label="1;1pkt 1fpkt"];
716--4236[label="1;1pkt 1fpkt"];
784--2743[label="1;1pkt 1fpkt"];
784--3682[label="1;1pkt 1fpkt"];
784--4236[label="1;1pkt 1fpkt"];
949--2743[label="1;1pkt 1fpkt"];
949--3682[label="1;1pkt 1fpkt"];
949--4236[label="1;1pkt 1fpkt"];
976--1858[label="1;1pkt 1fpkt"];
976--2743[label="1;1pkt 1fpkt"];
976--3682[label="1;1pkt 1fpkt"];
976--4236[label="1;1pkt 1fpkt"];
1024--1862[label="1;1pkt 1fpkt"];
1024--2743[label="1;1pkt 1fpkt"];
1024--3682[label="1;1pkt 1fpkt"];
1024--4236[label="1;1pkt 1fpkt"];
1025--2743[label="1;1pkt 1fpkt"];
1025--3682[label="1;1pkt 1fpkt"];
1025--4236[label="1;1pkt 1fpkt"];
1038--2743[label="1;1pkt 1fpkt"];
1038--3682[label="1;1pkt 1fpkt"];
1038--4236[label="1;1pkt 1fpkt"];
1170--2743[label="1;1pkt 1fpkt"];
1170--3682[label="1;1pkt 1fpkt"];
1170--4236[label="1;1pkt 1fpkt"];
1248--2743[label="1;1pkt 1fpkt"];
1248--3682[label="1;1pkt 1fpkt"];
1248--4236[label="1;1pkt 1fpkt"];
1260--2743[label="1;1pkt 1fpkt"];
1260--3682[label="1;1pkt 1fpkt"];
1260--4236[label="1;1pkt 1fpkt"];
1385--2743[label="1;1pkt 1fpkt"];
1385--3682[label="1;1pkt 1fpkt"];
1385--4236[label="1;1pkt 1fpkt"];
1422--2743[label="1;1pkt 1fpkt"];
1422--3682[label="1;1pkt 1fpkt"];
1422--4236[label="1;1pkt 1fpkt"];
1858--2743[label="1;1pkt 1fpkt"];
1858--3682[label="1;1pkt 1fpkt"];
1858--4236[label="1;1pkt 1fpkt"];
1862--2743[label="1;1pkt 1fpkt"];
1862--3682[label="1;1pkt 1fpkt"];
1862--4236[label="1;1pkt 1fpkt"];
2743--3682[label="1;745pkt 745fpkt"];
2743--4236[label="1;743pkt 743fpkt"];
3682--4236[label="1;743pkt 743fpkt"];
</description>
    <slice>
      <filter src_ip="192.248.176.119"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
346[label="37.130.229.191;d;5034pkt 5034fpkt", shape=diamond, color=yellow];
567[label="37.130.229.191;s;4445pkt 4445fpkt", shape=diamond, color=yellow];
3038[label="37.130.229.191;5356pkt 5356fpkt", shape=pentagon, color=darkviolet];
3897[label="37.130.229.191;5356pkt 5356fpkt", shape=invtriangle, color=brown];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.130.229.191:80, 37.130.229.191:*}[29.098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.4335%)&lt;BR/&gt; 21840: (9.93264%)&lt;BR/&gt; 8080: (4.65802%)&lt;BR/&gt; 21845: (3.88044%)&lt;BR/&gt; 3128: (1.96127%)&gt;];
}
346--567[label="1;4445pkt 4445fpkt"];
346--2133[label="0.00585252;15pkt 15fpkt"];
346--2134[label="0.00223714;1pkt 1fpkt"];
346--2135[label="0.000993246;5pkt 5fpkt"];
346--2137[label="0.00585252;15pkt 15fpkt"];
346--3038[label="0.991458;4991pkt 4991fpkt"];
346--3897[label="0.991458;4991pkt 4991fpkt"];
567--2133[label="0.00585252;15pkt 15fpkt"];
567--2134[label="0.00223714;1pkt 1fpkt"];
567--2135[label="0.00112486;5pkt 5fpkt"];
567--2137[label="0.00585252;15pkt 15fpkt"];
567--3038[label="1;4445pkt 4445fpkt"];
567--3897[label="1;4445pkt 4445fpkt"];
3038--3897[label="1;5356pkt 5356fpkt"];
</description>
    <slice>
      <filter dst_ip="37.130.229.191" src_ip="37.130.229.191" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
352[label="216.177.35.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
568[label="166.29.168.69;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.168.69:62975, *:*}[57.1429%]&lt;BR/&gt;{166.29.168.69:*, 221.216.159.61:47942}[28.5714%]&lt;BR/&gt;{166.29.168.69:*, 194.48.1.72:1493}[28.5714%]&lt;BR/&gt;{166.29.168.69:*, 36.20.75.130:48670}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62975: (31.25%)&lt;BR/&gt; 48670: (12.5%)&lt;BR/&gt; 47942: (12.5%)&lt;BR/&gt; 1493: (12.5%)&lt;BR/&gt; 1466: (12.5%)&gt;];
}
352--568[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.168.69" src_port="62975"/>
      <filter dst_ip="36.20.75.130" dst_port="48670" src_ip="166.29.168.69"/>
      <filter dst_ip="194.48.1.72" dst_port="1493" src_ip="166.29.168.69"/>
      <filter dst_ip="221.216.159.61" dst_port="47942" src_ip="166.29.168.69"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.114.44.52"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.58.27.228"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092338" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
611[label="209.58.187.45;s;2275pkt 2275fpkt", shape=diamond, color=yellow];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.58.187.45:1710, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1710: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
611--624[label="0.002849;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.58.187.45" src_port="1710"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
429[label="199.82.89.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
619[label="160.4.112.141;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.112.141:80, 217.208.1.77:1699}[25%]&lt;BR/&gt;{160.4.112.141:52436, 197.33.172.110:80}[25%]&lt;BR/&gt;{160.4.112.141:18000, 60.75.168.116:2083}[25%]&lt;BR/&gt;{160.4.112.141:80, 199.82.89.255:2487}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 2487: (20%)&lt;BR/&gt; 52436: (10%)&lt;BR/&gt; 18000: (10%)&lt;BR/&gt; 2083: (10%)&gt;];
}
429--619[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.82.89.255" dst_port="2487" src_ip="160.4.112.141" src_port="80"/>
      <filter dst_ip="60.75.168.116" dst_port="2083" src_ip="160.4.112.141" src_port="18000"/>
      <filter dst_ip="197.33.172.110" dst_port="80" src_ip="160.4.112.141" src_port="52436"/>
      <filter dst_ip="217.208.1.77" dst_port="1699" src_ip="160.4.112.141" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136091859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
620[label="197.33.132.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
621[label="160.128.38.193;s;5pkt 5fpkt", shape=diamond, color=yellow];
1752[label="197.33.132.27;d;1pkt 1fpkt", shape=hexagon, color=black];
3047[label="160.128.38.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.38.193:2872, 197.33.132.27:8000}[20%]&lt;BR/&gt;{160.128.38.193:4419, 57.7.1.116:80}[20%]&lt;BR/&gt;{160.128.38.193:4420, 57.7.1.116:80}[20%]&lt;BR/&gt;{160.128.38.193:4416, 57.192.65.232:80}[20%]&lt;BR/&gt;{160.128.38.193:4417, 57.192.65.232:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 8000: (22.2222%)&lt;BR/&gt; 2872: (22.2222%)&lt;BR/&gt; 4419: (11.1111%)&lt;BR/&gt; 4420: (5.55556%)&gt;];
}
620--621[label="1;1pkt 1fpkt"];
620--1752[label="1;1pkt 1fpkt"];
620--3047[label="1;1pkt 1fpkt"];
621--1752[label="1;1pkt 1fpkt"];
621--3047[label="1;2pkt 2fpkt"];
1752--3047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="57.192.65.232" dst_port="80" src_ip="160.128.38.193" src_port="4417"/>
      <filter dst_ip="57.192.65.232" dst_port="80" src_ip="160.128.38.193" src_port="4416"/>
      <filter dst_ip="57.7.1.116" dst_port="80" src_ip="160.128.38.193" src_port="4420"/>
      <filter dst_ip="57.7.1.116" dst_port="80" src_ip="160.128.38.193" src_port="4419"/>
      <filter dst_ip="197.33.132.27" dst_port="8000" src_ip="160.128.38.193" src_port="2872"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
640[label="221.36.187.187;s;1116pkt 1116fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.36.187.187:47349, *:1080}[77.1505%]&lt;BR/&gt;{221.36.187.187:62909, *:1080}[22.8495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 47349: (38.5753%)&lt;BR/&gt; 62909: (11.4247%)&gt;];
}
640--770[label="0.000896057;1pkt 1fpkt"];
640--1674[label="0.000896057;1pkt 1fpkt"];
640--1675[label="0.00181818;1pkt 1fpkt"];
640--1726[label="0.000896057;1pkt 1fpkt"];
640--2053[label="0.000896057;1pkt 1fpkt"];
640--2057[label="0.000896057;1pkt 1fpkt"];
640--2104[label="0.000896057;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="221.36.187.187" src_port="47349"/>
      <filter dst_port="1080" src_ip="221.36.187.187" src_port="62909"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="80.129.83.95"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092337" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="166.29.77.167"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.121.7.4"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="166.28.99.123"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
691[label="215.44.218.91;s;2721pkt 2721fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.44.218.91:1037, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
691--1010[label="0.00333333;1pkt 1fpkt"];
691--1816[label="0.00333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.44.218.91" src_port="1037"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06044,1.73065,901,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
94[label="213.214.143.86d;189pkt 189fpkt", shape=rectangle, color=red];
702[label="213.214.143.86;d;254pkt 254fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.214.143.86:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
94--702[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_ip="213.214.143.86"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136091752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
217[label="143.28.148.178;d;25pkt 25fpkt", shape=diamond, color=yellow];
764[label="209.164.161.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
2630[label="209.224.7.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.140.129.2:*, 143.28.148.178:21}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 3772: (3.7037%)&lt;BR/&gt; 1593: (3.7037%)&lt;BR/&gt; 63705: (1.85185%)&lt;BR/&gt; 61920: (1.85185%)&gt;];
}
217--764[label="1;1pkt 1fpkt"];
217--2630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.28.148.178" dst_port="21" src_ip="108.140.129.2"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="80.136.10.158"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,012,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.11.58.141"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092427" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690388,1.66942,901,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
653[label="58.186.81.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
817[label="136.47.138.214;s;22pkt 22fpkt", shape=diamond, color=yellow];
3962[label="136.47.138.214;24pkt 24fpkt", shape=invtriangle, color=brown];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.138.214:47340, *:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47340: (44.6809%)&lt;BR/&gt; 2858: (3.19149%)&lt;BR/&gt; 554: (3.19149%)&lt;BR/&gt; 62993: (2.12766%)&lt;BR/&gt; 61112: (2.12766%)&gt;];
}
653--817[label="1;1pkt 1fpkt"];
653--3962[label="1;1pkt 1fpkt"];
817--3962[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.138.214" src_port="47340"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
864[label="57.6.144.37;s;57pkt 57fpkt", shape=diamond, color=yellow];
865[label="166.28.221.124;d;123pkt 123fpkt", shape=diamond, color=yellow];
1770[label="57.6.144.37;s;25pkt 25fpkt", shape=hexagon, color=black];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.6.144.37:8200, 166.28.221.124:*}[52.0325%]&lt;BR/&gt;{57.6.144.177:8200, 166.28.221.124:*}[43.9024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 4698: (0.731707%)&lt;BR/&gt; 4696: (0.731707%)&lt;BR/&gt; 4508: (0.731707%)&lt;BR/&gt; 4507: (0.731707%)&gt;];
}
864--865[label="1;57pkt 57fpkt"];
864--1770[label="1;25pkt 25fpkt"];
865--1770[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.221.124" src_ip="57.6.144.37" src_port="8200"/>
      <filter dst_ip="166.28.221.124" src_ip="57.6.144.177" src_port="8200"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
695[label="57.6.144.37;d;64pkt 64fpkt", shape=diamond, color=yellow];
866[label="166.28.221.124;s;134pkt 134fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.221.124:*, 57.6.144.37:8200}[47.7612%]&lt;BR/&gt;{166.28.221.124:*, 57.6.144.177:8200}[40.2985%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (49.7475%)&lt;BR/&gt; 4698: (0.505051%)&lt;BR/&gt; 4696: (0.505051%)&lt;BR/&gt; 4508: (0.505051%)&lt;BR/&gt; 4507: (0.505051%)&gt;];
}
695--866[label="1;64pkt 64fpkt"];
866--2133[label="0.00746269;1pkt 1fpkt"];
866--2137[label="0.00746269;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="57.6.144.37" dst_port="8200" src_ip="166.28.221.124"/>
      <filter dst_ip="57.6.144.177" dst_port="8200" src_ip="166.28.221.124"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
868[label="213.24.98.116;s;1660pkt 1660fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.24.98.116:1068, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1068: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1434" src_ip="213.24.98.116" src_port="1068"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
872[label="160.87.120.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
873[label="166.29.6.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.6.193:514, 160.87.120.215:514}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 514: (100%)&gt;];
}
872--873[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.87.120.215" dst_port="514" src_ip="166.29.6.193" src_port="514"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
882[label="213.182.247.144;s;632pkt 632fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.182.247.144:*, *:42}[74.2089%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (37.1044%)&lt;BR/&gt; 80: (8.62342%)&lt;BR/&gt; 0: (8.5443%)&lt;BR/&gt; 3723: (0.237342%)&lt;BR/&gt; 2654: (0.237342%)&gt;];
}
882--2133[label="0.00791139;5pkt 5fpkt"];
882--2137[label="0.00791139;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="42" src_ip="213.182.247.144"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="166.29.151.125"/>
      <from sec="1136091613" usec="0"/>
      <to sec="1136092337" usec="0"/>
    </slice>
    <from sec="1136091613" usec="0"/>
    <to sec="1136092337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="62.141.204.119"/>
      <from sec="1136091816" usec="0"/>
      <to sec="1136091840" usec="0"/>
    </slice>
    <from sec="1136091816" usec="0"/>
    <to sec="1136091840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.114.44.2"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.98.77.213"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092337" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.206.8.158"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,054,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
671[label="166.28.196.148;d;1652pkt 1652fpkt", shape=diamond, color=yellow];
984[label="198.160.132.201;s;1290pkt 1290fpkt", shape=diamond, color=yellow];
1765[label="166.28.196.148;d;570pkt 570fpkt", shape=hexagon, color=black];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.160.132.201:443, 166.28.196.148:*}[99.8789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.9715%)&lt;BR/&gt; 1984: (0.0427107%)&lt;BR/&gt; 1983: (0.0427107%)&lt;BR/&gt; 1982: (0.0427107%)&lt;BR/&gt; 1981: (0.0427107%)&gt;];
}
671--984[label="1;1290pkt 1290fpkt"];
671--1765[label="1;570pkt 570fpkt"];
984--1765[label="1;570pkt 570fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.196.148" src_ip="198.160.132.201" src_port="443"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
1000[label="178.142.165.171;d;11pkt 11fpkt", shape=diamond, color=yellow];
1001[label="80.128.185.58;s;9pkt 9fpkt", shape=diamond, color=yellow];
2443[label="80.128.185.58;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3463[label="80.128.185.58;8pkt 8fpkt", shape=invtriangle, color=brown];
4137[label="80.128.185.58;8pkt 8fpkt", shape=invhouse, color=bisque];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.128.185.58:80, 178.142.165.171:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 4219: (5.68182%)&lt;BR/&gt; 4218: (5.68182%)&lt;BR/&gt; 4217: (5.68182%)&lt;BR/&gt; 4215: (5.68182%)&gt;];
}
1000--1001[label="1;9pkt 9fpkt"];
1000--2443[label="1;8pkt 8fpkt"];
1000--3463[label="1;8pkt 8fpkt"];
1000--4137[label="1;8pkt 8fpkt"];
1001--2443[label="1;8pkt 8fpkt"];
1001--3463[label="1;8pkt 8fpkt"];
1001--4137[label="1;8pkt 8fpkt"];
2443--3463[label="1;8pkt 8fpkt"];
2443--4137[label="1;8pkt 8fpkt"];
3463--4137[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.165.171" src_ip="80.128.185.58" src_port="80"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="166.29.151.123"/>
      <from sec="1136091601" usec="0"/>
      <to sec="1136092426" usec="0"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
758[label="196.156.0.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
1079[label="136.47.172.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.211:2173, 196.156.0.150:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2173: (50%)&gt;];
}
758--1079[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.156.0.150" dst_port="6667" src_ip="136.47.172.211" src_port="2173"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
1075[label="193.114.33.95;s;80pkt 80fpkt", shape=diamond, color=yellow];
1089[label="84.183.232.28;d;71pkt 71fpkt", shape=diamond, color=yellow];
2635[label="193.114.33.95;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.33.95:21, 84.183.232.28:*}[79.0698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (41.7373%)&lt;BR/&gt; 80: (1.27119%)&lt;BR/&gt; 64654: (0.635593%)&lt;BR/&gt; 58788: (0.635593%)&lt;BR/&gt; 58179: (0.635593%)&gt;];
}
1075--1089[label="1;71pkt 71fpkt"];
1075--2635[label="0.9875;79pkt 79fpkt"];
1089--2635[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="84.183.232.28" src_ip="193.114.33.95" src_port="21"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="57.203.140.86"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
781[label="143.28.183.80;d;14pkt 14fpkt", shape=diamond, color=yellow];
1107[label="209.101.218.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
2154[label="217.66.32.1;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3232[label="192.181.3.242;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.66.32.1:*, 143.28.183.80:23}[47.0588%]&lt;BR/&gt;{192.181.3.242:*, 143.28.183.80:23}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 17031: (3.7037%)&lt;BR/&gt; 17023: (3.7037%)&lt;BR/&gt; 16769: (3.7037%)&lt;BR/&gt; 16731: (3.7037%)&gt;];
}
781--1107[label="1;1pkt 1fpkt"];
781--2154[label="0.857143;6pkt 6fpkt"];
781--3232[label="0.6;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.28.183.80" dst_port="23" src_ip="217.66.32.1"/>
      <filter dst_ip="143.28.183.80" dst_port="23" src_ip="192.181.3.242"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
831[label="80.144.11.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
1123[label="178.142.114.213;d;7pkt 7fpkt", shape=diamond, color=yellow];
1763[label="80.144.11.228;s;1pkt 1fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 178.142.114.213:1434}[28.5714%]&lt;BR/&gt;{*:*, 178.142.114.213:13180}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6299: (16.6667%)&lt;BR/&gt; 2438: (16.6667%)&lt;BR/&gt; 13180: (11.1111%)&lt;BR/&gt; 1434: (11.1111%)&lt;BR/&gt; 13500: (5.55556%)&gt;];
}
831--1123[label="1;1pkt 1fpkt"];
831--1763[label="1;1pkt 1fpkt"];
1123--1763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.114.213" dst_port="13180"/>
      <filter dst_ip="178.142.114.213" dst_port="1434"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
833[label="166.29.81.230;s;902pkt 902fpkt", shape=diamond, color=yellow];
1124[label="214.99.70.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
1134[label="84.166.233.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
3188[label="166.29.81.230;1005pkt 1005fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.81.230:14600, *:4672}[58.806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14600: (44.8664%)&lt;BR/&gt; 4672: (29.4657%)&lt;BR/&gt; 20614: (4.45259%)&lt;BR/&gt; 6672: (0.890519%)&lt;BR/&gt; 5665: (0.523834%)&gt;];
}
833--1124[label="1;1pkt 1fpkt"];
833--1134[label="1;1pkt 1fpkt"];
833--3188[label="1;902pkt 902fpkt"];
1124--3188[label="1;1pkt 1fpkt"];
1134--3188[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="166.29.81.230" src_port="14600"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="80.147.145.110"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.939495,1.6663,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
992[label="213.32.106.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1137[label="136.47.174.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
1899[label="136.47.174.196;s;1pkt 1fpkt", shape=hexagon, color=black];
3909[label="136.47.174.196;1pkt 1fpkt", shape=invtriangle, color=brown];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.174.196:1056, 213.32.106.142:11008}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11008: (50%)&lt;BR/&gt; 1056: (50%)&gt;];
}
992--1137[label="1;1pkt 1fpkt"];
992--1899[label="1;1pkt 1fpkt"];
992--3909[label="1;1pkt 1fpkt"];
1137--1899[label="1;1pkt 1fpkt"];
1137--3909[label="1;1pkt 1fpkt"];
1899--3909[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.32.106.142" dst_port="11008" src_ip="136.47.174.196" src_port="1056"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.27.227.74"/>
      <from sec="1136091608" usec="0"/>
      <to sec="1136092338" usec="0"/>
    </slice>
    <from sec="1136091608" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06044,1.73065,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
64[label="209.37.72.114s;62pkt 62fpkt", shape=rectangle, color=red];
1217[label="209.37.72.114;s;251pkt 251fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.37.72.114:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3784: (0.319489%)&lt;BR/&gt; 3779: (0.319489%)&lt;BR/&gt; 3774: (0.319489%)&lt;BR/&gt; 3769: (0.319489%)&gt;];
}
64--1217[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.37.72.114"/>
    </slice>
    <from sec="1136091953" usec="0"/>
    <to sec="1136092010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
697[label="136.47.182.200;s;528pkt 528fpkt", shape=diamond, color=yellow];
1220[label="213.32.82.41;d;126pkt 126fpkt", shape=diamond, color=yellow];
1224[label="209.137.32.3;d;90pkt 90fpkt", shape=diamond, color=yellow];
1516[label="57.106.148.9;d;8pkt 8fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.182.200:*, 213.32.82.41:80}[23.8636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.867%)&lt;BR/&gt; 4278: (0.132979%)&lt;BR/&gt; 4274: (0.132979%)&lt;BR/&gt; 4273: (0.132979%)&lt;BR/&gt; 4270: (0.132979%)&gt;];
}
697--1220[label="1;126pkt 126fpkt"];
697--1224[label="1;90pkt 90fpkt"];
697--1516[label="1;8pkt 8fpkt"];
697--2133[label="0.00378788;2pkt 2fpkt"];
697--2137[label="0.00378788;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.32.82.41" dst_port="80" src_ip="136.47.182.200"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="61.151.203.254"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092399" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="61.151.203.254"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092399" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.47.16.214"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.110.167.89"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092394" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="178.142.154.152"/>
      <from sec="1136091601" usec="0"/>
      <to sec="1136092248" usec="0"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
1200[label="160.128.23.12;s;10pkt 10fpkt", shape=diamond, color=yellow];
1311[label="194.185.226.218;d;5pkt 5fpkt", shape=diamond, color=yellow];
1927[label="160.128.23.12;s;10pkt 10fpkt", shape=hexagon, color=black];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.23.12:80, 194.185.226.218:*}[50%]&lt;BR/&gt;{160.128.23.12:80, 61.183.172.174:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10521: (6%)&lt;BR/&gt; 10518: (6%)&lt;BR/&gt; 10515: (6%)&lt;BR/&gt; 10513: (6%)&gt;];
}
1200--1311[label="1;5pkt 5fpkt"];
1200--1927[label="1;10pkt 10fpkt"];
1311--1927[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="194.185.226.218" src_ip="160.128.23.12" src_port="80"/>
      <filter dst_ip="61.183.172.174" src_ip="160.128.23.12" src_port="80"/>
    </slice>
    <from sec="1136091878" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1339[label="136.47.106.186;s;231pkt 231fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.106.186:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1339--1340[label="0.004329;1pkt 1fpkt"];
1339--1346[label="0.004329;1pkt 1fpkt"];
1339--1352[label="0.004329;1pkt 1fpkt"];
1339--1356[label="0.00438596;1pkt 1fpkt"];
1339--1365[label="0.0052356;1pkt 1fpkt"];
1339--1550[label="0.004329;1pkt 1fpkt"];
1339--1553[label="0.0052356;1pkt 1fpkt"];
1339--1555[label="0.00549451;1pkt 1fpkt"];
1339--1803[label="0.00561798;1pkt 1fpkt"];
1339--1962[label="0.00454545;1pkt 1fpkt"];
1339--1969[label="0.00574713;1pkt 1fpkt"];
1339--2063[label="0.004329;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.106.186"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1346[label="208.72.156.169;d;241pkt 241fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.72.156.169:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1346--1854[label="0.00436681;1pkt 1fpkt"];
1346--1893[label="0.00452489;1pkt 1fpkt"];
1346--1909[label="0.00961538;1pkt 1fpkt"];
1346--2016[label="0.00414938;1pkt 1fpkt"];
1346--2036[label="0.00549451;1pkt 1fpkt"];
1346--2068[label="0.00414938;1pkt 1fpkt"];
1346--2169[label="0.00414938;1pkt 1fpkt"];
1346--2707[label="0.00414938;1pkt 1fpkt"];
1346--2784[label="0.00925926;1pkt 1fpkt"];
1346--2790[label="0.00458716;1pkt 1fpkt"];
1346--3294[label="0.00414938;1pkt 1fpkt"];
1346--3656[label="0.00414938;1pkt 1fpkt"];
1346--3714[label="0.00925926;1pkt 1fpkt"];
1346--3719[label="0.00458716;1pkt 1fpkt"];
1346--4254[label="0.00456621;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.72.156.169"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
978[label="202.2.139.5;s;7pkt 7fpkt", shape=diamond, color=yellow];
1348[label="143.28.153.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.2.139.5:6667, *:*}[42.8571%]&lt;BR/&gt;{202.2.139.5:*, 143.28.153.129:113}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 1136: (12.5%)&lt;BR/&gt; 113: (12.5%)&lt;BR/&gt; 6668: (6.25%)&lt;BR/&gt; 6666: (6.25%)&gt;];
}
978--1348[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="202.2.139.5" src_port="6667"/>
      <filter dst_ip="143.28.153.129" dst_port="113" src_ip="202.2.139.5"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
1086[label="202.72.17.177;s;11pkt 11fpkt", shape=diamond, color=yellow];
1351[label="143.28.233.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
1357[label="143.28.145.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
1475[label="143.28.218.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
1551[label="143.28.130.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
1610[label="143.28.143.236;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.72.17.177:*, 143.28.153.129:*}[27.2727%]&lt;BR/&gt;{202.72.17.177:*, 143.28.143.236:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6661: (11.1111%)&lt;BR/&gt; 6665: (8.33333%)&lt;BR/&gt; 113: (8.33333%)&lt;BR/&gt; 6667: (5.55556%)&lt;BR/&gt; 6662: (5.55556%)&gt;];
}
1086--1351[label="1;1pkt 1fpkt"];
1086--1357[label="1;1pkt 1fpkt"];
1086--1475[label="1;1pkt 1fpkt"];
1086--1551[label="1;1pkt 1fpkt"];
1086--1610[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.28.143.236" src_ip="202.72.17.177"/>
      <filter dst_ip="143.28.153.129" src_ip="202.72.17.177"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
1352[label="209.121.7.4;d;271pkt 271fpkt", shape=diamond, color=yellow];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 209.121.7.4:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1352--1722[label="0.00369004;1pkt 1fpkt"];
1352--1854[label="0.00436681;1pkt 1fpkt"];
1352--1893[label="0.00452489;1pkt 1fpkt"];
1352--1909[label="0.00961538;1pkt 1fpkt"];
1352--2036[label="0.00549451;1pkt 1fpkt"];
1352--2068[label="0.00369004;1pkt 1fpkt"];
1352--2169[label="0.00369004;1pkt 1fpkt"];
1352--2569[label="0.0045045;1pkt 1fpkt"];
1352--2707[label="0.00369004;1pkt 1fpkt"];
1352--2784[label="0.00925926;1pkt 1fpkt"];
1352--2790[label="0.00458716;1pkt 1fpkt"];
1352--2926[label="0.00534759;1pkt 1fpkt"];
1352--3294[label="0.00369004;1pkt 1fpkt"];
1352--3656[label="0.00369004;1pkt 1fpkt"];
1352--3714[label="0.00925926;1pkt 1fpkt"];
1352--3719[label="0.00458716;1pkt 1fpkt"];
1352--3816[label="0.00531915;1pkt 1fpkt"];
1352--4254[label="0.00456621;1pkt 1fpkt"];
1352--4307[label="0.00531915;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.121.7.4"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.55.68.127"/>
      <from sec="1136091603" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="108.66.3.61"/>
      <from sec="1136091814" usec="0"/>
      <to sec="1136092400" usec="0"/>
    </slice>
    <from sec="1136091814" usec="0"/>
    <to sec="1136092400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06044,1.73065,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
68[label="213.157.36.137s;64pkt 64fpkt", shape=rectangle, color=red];
1432[label="213.157.36.137;s;319pkt 319fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.157.36.137:*, *:139}[68.0251%]&lt;BR/&gt;{213.157.36.137:*, *:445}[31.9749%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (36.6841%)&lt;BR/&gt; 445: (13.3159%)&lt;BR/&gt; 60144: (0.261097%)&lt;BR/&gt; 60143: (0.261097%)&lt;BR/&gt; 60142: (0.261097%)&gt;];
}
68--1432[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.157.36.137"/>
      <filter dst_port="445" src_ip="213.157.36.137"/>
    </slice>
    <from sec="1136092121" usec="0"/>
    <to sec="1136092187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02668,1.60867,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
50[label="208.84.192.27s;108pkt 108fpkt", shape=rectangle, color=red];
1440[label="208.84.192.27;s;462pkt 462fpkt", shape=diamond, color=yellow];
2294[label="208.84.192.27;461pkt 461fpkt", shape=pentagon, color=darkviolet];
3369[label="208.84.192.27;461pkt 461fpkt", shape=invtriangle, color=brown];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.84.192.27:*, *:139}[54.5455%]&lt;BR/&gt;{208.84.192.27:*, *:445}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.2681%)&lt;BR/&gt; 445: (24.7319%)&lt;BR/&gt; 3731: (0.201072%)&lt;BR/&gt; 3153: (0.201072%)&lt;BR/&gt; 3111: (0.201072%)&gt;];
}
50--1440[label="1;108pkt 108fpkt"];
50--2294[label="1;108pkt 108fpkt"];
50--3369[label="1;108pkt 108fpkt"];
1440--2294[label="1;461pkt 461fpkt"];
1440--3369[label="1;461pkt 461fpkt"];
2294--3369[label="1;461pkt 461fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.84.192.27"/>
      <filter dst_port="445" src_ip="208.84.192.27"/>
    </slice>
    <from sec="1136092148" usec="0"/>
    <to sec="1136092256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00869,1.65695,010,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
46[label="209.82.58.9s;192pkt 192fpkt", shape=rectangle, color=red];
1441[label="209.82.58.9;s;254pkt 254fpkt", shape=diamond, color=yellow];
2204[label="209.82.58.9;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.82.58.9:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4995: (0.214286%)&lt;BR/&gt; 4986: (0.214286%)&lt;BR/&gt; 4978: (0.214286%)&lt;BR/&gt; 4970: (0.214286%)&gt;];
}
46--1441[label="1;192pkt 192fpkt"];
46--2204[label="1;192pkt 192fpkt"];
1441--2204[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.82.58.9"/>
    </slice>
    <from sec="1136092148" usec="0"/>
    <to sec="1136092243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
1442[label="193.114.41.80;d;21pkt 21fpkt", shape=diamond, color=yellow];
1444[label="213.11.23.9;s;21pkt 21fpkt", shape=diamond, color=yellow];
2092[label="193.114.41.80;d;21pkt 21fpkt", shape=hexagon, color=black];
2200[label="213.11.23.9;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3316[label="213.11.23.9;21pkt 21fpkt", shape=invtriangle, color=brown];
4070[label="213.11.23.9;21pkt 21fpkt", shape=invhouse, color=bisque];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.11.23.9:*, 193.114.41.80:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 54409: (2.38095%)&lt;BR/&gt; 54403: (2.38095%)&lt;BR/&gt; 54402: (2.38095%)&lt;BR/&gt; 54400: (2.38095%)&gt;];
}
1442--1444[label="1;21pkt 21fpkt"];
1442--2092[label="1;21pkt 21fpkt"];
1442--2200[label="1;21pkt 21fpkt"];
1442--3316[label="1;21pkt 21fpkt"];
1442--4070[label="1;21pkt 21fpkt"];
1444--2092[label="1;21pkt 21fpkt"];
1444--2200[label="1;21pkt 21fpkt"];
1444--3316[label="1;21pkt 21fpkt"];
1444--4070[label="1;21pkt 21fpkt"];
2092--2200[label="1;21pkt 21fpkt"];
2092--3316[label="1;21pkt 21fpkt"];
2092--4070[label="1;21pkt 21fpkt"];
2200--3316[label="1;21pkt 21fpkt"];
2200--4070[label="1;21pkt 21fpkt"];
3316--4070[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.41.80" dst_port="1755" src_ip="213.11.23.9"/>
    </slice>
    <from sec="1136092151" usec="0"/>
    <to sec="1136092369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
1438[label="166.28.185.94;s;5pkt 5fpkt", shape=diamond, color=yellow];
1447[label="209.137.37.49;d;4pkt 4fpkt", shape=diamond, color=yellow];
2010[label="166.28.185.94;s;5pkt 5fpkt", shape=hexagon, color=black];
2633[label="166.28.185.94;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.185.94:*, 64.224.53.25:80}[35.7143%]&lt;BR/&gt;{166.28.185.94:*, 209.137.37.49:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1464: (7.40741%)&lt;BR/&gt; 1463: (7.40741%)&lt;BR/&gt; 1462: (7.40741%)&lt;BR/&gt; 1461: (5.55556%)&gt;];
}
1438--1447[label="1;4pkt 4fpkt"];
1438--2010[label="1;5pkt 5fpkt"];
1438--2633[label="0.8;4pkt 4fpkt"];
1447--2010[label="1;4pkt 4fpkt"];
1447--2633[label="0.75;3pkt 3fpkt"];
2010--2633[label="0.8;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="64.224.53.25" dst_port="80" src_ip="166.28.185.94"/>
      <filter dst_ip="209.137.37.49" dst_port="80" src_ip="166.28.185.94"/>
    </slice>
    <from sec="1136091717" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="166.28.203.27"/>
      <from sec="1136091600" usec="0"/>
      <to sec="1136092385" usec="0"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="108.66.3.61"/>
      <from sec="1136091814" usec="0"/>
      <to sec="1136092400" usec="0"/>
    </slice>
    <from sec="1136091814" usec="0"/>
    <to sec="1136092400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
1431[label="136.47.251.40;s;122pkt 122fpkt", shape=diamond, color=yellow];
1514[label="219.25.43.6;d;259pkt 259fpkt", shape=diamond, color=yellow];
2006[label="136.47.251.40;s;122pkt 122fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.251.40:*, 219.25.43.6:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3292: (0.298211%)&lt;BR/&gt; 3291: (0.298211%)&lt;BR/&gt; 3290: (0.298211%)&lt;BR/&gt; 3289: (0.298211%)&gt;];
}
1431--1514[label="1;122pkt 122fpkt"];
1431--2006[label="1;122pkt 122fpkt"];
1514--2006[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="219.25.43.6" dst_port="80" src_ip="136.47.251.40"/>
    </slice>
    <from sec="1136092107" usec="0"/>
    <to sec="1136092350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1443[label="193.114.41.80;s;21pkt 21fpkt", shape=diamond, color=yellow];
1519[label="213.11.23.9;d;21pkt 21fpkt", shape=diamond, color=yellow];
2551[label="193.114.41.80;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.41.80:1755, 213.11.23.9:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 54409: (2.38095%)&lt;BR/&gt; 54403: (2.38095%)&lt;BR/&gt; 54402: (2.38095%)&lt;BR/&gt; 54400: (2.38095%)&gt;];
}
1443--1519[label="1;21pkt 21fpkt"];
1443--2551[label="1;21pkt 21fpkt"];
1519--2551[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="213.11.23.9" src_ip="193.114.41.80" src_port="1755"/>
    </slice>
    <from sec="1136091766" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
517[label="136.47.172.146;s;343pkt 343fpkt", shape=diamond, color=yellow];
724[label="215.133.106.52;d;59pkt 59fpkt", shape=diamond, color=yellow];
1414[label="84.53.17.11;d;27pkt 27fpkt", shape=diamond, color=yellow];
1448[label="217.37.44.171;d;12pkt 12fpkt", shape=diamond, color=yellow];
1522[label="216.163.148.26;d;21pkt 21fpkt", shape=diamond, color=yellow];
1865[label="136.47.172.146;s;316pkt 316fpkt", shape=hexagon, color=black];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.146:*, *:80}[76.3848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.4679%)&lt;BR/&gt; 9592: (7.06941%)&lt;BR/&gt; 9548: (5.20566%)&lt;BR/&gt; 3252: (0.192802%)&lt;BR/&gt; 3251: (0.192802%)&gt;];
}
517--724[label="1;59pkt 59fpkt"];
517--1414[label="1;27pkt 27fpkt"];
517--1448[label="1;12pkt 12fpkt"];
517--1522[label="1;21pkt 21fpkt"];
517--1865[label="1;316pkt 316fpkt"];
517--2133[label="0.0145773;5pkt 5fpkt"];
517--2137[label="0.0145773;5pkt 5fpkt"];
724--1865[label="1;59pkt 59fpkt"];
1414--1865[label="1;27pkt 27fpkt"];
1448--1865[label="1;12pkt 12fpkt"];
1522--1865[label="0.238095;5pkt 5fpkt"];
1865--2133[label="0.0158228;5pkt 5fpkt"];
1865--2137[label="0.0158228;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.47.172.146"/>
    </slice>
    <from sec="1136091608" usec="0"/>
    <to sec="1136092426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06044,1.73065,020,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
96[label="215.41.136.226d;63pkt 63fpkt", shape=rectangle, color=red];
1528[label="215.41.136.226;d;253pkt 253fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.41.136.226:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
96--1528[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="215.41.136.226"/>
    </slice>
    <from sec="1136092205" usec="0"/>
    <to sec="1136092285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06044,1.73065,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
83[label="215.41.136.226s;191pkt 191fpkt", shape=rectangle, color=red];
1529[label="215.41.136.226;s;253pkt 253fpkt", shape=diamond, color=yellow];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.41.136.226:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4997: (0.225225%)&lt;BR/&gt; 4993: (0.225225%)&lt;BR/&gt; 4985: (0.225225%)&lt;BR/&gt; 4981: (0.225225%)&gt;];
}
83--1529[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="215.41.136.226"/>
    </slice>
    <from sec="1136092205" usec="0"/>
    <to sec="1136092285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1491[label="160.128.23.20;s;32pkt 32fpkt", shape=diamond, color=yellow];
1531[label="217.34.39.158;d;8pkt 8fpkt", shape=diamond, color=yellow];
2037[label="160.128.23.20;s;32pkt 32fpkt", shape=hexagon, color=black];
2258[label="160.128.23.20;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.23.20:80, 217.34.39.158:*}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2557: (2.7027%)&lt;BR/&gt; 2505: (2.7027%)&lt;BR/&gt; 2547: (2.02703%)&lt;BR/&gt; 2542: (2.02703%)&gt;];
}
1491--1531[label="1;8pkt 8fpkt"];
1491--2037[label="1;32pkt 32fpkt"];
1491--2258[label="1;2pkt 2fpkt"];
1531--2037[label="1;8pkt 8fpkt"];
1531--2258[label="1;2pkt 2fpkt"];
2037--2258[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.34.39.158" src_ip="160.128.23.20" src_port="80"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
514[label="136.47.172.216;d;77pkt 77fpkt", shape=diamond, color=yellow];
894[label="166.28.216.77;d;72pkt 72fpkt", shape=diamond, color=yellow];
1281[label="218.12.17.25;s;144pkt 144fpkt", shape=diamond, color=yellow];
1494[label="136.47.174.89;d;100pkt 100fpkt", shape=diamond, color=yellow];
1537[label="178.142.194.165;d;29pkt 29fpkt", shape=diamond, color=yellow];
1538[label="64.224.53.25;s;18pkt 18fpkt", shape=diamond, color=yellow];
2094[label="64.224.53.25;s;19pkt 19fpkt", shape=hexagon, color=black];
2302[label="196.145.133.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3377[label="196.145.133.29;1pkt 1fpkt", shape=invtriangle, color=brown];
4100[label="196.145.133.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.47.172.216:*}[30.7947%]&lt;BR/&gt;{*:80, 166.28.216.77:*}[25.1656%]&lt;BR/&gt;{218.12.17.25:80, 136.47.174.89:*}[24.5033%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7041%)&lt;BR/&gt; 2265: (1.1879%)&lt;BR/&gt; 3427: (0.431965%)&lt;BR/&gt; 4093: (0.323974%)&lt;BR/&gt; 4091: (0.323974%)&gt;];
}
514--1281[label="0.0779221;6pkt 6fpkt"];
514--2302[label="1;2pkt 2fpkt"];
514--3377[label="1;1pkt 1fpkt"];
514--4100[label="1;1pkt 1fpkt"];
894--1281[label="0.583333;42pkt 42fpkt"];
1281--1494[label="0.66;66pkt 66fpkt"];
1281--1537[label="0.241379;7pkt 7fpkt"];
1537--1538[label="1;18pkt 18fpkt"];
1537--2094[label="0.947368;18pkt 18fpkt"];
1538--2094[label="1;18pkt 18fpkt"];
2302--3377[label="1;1pkt 1fpkt"];
2302--4100[label="1;1pkt 1fpkt"];
3377--4100[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.172.216" src_port="80"/>
      <filter dst_ip="166.28.216.77" src_port="80"/>
      <filter dst_ip="136.47.174.89" src_ip="218.12.17.25" src_port="80"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
1553[label="209.58.27.228;d;191pkt 191fpkt", shape=diamond, color=yellow];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 209.58.27.228:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1553--1722[label="0.0052356;1pkt 1fpkt"];
1553--1854[label="0.0052356;1pkt 1fpkt"];
1553--1893[label="0.0052356;1pkt 1fpkt"];
1553--2016[label="0.0052356;1pkt 1fpkt"];
1553--2036[label="0.00549451;1pkt 1fpkt"];
1553--2068[label="0.0052356;1pkt 1fpkt"];
1553--2169[label="0.0052356;1pkt 1fpkt"];
1553--2569[label="0.0052356;1pkt 1fpkt"];
1553--2707[label="0.0052356;1pkt 1fpkt"];
1553--2790[label="0.0052356;1pkt 1fpkt"];
1553--2926[label="0.00534759;1pkt 1fpkt"];
1553--3294[label="0.0052356;1pkt 1fpkt"];
1553--3656[label="0.0052356;1pkt 1fpkt"];
1553--3719[label="0.0052356;1pkt 1fpkt"];
1553--3816[label="0.00531915;1pkt 1fpkt"];
1553--4254[label="0.0052356;1pkt 1fpkt"];
1553--4307[label="0.00531915;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.58.27.228"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1098[label="166.29.76.110;s;48pkt 48fpkt", shape=diamond, color=yellow];
1554[label="80.6.30.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.76.110:8851, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8851: (25.5102%)&lt;BR/&gt; 19984: (3.06122%)&lt;BR/&gt; 1849: (3.06122%)&lt;BR/&gt; 1931: (2.04082%)&lt;BR/&gt; 1033: (2.04082%)&gt;];
}
1098--1554[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.76.110" src_port="8851"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.47.172.190"/>
      <from sec="1136091627" usec="0"/>
      <to sec="1136092428" usec="0"/>
    </slice>
    <from sec="1136091627" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.114.33.86"/>
      <from sec="1136091633" usec="0"/>
      <to sec="1136092424" usec="0"/>
    </slice>
    <from sec="1136091633" usec="0"/>
    <to sec="1136092424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663334,1.71599,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.72.161.45"/>
      <from sec="1136092128" usec="0"/>
      <to sec="1136092414" usec="0"/>
    </slice>
    <from sec="1136092128" usec="0"/>
    <to sec="1136092414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
1609[label="166.29.151.84;s;51pkt 51fpkt", shape=diamond, color=yellow];
1622[label="213.37.22.171;d;12pkt 12fpkt", shape=diamond, color=yellow];
2583[label="166.29.151.84;64pkt 64fpkt", shape=pentagon, color=darkviolet];
3578[label="166.29.151.84;64pkt 64fpkt", shape=invtriangle, color=brown];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.84:80, 32.194.90.243:*}[31.25%]&lt;BR/&gt;{166.29.151.84:80, 213.37.22.171:*}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1227: (1.04712%)&lt;BR/&gt; 1226: (1.04712%)&lt;BR/&gt; 1225: (1.04712%)&lt;BR/&gt; 1213: (1.04712%)&gt;];
}
1609--1622[label="1;12pkt 12fpkt"];
1609--2583[label="1;51pkt 51fpkt"];
1609--3578[label="1;51pkt 51fpkt"];
1622--2583[label="1;12pkt 12fpkt"];
1622--3578[label="1;12pkt 12fpkt"];
2583--3578[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="32.194.90.243" src_ip="166.29.151.84" src_port="80"/>
      <filter dst_ip="213.37.22.171" src_ip="166.29.151.84" src_port="80"/>
    </slice>
    <from sec="1136091793" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
464[label="57.181.193.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
465[label="192.242.57.186;d;164pkt 164fpkt", shape=diamond, color=yellow];
1300[label="57.165.116.196;s;85pkt 85fpkt", shape=diamond, color=yellow];
1545[label="166.28.220.240;d;14pkt 14fpkt", shape=diamond, color=yellow];
1546[label="83.0.137.226;s;5pkt 5fpkt", shape=diamond, color=yellow];
1687[label="192.242.57.186;d;149pkt 149fpkt", shape=hexagon, color=black];
3059[label="57.165.116.196;84pkt 84fpkt", shape=pentagon, color=darkviolet];
3069[label="57.165.116.197;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3173[label="83.0.137.226;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3985[label="83.0.137.226;6pkt 6fpkt", shape=invtriangle, color=brown];
4383[label="83.0.137.226;7pkt 7fpkt", shape=invhouse, color=bisque];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 192.242.57.186:*}[47.7778%]&lt;BR/&gt;{57.165.116.196:8000, 192.242.57.186:*}[38.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (24.5887%)&lt;BR/&gt; 80: (23.9488%)&lt;BR/&gt; 2887: (0.457038%)&lt;BR/&gt; 1577: (0.457038%)&lt;BR/&gt; 1570: (0.457038%)&gt;];
}
464--465[label="1;1pkt 1fpkt"];
464--1687[label="1;1pkt 1fpkt"];
465--489[label="0.00609756;1pkt 1fpkt"];
465--797[label="0.0396825;5pkt 5fpkt"];
465--902[label="0.0535714;6pkt 6fpkt"];
465--1300[label="0.988235;84pkt 84fpkt"];
465--1687[label="1;149pkt 149fpkt"];
465--1853[label="0.0515464;5pkt 5fpkt"];
465--2910[label="0.0416667;1pkt 1fpkt"];
465--2939[label="0.0121951;2pkt 2fpkt"];
465--3059[label="0.988095;83pkt 83fpkt"];
465--3069[label="1;25pkt 25fpkt"];
465--3173[label="0.142857;1pkt 1fpkt"];
465--3180[label="0.0121951;2pkt 2fpkt"];
465--3227[label="0.0416667;6pkt 6fpkt"];
465--3257[label="0.028777;4pkt 4fpkt"];
465--3653[label="0.0232558;1pkt 1fpkt"];
465--3827[label="0.0121951;2pkt 2fpkt"];
465--3985[label="0.166667;1pkt 1fpkt"];
465--3990[label="0.0121951;2pkt 2fpkt"];
465--4026[label="0.034965;5pkt 5fpkt"];
465--4039[label="0.028777;4pkt 4fpkt"];
465--4221[label="0.0232558;1pkt 1fpkt"];
465--4300[label="0.0416667;1pkt 1fpkt"];
465--4311[label="0.0121951;2pkt 2fpkt"];
465--4383[label="0.142857;1pkt 1fpkt"];
465--4404[label="0.034965;5pkt 5fpkt"];
1300--1687[label="0.905882;77pkt 77fpkt"];
1300--1946[label="0.0117647;1pkt 1fpkt"];
1300--3059[label="1;84pkt 84fpkt"];
1545--1546[label="1;5pkt 5fpkt"];
1545--3173[label="0.714286;5pkt 5fpkt"];
1545--3985[label="0.666667;4pkt 4fpkt"];
1545--4383[label="0.714286;5pkt 5fpkt"];
1546--3173[label="1;5pkt 5fpkt"];
1546--3985[label="0.8;4pkt 4fpkt"];
1546--4383[label="1;5pkt 5fpkt"];
1687--1853[label="0.0515464;5pkt 5fpkt"];
1687--2910[label="0.0416667;1pkt 1fpkt"];
1687--2939[label="0.0134228;2pkt 2fpkt"];
1687--3059[label="0.904762;76pkt 76fpkt"];
1687--3069[label="1;25pkt 25fpkt"];
1687--3173[label="0.142857;1pkt 1fpkt"];
1687--3227[label="0.0347222;5pkt 5fpkt"];
1687--3257[label="0.028777;4pkt 4fpkt"];
1687--3653[label="0.0232558;1pkt 1fpkt"];
1687--3827[label="0.0134228;2pkt 2fpkt"];
1687--3985[label="0.166667;1pkt 1fpkt"];
1687--4026[label="0.027972;4pkt 4fpkt"];
1687--4039[label="0.028777;4pkt 4fpkt"];
1687--4221[label="0.0232558;1pkt 1fpkt"];
1687--4300[label="0.0416667;1pkt 1fpkt"];
1687--4311[label="0.0134228;2pkt 2fpkt"];
1687--4383[label="0.142857;1pkt 1fpkt"];
1687--4404[label="0.027972;4pkt 4fpkt"];
3173--3985[label="1;6pkt 6fpkt"];
3173--4383[label="1;7pkt 7fpkt"];
3985--4383[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.242.57.186" src_port="80"/>
      <filter dst_ip="192.242.57.186" src_ip="57.165.116.196" src_port="8000"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
191[label="193.114.44.2;d;1886pkt 1886fpkt", shape=diamond, color=yellow];
1718[label="193.114.44.2;d;1409pkt 1409fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.114.44.2:61867}[98.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61867: (49.3627%)&lt;BR/&gt; 443: (0.394537%)&lt;BR/&gt; 54045: (0.242792%)&lt;BR/&gt; 80: (0.182094%)&lt;BR/&gt; 1433: (0.121396%)&gt;];
}
191--1718[label="1;1409pkt 1409fpkt"];
191--2133[label="0.000530223;1pkt 1fpkt"];
191--2137[label="0.000530223;1pkt 1fpkt"];
1718--2133[label="0.000709723;1pkt 1fpkt"];
1718--2137[label="0.000709723;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.44.2" dst_port="61867"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
250[label="35.175.3.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
251[label="136.47.119.9;s;4588pkt 4588fpkt", shape=diamond, color=yellow];
260[label="192.92.150.120;d;57pkt 57fpkt", shape=diamond, color=yellow];
277[label="39.88.253.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
299[label="61.17.128.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
307[label="193.122.200.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
367[label="62.187.72.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
379[label="61.207.19.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
402[label="62.177.136.117;d;2pkt 2fpkt", shape=diamond, color=yellow];
421[label="63.196.73.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
426[label="34.3.162.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
456[label="213.2.49.198;d;777pkt 777fpkt", shape=diamond, color=yellow];
501[label="60.196.74.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
539[label="136.47.119.1;s;4650pkt 4650fpkt", shape=diamond, color=yellow];
565[label="32.162.31.194;d;6pkt 6fpkt", shape=diamond, color=yellow];
598[label="38.55.58.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
642[label="38.181.233.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
678[label="203.193.22.101;d;111pkt 111fpkt", shape=diamond, color=yellow];
679[label="216.143.84.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
703[label="209.100.8.173;d;40pkt 40fpkt", shape=diamond, color=yellow];
722[label="193.24.233.189;d;5pkt 5fpkt", shape=diamond, color=yellow];
731[label="61.118.66.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
759[label="214.112.46.245;d;1660pkt 1660fpkt", shape=diamond, color=yellow];
802[label="209.110.149.247;d;1234pkt 1234fpkt", shape=diamond, color=yellow];
908[label="192.86.85.8;d;64pkt 64fpkt", shape=diamond, color=yellow];
919[label="60.12.105.65;d;76pkt 76fpkt", shape=diamond, color=yellow];
924[label="81.8.41.136;d;368pkt 368fpkt", shape=diamond, color=yellow];
927[label="62.177.147.62;d;2pkt 2fpkt", shape=diamond, color=yellow];
938[label="213.244.9.83;d;9pkt 9fpkt", shape=diamond, color=yellow];
987[label="166.28.22.76;s;276pkt 276fpkt", shape=diamond, color=yellow];
1017[label="194.176.164.248;d;204pkt 204fpkt", shape=diamond, color=yellow];
1056[label="209.88.40.29;d;4pkt 4fpkt", shape=diamond, color=yellow];
1060[label="59.64.225.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
1061[label="60.160.189.52;d;2pkt 2fpkt", shape=diamond, color=yellow];
1063[label="56.191.177.51;d;2pkt 2fpkt", shape=diamond, color=yellow];
1073[label="136.47.119.0;s;2835pkt 2835fpkt", shape=diamond, color=yellow];
1121[label="80.139.104.93;d;144pkt 144fpkt", shape=diamond, color=yellow];
1158[label="60.12.105.26;d;86pkt 86fpkt", shape=diamond, color=yellow];
1195[label="215.99.80.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
1221[label="63.119.201.204;d;2pkt 2fpkt", shape=diamond, color=yellow];
1222[label="210.36.92.231;d;2pkt 2fpkt", shape=diamond, color=yellow];
1231[label="57.195.130.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
1283[label="33.225.113.73;d;236pkt 236fpkt", shape=diamond, color=yellow];
1288[label="211.29.207.24;d;180pkt 180fpkt", shape=diamond, color=yellow];
1293[label="80.169.224.207;d;122pkt 122fpkt", shape=diamond, color=yellow];
1303[label="214.97.204.0;d;79pkt 79fpkt", shape=diamond, color=yellow];
1330[label="85.25.92.241;d;77pkt 77fpkt", shape=diamond, color=yellow];
1336[label="82.235.36.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
1389[label="59.6.167.102;d;135pkt 135fpkt", shape=diamond, color=yellow];
1397[label="193.82.75.69;d;59pkt 59fpkt", shape=diamond, color=yellow];
1400[label="61.151.226.224;d;190pkt 190fpkt", shape=diamond, color=yellow];
1405[label="209.245.8.13;d;13pkt 13fpkt", shape=diamond, color=yellow];
1419[label="81.38.16.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
1425[label="36.64.242.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
1429[label="221.18.17.176;d;2pkt 2fpkt", shape=diamond, color=yellow];
1436[label="57.25.86.251;d;3pkt 3fpkt", shape=diamond, color=yellow];
1452[label="63.74.36.114;d;2pkt 2fpkt", shape=diamond, color=yellow];
1466[label="203.82.69.71;d;138pkt 138fpkt", shape=diamond, color=yellow];
1509[label="216.141.216.2;d;18pkt 18fpkt", shape=diamond, color=yellow];
1515[label="211.28.44.138;d;132pkt 132fpkt", shape=diamond, color=yellow];
1523[label="82.234.27.169;d;2pkt 2fpkt", shape=diamond, color=yellow];
1526[label="60.245.48.29;d;2pkt 2fpkt", shape=diamond, color=yellow];
1536[label="61.96.130.128;d;2pkt 2fpkt", shape=diamond, color=yellow];
1539[label="56.44.121.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
1621[label="217.250.157.126;d;25pkt 25fpkt", shape=diamond, color=yellow];
1623[label="209.103.210.6;d;30pkt 30fpkt", shape=diamond, color=yellow];
1624[label="36.152.21.64;d;2pkt 2fpkt", shape=diamond, color=yellow];
1626[label="61.140.193.66;d;2pkt 2fpkt", shape=diamond, color=yellow];
1641[label="61.111.153.241;d;2pkt 2fpkt", shape=diamond, color=yellow];
1642[label="198.86.209.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
1665[label="192.92.150.120;d;28pkt 28fpkt", shape=hexagon, color=black];
1669[label="61.17.128.108;d;1pkt 1fpkt", shape=hexagon, color=black];
1671[label="193.122.200.42;d;1pkt 1fpkt", shape=hexagon, color=black];
1698[label="136.47.119.1;s;4650pkt 4650fpkt", shape=hexagon, color=black];
1706[label="63.196.73.61;d;1pkt 1fpkt", shape=hexagon, color=black];
1707[label="34.3.162.69;d;1pkt 1fpkt", shape=hexagon, color=black];
1724[label="136.47.119.9;s;3542pkt 3542fpkt", shape=hexagon, color=black];
1951[label="85.25.92.241;d;40pkt 40fpkt", shape=hexagon, color=black];
1952[label="62.177.136.117;d;2pkt 2fpkt", shape=hexagon, color=black];
1982[label="194.176.164.248;d;204pkt 204fpkt", shape=hexagon, color=black];
2002[label="63.119.201.204;d;2pkt 2fpkt", shape=hexagon, color=black];
2013[label="63.74.36.114;d;2pkt 2fpkt", shape=hexagon, color=black];
2045[label="211.28.44.138;d;132pkt 132fpkt", shape=hexagon, color=black];
2084[label="60.160.189.52;d;2pkt 2fpkt", shape=hexagon, color=black];
2085[label="56.191.177.51;d;2pkt 2fpkt", shape=hexagon, color=black];
2088[label="57.195.130.231;d;1pkt 1fpkt", shape=hexagon, color=black];
2096[label="56.44.121.135;d;2pkt 2fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:3128, *:*}[36.6749%]&lt;BR/&gt;{136.47.119.1:*, *:*}[34.9178%]&lt;BR/&gt;{136.47.119.9:*, *:*}[34.4522%]&lt;BR/&gt;{136.47.119.0:*, *:*}[28.5575%]&lt;BR/&gt;{*:3124, *:*}[21.0633%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (18.8315%)&lt;BR/&gt; 3124: (11%)&lt;BR/&gt; 3127: (5.92674%)&lt;BR/&gt; 80: (4.71978%)&lt;BR/&gt; 8090: (2.4707%)&gt;];
}
250--251[label="1;1pkt 1fpkt"];
250--1724[label="1;1pkt 1fpkt"];
251--260[label="1;57pkt 57fpkt"];
251--299[label="1;1pkt 1fpkt"];
251--367[label="1;1pkt 1fpkt"];
251--402[label="1;2pkt 2fpkt"];
251--565[label="1;6pkt 6fpkt"];
251--598[label="1;1pkt 1fpkt"];
251--703[label="1;40pkt 40fpkt"];
251--722[label="0.6;3pkt 3fpkt"];
251--731[label="1;2pkt 2fpkt"];
251--759[label="0.308434;512pkt 512fpkt"];
251--802[label="0.211507;261pkt 261fpkt"];
251--908[label="0.078125;5pkt 5fpkt"];
251--919[label="0.986842;75pkt 75fpkt"];
251--924[label="0.98913;364pkt 364fpkt"];
251--927[label="1;2pkt 2fpkt"];
251--1017[label="0.397059;81pkt 81fpkt"];
251--1056[label="0.5;2pkt 2fpkt"];
251--1121[label="0.256944;37pkt 37fpkt"];
251--1158[label="0.895349;77pkt 77fpkt"];
251--1195[label="1;2pkt 2fpkt"];
251--1221[label="1;2pkt 2fpkt"];
251--1222[label="1;2pkt 2fpkt"];
251--1283[label="0.368644;87pkt 87fpkt"];
251--1288[label="0.2;36pkt 36fpkt"];
251--1293[label="0.221311;27pkt 27fpkt"];
251--1389[label="0.251852;34pkt 34fpkt"];
251--1397[label="0.525424;31pkt 31fpkt"];
251--1405[label="0.230769;3pkt 3fpkt"];
251--1466[label="0.333333;46pkt 46fpkt"];
251--1509[label="1;18pkt 18fpkt"];
251--1523[label="1;2pkt 2fpkt"];
251--1526[label="1;2pkt 2fpkt"];
251--1621[label="1;25pkt 25fpkt"];
251--1626[label="1;2pkt 2fpkt"];
251--1641[label="1;2pkt 2fpkt"];
251--1642[label="1;2pkt 2fpkt"];
251--1665[label="1;28pkt 28fpkt"];
251--1669[label="1;1pkt 1fpkt"];
251--1724[label="1;3542pkt 3542fpkt"];
251--1952[label="1;2pkt 2fpkt"];
251--1982[label="0.397059;81pkt 81fpkt"];
251--2002[label="1;2pkt 2fpkt"];
251--2133[label="0.00351151;9pkt 9fpkt"];
251--2137[label="0.00351151;9pkt 9fpkt"];
260--1665[label="1;28pkt 28fpkt"];
260--1724[label="0.789474;45pkt 45fpkt"];
277--539[label="1;1pkt 1fpkt"];
277--1698[label="1;1pkt 1fpkt"];
299--1669[label="1;1pkt 1fpkt"];
299--1724[label="1;1pkt 1fpkt"];
307--539[label="1;1pkt 1fpkt"];
307--1671[label="1;1pkt 1fpkt"];
307--1698[label="1;1pkt 1fpkt"];
367--1724[label="1;1pkt 1fpkt"];
379--539[label="1;1pkt 1fpkt"];
379--1698[label="1;1pkt 1fpkt"];
402--1724[label="1;2pkt 2fpkt"];
402--1952[label="1;2pkt 2fpkt"];
421--539[label="1;1pkt 1fpkt"];
421--1698[label="1;1pkt 1fpkt"];
421--1706[label="1;1pkt 1fpkt"];
426--539[label="1;1pkt 1fpkt"];
426--1698[label="1;1pkt 1fpkt"];
426--1707[label="1;1pkt 1fpkt"];
456--1073[label="0.57529;447pkt 447fpkt"];
501--539[label="1;1pkt 1fpkt"];
501--1698[label="1;1pkt 1fpkt"];
539--642[label="1;1pkt 1fpkt"];
539--679[label="1;1pkt 1fpkt"];
539--722[label="0.4;2pkt 2fpkt"];
539--759[label="0.31506;523pkt 523fpkt"];
539--802[label="0.427877;528pkt 528fpkt"];
539--908[label="0.921875;59pkt 59fpkt"];
539--919[label="0.0131579;1pkt 1fpkt"];
539--924[label="0.00543478;2pkt 2fpkt"];
539--938[label="1;9pkt 9fpkt"];
539--1017[label="0.196078;40pkt 40fpkt"];
539--1056[label="0.5;2pkt 2fpkt"];
539--1060[label="1;2pkt 2fpkt"];
539--1061[label="1;2pkt 2fpkt"];
539--1063[label="1;2pkt 2fpkt"];
539--1121[label="0.333333;48pkt 48fpkt"];
539--1158[label="0.104651;9pkt 9fpkt"];
539--1231[label="1;1pkt 1fpkt"];
539--1283[label="0.292373;69pkt 69fpkt"];
539--1288[label="0.2;36pkt 36fpkt"];
539--1303[label="0.506329;40pkt 40fpkt"];
539--1336[label="1;1pkt 1fpkt"];
539--1389[label="0.37037;50pkt 50fpkt"];
539--1397[label="0.474576;28pkt 28fpkt"];
539--1400[label="1;190pkt 190fpkt"];
539--1405[label="0.769231;10pkt 10fpkt"];
539--1419[label="1;2pkt 2fpkt"];
539--1425[label="1;2pkt 2fpkt"];
539--1429[label="1;2pkt 2fpkt"];
539--1436[label="1;3pkt 3fpkt"];
539--1452[label="1;2pkt 2fpkt"];
539--1466[label="0.333333;46pkt 46fpkt"];
539--1515[label="1;132pkt 132fpkt"];
539--1536[label="1;2pkt 2fpkt"];
539--1539[label="1;2pkt 2fpkt"];
539--1623[label="1;30pkt 30fpkt"];
539--1624[label="1;2pkt 2fpkt"];
539--1671[label="1;1pkt 1fpkt"];
539--1698[label="1;4650pkt 4650fpkt"];
539--1706[label="1;1pkt 1fpkt"];
539--1707[label="1;1pkt 1fpkt"];
539--1982[label="0.196078;40pkt 40fpkt"];
539--2013[label="1;2pkt 2fpkt"];
539--2045[label="1;132pkt 132fpkt"];
539--2084[label="1;2pkt 2fpkt"];
539--2085[label="1;2pkt 2fpkt"];
539--2088[label="1;1pkt 1fpkt"];
539--2096[label="1;2pkt 2fpkt"];
539--2133[label="0.00663285;17pkt 17fpkt"];
539--2137[label="0.00663285;17pkt 17fpkt"];
565--1724[label="0.666667;4pkt 4fpkt"];
598--1724[label="1;1pkt 1fpkt"];
642--1698[label="1;1pkt 1fpkt"];
678--1073[label="0.882883;98pkt 98fpkt"];
679--1698[label="1;1pkt 1fpkt"];
703--1724[label="1;40pkt 40fpkt"];
722--1698[label="0.4;2pkt 2fpkt"];
722--1724[label="0.6;3pkt 3fpkt"];
731--1724[label="1;2pkt 2fpkt"];
759--987[label="0.652174;180pkt 180fpkt"];
759--1073[label="0.156024;259pkt 259fpkt"];
759--1698[label="0.31506;523pkt 523fpkt"];
759--1724[label="0.234337;389pkt 389fpkt"];
802--1073[label="0.209887;259pkt 259fpkt"];
802--1698[label="0.427877;528pkt 528fpkt"];
802--1724[label="0.166126;205pkt 205fpkt"];
908--1698[label="0.921875;59pkt 59fpkt"];
908--1724[label="0.015625;1pkt 1fpkt"];
908--2133[label="0.046875;3pkt 3fpkt"];
908--2137[label="0.046875;3pkt 3fpkt"];
919--1698[label="0.0131579;1pkt 1fpkt"];
919--1724[label="0.986842;75pkt 75fpkt"];
924--1698[label="0.00543478;2pkt 2fpkt"];
924--1724[label="0.516304;190pkt 190fpkt"];
927--1724[label="1;2pkt 2fpkt"];
938--1698[label="1;9pkt 9fpkt"];
987--1121[label="0.0625;9pkt 9fpkt"];
1017--1073[label="0.308824;63pkt 63fpkt"];
1017--1698[label="0.196078;40pkt 40fpkt"];
1017--1724[label="0.397059;81pkt 81fpkt"];
1017--1982[label="1;204pkt 204fpkt"];
1056--1698[label="0.5;2pkt 2fpkt"];
1056--1724[label="0.5;2pkt 2fpkt"];
1060--1698[label="1;2pkt 2fpkt"];
1061--1698[label="1;2pkt 2fpkt"];
1061--2084[label="1;2pkt 2fpkt"];
1063--1698[label="1;2pkt 2fpkt"];
1063--2085[label="1;2pkt 2fpkt"];
1073--1121[label="0.298611;43pkt 43fpkt"];
1073--1283[label="0.165254;39pkt 39fpkt"];
1073--1288[label="0.333333;60pkt 60fpkt"];
1073--1293[label="0.631148;77pkt 77fpkt"];
1073--1303[label="0.240506;19pkt 19fpkt"];
1073--1330[label="0.272727;21pkt 21fpkt"];
1073--1389[label="0.222222;30pkt 30fpkt"];
1073--1466[label="0.188406;26pkt 26fpkt"];
1073--1951[label="0.525;21pkt 21fpkt"];
1073--1982[label="0.308824;63pkt 63fpkt"];
1073--2133[label="0.000780336;2pkt 2fpkt"];
1073--2137[label="0.000780336;2pkt 2fpkt"];
1121--1698[label="0.333333;48pkt 48fpkt"];
1121--1724[label="0.256944;37pkt 37fpkt"];
1158--1698[label="0.104651;9pkt 9fpkt"];
1158--1724[label="0.662791;57pkt 57fpkt"];
1158--2133[label="0.0348837;3pkt 3fpkt"];
1158--2137[label="0.0348837;3pkt 3fpkt"];
1195--1724[label="1;2pkt 2fpkt"];
1221--1724[label="1;2pkt 2fpkt"];
1221--2002[label="1;2pkt 2fpkt"];
1222--1724[label="1;2pkt 2fpkt"];
1231--1698[label="1;1pkt 1fpkt"];
1231--2088[label="1;1pkt 1fpkt"];
1283--1698[label="0.292373;69pkt 69fpkt"];
1283--1724[label="0.271186;64pkt 64fpkt"];
1288--1698[label="0.2;36pkt 36fpkt"];
1288--1724[label="0.155556;28pkt 28fpkt"];
1293--1724[label="0.221311;27pkt 27fpkt"];
1303--1698[label="0.506329;40pkt 40fpkt"];
1330--1951[label="1;40pkt 40fpkt"];
1336--1698[label="1;1pkt 1fpkt"];
1389--1698[label="0.37037;50pkt 50fpkt"];
1389--1724[label="0.207407;28pkt 28fpkt"];
1397--1698[label="0.474576;28pkt 28fpkt"];
1397--1724[label="0.525424;31pkt 31fpkt"];
1397--2133[label="0.0677966;4pkt 4fpkt"];
1397--2137[label="0.0677966;4pkt 4fpkt"];
1400--1698[label="1;190pkt 190fpkt"];
1405--1698[label="0.769231;10pkt 10fpkt"];
1405--1724[label="0.230769;3pkt 3fpkt"];
1419--1698[label="1;2pkt 2fpkt"];
1425--1698[label="1;2pkt 2fpkt"];
1429--1698[label="1;2pkt 2fpkt"];
1436--1698[label="1;3pkt 3fpkt"];
1452--1698[label="1;2pkt 2fpkt"];
1452--2013[label="1;2pkt 2fpkt"];
1466--1698[label="0.333333;46pkt 46fpkt"];
1466--1724[label="0.26087;36pkt 36fpkt"];
1509--1724[label="0.611111;11pkt 11fpkt"];
1515--1698[label="1;132pkt 132fpkt"];
1515--2045[label="1;132pkt 132fpkt"];
1523--1724[label="1;2pkt 2fpkt"];
1526--1724[label="1;2pkt 2fpkt"];
1536--1698[label="1;2pkt 2fpkt"];
1539--1698[label="1;2pkt 2fpkt"];
1539--2096[label="1;2pkt 2fpkt"];
1621--1724[label="0.04;1pkt 1fpkt"];
1623--1698[label="1;30pkt 30fpkt"];
1624--1698[label="1;2pkt 2fpkt"];
1626--1724[label="1;2pkt 2fpkt"];
1665--1724[label="1;28pkt 28fpkt"];
1669--1724[label="1;1pkt 1fpkt"];
1671--1698[label="1;1pkt 1fpkt"];
1698--1706[label="1;1pkt 1fpkt"];
1698--1707[label="1;1pkt 1fpkt"];
1698--1982[label="0.196078;40pkt 40fpkt"];
1698--2013[label="1;2pkt 2fpkt"];
1698--2045[label="1;132pkt 132fpkt"];
1698--2084[label="1;2pkt 2fpkt"];
1698--2085[label="1;2pkt 2fpkt"];
1698--2088[label="1;1pkt 1fpkt"];
1698--2096[label="1;2pkt 2fpkt"];
1698--2133[label="0.00663285;17pkt 17fpkt"];
1698--2137[label="0.00663285;17pkt 17fpkt"];
1724--1952[label="1;2pkt 2fpkt"];
1724--1982[label="0.397059;81pkt 81fpkt"];
1724--2002[label="1;2pkt 2fpkt"];
1724--2133[label="0.00351151;9pkt 9fpkt"];
1724--2137[label="0.00351151;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.119.1"/>
      <filter src_ip="136.47.119.9"/>
      <filter src_ip="136.47.119.0"/>
      <filter src_port="3128"/>
      <filter src_port="3124"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
582[label="208.64.121.155;s;3516pkt 3516fpkt", shape=diamond, color=yellow];
1738[label="208.64.121.155;s;3145pkt 3145fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.64.121.155:3145, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3145: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
582--1738[label="1;3145pkt 3145fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.64.121.155" src_port="3145"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,053,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
412[label="133.154.134.219;d;1784pkt 1784fpkt", shape=diamond, color=yellow];
1748[label="133.154.134.219;d;893pkt 893fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.154.134.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4223: (0.0373552%)&lt;BR/&gt; 4222: (0.0373552%)&lt;BR/&gt; 4221: (0.0373552%)&lt;BR/&gt; 4220: (0.0373552%)&gt;];
}
412--1748[label="1;893pkt 893fpkt"];
</description>
    <slice>
      <filter dst_ip="133.154.134.219" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
840[label="193.114.37.64;s;339pkt 339fpkt", shape=diamond, color=yellow];
1766[label="193.114.37.64;s;258pkt 258fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.37.64:0, *:0}[99.705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.665%)&lt;BR/&gt; 2888: (0.167504%)&lt;BR/&gt; 135: (0.167504%)&gt;];
}
840--1766[label="1;258pkt 258fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.37.64"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
869[label="209.93.131.71;s;1486pkt 1486fpkt", shape=diamond, color=yellow];
1771[label="209.93.131.71;s;1486pkt 1486fpkt", shape=hexagon, color=black];
2512[label="209.93.131.71;1631pkt 1631fpkt", shape=pentagon, color=darkviolet];
3520[label="209.93.131.71;1632pkt 1632fpkt", shape=invtriangle, color=brown];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.93.131.71:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57685: (0.064154%)&lt;BR/&gt; 57215: (0.064154%)&lt;BR/&gt; 56921: (0.064154%)&lt;BR/&gt; 56370: (0.064154%)&gt;];
}
869--1771[label="1;1486pkt 1486fpkt"];
869--2512[label="0.999327;1485pkt 1485fpkt"];
869--3520[label="1;1486pkt 1486fpkt"];
1771--2512[label="0.999327;1485pkt 1485fpkt"];
1771--3520[label="1;1486pkt 1486fpkt"];
2512--3520[label="1;1631pkt 1631fpkt"];
</description>
    <slice>
      <filter src_ip="209.93.131.71" src_port="80"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
870[label="160.4.95.100;s;703pkt 703fpkt", shape=diamond, color=yellow];
1772[label="160.4.95.100;s;511pkt 511fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.95.100:32817, *:53}[72.8307%]&lt;BR/&gt;{160.4.95.100:53, *:*}[25.889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.9176%)&lt;BR/&gt; 32817: (36.8204%)&lt;BR/&gt; 0: (1.31796%)&lt;BR/&gt; 32768: (0.658979%)&lt;BR/&gt; 32769: (0.288303%)&gt;];
}
870--998[label="0.00925926;1pkt 1fpkt"];
870--1003[label="0.0105263;1pkt 1fpkt"];
870--1009[label="0.010101;1pkt 1fpkt"];
870--1347[label="0.0126582;1pkt 1fpkt"];
870--1479[label="0.00684932;1pkt 1fpkt"];
870--1700[label="0.0113636;1pkt 1fpkt"];
870--1772[label="1;511pkt 511fpkt"];
870--1906[label="0.0121951;1pkt 1fpkt"];
870--1975[label="0.0102041;1pkt 1fpkt"];
870--2135[label="0.0170697;12pkt 12fpkt"];
1772--1906[label="0.0121951;1pkt 1fpkt"];
1772--1975[label="0.0102041;1pkt 1fpkt"];
1772--2135[label="0.0234834;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="160.4.95.100" src_port="53"/>
      <filter dst_port="53" src_ip="160.4.95.100" src_port="32817"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
275[label="80.130.82.158;s;9149pkt 9149fpkt", shape=diamond, color=yellow];
1793[label="80.130.82.158;s;5122pkt 5122fpkt", shape=hexagon, color=black];
2906[label="80.130.82.158;9947pkt 9947fpkt", shape=pentagon, color=darkviolet];
3800[label="80.130.82.158;9947pkt 9947fpkt", shape=invtriangle, color=brown];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.130.82.158:80, *:*}[99.9899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9985%)&lt;BR/&gt; 9583: (0.0351237%)&lt;BR/&gt; 9864: (0.0292697%)&lt;BR/&gt; 8095: (0.0292697%)&lt;BR/&gt; 2247: (0.0292697%)&gt;];
}
275--320[label="0.00217865;1pkt 1fpkt"];
275--1793[label="1;5122pkt 5122fpkt"];
275--2906[label="0.999891;9148pkt 9148fpkt"];
275--3800[label="0.999891;9148pkt 9148fpkt"];
1793--2906[label="1;5122pkt 5122fpkt"];
1793--3800[label="1;5122pkt 5122fpkt"];
2906--3800[label="1;9947pkt 9947fpkt"];
</description>
    <slice>
      <filter src_ip="80.130.82.158" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
364[label="160.4.151.183;d;1610pkt 1610fpkt", shape=diamond, color=yellow];
1797[label="160.4.151.183;d;846pkt 846fpkt", shape=hexagon, color=black];
3134[label="80.208.44.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3959[label="80.208.44.213;1pkt 1fpkt", shape=invtriangle, color=brown];
4369[label="80.208.44.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.4.151.183:51098}[99.0683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51098: (49.5323%)&lt;BR/&gt; 443: (0.284669%)&lt;BR/&gt; 0: (0.244002%)&lt;BR/&gt; 54045: (0.122001%)&lt;BR/&gt; 1293: (0.122001%)&gt;];
}
364--846[label="0.000967118;1pkt 1fpkt"];
364--1797[label="1;846pkt 846fpkt"];
364--1973[label="0.000967118;1pkt 1fpkt"];
364--2677[label="0.000716332;1pkt 1fpkt"];
364--3134[label="1;1pkt 1fpkt"];
364--3635[label="0.000716332;1pkt 1fpkt"];
364--3959[label="1;1pkt 1fpkt"];
364--4210[label="0.00071582;1pkt 1fpkt"];
364--4369[label="1;1pkt 1fpkt"];
1797--3134[label="1;1pkt 1fpkt"];
1797--3959[label="1;1pkt 1fpkt"];
1797--4369[label="1;1pkt 1fpkt"];
3134--3959[label="1;1pkt 1fpkt"];
3134--4369[label="1;1pkt 1fpkt"];
3959--4369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.151.183" dst_port="51098"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1010[label="178.142.39.106;d;300pkt 300fpkt", shape=diamond, color=yellow];
1816[label="178.142.39.106;d;300pkt 300fpkt", shape=hexagon, color=black];
2961[label="216.147.24.171;67pkt 67fpkt", shape=pentagon, color=darkviolet];
3840[label="216.147.24.171;68pkt 68fpkt", shape=invtriangle, color=brown];
4318[label="216.147.24.171;67pkt 67fpkt", shape=invhouse, color=bisque];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.147.24.171:*, 178.142.39.106:21}[22.6667%]&lt;BR/&gt;{209.58.134.157:*, 178.142.39.106:21}[21.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.8753%)&lt;BR/&gt; 3969: (0.436409%)&lt;BR/&gt; 4695: (0.311721%)&lt;BR/&gt; 4668: (0.311721%)&lt;BR/&gt; 4660: (0.311721%)&gt;];
}
1010--1816[label="1;300pkt 300fpkt"];
1010--2961[label="1;67pkt 67fpkt"];
1010--3840[label="1;68pkt 68fpkt"];
1010--4318[label="1;67pkt 67fpkt"];
1816--2961[label="1;67pkt 67fpkt"];
1816--3840[label="1;68pkt 68fpkt"];
1816--4318[label="1;67pkt 67fpkt"];
2961--3840[label="1;67pkt 67fpkt"];
2961--4318[label="1;67pkt 67fpkt"];
3840--4318[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.39.106" dst_port="21" src_ip="216.147.24.171"/>
      <filter dst_ip="178.142.39.106" dst_port="21" src_ip="209.58.134.157"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
737[label="80.138.180.208;s;2076pkt 2076fpkt", shape=diamond, color=yellow];
1831[label="80.138.180.208;s;1614pkt 1614fpkt", shape=hexagon, color=black];
3117[label="80.138.180.208;2255pkt 2255fpkt", shape=pentagon, color=darkviolet];
3945[label="80.138.180.208;2255pkt 2255fpkt", shape=invtriangle, color=brown];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.138.180.208:1047, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1047: (50%)&gt;];
}
737--1831[label="1;1614pkt 1614fpkt"];
737--3117[label="0.999518;2075pkt 2075fpkt"];
737--3945[label="0.999518;2075pkt 2075fpkt"];
1831--3117[label="0.99938;1613pkt 1613fpkt"];
1831--3945[label="0.99938;1613pkt 1613fpkt"];
3117--3945[label="1;2255pkt 2255fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="80.138.180.208" src_port="1047"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
590[label="80.147.57.247;s;2235pkt 2235fpkt", shape=diamond, color=yellow];
1844[label="80.147.57.247;s;1428pkt 1428fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.147.57.247:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48411: (0.0682501%)&lt;BR/&gt; 60755: (0.0546001%)&lt;BR/&gt; 60430: (0.0546001%)&lt;BR/&gt; 58993: (0.0546001%)&gt;];
}
590--1844[label="1;1428pkt 1428fpkt"];
</description>
    <slice>
      <filter src_ip="80.147.57.247" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
424[label="166.28.183.21;s;1008pkt 1008fpkt", shape=diamond, color=yellow];
1849[label="166.28.183.21;s;909pkt 909fpkt", shape=hexagon, color=black];
2263[label="166.28.183.21;1011pkt 1011fpkt", shape=pentagon, color=darkviolet];
3354[label="166.28.183.21;1011pkt 1011fpkt", shape=invtriangle, color=brown];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.183.21:*, *:25}[95.1581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.969%)&lt;BR/&gt; 2703: (1.9802%)&lt;BR/&gt; 65283: (0.101549%)&lt;BR/&gt; 65273: (0.101549%)&lt;BR/&gt; 65205: (0.101549%)&gt;];
}
424--1849[label="1;909pkt 909fpkt"];
424--2133[label="0.000992063;1pkt 1fpkt"];
424--2137[label="0.000992063;1pkt 1fpkt"];
424--2263[label="0.999008;1007pkt 1007fpkt"];
424--3354[label="0.999008;1007pkt 1007fpkt"];
1849--2133[label="0.00110011;1pkt 1fpkt"];
1849--2137[label="0.00110011;1pkt 1fpkt"];
1849--2263[label="0.9989;908pkt 908fpkt"];
1849--3354[label="0.9989;908pkt 908fpkt"];
2263--3354[label="1;1011pkt 1011fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.183.21"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1111[label="192.80.162.67;s;1112pkt 1112fpkt", shape=diamond, color=yellow];
1855[label="192.80.162.67;s;983pkt 983fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.80.162.67:1944, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1944: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1111--1855[label="1;983pkt 983fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="192.80.162.67" src_port="1944"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
1041[label="192.242.59.19;s;85pkt 85fpkt", shape=diamond, color=yellow];
1866[label="192.242.59.19;s;79pkt 79fpkt", shape=hexagon, color=black];
2254[label="192.242.59.19;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3348[label="192.242.59.19;87pkt 87fpkt", shape=invtriangle, color=brown];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.59.19:*, *:25}[57.9545%]&lt;BR/&gt;{192.242.59.19:25, *:*}[32.9545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.2522%)&lt;BR/&gt; 113: (3.56083%)&lt;BR/&gt; 45634: (0.593472%)&lt;BR/&gt; 43951: (0.593472%)&lt;BR/&gt; 43939: (0.593472%)&gt;];
}
1041--1364[label="0.0117647;1pkt 1fpkt"];
1041--1866[label="1;79pkt 79fpkt"];
1041--2254[label="0.976471;83pkt 83fpkt"];
1041--3348[label="0.988235;84pkt 84fpkt"];
1866--2254[label="0.974684;77pkt 77fpkt"];
1866--3348[label="0.987342;78pkt 78fpkt"];
2254--3348[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="192.242.59.19" src_port="25"/>
      <filter dst_port="25" src_ip="192.242.59.19"/>
    </slice>
    <from sec="1136091615" usec="0"/>
    <to sec="1136092481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
365[label="160.4.151.183;s;2800pkt 2800fpkt", shape=diamond, color=yellow];
1879[label="160.4.151.183;s;2800pkt 2800fpkt", shape=hexagon, color=black];
3006[label="160.4.151.183;2980pkt 2980fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.151.183:51098, *:*}[99.4295%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51098: (49.7145%)&lt;BR/&gt; 443: (0.285548%)&lt;BR/&gt; 54045: (0.0874126%)&lt;BR/&gt; 10004: (0.0699301%)&lt;BR/&gt; 10001: (0.0699301%)&gt;];
}
365--1879[label="1;2800pkt 2800fpkt"];
365--3006[label="1;2800pkt 2800fpkt"];
1879--3006[label="1;2800pkt 2800fpkt"];
</description>
    <slice>
      <filter src_ip="160.4.151.183" src_port="51098"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
366[label="166.29.151.101;s;3697pkt 3697fpkt", shape=diamond, color=yellow];
1880[label="166.29.151.101;s;3042pkt 3042fpkt", shape=hexagon, color=black];
2669[label="166.29.151.101;3947pkt 3947fpkt", shape=pentagon, color=darkviolet];
3630[label="166.29.151.101;3947pkt 3947fpkt", shape=invtriangle, color=brown];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.101:51839, *:53}[99.6454%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8565%)&lt;BR/&gt; 51839: (49.8155%)&lt;BR/&gt; 0: (0.287022%)&lt;BR/&gt; 54506: (0.0136677%)&lt;BR/&gt; 50228: (0.0136677%)&gt;];
}
366--554[label="0.0105263;1pkt 1fpkt"];
366--795[label="0.00970874;1pkt 1fpkt"];
366--826[label="0.00900901;1pkt 1fpkt"];
366--850[label="0.00854701;1pkt 1fpkt"];
366--852[label="0.00934579;1pkt 1fpkt"];
366--867[label="0.00961538;1pkt 1fpkt"];
366--998[label="0.00925926;1pkt 1fpkt"];
366--1003[label="0.0105263;1pkt 1fpkt"];
366--1009[label="0.010101;1pkt 1fpkt"];
366--1347[label="0.0126582;1pkt 1fpkt"];
366--1479[label="0.00684932;1pkt 1fpkt"];
366--1700[label="0.0113636;1pkt 1fpkt"];
366--1767[label="0.0144928;1pkt 1fpkt"];
366--1880[label="1;3042pkt 3042fpkt"];
366--1906[label="0.0121951;1pkt 1fpkt"];
366--1975[label="0.0102041;1pkt 1fpkt"];
366--2135[label="0.00027049;1pkt 1fpkt"];
366--2669[label="0.99973;3696pkt 3696fpkt"];
366--3630[label="0.99973;3696pkt 3696fpkt"];
1880--1906[label="0.0121951;1pkt 1fpkt"];
1880--1975[label="0.0102041;1pkt 1fpkt"];
1880--2135[label="0.000328731;1pkt 1fpkt"];
1880--2669[label="0.999671;3041pkt 3041fpkt"];
1880--3630[label="0.999671;3041pkt 3041fpkt"];
2669--3630[label="1;3947pkt 3947fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.29.151.101" src_port="51839"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.939495,1.6663,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
608[label="133.154.134.219;s;1613pkt 1613fpkt", shape=diamond, color=yellow];
1886[label="133.154.134.219;s;1232pkt 1232fpkt", shape=hexagon, color=black];
3976[label="133.154.134.219;1923pkt 1923fpkt", shape=invtriangle, color=brown];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.154.134.219:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4870: (0.0314597%)&lt;BR/&gt; 4828: (0.0314597%)&lt;BR/&gt; 4773: (0.0314597%)&lt;BR/&gt; 4772: (0.0314597%)&gt;];
}
608--1886[label="1;1232pkt 1232fpkt"];
608--2133[label="0.0731556;118pkt 118fpkt"];
608--2137[label="0.0731556;118pkt 118fpkt"];
608--3976[label="0.99504;1605pkt 1605fpkt"];
1886--2133[label="0.0957792;118pkt 118fpkt"];
1886--2137[label="0.0957792;118pkt 118fpkt"];
1886--3976[label="0.994318;1225pkt 1225fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.154.134.219"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1119[label="166.28.2.110;s;250pkt 250fpkt", shape=diamond, color=yellow];
1893[label="166.28.2.110;s;221pkt 221fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.2.110:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1119--1249[label="0.004;1pkt 1fpkt"];
1119--1331[label="0.00423729;1pkt 1fpkt"];
1119--1346[label="0.00414938;1pkt 1fpkt"];
1119--1352[label="0.004;1pkt 1fpkt"];
1119--1356[label="0.00438596;1pkt 1fpkt"];
1119--1365[label="0.0052356;1pkt 1fpkt"];
1119--1550[label="0.004;1pkt 1fpkt"];
1119--1553[label="0.0052356;1pkt 1fpkt"];
1119--1555[label="0.00549451;1pkt 1fpkt"];
1119--1803[label="0.00561798;1pkt 1fpkt"];
1119--1893[label="1;221pkt 221fpkt"];
1119--1969[label="0.00574713;1pkt 1fpkt"];
1119--2063[label="0.004;1pkt 1fpkt"];
1893--1969[label="0.00574713;1pkt 1fpkt"];
1893--2063[label="0.00452489;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.2.110"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
841[label="203.208.126.235;s;250pkt 250fpkt", shape=diamond, color=yellow];
1898[label="203.208.126.235;s;168pkt 168fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.208.126.235:*, *:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 39013: (0.358852%)&lt;BR/&gt; 60883: (0.239234%)&lt;BR/&gt; 60833: (0.239234%)&lt;BR/&gt; 60741: (0.239234%)&gt;];
}
841--1898[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="203.208.126.235"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
848[label="80.176.119.189;s;1957pkt 1957fpkt", shape=diamond, color=yellow];
1900[label="80.176.119.189;s;1326pkt 1326fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.176.119.189:1062, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1062: (50%)&gt;];
}
848--1900[label="1;1326pkt 1326fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="80.176.119.189" src_port="1062"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
855[label="80.168.130.244;s;1590pkt 1590fpkt", shape=diamond, color=yellow];
1903[label="80.168.130.244;s;1067pkt 1067fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.168.130.244:4959, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4959: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
855--1903[label="1;1067pkt 1067fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="80.168.130.244" src_port="4959"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,012,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
1267[label="58.28.245.85;s;154pkt 154fpkt", shape=diamond, color=yellow];
1905[label="58.28.245.85;s;136pkt 136fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.28.245.85:*, *:139}[52.5974%]&lt;BR/&gt;{58.28.245.85:*, *:445}[33.1169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.5172%)&lt;BR/&gt; 445: (17.2414%)&lt;BR/&gt; 137: (14.4828%)&lt;BR/&gt; 3001: (5.34483%)&lt;BR/&gt; 3003: (3.27586%)&gt;];
}
1267--1905[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="58.28.245.85"/>
      <filter dst_port="445" src_ip="58.28.245.85"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
1269[label="166.28.178.8;s;185pkt 185fpkt", shape=diamond, color=yellow];
1907[label="166.28.178.8;s;128pkt 128fpkt", shape=hexagon, color=black];
2195[label="166.28.178.8;192pkt 192fpkt", shape=pentagon, color=darkviolet];
3313[label="166.28.178.8;193pkt 193fpkt", shape=invtriangle, color=brown];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.178.8:*, *:25}[95.3368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43227: (0.286533%)&lt;BR/&gt; 43226: (0.286533%)&lt;BR/&gt; 43225: (0.286533%)&lt;BR/&gt; 43224: (0.286533%)&gt;];
}
1269--1907[label="1;128pkt 128fpkt"];
1269--2195[label="0.994595;184pkt 184fpkt"];
1269--3313[label="1;185pkt 185fpkt"];
1907--2195[label="1;128pkt 128fpkt"];
1907--3313[label="1;128pkt 128fpkt"];
2195--3313[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.178.8"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1067[label="136.47.70.210;s;49pkt 49fpkt", shape=diamond, color=yellow];
1068[label="209.58.1.145;d;35pkt 35fpkt", shape=diamond, color=yellow];
1166[label="192.248.28.0;s;92pkt 92fpkt", shape=diamond, color=yellow];
1173[label="136.47.19.64;s;30pkt 30fpkt", shape=diamond, color=yellow];
1307[label="59.89.121.157;d;100pkt 100fpkt", shape=diamond, color=yellow];
1863[label="192.248.28.0;s;81pkt 81fpkt", shape=hexagon, color=black];
1918[label="136.47.19.64;s;20pkt 20fpkt", shape=hexagon, color=black];
2139[label="192.248.28.0;106pkt 106fpkt", shape=pentagon, color=darkviolet];
2332[label="192.248.27.35;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3125[label="136.47.70.210;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3142[label="136.47.171.215;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3238[label="136.47.248.244;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3951[label="136.47.70.210;52pkt 52fpkt", shape=invtriangle, color=brown];
3964[label="136.47.171.215;34pkt 34fpkt", shape=invtriangle, color=brown];
4365[label="136.47.70.210;52pkt 52fpkt", shape=invhouse, color=bisque];
4372[label="136.47.171.215;35pkt 35fpkt", shape=invhouse, color=bisque];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 59.89.121.157:*}[39.8693%]&lt;BR/&gt;{192.248.28.0:80, *:*}[33.9869%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.818%)&lt;BR/&gt; 1936: (0.485437%)&lt;BR/&gt; 19465: (0.303398%)&lt;BR/&gt; 18232: (0.303398%)&lt;BR/&gt; 1943: (0.303398%)&gt;];
}
1067--1068[label="1;35pkt 35fpkt"];
1067--1307[label="0.0408163;2pkt 2fpkt"];
1067--3125[label="0.979592;48pkt 48fpkt"];
1067--3951[label="0.979592;48pkt 48fpkt"];
1067--4365[label="0.979592;48pkt 48fpkt"];
1068--3125[label="1;35pkt 35fpkt"];
1068--3951[label="1;35pkt 35fpkt"];
1068--4365[label="1;35pkt 35fpkt"];
1166--1307[label="0.336957;31pkt 31fpkt"];
1166--1863[label="1;81pkt 81fpkt"];
1166--2139[label="1;92pkt 92fpkt"];
1173--1307[label="0.666667;20pkt 20fpkt"];
1173--1918[label="1;20pkt 20fpkt"];
1307--1339[label="0.01;1pkt 1fpkt"];
1307--1863[label="0.296296;24pkt 24fpkt"];
1307--1918[label="0.55;11pkt 11fpkt"];
1307--2139[label="0.31;31pkt 31fpkt"];
1307--2332[label="0.733333;11pkt 11fpkt"];
1307--3125[label="0.0384615;2pkt 2fpkt"];
1307--3142[label="0.117647;4pkt 4fpkt"];
1307--3238[label="0.0540541;2pkt 2fpkt"];
1307--3951[label="0.0384615;2pkt 2fpkt"];
1307--3964[label="0.117647;4pkt 4fpkt"];
1307--4365[label="0.0384615;2pkt 2fpkt"];
1307--4372[label="0.114286;4pkt 4fpkt"];
1863--2139[label="1;81pkt 81fpkt"];
3125--3951[label="1;52pkt 52fpkt"];
3125--4365[label="1;52pkt 52fpkt"];
3142--3964[label="1;34pkt 34fpkt"];
3142--4372[label="1;34pkt 34fpkt"];
3951--4365[label="1;52pkt 52fpkt"];
3964--4372[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="192.248.28.0" src_port="80"/>
      <filter dst_ip="59.89.121.157" src_port="80"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
1175[label="166.29.245.68;s;394pkt 394fpkt", shape=diamond, color=yellow];
1920[label="166.29.245.68;s;373pkt 373fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.245.68:1024, *:53}[90.8629%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.1969%)&lt;BR/&gt; 1024: (45.7627%)&lt;BR/&gt; 25: (2.67275%)&lt;BR/&gt; 0: (0.260756%)&lt;BR/&gt; 32768: (0.195567%)&gt;];
}
1175--1920[label="1;373pkt 373fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.29.245.68" src_port="1024"/>
    </slice>
    <from sec="1136091613" usec="0"/>
    <to sec="1136092424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
208[label="166.28.181.89;s;1230pkt 1230fpkt", shape=diamond, color=yellow];
757[label="160.4.95.167;s;159pkt 159fpkt", shape=diamond, color=yellow];
1120[label="166.28.203.3;s;258pkt 258fpkt", shape=diamond, color=yellow];
1168[label="166.28.87.67;s;164pkt 164fpkt", shape=diamond, color=yellow];
1373[label="160.4.95.7;s;56pkt 56fpkt", shape=diamond, color=yellow];
1375[label="166.28.180.182;s;115pkt 115fpkt", shape=diamond, color=yellow];
1395[label="124.135.141.210;d;49pkt 49fpkt", shape=diamond, color=yellow];
1401[label="192.242.15.16;s;435pkt 435fpkt", shape=diamond, color=yellow];
1547[label="56.104.233.35;d;44pkt 44fpkt", shape=diamond, color=yellow];
1579[label="56.104.234.116;d;43pkt 43fpkt", shape=diamond, color=yellow];
1836[label="160.4.95.167;s;159pkt 159fpkt", shape=hexagon, color=black];
1864[label="166.28.87.67;s;138pkt 138fpkt", shape=hexagon, color=black];
1933[label="166.28.181.89;s;974pkt 974fpkt", shape=hexagon, color=black];
1993[label="192.242.15.16;s;170pkt 170fpkt", shape=hexagon, color=black];
2175[label="166.28.203.3;270pkt 270fpkt", shape=pentagon, color=darkviolet];
2482[label="166.28.87.67;191pkt 191fpkt", shape=pentagon, color=darkviolet];
2613[label="166.28.181.89;1300pkt 1300fpkt", shape=pentagon, color=darkviolet];
3003[label="166.28.180.182;147pkt 147fpkt", shape=pentagon, color=darkviolet];
3496[label="166.28.87.67;191pkt 191fpkt", shape=invtriangle, color=brown];
3871[label="166.28.180.182;147pkt 147fpkt", shape=invtriangle, color=brown];
4155[label="166.28.87.67;190pkt 190fpkt", shape=invhouse, color=bisque];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.181.89:*, *:25}[49.3567%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.437%)&lt;BR/&gt; 113: (1.05754%)&lt;BR/&gt; 53: (0.489891%)&lt;BR/&gt; 1025: (0.349922%)&lt;BR/&gt; 1566: (0.0622084%)&gt;];
}
208--1395[label="0.836735;41pkt 41fpkt"];
208--1547[label="0.931818;41pkt 41fpkt"];
208--1579[label="0.953488;41pkt 41fpkt"];
208--1933[label="1;974pkt 974fpkt"];
208--2613[label="0.999187;1229pkt 1229fpkt"];
757--1395[label="0.0204082;1pkt 1fpkt"];
757--1836[label="1;159pkt 159fpkt"];
1120--1395[label="0.0204082;1pkt 1fpkt"];
1120--2175[label="1;258pkt 258fpkt"];
1168--1395[label="0.0204082;1pkt 1fpkt"];
1168--1864[label="1;138pkt 138fpkt"];
1168--2482[label="1;164pkt 164fpkt"];
1168--3496[label="1;164pkt 164fpkt"];
1168--4155[label="0.993902;163pkt 163fpkt"];
1373--1579[label="0.0465116;2pkt 2fpkt"];
1375--1547[label="0.0227273;1pkt 1fpkt"];
1375--3003[label="1;115pkt 115fpkt"];
1375--3871[label="1;115pkt 115fpkt"];
1395--1401[label="0.0204082;1pkt 1fpkt"];
1395--1809[label="0.0204082;1pkt 1fpkt"];
1395--1822[label="0.0204082;1pkt 1fpkt"];
1395--1836[label="0.0204082;1pkt 1fpkt"];
1395--1864[label="0.0204082;1pkt 1fpkt"];
1395--1933[label="0.571429;28pkt 28fpkt"];
1395--1993[label="0.0204082;1pkt 1fpkt"];
1395--2175[label="0.0204082;1pkt 1fpkt"];
1395--2482[label="0.0204082;1pkt 1fpkt"];
1395--2613[label="0.836735;41pkt 41fpkt"];
1395--3496[label="0.0204082;1pkt 1fpkt"];
1395--4155[label="0.0204082;1pkt 1fpkt"];
1401--1993[label="1;170pkt 170fpkt"];
1547--1822[label="0.0227273;1pkt 1fpkt"];
1547--1933[label="0.704545;31pkt 31fpkt"];
1547--2613[label="0.931818;41pkt 41fpkt"];
1547--3003[label="0.0227273;1pkt 1fpkt"];
1547--3871[label="0.0227273;1pkt 1fpkt"];
1579--1933[label="0.697674;30pkt 30fpkt"];
1579--2613[label="0.953488;41pkt 41fpkt"];
1864--2482[label="1;138pkt 138fpkt"];
1864--3496[label="1;138pkt 138fpkt"];
1864--4155[label="1;138pkt 138fpkt"];
1933--2613[label="0.998973;973pkt 973fpkt"];
2482--3496[label="1;191pkt 191fpkt"];
2482--4155[label="1;190pkt 190fpkt"];
3003--3871[label="1;147pkt 147fpkt"];
3496--4155[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.181.89"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
284[label="214.96.222.168;d;8pkt 8fpkt", shape=diamond, color=yellow];
285[label="166.29.218.121;s;5895pkt 5895fpkt", shape=diamond, color=yellow];
405[label="80.4.65.60;d;5pkt 5fpkt", shape=diamond, color=yellow];
503[label="214.66.151.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
571[label="80.6.80.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
618[label="214.96.50.88;d;3pkt 3fpkt", shape=diamond, color=yellow];
711[label="213.2.48.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1028[label="214.101.82.183;d;9pkt 9fpkt", shape=diamond, color=yellow];
1412[label="85.65.173.45;d;3pkt 3fpkt", shape=diamond, color=yellow];
1574[label="34.16.157.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
1940[label="166.29.218.121;s;5702pkt 5702fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.218.121:7038, *:*}[95.5895%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7038: (47.9319%)&lt;BR/&gt; 32459: (2.46367%)&lt;BR/&gt; 62289: (0.881417%)&lt;BR/&gt; 16881: (0.455757%)&lt;BR/&gt; 80: (0.227879%)&gt;];
}
284--285[label="1;8pkt 8fpkt"];
284--1940[label="1;8pkt 8fpkt"];
285--405[label="1;5pkt 5fpkt"];
285--483[label="0.25;1pkt 1fpkt"];
285--503[label="1;1pkt 1fpkt"];
285--571[label="1;1pkt 1fpkt"];
285--618[label="1;3pkt 3fpkt"];
285--711[label="1;1pkt 1fpkt"];
285--1028[label="1;9pkt 9fpkt"];
285--1412[label="1;3pkt 3fpkt"];
285--1574[label="1;1pkt 1fpkt"];
285--1710[label="0.25;1pkt 1fpkt"];
285--1940[label="1;5702pkt 5702fpkt"];
285--2114[label="0.25;1pkt 1fpkt"];
405--1940[label="0.8;4pkt 4fpkt"];
503--1940[label="1;1pkt 1fpkt"];
571--1940[label="1;1pkt 1fpkt"];
618--1940[label="1;3pkt 3fpkt"];
711--1940[label="1;1pkt 1fpkt"];
1028--1940[label="0.777778;7pkt 7fpkt"];
1412--1940[label="1;3pkt 3fpkt"];
1574--1940[label="1;1pkt 1fpkt"];
1940--2114[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.218.121" src_port="7038"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1078[label="160.178.210.47;s;227pkt 227fpkt", shape=diamond, color=yellow];
1944[label="160.178.210.47;s;181pkt 181fpkt", shape=hexagon, color=black];
2388[label="160.178.210.47;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.178.210.47:53, *:*}[44.5783%]&lt;BR/&gt;{160.178.210.47:2532, *:53}[23.2932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.8661%)&lt;BR/&gt; 25: (17.5038%)&lt;BR/&gt; 2532: (11.6438%)&lt;BR/&gt; 32768: (1.06545%)&lt;BR/&gt; 33701: (0.684932%)&gt;];
}
1078--1479[label="0.00684932;1pkt 1fpkt"];
1078--1944[label="1;181pkt 181fpkt"];
1078--1975[label="0.0102041;1pkt 1fpkt"];
1078--2135[label="0.0132159;3pkt 3fpkt"];
1078--2388[label="1;227pkt 227fpkt"];
1944--1975[label="0.0102041;1pkt 1fpkt"];
1944--2135[label="0.0165746;3pkt 3fpkt"];
1944--2388[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter src_ip="160.178.210.47" src_port="53"/>
      <filter dst_port="53" src_ip="160.178.210.47" src_port="2532"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
639[label="193.114.35.123;s;302pkt 302fpkt", shape=diamond, color=yellow];
1961[label="193.114.35.123;s;276pkt 276fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.35.123:4778, *:53}[28.1457%]&lt;BR/&gt;{193.114.35.123:80, 59.89.121.32:*}[20.8609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.346%)&lt;BR/&gt; 53: (21.0208%)&lt;BR/&gt; 4778: (14.7059%)&lt;BR/&gt; 0: (5.88235%)&lt;BR/&gt; 25: (0.692042%)&gt;];
}
639--820[label="0.00331126;1pkt 1fpkt"];
639--998[label="0.00925926;1pkt 1fpkt"];
639--1347[label="0.0126582;1pkt 1fpkt"];
639--1961[label="1;276pkt 276fpkt"];
639--2135[label="0.0198675;6pkt 6fpkt"];
1961--2135[label="0.0217391;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="59.89.121.32" src_ip="193.114.35.123" src_port="80"/>
      <filter dst_port="53" src_ip="193.114.35.123" src_port="4778"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
656[label="208.72.156.169;s;3176pkt 3176fpkt", shape=diamond, color=yellow];
1966[label="208.72.156.169;s;2486pkt 2486fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.72.156.169:1184, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1184: (50%)&gt;];
}
656--1966[label="1;2486pkt 2486fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.72.156.169" src_port="1184"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
846[label="209.105.29.103;s;1034pkt 1034fpkt", shape=diamond, color=yellow];
1973[label="209.105.29.103;s;1034pkt 1034fpkt", shape=hexagon, color=black];
2677[label="209.105.29.103;1396pkt 1396fpkt", shape=pentagon, color=darkviolet];
3635[label="209.105.29.103;1396pkt 1396fpkt", shape=invtriangle, color=brown];
4210[label="209.105.29.103;1397pkt 1397fpkt", shape=invhouse, color=bisque];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.105.29.103:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54651: (0.0799105%)&lt;BR/&gt; 49430: (0.0799105%)&lt;BR/&gt; 44066: (0.0799105%)&lt;BR/&gt; 39204: (0.0799105%)&gt;];
}
846--1973[label="1;1034pkt 1034fpkt"];
846--2677[label="0.999033;1033pkt 1033fpkt"];
846--3635[label="0.999033;1033pkt 1033fpkt"];
846--4210[label="1;1034pkt 1034fpkt"];
1973--2677[label="0.999033;1033pkt 1033fpkt"];
1973--3635[label="0.999033;1033pkt 1033fpkt"];
1973--4210[label="1;1034pkt 1034fpkt"];
2677--3635[label="1;1396pkt 1396fpkt"];
2677--4210[label="1;1396pkt 1396fpkt"];
3635--4210[label="1;1396pkt 1396fpkt"];
</description>
    <slice>
      <filter src_ip="209.105.29.103" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1147[label="215.33.75.169;s;945pkt 945fpkt", shape=diamond, color=yellow];
1979[label="215.33.75.169;s;753pkt 753fpkt", shape=hexagon, color=black];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.33.75.169:1544, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1544: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1147--1979[label="1;753pkt 753fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.33.75.169" src_port="1544"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1271[label="160.128.23.10;s;265pkt 265fpkt", shape=diamond, color=yellow];
1980[label="160.128.23.10;s;265pkt 265fpkt", shape=hexagon, color=black];
2211[label="160.128.23.10;288pkt 288fpkt", shape=pentagon, color=darkviolet];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.23.10:50123, *:53}[47.9167%]&lt;BR/&gt;{160.128.23.10:53, *:*}[23.9583%]&lt;BR/&gt;{160.128.23.10:*, *:25}[21.1806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.7531%)&lt;BR/&gt; 50123: (25.1834%)&lt;BR/&gt; 25: (12.8973%)&lt;BR/&gt; 32768: (0.427873%)&lt;BR/&gt; 62180: (0.183374%)&gt;];
}
1271--1347[label="0.0126582;1pkt 1fpkt"];
1271--1479[label="0.00684932;1pkt 1fpkt"];
1271--1490[label="0.0123457;1pkt 1fpkt"];
1271--1975[label="0.0102041;1pkt 1fpkt"];
1271--1980[label="1;265pkt 265fpkt"];
1271--2135[label="0.0226415;6pkt 6fpkt"];
1271--2211[label="1;265pkt 265fpkt"];
1980--2135[label="0.0226415;6pkt 6fpkt"];
1980--2211[label="1;265pkt 265fpkt"];
</description>
    <slice>
      <filter src_ip="160.128.23.10" src_port="53"/>
      <filter dst_port="25" src_ip="160.128.23.10"/>
      <filter dst_port="53" src_ip="160.128.23.10" src_port="50123"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1310[label="80.163.8.23;s;48pkt 48fpkt", shape=diamond, color=yellow];
1415[label="178.142.86.108;d;48pkt 48fpkt", shape=diamond, color=yellow];
2000[label="178.142.86.108;d;17pkt 17fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.163.8.23:80, 178.142.86.108:*}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6726%)&lt;BR/&gt; 1074: (1.32743%)&lt;BR/&gt; 1073: (1.32743%)&lt;BR/&gt; 1072: (1.32743%)&lt;BR/&gt; 1071: (1.32743%)&gt;];
}
1310--1415[label="0.979167;47pkt 47fpkt"];
1310--2000[label="0.941176;16pkt 16fpkt"];
1415--2000[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.86.108" src_ip="80.163.8.23" src_port="80"/>
    </slice>
    <from sec="1136091909" usec="0"/>
    <to sec="1136092427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1321[label="214.74.34.239;s;254pkt 254fpkt", shape=diamond, color=yellow];
2007[label="214.74.34.239;s;254pkt 254fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.74.34.239:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4996: (0.19685%)&lt;BR/&gt; 4990: (0.19685%)&lt;BR/&gt; 4984: (0.19685%)&lt;BR/&gt; 4978: (0.19685%)&gt;];
}
1321--2007[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="214.74.34.239"/>
    </slice>
    <from sec="1136092108" usec="0"/>
    <to sec="1136092138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
595[label="166.28.39.70;s;1368pkt 1368fpkt", shape=diamond, color=yellow];
1433[label="214.105.232.115;d;195pkt 195fpkt", shape=diamond, color=yellow];
2009[label="214.105.232.115;d;195pkt 195fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.39.70:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1551: (0.113766%)&lt;BR/&gt; 1530: (0.113766%)&lt;BR/&gt; 1527: (0.113766%)&lt;BR/&gt; 1497: (0.113766%)&gt;];
}
595--1433[label="0.558974;109pkt 109fpkt"];
595--2009[label="0.558974;109pkt 109fpkt"];
1433--2009[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.39.70" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
980[label="80.170.169.246;s;976pkt 976fpkt", shape=diamond, color=yellow];
2031[label="80.170.169.246;s;859pkt 859fpkt", shape=hexagon, color=black];
3246[label="80.170.169.246;1055pkt 1055fpkt", shape=pentagon, color=darkviolet];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.170.169.246:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57710: (0.103806%)&lt;BR/&gt; 56697: (0.103806%)&lt;BR/&gt; 45353: (0.103806%)&lt;BR/&gt; 39740: (0.103806%)&gt;];
}
980--2031[label="1;859pkt 859fpkt"];
980--3246[label="0.998975;975pkt 975fpkt"];
2031--3246[label="0.998836;858pkt 858fpkt"];
</description>
    <slice>
      <filter src_ip="80.170.169.246" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
682[label="214.76.209.155;s;486pkt 486fpkt", shape=diamond, color=yellow];
694[label="136.47.174.168;d;942pkt 942fpkt", shape=diamond, color=yellow];
842[label="178.142.84.15;d;365pkt 365fpkt", shape=diamond, color=yellow];
1006[label="80.147.161.116;s;386pkt 386fpkt", shape=diamond, color=yellow];
1815[label="136.47.174.168;d;439pkt 439fpkt", shape=hexagon, color=black];
2032[label="178.142.84.15;d;330pkt 330fpkt", shape=hexagon, color=black];
2727[label="80.147.161.116;740pkt 740fpkt", shape=pentagon, color=darkviolet];
2893[label="214.76.209.155;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3670[label="80.147.161.116;740pkt 740fpkt", shape=invtriangle, color=brown];
3790[label="214.76.209.155;4pkt 4fpkt", shape=invtriangle, color=brown];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.147.161.116:80, 136.47.174.168:*}[54.1271%]&lt;BR/&gt;{214.76.209.155:80, 178.142.84.15:*}[25.8583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6619%)&lt;BR/&gt; 3077: (0.270453%)&lt;BR/&gt; 59055: (0.0563444%)&lt;BR/&gt; 59054: (0.0563444%)&lt;BR/&gt; 59053: (0.0563444%)&gt;];
}
682--694[label="0.427984;208pkt 208fpkt"];
682--842[label="0.761644;278pkt 278fpkt"];
682--1815[label="0.289294;127pkt 127fpkt"];
682--2032[label="0.842424;278pkt 278fpkt"];
682--2893[label="0.2;1pkt 1fpkt"];
694--1006[label="1;386pkt 386fpkt"];
694--1815[label="1;439pkt 439fpkt"];
694--2134[label="0.00223714;1pkt 1fpkt"];
694--2727[label="0.921622;682pkt 682fpkt"];
694--2893[label="0.2;1pkt 1fpkt"];
694--3670[label="0.921622;682pkt 682fpkt"];
842--2032[label="1;330pkt 330fpkt"];
1006--1815[label="0.805699;311pkt 311fpkt"];
1006--2727[label="0.997409;385pkt 385fpkt"];
1006--3670[label="0.997409;385pkt 385fpkt"];
1815--2134[label="0.0022779;1pkt 1fpkt"];
1815--2727[label="0.70615;310pkt 310fpkt"];
1815--2893[label="0.2;1pkt 1fpkt"];
1815--3670[label="0.70615;310pkt 310fpkt"];
2727--3670[label="1;740pkt 740fpkt"];
2893--3790[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.174.168" src_ip="80.147.161.116" src_port="80"/>
      <filter dst_ip="178.142.84.15" src_ip="214.76.209.155" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
685[label="178.142.12.153;d;68pkt 68fpkt", shape=diamond, color=yellow];
798[label="209.118.112.228;s;2076pkt 2076fpkt", shape=diamond, color=yellow];
1140[label="80.144.11.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
1959[label="209.118.112.228;s;1850pkt 1850fpkt", shape=hexagon, color=black];
2033[label="80.144.11.229;s;1pkt 1fpkt", shape=hexagon, color=black];
2586[label="209.54.249.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3184[label="80.144.11.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.118.112.228:80, *:*}[96.8735%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1121%)&lt;BR/&gt; 13245: (0.650325%)&lt;BR/&gt; 8000: (0.150075%)&lt;BR/&gt; 64816: (0.050025%)&lt;BR/&gt; 63523: (0.050025%)&gt;];
}
685--798[label="0.0147059;1pkt 1fpkt"];
685--1140[label="1;1pkt 1fpkt"];
685--1959[label="0.0147059;1pkt 1fpkt"];
685--2033[label="1;1pkt 1fpkt"];
685--2586[label="1;1pkt 1fpkt"];
685--3184[label="1;1pkt 1fpkt"];
798--1959[label="1;1850pkt 1850fpkt"];
1140--2033[label="1;1pkt 1fpkt"];
1140--3184[label="1;1pkt 1fpkt"];
2033--3184[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="209.118.112.228" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.843734,1.74993,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="108.66.3.61"/>
      <from sec="1136091814" usec="0"/>
      <to sec="1136092400" usec="0"/>
    </slice>
    <from sec="1136091814" usec="0"/>
    <to sec="1136092400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,002,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1409[label="214.69.70.126;s;198pkt 198fpkt", shape=diamond, color=yellow];
2042[label="214.69.70.126;s;194pkt 194fpkt", shape=hexagon, color=black];
2761[label="214.69.70.126;199pkt 199fpkt", shape=pentagon, color=darkviolet];
3696[label="214.69.70.126;199pkt 199fpkt", shape=invtriangle, color=brown];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.69.70.126:*, *:139}[69.5%]&lt;BR/&gt;{214.69.70.126:*, *:445}[22.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (34.8101%)&lt;BR/&gt; 445: (11.1392%)&lt;BR/&gt; 137: (4.05063%)&lt;BR/&gt; 2736: (0.506329%)&lt;BR/&gt; 2730: (0.506329%)&gt;];
}
1409--2042[label="1;194pkt 194fpkt"];
1409--2761[label="0.994949;197pkt 197fpkt"];
1409--3696[label="0.994949;197pkt 197fpkt"];
2042--2761[label="0.994845;193pkt 193fpkt"];
2042--3696[label="0.994845;193pkt 193fpkt"];
2761--3696[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="214.69.70.126"/>
      <filter dst_port="445" src_ip="214.69.70.126"/>
    </slice>
    <from sec="1136091875" usec="0"/>
    <to sec="1136092489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
773[label="209.109.15.119;s;1811pkt 1811fpkt", shape=diamond, color=yellow];
2058[label="209.109.15.119;s;1811pkt 1811fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.109.15.119:1636, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1636: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
773--2058[label="1;1811pkt 1811fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.109.15.119" src_port="1636"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1358[label="193.114.39.26;s;191pkt 191fpkt", shape=diamond, color=yellow];
2067[label="193.114.39.26;s;191pkt 191fpkt", shape=hexagon, color=black];
2287[label="193.114.39.26;190pkt 190fpkt", shape=pentagon, color=darkviolet];
3365[label="193.114.39.26;190pkt 190fpkt", shape=invtriangle, color=brown];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.39.26:0, *:0}[99.4764%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4751%)&lt;BR/&gt; 1736: (0.262467%)&lt;BR/&gt; 135: (0.262467%)&gt;];
}
1358--2067[label="1;191pkt 191fpkt"];
1358--2287[label="1;190pkt 190fpkt"];
1358--3365[label="1;190pkt 190fpkt"];
2067--2287[label="1;190pkt 190fpkt"];
2067--3365[label="1;190pkt 190fpkt"];
2287--3365[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.39.26"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
442[label="143.28.137.163;s;69pkt 69fpkt", shape=diamond, color=yellow];
636[label="208.184.153.208;d;5pkt 5fpkt", shape=diamond, color=yellow];
893[label="80.88.22.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
1683[label="143.28.137.163;s;51pkt 51fpkt", shape=hexagon, color=black];
1754[label="208.184.153.208;d;2pkt 2fpkt", shape=hexagon, color=black];
2074[label="80.88.22.73;d;1pkt 1fpkt", shape=hexagon, color=black];
2928[label="143.28.137.163;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3818[label="143.28.137.163;75pkt 75fpkt", shape=invtriangle, color=brown];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.137.163:7348, *:*}[34.6667%]&lt;BR/&gt;{143.28.137.163:*, *:80}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7348: (17.7419%)&lt;BR/&gt; 80: (11.6487%)&lt;BR/&gt; 0: (4.30108%)&lt;BR/&gt; 6969: (3.58423%)&lt;BR/&gt; 16979: (2.86738%)&gt;];
}
442--636[label="1;5pkt 5fpkt"];
442--893[label="1;1pkt 1fpkt"];
442--1683[label="1;51pkt 51fpkt"];
442--1754[label="1;2pkt 2fpkt"];
442--2074[label="1;1pkt 1fpkt"];
442--2928[label="1;69pkt 69fpkt"];
442--3818[label="1;69pkt 69fpkt"];
636--1683[label="0.4;2pkt 2fpkt"];
636--1754[label="1;2pkt 2fpkt"];
636--2928[label="1;5pkt 5fpkt"];
636--3818[label="1;5pkt 5fpkt"];
893--1683[label="1;1pkt 1fpkt"];
893--2074[label="1;1pkt 1fpkt"];
893--2928[label="1;1pkt 1fpkt"];
893--3818[label="1;1pkt 1fpkt"];
1683--1754[label="1;2pkt 2fpkt"];
1683--2074[label="1;1pkt 1fpkt"];
1683--2928[label="1;51pkt 51fpkt"];
1683--3818[label="1;51pkt 51fpkt"];
1754--2928[label="1;2pkt 2fpkt"];
1754--3818[label="1;2pkt 2fpkt"];
2074--2928[label="1;1pkt 1fpkt"];
2074--3818[label="1;1pkt 1fpkt"];
2928--3818[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="143.28.137.163" src_port="7348"/>
      <filter dst_port="80" src_ip="143.28.137.163"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1502[label="136.47.175.164;s;88pkt 88fpkt", shape=diamond, color=yellow];
1614[label="217.204.98.20;d;25pkt 25fpkt", shape=diamond, color=yellow];
1619[label="166.28.193.130;s;18pkt 18fpkt", shape=diamond, color=yellow];
2087[label="217.204.98.20;d;25pkt 25fpkt", shape=hexagon, color=black];
2091[label="166.28.193.130;s;18pkt 18fpkt", shape=hexagon, color=black];
2782[label="166.28.193.130;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3712[label="166.28.193.130;21pkt 21fpkt", shape=invtriangle, color=brown];
4251[label="166.28.193.130;22pkt 22fpkt", shape=invhouse, color=bisque];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.175.164:*, *:80}[80%]&lt;BR/&gt;{*:*, 217.204.98.20:80}[22.7273%]&lt;BR/&gt;{166.28.193.130:*, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1172%)&lt;BR/&gt; 123: (1.88285%)&lt;BR/&gt; 50401: (1.46444%)&lt;BR/&gt; 50398: (1.46444%)&lt;BR/&gt; 50380: (1.46444%)&gt;];
}
1502--1614[label="0.44;11pkt 11fpkt"];
1502--2087[label="0.44;11pkt 11fpkt"];
1614--1619[label="0.777778;14pkt 14fpkt"];
1614--2087[label="1;25pkt 25fpkt"];
1614--2091[label="0.777778;14pkt 14fpkt"];
1614--2782[label="0.636364;14pkt 14fpkt"];
1614--3712[label="0.666667;14pkt 14fpkt"];
1614--4251[label="0.636364;14pkt 14fpkt"];
1619--2087[label="0.777778;14pkt 14fpkt"];
1619--2091[label="1;18pkt 18fpkt"];
1619--2782[label="1;18pkt 18fpkt"];
1619--3712[label="0.944444;17pkt 17fpkt"];
1619--4251[label="1;18pkt 18fpkt"];
2087--2091[label="0.777778;14pkt 14fpkt"];
2087--2782[label="0.636364;14pkt 14fpkt"];
2087--3712[label="0.666667;14pkt 14fpkt"];
2087--4251[label="0.636364;14pkt 14fpkt"];
2091--2782[label="1;18pkt 18fpkt"];
2091--3712[label="0.944444;17pkt 17fpkt"];
2091--4251[label="1;18pkt 18fpkt"];
2782--3712[label="1;21pkt 21fpkt"];
2782--4251[label="1;22pkt 22fpkt"];
3712--4251[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.193.130"/>
      <filter dst_port="80" src_ip="136.47.175.164"/>
      <filter dst_ip="217.204.98.20" dst_port="80"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136092470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919797,1.71296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1613[label="143.28.251.123;s;24pkt 24fpkt", shape=diamond, color=yellow];
1644[label="57.136.39.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
1646[label="56.96.210.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
2098[label="56.96.210.14;d;1pkt 1fpkt", shape=hexagon, color=black];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.251.123:*, 57.179.224.220:80}[25%]&lt;BR/&gt;{143.28.251.123:*, 219.138.75.65:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54503: (5.55556%)&lt;BR/&gt; 54487: (3.7037%)&lt;BR/&gt; 62384: (1.85185%)&lt;BR/&gt; 62361: (1.85185%)&gt;];
}
1613--1644[label="1;1pkt 1fpkt"];
1613--1646[label="1;1pkt 1fpkt"];
1613--2098[label="1;1pkt 1fpkt"];
1646--2098[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="57.179.224.220" dst_port="80" src_ip="143.28.251.123"/>
      <filter dst_ip="219.138.75.65" dst_port="80" src_ip="143.28.251.123"/>
    </slice>
    <from sec="1136091984" usec="0"/>
    <to sec="1136092428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.92.48.0"/>
    </slice>
    <from sec="1136091802" usec="0"/>
    <to sec="1136091838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.32.152.0"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.72.156.0"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
708[label="136.47.172.0;s;278pkt 278fpkt", shape=diamond, color=yellow];
921[label="209.58.40.197;d;56pkt 56fpkt", shape=diamond, color=yellow];
1781[label="209.58.40.197;d;56pkt 56fpkt", shape=hexagon, color=black];
2148[label="136.47.172.0;287pkt 287fpkt", shape=pentagon, color=darkviolet];
3281[label="136.47.172.0;286pkt 286fpkt", shape=invtriangle, color=brown];
4053[label="136.47.172.0;286pkt 286fpkt", shape=invhouse, color=bisque];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.0:*, *:80}[96.5398%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.719%)&lt;BR/&gt; 43255: (0.800641%)&lt;BR/&gt; 14894: (0.320256%)&lt;BR/&gt; 0: (0.320256%)&lt;BR/&gt; 1802: (0.240192%)&gt;];
}
708--921[label="0.964286;54pkt 54fpkt"];
708--1781[label="0.964286;54pkt 54fpkt"];
708--2133[label="0.00359712;1pkt 1fpkt"];
708--2137[label="0.00359712;1pkt 1fpkt"];
708--2148[label="1;278pkt 278fpkt"];
708--3281[label="0.996403;277pkt 277fpkt"];
708--4053[label="0.996403;277pkt 277fpkt"];
921--1172[label="0.0357143;2pkt 2fpkt"];
921--1781[label="1;56pkt 56fpkt"];
921--2148[label="0.964286;54pkt 54fpkt"];
921--3281[label="0.946429;53pkt 53fpkt"];
921--4053[label="0.946429;53pkt 53fpkt"];
1781--2148[label="0.964286;54pkt 54fpkt"];
1781--3281[label="0.946429;53pkt 53fpkt"];
1781--4053[label="0.946429;53pkt 53fpkt"];
2148--3281[label="1;286pkt 286fpkt"];
2148--4053[label="1;286pkt 286fpkt"];
3281--4053[label="1;286pkt 286fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.47.172.0"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
220[label="178.142.109.37;d;1143pkt 1143fpkt", shape=diamond, color=yellow];
577[label="80.146.66.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
983[label="80.162.211.226;s;240pkt 240fpkt", shape=diamond, color=yellow];
1102[label="80.133.130.47;s;8pkt 8fpkt", shape=diamond, color=yellow];
1193[label="210.66.98.202;s;5pkt 5fpkt", shape=diamond, color=yellow];
1243[label="178.142.86.70;d;191pkt 191fpkt", shape=diamond, color=yellow];
1301[label="59.89.18.150;s;34pkt 34fpkt", shape=diamond, color=yellow];
1896[label="80.162.211.226;s;205pkt 205fpkt", shape=hexagon, color=black];
1924[label="59.89.18.150;s;33pkt 33fpkt", shape=hexagon, color=black];
2025[label="80.133.130.47;s;8pkt 8fpkt", shape=hexagon, color=black];
2150[label="80.162.211.0;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2260[label="80.133.181.20;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2284[label="80.133.181.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2380[label="80.133.130.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2387[label="80.133.130.47;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2397[label="80.133.130.48;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2500[label="58.171.153.69;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2621[label="80.133.187.90;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2753[label="57.58.85.123;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2791[label="213.219.50.133;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2802[label="217.180.15.136;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2863[label="59.89.18.150;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2904[label="80.133.181.157;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2915[label="80.133.181.160;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3019[label="198.131.178.186;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3052[label="210.66.98.194;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3126[label="80.133.160.211;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3175[label="80.162.211.226;273pkt 273fpkt", shape=pentagon, color=darkviolet];
3195[label="59.89.26.233;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3282[label="80.162.211.0;38pkt 38fpkt", shape=invtriangle, color=brown];
3437[label="80.133.130.48;60pkt 60fpkt", shape=invtriangle, color=brown];
3510[label="58.171.153.69;9pkt 9fpkt", shape=invtriangle, color=brown];
3720[label="213.219.50.133;7pkt 7fpkt", shape=invtriangle, color=brown];
3726[label="217.180.15.136;8pkt 8fpkt", shape=invtriangle, color=brown];
3798[label="80.133.181.157;13pkt 13fpkt", shape=invtriangle, color=brown];
3807[label="80.133.181.160;18pkt 18fpkt", shape=invtriangle, color=brown];
3882[label="198.131.178.186;3pkt 3fpkt", shape=invtriangle, color=brown];
3987[label="80.162.211.226;273pkt 273fpkt", shape=invtriangle, color=brown];
4012[label="80.146.66.236;1pkt 1fpkt", shape=invtriangle, color=brown];
4255[label="213.219.50.133;7pkt 7fpkt", shape=invhouse, color=bisque];
4297[label="80.133.181.157;13pkt 13fpkt", shape=invhouse, color=bisque];
4385[label="80.162.211.226;273pkt 273fpkt", shape=invhouse, color=bisque];
4396[label="80.146.66.236;1pkt 1fpkt", shape=invhouse, color=bisque];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 178.142.109.37:*}[84.188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7624%)&lt;BR/&gt; 443: (0.126743%)&lt;BR/&gt; 54228: (0.095057%)&lt;BR/&gt; 54213: (0.095057%)&lt;BR/&gt; 54206: (0.095057%)&gt;];
}
220--577[label="1;1pkt 1fpkt"];
220--804[label="0.0159574;3pkt 3fpkt"];
220--983[label="1;240pkt 240fpkt"];
220--1102[label="1;8pkt 8fpkt"];
220--1193[label="1;5pkt 5fpkt"];
220--1301[label="0.882353;30pkt 30fpkt"];
220--1896[label="1;205pkt 205fpkt"];
220--1924[label="0.909091;30pkt 30fpkt"];
220--2025[label="1;8pkt 8fpkt"];
220--2150[label="1;39pkt 39fpkt"];
220--2380[label="1;2pkt 2fpkt"];
220--2387[label="1;8pkt 8fpkt"];
220--2397[label="1;60pkt 60fpkt"];
220--2500[label="1;9pkt 9fpkt"];
220--2511[label="0.0689655;2pkt 2fpkt"];
220--2598[label="0.0588235;2pkt 2fpkt"];
220--2621[label="1;8pkt 8fpkt"];
220--2631[label="0.0222222;1pkt 1fpkt"];
220--2753[label="0.318182;7pkt 7fpkt"];
220--2791[label="1;7pkt 7fpkt"];
220--2802[label="1;9pkt 9fpkt"];
220--2863[label="0.714286;30pkt 30fpkt"];
220--2880[label="0.0555556;1pkt 1fpkt"];
220--2904[label="0.846154;11pkt 11fpkt"];
220--2915[label="0.842105;16pkt 16fpkt"];
220--2993[label="0.047619;1pkt 1fpkt"];
220--3019[label="1;2pkt 2fpkt"];
220--3052[label="0.461538;6pkt 6fpkt"];
220--3126[label="0.928571;13pkt 13fpkt"];
220--3175[label="0.879121;240pkt 240fpkt"];
220--3195[label="1;8pkt 8fpkt"];
220--3282[label="1;38pkt 38fpkt"];
220--3437[label="1;60pkt 60fpkt"];
220--3510[label="1;9pkt 9fpkt"];
220--3519[label="0.0666667;2pkt 2fpkt"];
220--3588[label="0.0857143;3pkt 3fpkt"];
220--3720[label="1;7pkt 7fpkt"];
220--3726[label="1;8pkt 8fpkt"];
220--3779[label="0.0555556;1pkt 1fpkt"];
220--3798[label="0.846154;11pkt 11fpkt"];
220--3807[label="0.888889;16pkt 16fpkt"];
220--3882[label="1;3pkt 3fpkt"];
220--3987[label="0.879121;240pkt 240fpkt"];
220--4012[label="1;1pkt 1fpkt"];
220--4192[label="0.0588235;2pkt 2fpkt"];
220--4255[label="1;7pkt 7fpkt"];
220--4297[label="0.846154;11pkt 11fpkt"];
220--4385[label="0.879121;240pkt 240fpkt"];
220--4396[label="1;1pkt 1fpkt"];
577--4012[label="1;1pkt 1fpkt"];
577--4396[label="1;1pkt 1fpkt"];
983--1896[label="1;205pkt 205fpkt"];
983--3175[label="1;240pkt 240fpkt"];
983--3987[label="1;240pkt 240fpkt"];
983--4385[label="1;240pkt 240fpkt"];
1102--2025[label="1;8pkt 8fpkt"];
1102--2387[label="1;8pkt 8fpkt"];
1243--2260[label="0.846154;11pkt 11fpkt"];
1243--2284[label="1;3pkt 3fpkt"];
1243--2904[label="0.153846;2pkt 2fpkt"];
1243--2915[label="0.157895;3pkt 3fpkt"];
1243--3798[label="0.153846;2pkt 2fpkt"];
1243--3807[label="0.111111;2pkt 2fpkt"];
1243--4297[label="0.153846;2pkt 2fpkt"];
1301--1924[label="1;33pkt 33fpkt"];
1301--2863[label="1;34pkt 34fpkt"];
1896--3175[label="1;205pkt 205fpkt"];
1896--3987[label="1;205pkt 205fpkt"];
1896--4385[label="1;205pkt 205fpkt"];
1924--2863[label="1;33pkt 33fpkt"];
2025--2387[label="1;8pkt 8fpkt"];
2150--3282[label="1;38pkt 38fpkt"];
2397--3437[label="1;60pkt 60fpkt"];
2500--3510[label="1;9pkt 9fpkt"];
2791--3720[label="1;7pkt 7fpkt"];
2791--4255[label="1;7pkt 7fpkt"];
2802--3726[label="1;8pkt 8fpkt"];
2904--3798[label="1;13pkt 13fpkt"];
2904--4297[label="1;13pkt 13fpkt"];
2915--3807[label="1;18pkt 18fpkt"];
3019--3882[label="1;2pkt 2fpkt"];
3175--3987[label="1;273pkt 273fpkt"];
3175--4385[label="1;273pkt 273fpkt"];
3720--4255[label="1;7pkt 7fpkt"];
3798--4297[label="1;13pkt 13fpkt"];
3987--4385[label="1;273pkt 273fpkt"];
4012--4396[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.109.37" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,002,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1430[label="85.16.217.0;s;210pkt 210fpkt", shape=diamond, color=yellow];
2151[label="85.16.217.0;210pkt 210fpkt", shape=pentagon, color=darkviolet];
3283[label="85.16.217.0;209pkt 209fpkt", shape=invtriangle, color=brown];
4054[label="85.16.217.0;209pkt 209fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.16.217.0:*, *:139}[60%]&lt;BR/&gt;{85.16.217.0:*, *:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (29.9523%)&lt;BR/&gt; 80: (20.0477%)&lt;BR/&gt; 4939: (0.238663%)&lt;BR/&gt; 4938: (0.238663%)&lt;BR/&gt; 4937: (0.238663%)&gt;];
}
1430--2151[label="1;210pkt 210fpkt"];
1430--3283[label="1;209pkt 209fpkt"];
1430--4054[label="1;209pkt 209fpkt"];
2151--3283[label="1;209pkt 209fpkt"];
2151--4054[label="1;209pkt 209fpkt"];
3283--4054[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="85.16.217.0"/>
      <filter dst_port="80" src_ip="85.16.217.0"/>
    </slice>
    <from sec="1136092106" usec="0"/>
    <to sec="1136092488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
1127[label="215.44.130.1;s;2970pkt 2970fpkt", shape=diamond, color=yellow];
2156[label="215.44.130.1;3216pkt 3216fpkt", shape=pentagon, color=darkviolet];
3285[label="215.44.130.1;3215pkt 3215fpkt", shape=invtriangle, color=brown];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.44.130.1:4769, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4769: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1127--2156[label="1;2970pkt 2970fpkt"];
1127--3285[label="0.999663;2969pkt 2969fpkt"];
2156--3285[label="1;3215pkt 3215fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.44.130.1" src_port="4769"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1635[label="136.47.245.2;s;60pkt 60fpkt", shape=diamond, color=yellow];
2166[label="136.47.245.2;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3292[label="136.47.245.2;60pkt 60fpkt", shape=invtriangle, color=brown];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.245.2:*, 198.17.46.231:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1842: (0.833333%)&lt;BR/&gt; 1841: (0.833333%)&lt;BR/&gt; 1840: (0.833333%)&lt;BR/&gt; 1839: (0.833333%)&gt;];
}
1635--2166[label="1;60pkt 60fpkt"];
1635--3292[label="1;60pkt 60fpkt"];
2166--3292[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="198.17.46.231" dst_port="80" src_ip="136.47.245.2"/>
    </slice>
    <from sec="1136092274" usec="0"/>
    <to sec="1136092468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.184.3"/>
    </slice>
    <from sec="1136091608" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.183.97.4"/>
    </slice>
    <from sec="1136092304" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.142.48.8"/>
    </slice>
    <from sec="1136092407" usec="0"/>
    <to sec="1136092462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.194.8"/>
    </slice>
    <from sec="1136092226" usec="0"/>
    <to sec="1136092279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1374[label="138.64.208.8;s;225pkt 225fpkt", shape=diamond, color=yellow];
2197[label="138.64.208.8;224pkt 224fpkt", shape=pentagon, color=darkviolet];
3314[label="138.64.208.8;224pkt 224fpkt", shape=invtriangle, color=brown];
4068[label="138.64.208.8;224pkt 224fpkt", shape=invhouse, color=bisque];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.64.208.8:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1374--2197[label="1;224pkt 224fpkt"];
1374--3314[label="1;224pkt 224fpkt"];
1374--4068[label="1;224pkt 224fpkt"];
2197--3314[label="1;224pkt 224fpkt"];
2197--4068[label="1;224pkt 224fpkt"];
3314--4068[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter src_ip="138.64.208.8"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.99.18.9"/>
    </slice>
    <from sec="1136091740" usec="0"/>
    <to sec="1136091753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1354[label="166.28.178.9;s;30pkt 30fpkt", shape=diamond, color=yellow];
2208[label="166.28.178.9;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.178.9:80, 215.48.43.239:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7742%)&lt;BR/&gt; 25: (3.22581%)&lt;BR/&gt; 61093: (1.6129%)&lt;BR/&gt; 60524: (1.6129%)&lt;BR/&gt; 53348: (1.6129%)&gt;];
}
1354--2208[label="0.966667;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="215.48.43.239" src_ip="166.28.178.9" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.39.83.10"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
2214[label="166.28.119.10;84pkt 84fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.119.10:49617, *:53}[97.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49617: (48.8095%)&lt;BR/&gt; 53: (48.8095%)&lt;BR/&gt; 0: (2.38095%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="166.28.119.10" src_port="49617"/>
    </slice>
    <from sec="1136091619" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.248.28.11"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.216.160.13"/>
    </slice>
    <from sec="1136091864" usec="0"/>
    <to sec="1136091920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.39.16"/>
    </slice>
    <from sec="1136091693" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
2245[label="193.114.33.17;89pkt 89fpkt", shape=pentagon, color=darkviolet];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.33.17:32770, *:53}[49.4382%]&lt;BR/&gt;{193.114.33.17:*, *:25}[33.7079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.9663%)&lt;BR/&gt; 32770: (24.7191%)&lt;BR/&gt; 25: (19.6629%)&lt;BR/&gt; 113: (2.80899%)&lt;BR/&gt; 32768: (1.1236%)&gt;];
}
</description>
    <slice>
      <filter dst_port="25" src_ip="193.114.33.17"/>
      <filter dst_port="53" src_ip="193.114.33.17" src_port="32770"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
321[label="160.4.238.19;s;2469pkt 2469fpkt", shape=diamond, color=yellow];
417[label="63.166.210.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
901[label="50.17.72.252;d;114pkt 114fpkt", shape=diamond, color=yellow];
966[label="211.131.64.131;d;45pkt 45fpkt", shape=diamond, color=yellow];
1065[label="219.131.168.138;d;685pkt 685fpkt", shape=diamond, color=yellow];
1205[label="219.42.205.217;d;87pkt 87fpkt", shape=diamond, color=yellow];
1206[label="219.42.200.121;d;63pkt 63fpkt", shape=diamond, color=yellow];
1209[label="210.221.55.182;d;58pkt 58fpkt", shape=diamond, color=yellow];
1210[label="57.199.193.111;d;97pkt 97fpkt", shape=diamond, color=yellow];
1216[label="210.221.89.2;d;36pkt 36fpkt", shape=diamond, color=yellow];
1272[label="160.4.238.96;s;81pkt 81fpkt", shape=diamond, color=yellow];
1305[label="82.68.64.86;d;2pkt 2fpkt", shape=diamond, color=yellow];
1306[label="210.221.132.167;d;77pkt 77fpkt", shape=diamond, color=yellow];
1398[label="56.97.68.133;d;83pkt 83fpkt", shape=diamond, color=yellow];
1416[label="210.221.209.165;d;119pkt 119fpkt", shape=diamond, color=yellow];
1616[label="59.89.121.220;d;29pkt 29fpkt", shape=diamond, color=yellow];
1749[label="63.166.210.138;d;1pkt 1fpkt", shape=hexagon, color=black];
1942[label="160.4.238.19;s;2005pkt 2005fpkt", shape=hexagon, color=black];
1981[label="160.4.238.96;s;68pkt 68fpkt", shape=hexagon, color=black];
2044[label="219.42.205.217;d;74pkt 74fpkt", shape=hexagon, color=black];
2086[label="57.199.193.111;d;97pkt 97fpkt", shape=hexagon, color=black];
2257[label="160.4.238.19;2598pkt 2598fpkt", shape=pentagon, color=darkviolet];
3351[label="160.4.238.19;2598pkt 2598fpkt", shape=invtriangle, color=brown];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.238.19:*, *:80}[37.2862%]&lt;BR/&gt;{160.4.238.19:80, 219.131.168.138:*}[26.0223%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6344%)&lt;BR/&gt; 0: (0.252459%)&lt;BR/&gt; 443: (0.200226%)&lt;BR/&gt; 44242: (0.0478802%)&lt;BR/&gt; 44228: (0.0478802%)&gt;];
}
321--362[label="0.133333;2pkt 2fpkt"];
321--417[label="1;1pkt 1fpkt"];
321--550[label="0.0434783;1pkt 1fpkt"];
321--901[label="1;114pkt 114fpkt"];
321--966[label="1;45pkt 45fpkt"];
321--1065[label="0.986861;676pkt 676fpkt"];
321--1205[label="1;87pkt 87fpkt"];
321--1206[label="1;63pkt 63fpkt"];
321--1209[label="1;58pkt 58fpkt"];
321--1210[label="1;97pkt 97fpkt"];
321--1216[label="1;36pkt 36fpkt"];
321--1305[label="1;2pkt 2fpkt"];
321--1306[label="1;77pkt 77fpkt"];
321--1398[label="0.975904;81pkt 81fpkt"];
321--1416[label="1;119pkt 119fpkt"];
321--1616[label="0.0344828;1pkt 1fpkt"];
321--1749[label="1;1pkt 1fpkt"];
321--1942[label="1;2005pkt 2005fpkt"];
321--2044[label="1;74pkt 74fpkt"];
321--2086[label="1;97pkt 97fpkt"];
321--2133[label="0.0113406;28pkt 28fpkt"];
321--2137[label="0.0113406;28pkt 28fpkt"];
321--2257[label="1;2469pkt 2469fpkt"];
321--3351[label="1;2469pkt 2469fpkt"];
417--1749[label="1;1pkt 1fpkt"];
417--1942[label="1;1pkt 1fpkt"];
417--2257[label="1;1pkt 1fpkt"];
417--3351[label="1;1pkt 1fpkt"];
901--1942[label="1;114pkt 114fpkt"];
901--2133[label="0.0350877;4pkt 4fpkt"];
901--2137[label="0.0350877;4pkt 4fpkt"];
901--2257[label="1;114pkt 114fpkt"];
901--3351[label="1;114pkt 114fpkt"];
966--1942[label="1;45pkt 45fpkt"];
966--2257[label="1;45pkt 45fpkt"];
966--3351[label="1;45pkt 45fpkt"];
1065--1942[label="0.781022;535pkt 535fpkt"];
1065--2257[label="0.986861;676pkt 676fpkt"];
1065--2523[label="0.0116788;8pkt 8fpkt"];
1065--3011[label="0.00145985;1pkt 1fpkt"];
1065--3351[label="0.986861;676pkt 676fpkt"];
1065--3528[label="0.0116788;8pkt 8fpkt"];
1065--3876[label="0.00145985;1pkt 1fpkt"];
1065--4169[label="0.0116788;8pkt 8fpkt"];
1205--1942[label="0.712644;62pkt 62fpkt"];
1205--2044[label="1;74pkt 74fpkt"];
1205--2257[label="1;87pkt 87fpkt"];
1205--3351[label="1;87pkt 87fpkt"];
1206--1942[label="1;63pkt 63fpkt"];
1206--2257[label="1;63pkt 63fpkt"];
1206--3351[label="1;63pkt 63fpkt"];
1209--1942[label="1;58pkt 58fpkt"];
1209--2257[label="1;58pkt 58fpkt"];
1209--3351[label="1;58pkt 58fpkt"];
1210--1942[label="0.639175;62pkt 62fpkt"];
1210--2086[label="1;97pkt 97fpkt"];
1210--2257[label="1;97pkt 97fpkt"];
1210--3351[label="1;97pkt 97fpkt"];
1216--1942[label="1;36pkt 36fpkt"];
1216--2257[label="1;36pkt 36fpkt"];
1216--3351[label="1;36pkt 36fpkt"];
1272--1616[label="0.965517;28pkt 28fpkt"];
1272--1981[label="1;68pkt 68fpkt"];
1305--1942[label="1;2pkt 2fpkt"];
1305--2257[label="1;2pkt 2fpkt"];
1305--3351[label="1;2pkt 2fpkt"];
1306--1942[label="0.805195;62pkt 62fpkt"];
1306--2257[label="1;77pkt 77fpkt"];
1306--3351[label="1;77pkt 77fpkt"];
1398--1835[label="0.0240964;2pkt 2fpkt"];
1398--1942[label="0.903614;75pkt 75fpkt"];
1398--2257[label="0.975904;81pkt 81fpkt"];
1398--2448[label="0.0240964;2pkt 2fpkt"];
1398--3351[label="0.975904;81pkt 81fpkt"];
1398--3468[label="0.0240964;2pkt 2fpkt"];
1416--1942[label="0.94958;113pkt 113fpkt"];
1416--2257[label="1;119pkt 119fpkt"];
1416--3351[label="1;119pkt 119fpkt"];
1616--1942[label="0.0344828;1pkt 1fpkt"];
1616--1981[label="0.517241;15pkt 15fpkt"];
1616--2257[label="0.0344828;1pkt 1fpkt"];
1616--3351[label="0.0344828;1pkt 1fpkt"];
1749--1942[label="1;1pkt 1fpkt"];
1749--2257[label="1;1pkt 1fpkt"];
1749--3351[label="1;1pkt 1fpkt"];
1942--2044[label="0.837838;62pkt 62fpkt"];
1942--2086[label="0.639175;62pkt 62fpkt"];
1942--2133[label="0.0139651;28pkt 28fpkt"];
1942--2137[label="0.0139651;28pkt 28fpkt"];
1942--2257[label="1;2005pkt 2005fpkt"];
1942--3351[label="1;2005pkt 2005fpkt"];
2044--2257[label="1;74pkt 74fpkt"];
2044--3351[label="1;74pkt 74fpkt"];
2086--2257[label="1;97pkt 97fpkt"];
2086--3351[label="1;97pkt 97fpkt"];
2257--3351[label="1;2598pkt 2598fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="160.4.238.19"/>
      <filter dst_ip="219.131.168.138" src_ip="160.4.238.19" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.26.222.20"/>
    </slice>
    <from sec="1136091691" usec="0"/>
    <to sec="1136091695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.132.187.22"/>
    </slice>
    <from sec="1136092423" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.105.76.23"/>
    </slice>
    <from sec="1136091700" usec="0"/>
    <to sec="1136091736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.59.177.23"/>
    </slice>
    <from sec="1136091673" usec="0"/>
    <to sec="1136092422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.59.71.26"/>
    </slice>
    <from sec="1136091612" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.128.70.27"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136091873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.245.48.29"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.106.152.30"/>
    </slice>
    <from sec="1136092415" usec="0"/>
    <to sec="1136092452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.41.66.31"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.95.79.32"/>
    </slice>
    <from sec="1136091612" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.131.56.33"/>
    </slice>
    <from sec="1136091823" usec="0"/>
    <to sec="1136091856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.134.167.34"/>
    </slice>
    <from sec="1136091859" usec="0"/>
    <to sec="1136091902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.26.39.37"/>
    </slice>
    <from sec="1136091716" usec="0"/>
    <to sec="1136091871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.184.225.37"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95913,1.64799,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
28[label="214.119.36.40s;39pkt 39fpkt", shape=rectangle, color=red];
2355[label="214.119.36.40;125pkt 125fpkt", shape=pentagon, color=darkviolet];
3412[label="214.119.36.40;124pkt 124fpkt", shape=invtriangle, color=brown];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.36.40:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
28--2355[label="1;39pkt 39fpkt"];
28--3412[label="1;39pkt 39fpkt"];
2355--3412[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.119.36.40" src_port="1028"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136091620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.132.41"/>
    </slice>
    <from sec="1136091619" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.230.26.42"/>
    </slice>
    <from sec="1136092465" usec="0"/>
    <to sec="1136092470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.102.31.43"/>
    </slice>
    <from sec="1136091614" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.6.29.48"/>
    </slice>
    <from sec="1136091695" usec="0"/>
    <to sec="1136092486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.55.212.49"/>
    </slice>
    <from sec="1136092224" usec="0"/>
    <to sec="1136092355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.36.5.51"/>
    </slice>
    <from sec="1136091718" usec="0"/>
    <to sec="1136092462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.48.123.51"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136092490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.236.171.54"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.75.25.55"/>
    </slice>
    <from sec="1136092283" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.181.32.55"/>
    </slice>
    <from sec="1136091630" usec="0"/>
    <to sec="1136092007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.208.72.55"/>
    </slice>
    <from sec="1136091714" usec="0"/>
    <to sec="1136091734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
1455[label="58.117.141.55;s;9pkt 9fpkt", shape=diamond, color=yellow];
2431[label="58.117.141.55;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.117.141.55:80, 178.142.54.160:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4034: (5.55556%)&lt;BR/&gt; 4033: (5.55556%)&lt;BR/&gt; 4032: (5.55556%)&lt;BR/&gt; 4031: (5.55556%)&gt;];
}
1455--2431[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.54.160" src_ip="58.117.141.55" src_port="80"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95913,1.64799,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
54[label="213.146.205.56s;319pkt 319fpkt", shape=rectangle, color=red];
2436[label="213.146.205.56;321pkt 321fpkt", shape=pentagon, color=darkviolet];
3461[label="213.146.205.56;322pkt 322fpkt", shape=invtriangle, color=brown];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.146.205.56:*, *:139}[52.795%]&lt;BR/&gt;{213.146.205.56:*, *:445}[47.205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (26.4553%)&lt;BR/&gt; 445: (23.5447%)&lt;BR/&gt; 4695: (0.4158%)&lt;BR/&gt; 4998: (0.31185%)&lt;BR/&gt; 4995: (0.31185%)&gt;];
}
54--2436[label="0.996865;318pkt 318fpkt"];
54--3461[label="1;319pkt 319fpkt"];
2436--3461[label="1;321pkt 321fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.146.205.56"/>
      <filter dst_port="445" src_ip="213.146.205.56"/>
    </slice>
    <from sec="1136092157" usec="0"/>
    <to sec="1136092213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
2440[label="192.242.58.58;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.58.58:1986, *:53}[87.9518%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.2771%)&lt;BR/&gt; 1986: (43.9759%)&lt;BR/&gt; 0: (10.241%)&lt;BR/&gt; 52381: (0.301205%)&lt;BR/&gt; 3936: (0.301205%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="192.242.58.58" src_port="1986"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.0.76.58"/>
    </slice>
    <from sec="1136091920" usec="0"/>
    <to sec="1136091968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.190.37.62"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.128.52.62"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.140.117.62"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.114.38.65"/>
    </slice>
    <from sec="1136091806" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1561[label="166.28.181.67;s;45pkt 45fpkt", shape=diamond, color=yellow];
2484[label="166.28.181.67;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3498[label="166.28.181.67;48pkt 48fpkt", shape=invtriangle, color=brown];
4156[label="166.28.181.67;47pkt 47fpkt", shape=invhouse, color=bisque];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.181.67:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63335: (1.06383%)&lt;BR/&gt; 62802: (1.06383%)&lt;BR/&gt; 62794: (1.06383%)&lt;BR/&gt; 62793: (1.06383%)&gt;];
}
1561--2484[label="1;45pkt 45fpkt"];
1561--3498[label="1;45pkt 45fpkt"];
1561--4156[label="0.977778;44pkt 44fpkt"];
2484--3498[label="1;48pkt 48fpkt"];
2484--4156[label="1;47pkt 47fpkt"];
3498--4156[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.181.67" src_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
484[label="193.114.38.68;s;2308pkt 2308fpkt", shape=diamond, color=yellow];
1860[label="193.114.38.68;s;1386pkt 1386fpkt", shape=hexagon, color=black];
2491[label="193.114.38.68;2458pkt 2458fpkt", shape=pentagon, color=darkviolet];
3504[label="193.114.38.68;2458pkt 2458fpkt", shape=invtriangle, color=brown];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.38.68:53, *:*}[99.7152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.3264%)&lt;BR/&gt; 32768: (2.83391%)&lt;BR/&gt; 32769: (1.17886%)&lt;BR/&gt; 32772: (0.569106%)&lt;BR/&gt; 32770: (0.441347%)&gt;];
}
484--820[label="0.001287;1pkt 1fpkt"];
484--1234[label="0.00324675;1pkt 1fpkt"];
484--1241[label="0.00337838;1pkt 1fpkt"];
484--1247[label="0.00106496;1pkt 1fpkt"];
484--1329[label="0.0026738;1pkt 1fpkt"];
484--1345[label="0.00311526;1pkt 1fpkt"];
484--1353[label="0.003125;1pkt 1fpkt"];
484--1474[label="0.00324675;1pkt 1fpkt"];
484--1564[label="0.00374532;1pkt 1fpkt"];
484--1860[label="1;1386pkt 1386fpkt"];
484--2020[label="0.00348432;1pkt 1fpkt"];
484--2066[label="0.003125;1pkt 1fpkt"];
484--2135[label="0.107019;247pkt 247fpkt"];
484--2491[label="1;2308pkt 2308fpkt"];
484--3504[label="1;2308pkt 2308fpkt"];
1860--2020[label="0.00348432;1pkt 1fpkt"];
1860--2066[label="0.003125;1pkt 1fpkt"];
1860--2135[label="0.178211;247pkt 247fpkt"];
1860--2491[label="1;1386pkt 1386fpkt"];
1860--3504[label="1;1386pkt 1386fpkt"];
2491--3504[label="1;2458pkt 2458fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.38.68" src_port="53"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.152.79.69"/>
    </slice>
    <from sec="1136091643" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
975[label="193.114.38.70;s;1155pkt 1155fpkt", shape=diamond, color=yellow];
2504[label="193.114.38.70;1256pkt 1256fpkt", shape=pentagon, color=darkviolet];
3514[label="193.114.38.70;1256pkt 1256fpkt", shape=invtriangle, color=brown];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.38.70:53, *:*}[99.6818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.8996%)&lt;BR/&gt; 32768: (2.23616%)&lt;BR/&gt; 32770: (0.940824%)&lt;BR/&gt; 32769: (0.886283%)&lt;BR/&gt; 32771: (0.518135%)&gt;];
}
975--1247[label="0.00106496;1pkt 1fpkt"];
975--1329[label="0.0026738;1pkt 1fpkt"];
975--2135[label="0.0822511;95pkt 95fpkt"];
975--2504[label="0.999134;1154pkt 1154fpkt"];
975--3514[label="0.999134;1154pkt 1154fpkt"];
2504--3514[label="1;1256pkt 1256fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.38.70" src_port="53"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.0.73"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.68.109.73"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
2155[label="166.28.61.1;61pkt 61fpkt", shape=pentagon, color=darkviolet];
3193[label="160.4.146.232;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.61.1:34633, *:53}[42.2414%]&lt;BR/&gt;{160.4.146.232:*, *:25}[30.1724%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (34.4828%)&lt;BR/&gt; 34633: (21.1207%)&lt;BR/&gt; 25: (15.9483%)&lt;BR/&gt; 32771: (5.17241%)&lt;BR/&gt; 0: (1.72414%)&gt;];
}
</description>
    <slice>
      <filter dst_port="25" src_ip="160.4.146.232"/>
      <filter dst_port="53" src_ip="166.28.61.1" src_port="34633"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.88.180.74"/>
    </slice>
    <from sec="1136092437" usec="0"/>
    <to sec="1136092482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.110.41.76"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.182.91.76"/>
    </slice>
    <from sec="1136092234" usec="0"/>
    <to sec="1136092252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.210.169.76"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.120.25.77"/>
    </slice>
    <from sec="1136092443" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.104.161.77"/>
    </slice>
    <from sec="1136091905" usec="0"/>
    <to sec="1136092044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.18.221.77"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.130.105.79"/>
    </slice>
    <from sec="1136091693" usec="0"/>
    <to sec="1136092471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.22.62.80"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.114.41.81"/>
    </slice>
    <from sec="1136091700" usec="0"/>
    <to sec="1136092283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
487[label="166.28.200.77;s;371pkt 371fpkt", shape=diamond, color=yellow];
507[label="166.28.118.36;s;362pkt 362fpkt", shape=diamond, color=yellow];
591[label="160.4.81.81;s;336pkt 336fpkt", shape=diamond, color=yellow];
625[label="166.28.164.224;s;686pkt 686fpkt", shape=diamond, color=yellow];
700[label="166.28.136.33;s;419pkt 419fpkt", shape=diamond, color=yellow];
1595[label="35.98.180.11;d;60pkt 60fpkt", shape=diamond, color=yellow];
1809[label="166.28.200.77;s;186pkt 186fpkt", shape=hexagon, color=black];
1822[label="166.28.136.33;s;419pkt 419fpkt", shape=hexagon, color=black];
2338[label="166.28.118.36;396pkt 396fpkt", shape=pentagon, color=darkviolet];
2563[label="160.4.81.81;368pkt 368fpkt", shape=pentagon, color=darkviolet];
3562[label="160.4.81.81;369pkt 369fpkt", shape=invtriangle, color=brown];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.164.224:25, *:*}[23.5058%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.4627%)&lt;BR/&gt; 53: (3.71349%)&lt;BR/&gt; 32769: (0.26435%)&lt;BR/&gt; 1104: (0.151057%)&lt;BR/&gt; 32768: (0.125881%)&gt;];
}
487--1395[label="0.0204082;1pkt 1fpkt"];
487--1595[label="0.2;12pkt 12fpkt"];
487--1809[label="1;186pkt 186fpkt"];
487--2135[label="0.00269542;1pkt 1fpkt"];
507--1595[label="0.2;12pkt 12fpkt"];
507--2135[label="0.00276243;1pkt 1fpkt"];
507--2338[label="1;362pkt 362fpkt"];
591--1595[label="0.2;12pkt 12fpkt"];
591--2563[label="0.997024;335pkt 335fpkt"];
591--3562[label="1;336pkt 336fpkt"];
625--1595[label="0.183333;11pkt 11fpkt"];
625--2135[label="0.00291545;2pkt 2fpkt"];
700--1395[label="0.0204082;1pkt 1fpkt"];
700--1547[label="0.0227273;1pkt 1fpkt"];
700--1595[label="0.2;12pkt 12fpkt"];
700--1822[label="1;419pkt 419fpkt"];
1595--1809[label="0.0833333;5pkt 5fpkt"];
1595--1822[label="0.2;12pkt 12fpkt"];
1595--2338[label="0.2;12pkt 12fpkt"];
1595--2563[label="0.2;12pkt 12fpkt"];
1595--3562[label="0.2;12pkt 12fpkt"];
2563--3562[label="1;368pkt 368fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.164.224" src_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.181.193.82"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1468[label="136.47.19.83;s;327pkt 327fpkt", shape=diamond, color=yellow];
2575[label="136.47.19.83;409pkt 409fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.19.83:53, *:*}[90.9535%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.3967%)&lt;BR/&gt; 32798: (4.34783%)&lt;BR/&gt; 32768: (2.85326%)&lt;BR/&gt; 0: (1.3587%)&lt;BR/&gt; 32770: (0.883152%)&gt;];
}
1468--1479[label="0.00684932;1pkt 1fpkt"];
1468--2135[label="0.0948012;31pkt 31fpkt"];
1468--2575[label="1;327pkt 327fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.19.83" src_port="53"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.171.128.85"/>
    </slice>
    <from sec="1136091795" usec="0"/>
    <to sec="1136091829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.248.177.85"/>
    </slice>
    <from sec="1136091608" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.66.106.87"/>
    </slice>
    <from sec="1136091670" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.53.110.87"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.179.115.89"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.202.129.89"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.35.137.90"/>
    </slice>
    <from sec="1136092364" usec="0"/>
    <to sec="1136092366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.168.218.90"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06733,1.63764,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
29[label="213.218.92.92s;253pkt 253fpkt", shape=rectangle, color=red];
2628[label="213.218.92.92;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3609[label="213.218.92.92;252pkt 252fpkt", shape=invtriangle, color=brown];
4201[label="213.218.92.92;253pkt 253fpkt", shape=invhouse, color=bisque];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.218.92.92:1690, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1690: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
29--2628[label="1;252pkt 252fpkt"];
29--3609[label="1;252pkt 252fpkt"];
29--4201[label="1;253pkt 253fpkt"];
2628--3609[label="1;252pkt 252fpkt"];
2628--4201[label="1;252pkt 252fpkt"];
3609--4201[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.218.92.92" src_port="1690"/>
    </slice>
    <from sec="1136092474" usec="0"/>
    <to sec="1136092488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.109.93"/>
    </slice>
    <from sec="1136091750" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.163.95"/>
    </slice>
    <from sec="1136091614" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
2638[label="166.29.194.95;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.194.95:53, *:*}[60.7595%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.8734%)&lt;BR/&gt; 113: (6.96203%)&lt;BR/&gt; 49152: (6.32911%)&lt;BR/&gt; 25: (6.32911%)&lt;BR/&gt; 63983: (0.632911%)&gt;];
}
</description>
    <slice>
      <filter src_ip="166.29.194.95" src_port="53"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.164.18.98"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.128.52.99"/>
    </slice>
    <from sec="1136091858" usec="0"/>
    <to sec="1136091897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.164.100"/>
    </slice>
    <from sec="1136091685" usec="0"/>
    <to sec="1136091715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.43.169.100"/>
    </slice>
    <from sec="1136092305" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
988[label="166.29.151.102;s;474pkt 474fpkt", shape=diamond, color=yellow];
2671[label="166.29.151.102;500pkt 500fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.102:53, *:*}[95.4092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (57.3409%)&lt;BR/&gt; 32768: (3.18275%)&lt;BR/&gt; 4053: (2.3614%)&lt;BR/&gt; 32769: (1.02669%)&lt;BR/&gt; 32770: (0.616016%)&gt;];
}
988--1009[label="0.010101;1pkt 1fpkt"];
988--1479[label="0.00684932;1pkt 1fpkt"];
988--1906[label="0.0121951;1pkt 1fpkt"];
988--2135[label="0.0675105;32pkt 32fpkt"];
988--2671[label="0.99789;473pkt 473fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.151.102" src_port="53"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1487[label="136.47.175.102;s;136pkt 136fpkt", shape=diamond, color=yellow];
2673[label="136.47.175.102;144pkt 144fpkt", shape=pentagon, color=darkviolet];
3632[label="136.47.175.102;143pkt 143fpkt", shape=invtriangle, color=brown];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.175.102:*, 199.6.28.7:80}[40.2778%]&lt;BR/&gt;{136.47.175.102:*, 199.6.28.22:80}[38.1944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2383: (0.35461%)&lt;BR/&gt; 2382: (0.35461%)&lt;BR/&gt; 2381: (0.35461%)&lt;BR/&gt; 2380: (0.35461%)&gt;];
}
1487--2133[label="0.0735294;10pkt 10fpkt"];
1487--2137[label="0.0735294;10pkt 10fpkt"];
1487--2673[label="1;136pkt 136fpkt"];
1487--3632[label="0.992647;135pkt 135fpkt"];
2673--3632[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="199.6.28.7" dst_port="80" src_ip="136.47.175.102"/>
      <filter dst_ip="199.6.28.22" dst_port="80" src_ip="136.47.175.102"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.66.220.102"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.100.237.102"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.14.21.103"/>
    </slice>
    <from sec="1136091667" usec="0"/>
    <to sec="1136091741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,004,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.162.13.105"/>
    </slice>
    <from sec="1136091914" usec="0"/>
    <to sec="1136092467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.121.7.106"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.79.100.106"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.66.101.107"/>
    </slice>
    <from sec="1136091991" usec="0"/>
    <to sec="1136092385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.105.232.108"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
786[label="193.114.40.109;s;154pkt 154fpkt", shape=diamond, color=yellow];
2701[label="193.114.40.109;163pkt 163fpkt", shape=pentagon, color=darkviolet];
3650[label="193.114.40.109;160pkt 160fpkt", shape=invtriangle, color=brown];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.40.109:*, *:25}[79.1411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.283%)&lt;BR/&gt; 53: (3.14465%)&lt;BR/&gt; 65534: (2.83019%)&lt;BR/&gt; 113: (0.628931%)&lt;BR/&gt; 0: (0.628931%)&gt;];
}
786--795[label="0.00970874;1pkt 1fpkt"];
786--820[label="0.00649351;1pkt 1fpkt"];
786--1700[label="0.0113636;1pkt 1fpkt"];
786--2701[label="1;154pkt 154fpkt"];
786--3650[label="0.980519;151pkt 151fpkt"];
2701--3650[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="193.114.40.109"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
958[label="160.178.211.111;s;45pkt 45fpkt", shape=diamond, color=yellow];
1125[label="80.179.115.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
1550[label="208.64.121.155;d;260pkt 260fpkt", shape=diamond, color=yellow];
2711[label="160.178.211.111;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3660[label="160.178.211.111;54pkt 54fpkt", shape=invtriangle, color=brown];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.64.121.155:0}[83.0671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (74.3341%)&lt;BR/&gt; 80: (9.4431%)&lt;BR/&gt; 443: (1.81598%)&lt;BR/&gt; 65534: (1.57385%)&lt;BR/&gt; 53: (1.57385%)&gt;];
}
958--1125[label="1;1pkt 1fpkt"];
958--1550[label="0.0222222;1pkt 1fpkt"];
958--2133[label="0.0666667;3pkt 3fpkt"];
958--2137[label="0.0666667;3pkt 3fpkt"];
958--2711[label="0.977778;44pkt 44fpkt"];
958--3660[label="1;45pkt 45fpkt"];
1125--2711[label="1;1pkt 1fpkt"];
1125--3660[label="1;1pkt 1fpkt"];
1550--1722[label="0.00384615;1pkt 1fpkt"];
1550--1854[label="0.00436681;1pkt 1fpkt"];
1550--1893[label="0.00452489;1pkt 1fpkt"];
1550--2036[label="0.00549451;1pkt 1fpkt"];
1550--2068[label="0.00384615;1pkt 1fpkt"];
1550--2169[label="0.00384615;1pkt 1fpkt"];
1550--2569[label="0.0045045;1pkt 1fpkt"];
1550--2707[label="0.00384615;1pkt 1fpkt"];
1550--2711[label="0.0188679;1pkt 1fpkt"];
1550--2790[label="0.00458716;1pkt 1fpkt"];
1550--2947[label="0.0185185;1pkt 1fpkt"];
1550--3294[label="0.00384615;1pkt 1fpkt"];
1550--3656[label="0.00384615;1pkt 1fpkt"];
1550--3660[label="0.0185185;1pkt 1fpkt"];
1550--3719[label="0.00458716;1pkt 1fpkt"];
1550--4254[label="0.00456621;1pkt 1fpkt"];
2711--3660[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="208.64.121.155"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.74.36.114"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.230.116"/>
    </slice>
    <from sec="1136091612" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
229[label="160.178.211.110;s;471pkt 471fpkt", shape=diamond, color=yellow];
262[label="160.178.211.108;s;538pkt 538fpkt", shape=diamond, color=yellow];
749[label="80.130.82.158;d;64pkt 64fpkt", shape=diamond, color=yellow];
772[label="193.114.34.163;s;167pkt 167fpkt", shape=diamond, color=yellow];
1108[label="136.92.247.110;s;321pkt 321fpkt", shape=diamond, color=yellow];
1276[label="193.114.34.133;s;200pkt 200fpkt", shape=diamond, color=yellow];
1277[label="192.242.59.126;s;58pkt 58fpkt", shape=diamond, color=yellow];
1334[label="192.242.42.153;s;85pkt 85fpkt", shape=diamond, color=yellow];
1722[label="160.178.211.110;s;471pkt 471fpkt", shape=hexagon, color=black];
1854[label="136.92.247.110;s;229pkt 229fpkt", shape=hexagon, color=black];
1913[label="192.242.59.126;s;47pkt 47fpkt", shape=hexagon, color=black];
2016[label="160.178.211.108;s;505pkt 505fpkt", shape=hexagon, color=black];
2036[label="193.114.34.133;s;182pkt 182fpkt", shape=hexagon, color=black];
2569[label="193.114.37.82;222pkt 222fpkt", shape=pentagon, color=darkviolet];
2643[label="166.28.177.96;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2707[label="136.92.247.110;333pkt 333fpkt", shape=pentagon, color=darkviolet];
2763[label="136.47.124.126;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2790[label="193.114.34.133;218pkt 218fpkt", shape=pentagon, color=darkviolet];
2926[label="193.114.34.163;187pkt 187fpkt", shape=pentagon, color=darkviolet];
3614[label="166.28.177.96;21pkt 21fpkt", shape=invtriangle, color=brown];
3656[label="136.92.247.110;332pkt 332fpkt", shape=invtriangle, color=brown];
3719[label="193.114.34.133;218pkt 218fpkt", shape=invtriangle, color=brown];
3816[label="193.114.34.163;188pkt 188fpkt", shape=invtriangle, color=brown];
4205[label="166.28.177.96;22pkt 22fpkt", shape=invhouse, color=bisque];
4254[label="193.114.34.133;219pkt 219fpkt", shape=invhouse, color=bisque];
4307[label="193.114.34.163;188pkt 188fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.178.211.108:0, *:0}[24.5326%]&lt;BR/&gt;{160.178.211.110:0, *:0}[21.4774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8548%)&lt;BR/&gt; 135: (0.0453721%)&lt;BR/&gt; 1557: (0.0362976%)&lt;BR/&gt; 3306: (0.0181488%)&lt;BR/&gt; 1881: (0.0181488%)&gt;];
}
229--749[label="0.015625;1pkt 1fpkt"];
229--1249[label="0.00387597;1pkt 1fpkt"];
229--1340[label="0.00431034;1pkt 1fpkt"];
229--1352[label="0.00369004;1pkt 1fpkt"];
229--1356[label="0.00438596;1pkt 1fpkt"];
229--1365[label="0.0052356;1pkt 1fpkt"];
229--1550[label="0.00384615;1pkt 1fpkt"];
229--1553[label="0.0052356;1pkt 1fpkt"];
229--1555[label="0.00549451;1pkt 1fpkt"];
229--1722[label="1;471pkt 471fpkt"];
229--1962[label="0.00454545;1pkt 1fpkt"];
229--1969[label="0.00574713;1pkt 1fpkt"];
229--2063[label="0.00387597;1pkt 1fpkt"];
262--749[label="0.015625;1pkt 1fpkt"];
262--970[label="0.00257732;1pkt 1fpkt"];
262--1331[label="0.00423729;1pkt 1fpkt"];
262--1346[label="0.00414938;1pkt 1fpkt"];
262--1553[label="0.0052356;1pkt 1fpkt"];
262--1555[label="0.00549451;1pkt 1fpkt"];
262--1803[label="0.00561798;1pkt 1fpkt"];
262--2016[label="1;505pkt 505fpkt"];
749--772[label="0.015625;1pkt 1fpkt"];
749--880[label="0.015625;1pkt 1fpkt"];
749--1077[label="0.015625;1pkt 1fpkt"];
749--1108[label="0.015625;1pkt 1fpkt"];
749--1276[label="0.015625;1pkt 1fpkt"];
749--1277[label="0.0172414;1pkt 1fpkt"];
749--1334[label="0.015625;1pkt 1fpkt"];
749--1378[label="0.0166667;1pkt 1fpkt"];
749--1722[label="0.015625;1pkt 1fpkt"];
749--1854[label="0.015625;1pkt 1fpkt"];
749--1909[label="0.015625;1pkt 1fpkt"];
749--1913[label="0.0212766;1pkt 1fpkt"];
749--2016[label="0.015625;1pkt 1fpkt"];
749--2036[label="0.015625;1pkt 1fpkt"];
749--2169[label="0.015625;1pkt 1fpkt"];
749--2295[label="0.015625;1pkt 1fpkt"];
749--2493[label="0.037037;1pkt 1fpkt"];
749--2569[label="0.015625;1pkt 1fpkt"];
749--2643[label="0.047619;1pkt 1fpkt"];
749--2707[label="0.015625;1pkt 1fpkt"];
749--2763[label="0.333333;1pkt 1fpkt"];
749--2784[label="0.015625;1pkt 1fpkt"];
749--2790[label="0.015625;1pkt 1fpkt"];
749--2926[label="0.015625;1pkt 1fpkt"];
749--3124[label="0.015625;1pkt 1fpkt"];
749--3294[label="0.015625;1pkt 1fpkt"];
749--3370[label="0.015625;1pkt 1fpkt"];
749--3614[label="0.047619;1pkt 1fpkt"];
749--3656[label="0.015625;1pkt 1fpkt"];
749--3714[label="0.015625;1pkt 1fpkt"];
749--3719[label="0.015625;1pkt 1fpkt"];
749--3816[label="0.015625;1pkt 1fpkt"];
749--3950[label="0.015625;1pkt 1fpkt"];
749--4096[label="0.015625;1pkt 1fpkt"];
749--4205[label="0.0454545;1pkt 1fpkt"];
749--4254[label="0.015625;1pkt 1fpkt"];
749--4307[label="0.015625;1pkt 1fpkt"];
772--820[label="0.011976;2pkt 2fpkt"];
772--945[label="0.0125;1pkt 1fpkt"];
772--970[label="0.00598802;1pkt 1fpkt"];
772--1331[label="0.00598802;1pkt 1fpkt"];
772--1352[label="0.00598802;1pkt 1fpkt"];
772--1365[label="0.00598802;1pkt 1fpkt"];
772--1553[label="0.00598802;1pkt 1fpkt"];
772--1803[label="0.00598802;1pkt 1fpkt"];
772--2926[label="0.994012;166pkt 166fpkt"];
772--3816[label="1;167pkt 167fpkt"];
772--4307[label="1;167pkt 167fpkt"];
1108--1249[label="0.00387597;1pkt 1fpkt"];
1108--1331[label="0.00423729;1pkt 1fpkt"];
1108--1340[label="0.00431034;1pkt 1fpkt"];
1108--1346[label="0.00414938;1pkt 1fpkt"];
1108--1352[label="0.00369004;1pkt 1fpkt"];
1108--1356[label="0.00438596;1pkt 1fpkt"];
1108--1365[label="0.0052356;1pkt 1fpkt"];
1108--1550[label="0.00384615;1pkt 1fpkt"];
1108--1553[label="0.0052356;1pkt 1fpkt"];
1108--1555[label="0.00549451;1pkt 1fpkt"];
1108--1803[label="0.00561798;1pkt 1fpkt"];
1108--1854[label="1;229pkt 229fpkt"];
1108--1962[label="0.00454545;1pkt 1fpkt"];
1108--1969[label="0.00574713;1pkt 1fpkt"];
1108--2063[label="0.00387597;1pkt 1fpkt"];
1108--2707[label="1;321pkt 321fpkt"];
1108--3656[label="0.996885;320pkt 320fpkt"];
1276--1331[label="0.005;1pkt 1fpkt"];
1276--1346[label="0.005;1pkt 1fpkt"];
1276--1352[label="0.005;1pkt 1fpkt"];
1276--1356[label="0.005;1pkt 1fpkt"];
1276--1365[label="0.0052356;1pkt 1fpkt"];
1276--1550[label="0.005;1pkt 1fpkt"];
1276--1553[label="0.0052356;1pkt 1fpkt"];
1276--1555[label="0.00549451;1pkt 1fpkt"];
1276--1803[label="0.00561798;1pkt 1fpkt"];
1276--1969[label="0.00574713;1pkt 1fpkt"];
1276--2036[label="1;182pkt 182fpkt"];
1276--2063[label="0.005;1pkt 1fpkt"];
1276--2790[label="0.995;199pkt 199fpkt"];
1276--3719[label="0.995;199pkt 199fpkt"];
1276--4254[label="1;200pkt 200fpkt"];
1277--1364[label="0.0172414;1pkt 1fpkt"];
1277--1913[label="1;47pkt 47fpkt"];
1334--1346[label="0.0117647;1pkt 1fpkt"];
1334--1352[label="0.0117647;1pkt 1fpkt"];
1334--1356[label="0.0117647;1pkt 1fpkt"];
1334--1365[label="0.0117647;1pkt 1fpkt"];
1334--1550[label="0.0117647;1pkt 1fpkt"];
1334--2063[label="0.0117647;1pkt 1fpkt"];
1722--1962[label="0.00454545;1pkt 1fpkt"];
1722--1969[label="0.00574713;1pkt 1fpkt"];
1722--2063[label="0.00387597;1pkt 1fpkt"];
1854--1962[label="0.00454545;1pkt 1fpkt"];
1854--1969[label="0.00574713;1pkt 1fpkt"];
1854--2063[label="0.00436681;1pkt 1fpkt"];
1854--2707[label="1;229pkt 229fpkt"];
1854--3656[label="1;229pkt 229fpkt"];
2036--2063[label="0.00549451;1pkt 1fpkt"];
2036--2790[label="0.994505;181pkt 181fpkt"];
2036--3719[label="0.994505;181pkt 181fpkt"];
2036--4254[label="1;182pkt 182fpkt"];
2643--3614[label="1;21pkt 21fpkt"];
2643--4205[label="1;21pkt 21fpkt"];
2707--3656[label="1;332pkt 332fpkt"];
2790--3719[label="1;218pkt 218fpkt"];
2790--4254[label="1;218pkt 218fpkt"];
2926--3816[label="1;187pkt 187fpkt"];
2926--4307[label="1;187pkt 187fpkt"];
3614--4205[label="1;21pkt 21fpkt"];
3719--4254[label="1;218pkt 218fpkt"];
3816--4307[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter src_ip="160.178.211.108"/>
      <filter src_ip="160.178.211.110"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1136[label="193.114.37.64;d;193pkt 193fpkt", shape=diamond, color=yellow];
2764[label="196.152.34.127;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 193.114.37.64:0}[93.2367%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1136--2764[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.37.64"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,002,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
946[label="209.182.138.127;s;287pkt 287fpkt", shape=diamond, color=yellow];
2766[label="209.182.138.127;286pkt 286fpkt", shape=pentagon, color=darkviolet];
3699[label="209.182.138.127;286pkt 286fpkt", shape=invtriangle, color=brown];
4245[label="209.182.138.127;287pkt 287fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.182.138.127:*, *:445}[63.4146%]&lt;BR/&gt;{209.182.138.127:*, *:139}[36.5854%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (31.6754%)&lt;BR/&gt; 139: (18.3246%)&lt;BR/&gt; 4974: (0.17452%)&lt;BR/&gt; 4925: (0.17452%)&lt;BR/&gt; 4906: (0.17452%)&gt;];
}
946--2766[label="1;286pkt 286fpkt"];
946--3699[label="1;286pkt 286fpkt"];
946--4245[label="1;287pkt 287fpkt"];
2766--3699[label="1;286pkt 286fpkt"];
2766--4245[label="1;286pkt 286fpkt"];
3699--4245[label="1;286pkt 286fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.182.138.127"/>
      <filter dst_port="139" src_ip="209.182.138.127"/>
    </slice>
    <from sec="1136091855" usec="0"/>
    <to sec="1136091890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.91.180.127"/>
    </slice>
    <from sec="1136092467" usec="0"/>
    <to sec="1136092484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.138.72.129"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.139.72.130"/>
    </slice>
    <from sec="1136091772" usec="0"/>
    <to sec="1136092331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.20.217.133"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.48.63.136"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.4.146.139"/>
    </slice>
    <from sec="1136091645" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
790[label="192.242.34.140;s;408pkt 408fpkt", shape=diamond, color=yellow];
2823[label="192.242.34.140;460pkt 460fpkt", shape=pentagon, color=darkviolet];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.34.140:65502, *:53}[35.3579%]&lt;BR/&gt;{192.242.34.140:53, *:*}[29.2842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.1221%)&lt;BR/&gt; 65502: (17.4539%)&lt;BR/&gt; 25: (13.5369%)&lt;BR/&gt; 113: (3.74424%)&lt;BR/&gt; 32768: (0.633641%)&gt;];
}
790--795[label="0.00970874;1pkt 1fpkt"];
790--826[label="0.00900901;1pkt 1fpkt"];
790--850[label="0.00854701;1pkt 1fpkt"];
790--852[label="0.00934579;1pkt 1fpkt"];
790--867[label="0.00961538;1pkt 1fpkt"];
790--945[label="0.0125;1pkt 1fpkt"];
790--998[label="0.00925926;1pkt 1fpkt"];
790--1003[label="0.0105263;1pkt 1fpkt"];
790--1009[label="0.010101;1pkt 1fpkt"];
790--1347[label="0.0126582;1pkt 1fpkt"];
790--1479[label="0.00684932;1pkt 1fpkt"];
790--1490[label="0.0123457;1pkt 1fpkt"];
790--1700[label="0.0113636;1pkt 1fpkt"];
790--1767[label="0.0144928;1pkt 1fpkt"];
790--1906[label="0.0121951;1pkt 1fpkt"];
790--1975[label="0.0102041;1pkt 1fpkt"];
790--2135[label="0.0220588;9pkt 9fpkt"];
790--2823[label="0.997549;407pkt 407fpkt"];
</description>
    <slice>
      <filter src_ip="192.242.34.140" src_port="53"/>
      <filter dst_port="53" src_ip="192.242.34.140" src_port="65502"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.74.239.140"/>
    </slice>
    <from sec="1136092405" usec="0"/>
    <to sec="1136092485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
1403[label="166.29.164.141;s;34pkt 34fpkt", shape=diamond, color=yellow];
1413[label="200.150.42.41;d;19pkt 19fpkt", shape=diamond, color=yellow];
2828[label="166.29.164.141;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3740[label="166.29.164.141;36pkt 36fpkt", shape=invtriangle, color=brown];
4268[label="166.29.164.141;36pkt 36fpkt", shape=invhouse, color=bisque];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.164.141:*, 200.150.42.41:80}[48.7179%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.7037%)&lt;BR/&gt; 38760: (8.64198%)&lt;BR/&gt; 1989: (6.48148%)&lt;BR/&gt; 24248: (2.46914%)&lt;BR/&gt; 1088: (2.46914%)&gt;];
}
1403--1413[label="0.894737;17pkt 17fpkt"];
1403--2828[label="1;34pkt 34fpkt"];
1403--3740[label="0.970588;33pkt 33fpkt"];
1403--4268[label="0.970588;33pkt 33fpkt"];
1413--2828[label="0.894737;17pkt 17fpkt"];
1413--3740[label="0.894737;17pkt 17fpkt"];
1413--4268[label="0.894737;17pkt 17fpkt"];
2828--3740[label="1;36pkt 36fpkt"];
2828--4268[label="1;36pkt 36fpkt"];
3740--4268[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="200.150.42.41" dst_port="80" src_ip="166.29.164.141"/>
    </slice>
    <from sec="1136091726" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.54.241.144"/>
    </slice>
    <from sec="1136091819" usec="0"/>
    <to sec="1136091845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.184.207.146"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.5.148"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.29.77.148"/>
    </slice>
    <from sec="1136092171" usec="0"/>
    <to sec="1136092430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.144.55.150"/>
    </slice>
    <from sec="1136092365" usec="0"/>
    <to sec="1136092461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.197.235.152"/>
    </slice>
    <from sec="1136092440" usec="0"/>
    <to sec="1136092467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1008[label="213.82.86.153;s;937pkt 937fpkt", shape=diamond, color=yellow];
2879[label="213.82.86.153;1009pkt 1009fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.82.86.153:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63827: (0.102775%)&lt;BR/&gt; 63031: (0.102775%)&lt;BR/&gt; 59912: (0.102775%)&lt;BR/&gt; 54630: (0.102775%)&gt;];
}
1008--2879[label="0.998933;936pkt 936fpkt"];
</description>
    <slice>
      <filter src_ip="213.82.86.153" src_port="80"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.185.229.154"/>
    </slice>
    <from sec="1136092352" usec="0"/>
    <to sec="1136092401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.107.29.155"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.189.68.156"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.140.98.156"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.252.127.157"/>
    </slice>
    <from sec="1136091676" usec="0"/>
    <to sec="1136092265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.109.166"/>
    </slice>
    <from sec="1136091626" usec="0"/>
    <to sec="1136092480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.182.225.166"/>
    </slice>
    <from sec="1136091674" usec="0"/>
    <to sec="1136092490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1290[label="160.4.146.168;s;82pkt 82fpkt", shape=diamond, color=yellow];
1922[label="160.4.146.168;s;65pkt 65fpkt", shape=hexagon, color=black];
2943[label="160.4.146.168;92pkt 92fpkt", shape=pentagon, color=darkviolet];
3829[label="160.4.146.168;92pkt 92fpkt", shape=invtriangle, color=brown];
4313[label="160.4.146.168;92pkt 92fpkt", shape=invhouse, color=bisque];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.146.168:*, 59.89.96.165:80}[46.7391%]&lt;BR/&gt;{160.4.146.168:*, 58.117.162.249:80}[28.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.3073%)&lt;BR/&gt; 110: (9.10165%)&lt;BR/&gt; 1863: (0.945626%)&lt;BR/&gt; 45474: (0.591017%)&lt;BR/&gt; 45460: (0.591017%)&gt;];
}
1290--1922[label="1;65pkt 65fpkt"];
1290--2133[label="0.0609756;5pkt 5fpkt"];
1290--2137[label="0.0609756;5pkt 5fpkt"];
1290--2943[label="1;82pkt 82fpkt"];
1290--3829[label="1;82pkt 82fpkt"];
1290--4313[label="1;82pkt 82fpkt"];
1922--2133[label="0.0769231;5pkt 5fpkt"];
1922--2137[label="0.0769231;5pkt 5fpkt"];
1922--2943[label="1;65pkt 65fpkt"];
1922--3829[label="1;65pkt 65fpkt"];
1922--4313[label="1;65pkt 65fpkt"];
2943--3829[label="1;92pkt 92fpkt"];
2943--4313[label="1;92pkt 92fpkt"];
3829--4313[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="59.89.96.165" dst_port="80" src_ip="160.4.146.168"/>
      <filter dst_ip="58.117.162.249" dst_port="80" src_ip="160.4.146.168"/>
    </slice>
    <from sec="1136091629" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.12.173.169"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.224.169"/>
    </slice>
    <from sec="1136091759" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
272[label="193.114.39.69;s;159pkt 159fpkt", shape=diamond, color=yellow];
356[label="160.4.130.223;s;233pkt 233fpkt", shape=diamond, color=yellow];
389[label="193.97.76.214;d;10pkt 10fpkt", shape=diamond, color=yellow];
423[label="160.4.95.71;s;648pkt 648fpkt", shape=diamond, color=yellow];
443[label="81.38.76.215;d;3pkt 3fpkt", shape=diamond, color=yellow];
490[label="216.194.157.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
493[label="198.131.94.211;d;848pkt 848fpkt", shape=diamond, color=yellow];
550[label="216.68.54.157;d;23pkt 23fpkt", shape=diamond, color=yellow];
609[label="36.170.178.183;d;4pkt 4fpkt", shape=diamond, color=yellow];
666[label="139.3.107.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
719[label="160.4.95.70;s;98pkt 98fpkt", shape=diamond, color=yellow];
726[label="60.70.89.149;d;10pkt 10fpkt", shape=diamond, color=yellow];
788[label="136.47.119.72;s;264pkt 264fpkt", shape=diamond, color=yellow];
878[label="166.28.168.168;s;41pkt 41fpkt", shape=diamond, color=yellow];
890[label="166.28.151.5;s;133pkt 133fpkt", shape=diamond, color=yellow];
903[label="160.4.95.3;s;273pkt 273fpkt", shape=diamond, color=yellow];
1023[label="166.28.168.170;s;180pkt 180fpkt", shape=diamond, color=yellow];
1043[label="166.28.145.109;s;98pkt 98fpkt", shape=diamond, color=yellow];
1047[label="166.28.181.68;s;80pkt 80fpkt", shape=diamond, color=yellow];
1053[label="80.217.74.136;d;27pkt 27fpkt", shape=diamond, color=yellow];
1103[label="160.4.95.138;s;111pkt 111fpkt", shape=diamond, color=yellow];
1282[label="160.4.68.117;s;39pkt 39fpkt", shape=diamond, color=yellow];
1299[label="160.4.132.242;s;79pkt 79fpkt", shape=diamond, color=yellow];
1317[label="209.57.183.0;d;5pkt 5fpkt", shape=diamond, color=yellow];
1439[label="62.90.49.150;d;6pkt 6fpkt", shape=diamond, color=yellow];
1634[label="219.121.185.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
1695[label="198.131.94.211;d;168pkt 168fpkt", shape=hexagon, color=black];
1750[label="160.4.95.71;s;521pkt 521fpkt", shape=hexagon, color=black];
1878[label="193.114.39.69;s;117pkt 117fpkt", shape=hexagon, color=black];
1888[label="160.4.95.138;s;111pkt 111fpkt", shape=hexagon, color=black];
1955[label="136.47.119.72;s;213pkt 213fpkt", shape=hexagon, color=black];
1986[label="160.4.95.3;s;273pkt 273fpkt", shape=hexagon, color=black];
2040[label="160.4.95.70;s;88pkt 88fpkt", shape=hexagon, color=black];
2080[label="166.28.145.109;s;98pkt 98fpkt", shape=hexagon, color=black];
2162[label="166.28.178.2;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2244[label="160.4.129.16;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2470[label="160.4.69.65;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2485[label="166.28.190.67;47pkt 47fpkt", shape=pentagon, color=darkviolet];
2506[label="160.4.95.70;128pkt 128fpkt", shape=pentagon, color=darkviolet];
2591[label="166.28.57.86;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2702[label="166.28.145.109;104pkt 104fpkt", shape=pentagon, color=darkviolet];
2735[label="160.4.68.117;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2738[label="166.28.42.118;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2769[label="160.4.129.128;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2818[label="160.4.95.138;134pkt 134fpkt", shape=pentagon, color=darkviolet];
2944[label="166.28.168.168;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2960[label="166.28.168.170;197pkt 197fpkt", shape=pentagon, color=darkviolet];
2986[label="160.4.53.177;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3124[label="160.4.70.210;94pkt 94fpkt", shape=pentagon, color=darkviolet];
3182[label="166.28.107.228;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3206[label="160.4.145.235;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3290[label="166.28.178.2;14pkt 14fpkt", shape=invtriangle, color=brown];
3342[label="160.4.129.16;29pkt 29fpkt", shape=invtriangle, color=brown];
3486[label="160.4.69.65;17pkt 17fpkt", shape=invtriangle, color=brown];
3515[label="160.4.95.70;129pkt 129fpkt", shape=invtriangle, color=brown];
3583[label="166.28.57.86;13pkt 13fpkt", shape=invtriangle, color=brown];
3651[label="166.28.145.109;103pkt 103fpkt", shape=invtriangle, color=brown];
3676[label="160.4.68.117;39pkt 39fpkt", shape=invtriangle, color=brown];
3701[label="160.4.129.128;30pkt 30fpkt", shape=invtriangle, color=brown];
3823[label="166.28.168.166;5pkt 5fpkt", shape=invtriangle, color=brown];
3830[label="166.28.168.168;42pkt 42fpkt", shape=invtriangle, color=brown];
3839[label="166.28.168.170;197pkt 197fpkt", shape=invtriangle, color=brown];
3950[label="160.4.70.210;95pkt 95fpkt", shape=invtriangle, color=brown];
3991[label="166.28.107.228;50pkt 50fpkt", shape=invtriangle, color=brown];
4010[label="160.4.145.235;9pkt 9fpkt", shape=invtriangle, color=brown];
4080[label="160.4.129.16;30pkt 30fpkt", shape=invhouse, color=bisque];
4149[label="160.4.69.65;16pkt 16fpkt", shape=invhouse, color=bisque];
4164[label="160.4.95.70;128pkt 128fpkt", shape=invhouse, color=bisque];
4188[label="166.28.57.86;13pkt 13fpkt", shape=invhouse, color=bisque];
4232[label="160.4.68.117;39pkt 39fpkt", shape=invhouse, color=bisque];
4317[label="166.28.168.170;197pkt 197fpkt", shape=invhouse, color=bisque];
4350[label="166.28.189.194;45pkt 45fpkt", shape=invhouse, color=bisque];
4387[label="166.28.107.228;49pkt 49fpkt", shape=invhouse, color=bisque];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 198.131.94.211:*}[29.7199%]&lt;BR/&gt;{160.4.95.71:80, *:*}[21.318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8564%)&lt;BR/&gt; 25: (1.25052%)&lt;BR/&gt; 53: (0.946525%)&lt;BR/&gt; 0: (0.594169%)&lt;BR/&gt; 38174: (0.331629%)&gt;];
}
272--443[label="1;3pkt 3fpkt"];
272--490[label="1;1pkt 1fpkt"];
272--550[label="0.521739;12pkt 12fpkt"];
272--666[label="1;1pkt 1fpkt"];
272--820[label="0.00628931;1pkt 1fpkt"];
272--1878[label="1;117pkt 117fpkt"];
356--389[label="1;10pkt 10fpkt"];
356--493[label="0.158798;37pkt 37fpkt"];
356--609[label="0.5;2pkt 2fpkt"];
356--795[label="0.00970874;1pkt 1fpkt"];
356--826[label="0.00900901;1pkt 1fpkt"];
356--850[label="0.00854701;1pkt 1fpkt"];
356--852[label="0.00934579;1pkt 1fpkt"];
356--998[label="0.00925926;1pkt 1fpkt"];
356--1003[label="0.0105263;1pkt 1fpkt"];
356--1317[label="0.8;4pkt 4fpkt"];
356--1695[label="0.0178571;3pkt 3fpkt"];
356--1975[label="0.0102041;1pkt 1fpkt"];
423--493[label="0.12963;84pkt 84fpkt"];
423--1439[label="0.666667;4pkt 4fpkt"];
423--1695[label="0.119048;20pkt 20fpkt"];
423--1750[label="1;521pkt 521fpkt"];
443--1878[label="1;3pkt 3fpkt"];
490--1878[label="1;1pkt 1fpkt"];
493--513[label="0.157895;6pkt 6fpkt"];
493--719[label="0.367347;36pkt 36fpkt"];
493--878[label="0.146341;6pkt 6fpkt"];
493--890[label="0.616541;82pkt 82fpkt"];
493--903[label="0.161172;44pkt 44fpkt"];
493--1023[label="0.00555556;1pkt 1fpkt"];
493--1043[label="0.591837;58pkt 58fpkt"];
493--1047[label="0.8875;71pkt 71fpkt"];
493--1103[label="0.756757;84pkt 84fpkt"];
493--1282[label="0.333333;13pkt 13fpkt"];
493--1299[label="0.886076;70pkt 70fpkt"];
493--1695[label="1;168pkt 168fpkt"];
493--1750[label="0.161228;84pkt 84fpkt"];
493--1888[label="0.756757;84pkt 84fpkt"];
493--1916[label="0.1875;6pkt 6fpkt"];
493--1986[label="0.161172;44pkt 44fpkt"];
493--2040[label="0.409091;36pkt 36fpkt"];
493--2080[label="0.591837;58pkt 58fpkt"];
493--2162[label="0.928571;13pkt 13fpkt"];
493--2244[label="0.733333;22pkt 22fpkt"];
493--2470[label="0.0625;1pkt 1fpkt"];
493--2485[label="0.0212766;1pkt 1fpkt"];
493--2506[label="0.28125;36pkt 36fpkt"];
493--2591[label="0.0769231;1pkt 1fpkt"];
493--2702[label="0.557692;58pkt 58fpkt"];
493--2735[label="0.325;13pkt 13fpkt"];
493--2738[label="0.461538;6pkt 6fpkt"];
493--2769[label="0.931034;27pkt 27fpkt"];
493--2818[label="0.626866;84pkt 84fpkt"];
493--2944[label="0.139535;6pkt 6fpkt"];
493--2960[label="0.00507614;1pkt 1fpkt"];
493--2986[label="0.208333;5pkt 5fpkt"];
493--3124[label="0.287234;27pkt 27fpkt"];
493--3182[label="0.836735;41pkt 41fpkt"];
493--3206[label="0.125;1pkt 1fpkt"];
493--3290[label="0.928571;13pkt 13fpkt"];
493--3342[label="0.758621;22pkt 22fpkt"];
493--3486[label="0.0588235;1pkt 1fpkt"];
493--3515[label="0.27907;36pkt 36fpkt"];
493--3583[label="0.0769231;1pkt 1fpkt"];
493--3651[label="0.563107;58pkt 58fpkt"];
493--3676[label="0.333333;13pkt 13fpkt"];
493--3701[label="0.9;27pkt 27fpkt"];
493--3823[label="0.6;3pkt 3fpkt"];
493--3830[label="0.142857;6pkt 6fpkt"];
493--3839[label="0.00507614;1pkt 1fpkt"];
493--3950[label="0.284211;27pkt 27fpkt"];
493--3991[label="0.82;41pkt 41fpkt"];
493--4010[label="0.111111;1pkt 1fpkt"];
493--4080[label="0.733333;22pkt 22fpkt"];
493--4149[label="0.0625;1pkt 1fpkt"];
493--4164[label="0.28125;36pkt 36fpkt"];
493--4188[label="0.0769231;1pkt 1fpkt"];
493--4232[label="0.333333;13pkt 13fpkt"];
493--4317[label="0.00507614;1pkt 1fpkt"];
493--4350[label="0.0444444;2pkt 2fpkt"];
493--4387[label="0.836735;41pkt 41fpkt"];
550--788[label="0.130435;3pkt 3fpkt"];
550--903[label="0.304348;7pkt 7fpkt"];
550--1878[label="0.347826;8pkt 8fpkt"];
550--1942[label="0.0434783;1pkt 1fpkt"];
550--1955[label="0.130435;3pkt 3fpkt"];
550--1986[label="0.304348;7pkt 7fpkt"];
550--2257[label="0.0434783;1pkt 1fpkt"];
550--3351[label="0.0434783;1pkt 1fpkt"];
666--1878[label="1;1pkt 1fpkt"];
719--726[label="0.8;8pkt 8fpkt"];
719--1634[label="1;2pkt 2fpkt"];
719--1695[label="0.122449;12pkt 12fpkt"];
719--2040[label="1;88pkt 88fpkt"];
719--2506[label="0.989796;97pkt 97fpkt"];
719--3515[label="1;98pkt 98fpkt"];
719--4164[label="0.989796;97pkt 97fpkt"];
726--2040[label="0.3;3pkt 3fpkt"];
726--2506[label="0.8;8pkt 8fpkt"];
726--3515[label="0.8;8pkt 8fpkt"];
726--4164[label="0.8;8pkt 8fpkt"];
788--1955[label="1;213pkt 213fpkt"];
878--1053[label="0.407407;11pkt 11fpkt"];
878--1695[label="0.146341;6pkt 6fpkt"];
878--2944[label="1;41pkt 41fpkt"];
878--3830[label="0.97561;40pkt 40fpkt"];
890--1497[label="0.0740741;2pkt 2fpkt"];
890--1695[label="0.105263;14pkt 14fpkt"];
903--1439[label="0.333333;2pkt 2fpkt"];
903--1695[label="0.047619;8pkt 8fpkt"];
903--1986[label="1;273pkt 273fpkt"];
1023--1053[label="0.259259;7pkt 7fpkt"];
1023--1317[label="0.2;1pkt 1fpkt"];
1023--1695[label="0.00595238;1pkt 1fpkt"];
1023--2960[label="1;180pkt 180fpkt"];
1023--3839[label="1;180pkt 180fpkt"];
1023--4317[label="1;180pkt 180fpkt"];
1043--1695[label="0.122449;12pkt 12fpkt"];
1043--2080[label="1;98pkt 98fpkt"];
1043--2702[label="1;98pkt 98fpkt"];
1043--3651[label="0.989796;97pkt 97fpkt"];
1047--1695[label="0.1375;11pkt 11fpkt"];
1053--2944[label="0.407407;11pkt 11fpkt"];
1053--2960[label="0.259259;7pkt 7fpkt"];
1053--3830[label="0.407407;11pkt 11fpkt"];
1053--3839[label="0.259259;7pkt 7fpkt"];
1053--4317[label="0.259259;7pkt 7fpkt"];
1103--1695[label="0.0990991;11pkt 11fpkt"];
1103--1888[label="1;111pkt 111fpkt"];
1103--2818[label="0.990991;110pkt 110fpkt"];
1282--1695[label="0.230769;9pkt 9fpkt"];
1282--2735[label="1;39pkt 39fpkt"];
1282--3676[label="0.974359;38pkt 38fpkt"];
1282--4232[label="0.974359;38pkt 38fpkt"];
1299--1695[label="0.0126582;1pkt 1fpkt"];
1317--2960[label="0.2;1pkt 1fpkt"];
1317--3839[label="0.2;1pkt 1fpkt"];
1317--4317[label="0.2;1pkt 1fpkt"];
1439--1750[label="0.666667;4pkt 4fpkt"];
1439--1986[label="0.333333;2pkt 2fpkt"];
1634--2040[label="1;2pkt 2fpkt"];
1634--2506[label="1;2pkt 2fpkt"];
1634--3515[label="1;2pkt 2fpkt"];
1634--4164[label="1;2pkt 2fpkt"];
1695--1750[label="0.119048;20pkt 20fpkt"];
1695--1888[label="0.0990991;11pkt 11fpkt"];
1695--1916[label="0.03125;1pkt 1fpkt"];
1695--1986[label="0.047619;8pkt 8fpkt"];
1695--2040[label="0.136364;12pkt 12fpkt"];
1695--2080[label="0.122449;12pkt 12fpkt"];
1695--2162[label="0.285714;4pkt 4fpkt"];
1695--2244[label="0.1;3pkt 3fpkt"];
1695--2506[label="0.09375;12pkt 12fpkt"];
1695--2702[label="0.115385;12pkt 12fpkt"];
1695--2735[label="0.225;9pkt 9fpkt"];
1695--2738[label="0.461538;6pkt 6fpkt"];
1695--2769[label="0.103448;3pkt 3fpkt"];
1695--2818[label="0.0820896;11pkt 11fpkt"];
1695--2944[label="0.139535;6pkt 6fpkt"];
1695--2960[label="0.00595238;1pkt 1fpkt"];
1695--2986[label="0.208333;5pkt 5fpkt"];
1695--3182[label="0.0408163;2pkt 2fpkt"];
1695--3290[label="0.285714;4pkt 4fpkt"];
1695--3342[label="0.103448;3pkt 3fpkt"];
1695--3515[label="0.0930233;12pkt 12fpkt"];
1695--3651[label="0.116505;12pkt 12fpkt"];
1695--3676[label="0.230769;9pkt 9fpkt"];
1695--3701[label="0.1;3pkt 3fpkt"];
1695--3823[label="0.6;3pkt 3fpkt"];
1695--3830[label="0.142857;6pkt 6fpkt"];
1695--3839[label="0.00595238;1pkt 1fpkt"];
1695--3991[label="0.04;2pkt 2fpkt"];
1695--4080[label="0.1;3pkt 3fpkt"];
1695--4164[label="0.09375;12pkt 12fpkt"];
1695--4232[label="0.230769;9pkt 9fpkt"];
1695--4317[label="0.00595238;1pkt 1fpkt"];
1695--4387[label="0.0408163;2pkt 2fpkt"];
1888--2818[label="0.990991;110pkt 110fpkt"];
2040--2506[label="0.988636;87pkt 87fpkt"];
2040--3515[label="1;88pkt 88fpkt"];
2040--4164[label="0.988636;87pkt 87fpkt"];
2080--2702[label="1;98pkt 98fpkt"];
2080--3651[label="0.989796;97pkt 97fpkt"];
2162--3290[label="1;14pkt 14fpkt"];
2244--3342[label="1;29pkt 29fpkt"];
2244--4080[label="1;30pkt 30fpkt"];
2470--3486[label="1;16pkt 16fpkt"];
2470--4149[label="1;16pkt 16fpkt"];
2506--3515[label="1;128pkt 128fpkt"];
2506--4164[label="1;128pkt 128fpkt"];
2591--3583[label="1;13pkt 13fpkt"];
2591--4188[label="1;13pkt 13fpkt"];
2702--3651[label="1;103pkt 103fpkt"];
2735--3676[label="1;39pkt 39fpkt"];
2735--4232[label="1;39pkt 39fpkt"];
2769--3701[label="1;29pkt 29fpkt"];
2944--3830[label="1;42pkt 42fpkt"];
2960--3839[label="1;197pkt 197fpkt"];
2960--4317[label="1;197pkt 197fpkt"];
3124--3950[label="1;94pkt 94fpkt"];
3182--3991[label="1;49pkt 49fpkt"];
3182--4387[label="1;49pkt 49fpkt"];
3206--4010[label="1;8pkt 8fpkt"];
3342--4080[label="1;29pkt 29fpkt"];
3486--4149[label="1;16pkt 16fpkt"];
3515--4164[label="1;128pkt 128fpkt"];
3583--4188[label="1;13pkt 13fpkt"];
3676--4232[label="1;39pkt 39fpkt"];
3839--4317[label="1;197pkt 197fpkt"];
3991--4387[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="160.4.95.71" src_port="80"/>
      <filter dst_ip="198.131.94.211" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.48.97.172"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
1100[label="193.114.40.109;d;101pkt 101fpkt", shape=diamond, color=yellow];
1848[label="193.114.40.109;d;82pkt 82fpkt", shape=hexagon, color=black];
2969[label="143.30.189.172;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2977[label="143.30.189.174;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3847[label="143.30.189.172;27pkt 27fpkt", shape=invtriangle, color=brown];
4321[label="143.30.189.172;27pkt 27fpkt", shape=invhouse, color=bisque];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.30.189.174:25, 193.114.40.109:*}[28.7129%]&lt;BR/&gt;{143.30.189.172:25, 193.114.40.109:*}[27.7228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.1164%)&lt;BR/&gt; 53: (1.19863%)&lt;BR/&gt; 65534: (0.856164%)&lt;BR/&gt; 58146: (0.856164%)&lt;BR/&gt; 58144: (0.856164%)&gt;];
}
1100--1465[label="0.0166667;1pkt 1fpkt"];
1100--1848[label="1;82pkt 82fpkt"];
1100--2135[label="0.00990099;1pkt 1fpkt"];
1100--2833[label="0.0555556;1pkt 1fpkt"];
1100--2924[label="0.027027;1pkt 1fpkt"];
1100--2969[label="1;27pkt 27fpkt"];
1100--2977[label="1;28pkt 28fpkt"];
1100--3847[label="1;27pkt 27fpkt"];
1100--4321[label="1;27pkt 27fpkt"];
1848--2135[label="0.0121951;1pkt 1fpkt"];
1848--2924[label="0.027027;1pkt 1fpkt"];
1848--2969[label="1;27pkt 27fpkt"];
1848--2977[label="1;28pkt 28fpkt"];
1848--3847[label="1;27pkt 27fpkt"];
1848--4321[label="1;27pkt 27fpkt"];
2969--3847[label="1;27pkt 27fpkt"];
2969--4321[label="1;27pkt 27fpkt"];
3847--4321[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.40.109" src_ip="143.30.189.174" src_port="25"/>
      <filter dst_ip="193.114.40.109" src_ip="143.30.189.172" src_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.114.46.174"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.147.2.175"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06733,1.63764,001,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
77[label="36.86.192.178s;199pkt 199fpkt", shape=rectangle, color=red];
2992[label="36.86.192.178;199pkt 199fpkt", shape=pentagon, color=darkviolet];
3863[label="36.86.192.178;198pkt 198fpkt", shape=invtriangle, color=brown];
4332[label="36.86.192.178;199pkt 199fpkt", shape=invhouse, color=bisque];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.86.192.178:*, *:9898}[69.8492%]&lt;BR/&gt;{36.86.192.178:*, *:5554}[30.1508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (34.9686%)&lt;BR/&gt; 5554: (15.0314%)&lt;BR/&gt; 4010: (0.251572%)&lt;BR/&gt; 4009: (0.251572%)&lt;BR/&gt; 4008: (0.251572%)&gt;];
}
77--2992[label="1;199pkt 199fpkt"];
77--3863[label="1;198pkt 198fpkt"];
77--4332[label="1;199pkt 199fpkt"];
2992--3863[label="1;198pkt 198fpkt"];
2992--4332[label="1;199pkt 199fpkt"];
3863--4332[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="36.86.192.178"/>
      <filter dst_port="5554" src_ip="36.86.192.178"/>
    </slice>
    <from sec="1136092189" usec="0"/>
    <to sec="1136092191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.4.149.182"/>
    </slice>
    <from sec="1136091623" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.69.40.184"/>
    </slice>
    <from sec="1136091625" usec="0"/>
    <to sec="1136092492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
600[label="160.4.238.97;s;5752pkt 5752fpkt", shape=diamond, color=yellow];
1569[label="166.28.57.48;s;121pkt 121fpkt", shape=diamond, color=yellow];
2059[label="160.4.238.97;s;5752pkt 5752fpkt", shape=hexagon, color=black];
2395[label="166.28.57.48;130pkt 130fpkt", shape=pentagon, color=darkviolet];
2648[label="160.4.238.97;5932pkt 5932fpkt", shape=pentagon, color=darkviolet];
3618[label="160.4.238.97;5932pkt 5932fpkt", shape=invtriangle, color=brown];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.238.97:53, *:32769}[37.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.0161%)&lt;BR/&gt; 32769: (19.0609%)&lt;BR/&gt; 32775: (3.91634%)&lt;BR/&gt; 32771: (2.42601%)&lt;BR/&gt; 32772: (1.68085%)&gt;];
}
600--1234[label="0.00324675;1pkt 1fpkt"];
600--1497[label="0.037037;1pkt 1fpkt"];
600--2059[label="1;5752pkt 5752fpkt"];
600--2135[label="0.0498957;287pkt 287fpkt"];
600--2648[label="0.999826;5751pkt 5751fpkt"];
600--3618[label="0.999826;5751pkt 5751fpkt"];
1569--2395[label="0.991736;120pkt 120fpkt"];
2059--2135[label="0.0498957;287pkt 287fpkt"];
2059--2648[label="0.999826;5751pkt 5751fpkt"];
2059--3618[label="0.999826;5751pkt 5751fpkt"];
2648--3618[label="1;5932pkt 5932fpkt"];
</description>
    <slice>
      <filter dst_port="32769" src_ip="160.4.238.97" src_port="53"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.230.66.185"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.42.10.186"/>
    </slice>
    <from sec="1136091614" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
1021[label="200.165.206.187;s;732pkt 732fpkt", shape=diamond, color=yellow];
1910[label="200.165.206.187;s;732pkt 732fpkt", shape=hexagon, color=black];
3022[label="200.165.206.187;786pkt 786fpkt", shape=pentagon, color=darkviolet];
3884[label="200.165.206.187;785pkt 785fpkt", shape=invtriangle, color=brown];
4341[label="200.165.206.187;786pkt 786fpkt", shape=invhouse, color=bisque];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.165.206.187:53, *:*}[99.4911%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.6825%)&lt;BR/&gt; 32768: (2.49935%)&lt;BR/&gt; 32769: (1.15153%)&lt;BR/&gt; 32771: (0.457995%)&lt;BR/&gt; 32773: (0.431824%)&gt;];
}
1021--1247[label="0.00136612;1pkt 1fpkt"];
1021--1910[label="1;732pkt 732fpkt"];
1021--2135[label="0.0956284;70pkt 70fpkt"];
1021--3022[label="1;732pkt 732fpkt"];
1021--3884[label="0.998634;731pkt 731fpkt"];
1021--4341[label="1;732pkt 732fpkt"];
1910--2135[label="0.0956284;70pkt 70fpkt"];
1910--3022[label="1;732pkt 732fpkt"];
1910--3884[label="0.998634;731pkt 731fpkt"];
1910--4341[label="1;732pkt 732fpkt"];
3022--3884[label="1;785pkt 785fpkt"];
3022--4341[label="1;786pkt 786fpkt"];
3884--4341[label="1;785pkt 785fpkt"];
</description>
    <slice>
      <filter src_ip="200.165.206.187" src_port="53"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
3024[label="215.35.23.188;351pkt 351fpkt", shape=pentagon, color=darkviolet];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.35.23.188:38870, *:*}[60.114%]&lt;BR/&gt;{215.35.23.188:39631, *:*}[39.886%]&lt;BR/&gt;{215.35.23.188:*, *:4257}[21.9373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38870: (30.057%)&lt;BR/&gt; 39631: (19.943%)&lt;BR/&gt; 4257: (10.9687%)&lt;BR/&gt; 1032: (9.25926%)&lt;BR/&gt; 1033: (7.69231%)&gt;];
}
</description>
    <slice>
      <filter src_ip="215.35.23.188" src_port="38870"/>
      <filter src_ip="215.35.23.188" src_port="39631"/>
      <filter dst_port="4257" src_ip="215.35.23.188"/>
    </slice>
    <from sec="1136091816" usec="0"/>
    <to sec="1136091957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.6.173.189"/>
    </slice>
    <from sec="1136091936" usec="0"/>
    <to sec="1136091983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.229.64.192"/>
    </slice>
    <from sec="1136092373" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.145.192"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.29.6.193"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.196.117.193"/>
    </slice>
    <from sec="1136092078" usec="0"/>
    <to sec="1136092150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.184.208.193"/>
    </slice>
    <from sec="1136091630" usec="0"/>
    <to sec="1136092482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.89.26.194"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.146.194"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.50.42.195"/>
    </slice>
    <from sec="1136092292" usec="0"/>
    <to sec="1136092479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.47.174.196"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.103.18.197"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.55.148.198"/>
    </slice>
    <from sec="1136092318" usec="0"/>
    <to sec="1136092348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.204.198"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.160.132.201"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
383[label="57.123.69.141;s;61pkt 61fpkt", shape=diamond, color=yellow];
546[label="193.114.33.95;d;141pkt 141fpkt", shape=diamond, color=yellow];
547[label="213.206.184.203;s;2pkt 2fpkt", shape=diamond, color=yellow];
1090[label="84.183.232.28;s;79pkt 79fpkt", shape=diamond, color=yellow];
1950[label="84.183.232.28;s;68pkt 68fpkt", shape=hexagon, color=black];
2827[label="57.123.69.141;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3094[label="213.206.184.203;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3739[label="57.123.69.141;61pkt 61fpkt", shape=invtriangle, color=brown];
4267[label="57.123.69.141;60pkt 60fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.183.232.28:*, 193.114.33.95:21}[39.2405%]&lt;BR/&gt;{57.123.69.141:*, 193.114.33.95:*}[38.6076%]&lt;BR/&gt;{*:*, *:80}[24.6835%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.8127%)&lt;BR/&gt; 80: (12.2659%)&lt;BR/&gt; 20: (0.561798%)&lt;BR/&gt; 63733: (0.468165%)&lt;BR/&gt; 62541: (0.468165%)&gt;];
}
383--546[label="1;61pkt 61fpkt"];
383--2827[label="1;60pkt 60fpkt"];
383--3739[label="1;61pkt 61fpkt"];
383--4267[label="1;60pkt 60fpkt"];
546--547[label="1;2pkt 2fpkt"];
546--1090[label="0.78481;62pkt 62fpkt"];
546--1950[label="0.764706;52pkt 52fpkt"];
546--2827[label="1;60pkt 60fpkt"];
546--3094[label="1;2pkt 2fpkt"];
546--3739[label="1;61pkt 61fpkt"];
546--4267[label="1;60pkt 60fpkt"];
547--3094[label="1;2pkt 2fpkt"];
1090--1658[label="0.21519;17pkt 17fpkt"];
1090--1950[label="1;68pkt 68fpkt"];
1090--2100[label="0.21519;17pkt 17fpkt"];
1090--2133[label="0.0253165;2pkt 2fpkt"];
1090--2137[label="0.0253165;2pkt 2fpkt"];
1950--2100[label="0.235294;16pkt 16fpkt"];
1950--2133[label="0.0294118;2pkt 2fpkt"];
1950--2137[label="0.0294118;2pkt 2fpkt"];
2827--3739[label="1;60pkt 60fpkt"];
2827--4267[label="1;60pkt 60fpkt"];
3739--4267[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="193.114.33.95" src_ip="57.123.69.141"/>
      <filter dst_ip="193.114.33.95" dst_port="21" src_ip="84.183.232.28"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.126.0.205"/>
    </slice>
    <from sec="1136091660" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.47.88.206"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,004,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.199.93.208"/>
    </slice>
    <from sec="1136092104" usec="0"/>
    <to sec="1136092235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.53.150.209"/>
    </slice>
    <from sec="1136091613" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.131.56.214"/>
    </slice>
    <from sec="1136091616" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.68.81.214"/>
    </slice>
    <from sec="1136091610" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.128.129.215"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.1.142.215"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.141.52.217"/>
    </slice>
    <from sec="1136092154" usec="0"/>
    <to sec="1136092267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.939844,1.69514,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
82[label="208.94.235.219s;125pkt 125fpkt", shape=rectangle, color=red];
3156[label="208.94.235.219;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.94.235.219:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 29219: (0.26738%)&lt;BR/&gt; 29212: (0.26738%)&lt;BR/&gt; 29205: (0.26738%)&lt;BR/&gt; 29198: (0.26738%)&gt;];
}
82--3156[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.94.235.219"/>
    </slice>
    <from sec="1136092326" usec="0"/>
    <to sec="1136092358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.126.89.221"/>
    </slice>
    <from sec="1136091607" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.21.111.222"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.28.145.223"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.165.243.223"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.128.129.224"/>
    </slice>
    <from sec="1136092028" usec="0"/>
    <to sec="1136092049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.153.124.226"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136091624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.59.227"/>
    </slice>
    <from sec="1136091850" usec="0"/>
    <to sec="1136092119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.132.192.233"/>
    </slice>
    <from sec="1136092237" usec="0"/>
    <to sec="1136092349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
361[label="160.4.111.234;s;3897pkt 3897fpkt", shape=diamond, color=yellow];
3200[label="160.4.111.234;4132pkt 4132fpkt", shape=pentagon, color=darkviolet];
4005[label="160.4.111.234;4132pkt 4132fpkt", shape=invtriangle, color=brown];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.111.234:4151, *:*}[99.0322%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4151: (49.5066%)&lt;BR/&gt; 443: (0.38237%)&lt;BR/&gt; 54045: (0.156237%)&lt;BR/&gt; 80: (0.131568%)&lt;BR/&gt; 1132: (0.0945646%)&gt;];
}
361--3200[label="0.999743;3896pkt 3896fpkt"];
361--4005[label="0.999743;3896pkt 3896fpkt"];
3200--4005[label="1;4132pkt 4132fpkt"];
</description>
    <slice>
      <filter src_ip="160.4.111.234" src_port="4151"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.139.204.234"/>
    </slice>
    <from sec="1136092286" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.22.207.234"/>
    </slice>
    <from sec="1136091613" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.34.88.235"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.252.185.235"/>
    </slice>
    <from sec="1136091625" usec="0"/>
    <to sec="1136092477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.146.66.236"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.184.235.237"/>
    </slice>
    <from sec="1136092102" usec="0"/>
    <to sec="1136092106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
1435[label="208.90.74.239;s;254pkt 254fpkt", shape=diamond, color=yellow];
3221[label="208.90.74.239;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.90.74.239:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4561: (0.197239%)&lt;BR/&gt; 4555: (0.197239%)&lt;BR/&gt; 4549: (0.197239%)&lt;BR/&gt; 4543: (0.197239%)&gt;];
}
1435--3221[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.90.74.239"/>
    </slice>
    <from sec="1136092131" usec="0"/>
    <to sec="1136092239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.44.193.240"/>
    </slice>
    <from sec="1136091951" usec="0"/>
    <to sec="1136092482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.164.235.240"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136091906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.196.16.243"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.26.119.245"/>
    </slice>
    <from sec="1136091618" usec="0"/>
    <to sec="1136092487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.196.74.247"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136091834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576992,1.64162,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
1463[label="143.28.132.247;s;6pkt 6fpkt", shape=diamond, color=yellow];
3250[label="143.28.132.247;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.132.247:1059, *:53}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1059: (41.6667%)&lt;BR/&gt; 53: (41.6667%)&lt;BR/&gt; 0: (16.6667%)&gt;];
}
1463--3250[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="143.28.132.247" src_port="1059"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.36.248"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859613,1.63845,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
230[label="143.28.148.184;s;55pkt 55fpkt", shape=diamond, color=yellow];
413[label="143.28.183.80;s;36pkt 36fpkt", shape=diamond, color=yellow];
566[label="61.102.213.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
610[label="34.205.154.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
738[label="219.54.181.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
740[label="62.54.61.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
847[label="210.66.11.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
956[label="61.68.109.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="196.47.135.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
1019[label="36.10.183.53;d;3pkt 3fpkt", shape=diamond, color=yellow];
1176[label="60.176.73.196;d;2pkt 2fpkt", shape=diamond, color=yellow];
1245[label="209.101.218.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
1291[label="221.216.173.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
1396[label="192.68.23.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1486[label="192.242.58.248;s;100pkt 100fpkt", shape=diamond, color=yellow];
1493[label="194.49.77.19;d;3pkt 3fpkt", shape=diamond, color=yellow];
1586[label="201.2.67.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
1801[label="34.205.154.208;d;2pkt 2fpkt", shape=hexagon, color=black];
1867[label="60.176.73.196;d;2pkt 2fpkt", shape=hexagon, color=black];
1953[label="143.28.183.80;s;33pkt 33fpkt", shape=hexagon, color=black];
2051[label="219.54.181.37;d;2pkt 2fpkt", shape=hexagon, color=black];
3254[label="192.242.58.248;119pkt 119fpkt", shape=pentagon, color=darkviolet];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.58.248:0, *:0}[56.6667%]&lt;BR/&gt;{143.28.148.184:21, *:*}[26.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (59.9462%)&lt;BR/&gt; 21: (10.2151%)&lt;BR/&gt; 23: (9.81183%)&lt;BR/&gt; 65251: (0.403226%)&lt;BR/&gt; 62433: (0.403226%)&gt;];
}
230--566[label="1;1pkt 1fpkt"];
230--610[label="1;2pkt 2fpkt"];
230--738[label="0.5;1pkt 1fpkt"];
230--740[label="1;1pkt 1fpkt"];
230--956[label="1;1pkt 1fpkt"];
230--1019[label="1;3pkt 3fpkt"];
230--1176[label="1;2pkt 2fpkt"];
230--1396[label="1;1pkt 1fpkt"];
230--1493[label="1;3pkt 3fpkt"];
230--1586[label="0.5;1pkt 1fpkt"];
230--1801[label="1;2pkt 2fpkt"];
230--1867[label="1;2pkt 2fpkt"];
230--2051[label="0.5;1pkt 1fpkt"];
413--847[label="1;1pkt 1fpkt"];
413--971[label="1;1pkt 1fpkt"];
413--1245[label="0.5;1pkt 1fpkt"];
413--1291[label="1;1pkt 1fpkt"];
413--1953[label="1;33pkt 33fpkt"];
610--1801[label="1;2pkt 2fpkt"];
738--1486[label="0.5;1pkt 1fpkt"];
738--2051[label="1;2pkt 2fpkt"];
738--3254[label="0.5;1pkt 1fpkt"];
847--1953[label="1;1pkt 1fpkt"];
971--1953[label="1;1pkt 1fpkt"];
1176--1867[label="1;2pkt 2fpkt"];
1245--1486[label="0.5;1pkt 1fpkt"];
1245--1953[label="0.5;1pkt 1fpkt"];
1245--3254[label="0.5;1pkt 1fpkt"];
1291--1953[label="1;1pkt 1fpkt"];
1486--1586[label="0.5;1pkt 1fpkt"];
1486--2051[label="0.5;1pkt 1fpkt"];
1486--3254[label="1;100pkt 100fpkt"];
1586--3254[label="0.5;1pkt 1fpkt"];
2051--3254[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="143.28.148.184" src_port="21"/>
      <filter src_ip="192.242.58.248"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.193.252.249"/>
    </slice>
    <from sec="1136091652" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.8.222.250"/>
    </slice>
    <from sec="1136091694" usec="0"/>
    <to sec="1136092327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.89.55.251"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.139.36.253"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.142.42.253"/>
    </slice>
    <from sec="1136092284" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.93.103.253"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.445848,1.68017,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.82.89.255"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136091717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.32.152.0"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.72.156.0"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
2165[label="143.28.229.2;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3291[label="143.28.229.2;55pkt 55fpkt", shape=invtriangle, color=brown];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.229.2:25, *:*}[98.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0909%)&lt;BR/&gt; 0: (1.81818%)&lt;BR/&gt; 64580: (0.909091%)&lt;BR/&gt; 64490: (0.909091%)&lt;BR/&gt; 60554: (0.909091%)&gt;];
}
2165--3291[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="143.28.229.2" src_port="25"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
2171[label="196.152.78.3;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3295[label="196.152.78.3;13pkt 13fpkt", shape=invtriangle, color=brown];
4057[label="196.152.78.3;12pkt 12fpkt", shape=invhouse, color=bisque];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.152.78.3:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2171--3295[label="1;13pkt 13fpkt"];
2171--4057[label="1;12pkt 12fpkt"];
3295--4057[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="196.152.78.3"/>
    </slice>
    <from sec="1136091885" usec="0"/>
    <to sec="1136092450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
195[label="178.142.84.217;d;1197pkt 1197fpkt", shape=diamond, color=yellow];
196[label="214.122.219.141;s;5pkt 5fpkt", shape=diamond, color=yellow];
528[label="192.97.69.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
1211[label="80.144.0.76;s;876pkt 876fpkt", shape=diamond, color=yellow];
1790[label="178.142.84.217;d;259pkt 259fpkt", shape=hexagon, color=black];
2173[label="80.179.114.3;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2202[label="80.162.40.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2831[label="214.122.219.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3297[label="80.179.114.3;7pkt 7fpkt", shape=invtriangle, color=brown];
3743[label="214.122.219.141;4pkt 4fpkt", shape=invtriangle, color=brown];
4269[label="214.122.219.141;4pkt 4fpkt", shape=invhouse, color=bisque];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.144.0.76:*, 178.142.84.217:*}[88.137%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (11.4751%)&lt;BR/&gt; 80: (11.2003%)&lt;BR/&gt; 53: (4.18428%)&lt;BR/&gt; 3128: (3.88842%)&lt;BR/&gt; 7700: (3.31784%)&gt;];
}
195--196[label="1;5pkt 5fpkt"];
195--528[label="1;1pkt 1fpkt"];
195--1211[label="1;876pkt 876fpkt"];
195--1790[label="1;259pkt 259fpkt"];
195--2135[label="0.00835422;10pkt 10fpkt"];
195--2173[label="1;7pkt 7fpkt"];
195--2202[label="1;1pkt 1fpkt"];
195--2831[label="1;5pkt 5fpkt"];
195--3297[label="1;7pkt 7fpkt"];
195--3743[label="1;4pkt 4fpkt"];
195--4269[label="1;4pkt 4fpkt"];
196--1790[label="1;5pkt 5fpkt"];
196--2831[label="1;5pkt 5fpkt"];
196--3743[label="1;4pkt 4fpkt"];
196--4269[label="1;4pkt 4fpkt"];
528--1790[label="1;1pkt 1fpkt"];
1211--1790[label="0.501931;130pkt 130fpkt"];
1211--2135[label="0.0114155;10pkt 10fpkt"];
1790--2135[label="0.00772201;2pkt 2fpkt"];
1790--2831[label="1;5pkt 5fpkt"];
1790--3743[label="1;4pkt 4fpkt"];
1790--4269[label="1;4pkt 4fpkt"];
2173--3297[label="1;7pkt 7fpkt"];
2831--3743[label="1;4pkt 4fpkt"];
2831--4269[label="1;4pkt 4fpkt"];
3743--4269[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.84.217" src_ip="80.144.0.76"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2179[label="136.47.234.4;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3300[label="136.47.234.4;43pkt 43fpkt", shape=invtriangle, color=brown];
4061[label="136.47.234.4;43pkt 43fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.234.4:*, 217.204.99.31:80}[44.186%]&lt;BR/&gt;{136.47.234.4:*, 217.205.130.36:80}[41.8605%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56893: (1.16279%)&lt;BR/&gt; 56891: (1.16279%)&lt;BR/&gt; 56889: (1.16279%)&lt;BR/&gt; 56888: (1.16279%)&gt;];
}
2179--3300[label="1;43pkt 43fpkt"];
2179--4061[label="1;43pkt 43fpkt"];
3300--4061[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="217.204.99.31" dst_port="80" src_ip="136.47.234.4"/>
      <filter dst_ip="217.205.130.36" dst_port="80" src_ip="136.47.234.4"/>
    </slice>
    <from sec="1136091669" usec="0"/>
    <to sec="1136091896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
2181[label="214.119.99.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3302[label="214.119.99.5;3pkt 3fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.99.5:29572, 166.28.39.70:80}[33.3333%]&lt;BR/&gt;{214.119.99.5:29754, 166.28.39.70:80}[33.3333%]&lt;BR/&gt;{214.119.99.5:29756, 166.28.39.70:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29756: (20%)&lt;BR/&gt; 29754: (20%)&lt;BR/&gt; 29572: (10%)&gt;];
}
2181--3302[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.39.70" dst_port="80" src_ip="214.119.99.5" src_port="29756"/>
      <filter dst_ip="166.28.39.70" dst_port="80" src_ip="214.119.99.5" src_port="29754"/>
      <filter dst_ip="166.28.39.70" dst_port="80" src_ip="214.119.99.5" src_port="29572"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
2183[label="213.81.19.6;220pkt 220fpkt", shape=pentagon, color=darkviolet];
3303[label="213.81.19.6;219pkt 219fpkt", shape=invtriangle, color=brown];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.81.19.6:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4081: (9.5672%)&lt;BR/&gt; 1032: (7.51708%)&lt;BR/&gt; 1031: (6.37813%)&lt;BR/&gt; 2: (6.37813%)&lt;BR/&gt; 1028: (6.15034%)&gt;];
}
2183--3303[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter src_ip="213.81.19.6"/>
    </slice>
    <from sec="1136091730" usec="0"/>
    <to sec="1136091731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.142.48.8"/>
    </slice>
    <from sec="1136092407" usec="0"/>
    <to sec="1136092462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
2206[label="166.28.116.9;171pkt 171fpkt", shape=pentagon, color=darkviolet];
3319[label="166.28.116.9;170pkt 170fpkt", shape=invtriangle, color=brown];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.116.9:*, *:25}[79.5322%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.7361%)&lt;BR/&gt; 53: (9.97067%)&lt;BR/&gt; 64553: (0.58651%)&lt;BR/&gt; 12804: (0.58651%)&lt;BR/&gt; 12802: (0.58651%)&gt;];
}
2206--3319[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.116.9"/>
    </slice>
    <from sec="1136091616" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
2212[label="193.114.44.10;84pkt 84fpkt", shape=pentagon, color=darkviolet];
3323[label="193.114.44.10;84pkt 84fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.44.10:20190, *:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20190: (46.4286%)&lt;BR/&gt; 62481: (1.78571%)&lt;BR/&gt; 32510: (1.19048%)&lt;BR/&gt; 22223: (1.19048%)&lt;BR/&gt; 1633: (1.19048%)&gt;];
}
2212--3323[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.44.10" src_port="20190"/>
    </slice>
    <from sec="1136091608" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.39.83.10"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
2216[label="57.113.178.10;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3325[label="57.113.178.10;5pkt 5fpkt", shape=invtriangle, color=brown];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.113.178.10:0, 160.128.23.3:0}[20%]&lt;BR/&gt;{57.113.178.10:80, 160.128.115.135:59786}[20%]&lt;BR/&gt;{57.113.178.10:80, 160.128.115.135:59787}[20%]&lt;BR/&gt;{57.113.178.10:80, 160.128.115.135:59788}[20%]&lt;BR/&gt;{57.113.178.10:80, 160.128.115.135:59789}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 59789: (10%)&lt;BR/&gt; 59788: (10%)&lt;BR/&gt; 59787: (10%)&gt;];
}
2216--3325[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.128.115.135" dst_port="59789" src_ip="57.113.178.10" src_port="80"/>
      <filter dst_ip="160.128.115.135" dst_port="59788" src_ip="57.113.178.10" src_port="80"/>
      <filter dst_ip="160.128.115.135" dst_port="59787" src_ip="57.113.178.10" src_port="80"/>
      <filter dst_ip="160.128.115.135" dst_port="59786" src_ip="57.113.178.10" src_port="80"/>
      <filter dst_ip="160.128.23.3" src_ip="57.113.178.10"/>
    </slice>
    <from sec="1136091987" usec="0"/>
    <to sec="1136092017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
1278[label="160.128.23.11;s;213pkt 213fpkt", shape=diamond, color=yellow];
2219[label="160.128.23.11;283pkt 283fpkt", shape=pentagon, color=darkviolet];
3327[label="160.128.23.11;282pkt 282fpkt", shape=invtriangle, color=brown];
4074[label="160.128.23.11;283pkt 283fpkt", shape=invhouse, color=bisque];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.23.11:61215, *:53}[53.5211%]&lt;BR/&gt;{160.128.23.11:53, *:*}[23.2394%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.2083%)&lt;BR/&gt; 61215: (27.5683%)&lt;BR/&gt; 25: (10.9802%)&lt;BR/&gt; 32769: (0.377003%)&lt;BR/&gt; 62649: (0.188501%)&gt;];
}
1278--1347[label="0.0126582;1pkt 1fpkt"];
1278--1479[label="0.00684932;1pkt 1fpkt"];
1278--1490[label="0.0123457;1pkt 1fpkt"];
1278--1700[label="0.0113636;1pkt 1fpkt"];
1278--1767[label="0.0144928;1pkt 1fpkt"];
1278--1906[label="0.0121951;1pkt 1fpkt"];
1278--1975[label="0.0102041;1pkt 1fpkt"];
1278--2135[label="0.028169;6pkt 6fpkt"];
1278--2219[label="0.995305;212pkt 212fpkt"];
1278--3327[label="0.99061;211pkt 211fpkt"];
1278--4074[label="0.995305;212pkt 212fpkt"];
2219--3327[label="1;282pkt 282fpkt"];
2219--4074[label="1;283pkt 283fpkt"];
3327--4074[label="1;282pkt 282fpkt"];
</description>
    <slice>
      <filter src_ip="160.128.23.11" src_port="53"/>
      <filter dst_port="53" src_ip="160.128.23.11" src_port="61215"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
2222[label="178.203.74.11;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3328[label="178.203.74.11;51pkt 51fpkt", shape=invtriangle, color=brown];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{178.203.74.11:1773, *:53}[43.1373%]&lt;BR/&gt;{178.203.74.11:53, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.1961%)&lt;BR/&gt; 1773: (21.5686%)&lt;BR/&gt; 25: (10.7843%)&lt;BR/&gt; 5353: (1.96078%)&lt;BR/&gt; 63282: (0.980392%)&gt;];
}
2222--3328[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="178.203.74.11" src_port="53"/>
      <filter dst_port="53" src_ip="178.203.74.11" src_port="1773"/>
    </slice>
    <from sec="1136091643" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2224[label="166.29.234.11;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3329[label="166.29.234.11;18pkt 18fpkt", shape=invtriangle, color=brown];
4075[label="166.29.234.11;19pkt 19fpkt", shape=invhouse, color=bisque];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.234.11:49181, *:53}[57.8947%]&lt;BR/&gt;{166.29.234.11:80, 57.0.49.230:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49181: (28.1818%)&lt;BR/&gt; 53: (28.1818%)&lt;BR/&gt; 80: (19.0909%)&lt;BR/&gt; 61695: (2.72727%)&lt;BR/&gt; 60986: (2.72727%)&gt;];
}
2224--3329[label="1;18pkt 18fpkt"];
2224--4075[label="1;18pkt 18fpkt"];
3329--4075[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="57.0.49.230" src_ip="166.29.234.11" src_port="80"/>
      <filter dst_port="53" src_ip="166.29.234.11" src_port="49181"/>
    </slice>
    <from sec="1136091619" usec="0"/>
    <to sec="1136092488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
2228[label="193.189.168.12;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3333[label="193.189.168.12;79pkt 79fpkt", shape=invtriangle, color=brown];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.189.168.12:*, *:135}[86.0759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (43.038%)&lt;BR/&gt; 0: (13.9241%)&lt;BR/&gt; 4977: (0.632911%)&lt;BR/&gt; 4947: (0.632911%)&lt;BR/&gt; 4575: (0.632911%)&gt;];
}
2228--3333[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="193.189.168.12"/>
    </slice>
    <from sec="1136091616" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
2237[label="217.66.41.14;169pkt 169fpkt", shape=pentagon, color=darkviolet];
3339[label="217.66.41.14;169pkt 169fpkt", shape=invtriangle, color=brown];
4079[label="217.66.41.14;168pkt 168fpkt", shape=invhouse, color=bisque];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.66.41.14:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2237--3339[label="1;169pkt 169fpkt"];
2237--4079[label="1;168pkt 168fpkt"];
3339--4079[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.66.41.14" src_port="1025"/>
    </slice>
    <from sec="1136092206" usec="0"/>
    <to sec="1136092233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
2243[label="216.150.82.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3341[label="216.150.82.16;5pkt 5fpkt", shape=invtriangle, color=brown];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.150.82.16:36215, 178.142.109.241:80}[20%]&lt;BR/&gt;{216.150.82.16:36217, 178.142.109.241:80}[20%]&lt;BR/&gt;{216.150.82.16:36227, 178.142.109.241:80}[20%]&lt;BR/&gt;{216.150.82.16:36233, 178.142.109.241:80}[20%]&lt;BR/&gt;{216.150.82.16:36244, 178.142.109.241:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36244: (10%)&lt;BR/&gt; 36233: (10%)&lt;BR/&gt; 36227: (10%)&lt;BR/&gt; 36217: (10%)&gt;];
}
2243--3341[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="216.150.82.16" src_port="36244"/>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="216.150.82.16" src_port="36233"/>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="216.150.82.16" src_port="36227"/>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="216.150.82.16" src_port="36217"/>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="216.150.82.16" src_port="36215"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
2252[label="80.224.42.19;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3347[label="80.224.42.19;121pkt 121fpkt", shape=invtriangle, color=brown];
4083[label="80.224.42.19;121pkt 121fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.224.42.19:*, *:445}[55.3719%]&lt;BR/&gt;{80.224.42.19:*, *:139}[44.6281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.686%)&lt;BR/&gt; 139: (22.314%)&lt;BR/&gt; 4880: (0.826446%)&lt;BR/&gt; 2239: (0.826446%)&lt;BR/&gt; 4982: (0.413223%)&gt;];
}
2252--3347[label="1;121pkt 121fpkt"];
2252--4083[label="1;121pkt 121fpkt"];
3347--4083[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="80.224.42.19"/>
      <filter dst_port="139" src_ip="80.224.42.19"/>
    </slice>
    <from sec="1136092092" usec="0"/>
    <to sec="1136092327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
2259[label="166.28.169.20;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3352[label="166.28.169.20;12pkt 12fpkt", shape=invtriangle, color=brown];
4085[label="166.28.169.20;12pkt 12fpkt", shape=invhouse, color=bisque];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.169.20:80, 63.204.229.70:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4642: (4.16667%)&lt;BR/&gt; 4618: (4.16667%)&lt;BR/&gt; 4557: (4.16667%)&lt;BR/&gt; 4546: (4.16667%)&gt;];
}
2259--3352[label="1;12pkt 12fpkt"];
2259--4085[label="1;12pkt 12fpkt"];
3352--4085[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="63.204.229.70" src_ip="166.28.169.20" src_port="80"/>
    </slice>
    <from sec="1136092319" usec="0"/>
    <to sec="1136092355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.26.222.20"/>
    </slice>
    <from sec="1136091691" usec="0"/>
    <to sec="1136091695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.112.203.21"/>
    </slice>
    <from sec="1136091985" usec="0"/>
    <to sec="1136092129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
1583[label="136.47.175.102;d;129pkt 129fpkt", shape=diamond, color=yellow];
2188[label="199.6.28.7;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2265[label="199.6.28.22;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3307[label="199.6.28.7;57pkt 57fpkt", shape=invtriangle, color=brown];
3356[label="199.6.28.22;54pkt 54fpkt", shape=invtriangle, color=brown];
4064[label="199.6.28.7;57pkt 57fpkt", shape=invhouse, color=bisque];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.6.28.7:80, 136.47.175.102:*}[43.2836%]&lt;BR/&gt;{199.6.28.22:80, 136.47.175.102:*}[41.0448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8775%)&lt;BR/&gt; 2383: (0.490196%)&lt;BR/&gt; 2382: (0.490196%)&lt;BR/&gt; 2381: (0.490196%)&lt;BR/&gt; 2380: (0.490196%)&gt;];
}
1583--2188[label="0.912281;52pkt 52fpkt"];
1583--2265[label="1;54pkt 54fpkt"];
1583--3307[label="0.912281;52pkt 52fpkt"];
1583--3356[label="1;54pkt 54fpkt"];
1583--4064[label="0.912281;52pkt 52fpkt"];
2188--3307[label="1;57pkt 57fpkt"];
2188--4064[label="1;57pkt 57fpkt"];
2265--3356[label="1;54pkt 54fpkt"];
3307--4064[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.175.102" src_ip="199.6.28.7" src_port="80"/>
      <filter dst_ip="136.47.175.102" src_ip="199.6.28.22" src_port="80"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
2269[label="209.191.177.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3357[label="209.191.177.22;3pkt 3fpkt", shape=invtriangle, color=brown];
4088[label="209.191.177.22;4pkt 4fpkt", shape=invhouse, color=bisque];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.191.177.22:1252, 160.4.95.3:80}[25%]&lt;BR/&gt;{209.191.177.22:1253, 160.4.95.3:80}[25%]&lt;BR/&gt;{209.191.177.22:1259, 160.4.95.3:80}[25%]&lt;BR/&gt;{209.191.177.22:1260, 160.4.95.3:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1260: (15%)&lt;BR/&gt; 1259: (15%)&lt;BR/&gt; 1253: (15%)&lt;BR/&gt; 1252: (5%)&gt;];
}
2269--3357[label="1;3pkt 3fpkt"];
2269--4088[label="1;3pkt 3fpkt"];
3357--4088[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.95.3" dst_port="80" src_ip="209.191.177.22" src_port="1260"/>
      <filter dst_ip="160.4.95.3" dst_port="80" src_ip="209.191.177.22" src_port="1259"/>
      <filter dst_ip="160.4.95.3" dst_port="80" src_ip="209.191.177.22" src_port="1253"/>
      <filter dst_ip="160.4.95.3" dst_port="80" src_ip="209.191.177.22" src_port="1252"/>
    </slice>
    <from sec="1136092199" usec="0"/>
    <to sec="1136092224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
2280[label="64.224.53.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3360[label="64.224.53.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.224.53.25:80, 178.142.113.220:1438}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1438: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2280--3360[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.113.220" dst_port="1438" src_ip="64.224.53.25" src_port="80"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
1362[label="160.128.17.26;s;199pkt 199fpkt", shape=diamond, color=yellow];
2286[label="160.128.17.26;200pkt 200fpkt", shape=pentagon, color=darkviolet];
3364[label="160.128.17.26;200pkt 200fpkt", shape=invtriangle, color=brown];
4093[label="160.128.17.26;199pkt 199fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.17.26:*, 208.94.53.40:443}[23.3831%]&lt;BR/&gt;{160.128.17.26:8080, 209.99.103.58:*}[22.3881%]&lt;BR/&gt;{160.128.17.26:*, 208.94.52.134:443}[21.8905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (27.2556%)&lt;BR/&gt; 443: (22.7444%)&lt;BR/&gt; 55511: (0.250627%)&lt;BR/&gt; 55510: (0.250627%)&lt;BR/&gt; 55509: (0.250627%)&gt;];
}
1362--2286[label="0.994975;198pkt 198fpkt"];
1362--3364[label="0.994975;198pkt 198fpkt"];
1362--4093[label="0.98995;197pkt 197fpkt"];
2286--3364[label="1;200pkt 200fpkt"];
2286--4093[label="1;199pkt 199fpkt"];
3364--4093[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_ip="208.94.53.40" dst_port="443" src_ip="160.128.17.26"/>
      <filter dst_ip="209.99.103.58" src_ip="160.128.17.26" src_port="8080"/>
      <filter dst_ip="208.94.52.134" dst_port="443" src_ip="160.128.17.26"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2292[label="209.114.64.27;95pkt 95fpkt", shape=pentagon, color=darkviolet];
3368[label="209.114.64.27;95pkt 95fpkt", shape=invtriangle, color=brown];
4094[label="209.114.64.27;96pkt 96fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.114.64.27:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2292--3368[label="1;95pkt 95fpkt"];
2292--4094[label="1;95pkt 95fpkt"];
3368--4094[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="209.114.64.27"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
2296[label="164.57.44.28;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3371[label="164.57.44.28;98pkt 98fpkt", shape=invtriangle, color=brown];
4097[label="164.57.44.28;98pkt 98fpkt", shape=invhouse, color=bisque];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.57.44.28:0, *:1026}[51.0204%]&lt;BR/&gt;{164.57.44.28:0, *:1025}[48.9796%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1026: (25.5102%)&lt;BR/&gt; 1025: (24.4898%)&gt;];
}
2296--3371[label="1;98pkt 98fpkt"];
2296--4097[label="1;98pkt 98fpkt"];
3371--4097[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="164.57.44.28"/>
      <filter dst_port="1025" src_ip="164.57.44.28"/>
    </slice>
    <from sec="1136091795" usec="0"/>
    <to sec="1136091796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.245.48.29"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
2305[label="210.66.101.30;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3380[label="210.66.101.30;39pkt 39fpkt", shape=invtriangle, color=brown];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.66.101.30:443, 136.47.172.200:*}[25%]&lt;BR/&gt;{210.66.101.30:80, 136.47.142.145:*}[20%]&lt;BR/&gt;{210.66.101.30:80, 136.47.175.206:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.8101%)&lt;BR/&gt; 443: (15.1899%)&lt;BR/&gt; 48578: (1.26582%)&lt;BR/&gt; 33340: (1.26582%)&lt;BR/&gt; 33320: (1.26582%)&gt;];
}
2305--3380[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.172.200" src_ip="210.66.101.30" src_port="443"/>
      <filter dst_ip="136.47.175.206" src_ip="210.66.101.30" src_port="80"/>
      <filter dst_ip="136.47.142.145" src_ip="210.66.101.30" src_port="80"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.41.66.31"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2313[label="60.21.2.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3384[label="60.21.2.32;8pkt 8fpkt", shape=invtriangle, color=brown];
4104[label="60.21.2.32;8pkt 8fpkt", shape=invhouse, color=bisque];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.21.2.32:*, 136.47.119.1:8090}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (43.75%)&lt;BR/&gt; 0: (12.5%)&lt;BR/&gt; 1126: (6.25%)&lt;BR/&gt; 1125: (6.25%)&lt;BR/&gt; 1124: (6.25%)&gt;];
}
2313--3384[label="1;8pkt 8fpkt"];
2313--4104[label="1;8pkt 8fpkt"];
3384--4104[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.119.1" dst_port="8090" src_ip="60.21.2.32"/>
    </slice>
    <from sec="1136092434" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
2316[label="160.4.76.32;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3386[label="160.4.76.32;23pkt 23fpkt", shape=invtriangle, color=brown];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.76.32:*, 210.129.13.119:80}[91.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2115: (2.17391%)&lt;BR/&gt; 2114: (2.17391%)&lt;BR/&gt; 2112: (2.17391%)&lt;BR/&gt; 2111: (2.17391%)&gt;];
}
2316--3386[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="210.129.13.119" dst_port="80" src_ip="160.4.76.32"/>
    </slice>
    <from sec="1136091648" usec="0"/>
    <to sec="1136092255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
2319[label="136.47.225.32;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3387[label="136.47.225.32;18pkt 18fpkt", shape=invtriangle, color=brown];
4105[label="136.47.225.32;19pkt 19fpkt", shape=invhouse, color=bisque];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.225.32:*, 193.65.5.208:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4576: (2.72727%)&lt;BR/&gt; 4572: (2.72727%)&lt;BR/&gt; 4571: (2.72727%)&lt;BR/&gt; 4570: (2.72727%)&gt;];
}
2319--3387[label="1;18pkt 18fpkt"];
2319--4105[label="1;18pkt 18fpkt"];
3387--4105[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="193.65.5.208" dst_port="80" src_ip="136.47.225.32"/>
    </slice>
    <from sec="1136091624" usec="0"/>
    <to sec="1136092482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
399[label="166.28.39.70;d;1612pkt 1612fpkt", shape=diamond, color=yellow];
1434[label="214.105.232.115;s;195pkt 195fpkt", shape=diamond, color=yellow];
2307[label="81.84.176.30;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2320[label="208.69.9.33;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2327[label="81.182.151.33;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2339[label="209.47.162.36;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2407[label="81.13.163.50;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2446[label="214.141.178.59;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2471[label="213.244.192.65;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2554[label="209.122.135.80;74pkt 74fpkt", shape=pentagon, color=darkviolet];
2594[label="216.16.101.86;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2607[label="81.3.41.88;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2694[label="84.147.204.107;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2722[label="214.105.232.115;208pkt 208fpkt", shape=pentagon, color=darkviolet];
2765[label="81.80.88.127;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3026[label="81.4.145.188;71pkt 71fpkt", shape=pentagon, color=darkviolet];
3168[label="208.21.138.224;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3190[label="213.198.55.231;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3388[label="208.69.9.33;33pkt 33fpkt", shape=invtriangle, color=brown];
3395[label="81.182.151.33;43pkt 43fpkt", shape=invtriangle, color=brown];
3466[label="214.141.178.59;35pkt 35fpkt", shape=invtriangle, color=brown];
3487[label="213.244.192.65;45pkt 45fpkt", shape=invtriangle, color=brown];
3553[label="209.122.135.80;74pkt 74fpkt", shape=invtriangle, color=brown];
3594[label="81.3.41.88;35pkt 35fpkt", shape=invtriangle, color=brown];
3643[label="84.147.204.107;25pkt 25fpkt", shape=invtriangle, color=brown];
3698[label="81.80.88.127;26pkt 26fpkt", shape=invtriangle, color=brown];
3887[label="81.4.145.188;72pkt 72fpkt", shape=invtriangle, color=brown];
3983[label="208.21.138.224;35pkt 35fpkt", shape=invtriangle, color=brown];
3998[label="213.198.55.231;28pkt 28fpkt", shape=invtriangle, color=brown];
4109[label="81.182.151.33;43pkt 43fpkt", shape=invhouse, color=bisque];
4138[label="214.141.178.59;34pkt 34fpkt", shape=invhouse, color=bisque];
4150[label="213.244.192.65;45pkt 45fpkt", shape=invhouse, color=bisque];
4194[label="81.3.41.88;35pkt 35fpkt", shape=invhouse, color=bisque];
4244[label="81.80.88.127;27pkt 27fpkt", shape=invhouse, color=bisque];
4343[label="81.4.145.188;72pkt 72fpkt", shape=invhouse, color=bisque];
4382[label="208.21.138.224;36pkt 36fpkt", shape=invhouse, color=bisque];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.28.39.70:80}[99.9396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9851%)&lt;BR/&gt; 1700: (0.104384%)&lt;BR/&gt; 1693: (0.104384%)&lt;BR/&gt; 1634: (0.104384%)&lt;BR/&gt; 1625: (0.104384%)&gt;];
}
399--1434[label="0.917949;179pkt 179fpkt"];
399--2133[label="0.0415633;67pkt 67fpkt"];
399--2137[label="0.0415633;67pkt 67fpkt"];
399--2307[label="1;44pkt 44fpkt"];
399--2320[label="0.911765;31pkt 31fpkt"];
399--2327[label="1;43pkt 43fpkt"];
399--2339[label="1;35pkt 35fpkt"];
399--2407[label="1;40pkt 40fpkt"];
399--2446[label="1;35pkt 35fpkt"];
399--2471[label="0.8;36pkt 36fpkt"];
399--2554[label="1;74pkt 74fpkt"];
399--2594[label="1;23pkt 23fpkt"];
399--2607[label="1;35pkt 35fpkt"];
399--2694[label="1;25pkt 25fpkt"];
399--2722[label="0.855769;178pkt 178fpkt"];
399--2765[label="1;26pkt 26fpkt"];
399--3026[label="1;71pkt 71fpkt"];
399--3168[label="1;36pkt 36fpkt"];
399--3190[label="0.931034;27pkt 27fpkt"];
399--3388[label="0.909091;30pkt 30fpkt"];
399--3395[label="1;43pkt 43fpkt"];
399--3466[label="1;35pkt 35fpkt"];
399--3487[label="0.8;36pkt 36fpkt"];
399--3553[label="1;74pkt 74fpkt"];
399--3594[label="1;35pkt 35fpkt"];
399--3643[label="1;25pkt 25fpkt"];
399--3698[label="1;26pkt 26fpkt"];
399--3887[label="1;72pkt 72fpkt"];
399--3983[label="1;35pkt 35fpkt"];
399--3998[label="0.928571;26pkt 26fpkt"];
399--4109[label="1;43pkt 43fpkt"];
399--4138[label="1;34pkt 34fpkt"];
399--4150[label="0.8;36pkt 36fpkt"];
399--4194[label="1;35pkt 35fpkt"];
399--4244[label="1;27pkt 27fpkt"];
399--4343[label="1;72pkt 72fpkt"];
399--4382[label="1;36pkt 36fpkt"];
1434--2722[label="0.994872;194pkt 194fpkt"];
2320--3388[label="1;33pkt 33fpkt"];
2327--3395[label="1;43pkt 43fpkt"];
2327--4109[label="1;43pkt 43fpkt"];
2446--3466[label="1;35pkt 35fpkt"];
2446--4138[label="1;34pkt 34fpkt"];
2471--3487[label="1;45pkt 45fpkt"];
2471--4150[label="1;45pkt 45fpkt"];
2554--3553[label="1;74pkt 74fpkt"];
2607--3594[label="1;35pkt 35fpkt"];
2607--4194[label="1;35pkt 35fpkt"];
2694--3643[label="1;25pkt 25fpkt"];
2765--3698[label="1;26pkt 26fpkt"];
2765--4244[label="1;26pkt 26fpkt"];
3026--3887[label="1;71pkt 71fpkt"];
3026--4343[label="1;71pkt 71fpkt"];
3168--3983[label="1;35pkt 35fpkt"];
3168--4382[label="1;36pkt 36fpkt"];
3190--3998[label="1;28pkt 28fpkt"];
3395--4109[label="1;43pkt 43fpkt"];
3466--4138[label="1;34pkt 34fpkt"];
3487--4150[label="1;45pkt 45fpkt"];
3594--4194[label="1;35pkt 35fpkt"];
3698--4244[label="1;26pkt 26fpkt"];
3887--4343[label="1;72pkt 72fpkt"];
3983--4382[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.39.70" dst_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
2333[label="166.28.42.35;135pkt 135fpkt", shape=pentagon, color=darkviolet];
3397[label="166.28.42.35;136pkt 136fpkt", shape=invtriangle, color=brown];
4110[label="166.28.42.35;136pkt 136fpkt", shape=invhouse, color=bisque];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.42.35:60838, *:53}[51.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (34.5209%)&lt;BR/&gt; 60838: (25.6757%)&lt;BR/&gt; 25: (7.73956%)&lt;BR/&gt; 113: (6.26536%)&lt;BR/&gt; 80: (1.10565%)&gt;];
}
2333--3397[label="1;135pkt 135fpkt"];
2333--4110[label="1;135pkt 135fpkt"];
3397--4110[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.28.42.35" src_port="60838"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
2334[label="136.47.54.35;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3398[label="136.47.54.35;67pkt 67fpkt", shape=invtriangle, color=brown];
4111[label="136.47.54.35;67pkt 67fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.54.35:33868, *:*}[97.0149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33868: (48.5%)&lt;BR/&gt; 56006: (1.5%)&lt;BR/&gt; 33441: (1.5%)&lt;BR/&gt; 5510: (1.5%)&lt;BR/&gt; 63511: (0.75%)&gt;];
}
2334--3398[label="1;66pkt 66fpkt"];
2334--4111[label="1;66pkt 66fpkt"];
3398--4111[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.54.35" src_port="33868"/>
    </slice>
    <from sec="1136091633" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.26.39.37"/>
    </slice>
    <from sec="1136091716" usec="0"/>
    <to sec="1136091871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.212.151.38"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
886[label="136.47.172.151;d;52pkt 52fpkt", shape=diamond, color=yellow];
2359[label="217.180.15.41;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3415[label="217.180.15.41;20pkt 20fpkt", shape=invtriangle, color=brown];
4119[label="217.180.15.41;20pkt 20fpkt", shape=invhouse, color=bisque];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.47.172.151:*}[75.8065%]&lt;BR/&gt;{217.180.15.41:80, *:*}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7477%)&lt;BR/&gt; 8000: (1.8018%)&lt;BR/&gt; 2801: (1.8018%)&lt;BR/&gt; 2800: (1.8018%)&lt;BR/&gt; 2799: (1.8018%)&gt;];
}
886--2359[label="0.526316;10pkt 10fpkt"];
886--3415[label="0.5;10pkt 10fpkt"];
886--4119[label="0.5;10pkt 10fpkt"];
2359--3415[label="1;19pkt 19fpkt"];
2359--4119[label="1;19pkt 19fpkt"];
3415--4119[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="217.180.15.41" src_port="80"/>
      <filter dst_ip="136.47.172.151" src_port="80"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.230.26.42"/>
    </slice>
    <from sec="1136092465" usec="0"/>
    <to sec="1136092470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
1114[label="58.55.207.94;d;2pkt 2fpkt", shape=diamond, color=yellow];
1252[label="166.28.53.24;s;34pkt 34fpkt", shape=diamond, color=yellow];
1857[label="58.55.207.94;d;2pkt 2fpkt", shape=hexagon, color=black];
2029[label="166.28.53.24;s;33pkt 33fpkt", shape=hexagon, color=black];
2364[label="166.28.53.42;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3420[label="166.28.53.42;10pkt 10fpkt", shape=invtriangle, color=brown];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.53.24:4472, *:53}[40.9091%]&lt;BR/&gt;{*:0, *:0}[22.7273%]&lt;BR/&gt;{166.28.53.42:*, *:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (27.4725%)&lt;BR/&gt; 4472: (20.8791%)&lt;BR/&gt; 0: (20.8791%)&lt;BR/&gt; 25: (9.89011%)&lt;BR/&gt; 1032: (5.49451%)&gt;];
}
1114--1252[label="0.5;1pkt 1fpkt"];
1114--1857[label="1;2pkt 2fpkt"];
1114--2029[label="0.5;1pkt 1fpkt"];
1114--2364[label="0.5;1pkt 1fpkt"];
1114--3420[label="0.5;1pkt 1fpkt"];
1252--1857[label="0.5;1pkt 1fpkt"];
1252--2029[label="1;33pkt 33fpkt"];
1857--2029[label="0.5;1pkt 1fpkt"];
1857--2364[label="0.5;1pkt 1fpkt"];
1857--3420[label="0.5;1pkt 1fpkt"];
2364--3420[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.53.42"/>
      <filter dst_port="53" src_ip="166.28.53.24" src_port="4472"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
2366[label="219.92.114.42;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3422[label="219.92.114.42;18pkt 18fpkt", shape=invtriangle, color=brown];
4122[label="219.92.114.42;18pkt 18fpkt", shape=invhouse, color=bisque];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.92.114.42:*, 136.47.171.215:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1995: (2.77778%)&lt;BR/&gt; 1994: (2.77778%)&lt;BR/&gt; 1993: (2.77778%)&lt;BR/&gt; 1992: (2.77778%)&gt;];
}
2366--3422[label="1;18pkt 18fpkt"];
2366--4122[label="1;18pkt 18fpkt"];
3422--4122[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.171.215" dst_port="80" src_ip="219.92.114.42"/>
    </slice>
    <from sec="1136092419" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
239[label="178.142.151.226;d;1148pkt 1148fpkt", shape=diamond, color=yellow];
360[label="160.4.111.234;d;2027pkt 2027fpkt", shape=diamond, color=yellow];
690[label="178.142.204.55;d;1125pkt 1125fpkt", shape=diamond, color=yellow];
761[label="193.114.44.52;d;1744pkt 1744fpkt", shape=diamond, color=yellow];
1840[label="160.4.111.234;d;1391pkt 1391fpkt", shape=hexagon, color=black];
2167[label="215.13.2.3;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2959[label="214.75.97.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3007[label="80.230.173.183;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3179[label="80.163.112.227;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3423[label="209.102.31.43;1pkt 1fpkt", shape=invtriangle, color=brown];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.4.111.234:4151}[33.1682%]&lt;BR/&gt;{*:*, 193.114.44.52:11455}[28.411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4151: (22.6694%)&lt;BR/&gt; 11455: (11.5323%)&lt;BR/&gt; 1088: (7.78194%)&lt;BR/&gt; 58051: (7.54755%)&lt;BR/&gt; 443: (0.308063%)&gt;];
}
239--2959[label="0.5;1pkt 1fpkt"];
239--3179[label="0.5;10pkt 10fpkt"];
239--3423[label="1;1pkt 1fpkt"];
360--1840[label="1;1391pkt 1391fpkt"];
360--2133[label="0.00098668;2pkt 2fpkt"];
360--2137[label="0.00098668;2pkt 2fpkt"];
360--2167[label="0.25;1pkt 1fpkt"];
360--3179[label="0.05;1pkt 1fpkt"];
690--2959[label="0.5;1pkt 1fpkt"];
690--3007[label="1;4pkt 4fpkt"];
761--2167[label="0.5;2pkt 2fpkt"];
1840--2133[label="0.00143781;2pkt 2fpkt"];
1840--2137[label="0.00143781;2pkt 2fpkt"];
1840--2167[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.111.234" dst_port="4151"/>
      <filter dst_ip="193.114.44.52" dst_port="11455"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
2372[label="136.47.234.43;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3424[label="136.47.234.43;7pkt 7fpkt", shape=invtriangle, color=brown];
4123[label="136.47.234.43;8pkt 8fpkt", shape=invhouse, color=bisque];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.234.43:*, 164.24.202.55:80}[50%]&lt;BR/&gt;{136.47.234.43:*, 217.204.96.166:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4783%)&lt;BR/&gt; 4727: (6.52174%)&lt;BR/&gt; 4726: (6.52174%)&lt;BR/&gt; 4725: (6.52174%)&lt;BR/&gt; 4715: (6.52174%)&gt;];
}
2372--3424[label="1;7pkt 7fpkt"];
2372--4123[label="1;8pkt 8fpkt"];
3424--4123[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.24.202.55" dst_port="80" src_ip="136.47.234.43"/>
      <filter dst_ip="217.204.96.166" dst_port="80" src_ip="136.47.234.43"/>
    </slice>
    <from sec="1136091770" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.66.43.44"/>
    </slice>
    <from sec="1136092160" usec="0"/>
    <to sec="1136092169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.235.228.44"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
2381[label="209.184.130.45;73pkt 73fpkt", shape=pentagon, color=darkviolet];
3429[label="209.184.130.45;72pkt 72fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.184.130.45:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3813: (1.37931%)&lt;BR/&gt; 4807: (0.689655%)&lt;BR/&gt; 4765: (0.689655%)&lt;BR/&gt; 4750: (0.689655%)&gt;];
}
2381--3429[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.184.130.45"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
2389[label="215.44.227.47;322pkt 322fpkt", shape=pentagon, color=darkviolet];
3433[label="215.44.227.47;323pkt 323fpkt", shape=invtriangle, color=brown];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.44.227.47:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65375: (0.155039%)&lt;BR/&gt; 65325: (0.155039%)&lt;BR/&gt; 64380: (0.155039%)&lt;BR/&gt; 63592: (0.155039%)&gt;];
}
2389--3433[label="1;322pkt 322fpkt"];
</description>
    <slice>
      <filter src_ip="215.44.227.47" src_port="80"/>
    </slice>
    <from sec="1136092065" usec="0"/>
    <to sec="1136092449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
2391[label="192.36.5.48;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3435[label="192.36.5.48;39pkt 39fpkt", shape=invtriangle, color=brown];
4126[label="192.36.5.48;39pkt 39fpkt", shape=invhouse, color=bisque];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.36.5.48:32778, *:53}[56.4103%]&lt;BR/&gt;{192.36.5.48:53, *:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.5897%)&lt;BR/&gt; 32778: (28.2051%)&lt;BR/&gt; 0: (10.2564%)&lt;BR/&gt; 32768: (3.84615%)&lt;BR/&gt; 45120: (1.28205%)&gt;];
}
2391--3435[label="1;39pkt 39fpkt"];
2391--4126[label="1;39pkt 39fpkt"];
3435--4126[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="192.36.5.48" src_port="53"/>
      <filter dst_port="53" src_ip="192.36.5.48" src_port="32778"/>
    </slice>
    <from sec="1136091715" usec="0"/>
    <to sec="1136092451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
2396[label="208.160.110.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3436[label="208.160.110.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.160.110.48:4784, 160.4.238.73:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4784: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2396--3436[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.238.73" dst_port="25" src_ip="208.160.110.48" src_port="4784"/>
    </slice>
    <from sec="1136092106" usec="0"/>
    <to sec="1136092363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
2401[label="210.66.124.49;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3438[label="210.66.124.49;18pkt 18fpkt", shape=invtriangle, color=brown];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.66.124.49:80, 136.47.35.54:*}[61.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57325: (2.77778%)&lt;BR/&gt; 57324: (2.77778%)&lt;BR/&gt; 57323: (2.77778%)&lt;BR/&gt; 57322: (2.77778%)&gt;];
}
2401--3438[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.35.54" src_ip="210.66.124.49" src_port="80"/>
    </slice>
    <from sec="1136091673" usec="0"/>
    <to sec="1136092469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.55.212.49"/>
    </slice>
    <from sec="1136092224" usec="0"/>
    <to sec="1136092355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.48.123.51"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136092490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
2424[label="176.180.197.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3452[label="176.180.197.54;2pkt 2fpkt", shape=invtriangle, color=brown];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.180.197.54:80, 136.47.245.2:1768}[50%]&lt;BR/&gt;{176.180.197.54:80, 136.47.245.2:1769}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1769: (25%)&lt;BR/&gt; 1768: (25%)&gt;];
}
2424--3452[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.245.2" dst_port="1769" src_ip="176.180.197.54" src_port="80"/>
      <filter dst_ip="136.47.245.2" dst_port="1768" src_ip="176.180.197.54" src_port="80"/>
    </slice>
    <from sec="1136092394" usec="0"/>
    <to sec="1136092417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
2425[label="57.4.208.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3453[label="57.4.208.54;2pkt 2fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.4.208.54:2318, 160.17.132.135:1125}[50%]&lt;BR/&gt;{57.4.208.54:1951, 160.17.129.237:125}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2318: (25%)&lt;BR/&gt; 1951: (25%)&lt;BR/&gt; 1125: (25%)&lt;BR/&gt; 125: (25%)&gt;];
}
2425--3453[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.17.129.237" dst_port="125" src_ip="57.4.208.54" src_port="1951"/>
      <filter dst_ip="160.17.132.135" dst_port="1125" src_ip="57.4.208.54" src_port="2318"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.181.32.55"/>
    </slice>
    <from sec="1136091630" usec="0"/>
    <to sec="1136092007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
2430[label="34.19.76.55;115pkt 115fpkt", shape=pentagon, color=darkviolet];
3458[label="34.19.76.55;116pkt 116fpkt", shape=invtriangle, color=brown];
4135[label="34.19.76.55;116pkt 116fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.19.76.55:137, *:137}[40.5172%]&lt;BR/&gt;{34.19.76.55:*, *:445}[31.0345%]&lt;BR/&gt;{34.19.76.55:*, *:139}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (40.634%)&lt;BR/&gt; 445: (15.4179%)&lt;BR/&gt; 139: (13.8329%)&lt;BR/&gt; 3321: (0.864553%)&lt;BR/&gt; 3183: (0.864553%)&gt;];
}
2430--3458[label="1;115pkt 115fpkt"];
2430--4135[label="1;115pkt 115fpkt"];
3458--4135[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="34.19.76.55"/>
      <filter dst_port="139" src_ip="34.19.76.55"/>
      <filter dst_port="137" src_ip="34.19.76.55" src_port="137"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
1361[label="160.128.17.26;d;170pkt 170fpkt", shape=diamond, color=yellow];
2241[label="214.74.197.15;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2356[label="208.94.53.40;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2442[label="209.99.103.58;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2794[label="208.94.52.134;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3413[label="208.94.53.40;46pkt 46fpkt", shape=invtriangle, color=brown];
3462[label="209.99.103.58;42pkt 42fpkt", shape=invtriangle, color=brown];
4136[label="209.99.103.58;42pkt 42fpkt", shape=invhouse, color=bisque];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.94.53.40:443, 160.128.17.26:*}[25%]&lt;BR/&gt;{208.94.52.134:443, 160.128.17.26:*}[23.4043%]&lt;BR/&gt;{209.99.103.58:*, 160.128.17.26:8080}[22.8723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (26.1803%)&lt;BR/&gt; 443: (23.4979%)&lt;BR/&gt; 53220: (0.429185%)&lt;BR/&gt; 53218: (0.429185%)&lt;BR/&gt; 53216: (0.429185%)&gt;];
}
1361--2241[label="0.882353;30pkt 30fpkt"];
1361--2356[label="0.891304;41pkt 41fpkt"];
1361--2442[label="0.857143;36pkt 36fpkt"];
1361--2794[label="0.931818;41pkt 41fpkt"];
1361--3413[label="0.891304;41pkt 41fpkt"];
1361--3462[label="0.857143;36pkt 36fpkt"];
1361--4136[label="0.857143;36pkt 36fpkt"];
2356--3413[label="1;46pkt 46fpkt"];
2442--3462[label="1;42pkt 42fpkt"];
2442--4136[label="1;42pkt 42fpkt"];
3462--4136[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="160.128.17.26" src_ip="208.94.53.40" src_port="443"/>
      <filter dst_ip="160.128.17.26" src_ip="208.94.52.134" src_port="443"/>
      <filter dst_ip="160.128.17.26" dst_port="8080" src_ip="209.99.103.58"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
2449[label="209.101.154.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3469[label="209.101.154.61;1pkt 1fpkt", shape=invtriangle, color=brown];
4139[label="209.101.154.61;1pkt 1fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.101.154.61:62397, 178.142.109.241:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62397: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2449--3469[label="1;1pkt 1fpkt"];
2449--4139[label="1;1pkt 1fpkt"];
3469--4139[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="209.101.154.61" src_port="62397"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
2450[label="60.200.171.61;69pkt 69fpkt", shape=pentagon, color=darkviolet];
3470[label="60.200.171.61;70pkt 70fpkt", shape=invtriangle, color=brown];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.200.171.61:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1616: (1.43885%)&lt;BR/&gt; 4894: (0.719424%)&lt;BR/&gt; 4802: (0.719424%)&lt;BR/&gt; 4763: (0.719424%)&gt;];
}
2450--3470[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="60.200.171.61"/>
    </slice>
    <from sec="1136091871" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.190.37.62"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
2454[label="192.40.39.62;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3474[label="192.40.39.62;54pkt 54fpkt", shape=invtriangle, color=brown];
4142[label="192.40.39.62;53pkt 53fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.40.39.62:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4780: (0.931677%)&lt;BR/&gt; 4717: (0.931677%)&lt;BR/&gt; 4705: (0.931677%)&lt;BR/&gt; 4555: (0.931677%)&gt;];
}
2454--3474[label="1;54pkt 54fpkt"];
2454--4142[label="1;53pkt 53fpkt"];
3474--4142[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="192.40.39.62"/>
    </slice>
    <from sec="1136091627" usec="0"/>
    <to sec="1136092461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,004,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
2457[label="209.184.116.62;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3476[label="209.184.116.62;44pkt 44fpkt", shape=invtriangle, color=brown];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.184.116.62:*, *:445}[97.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (48.8636%)&lt;BR/&gt; 4944: (1.13636%)&lt;BR/&gt; 4764: (1.13636%)&lt;BR/&gt; 4404: (1.13636%)&lt;BR/&gt; 3991: (1.13636%)&gt;];
}
2457--3476[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.184.116.62"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.140.117.62"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
2459[label="210.66.124.62;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3478[label="210.66.124.62;7pkt 7fpkt", shape=invtriangle, color=brown];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.66.124.62:80, 160.128.105.96:*}[28.5714%]&lt;BR/&gt;{210.66.124.62:80, 192.242.57.185:*}[28.5714%]&lt;BR/&gt;{210.66.124.62:80, 160.4.146.216:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4888: (7.14286%)&lt;BR/&gt; 4760: (7.14286%)&lt;BR/&gt; 4487: (7.14286%)&lt;BR/&gt; 4486: (7.14286%)&gt;];
}
2459--3478[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.146.216" src_ip="210.66.124.62" src_port="80"/>
      <filter dst_ip="192.242.57.185" src_ip="210.66.124.62" src_port="80"/>
      <filter dst_ip="160.128.105.96" src_ip="210.66.124.62" src_port="80"/>
    </slice>
    <from sec="1136091675" usec="0"/>
    <to sec="1136092471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
2463[label="59.46.168.63;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3481[label="59.46.168.63;2pkt 2fpkt", shape=invtriangle, color=brown];
4146[label="59.46.168.63;2pkt 2fpkt", shape=invhouse, color=bisque];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.46.168.63:39405, 160.4.95.71:80}[50%]&lt;BR/&gt;{59.46.168.63:39407, 160.4.95.71:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39407: (25%)&lt;BR/&gt; 39405: (25%)&gt;];
}
2463--3481[label="1;2pkt 2fpkt"];
2463--4146[label="1;2pkt 2fpkt"];
3481--4146[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.95.71" dst_port="80" src_ip="59.46.168.63" src_port="39407"/>
      <filter dst_ip="160.4.95.71" dst_port="80" src_ip="59.46.168.63" src_port="39405"/>
    </slice>
    <from sec="1136092439" usec="0"/>
    <to sec="1136092485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
2465[label="193.114.33.64;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3483[label="193.114.33.64;38pkt 38fpkt", shape=invtriangle, color=brown];
4148[label="193.114.33.64;37pkt 37fpkt", shape=invhouse, color=bisque];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.33.64:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64926: (1.32743%)&lt;BR/&gt; 62100: (1.32743%)&lt;BR/&gt; 61902: (1.32743%)&lt;BR/&gt; 61901: (1.32743%)&gt;];
}
2465--3483[label="1;38pkt 38fpkt"];
2465--4148[label="1;37pkt 37fpkt"];
3483--4148[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.33.64" src_port="80"/>
    </slice>
    <from sec="1136091635" usec="0"/>
    <to sec="1136092482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
2467[label="166.28.26.65;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3484[label="166.28.26.65;14pkt 14fpkt", shape=invtriangle, color=brown];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.26.65:18280, 60.49.185.132:*}[60%]&lt;BR/&gt;{166.28.26.65:*, 58.117.162.249:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18280: (31.0345%)&lt;BR/&gt; 80: (10.3448%)&lt;BR/&gt; 7022: (5.17241%)&lt;BR/&gt; 51587: (3.44828%)&lt;BR/&gt; 51586: (3.44828%)&gt;];
}
2467--3484[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="60.49.185.132" src_ip="166.28.26.65" src_port="18280"/>
      <filter dst_ip="58.117.162.249" dst_port="80" src_ip="166.28.26.65"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
2472[label="166.28.193.65;89pkt 89fpkt", shape=pentagon, color=darkviolet];
3488[label="166.28.193.65;89pkt 89fpkt", shape=invtriangle, color=brown];
4151[label="166.28.193.65;88pkt 88fpkt", shape=invhouse, color=bisque];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.193.65:*, 217.204.99.31:80}[92.1348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8722%)&lt;BR/&gt; 63794: (0.56391%)&lt;BR/&gt; 63793: (0.56391%)&lt;BR/&gt; 63792: (0.56391%)&lt;BR/&gt; 63789: (0.56391%)&gt;];
}
2472--3488[label="1;89pkt 89fpkt"];
2472--4151[label="1;88pkt 88fpkt"];
3488--4151[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="217.204.99.31" dst_port="80" src_ip="166.28.193.65"/>
    </slice>
    <from sec="1136091636" usec="0"/>
    <to sec="1136092485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
2474[label="200.142.32.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3490[label="200.142.32.66;1pkt 1fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.142.32.66:60848, 136.47.119.1:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60848: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
2474--3490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.119.1" dst_port="3128" src_ip="200.142.32.66" src_port="60848"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
2475[label="166.28.59.66;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3491[label="166.28.59.66;49pkt 49fpkt", shape=invtriangle, color=brown];
4153[label="166.28.59.66;48pkt 48fpkt", shape=invhouse, color=bisque];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.59.66:*, *:25}[91.8367%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9726%)&lt;BR/&gt; 57560: (1.0274%)&lt;BR/&gt; 57559: (1.0274%)&lt;BR/&gt; 57558: (1.0274%)&lt;BR/&gt; 57557: (1.0274%)&gt;];
}
2475--3491[label="1;49pkt 49fpkt"];
2475--4153[label="1;48pkt 48fpkt"];
3491--4153[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.59.66"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
2477[label="136.47.119.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3493[label="136.47.119.66;2pkt 2fpkt", shape=invtriangle, color=brown];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.119.66:80, 63.141.72.164:41223}[50%]&lt;BR/&gt;{136.47.119.66:0, 191.52.206.238:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 41223: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
2477--3493[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="191.52.206.238" src_ip="136.47.119.66"/>
      <filter dst_ip="63.141.72.164" dst_port="41223" src_ip="136.47.119.66" src_port="80"/>
    </slice>
    <from sec="1136091798" usec="0"/>
    <to sec="1136092077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
1022[label="166.28.168.170;d;101pkt 101fpkt", shape=diamond, color=yellow];
1154[label="166.28.168.168;d;42pkt 42fpkt", shape=diamond, color=yellow];
1189[label="80.217.74.136;s;27pkt 27fpkt", shape=diamond, color=yellow];
1213[label="80.20.181.42;s;32pkt 32fpkt", shape=diamond, color=yellow];
1823[label="166.28.168.170;d;82pkt 82fpkt", shape=hexagon, color=black];
1928[label="80.20.181.42;s;32pkt 32fpkt", shape=hexagon, color=black];
2281[label="194.183.102.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2351[label="213.24.11.38;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2368[label="80.20.181.42;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2385[label="216.50.152.46;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2452[label="85.164.8.62;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2513[label="216.50.181.71;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2806[label="80.217.74.136;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3361[label="194.183.102.25;1pkt 1fpkt", shape=invtriangle, color=brown];
3410[label="213.24.11.38;14pkt 14fpkt", shape=invtriangle, color=brown];
3432[label="216.50.152.46;25pkt 25fpkt", shape=invtriangle, color=brown];
3472[label="85.164.8.62;5pkt 5fpkt", shape=invtriangle, color=brown];
3521[label="216.50.181.71;8pkt 8fpkt", shape=invtriangle, color=brown];
4125[label="216.50.152.46;25pkt 25fpkt", shape=invhouse, color=bisque];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.28.168.170:80}[60.479%]&lt;BR/&gt;{*:*, 166.28.168.168:80}[25.1497%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.802%)&lt;BR/&gt; 1792: (0.49505%)&lt;BR/&gt; 1791: (0.49505%)&lt;BR/&gt; 1790: (0.49505%)&lt;BR/&gt; 1789: (0.49505%)&gt;];
}
1022--1189[label="0.259259;7pkt 7fpkt"];
1022--1213[label="1;32pkt 32fpkt"];
1022--1589[label="0.0128205;1pkt 1fpkt"];
1022--1601[label="0.0441176;3pkt 3fpkt"];
1022--1606[label="0.0365854;3pkt 3fpkt"];
1022--1607[label="0.0138889;1pkt 1fpkt"];
1022--1617[label="0.2;1pkt 1fpkt"];
1022--1823[label="1;82pkt 82fpkt"];
1022--1928[label="1;32pkt 32fpkt"];
1022--2144[label="0.0105263;1pkt 1fpkt"];
1022--2266[label="0.0117647;1pkt 1fpkt"];
1022--2281[label="0.5;1pkt 1fpkt"];
1022--2325[label="0.0103093;1pkt 1fpkt"];
1022--2351[label="1;14pkt 14fpkt"];
1022--2368[label="1;31pkt 31fpkt"];
1022--2419[label="0.0307692;2pkt 2fpkt"];
1022--2452[label="0.8;4pkt 4fpkt"];
1022--2513[label="0.285714;2pkt 2fpkt"];
1022--2806[label="0.259259;7pkt 7fpkt"];
1022--3058[label="0.0123457;1pkt 1fpkt"];
1022--3106[label="0.0116279;1pkt 1fpkt"];
1022--3243[label="0.0144928;1pkt 1fpkt"];
1022--3277[label="0.0105263;1pkt 1fpkt"];
1022--3284[label="0.0135135;1pkt 1fpkt"];
1022--3393[label="0.0102041;1pkt 1fpkt"];
1022--3410[label="1;14pkt 14fpkt"];
1022--3472[label="0.8;4pkt 4fpkt"];
1022--3521[label="0.25;2pkt 2fpkt"];
1022--3905[label="0.0123457;1pkt 1fpkt"];
1022--4033[label="0.0147059;1pkt 1fpkt"];
1022--4052[label="0.0105263;1pkt 1fpkt"];
1022--4107[label="0.0103093;1pkt 1fpkt"];
1154--1189[label="0.407407;11pkt 11fpkt"];
1154--1590[label="0.0238095;1pkt 1fpkt"];
1154--1606[label="0.0238095;1pkt 1fpkt"];
1154--2078[label="0.0238095;1pkt 1fpkt"];
1154--2385[label="0.72;18pkt 18fpkt"];
1154--2399[label="0.0625;1pkt 1fpkt"];
1154--2806[label="0.407407;11pkt 11fpkt"];
1154--3058[label="0.0238095;1pkt 1fpkt"];
1154--3101[label="0.047619;2pkt 2fpkt"];
1154--3106[label="0.0238095;1pkt 1fpkt"];
1154--3432[label="0.72;18pkt 18fpkt"];
1154--3905[label="0.0238095;1pkt 1fpkt"];
1154--3936[label="0.047619;2pkt 2fpkt"];
1154--4125[label="0.72;18pkt 18fpkt"];
1154--4361[label="0.047619;2pkt 2fpkt"];
1189--1823[label="0.259259;7pkt 7fpkt"];
1189--2806[label="1;27pkt 27fpkt"];
1213--1823[label="1;32pkt 32fpkt"];
1213--1928[label="1;32pkt 32fpkt"];
1213--2368[label="1;31pkt 31fpkt"];
1823--1928[label="1;32pkt 32fpkt"];
1823--2144[label="0.0121951;1pkt 1fpkt"];
1823--2266[label="0.0121951;1pkt 1fpkt"];
1823--2281[label="0.5;1pkt 1fpkt"];
1823--2325[label="0.0121951;1pkt 1fpkt"];
1823--2351[label="0.642857;9pkt 9fpkt"];
1823--2368[label="1;31pkt 31fpkt"];
1823--2419[label="0.0153846;1pkt 1fpkt"];
1823--2452[label="0.8;4pkt 4fpkt"];
1823--2513[label="0.142857;1pkt 1fpkt"];
1823--2806[label="0.259259;7pkt 7fpkt"];
1823--3058[label="0.0123457;1pkt 1fpkt"];
1823--3106[label="0.0121951;1pkt 1fpkt"];
1823--3243[label="0.0144928;1pkt 1fpkt"];
1823--3277[label="0.0121951;1pkt 1fpkt"];
1823--3284[label="0.0135135;1pkt 1fpkt"];
1823--3393[label="0.0121951;1pkt 1fpkt"];
1823--3410[label="0.642857;9pkt 9fpkt"];
1823--3472[label="0.8;4pkt 4fpkt"];
1823--3521[label="0.125;1pkt 1fpkt"];
1823--3905[label="0.0123457;1pkt 1fpkt"];
1823--4033[label="0.0147059;1pkt 1fpkt"];
1823--4052[label="0.0121951;1pkt 1fpkt"];
1823--4107[label="0.0121951;1pkt 1fpkt"];
1928--2368[label="1;31pkt 31fpkt"];
2281--3361[label="1;1pkt 1fpkt"];
2351--3410[label="1;14pkt 14fpkt"];
2385--3432[label="1;25pkt 25fpkt"];
2385--4125[label="1;25pkt 25fpkt"];
2452--3472[label="1;5pkt 5fpkt"];
2513--3521[label="1;7pkt 7fpkt"];
3432--4125[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.168.170" dst_port="80"/>
      <filter dst_ip="166.28.168.168" dst_port="80"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
2483[label="192.80.162.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3497[label="192.80.162.67;1pkt 1fpkt", shape=invtriangle, color=brown];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.80.162.67:1944, 178.142.37.93:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1944: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2483--3497[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.37.93" dst_port="1434" src_ip="192.80.162.67" src_port="1944"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
2486[label="166.28.199.67;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3499[label="166.28.199.67;17pkt 17fpkt", shape=invtriangle, color=brown];
4157[label="166.28.199.67;17pkt 17fpkt", shape=invhouse, color=bisque];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.199.67:*, 99.221.51.40:443}[70.5882%]&lt;BR/&gt;{166.28.199.67:*, 99.221.51.9:143}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (38.2353%)&lt;BR/&gt; 143: (11.7647%)&lt;BR/&gt; 55363: (2.94118%)&lt;BR/&gt; 55362: (2.94118%)&lt;BR/&gt; 55361: (2.94118%)&gt;];
}
2486--3499[label="1;17pkt 17fpkt"];
2486--4157[label="1;17pkt 17fpkt"];
3499--4157[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="99.221.51.40" dst_port="443" src_ip="166.28.199.67"/>
      <filter dst_ip="99.221.51.9" dst_port="143" src_ip="166.28.199.67"/>
    </slice>
    <from sec="1136091702" usec="0"/>
    <to sec="1136092387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.46.199.68"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136091918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
2494[label="166.28.208.68;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3506[label="166.28.208.68;18pkt 18fpkt", shape=invtriangle, color=brown];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.208.68:*, 217.204.97.48:80}[72.2222%]&lt;BR/&gt;{166.28.208.68:*, 217.205.131.83:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51002: (2.77778%)&lt;BR/&gt; 50998: (2.77778%)&lt;BR/&gt; 50997: (2.77778%)&lt;BR/&gt; 50995: (2.77778%)&gt;];
}
2494--3506[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="217.204.97.48" dst_port="80" src_ip="166.28.208.68"/>
      <filter dst_ip="217.205.131.83" dst_port="80" src_ip="166.28.208.68"/>
    </slice>
    <from sec="1136092184" usec="0"/>
    <to sec="1136092464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
2495[label="141.141.235.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3507[label="141.141.235.68;1pkt 1fpkt", shape=invtriangle, color=brown];
4160[label="141.141.235.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.141.235.68:32804, 136.47.19.83:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32804: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
2495--3507[label="1;1pkt 1fpkt"];
2495--4160[label="1;1pkt 1fpkt"];
3507--4160[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.19.83" dst_port="53" src_ip="141.141.235.68" src_port="32804"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
2499[label="166.29.151.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3509[label="166.29.151.69;2pkt 2fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.69:25, 63.250.72.121:2841}[50%]&lt;BR/&gt;{166.29.151.69:25, 213.6.216.240:1108}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2841: (25%)&lt;BR/&gt; 1108: (25%)&gt;];
}
2499--3509[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.6.216.240" dst_port="1108" src_ip="166.29.151.69" src_port="25"/>
      <filter dst_ip="63.250.72.121" dst_port="2841" src_ip="166.29.151.69" src_port="25"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
2502[label="58.188.0.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3512[label="58.188.0.70;1pkt 1fpkt", shape=invtriangle, color=brown];
4162[label="58.188.0.70;2pkt 2fpkt", shape=invhouse, color=bisque];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.188.0.70:80, 193.114.40.137:44299}[50%]&lt;BR/&gt;{58.188.0.70:80, 178.142.172.226:1992}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44299: (37.5%)&lt;BR/&gt; 1992: (12.5%)&gt;];
}
2502--3512[label="1;1pkt 1fpkt"];
2502--4162[label="1;1pkt 1fpkt"];
3512--4162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.172.226" dst_port="1992" src_ip="58.188.0.70" src_port="80"/>
      <filter dst_ip="193.114.40.137" dst_port="44299" src_ip="58.188.0.70" src_port="80"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
210[label="160.4.238.73;s;13971pkt 13971fpkt", shape=diamond, color=yellow];
211[label="57.6.154.223;d;1239pkt 1239fpkt", shape=diamond, color=yellow];
234[label="220.113.45.232;d;2906pkt 2906fpkt", shape=diamond, color=yellow];
372[label="166.28.3.155;s;2070pkt 2070fpkt", shape=diamond, color=yellow];
554[label="200.182.172.34;d;95pkt 95fpkt", shape=diamond, color=yellow];
587[label="166.28.180.80;s;874pkt 874fpkt", shape=diamond, color=yellow];
709[label="213.12.160.73;d;31pkt 31fpkt", shape=diamond, color=yellow];
754[label="136.47.65.82;s;555pkt 555fpkt", shape=diamond, color=yellow];
795[label="200.180.39.150;d;103pkt 103fpkt", shape=diamond, color=yellow];
812[label="160.4.95.6;s;1651pkt 1651fpkt", shape=diamond, color=yellow];
822[label="57.56.247.180;d;9pkt 9fpkt", shape=diamond, color=yellow];
826[label="200.187.89.143;d;111pkt 111fpkt", shape=diamond, color=yellow];
850[label="200.128.76.52;d;117pkt 117fpkt", shape=diamond, color=yellow];
852[label="200.163.51.42;d;107pkt 107fpkt", shape=diamond, color=yellow];
867[label="200.162.47.192;d;104pkt 104fpkt", shape=diamond, color=yellow];
874[label="166.28.152.10;s;549pkt 549fpkt", shape=diamond, color=yellow];
923[label="81.15.96.247;d;154pkt 154fpkt", shape=diamond, color=yellow];
941[label="85.184.197.129;d;41pkt 41fpkt", shape=diamond, color=yellow];
953[label="214.30.70.89;d;23pkt 23fpkt", shape=diamond, color=yellow];
998[label="200.147.219.230;d;108pkt 108fpkt", shape=diamond, color=yellow];
1003[label="200.160.79.167;d;95pkt 95fpkt", shape=diamond, color=yellow];
1009[label="200.149.189.228;d;99pkt 99fpkt", shape=diamond, color=yellow];
1032[label="193.114.33.81;s;143pkt 143fpkt", shape=diamond, color=yellow];
1094[label="166.28.205.20;s;382pkt 382fpkt", shape=diamond, color=yellow];
1104[label="136.47.64.66;s;437pkt 437fpkt", shape=diamond, color=yellow];
1150[label="192.248.190.252;s;429pkt 429fpkt", shape=diamond, color=yellow];
1191[label="209.120.9.135;d;3pkt 3fpkt", shape=diamond, color=yellow];
1228[label="166.28.194.37;s;26pkt 26fpkt", shape=diamond, color=yellow];
1258[label="166.28.49.15;s;113pkt 113fpkt", shape=diamond, color=yellow];
1335[label="57.120.147.113;d;1364pkt 1364fpkt", shape=diamond, color=yellow];
1347[label="200.162.47.245;d;79pkt 79fpkt", shape=diamond, color=yellow];
1367[label="160.4.238.100;s;664pkt 664fpkt", shape=diamond, color=yellow];
1386[label="166.29.78.10;s;263pkt 263fpkt", shape=diamond, color=yellow];
1387[label="192.99.48.25;d;18pkt 18fpkt", shape=diamond, color=yellow];
1421[label="215.154.89.106;d;26pkt 26fpkt", shape=diamond, color=yellow];
1479[label="200.141.230.17;d;146pkt 146fpkt", shape=diamond, color=yellow];
1490[label="200.184.137.229;d;81pkt 81fpkt", shape=diamond, color=yellow];
1520[label="80.164.82.172;d;2pkt 2fpkt", shape=diamond, color=yellow];
1549[label="166.28.3.149;s;375pkt 375fpkt", shape=diamond, color=yellow];
1559[label="202.217.221.244;d;5pkt 5fpkt", shape=diamond, color=yellow];
1587[label="192.84.127.135;d;20pkt 20fpkt", shape=diamond, color=yellow];
1627[label="60.102.209.92;d;522pkt 522fpkt", shape=diamond, color=yellow];
1700[label="200.182.172.34;d;88pkt 88fpkt", shape=hexagon, color=black];
1740[label="166.28.180.80;s;646pkt 646fpkt", shape=hexagon, color=black];
1767[label="200.128.76.52;d;69pkt 69fpkt", shape=hexagon, color=black];
1784[label="85.184.197.129;d;41pkt 41fpkt", shape=hexagon, color=black];
1882[label="166.28.3.155;s;1457pkt 1457fpkt", shape=hexagon, color=black];
1889[label="136.47.64.66;s;437pkt 437fpkt", shape=hexagon, color=black];
1906[label="200.149.189.228;d;82pkt 82fpkt", shape=hexagon, color=black];
1975[label="200.163.51.42;d;98pkt 98fpkt", shape=hexagon, color=black];
1976[label="160.4.238.100;s;664pkt 664fpkt", shape=hexagon, color=black];
1983[label="193.114.33.81;s;143pkt 143fpkt", shape=hexagon, color=black];
1985[label="166.29.78.10;s;232pkt 232fpkt", shape=hexagon, color=black];
2055[label="166.28.3.149;s;375pkt 375fpkt", shape=hexagon, color=black];
2076[label="192.84.127.135;d;20pkt 20fpkt", shape=hexagon, color=black];
2193[label="166.29.78.8;153pkt 153fpkt", shape=pentagon, color=darkviolet];
2236[label="192.242.37.14;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2239[label="166.28.49.15;123pkt 123fpkt", shape=pentagon, color=darkviolet];
2255[label="166.28.161.19;113pkt 113fpkt", shape=pentagon, color=darkviolet];
2272[label="160.4.39.23;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2322[label="192.242.32.33;47pkt 47fpkt", shape=pentagon, color=darkviolet];
2349[label="166.28.194.37;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2421[label="166.29.152.54;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2523[label="160.4.238.73;15019pkt 15019fpkt", shape=pentagon, color=darkviolet];
2558[label="166.28.180.80;922pkt 922fpkt", shape=pentagon, color=darkviolet];
2561[label="193.114.33.81;149pkt 149fpkt", shape=pentagon, color=darkviolet];
2639[label="166.29.234.95;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2888[label="166.28.3.155;2199pkt 2199fpkt", shape=pentagon, color=darkviolet];
2958[label="160.4.95.170;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3028[label="192.242.42.189;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3118[label="193.114.58.209;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3158[label="166.28.208.220;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3349[label="166.28.161.19;114pkt 114fpkt", shape=invtriangle, color=brown];
3390[label="192.242.32.33;46pkt 46fpkt", shape=invtriangle, color=brown];
3409[label="166.28.194.37;33pkt 33fpkt", shape=invtriangle, color=brown];
3451[label="166.29.152.54;19pkt 19fpkt", shape=invtriangle, color=brown];
3528[label="160.4.238.73;15019pkt 15019fpkt", shape=invtriangle, color=brown];
3557[label="166.28.180.80;922pkt 922fpkt", shape=invtriangle, color=brown];
3561[label="193.114.33.81;149pkt 149fpkt", shape=invtriangle, color=brown];
3786[label="166.28.3.155;2198pkt 2198fpkt", shape=invtriangle, color=brown];
3889[label="192.242.42.189;59pkt 59fpkt", shape=invtriangle, color=brown];
3946[label="193.114.58.209;38pkt 38fpkt", shape=invtriangle, color=brown];
3978[label="166.28.208.220;47pkt 47fpkt", shape=invtriangle, color=brown];
4169[label="160.4.238.73;14977pkt 14977fpkt", shape=invhouse, color=bisque];
4293[label="166.28.3.155;2193pkt 2193fpkt", shape=invhouse, color=bisque];
4345[label="192.242.42.189;59pkt 59fpkt", shape=invhouse, color=bisque];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.238.73:*, *:53}[25.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (27.025%)&lt;BR/&gt; 25: (13.0639%)&lt;BR/&gt; 2703: (4.34418%)&lt;BR/&gt; 24441: (3.97554%)&lt;BR/&gt; 1024: (1.76765%)&gt;];
}
210--211[label="0.90799;1125pkt 1125fpkt"];
210--234[label="1;2906pkt 2906fpkt"];
210--554[label="0.442105;42pkt 42fpkt"];
210--709[label="1;31pkt 31fpkt"];
210--795[label="0.349515;36pkt 36fpkt"];
210--822[label="0.333333;3pkt 3fpkt"];
210--826[label="0.423423;47pkt 47fpkt"];
210--850[label="0.42735;50pkt 50fpkt"];
210--852[label="0.448598;48pkt 48fpkt"];
210--867[label="0.307692;32pkt 32fpkt"];
210--923[label="1;154pkt 154fpkt"];
210--941[label="1;41pkt 41fpkt"];
210--953[label="1;23pkt 23fpkt"];
210--998[label="0.407407;44pkt 44fpkt"];
210--1003[label="0.410526;39pkt 39fpkt"];
210--1009[label="0.414141;41pkt 41fpkt"];
210--1065[label="0.0116788;8pkt 8fpkt"];
210--1191[label="1;3pkt 3fpkt"];
210--1335[label="0.986804;1346pkt 1346fpkt"];
210--1347[label="0.227848;18pkt 18fpkt"];
210--1387[label="1;18pkt 18fpkt"];
210--1479[label="0.130137;19pkt 19fpkt"];
210--1490[label="0.555556;45pkt 45fpkt"];
210--1520[label="1;2pkt 2fpkt"];
210--1587[label="1;20pkt 20fpkt"];
210--1700[label="0.431818;38pkt 38fpkt"];
210--1767[label="0.376812;26pkt 26fpkt"];
210--1784[label="1;41pkt 41fpkt"];
210--1906[label="0.402439;33pkt 33fpkt"];
210--1975[label="0.428571;42pkt 42fpkt"];
210--2076[label="1;20pkt 20fpkt"];
210--2523[label="0.999928;13970pkt 13970fpkt"];
210--3528[label="0.999928;13970pkt 13970fpkt"];
210--4169[label="0.996922;13928pkt 13928fpkt"];
211--424[label="0.0337302;34pkt 34fpkt"];
211--1032[label="0.251748;36pkt 36fpkt"];
211--1258[label="0.0530973;6pkt 6fpkt"];
211--1849[label="0.0374037;34pkt 34fpkt"];
211--1983[label="0.251748;36pkt 36fpkt"];
211--2239[label="0.0487805;6pkt 6fpkt"];
211--2263[label="0.0336301;34pkt 34fpkt"];
211--2523[label="0.90799;1125pkt 1125fpkt"];
211--2561[label="0.241611;36pkt 36fpkt"];
211--2958[label="0.5;12pkt 12fpkt"];
211--3354[label="0.0336301;34pkt 34fpkt"];
211--3528[label="0.90799;1125pkt 1125fpkt"];
211--3561[label="0.241611;36pkt 36fpkt"];
211--4169[label="0.903955;1120pkt 1120fpkt"];
234--2523[label="1;2906pkt 2906fpkt"];
234--3528[label="1;2906pkt 2906fpkt"];
234--4169[label="0.997591;2899pkt 2899fpkt"];
372--554[label="0.0105263;1pkt 1fpkt"];
372--795[label="0.00970874;1pkt 1fpkt"];
372--822[label="0.111111;1pkt 1fpkt"];
372--826[label="0.00900901;1pkt 1fpkt"];
372--850[label="0.00854701;1pkt 1fpkt"];
372--852[label="0.00934579;1pkt 1fpkt"];
372--867[label="0.00961538;1pkt 1fpkt"];
372--998[label="0.00925926;1pkt 1fpkt"];
372--1003[label="0.0105263;1pkt 1fpkt"];
372--1009[label="0.010101;1pkt 1fpkt"];
372--1241[label="0.00337838;1pkt 1fpkt"];
372--1347[label="0.0126582;1pkt 1fpkt"];
372--1421[label="0.0384615;1pkt 1fpkt"];
372--1474[label="0.00324675;1pkt 1fpkt"];
372--1479[label="0.00684932;1pkt 1fpkt"];
372--1490[label="0.0123457;1pkt 1fpkt"];
372--1497[label="0.0740741;2pkt 2fpkt"];
372--1559[label="0.2;1pkt 1fpkt"];
372--1627[label="0.114943;60pkt 60fpkt"];
372--1700[label="0.0113636;1pkt 1fpkt"];
372--1767[label="0.0144928;1pkt 1fpkt"];
372--1882[label="1;1457pkt 1457fpkt"];
372--1906[label="0.0121951;1pkt 1fpkt"];
372--1975[label="0.0102041;1pkt 1fpkt"];
372--2020[label="0.00348432;1pkt 1fpkt"];
372--2135[label="0.0714976;148pkt 148fpkt"];
372--2888[label="1;2070pkt 2070fpkt"];
372--3786[label="0.999517;2069pkt 2069fpkt"];
372--4293[label="0.997101;2064pkt 2064fpkt"];
554--587[label="0.0105263;1pkt 1fpkt"];
554--754[label="0.0105263;1pkt 1fpkt"];
554--786[label="0.0105263;1pkt 1fpkt"];
554--790[label="0.0105263;1pkt 1fpkt"];
554--812[label="0.0105263;1pkt 1fpkt"];
554--835[label="0.0105263;1pkt 1fpkt"];
554--870[label="0.0105263;1pkt 1fpkt"];
554--874[label="0.0105263;1pkt 1fpkt"];
554--1094[label="0.0105263;1pkt 1fpkt"];
554--1104[label="0.0105263;1pkt 1fpkt"];
554--1130[label="0.0105263;1pkt 1fpkt"];
554--1142[label="0.0105263;1pkt 1fpkt"];
554--1278[label="0.0105263;1pkt 1fpkt"];
554--1386[label="0.0315789;3pkt 3fpkt"];
554--1549[label="0.0105263;1pkt 1fpkt"];
554--1700[label="1;88pkt 88fpkt"];
554--1721[label="0.0105263;1pkt 1fpkt"];
554--1740[label="0.0105263;1pkt 1fpkt"];
554--1772[label="0.0105263;1pkt 1fpkt"];
554--1880[label="0.0105263;1pkt 1fpkt"];
554--1882[label="0.0105263;1pkt 1fpkt"];
554--1889[label="0.0105263;1pkt 1fpkt"];
554--1895[label="0.0105263;1pkt 1fpkt"];
554--1937[label="0.0105263;1pkt 1fpkt"];
554--1947[label="0.0105263;1pkt 1fpkt"];
554--1985[label="0.0315789;3pkt 3fpkt"];
554--2052[label="0.0105263;1pkt 1fpkt"];
554--2055[label="0.0105263;1pkt 1fpkt"];
554--2135[label="0.0210526;2pkt 2fpkt"];
554--2193[label="0.0526316;5pkt 5fpkt"];
554--2219[label="0.0105263;1pkt 1fpkt"];
554--2245[label="0.011236;1pkt 1fpkt"];
554--2421[label="0.0526316;1pkt 1fpkt"];
554--2440[label="0.0105263;1pkt 1fpkt"];
554--2523[label="0.442105;42pkt 42fpkt"];
554--2555[label="0.0105263;1pkt 1fpkt"];
554--2556[label="0.0105263;1pkt 1fpkt"];
554--2558[label="0.0105263;1pkt 1fpkt"];
554--2627[label="0.0105263;1pkt 1fpkt"];
554--2669[label="0.0105263;1pkt 1fpkt"];
554--2701[label="0.0105263;1pkt 1fpkt"];
554--2823[label="0.0105263;1pkt 1fpkt"];
554--2888[label="0.0105263;1pkt 1fpkt"];
554--3327[label="0.0105263;1pkt 1fpkt"];
554--3451[label="0.0526316;1pkt 1fpkt"];
554--3528[label="0.442105;42pkt 42fpkt"];
554--3554[label="0.0105263;1pkt 1fpkt"];
554--3555[label="0.0105263;1pkt 1fpkt"];
554--3557[label="0.0105263;1pkt 1fpkt"];
554--3608[label="0.0105263;1pkt 1fpkt"];
554--3630[label="0.0105263;1pkt 1fpkt"];
554--3650[label="0.0105263;1pkt 1fpkt"];
554--3786[label="0.0105263;1pkt 1fpkt"];
554--4074[label="0.0105263;1pkt 1fpkt"];
554--4169[label="0.410526;39pkt 39fpkt"];
554--4200[label="0.0105263;1pkt 1fpkt"];
554--4293[label="0.0105263;1pkt 1fpkt"];
587--795[label="0.00970874;1pkt 1fpkt"];
587--826[label="0.00900901;1pkt 1fpkt"];
587--850[label="0.00854701;1pkt 1fpkt"];
587--852[label="0.00934579;1pkt 1fpkt"];
587--867[label="0.00961538;1pkt 1fpkt"];
587--998[label="0.00925926;1pkt 1fpkt"];
587--1003[label="0.0105263;1pkt 1fpkt"];
587--1009[label="0.010101;1pkt 1fpkt"];
587--1347[label="0.0126582;1pkt 1fpkt"];
587--1474[label="0.00324675;1pkt 1fpkt"];
587--1479[label="0.00684932;1pkt 1fpkt"];
587--1490[label="0.0123457;1pkt 1fpkt"];
587--1559[label="0.2;1pkt 1fpkt"];
587--1627[label="0.272031;142pkt 142fpkt"];
587--1700[label="0.0113636;1pkt 1fpkt"];
587--1740[label="1;646pkt 646fpkt"];
587--1767[label="0.0144928;1pkt 1fpkt"];
587--1906[label="0.0121951;1pkt 1fpkt"];
587--1975[label="0.0102041;1pkt 1fpkt"];
587--2135[label="0.00800915;7pkt 7fpkt"];
587--2558[label="0.998856;873pkt 873fpkt"];
587--3557[label="0.998856;873pkt 873fpkt"];
709--2523[label="1;31pkt 31fpkt"];
709--3528[label="1;31pkt 31fpkt"];
709--4169[label="1;31pkt 31fpkt"];
754--795[label="0.00970874;1pkt 1fpkt"];
754--822[label="0.111111;1pkt 1fpkt"];
754--826[label="0.00900901;1pkt 1fpkt"];
754--850[label="0.00854701;1pkt 1fpkt"];
754--852[label="0.00934579;1pkt 1fpkt"];
754--867[label="0.00961538;1pkt 1fpkt"];
754--998[label="0.00925926;1pkt 1fpkt"];
754--1003[label="0.0105263;1pkt 1fpkt"];
754--1009[label="0.010101;1pkt 1fpkt"];
754--1347[label="0.0126582;1pkt 1fpkt"];
754--1421[label="0.0384615;1pkt 1fpkt"];
754--1479[label="0.00684932;1pkt 1fpkt"];
754--1490[label="0.0123457;1pkt 1fpkt"];
754--1700[label="0.0113636;1pkt 1fpkt"];
754--1767[label="0.0144928;1pkt 1fpkt"];
754--1906[label="0.0121951;1pkt 1fpkt"];
754--1975[label="0.0102041;1pkt 1fpkt"];
795--812[label="0.00970874;1pkt 1fpkt"];
795--835[label="0.00970874;1pkt 1fpkt"];
795--870[label="0.00970874;1pkt 1fpkt"];
795--874[label="0.00970874;1pkt 1fpkt"];
795--1094[label="0.00970874;1pkt 1fpkt"];
795--1104[label="0.00970874;1pkt 1fpkt"];
795--1142[label="0.00970874;1pkt 1fpkt"];
795--1150[label="0.00970874;1pkt 1fpkt"];
795--1271[label="0.00970874;1pkt 1fpkt"];
795--1278[label="0.00970874;1pkt 1fpkt"];
795--1367[label="0.0194175;2pkt 2fpkt"];
795--1386[label="0.0194175;2pkt 2fpkt"];
795--1549[label="0.00970874;1pkt 1fpkt"];
795--1569[label="0.00970874;1pkt 1fpkt"];
795--1721[label="0.00970874;1pkt 1fpkt"];
795--1740[label="0.00970874;1pkt 1fpkt"];
795--1772[label="0.00970874;1pkt 1fpkt"];
795--1880[label="0.00970874;1pkt 1fpkt"];
795--1882[label="0.00970874;1pkt 1fpkt"];
795--1889[label="0.00970874;1pkt 1fpkt"];
795--1895[label="0.00970874;1pkt 1fpkt"];
795--1937[label="0.00970874;1pkt 1fpkt"];
795--1947[label="0.00970874;1pkt 1fpkt"];
795--1976[label="0.0194175;2pkt 2fpkt"];
795--1980[label="0.00970874;1pkt 1fpkt"];
795--1985[label="0.0194175;2pkt 2fpkt"];
795--2052[label="0.00970874;1pkt 1fpkt"];
795--2055[label="0.00970874;1pkt 1fpkt"];
795--2135[label="0.0194175;2pkt 2fpkt"];
795--2193[label="0.0485437;5pkt 5fpkt"];
795--2211[label="0.00970874;1pkt 1fpkt"];
795--2214[label="0.0119048;1pkt 1fpkt"];
795--2219[label="0.00970874;1pkt 1fpkt"];
795--2236[label="0.03125;1pkt 1fpkt"];
795--2322[label="0.0212766;1pkt 1fpkt"];
795--2395[label="0.00970874;1pkt 1fpkt"];
795--2421[label="0.157895;3pkt 3fpkt"];
795--2440[label="0.00970874;1pkt 1fpkt"];
795--2523[label="0.349515;36pkt 36fpkt"];
795--2555[label="0.00970874;1pkt 1fpkt"];
795--2556[label="0.00970874;1pkt 1fpkt"];
795--2558[label="0.00970874;1pkt 1fpkt"];
795--2627[label="0.00970874;1pkt 1fpkt"];
795--2639[label="0.030303;1pkt 1fpkt"];
795--2669[label="0.00970874;1pkt 1fpkt"];
795--2701[label="0.00970874;1pkt 1fpkt"];
795--2823[label="0.00970874;1pkt 1fpkt"];
795--2888[label="0.00970874;1pkt 1fpkt"];
795--3028[label="0.0169492;1pkt 1fpkt"];
795--3118[label="0.0263158;1pkt 1fpkt"];
795--3176[label="0.00970874;1pkt 1fpkt"];
795--3327[label="0.00970874;1pkt 1fpkt"];
795--3390[label="0.0217391;1pkt 1fpkt"];
795--3451[label="0.157895;3pkt 3fpkt"];
795--3528[label="0.349515;36pkt 36fpkt"];
795--3554[label="0.00970874;1pkt 1fpkt"];
795--3555[label="0.00970874;1pkt 1fpkt"];
795--3557[label="0.00970874;1pkt 1fpkt"];
795--3608[label="0.00970874;1pkt 1fpkt"];
795--3630[label="0.00970874;1pkt 1fpkt"];
795--3650[label="0.00970874;1pkt 1fpkt"];
795--3786[label="0.00970874;1pkt 1fpkt"];
795--3889[label="0.0169492;1pkt 1fpkt"];
795--3946[label="0.0263158;1pkt 1fpkt"];
795--3988[label="0.00970874;1pkt 1fpkt"];
795--4074[label="0.00970874;1pkt 1fpkt"];
795--4169[label="0.349515;36pkt 36fpkt"];
795--4200[label="0.00970874;1pkt 1fpkt"];
795--4209[label="0.00970874;1pkt 1fpkt"];
795--4293[label="0.00970874;1pkt 1fpkt"];
795--4345[label="0.0169492;1pkt 1fpkt"];
795--4386[label="0.00970874;1pkt 1fpkt"];
812--822[label="0.111111;1pkt 1fpkt"];
812--826[label="0.00900901;1pkt 1fpkt"];
812--850[label="0.00854701;1pkt 1fpkt"];
812--852[label="0.00934579;1pkt 1fpkt"];
812--867[label="0.00961538;1pkt 1fpkt"];
812--998[label="0.00925926;1pkt 1fpkt"];
812--1003[label="0.0105263;1pkt 1fpkt"];
812--1009[label="0.010101;1pkt 1fpkt"];
812--1347[label="0.0126582;1pkt 1fpkt"];
812--1479[label="0.00684932;1pkt 1fpkt"];
812--1490[label="0.0123457;1pkt 1fpkt"];
812--1559[label="0.2;1pkt 1fpkt"];
812--1570[label="0.00344828;1pkt 1fpkt"];
812--1700[label="0.0113636;1pkt 1fpkt"];
812--1767[label="0.0144928;1pkt 1fpkt"];
812--1906[label="0.0121951;1pkt 1fpkt"];
812--1975[label="0.0102041;1pkt 1fpkt"];
812--2069[label="0.00344828;1pkt 1fpkt"];
812--2135[label="0.0732889;121pkt 121fpkt"];
822--1094[label="0.111111;1pkt 1fpkt"];
822--1104[label="0.111111;1pkt 1fpkt"];
822--1549[label="0.111111;1pkt 1fpkt"];
822--1882[label="0.111111;1pkt 1fpkt"];
822--1889[label="0.111111;1pkt 1fpkt"];
822--2055[label="0.111111;1pkt 1fpkt"];
822--2523[label="0.333333;3pkt 3fpkt"];
822--2888[label="0.111111;1pkt 1fpkt"];
822--3528[label="0.333333;3pkt 3fpkt"];
822--3786[label="0.111111;1pkt 1fpkt"];
822--4169[label="0.333333;3pkt 3fpkt"];
822--4293[label="0.111111;1pkt 1fpkt"];
826--835[label="0.00900901;1pkt 1fpkt"];
826--870[label="0.00900901;1pkt 1fpkt"];
826--874[label="0.00900901;1pkt 1fpkt"];
826--988[label="0.00900901;1pkt 1fpkt"];
826--1094[label="0.00900901;1pkt 1fpkt"];
826--1104[label="0.00900901;1pkt 1fpkt"];
826--1130[label="0.00900901;1pkt 1fpkt"];
826--1142[label="0.00900901;1pkt 1fpkt"];
826--1150[label="0.00900901;1pkt 1fpkt"];
826--1252[label="0.0294118;1pkt 1fpkt"];
826--1271[label="0.00900901;1pkt 1fpkt"];
826--1278[label="0.00900901;1pkt 1fpkt"];
826--1367[label="0.018018;2pkt 2fpkt"];
826--1386[label="0.00900901;1pkt 1fpkt"];
826--1549[label="0.00900901;1pkt 1fpkt"];
826--1721[label="0.00900901;1pkt 1fpkt"];
826--1740[label="0.00900901;1pkt 1fpkt"];
826--1772[label="0.00900901;1pkt 1fpkt"];
826--1880[label="0.00900901;1pkt 1fpkt"];
826--1882[label="0.00900901;1pkt 1fpkt"];
826--1889[label="0.00900901;1pkt 1fpkt"];
826--1895[label="0.00900901;1pkt 1fpkt"];
826--1937[label="0.00900901;1pkt 1fpkt"];
826--1947[label="0.00900901;1pkt 1fpkt"];
826--1976[label="0.018018;2pkt 2fpkt"];
826--1980[label="0.00900901;1pkt 1fpkt"];
826--1985[label="0.00900901;1pkt 1fpkt"];
826--2029[label="0.030303;1pkt 1fpkt"];
826--2052[label="0.00900901;1pkt 1fpkt"];
826--2055[label="0.00900901;1pkt 1fpkt"];
826--2135[label="0.027027;3pkt 3fpkt"];
826--2193[label="0.0900901;10pkt 10fpkt"];
826--2206[label="0.00900901;1pkt 1fpkt"];
826--2211[label="0.00900901;1pkt 1fpkt"];
826--2219[label="0.00900901;1pkt 1fpkt"];
826--2245[label="0.011236;1pkt 1fpkt"];
826--2272[label="0.0263158;1pkt 1fpkt"];
826--2322[label="0.0212766;1pkt 1fpkt"];
826--2440[label="0.00900901;1pkt 1fpkt"];
826--2523[label="0.423423;47pkt 47fpkt"];
826--2555[label="0.00900901;1pkt 1fpkt"];
826--2556[label="0.00900901;1pkt 1fpkt"];
826--2558[label="0.00900901;1pkt 1fpkt"];
826--2627[label="0.00900901;1pkt 1fpkt"];
826--2639[label="0.030303;1pkt 1fpkt"];
826--2669[label="0.00900901;1pkt 1fpkt"];
826--2671[label="0.00900901;1pkt 1fpkt"];
826--2774[label="0.0105263;1pkt 1fpkt"];
826--2823[label="0.00900901;1pkt 1fpkt"];
826--2888[label="0.00900901;1pkt 1fpkt"];
826--3158[label="0.0208333;1pkt 1fpkt"];
826--3176[label="0.00900901;1pkt 1fpkt"];
826--3319[label="0.00900901;1pkt 1fpkt"];
826--3327[label="0.00900901;1pkt 1fpkt"];
826--3390[label="0.0217391;1pkt 1fpkt"];
826--3528[label="0.423423;47pkt 47fpkt"];
826--3554[label="0.00900901;1pkt 1fpkt"];
826--3555[label="0.00900901;1pkt 1fpkt"];
826--3557[label="0.00900901;1pkt 1fpkt"];
826--3608[label="0.00900901;1pkt 1fpkt"];
826--3630[label="0.00900901;1pkt 1fpkt"];
826--3704[label="0.0106383;1pkt 1fpkt"];
826--3786[label="0.00900901;1pkt 1fpkt"];
826--3978[label="0.0212766;1pkt 1fpkt"];
826--3988[label="0.00900901;1pkt 1fpkt"];
826--4074[label="0.00900901;1pkt 1fpkt"];
826--4169[label="0.423423;47pkt 47fpkt"];
826--4200[label="0.00900901;1pkt 1fpkt"];
826--4293[label="0.00900901;1pkt 1fpkt"];
826--4386[label="0.00900901;1pkt 1fpkt"];
850--870[label="0.00854701;1pkt 1fpkt"];
850--874[label="0.00854701;1pkt 1fpkt"];
850--1078[label="0.00854701;1pkt 1fpkt"];
850--1094[label="0.00854701;1pkt 1fpkt"];
850--1104[label="0.00854701;1pkt 1fpkt"];
850--1142[label="0.00854701;1pkt 1fpkt"];
850--1150[label="0.00854701;1pkt 1fpkt"];
850--1278[label="0.00854701;1pkt 1fpkt"];
850--1367[label="0.00854701;1pkt 1fpkt"];
850--1386[label="0.025641;3pkt 3fpkt"];
850--1549[label="0.00854701;1pkt 1fpkt"];
850--1721[label="0.00854701;1pkt 1fpkt"];
850--1740[label="0.00854701;1pkt 1fpkt"];
850--1767[label="1;69pkt 69fpkt"];
850--1772[label="0.00854701;1pkt 1fpkt"];
850--1880[label="0.00854701;1pkt 1fpkt"];
850--1882[label="0.00854701;1pkt 1fpkt"];
850--1889[label="0.00854701;1pkt 1fpkt"];
850--1895[label="0.00854701;1pkt 1fpkt"];
850--1937[label="0.00854701;1pkt 1fpkt"];
850--1944[label="0.00854701;1pkt 1fpkt"];
850--1947[label="0.00854701;1pkt 1fpkt"];
850--1976[label="0.00854701;1pkt 1fpkt"];
850--1985[label="0.025641;3pkt 3fpkt"];
850--2052[label="0.00854701;1pkt 1fpkt"];
850--2055[label="0.00854701;1pkt 1fpkt"];
850--2135[label="0.017094;2pkt 2fpkt"];
850--2193[label="0.0854701;10pkt 10fpkt"];
850--2219[label="0.00854701;1pkt 1fpkt"];
850--2388[label="0.00854701;1pkt 1fpkt"];
850--2421[label="0.157895;3pkt 3fpkt"];
850--2440[label="0.00854701;1pkt 1fpkt"];
850--2523[label="0.42735;50pkt 50fpkt"];
850--2555[label="0.00854701;1pkt 1fpkt"];
850--2556[label="0.00854701;1pkt 1fpkt"];
850--2558[label="0.00854701;1pkt 1fpkt"];
850--2627[label="0.00854701;1pkt 1fpkt"];
850--2639[label="0.030303;1pkt 1fpkt"];
850--2669[label="0.00854701;1pkt 1fpkt"];
850--2823[label="0.00854701;1pkt 1fpkt"];
850--2888[label="0.00854701;1pkt 1fpkt"];
850--3028[label="0.0169492;1pkt 1fpkt"];
850--3158[label="0.0208333;1pkt 1fpkt"];
850--3176[label="0.00854701;1pkt 1fpkt"];
850--3327[label="0.00854701;1pkt 1fpkt"];
850--3451[label="0.157895;3pkt 3fpkt"];
850--3528[label="0.42735;50pkt 50fpkt"];
850--3554[label="0.00854701;1pkt 1fpkt"];
850--3555[label="0.00854701;1pkt 1fpkt"];
850--3557[label="0.00854701;1pkt 1fpkt"];
850--3608[label="0.00854701;1pkt 1fpkt"];
850--3630[label="0.00854701;1pkt 1fpkt"];
850--3786[label="0.00854701;1pkt 1fpkt"];
850--3889[label="0.0169492;1pkt 1fpkt"];
850--3978[label="0.0212766;1pkt 1fpkt"];
850--3988[label="0.00854701;1pkt 1fpkt"];
850--4074[label="0.00854701;1pkt 1fpkt"];
850--4169[label="0.42735;50pkt 50fpkt"];
850--4200[label="0.00854701;1pkt 1fpkt"];
850--4293[label="0.00854701;1pkt 1fpkt"];
850--4345[label="0.0169492;1pkt 1fpkt"];
850--4386[label="0.00854701;1pkt 1fpkt"];
852--870[label="0.00934579;1pkt 1fpkt"];
852--874[label="0.00934579;1pkt 1fpkt"];
852--1078[label="0.00934579;1pkt 1fpkt"];
852--1104[label="0.00934579;1pkt 1fpkt"];
852--1142[label="0.00934579;1pkt 1fpkt"];
852--1150[label="0.00934579;1pkt 1fpkt"];
852--1271[label="0.00934579;1pkt 1fpkt"];
852--1278[label="0.00934579;1pkt 1fpkt"];
852--1367[label="0.00934579;1pkt 1fpkt"];
852--1386[label="0.0373832;4pkt 4fpkt"];
852--1549[label="0.00934579;1pkt 1fpkt"];
852--1721[label="0.00934579;1pkt 1fpkt"];
852--1740[label="0.00934579;1pkt 1fpkt"];
852--1772[label="0.00934579;1pkt 1fpkt"];
852--1880[label="0.00934579;1pkt 1fpkt"];
852--1882[label="0.00934579;1pkt 1fpkt"];
852--1889[label="0.00934579;1pkt 1fpkt"];
852--1895[label="0.00934579;1pkt 1fpkt"];
852--1937[label="0.00934579;1pkt 1fpkt"];
852--1944[label="0.00934579;1pkt 1fpkt"];
852--1947[label="0.00934579;1pkt 1fpkt"];
852--1975[label="1;98pkt 98fpkt"];
852--1976[label="0.00934579;1pkt 1fpkt"];
852--1980[label="0.00934579;1pkt 1fpkt"];
852--1985[label="0.0373832;4pkt 4fpkt"];
852--2052[label="0.00934579;1pkt 1fpkt"];
852--2055[label="0.00934579;1pkt 1fpkt"];
852--2135[label="0.0280374;3pkt 3fpkt"];
852--2193[label="0.0373832;4pkt 4fpkt"];
852--2211[label="0.00934579;1pkt 1fpkt"];
852--2214[label="0.0119048;1pkt 1fpkt"];
852--2219[label="0.00934579;1pkt 1fpkt"];
852--2388[label="0.00934579;1pkt 1fpkt"];
852--2421[label="0.105263;2pkt 2fpkt"];
852--2440[label="0.00934579;1pkt 1fpkt"];
852--2523[label="0.448598;48pkt 48fpkt"];
852--2555[label="0.00934579;1pkt 1fpkt"];
852--2556[label="0.00934579;1pkt 1fpkt"];
852--2558[label="0.00934579;1pkt 1fpkt"];
852--2627[label="0.00934579;1pkt 1fpkt"];
852--2639[label="0.030303;1pkt 1fpkt"];
852--2669[label="0.00934579;1pkt 1fpkt"];
852--2823[label="0.00934579;1pkt 1fpkt"];
852--2888[label="0.00934579;1pkt 1fpkt"];
852--3158[label="0.0208333;1pkt 1fpkt"];
852--3176[label="0.00934579;1pkt 1fpkt"];
852--3327[label="0.00934579;1pkt 1fpkt"];
852--3451[label="0.105263;2pkt 2fpkt"];
852--3528[label="0.448598;48pkt 48fpkt"];
852--3554[label="0.00934579;1pkt 1fpkt"];
852--3555[label="0.00934579;1pkt 1fpkt"];
852--3557[label="0.00934579;1pkt 1fpkt"];
852--3608[label="0.00934579;1pkt 1fpkt"];
852--3630[label="0.00934579;1pkt 1fpkt"];
852--3786[label="0.00934579;1pkt 1fpkt"];
852--3978[label="0.0212766;1pkt 1fpkt"];
852--3988[label="0.00934579;1pkt 1fpkt"];
852--4074[label="0.00934579;1pkt 1fpkt"];
852--4169[label="0.448598;48pkt 48fpkt"];
852--4200[label="0.00934579;1pkt 1fpkt"];
852--4209[label="0.00934579;1pkt 1fpkt"];
852--4293[label="0.00934579;1pkt 1fpkt"];
852--4386[label="0.00934579;1pkt 1fpkt"];
867--870[label="0.00961538;1pkt 1fpkt"];
867--874[label="0.00961538;1pkt 1fpkt"];
867--1012[label="0.00961538;1pkt 1fpkt"];
867--1078[label="0.00961538;1pkt 1fpkt"];
867--1094[label="0.00961538;1pkt 1fpkt"];
867--1104[label="0.00961538;1pkt 1fpkt"];
867--1130[label="0.00961538;1pkt 1fpkt"];
867--1142[label="0.00961538;1pkt 1fpkt"];
867--1150[label="0.00961538;1pkt 1fpkt"];
867--1271[label="0.00961538;1pkt 1fpkt"];
867--1278[label="0.00961538;1pkt 1fpkt"];
867--1386[label="0.00961538;1pkt 1fpkt"];
867--1549[label="0.00961538;1pkt 1fpkt"];
867--1721[label="0.00961538;1pkt 1fpkt"];
867--1740[label="0.00961538;1pkt 1fpkt"];
867--1772[label="0.00961538;1pkt 1fpkt"];
867--1880[label="0.00961538;1pkt 1fpkt"];
867--1882[label="0.00961538;1pkt 1fpkt"];
867--1889[label="0.00961538;1pkt 1fpkt"];
867--1895[label="0.00961538;1pkt 1fpkt"];
867--1937[label="0.00961538;1pkt 1fpkt"];
867--1944[label="0.00961538;1pkt 1fpkt"];
867--1947[label="0.00961538;1pkt 1fpkt"];
867--1980[label="0.00961538;1pkt 1fpkt"];
867--1985[label="0.00961538;1pkt 1fpkt"];
867--2052[label="0.00961538;1pkt 1fpkt"];
867--2055[label="0.00961538;1pkt 1fpkt"];
867--2135[label="0.00961538;1pkt 1fpkt"];
867--2193[label="0.0480769;5pkt 5fpkt"];
867--2206[label="0.0288462;3pkt 3fpkt"];
867--2211[label="0.00961538;1pkt 1fpkt"];
867--2214[label="0.0119048;1pkt 1fpkt"];
867--2219[label="0.00961538;1pkt 1fpkt"];
867--2388[label="0.00961538;1pkt 1fpkt"];
867--2421[label="0.210526;4pkt 4fpkt"];
867--2440[label="0.00961538;1pkt 1fpkt"];
867--2466[label="0.00961538;1pkt 1fpkt"];
867--2523[label="0.307692;32pkt 32fpkt"];
867--2555[label="0.00961538;1pkt 1fpkt"];
867--2556[label="0.00961538;1pkt 1fpkt"];
867--2558[label="0.00961538;1pkt 1fpkt"];
867--2627[label="0.00961538;1pkt 1fpkt"];
867--2639[label="0.030303;1pkt 1fpkt"];
867--2669[label="0.00961538;1pkt 1fpkt"];
867--2713[label="0.0263158;1pkt 1fpkt"];
867--2823[label="0.00961538;1pkt 1fpkt"];
867--2888[label="0.00961538;1pkt 1fpkt"];
867--3118[label="0.0263158;1pkt 1fpkt"];
867--3158[label="0.0208333;1pkt 1fpkt"];
867--3176[label="0.00961538;1pkt 1fpkt"];
867--3319[label="0.0288462;3pkt 3fpkt"];
867--3327[label="0.00961538;1pkt 1fpkt"];
867--3451[label="0.210526;4pkt 4fpkt"];
867--3528[label="0.307692;32pkt 32fpkt"];
867--3554[label="0.00961538;1pkt 1fpkt"];
867--3555[label="0.00961538;1pkt 1fpkt"];
867--3557[label="0.00961538;1pkt 1fpkt"];
867--3608[label="0.00961538;1pkt 1fpkt"];
867--3630[label="0.00961538;1pkt 1fpkt"];
867--3661[label="0.0263158;1pkt 1fpkt"];
867--3786[label="0.00961538;1pkt 1fpkt"];
867--3946[label="0.0263158;1pkt 1fpkt"];
867--3978[label="0.0212766;1pkt 1fpkt"];
867--3988[label="0.00961538;1pkt 1fpkt"];
867--4074[label="0.00961538;1pkt 1fpkt"];
867--4169[label="0.307692;32pkt 32fpkt"];
867--4200[label="0.00961538;1pkt 1fpkt"];
867--4224[label="0.0263158;1pkt 1fpkt"];
867--4293[label="0.00961538;1pkt 1fpkt"];
867--4386[label="0.00961538;1pkt 1fpkt"];
874--998[label="0.00925926;1pkt 1fpkt"];
874--1003[label="0.0105263;1pkt 1fpkt"];
874--1009[label="0.010101;1pkt 1fpkt"];
874--1347[label="0.0126582;1pkt 1fpkt"];
874--1479[label="0.00684932;1pkt 1fpkt"];
874--1490[label="0.0123457;1pkt 1fpkt"];
874--1559[label="0.2;1pkt 1fpkt"];
874--1627[label="0.0517241;27pkt 27fpkt"];
874--1700[label="0.0113636;1pkt 1fpkt"];
874--1975[label="0.0102041;1pkt 1fpkt"];
874--2135[label="0.0145719;8pkt 8fpkt"];
923--2523[label="1;154pkt 154fpkt"];
923--3528[label="1;154pkt 154fpkt"];
923--4169[label="1;154pkt 154fpkt"];
941--1784[label="1;41pkt 41fpkt"];
941--2523[label="1;41pkt 41fpkt"];
941--3528[label="1;41pkt 41fpkt"];
941--4169[label="1;41pkt 41fpkt"];
953--2523[label="1;23pkt 23fpkt"];
953--3528[label="1;23pkt 23fpkt"];
953--4169[label="1;23pkt 23fpkt"];
998--1104[label="0.00925926;1pkt 1fpkt"];
998--1142[label="0.00925926;1pkt 1fpkt"];
998--1150[label="0.00925926;1pkt 1fpkt"];
998--1271[label="0.00925926;1pkt 1fpkt"];
998--1278[label="0.00925926;1pkt 1fpkt"];
998--1386[label="0.00925926;1pkt 1fpkt"];
998--1549[label="0.00925926;1pkt 1fpkt"];
998--1721[label="0.00925926;1pkt 1fpkt"];
998--1740[label="0.00925926;1pkt 1fpkt"];
998--1772[label="0.00925926;1pkt 1fpkt"];
998--1880[label="0.00925926;1pkt 1fpkt"];
998--1882[label="0.00925926;1pkt 1fpkt"];
998--1889[label="0.00925926;1pkt 1fpkt"];
998--1895[label="0.00925926;1pkt 1fpkt"];
998--1937[label="0.00925926;1pkt 1fpkt"];
998--1947[label="0.00925926;1pkt 1fpkt"];
998--1961[label="0.00925926;1pkt 1fpkt"];
998--1980[label="0.00925926;1pkt 1fpkt"];
998--1985[label="0.00925926;1pkt 1fpkt"];
998--2052[label="0.00925926;1pkt 1fpkt"];
998--2055[label="0.00925926;1pkt 1fpkt"];
998--2135[label="0.00925926;1pkt 1fpkt"];
998--2193[label="0.101852;11pkt 11fpkt"];
998--2211[label="0.00925926;1pkt 1fpkt"];
998--2219[label="0.00925926;1pkt 1fpkt"];
998--2245[label="0.011236;1pkt 1fpkt"];
998--2421[label="0.0526316;1pkt 1fpkt"];
998--2440[label="0.00925926;1pkt 1fpkt"];
998--2466[label="0.00925926;1pkt 1fpkt"];
998--2523[label="0.407407;44pkt 44fpkt"];
998--2555[label="0.00925926;1pkt 1fpkt"];
998--2556[label="0.00925926;1pkt 1fpkt"];
998--2558[label="0.00925926;1pkt 1fpkt"];
998--2627[label="0.00925926;1pkt 1fpkt"];
998--2669[label="0.00925926;1pkt 1fpkt"];
998--2823[label="0.00925926;1pkt 1fpkt"];
998--2888[label="0.00925926;1pkt 1fpkt"];
998--3176[label="0.00925926;1pkt 1fpkt"];
998--3327[label="0.00925926;1pkt 1fpkt"];
998--3451[label="0.0526316;1pkt 1fpkt"];
998--3528[label="0.407407;44pkt 44fpkt"];
998--3554[label="0.00925926;1pkt 1fpkt"];
998--3555[label="0.00925926;1pkt 1fpkt"];
998--3557[label="0.00925926;1pkt 1fpkt"];
998--3608[label="0.00925926;1pkt 1fpkt"];
998--3630[label="0.00925926;1pkt 1fpkt"];
998--3786[label="0.00925926;1pkt 1fpkt"];
998--3988[label="0.00925926;1pkt 1fpkt"];
998--4074[label="0.00925926;1pkt 1fpkt"];
998--4169[label="0.407407;44pkt 44fpkt"];
998--4200[label="0.00925926;1pkt 1fpkt"];
998--4293[label="0.00925926;1pkt 1fpkt"];
998--4386[label="0.00925926;1pkt 1fpkt"];
1003--1094[label="0.0105263;1pkt 1fpkt"];
1003--1104[label="0.0105263;1pkt 1fpkt"];
1003--1142[label="0.0105263;1pkt 1fpkt"];
1003--1150[label="0.0105263;1pkt 1fpkt"];
1003--1271[label="0.0105263;1pkt 1fpkt"];
1003--1278[label="0.0105263;1pkt 1fpkt"];
1003--1386[label="0.0421053;4pkt 4fpkt"];
1003--1549[label="0.0105263;1pkt 1fpkt"];
1003--1721[label="0.0105263;1pkt 1fpkt"];
1003--1740[label="0.0105263;1pkt 1fpkt"];
1003--1772[label="0.0105263;1pkt 1fpkt"];
1003--1880[label="0.0105263;1pkt 1fpkt"];
1003--1882[label="0.0105263;1pkt 1fpkt"];
1003--1889[label="0.0105263;1pkt 1fpkt"];
1003--1895[label="0.0105263;1pkt 1fpkt"];
1003--1937[label="0.0105263;1pkt 1fpkt"];
1003--1947[label="0.0105263;1pkt 1fpkt"];
1003--1980[label="0.0105263;1pkt 1fpkt"];
1003--1985[label="0.0421053;4pkt 4fpkt"];
1003--2052[label="0.0105263;1pkt 1fpkt"];
1003--2055[label="0.0105263;1pkt 1fpkt"];
1003--2135[label="0.0105263;1pkt 1fpkt"];
1003--2193[label="0.0526316;5pkt 5fpkt"];
1003--2211[label="0.0105263;1pkt 1fpkt"];
1003--2214[label="0.0119048;1pkt 1fpkt"];
1003--2219[label="0.0105263;1pkt 1fpkt"];
1003--2236[label="0.03125;1pkt 1fpkt"];
1003--2255[label="0.0105263;1pkt 1fpkt"];
1003--2421[label="0.0526316;1pkt 1fpkt"];
1003--2440[label="0.0105263;1pkt 1fpkt"];
1003--2466[label="0.0105263;1pkt 1fpkt"];
1003--2523[label="0.410526;39pkt 39fpkt"];
1003--2555[label="0.0105263;1pkt 1fpkt"];
1003--2556[label="0.0105263;1pkt 1fpkt"];
1003--2558[label="0.0105263;1pkt 1fpkt"];
1003--2627[label="0.0105263;1pkt 1fpkt"];
1003--2639[label="0.030303;1pkt 1fpkt"];
1003--2669[label="0.0105263;1pkt 1fpkt"];
1003--2823[label="0.0105263;1pkt 1fpkt"];
1003--2888[label="0.0105263;1pkt 1fpkt"];
1003--3028[label="0.0169492;1pkt 1fpkt"];
1003--3118[label="0.0263158;1pkt 1fpkt"];
1003--3327[label="0.0105263;1pkt 1fpkt"];
1003--3349[label="0.0105263;1pkt 1fpkt"];
1003--3451[label="0.0526316;1pkt 1fpkt"];
1003--3528[label="0.410526;39pkt 39fpkt"];
1003--3554[label="0.0105263;1pkt 1fpkt"];
1003--3555[label="0.0105263;1pkt 1fpkt"];
1003--3557[label="0.0105263;1pkt 1fpkt"];
1003--3608[label="0.0105263;1pkt 1fpkt"];
1003--3630[label="0.0105263;1pkt 1fpkt"];
1003--3786[label="0.0105263;1pkt 1fpkt"];
1003--3889[label="0.0169492;1pkt 1fpkt"];
1003--3946[label="0.0263158;1pkt 1fpkt"];
1003--4074[label="0.0105263;1pkt 1fpkt"];
1003--4169[label="0.4;38pkt 38fpkt"];
1003--4200[label="0.0105263;1pkt 1fpkt"];
1003--4293[label="0.0105263;1pkt 1fpkt"];
1003--4345[label="0.0169492;1pkt 1fpkt"];
1009--1104[label="0.010101;1pkt 1fpkt"];
1009--1130[label="0.010101;1pkt 1fpkt"];
1009--1142[label="0.010101;1pkt 1fpkt"];
1009--1150[label="0.010101;1pkt 1fpkt"];
1009--1278[label="0.010101;1pkt 1fpkt"];
1009--1367[label="0.010101;1pkt 1fpkt"];
1009--1386[label="0.040404;4pkt 4fpkt"];
1009--1549[label="0.010101;1pkt 1fpkt"];
1009--1721[label="0.010101;1pkt 1fpkt"];
1009--1740[label="0.010101;1pkt 1fpkt"];
1009--1772[label="0.010101;1pkt 1fpkt"];
1009--1880[label="0.010101;1pkt 1fpkt"];
1009--1882[label="0.010101;1pkt 1fpkt"];
1009--1889[label="0.010101;1pkt 1fpkt"];
1009--1895[label="0.010101;1pkt 1fpkt"];
1009--1906[label="1;82pkt 82fpkt"];
1009--1937[label="0.010101;1pkt 1fpkt"];
1009--1947[label="0.010101;1pkt 1fpkt"];
1009--1976[label="0.010101;1pkt 1fpkt"];
1009--1985[label="0.040404;4pkt 4fpkt"];
1009--2052[label="0.010101;1pkt 1fpkt"];
1009--2055[label="0.010101;1pkt 1fpkt"];
1009--2135[label="0.020202;2pkt 2fpkt"];
1009--2193[label="0.030303;3pkt 3fpkt"];
1009--2219[label="0.010101;1pkt 1fpkt"];
1009--2236[label="0.03125;1pkt 1fpkt"];
1009--2272[label="0.0263158;1pkt 1fpkt"];
1009--2322[label="0.0212766;1pkt 1fpkt"];
1009--2421[label="0.0526316;1pkt 1fpkt"];
1009--2440[label="0.010101;1pkt 1fpkt"];
1009--2466[label="0.010101;1pkt 1fpkt"];
1009--2523[label="0.414141;41pkt 41fpkt"];
1009--2555[label="0.010101;1pkt 1fpkt"];
1009--2556[label="0.010101;1pkt 1fpkt"];
1009--2558[label="0.010101;1pkt 1fpkt"];
1009--2627[label="0.010101;1pkt 1fpkt"];
1009--2639[label="0.030303;1pkt 1fpkt"];
1009--2669[label="0.010101;1pkt 1fpkt"];
1009--2671[label="0.010101;1pkt 1fpkt"];
1009--2823[label="0.010101;1pkt 1fpkt"];
1009--2888[label="0.010101;1pkt 1fpkt"];
1009--3028[label="0.0169492;1pkt 1fpkt"];
1009--3176[label="0.010101;1pkt 1fpkt"];
1009--3327[label="0.010101;1pkt 1fpkt"];
1009--3390[label="0.0217391;1pkt 1fpkt"];
1009--3451[label="0.0526316;1pkt 1fpkt"];
1009--3528[label="0.414141;41pkt 41fpkt"];
1009--3554[label="0.010101;1pkt 1fpkt"];
1009--3555[label="0.010101;1pkt 1fpkt"];
1009--3557[label="0.010101;1pkt 1fpkt"];
1009--3608[label="0.010101;1pkt 1fpkt"];
1009--3630[label="0.010101;1pkt 1fpkt"];
1009--3786[label="0.010101;1pkt 1fpkt"];
1009--3889[label="0.0169492;1pkt 1fpkt"];
1009--3988[label="0.010101;1pkt 1fpkt"];
1009--4074[label="0.010101;1pkt 1fpkt"];
1009--4169[label="0.414141;41pkt 41fpkt"];
1009--4200[label="0.010101;1pkt 1fpkt"];
1009--4293[label="0.010101;1pkt 1fpkt"];
1009--4345[label="0.0169492;1pkt 1fpkt"];
1009--4386[label="0.010101;1pkt 1fpkt"];
1032--1335[label="0.104895;15pkt 15fpkt"];
1032--1983[label="1;143pkt 143fpkt"];
1032--2561[label="1;143pkt 143fpkt"];
1032--3561[label="1;143pkt 143fpkt"];
1094--1347[label="0.0126582;1pkt 1fpkt"];
1094--1479[label="0.00684932;1pkt 1fpkt"];
1094--1490[label="0.0123457;1pkt 1fpkt"];
1094--1559[label="0.2;1pkt 1fpkt"];
1094--1627[label="0.0575916;22pkt 22fpkt"];
1094--1700[label="0.0113636;1pkt 1fpkt"];
1094--2135[label="0.0157068;6pkt 6fpkt"];
1104--1347[label="0.0126582;1pkt 1fpkt"];
1104--1479[label="0.00684932;1pkt 1fpkt"];
1104--1490[label="0.0123457;1pkt 1fpkt"];
1104--1700[label="0.0113636;1pkt 1fpkt"];
1104--1767[label="0.0144928;1pkt 1fpkt"];
1104--1889[label="1;437pkt 437fpkt"];
1104--1906[label="0.0121951;1pkt 1fpkt"];
1104--1975[label="0.0102041;1pkt 1fpkt"];
1150--1347[label="0.0126582;1pkt 1fpkt"];
1150--1479[label="0.00684932;1pkt 1fpkt"];
1150--1490[label="0.0123457;1pkt 1fpkt"];
1150--1534[label="0.00833333;1pkt 1fpkt"];
1150--1767[label="0.0144928;1pkt 1fpkt"];
1150--1906[label="0.0121951;1pkt 1fpkt"];
1150--1975[label="0.0102041;1pkt 1fpkt"];
1191--2523[label="1;3pkt 3fpkt"];
1191--3528[label="1;3pkt 3fpkt"];
1191--4169[label="1;3pkt 3fpkt"];
1228--1421[label="0.923077;24pkt 24fpkt"];
1228--2349[label="1;26pkt 26fpkt"];
1228--3409[label="1;26pkt 26fpkt"];
1258--2239[label="1;113pkt 113fpkt"];
1335--1983[label="0.104895;15pkt 15fpkt"];
1335--2523[label="0.986804;1346pkt 1346fpkt"];
1335--2561[label="0.107383;16pkt 16fpkt"];
1335--3528[label="0.986804;1346pkt 1346fpkt"];
1335--3561[label="0.107383;16pkt 16fpkt"];
1335--4169[label="0.982405;1340pkt 1340fpkt"];
1347--1367[label="0.0126582;1pkt 1fpkt"];
1347--1386[label="0.0126582;1pkt 1fpkt"];
1347--1468[label="0.0126582;1pkt 1fpkt"];
1347--1549[label="0.0126582;1pkt 1fpkt"];
1347--1569[label="0.0126582;1pkt 1fpkt"];
1347--1721[label="0.0126582;1pkt 1fpkt"];
1347--1740[label="0.0126582;1pkt 1fpkt"];
1347--1772[label="0.0126582;1pkt 1fpkt"];
1347--1880[label="0.0126582;1pkt 1fpkt"];
1347--1882[label="0.0126582;1pkt 1fpkt"];
1347--1889[label="0.0126582;1pkt 1fpkt"];
1347--1895[label="0.0126582;1pkt 1fpkt"];
1347--1937[label="0.0126582;1pkt 1fpkt"];
1347--1947[label="0.0126582;1pkt 1fpkt"];
1347--1961[label="0.0126582;1pkt 1fpkt"];
1347--1976[label="0.0126582;1pkt 1fpkt"];
1347--1980[label="0.0126582;1pkt 1fpkt"];
1347--1985[label="0.0126582;1pkt 1fpkt"];
1347--2052[label="0.0126582;1pkt 1fpkt"];
1347--2055[label="0.0126582;1pkt 1fpkt"];
1347--2135[label="0.0126582;1pkt 1fpkt"];
1347--2155[label="0.0163934;1pkt 1fpkt"];
1347--2193[label="0.0379747;3pkt 3fpkt"];
1347--2211[label="0.0126582;1pkt 1fpkt"];
1347--2219[label="0.0126582;1pkt 1fpkt"];
1347--2236[label="0.03125;1pkt 1fpkt"];
1347--2245[label="0.0126582;1pkt 1fpkt"];
1347--2272[label="0.0263158;1pkt 1fpkt"];
1347--2333[label="0.0126582;1pkt 1fpkt"];
1347--2395[label="0.0126582;1pkt 1fpkt"];
1347--2466[label="0.0126582;1pkt 1fpkt"];
1347--2523[label="0.227848;18pkt 18fpkt"];
1347--2555[label="0.0126582;1pkt 1fpkt"];
1347--2556[label="0.0126582;1pkt 1fpkt"];
1347--2558[label="0.0126582;1pkt 1fpkt"];
1347--2575[label="0.0126582;1pkt 1fpkt"];
1347--2580[label="0.0126582;1pkt 1fpkt"];
1347--2627[label="0.0126582;1pkt 1fpkt"];
1347--2638[label="0.0126582;1pkt 1fpkt"];
1347--2669[label="0.0126582;1pkt 1fpkt"];
1347--2713[label="0.0263158;1pkt 1fpkt"];
1347--2823[label="0.0126582;1pkt 1fpkt"];
1347--2888[label="0.0126582;1pkt 1fpkt"];
1347--3176[label="0.0126582;1pkt 1fpkt"];
1347--3193[label="0.0181818;1pkt 1fpkt"];
1347--3327[label="0.0126582;1pkt 1fpkt"];
1347--3397[label="0.0126582;1pkt 1fpkt"];
1347--3528[label="0.227848;18pkt 18fpkt"];
1347--3554[label="0.0126582;1pkt 1fpkt"];
1347--3555[label="0.0126582;1pkt 1fpkt"];
1347--3557[label="0.0126582;1pkt 1fpkt"];
1347--3575[label="0.0126582;1pkt 1fpkt"];
1347--3608[label="0.0126582;1pkt 1fpkt"];
1347--3630[label="0.0126582;1pkt 1fpkt"];
1347--3661[label="0.0263158;1pkt 1fpkt"];
1347--3786[label="0.0126582;1pkt 1fpkt"];
1347--3988[label="0.0126582;1pkt 1fpkt"];
1347--4074[label="0.0126582;1pkt 1fpkt"];
1347--4110[label="0.0126582;1pkt 1fpkt"];
1347--4169[label="0.227848;18pkt 18fpkt"];
1347--4200[label="0.0126582;1pkt 1fpkt"];
1347--4224[label="0.0263158;1pkt 1fpkt"];
1347--4293[label="0.0126582;1pkt 1fpkt"];
1347--4386[label="0.0126582;1pkt 1fpkt"];
1367--1479[label="0.00684932;1pkt 1fpkt"];
1367--1490[label="0.0123457;1pkt 1fpkt"];
1367--1767[label="0.0144928;1pkt 1fpkt"];
1367--1906[label="0.0121951;1pkt 1fpkt"];
1367--1975[label="0.0102041;1pkt 1fpkt"];
1367--1976[label="1;664pkt 664fpkt"];
1367--2135[label="0.00451807;3pkt 3fpkt"];
1386--1479[label="0.00684932;1pkt 1fpkt"];
1386--1700[label="0.0340909;3pkt 3fpkt"];
1386--1767[label="0.0434783;3pkt 3fpkt"];
1386--1906[label="0.0487805;4pkt 4fpkt"];
1386--1975[label="0.0408163;4pkt 4fpkt"];
1386--1985[label="1;232pkt 232fpkt"];
1387--2523[label="1;18pkt 18fpkt"];
1387--3528[label="1;18pkt 18fpkt"];
1387--4169[label="1;18pkt 18fpkt"];
1421--1882[label="0.0384615;1pkt 1fpkt"];
1421--2135[label="0.0384615;1pkt 1fpkt"];
1421--2349[label="0.923077;24pkt 24fpkt"];
1421--2888[label="0.0384615;1pkt 1fpkt"];
1421--3409[label="0.923077;24pkt 24fpkt"];
1421--3786[label="0.0384615;1pkt 1fpkt"];
1421--4293[label="0.0384615;1pkt 1fpkt"];
1479--1721[label="0.00684932;1pkt 1fpkt"];
1479--1740[label="0.00684932;1pkt 1fpkt"];
1479--1772[label="0.00684932;1pkt 1fpkt"];
1479--1880[label="0.00684932;1pkt 1fpkt"];
1479--1882[label="0.00684932;1pkt 1fpkt"];
1479--1889[label="0.00684932;1pkt 1fpkt"];
1479--1895[label="0.00684932;1pkt 1fpkt"];
1479--1937[label="0.00684932;1pkt 1fpkt"];
1479--1944[label="0.00684932;1pkt 1fpkt"];
1479--1947[label="0.00684932;1pkt 1fpkt"];
1479--1976[label="0.00684932;1pkt 1fpkt"];
1479--1980[label="0.00684932;1pkt 1fpkt"];
1479--1985[label="0.00684932;1pkt 1fpkt"];
1479--2052[label="0.00684932;1pkt 1fpkt"];
1479--2193[label="0.0205479;3pkt 3fpkt"];
1479--2206[label="0.00684932;1pkt 1fpkt"];
1479--2211[label="0.00684932;1pkt 1fpkt"];
1479--2219[label="0.00684932;1pkt 1fpkt"];
1479--2245[label="0.011236;1pkt 1fpkt"];
1479--2333[label="0.00740741;1pkt 1fpkt"];
1479--2388[label="0.00684932;1pkt 1fpkt"];
1479--2466[label="0.00684932;1pkt 1fpkt"];
1479--2523[label="0.130137;19pkt 19fpkt"];
1479--2555[label="0.00684932;1pkt 1fpkt"];
1479--2556[label="0.00684932;1pkt 1fpkt"];
1479--2558[label="0.00684932;1pkt 1fpkt"];
1479--2575[label="0.00684932;1pkt 1fpkt"];
1479--2627[label="0.00684932;1pkt 1fpkt"];
1479--2669[label="0.00684932;1pkt 1fpkt"];
1479--2671[label="0.00684932;1pkt 1fpkt"];
1479--2823[label="0.00684932;1pkt 1fpkt"];
1479--2888[label="0.00684932;1pkt 1fpkt"];
1479--3070[label="0.0243902;1pkt 1fpkt"];
1479--3319[label="0.00684932;1pkt 1fpkt"];
1479--3327[label="0.00684932;1pkt 1fpkt"];
1479--3397[label="0.00735294;1pkt 1fpkt"];
1479--3528[label="0.130137;19pkt 19fpkt"];
1479--3554[label="0.00684932;1pkt 1fpkt"];
1479--3555[label="0.00684932;1pkt 1fpkt"];
1479--3557[label="0.00684932;1pkt 1fpkt"];
1479--3608[label="0.00684932;1pkt 1fpkt"];
1479--3630[label="0.00684932;1pkt 1fpkt"];
1479--3786[label="0.00684932;1pkt 1fpkt"];
1479--3913[label="0.025;1pkt 1fpkt"];
1479--4074[label="0.00684932;1pkt 1fpkt"];
1479--4110[label="0.00735294;1pkt 1fpkt"];
1479--4169[label="0.130137;19pkt 19fpkt"];
1479--4200[label="0.00684932;1pkt 1fpkt"];
1479--4293[label="0.00684932;1pkt 1fpkt"];
1490--1549[label="0.0123457;1pkt 1fpkt"];
1490--1569[label="0.0123457;1pkt 1fpkt"];
1490--1721[label="0.0123457;1pkt 1fpkt"];
1490--1740[label="0.0123457;1pkt 1fpkt"];
1490--1882[label="0.0123457;1pkt 1fpkt"];
1490--1889[label="0.0123457;1pkt 1fpkt"];
1490--1895[label="0.0123457;1pkt 1fpkt"];
1490--1947[label="0.0123457;1pkt 1fpkt"];
1490--1976[label="0.0123457;1pkt 1fpkt"];
1490--1980[label="0.0123457;1pkt 1fpkt"];
1490--2052[label="0.0123457;1pkt 1fpkt"];
1490--2055[label="0.0123457;1pkt 1fpkt"];
1490--2135[label="0.0123457;1pkt 1fpkt"];
1490--2211[label="0.0123457;1pkt 1fpkt"];
1490--2219[label="0.0123457;1pkt 1fpkt"];
1490--2245[label="0.0123457;1pkt 1fpkt"];
1490--2395[label="0.0123457;1pkt 1fpkt"];
1490--2440[label="0.0123457;1pkt 1fpkt"];
1490--2466[label="0.0123457;1pkt 1fpkt"];
1490--2523[label="0.555556;45pkt 45fpkt"];
1490--2555[label="0.0123457;1pkt 1fpkt"];
1490--2558[label="0.0123457;1pkt 1fpkt"];
1490--2627[label="0.0123457;1pkt 1fpkt"];
1490--2823[label="0.0123457;1pkt 1fpkt"];
1490--2888[label="0.0123457;1pkt 1fpkt"];
1490--3118[label="0.0263158;1pkt 1fpkt"];
1490--3176[label="0.0123457;1pkt 1fpkt"];
1490--3327[label="0.0123457;1pkt 1fpkt"];
1490--3528[label="0.555556;45pkt 45fpkt"];
1490--3554[label="0.0123457;1pkt 1fpkt"];
1490--3557[label="0.0123457;1pkt 1fpkt"];
1490--3608[label="0.0123457;1pkt 1fpkt"];
1490--3786[label="0.0123457;1pkt 1fpkt"];
1490--3946[label="0.0263158;1pkt 1fpkt"];
1490--3988[label="0.0123457;1pkt 1fpkt"];
1490--4074[label="0.0123457;1pkt 1fpkt"];
1490--4169[label="0.555556;45pkt 45fpkt"];
1490--4200[label="0.0123457;1pkt 1fpkt"];
1490--4293[label="0.0123457;1pkt 1fpkt"];
1490--4386[label="0.0123457;1pkt 1fpkt"];
1520--2523[label="1;2pkt 2fpkt"];
1520--3528[label="1;2pkt 2fpkt"];
1520--4169[label="1;2pkt 2fpkt"];
1549--1627[label="0.192;72pkt 72fpkt"];
1549--1700[label="0.0113636;1pkt 1fpkt"];
1549--1767[label="0.0144928;1pkt 1fpkt"];
1549--1906[label="0.0121951;1pkt 1fpkt"];
1549--1975[label="0.0102041;1pkt 1fpkt"];
1549--2055[label="1;375pkt 375fpkt"];
1549--2135[label="0.0266667;10pkt 10fpkt"];
1559--1740[label="0.2;1pkt 1fpkt"];
1559--1882[label="0.2;1pkt 1fpkt"];
1559--2558[label="0.2;1pkt 1fpkt"];
1559--2888[label="0.2;1pkt 1fpkt"];
1559--3557[label="0.2;1pkt 1fpkt"];
1559--3786[label="0.2;1pkt 1fpkt"];
1559--4293[label="0.2;1pkt 1fpkt"];
1587--2076[label="1;20pkt 20fpkt"];
1587--2523[label="1;20pkt 20fpkt"];
1587--3528[label="1;20pkt 20fpkt"];
1587--4169[label="1;20pkt 20fpkt"];
1627--1740[label="0.114943;60pkt 60fpkt"];
1627--2055[label="0.192;72pkt 72fpkt"];
1627--2255[label="0.858407;97pkt 97fpkt"];
1627--2558[label="0.272031;142pkt 142fpkt"];
1627--2888[label="0.114943;60pkt 60fpkt"];
1627--3349[label="0.850877;97pkt 97fpkt"];
1627--3557[label="0.272031;142pkt 142fpkt"];
1627--3786[label="0.114943;60pkt 60fpkt"];
1627--4293[label="0.114943;60pkt 60fpkt"];
1700--1721[label="0.0113636;1pkt 1fpkt"];
1700--1740[label="0.0113636;1pkt 1fpkt"];
1700--1772[label="0.0113636;1pkt 1fpkt"];
1700--1880[label="0.0113636;1pkt 1fpkt"];
1700--1882[label="0.0113636;1pkt 1fpkt"];
1700--1889[label="0.0113636;1pkt 1fpkt"];
1700--1895[label="0.0113636;1pkt 1fpkt"];
1700--1937[label="0.0113636;1pkt 1fpkt"];
1700--1947[label="0.0113636;1pkt 1fpkt"];
1700--1985[label="0.0340909;3pkt 3fpkt"];
1700--2052[label="0.0113636;1pkt 1fpkt"];
1700--2055[label="0.0113636;1pkt 1fpkt"];
1700--2135[label="0.0227273;2pkt 2fpkt"];
1700--2193[label="0.0340909;3pkt 3fpkt"];
1700--2219[label="0.0113636;1pkt 1fpkt"];
1700--2245[label="0.0113636;1pkt 1fpkt"];
1700--2421[label="0.0526316;1pkt 1fpkt"];
1700--2440[label="0.0113636;1pkt 1fpkt"];
1700--2523[label="0.431818;38pkt 38fpkt"];
1700--2555[label="0.0113636;1pkt 1fpkt"];
1700--2556[label="0.0113636;1pkt 1fpkt"];
1700--2558[label="0.0113636;1pkt 1fpkt"];
1700--2627[label="0.0113636;1pkt 1fpkt"];
1700--2669[label="0.0113636;1pkt 1fpkt"];
1700--2701[label="0.0113636;1pkt 1fpkt"];
1700--2823[label="0.0113636;1pkt 1fpkt"];
1700--2888[label="0.0113636;1pkt 1fpkt"];
1700--3327[label="0.0113636;1pkt 1fpkt"];
1700--3451[label="0.0526316;1pkt 1fpkt"];
1700--3528[label="0.431818;38pkt 38fpkt"];
1700--3554[label="0.0113636;1pkt 1fpkt"];
1700--3555[label="0.0113636;1pkt 1fpkt"];
1700--3557[label="0.0113636;1pkt 1fpkt"];
1700--3608[label="0.0113636;1pkt 1fpkt"];
1700--3630[label="0.0113636;1pkt 1fpkt"];
1700--3650[label="0.0113636;1pkt 1fpkt"];
1700--3786[label="0.0113636;1pkt 1fpkt"];
1700--4074[label="0.0113636;1pkt 1fpkt"];
1700--4169[label="0.397727;35pkt 35fpkt"];
1700--4200[label="0.0113636;1pkt 1fpkt"];
1700--4293[label="0.0113636;1pkt 1fpkt"];
1740--1767[label="0.0144928;1pkt 1fpkt"];
1740--1906[label="0.0121951;1pkt 1fpkt"];
1740--1975[label="0.0102041;1pkt 1fpkt"];
1740--2135[label="0.0108359;7pkt 7fpkt"];
1740--2558[label="0.998452;645pkt 645fpkt"];
1740--3557[label="0.998452;645pkt 645fpkt"];
1767--1880[label="0.0144928;1pkt 1fpkt"];
1767--1882[label="0.0144928;1pkt 1fpkt"];
1767--1889[label="0.0144928;1pkt 1fpkt"];
1767--1895[label="0.0144928;1pkt 1fpkt"];
1767--1937[label="0.0144928;1pkt 1fpkt"];
1767--1947[label="0.0144928;1pkt 1fpkt"];
1767--1976[label="0.0144928;1pkt 1fpkt"];
1767--1985[label="0.0434783;3pkt 3fpkt"];
1767--2052[label="0.0144928;1pkt 1fpkt"];
1767--2055[label="0.0144928;1pkt 1fpkt"];
1767--2135[label="0.0144928;1pkt 1fpkt"];
1767--2193[label="0.057971;4pkt 4fpkt"];
1767--2219[label="0.0144928;1pkt 1fpkt"];
1767--2421[label="0.0526316;1pkt 1fpkt"];
1767--2523[label="0.376812;26pkt 26fpkt"];
1767--2555[label="0.0144928;1pkt 1fpkt"];
1767--2556[label="0.0144928;1pkt 1fpkt"];
1767--2558[label="0.0144928;1pkt 1fpkt"];
1767--2627[label="0.0144928;1pkt 1fpkt"];
1767--2639[label="0.030303;1pkt 1fpkt"];
1767--2669[label="0.0144928;1pkt 1fpkt"];
1767--2823[label="0.0144928;1pkt 1fpkt"];
1767--2888[label="0.0144928;1pkt 1fpkt"];
1767--3028[label="0.0169492;1pkt 1fpkt"];
1767--3158[label="0.0208333;1pkt 1fpkt"];
1767--3327[label="0.0144928;1pkt 1fpkt"];
1767--3451[label="0.0526316;1pkt 1fpkt"];
1767--3528[label="0.376812;26pkt 26fpkt"];
1767--3554[label="0.0144928;1pkt 1fpkt"];
1767--3555[label="0.0144928;1pkt 1fpkt"];
1767--3557[label="0.0144928;1pkt 1fpkt"];
1767--3608[label="0.0144928;1pkt 1fpkt"];
1767--3630[label="0.0144928;1pkt 1fpkt"];
1767--3786[label="0.0144928;1pkt 1fpkt"];
1767--3889[label="0.0169492;1pkt 1fpkt"];
1767--3978[label="0.0212766;1pkt 1fpkt"];
1767--4074[label="0.0144928;1pkt 1fpkt"];
1767--4169[label="0.376812;26pkt 26fpkt"];
1767--4200[label="0.0144928;1pkt 1fpkt"];
1767--4293[label="0.0144928;1pkt 1fpkt"];
1767--4345[label="0.0169492;1pkt 1fpkt"];
1784--2523[label="1;41pkt 41fpkt"];
1784--3528[label="1;41pkt 41fpkt"];
1784--4169[label="1;41pkt 41fpkt"];
1882--1906[label="0.0121951;1pkt 1fpkt"];
1882--1975[label="0.0102041;1pkt 1fpkt"];
1882--2020[label="0.00348432;1pkt 1fpkt"];
1882--2135[label="0.101579;148pkt 148fpkt"];
1882--2888[label="1;1457pkt 1457fpkt"];
1882--3786[label="0.999314;1456pkt 1456fpkt"];
1882--4293[label="0.995882;1451pkt 1451fpkt"];
1889--1906[label="0.0121951;1pkt 1fpkt"];
1889--1975[label="0.0102041;1pkt 1fpkt"];
1906--1937[label="0.0121951;1pkt 1fpkt"];
1906--1947[label="0.0121951;1pkt 1fpkt"];
1906--1976[label="0.0121951;1pkt 1fpkt"];
1906--1985[label="0.0487805;4pkt 4fpkt"];
1906--2052[label="0.0121951;1pkt 1fpkt"];
1906--2055[label="0.0121951;1pkt 1fpkt"];
1906--2135[label="0.0243902;2pkt 2fpkt"];
1906--2193[label="0.0365854;3pkt 3fpkt"];
1906--2219[label="0.0121951;1pkt 1fpkt"];
1906--2322[label="0.0212766;1pkt 1fpkt"];
1906--2421[label="0.0526316;1pkt 1fpkt"];
1906--2523[label="0.402439;33pkt 33fpkt"];
1906--2555[label="0.0121951;1pkt 1fpkt"];
1906--2556[label="0.0121951;1pkt 1fpkt"];
1906--2558[label="0.0121951;1pkt 1fpkt"];
1906--2627[label="0.0121951;1pkt 1fpkt"];
1906--2639[label="0.030303;1pkt 1fpkt"];
1906--2669[label="0.0121951;1pkt 1fpkt"];
1906--2671[label="0.0121951;1pkt 1fpkt"];
1906--2823[label="0.0121951;1pkt 1fpkt"];
1906--2888[label="0.0121951;1pkt 1fpkt"];
1906--3028[label="0.0169492;1pkt 1fpkt"];
1906--3176[label="0.0121951;1pkt 1fpkt"];
1906--3327[label="0.0121951;1pkt 1fpkt"];
1906--3390[label="0.0217391;1pkt 1fpkt"];
1906--3451[label="0.0526316;1pkt 1fpkt"];
1906--3528[label="0.402439;33pkt 33fpkt"];
1906--3554[label="0.0121951;1pkt 1fpkt"];
1906--3555[label="0.0121951;1pkt 1fpkt"];
1906--3557[label="0.0121951;1pkt 1fpkt"];
1906--3608[label="0.0121951;1pkt 1fpkt"];
1906--3630[label="0.0121951;1pkt 1fpkt"];
1906--3786[label="0.0121951;1pkt 1fpkt"];
1906--3889[label="0.0169492;1pkt 1fpkt"];
1906--3988[label="0.0121951;1pkt 1fpkt"];
1906--4074[label="0.0121951;1pkt 1fpkt"];
1906--4169[label="0.402439;33pkt 33fpkt"];
1906--4200[label="0.0121951;1pkt 1fpkt"];
1906--4293[label="0.0121951;1pkt 1fpkt"];
1906--4345[label="0.0169492;1pkt 1fpkt"];
1906--4386[label="0.0121951;1pkt 1fpkt"];
1975--1976[label="0.0102041;1pkt 1fpkt"];
1975--1980[label="0.0102041;1pkt 1fpkt"];
1975--1985[label="0.0408163;4pkt 4fpkt"];
1975--2052[label="0.0102041;1pkt 1fpkt"];
1975--2055[label="0.0102041;1pkt 1fpkt"];
1975--2135[label="0.0306122;3pkt 3fpkt"];
1975--2193[label="0.0306122;3pkt 3fpkt"];
1975--2211[label="0.0102041;1pkt 1fpkt"];
1975--2214[label="0.0119048;1pkt 1fpkt"];
1975--2219[label="0.0102041;1pkt 1fpkt"];
1975--2388[label="0.0102041;1pkt 1fpkt"];
1975--2421[label="0.105263;2pkt 2fpkt"];
1975--2440[label="0.0102041;1pkt 1fpkt"];
1975--2523[label="0.428571;42pkt 42fpkt"];
1975--2555[label="0.0102041;1pkt 1fpkt"];
1975--2556[label="0.0102041;1pkt 1fpkt"];
1975--2558[label="0.0102041;1pkt 1fpkt"];
1975--2627[label="0.0102041;1pkt 1fpkt"];
1975--2639[label="0.030303;1pkt 1fpkt"];
1975--2669[label="0.0102041;1pkt 1fpkt"];
1975--2823[label="0.0102041;1pkt 1fpkt"];
1975--2888[label="0.0102041;1pkt 1fpkt"];
1975--3158[label="0.0208333;1pkt 1fpkt"];
1975--3176[label="0.0102041;1pkt 1fpkt"];
1975--3327[label="0.0102041;1pkt 1fpkt"];
1975--3451[label="0.105263;2pkt 2fpkt"];
1975--3528[label="0.428571;42pkt 42fpkt"];
1975--3554[label="0.0102041;1pkt 1fpkt"];
1975--3555[label="0.0102041;1pkt 1fpkt"];
1975--3557[label="0.0102041;1pkt 1fpkt"];
1975--3608[label="0.0102041;1pkt 1fpkt"];
1975--3630[label="0.0102041;1pkt 1fpkt"];
1975--3786[label="0.0102041;1pkt 1fpkt"];
1975--3978[label="0.0212766;1pkt 1fpkt"];
1975--3988[label="0.0102041;1pkt 1fpkt"];
1975--4074[label="0.0102041;1pkt 1fpkt"];
1975--4169[label="0.428571;42pkt 42fpkt"];
1975--4200[label="0.0102041;1pkt 1fpkt"];
1975--4293[label="0.0102041;1pkt 1fpkt"];
1975--4386[label="0.0102041;1pkt 1fpkt"];
1976--2135[label="0.00451807;3pkt 3fpkt"];
1983--2561[label="1;143pkt 143fpkt"];
1983--3561[label="1;143pkt 143fpkt"];
2055--2135[label="0.0266667;10pkt 10fpkt"];
2076--2523[label="1;20pkt 20fpkt"];
2076--3528[label="1;20pkt 20fpkt"];
2076--4169[label="1;20pkt 20fpkt"];
2255--3349[label="1;113pkt 113fpkt"];
2322--3390[label="1;46pkt 46fpkt"];
2349--3409[label="1;33pkt 33fpkt"];
2421--3451[label="1;19pkt 19fpkt"];
2523--3528[label="1;15019pkt 15019fpkt"];
2523--4169[label="1;14977pkt 14977fpkt"];
2558--3557[label="1;922pkt 922fpkt"];
2561--3561[label="1;149pkt 149fpkt"];
2888--3786[label="1;2198pkt 2198fpkt"];
2888--4293[label="1;2193pkt 2193fpkt"];
3028--3889[label="1;59pkt 59fpkt"];
3028--4345[label="1;59pkt 59fpkt"];
3118--3946[label="1;38pkt 38fpkt"];
3158--3978[label="1;47pkt 47fpkt"];
3528--4169[label="1;14977pkt 14977fpkt"];
3786--4293[label="1;2193pkt 2193fpkt"];
3889--4345[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="160.4.238.73"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
1593[label="193.114.33.75;s;33pkt 33fpkt", shape=diamond, color=yellow];
2528[label="193.114.33.75;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3532[label="193.114.33.75;39pkt 39fpkt", shape=invtriangle, color=brown];
4171[label="193.114.33.75;39pkt 39fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.33.75:25, *:*}[76.9231%]&lt;BR/&gt;{193.114.33.75:*, *:25}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64023: (1.34228%)&lt;BR/&gt; 52223: (1.34228%)&lt;BR/&gt; 48270: (1.34228%)&lt;BR/&gt; 43794: (1.34228%)&gt;];
}
1593--2528[label="0.969697;32pkt 32fpkt"];
1593--3532[label="1;33pkt 33fpkt"];
1593--4171[label="1;33pkt 33fpkt"];
2528--3532[label="1;38pkt 38fpkt"];
2528--4171[label="1;38pkt 38fpkt"];
3532--4171[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.33.75" src_port="25"/>
      <filter dst_port="25" src_ip="193.114.33.75"/>
    </slice>
    <from sec="1136091617" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
2529[label="166.28.50.75;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3533[label="166.28.50.75;6pkt 6fpkt", shape=invtriangle, color=brown];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.50.75:80, 213.5.115.241:*}[66.6667%]&lt;BR/&gt;{166.28.50.75:80, 215.34.236.28:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2774: (8.33333%)&lt;BR/&gt; 2493: (8.33333%)&lt;BR/&gt; 1975: (8.33333%)&lt;BR/&gt; 1833: (8.33333%)&gt;];
}
2529--3533[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="213.5.115.241" src_ip="166.28.50.75" src_port="80"/>
      <filter dst_ip="215.34.236.28" src_ip="166.28.50.75" src_port="80"/>
    </slice>
    <from sec="1136091677" usec="0"/>
    <to sec="1136092368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
2530[label="193.155.193.75;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3534[label="193.155.193.75;19pkt 19fpkt", shape=invtriangle, color=brown];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.155.193.75:110, 160.4.146.168:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 4880: (2.63158%)&lt;BR/&gt; 4684: (2.63158%)&lt;BR/&gt; 4545: (2.63158%)&lt;BR/&gt; 4510: (2.63158%)&gt;];
}
2530--3534[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.146.168" src_ip="193.155.193.75" src_port="110"/>
    </slice>
    <from sec="1136091633" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.110.41.76"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
2535[label="193.248.69.76;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3539[label="193.248.69.76;37pkt 37fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.248.69.76:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59930: (1.36986%)&lt;BR/&gt; 53336: (1.36986%)&lt;BR/&gt; 51984: (1.36986%)&lt;BR/&gt; 50239: (1.36986%)&gt;];
}
2535--3539[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="193.248.69.76" src_port="80"/>
    </slice>
    <from sec="1136091629" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="140.182.91.76"/>
    </slice>
    <from sec="1136092234" usec="0"/>
    <to sec="1136092252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
2538[label="63.0.143.76;152pkt 152fpkt", shape=pentagon, color=darkviolet];
3541[label="63.0.143.76;152pkt 152fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.0.143.76:1028, *:137}[62.5%]&lt;BR/&gt;{63.0.143.76:1029, *:137}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (31.25%)&lt;BR/&gt; 1029: (18.75%)&gt;];
}
2538--3541[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="63.0.143.76" src_port="1028"/>
      <filter dst_port="137" src_ip="63.0.143.76" src_port="1029"/>
    </slice>
    <from sec="1136091830" usec="0"/>
    <to sec="1136092416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.210.169.76"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.104.161.77"/>
    </slice>
    <from sec="1136091905" usec="0"/>
    <to sec="1136092044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.18.221.77"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
2548[label="57.153.8.79;251pkt 251fpkt", shape=pentagon, color=darkviolet];
3548[label="57.153.8.79;252pkt 252fpkt", shape=invtriangle, color=brown];
4179[label="57.153.8.79;252pkt 252fpkt", shape=invhouse, color=bisque];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.153.8.79:61909, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61909: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2548--3548[label="1;251pkt 251fpkt"];
2548--4179[label="1;251pkt 251fpkt"];
3548--4179[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="57.153.8.79" src_port="61909"/>
    </slice>
    <from sec="1136092316" usec="0"/>
    <to sec="1136092355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.130.105.79"/>
    </slice>
    <from sec="1136091693" usec="0"/>
    <to sec="1136092471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
2553[label="160.4.94.80;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3552[label="160.4.94.80;26pkt 26fpkt", shape=invtriangle, color=brown];
4182[label="160.4.94.80;26pkt 26fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.94.80:*, 198.131.138.84:80}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0519%)&lt;BR/&gt; 43677: (1.94805%)&lt;BR/&gt; 43676: (1.94805%)&lt;BR/&gt; 43675: (1.94805%)&lt;BR/&gt; 43674: (1.94805%)&gt;];
}
2553--3552[label="1;25pkt 25fpkt"];
2553--4182[label="1;25pkt 25fpkt"];
3552--4182[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="198.131.138.84" dst_port="80" src_ip="160.4.94.80"/>
    </slice>
    <from sec="1136091910" usec="0"/>
    <to sec="1136092404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
2557[label="192.248.177.80;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3556[label="192.248.177.80;46pkt 46fpkt", shape=invtriangle, color=brown];
4183[label="192.248.177.80;45pkt 45fpkt", shape=invhouse, color=bisque];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.248.177.80:*, 10.66.1.141:1080}[97.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (49.2701%)&lt;BR/&gt; 0: (1.45985%)&lt;BR/&gt; 2188: (1.09489%)&lt;BR/&gt; 2187: (1.09489%)&lt;BR/&gt; 2186: (1.09489%)&gt;];
}
2557--3556[label="1;46pkt 46fpkt"];
2557--4183[label="1;45pkt 45fpkt"];
3556--4183[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="10.66.1.141" dst_port="1080" src_ip="192.248.177.80"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
2559[label="192.242.15.81;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3558[label="192.242.15.81;50pkt 50fpkt", shape=invtriangle, color=brown];
4184[label="192.242.15.81;50pkt 50fpkt", shape=invhouse, color=bisque];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.15.81:10273, *:53}[78%]&lt;BR/&gt;{192.242.15.81:80, *:*}[22%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10273: (39%)&lt;BR/&gt; 53: (39%)&lt;BR/&gt; 80: (11%)&lt;BR/&gt; 59225: (1%)&lt;BR/&gt; 56745: (1%)&gt;];
}
2559--3558[label="1;50pkt 50fpkt"];
2559--4184[label="1;50pkt 50fpkt"];
3558--4184[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="192.242.15.81" src_port="80"/>
      <filter dst_port="53" src_ip="192.242.15.81" src_port="10273"/>
    </slice>
    <from sec="1136091655" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2566[label="192.242.15.82;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3565[label="192.242.15.82;51pkt 51fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.15.82:8198, *:53}[80.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8198: (40.2913%)&lt;BR/&gt; 53: (40.2913%)&lt;BR/&gt; 80: (9.70874%)&lt;BR/&gt; 55994: (0.970874%)&lt;BR/&gt; 41382: (0.970874%)&gt;];
}
2566--3565[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="192.242.15.82" src_port="8198"/>
    </slice>
    <from sec="1136091936" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
660[label="160.128.20.236;s;386pkt 386fpkt", shape=diamond, color=yellow];
721[label="193.16.129.110;d;2pkt 2fpkt", shape=diamond, color=yellow];
858[label="193.114.38.128;s;498pkt 498fpkt", shape=diamond, color=yellow];
880[label="192.242.34.131;s;104pkt 104fpkt", shape=diamond, color=yellow];
945[label="192.171.31.127;d;80pkt 80fpkt", shape=diamond, color=yellow];
970[label="214.123.108.232;d;388pkt 388fpkt", shape=diamond, color=yellow];
990[label="193.114.34.183;s;139pkt 139fpkt", shape=diamond, color=yellow];
1077[label="160.128.23.3;s;424pkt 424fpkt", shape=diamond, color=yellow];
1188[label="196.152.35.131;d;18pkt 18fpkt", shape=diamond, color=yellow];
1249[label="209.121.7.106;d;258pkt 258fpkt", shape=diamond, color=yellow];
1331[label="80.136.10.158;d;236pkt 236fpkt", shape=diamond, color=yellow];
1340[label="221.36.187.187;d;232pkt 232fpkt", shape=diamond, color=yellow];
1356[label="215.44.130.1;d;228pkt 228fpkt", shape=diamond, color=yellow];
1365[label="215.44.218.91;d;191pkt 191fpkt", shape=diamond, color=yellow];
1378[label="193.114.39.28;s;60pkt 60fpkt", shape=diamond, color=yellow];
1498[label="219.82.68.62;d;53pkt 53fpkt", shape=diamond, color=yellow];
1555[label="209.58.187.45;d;182pkt 182fpkt", shape=diamond, color=yellow];
1803[label="214.123.108.232;d;178pkt 178fpkt", shape=hexagon, color=black];
1897[label="193.114.34.183;s;89pkt 89fpkt", shape=hexagon, color=black];
1909[label="192.242.34.131;s;104pkt 104fpkt", shape=hexagon, color=black];
1962[label="221.36.187.187;d;220pkt 220fpkt", shape=hexagon, color=black];
1969[label="215.44.130.1;d;174pkt 174fpkt", shape=hexagon, color=black];
1996[label="196.152.35.131;d;18pkt 18fpkt", shape=hexagon, color=black];
2063[label="209.121.7.106;d;258pkt 258fpkt", shape=hexagon, color=black];
2068[label="193.114.38.128;s;498pkt 498fpkt", shape=hexagon, color=black];
2169[label="160.128.23.3;541pkt 541fpkt", shape=pentagon, color=darkviolet];
2295[label="193.114.39.28;65pkt 65fpkt", shape=pentagon, color=darkviolet];
2493[label="166.28.140.68;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2568[label="193.114.36.82;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2700[label="136.92.247.108;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2749[label="160.4.90.122;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2784[label="192.242.34.131;108pkt 108fpkt", shape=pentagon, color=darkviolet];
2822[label="193.114.32.140;71pkt 71fpkt", shape=pentagon, color=darkviolet];
2920[label="160.128.124.161;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2947[label="193.114.39.169;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3294[label="160.128.23.3;541pkt 541fpkt", shape=invtriangle, color=brown];
3370[label="193.114.39.28;66pkt 66fpkt", shape=invtriangle, color=brown];
3566[label="193.114.36.82;3pkt 3fpkt", shape=invtriangle, color=brown];
3649[label="136.92.247.108;35pkt 35fpkt", shape=invtriangle, color=brown];
3714[label="192.242.34.131;108pkt 108fpkt", shape=invtriangle, color=brown];
3812[label="160.128.124.161;28pkt 28fpkt", shape=invtriangle, color=brown];
3911[label="193.114.38.197;24pkt 24fpkt", shape=invtriangle, color=brown];
4096[label="193.114.39.28;66pkt 66fpkt", shape=invhouse, color=bisque];
4220[label="136.92.247.108;36pkt 36fpkt", shape=invhouse, color=bisque];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[92.0455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.2023%)&lt;BR/&gt; 1080: (2.12797%)&lt;BR/&gt; 62909: (1.33362%)&lt;BR/&gt; 47349: (0.794345%)&lt;BR/&gt; 443: (0.77977%)&gt;];
}
660--721[label="0.5;1pkt 1fpkt"];
660--749[label="0.015625;1pkt 1fpkt"];
660--1249[label="0.00387597;1pkt 1fpkt"];
660--1340[label="0.00431034;1pkt 1fpkt"];
660--1352[label="0.00369004;1pkt 1fpkt"];
660--1356[label="0.00438596;1pkt 1fpkt"];
660--1365[label="0.0052356;1pkt 1fpkt"];
660--1550[label="0.00384615;1pkt 1fpkt"];
660--1553[label="0.0052356;1pkt 1fpkt"];
660--1555[label="0.00549451;1pkt 1fpkt"];
660--1962[label="0.00454545;1pkt 1fpkt"];
660--1969[label="0.00574713;1pkt 1fpkt"];
660--2063[label="0.00387597;1pkt 1fpkt"];
721--1077[label="0.5;1pkt 1fpkt"];
721--2169[label="0.5;1pkt 1fpkt"];
721--3294[label="0.5;1pkt 1fpkt"];
858--970[label="0.00257732;1pkt 1fpkt"];
858--1188[label="0.0555556;1pkt 1fpkt"];
858--1249[label="0.00387597;1pkt 1fpkt"];
858--1331[label="0.00423729;1pkt 1fpkt"];
858--1346[label="0.00414938;1pkt 1fpkt"];
858--1352[label="0.00369004;1pkt 1fpkt"];
858--1356[label="0.00438596;1pkt 1fpkt"];
858--1365[label="0.0052356;1pkt 1fpkt"];
858--1534[label="0.00833333;1pkt 1fpkt"];
858--1550[label="0.00384615;1pkt 1fpkt"];
858--1553[label="0.0052356;1pkt 1fpkt"];
858--1555[label="0.00549451;1pkt 1fpkt"];
858--1803[label="0.00561798;1pkt 1fpkt"];
858--1969[label="0.00574713;1pkt 1fpkt"];
858--1996[label="0.0555556;1pkt 1fpkt"];
858--2063[label="0.00387597;1pkt 1fpkt"];
858--2068[label="1;498pkt 498fpkt"];
880--945[label="0.025;2pkt 2fpkt"];
880--970[label="0.00961538;1pkt 1fpkt"];
880--1249[label="0.00961538;1pkt 1fpkt"];
880--1331[label="0.00961538;1pkt 1fpkt"];
880--1346[label="0.00961538;1pkt 1fpkt"];
880--1352[label="0.00961538;1pkt 1fpkt"];
880--1356[label="0.00961538;1pkt 1fpkt"];
880--1555[label="0.00961538;1pkt 1fpkt"];
880--1909[label="1;104pkt 104fpkt"];
880--1969[label="0.00961538;1pkt 1fpkt"];
880--2063[label="0.00961538;1pkt 1fpkt"];
880--2784[label="0.980769;102pkt 102fpkt"];
880--3714[label="0.980769;102pkt 102fpkt"];
945--1002[label="0.0125;1pkt 1fpkt"];
945--1041[label="0.0125;1pkt 1fpkt"];
945--1142[label="0.0125;1pkt 1fpkt"];
945--1334[label="0.025;2pkt 2fpkt"];
945--1378[label="0.0166667;1pkt 1fpkt"];
945--1866[label="0.0126582;1pkt 1fpkt"];
945--1909[label="0.025;2pkt 2fpkt"];
945--2236[label="0.03125;1pkt 1fpkt"];
945--2254[label="0.0125;1pkt 1fpkt"];
945--2295[label="0.0153846;1pkt 1fpkt"];
945--2322[label="0.0212766;1pkt 1fpkt"];
945--2700[label="0.0285714;1pkt 1fpkt"];
945--2784[label="0.025;2pkt 2fpkt"];
945--2823[label="0.0125;1pkt 1fpkt"];
945--2926[label="0.0125;1pkt 1fpkt"];
945--3028[label="0.0169492;1pkt 1fpkt"];
945--3176[label="0.0125;1pkt 1fpkt"];
945--3348[label="0.0125;1pkt 1fpkt"];
945--3370[label="0.0151515;1pkt 1fpkt"];
945--3390[label="0.0217391;1pkt 1fpkt"];
945--3649[label="0.0285714;1pkt 1fpkt"];
945--3714[label="0.025;2pkt 2fpkt"];
945--3816[label="0.0125;1pkt 1fpkt"];
945--3889[label="0.0169492;1pkt 1fpkt"];
945--3988[label="0.0125;1pkt 1fpkt"];
945--4096[label="0.0151515;1pkt 1fpkt"];
945--4220[label="0.0277778;1pkt 1fpkt"];
945--4307[label="0.0125;1pkt 1fpkt"];
945--4345[label="0.0169492;1pkt 1fpkt"];
945--4386[label="0.0125;1pkt 1fpkt"];
970--1077[label="0.00257732;1pkt 1fpkt"];
970--1108[label="0.00311526;1pkt 1fpkt"];
970--1119[label="0.004;1pkt 1fpkt"];
970--1276[label="0.005;1pkt 1fpkt"];
970--1334[label="0.0117647;1pkt 1fpkt"];
970--1339[label="0.004329;1pkt 1fpkt"];
970--1803[label="1;178pkt 178fpkt"];
970--1854[label="0.00436681;1pkt 1fpkt"];
970--1893[label="0.00452489;1pkt 1fpkt"];
970--1909[label="0.00961538;1pkt 1fpkt"];
970--2016[label="0.00257732;1pkt 1fpkt"];
970--2036[label="0.00549451;1pkt 1fpkt"];
970--2068[label="0.00257732;1pkt 1fpkt"];
970--2169[label="0.00257732;1pkt 1fpkt"];
970--2569[label="0.0045045;1pkt 1fpkt"];
970--2700[label="0.0285714;1pkt 1fpkt"];
970--2707[label="0.003003;1pkt 1fpkt"];
970--2784[label="0.00925926;1pkt 1fpkt"];
970--2790[label="0.00458716;1pkt 1fpkt"];
970--2926[label="0.00534759;1pkt 1fpkt"];
970--3294[label="0.00257732;1pkt 1fpkt"];
970--3649[label="0.0285714;1pkt 1fpkt"];
970--3656[label="0.00301205;1pkt 1fpkt"];
970--3714[label="0.00925926;1pkt 1fpkt"];
970--3719[label="0.00458716;1pkt 1fpkt"];
970--3816[label="0.00531915;1pkt 1fpkt"];
970--3911[label="0.0416667;1pkt 1fpkt"];
970--4220[label="0.0277778;1pkt 1fpkt"];
970--4254[label="0.00456621;1pkt 1fpkt"];
970--4307[label="0.00531915;1pkt 1fpkt"];
990--1188[label="0.0555556;1pkt 1fpkt"];
990--1897[label="1;89pkt 89fpkt"];
990--1996[label="0.0555556;1pkt 1fpkt"];
1077--1188[label="0.0555556;1pkt 1fpkt"];
1077--1331[label="0.00423729;1pkt 1fpkt"];
1077--1346[label="0.00414938;1pkt 1fpkt"];
1077--1352[label="0.00369004;1pkt 1fpkt"];
1077--1356[label="0.00438596;1pkt 1fpkt"];
1077--1498[label="0.0188679;1pkt 1fpkt"];
1077--1550[label="0.00384615;1pkt 1fpkt"];
1077--1553[label="0.0052356;1pkt 1fpkt"];
1077--1555[label="0.00549451;1pkt 1fpkt"];
1077--1803[label="0.00561798;1pkt 1fpkt"];
1077--1969[label="0.00574713;1pkt 1fpkt"];
1077--1996[label="0.0555556;1pkt 1fpkt"];
1077--2169[label="1;424pkt 424fpkt"];
1077--3294[label="1;424pkt 424fpkt"];
1188--1897[label="0.0555556;1pkt 1fpkt"];
1188--1996[label="1;18pkt 18fpkt"];
1188--2068[label="0.0555556;1pkt 1fpkt"];
1188--2169[label="0.0555556;1pkt 1fpkt"];
1188--2568[label="0.333333;1pkt 1fpkt"];
1188--2749[label="0.2;1pkt 1fpkt"];
1188--2947[label="0.0555556;1pkt 1fpkt"];
1188--3294[label="0.0555556;1pkt 1fpkt"];
1188--3566[label="0.333333;1pkt 1fpkt"];
1188--3911[label="0.0555556;1pkt 1fpkt"];
1249--1276[label="0.005;1pkt 1fpkt"];
1249--1334[label="0.0117647;1pkt 1fpkt"];
1249--1339[label="0.004329;1pkt 1fpkt"];
1249--1378[label="0.0166667;1pkt 1fpkt"];
1249--1722[label="0.00387597;1pkt 1fpkt"];
1249--1854[label="0.00436681;1pkt 1fpkt"];
1249--1893[label="0.00452489;1pkt 1fpkt"];
1249--1909[label="0.00961538;1pkt 1fpkt"];
1249--2036[label="0.00549451;1pkt 1fpkt"];
1249--2063[label="1;258pkt 258fpkt"];
1249--2068[label="0.00387597;1pkt 1fpkt"];
1249--2295[label="0.0153846;1pkt 1fpkt"];
1249--2707[label="0.00387597;1pkt 1fpkt"];
1249--2784[label="0.00925926;1pkt 1fpkt"];
1249--2790[label="0.00458716;1pkt 1fpkt"];
1249--3370[label="0.0151515;1pkt 1fpkt"];
1249--3656[label="0.00387597;1pkt 1fpkt"];
1249--3714[label="0.00925926;1pkt 1fpkt"];
1249--3719[label="0.00458716;1pkt 1fpkt"];
1249--3911[label="0.0416667;1pkt 1fpkt"];
1249--4096[label="0.0151515;1pkt 1fpkt"];
1249--4254[label="0.00456621;1pkt 1fpkt"];
1331--1339[label="0.004329;1pkt 1fpkt"];
1331--1854[label="0.00436681;1pkt 1fpkt"];
1331--1893[label="0.00452489;1pkt 1fpkt"];
1331--1909[label="0.00961538;1pkt 1fpkt"];
1331--2016[label="0.00423729;1pkt 1fpkt"];
1331--2036[label="0.00549451;1pkt 1fpkt"];
1331--2068[label="0.00423729;1pkt 1fpkt"];
1331--2169[label="0.00423729;1pkt 1fpkt"];
1331--2569[label="0.0045045;1pkt 1fpkt"];
1331--2700[label="0.0285714;1pkt 1fpkt"];
1331--2707[label="0.00423729;1pkt 1fpkt"];
1331--2784[label="0.00925926;1pkt 1fpkt"];
1331--2790[label="0.00458716;1pkt 1fpkt"];
1331--2926[label="0.00534759;1pkt 1fpkt"];
1331--3294[label="0.00423729;1pkt 1fpkt"];
1331--3649[label="0.0285714;1pkt 1fpkt"];
1331--3656[label="0.00423729;1pkt 1fpkt"];
1331--3714[label="0.00925926;1pkt 1fpkt"];
1331--3719[label="0.00458716;1pkt 1fpkt"];
1331--3816[label="0.00531915;1pkt 1fpkt"];
1331--3911[label="0.0416667;1pkt 1fpkt"];
1331--4220[label="0.0277778;1pkt 1fpkt"];
1331--4254[label="0.00456621;1pkt 1fpkt"];
1331--4307[label="0.00531915;1pkt 1fpkt"];
1340--1378[label="0.0166667;1pkt 1fpkt"];
1340--1722[label="0.00431034;1pkt 1fpkt"];
1340--1735[label="0.00431034;1pkt 1fpkt"];
1340--1837[label="0.00431034;1pkt 1fpkt"];
1340--1842[label="0.00431034;1pkt 1fpkt"];
1340--1854[label="0.00436681;1pkt 1fpkt"];
1340--1954[label="0.00431034;1pkt 1fpkt"];
1340--1962[label="1;220pkt 220fpkt"];
1340--2054[label="0.00431034;1pkt 1fpkt"];
1340--2234[label="0.00431034;1pkt 1fpkt"];
1340--2295[label="0.0153846;1pkt 1fpkt"];
1340--2493[label="0.037037;1pkt 1fpkt"];
1340--2503[label="0.00431034;1pkt 1fpkt"];
1340--2569[label="0.0045045;1pkt 1fpkt"];
1340--2707[label="0.00431034;1pkt 1fpkt"];
1340--2822[label="0.0140845;1pkt 1fpkt"];
1340--2947[label="0.0185185;1pkt 1fpkt"];
1340--3021[label="0.00431034;1pkt 1fpkt"];
1340--3338[label="0.00431034;1pkt 1fpkt"];
1340--3370[label="0.0151515;1pkt 1fpkt"];
1340--3431[label="0.00431034;1pkt 1fpkt"];
1340--3513[label="0.00431034;1pkt 1fpkt"];
1340--3582[label="0.00431034;1pkt 1fpkt"];
1340--3656[label="0.00431034;1pkt 1fpkt"];
1340--3883[label="0.00431034;1pkt 1fpkt"];
1340--4078[label="0.00431034;1pkt 1fpkt"];
1340--4096[label="0.0151515;1pkt 1fpkt"];
1340--4163[label="0.00431034;1pkt 1fpkt"];
1356--1378[label="0.0166667;1pkt 1fpkt"];
1356--1722[label="0.00438596;1pkt 1fpkt"];
1356--1854[label="0.00438596;1pkt 1fpkt"];
1356--1893[label="0.00452489;1pkt 1fpkt"];
1356--1909[label="0.00961538;1pkt 1fpkt"];
1356--1969[label="1;174pkt 174fpkt"];
1356--2036[label="0.00549451;1pkt 1fpkt"];
1356--2068[label="0.00438596;1pkt 1fpkt"];
1356--2169[label="0.00438596;1pkt 1fpkt"];
1356--2569[label="0.0045045;1pkt 1fpkt"];
1356--2707[label="0.00438596;1pkt 1fpkt"];
1356--2784[label="0.00925926;1pkt 1fpkt"];
1356--2790[label="0.00458716;1pkt 1fpkt"];
1356--3294[label="0.00438596;1pkt 1fpkt"];
1356--3656[label="0.00438596;1pkt 1fpkt"];
1356--3714[label="0.00925926;1pkt 1fpkt"];
1356--3719[label="0.00458716;1pkt 1fpkt"];
1356--4254[label="0.00456621;1pkt 1fpkt"];
1365--1722[label="0.0052356;1pkt 1fpkt"];
1365--1854[label="0.0052356;1pkt 1fpkt"];
1365--1893[label="0.0052356;1pkt 1fpkt"];
1365--2036[label="0.00549451;1pkt 1fpkt"];
1365--2068[label="0.0052356;1pkt 1fpkt"];
1365--2569[label="0.0052356;1pkt 1fpkt"];
1365--2707[label="0.0052356;1pkt 1fpkt"];
1365--2790[label="0.0052356;1pkt 1fpkt"];
1365--2926[label="0.00534759;1pkt 1fpkt"];
1365--3656[label="0.0052356;1pkt 1fpkt"];
1365--3719[label="0.0052356;1pkt 1fpkt"];
1365--3816[label="0.00531915;1pkt 1fpkt"];
1365--3911[label="0.0416667;1pkt 1fpkt"];
1365--4254[label="0.0052356;1pkt 1fpkt"];
1365--4307[label="0.00531915;1pkt 1fpkt"];
1378--1962[label="0.0166667;1pkt 1fpkt"];
1378--1969[label="0.0166667;1pkt 1fpkt"];
1378--2063[label="0.0166667;1pkt 1fpkt"];
1378--2295[label="0.966667;58pkt 58fpkt"];
1378--3370[label="0.983333;59pkt 59fpkt"];
1378--4096[label="0.983333;59pkt 59fpkt"];
1498--1835[label="0.0188679;1pkt 1fpkt"];
1498--2169[label="0.0188679;1pkt 1fpkt"];
1498--2448[label="0.0188679;1pkt 1fpkt"];
1498--2920[label="0.925926;25pkt 25fpkt"];
1498--3294[label="0.0188679;1pkt 1fpkt"];
1498--3468[label="0.0188679;1pkt 1fpkt"];
1498--3812[label="0.928571;26pkt 26fpkt"];
1555--1722[label="0.00549451;1pkt 1fpkt"];
1555--1854[label="0.00549451;1pkt 1fpkt"];
1555--1893[label="0.00549451;1pkt 1fpkt"];
1555--1909[label="0.00961538;1pkt 1fpkt"];
1555--2016[label="0.00549451;1pkt 1fpkt"];
1555--2036[label="0.00549451;1pkt 1fpkt"];
1555--2068[label="0.00549451;1pkt 1fpkt"];
1555--2169[label="0.00549451;1pkt 1fpkt"];
1555--2569[label="0.00549451;1pkt 1fpkt"];
1555--2707[label="0.00549451;1pkt 1fpkt"];
1555--2784[label="0.00925926;1pkt 1fpkt"];
1555--2790[label="0.00549451;1pkt 1fpkt"];
1555--3294[label="0.00549451;1pkt 1fpkt"];
1555--3656[label="0.00549451;1pkt 1fpkt"];
1555--3714[label="0.00925926;1pkt 1fpkt"];
1555--3719[label="0.00549451;1pkt 1fpkt"];
1555--3911[label="0.0416667;1pkt 1fpkt"];
1555--4254[label="0.00549451;1pkt 1fpkt"];
1803--1854[label="0.00561798;1pkt 1fpkt"];
1803--1893[label="0.00561798;1pkt 1fpkt"];
1803--2016[label="0.00561798;1pkt 1fpkt"];
1803--2036[label="0.00561798;1pkt 1fpkt"];
1803--2068[label="0.00561798;1pkt 1fpkt"];
1803--2169[label="0.00561798;1pkt 1fpkt"];
1803--2569[label="0.00561798;1pkt 1fpkt"];
1803--2700[label="0.0285714;1pkt 1fpkt"];
1803--2707[label="0.00561798;1pkt 1fpkt"];
1803--2790[label="0.00561798;1pkt 1fpkt"];
1803--2926[label="0.00561798;1pkt 1fpkt"];
1803--3294[label="0.00561798;1pkt 1fpkt"];
1803--3649[label="0.0285714;1pkt 1fpkt"];
1803--3656[label="0.00561798;1pkt 1fpkt"];
1803--3719[label="0.00561798;1pkt 1fpkt"];
1803--3816[label="0.00561798;1pkt 1fpkt"];
1803--4220[label="0.0277778;1pkt 1fpkt"];
1803--4254[label="0.00561798;1pkt 1fpkt"];
1803--4307[label="0.00561798;1pkt 1fpkt"];
1897--1996[label="0.0555556;1pkt 1fpkt"];
1909--1969[label="0.00961538;1pkt 1fpkt"];
1909--2063[label="0.00961538;1pkt 1fpkt"];
1909--2784[label="0.980769;102pkt 102fpkt"];
1909--3714[label="0.980769;102pkt 102fpkt"];
1962--2054[label="0.00454545;1pkt 1fpkt"];
1962--2234[label="0.00454545;1pkt 1fpkt"];
1962--2295[label="0.0153846;1pkt 1fpkt"];
1962--2493[label="0.037037;1pkt 1fpkt"];
1962--2503[label="0.00454545;1pkt 1fpkt"];
1962--2569[label="0.00454545;1pkt 1fpkt"];
1962--2707[label="0.00454545;1pkt 1fpkt"];
1962--2822[label="0.0140845;1pkt 1fpkt"];
1962--2947[label="0.0185185;1pkt 1fpkt"];
1962--3021[label="0.00454545;1pkt 1fpkt"];
1962--3338[label="0.00454545;1pkt 1fpkt"];
1962--3370[label="0.0151515;1pkt 1fpkt"];
1962--3431[label="0.00454545;1pkt 1fpkt"];
1962--3513[label="0.00454545;1pkt 1fpkt"];
1962--3582[label="0.00454545;1pkt 1fpkt"];
1962--3656[label="0.00454545;1pkt 1fpkt"];
1962--3883[label="0.00454545;1pkt 1fpkt"];
1962--4078[label="0.00454545;1pkt 1fpkt"];
1962--4096[label="0.0151515;1pkt 1fpkt"];
1962--4163[label="0.00454545;1pkt 1fpkt"];
1969--2036[label="0.00574713;1pkt 1fpkt"];
1969--2068[label="0.00574713;1pkt 1fpkt"];
1969--2169[label="0.00574713;1pkt 1fpkt"];
1969--2569[label="0.00574713;1pkt 1fpkt"];
1969--2707[label="0.00574713;1pkt 1fpkt"];
1969--2784[label="0.00925926;1pkt 1fpkt"];
1969--2790[label="0.00574713;1pkt 1fpkt"];
1969--3294[label="0.00574713;1pkt 1fpkt"];
1969--3656[label="0.00574713;1pkt 1fpkt"];
1969--3714[label="0.00925926;1pkt 1fpkt"];
1969--3719[label="0.00574713;1pkt 1fpkt"];
1969--4254[label="0.00574713;1pkt 1fpkt"];
1996--2068[label="0.0555556;1pkt 1fpkt"];
1996--2169[label="0.0555556;1pkt 1fpkt"];
1996--2568[label="0.333333;1pkt 1fpkt"];
1996--2749[label="0.2;1pkt 1fpkt"];
1996--2947[label="0.0555556;1pkt 1fpkt"];
1996--3294[label="0.0555556;1pkt 1fpkt"];
1996--3566[label="0.333333;1pkt 1fpkt"];
1996--3911[label="0.0555556;1pkt 1fpkt"];
2063--2068[label="0.00387597;1pkt 1fpkt"];
2063--2295[label="0.0153846;1pkt 1fpkt"];
2063--2707[label="0.00387597;1pkt 1fpkt"];
2063--2784[label="0.00925926;1pkt 1fpkt"];
2063--2790[label="0.00458716;1pkt 1fpkt"];
2063--3370[label="0.0151515;1pkt 1fpkt"];
2063--3656[label="0.00387597;1pkt 1fpkt"];
2063--3714[label="0.00925926;1pkt 1fpkt"];
2063--3719[label="0.00458716;1pkt 1fpkt"];
2063--3911[label="0.0416667;1pkt 1fpkt"];
2063--4096[label="0.0151515;1pkt 1fpkt"];
2063--4254[label="0.00456621;1pkt 1fpkt"];
2169--3294[label="1;541pkt 541fpkt"];
2295--3370[label="1;65pkt 65fpkt"];
2295--4096[label="1;65pkt 65fpkt"];
2568--3566[label="1;3pkt 3fpkt"];
2700--3649[label="1;35pkt 35fpkt"];
2700--4220[label="1;35pkt 35fpkt"];
2784--3714[label="1;108pkt 108fpkt"];
2920--3812[label="1;27pkt 27fpkt"];
3370--4096[label="1;66pkt 66fpkt"];
3649--4220[label="1;35pkt 35fpkt"];
</description>
    <slice/>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.181.193.82"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
2578[label="143.28.218.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3573[label="143.28.218.83;1pkt 1fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.218.83:25, 57.179.229.44:37406}[50%]&lt;BR/&gt;{143.28.218.83:25, 210.57.192.148:26744}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 37406: (33.3333%)&lt;BR/&gt; 26744: (16.6667%)&gt;];
}
2578--3573[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.57.192.148" dst_port="26744" src_ip="143.28.218.83" src_port="25"/>
      <filter dst_ip="57.179.229.44" dst_port="37406" src_ip="143.28.218.83" src_port="25"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
2580[label="166.28.40.84;94pkt 94fpkt", shape=pentagon, color=darkviolet];
3575[label="166.28.40.84;94pkt 94fpkt", shape=invtriangle, color=brown];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.40.84:*, *:25}[80.8511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.5532%)&lt;BR/&gt; 53: (5.85106%)&lt;BR/&gt; 41351: (3.19149%)&lt;BR/&gt; 80: (1.06383%)&lt;BR/&gt; 61983: (0.531915%)&gt;];
}
2580--3575[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.40.84"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
1399[label="178.142.129.197;d;838pkt 838fpkt", shape=diamond, color=yellow];
1454[label="80.133.164.142;s;2pkt 2fpkt", shape=diamond, color=yellow];
1629[label="81.167.116.178;s;129pkt 129fpkt", shape=diamond, color=yellow];
1991[label="178.142.129.197;d;421pkt 421fpkt", shape=hexagon, color=black];
2153[label="213.248.3.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2161[label="214.96.109.2;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2180[label="208.79.10.5;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2191[label="81.160.21.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2198[label="214.119.211.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2232[label="214.139.178.13;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2238[label="209.59.45.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2248[label="214.106.19.18;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2304[label="208.72.56.30;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2394[label="80.156.49.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2415[label="81.74.244.51;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2464[label="63.187.181.63;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2507[label="80.133.165.70;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2524[label="81.181.48.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2531[label="216.147.25.76;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2587[label="80.4.45.85;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2634[label="209.82.203.94;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2640[label="34.105.37.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2668[label="84.183.146.101;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2740[label="80.160.90.118;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2771[label="216.177.186.128;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2925[label="209.82.205.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2934[label="81.15.115.166;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2937[label="209.59.138.167;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2940[label="209.9.0.168;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2955[label="214.99.34.170;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2988[label="85.23.214.177;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3057[label="213.247.89.195;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3079[label="81.88.175.199;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3105[label="80.163.13.206;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3129[label="80.4.48.212;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3289[label="214.96.109.2;5pkt 5fpkt", shape=invtriangle, color=brown];
3301[label="208.79.10.5;34pkt 34fpkt", shape=invtriangle, color=brown];
3310[label="81.160.21.8;6pkt 6fpkt", shape=invtriangle, color=brown];
3315[label="214.119.211.8;6pkt 6fpkt", shape=invtriangle, color=brown];
3336[label="214.139.178.13;3pkt 3fpkt", shape=invtriangle, color=brown];
3340[label="209.59.45.14;6pkt 6fpkt", shape=invtriangle, color=brown];
3345[label="214.106.19.18;11pkt 11fpkt", shape=invtriangle, color=brown];
3379[label="208.72.56.30;14pkt 14fpkt", shape=invtriangle, color=brown];
3416[label="215.95.130.41;9pkt 9fpkt", shape=invtriangle, color=brown];
3447[label="81.74.244.51;10pkt 10fpkt", shape=invtriangle, color=brown];
3482[label="63.187.181.63;7pkt 7fpkt", shape=invtriangle, color=brown];
3516[label="80.133.165.70;49pkt 49fpkt", shape=invtriangle, color=brown];
3529[label="81.181.48.74;2pkt 2fpkt", shape=invtriangle, color=brown];
3535[label="216.147.25.76;4pkt 4fpkt", shape=invtriangle, color=brown];
3581[label="80.4.45.85;9pkt 9fpkt", shape=invtriangle, color=brown];
3679[label="80.160.90.118;6pkt 6fpkt", shape=invtriangle, color=brown];
3703[label="216.177.186.128;8pkt 8fpkt", shape=invtriangle, color=brown];
3815[label="209.82.205.162;2pkt 2fpkt", shape=invtriangle, color=brown];
3822[label="81.15.115.166;32pkt 32fpkt", shape=invtriangle, color=brown];
3825[label="209.59.138.167;4pkt 4fpkt", shape=invtriangle, color=brown];
3837[label="214.99.34.170;17pkt 17fpkt", shape=invtriangle, color=brown];
3859[label="85.23.214.177;10pkt 10fpkt", shape=invtriangle, color=brown];
3919[label="81.88.175.199;8pkt 8fpkt", shape=invtriangle, color=brown];
3955[label="80.4.48.212;8pkt 8fpkt", shape=invtriangle, color=brown];
4062[label="208.79.10.5;34pkt 34fpkt", shape=invhouse, color=bisque];
4069[label="214.119.211.8;6pkt 6fpkt", shape=invhouse, color=bisque];
4102[label="208.72.56.30;14pkt 14fpkt", shape=invhouse, color=bisque];
4147[label="63.187.181.63;8pkt 8fpkt", shape=invhouse, color=bisque];
4165[label="80.133.165.70;48pkt 48fpkt", shape=invhouse, color=bisque];
4187[label="80.4.45.85;10pkt 10fpkt", shape=invhouse, color=bisque];
4306[label="209.82.205.162;1pkt 1fpkt", shape=invhouse, color=bisque];
4310[label="209.59.138.167;5pkt 5fpkt", shape=invhouse, color=bisque];
4316[label="214.99.34.170;16pkt 16fpkt", shape=invhouse, color=bisque];
4328[label="85.23.214.177;11pkt 11fpkt", shape=invhouse, color=bisque];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 178.142.129.197:8080}[54.4835%]&lt;BR/&gt;{*:8080, 178.142.129.197:*}[25.1986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (39.8192%)&lt;BR/&gt; 1556: (12.2265%)&lt;BR/&gt; 80: (1.68887%)&lt;BR/&gt; 3893: (0.237869%)&lt;BR/&gt; 0: (0.237869%)&gt;];
}
1399--1454[label="1;2pkt 2fpkt"];
1399--1629[label="1;129pkt 129fpkt"];
1399--1991[label="1;421pkt 421fpkt"];
1399--2153[label="0.8;4pkt 4fpkt"];
1399--2161[label="1;5pkt 5fpkt"];
1399--2180[label="0.818182;27pkt 27fpkt"];
1399--2191[label="0.833333;5pkt 5fpkt"];
1399--2198[label="0.833333;5pkt 5fpkt"];
1399--2232[label="1;3pkt 3fpkt"];
1399--2238[label="0.6;3pkt 3fpkt"];
1399--2248[label="0.9;9pkt 9fpkt"];
1399--2304[label="0.857143;12pkt 12fpkt"];
1399--2394[label="0.5;1pkt 1fpkt"];
1399--2415[label="0.8;8pkt 8fpkt"];
1399--2464[label="0.571429;4pkt 4fpkt"];
1399--2507[label="0.833333;40pkt 40fpkt"];
1399--2524[label="1;2pkt 2fpkt"];
1399--2531[label="0.75;3pkt 3fpkt"];
1399--2587[label="0.888889;8pkt 8fpkt"];
1399--2634[label="1;5pkt 5fpkt"];
1399--2640[label="1;3pkt 3fpkt"];
1399--2660[label="0.285714;2pkt 2fpkt"];
1399--2668[label="0.833333;5pkt 5fpkt"];
1399--2740[label="1;6pkt 6fpkt"];
1399--2771[label="0.75;6pkt 6fpkt"];
1399--2925[label="1;1pkt 1fpkt"];
1399--2934[label="1;32pkt 32fpkt"];
1399--2937[label="0.8;4pkt 4fpkt"];
1399--2940[label="0.8;4pkt 4fpkt"];
1399--2955[label="0.6875;11pkt 11fpkt"];
1399--2988[label="0.9;9pkt 9fpkt"];
1399--3057[label="1;3pkt 3fpkt"];
1399--3079[label="0.75;6pkt 6fpkt"];
1399--3105[label="1;4pkt 4fpkt"];
1399--3129[label="1;8pkt 8fpkt"];
1399--3289[label="1;5pkt 5fpkt"];
1399--3301[label="0.823529;28pkt 28fpkt"];
1399--3310[label="0.833333;5pkt 5fpkt"];
1399--3315[label="0.833333;5pkt 5fpkt"];
1399--3336[label="1;3pkt 3fpkt"];
1399--3340[label="0.666667;4pkt 4fpkt"];
1399--3345[label="0.909091;10pkt 10fpkt"];
1399--3379[label="0.857143;12pkt 12fpkt"];
1399--3416[label="1;9pkt 9fpkt"];
1399--3447[label="0.8;8pkt 8fpkt"];
1399--3482[label="0.571429;4pkt 4fpkt"];
1399--3516[label="0.836735;41pkt 41fpkt"];
1399--3529[label="1;2pkt 2fpkt"];
1399--3535[label="0.75;3pkt 3fpkt"];
1399--3581[label="0.888889;8pkt 8fpkt"];
1399--3624[label="0.166667;1pkt 1fpkt"];
1399--3679[label="1;6pkt 6fpkt"];
1399--3703[label="0.75;6pkt 6fpkt"];
1399--3815[label="1;2pkt 2fpkt"];
1399--3822[label="1;32pkt 32fpkt"];
1399--3825[label="0.75;3pkt 3fpkt"];
1399--3837[label="0.705882;12pkt 12fpkt"];
1399--3859[label="0.9;9pkt 9fpkt"];
1399--3919[label="0.75;6pkt 6fpkt"];
1399--3955[label="1;8pkt 8fpkt"];
1399--4062[label="0.823529;28pkt 28fpkt"];
1399--4069[label="0.833333;5pkt 5fpkt"];
1399--4102[label="0.857143;12pkt 12fpkt"];
1399--4147[label="0.625;5pkt 5fpkt"];
1399--4165[label="0.833333;40pkt 40fpkt"];
1399--4187[label="0.9;9pkt 9fpkt"];
1399--4306[label="1;1pkt 1fpkt"];
1399--4310[label="0.8;4pkt 4fpkt"];
1399--4316[label="0.6875;11pkt 11fpkt"];
1399--4328[label="0.909091;10pkt 10fpkt"];
1454--1991[label="1;2pkt 2fpkt"];
1629--1991[label="0.0155039;2pkt 2fpkt"];
1991--2153[label="0.2;1pkt 1fpkt"];
1991--2161[label="0.2;1pkt 1fpkt"];
1991--2180[label="0.0606061;2pkt 2fpkt"];
1991--2191[label="0.333333;2pkt 2fpkt"];
1991--2198[label="0.166667;1pkt 1fpkt"];
1991--2232[label="0.666667;2pkt 2fpkt"];
1991--2238[label="0.2;1pkt 1fpkt"];
1991--2248[label="0.2;2pkt 2fpkt"];
1991--2304[label="0.214286;3pkt 3fpkt"];
1991--2415[label="0.3;3pkt 3fpkt"];
1991--2507[label="0.395833;19pkt 19fpkt"];
1991--2524[label="0.5;1pkt 1fpkt"];
1991--2531[label="0.25;1pkt 1fpkt"];
1991--2587[label="0.444444;4pkt 4fpkt"];
1991--2634[label="0.2;1pkt 1fpkt"];
1991--2640[label="0.333333;1pkt 1fpkt"];
1991--2668[label="0.166667;1pkt 1fpkt"];
1991--2740[label="0.166667;1pkt 1fpkt"];
1991--2771[label="0.25;2pkt 2fpkt"];
1991--2934[label="1;32pkt 32fpkt"];
1991--2937[label="0.4;2pkt 2fpkt"];
1991--2940[label="0.2;1pkt 1fpkt"];
1991--2955[label="0.3125;5pkt 5fpkt"];
1991--2988[label="0.2;2pkt 2fpkt"];
1991--3079[label="0.375;3pkt 3fpkt"];
1991--3129[label="0.875;7pkt 7fpkt"];
1991--3289[label="0.2;1pkt 1fpkt"];
1991--3301[label="0.0882353;3pkt 3fpkt"];
1991--3310[label="0.333333;2pkt 2fpkt"];
1991--3315[label="0.166667;1pkt 1fpkt"];
1991--3336[label="0.666667;2pkt 2fpkt"];
1991--3340[label="0.333333;2pkt 2fpkt"];
1991--3345[label="0.272727;3pkt 3fpkt"];
1991--3379[label="0.214286;3pkt 3fpkt"];
1991--3416[label="0.555556;5pkt 5fpkt"];
1991--3447[label="0.3;3pkt 3fpkt"];
1991--3516[label="0.408163;20pkt 20fpkt"];
1991--3529[label="0.5;1pkt 1fpkt"];
1991--3535[label="0.25;1pkt 1fpkt"];
1991--3581[label="0.444444;4pkt 4fpkt"];
1991--3679[label="0.166667;1pkt 1fpkt"];
1991--3703[label="0.25;2pkt 2fpkt"];
1991--3822[label="1;32pkt 32fpkt"];
1991--3825[label="0.25;1pkt 1fpkt"];
1991--3837[label="0.352941;6pkt 6fpkt"];
1991--3859[label="0.2;2pkt 2fpkt"];
1991--3919[label="0.375;3pkt 3fpkt"];
1991--3955[label="0.875;7pkt 7fpkt"];
1991--4062[label="0.0882353;3pkt 3fpkt"];
1991--4069[label="0.166667;1pkt 1fpkt"];
1991--4102[label="0.214286;3pkt 3fpkt"];
1991--4165[label="0.395833;19pkt 19fpkt"];
1991--4187[label="0.5;5pkt 5fpkt"];
1991--4310[label="0.4;2pkt 2fpkt"];
1991--4316[label="0.3125;5pkt 5fpkt"];
1991--4328[label="0.272727;3pkt 3fpkt"];
2161--3289[label="1;5pkt 5fpkt"];
2180--3301[label="1;33pkt 33fpkt"];
2180--4062[label="1;33pkt 33fpkt"];
2191--3310[label="1;6pkt 6fpkt"];
2198--3315[label="1;6pkt 6fpkt"];
2198--4069[label="1;6pkt 6fpkt"];
2232--3336[label="1;3pkt 3fpkt"];
2238--3340[label="1;5pkt 5fpkt"];
2248--3345[label="1;10pkt 10fpkt"];
2304--3379[label="1;14pkt 14fpkt"];
2304--4102[label="1;14pkt 14fpkt"];
2415--3447[label="1;10pkt 10fpkt"];
2464--3482[label="1;7pkt 7fpkt"];
2464--4147[label="1;7pkt 7fpkt"];
2507--3516[label="1;48pkt 48fpkt"];
2507--4165[label="1;48pkt 48fpkt"];
2524--3529[label="1;2pkt 2fpkt"];
2531--3535[label="1;4pkt 4fpkt"];
2587--3581[label="1;9pkt 9fpkt"];
2587--4187[label="1;9pkt 9fpkt"];
2740--3679[label="1;6pkt 6fpkt"];
2771--3703[label="1;8pkt 8fpkt"];
2925--3815[label="1;1pkt 1fpkt"];
2925--4306[label="1;1pkt 1fpkt"];
2934--3822[label="1;32pkt 32fpkt"];
2937--3825[label="1;4pkt 4fpkt"];
2937--4310[label="1;5pkt 5fpkt"];
2955--3837[label="1;16pkt 16fpkt"];
2955--4316[label="1;16pkt 16fpkt"];
2988--3859[label="1;10pkt 10fpkt"];
2988--4328[label="1;10pkt 10fpkt"];
3079--3919[label="1;8pkt 8fpkt"];
3129--3955[label="1;8pkt 8fpkt"];
3301--4062[label="1;34pkt 34fpkt"];
3315--4069[label="1;6pkt 6fpkt"];
3379--4102[label="1;14pkt 14fpkt"];
3482--4147[label="1;7pkt 7fpkt"];
3516--4165[label="1;48pkt 48fpkt"];
3581--4187[label="1;9pkt 9fpkt"];
3815--4306[label="1;1pkt 1fpkt"];
3825--4310[label="1;4pkt 4fpkt"];
3837--4316[label="1;16pkt 16fpkt"];
3859--4328[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.129.197" src_port="8080"/>
      <filter dst_ip="178.142.129.197" dst_port="8080"/>
    </slice>
    <from sec="1136091628" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
280[label="219.209.57.165;s;57pkt 57fpkt", shape=diamond, color=yellow];
281[label="192.242.57.217;d;278pkt 278fpkt", shape=diamond, color=yellow];
338[label="210.203.50.3;s;8pkt 8fpkt", shape=diamond, color=yellow];
445[label="83.35.25.226;s;2pkt 2fpkt", shape=diamond, color=yellow];
1480[label="192.242.59.37;d;422pkt 422fpkt", shape=diamond, color=yellow];
2170[label="210.203.50.3;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2370[label="64.224.73.43;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2371[label="210.66.106.43;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2505[label="192.144.86.70;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2534[label="209.62.50.76;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2593[label="58.96.88.86;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3087[label="57.21.81.201;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3133[label="198.41.208.212;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3217[label="61.183.189.238;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3538[label="209.62.50.76;17pkt 17fpkt", shape=invtriangle, color=brown];
3585[label="58.96.88.86;17pkt 17fpkt", shape=invtriangle, color=brown];
3925[label="57.21.81.201;37pkt 37fpkt", shape=invtriangle, color=brown];
3958[label="198.41.208.212;3pkt 3fpkt", shape=invtriangle, color=brown];
4018[label="61.183.189.238;10pkt 10fpkt", shape=invtriangle, color=brown];
4190[label="58.96.88.86;17pkt 17fpkt", shape=invhouse, color=bisque];
4355[label="57.21.81.201;38pkt 38fpkt", shape=invhouse, color=bisque];
4368[label="198.41.208.212;3pkt 3fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.242.59.37:53}[54.7712%]&lt;BR/&gt;{*:80, 192.242.57.217:*}[40.7843%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.7367%)&lt;BR/&gt; 53: (22.0347%)&lt;BR/&gt; 32768: (1.25362%)&lt;BR/&gt; 37747: (0.385728%)&lt;BR/&gt; 53535: (0.337512%)&gt;];
}
280--281[label="1;57pkt 57fpkt"];
281--338[label="0.75;6pkt 6fpkt"];
281--445[label="1;2pkt 2fpkt"];
281--804[label="0.0638298;12pkt 12fpkt"];
281--902[label="0.00892857;1pkt 1fpkt"];
281--2170[label="0.75;6pkt 6fpkt"];
281--2370[label="1;2pkt 2fpkt"];
281--2371[label="0.0833333;2pkt 2fpkt"];
281--2434[label="0.454545;5pkt 5fpkt"];
281--2534[label="0.235294;4pkt 4fpkt"];
281--2593[label="0.882353;15pkt 15fpkt"];
281--2850[label="0.00719424;2pkt 2fpkt"];
281--2886[label="0.01;1pkt 1fpkt"];
281--2939[label="0.00719424;2pkt 2fpkt"];
281--3087[label="0.631579;24pkt 24fpkt"];
281--3133[label="0.75;3pkt 3fpkt"];
281--3217[label="0.454545;5pkt 5fpkt"];
281--3227[label="0.00694444;1pkt 1fpkt"];
281--3460[label="0.5;6pkt 6fpkt"];
281--3538[label="0.235294;4pkt 4fpkt"];
281--3585[label="0.882353;15pkt 15fpkt"];
281--3759[label="0.00719424;2pkt 2fpkt"];
281--3784[label="0.010101;1pkt 1fpkt"];
281--3827[label="0.00719424;2pkt 2fpkt"];
281--3925[label="0.621622;23pkt 23fpkt"];
281--3958[label="0.666667;2pkt 2fpkt"];
281--4018[label="0.5;5pkt 5fpkt"];
281--4026[label="0.00699301;1pkt 1fpkt"];
281--4190[label="0.882353;15pkt 15fpkt"];
281--4278[label="0.00719424;2pkt 2fpkt"];
281--4291[label="0.010101;1pkt 1fpkt"];
281--4311[label="0.00719424;2pkt 2fpkt"];
281--4355[label="0.631579;24pkt 24fpkt"];
281--4368[label="0.666667;2pkt 2fpkt"];
281--4404[label="0.00699301;1pkt 1fpkt"];
338--2170[label="1;8pkt 8fpkt"];
1480--1567[label="0.0119048;1pkt 1fpkt"];
1480--1590[label="0.0119048;1pkt 1fpkt"];
1480--1601[label="0.0147059;1pkt 1fpkt"];
1480--1607[label="0.0277778;2pkt 2fpkt"];
1480--1852[label="0.00236967;1pkt 1fpkt"];
1480--2078[label="0.0119048;1pkt 1fpkt"];
1480--2135[label="0.00473934;2pkt 2fpkt"];
1480--2144[label="0.0210526;2pkt 2fpkt"];
1480--2266[label="0.0235294;2pkt 2fpkt"];
1480--2352[label="0.0526316;1pkt 1fpkt"];
1480--2505[label="0.142857;1pkt 1fpkt"];
1480--2545[label="0.027027;3pkt 3fpkt"];
1480--2810[label="0.1;1pkt 1fpkt"];
1480--2832[label="0.00980392;1pkt 1fpkt"];
1480--2914[label="0.125;1pkt 1fpkt"];
1480--3084[label="0.0175439;1pkt 1fpkt"];
1480--3133[label="0.25;1pkt 1fpkt"];
1480--3277[label="0.0210526;2pkt 2fpkt"];
1480--3284[label="0.0135135;1pkt 1fpkt"];
1480--3732[label="0.111111;1pkt 1fpkt"];
1480--3744[label="0.00980392;1pkt 1fpkt"];
1480--3806[label="0.125;1pkt 1fpkt"];
1480--3923[label="0.0172414;1pkt 1fpkt"];
1480--3958[label="0.333333;1pkt 1fpkt"];
1480--4052[label="0.0210526;2pkt 2fpkt"];
1480--4270[label="0.00970874;1pkt 1fpkt"];
1480--4368[label="0.333333;1pkt 1fpkt"];
2534--3538[label="1;17pkt 17fpkt"];
2593--3585[label="1;17pkt 17fpkt"];
2593--4190[label="1;17pkt 17fpkt"];
3087--3925[label="1;37pkt 37fpkt"];
3087--4355[label="1;38pkt 38fpkt"];
3133--3958[label="1;3pkt 3fpkt"];
3133--4368[label="1;3pkt 3fpkt"];
3217--4018[label="1;10pkt 10fpkt"];
3585--4190[label="1;17pkt 17fpkt"];
3925--4355[label="1;37pkt 37fpkt"];
3958--4368[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.242.59.37" dst_port="53"/>
      <filter dst_ip="192.242.57.217" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
707[label="136.47.172.0;d;273pkt 273fpkt", shape=diamond, color=yellow];
922[label="209.58.40.197;s;56pkt 56fpkt", shape=diamond, color=yellow];
1171[label="136.47.174.201;d;64pkt 64fpkt", shape=diamond, color=yellow];
1923[label="209.58.40.197;s;56pkt 56fpkt", shape=hexagon, color=black];
2176[label="192.87.8.4;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2315[label="192.87.8.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2598[label="80.133.187.86;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2880[label="80.179.116.153;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3074[label="192.90.154.198;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3385[label="192.87.8.32;1pkt 1fpkt", shape=invtriangle, color=brown];
3588[label="80.133.187.86;35pkt 35fpkt", shape=invtriangle, color=brown];
3779[label="80.179.116.153;18pkt 18fpkt", shape=invtriangle, color=brown];
4192[label="80.133.187.86;34pkt 34fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.47.172.0:*}[76.8362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6044%)&lt;BR/&gt; 1806: (0.316456%)&lt;BR/&gt; 1804: (0.316456%)&lt;BR/&gt; 1803: (0.316456%)&lt;BR/&gt; 1799: (0.316456%)&gt;];
}
707--922[label="0.964286;54pkt 54fpkt"];
707--1923[label="0.964286;54pkt 54fpkt"];
707--2598[label="0.941176;32pkt 32fpkt"];
707--2880[label="0.222222;4pkt 4fpkt"];
707--3074[label="1;27pkt 27fpkt"];
707--3588[label="0.914286;32pkt 32fpkt"];
707--3779[label="0.222222;4pkt 4fpkt"];
707--4192[label="0.941176;32pkt 32fpkt"];
922--1171[label="0.0357143;2pkt 2fpkt"];
922--1923[label="1;56pkt 56fpkt"];
1171--1923[label="0.0357143;2pkt 2fpkt"];
1171--2176[label="1;15pkt 15fpkt"];
1171--2315[label="1;1pkt 1fpkt"];
1171--3385[label="1;1pkt 1fpkt"];
2315--3385[label="1;1pkt 1fpkt"];
2598--3588[label="1;34pkt 34fpkt"];
2598--4192[label="1;34pkt 34fpkt"];
2880--3779[label="1;18pkt 18fpkt"];
3588--4192[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.172.0" src_port="80"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
2600[label="160.128.23.87;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3590[label="160.128.23.87;9pkt 9fpkt", shape=invtriangle, color=brown];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.23.87:80, 61.183.172.166:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51766: (5.55556%)&lt;BR/&gt; 50825: (5.55556%)&lt;BR/&gt; 50067: (5.55556%)&lt;BR/&gt; 46248: (5.55556%)&gt;];
}
2600--3590[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="61.183.172.166" src_ip="160.128.23.87" src_port="80"/>
    </slice>
    <from sec="1136091875" usec="0"/>
    <to sec="1136092438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.53.110.87"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.179.115.89"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
2615[label="166.28.80.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3600[label="166.28.80.90;4pkt 4fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.80.90:80, 61.183.175.50:41953}[25%]&lt;BR/&gt;{166.28.80.90:80, 61.183.175.188:56865}[25%]&lt;BR/&gt;{166.28.80.90:80, 36.76.17.107:40756}[25%]&lt;BR/&gt;{166.28.80.90:80, 36.76.17.107:50870}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56865: (12.5%)&lt;BR/&gt; 50870: (12.5%)&lt;BR/&gt; 41953: (12.5%)&lt;BR/&gt; 40756: (12.5%)&gt;];
}
2615--3600[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="36.76.17.107" dst_port="50870" src_ip="166.28.80.90" src_port="80"/>
      <filter dst_ip="36.76.17.107" dst_port="40756" src_ip="166.28.80.90" src_port="80"/>
      <filter dst_ip="61.183.175.188" dst_port="56865" src_ip="166.28.80.90" src_port="80"/>
      <filter dst_ip="61.183.175.50" dst_port="41953" src_ip="166.28.80.90" src_port="80"/>
    </slice>
    <from sec="1136091822" usec="0"/>
    <to sec="1136092379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
2619[label="192.248.177.90;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3603[label="192.248.177.90;44pkt 44fpkt", shape=invtriangle, color=brown];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.248.177.90:*, 10.66.1.141:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 4201: (1.13636%)&lt;BR/&gt; 4200: (1.13636%)&lt;BR/&gt; 4199: (1.13636%)&lt;BR/&gt; 4194: (1.13636%)&gt;];
}
2619--3603[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="10.66.1.141" dst_port="1080" src_ip="192.248.177.90"/>
    </slice>
    <from sec="1136091608" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
2620[label="166.28.184.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3604[label="166.28.184.90;4pkt 4fpkt", shape=invtriangle, color=brown];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.184.90:2841, 197.54.66.6:80}[25%]&lt;BR/&gt;{166.28.184.90:2872, 64.252.127.158:80}[25%]&lt;BR/&gt;{166.28.184.90:2862, 198.131.218.176:443}[25%]&lt;BR/&gt;{166.28.184.90:2829, 57.201.240.220:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 2872: (12.5%)&lt;BR/&gt; 2862: (12.5%)&lt;BR/&gt; 2841: (12.5%)&lt;BR/&gt; 2829: (12.5%)&gt;];
}
2620--3604[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="57.201.240.220" dst_port="80" src_ip="166.28.184.90" src_port="2829"/>
      <filter dst_ip="198.131.218.176" dst_port="443" src_ip="166.28.184.90" src_port="2862"/>
      <filter dst_ip="64.252.127.158" dst_port="80" src_ip="166.28.184.90" src_port="2872"/>
      <filter dst_ip="197.54.66.6" dst_port="80" src_ip="166.28.184.90" src_port="2841"/>
    </slice>
    <from sec="1136092319" usec="0"/>
    <to sec="1136092492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
341[label="160.4.95.2;s;618pkt 618fpkt", shape=diamond, color=yellow];
1139[label="166.28.145.91;s;297pkt 297fpkt", shape=diamond, color=yellow];
1286[label="35.22.17.85;d;51pkt 51fpkt", shape=diamond, color=yellow];
1919[label="35.22.17.85;d;45pkt 45fpkt", shape=hexagon, color=black];
2624[label="166.28.145.91;330pkt 330fpkt", shape=pentagon, color=darkviolet];
3606[label="166.28.145.91;330pkt 330fpkt", shape=invtriangle, color=brown];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.95.2:*, *:25}[48.0506%]&lt;BR/&gt;{166.28.145.91:25, *:*}[28.9779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.5512%)&lt;BR/&gt; 113: (0.448833%)&lt;BR/&gt; 35623: (0.179533%)&lt;BR/&gt; 4868: (0.179533%)&lt;BR/&gt; 3747: (0.179533%)&gt;];
}
341--1286[label="0.705882;36pkt 36fpkt"];
341--1547[label="0.0227273;1pkt 1fpkt"];
341--1919[label="0.711111;32pkt 32fpkt"];
1139--1286[label="0.294118;15pkt 15fpkt"];
1139--1919[label="0.288889;13pkt 13fpkt"];
1139--2624[label="0.996633;296pkt 296fpkt"];
1139--3606[label="0.996633;296pkt 296fpkt"];
1286--1919[label="1;45pkt 45fpkt"];
1286--2624[label="0.294118;15pkt 15fpkt"];
1286--3606[label="0.294118;15pkt 15fpkt"];
1919--2624[label="0.288889;13pkt 13fpkt"];
1919--3606[label="0.288889;13pkt 13fpkt"];
2624--3606[label="1;330pkt 330fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="160.4.95.2"/>
      <filter src_ip="166.28.145.91" src_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
2625[label="166.29.151.91;94pkt 94fpkt", shape=pentagon, color=darkviolet];
3607[label="166.29.151.91;94pkt 94fpkt", shape=invtriangle, color=brown];
4198[label="166.29.151.91;95pkt 95fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.91:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.8869%)&lt;BR/&gt; 32768: (3.18021%)&lt;BR/&gt; 49256: (1.06007%)&lt;BR/&gt; 65468: (0.530035%)&lt;BR/&gt; 65184: (0.530035%)&gt;];
}
2625--3607[label="1;94pkt 94fpkt"];
2625--4198[label="1;94pkt 94fpkt"];
3607--4198[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.151.91" src_port="53"/>
    </slice>
    <from sec="1136091619" usec="0"/>
    <to sec="1136092473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
624[label="166.28.164.224;d;351pkt 351fpkt", shape=diamond, color=yellow];
844[label="166.28.145.91;d;123pkt 123fpkt", shape=diamond, color=yellow];
957[label="160.4.95.2;d;211pkt 211fpkt", shape=diamond, color=yellow];
1044[label="178.142.109.50;d;92pkt 92fpkt", shape=diamond, color=yellow];
1558[label="136.47.16.214;d;44pkt 44fpkt", shape=diamond, color=yellow];
1591[label="35.22.17.85;s;51pkt 51fpkt", shape=diamond, color=yellow];
2079[label="35.22.17.85;s;51pkt 51fpkt", shape=hexagon, color=black];
2451[label="84.102.173.61;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2479[label="213.164.170.66;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2632[label="213.194.154.94;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3016[label="217.74.3.186;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3128[label="194.73.40.212;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3471[label="84.102.173.61;14pkt 14fpkt", shape=invtriangle, color=brown];
3610[label="213.194.154.94;9pkt 9fpkt", shape=invtriangle, color=brown];
3881[label="217.74.3.186;4pkt 4fpkt", shape=invtriangle, color=brown];
3954[label="194.73.40.212;44pkt 44fpkt", shape=invtriangle, color=brown];
4140[label="84.102.173.61;13pkt 13fpkt", shape=invhouse, color=bisque];
4202[label="213.194.154.94;10pkt 10fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.28.164.224:25}[34.8754%]&lt;BR/&gt;{*:*, 160.4.95.2:*}[25.0297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.8636%)&lt;BR/&gt; 0: (7.40909%)&lt;BR/&gt; 53: (0.681818%)&lt;BR/&gt; 113: (0.636364%)&lt;BR/&gt; 4757: (0.181818%)&gt;];
}
624--2321[label="0.177778;8pkt 8fpkt"];
624--3016[label="0.5;2pkt 2fpkt"];
624--3076[label="0.166667;2pkt 2fpkt"];
624--3128[label="0.909091;40pkt 40fpkt"];
624--3389[label="0.159091;7pkt 7fpkt"];
624--3881[label="0.5;2pkt 2fpkt"];
624--3916[label="0.166667;2pkt 2fpkt"];
624--3954[label="0.909091;40pkt 40fpkt"];
844--1591[label="0.254902;13pkt 13fpkt"];
844--2079[label="0.254902;13pkt 13fpkt"];
844--2329[label="0.0769231;1pkt 1fpkt"];
844--2451[label="0.0714286;1pkt 1fpkt"];
844--2479[label="0.727273;8pkt 8fpkt"];
844--3337[label="0.0588235;1pkt 1fpkt"];
844--3471[label="0.0714286;1pkt 1fpkt"];
844--4140[label="0.0769231;1pkt 1fpkt"];
957--1591[label="0.705882;36pkt 36fpkt"];
957--2079[label="0.705882;36pkt 36fpkt"];
957--2233[label="0.0625;1pkt 1fpkt"];
957--2632[label="0.6;6pkt 6fpkt"];
957--3084[label="0.0350877;2pkt 2fpkt"];
957--3274[label="0.0384615;1pkt 1fpkt"];
957--3337[label="0.0588235;1pkt 1fpkt"];
957--3400[label="0.0222222;1pkt 1fpkt"];
957--3610[label="0.555556;5pkt 5fpkt"];
957--3923[label="0.0344828;2pkt 2fpkt"];
957--4050[label="0.0384615;1pkt 1fpkt"];
957--4112[label="0.0222222;1pkt 1fpkt"];
957--4202[label="0.6;6pkt 6fpkt"];
1044--2329[label="0.0769231;1pkt 1fpkt"];
1044--2451[label="0.214286;3pkt 3fpkt"];
1044--2902[label="0.0108696;1pkt 1fpkt"];
1044--3016[label="0.25;1pkt 1fpkt"];
1044--3084[label="0.0175439;1pkt 1fpkt"];
1044--3471[label="0.214286;3pkt 3fpkt"];
1044--3797[label="0.0108696;1pkt 1fpkt"];
1044--3881[label="0.25;1pkt 1fpkt"];
1044--3923[label="0.0172414;1pkt 1fpkt"];
1044--4140[label="0.230769;3pkt 3fpkt"];
1558--2233[label="0.0625;1pkt 1fpkt"];
1558--2451[label="0.0714286;1pkt 1fpkt"];
1558--3016[label="0.25;1pkt 1fpkt"];
1558--3084[label="0.0227273;1pkt 1fpkt"];
1558--3337[label="0.0588235;1pkt 1fpkt"];
1558--3471[label="0.0714286;1pkt 1fpkt"];
1558--3881[label="0.25;1pkt 1fpkt"];
1558--3923[label="0.0227273;1pkt 1fpkt"];
1558--4140[label="0.0769231;1pkt 1fpkt"];
1591--2079[label="1;51pkt 51fpkt"];
2451--3471[label="1;14pkt 14fpkt"];
2451--4140[label="1;13pkt 13fpkt"];
2632--3610[label="1;9pkt 9fpkt"];
2632--4202[label="1;10pkt 10fpkt"];
3016--3881[label="1;4pkt 4fpkt"];
3128--3954[label="1;44pkt 44fpkt"];
3471--4140[label="1;13pkt 13fpkt"];
3610--4202[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.95.2"/>
      <filter dst_ip="166.28.164.224" dst_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.28.163.95"/>
    </slice>
    <from sec="1136091614" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
2644[label="213.25.178.96;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3615[label="213.25.178.96;103pkt 103fpkt", shape=invtriangle, color=brown];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.25.178.96:*, *:135}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.0338%)&lt;BR/&gt; 445: (0.966184%)&lt;BR/&gt; 26517: (0.483092%)&lt;BR/&gt; 25852: (0.483092%)&lt;BR/&gt; 25711: (0.483092%)&gt;];
}
2644--3615[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="213.25.178.96"/>
    </slice>
    <from sec="1136091615" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
635[label="136.47.69.239;d;134pkt 134fpkt", shape=diamond, color=yellow];
875[label="192.248.190.252;d;153pkt 153fpkt", shape=diamond, color=yellow];
1081[label="143.28.137.80;d;292pkt 292fpkt", shape=diamond, color=yellow];
1238[label="136.47.65.82;d;309pkt 309fpkt", shape=diamond, color=yellow];
1946[label="143.28.137.80;d;292pkt 292fpkt", shape=hexagon, color=black];
1957[label="136.47.69.239;d;100pkt 100fpkt", shape=hexagon, color=black];
2018[label="136.47.65.82;d;310pkt 310fpkt", shape=hexagon, color=black];
2225[label="57.231.40.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2416[label="196.29.81.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2647[label="57.100.205.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2724[label="59.59.114.116;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2811[label="60.112.66.137;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2989[label="57.132.29.178;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3091[label="57.231.69.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3270[label="58.44.149.254;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3330[label="57.231.40.12;1pkt 1fpkt", shape=invtriangle, color=brown];
3448[label="196.29.81.52;1pkt 1fpkt", shape=invtriangle, color=brown];
3617[label="57.100.205.97;1pkt 1fpkt", shape=invtriangle, color=brown];
3668[label="59.59.114.116;11pkt 11fpkt", shape=invtriangle, color=brown];
3860[label="57.132.29.178;6pkt 6fpkt", shape=invtriangle, color=brown];
4015[label="219.184.235.237;1pkt 1fpkt", shape=invtriangle, color=brown];
4047[label="58.44.149.254;7pkt 7fpkt", shape=invtriangle, color=brown];
4076[label="57.231.40.12;1pkt 1fpkt", shape=invhouse, color=bisque];
4133[label="196.29.81.52;1pkt 1fpkt", shape=invhouse, color=bisque];
4206[label="57.100.205.97;2pkt 2fpkt", shape=invhouse, color=bisque];
4329[label="57.132.29.178;7pkt 7fpkt", shape=invhouse, color=bisque];
4414[label="58.44.149.254;6pkt 6fpkt", shape=invhouse, color=bisque];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 143.28.137.80:*}[32.3009%]&lt;BR/&gt;{*:53, 136.47.65.82:32794}[31.4159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.5006%)&lt;BR/&gt; 32794: (17.1446%)&lt;BR/&gt; 61103: (9.46834%)&lt;BR/&gt; 80: (8.45281%)&lt;BR/&gt; 0: (3.52449%)&gt;];
}
635--1957[label="1;100pkt 100fpkt"];
635--2225[label="1;1pkt 1fpkt"];
635--2416[label="1;1pkt 1fpkt"];
635--2647[label="0.5;1pkt 1fpkt"];
635--2811[label="0.9;9pkt 9fpkt"];
635--2989[label="1;6pkt 6fpkt"];
635--3091[label="1;1pkt 1fpkt"];
635--3330[label="1;1pkt 1fpkt"];
635--3448[label="1;1pkt 1fpkt"];
635--3617[label="1;1pkt 1fpkt"];
635--3860[label="1;6pkt 6fpkt"];
635--4015[label="1;1pkt 1fpkt"];
635--4076[label="1;1pkt 1fpkt"];
635--4133[label="1;1pkt 1fpkt"];
635--4206[label="0.5;1pkt 1fpkt"];
635--4329[label="1;7pkt 7fpkt"];
875--1263[label="0.0120482;1pkt 1fpkt"];
875--1371[label="0.0140845;1pkt 1fpkt"];
875--1465[label="0.0166667;1pkt 1fpkt"];
875--1535[label="0.0130719;2pkt 2fpkt"];
875--1978[label="0.0140845;1pkt 1fpkt"];
875--2135[label="0.0392157;6pkt 6fpkt"];
875--2363[label="0.0117647;1pkt 1fpkt"];
875--2855[label="0.0357143;1pkt 1fpkt"];
875--2924[label="0.027027;1pkt 1fpkt"];
875--3005[label="0.0188679;1pkt 1fpkt"];
875--3041[label="0.0133333;1pkt 1fpkt"];
875--3186[label="0.0147059;1pkt 1fpkt"];
875--3239[label="0.0151515;1pkt 1fpkt"];
875--3270[label="0.142857;1pkt 1fpkt"];
875--3419[label="0.0117647;1pkt 1fpkt"];
875--3873[label="0.0192308;1pkt 1fpkt"];
875--3995[label="0.0147059;1pkt 1fpkt"];
875--4031[label="0.0151515;1pkt 1fpkt"];
875--4047[label="0.142857;1pkt 1fpkt"];
875--4338[label="0.0188679;1pkt 1fpkt"];
875--4388[label="0.0144928;1pkt 1fpkt"];
875--4414[label="0.166667;1pkt 1fpkt"];
1081--1300[label="0.0117647;1pkt 1fpkt"];
1081--1946[label="1;292pkt 292fpkt"];
1081--2135[label="0.167808;49pkt 49fpkt"];
1081--2201[label="0.047619;1pkt 1fpkt"];
1081--2460[label="0.00571429;1pkt 1fpkt"];
1081--2608[label="0.0178571;1pkt 1fpkt"];
1081--2656[label="0.0344828;1pkt 1fpkt"];
1081--2810[label="0.1;1pkt 1fpkt"];
1081--2855[label="0.0357143;1pkt 1fpkt"];
1081--2913[label="0.0140845;1pkt 1fpkt"];
1081--3020[label="0.0555556;1pkt 1fpkt"];
1081--3059[label="0.0119048;1pkt 1fpkt"];
1081--3071[label="0.0416667;1pkt 1fpkt"];
1081--3270[label="0.142857;1pkt 1fpkt"];
1081--3479[label="0.00571429;1pkt 1fpkt"];
1081--3732[label="0.111111;1pkt 1fpkt"];
1081--3914[label="0.0416667;1pkt 1fpkt"];
1081--4047[label="0.142857;1pkt 1fpkt"];
1081--4414[label="0.166667;1pkt 1fpkt"];
1238--1263[label="0.0120482;1pkt 1fpkt"];
1238--1371[label="0.0140845;1pkt 1fpkt"];
1238--1465[label="0.0166667;1pkt 1fpkt"];
1238--1978[label="0.0140845;1pkt 1fpkt"];
1238--2018[label="1;309pkt 309fpkt"];
1238--2135[label="0.23301;72pkt 72fpkt"];
1238--2201[label="0.047619;1pkt 1fpkt"];
1238--2275[label="0.0322581;1pkt 1fpkt"];
1238--2282[label="0.0588235;1pkt 1fpkt"];
1238--2363[label="0.0117647;1pkt 1fpkt"];
1238--2378[label="0.0555556;1pkt 1fpkt"];
1238--2514[label="0.030303;1pkt 1fpkt"];
1238--2547[label="0.0204082;1pkt 1fpkt"];
1238--2647[label="0.5;1pkt 1fpkt"];
1238--2653[label="0.0212766;1pkt 1fpkt"];
1238--2724[label="0.0909091;1pkt 1fpkt"];
1238--2796[label="0.0136986;1pkt 1fpkt"];
1238--2855[label="0.0357143;1pkt 1fpkt"];
1238--2924[label="0.027027;1pkt 1fpkt"];
1238--2956[label="0.0294118;1pkt 1fpkt"];
1238--2994[label="0.0357143;1pkt 1fpkt"];
1238--3005[label="0.0188679;1pkt 1fpkt"];
1238--3020[label="0.0555556;1pkt 1fpkt"];
1238--3041[label="0.0133333;1pkt 1fpkt"];
1238--3071[label="0.0416667;1pkt 1fpkt"];
1238--3186[label="0.0147059;1pkt 1fpkt"];
1238--3239[label="0.0151515;1pkt 1fpkt"];
1238--3270[label="0.142857;1pkt 1fpkt"];
1238--3362[label="0.0625;1pkt 1fpkt"];
1238--3419[label="0.0117647;1pkt 1fpkt"];
1238--3522[label="0.030303;1pkt 1fpkt"];
1238--3668[label="0.0909091;1pkt 1fpkt"];
1238--3723[label="0.0135135;1pkt 1fpkt"];
1238--3838[label="0.0294118;1pkt 1fpkt"];
1238--3864[label="0.037037;1pkt 1fpkt"];
1238--3873[label="0.0192308;1pkt 1fpkt"];
1238--3914[label="0.0416667;1pkt 1fpkt"];
1238--3995[label="0.0147059;1pkt 1fpkt"];
1238--4031[label="0.0151515;1pkt 1fpkt"];
1238--4047[label="0.142857;1pkt 1fpkt"];
1238--4091[label="0.0588235;1pkt 1fpkt"];
1238--4166[label="0.030303;1pkt 1fpkt"];
1238--4206[label="0.5;1pkt 1fpkt"];
1238--4258[label="0.0135135;1pkt 1fpkt"];
1238--4338[label="0.0188679;1pkt 1fpkt"];
1238--4388[label="0.0144928;1pkt 1fpkt"];
1238--4414[label="0.166667;1pkt 1fpkt"];
1946--2135[label="0.167808;49pkt 49fpkt"];
1946--2201[label="0.047619;1pkt 1fpkt"];
1946--2460[label="0.00571429;1pkt 1fpkt"];
1946--2608[label="0.0178571;1pkt 1fpkt"];
1946--2656[label="0.0344828;1pkt 1fpkt"];
1946--2810[label="0.1;1pkt 1fpkt"];
1946--2855[label="0.0357143;1pkt 1fpkt"];
1946--2913[label="0.0140845;1pkt 1fpkt"];
1946--3020[label="0.0555556;1pkt 1fpkt"];
1946--3059[label="0.0119048;1pkt 1fpkt"];
1946--3071[label="0.0416667;1pkt 1fpkt"];
1946--3270[label="0.142857;1pkt 1fpkt"];
1946--3479[label="0.00571429;1pkt 1fpkt"];
1946--3732[label="0.111111;1pkt 1fpkt"];
1946--3914[label="0.0416667;1pkt 1fpkt"];
1946--4047[label="0.142857;1pkt 1fpkt"];
1946--4414[label="0.166667;1pkt 1fpkt"];
1957--2647[label="0.5;1pkt 1fpkt"];
1957--2811[label="0.8;8pkt 8fpkt"];
1957--2989[label="0.5;3pkt 3fpkt"];
1957--3091[label="1;1pkt 1fpkt"];
1957--3617[label="1;1pkt 1fpkt"];
1957--3860[label="0.5;3pkt 3fpkt"];
1957--4015[label="1;1pkt 1fpkt"];
1957--4206[label="0.5;1pkt 1fpkt"];
1957--4329[label="0.571429;4pkt 4fpkt"];
2018--2135[label="0.232258;72pkt 72fpkt"];
2018--2201[label="0.047619;1pkt 1fpkt"];
2018--2275[label="0.0322581;1pkt 1fpkt"];
2018--2282[label="0.0588235;1pkt 1fpkt"];
2018--2363[label="0.0117647;1pkt 1fpkt"];
2018--2378[label="0.0555556;1pkt 1fpkt"];
2018--2514[label="0.030303;1pkt 1fpkt"];
2018--2547[label="0.0204082;1pkt 1fpkt"];
2018--2647[label="0.5;1pkt 1fpkt"];
2018--2653[label="0.0212766;1pkt 1fpkt"];
2018--2724[label="0.0909091;1pkt 1fpkt"];
2018--2796[label="0.0136986;1pkt 1fpkt"];
2018--2855[label="0.0357143;1pkt 1fpkt"];
2018--2924[label="0.027027;1pkt 1fpkt"];
2018--2956[label="0.0294118;1pkt 1fpkt"];
2018--2994[label="0.0357143;1pkt 1fpkt"];
2018--3005[label="0.0188679;1pkt 1fpkt"];
2018--3020[label="0.0555556;1pkt 1fpkt"];
2018--3041[label="0.0133333;1pkt 1fpkt"];
2018--3071[label="0.0416667;1pkt 1fpkt"];
2018--3186[label="0.0147059;1pkt 1fpkt"];
2018--3239[label="0.0151515;1pkt 1fpkt"];
2018--3270[label="0.142857;1pkt 1fpkt"];
2018--3362[label="0.0625;1pkt 1fpkt"];
2018--3419[label="0.0117647;1pkt 1fpkt"];
2018--3522[label="0.030303;1pkt 1fpkt"];
2018--3668[label="0.0909091;1pkt 1fpkt"];
2018--3723[label="0.0135135;1pkt 1fpkt"];
2018--3838[label="0.0294118;1pkt 1fpkt"];
2018--3864[label="0.037037;1pkt 1fpkt"];
2018--3873[label="0.0192308;1pkt 1fpkt"];
2018--3914[label="0.0416667;1pkt 1fpkt"];
2018--3995[label="0.0147059;1pkt 1fpkt"];
2018--4031[label="0.0151515;1pkt 1fpkt"];
2018--4047[label="0.142857;1pkt 1fpkt"];
2018--4091[label="0.0588235;1pkt 1fpkt"];
2018--4166[label="0.030303;1pkt 1fpkt"];
2018--4206[label="0.5;1pkt 1fpkt"];
2018--4258[label="0.0135135;1pkt 1fpkt"];
2018--4338[label="0.0188679;1pkt 1fpkt"];
2018--4388[label="0.0144928;1pkt 1fpkt"];
2018--4414[label="0.166667;1pkt 1fpkt"];
2225--3330[label="1;1pkt 1fpkt"];
2225--4076[label="1;1pkt 1fpkt"];
2416--3448[label="1;1pkt 1fpkt"];
2416--4133[label="1;1pkt 1fpkt"];
2647--3617[label="1;1pkt 1fpkt"];
2647--4206[label="1;2pkt 2fpkt"];
2724--3668[label="1;11pkt 11fpkt"];
2989--3860[label="1;6pkt 6fpkt"];
2989--4329[label="1;6pkt 6fpkt"];
3270--4047[label="1;7pkt 7fpkt"];
3270--4414[label="1;6pkt 6fpkt"];
3330--4076[label="1;1pkt 1fpkt"];
3448--4133[label="1;1pkt 1fpkt"];
3617--4206[label="1;1pkt 1fpkt"];
3860--4329[label="1;6pkt 6fpkt"];
4047--4414[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="143.28.137.80"/>
      <filter dst_ip="136.47.65.82" dst_port="32794" src_port="53"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
2652[label="215.107.114.98;225pkt 225fpkt", shape=pentagon, color=darkviolet];
3619[label="215.107.114.98;224pkt 224fpkt", shape=invtriangle, color=brown];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.107.114.98:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51578: (0.445434%)&lt;BR/&gt; 42802: (0.445434%)&lt;BR/&gt; 2129: (0.445434%)&lt;BR/&gt; 65362: (0.222717%)&gt;];
}
2652--3619[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter src_ip="215.107.114.98" src_port="80"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
2654[label="160.4.242.98;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3620[label="160.4.242.98;16pkt 16fpkt", shape=invtriangle, color=brown];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.242.98:*, 57.56.246.22:80}[70.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1283: (3.0303%)&lt;BR/&gt; 1279: (3.0303%)&lt;BR/&gt; 1250: (3.0303%)&lt;BR/&gt; 1249: (3.0303%)&gt;];
}
2654--3620[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="57.56.246.22" dst_port="80" src_ip="160.4.242.98"/>
    </slice>
    <from sec="1136091860" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
2657[label="218.134.153.99;97pkt 97fpkt", shape=pentagon, color=darkviolet];
3621[label="218.134.153.99;97pkt 97fpkt", shape=invtriangle, color=brown];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.134.153.99:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4948: (0.515464%)&lt;BR/&gt; 4934: (0.515464%)&lt;BR/&gt; 4926: (0.515464%)&lt;BR/&gt; 4915: (0.515464%)&gt;];
}
2657--3621[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="218.134.153.99"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
2659[label="85.187.27.100;90pkt 90fpkt", shape=pentagon, color=darkviolet];
3623[label="85.187.27.100;90pkt 90fpkt", shape=invtriangle, color=brown];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.187.27.100:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4984: (0.555556%)&lt;BR/&gt; 4889: (0.555556%)&lt;BR/&gt; 4832: (0.555556%)&lt;BR/&gt; 4801: (0.555556%)&gt;];
}
2659--3623[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="85.187.27.100"/>
    </slice>
    <from sec="1136091618" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.43.169.100"/>
    </slice>
    <from sec="1136092305" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.100.237.102"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.14.21.103"/>
    </slice>
    <from sec="1136091667" usec="0"/>
    <to sec="1136091741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
739[label="143.28.148.184;d;9pkt 9fpkt", shape=diamond, color=yellow];
1459[label="61.68.109.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
1467[label="209.164.162.246;s;3pkt 3fpkt", shape=diamond, color=yellow];
2681[label="83.55.71.104;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3245[label="209.164.162.246;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3638[label="83.55.71.104;3pkt 3fpkt", shape=invtriangle, color=brown];
4212[label="83.55.71.104;3pkt 3fpkt", shape=invhouse, color=bisque];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.55.71.104:*, 143.28.148.184:21}[44.4444%]&lt;BR/&gt;{209.164.162.246:*, 143.28.148.184:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1540: (8.33333%)&lt;BR/&gt; 1539: (8.33333%)&lt;BR/&gt; 1538: (8.33333%)&lt;BR/&gt; 58787: (6.25%)&gt;];
}
739--1459[label="1;1pkt 1fpkt"];
739--1467[label="1;3pkt 3fpkt"];
739--2681[label="1;3pkt 3fpkt"];
739--3245[label="1;2pkt 2fpkt"];
739--3638[label="1;3pkt 3fpkt"];
739--4212[label="1;3pkt 3fpkt"];
1467--3245[label="1;2pkt 2fpkt"];
2681--3638[label="1;3pkt 3fpkt"];
2681--4212[label="1;3pkt 3fpkt"];
3638--4212[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.28.148.184" dst_port="21" src_ip="83.55.71.104"/>
      <filter dst_ip="143.28.148.184" dst_port="21" src_ip="209.164.162.246"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
320[label="160.4.238.19;d;459pkt 459fpkt", shape=diamond, color=yellow];
2157[label="61.232.27.2;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2283[label="34.184.178.25;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2409[label="209.56.189.50;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2426[label="108.179.225.54;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2687[label="214.101.212.105;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2718[label="56.41.129.114;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2786[label="63.86.1.132;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2872[label="38.129.89.152;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2901[label="208.21.85.157;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3286[label="61.232.27.2;15pkt 15fpkt", shape=invtriangle, color=brown];
3363[label="34.184.178.25;7pkt 7fpkt", shape=invtriangle, color=brown];
3442[label="209.56.189.50;15pkt 15fpkt", shape=invtriangle, color=brown];
3454[label="108.179.225.54;7pkt 7fpkt", shape=invtriangle, color=brown];
3640[label="214.101.212.105;7pkt 7fpkt", shape=invtriangle, color=brown];
3664[label="56.41.129.114;7pkt 7fpkt", shape=invtriangle, color=brown];
3716[label="63.86.1.132;15pkt 15fpkt", shape=invtriangle, color=brown];
3773[label="38.129.89.152;37pkt 37fpkt", shape=invtriangle, color=brown];
4092[label="34.184.178.25;7pkt 7fpkt", shape=invhouse, color=bisque];
4129[label="209.56.189.50;15pkt 15fpkt", shape=invhouse, color=bisque];
4214[label="214.101.212.105;7pkt 7fpkt", shape=invhouse, color=bisque];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.4.238.19:80}[80.3758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3046%)&lt;BR/&gt; 44130: (0.278164%)&lt;BR/&gt; 44111: (0.278164%)&lt;BR/&gt; 40120: (0.278164%)&lt;BR/&gt; 40107: (0.278164%)&gt;];
}
320--363[label="0.153846;2pkt 2fpkt"];
320--785[label="1;1pkt 1fpkt"];
320--1604[label="0.0123457;1pkt 1fpkt"];
320--1606[label="0.0121951;1pkt 1fpkt"];
320--1728[label="0.0416667;1pkt 1fpkt"];
320--2110[label="0.142857;1pkt 1fpkt"];
320--2133[label="0.0784314;36pkt 36fpkt"];
320--2137[label="0.0784314;36pkt 36fpkt"];
320--2157[label="1;15pkt 15fpkt"];
320--2283[label="1;7pkt 7fpkt"];
320--2346[label="0.0106383;1pkt 1fpkt"];
320--2409[label="0.533333;8pkt 8fpkt"];
320--2426[label="1;6pkt 6fpkt"];
320--2581[label="0.0273973;2pkt 2fpkt"];
320--2631[label="0.0888889;4pkt 4fpkt"];
320--2687[label="1;7pkt 7fpkt"];
320--2718[label="1;8pkt 8fpkt"];
320--2786[label="0.857143;12pkt 12fpkt"];
320--2872[label="0.702703;26pkt 26fpkt"];
320--2899[label="0.037037;1pkt 1fpkt"];
320--2901[label="1;12pkt 12fpkt"];
320--2906[label="0.00217865;1pkt 1fpkt"];
320--3101[label="0.0126582;1pkt 1fpkt"];
320--3237[label="0.0105263;1pkt 1fpkt"];
320--3243[label="0.0144928;1pkt 1fpkt"];
320--3286[label="1;15pkt 15fpkt"];
320--3363[label="1;7pkt 7fpkt"];
320--3442[label="0.533333;8pkt 8fpkt"];
320--3454[label="1;7pkt 7fpkt"];
320--3576[label="0.0277778;2pkt 2fpkt"];
320--3640[label="1;7pkt 7fpkt"];
320--3664[label="1;7pkt 7fpkt"];
320--3716[label="0.866667;13pkt 13fpkt"];
320--3773[label="0.702703;26pkt 26fpkt"];
320--3795[label="0.037037;1pkt 1fpkt"];
320--3800[label="0.00217865;1pkt 1fpkt"];
320--3936[label="0.0125;1pkt 1fpkt"];
320--4030[label="0.0105263;1pkt 1fpkt"];
320--4033[label="0.0147059;1pkt 1fpkt"];
320--4092[label="1;7pkt 7fpkt"];
320--4129[label="0.533333;8pkt 8fpkt"];
320--4186[label="0.0277778;2pkt 2fpkt"];
320--4214[label="1;7pkt 7fpkt"];
320--4361[label="0.0126582;1pkt 1fpkt"];
2157--3286[label="1;15pkt 15fpkt"];
2283--3363[label="1;7pkt 7fpkt"];
2283--4092[label="1;7pkt 7fpkt"];
2409--3442[label="1;15pkt 15fpkt"];
2409--4129[label="1;15pkt 15fpkt"];
2426--3454[label="1;6pkt 6fpkt"];
2687--3640[label="1;7pkt 7fpkt"];
2687--4214[label="1;7pkt 7fpkt"];
2718--3664[label="1;7pkt 7fpkt"];
2786--3716[label="1;14pkt 14fpkt"];
2872--3773[label="1;37pkt 37fpkt"];
3363--4092[label="1;7pkt 7fpkt"];
3442--4129[label="1;15pkt 15fpkt"];
3640--4214[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.238.19" dst_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
2688[label="214.111.7.106;137pkt 137fpkt", shape=pentagon, color=darkviolet];
3641[label="214.111.7.106;136pkt 136fpkt", shape=invtriangle, color=brown];
4215[label="214.111.7.106;137pkt 137fpkt", shape=invhouse, color=bisque];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.111.7.106:51562, *:1026}[56.2044%]&lt;BR/&gt;{214.111.7.106:51562, *:1027}[43.7956%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51562: (50%)&lt;BR/&gt; 1026: (28.0488%)&lt;BR/&gt; 1027: (21.9512%)&gt;];
}
2688--3641[label="1;136pkt 136fpkt"];
2688--4215[label="1;137pkt 137fpkt"];
3641--4215[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="214.111.7.106" src_port="51562"/>
      <filter dst_port="1027" src_ip="214.111.7.106" src_port="51562"/>
    </slice>
    <from sec="1136092470" usec="0"/>
    <to sec="1136092471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.79.100.106"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
2695[label="11.203.204.107;72pkt 72fpkt", shape=pentagon, color=darkviolet];
3644[label="11.203.204.107;72pkt 72fpkt", shape=invtriangle, color=brown];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{11.203.204.107:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4282: (1.38889%)&lt;BR/&gt; 4770: (0.694444%)&lt;BR/&gt; 4571: (0.694444%)&lt;BR/&gt; 4540: (0.694444%)&gt;];
}
2695--3644[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="11.203.204.107"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.105.232.108"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,004,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
2706[label="61.244.206.110;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3655[label="61.244.206.110;35pkt 35fpkt", shape=invtriangle, color=brown];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.244.206.110:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4903: (1.42857%)&lt;BR/&gt; 4527: (1.42857%)&lt;BR/&gt; 4525: (1.42857%)&lt;BR/&gt; 4511: (1.42857%)&gt;];
}
2706--3655[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.244.206.110"/>
    </slice>
    <from sec="1136091668" usec="0"/>
    <to sec="1136092483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
2709[label="136.47.119.111;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3658[label="136.47.119.111;66pkt 66fpkt", shape=invtriangle, color=brown];
4223[label="136.47.119.111;65pkt 65fpkt", shape=invhouse, color=bisque];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.119.111:3128, 33.35.163.229:*}[28.7879%]&lt;BR/&gt;{136.47.119.111:*, 216.6.18.43:80}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.6345%)&lt;BR/&gt; 80: (23.6041%)&lt;BR/&gt; 0: (1.52284%)&lt;BR/&gt; 50762: (0.761421%)&lt;BR/&gt; 50672: (0.761421%)&gt;];
}
2709--3658[label="1;66pkt 66fpkt"];
2709--4223[label="1;65pkt 65fpkt"];
3658--4223[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="33.35.163.229" src_ip="136.47.119.111" src_port="3128"/>
      <filter dst_ip="216.6.18.43" dst_port="80" src_ip="136.47.119.111"/>
    </slice>
    <from sec="1136091642" usec="0"/>
    <to sec="1136092433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.74.36.114"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.176.141.114"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
2723[label="59.89.76.116;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3667[label="59.89.76.116;18pkt 18fpkt", shape=invtriangle, color=brown];
4227[label="59.89.76.116;19pkt 19fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.89.76.116:80, 178.142.26.121:*}[63.1579%]&lt;BR/&gt;{59.89.76.116:80, 178.142.84.132:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29672: (2.67857%)&lt;BR/&gt; 29671: (2.67857%)&lt;BR/&gt; 29649: (2.67857%)&lt;BR/&gt; 29648: (2.67857%)&gt;];
}
2723--3667[label="1;18pkt 18fpkt"];
2723--4227[label="1;19pkt 19fpkt"];
3667--4227[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.26.121" src_ip="59.89.76.116" src_port="80"/>
      <filter dst_ip="178.142.84.132" src_ip="59.89.76.116" src_port="80"/>
    </slice>
    <from sec="1136091647" usec="0"/>
    <to sec="1136092118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
2742[label="166.29.148.118;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3681[label="166.29.148.118;15pkt 15fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.148.118:*, *:53}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.5484%)&lt;BR/&gt; 25: (6.45161%)&lt;BR/&gt; 39624: (3.22581%)&lt;BR/&gt; 39511: (3.22581%)&lt;BR/&gt; 22347: (3.22581%)&gt;];
}
2742--3681[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.29.148.118"/>
    </slice>
    <from sec="1136091902" usec="0"/>
    <to sec="1136092461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
2754[label="166.28.99.123;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3689[label="166.28.99.123;2pkt 2fpkt", shape=invtriangle, color=brown];
4240[label="166.28.99.123;2pkt 2fpkt", shape=invhouse, color=bisque];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.99.123:43747, 214.124.249.167:25}[50%]&lt;BR/&gt;{166.28.99.123:43719, 214.124.250.252:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43747: (25%)&lt;BR/&gt; 43719: (25%)&gt;];
}
2754--3689[label="1;2pkt 2fpkt"];
2754--4240[label="1;2pkt 2fpkt"];
3689--4240[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.124.250.252" dst_port="25" src_ip="166.28.99.123" src_port="43719"/>
      <filter dst_ip="214.124.249.167" dst_port="25" src_ip="166.28.99.123" src_port="43747"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
2755[label="143.28.251.123;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3690[label="143.28.251.123;2pkt 2fpkt", shape=invtriangle, color=brown];
4241[label="143.28.251.123;2pkt 2fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.251.123:57883, 57.73.148.171:80}[50%]&lt;BR/&gt;{143.28.251.123:57882, 57.179.224.220:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57883: (25%)&lt;BR/&gt; 57882: (25%)&gt;];
}
2755--3690[label="1;2pkt 2fpkt"];
2755--4241[label="1;2pkt 2fpkt"];
3690--4241[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="57.179.224.220" dst_port="80" src_ip="143.28.251.123" src_port="57882"/>
      <filter dst_ip="57.73.148.171" dst_port="80" src_ip="143.28.251.123" src_port="57883"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
2756[label="37.2.28.124;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3691[label="37.2.28.124;78pkt 78fpkt", shape=invtriangle, color=brown];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.2.28.124:*, *:139}[67.0886%]&lt;BR/&gt;{37.2.28.124:*, *:445}[30.3797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (33.4395%)&lt;BR/&gt; 445: (15.2866%)&lt;BR/&gt; 3070: (1.91083%)&lt;BR/&gt; 3482: (1.27389%)&lt;BR/&gt; 80: (1.27389%)&gt;];
}
2756--3691[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="37.2.28.124"/>
      <filter dst_port="445" src_ip="37.2.28.124"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
2758[label="209.124.115.124;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3693[label="209.124.115.124;44pkt 44fpkt", shape=invtriangle, color=brown];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.124.115.124:*, 166.28.39.70:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4957: (1.13636%)&lt;BR/&gt; 4956: (1.13636%)&lt;BR/&gt; 4926: (1.13636%)&lt;BR/&gt; 4924: (1.13636%)&gt;];
}
2758--3693[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.39.70" dst_port="80" src_ip="209.124.115.124"/>
    </slice>
    <from sec="1136092443" usec="0"/>
    <to sec="1136092481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
2760[label="166.29.151.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3695[label="166.29.151.125;2pkt 2fpkt", shape=invtriangle, color=brown];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.125:25, 61.96.40.72:3803}[50%]&lt;BR/&gt;{166.29.151.125:25, 80.4.20.137:3065}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3803: (25%)&lt;BR/&gt; 3065: (25%)&gt;];
}
2760--3695[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="80.4.20.137" dst_port="3065" src_ip="166.29.151.125" src_port="25"/>
      <filter dst_ip="61.96.40.72" dst_port="3803" src_ip="166.29.151.125" src_port="25"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
2774[label="166.29.77.129;95pkt 95fpkt", shape=pentagon, color=darkviolet];
3704[label="166.29.77.129;94pkt 94fpkt", shape=invtriangle, color=brown];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.77.129:53, *:*}[88.4211%]&lt;BR/&gt;{166.29.77.129:*, *:53}[27.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (57.9365%)&lt;BR/&gt; 2936: (4.2328%)&lt;BR/&gt; 32768: (2.1164%)&lt;BR/&gt; 2923: (1.5873%)&lt;BR/&gt; 32774: (1.0582%)&gt;];
}
2774--3704[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.77.129" src_port="53"/>
      <filter dst_port="53" src_ip="166.29.77.129"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
2777[label="213.194.42.130;171pkt 171fpkt", shape=pentagon, color=darkviolet];
3707[label="213.194.42.130;171pkt 171fpkt", shape=invtriangle, color=brown];
4249[label="213.194.42.130;171pkt 171fpkt", shape=invhouse, color=bisque];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.194.42.130:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4972: (0.292398%)&lt;BR/&gt; 4905: (0.292398%)&lt;BR/&gt; 4874: (0.292398%)&lt;BR/&gt; 4839: (0.292398%)&gt;];
}
2777--3707[label="1;171pkt 171fpkt"];
2777--4249[label="1;171pkt 171fpkt"];
3707--4249[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.194.42.130"/>
    </slice>
    <from sec="1136091872" usec="0"/>
    <to sec="1136091940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.139.72.130"/>
    </slice>
    <from sec="1136091772" usec="0"/>
    <to sec="1136092331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
2780[label="166.29.157.130;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3710[label="166.29.157.130;20pkt 20fpkt", shape=invtriangle, color=brown];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.157.130:*, 202.27.65.115:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1733: (2.5%)&lt;BR/&gt; 1732: (2.5%)&lt;BR/&gt; 1731: (2.5%)&lt;BR/&gt; 1730: (2.5%)&gt;];
}
2780--3710[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="202.27.65.115" dst_port="80" src_ip="166.29.157.130"/>
    </slice>
    <from sec="1136092329" usec="0"/>
    <to sec="1136092340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
2783[label="215.0.32.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3713[label="215.0.32.131;1pkt 1fpkt", shape=invtriangle, color=brown];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.0.32.131:3583, 193.114.36.168:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3583: (50%)&gt;];
}
2783--3713[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.36.168" dst_port="8080" src_ip="215.0.32.131" src_port="3583"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
2785[label="196.152.35.131;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3715[label="196.152.35.131;18pkt 18fpkt", shape=invtriangle, color=brown];
4252[label="196.152.35.131;18pkt 18fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.152.35.131:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2785--3715[label="1;18pkt 18fpkt"];
2785--4252[label="1;18pkt 18fpkt"];
3715--4252[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="196.152.35.131"/>
    </slice>
    <from sec="1136091975" usec="0"/>
    <to sec="1136092467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
1183[label="166.29.116.132;s;18pkt 18fpkt", shape=diamond, color=yellow];
2788[label="166.29.116.132;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3717[label="166.29.116.132;24pkt 24fpkt", shape=invtriangle, color=brown];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.116.132:*, 80.4.132.95:80}[41.6667%]&lt;BR/&gt;{166.29.116.132:*, 216.146.85.21:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33561: (2.30769%)&lt;BR/&gt; 33528: (2.30769%)&lt;BR/&gt; 33348: (2.30769%)&lt;BR/&gt; 33331: (2.30769%)&gt;];
}
1183--2788[label="0.944444;17pkt 17fpkt"];
1183--3717[label="1;18pkt 18fpkt"];
2788--3717[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="80.4.132.95" dst_port="80" src_ip="166.29.116.132"/>
      <filter dst_ip="216.146.85.21" dst_port="80" src_ip="166.29.116.132"/>
    </slice>
    <from sec="1136091669" usec="0"/>
    <to sec="1136092423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
2795[label="192.99.205.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3722[label="192.99.205.134;2pkt 2fpkt", shape=invtriangle, color=brown];
4257[label="192.99.205.134;2pkt 2fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.99.205.134:80, 192.242.57.185:4824}[50%]&lt;BR/&gt;{192.99.205.134:80, 192.242.57.185:4825}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4824: (30%)&lt;BR/&gt; 4825: (20%)&gt;];
}
2795--3722[label="1;1pkt 1fpkt"];
2795--4257[label="1;1pkt 1fpkt"];
3722--4257[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.242.57.185" dst_port="4825" src_ip="192.99.205.134" src_port="80"/>
      <filter dst_ip="192.242.57.185" dst_port="4824" src_ip="192.99.205.134" src_port="80"/>
    </slice>
    <from sec="1136092463" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
2797[label="160.128.115.135;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3724[label="160.128.115.135;31pkt 31fpkt", shape=invtriangle, color=brown];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.128.115.135:*, 57.38.108.115:80}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7742%)&lt;BR/&gt; 143: (3.22581%)&lt;BR/&gt; 59828: (1.6129%)&lt;BR/&gt; 59827: (1.6129%)&lt;BR/&gt; 59826: (1.6129%)&gt;];
}
2797--3724[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="57.38.108.115" dst_port="80" src_ip="160.128.115.135"/>
    </slice>
    <from sec="1136091896" usec="0"/>
    <to sec="1136092050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
2809[label="58.188.0.137;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3731[label="58.188.0.137;8pkt 8fpkt", shape=invtriangle, color=brown];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.188.0.137:80, 160.4.175.40:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1193: (5.88235%)&lt;BR/&gt; 1136: (5.88235%)&lt;BR/&gt; 1135: (5.88235%)&lt;BR/&gt; 1134: (5.88235%)&gt;];
}
2809--3731[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.175.40" src_ip="58.188.0.137" src_port="80"/>
    </slice>
    <from sec="1136092109" usec="0"/>
    <to sec="1136092462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
2816[label="61.232.208.137;172pkt 172fpkt", shape=pentagon, color=darkviolet];
3735[label="61.232.208.137;173pkt 173fpkt", shape=invtriangle, color=brown];
4264[label="61.232.208.137;172pkt 172fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.232.208.137:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2816--3735[label="1;172pkt 172fpkt"];
2816--4264[label="1;172pkt 172fpkt"];
3735--4264[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.232.208.137" src_port="1029"/>
    </slice>
    <from sec="1136091998" usec="0"/>
    <to sec="1136092029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
2821[label="215.103.4.140;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3737[label="215.103.4.140;56pkt 56fpkt", shape=invtriangle, color=brown];
4266[label="215.103.4.140;55pkt 55fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.103.4.140:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4374: (0.898204%)&lt;BR/&gt; 4289: (0.898204%)&lt;BR/&gt; 4279: (0.898204%)&lt;BR/&gt; 4275: (0.898204%)&gt;];
}
2821--3737[label="1;56pkt 56fpkt"];
2821--4266[label="1;55pkt 55fpkt"];
3737--4266[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="215.103.4.140"/>
    </slice>
    <from sec="1136091612" usec="0"/>
    <to sec="1136092445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
2829[label="136.47.172.141;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3741[label="136.47.172.141;11pkt 11fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.141:17453, *:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17453: (40.4762%)&lt;BR/&gt; 5060: (9.52381%)&lt;BR/&gt; 47311: (4.7619%)&lt;BR/&gt; 30218: (4.7619%)&lt;BR/&gt; 28722: (4.7619%)&gt;];
}
2829--3741[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.172.141" src_port="17453"/>
    </slice>
    <from sec="1136091638" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
2830[label="215.32.211.141;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3742[label="215.32.211.141;2pkt 2fpkt", shape=invtriangle, color=brown];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.32.211.141:62858, 160.4.238.73:25}[50%]&lt;BR/&gt;{215.32.211.141:64550, 160.4.238.73:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64550: (25%)&lt;BR/&gt; 62858: (25%)&gt;];
}
2830--3742[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.238.73" dst_port="25" src_ip="215.32.211.141" src_port="64550"/>
      <filter dst_ip="160.4.238.73" dst_port="25" src_ip="215.32.211.141" src_port="62858"/>
    </slice>
    <from sec="1136092363" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
2834[label="166.29.151.143;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3745[label="166.29.151.143;46pkt 46fpkt", shape=invtriangle, color=brown];
4271[label="166.29.151.143;47pkt 47fpkt", shape=invhouse, color=bisque];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.29.151.143:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2834--3745[label="1;46pkt 46fpkt"];
2834--4271[label="1;46pkt 46fpkt"];
3745--4271[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="166.29.151.143"/>
    </slice>
    <from sec="1136091605" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
2838[label="213.247.97.144;273pkt 273fpkt", shape=pentagon, color=darkviolet];
3749[label="213.247.97.144;272pkt 272fpkt", shape=invtriangle, color=brown];
4273[label="213.247.97.144;273pkt 273fpkt", shape=invhouse, color=bisque];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.247.97.144:50716, *:1026}[50.9158%]&lt;BR/&gt;{213.247.97.144:50716, *:1027}[49.0842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50716: (50%)&lt;BR/&gt; 1026: (25.4279%)&lt;BR/&gt; 1027: (24.5721%)&gt;];
}
2838--3749[label="1;272pkt 272fpkt"];
2838--4273[label="1;273pkt 273fpkt"];
3749--4273[label="1;272pkt 272fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="213.247.97.144" src_port="50716"/>
      <filter dst_port="1027" src_ip="213.247.97.144" src_port="50716"/>
    </slice>
    <from sec="1136092453" usec="0"/>
    <to sec="1136092454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.71.101.145"/>
    </slice>
    <from sec="1136091843" usec="0"/>
    <to sec="1136091868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
2843[label="143.28.132.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3753[label="143.28.132.145;3pkt 3fpkt", shape=invtriangle, color=brown];
4275[label="143.28.132.145;4pkt 4fpkt", shape=invhouse, color=bisque];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.132.145:0, 50.136.220.7:0}[25%]&lt;BR/&gt;{143.28.132.145:0, 58.120.18.98:0}[25%]&lt;BR/&gt;{143.28.132.145:0, 58.120.18.99:0}[25%]&lt;BR/&gt;{143.28.132.145:0, 50.136.221.140:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2843--3753[label="1;3pkt 3fpkt"];
2843--4275[label="1;3pkt 3fpkt"];
3753--4275[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="50.136.221.140" src_ip="143.28.132.145"/>
      <filter dst_ip="58.120.18.99" src_ip="143.28.132.145"/>
      <filter dst_ip="58.120.18.98" src_ip="143.28.132.145"/>
      <filter dst_ip="50.136.220.7" src_ip="143.28.132.145"/>
    </slice>
    <from sec="1136091618" usec="0"/>
    <to sec="1136092007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
2847[label="166.28.197.146;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3756[label="166.28.197.146;28pkt 28fpkt", shape=invtriangle, color=brown];
4277[label="166.28.197.146;28pkt 28fpkt", shape=invhouse, color=bisque];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.197.146:*, 216.6.25.183:80}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4484: (1.78571%)&lt;BR/&gt; 4483: (1.78571%)&lt;BR/&gt; 4482: (1.78571%)&lt;BR/&gt; 4477: (1.78571%)&gt;];
}
2847--3756[label="1;28pkt 28fpkt"];
2847--4277[label="1;28pkt 28fpkt"];
3756--4277[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="216.6.25.183" dst_port="80" src_ip="166.28.197.146"/>
    </slice>
    <from sec="1136091968" usec="0"/>
    <to sec="1136092478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.184.207.146"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
564[label="160.178.211.111;d;29pkt 29fpkt", shape=diamond, color=yellow];
1080[label="217.180.15.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
1126[label="80.179.115.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
1968[label="80.179.115.89;s;1pkt 1fpkt", shape=hexagon, color=black];
2567[label="217.180.20.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2849[label="208.94.33.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3758[label="208.94.33.147;2pkt 2fpkt", shape=invtriangle, color=brown];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.178.211.111:*}[34.4828%]&lt;BR/&gt;{*:0, 160.178.211.111:0}[24.1379%]&lt;BR/&gt;{*:443, 160.178.211.111:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (19.4444%)&lt;BR/&gt; 443: (15.2778%)&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 64511: (6.94444%)&lt;BR/&gt; 8000: (6.94444%)&gt;];
}
564--1080[label="1;1pkt 1fpkt"];
564--1126[label="1;1pkt 1fpkt"];
564--1968[label="1;1pkt 1fpkt"];
564--2567[label="1;1pkt 1fpkt"];
564--2849[label="1;1pkt 1fpkt"];
564--3758[label="1;2pkt 2fpkt"];
1126--1968[label="1;1pkt 1fpkt"];
2849--3758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.178.211.111" src_port="80"/>
      <filter dst_ip="160.178.211.111" src_port="443"/>
      <filter dst_ip="160.178.211.111"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
2852[label="85.73.122.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3760[label="85.73.122.147;1pkt 1fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.73.122.147:3208, 160.4.238.73:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3208: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2852--3760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.238.73" dst_port="25" src_ip="85.73.122.147" src_port="3208"/>
    </slice>
    <from sec="1136092011" usec="0"/>
    <to sec="1136092258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
2853[label="143.28.141.147;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3761[label="143.28.141.147;14pkt 14fpkt", shape=invtriangle, color=brown];
4279[label="143.28.141.147;14pkt 14fpkt", shape=invhouse, color=bisque];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.141.147:80, 210.94.195.64:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3488%)&lt;BR/&gt; 53: (4.65116%)&lt;BR/&gt; 60555: (3.48837%)&lt;BR/&gt; 50904: (3.48837%)&lt;BR/&gt; 50830: (3.48837%)&gt;];
}
2853--3761[label="1;14pkt 14fpkt"];
2853--4279[label="1;14pkt 14fpkt"];
3761--4279[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="210.94.195.64" src_ip="143.28.141.147" src_port="80"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
2862[label="160.17.251.149;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3766[label="160.17.251.149;14pkt 14fpkt", shape=invtriangle, color=brown];
4283[label="160.17.251.149;13pkt 13fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.17.251.149:42, 210.213.77.157:*}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (33.75%)&lt;BR/&gt; 445: (7.5%)&lt;BR/&gt; 80: (7.5%)&lt;BR/&gt; 2962: (3.75%)&lt;BR/&gt; 2895: (3.75%)&gt;];
}
2862--3766[label="1;13pkt 13fpkt"];
2862--4283[label="1;13pkt 13fpkt"];
3766--4283[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="210.213.77.157" src_ip="160.17.251.149" src_port="42"/>
    </slice>
    <from sec="1136092331" usec="0"/>
    <to sec="1136092481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
520[label="136.47.35.68;d;57pkt 57fpkt", shape=diamond, color=yellow];
2194[label="57.132.78.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2631[label="57.74.84.94;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2865[label="219.107.50.150;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3115[label="60.114.55.208;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3312[label="57.132.78.8;5pkt 5fpkt", shape=invtriangle, color=brown];
3768[label="219.107.50.150;3pkt 3fpkt", shape=invtriangle, color=brown];
4285[label="219.107.50.150;3pkt 3fpkt", shape=invhouse, color=bisque];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.114.55.208:80, 136.47.35.68:*}[22.5806%]&lt;BR/&gt;{57.74.84.94:80, 136.47.172.169:*}[20.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2085: (1.34228%)&lt;BR/&gt; 1957: (1.34228%)&lt;BR/&gt; 1961: (1.00671%)&lt;BR/&gt; 1960: (1.00671%)&gt;];
}
520--2194[label="0.4;2pkt 2fpkt"];
520--2631[label="0.133333;6pkt 6fpkt"];
520--2865[label="1;2pkt 2fpkt"];
520--3115[label="0.137931;4pkt 4fpkt"];
520--3312[label="0.4;2pkt 2fpkt"];
520--3768[label="1;3pkt 3fpkt"];
520--4285[label="1;3pkt 3fpkt"];
2194--3312[label="1;5pkt 5fpkt"];
2865--3768[label="1;2pkt 2fpkt"];
2865--4285[label="1;2pkt 2fpkt"];
3768--4285[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.172.169" src_ip="57.74.84.94" src_port="80"/>
      <filter dst_ip="136.47.35.68" src_ip="60.114.55.208" src_port="80"/>
    </slice>
    <from sec="1136091613" usec="0"/>
    <to sec="1136092475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
2870[label="136.47.172.151;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3771[label="136.47.172.151;27pkt 27fpkt", shape=invtriangle, color=brown];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.151:*, 80.133.184.26:80}[28.5714%]&lt;BR/&gt;{136.47.172.151:*, 209.98.67.168:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.6364%)&lt;BR/&gt; 8000: (3.63636%)&lt;BR/&gt; 4000: (3.63636%)&lt;BR/&gt; 2840: (1.81818%)&lt;BR/&gt; 2839: (1.81818%)&gt;];
}
2870--3771[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="80.133.184.26" dst_port="80" src_ip="136.47.172.151"/>
      <filter dst_ip="209.98.67.168" dst_port="80" src_ip="136.47.172.151"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
2871[label="193.99.29.152;88pkt 88fpkt", shape=pentagon, color=darkviolet];
3772[label="193.99.29.152;89pkt 89fpkt", shape=invtriangle, color=brown];
4286[label="193.99.29.152;88pkt 88fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.99.29.152:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4852: (1.13208%)&lt;BR/&gt; 3419: (1.13208%)&lt;BR/&gt; 3215: (1.13208%)&lt;BR/&gt; 4998: (0.566038%)&gt;];
}
2871--3772[label="1;88pkt 88fpkt"];
2871--4286[label="1;88pkt 88fpkt"];
3772--4286[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="193.99.29.152"/>
    </slice>
    <from sec="1136091615" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,004,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
2874[label="215.2.112.152;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3775[label="215.2.112.152;37pkt 37fpkt", shape=invtriangle, color=brown];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.2.112.152:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4894: (1.35135%)&lt;BR/&gt; 4868: (1.35135%)&lt;BR/&gt; 4864: (1.35135%)&lt;BR/&gt; 4736: (1.35135%)&gt;];
}
2874--3775[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="215.2.112.152"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.99.80.153"/>
    </slice>
    <from sec="1136091841" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
1369[label="217.142.213.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
1370[label="143.28.164.69;s;15pkt 15fpkt", shape=diamond, color=yellow];
1615[label="198.131.94.180;d;77pkt 77fpkt", shape=diamond, color=yellow];
2489[label="143.28.237.67;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2881[label="143.28.163.153;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3321[label="143.28.168.9;22pkt 22fpkt", shape=invtriangle, color=brown];
3502[label="143.28.237.67;58pkt 58fpkt", shape=invtriangle, color=brown];
3780[label="143.28.163.153;6pkt 6fpkt", shape=invtriangle, color=brown];
4158[label="143.28.237.67;58pkt 58fpkt", shape=invhouse, color=bisque];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 198.131.94.180:*}[53.4247%]&lt;BR/&gt;{143.28.237.67:80, 60.22.164.168:*}[26.0274%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5017%)&lt;BR/&gt; 0: (0.996678%)&lt;BR/&gt; 34026: (0.664452%)&lt;BR/&gt; 33491: (0.664452%)&lt;BR/&gt; 61049: (0.498339%)&gt;];
}
1369--1370[label="1;1pkt 1fpkt"];
1370--1615[label="0.666667;10pkt 10fpkt"];
1615--2489[label="0.0344828;2pkt 2fpkt"];
1615--2881[label="0.833333;5pkt 5fpkt"];
1615--3321[label="0.681818;15pkt 15fpkt"];
1615--3502[label="0.0344828;2pkt 2fpkt"];
1615--3780[label="0.833333;5pkt 5fpkt"];
1615--4158[label="0.0344828;2pkt 2fpkt"];
2489--3502[label="1;58pkt 58fpkt"];
2489--4158[label="1;58pkt 58fpkt"];
2881--3780[label="1;6pkt 6fpkt"];
3502--4158[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="198.131.94.180" src_port="80"/>
      <filter dst_ip="60.22.164.168" src_ip="143.28.237.67" src_port="80"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
2882[label="80.6.65.154;192pkt 192fpkt", shape=pentagon, color=darkviolet];
3781[label="80.6.65.154;192pkt 192fpkt", shape=invtriangle, color=brown];
4288[label="80.6.65.154;191pkt 191fpkt", shape=invhouse, color=bisque];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.6.65.154:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2882--3781[label="1;192pkt 192fpkt"];
2882--4288[label="1;191pkt 191fpkt"];
3781--4288[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="80.6.65.154" src_port="1026"/>
    </slice>
    <from sec="1136092091" usec="0"/>
    <to sec="1136092123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
2886[label="214.131.220.154;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3784[label="214.131.220.154;99pkt 99fpkt", shape=invtriangle, color=brown];
4291[label="214.131.220.154;99pkt 99fpkt", shape=invhouse, color=bisque];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.131.220.154:33370, *:1027}[51%]&lt;BR/&gt;{214.131.220.154:33370, *:1026}[49%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33370: (50%)&lt;BR/&gt; 1027: (25.6711%)&lt;BR/&gt; 1026: (24.3289%)&gt;];
}
2886--3784[label="1;99pkt 99fpkt"];
2886--4291[label="1;99pkt 99fpkt"];
3784--4291[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="214.131.220.154" src_port="33370"/>
      <filter dst_port="1026" src_ip="214.131.220.154" src_port="33370"/>
    </slice>
    <from sec="1136091858" usec="0"/>
    <to sec="1136091859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
1117[label="202.2.139.5;d;5pkt 5fpkt", shape=diamond, color=yellow];
1349[label="143.28.153.230;s;2pkt 2fpkt", shape=diamond, color=yellow];
2890[label="143.28.154.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3788[label="143.28.154.155;2pkt 2fpkt", shape=invtriangle, color=brown];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 202.2.139.5:6667}[42.8571%]&lt;BR/&gt;{143.28.153.129:*, 202.2.139.5:*}[42.8571%]&lt;BR/&gt;{*:*, *:5050}[28.5714%]&lt;BR/&gt;{143.28.154.155:*, *:*}[28.5714%]&lt;BR/&gt;{143.28.153.230:*, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (27.2727%)&lt;BR/&gt; 5050: (13.6364%)&lt;BR/&gt; 1035: (13.6364%)&lt;BR/&gt; 1136: (9.09091%)&lt;BR/&gt; 1036: (9.09091%)&gt;];
}
1117--1349[label="0.5;1pkt 1fpkt"];
1117--2890[label="0.5;1pkt 1fpkt"];
1117--3788[label="0.5;1pkt 1fpkt"];
2890--3788[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="143.28.153.230"/>
      <filter src_ip="143.28.154.155"/>
      <filter dst_port="5050"/>
      <filter dst_ip="202.2.139.5" src_ip="143.28.153.129"/>
      <filter dst_ip="202.2.139.5" dst_port="6667"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
2894[label="50.57.228.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3791[label="50.57.228.155;1pkt 1fpkt", shape=invtriangle, color=brown];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.57.228.155:80, 136.47.174.89:2522}[50%]&lt;BR/&gt;{50.57.228.155:80, 160.4.85.96:3511}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2522: (33.3333%)&lt;BR/&gt; 3511: (16.6667%)&gt;];
}
2894--3791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.85.96" dst_port="3511" src_ip="50.57.228.155" src_port="80"/>
      <filter dst_ip="136.47.174.89" dst_port="2522" src_ip="50.57.228.155" src_port="80"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.140.98.156"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
2900[label="210.213.77.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3796[label="210.213.77.157;1pkt 1fpkt", shape=invtriangle, color=brown];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.213.77.157:3996, 160.17.251.144:42}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3996: (50%)&lt;BR/&gt; 42: (50%)&gt;];
}
2900--3796[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.17.251.144" dst_port="42" src_ip="210.213.77.157" src_port="3996"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
2902[label="90.4.88.157;212pkt 212fpkt", shape=pentagon, color=darkviolet];
3797[label="90.4.88.157;212pkt 212fpkt", shape=invtriangle, color=brown];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.4.88.157:0, *:1026}[51.8868%]&lt;BR/&gt;{90.4.88.157:0, *:1025}[48.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1026: (25.9434%)&lt;BR/&gt; 1025: (24.0566%)&gt;];
}
2902--3797[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="90.4.88.157"/>
      <filter dst_port="1025" src_ip="90.4.88.157"/>
    </slice>
    <from sec="1136091662" usec="0"/>
    <to sec="1136091663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
2909[label="108.226.66.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3803[label="108.226.66.159;1pkt 1fpkt", shape=invtriangle, color=brown];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.226.66.159:4700, 160.17.88.91:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4700: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
2909--3803[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.17.88.91" dst_port="3127" src_ip="108.226.66.159" src_port="4700"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136091662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
2911[label="134.86.239.159;145pkt 145fpkt", shape=pentagon, color=darkviolet];
3805[label="134.86.239.159;145pkt 145fpkt", shape=invtriangle, color=brown];
4301[label="134.86.239.159;145pkt 145fpkt", shape=invhouse, color=bisque];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.86.239.159:0, *:1026}[51.7241%]&lt;BR/&gt;{134.86.239.159:0, *:1025}[48.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1026: (25.8621%)&lt;BR/&gt; 1025: (24.1379%)&gt;];
}
2911--3805[label="1;145pkt 145fpkt"];
2911--4301[label="1;145pkt 145fpkt"];
3805--4301[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="134.86.239.159"/>
      <filter dst_port="1025" src_ip="134.86.239.159"/>
    </slice>
    <from sec="1136091664" usec="0"/>
    <to sec="1136091665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.187.41.161"/>
    </slice>
    <from sec="1136092294" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
2919[label="166.28.107.161;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3811[label="166.28.107.161;3pkt 3fpkt", shape=invtriangle, color=brown];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.107.161:110, 58.238.231.14:3854}[33.3333%]&lt;BR/&gt;{166.28.107.161:43957, 58.238.231.14:113}[33.3333%]&lt;BR/&gt;{166.28.107.161:43961, 58.238.231.14:113}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (33.3333%)&lt;BR/&gt; 43961: (16.6667%)&lt;BR/&gt; 43957: (16.6667%)&lt;BR/&gt; 3854: (16.6667%)&lt;BR/&gt; 110: (16.6667%)&gt;];
}
2919--3811[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="58.238.231.14" dst_port="113" src_ip="166.28.107.161" src_port="43961"/>
      <filter dst_ip="58.238.231.14" dst_port="113" src_ip="166.28.107.161" src_port="43957"/>
      <filter dst_ip="58.238.231.14" dst_port="3854" src_ip="166.28.107.161" src_port="110"/>
    </slice>
    <from sec="1136091635" usec="0"/>
    <to sec="1136092212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
2921[label="214.138.172.161;199pkt 199fpkt", shape=pentagon, color=darkviolet];
3813[label="214.138.172.161;199pkt 199fpkt", shape=invtriangle, color=brown];
4304[label="214.138.172.161;199pkt 199fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.138.172.161:33192, *:1027}[62.8141%]&lt;BR/&gt;{214.138.172.161:33192, *:1026}[37.1859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33192: (50%)&lt;BR/&gt; 1027: (31.407%)&lt;BR/&gt; 1026: (18.593%)&gt;];
}
2921--3813[label="1;199pkt 199fpkt"];
2921--4304[label="1;199pkt 199fpkt"];
3813--4304[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="214.138.172.161" src_port="33192"/>
      <filter dst_port="1026" src_ip="214.138.172.161" src_port="33192"/>
    </slice>
    <from sec="1136092196" usec="0"/>
    <to sec="1136092197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
2927[label="208.69.104.163;168pkt 168fpkt", shape=pentagon, color=darkviolet];
3817[label="208.69.104.163;168pkt 168fpkt", shape=invtriangle, color=brown];
4308[label="208.69.104.163;168pkt 168fpkt", shape=invhouse, color=bisque];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.69.104.163:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3782: (0.297619%)&lt;BR/&gt; 3778: (0.297619%)&lt;BR/&gt; 3774: (0.297619%)&lt;BR/&gt; 3764: (0.297619%)&gt;];
}
2927--3817[label="1;168pkt 168fpkt"];
2927--4308[label="1;168pkt 168fpkt"];
3817--4308[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.69.104.163"/>
    </slice>
    <from sec="1136092168" usec="0"/>
    <to sec="1136092195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
2930[label="80.152.201.163;143pkt 143fpkt", shape=pentagon, color=darkviolet];
3819[label="80.152.201.163;143pkt 143fpkt", shape=invtriangle, color=brown];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.152.201.163:0, *:0}[97.2028%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2028%)&lt;BR/&gt; 80: (1.04895%)&lt;BR/&gt; 51193: (0.34965%)&lt;BR/&gt; 50970: (0.34965%)&lt;BR/&gt; 45277: (0.34965%)&gt;];
}
2930--3819[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="80.152.201.163"/>
    </slice>
    <from sec="1136091617" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.690388,1.66942,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
1113[label="83.35.4.164;s;894pkt 894fpkt", shape=diamond, color=yellow];
3821[label="83.35.4.164;966pkt 966fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.35.4.164:1098, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1098: (50%)&gt;];
}
1113--3821[label="0.994407;889pkt 889fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.35.4.164" src_port="1098"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
2936[label="193.114.38.167;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3824[label="193.114.38.167;28pkt 28fpkt", shape=invtriangle, color=brown];
4309[label="193.114.38.167;28pkt 28fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.38.167:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2936--3824[label="1;28pkt 28fpkt"];
2936--4309[label="1;28pkt 28fpkt"];
3824--4309[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="193.114.38.167"/>
    </slice>
    <from sec="1136091636" usec="0"/>
    <to sec="1136092463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
2938[label="166.28.168.167;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3826[label="166.28.168.167;19pkt 19fpkt", shape=invtriangle, color=brown];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.168.167:80, 198.197.41.105:*}[45%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60022: (2.5641%)&lt;BR/&gt; 58439: (2.5641%)&lt;BR/&gt; 56900: (2.5641%)&lt;BR/&gt; 56589: (2.5641%)&gt;];
}
2938--3826[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="198.197.41.105" src_ip="166.28.168.167" src_port="80"/>
    </slice>
    <from sec="1136091910" usec="0"/>
    <to sec="1136092407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
2949[label="215.33.75.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3833[label="215.33.75.169;2pkt 2fpkt", shape=invtriangle, color=brown];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.33.75.169:1544, 160.4.42.240:1434}[50%]&lt;BR/&gt;{215.33.75.169:1544, 160.176.217.251:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1544: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2949--3833[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.176.217.251" dst_port="1434" src_ip="215.33.75.169" src_port="1544"/>
      <filter dst_ip="160.4.42.240" dst_port="1434" src_ip="215.33.75.169" src_port="1544"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
2950[label="208.72.156.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3834[label="208.72.156.169;2pkt 2fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.72.156.169:1184, 160.17.218.11:1434}[50%]&lt;BR/&gt;{208.72.156.169:1184, 136.47.7.179:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1184: (50%)&gt;];
}
2950--3834[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.7.179" dst_port="1434" src_ip="208.72.156.169" src_port="1184"/>
      <filter dst_ip="160.17.218.11" dst_port="1434" src_ip="208.72.156.169" src_port="1184"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.12.173.169"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,004,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
2954[label="57.83.5.170;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3836[label="57.83.5.170;46pkt 46fpkt", shape=invtriangle, color=brown];
4315[label="57.83.5.170;45pkt 45fpkt", shape=invhouse, color=bisque];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.83.5.170:*, *:445}[67.3913%]&lt;BR/&gt;{57.83.5.170:*, *:1433}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.5766%)&lt;BR/&gt; 1433: (16.4234%)&lt;BR/&gt; 4501: (1.09489%)&lt;BR/&gt; 4499: (1.09489%)&lt;BR/&gt; 4498: (1.09489%)&gt;];
}
2954--3836[label="1;46pkt 46fpkt"];
2954--4315[label="1;45pkt 45fpkt"];
3836--4315[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="57.83.5.170"/>
      <filter dst_port="1433" src_ip="57.83.5.170"/>
    </slice>
    <from sec="1136091629" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.48.97.172"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.147.2.175"/>
    </slice>
    <from sec="1136091609" usec="0"/>
    <to sec="1136092433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
2980[label="170.31.58.175;208pkt 208fpkt", shape=pentagon, color=darkviolet];
3853[label="170.31.58.175;208pkt 208fpkt", shape=invtriangle, color=brown];
4324[label="170.31.58.175;208pkt 208fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.31.58.175:63725, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63725: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2980--3853[label="1;208pkt 208fpkt"];
2980--4324[label="1;208pkt 208fpkt"];
3853--4324[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="170.31.58.175" src_port="63725"/>
    </slice>
    <from sec="1136092210" usec="0"/>
    <to sec="1136092245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
783[label="217.205.163.195;d;2pkt 2fpkt", shape=diamond, color=yellow];
820[label="124.210.220.248;d;777pkt 777fpkt", shape=diamond, color=yellow];
1097[label="193.114.37.134;s;2pkt 2fpkt", shape=diamond, color=yellow];
1254[label="193.114.40.130;s;4pkt 4fpkt", shape=diamond, color=yellow];
1388[label="193.114.35.97;s;27pkt 27fpkt", shape=diamond, color=yellow];
1987[label="193.114.35.97;s;23pkt 23fpkt", shape=hexagon, color=black];
2344[label="193.114.35.37;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2517[label="193.114.37.73;61pkt 61fpkt", shape=pentagon, color=darkviolet];
2646[label="193.114.35.97;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2713[label="193.114.35.113;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2917[label="193.114.39.161;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2982[label="193.114.40.176;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2990[label="193.114.39.178;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3048[label="193.114.40.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3171[label="193.114.37.226;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3266[label="193.114.37.253;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3405[label="193.114.35.37;25pkt 25fpkt", shape=invtriangle, color=brown];
3524[label="193.114.37.73;61pkt 61fpkt", shape=invtriangle, color=brown];
3661[label="193.114.35.113;38pkt 38fpkt", shape=invtriangle, color=brown];
3809[label="193.114.39.161;28pkt 28fpkt", shape=invtriangle, color=brown];
3855[label="193.114.40.176;9pkt 9fpkt", shape=invtriangle, color=brown];
3861[label="193.114.39.178;11pkt 11fpkt", shape=invtriangle, color=brown];
3902[label="193.114.40.193;5pkt 5fpkt", shape=invtriangle, color=brown];
4224[label="193.114.35.113;38pkt 38fpkt", shape=invhouse, color=bisque];
4302[label="193.114.39.161;29pkt 29fpkt", shape=invhouse, color=bisque];
4326[label="193.114.40.176;9pkt 9fpkt", shape=invhouse, color=bisque];
4330[label="193.114.39.178;12pkt 12fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:135, 124.210.220.248:*}[69.8302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (27.259%)&lt;BR/&gt; 0: (11.9729%)&lt;BR/&gt; 25: (3.61446%)&lt;BR/&gt; 1025: (2.71084%)&lt;BR/&gt; 53: (2.44729%)&gt;];
}
783--1097[label="0.5;1pkt 1fpkt"];
783--1254[label="0.5;1pkt 1fpkt"];
820--840[label="0.00589971;2pkt 2fpkt"];
820--858[label="0.00200803;1pkt 1fpkt"];
820--975[label="0.001287;1pkt 1fpkt"];
820--990[label="0.00719424;1pkt 1fpkt"];
820--1016[label="0.00666667;2pkt 2fpkt"];
820--1097[label="0.5;1pkt 1fpkt"];
820--1254[label="0.25;1pkt 1fpkt"];
820--1358[label="0.0052356;1pkt 1fpkt"];
820--1378[label="0.0166667;1pkt 1fpkt"];
820--1388[label="0.037037;1pkt 1fpkt"];
820--1719[label="0.002574;2pkt 2fpkt"];
820--1721[label="0.001287;1pkt 1fpkt"];
820--1735[label="0.002574;2pkt 2fpkt"];
820--1766[label="0.00775194;2pkt 2fpkt"];
820--1837[label="0.002574;2pkt 2fpkt"];
820--1842[label="0.002574;2pkt 2fpkt"];
820--1860[label="0.001287;1pkt 1fpkt"];
820--1878[label="0.00854701;1pkt 1fpkt"];
820--1897[label="0.011236;1pkt 1fpkt"];
820--1954[label="0.00133869;1pkt 1fpkt"];
820--1961[label="0.00362319;1pkt 1fpkt"];
820--1987[label="0.0434783;1pkt 1fpkt"];
820--2028[label="0.00826446;1pkt 1fpkt"];
820--2067[label="0.0052356;1pkt 1fpkt"];
820--2068[label="0.00200803;1pkt 1fpkt"];
820--2140[label="0.0588235;1pkt 1fpkt"];
820--2245[label="0.011236;1pkt 1fpkt"];
820--2279[label="0.002574;2pkt 2fpkt"];
820--2287[label="0.00526316;1pkt 1fpkt"];
820--2295[label="0.0153846;1pkt 1fpkt"];
820--2344[label="0.0416667;1pkt 1fpkt"];
820--2491[label="0.001287;1pkt 1fpkt"];
820--2503[label="0.002574;2pkt 2fpkt"];
820--2504[label="0.001287;1pkt 1fpkt"];
820--2509[label="0.0227273;1pkt 1fpkt"];
820--2517[label="0.0163934;1pkt 1fpkt"];
820--2560[label="0.002574;2pkt 2fpkt"];
820--2569[label="0.00900901;2pkt 2fpkt"];
820--2590[label="0.002574;2pkt 2fpkt"];
820--2601[label="0.002574;2pkt 2fpkt"];
820--2627[label="0.001287;1pkt 1fpkt"];
820--2646[label="0.037037;1pkt 1fpkt"];
820--2701[label="0.00613497;1pkt 1fpkt"];
820--2713[label="0.0263158;1pkt 1fpkt"];
820--2822[label="0.028169;2pkt 2fpkt"];
820--2917[label="0.0344828;1pkt 1fpkt"];
820--2926[label="0.0106952;2pkt 2fpkt"];
820--2941[label="0.002574;2pkt 2fpkt"];
820--2947[label="0.037037;2pkt 2fpkt"];
820--2973[label="0.002574;2pkt 2fpkt"];
820--2982[label="0.111111;1pkt 1fpkt"];
820--2990[label="0.0909091;1pkt 1fpkt"];
820--3021[label="0.001287;1pkt 1fpkt"];
820--3048[label="0.166667;1pkt 1fpkt"];
820--3114[label="0.002574;2pkt 2fpkt"];
820--3171[label="0.0833333;1pkt 1fpkt"];
820--3266[label="0.0909091;1pkt 1fpkt"];
820--3275[label="0.0555556;1pkt 1fpkt"];
820--3359[label="0.002574;2pkt 2fpkt"];
820--3365[label="0.00526316;1pkt 1fpkt"];
820--3370[label="0.0151515;1pkt 1fpkt"];
820--3405[label="0.04;1pkt 1fpkt"];
820--3504[label="0.001287;1pkt 1fpkt"];
820--3513[label="0.002574;2pkt 2fpkt"];
820--3514[label="0.001287;1pkt 1fpkt"];
820--3524[label="0.0163934;1pkt 1fpkt"];
820--3560[label="0.002574;2pkt 2fpkt"];
820--3582[label="0.002574;2pkt 2fpkt"];
820--3608[label="0.001287;1pkt 1fpkt"];
820--3650[label="0.00625;1pkt 1fpkt"];
820--3661[label="0.0263158;1pkt 1fpkt"];
820--3809[label="0.0357143;1pkt 1fpkt"];
820--3816[label="0.0106383;2pkt 2fpkt"];
820--3828[label="0.002574;2pkt 2fpkt"];
820--3855[label="0.111111;1pkt 1fpkt"];
820--3861[label="0.0909091;1pkt 1fpkt"];
820--3883[label="0.001287;1pkt 1fpkt"];
820--3911[label="0.0416667;1pkt 1fpkt"];
820--3944[label="0.002574;2pkt 2fpkt"];
820--4090[label="0.002574;2pkt 2fpkt"];
820--4096[label="0.0151515;1pkt 1fpkt"];
820--4163[label="0.002574;2pkt 2fpkt"];
820--4200[label="0.001287;1pkt 1fpkt"];
820--4209[label="0.00515464;1pkt 1fpkt"];
820--4224[label="0.0263158;1pkt 1fpkt"];
820--4302[label="0.0344828;1pkt 1fpkt"];
820--4307[label="0.0106383;2pkt 2fpkt"];
820--4312[label="0.002574;2pkt 2fpkt"];
820--4326[label="0.111111;1pkt 1fpkt"];
820--4330[label="0.0833333;1pkt 1fpkt"];
1388--1987[label="1;23pkt 23fpkt"];
1388--2646[label="1;27pkt 27fpkt"];
1987--2646[label="1;23pkt 23fpkt"];
2344--3405[label="1;24pkt 24fpkt"];
2517--3524[label="1;61pkt 61fpkt"];
2713--3661[label="1;38pkt 38fpkt"];
2713--4224[label="1;38pkt 38fpkt"];
2917--3809[label="1;28pkt 28fpkt"];
2917--4302[label="1;29pkt 29fpkt"];
2982--3855[label="1;9pkt 9fpkt"];
2982--4326[label="1;9pkt 9fpkt"];
2990--3861[label="1;11pkt 11fpkt"];
2990--4330[label="1;11pkt 11fpkt"];
3048--3902[label="1;5pkt 5fpkt"];
3661--4224[label="1;38pkt 38fpkt"];
3809--4302[label="1;28pkt 28fpkt"];
3855--4326[label="1;9pkt 9fpkt"];
3861--4330[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="124.210.220.248" src_port="135"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.59.115.176"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
2996[label="208.76.89.181;218pkt 218fpkt", shape=pentagon, color=darkviolet];
3865[label="208.76.89.181;218pkt 218fpkt", shape=invtriangle, color=brown];
4333[label="208.76.89.181;219pkt 219fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.76.89.181:1045, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1045: (50%)&gt;];
}
2996--3865[label="1;218pkt 218fpkt"];
2996--4333[label="1;218pkt 218fpkt"];
3865--4333[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.76.89.181" src_port="1045"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.60.69.182"/>
    </slice>
    <from sec="1136092483" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.4.149.182"/>
    </slice>
    <from sec="1136091623" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
3002[label="166.28.168.182;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3870[label="166.28.168.182;54pkt 54fpkt", shape=invtriangle, color=brown];
4337[label="166.28.168.182;54pkt 54fpkt", shape=invhouse, color=bisque];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.168.182:*, *:25}[70.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.5926%)&lt;BR/&gt; 113: (7.40741%)&lt;BR/&gt; 2604: (1.85185%)&lt;BR/&gt; 64867: (0.925926%)&lt;BR/&gt; 4368: (0.925926%)&gt;];
}
3002--3870[label="1;54pkt 54fpkt"];
3002--4337[label="1;54pkt 54fpkt"];
3870--4337[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="166.28.168.182"/>
    </slice>
    <from sec="1136091668" usec="0"/>
    <to sec="1136092491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
3004[label="199.6.28.183;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3872[label="199.6.28.183;11pkt 11fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.6.28.183:80, 178.142.105.101:*}[72.7273%]&lt;BR/&gt;{199.6.28.183:80, 178.142.113.164:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64906: (4.54545%)&lt;BR/&gt; 64902: (4.54545%)&lt;BR/&gt; 64899: (4.54545%)&lt;BR/&gt; 64897: (4.54545%)&gt;];
}
3004--3872[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.105.101" src_ip="199.6.28.183" src_port="80"/>
      <filter dst_ip="178.142.113.164" src_ip="199.6.28.183" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
3008[label="80.219.205.183;76pkt 76fpkt", shape=pentagon, color=darkviolet];
3874[label="80.219.205.183;77pkt 77fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.219.205.183:*, *:139}[98.7013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.3464%)&lt;BR/&gt; 4981: (0.653595%)&lt;BR/&gt; 4757: (0.653595%)&lt;BR/&gt; 4693: (0.653595%)&lt;BR/&gt; 4661: (0.653595%)&gt;];
}
3008--3874[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="80.219.205.183"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
823[label="80.147.8.188;s;929pkt 929fpkt", shape=diamond, color=yellow];
1759[label="80.147.8.188;s;780pkt 780fpkt", shape=hexagon, color=black];
3023[label="80.147.8.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3885[label="80.147.8.188;3pkt 3fpkt", shape=invtriangle, color=brown];
4342[label="80.147.8.188;2pkt 2fpkt", shape=invhouse, color=bisque];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.147.8.188:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60187: (0.11655%)&lt;BR/&gt; 56912: (0.11655%)&lt;BR/&gt; 54042: (0.11655%)&lt;BR/&gt; 46360: (0.11655%)&gt;];
}
823--1759[label="1;780pkt 780fpkt"];
823--3885[label="0.333333;1pkt 1fpkt"];
1759--3885[label="0.333333;1pkt 1fpkt"];
3023--3885[label="1;2pkt 2fpkt"];
3023--4342[label="1;2pkt 2fpkt"];
3885--4342[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="80.147.8.188" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
3035[label="84.164.71.190;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3894[label="84.164.71.190;30pkt 30fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.164.71.190:*, 160.4.95.3:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1551: (1.66667%)&lt;BR/&gt; 1549: (1.66667%)&lt;BR/&gt; 1547: (1.66667%)&lt;BR/&gt; 1545: (1.66667%)&gt;];
}
3035--3894[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.95.3" dst_port="80" src_ip="84.164.71.190"/>
    </slice>
    <from sec="1136092259" usec="0"/>
    <to sec="1136092300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
3043[label="81.140.111.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3899[label="81.140.111.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.140.111.192:3656, 160.178.210.7:7700}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7700: (50%)&lt;BR/&gt; 3656: (50%)&gt;];
}
3043--3899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.178.210.7" dst_port="7700" src_ip="81.140.111.192" src_port="3656"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.28.145.192"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.89.26.194"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.50.42.195"/>
    </slice>
    <from sec="1136092293" usec="0"/>
    <to sec="1136092479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
414[label="193.114.32.187;d;764pkt 764fpkt", shape=diamond, color=yellow];
732[label="166.28.181.89;d;411pkt 411fpkt", shape=diamond, color=yellow];
963[label="58.188.3.34;s;46pkt 46fpkt", shape=diamond, color=yellow];
1239[label="160.4.95.167;d;65pkt 65fpkt", shape=diamond, color=yellow];
2050[label="166.28.181.89;d;411pkt 411fpkt", shape=hexagon, color=black];
2138[label="58.213.2.0;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2210[label="58.213.2.10;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2247[label="58.213.2.18;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2328[label="58.188.3.34;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2336[label="56.104.233.35;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2731[label="56.104.234.116;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3274[label="58.213.2.0;26pkt 26fpkt", shape=invtriangle, color=brown];
3344[label="58.213.2.18;33pkt 33fpkt", shape=invtriangle, color=brown];
3400[label="56.104.233.35;45pkt 45fpkt", shape=invtriangle, color=brown];
3672[label="56.104.234.116;44pkt 44fpkt", shape=invtriangle, color=brown];
4050[label="58.213.2.0;26pkt 26fpkt", shape=invhouse, color=bisque];
4081[label="58.213.2.18;33pkt 33fpkt", shape=invhouse, color=bisque];
4112[label="56.104.233.35;45pkt 45fpkt", shape=invhouse, color=bisque];
4229[label="56.104.234.116;44pkt 44fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 193.114.32.187:*}[44.6906%]&lt;BR/&gt;{*:25, 166.28.181.89:*}[26.2032%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.7217%)&lt;BR/&gt; 0: (4.80508%)&lt;BR/&gt; 113: (3.78513%)&lt;BR/&gt; 46725: (0.135993%)&lt;BR/&gt; 47801: (0.113327%)&gt;];
}
414--640[label="0.0013089;1pkt 1fpkt"];
414--2247[label="0.03125;1pkt 1fpkt"];
414--3344[label="0.030303;1pkt 1fpkt"];
414--4081[label="0.030303;1pkt 1fpkt"];
732--2050[label="1;411pkt 411fpkt"];
732--2138[label="0.72;18pkt 18fpkt"];
732--2210[label="0.888889;16pkt 16fpkt"];
732--2247[label="0.84375;27pkt 27fpkt"];
732--2336[label="0.931818;41pkt 41fpkt"];
732--2731[label="0.931818;41pkt 41fpkt"];
732--3274[label="0.692308;18pkt 18fpkt"];
732--3344[label="0.848485;28pkt 28fpkt"];
732--3400[label="0.911111;41pkt 41fpkt"];
732--3672[label="0.931818;41pkt 41fpkt"];
732--4050[label="0.692308;18pkt 18fpkt"];
732--4081[label="0.848485;28pkt 28fpkt"];
732--4112[label="0.911111;41pkt 41fpkt"];
732--4229[label="0.931818;41pkt 41fpkt"];
963--1031[label="0.0217391;1pkt 1fpkt"];
963--2328[label="0.978261;45pkt 45fpkt"];
1239--1289[label="0.0238095;1pkt 1fpkt"];
1239--2138[label="0.12;3pkt 3fpkt"];
1239--2496[label="0.0227273;1pkt 1fpkt"];
1239--3274[label="0.115385;3pkt 3fpkt"];
1239--4050[label="0.115385;3pkt 3fpkt"];
2050--2138[label="0.72;18pkt 18fpkt"];
2050--2210[label="0.888889;16pkt 16fpkt"];
2050--2247[label="0.84375;27pkt 27fpkt"];
2050--2336[label="0.931818;41pkt 41fpkt"];
2050--2731[label="0.931818;41pkt 41fpkt"];
2050--3274[label="0.692308;18pkt 18fpkt"];
2050--3344[label="0.848485;28pkt 28fpkt"];
2050--3400[label="0.911111;41pkt 41fpkt"];
2050--3672[label="0.931818;41pkt 41fpkt"];
2050--4050[label="0.692308;18pkt 18fpkt"];
2050--4081[label="0.848485;28pkt 28fpkt"];
2050--4112[label="0.911111;41pkt 41fpkt"];
2050--4229[label="0.931818;41pkt 41fpkt"];
2138--3274[label="1;25pkt 25fpkt"];
2138--4050[label="1;25pkt 25fpkt"];
2247--3344[label="1;32pkt 32fpkt"];
2247--4081[label="1;32pkt 32fpkt"];
2336--3400[label="1;44pkt 44fpkt"];
2336--4112[label="1;44pkt 44fpkt"];
2731--3672[label="1;44pkt 44fpkt"];
2731--4229[label="1;44pkt 44fpkt"];
3274--4050[label="1;26pkt 26fpkt"];
3344--4081[label="1;33pkt 33fpkt"];
3400--4112[label="1;45pkt 45fpkt"];
3672--4229[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.32.187" src_port="25"/>
      <filter dst_ip="166.28.181.89" src_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
3062[label="136.47.172.196;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3908[label="136.47.172.196;9pkt 9fpkt", shape=invtriangle, color=brown];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.196:20088, *:*}[77.7778%]&lt;BR/&gt;{136.47.172.196:*, 33.20.30.122:1622}[22.2222%]&lt;BR/&gt;{136.47.172.196:*, 209.178.79.159:7059}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20088: (38.2353%)&lt;BR/&gt; 7059: (11.7647%)&lt;BR/&gt; 1622: (11.7647%)&lt;BR/&gt; 61444: (5.88235%)&lt;BR/&gt; 52453: (5.88235%)&gt;];
}
3062--3908[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.172.196" src_port="20088"/>
      <filter dst_ip="209.178.79.159" dst_port="7059" src_ip="136.47.172.196"/>
      <filter dst_ip="33.20.30.122" dst_port="1622" src_ip="136.47.172.196"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
3065[label="217.224.31.197;150pkt 150fpkt", shape=pentagon, color=darkviolet];
3910[label="217.224.31.197;149pkt 149fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.224.31.197:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4462: (0.668896%)&lt;BR/&gt; 4370: (0.668896%)&lt;BR/&gt; 3850: (0.668896%)&lt;BR/&gt; 2424: (0.668896%)&gt;];
}
3065--3910[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="217.224.31.197"/>
    </slice>
    <from sec="1136091610" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3068[label="36.159.84.197;261pkt 261fpkt", shape=pentagon, color=darkviolet];
3912[label="36.159.84.197;261pkt 261fpkt", shape=invtriangle, color=brown];
4352[label="36.159.84.197;262pkt 262fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.159.84.197:*, *:139}[58.3969%]&lt;BR/&gt;{36.159.84.197:*, *:445}[41.6031%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (29.1454%)&lt;BR/&gt; 445: (20.8546%)&lt;BR/&gt; 1344: (0.382653%)&lt;BR/&gt; 1332: (0.382653%)&lt;BR/&gt; 1293: (0.382653%)&gt;];
}
3068--3912[label="1;261pkt 261fpkt"];
3068--4352[label="1;261pkt 261fpkt"];
3912--4352[label="1;261pkt 261fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="36.159.84.197"/>
      <filter dst_port="445" src_ip="36.159.84.197"/>
    </slice>
    <from sec="1136091798" usec="0"/>
    <to sec="1136091850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
3070[label="160.178.210.197;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3913[label="160.178.210.197;40pkt 40fpkt", shape=invtriangle, color=brown];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.178.210.197:80, *:*}[41.4634%]&lt;BR/&gt;{160.178.210.197:1024, *:53}[31.7073%]&lt;BR/&gt;{160.178.210.197:53, *:*}[26.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30.2469%)&lt;BR/&gt; 80: (20.9877%)&lt;BR/&gt; 1024: (16.0494%)&lt;BR/&gt; 63002: (1.23457%)&lt;BR/&gt; 58405: (1.23457%)&gt;];
}
3070--3913[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="160.178.210.197" src_port="80"/>
      <filter src_ip="160.178.210.197" src_port="53"/>
      <filter dst_port="53" src_ip="160.178.210.197" src_port="1024"/>
    </slice>
    <from sec="1136091637" usec="0"/>
    <to sec="1136092492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
3077[label="57.123.65.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3917[label="57.123.65.199;1pkt 1fpkt", shape=invtriangle, color=brown];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.123.65.199:62631, 166.28.49.82:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62631: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3077--3917[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.49.82" dst_port="80" src_ip="57.123.65.199" src_port="62631"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3080[label="193.189.47.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3920[label="193.189.47.200;1pkt 1fpkt", shape=invtriangle, color=brown];
4353[label="193.189.47.200;2pkt 2fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.189.47.200:0, 178.203.55.6:0}[50%]&lt;BR/&gt;{193.189.47.200:0, 178.203.55.37:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3080--3920[label="1;1pkt 1fpkt"];
3080--4353[label="1;1pkt 1fpkt"];
3920--4353[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.203.55.37" src_ip="193.189.47.200"/>
      <filter dst_ip="178.203.55.6" src_ip="193.189.47.200"/>
    </slice>
    <from sec="1136091635" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
247[label="85.107.29.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
248[label="136.47.174.22;d;24pkt 24fpkt", shape=diamond, color=yellow];
1597[label="136.47.172.190;d;71pkt 71fpkt", shape=diamond, color=yellow];
2577[label="210.66.101.83;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2664[label="58.97.18.101;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3082[label="210.35.155.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3572[label="210.66.101.83;21pkt 21fpkt", shape=invtriangle, color=brown];
3627[label="58.97.18.101;43pkt 43fpkt", shape=invtriangle, color=brown];
3787[label="85.107.29.155;1pkt 1fpkt", shape=invtriangle, color=brown];
3921[label="210.35.155.200;2pkt 2fpkt", shape=invtriangle, color=brown];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.97.18.101:80, 136.47.172.190:*}[41.9048%]&lt;BR/&gt;{*:*, 136.47.174.22:*}[22.8571%]&lt;BR/&gt;{210.66.101.83:80, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 63931: (2.81385%)&lt;BR/&gt; 20243: (0.649351%)&lt;BR/&gt; 10334: (0.649351%)&lt;BR/&gt; 4914: (0.649351%)&gt;];
}
247--248[label="1;1pkt 1fpkt"];
247--3787[label="1;1pkt 1fpkt"];
248--2577[label="0.227273;5pkt 5fpkt"];
248--3082[label="1;2pkt 2fpkt"];
248--3572[label="0.238095;5pkt 5fpkt"];
248--3787[label="1;1pkt 1fpkt"];
248--3921[label="1;2pkt 2fpkt"];
1597--2577[label="0.318182;7pkt 7fpkt"];
1597--2664[label="1;44pkt 44fpkt"];
1597--3572[label="0.285714;6pkt 6fpkt"];
1597--3627[label="1;43pkt 43fpkt"];
2577--3572[label="1;21pkt 21fpkt"];
2664--3627[label="1;43pkt 43fpkt"];
3082--3921[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.47.174.22"/>
      <filter src_ip="210.66.101.83" src_port="80"/>
      <filter dst_ip="136.47.172.190" src_ip="58.97.18.101" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
3083[label="60.206.172.200;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3922[label="60.206.172.200;2pkt 2fpkt", shape=invtriangle, color=brown];
4354[label="60.206.172.200;3pkt 3fpkt", shape=invhouse, color=bisque];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.206.172.200:1660, 193.114.35.97:1025}[33.3333%]&lt;BR/&gt;{60.206.172.200:1811, 193.114.35.97:1025}[33.3333%]&lt;BR/&gt;{60.206.172.200:1923, 193.114.35.97:1025}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 1923: (18.75%)&lt;BR/&gt; 1811: (18.75%)&lt;BR/&gt; 1660: (12.5%)&gt;];
}
3083--3922[label="1;2pkt 2fpkt"];
3083--4354[label="1;3pkt 3fpkt"];
3922--4354[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.35.97" dst_port="1025" src_ip="60.206.172.200" src_port="1923"/>
      <filter dst_ip="193.114.35.97" dst_port="1025" src_ip="60.206.172.200" src_port="1811"/>
      <filter dst_ip="193.114.35.97" dst_port="1025" src_ip="60.206.172.200" src_port="1660"/>
    </slice>
    <from sec="1136091615" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
3090[label="57.123.65.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3927[label="57.123.65.202;2pkt 2fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.123.65.202:60440, 136.47.250.12:80}[50%]&lt;BR/&gt;{57.123.65.202:45452, 160.4.130.223:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45452: (33.3333%)&lt;BR/&gt; 60440: (16.6667%)&gt;];
}
3090--3927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.130.223" dst_port="80" src_ip="57.123.65.202" src_port="45452"/>
      <filter dst_ip="136.47.250.12" dst_port="80" src_ip="57.123.65.202" src_port="60440"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.231.69.202"/>
    </slice>
    <from sec="1136091995" usec="0"/>
    <to sec="1136092000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.89.77.202"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
511[label="136.47.54.204;s;96pkt 96fpkt", shape=diamond, color=yellow];
526[label="199.6.31.83;d;14pkt 14fpkt", shape=diamond, color=yellow];
925[label="199.6.31.91;d;75pkt 75fpkt", shape=diamond, color=yellow];
3097[label="136.47.54.204;95pkt 95fpkt", shape=pentagon, color=darkviolet];
3933[label="136.47.54.204;96pkt 96fpkt", shape=invtriangle, color=brown];
4358[label="136.47.54.204;95pkt 95fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.54.204:*, 199.6.31.91:80}[78.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1928: (0.530786%)&lt;BR/&gt; 1926: (0.530786%)&lt;BR/&gt; 1925: (0.530786%)&lt;BR/&gt; 1924: (0.530786%)&gt;];
}
511--526[label="1;14pkt 14fpkt"];
511--925[label="1;75pkt 75fpkt"];
511--2133[label="0.166667;16pkt 16fpkt"];
511--2137[label="0.166667;16pkt 16fpkt"];
511--3097[label="1;95pkt 95fpkt"];
511--3933[label="1;96pkt 96fpkt"];
511--4358[label="1;95pkt 95fpkt"];
526--2133[label="0.714286;10pkt 10fpkt"];
526--2137[label="0.714286;10pkt 10fpkt"];
526--3097[label="0.928571;13pkt 13fpkt"];
526--3933[label="1;14pkt 14fpkt"];
526--4358[label="0.928571;13pkt 13fpkt"];
925--3097[label="1;75pkt 75fpkt"];
925--3933[label="1;75pkt 75fpkt"];
925--4358[label="1;75pkt 75fpkt"];
3097--3933[label="1;95pkt 95fpkt"];
3097--4358[label="1;95pkt 95fpkt"];
3933--4358[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="199.6.31.91" dst_port="80" src_ip="136.47.54.204"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136091931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
1534[label="80.218.163.166;d;120pkt 120fpkt", shape=diamond, color=yellow];
3098[label="192.248.190.204;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3934[label="192.248.190.204;41pkt 41fpkt", shape=invtriangle, color=brown];
4359[label="192.248.190.204;41pkt 41fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 80.218.163.166:0}[74.5342%]&lt;BR/&gt;{192.248.190.204:80, *:*}[24.8447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (51.6393%)&lt;BR/&gt; 80: (24.1803%)&lt;BR/&gt; 59599: (0.614754%)&lt;BR/&gt; 58125: (0.614754%)&lt;BR/&gt; 56561: (0.614754%)&gt;];
}
1534--2068[label="0.00833333;1pkt 1fpkt"];
1534--3098[label="0.0238095;1pkt 1fpkt"];
1534--3934[label="0.0243902;1pkt 1fpkt"];
1534--4359[label="0.0243902;1pkt 1fpkt"];
3098--3934[label="1;41pkt 41fpkt"];
3098--4359[label="1;41pkt 41fpkt"];
3934--4359[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="192.248.190.204" src_port="80"/>
      <filter dst_ip="80.218.163.166"/>
    </slice>
    <from sec="1136091679" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
3099[label="136.47.237.204;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3935[label="136.47.237.204;18pkt 18fpkt", shape=invtriangle, color=brown];
4360[label="136.47.237.204;18pkt 18fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.237.204:*, 217.204.96.138:80}[27.7778%]&lt;BR/&gt;{136.47.237.204:*, 199.6.26.66:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1304: (2.77778%)&lt;BR/&gt; 1302: (2.77778%)&lt;BR/&gt; 1301: (2.77778%)&lt;BR/&gt; 1300: (2.77778%)&gt;];
}
3099--3935[label="1;18pkt 18fpkt"];
3099--4360[label="1;18pkt 18fpkt"];
3935--4360[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="217.204.96.138" dst_port="80" src_ip="136.47.237.204"/>
      <filter dst_ip="199.6.26.66" dst_port="80" src_ip="136.47.237.204"/>
    </slice>
    <from sec="1136091734" usec="0"/>
    <to sec="1136092227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.607901,1.59288,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
1337[label="143.28.146.206;s;127pkt 127fpkt", shape=diamond, color=yellow];
3109[label="143.28.146.206;136pkt 136fpkt", shape=pentagon, color=darkviolet];
3941[label="143.28.146.206;137pkt 137fpkt", shape=invtriangle, color=brown];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.146.206:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3962: (0.75%)&lt;BR/&gt; 1211: (0.75%)&lt;BR/&gt; 64064: (0.375%)&lt;BR/&gt; 61152: (0.375%)&gt;];
}
1337--3109[label="0.992126;126pkt 126fpkt"];
1337--3941[label="1;127pkt 127fpkt"];
3109--3941[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter src_ip="143.28.146.206" src_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
3111[label="136.47.175.207;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3942[label="136.47.175.207;23pkt 23fpkt", shape=invtriangle, color=brown];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.175.207:*, 217.204.96.166:80}[58.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1137: (2.12766%)&lt;BR/&gt; 1097: (2.12766%)&lt;BR/&gt; 1085: (2.12766%)&lt;BR/&gt; 1083: (2.12766%)&gt;];
}
3111--3942[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="217.204.96.166" dst_port="80" src_ip="136.47.175.207"/>
    </slice>
    <from sec="1136091875" usec="0"/>
    <to sec="1136092288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
3113[label="166.28.28.208;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3943[label="166.28.28.208;22pkt 22fpkt", shape=invtriangle, color=brown];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.28.208:0, *:0}[21.7391%]&lt;BR/&gt;{166.28.28.208:*, *:53}[21.7391%]&lt;BR/&gt;{166.28.28.208:*, *:443}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 443: (11.1111%)&lt;BR/&gt; 53: (11.1111%)&lt;BR/&gt; 80: (8.88889%)&lt;BR/&gt; 3424: (6.66667%)&gt;];
}
3113--3943[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="166.28.28.208"/>
      <filter dst_port="53" src_ip="166.28.28.208"/>
      <filter src_ip="166.28.28.208"/>
    </slice>
    <from sec="1136091893" usec="0"/>
    <to sec="1136092462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3119[label="80.44.73.209;133pkt 133fpkt", shape=pentagon, color=darkviolet];
3947[label="80.44.73.209;132pkt 132fpkt", shape=invtriangle, color=brown];
4363[label="80.44.73.209;132pkt 132fpkt", shape=invhouse, color=bisque];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.44.73.209:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3119--3947[label="1;132pkt 132fpkt"];
3119--4363[label="1;132pkt 132fpkt"];
3947--4363[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="80.44.73.209" src_port="1026"/>
    </slice>
    <from sec="1136091922" usec="0"/>
    <to sec="1136091945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
3122[label="192.34.162.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3948[label="192.34.162.209;4pkt 4fpkt", shape=invtriangle, color=brown];
4364[label="192.34.162.209;4pkt 4fpkt", shape=invhouse, color=bisque];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.34.162.209:80, 192.242.57.184:60545}[25%]&lt;BR/&gt;{192.34.162.209:80, 192.242.57.184:64054}[25%]&lt;BR/&gt;{192.34.162.209:80, 192.242.57.185:1032}[25%]&lt;BR/&gt;{192.34.162.209:80, 192.242.57.185:1172}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64054: (12.5%)&lt;BR/&gt; 60545: (12.5%)&lt;BR/&gt; 1172: (12.5%)&lt;BR/&gt; 1032: (12.5%)&gt;];
}
3122--3948[label="1;4pkt 4fpkt"];
3122--4364[label="1;4pkt 4fpkt"];
3948--4364[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.242.57.185" dst_port="1172" src_ip="192.34.162.209" src_port="80"/>
      <filter dst_ip="192.242.57.185" dst_port="1032" src_ip="192.34.162.209" src_port="80"/>
      <filter dst_ip="192.242.57.184" dst_port="64054" src_ip="192.34.162.209" src_port="80"/>
      <filter dst_ip="192.242.57.184" dst_port="60545" src_ip="192.34.162.209" src_port="80"/>
    </slice>
    <from sec="1136092474" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
3123[label="143.28.216.209;216pkt 216fpkt", shape=pentagon, color=darkviolet];
3949[label="143.28.216.209;216pkt 216fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.28.216.209:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.1667%)&lt;BR/&gt; 32768: (2.31481%)&lt;BR/&gt; 32769: (1.38889%)&lt;BR/&gt; 33701: (1.15741%)&lt;BR/&gt; 32772: (1.15741%)&gt;];
}
3123--3949[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter src_ip="143.28.216.209" src_port="53"/>
    </slice>
    <from sec="1136091604" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.47.172.211"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
3127[label="136.47.16.212;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3953[label="136.47.16.212;27pkt 27fpkt", shape=invtriangle, color=brown];
4366[label="136.47.16.212;26pkt 26fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.16.212:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64535: (1.89873%)&lt;BR/&gt; 64491: (1.89873%)&lt;BR/&gt; 64476: (1.89873%)&lt;BR/&gt; 64447: (1.89873%)&gt;];
}
3127--3953[label="1;26pkt 26fpkt"];
3127--4366[label="1;26pkt 26fpkt"];
3953--4366[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.47.16.212"/>
    </slice>
    <from sec="1136091700" usec="0"/>
    <to sec="1136092385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997409,1.57889,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
209[label="160.4.238.73;d;7815pkt 7815fpkt", shape=diamond, color=yellow];
212[label="57.6.154.223;s;1582pkt 1582fpkt", shape=diamond, color=yellow];
518[label="213.12.160.73;s;36pkt 36fpkt", shape=diamond, color=yellow];
540[label="220.113.45.232;s;2905pkt 2905fpkt", shape=diamond, color=yellow];
789[label="166.28.183.21;d;173pkt 173fpkt", shape=diamond, color=yellow];
942[label="85.184.197.129;s;41pkt 41fpkt", shape=diamond, color=yellow];
954[label="214.30.70.89;s;23pkt 23fpkt", shape=diamond, color=yellow];
968[label="57.120.147.113;s;1362pkt 1362fpkt", shape=diamond, color=yellow];
1031[label="193.114.33.81;d;106pkt 106fpkt", shape=diamond, color=yellow];
1055[label="209.120.9.135;s;3pkt 3fpkt", shape=diamond, color=yellow];
1263[label="200.163.51.42;s;83pkt 83fpkt", shape=diamond, color=yellow];
1289[label="58.188.3.69;s;42pkt 42fpkt", shape=diamond, color=yellow];
1371[label="200.162.47.192;s;71pkt 71fpkt", shape=diamond, color=yellow];
1384[label="193.20.4.117;s;11pkt 11fpkt", shape=diamond, color=yellow];
1465[label="200.180.39.150;s;60pkt 60fpkt", shape=diamond, color=yellow];
1521[label="80.164.82.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
1588[label="192.84.127.135;s;20pkt 20fpkt", shape=diamond, color=yellow];
1785[label="85.184.197.129;s;41pkt 41fpkt", shape=hexagon, color=black];
1832[label="220.113.45.232;s;1480pkt 1480fpkt", shape=hexagon, color=black];
1887[label="166.28.183.21;d;166pkt 166fpkt", shape=hexagon, color=black];
1978[label="200.162.47.192;s;71pkt 71fpkt", shape=hexagon, color=black];
2038[label="213.12.160.73;s;31pkt 31fpkt", shape=hexagon, color=black];
2141[label="64.21.34.0;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2158[label="208.84.43.2;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2205[label="33.148.104.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2207[label="217.66.160.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2233[label="80.141.241.13;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2275[label="83.35.18.24;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2311[label="80.170.170.31;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2314[label="64.21.4.32;230pkt 230fpkt", shape=pentagon, color=darkviolet];
2329[label="208.93.80.34;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2348[label="213.202.155.37;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2363[label="200.163.51.42;85pkt 85fpkt", shape=pentagon, color=darkviolet];
2375[label="217.66.43.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2402[label="209.46.193.49;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2433[label="213.244.192.55;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2460[label="192.82.6.63;175pkt 175fpkt", shape=pentagon, color=darkviolet];
2496[label="58.188.3.69;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2608[label="60.98.224.88;56pkt 56fpkt", shape=pentagon, color=darkviolet];
2715[label="193.97.79.113;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2716[label="57.120.147.113;1463pkt 1463fpkt", shape=pentagon, color=darkviolet];
2732[label="193.20.4.117;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2733[label="221.204.48.117;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2752[label="208.23.9.123;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2776[label="85.184.197.129;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2796[label="57.132.105.135;73pkt 73fpkt", shape=pentagon, color=darkviolet];
2799[label="192.84.127.135;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2855[label="193.134.218.147;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2891[label="81.86.186.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2913[label="192.82.73.160;71pkt 71fpkt", shape=pentagon, color=darkviolet];
2965[label="80.164.82.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2994[label="196.229.210.179;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3041[label="200.162.47.192;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3054[label="221.219.148.194;265pkt 265fpkt", shape=pentagon, color=darkviolet];
3060[label="57.6.154.196;85pkt 85fpkt", shape=pentagon, color=darkviolet];
3067[label="63.167.53.197;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3071[label="200.246.139.198;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3131[label="215.10.166.212;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3157[label="80.185.2.220;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3181[label="208.169.48.228;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3186[label="200.184.137.229;68pkt 68fpkt", shape=pentagon, color=darkviolet];
3192[label="220.113.45.232;3086pkt 3086fpkt", shape=pentagon, color=darkviolet];
3249[label="81.15.96.247;153pkt 153fpkt", shape=pentagon, color=darkviolet];
3259[label="217.66.18.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3264[label="209.164.187.252;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3318[label="33.148.104.9;1pkt 1fpkt", shape=invtriangle, color=brown];
3320[label="217.66.160.9;1pkt 1fpkt", shape=invtriangle, color=brown];
3337[label="80.141.241.13;17pkt 17fpkt", shape=invtriangle, color=brown];
3408[label="213.202.155.37;12pkt 12fpkt", shape=invtriangle, color=brown];
3419[label="200.163.51.42;85pkt 85fpkt", shape=invtriangle, color=brown];
3479[label="192.82.6.63;175pkt 175fpkt", shape=invtriangle, color=brown];
3662[label="57.120.147.113;1464pkt 1464fpkt", shape=invtriangle, color=brown];
3673[label="193.20.4.117;14pkt 14fpkt", shape=invtriangle, color=brown];
3674[label="221.204.48.117;11pkt 11fpkt", shape=invtriangle, color=brown];
3688[label="208.23.9.123;3pkt 3fpkt", shape=invtriangle, color=brown];
3706[label="85.184.197.129;40pkt 40fpkt", shape=invtriangle, color=brown];
3723[label="57.132.105.135;74pkt 74fpkt", shape=invtriangle, color=brown];
3843[label="80.164.82.172;2pkt 2fpkt", shape=invtriangle, color=brown];
3864[label="196.229.210.179;27pkt 27fpkt", shape=invtriangle, color=brown];
3906[label="57.6.154.196;85pkt 85fpkt", shape=invtriangle, color=brown];
3914[label="200.246.139.198;24pkt 24fpkt", shape=invtriangle, color=brown];
3995[label="200.184.137.229;68pkt 68fpkt", shape=invtriangle, color=brown];
3999[label="220.113.45.232;3085pkt 3085fpkt", shape=invtriangle, color=brown];
4035[label="81.15.96.247;154pkt 154fpkt", shape=invtriangle, color=brown];
4044[label="209.164.187.252;7pkt 7fpkt", shape=invtriangle, color=brown];
4118[label="213.202.155.37;12pkt 12fpkt", shape=invhouse, color=bisque];
4225[label="57.120.147.113;1464pkt 1464fpkt", shape=invhouse, color=bisque];
4230[label="221.204.48.117;11pkt 11fpkt", shape=invhouse, color=bisque];
4239[label="208.23.9.123;2pkt 2fpkt", shape=invhouse, color=bisque];
4248[label="85.184.197.129;40pkt 40fpkt", shape=invhouse, color=bisque];
4258[label="57.132.105.135;74pkt 74fpkt", shape=invhouse, color=bisque];
4319[label="80.164.82.172;2pkt 2fpkt", shape=invhouse, color=bisque];
4388[label="200.184.137.229;69pkt 69fpkt", shape=invhouse, color=bisque];
4389[label="220.113.45.232;3086pkt 3086fpkt", shape=invhouse, color=bisque];
4409[label="81.15.96.247;153pkt 153fpkt", shape=invhouse, color=bisque];
4413[label="209.164.187.252;7pkt 7fpkt", shape=invhouse, color=bisque];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.113.45.232:*, 160.4.238.73:*}[29.5198%]&lt;BR/&gt;{*:*, 160.4.238.73:25}[26.5353%]&lt;BR/&gt;{*:53, 160.4.238.73:*}[21.4942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.4822%)&lt;BR/&gt; 24441: (10.4305%)&lt;BR/&gt; 53: (5.90368%)&lt;BR/&gt; 2703: (4.62473%)&lt;BR/&gt; 6277: (1.36921%)&gt;];
}
209--212[label="0.711125;1125pkt 1125fpkt"];
209--518[label="0.694444;25pkt 25fpkt"];
209--540[label="0.769019;2234pkt 2234fpkt"];
209--942[label="1;41pkt 41fpkt"];
209--954[label="1;23pkt 23fpkt"];
209--968[label="0.770925;1050pkt 1050fpkt"];
209--1055[label="1;3pkt 3fpkt"];
209--1263[label="0.506024;42pkt 42fpkt"];
209--1289[label="0.0238095;1pkt 1fpkt"];
209--1371[label="0.295775;21pkt 21fpkt"];
209--1384[label="1;11pkt 11fpkt"];
209--1465[label="0.5;30pkt 30fpkt"];
209--1521[label="0.5;1pkt 1fpkt"];
209--1588[label="0.8;16pkt 16fpkt"];
209--1785[label="1;41pkt 41fpkt"];
209--1832[label="1;1480pkt 1480fpkt"];
209--1978[label="0.295775;21pkt 21fpkt"];
209--2038[label="0.806452;25pkt 25fpkt"];
209--2135[label="0.0176583;138pkt 138fpkt"];
209--2141[label="0.586207;34pkt 34fpkt"];
209--2158[label="0.571429;4pkt 4fpkt"];
209--2201[label="0.142857;3pkt 3fpkt"];
209--2205[label="0.5;1pkt 1fpkt"];
209--2207[label="1;2pkt 2fpkt"];
209--2233[label="0.625;10pkt 10fpkt"];
209--2262[label="0.166667;3pkt 3fpkt"];
209--2275[label="0.193548;6pkt 6fpkt"];
209--2311[label="1;2pkt 2fpkt"];
209--2314[label="1;230pkt 230fpkt"];
209--2329[label="0.307692;4pkt 4fpkt"];
209--2348[label="0.833333;10pkt 10fpkt"];
209--2363[label="0.482353;41pkt 41fpkt"];
209--2375[label="1;1pkt 1fpkt"];
209--2378[label="0.111111;2pkt 2fpkt"];
209--2402[label="1;5pkt 5fpkt"];
209--2433[label="0.333333;1pkt 1fpkt"];
209--2451[label="0.142857;2pkt 2fpkt"];
209--2460[label="0.468571;82pkt 82fpkt"];
209--2496[label="0.0227273;1pkt 1fpkt"];
209--2547[label="0.122449;6pkt 6fpkt"];
209--2608[label="0.375;21pkt 21fpkt"];
209--2653[label="0.0638298;3pkt 3fpkt"];
209--2656[label="0.137931;4pkt 4fpkt"];
209--2715[label="0.230769;3pkt 3fpkt"];
209--2716[label="0.717703;1050pkt 1050fpkt"];
209--2732[label="0.785714;11pkt 11fpkt"];
209--2733[label="0.416667;5pkt 5fpkt"];
209--2752[label="1;3pkt 3fpkt"];
209--2776[label="1;40pkt 40fpkt"];
209--2796[label="0.60274;44pkt 44fpkt"];
209--2799[label="0.8;16pkt 16fpkt"];
209--2855[label="0.142857;4pkt 4fpkt"];
209--2891[label="1;3pkt 3fpkt"];
209--2913[label="0.211268;15pkt 15fpkt"];
209--2924[label="0.108108;4pkt 4fpkt"];
209--2956[label="0.147059;5pkt 5fpkt"];
209--2965[label="0.5;1pkt 1fpkt"];
209--2972[label="0.0555556;1pkt 1fpkt"];
209--2975[label="0.25;2pkt 2fpkt"];
209--2994[label="0.357143;10pkt 10fpkt"];
209--3005[label="0.0943396;5pkt 5fpkt"];
209--3020[label="0.0555556;1pkt 1fpkt"];
209--3041[label="0.28;21pkt 21fpkt"];
209--3054[label="0.622642;165pkt 165fpkt"];
209--3067[label="0.8;4pkt 4fpkt"];
209--3071[label="0.291667;7pkt 7fpkt"];
209--3131[label="0.666667;2pkt 2fpkt"];
209--3157[label="0.75;3pkt 3fpkt"];
209--3181[label="1;3pkt 3fpkt"];
209--3186[label="0.558824;38pkt 38fpkt"];
209--3192[label="0.723914;2234pkt 2234fpkt"];
209--3239[label="0.242424;16pkt 16fpkt"];
209--3249[label="1;153pkt 153fpkt"];
209--3259[label="1;1pkt 1fpkt"];
209--3264[label="0.833333;5pkt 5fpkt"];
209--3320[label="1;1pkt 1fpkt"];
209--3337[label="0.588235;10pkt 10fpkt"];
209--3408[label="0.833333;10pkt 10fpkt"];
209--3419[label="0.482353;41pkt 41fpkt"];
209--3471[label="0.142857;2pkt 2fpkt"];
209--3479[label="0.468571;82pkt 82fpkt"];
209--3662[label="0.717213;1050pkt 1050fpkt"];
209--3673[label="0.785714;11pkt 11fpkt"];
209--3674[label="0.363636;4pkt 4fpkt"];
209--3688[label="1;3pkt 3fpkt"];
209--3706[label="1;40pkt 40fpkt"];
209--3723[label="0.594595;44pkt 44fpkt"];
209--3838[label="0.147059;5pkt 5fpkt"];
209--3843[label="0.5;1pkt 1fpkt"];
209--3849[label="0.0555556;1pkt 1fpkt"];
209--3864[label="0.37037;10pkt 10fpkt"];
209--3873[label="0.0961538;5pkt 5fpkt"];
209--3914[label="0.291667;7pkt 7fpkt"];
209--3995[label="0.558824;38pkt 38fpkt"];
209--3999[label="0.723825;2233pkt 2233fpkt"];
209--4031[label="0.242424;16pkt 16fpkt"];
209--4035[label="1;154pkt 154fpkt"];
209--4044[label="0.857143;6pkt 6fpkt"];
209--4118[label="0.833333;10pkt 10fpkt"];
209--4140[label="0.153846;2pkt 2fpkt"];
209--4225[label="0.717213;1050pkt 1050fpkt"];
209--4230[label="0.363636;4pkt 4fpkt"];
209--4239[label="1;2pkt 2fpkt"];
209--4248[label="1;40pkt 40fpkt"];
209--4258[label="0.594595;44pkt 44fpkt"];
209--4319[label="0.5;1pkt 1fpkt"];
209--4323[label="0.0588235;1pkt 1fpkt"];
209--4338[label="0.0943396;5pkt 5fpkt"];
209--4388[label="0.550725;38pkt 38fpkt"];
209--4389[label="0.723914;2234pkt 2234fpkt"];
209--4409[label="1;153pkt 153fpkt"];
209--4413[label="0.857143;6pkt 6fpkt"];
212--789[label="0.231214;40pkt 40fpkt"];
212--1031[label="0.339623;36pkt 36fpkt"];
212--1887[label="0.204819;34pkt 34fpkt"];
518--2038[label="1;31pkt 31fpkt"];
540--1832[label="1;1480pkt 1480fpkt"];
540--3192[label="1;2905pkt 2905fpkt"];
540--3999[label="0.999656;2904pkt 2904fpkt"];
540--4389[label="1;2905pkt 2905fpkt"];
789--1887[label="1;166pkt 166fpkt"];
942--1785[label="1;41pkt 41fpkt"];
942--2776[label="1;40pkt 40fpkt"];
942--3706[label="1;40pkt 40fpkt"];
942--4248[label="1;40pkt 40fpkt"];
968--1031[label="0.141509;15pkt 15fpkt"];
968--2716[label="0.999266;1361pkt 1361fpkt"];
968--3662[label="1;1362pkt 1362fpkt"];
968--4225[label="1;1362pkt 1362fpkt"];
1031--1289[label="0.238095;10pkt 10fpkt"];
1031--2210[label="0.0555556;1pkt 1fpkt"];
1031--2247[label="0.03125;1pkt 1fpkt"];
1031--2328[label="0.02;1pkt 1fpkt"];
1031--2496[label="0.227273;10pkt 10fpkt"];
1031--2716[label="0.141509;15pkt 15fpkt"];
1031--3060[label="0.423529;36pkt 36fpkt"];
1031--3344[label="0.030303;1pkt 1fpkt"];
1031--3662[label="0.141509;15pkt 15fpkt"];
1031--3906[label="0.423529;36pkt 36fpkt"];
1031--4081[label="0.030303;1pkt 1fpkt"];
1031--4225[label="0.141509;15pkt 15fpkt"];
1263--1372[label="0.0120482;1pkt 1fpkt"];
1263--1709[label="0.0120482;1pkt 1fpkt"];
1263--1720[label="0.0120482;1pkt 1fpkt"];
1263--1799[label="0.0120482;1pkt 1fpkt"];
1263--2018[label="0.0120482;1pkt 1fpkt"];
1263--2071[label="0.0120482;1pkt 1fpkt"];
1263--2072[label="0.0120482;1pkt 1fpkt"];
1263--2135[label="0.156627;13pkt 13fpkt"];
1263--2363[label="0.975904;81pkt 81fpkt"];
1263--3419[label="0.975904;81pkt 81fpkt"];
1289--2496[label="1;42pkt 42fpkt"];
1371--1372[label="0.0140845;1pkt 1fpkt"];
1371--1709[label="0.0140845;1pkt 1fpkt"];
1371--1720[label="0.0140845;1pkt 1fpkt"];
1371--1799[label="0.0140845;1pkt 1fpkt"];
1371--1978[label="1;71pkt 71fpkt"];
1371--2018[label="0.0140845;1pkt 1fpkt"];
1371--2071[label="0.0140845;1pkt 1fpkt"];
1371--2072[label="0.0140845;1pkt 1fpkt"];
1371--2135[label="0.211268;15pkt 15fpkt"];
1371--3041[label="1;71pkt 71fpkt"];
1384--2732[label="1;11pkt 11fpkt"];
1384--3673[label="1;11pkt 11fpkt"];
1465--1709[label="0.0166667;1pkt 1fpkt"];
1465--1720[label="0.0166667;1pkt 1fpkt"];
1465--1799[label="0.0166667;1pkt 1fpkt"];
1465--1848[label="0.0166667;1pkt 1fpkt"];
1465--2018[label="0.0166667;1pkt 1fpkt"];
1465--2071[label="0.0166667;1pkt 1fpkt"];
1465--2072[label="0.0166667;1pkt 1fpkt"];
1465--2135[label="0.183333;11pkt 11fpkt"];
1521--2965[label="1;2pkt 2fpkt"];
1521--3843[label="1;2pkt 2fpkt"];
1521--4319[label="1;2pkt 2fpkt"];
1588--2799[label="1;20pkt 20fpkt"];
1785--2776[label="1;40pkt 40fpkt"];
1785--3706[label="1;40pkt 40fpkt"];
1785--4248[label="1;40pkt 40fpkt"];
1832--3192[label="1;1480pkt 1480fpkt"];
1832--3999[label="0.999324;1479pkt 1479fpkt"];
1832--4389[label="1;1480pkt 1480fpkt"];
1978--2018[label="0.0140845;1pkt 1fpkt"];
1978--2071[label="0.0140845;1pkt 1fpkt"];
1978--2072[label="0.0140845;1pkt 1fpkt"];
1978--2135[label="0.211268;15pkt 15fpkt"];
1978--3041[label="1;71pkt 71fpkt"];
2205--3318[label="1;1pkt 1fpkt"];
2207--3320[label="1;1pkt 1fpkt"];
2233--3337[label="1;16pkt 16fpkt"];
2348--3408[label="1;12pkt 12fpkt"];
2348--4118[label="1;12pkt 12fpkt"];
2363--3419[label="1;85pkt 85fpkt"];
2460--3479[label="1;175pkt 175fpkt"];
2716--3662[label="1;1463pkt 1463fpkt"];
2716--4225[label="1;1463pkt 1463fpkt"];
2732--3673[label="1;14pkt 14fpkt"];
2733--3674[label="1;11pkt 11fpkt"];
2733--4230[label="1;11pkt 11fpkt"];
2752--3688[label="1;3pkt 3fpkt"];
2752--4239[label="1;2pkt 2fpkt"];
2776--3706[label="1;40pkt 40fpkt"];
2776--4248[label="1;40pkt 40fpkt"];
2796--3723[label="1;73pkt 73fpkt"];
2796--4258[label="1;73pkt 73fpkt"];
2965--3843[label="1;2pkt 2fpkt"];
2965--4319[label="1;2pkt 2fpkt"];
2994--3864[label="1;27pkt 27fpkt"];
3060--3906[label="1;85pkt 85fpkt"];
3071--3914[label="1;24pkt 24fpkt"];
3186--3995[label="1;68pkt 68fpkt"];
3186--4388[label="1;68pkt 68fpkt"];
3192--3999[label="1;3085pkt 3085fpkt"];
3192--4389[label="1;3086pkt 3086fpkt"];
3249--4035[label="1;153pkt 153fpkt"];
3249--4409[label="1;153pkt 153fpkt"];
3264--4044[label="1;6pkt 6fpkt"];
3264--4413[label="1;6pkt 6fpkt"];
3408--4118[label="1;12pkt 12fpkt"];
3662--4225[label="1;1464pkt 1464fpkt"];
3674--4230[label="1;11pkt 11fpkt"];
3688--4239[label="1;2pkt 2fpkt"];
3706--4248[label="1;40pkt 40fpkt"];
3723--4258[label="1;74pkt 74fpkt"];
3843--4319[label="1;2pkt 2fpkt"];
3995--4388[label="1;68pkt 68fpkt"];
3999--4389[label="1;3085pkt 3085fpkt"];
4035--4409[label="1;153pkt 153fpkt"];
4044--4413[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.238.73" src_ip="220.113.45.232"/>
      <filter dst_ip="160.4.238.73" src_port="53"/>
      <filter dst_ip="160.4.238.73" dst_port="25"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
3132[label="210.57.200.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3957[label="210.57.200.212;2pkt 2fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.57.200.212:5050, 178.142.136.63:1033}[50%]&lt;BR/&gt;{210.57.200.212:5050, 178.142.87.110:3549}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 3549: (25%)&lt;BR/&gt; 1033: (25%)&gt;];
}
3132--3957[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.87.110" dst_port="3549" src_ip="210.57.200.212" src_port="5050"/>
      <filter dst_ip="178.142.136.63" dst_port="1033" src_ip="210.57.200.212" src_port="5050"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
3135[label="80.149.78.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3960[label="80.149.78.213;1pkt 1fpkt", shape=invtriangle, color=brown];
4370[label="80.149.78.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.149.78.213:55384, 178.142.129.197:4483}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55384: (50%)&lt;BR/&gt; 4483: (50%)&gt;];
}
3135--3960[label="1;1pkt 1fpkt"];
3135--4370[label="1;1pkt 1fpkt"];
3960--4370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.129.197" dst_port="4483" src_ip="80.149.78.213" src_port="55384"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.68.81.214"/>
    </slice>
    <from sec="1136091610" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
3145[label="160.4.201.216;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3966[label="160.4.201.216;32pkt 32fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.201.216:*, *:25}[53.125%]&lt;BR/&gt;{160.4.201.216:25, *:*}[46.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65195: (1.5873%)&lt;BR/&gt; 61533: (1.5873%)&lt;BR/&gt; 49599: (1.5873%)&lt;BR/&gt; 44565: (1.5873%)&gt;];
}
3145--3966[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="160.4.201.216" src_port="25"/>
      <filter dst_port="25" src_ip="160.4.201.216"/>
    </slice>
    <from sec="1136091638" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
3148[label="80.210.43.218;148pkt 148fpkt", shape=pentagon, color=darkviolet];
3969[label="80.210.43.218;148pkt 148fpkt", shape=invtriangle, color=brown];
4374[label="80.210.43.218;147pkt 147fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.210.43.218:44495, *:4257}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44495: (50%)&lt;BR/&gt; 4257: (12.5282%)&lt;BR/&gt; 1029: (6.77201%)&lt;BR/&gt; 1032: (6.43341%)&lt;BR/&gt; 1031: (6.43341%)&gt;];
}
3148--3969[label="1;148pkt 148fpkt"];
3148--4374[label="1;147pkt 147fpkt"];
3969--4374[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="4257" src_ip="80.210.43.218" src_port="44495"/>
    </slice>
    <from sec="1136092461" usec="0"/>
    <to sec="1136092462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3155[label="160.4.201.219;147pkt 147fpkt", shape=pentagon, color=darkviolet];
3977[label="160.4.201.219;146pkt 146fpkt", shape=invtriangle, color=brown];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.4.201.219:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.4608%)&lt;BR/&gt; 32768: (2.04778%)&lt;BR/&gt; 32769: (1.36519%)&lt;BR/&gt; 1033: (0.682594%)&lt;BR/&gt; 1024: (0.682594%)&gt;];
}
3155--3977[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter src_ip="160.4.201.219" src_port="53"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.28.145.223"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.165.243.223"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
3174[label="209.178.153.226;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3986[label="209.178.153.226;82pkt 82fpkt", shape=invtriangle, color=brown];
4384[label="209.178.153.226;82pkt 82fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.178.153.226:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3032: (1.21951%)&lt;BR/&gt; 4981: (0.609756%)&lt;BR/&gt; 4758: (0.609756%)&lt;BR/&gt; 4536: (0.609756%)&gt;];
}
3174--3986[label="1;82pkt 82fpkt"];
3174--4384[label="1;82pkt 82fpkt"];
3986--4384[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.178.153.226"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136092327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
3176[label="192.242.53.227;134pkt 134fpkt", shape=pentagon, color=darkviolet];
3988[label="192.242.53.227;133pkt 133fpkt", shape=invtriangle, color=brown];
4386[label="192.242.53.227;133pkt 133fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.53.227:63200, *:53}[65.6716%]&lt;BR/&gt;{192.242.53.227:53, *:*}[31.3433%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.25%)&lt;BR/&gt; 63200: (32.75%)&lt;BR/&gt; 0: (2.25%)&lt;BR/&gt; 32768: (1.5%)&lt;BR/&gt; 32769: (1.125%)&gt;];
}
3176--3988[label="1;133pkt 133fpkt"];
3176--4386[label="1;133pkt 133fpkt"];
3988--4386[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter src_ip="192.242.53.227" src_port="53"/>
      <filter dst_port="53" src_ip="192.242.53.227" src_port="63200"/>
    </slice>
    <from sec="1136091626" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
3183[label="198.131.140.228;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3992[label="198.131.140.228;6pkt 6fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.131.140.228:80, 178.142.109.37:*}[33.3333%]&lt;BR/&gt;{198.131.140.228:443, 178.142.109.37:*}[33.3333%]&lt;BR/&gt;{198.131.140.228:*, 178.142.245.185:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 55221: (9.09091%)&lt;BR/&gt; 55027: (9.09091%)&lt;BR/&gt; 54939: (9.09091%)&gt;];
}
3183--3992[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.245.185" src_ip="198.131.140.228"/>
      <filter dst_ip="178.142.109.37" src_ip="198.131.140.228" src_port="443"/>
      <filter dst_ip="178.142.109.37" src_ip="198.131.140.228" src_port="80"/>
    </slice>
    <from sec="1136092291" usec="0"/>
    <to sec="1136092496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880658,1.58961,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
1202[label="136.47.70.210;d;53pkt 53fpkt", shape=diamond, color=yellow];
1203[label="209.58.1.145;s;35pkt 35fpkt", shape=diamond, color=yellow];
2043[label="136.47.70.210;d;51pkt 51fpkt", shape=hexagon, color=black];
2841[label="209.58.1.145;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3196[label="57.123.65.233;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3751[label="209.58.1.145;34pkt 34fpkt", shape=invtriangle, color=brown];
4001[label="57.123.65.233;18pkt 18fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.58.1.145:*, 136.47.70.210:80}[50.7246%]&lt;BR/&gt;{57.123.65.233:*, *:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7654%)&lt;BR/&gt; 53: (1.23457%)&lt;BR/&gt; 1943: (1.02881%)&lt;BR/&gt; 1941: (1.02881%)&lt;BR/&gt; 1938: (1.02881%)&gt;];
}
1202--1203[label="1;35pkt 35fpkt"];
1202--2043[label="1;51pkt 51fpkt"];
1202--2420[label="0.0588235;1pkt 1fpkt"];
1202--2439[label="0.0454545;1pkt 1fpkt"];
1202--2841[label="1;34pkt 34fpkt"];
1202--3149[label="0.0625;1pkt 1fpkt"];
1202--3185[label="0.0188679;1pkt 1fpkt"];
1202--3196[label="0.111111;2pkt 2fpkt"];
1202--3751[label="1;34pkt 34fpkt"];
1202--3970[label="0.0625;1pkt 1fpkt"];
1202--3993[label="0.0188679;1pkt 1fpkt"];
1202--4001[label="0.111111;2pkt 2fpkt"];
1202--4375[label="0.0666667;1pkt 1fpkt"];
1203--2043[label="1;35pkt 35fpkt"];
1203--2841[label="1;34pkt 34fpkt"];
1203--3751[label="1;34pkt 34fpkt"];
2043--2420[label="0.0588235;1pkt 1fpkt"];
2043--2439[label="0.0454545;1pkt 1fpkt"];
2043--2841[label="1;34pkt 34fpkt"];
2043--3149[label="0.0625;1pkt 1fpkt"];
2043--3185[label="0.0196078;1pkt 1fpkt"];
2043--3196[label="0.111111;2pkt 2fpkt"];
2043--3751[label="1;34pkt 34fpkt"];
2043--3970[label="0.0625;1pkt 1fpkt"];
2043--3993[label="0.0196078;1pkt 1fpkt"];
2043--4001[label="0.111111;2pkt 2fpkt"];
2043--4375[label="0.0666667;1pkt 1fpkt"];
2841--3751[label="1;34pkt 34fpkt"];
3196--4001[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="57.123.65.233"/>
      <filter dst_ip="136.47.70.210" dst_port="80" src_ip="209.58.1.145"/>
    </slice>
    <from sec="1136091894" usec="0"/>
    <to sec="1136092480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.132.192.233"/>
    </slice>
    <from sec="1136092237" usec="0"/>
    <to sec="1136092349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.139.204.234"/>
    </slice>
    <from sec="1136092286" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
3205[label="203.208.126.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4009[label="203.208.126.235;1pkt 1fpkt", shape=invtriangle, color=brown];
4395[label="203.208.126.235;1pkt 1fpkt", shape=invhouse, color=bisque];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.208.126.235:34131, 160.17.237.246:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34131: (50%)&lt;BR/&gt; 1080: (50%)&gt;];
}
3205--4009[label="1;1pkt 1fpkt"];
3205--4395[label="1;1pkt 1fpkt"];
4009--4395[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.17.237.246" dst_port="1080" src_ip="203.208.126.235" src_port="34131"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
288[label="192.242.59.65;s;478pkt 478fpkt", shape=diamond, color=yellow];
289[label="58.31.180.76;d;270pkt 270fpkt", shape=diamond, color=yellow];
663[label="143.28.233.42;s;18pkt 18fpkt", shape=diamond, color=yellow];
684[label="198.88.158.125;d;7pkt 7fpkt", shape=diamond, color=yellow];
765[label="202.72.17.177;d;11pkt 11fpkt", shape=diamond, color=yellow];
1087[label="143.28.130.111;s;4pkt 4fpkt", shape=diamond, color=yellow];
1562[label="143.28.218.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
1608[label="210.121.178.91;d;61pkt 61fpkt", shape=diamond, color=yellow];
2469[label="192.242.59.65;512pkt 512fpkt", shape=pentagon, color=darkviolet];
2710[label="143.28.130.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3211[label="143.28.143.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3485[label="192.242.59.65;512pkt 512fpkt", shape=invtriangle, color=brown];
3659[label="143.28.130.111;1pkt 1fpkt", shape=invtriangle, color=brown];
4013[label="143.28.143.236;2pkt 2fpkt", shape=invtriangle, color=brown];
4397[label="143.28.143.236;2pkt 2fpkt", shape=invhouse, color=bisque];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.242.59.65:*, 58.31.180.76:80}[52.214%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9266%)&lt;BR/&gt; 3306: (0.637959%)&lt;BR/&gt; 6667: (0.318979%)&lt;BR/&gt; 20: (0.318979%)&lt;BR/&gt; 110: (0.239234%)&gt;];
}
288--289[label="1;270pkt 270fpkt"];
288--765[label="0.0909091;1pkt 1fpkt"];
288--1364[label="0.0408163;8pkt 8fpkt"];
288--1608[label="1;61pkt 61fpkt"];
288--2133[label="0.167364;80pkt 80fpkt"];
288--2137[label="0.167364;80pkt 80fpkt"];
288--2469[label="1;478pkt 478fpkt"];
288--3485[label="1;478pkt 478fpkt"];
289--2133[label="0.288889;78pkt 78fpkt"];
289--2137[label="0.288889;78pkt 78fpkt"];
289--2469[label="1;270pkt 270fpkt"];
289--3485[label="1;270pkt 270fpkt"];
663--684[label="1;7pkt 7fpkt"];
663--765[label="0.0909091;1pkt 1fpkt"];
765--1087[label="0.25;1pkt 1fpkt"];
765--1486[label="0.0909091;1pkt 1fpkt"];
765--1562[label="1;1pkt 1fpkt"];
765--2469[label="0.0909091;1pkt 1fpkt"];
765--2710[label="1;1pkt 1fpkt"];
765--3211[label="1;1pkt 1fpkt"];
765--3254[label="0.0909091;1pkt 1fpkt"];
765--3485[label="0.0909091;1pkt 1fpkt"];
765--3659[label="1;1pkt 1fpkt"];
765--4013[label="1;2pkt 2fpkt"];
765--4397[label="1;2pkt 2fpkt"];
1087--2710[label="1;1pkt 1fpkt"];
1087--3659[label="1;1pkt 1fpkt"];
1608--2469[label="1;61pkt 61fpkt"];
1608--3485[label="1;61pkt 61fpkt"];
2469--3485[label="1;512pkt 512fpkt"];
2710--3659[label="1;1pkt 1fpkt"];
3211--4013[label="1;1pkt 1fpkt"];
3211--4397[label="1;1pkt 1fpkt"];
4013--4397[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="58.31.180.76" dst_port="80" src_ip="192.242.59.65"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3218[label="191.52.206.238;217pkt 217fpkt", shape=pentagon, color=darkviolet];
4019[label="191.52.206.238;217pkt 217fpkt", shape=invtriangle, color=brown];
4400[label="191.52.206.238;217pkt 217fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{191.52.206.238:0, *:1025}[51.6129%]&lt;BR/&gt;{191.52.206.238:0, *:1026}[48.3871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1025: (25.8065%)&lt;BR/&gt; 1026: (24.1935%)&gt;];
}
3218--4019[label="1;217pkt 217fpkt"];
3218--4400[label="1;217pkt 217fpkt"];
4019--4400[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="191.52.206.238"/>
      <filter dst_port="1026" src_ip="191.52.206.238"/>
    </slice>
    <from sec="1136091798" usec="0"/>
    <to sec="1136091799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
3220[label="57.123.70.239;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4021[label="57.123.70.239;2pkt 2fpkt", shape=invtriangle, color=brown];
4401[label="57.123.70.239;3pkt 3fpkt", shape=invhouse, color=bisque];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.123.70.239:45610, 136.47.1.2:80}[33.3333%]&lt;BR/&gt;{57.123.70.239:43481, 166.28.203.19:80}[33.3333%]&lt;BR/&gt;{57.123.70.239:43486, 166.28.203.19:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43486: (18.75%)&lt;BR/&gt; 43481: (18.75%)&lt;BR/&gt; 45610: (12.5%)&gt;];
}
3220--4021[label="1;2pkt 2fpkt"];
3220--4401[label="1;3pkt 3fpkt"];
4021--4401[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.28.203.19" dst_port="80" src_ip="57.123.70.239" src_port="43486"/>
      <filter dst_ip="166.28.203.19" dst_port="80" src_ip="57.123.70.239" src_port="43481"/>
      <filter dst_ip="136.47.1.2" dst_port="80" src_ip="57.123.70.239" src_port="45610"/>
    </slice>
    <from sec="1136092132" usec="0"/>
    <to sec="1136092408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
3224[label="209.122.252.239;153pkt 153fpkt", shape=pentagon, color=darkviolet];
4024[label="209.122.252.239;153pkt 153fpkt", shape=invtriangle, color=brown];
4403[label="209.122.252.239;154pkt 154fpkt", shape=invhouse, color=bisque];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.122.252.239:56339, *:1028}[38.961%]&lt;BR/&gt;{209.122.252.239:56339, *:1029}[22.0779%]&lt;BR/&gt;{209.122.252.239:56339, *:1030}[20.7792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56339: (40.8696%)&lt;BR/&gt; 1028: (19.3478%)&lt;BR/&gt; 1030: (15.3261%)&lt;BR/&gt; 1029: (15.3261%)&lt;BR/&gt; 56295: (9.13043%)&gt;];
}
3224--4024[label="1;153pkt 153fpkt"];
3224--4403[label="1;153pkt 153fpkt"];
4024--4403[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="1028" src_ip="209.122.252.239" src_port="56339"/>
      <filter dst_port="1030" src_ip="209.122.252.239" src_port="56339"/>
      <filter dst_port="1029" src_ip="209.122.252.239" src_port="56339"/>
    </slice>
    <from sec="1136092074" usec="0"/>
    <to sec="1136092082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
3233[label="166.28.107.242;83pkt 83fpkt", shape=pentagon, color=darkviolet];
4028[label="166.28.107.242;82pkt 82fpkt", shape=invtriangle, color=brown];
4406[label="166.28.107.242;82pkt 82fpkt", shape=invhouse, color=bisque];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.28.107.242:53, *:*}[78.3133%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.8907%)&lt;BR/&gt; 25: (7.89474%)&lt;BR/&gt; 32772: (1.82186%)&lt;BR/&gt; 1104: (1.82186%)&lt;BR/&gt; 32790: (1.21457%)&gt;];
}
3233--4028[label="1;82pkt 82fpkt"];
3233--4406[label="1;82pkt 82fpkt"];
4028--4406[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter src_ip="166.28.107.242" src_port="53"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.485184,1.63258,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_672{
style=filled;
color=gray75;
3244[label="80.158.124.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4034[label="80.158.124.246;1pkt 1fpkt", shape=invtriangle, color=brown];
stat672[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.158.124.246:30195, 178.142.204.55:58051}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58051: (50%)&lt;BR/&gt; 30195: (50%)&gt;];
}
3244--4034[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.204.55" dst_port="58051" src_ip="80.158.124.246" src_port="30195"/>
    </slice>
    <from sec="1136091602" usec="0"/>
    <to sec="1136092475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.674292,1.62213,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
3252[label="56.159.178.247;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4036[label="56.159.178.247;4pkt 4fpkt", shape=invtriangle, color=brown];
4410[label="56.159.178.247;4pkt 4fpkt", shape=invhouse, color=bisque];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.159.178.247:80, 178.142.67.116:1252}[25%]&lt;BR/&gt;{56.159.178.247:80, 178.142.67.116:1253}[25%]&lt;BR/&gt;{56.159.178.247:80, 178.142.67.116:1274}[25%]&lt;BR/&gt;{56.159.178.247:80, 178.142.67.116:1275}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1275: (12.5%)&lt;BR/&gt; 1274: (12.5%)&lt;BR/&gt; 1253: (12.5%)&lt;BR/&gt; 1252: (12.5%)&gt;];
}
3252--4036[label="1;4pkt 4fpkt"];
3252--4410[label="1;4pkt 4fpkt"];
4036--4410[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.67.116" dst_port="1275" src_ip="56.159.178.247" src_port="80"/>
      <filter dst_ip="178.142.67.116" dst_port="1274" src_ip="56.159.178.247" src_port="80"/>
      <filter dst_ip="178.142.67.116" dst_port="1253" src_ip="56.159.178.247" src_port="80"/>
      <filter dst_ip="178.142.67.116" dst_port="1252" src_ip="56.159.178.247" src_port="80"/>
    </slice>
    <from sec="1136092080" usec="0"/>
    <to sec="1136092179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.66.18.250"/>
    </slice>
    <from sec="1136091905" usec="0"/>
    <to sec="1136091912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.139.36.253"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.142.42.253"/>
    </slice>
    <from sec="1136092284" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585231,1.70734,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.82.89.255"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136091717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.39.83.10"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.26.222.20"/>
    </slice>
    <from sec="1136091691" usec="0"/>
    <to sec="1136091695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.128.70.27"/>
    </slice>
    <from sec="1136091603" usec="0"/>
    <to sec="1136091873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.197.65.29"/>
    </slice>
    <from sec="1136091611" usec="0"/>
    <to sec="1136092499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.41.66.31"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
594[label="209.55.64.164;s;1139pkt 1139fpkt", shape=diamond, color=yellow];
1161[label="178.142.229.31;d;19pkt 19fpkt", shape=diamond, color=yellow];
2405[label="198.131.56.50;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2438[label="198.131.56.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3392[label="198.131.56.33;1pkt 1fpkt", shape=invtriangle, color=brown];
3440[label="198.131.56.50;6pkt 6fpkt", shape=invtriangle, color=brown];
4106[label="198.131.56.33;1pkt 1fpkt", shape=invhouse, color=bisque];
4128[label="198.131.56.50;6pkt 6fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.55.64.164:80, *:*}[98.1897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3051%)&lt;BR/&gt; 1863: (1.69492%)&lt;BR/&gt; 3386: (0.169492%)&lt;BR/&gt; 3384: (0.169492%)&lt;BR/&gt; 3382: (0.169492%)&gt;];
}
594--1161[label="0.0526316;1pkt 1fpkt"];
1161--2405[label="0.666667;4pkt 4fpkt"];
1161--2438[label="0.5;1pkt 1fpkt"];
1161--3392[label="1;1pkt 1fpkt"];
1161--3440[label="0.666667;4pkt 4fpkt"];
1161--4106[label="1;1pkt 1fpkt"];
1161--4128[label="0.666667;4pkt 4fpkt"];
2405--3440[label="1;6pkt 6fpkt"];
2405--4128[label="1;6pkt 6fpkt"];
3392--4106[label="1;1pkt 1fpkt"];
3440--4128[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="209.55.64.164" src_port="80"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.26.39.37"/>
    </slice>
    <from sec="1136091716" usec="0"/>
    <to sec="1136091871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.123.69.42"/>
    </slice>
    <from sec="1136092230" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.55.212.49"/>
    </slice>
    <from sec="1136092224" usec="0"/>
    <to sec="1136092355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.48.123.51"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136092490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,501,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.181.32.55"/>
    </slice>
    <from sec="1136091630" usec="0"/>
    <to sec="1136092007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.128.52.62"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.140.117.62"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="140.182.91.76"/>
    </slice>
    <from sec="1136092234" usec="0"/>
    <to sec="1136092252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.210.169.76"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749508,1.69735,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
3544[label="195.120.25.77;1pkt 1fpkt", shape=invtriangle, color=brown];
4176[label="195.120.25.77;1pkt 1fpkt", shape=invhouse, color=bisque];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.120.25.77:10060, 178.142.109.241:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10060: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3544--4176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="178.142.109.241" dst_port="80" src_ip="195.120.25.77" src_port="10060"/>
    </slice>
    <from sec="1136092443" usec="0"/>
    <to sec="1136092497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.104.161.77"/>
    </slice>
    <from sec="1136091905" usec="0"/>
    <to sec="1136092044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.18.221.77"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767339,1.58217,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
515[label="136.47.172.216;s;303pkt 303fpkt", shape=diamond, color=yellow];
895[label="166.28.216.77;s;87pkt 87fpkt", shape=diamond, color=yellow];
1280[label="218.12.17.25;d;156pkt 156fpkt", shape=diamond, color=yellow];
1495[label="136.47.174.89;s;113pkt 113fpkt", shape=diamond, color=yellow];
1501[label="57.56.246.19;d;233pkt 233fpkt", shape=diamond, color=yellow];
2543[label="166.28.216.77;105pkt 105fpkt", shape=pentagon, color=darkviolet];
2612[label="136.47.174.89;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3546[label="166.28.216.77;106pkt 106fpkt", shape=invtriangle, color=brown];
3598[label="136.47.174.89;120pkt 120fpkt", shape=invtriangle, color=brown];
4196[label="136.47.174.89;121pkt 121fpkt", shape=invhouse, color=bisque];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.172.216:*, 57.56.246.19:80}[33.9721%]&lt;BR/&gt;{*:*, 218.12.17.25:80}[28.3972%]&lt;BR/&gt;{136.47.174.89:*, *:*}[21.0801%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4481%)&lt;BR/&gt; 2265: (3.03962%)&lt;BR/&gt; 27136: (0.273224%)&lt;BR/&gt; 2457: (0.273224%)&lt;BR/&gt; 2456: (0.273224%)&gt;];
}
515--1280[label="0.192308;30pkt 30fpkt"];
515--1501[label="0.83691;195pkt 195fpkt"];
895--1280[label="0.482759;42pkt 42fpkt"];
895--2133[label="0.0804598;7pkt 7fpkt"];
895--2137[label="0.0804598;7pkt 7fpkt"];
895--2543[label="0.988506;86pkt 86fpkt"];
895--3546[label="1;87pkt 87fpkt"];
1280--1495[label="0.654867;74pkt 74fpkt"];
1280--2133[label="0.102564;16pkt 16fpkt"];
1280--2137[label="0.102564;16pkt 16fpkt"];
1280--2543[label="0.438095;46pkt 46fpkt"];
1280--2612[label="0.616667;74pkt 74fpkt"];
1280--3546[label="0.433962;46pkt 46fpkt"];
1280--3598[label="0.616667;74pkt 74fpkt"];
1280--4196[label="0.61157;74pkt 74fpkt"];
1495--2133[label="0.0353982;4pkt 4fpkt"];
1495--2137[label="0.0353982;4pkt 4fpkt"];
1495--2612[label="0.99115;112pkt 112fpkt"];
1495--3598[label="0.99115;112pkt 112fpkt"];
1495--4196[label="1;113pkt 113fpkt"];
1501--1682[label="0.0171674;4pkt 4fpkt"];
1501--2133[label="0.0128755;3pkt 3fpkt"];
1501--2137[label="0.0128755;3pkt 3fpkt"];
2543--3546[label="1;105pkt 105fpkt"];
2612--3598[label="1;120pkt 120fpkt"];
2612--4196[label="1;120pkt 120fpkt"];
3598--4196[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter src_ip="136.47.174.89"/>
      <filter dst_ip="218.12.17.25" dst_port="80"/>
      <filter dst_ip="57.56.246.19" dst_port="80" src_ip="136.47.172.216"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.11.180.91"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="143.28.163.95"/>
    </slice>
    <from sec="1136091614" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.43.169.100"/>
    </slice>
    <from sec="1136092305" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.79.100.106"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.105.232.108"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="179.189.217.121"/>
    </slice>
    <from sec="1136091645" usec="0"/>
    <to sec="1136092488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.646565,1.67002,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
2844[label="136.47.142.145;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4276[label="136.47.142.145;17pkt 17fpkt", shape=invhouse, color=bisque];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.47.142.145:*, *:80}[58.8235%]&lt;BR/&gt;{136.47.142.145:*, *:1863}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4118%)&lt;BR/&gt; 1863: (11.7647%)&lt;BR/&gt; 7001: (5.88235%)&lt;BR/&gt; 1853: (2.94118%)&lt;BR/&gt; 1844: (2.94118%)&gt;];
}
2844--4276[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.47.142.145"/>
      <filter dst_port="1863" src_ip="136.47.142.145"/>
    </slice>
    <from sec="1136091636" usec="0"/>
    <to sec="1136092482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.185.229.154"/>
    </slice>
    <from sec="1136092352" usec="0"/>
    <to sec="1136092401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.107.29.155"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.226.66.159"/>
    </slice>
    <from sec="1136091621" usec="0"/>
    <to sec="1136091662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.48.97.172"/>
    </slice>
    <from sec="1136091601" usec="0"/>
    <to sec="1136092469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.646565,1.67002,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
2999[label="209.60.69.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4335[label="209.60.69.182;1pkt 1fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.60.69.182:48902, 160.4.238.73:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48902: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2999--4335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.4.238.73" dst_port="25" src_ip="209.60.69.182" src_port="48902"/>
    </slice>
    <from sec="1136092483" usec="0"/>
    <to sec="1136092494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="143.28.145.192"/>
    </slice>
    <from sec="1136091606" usec="0"/>
    <to sec="1136092450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.89.77.202"/>
    </slice>
    <from sec="1136091600" usec="0"/>
    <to sec="1136092500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.68.81.214"/>
    </slice>
    <from sec="1136091610" usec="0"/>
    <to sec="1136092493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.165.243.223"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.132.192.233"/>
    </slice>
    <from sec="1136092237" usec="0"/>
    <to sec="1136092349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.34.88.235"/>
    </slice>
    <from sec="1136092500" usec="0"/>
    <to sec="1136092501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.184.235.237"/>
    </slice>
    <from sec="1136092102" usec="0"/>
    <to sec="1136092106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724664,1.74317,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.66.18.250"/>
    </slice>
    <from sec="1136091905" usec="0"/>
    <to sec="1136091912" usec="0"/>
  </anomaly>

</admd:annotation>
